style: align light palette to Quiet Luxury reference

- Page background now #F8F9FA (was white); tokens matched to reference:
  foreground slate-900, muted slate-50/slate-500, border slate-200,
  card pure white, tertiary slate-400, border-light slate-100
- Sidebar colors matched to mock: emerald-200/70 inactive, white/8 active
  with emerald-400 active icon, emerald-50 logo, red-300 logout, right border
- Content wrapped in max-w-[1400px] centered container (px-8 lg:px-10)

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

.planning/MILESTONES.md

@@ -1,5 +1,35 @@
 # Milestones
 
+## v2.2 Sales Loop (Phases 18–22, shipped 2026-06-20)
+
+**Phases completed:** 5 phases (18–22) · 9 plans · 27 commits · 87 files · +7.349/-842 righe
+
+**Key accomplishments:**
+
+- Cleanup & Consolidamento (Phase 18): rimossi Forecast, quote builder manuale e rotta `/admin/analytics` duplicata; tutte le statistiche admin in un'unica Dashboard (CLEAN-01..04)
+- Pipeline CRM Kanban (Phase 19): board lead 6 colonne stile Pipedrive con drag-drop persistente via `@dnd-kit`; toggle Lista/Kanban con ricerca integrata; vinto/perso come cambio-colonna manuale (PIPE-01, PIPE-02)
+- Knowledge Base Transcript (Phase 20): tabella `client_transcripts` applicata a prod via SSH; data layer Drizzle + server actions; UI incolla/elenca/cancella nel dettaglio lead (KB-01, KB-02)
+- Agente AI Preventivo (Phase 21): `generateProposalContent()` con Claude Opus 4.8 (~$0.44/preventivo); Zod schema 20+ sezioni; `AssembledProposal` snapshot JSONB; form admin con pre-fill da LeadDetail (AI-01, AI-02)
+- Deck Pubblico (Phase 22): `/preventivo/[slug]` — deck 20+ slide `h-screen` con keyboard nav + dots; accept/reject con `accepted_at` immutabile; PUB-03 email Resend deferred a backlog (PUB-01, PUB-02)
+
+**Known deferred items at close:** 1 — PUB-03 email Resend (vedi backlog v2.3)
+
+Archive: `.planning/milestones/v2.2-ROADMAP.md` · `.planning/milestones/v2.2-REQUIREMENTS.md`
+
+---
+
+## v2.1 Offer Studio + CRM (Phases 11–14, parziale — reset 2026-06-19)
+
+**Phases completed:** 3 phases (11, 12, 14) · fasi 13/15/16/17 congelate/abbandonate/ri-scopate in v2.2
+
+**Key accomplishments:**
+
+- Catalog Database-View UX (Phase 11): catalogo `services` come tabella inline-edit con tag multi-select, quick-add e ricerca istantanea; consolidamento legacy (OFFER-07..10, OFFER-13)
+- Offer Editor Tier A/B/C (Phase 12): editor offerte con matrice checkbox servizi×tier, totale live, prezzo pubblico manuale, tag 4-dimensioni, promessa di trasformazione; 55 servizi reali caricati (OFFER-11, OFFER-15..18)
+- CRM Attio-style (Phase 14): `/admin/leads` ridisegnata con inline edit + tag multi-select; FollowUpWidget in italiano; LeadForm tipizzato; SendQuoteModal senza rami irraggiungibili (CRM-08..12)
+
+---
+
 ## v2.0 Business Operations Suite (Phases 7–10, completato 2026-06-13)
 
 **Phases completed:** 4 phases (7–10)

.planning/PROJECT.md

@@ -2,21 +2,21 @@
 
 ## What This Is
 
-Suite operativa per un consulente di personal branding, live su hub.iamcavalli.net (Coolify/Hetzner): un'area admin (`/admin/*`) per gestire clienti, progetti, offerte, preventivi e CRM, e una dashboard cliente via link segreto (`/client/[token]`) dove ogni cliente vede lo stato del suo progetto. Con la v2.0 (Phase 7-10) è diventata suite completa: catalogo servizi unificato, builder offerte con fasi, preventivi pubblici e CRM con pipeline lead. La v2.1 ("Offer Studio + Proposal AI") rifà la UX di catalogo/offerte in stile database-view veloce, ristruttura il workspace progetto, ricostruisce il CRM in stile Attio e chiude il loop con un builder preventivi AI → pagina pubblica → link di pagamento.
+Suite operativa per un consulente di personal branding, live su hub.iamcavalli.net (Coolify/Hetzner): un'area admin (`/admin/*`) per gestire clienti, progetti, offerte, preventivi e CRM, e una dashboard cliente via link segreto (`/client/[token]`) dove ogni cliente vede lo stato del suo progetto. Con la v2.2 ("Sales Loop") il focus è diventato il loop commerciale completo: lead in pipeline Kanban → transcript datati delle call → agente AI (Claude Opus 4.8) genera preventivo personalizzato leggendo transcript + offerta → deck pubblico 20+ slide navigabile a `/preventivo/[slug]` → cliente accetta tier A/B/C → vinto/perso nel CRM.
 
 ## Core Value
 
 Il cliente apre il link e vede esattamente a che punto è il suo progetto, cosa deve ancora succedere e cosa ha già approvato — senza dover scrivere email per chiedere aggiornamenti.
 
-## Current Milestone: v2.1 Offer Studio + Proposal AI
+## Current Milestone: v2.3 Email & Accesso
 
-**Goal:** Trasformare catalogo/offerte in una UX rapida stile Notion/Airtable (inline edit, tag, drag-to-compose), ristrutturare i tab del workspace progetto, ricostruire il CRM in stile Attio, poi chiudere con l'AI proposal builder → pagina pubblica → link pagamento.
+**Goal:** Aggiungere uno strato email all'app — OTP gate per il portale cliente e invio link preventivo dall'admin — con un'unica integrazione Resend condivisa.
 
 **Target features:**
-- **Catalogo & Offerte (Offer Studio)** — vista database stile Notion/Airtable per servizi e offerte: inline editing, tag multi-select con creazione al volo, quick-add, filtri/ricerca istantanei, composizione offerta via drag&drop (`@dnd-kit`) con totale live, import CSV one-shot per seed
-- **Workspace progetto** — rimuovere tab "Preventivo" (UI only, `quote_items` intatto — `accepted_total` resta editabile via Payments, zero perdita funzionale verificata); nuova tab "Servizi attivi" che assorbe "Offerte" (one-shot + ricorrenti mensili, schema per tracking incassi mese-per-mese); rimuovere pagina "Forecast", statistiche revenue mensile nella Dashboard
-- **CRM custom Attio-style** — tabelle/viste con inline editing, tag, filtri; assorbe i fix minori noti (FollowUpWidget IT, LeadForm types, SendQuoteModal flow)
-- **Proposal AI** — preventivo builder AI (pesca cliente + offerta + info extra) → pagina pubblica HTML/CSS redesign → link pagamento (Stripe Payment Link su offerta); assorbe ex-Phase 11 (auto-provisioning al "Vinto": crea cliente+progetto+fasi+pagamenti) ed ex-Phase 12 (notifiche email Resend per invio link)
+- AUTH-OTP-01 — OTP gate portale cliente (whitelist email + sessione 30gg + admin UI)
+- PUB-03 — Invio link `/preventivo/[slug]` via email Resend dall'admin
+
+**Backlog v2.4+:** PROP-03 (Stripe Payment Link), PROP-04 (auto-provisioning al "Vinto"), Phase 13 (servizi ricorrenti)
 
 ## Requirements
 
@@ -43,29 +43,24 @@ Shipped in v2.0 (Phases 7–10, in produzione su hub.iamcavalli.net):
 - ✓ Preventivo pubblico `/quote/[token]`: stati draft→sent→viewed→accepted/rejected, `accepted_at` immutabile, raccolta email/note cliente — Phase 9
 - ✓ CRM pipeline lead: stati, activity log, reminder follow-up in dashboard — Phase 10
 
-### Active
+Validated in v2.1 (consegnato, in prod):
 
-**Catalogo & Offerte — Offer Studio (priorità 1):**
-- [ ] Vista database stile Notion/Airtable per servizi e offerte: inline editing, tag multi-select con creazione al volo, quick-add, filtri/ricerca istantanei
-- [ ] Composizione offerta via drag&drop servizi dal catalogo (`@dnd-kit`) con totale live
-- [ ] Import CSV one-shot per seed pacchetti esistenti (porta d'ingresso, non fonte di verità)
-- [ ] Consolidamento finale `service_catalog` + `offer_services` legacy → `services` (carry-over da v2.0)
+- ✓ Catalogo `services` come vista database (inline edit, tag multi-select, quick-add, ricerca istantanea) + consolidamento legacy — Phase 11 (OFFER-07..10, OFFER-13)
+- ✓ Offer Editor: lista filtrabile/archiviabile + 3 tier A/B/C via matrice checkbox, totale live, prezzo pubblico manuale, tag 4-dimensioni, promessa di trasformazione — Phase 12 (OFFER-11, OFFER-15..18). 55 servizi reali + tag offerta caricati.
+- ✓ CRM custom Attio-style: `/admin/leads` ridisegnata come tabella inline-edit (status, next_action, ecc.) + tag multi-select con creazione al volo; FollowUpWidget interamente in italiano; `LeadForm` tipizzato senza `useForm<any>`; `SendQuoteModal`/`assignQuoteToLead` senza rami di codice irraggiungibili — Phase 14 (CRM-08, CRM-09, CRM-10, CRM-11, CRM-12)
 
-**Workspace progetto (priorità 2):**
-- [ ] Rimuovere tab "Preventivo" (solo UI — `quote_items` resta intatto, `accepted_total` già editabile via Payments)
-- [ ] Nuova tab "Servizi attivi" che assorbe "Offerte": offerte one-shot + ricorrenti mensili
-- [ ] Schema per tracking incassi mese-per-mese sulle offerte ricorrenti (UI può arrivare dopo)
-- [ ] Rimuovere pagina "Forecast"; statistiche revenue mensile nella Dashboard (UI dopo mockup utente)
+Validated in v2.2 Sales Loop (shipped 2026-06-20):
 
-**CRM custom Attio-style (priorità 3):**
-- [ ] Tabelle/viste con inline editing, tag, filtri/ricerca istantanei
-- [ ] Fix minori: FollowUpWidget in italiano, LeadForm type-relaxation, SendQuoteModal logic flow
+- ✓ Cleanup: Forecast + quote builder manuale rimossi; analytics fuse in Dashboard — Phase 18 (CLEAN-01..04)
+- ✓ Pipeline CRM Kanban 6 colonne con drag-drop; toggle Lista/Kanban; vinto/perso come cambio-colonna — Phase 19 (PIPE-01, PIPE-02)
+- ✓ Knowledge Base transcript: `client_transcripts` in prod; UI incolla/elenca nel dettaglio lead — Phase 20 (KB-01, KB-02)
+- ✓ Agente AI: Claude Opus 4.8, Zod schema 20+ sezioni, snapshot JSONB proposals, form admin — Phase 21 (AI-01, AI-02)
+- ✓ Deck pubblico `/preventivo/[slug]`: 20+ slide 100vh, keyboard nav; accept/reject `accepted_at` immutabile — Phase 22 (PUB-01, PUB-02)
 
-**Proposal AI (priorità 4, ultimo miglio):**
-- [ ] Preventivo Builder AI: genera proposta da cliente + offerta + info extra fornite dall'utente
-- [ ] Redesign pagina pubblica preventivo (HTML/CSS) con link pagamento (Stripe Payment Link su offerta)
-- [ ] Auto-provisioning al "Vinto"/accettazione: crea cliente + progetto + fasi copiate + 1-4 pagamenti (ex-Phase 11)
-- [ ] Notifiche email per invio link preventivo/proposta (ex-Phase 12, Resend)
+### Active — v2.3
+
+- [ ] AUTH-OTP-01 — Accesso cliente via OTP email: whitelist `client_emails`, gate `/client/[token]/*`, sessione 30gg, admin whitelist UI
+- [ ] PUB-03 — Invia link `/preventivo/[slug]` via email Resend dall'admin
 
 ### Out of Scope
 
@@ -73,7 +68,6 @@ Shipped in v2.0 (Phases 7–10, in produzione su hub.iamcavalli.net):
 - App mobile nativa — solo web responsive
 - Multi-utente con team — solo tu come admin per ora
 - Prezzi singoli visibili al cliente — vede solo il totale accettato
-- Email OTP per accesso cliente — design pronto ma deferito a batch successivo su richiesta utente
 - File hosting — documenti solo come URL esterni (v1 constraint, ancora valido)
 - Sezioni analitiche stile Notion (psicologia, rating, performance) — fuori v2.1, eventuale milestone futura
 - Deploy separati per modulo (architettura OMC multi-app) — non finché un modulo non cresce abbastanza da giustificarlo
@@ -82,12 +76,13 @@ Shipped in v2.0 (Phases 7–10, in produzione su hub.iamcavalli.net):
 
 - Produzione: hub.iamcavalli.net su Coolify (Hetzner), Postgres self-hosted, deploy via webhook Gitea (NON Vercel)
 - Stack: Next.js 16 App Router, Drizzle ORM, Auth.js v4 (admin), token middleware (clienti), Tailwind v4, shadcn/ui, `@dnd-kit` già in deps
-- Tutto sotto la stessa app: `/admin/*` (sessione Auth.js) + `/client/[token]/*` (token) + pagine pubbliche preventivo `/quote/[token]`
-- La sidebar admin (Phase 6) è l'hub di navigazione per le nuove sezioni (CRM, Preventivi, Offerte)
-- `project_offers` (Phase 5) già copre l'attribuzione di offerte a progetti con `start_date`+`accepted_total`+`duration_months` — base per "Servizi attivi", da rifinire non ricostruire
-- `PaymentsTab` ha già un editor `accepted_total` (stessa server action di QuoteTab) — rimozione tab "Preventivo" è zero-perdita, verificato 2026-06-13
-- Migrations sono manuali: applicare a prod via SSH+docker exec PRIMA di pushare codice che usa il nuovo schema (vedi REGOLA in HANDOFF.md storico)
-- Il flusso commerciale reale: call con lead → preventivo 3 tier (es. Signature A/B/C) in giornata → accettazione → onboarding automatico nell'hub
+- Tutto sotto la stessa app: `/admin/*` (sessione Auth.js) + `/client/[token]/*` (token) + `/preventivo/[slug]` (pubblico)
+- La sidebar admin include: Dashboard, Leads (con toggle Lista/Kanban), Offerte, Catalogo, Preventivi (con CTA globale "Genera preventivo")
+- Stack v2.2: `@anthropic-ai/sdk@0.105.0` (Claude Opus 4.8), `@dnd-kit` (Kanban), `nanoid` (slug proposals)
+- DB live: 10 migrazioni applicate a prod (0000–0010); `proposals` table con `content jsonb` snapshot; `client_transcripts` per lead
+- Migrations sono manuali: SSH tunnel → `node` script PRIMA di pushare codice schema-dipendente; `drizzle-kit generate` rotto da Phase 8
+- `ANTHROPIC_API_KEY` in Coolify — aggiunta 2026-06-20 via PHP artisan; costo ~$0.44/preventivo (Opus 4.8)
+- Il flusso commerciale reale: call con lead → transcript incollato → genera preventivo AI → deck pubblica → cliente sceglie tier → vinto/perso
 
 ## Constraints
 
@@ -106,13 +101,16 @@ Shipped in v2.0 (Phases 7–10, in produzione su hub.iamcavalli.net):
 | Preventivo: cliente vede solo il totale | Il dettaglio dei prezzi è informazione commerciale riservata | ✓ Good |
 | Suite unica sotto /admin/* invece di 3 app separate | Stesso DB, stesso deploy, auth unica — overhead di 3 app ingiustificato per singolo admin | ✓ Confermato — formalizzato come "compartimenti stagni" (2026-06-12) |
 | Catalogo servizi unificato (una tabella `services`) | Due cataloghi paralleli (service_catalog + offer_services) duplicano manutenzione prezzi | ✓ Good — tabella `services` live da Phase 7, consolidamento legacy in v2.1 |
-| Tier offerte indipendenti (A/B/C separati, stesso tag) | Più semplice di un meccanismo di ereditarietà; ogni tier configurato a sé | — Pending |
-| Prezzi pacchetti per-preventivo, non da catalogo | Permette di alzare i prezzi nel tempo senza toccare il catalogo | — Pending |
-| Al "Vinto" le fasi dell'offerta sono COPIATE nel progetto | Il progetto resta modificabile senza toccare il template offerta | — Pending (ex-Phase 11, ora in Proposal AI) |
+| Tier offerte indipendenti (A/B/C separati, stesso tag) | Più semplice di un meccanismo di ereditarietà; ogni tier configurato a sé | ✓ Good — usato in deck slide Pricing/StagesRecap/Comparison |
+| Prezzi pacchetti per-preventivo, non da catalogo | Permette di alzare i prezzi nel tempo senza toccare il catalogo | ✓ Good — `public_price` per tier, snapshot in `proposals.content` |
+| Al "Vinto" le fasi dell'offerta sono COPIATE nel progetto | Il progetto resta modificabile senza toccare il template offerta | — Pending (PROP-04, backlog v2.3) |
 | NO DB esterno/Excel, Postgres unica fonte | Lezione 2026-06-11: due fonti disallineate hanno causato il crash Phase 10 | ✓ Good |
-| Catalogo/Offerte UX = database view custom (non Notion-clone) | Notion troppo complesso per v1; serve velocità, non sezioni analitiche | — Pending |
+| Catalogo/Offerte UX = database view custom (non Notion-clone) | Notion troppo complesso per v1; serve velocità, non sezioni analitiche | ✓ Good — confermato in v2.1 |
 | Tab "Preventivo" rimossa, "Offerte" → "Servizi attivi" | Preventivo Builder è l'unico flusso; `accepted_total` già coperto da Payments | ✓ Confermato — zero perdita funzionale verificata (2026-06-13) |
-| Ordine: Offer Studio (UX dato) prima, Proposal AI (AI) dopo | L'AI è l'ultimo miglio, serve un dato pulito e veloce da gestire prima | — Pending |
+| Ordine: Offer Studio (UX dato) prima, Proposal AI (AI) dopo | L'AI è l'ultimo miglio, serve un dato pulito e veloce da gestire prima | ✓ Good — strategia validata: catalogo+offerte puliti → AI in v2.2 |
+| Output AI = JSON strutturato Zod → template fisso | Coerenza visiva garantita; zero rischio HTML rotto dall'AI | ✓ Good — 20+ sezioni Zod validate, deck sempre coerente |
+| `proposals.content` = JSONB snapshot immutabile | Prezzi e profilo consulente "bloccati" al momento della generazione | ✓ Good — invariante di audit, coerente con `accepted_at` |
+| Email Resend (PUB-03) deferred | Scope minimo funziona; link condiviso manualmente per ora | — Pending (v2.3 candidato #1) |
 
 ## Evolution
 
@@ -132,4 +130,4 @@ This document evolves at phase transitions and milestone boundaries.
 4. Update Context with current state
 
 ---
-*Last updated: 2026-06-13 — Milestone v2.1 started (Offer Studio + Proposal AI)*
+*Last updated: 2026-06-21 — v2.3 milestone started: Email & Accesso (AUTH-OTP-01 + PUB-03)*

.planning/REQUIREMENTS.md

@@ -1,115 +1,68 @@
-# Requirements — ClientHub v2.1 Offer Studio + Proposal AI
+# Requirements: ClientHub v2.3 Email & Accesso
 
-**Defined:** 2026-06-13
+**Defined:** 2026-06-21
 **Core Value:** Il cliente apre il link e vede esattamente a che punto è il suo progetto, cosa deve ancora succedere e cosa ha già approvato — senza dover scrivere email per chiedere aggiornamenti.
 
-v2.0 (Phases 7–10) ha consegnato catalogo unificato, offerte con fasi, preventivo pubblico e CRM pipeline (vedi MILESTONES.md, REQUIREMENTS.md archiviato in `.planning/milestones/v2.0-REQUIREMENTS.md`). v2.1 rifà la UX di catalogo/offerte in stile database-view, ristruttura il workspace progetto, ricostruisce il CRM in stile Attio e chiude il loop commerciale con un builder preventivi AI.
+## v2.3 Requirements
 
-## Offer Studio — Catalogo & Offerte (v1)
+### Email OTP Gate (AUTH-OTP-01)
 
-| ID | Requirement | Status |
-|----|-------------|--------|
-| OFFER-07 | L'utente vede ed edita il catalogo `services` come tabella con inline editing (click su cella → edit → invio salva) | Complete |
-| OFFER-08 | L'utente assegna tag multi-select a servizi/offerte, creando nuovi tag al volo senza uscire dalla tabella | Complete |
-| OFFER-09 | L'utente aggiunge un nuovo servizio/offerta tramite riga vuota in fondo alla tabella (nome + invio) | Complete |
-| OFFER-10 | L'utente filtra/cerca servizi e offerte istantaneamente (ricerca client-side, nessun reload) | Complete |
-| OFFER-11 | L'utente compone un'offerta trascinando servizi dal catalogo (`@dnd-kit`), con totale live aggiornato durante il drag | Pending |
-| OFFER-12 | L'utente importa un CSV one-shot per popolare servizi/offerte esistenti (solo seed iniziale, non sync continuo) | Pending |
-| OFFER-13 | I dati legacy di `service_catalog` e `offer_services` sono consolidati in `services` senza perdita (migration additiva) | Complete |
+Portale cliente blindato da email OTP. Nuovo `client_emails` table (whitelist) + `otp_codes` table (codice, email, expires_at, consumed). Resend come provider email. Sessione 30gg con cookie dopo verifica.
 
-## Workspace Progetto — Servizi Attivi (v1)
+- [ ] **OTP-01**: Admin può aggiungere e rimuovere email dalla whitelist di ogni cliente nell'admin UI
+- [ ] **OTP-02**: Cliente senza sessione OTP vede una schermata "inserisci email" invece della dashboard
+- [ ] **OTP-03**: Sistema invia OTP via Resend solo se l'email inserita è nella whitelist di quel cliente
+- [ ] **OTP-04**: Cliente inserisce il codice OTP ricevuto e ottiene sessione autenticata (cookie 30 giorni)
+- [ ] **OTP-05**: Codici OTP scadono dopo 15 minuti dall'invio
+- [ ] **OTP-06**: Endpoint OTP è rate-limited per prevenire brute force
+- [ ] **OTP-07**: Messaggi di errore OTP non rivelano se l'email è in whitelist o no (no enumeration)
 
-| ID | Requirement | Status |
-|----|-------------|--------|
-| PROJ-06 | La tab "Preventivo" è rimossa dal workspace progetto (solo UI — `quote_items` resta intatta, `accepted_total` resta editabile via tab Pagamenti) | Pending |
-| PROJ-07 | La tab "Offerte" diventa "Servizi attivi": mostra tutte le offerte assegnate al progetto (`project_offers`) | Pending |
-| PROJ-08 | L'utente marca ogni "servizio attivo" come one-shot o ricorrente mensile | Pending |
-| PROJ-09 | Per i servizi ricorrenti, l'utente registra in quali mesi è stata incassata la fattura (schema nuovo, additivo — UI può essere minimale) | Pending |
-| PROJ-10 | La pagina "Forecast" e la relativa voce di sidebar sono rimosse | Pending |
+### Invio Link Preventivo via Email (PUB-03)
 
-## CRM Custom Attio-style (v1)
+Admin invia link deck pubblico al lead direttamente dall'admin UI. Usa stessa infrastruttura Resend del OTP gate.
 
-| ID | Requirement | Status |
-|----|-------------|--------|
-| CRM-08 | La tabella lead (`/admin/leads`) supporta inline editing dei campi principali (status, next_action, ecc.) senza apertura modale | Pending |
-| CRM-09 | L'utente assegna tag multi-select ai lead, creando nuovi tag al volo | Pending |
-| CRM-10 | Il `FollowUpWidget` è in italiano, coerente col resto dell'app | Pending |
-| CRM-11 | Il form lead (`LeadForm`) valida i campi senza workaround di type-relaxation su react-hook-form | Pending |
-| CRM-12 | Il flusso `SendQuoteModal` (preventivo esistente vs nuovo) non contiene rami di codice irraggiungibili | Pending |
+- [ ] **SEND-01**: Admin può inviare link `/preventivo/[slug]` via email al lead con un'azione dall'admin UI
+- [ ] **SEND-02**: Email inviata via Resend include link deck + nome cliente, template minimale in italiano
 
-## Dashboard — Revenue Stats (v1, bloccato su mockup utente)
+## v2.4+ Backlog
 
-| ID | Requirement | Status |
-|----|-------------|--------|
-| DASH-11 | La Dashboard admin mostra le statistiche di revenue mensile (ex `/admin/forecast`, calcolate da `project_offers`) | Blocked — attesa mockup dashboard utente |
+### Conversione Commerciale
 
-## Proposal AI (v1)
+- **PROP-03**: Stripe Payment Link su deck pubblico `/preventivo/[slug]`
+- **PROP-04**: Auto-provisioning cliente/progetto/fasi al "Vinto" nel CRM
 
-| ID | Requirement | Status |
-|----|-------------|--------|
-| PROP-01 | L'admin avvia un builder AI che genera una proposta a partire da cliente + offerta(e) selezionata(e) + note extra fornite manualmente | Pending |
-| PROP-02 | La pagina pubblica `/quote/[token]` è ridisegnata (HTML/CSS) per presentare la proposta generata | Pending |
-| PROP-03 | Ogni offerta/preventivo ha un campo "link di pagamento" (Stripe Payment Link) mostrato come CTA nella pagina pubblica | Pending |
-| PROP-04 | All'accettazione del preventivo, il sistema crea automaticamente cliente + progetto, copia le fasi dall'offerta e configura 1-4 pagamenti (ex-Phase 11 WIN-01..06) | Pending |
-| PROP-05 | Il sistema invia via email (Resend) il link della proposta pubblica al lead (ex-Phase 12) | Pending |
+### Post-Vendita
 
-## v2 Requirements (Deferred)
-
-### Catalogo Avanzato
-
-- **OFFER-14**: Sezioni analitiche stile Notion per le offerte (psicologia, rating, performance)
-
-### Accesso Cliente
-
-- **AUTH-OTP-01**: Accesso dashboard cliente via OTP email (design pronto, vedi memoria `project_clienthub_otp_access`)
-
-### Architettura
-
-- **ARCH-01**: Split di un modulo "compartimento stagno" in deploy separato (solo se il modulo cresce abbastanza da giustificarlo)
+- **Phase 13**: Gestione servizi attivi/ricorrenti post-vendita nel portale cliente (congelata da v2.1)
 
 ## Out of Scope
 
 | Feature | Reason |
 |---------|--------|
-| Fatturazione e invio fatture | Solo stato pagamenti, gestione contabile fuori |
-| App mobile nativa | Solo web responsive |
-| Multi-utente con team | Solo admin singolo per ora |
-| Prezzi singoli visibili al cliente | Vede solo il totale accettato (vincolo LOCKED) |
-| File hosting | Documenti solo come URL esterni (vincolo v1, ancora valido) |
-| Database esterno o Excel come fonte dati | Postgres unica fonte di verità — il problema è la UX, non il dato |
-| Notion-clone completo (sezioni psicologia/rating/performance) | Troppo complesso per v1, vedi v2 Requirements |
-| Deploy separati per modulo (architettura OMC multi-app) | Non finché un modulo non cresce abbastanza da giustificarlo |
+| Self-registration cliente | Solo whitelist admin-gestita — nessun accesso senza approvazione esplicita |
+| Magic link senza OTP | OTP è più sicuro e già deciso come design; magic link = scope creep |
+| Email marketing / newsletter | Non pertinente al portale |
+| Multi-admin | Ancora single admin per ora |
 
 ## Traceability
 
-Popolata dal roadmapper durante la creazione della roadmap.
-
 | Requirement | Phase | Status |
 |-------------|-------|--------|
-| OFFER-07 | Phase 11 | Complete |
-| OFFER-08 | Phase 11 | Complete |
-| OFFER-09 | Phase 11 | Complete |
-| OFFER-10 | Phase 11 | Complete |
-| OFFER-13 | Phase 11 | Complete |
-| OFFER-11 | Phase 12 | Pending |
-| OFFER-12 | Phase 12 | Pending |
-| PROJ-06 | Phase 13 | Pending |
-| PROJ-07 | Phase 13 | Pending |
-| PROJ-08 | Phase 13 | Pending |
-| PROJ-09 | Phase 13 | Pending |
-| PROJ-10 | Phase 13 | Pending |
-| CRM-08 | Phase 14 | Pending |
-| CRM-09 | Phase 14 | Pending |
-| CRM-10 | Phase 14 | Pending |
-| CRM-11 | Phase 14 | Pending |
-| CRM-12 | Phase 14 | Pending |
-| DASH-11 | Phase 15 | Blocked |
-| PROP-03 | Phase 16 | Pending |
-| PROP-04 | Phase 16 | Pending |
-| PROP-01 | Phase 17 | Pending |
-| PROP-02 | Phase 17 | Pending |
-| PROP-05 | Phase 17 | Pending |
+| OTP-01 | Phase 24 | Pending |
+| OTP-02 | Phase 25 | Pending |
+| OTP-03 | Phase 25 | Pending |
+| OTP-04 | Phase 25 | Pending |
+| OTP-05 | Phase 25 | Pending |
+| OTP-06 | Phase 25 | Pending |
+| OTP-07 | Phase 25 | Pending |
+| SEND-01 | Phase 23 | Pending |
+| SEND-02 | Phase 23 | Pending |
+
+**Coverage:**
+- v2.3 requirements: 9 total
+- Mapped to phases: 9
+- Unmapped: 0 ✓
 
 ---
-*Requirements defined: 2026-06-13*
-*Last updated: 2026-06-13 after milestone v2.1 kickoff*
+*Requirements defined: 2026-06-21*
+*Last updated: 2026-06-21 — traceability filled after roadmap creation*

.planning/ROADMAP.md

@@ -1 +1,146 @@
-PLACEHOLDER
+# Roadmap: ClientHub
+
+## Milestones
+
+- ✅ **v1.0 Client Portal & Offer System** — Phases 1–6 (shipped 2026-06-10) — [archive](milestones/v1.0-ROADMAP.md)
+- ✅ **v2.0 Business Operations Suite** — Phases 7–10 (shipped 2026-06-13) — [archive](milestones/v2.0-ROADMAP.md)
+- ✅ **v2.1 Offer Studio + CRM** — Phases 11–14 parziale (chiuso 2026-06-19, reset → v2.2)
+- ✅ **v2.2 Sales Loop** — Phases 18–22 (shipped 2026-06-20) — [archive](milestones/v2.2-ROADMAP.md)
+- 🔨 **v2.3 Email & Accesso** — Phases 23–25 (in corso)
+
+## Phases
+
+<details>
+<summary>✅ v1.0 + v2.0 + v2.1 (Phases 1–17) — SHIPPED / CHIUSE</summary>
+
+Vedi archivi:
+- `milestones/v1.0-ROADMAP.md` — Phases 1–6
+- `milestones/v2.0-ROADMAP.md` — Phases 7–10
+- Phases 11, 12, 14 — Offer Studio + CRM Attio (shipped in prod)
+- Phases 13, 15, 16, 17 — congelate/abbandonate/ri-scopate in v2.2
+
+</details>
+
+<details>
+<summary>✅ v2.2 Sales Loop (Phases 18–22) — SHIPPED 2026-06-20</summary>
+
+- [x] Phase 18: Cleanup & Consolidamento (3/3 plans) — completed 2026-06-19
+- [x] Phase 19: Pipeline CRM Kanban (1/1 plan) — completed 2026-06-19
+- [x] Phase 20: Knowledge Base Cliente (3/3 plans) — completed 2026-06-20
+- [x] Phase 21: Agente AI — generazione preventivo (1/1 plan) — completed 2026-06-20
+- [x] Phase 22: Pagina pubblica preventivo (1/1 plan, PUB-03 deferred) — completed 2026-06-20
+
+Archivio completo: [milestones/v2.2-ROADMAP.md](milestones/v2.2-ROADMAP.md)
+
+</details>
+
+### 🔨 v2.3 — Email & Accesso (Phases 23–25)
+
+- [ ] **Phase 23: Resend Setup + Invio Preventivo** — Integrazione Resend e invio link deck dall'admin
+- [ ] **Phase 24: Schema + Whitelist Admin** — Tabelle `client_emails` e `otp_codes`, admin UI gestione whitelist
+- [ ] **Phase 25: OTP Gate + Sessione** — Gate OTP completo, sessione 30gg, rate limiting, no enumeration
+
+## Phase Details
+
+### Phase 23: Resend Setup + Invio Preventivo
+**Goal**: Admin può inviare il link `/preventivo/[slug]` via email con un click dall'admin UI
+**Depends on**: Nothing — primo uso di Resend, nessuna dipendenza DB
+**Requirements**: SEND-01, SEND-02
+**Success Criteria** (what must be TRUE):
+  1. Admin fa click su "Invia preventivo" nel dettaglio lead/preventivo e l'email parte senza uscire dall'app
+  2. Il destinatario riceve un'email in italiano con nome cliente e link cliccabile al deck pubblico
+  3. L'invio usa Resend con le variabili d'ambiente configurate su Coolify (`RESEND_API_KEY`, `RESEND_FROM`)
+  4. In caso di errore Resend, l'admin vede un messaggio di errore chiaro nell'UI (non un crash silenzioso)
+**Plans**: TBD
+**UI hint**: yes
+
+### Phase 24: Schema + Whitelist Admin
+**Goal**: Admin può gestire la whitelist email di ogni cliente, con le tabelle DB pronte per l'OTP gate
+**Depends on**: Phase 23 (Resend SDK già installato e variabili d'ambiente configurate)
+**Requirements**: OTP-01
+**Success Criteria** (what must be TRUE):
+  1. Admin può aggiungere una o più email alla whitelist di un cliente dalla pagina dettaglio cliente
+  2. Admin può rimuovere un'email dalla whitelist di un cliente
+  3. Le tabelle `client_emails` e `otp_codes` esistono in produzione (migration additive applicata via SSH prima del codice)
+  4. La migration non tocca nessuna delle tabelle protette (`clients`, `projects`, `payments`, `phases`)
+**Plans**: TBD
+**UI hint**: yes
+
+### Phase 25: OTP Gate + Sessione
+**Goal**: Il portale `/client/[token]/*` richiede verifica OTP email prima di mostrare la dashboard
+**Depends on**: Phase 24 (tabelle `client_emails` e `otp_codes` in prod)
+**Requirements**: OTP-02, OTP-03, OTP-04, OTP-05, OTP-06, OTP-07
+**Success Criteria** (what must be TRUE):
+  1. Cliente senza sessione OTP valida vede una schermata "inserisci la tua email" al posto della dashboard
+  2. Inserita un'email in whitelist, il cliente riceve il codice OTP via Resend; inserendo il codice corretto ottiene accesso con cookie valido 30 giorni
+  3. Un'email non in whitelist non riceve OTP — il messaggio d'errore mostrato è identico a quello per email valide (no enumeration)
+  4. Un codice OTP non utilizzato entro 15 minuti viene rifiutato; il cliente deve richiederne uno nuovo
+  5. Tentativi ripetuti sugli endpoint OTP vengono bloccati dal rate limiter (no brute force)
+**Plans**: TBD
+
+## Progress
+
+| Phase | Milestone | Plans | Status | Completed |
+|-------|-----------|-------|--------|-----------|
+| 1–6. Foundation → UX Overhaul | v1.0 | 24/24 | ✅ Done | 2026-06-10 |
+| 7–10. Unified Catalog → CRM Pipeline | v2.0 | 12/12 | ✅ Done | 2026-06-13 |
+| 11. Catalog Database-View UX | v2.1 | 4/4 | ✅ Done | 2026-06-13 |
+| 12. Offer Editor Tier A/B/C | v2.1 | 5/5 | ✅ Done | 2026-06-18 |
+| 13. Workspace Servizi Attivi | v2.1 | — | ❌ Congelata | — |
+| 14. CRM Attio-style & Fix | v2.1 | 3/3 | ✅ Done | 2026-06-14 |
+| 15. Dashboard Revenue Stats | v2.1 | — | ❌ Abbandonata | — |
+| 16–17. Proposal AI originale | v2.1 | — | ❌ Ri-scopata in v2.2 | — |
+| 18. Cleanup & Consolidamento | v2.2 | 3/3 | ✅ Done | 2026-06-19 |
+| 19. Pipeline CRM Kanban | v2.2 | 1/1 | ✅ Done | 2026-06-19 |
+| 20. Knowledge Base Cliente | v2.2 | 3/3 | ✅ Done | 2026-06-20 |
+| 21. Agente AI Preventivo | v2.2 | 1/1 | ✅ Done | 2026-06-20 |
+| 22. Pagina Pubblica + Deck | v2.2 | 1/1 | ✅ Done | 2026-06-20 |
+| 23. Resend Setup + Invio Preventivo | v2.3 | 0/? | Not started | — |
+| 24. Schema + Whitelist Admin | v2.3 | 0/? | Not started | — |
+| 25. OTP Gate + Sessione | v2.3 | 0/? | Not started | — |
+
+---
+
+## Requirement Coverage (v2.3)
+
+| Requirement | Phase |
+|-------------|-------|
+| SEND-01 | Phase 23 |
+| SEND-02 | Phase 23 |
+| OTP-01 | Phase 24 |
+| OTP-02 | Phase 25 |
+| OTP-03 | Phase 25 |
+| OTP-04 | Phase 25 |
+| OTP-05 | Phase 25 |
+| OTP-06 | Phase 25 |
+| OTP-07 | Phase 25 |
+
+**Mapped: 9/9. No orphans.**
+
+---
+
+## Dependency Chain (v2.3)
+
+```
+Phase 23 (Resend config + SDK)
+    └── Phase 24 (schema DB additive: client_emails + otp_codes)
+            └── Phase 25 (OTP gate + sessione cookie 30gg)
+```
+
+Phase 23 first: Resend SDK e variabili d'ambiente sono infrastruttura condivisa con Phase 25 (email OTP).
+Phase 24 before Phase 25: le tabelle `client_emails` e `otp_codes` devono essere in prod (via SSH migration) prima del gate.
+
+---
+
+## Implementation Notes (v2.3)
+
+**Migration constraint:** `client_emails` e `otp_codes` sono nuove tabelle — migration additiva pura. SQL a mano (drizzle-kit generate rotto da Phase 8). Applicare via SSH tunnel PRIMA di pushare il codice dipendente.
+
+**OTP middleware layer:** Il token middleware esistente (proxy.ts → `/api/internal/validate-token`) rimane invariato. Il gate OTP è uno strato aggiuntivo dopo la validazione del token, non un suo rimpiazzo.
+
+**Resend shared infra:** La stessa istanza Resend client e le stesse variabili d'ambiente (`RESEND_API_KEY`, `RESEND_FROM`) servono sia Phase 23 (email preventivo) sia Phase 25 (email OTP). Configurare una volta in Phase 23, riusare in Phase 25.
+
+**Security invariants (Phase 25):** Rate limiting su entrambi gli endpoint OTP; risposta identica per email in whitelist e non; OTP 6 cifre, scade 15 minuti, monouso (`consumed_at` impostato al primo uso); cookie HttpOnly, SameSite=Lax, MaxAge 30 giorni.
+
+---
+*Roadmap created: 2026-06-21 — v2.3 Email & Accesso*

.planning/STATE.md

@@ -1,43 +1,51 @@
 ---
 gsd_state_version: 1.0
-milestone: v2.1
-milestone_name: milestone
-status: verifying
-stopped_at: "11-04: ServiceTable rewritten as database-view (inline edit, tags, quick-add, active/inactive split) + CatalogSearch added — Phase 11 plans 1-4 all executed, code-complete"
-last_updated: "2026-06-13T18:31:02.274Z"
-last_activity: 2026-06-13
+milestone: v2.3
+milestone_name: Email & Accesso
+status: planning
+stopped_at: ""
+last_updated: "2026-06-22T09:00:00.000Z"
+last_activity: 2026-06-22 -- Lead→Cliente (A+B) in prod; cleanup tab progetto + offerta→fasi in corso
 progress:
-  total_phases: 11
-  completed_phases: 9
-  total_plans: 37
-  completed_plans: 34
-  percent: 92
+  total_phases: 3
+  completed_phases: 0
+  total_plans: 0
+  completed_plans: 0
+  percent: 0
 ---
 
 # Project State
 
 ## Project Reference
 
-See: .planning/PROJECT.md (updated 2026-06-13)
+See: .planning/PROJECT.md (updated 2026-06-21)
 
 **Core value:** Il cliente apre il link e vede esattamente a che punto è il suo progetto, cosa deve ancora succedere e cosa ha già approvato — senza dover scrivere email per chiedere aggiornamenti.
 
-**Current focus:** Phase 11 — catalog-database-view-ux-legacy-consolidation
+**Current focus:** Milestone **v2.3 "Email & Accesso"** (started 2026-06-21). North-star: OTP gate per il portale cliente + invio link preventivo via email — un'unica integrazione Resend condivisa. Roadmap: `.planning/ROADMAP.md` (Phases 23–25). Prossimo passo: `/gsd-plan-phase 23`.
 
 ## Current Position
 
-Phase: 11
-Plan: Not started
-Status: Phase 11 code-complete; pending live-DB migration apply before OFFER-13/end-to-end verification
-Last activity: 2026-06-13
+Phase: Pre-23 fixes & flow wiring (fuori roadmap formale)
+Plan: `.claude/plans/te-li-scrivo-tutti-lucky-hearth.md`
+Status: In esecuzione — cleanup tab progetto + collegamento offerta→fasi/task
+Last activity: 2026-06-22 — Lead→Cliente consegnato in prod
 
-Progress: [█████████▒] 92%
+### Lavoro recente (pre-fase-23, in prod)
+
+- **Tassonomie**: gestione centralizzata categorie/tag in Impostazioni (modello Notion, pool persistenti, `src/lib/taxonomy.ts`).
+- **Lead → Cliente (A+B)**: campi `clients.email/phone` + `leads.archived` (migrazione 0011 applicata a prod); `convertLeadToClient` (riusa `createClientCore`, porta i transcript, archivia il lead mantenendo "won"); tasto Converti/Convertito; lead archiviati nascosti da lista/kanban.
+- **In corso**: rimozione tab Preventivo dal progetto, riordino sidebar, tab Offerte rifatta, import offerta→fasi/task per `services.fase`.
+
+### Fasi completate (v2.2, storico)
+
+Phase 18 (cleanup), Phase 19 (Kanban CRM), Phase 20 (transcript KB), Phase 21 (AI agent), Phase 22 (deck pubblico) — consegnate e in prod 2026-06-20.
 
 ## Performance Metrics
 
 **Velocity:**
 
-- Total plans completed: 4 (v2.1)
+- Total plans completed: 7 (v2.1) + 9 (v2.2) = 16 totali
 - Average duration: —
 - Total execution time: —
 
@@ -47,6 +55,7 @@ Progress: [█████████▒] 92%
 |-------|-------|-------|----------|
 | Phase 11 P01 | 25min | 2 tasks | 6 files |
 | 11 | 4 | - | - |
+| 14 | 3 | - | - |
 
 **Recent Trend:**
 
@@ -65,7 +74,11 @@ Progress: [█████████▒] 92%
 Decisions are logged in PROJECT.md Key Decisions table.
 Recent decisions affecting current work:
 
-- v2.1 roadmap: Offer Studio (Phases 11-15) sequenced before Proposal AI (Phases 16-17) — clean/fast data UX before the AI builder
+- **[v2.3 2026-06-21] Resend come provider email unico** — PUB-03 (invio preventivo) e AUTH-OTP-01 (OTP gate) condividono la stessa integrazione Resend. Phase 23 configura SDK + env vars, Phase 25 li riusa.
+- **[v2.3 2026-06-21] OTP gate è strato aggiuntivo, non rimpiazzo del token middleware** — proxy.ts e `/api/internal/validate-token` rimangono invariati. Il gate OTP interviene dopo la validazione del token, nel rendering della route `/client/[token]/*`.
+- **[v2.3 2026-06-21] Migration Phase 24 è additiva pura** — `client_emails` e `otp_codes` sono nuove tabelle. Nessun drop/truncate. SQL a mano (drizzle-kit generate rotto). Applicare via SSH prima del codice dipendente.
+- **[RESET 2026-06-19] Milestone v2.2 "Sales Loop"** sostituisce le fasi residue v2.1. Decisioni bloccate: (1) URL preventivo = `/preventivo/[slug]` pubblico; (2) tagliare Forecast + quote builder manuale + Phase 15, fondere `/admin/analytics` nella dashboard; (3) portale post-vendita resta core, non si tocca (Phase 13 congelata); (4) agente AI = "io scelgo l'offerta, l'AI personalizza" leggendo i transcript, provider Claude. Piano: `.claude/plans/glittery-sprouting-pudding.md`
+- [SUPERSEDED dal reset] v2.1 roadmap: Offer Studio (Phases 11-15) sequenced before Proposal AI (Phases 16-17) — clean/fast data UX before the AI builder
 - Phase 11 bundles catalog database-view UX (OFFER-07..10) with legacy consolidation (OFFER-13) since the new UX should be built on a single unified `services` table, not on top of legacy `service_catalog`/`offer_services`
 - Phase 13 (Workspace — Servizi Attivi) is independent of Phases 11/12 — can execute in parallel order if useful, but numbered after for narrative flow
 - Phase 15 (Dashboard Revenue Stats / DASH-11) is isolated and BLOCKED on user-provided mockup; no other phase depends on it — can be deferred/skipped without blocking Phase 16/17
@@ -74,6 +87,8 @@ Recent decisions affecting current work:
 - [Phase 11]: Phase 11 Plan 02: onConflictDoNothing() without explicit target compiles cleanly for tags table (single unique index tags_entity_name_unique) — used as written in plan, no fallback needed — Avoids unnecessary deviation; Drizzle's no-target ON CONFLICT DO NOTHING is correct given the single unique constraint from Plan 01
 - [Phase 11]: Phase 11 Plan 03: removed the plan's prescribed value-sync useEffect (and a follow-up render-time ref-read attempt) from EditableCell — both violate this project's react-hooks lint rules (set-state-in-effect, refs-during-render / React Compiler). tempValue is now only (re)initialized in startEdit()/cancel(), and the toggle display branch reads `value` directly instead of `tempValue` — Rule 1 lint fix, no behavioral change to the 8 spec'd test behaviors
 - [Phase 11]: Phase 11 Plan 04: left `createService`/`serviceSchema` in `src/app/admin/catalog/actions.ts` as unused dead code after deleting `ServiceForm.tsx` (its only consumer) — `actions.ts` was outside this plan's `files_modified` scope and `updateService` still depends on `serviceSchema`; logged to deferred-items.md for future cleanup
+- [Phase 18-02]: fmtEur unified to number version (analytics/page.tsx variant); KPI card callers using DB string values wrapped with parseFloat() — cleaner than maintaining two named variants
+- [Phase 18-02]: /admin/analytics route deleted; YearSelector now routes to /admin?year=Y — single admin entry point for statistics (CLEAN-03)
 
 ### Pending Todos
 
@@ -83,9 +98,9 @@ None yet.
 
 ### Blockers/Concerns
 
-- **Phase 15 (DASH-11)**: Blocked pending dashboard mockup from user. Do not start until mockup provided; safe to skip in execution order without impacting Phase 16/17.
-- **Migrations**: Per CLAUDE.md, every phase touching schema (11 legacy consolidation, 13 recurring-revenue tracking, 16 payment link + provisioning) MUST have its migration applied to prod via SSH+docker exec BEFORE pushing dependent code.
-- Phase 11 Plan 1 (11-01): DB-execution steps blocked — DATABASE_URL (178.104.27.55:54321) firewalled, reachable only via SSH+docker exec on the production host (out of scope for this agent's authorization). Required before OFFER-13/D-02 are satisfied: run scripts/push-11-tags-migration.ts, scripts/migrate-services.ts, scripts/validate-services-migration.ts, scripts/migrate-tags.ts, scripts/validate-tags-migration.ts via an SSH-accessible session (see 11-01-SUMMARY.md 'Issues Encountered' for exact commands). OFFER-13 requirement NOT yet marked complete.
+- **Migrations (sempre valido)**: ogni fase con schema (Phase 24: `client_emails` + `otp_codes`) DEVE avere la migration applicata a prod via tunnel SSH (`ssh -L 54321:localhost:54321 root@178.104.27.55`, `DATABASE_URL` riscritto a `127.0.0.1:54321`) PRIMA di pushare il codice dipendente. `drizzle-kit generate` rotto → SQL a mano.
+- **Resend env vars**: `RESEND_API_KEY` e `RESEND_FROM` devono essere aggiunti a Coolify prima di testare Phase 23 in prod. Stessa procedura di `ANTHROPIC_API_KEY` (2026-06-20).
+- **Debito tecnico (non bloccante)**: tabelle legacy `service_catalog`/`offer_services`/`offer_micro_services` restano come deadweight; `createService`/`serviceSchema` dead code in `catalog/actions.ts`.
 
 ## Deferred Items
 
@@ -93,12 +108,14 @@ Items acknowledged and carried forward from previous milestone close:
 
 | Category | Item | Status | Deferred At |
 |----------|------|--------|-------------|
-| v2 | OFFER-14 — Sezioni analitiche stile Notion (psicologia/rating/performance) | Backlog | v2.1 kickoff |
-| v2 | AUTH-OTP-01 — Accesso dashboard cliente via OTP email | Design ready, deferred | v2.1 kickoff |
+| v2.4 | PROP-03 — Stripe Payment Link su deck pubblico | Backlog | v2.3 kickoff |
+| v2.4 | PROP-04 — Auto-provisioning cliente/progetto/fasi al "Vinto" | Backlog | v2.3 kickoff |
+| v2+ | Phase 13 — Servizi attivi/ricorrenti post-vendita | Congelata | v2.1 kickoff |
+| v2 | OFFER-14 — Sezioni analitiche stile Notion | Backlog | v2.1 kickoff |
 | v2 | ARCH-01 — Split modulo "compartimento stagno" in deploy separato | Backlog (only if module grows) | v2.1 kickoff |
 
 ## Session Continuity
 
-Last session: 2026-06-13T14:02:06Z
-Stopped at: 11-04: ServiceTable rewritten as database-view (inline edit, tags, quick-add, active/inactive split) + CatalogSearch added — Phase 11 plans 1-4 all executed, code-complete
-Resume file: .planning/phases/11-catalog-database-view-ux-legacy-consolidation/11-04-SUMMARY.md
+Last session: 2026-06-21T11:05:00.000Z
+Stopped at: Roadmap v2.3 created — Phases 23–25, 9/9 requirements mapped. Next: `/gsd-plan-phase 23`
+Resume file: .planning/ROADMAP.md

.planning/UI-RULES.md

@@ -0,0 +1,68 @@
+# UI Rules — ClientHub admin
+
+Derived from the live codebase (`src/app/globals.css`, design system usage across admin pages).
+These are the rules to follow for any new or modified admin page.
+
+---
+
+## Brand palette
+
+All colours must be written as **hex literals** — no Tailwind semantic tokens (`text-foreground`, `bg-muted`, etc.) in admin UI. Semantic tokens are defined in `globals.css` but mixing hex and tokens creates inconsistency.
+
+| Role              | Hex         | Usage example                           |
+|-------------------|-------------|-----------------------------------------|
+| Primary           | `#1A463C`   | Primary buttons, active states, accents |
+| Primary hover     | `#163a31`   | Hover on primary buttons                |
+| Accent            | `#DEF168`   | Brand highlights (use sparingly)        |
+| Foreground        | `#1a1a1a`   | Body text, headings                     |
+| Muted text        | `#71717a`   | Secondary text, labels, meta            |
+| Border            | `#e5e7eb`   | Card borders, table dividers, inputs    |
+| Background muted  | `#f9f9f9`   | Table header rows, card hover bg        |
+| White             | `#ffffff`   | Card / panel backgrounds                |
+| Destructive       | `#dc2626`   | Delete/archive actions, error text      |
+
+---
+
+## Typographic scale
+
+| Level              | Classes                                      |
+|--------------------|----------------------------------------------|
+| Page title (h1)    | `text-2xl font-bold text-[#1a1a1a]`         |
+| Section heading    | `text-base font-semibold text-[#1a1a1a]`    |
+| Subsection (h3)    | `text-sm font-bold text-[#71717a] uppercase tracking-wider` |
+| Body               | `text-sm text-[#1a1a1a]`                    |
+| Secondary/label    | `text-xs text-[#71717a]`                    |
+| Numeric values     | always add `tabular-nums`                   |
+
+---
+
+## Layout
+
+- **Page wrapper:** `<div className="space-y-6">` — uniform vertical rhythm, full-width.
+- **Page header:** always use `<PageHeader>` from `src/components/admin/PageHeader.tsx` — never hand-roll the title + action row.
+- **No width constraints on list pages:** do not add `max-w-*` or `mx-auto` to the page root. Width is controlled by the sidebar layout (`src/app/admin/layout.tsx`).
+- **Detail/form pages** (e.g. OfferEditorClient) may keep their own `max-w-4xl mx-auto` — this rule applies to list/overview pages only.
+- **Cards:** `rounded-lg border border-[#e5e7eb] bg-white p-4`; hover: `hover:shadow-[0_4px_12px_rgba(0,0,0,0.08)]`.
+- **Tables:** `bg-white rounded-xl border border-[#e5e7eb] overflow-hidden`; thead `bg-[#f9f9f9] border-b border-[#e5e7eb]`; row divider `border-b border-[#e5e7eb]`.
+
+---
+
+## Interaction
+
+- Clickable elements: `cursor-pointer`
+- Colour transitions: `transition-colors duration-150`
+- Focus ring: `focus:outline-none focus-visible:ring-2 focus-visible:ring-[#1A463C]/30`
+- Minimum touch target on buttons: 44 × 44 px (use `py-2 px-4` minimum or `h-10`)
+- Primary CTA: `bg-[#1A463C] text-white hover:bg-[#163a31] transition-colors`
+- Secondary/ghost CTA: `border border-[#e5e7eb] text-[#1a1a1a] hover:bg-[#f9f9f9] transition-colors`
+- Destructive action: `text-[#dc2626] hover:bg-red-50 transition-colors`
+
+---
+
+## Anti-patterns (do not do these)
+
+- **No emoji as UI icons** — use Lucide React icons instead.
+- **No mixed semantic tokens and hex** — pick hex throughout any given page/component.
+- **No per-page `max-w-*` on list pages** — layout width is the sidebar shell's responsibility.
+- **No hand-rolled page header divs** — always use `<PageHeader>` to keep title size/weight/colour uniform.
+- **No inline `style={{}}` for colours that have a Tailwind class** — reserve `style` for dynamic values only (e.g. progress bar width percentages).

.planning/milestones/v2.2-REQUIREMENTS.md

@@ -0,0 +1,73 @@
+# Requirements Archive — v2.2 Sales Loop
+
+**Archived:** 2026-06-20
+**Milestone:** v2.2 Sales Loop (Phases 18–22)
+**Outcome:** 10/11 requirements Complete · 1 deferred (PUB-03 email Resend)
+
+---
+
+## v2.2 — Sales Loop Requirements
+
+### Cleanup & Consolidamento (Phase 18 / R1)
+
+| ID | Requirement | Outcome |
+|----|-------------|---------|
+| CLEAN-01 | Pagina Forecast + voce sidebar rimossa | ✅ Complete — Phase 18-01 |
+| CLEAN-02 | Quote builder manuale rimosso | ✅ Complete — Phase 18-01 |
+| CLEAN-03 | Analytics fusa nella Dashboard, rotta duplicata eliminata | ✅ Complete — Phase 18-02 |
+| CLEAN-04 | Fasi v2.1 residue archiviate nel planning | ✅ Complete — Phase 18-03 |
+
+### Pipeline CRM Kanban (Phase 19 / R2)
+
+| ID | Requirement | Outcome |
+|----|-------------|---------|
+| PIPE-01 | Board Kanban Pipedrive-style con drag-drop tra stage | ✅ Complete — Phase 19-01 |
+| PIPE-02 | Vinto/Perso come cambio-colonna manuale | ✅ Complete — Phase 19-01 |
+
+### Knowledge Base Cliente (Phase 20 / R3)
+
+| ID | Requirement | Outcome |
+|----|-------------|---------|
+| KB-01 | Schema additivo `client_transcripts` con migration a prod | ✅ Complete — Phase 20-01/02 |
+| KB-02 | UI incolla/elenca transcript nel dettaglio lead | ✅ Complete — Phase 20-03 |
+
+### Agente AI — Generazione Preventivo (Phase 21 / R4)
+
+| ID | Requirement | Outcome |
+|----|-------------|---------|
+| AI-01 | Admin seleziona cliente+offerta; AI legge transcript+offerta → bozza | ✅ Complete — Phase 21-01 |
+| AI-02 | Admin rivede ed edita la bozza prima di pubblicare | ✅ Complete — Phase 21-01 |
+
+### Pagina Pubblica Preventivo (Phase 22 / R5)
+
+| ID | Requirement | Outcome |
+|----|-------------|---------|
+| PUB-01 | Pagina pubblica `/preventivo/[slug]` — deck 20+ slide | ✅ Complete — Phase 22-01 |
+| PUB-02 | Cliente accetta/rifiuta; esito riflesso nel DB | ✅ Complete — Phase 22-01 |
+| PUB-03 | Invio link via email Resend | ❌ Not implemented — deferred to v2.3 backlog |
+
+---
+
+## Backlog Portato Avanti
+
+| ID | Requirement | Stato |
+|----|-------------|-------|
+| PUB-03 | Email Resend invio link preventivo | Deferred → v2.3 |
+| PROP-03 | Stripe Payment Link su offerta | Backlog (post-R5 originale) |
+| PROP-04 | Auto-provisioning al "Vinto" | Backlog (post-R5 originale) |
+| AUTH-OTP-01 | Accesso cliente via OTP email | Design pronto, deferred |
+| OFFER-12 | Import CSV/Notion one-shot | Rimandato 2026-06-14 |
+
+---
+
+## Requirements Non-v2.2 (Storico)
+
+*I requirements di v1.0 e v2.0/v2.1 sono archiviati in:*
+- `.planning/milestones/v1.0-REQUIREMENTS.md`
+- `.planning/milestones/v2.0-REQUIREMENTS.md`
+
+*I requirements congelati/abbandonati di v2.1 (PROJ-06..10, DASH-11, PROP-01..05) sono documentati in `.planning/milestones/v2.2-ROADMAP.md` sezione "Milestone Summary".*
+
+---
+
+*Archived: 2026-06-20 at v2.2 milestone close*

.planning/milestones/v2.2-ROADMAP.md

@@ -0,0 +1,144 @@
+# Milestone v2.2: Sales Loop
+
+**Status:** ✅ SHIPPED 2026-06-20
+**Phases:** 18–22 (R1–R5)
+**Total Plans:** 9 plans · 27 commits · 87 files · +7.349/-842 righe
+**Timeline:** 2026-06-19 → 2026-06-20
+
+## Overview
+
+v2.2 chiude il **loop di vendita end-to-end**: dopo che l'utente ha articolato il flusso commerciale reale (piano `.claude/plans/glittery-sprouting-pudding.md`), le fasi residue v2.1 (13/15/16/17) sono state congelate/abbandonate e sostituite da 5 fasi nuove. Il flusso: lead in pipeline Kanban → transcript datati delle call → agente AI genera preventivo → deck pubblico 20+ slide → accept/reject manuale nel CRM.
+
+## Phases
+
+### Phase 18: Cleanup & Consolidamento (R1)
+
+**Goal**: Sgomberare il campo dai doppioni e dal peso morto prima di costruire il loop di vendita.
+**Mode:** ui (solo rimozioni/rotte, nessun drop di tabelle)
+**Requirements**: CLEAN-01, CLEAN-02, CLEAN-03, CLEAN-04
+**Plans**: 3 plans
+
+Plans:
+- [x] 18-01-PLAN.md — Rimozione Forecast + Quote Builder manuale (CLEAN-01, CLEAN-02)
+- [x] 18-02-PLAN.md — Fusione analytics nella Dashboard, eliminazione rotta /admin/analytics (CLEAN-03)
+- [x] 18-03-PLAN.md — Verifica CLEAN-04 planning docs + build check + checkpoint visuale
+
+**Status**: ✅ Complete (2026-06-19)
+
+**What was built:**
+- Rimossa pagina `/admin/forecast` + voce sidebar
+- Rimosso quote builder manuale `/admin/quotes/new` + SendQuoteModal rami irraggiungibili
+- Statistiche annuali `/admin/analytics` fuse nella Dashboard `/admin` (CLEAN-03); rotta duplicata eliminata
+- Fasi v2.1 residue (13/15/16/17) marcate cancellate/congelate nel planning
+
+---
+
+### Phase 19: Pipeline CRM Kanban (R2)
+
+**Goal**: I lead si gestiscono in una board Kanban stile Pipedrive con drag-drop tra gli stage.
+**Mode:** ui
+**Depends on**: Phase 14 (CRM lead esistente). Riusa `@dnd-kit`.
+**Requirements**: PIPE-01, PIPE-02
+**Plans**: 1 plan
+
+Plans:
+- [x] 19-01-PLAN.md — LeadsKanbanBoard + LeadsViewToggle + page wiring (PIPE-01, PIPE-02)
+
+**Status**: ✅ Complete (2026-06-19)
+
+**What was built:**
+- Board Kanban 6 colonne (contacted → qualified → proposal_sent → negotiating → won/lost) con drag-drop persistente
+- Toggle Lista/Kanban con ricerca integrata
+- Spostare un lead su "Vinto"/"Perso" aggiorna `leads.status` → registra l'esito manuale
+
+---
+
+### Phase 20: Knowledge Base Cliente (R3)
+
+**Goal**: Memorizzare i transcript datati delle call e mostrarli nel profilo lead.
+**Mode:** schema + ui
+**Depends on**: Phase 14 (lead). Migration a prod via SSH.
+**Requirements**: KB-01, KB-02
+**Plans**: 3 plans
+
+Plans:
+- [x] 20-01-PLAN.md — Migration SQL `0009_client_transcripts` (BLOCKING prod checkpoint)
+- [x] 20-02-PLAN.md — Schema Drizzle `clientTranscripts` + `getTranscripts`/`addTranscript`/`deleteTranscript`
+- [x] 20-03-PLAN.md — `TranscriptModal` + sezione "Transcript Call" in `LeadDetail` + wiring `page.tsx`
+
+**Status**: ✅ Complete (2026-06-20)
+
+**What was built:**
+- Tabella `client_transcripts` (lead_id, client_id, content, call_date, title, created_at) applicata a prod via SSH tunnel
+- Data layer completo con Drizzle ORM + server actions
+- UI: sezione "Transcript Call" nel dettaglio lead con modal per incollare, lista espandibile/collassabile, elimina
+
+---
+
+### Phase 21: Agente AI — Generazione Preventivo (R4)
+
+**Goal**: Admin seleziona cliente+offerta; AI legge transcript+offerta → genera bozza preventivo.
+**Mode:** ai + ui
+**Depends on**: Phase 20 (transcript) + Phase 11/12 (offerte)
+**Requirements**: AI-01, AI-02
+**Plans**: 1 plan (21+22 eseguiti insieme per coerenza architetturale)
+
+Plans:
+- [x] 21-01-PLAN.md — Agente AI + form builder admin + migration 0010 proposals
+
+**Status**: ✅ Complete (2026-06-20)
+
+**What was built:**
+- `@anthropic-ai/sdk@0.105.0` + `ANTHROPIC_API_KEY` in Coolify
+- `src/lib/proposal/schema.ts` — Zod schema `ProposalContent` (20+ sezioni strutturate)
+- `src/lib/proposal/agent.ts` — `generateProposalContent()` → Claude Opus 4.8, JSON validato Zod
+- `src/lib/proposal/assemble.ts` — `assembleProposal()`: fonde AI + offerta DB + profilo consulente
+- `src/lib/proposal/profile.ts` — `CONSULTANT_PROFILE` (bio, fatti, testimonianze, legal, nextSteps)
+- `proposals` table in DB: id, slug, lead_id, client_id, offer_macro_id, content jsonb, state, accepted_at
+- Admin pages: lista preventivi, form genera (con pre-fill `?lead_id=X`), review bozza, pubblica/elimina
+
+---
+
+### Phase 22: Pagina Pubblica Preventivo + Email (R5)
+
+**Goal**: Pubblicare la proposta come deck pubblico `/preventivo/[slug]` con accept/reject.
+**Mode:** ui
+**Depends on**: Phase 21 (proposals table + content)
+**Requirements**: PUB-01, PUB-02 ✅ · PUB-03 ❌ deferred
+**Plans**: 1 plan
+
+Plans:
+- [x] 22-01-PLAN.md — ProposalDeck + public page + accept/reject actions
+
+**Status**: ✅ Complete (2026-06-20) · PUB-03 deferred
+
+**What was built:**
+- `src/app/preventivo/[slug]/page.tsx` — server component pubblico con gestione stati
+- `src/app/preventivo/[slug]/actions.ts` — `acceptProposal` + `rejectProposal` con `accepted_at` immutabile
+- `ProposalDeck.tsx` — deck client component: `h-screen overflow-hidden`, keyboard nav, dots
+- 20 componenti slide: Cover, Vision, Index, ChapterDivider ×5, Strategist, Facts, Testimonials, ProblemNode ×N, SynthesisDiagram, SolutionNode ×N, SolutionSynthesis, Scope, Deliverables, Timeline, Pricing, StagesRecap, ComparisonMatrix, NextSteps, Accept, Closing
+- **PUB-03 (email Resend) NOT implemented** — link va condiviso manualmente; deferred a v2.3 backlog
+
+---
+
+## Milestone Summary
+
+**Key Decisions:**
+- Sales Loop come north-star v2.2: abbandonato workspace post-vendita (Phase 13), revenue stats (Phase 15), Proposal AI v2.1 (16/17) — riscopate come 21+22 con transcript
+- AI model: `claude-opus-4-8` per qualità copywriting strategico (~$0.44/preventivo)
+- Output AI: JSON strutturato validato Zod → template fisso → coerenza visiva garantita
+- `proposals.content` come JSONB snapshot (non riferimento a entità live) → immutabile
+- Email Resend (PUB-03) deferred: scope minimo funziona, priorità al loop core
+
+**Known Gaps at Close:**
+- PUB-03: invio email Resend non implementato (1 item, vedi backlog v2.3)
+- `profile.ts`: testimonianze placeholder, da aggiornare con dati reali
+
+**Technical Debt:**
+- Tabelle legacy `service_catalog`/`offer_services`/`offer_micro_services` ancora presenti (deadweight, cleanup futuro)
+- `createService`/`serviceSchema` dead code in `catalog/actions.ts`
+- `drizzle-kit generate` rotto da Phase 8 (meta snapshots out of sync) — SQL scritto a mano
+
+---
+
+*Per lo stato corrente del progetto, vedi `.planning/ROADMAP.md`*

.planning/phases/12-offer-composition-drag-drop-csv-import/12-01-PLAN.md

@@ -0,0 +1,401 @@
+---
+phase: 12
+plan: 01
+type: execute
+wave: 1
+depends_on: []
+files_modified:
+  - src/db/schema.ts
+  - src/db/migrations/0008_offer_tier_schema.sql
+  - src/db/migrations/meta/_journal.json
+  - scripts/push-12-offer-tier-schema.ts
+autonomous: true
+requirements: [OFFER-11, OFFER-15, OFFER-16, OFFER-17, OFFER-18]
+
+must_haves:
+  truths:
+    - "The Drizzle schema exposes tier_letter and public_price on offer_micros, and category, ticket, is_archived + 5 transformation-promise fields on offer_macros"
+    - "A new offer_tier_services junction table exists in the schema, referencing offer_micros and services (NOT the legacy offer_services)"
+    - "A hand-written, idempotent, additive-only SQL migration file exists that can be applied to prod via the existing push-script convention"
+  artifacts:
+    - path: "src/db/schema.ts"
+      provides: "offer_macros additive columns (description, category, ticket, is_archived, cliente_ideale, risultato, tempo, pain, metodo), offer_micros additive columns (tier_letter, public_price), new offer_tier_services table + relations + types"
+      contains: "offer_tier_services"
+    - path: "src/db/migrations/0008_offer_tier_schema.sql"
+      provides: "Additive ALTER TABLE + CREATE TABLE statements, IF NOT EXISTS / guarded DO block, no DROP/TRUNCATE"
+      contains: "CREATE TABLE IF NOT EXISTS offer_tier_services"
+    - path: "scripts/push-12-offer-tier-schema.ts"
+      provides: "Idempotent script to apply migration 0008 to prod via DATABASE_URL (SSH+docker exec target)"
+      exports: ["push"]
+  key_links:
+    - from: "src/db/schema.ts (offer_tier_services)"
+      to: "services.id / offer_micros.id"
+      via: "foreign key references with onDelete cascade"
+      pattern: "references\\(\\(\\) => (services|offer_micros)\\.id"
+---
+
+<objective>
+Extend the Drizzle schema additively for the Phase 12 Offer Editor: add tier designation
+(`tier_letter`) and manual public pricing (`public_price`) to `offer_micros`; add archive flag,
+single-select category/ticket dimensions, and structured transformation-promise fields to
+`offer_macros`; create a new junction table `offer_tier_services` (tier ↔ unified `services`
+catalog) WITHOUT touching the legacy `offer_micro_services`/`offer_services` tables.
+Hand-write the corresponding SQL migration (0008) following the 0003-0007 convention
+(drizzle-kit generate is broken in this repo), and create the idempotent push script that
+Plan 02 will run against production via SSH+docker exec.
+
+Purpose: Lay the additive data-model foundation (D-6, OFFER-11/15/16/17/18) so the Wave 2/3
+query layer, server actions, and editor UI have real columns/tables to read and write —
+including the `category`/`ticket` single-select dimensions needed for list filtering
+(OFFER-18) and matrix pre-filtering by offer category (D-4).
+Output: Updated `src/db/schema.ts` (types + relations), `src/db/migrations/0008_offer_tier_schema.sql`,
+updated `_journal.json`, and `scripts/push-12-offer-tier-schema.ts`.
+</objective>
+
+<execution_context>
+@$HOME/.claude/get-shit-done/workflows/execute-plan.md
+@$HOME/.claude/get-shit-done/templates/summary.md
+</execution_context>
+
+<context>
+@.planning/PROJECT.md
+@.planning/ROADMAP.md
+@.planning/STATE.md
+@.planning/phases/12-offer-composition-drag-drop-csv-import/12-CONTEXT.md
+@.planning/phases/12-offer-composition-drag-drop-csv-import/12-RESEARCH.md
+@src/db/schema.ts
+@src/db/migrations/0006_add_tags_table.sql
+@src/db/migrations/0007_add_services_fase.sql
+@src/db/migrations/meta/_journal.json
+@scripts/push-11b-fase-column.ts
+</context>
+
+<interfaces>
+<!-- Current relevant schema slices the executor will extend. Drizzle import style:
+     pgTable / text / integer / numeric / timestamp / boolean / primaryKey / uniqueIndex / index
+     are already imported at the top of src/db/schema.ts (lines 1-13). Reuse, do not re-import. -->
+
+From src/db/schema.ts (offer_macros, current — lines 262-271):
+```typescript
+export const offer_macros = pgTable("offer_macros", {
+  id: text("id").primaryKey().$defaultFn(() => nanoid()),
+  internal_name: text("internal_name").notNull(),
+  public_name: text("public_name").notNull(),
+  transformation_promise: text("transformation_promise"),
+  sort_order: integer("sort_order").notNull().default(0),
+  created_at: timestamp("created_at", { withTimezone: true }).notNull().defaultNow(),
+});
+```
+
+From src/db/schema.ts (offer_micros, current — lines 274-286):
+```typescript
+export const offer_micros = pgTable("offer_micros", {
+  id: text("id").primaryKey().$defaultFn(() => nanoid()),
+  macro_id: text("macro_id").notNull().references(() => offer_macros.id, { onDelete: "cascade" }),
+  internal_name: text("internal_name").notNull(),
+  public_name: text("public_name").notNull(),
+  transformation_promise: text("transformation_promise"),
+  duration_months: integer("duration_months").notNull().default(1),
+  sort_order: integer("sort_order").notNull().default(0),
+});
+```
+
+From src/db/schema.ts (services, Phase 11 unified catalog — lines 212-225):
+```typescript
+export const services = pgTable("services", {
+  id: text("id").primaryKey().$defaultFn(() => nanoid()),
+  name: text("name").notNull(),
+  description: text("description"),
+  unit_price: numeric("unit_price", { precision: 10, scale: 2 }).notNull(),
+  category: text("category"),
+  fase: text("fase"),
+  active: boolean("active").notNull().default(true),
+  migrated_from: text("migrated_from"),
+  migrated_id: text("migrated_id"),
+  created_at: timestamp("created_at", { withTimezone: true }).notNull().defaultNow(),
+});
+```
+
+From src/db/schema.ts (tags, polymorphic — lines 119-140, NO schema change needed for tag
+dimensions — Phase 12 reuses this table with new entity_type string values for the two
+MULTI-select dimensions only: "offer_macros.tipo" | "offer_macros.obiettivo". The two
+SINGLE-select dimensions, Categoria and Ticket, become plain columns on `offer_macros`
+in this plan — see Task 1 step 1):
+```typescript
+export const tags = pgTable("tags", {
+  id: text("id").primaryKey().$defaultFn(() => nanoid()),
+  entity_type: text("entity_type").notNull(),
+  entity_id: text("entity_id").notNull(),
+  name: text("name").notNull(),
+  created_at: timestamp("created_at", { withTimezone: true }).notNull().defaultNow(),
+}, (t) => ({
+  entityTagUnique: uniqueIndex("tags_entity_name_unique").on(t.entity_type, t.entity_id, t.name),
+  entityIdx: index("tags_entity_idx").on(t.entity_type, t.entity_id),
+}));
+```
+
+Existing offer_micro_services junction (legacy — DO NOT MODIFY, lines 300-313):
+```typescript
+export const offer_micro_services = pgTable("offer_micro_services", {
+  micro_id: text("micro_id").notNull().references(() => offer_micros.id, { onDelete: "cascade" }),
+  service_id: text("service_id").notNull().references(() => offer_services.id, { onDelete: "cascade" }),
+}, (t) => ({ pk: primaryKey({ columns: [t.micro_id, t.service_id] }) }));
+```
+</interfaces>
+
+<tasks>
+
+<task type="auto">
+  <name>Task 1: Extend offer_macros and offer_micros, add offer_tier_services junction in schema.ts</name>
+  <files>src/db/schema.ts</files>
+  <read_first>
+    - src/db/schema.ts (full file — read once; note existing imports, offer_macros lines
+      262-271, offer_micros lines 274-286, offer_micro_services lines 300-313 for the
+      "do not touch" pattern, services lines 212-225, relations section ~545-578, type
+      exports section ~633-646)
+    - .planning/phases/12-offer-composition-drag-drop-csv-import/12-CONTEXT.md (D-1..D-6 — locked decisions)
+    - .planning/phases/12-offer-composition-drag-drop-csv-import/12-RESEARCH.md (Pattern 1: Additive Schema, section "Example migrations")
+  </read_first>
+  <action>
+    Make the following ADDITIVE-ONLY changes to `src/db/schema.ts`. Do not remove, rename, or
+    alter any existing column on `offer_macros`, `offer_micros`, `offer_micro_services`,
+    `offer_services`, `clients`, `projects`, `payments`, or `phases` (Data Safety LOCKED).
+
+    1. **Extend `offer_macros`** (after `transformation_promise`, before `sort_order` —
+       order within the object is cosmetic but keep additive fields grouped together for
+       readability) with:
+       - `description: text("description")` — short description shown on offer cards (D-1 UI)
+       - `category: text("category")` — single-select offer category (Entry Offer / Signature
+         Offer / Retainer Offer), OFFER-15 "Categoria" dimension + OFFER-18 list filter. Same
+         Notion-style single-select pool pattern as `services.category`/`services.fase`
+         (editable via `OptionSelect` + `renameServiceOption`-equivalent in Plan 03, scoped by
+         a distinct `entity_type` in the `tags` pool table — e.g. `"offer_macros.categoria"` —
+         so the option pool is independent of the catalog's `services.category` pool, even
+         though admins are expected to use matching label text per D-4).
+       - `ticket: text("ticket")` — single-select "Ticket" dimension (Low/Mid/High Ticket),
+         OFFER-15. Same pattern as `category` above, pool entity_type `"offer_macros.ticket"`.
+       - `is_archived: boolean("is_archived").notNull().default(false)` — OFFER-18 archive flag
+       - Five structured transformation-promise fields (OFFER-17), each nullable text,
+         additive alongside the existing legacy `transformation_promise` column (leave
+         `transformation_promise` untouched — it remains on `offer_micros` only as legacy):
+         - `cliente_ideale: text("cliente_ideale")` — "Aiuto: [Cliente Ideale]"
+         - `risultato: text("risultato")` — "A ottenere: [Risultato]"
+         - `tempo: text("tempo")` — "In: [tempo]"
+         - `pain: text("pain")` — "Senza: [Pain]"
+         - `metodo: text("metodo")` — "Grazie a: [Metodo]"
+
+       Add a comment block directly above `offer_macros` documenting that these are Phase 12
+       additive columns (mirror the existing comment style used for `services.migrated_from`).
+
+    2. **Extend `offer_micros`** with:
+       - `tier_letter: text("tier_letter")` — nullable text, values constrained to 'A'|'B'|'C'
+         via a CHECK constraint at the SQL level (Task 2 migration), NOT enforced in Drizzle
+         (Drizzle pg-core has no native CHECK helper in this project's version — validate in
+         Zod at the server-action layer in Plan 03). Add a TS comment noting the CHECK
+         constraint lives in the migration.
+       - `public_price: numeric("public_price", { precision: 10, scale: 2 })` — nullable,
+         manual public price per tier (D-5/OFFER-16); independent of the computed services
+         total (computed at query time in Plan 03, never stored).
+
+    3. **Add new table `offer_tier_services`** (place it directly after
+       `offer_micro_services` for proximity, with a comment block explaining it is the
+       Phase 12 additive replacement junction — NOT a modification of
+       `offer_micro_services`, which stays untouched and points to the legacy
+       `offer_services`):
+       ```typescript
+       // ============ OFFER TIER SERVICES (Phase 12 — junction: offer_micros <-> services) ============
+       // Additive replacement for the legacy offer_micro_services (which points to the
+       // deprecated offer_services table). This junction connects a tier (offer_micros row
+       // with tier_letter set) to the unified services catalog (Phase 11). Do NOT modify
+       // offer_micro_services — it remains untouched for legacy data.
+       export const offer_tier_services = pgTable(
+         "offer_tier_services",
+         {
+           tier_id: text("tier_id")
+             .notNull()
+             .references(() => offer_micros.id, { onDelete: "cascade" }),
+           service_id: text("service_id")
+             .notNull()
+             .references(() => services.id, { onDelete: "cascade" }),
+           created_at: timestamp("created_at", { withTimezone: true }).notNull().defaultNow(),
+         },
+         (t) => ({
+           pk: primaryKey({ columns: [t.tier_id, t.service_id] }),
+           tierIdx: index("offer_tier_services_tier_idx").on(t.tier_id),
+         })
+       );
+       ```
+
+    4. **Add relations** for `offer_tier_services` (near `offerMicroServicesRelations`,
+       ~line 559-562):
+       ```typescript
+       export const offerTierServicesRelations = relations(offer_tier_services, ({ one }) => ({
+         tier: one(offer_micros, { fields: [offer_tier_services.tier_id], references: [offer_micros.id] }),
+         service: one(services, { fields: [offer_tier_services.service_id], references: [services.id] }),
+       }));
+       ```
+       Also extend `offerMicrosRelations` (~line 549-553) to add a `tierServices: many(offer_tier_services)`
+       entry alongside the existing `services: many(offer_micro_services)` (keep both — do not
+       remove the legacy relation).
+
+    5. **Add TypeScript types** in the type-exports section (~line 633-646), following the
+       exact `$inferSelect`/`$inferInsert` pattern used for every other table:
+       ```typescript
+       export type OfferTierService = typeof offer_tier_services.$inferSelect;
+       export type NewOfferTierService = typeof offer_tier_services.$inferInsert;
+       ```
+       `OfferMacro`/`NewOfferMacro` and `OfferMicro`/`NewOfferMicro` types already exist and
+       automatically pick up the new columns via `$inferSelect` — no changes needed to those
+       two type aliases themselves.
+  </action>
+  <verify>
+    <automated>cd /Users/simonecavalli/Vault/IAMCAVALLI && npx tsc --noEmit 2>&1 | tail -30</automated>
+  </verify>
+  <acceptance_criteria>
+    - `npx tsc --noEmit` passes with zero errors (full project)
+    - `grep -c "offer_tier_services" src/db/schema.ts` >= 4 (table def, relations, both type exports)
+    - `grep -c "tier_letter\|public_price" src/db/schema.ts` == 2 (both new offer_micros columns present exactly once)
+    - `grep -c "is_archived\|cliente_ideale\|risultato\|tempo\|pain\|metodo" src/db/schema.ts` == 6 (all 6 new offer_macros transformation/archive columns present)
+    - `grep -cE '"(category|ticket)"' src/db/schema.ts` >= 2 (new offer_macros category/ticket columns present — note `services.category` also matches "category", so this is a >= check, not ==)
+    - `git diff HEAD -- src/db/schema.ts | grep -E '^-' | grep -v '^---'` returns empty (no existing lines removed — additive diff only)
+  </acceptance_criteria>
+  <done>schema.ts compiles, exposes all new additive columns/table/types, and the legacy offer_micro_services/offer_services definitions are byte-identical to their pre-task state.</done>
+</task>
+
+<task type="auto">
+  <name>Task 2: Hand-write migration 0008 SQL + journal entry + idempotent push script</name>
+  <files>src/db/migrations/0008_offer_tier_schema.sql, src/db/migrations/meta/_journal.json, scripts/push-12-offer-tier-schema.ts</files>
+  <read_first>
+    - src/db/migrations/0007_add_services_fase.sql (simplest additive precedent: `ALTER TABLE ... ADD COLUMN IF NOT EXISTS`)
+    - src/db/migrations/0006_add_tags_table.sql (CREATE TABLE + indexes precedent, Drizzle output format with `--> statement-breakpoint`)
+    - src/db/migrations/meta/_journal.json (current entries — note it already has gaps for 0003-0005/0007; append 0008 entry following the 0006 entry's shape)
+    - scripts/push-11-tags-migration.ts (idempotent CREATE TABLE IF NOT EXISTS + indexes pattern, with the PRODUCTION DEPLOY NOTE comment header)
+    - scripts/push-11b-fase-column.ts (idempotent ADD COLUMN IF NOT EXISTS pattern, shorter form)
+  </read_first>
+  <action>
+    1. Create `src/db/migrations/0008_offer_tier_schema.sql` — hand-written, additive-only,
+       idempotent (every statement uses `IF NOT EXISTS` / `ADD COLUMN IF NOT EXISTS`), no
+       DROP/TRUNCATE/RENAME. Content:
+
+       ```sql
+       -- Phase 12: Offer Editor — additive schema for tier designations, public pricing,
+       -- archive flag, category/ticket dimensions, structured transformation promise, and
+       -- tier<->services junction. All statements additive/idempotent. No drops/truncates
+       -- (Data Safety LOCKED).
+
+       -- offer_macros: archive flag + short description + category/ticket dimensions +
+       -- structured transformation promise
+       ALTER TABLE offer_macros ADD COLUMN IF NOT EXISTS description text;
+       ALTER TABLE offer_macros ADD COLUMN IF NOT EXISTS category text;
+       ALTER TABLE offer_macros ADD COLUMN IF NOT EXISTS ticket text;
+       ALTER TABLE offer_macros ADD COLUMN IF NOT EXISTS is_archived boolean NOT NULL DEFAULT false;
+       ALTER TABLE offer_macros ADD COLUMN IF NOT EXISTS cliente_ideale text;
+       ALTER TABLE offer_macros ADD COLUMN IF NOT EXISTS risultato text;
+       ALTER TABLE offer_macros ADD COLUMN IF NOT EXISTS tempo text;
+       ALTER TABLE offer_macros ADD COLUMN IF NOT EXISTS pain text;
+       ALTER TABLE offer_macros ADD COLUMN IF NOT EXISTS metodo text;
+
+       -- offer_micros: tier designation (A/B/C) + manual public price
+       ALTER TABLE offer_micros ADD COLUMN IF NOT EXISTS tier_letter text;
+       ALTER TABLE offer_micros ADD COLUMN IF NOT EXISTS public_price numeric(10, 2);
+
+       -- CHECK constraint for tier_letter, added separately so the ADD COLUMN above stays
+       -- idempotent even if the constraint already exists (guarded via DO block).
+       DO $$
+       BEGIN
+         IF NOT EXISTS (
+           SELECT 1 FROM pg_constraint WHERE conname = 'offer_micros_tier_letter_check'
+         ) THEN
+           ALTER TABLE offer_micros
+             ADD CONSTRAINT offer_micros_tier_letter_check
+             CHECK (tier_letter IS NULL OR tier_letter IN ('A', 'B', 'C'));
+         END IF;
+       END $$;
+
+       -- New junction table: tier (offer_micros) <-> unified services catalog.
+       -- Additive replacement for legacy offer_micro_services (untouched, points to offer_services).
+       CREATE TABLE IF NOT EXISTS offer_tier_services (
+         tier_id text NOT NULL REFERENCES offer_micros(id) ON DELETE CASCADE,
+         service_id text NOT NULL REFERENCES services(id) ON DELETE CASCADE,
+         created_at timestamp with time zone DEFAULT now() NOT NULL,
+         PRIMARY KEY (tier_id, service_id)
+       );
+
+       CREATE INDEX IF NOT EXISTS offer_tier_services_tier_idx ON offer_tier_services USING btree (tier_id);
+       ```
+
+    2. Append a journal entry for `0008_offer_tier_schema` to `src/db/migrations/meta/_journal.json`,
+       following the exact shape of the existing `0006_add_tags_table` entry (idx: 8, version: "7",
+       a `when` timestamp larger than the 0006 entry's, tag: "0008_offer_tier_schema", breakpoints: true).
+       This file already has gaps (no entries for 0003-0005/0007) — do not attempt to backfill
+       those; only append the new 0008 entry to the `entries` array.
+
+    3. Create `scripts/push-12-offer-tier-schema.ts` — idempotent push script following the
+       `push-11-tags-migration.ts` / `push-11b-fase-column.ts` pattern: reads `DATABASE_URL`
+       from env, uses the `postgres` package, runs each statement from migration 0008 (the 11
+       `ALTER TABLE ... ADD COLUMN IF NOT EXISTS` statements, the DO-block CHECK constraint
+       guard, `CREATE TABLE IF NOT EXISTS offer_tier_services`, and
+       `CREATE INDEX IF NOT EXISTS offer_tier_services_tier_idx`), logs success per statement
+       group, and exits 0/1. Include the same "PRODUCTION DEPLOY NOTE" comment header as
+       `push-11-tags-migration.ts`, referencing this script and migration 0008, and stating
+       that Plan 02 (BLOCKING, SSH+docker exec) must run this before Wave 3 code (query layer
+       reading `offer_tier_services`/`tier_letter`/`public_price`/`category`/`ticket`) is
+       exercised against production data.
+
+       Catch and tolerate "already exists" / duplicate-column / duplicate-constraint errors
+       per-statement (same try/catch-per-block resilience as the precedent scripts) so the
+       script is safely re-runnable. Export an async `push()` function as the module's main
+       entry point (called at the bottom of the file, matching precedent scripts).
+  </action>
+  <verify>
+    <automated>cd /Users/simonecavalli/Vault/IAMCAVALLI && npx tsc --noEmit 2>&1 | tail -20; test -f src/db/migrations/0008_offer_tier_schema.sql && echo "MIGRATION_EXISTS"; node -e "const j=require('./src/db/migrations/meta/_journal.json'); console.log(j.entries.find(e=>e.tag==='0008_offer_tier_schema') ? 'JOURNAL_OK' : 'JOURNAL_MISSING')"</automated>
+  </verify>
+  <acceptance_criteria>
+    - `test -f src/db/migrations/0008_offer_tier_schema.sql` succeeds
+    - The migration file contains zero occurrences of `DROP`, `TRUNCATE`, or `RENAME` (case-insensitive grep returns no matches)
+    - Every `ALTER TABLE ... ADD COLUMN` statement includes `IF NOT EXISTS`: `grep -c "ADD COLUMN IF NOT EXISTS" src/db/migrations/0008_offer_tier_schema.sql` == 11
+    - `grep -c "CREATE TABLE IF NOT EXISTS offer_tier_services" src/db/migrations/0008_offer_tier_schema.sql` == 1
+    - `_journal.json` parses as valid JSON and contains an entry with `"tag": "0008_offer_tier_schema"`
+    - `npx tsc --noEmit` (full project, including the new script) passes with zero errors
+    - `scripts/push-12-offer-tier-schema.ts` contains a "PRODUCTION DEPLOY NOTE" comment referencing migration 0008 and the BLOCKING SSH+docker exec apply step
+  </acceptance_criteria>
+  <done>Migration 0008 SQL file exists, is additive/idempotent (IF NOT EXISTS guards throughout, no destructive statements), journal has a corresponding entry, and the push script typechecks and is ready for Plan 02 to execute against production.</done>
+</task>
+
+</tasks>
+
+<threat_model>
+## Trust Boundaries
+
+| Boundary | Description |
+|----------|-------------|
+| Migration script -> Production DB | `scripts/push-12-offer-tier-schema.ts` executes raw SQL via `DATABASE_URL`; the only "input" is the hardcoded migration SQL (no user input at this layer) |
+| schema.ts -> downstream query/action code (Plan 03+) | New columns/table become part of the type-safe Drizzle surface consumed by admin-only server actions |
+
+## STRIDE Threat Register
+
+| Threat ID | Category | Component | Disposition | Mitigation Plan |
+|-----------|----------|-----------|-------------|-----------------|
+| T-12-01 | Tampering | `0008_offer_tier_schema.sql` accidentally includes a destructive statement | mitigate | Acceptance criteria grep-gate explicitly rejects DROP/TRUNCATE/RENAME before this plan is considered done; CLAUDE.md Data Safety LOCKED reviewed before writing the migration |
+| T-12-02 | Tampering | `offer_micros.tier_letter` accepts arbitrary strings at the DB layer | mitigate | SQL-level CHECK constraint (`tier_letter IN ('A','B','C')` or NULL) added via guarded DO block; Zod enum validation added at the server-action layer in Plan 03 as defense-in-depth |
+| T-12-03 | Repudiation | Push script silently no-ops on errors, masking a failed migration | accept | Script logs per-statement success/failure and exits non-zero on unexpected errors (only "already exists"/duplicate errors are tolerated); operator (Plan 02) reviews script output before proceeding |
+| T-12-04 | Information Disclosure | `offer_tier_services`/new columns become queryable but must remain admin-only (`/admin/offers`) | accept | No client-facing route reads these tables in this plan; enforcement of admin-only access happens in Plan 03 (`requireAdmin`) — tracked, not this plan's scope |
+</threat_model>
+
+<verification>
+1. `npx tsc --noEmit` passes for the full project (schema.ts changes compile cleanly with all existing consumers).
+2. `src/db/migrations/0008_offer_tier_schema.sql` exists, is additive-only, and every ALTER/CREATE statement is idempotent (`IF NOT EXISTS` / guarded DO block).
+3. `scripts/push-12-offer-tier-schema.ts` typechecks and documents the BLOCKING manual prod-apply step for Plan 02.
+4. `git diff HEAD -- src/db/schema.ts` shows ONLY additions (new columns, new table, new relations, new types) — no removed or renamed lines for `offer_macros`, `offer_micros`, `offer_micro_services`, `offer_services`, `clients`, `projects`, `payments`, `phases`.
+</verification>
+
+<success_criteria>
+- `offer_macros` and `offer_micros` expose all Phase 12 additive columns in the Drizzle schema and TypeScript types.
+- `offer_tier_services` junction table is defined, related, and typed — pointing at `services` (not `offer_services`).
+- Migration 0008 + push script are ready for Plan 02's BLOCKING production-apply step.
+- No existing table/column was dropped, renamed, or altered destructively.
+</success_criteria>
+
+<output>
+After completion, create `.planning/phases/12-offer-composition-drag-drop-csv-import/12-01-SUMMARY.md`
+</output>

.planning/phases/12-offer-composition-drag-drop-csv-import/12-01-SUMMARY.md

@@ -0,0 +1,128 @@
+---
+phase: 12-offer-composition-drag-drop-csv-import
+plan: 01
+subsystem: database
+tags: [drizzle, postgres, schema, migration]
+
+# Dependency graph
+requires:
+  - phase: 11-catalog-database-view-ux
+    provides: unified `services` catalog table (category/fase single-select pattern, migrated_from audit trail)
+provides:
+  - Additive Drizzle schema columns on offer_macros (description, category, ticket, is_archived, cliente_ideale, risultato, tempo, pain, metodo)
+  - Additive Drizzle schema columns on offer_micros (tier_letter, public_price)
+  - New offer_tier_services junction table + relations + types (offer_micros <-> services)
+  - Hand-written migration 0008_offer_tier_schema.sql (additive/idempotent, CHECK constraint on tier_letter)
+  - Idempotent push script scripts/push-12-offer-tier-schema.ts for Plan 02's BLOCKING prod-apply step
+affects: [12-02-prod-migration-apply, 12-03-offer-list-editor, 12-04-tier-matrix, 12-05-offer-detail-actions]
+
+# Tech tracking
+tech-stack:
+  added: []
+  patterns:
+    - "Additive-only schema extension via hand-written SQL migration (drizzle-kit generate non-functional in this repo)"
+    - "Single-select dimension columns (category/ticket) on offer_macros, mirroring services.category/fase pattern from Phase 11"
+    - "New junction table (offer_tier_services) as additive replacement for legacy junction (offer_micro_services), pointing at unified services catalog instead of deprecated offer_services"
+    - "DB-level CHECK constraint via guarded DO block for idempotent re-runs, with Zod validation deferred to server-action layer (Plan 03)"
+
+key-files:
+  created:
+    - src/db/migrations/0008_offer_tier_schema.sql
+    - scripts/push-12-offer-tier-schema.ts
+  modified:
+    - src/db/schema.ts
+    - src/db/migrations/meta/_journal.json
+
+key-decisions:
+  - "tier_letter constrained via SQL CHECK (guarded DO block) rather than Drizzle enum, since this pg-core version has no native CHECK helper — Zod enum validation is deferred to Plan 03's server-action layer as defense-in-depth"
+  - "offer_tier_services created as a brand-new junction (not a modification of offer_micro_services) to avoid touching legacy offer_services-linked data, per D-6"
+
+patterns-established:
+  - "Phase 12 additive columns documented inline with comment blocks above offer_macros/offer_micros, following the services.migrated_from comment style from Phase 11"
+
+requirements-completed: [OFFER-11, OFFER-15, OFFER-16, OFFER-17, OFFER-18]
+
+# Metrics
+duration: 6min
+completed: 2026-06-14
+---
+
+# Phase 12 Plan 01: Offer Tier Schema Foundation Summary
+
+**Additive Drizzle schema + hand-written migration 0008 adding tier designations (A/B/C), manual public pricing, archive flag, category/ticket dimensions, structured transformation-promise fields, and a new offer_tier_services junction table pointing at the unified services catalog.**
+
+## Performance
+
+- **Duration:** 6 min
+- **Started:** 2026-06-14T19:13:00Z (approx)
+- **Completed:** 2026-06-14T19:19:38Z
+- **Tasks:** 2 completed
+- **Files modified:** 4
+
+## Accomplishments
+
+- Extended `offer_macros` with 9 additive columns: `description`, `category`, `ticket`, `is_archived`, and 5 structured transformation-promise fields (`cliente_ideale`, `risultato`, `tempo`, `pain`, `metodo`)
+- Extended `offer_micros` with `tier_letter` (A/B/C, CHECK-constrained at SQL level) and `public_price` (numeric)
+- Added new `offer_tier_services` junction table (tier <-> unified `services` catalog), its relations, and `OfferTierService`/`NewOfferTierService` types — without touching the legacy `offer_micro_services`/`offer_services` tables
+- Hand-wrote idempotent, additive-only migration `0008_offer_tier_schema.sql` (11 `ADD COLUMN IF NOT EXISTS` statements, guarded DO-block CHECK constraint, `CREATE TABLE IF NOT EXISTS offer_tier_services` + index), appended journal entry
+- Created `scripts/push-12-offer-tier-schema.ts` — idempotent push script with PRODUCTION DEPLOY NOTE documenting the BLOCKING manual prod-apply step required before Plan 02/Wave 3
+
+## Task Commits
+
+Each task was committed atomically:
+
+1. **Task 1: Extend offer_macros and offer_micros, add offer_tier_services junction in schema.ts** - `11d6c11` (feat)
+2. **Task 2: Hand-write migration 0008 SQL + journal entry + idempotent push script** - `89d15ee` (feat)
+
+**Plan metadata:** (this commit, follows)
+
+## Files Created/Modified
+
+- `src/db/schema.ts` - Additive columns on offer_macros/offer_micros, new offer_tier_services table + relations + types
+- `src/db/migrations/0008_offer_tier_schema.sql` - Hand-written additive/idempotent migration (ALTER TABLE ADD COLUMN IF NOT EXISTS, guarded CHECK constraint, CREATE TABLE IF NOT EXISTS, CREATE INDEX IF NOT EXISTS)
+- `src/db/migrations/meta/_journal.json` - Appended entry for `0008_offer_tier_schema` (idx 8, following 0006 entry shape)
+- `scripts/push-12-offer-tier-schema.ts` - Idempotent push script for Plan 02's BLOCKING production-apply step
+
+## Decisions Made
+
+- `tier_letter` validated via DB-level CHECK constraint (guarded DO block, idempotent) rather than a Drizzle-native enum/CHECK helper (unavailable in this pg-core version); Zod enum validation will be added at the server-action layer in Plan 03 as defense-in-depth (per plan's T-12-02 mitigation)
+- `offer_tier_services` is a brand-new additive junction table (not a modification of `offer_micro_services`), pointing at the unified `services` catalog (Phase 11) rather than the deprecated `offer_services` table, per D-6/D-3
+
+## Deviations from Plan
+
+None - plan executed exactly as written. The acceptance-criteria grep counts for `tier_letter`/`public_price`, the 6 transformation/archive columns, and the DROP/TRUNCATE/RENAME check show slightly higher raw match counts than the plan's exact numbers because explanatory comment blocks (explicitly requested by the plan, e.g. "Add a comment block directly above offer_macros documenting...") also contain those words (e.g. a comment mentions "tier_letter" when describing the CHECK constraint, and the migration's header comment says "No drops/truncates"). All actual code definitions are present exactly once, the diff to `src/db/schema.ts` is purely additive (`git diff HEAD~2 -- src/db/schema.ts | grep '^-'` returns empty), and a line-anchored grep (`grep -inE "^\s*(DROP|TRUNCATE|RENAME)\b"`) confirms zero actual destructive SQL statements in the migration.
+
+## Issues Encountered
+
+A `cd /Users/simonecavalli/Vault/IAMCAVALLI` in one intermediate Bash call caused a transient cwd drift into the main repo's worktree (sibling path with the same relative structure), which produced false "0 matches" results for one verification pass. Re-ran all verification from the correct worktree root (`/Users/simonecavalli/Vault/IAMCAVALLI/.claude/worktrees/agent-ab7d5b1ee10efadff`) with confirmed correct results before committing. No files were affected — all Edit/Write operations used relative paths inside the worktree.
+
+## User Setup Required
+
+None - no external service configuration required. Note: migration 0008 and the push script are created here only; per the plan and project memory, the actual production apply (SSH+docker exec) is Plan 02's BLOCKING step and is NOT performed in this plan.
+
+## Next Phase Readiness
+
+- `src/db/schema.ts` compiles cleanly (`npx tsc --noEmit` passes, zero errors) and exposes all Phase 12 additive columns/table/types needed by Plan 03's query layer and server actions
+- Migration 0008 + push script are ready for Plan 02 to apply to production via SSH+docker exec before Wave 3 code reads `offer_tier_services`/`tier_letter`/`public_price`/`category`/`ticket`
+- No existing table/column was dropped, renamed, or altered destructively — `clients`/`projects`/`payments`/`phases` and legacy offer tables (`offer_micro_services`, `offer_services`) remain byte-identical
+
+---
+
+*Phase: 12-offer-composition-drag-drop-csv-import*
+*Completed: 2026-06-14*
+
+## Self-Check: PASSED
+
+All created/modified files verified present on disk:
+
+- FOUND: src/db/schema.ts
+- FOUND: src/db/migrations/0008_offer_tier_schema.sql
+- FOUND: src/db/migrations/meta/_journal.json
+- FOUND: scripts/push-12-offer-tier-schema.ts
+- FOUND: .planning/phases/12-offer-composition-drag-drop-csv-import/12-01-SUMMARY.md
+
+All task commits verified present in git log:
+
+- FOUND: 11d6c11 (Task 1)
+- FOUND: 89d15ee (Task 2)
+- FOUND: bfc9932 (docs: complete plan)

.planning/phases/12-offer-composition-drag-drop-csv-import/12-02-PLAN.md

@@ -0,0 +1,142 @@
+---
+phase: 12
+plan: 02
+type: execute
+wave: 2
+depends_on: [1]
+files_modified: []
+autonomous: false
+requirements: [OFFER-11, OFFER-15, OFFER-16, OFFER-17, OFFER-18]
+
+must_haves:
+  truths:
+    - "Migration 0008 (offer_macros/offer_micros additive columns + offer_tier_services table) has been applied to the production database"
+    - "Plan 03's query layer and Plan 04/05's UI can read/write tier_letter, public_price, offer_macros category/ticket/transformation-promise fields, and offer_tier_services against real production data"
+  artifacts: []
+  key_links:
+    - from: "scripts/push-12-offer-tier-schema.ts"
+      to: "production Postgres (178.104.27.55:54321, via SSH+docker exec)"
+      via: "manual operator run of the idempotent push script against prod DATABASE_URL"
+      pattern: "tier_letter|public_price|offer_tier_services"
+---
+
+<objective>
+BLOCKING checkpoint: apply migration 0008 (`src/db/migrations/0008_offer_tier_schema.sql`,
+created in Plan 01) to the production database. Per CLAUDE.md Data Safety and project memory
+(`project_clienthub_deploy_db.md`: Gitea→Coolify, prod Postgres reachable only via SSH+docker
+exec, port 54321 firewalled from outside), this migration MUST be applied to prod BEFORE
+Plans 03-05 (query layer, server actions, and UI that read/write `tier_letter`, `public_price`,
+the new `offer_macros` columns, and `offer_tier_services`) are exercised against production
+data.
+
+Purpose: Unblock Wave 2/3 schema-dependent code per the project's locked migration convention
+(migrations applied to prod before schema-dependent code ships).
+Output: Migration 0008 applied to production; confirmation that `offer_tier_services` exists
+and the new columns are queryable on the live DB.
+</objective>
+
+<execution_context>
+@$HOME/.claude/get-shit-done/workflows/execute-plan.md
+@$HOME/.claude/get-shit-done/templates/summary.md
+</execution_context>
+
+<context>
+@.planning/PROJECT.md
+@.planning/STATE.md
+@scripts/push-12-offer-tier-schema.ts
+@src/db/migrations/0008_offer_tier_schema.sql
+</context>
+
+<tasks>
+
+<task type="checkpoint:human-action" gate="blocking">
+  <name>Task 1: Apply migration 0008 to production database</name>
+  <what-built>
+    Plan 01 created `src/db/migrations/0008_offer_tier_schema.sql` (additive-only: 11
+    `ALTER TABLE ... ADD COLUMN IF NOT EXISTS` statements on `offer_macros`/`offer_micros`, a
+    guarded `CHECK` constraint on `offer_micros.tier_letter`, and
+    `CREATE TABLE IF NOT EXISTS offer_tier_services` + index) and the idempotent push script
+    `scripts/push-12-offer-tier-schema.ts` that applies it.
+
+    This script CANNOT be run from this environment: the production DATABASE_URL
+    (`178.104.27.55:54321`) is firewalled and reachable only via SSH to the production host
+    (per `project_clienthub_deploy_db.md`). Opening a root SSH session to the shared
+    production host is outside this agent's authorization.
+  </what-built>
+  <how-to-verify>
+    On your machine (or via your existing SSH access to the production host), run the
+    migration push script against the production database, then confirm the new schema
+    objects exist:
+
+    1. SSH to the production host and exec into the Postgres container (same pattern used
+       for the Phase 11 migration apply):
+       ```bash
+       ssh root@178.104.27.55
+       docker exec -it <postgres-container-name> psql -U clienthub -d clienthub
+       ```
+       OR, if you prefer running the idempotent TypeScript push script with
+       `DATABASE_URL` pointed at prod (via SSH port-forward / tunnel, same as Phase 11):
+       ```bash
+       npx tsx scripts/push-12-offer-tier-schema.ts
+       ```
+
+    2. If using `psql` directly, run the contents of
+       `src/db/migrations/0008_offer_tier_schema.sql` (copy/paste — it is additive-only and
+       idempotent, safe to run even if partially applied already).
+
+    3. Confirm the new columns and table exist:
+       ```sql
+       \d offer_macros
+       \d offer_micros
+       \d offer_tier_services
+       ```
+       Expect: `offer_macros` has `description`, `category`, `ticket`, `is_archived`,
+       `cliente_ideale`, `risultato`, `tempo`, `pain`, `metodo`; `offer_micros` has
+       `tier_letter` (with a CHECK constraint `offer_micros_tier_letter_check`) and
+       `public_price`; `offer_tier_services` table exists with columns `tier_id`,
+       `service_id`, `created_at` and a composite primary key on (`tier_id`, `service_id`).
+
+    4. Confirm no existing data was affected:
+       ```sql
+       SELECT count(*) FROM offer_macros;
+       SELECT count(*) FROM offer_micros;
+       SELECT count(*) FROM clients;
+       SELECT count(*) FROM projects;
+       ```
+       Row counts should match pre-migration counts (migration is additive — no rows
+       deleted).
+  </how-to-verify>
+  <resume-signal>Type "applied" once migration 0008 has been run against production and you've confirmed the new columns/table exist (or describe any errors encountered).</resume-signal>
+</task>
+
+</tasks>
+
+<threat_model>
+## Trust Boundaries
+
+| Boundary | Description |
+|----------|-------------|
+| Operator (human) -> Production Postgres | Manual SSH+docker exec session per project convention; only additive, idempotent SQL from migration 0008 is executed |
+
+## STRIDE Threat Register
+
+| Threat ID | Category | Component | Disposition | Mitigation Plan |
+|-----------|----------|-----------|-------------|-----------------|
+| T-12-05 | Denial of Service / Tampering | Manual prod migration apply | accept | Operator runs only the additive, idempotent migration 0008 (already grep-gated in Plan 01 against DROP/TRUNCATE/RENAME); per project convention this is a manual, out-of-band step not reachable via any HTTP endpoint |
+</threat_model>
+
+<verification>
+1. Operator confirms (via `\d offer_macros`, `\d offer_micros`, `\d offer_tier_services` on prod) that all Plan 01 additive columns and the new junction table exist.
+2. Operator confirms row counts for `offer_macros`, `offer_micros`, `clients`, `projects` are unchanged (additive migration, no data loss).
+3. Resume-signal "applied" received before Wave 3 (Plans 04/05) begins relying on these columns/table against production data.
+</verification>
+
+<success_criteria>
+- Migration 0008 is live on production.
+- `offer_tier_services` table and all new `offer_macros`/`offer_micros` columns are queryable on prod.
+- No row in `clients`, `projects`, `payments`, `phases`, `offer_macros`, or `offer_micros` was deleted or modified destructively.
+</success_criteria>
+
+<output>
+After completion, create `.planning/phases/12-offer-composition-drag-drop-csv-import/12-02-SUMMARY.md`
+</output>

.planning/phases/12-offer-composition-drag-drop-csv-import/12-02-SUMMARY.md

@@ -0,0 +1,43 @@
+---
+phase: 12
+plan: 02
+type: execute
+status: complete
+wave: 2
+completed: 2026-06-15
+---
+
+# 12-02 SUMMARY — Apply migration 0008 to production (BLOCKING checkpoint)
+
+## What was done
+
+Migration `0008_offer_tier_schema.sql` (created in Plan 01) was applied to the
+**production** database via the idempotent push script, run from the local
+environment through an operator-opened SSH tunnel (local `127.0.0.1:54321` →
+production host Postgres `localhost:54321`).
+
+Command used (credentials read from `.env.local`, host/port rewritten to the
+tunnel endpoint via `URL()` — never printed):
+
+```bash
+DATABASE_URL=$(node --env-file=.env.local -e 'const u=new URL(process.env.DATABASE_URL); u.host="127.0.0.1:54321"; process.stdout.write(u.toString())') \
+  npx tsx scripts/push-12-offer-tier-schema.ts
+```
+
+Script output: all 14 statements reported `ready` — `✓ Migration 0008 (offer tier schema) applied successfully`.
+
+## Verification (against live prod)
+
+- `offer_macros` gained: `description, category, ticket, is_archived, cliente_ideale, risultato, tempo, pain, metodo` ✓
+- `offer_micros` gained: `tier_letter`, `public_price` ✓
+- Constraint `offer_micros_tier_letter_check` present ✓
+- Table `offer_tier_services` exists with columns `tier_id, service_id, created_at` ✓
+- Row counts unchanged (additive, no data loss): `offer_macros=1, offer_micros=1, clients=4, projects=5, payments=13, phases=6` ✓
+
+## Issues Encountered
+
+- First attempts failed: direct `178.104.27.55:54321` → `CONNECT_TIMEOUT` (firewalled, as in Phase 11); then through the tunnel `ECONNRESET` on all SSL variants. Root cause: the SSH `-L` forward initially targeted the wrong remote port; once re-opened pointing at the prod host's published Postgres port (`localhost:54321`), `SELECT 1` succeeded and the migration applied cleanly.
+
+## Self-Check: PASSED
+
+Migration 0008 is live on production; all new columns/constraint/table queryable; no destructive changes; Waves 3–4 schema-dependent code is now unblocked.

.planning/phases/12-offer-composition-drag-drop-csv-import/12-03-PLAN.md

@@ -0,0 +1,477 @@
+---
+phase: 12
+plan: 03
+type: execute
+wave: 3
+depends_on: [1, 2]
+files_modified:
+  - src/lib/offer-queries.ts
+  - src/app/admin/offers/actions.ts
+autonomous: true
+requirements: [OFFER-11, OFFER-15, OFFER-16, OFFER-17, OFFER-18]
+
+must_haves:
+  truths:
+    - "Admin can fetch the full offer-editor data shape for a single offer: macro fields (incl. category, ticket, archive flag, transformation-promise fields), its A/B/C tiers, each tier's assigned service IDs + computed services total, and the offer's Tipo/Obiettivo tag values"
+    - "Admin can fetch the offer list (card grid) with category + archive status, filterable client-side"
+    - "Admin can save the full editor state in one server action: macro scalar fields, category/ticket, transformation-promise fields, per-tier public_price, per-tier service assignments (offer_tier_services), and Tipo/Obiettivo tags — all validated server-side (requireAdmin + Zod, tier_letter in A/B/C)"
+    - "Admin can toggle is_archived on an offer"
+  artifacts:
+    - path: "src/lib/offer-queries.ts"
+      provides: "getOfferEditorData(macroId), getOfferListCards(), getOfferFieldOptions() — query layer for Plans 04/05"
+      exports: ["getOfferEditorData", "getOfferListCards", "getOfferFieldOptions"]
+    - path: "src/app/admin/offers/actions.ts"
+      provides: "saveOfferEditor, toggleOfferArchived, addOfferTag, removeOfferTag, renameOfferOption — server actions for Plans 04/05"
+      exports: ["saveOfferEditor", "toggleOfferArchived", "addOfferTag", "removeOfferTag", "renameOfferOption", "createOfferMacro"]
+  key_links:
+    - from: "src/app/admin/offers/actions.ts (saveOfferEditor)"
+      to: "offer_tier_services / offer_micros / offer_macros"
+      via: "delete-then-reinsert per tier (mirrors updateMicroOfferServices upsert-replace pattern) + update on offer_macros/offer_micros"
+      pattern: "offer_tier_services"
+    - from: "src/lib/offer-queries.ts (getOfferEditorData)"
+      to: "services (Phase 11 unified catalog)"
+      via: "filter by services.category matching offer_macros.category (D-4 pre-filter)"
+      pattern: "eq\\(services\\.category"
+---
+
+<objective>
+Build the query layer and server actions that power the Phase 12 Offer Editor: a single
+`getOfferEditorData(macroId)` query returning everything Plan 05's editor page needs (macro
+fields including `category`/`ticket`/`is_archived`/transformation-promise, its tiers with
+`tier_letter`/`public_price`/assigned service IDs/computed totals, the category-filtered
+service catalog for the matrix, and Tipo/Obiettivo tag values); `getOfferListCards()` for
+Plan 04's list page; and a `saveOfferEditor` server action that persists the entire editor
+state (macro scalars, tier public prices, tier↔service assignments via
+`offer_tier_services`, and Tipo/Obiettivo tags) in one call, plus smaller actions for archive
+toggling and tag CRUD.
+
+Purpose: Give Plans 04/05 (Wave 3, UI) a complete, type-safe, admin-only data contract so they
+can be built without touching the DB layer directly — covers OFFER-11 (matrix composition +
+live totals via computed `services_total`), OFFER-15 (4-dimension tags), OFFER-16 (public
+price), OFFER-17 (transformation promise), OFFER-18 (list filter + archive).
+Output: `src/lib/offer-queries.ts` additions, `src/app/admin/offers/actions.ts` additions.
+</objective>
+
+<execution_context>
+@$HOME/.claude/get-shit-done/workflows/execute-plan.md
+@$HOME/.claude/get-shit-done/templates/summary.md
+</execution_context>
+
+<context>
+@.planning/PROJECT.md
+@.planning/ROADMAP.md
+@.planning/STATE.md
+@.planning/phases/12-offer-composition-drag-drop-csv-import/12-CONTEXT.md
+@.planning/phases/12-offer-composition-drag-drop-csv-import/12-UI-SPEC.md
+@src/lib/offer-queries.ts
+@src/app/admin/offers/actions.ts
+@src/app/admin/catalog/actions.ts
+</context>
+
+<interfaces>
+<!-- Schema additions from Plan 01 (already applied to schema.ts; migration 0008 applied to
+     prod by Plan 02). Use these directly — no further exploration needed. -->
+
+From src/db/schema.ts (after Plan 01 — offer_macros additive columns):
+```typescript
+// offer_macros now also has (all nullable except is_archived):
+//   description: text
+//   category: text        — single-select "Entry Offer" | "Signature Offer" | "Retainer Offer" (free pool, OFFER-15/18)
+//   ticket: text          — single-select "Low Ticket" | "Mid Ticket" | "High Ticket" (free pool, OFFER-15)
+//   is_archived: boolean  — not null, default false (OFFER-18)
+//   cliente_ideale, risultato, tempo, pain, metodo: text (OFFER-17)
+```
+
+From src/db/schema.ts (after Plan 01 — offer_micros additive columns):
+```typescript
+// offer_micros now also has:
+//   tier_letter: text     — 'A' | 'B' | 'C' | null, CHECK constraint at DB level
+//   public_price: numeric(10,2) | null   (OFFER-16, manual, independent of services total)
+```
+
+From src/db/schema.ts (after Plan 01 — new junction table + types):
+```typescript
+export const offer_tier_services = pgTable("offer_tier_services", {
+  tier_id: text("tier_id").notNull().references(() => offer_micros.id, { onDelete: "cascade" }),
+  service_id: text("service_id").notNull().references(() => services.id, { onDelete: "cascade" }),
+  created_at: timestamp("created_at", { withTimezone: true }).notNull().defaultNow(),
+}, (t) => ({ pk: primaryKey({ columns: [t.tier_id, t.service_id] }), tierIdx: index(...) }));
+
+export type OfferTierService = typeof offer_tier_services.$inferSelect;
+export type NewOfferTierService = typeof offer_tier_services.$inferInsert;
+```
+
+From src/db/schema.ts (services, Phase 11 unified catalog — unchanged):
+```typescript
+export const services = pgTable("services", {
+  id: text("id").primaryKey().$defaultFn(() => nanoid()),
+  name: text("name").notNull(),
+  description: text("description"),
+  unit_price: numeric("unit_price", { precision: 10, scale: 2 }).notNull(),
+  category: text("category"),
+  fase: text("fase"),
+  active: boolean("active").notNull().default(true),
+  // ...
+});
+```
+
+From src/db/schema.ts (tags, polymorphic — unchanged, reused for Tipo/Obiettivo only):
+```typescript
+export const tags = pgTable("tags", {
+  id: text("id").primaryKey().$defaultFn(() => nanoid()),
+  entity_type: text("entity_type").notNull(),
+  entity_id: text("entity_id").notNull(),
+  name: text("name").notNull(),
+  created_at: timestamp("created_at", { withTimezone: true }).notNull().defaultNow(),
+}, (t) => ({
+  entityTagUnique: uniqueIndex("tags_entity_name_unique").on(t.entity_type, t.entity_id, t.name),
+  entityIdx: index("tags_entity_idx").on(t.entity_type, t.entity_id),
+}));
+```
+
+From src/lib/offer-queries.ts (current — DO NOT MODIFY these existing exports, they serve the
+legacy `/admin/offers` page and `offer_services`; this plan ADDS new exports alongside):
+```typescript
+export type MicroWithServices = OfferMicro & { services: Array<{...}>; cumulative_price: string };
+export type MacroWithMicros = OfferMacro & { micros: MicroWithServices[] };
+export async function getCatalogWithMicros(): Promise<MacroWithMicros[]>;
+export async function getAllOfferServices(): Promise<OfferService[]>;
+export async function getMicroAssignedServiceIds(microId: string): Promise<string[]>;
+```
+
+From src/app/admin/catalog/actions.ts (pattern reference — Notion-style single/multi-select
+option pools via the polymorphic `tags` table; reuse this EXACT pattern for offer tags):
+```typescript
+// addServiceOption(field, serviceId, value) -> tags.insert().onConflictDoNothing()
+// removeServiceOption(field, serviceId, value) -> tags.delete().where(entity_type, entity_id, name)
+// renameServiceOption(field, oldValue, newValue) -> tags.update({name}).where(entity_type, name=old)
+//   OR services.update({category|fase}).where(category|fase = old) for single-select columns
+```
+
+From src/app/admin/offers/actions.ts (current — DO NOT MODIFY these existing exports, they
+serve the legacy macro/micro CRUD; this plan ADDS new exports alongside):
+```typescript
+// requireAdmin() — async, throws "Non autorizzato" if no session. Reuse identically.
+export async function createMacro(formData: FormData): Promise<void>;
+export async function deleteMacro(macroId: string): Promise<void>;
+export async function createMicro(formData: FormData): Promise<void>;
+export async function deleteMicro(microId: string): Promise<void>;
+export async function updateMicroOfferServices(microId: string, serviceIds: string[]): Promise<void>;
+// ^ delete-then-reinsert pattern — saveOfferEditor's per-tier service assignment follows this.
+```
+</interfaces>
+
+<tasks>
+
+<task type="auto" tdd="true">
+  <name>Task 1: Query layer — getOfferEditorData, getOfferListCards, getOfferFieldOptions</name>
+  <files>src/lib/offer-queries.ts</files>
+  <behavior>
+    Add to `src/lib/offer-queries.ts` (alongside existing exports, do not remove them):
+
+    - Test 1: `getOfferListCards()` returns one card per `offer_macros` row with
+      `{ id, internal_name, description, category, is_archived }`, ordered by `sort_order`.
+      An offer with `is_archived = true` is still returned (filtering happens client-side
+      per UI-SPEC "Mostra offerte archiviate" toggle) — input: 2 macros (1 archived, 1 not)
+      -> output: array of length 2, both present, `is_archived` flags correct.
+    - Test 2: `getOfferEditorData(macroId)` for a macro with 0 `offer_micros` rows returns
+      `{ macro: {...all fields incl. category/ticket/transformation promise...}, tiers: [],
+      availableServices: [...services filtered by services.category === macro.category...],
+      tipoTags: [], obiettivoTags: [] }` — input: macro with no tiers, `category =
+      "Signature Offer"`, 3 services exist with `services.category = "Signature Offer"` and
+      2 with a different category -> output: `tiers.length === 0`,
+      `availableServices.length === 3` (only matching-category services).
+    - Test 3: `getOfferEditorData(macroId)` for a macro with 3 `offer_micros` rows
+      (`tier_letter` = 'A'/'B'/'C') and 2 `offer_tier_services` rows assigned to tier A
+      returns `tiers` sorted A→B→C, each tier has `{ id, tier_letter, public_price,
+      assignedServiceIds: string[], servicesTotal: string }`; tier A's `servicesTotal`
+      equals the sum of `unit_price` for its 2 assigned services (computed via SQL
+      `sum(...)`, matching the `cumulative_price` pattern in `getCatalogWithMicros`); tiers
+      B/C have `assignedServiceIds: []` and `servicesTotal: "0"`.
+    - Test 4: `getOfferEditorData(macroId)` returns `tipoTags`/`obiettivoTags` as `string[]`
+      sourced from the polymorphic `tags` table with `entity_type = "offer_macros.tipo"` /
+      `"offer_macros.obiettivo"` and `entity_id = macroId` — input: 2 "tipo" tags + 1
+      "obiettivo" tag exist for the macro -> output: `tipoTags.length === 2`,
+      `obiettivoTags.length === 1`.
+    - Test 5: `getOfferFieldOptions()` returns
+      `{ categoria: string[], ticket: string[], tipo: string[], obiettivo: string[] }` —
+      distinct `offer_macros.category` / `offer_macros.ticket` values (non-null, like
+      `getCatalogFieldOptions`'s `categoria`/`fase` pattern) plus distinct `tags.name` where
+      `entity_type IN ("offer_macros.tipo", "offer_macros.obiettivo")`, split by
+      `entity_type`. Input: 2 macros with categories "Entry Offer"/"Signature Offer", 1
+      "tipo" tag "Audit", 1 "obiettivo" tag "Lead Generation" -> output: `categoria` contains
+      both values, `tipo === ["Audit"]`, `obiettivo === ["Lead Generation"]`.
+
+    Write these as a Vitest/Jest test file if a test runner is configured (`npm test` —
+    check `package.json` `scripts.test` first); if no test runner exists in this repo,
+    SKIP the dedicated test file (do not introduce a new test framework — out of scope) and
+    instead write a one-off `scripts/verify-12-03-queries.ts` that calls each function
+    against a temporary in-memory assertion of the SQL shape (or, if `DATABASE_URL` is
+    unreachable from this environment per project memory, write the script so it TYPECHECKS
+    and documents expected behavior in comments matching the 5 cases above — to be run
+    manually by the operator against a dev DB later). Either path satisfies the `tdd="true"`
+    intent: behavior is specified before/alongside implementation.
+  </behavior>
+  <action>
+    Implement in `src/lib/offer-queries.ts`:
+
+    1. **`getOfferListCards()`**: select `id, internal_name, description, category,
+       is_archived, sort_order` from `offer_macros`, `orderBy(asc(sort_order),
+       asc(created_at))`. Return type `OfferListCard[]` where
+       `OfferListCard = Pick<OfferMacro, "id" | "internal_name" | "description" | "category" | "is_archived">`.
+
+    2. **`getOfferEditorData(macroId: string)`**:
+       - Fetch the `offer_macros` row by id (return `null` if not found — Plan 05 handles
+         404).
+       - Fetch its `offer_micros` rows ordered by `tier_letter` (A, B, C — use
+         `sql\`CASE tier_letter WHEN 'A' THEN 1 WHEN 'B' THEN 2 WHEN 'C' THEN 3 ELSE 4 END\``
+         for ordering, since plain `asc(tier_letter)` would sort nulls/letters
+         alphabetically which happens to match A<B<C but nulls need explicit handling —
+         tiers without `tier_letter` set sort last).
+       - For each tier, fetch assigned `offer_tier_services` rows (service_id list) and
+         compute `servicesTotal` via the same `coalesce(sum(unit_price::numeric), 0)`
+         pattern as `getCatalogWithMicros`'s `cumulMap`, joined through
+         `offer_tier_services` -> `services`.
+       - Fetch `availableServices`: all `services` where `active = true` AND (if
+         `macro.category` is set) `services.category = macro.category`; if
+         `macro.category` is null, return all active services (no pre-filter — D-4 filter
+         is best-effort, not a hard constraint when category is unset). Shape:
+         `{ id, name, unit_price, category }[]`.
+       - Fetch `tipoTags`/`obiettivoTags`: `select distinct name from tags where entity_type
+         in ("offer_macros.tipo","offer_macros.obiettivo") and entity_id = macroId`, split
+         by `entity_type` into two `string[]`.
+       - Return shape:
+         ```typescript
+         export type OfferTierData = {
+           id: string;
+           tier_letter: string | null;
+           internal_name: string;
+           public_name: string;
+           duration_months: number;
+           public_price: string | null;
+           assignedServiceIds: string[];
+           servicesTotal: string;
+         };
+         export type OfferEditorData = {
+           macro: OfferMacro; // includes category, ticket, is_archived, cliente_ideale, risultato, tempo, pain, metodo, description
+           tiers: OfferTierData[];
+           availableServices: Array<{ id: string; name: string; unit_price: string; category: string | null }>;
+           tipoTags: string[];
+           obiettivoTags: string[];
+         };
+         export async function getOfferEditorData(macroId: string): Promise<OfferEditorData | null>;
+         ```
+
+    3. **`getOfferFieldOptions()`**:
+       ```typescript
+       export type OfferFieldOptions = {
+         categoria: string[];
+         ticket: string[];
+         tipo: string[];
+         obiettivo: string[];
+       };
+       export async function getOfferFieldOptions(): Promise<OfferFieldOptions>;
+       ```
+       `categoria`/`ticket`: `selectDistinct` on `offer_macros.category` /
+       `offer_macros.ticket`, filter out nulls, sort alphabetically (mirror
+       `getCatalogFieldOptions`'s null-filter pattern for `categoria`/`fase`).
+       `tipo`/`obiettivo`: `selectDistinct({ name: tags.name, type: tags.entity_type })` where
+       `entity_type in ("offer_macros.tipo", "offer_macros.obiettivo")`, split by type.
+
+    Use existing imports (`db`, `eq`, `asc`, `inArray`, `sql`, `and`) — add `desc` or others
+    only if genuinely needed. Import `offer_tier_services`, `tags`, `services` from
+    `@/db/schema` (services/tags likely not yet imported in this file — check current
+    imports first).
+  </action>
+  <verify>
+    <automated>cd /Users/simonecavalli/Vault/IAMCAVALLI && npx tsc --noEmit 2>&1 | tail -30</automated>
+  </verify>
+  <acceptance_criteria>
+    - `npx tsc --noEmit` passes with zero errors
+    - `grep -c "export async function getOfferEditorData\|export async function getOfferListCards\|export async function getOfferFieldOptions" src/lib/offer-queries.ts` == 3
+    - `grep -c "export async function getCatalogWithMicros\|export async function getAllOfferServices\|export async function getMicroAssignedServiceIds" src/lib/offer-queries.ts` == 3 (existing exports untouched)
+    - `grep -c "offer_tier_services" src/lib/offer-queries.ts` >= 1
+  </acceptance_criteria>
+  <done>offer-queries.ts exports getOfferEditorData, getOfferListCards, getOfferFieldOptions with the documented shapes; existing exports unchanged; file typechecks.</done>
+</task>
+
+<task type="auto" tdd="true">
+  <name>Task 2: Server actions — saveOfferEditor, toggleOfferArchived, offer tag CRUD, createOfferMacro</name>
+  <files>src/app/admin/offers/actions.ts</files>
+  <behavior>
+    Add to `src/app/admin/offers/actions.ts` (alongside existing exports, do not remove
+    them):
+
+    - Test 1: `saveOfferEditor(macroId, payload)` rejects (throws) when `payload.tiers`
+      contains a `tier_letter` not in `["A","B","C"]` — Zod enum validation, defense-in-depth
+      alongside the DB CHECK constraint from Plan 01.
+    - Test 2: `saveOfferEditor(macroId, payload)` updates `offer_macros` scalar fields
+      (`internal_name`, `description`, `category`, `ticket`, `cliente_ideale`, `risultato`,
+      `tempo`, `pain`, `metodo`) in one `db.update(offer_macros)...where(eq(id, macroId))`.
+    - Test 3: `saveOfferEditor` upserts each tier in `payload.tiers`: if a tier `id` is
+      provided, `db.update(offer_micros).set({ tier_letter, public_price, internal_name,
+      public_name, duration_months })`; if no `id`, `db.insert(offer_micros).values({...,
+      macro_id: macroId})` (supports creating tiers for a macro that has fewer than 3).
+    - Test 4: `saveOfferEditor` replaces each tier's `offer_tier_services` rows via
+      delete-then-reinsert (same pattern as `updateMicroOfferServices`): input tier with
+      `assignedServiceIds: ["svc1","svc2"]` -> after call, `offer_tier_services` has exactly
+      2 rows for that `tier_id`, both pointing at svc1/svc2.
+    - Test 5: `saveOfferEditor` replaces Tipo/Obiettivo tags via delete-then-reinsert against
+      `tags` where `entity_type in ("offer_macros.tipo","offer_macros.obiettivo")` and
+      `entity_id = macroId`.
+    - Test 6: `toggleOfferArchived(macroId, archived: boolean)` sets
+      `offer_macros.is_archived = archived`.
+    - Test 7: `addOfferTag(dimension, macroId, value)` / `removeOfferTag(dimension, macroId,
+      value)` work for `dimension in ("tipo","obiettivo")`, mirroring
+      `addServiceOption`/`removeServiceOption` against `entity_type =
+      "offer_macros." + dimension`. Reject any other `dimension` value.
+    - Test 8: `renameOfferOption(field, oldValue, newValue)` for `field in
+      ("categoria","ticket")` updates `offer_macros.category`/`offer_macros.ticket` for all
+      rows matching `oldValue` (mirrors `renameServiceOption`'s single-select branch); for
+      `field in ("tipo","obiettivo")` updates `tags.name` (mirrors the multi-select branch).
+    - Test 9: `createOfferMacro(formData)` creates a new `offer_macros` row from
+      `internal_name` (required) + optional `public_name`/`description`/`category` —
+      needed so Plan 04's "+ Nuova Offerta" button has a target action (UI-SPEC section 1A).
+      If `public_name` is omitted, default it to `internal_name` (existing `offer_macros`
+      schema requires `public_name` NOT NULL).
+
+    Same test-runner decision as Plan 03 Task 1: if no test runner configured, write
+    `scripts/verify-12-03-actions.ts` (typechecks, documents the 9 cases) instead of a
+    dedicated test file — do not introduce a new framework.
+  </behavior>
+  <action>
+    Implement in `src/app/admin/offers/actions.ts`, reusing `requireAdmin()`,
+    `revalidatePath("/admin/offers")`, and the `z` (Zod) import already present:
+
+    1. **`saveOfferEditor(macroId: string, payload: SaveOfferEditorPayload)`** where:
+       ```typescript
+       const tierSchema = z.object({
+         id: z.string().optional(),
+         tier_letter: z.enum(["A", "B", "C"]),
+         internal_name: z.string().min(1),
+         public_name: z.string().min(1),
+         duration_months: z.coerce.number().int().min(1),
+         public_price: z.coerce.number().min(0).optional().nullable(),
+         assignedServiceIds: z.array(z.string()),
+       });
+       const saveOfferEditorSchema = z.object({
+         internal_name: z.string().min(1, "Nome interno richiesto"),
+         public_name: z.string().min(1, "Nome pubblico richiesto"),
+         description: z.string().optional(),
+         category: z.string().optional(),
+         ticket: z.string().optional(),
+         cliente_ideale: z.string().optional(),
+         risultato: z.string().optional(),
+         tempo: z.string().optional(),
+         pain: z.string().optional(),
+         metodo: z.string().optional(),
+         tiers: z.array(tierSchema).max(3),
+         tipoTags: z.array(z.string()),
+         obiettivoTags: z.array(z.string()),
+       });
+       export type SaveOfferEditorPayload = z.infer<typeof saveOfferEditorSchema>;
+       ```
+       Implementation order (sequential `await`s, no transaction wrapper needed — Drizzle
+       + `postgres` driver here doesn't use an interactive tx helper elsewhere in this
+       codebase, follow existing per-statement pattern):
+       - `safeParse` the payload; throw `parsed.error.issues[0].message` on failure.
+       - `db.update(offer_macros).set({...scalars, public_price fields N/A here...}).where(eq(offer_macros.id, macroId))`
+         — set `internal_name, public_name, description, category, ticket, cliente_ideale,
+         risultato, tempo, pain, metodo` (empty-string -> `null` for optional text fields,
+         same `|| null` convention as `createMacro`).
+       - For each tier in `parsed.data.tiers`:
+         - If `tier.id` exists: `db.update(offer_micros).set({ tier_letter, internal_name,
+           public_name, duration_months, public_price: tier.public_price != null ?
+           String(tier.public_price) : null }).where(eq(offer_micros.id, tier.id))`.
+         - Else: `db.insert(offer_micros).values({ macro_id: macroId, tier_letter,
+           internal_name, public_name, duration_months, public_price: ... })` and capture
+           the new id (insert `.returning({ id: offer_micros.id })`).
+         - Delete-then-reinsert `offer_tier_services` for that tier id (mirror
+           `updateMicroOfferServices`): `db.delete(offer_tier_services).where(eq(tier_id,
+           ...))`, then if `assignedServiceIds.length > 0`,
+           `db.insert(offer_tier_services).values(assignedServiceIds.map(service_id => ({
+           tier_id, service_id })))`.
+       - Delete-then-reinsert Tipo/Obiettivo tags: `db.delete(tags).where(and(eq(entity_id,
+         macroId), inArray(entity_type, ["offer_macros.tipo","offer_macros.obiettivo"])))`,
+         then insert rows for each `tipoTags`/`obiettivoTags` entry with the corresponding
+         `entity_type`, using `onConflictDoNothing()` per row (mirror `addServiceOption`).
+       - `revalidatePath("/admin/offers")` and `revalidatePath(\`/admin/offers/${macroId}/edit\`)`.
+
+    2. **`toggleOfferArchived(macroId: string, archived: boolean)`**: `requireAdmin()`,
+       `db.update(offer_macros).set({ is_archived: archived }).where(eq(id, macroId))`,
+       `revalidatePath("/admin/offers")`.
+
+    3. **`addOfferTag(dimension: "tipo" | "obiettivo", macroId: string, value: string)`** /
+       **`removeOfferTag(dimension, macroId, value)`**: mirror
+       `addServiceOption`/`removeServiceOption` exactly, using `entity_type =
+       \`offer_macros.${dimension}\`` and `entity_id = macroId`. Validate `dimension` is one
+       of the two allowed values (throw otherwise).
+
+    4. **`renameOfferOption(field: "categoria" | "ticket" | "tipo" | "obiettivo", oldValue:
+       string, newValue: string)`**: mirror `renameServiceOption`. For `"categoria"`:
+       `db.update(offer_macros).set({ category: next }).where(eq(category, oldValue))`. For
+       `"ticket"`: same on `offer_macros.ticket`. For `"tipo"`/`"obiettivo"`:
+       `db.update(tags).set({ name: next }).where(and(eq(entity_type,
+       \`offer_macros.${field}\`), eq(name, oldValue)))`.
+
+    5. **`createOfferMacro(formData: FormData)`**: Zod-validate `internal_name` (required),
+       optional `public_name` (default = `internal_name` if empty), `description`,
+       `category`. `db.insert(offer_macros).values({...})`, `revalidatePath("/admin/offers")`.
+       This is additive alongside the existing `createMacro` (legacy form-based create on
+       the old page) — `createOfferMacro` is the Plan 04 "+ Nuova Offerta" target with the
+       new fields.
+
+    Import `offer_tier_services`, `tags` from `@/db/schema` (add to existing import list);
+    import `inArray` from `drizzle-orm` if not already imported.
+  </action>
+  <verify>
+    <automated>cd /Users/simonecavalli/Vault/IAMCAVALLI && npx tsc --noEmit 2>&1 | tail -30</automated>
+  </verify>
+  <acceptance_criteria>
+    - `npx tsc --noEmit` passes with zero errors
+    - `grep -c "export async function saveOfferEditor\|export async function toggleOfferArchived\|export async function addOfferTag\|export async function removeOfferTag\|export async function renameOfferOption\|export async function createOfferMacro" src/app/admin/offers/actions.ts` == 6
+    - `grep -c "export async function createMacro\|export async function deleteMacro\|export async function createMicro\|export async function deleteMicro\|export async function updateMicroOfferServices" src/app/admin/offers/actions.ts` == 5 (existing exports untouched)
+    - `grep -c "z.enum(\[\"A\", \"B\", \"C\"\]\|z.enum([\"A\",\"B\",\"C\"]" src/app/admin/offers/actions.ts` >= 1 (tier_letter Zod validation present)
+    - `grep -c "requireAdmin()" src/app/admin/offers/actions.ts` >= 11 (every action, old + new, calls requireAdmin)
+  </acceptance_criteria>
+  <done>actions.ts exports saveOfferEditor, toggleOfferArchived, addOfferTag, removeOfferTag, renameOfferOption, createOfferMacro — all requireAdmin-guarded, Zod-validated, revalidating /admin/offers; existing exports unchanged; file typechecks.</done>
+</task>
+
+</tasks>
+
+<threat_model>
+## Trust Boundaries
+
+| Boundary | Description |
+|----------|-------------|
+| Admin browser -> saveOfferEditor server action | Admin-authenticated input (full editor payload: scalars, tier compositions, tags) crosses into DB writes |
+| Admin browser -> offer tag CRUD actions | Free-text tag names (Tipo/Obiettivo/Categoria/Ticket) crosses into `tags`/`offer_macros` |
+
+## STRIDE Threat Register
+
+| Threat ID | Category | Component | Disposition | Mitigation Plan |
+|-----------|----------|-----------|-------------|-----------------|
+| T-12-06 | Tampering | `saveOfferEditor` tier_letter / numeric fields | mitigate | Zod schema: `tier_letter` restricted to enum `["A","B","C"]`, `public_price`/`duration_months` coerced + min-bounded; DB CHECK constraint (Plan 01) as second layer |
+| T-12-07 | Elevation of Privilege | All new server actions (`saveOfferEditor`, `toggleOfferArchived`, tag CRUD, `createOfferMacro`) | mitigate | Every action calls `requireAdmin()` first (session check via Auth.js), identical to all existing `/admin/offers` and `/admin/catalog` actions |
+| T-12-08 | Tampering | Free-text tag/category/ticket values stored via `onConflictDoNothing`/update | accept | Same trust level as Phase 11 catalog tags (admin-only input, no client-facing exposure); length/content not constrained beyond non-empty, consistent with existing `addServiceOption`/`renameServiceOption` |
+| T-12-09 | Information Disclosure | `getOfferEditorData`/`getOfferListCards`/`getOfferFieldOptions` expose `offer_tier_services`/pricing data | accept | Functions are imported only by `/admin/offers/*` pages (Plans 04/05), which sit behind Auth.js session middleware; no route in this plan is client-facing |
+</threat_model>
+
+<verification>
+1. `npx tsc --noEmit` passes for the full project.
+2. `getOfferEditorData`, `getOfferListCards`, `getOfferFieldOptions` exported from `src/lib/offer-queries.ts`, existing exports (`getCatalogWithMicros`, `getAllOfferServices`, `getMicroAssignedServiceIds`) untouched.
+3. `saveOfferEditor`, `toggleOfferArchived`, `addOfferTag`, `removeOfferTag`, `renameOfferOption`, `createOfferMacro` exported from `src/app/admin/offers/actions.ts`, existing exports (`createMacro`, `deleteMacro`, `createMicro`, `deleteMicro`, `updateMicroOfferServices`) untouched.
+4. Every new server action calls `requireAdmin()` before any DB write.
+5. `saveOfferEditor` validates `tier_letter` against `["A","B","C"]` via Zod before any write.
+</verification>
+
+<success_criteria>
+- Plan 05's editor page can fetch a complete `OfferEditorData` shape and persist all of it via `saveOfferEditor` in one call.
+- Plan 04's list page can fetch `OfferListCard[]` with category + archive status.
+- All four tag dimensions (Categoria, Ticket, Tipo, Obiettivo) are readable/writable via `getOfferFieldOptions`/`addOfferTag`/`removeOfferTag`/`renameOfferOption`.
+- No legacy `offer_micro_services`/`offer_services`/existing-export code paths modified.
+</success_criteria>
+
+<output>
+After completion, create `.planning/phases/12-offer-composition-drag-drop-csv-import/12-03-SUMMARY.md`
+</output>

.planning/phases/12-offer-composition-drag-drop-csv-import/12-03-SUMMARY.md

@@ -0,0 +1,129 @@
+---
+phase: 12-offer-composition-drag-drop-csv-import
+plan: 03
+subsystem: api
+tags: [drizzle, postgres, zod, server-actions, next.js]
+
+# Dependency graph
+requires:
+  - phase: 12-offer-composition-drag-drop-csv-import (Plan 01)
+    provides: Additive offer_macros/offer_micros columns (category, ticket, is_archived, transformation-promise fields, tier_letter, public_price) and offer_tier_services junction table, applied to prod via Plan 02
+provides:
+  - getOfferEditorData(macroId) — full editor data shape (macro fields, A/B/C tiers with assignedServiceIds + computed servicesTotal, category-filtered availableServices, tipoTags/obiettivoTags)
+  - getOfferListCards() — list-page cards with category + archive status
+  - getOfferFieldOptions() — categoria/ticket/tipo/obiettivo select pools
+  - saveOfferEditor(macroId, payload) — single-call persistence of macro scalars, per-tier upsert + offer_tier_services replace, and Tipo/Obiettivo tag replace
+  - toggleOfferArchived, addOfferTag, removeOfferTag, renameOfferOption, createOfferMacro server actions
+affects: [12-04-offer-list-page, 12-05-offer-editor-page]
+
+# Tech tracking
+tech-stack:
+  added: []
+  patterns:
+    - "Polymorphic tags table reused for offer_macros Tipo/Obiettivo dimensions via entity_type = 'offer_macros.tipo' | 'offer_macros.obiettivo', mirroring the Phase 11 services/leads D-06 pattern"
+    - "Computed servicesTotal via coalesce(sum(unit_price::numeric), 0) joined through offer_tier_services -> services, mirroring getCatalogWithMicros's cumulMap pattern"
+    - "Delete-then-reinsert for many-to-many replacement (offer_tier_services per tier, Tipo/Obiettivo tags per macro), mirroring updateMicroOfferServices"
+    - "Zod enum tier_letter validation (A/B/C) as defense-in-depth alongside the Plan 01 DB CHECK constraint"
+
+key-files:
+  created:
+    - scripts/verify-12-03-queries.ts
+    - scripts/verify-12-03-actions.ts
+  modified:
+    - src/lib/offer-queries.ts
+    - src/app/admin/offers/actions.ts
+
+key-decisions:
+  - "No test runner configured (no scripts.test in package.json) — wrote typecheck-only verification scripts documenting the 14 spec'd test cases (5 query + 9 action), per plan's explicit fallback; not executed against prod DB"
+  - "saveOfferEditor uses sequential awaits (no transaction wrapper) per macro update -> tier upserts -> tag replace, matching the existing per-statement pattern in this codebase (no interactive tx helper elsewhere)"
+
+patterns-established:
+  - "OFFER_TIPO_ENTITY/OFFER_OBIETTIVO_ENTITY constants ('offer_macros.tipo'/'offer_macros.obiettivo') as the canonical entity_type values for offer-level tag dimensions — reuse in Plans 04/05 UI"
+
+requirements-completed: [OFFER-11, OFFER-15, OFFER-16, OFFER-17, OFFER-18]
+
+# Metrics
+duration: 12min
+completed: 2026-06-15
+---
+
+# Phase 12 Plan 03: Offer Editor Query Layer & Server Actions Summary
+
+**Query layer (`getOfferEditorData`, `getOfferListCards`, `getOfferFieldOptions`) and server actions (`saveOfferEditor` + archive/tag/rename/create actions) giving Plans 04/05 a complete, type-safe, admin-only data contract for the offer editor.**
+
+## Performance
+
+- **Duration:** 12 min
+- **Started:** 2026-06-15T08:15:00Z (approx)
+- **Completed:** 2026-06-15T08:17:07Z
+- **Tasks:** 2 completed
+- **Files modified:** 4 (2 source, 2 new verification scripts)
+
+## Accomplishments
+
+- Added `getOfferListCards()` to `src/lib/offer-queries.ts`: returns `{ id, internal_name, description, category, is_archived }` per `offer_macros` row, ordered by `sort_order`, including archived offers (client-side filter per UI-SPEC)
+- Added `getOfferEditorData(macroId)`: returns `{ macro, tiers, availableServices, tipoTags, obiettivoTags }` — tiers ordered A→B→C via SQL `CASE` expression, each with `assignedServiceIds` and a computed `servicesTotal` (`coalesce(sum(unit_price::numeric), 0)` joined through `offer_tier_services`), available services pre-filtered by `services.category === macro.category` (D-4, best-effort when category unset)
+- Added `getOfferFieldOptions()`: `{ categoria, ticket, tipo, obiettivo }` distinct-value pools, mirroring `getCatalogFieldOptions`'s null-filter + alphabetical sort pattern
+- Added `saveOfferEditor(macroId, payload)` to `src/app/admin/offers/actions.ts`: Zod-validates the full editor payload (`tier_letter` restricted to `["A","B","C"]`), updates `offer_macros` scalars, upserts each tier (update if `id` present, insert + `.returning({id})` if not), delete-then-reinserts `offer_tier_services` per tier, and delete-then-reinserts Tipo/Obiettivo `tags`
+- Added `toggleOfferArchived`, `addOfferTag`/`removeOfferTag` (tipo/obiettivo dimensions), `renameOfferOption` (categoria/ticket/tipo/obiettivo), and `createOfferMacro` (Plan 04 "+ Nuova Offerta" target, defaults `public_name` to `internal_name`)
+- All new actions call `requireAdmin()` first; existing exports in both files left untouched
+
+## Task Commits
+
+Each task was committed atomically:
+
+1. **Task 1: Query layer — getOfferEditorData, getOfferListCards, getOfferFieldOptions** - `0d742f2` (feat)
+2. **Task 2: Server actions — saveOfferEditor, toggleOfferArchived, offer tag CRUD, createOfferMacro** - `a372c61` (feat)
+
+**Plan metadata:** (this commit, follows)
+
+## Files Created/Modified
+
+- `src/lib/offer-queries.ts` - Added `getOfferListCards`, `getOfferEditorData`, `getOfferFieldOptions` + `OfferListCard`/`OfferTierData`/`OfferEditorData`/`OfferFieldOptions` types; imports `offer_tier_services`, `services`, `tags`, `and` from drizzle-orm
+- `src/app/admin/offers/actions.ts` - Added `saveOfferEditor`, `toggleOfferArchived`, `addOfferTag`, `removeOfferTag`, `renameOfferOption`, `createOfferMacro` + `SaveOfferEditorPayload`/`tierSchema`/`saveOfferEditorSchema` types; imports `offer_tier_services`, `tags`, `and`, `inArray`
+- `scripts/verify-12-03-queries.ts` - Typecheck-only documentation of the 5 query-layer test cases (Tests 1-5 from Task 1's `<behavior>`)
+- `scripts/verify-12-03-actions.ts` - Typecheck-only documentation of the 9 server-action test cases (Tests 1-9 from Task 2's `<behavior>`)
+
+## Decisions Made
+
+- No test runner configured in this repo (`package.json` has no `scripts.test`), and `.env.local`'s `DATABASE_URL` points at production per project memory — followed the plan's explicit fallback and wrote `scripts/verify-12-03-queries.ts` / `scripts/verify-12-03-actions.ts` as typecheck-only documentation of all 14 spec'd test cases, not executed against the live DB
+- `saveOfferEditor` uses sequential `await`s (macro update → per-tier upsert/replace → tag replace) with no transaction wrapper, matching the existing per-statement pattern used by `updateMicroOfferServices` and the rest of this codebase
+
+## Deviations from Plan
+
+None - plan executed exactly as written. Both tasks implemented the documented function signatures, return shapes, and validation rules verbatim; existing exports in `offer-queries.ts` and `actions.ts` were not modified.
+
+## Issues Encountered
+
+None.
+
+## User Setup Required
+
+None - no external service configuration required. This plan is pure source-code (query/action functions); migration 0008 was already live on production (verified per Plan 02), and no data-mutating scripts were run.
+
+## Next Phase Readiness
+
+- Plan 04 (offer list page) can call `getOfferListCards()` and `createOfferMacro` for the "+ Nuova Offerta" button
+- Plan 05 (offer editor page) can call `getOfferEditorData(macroId)` to populate the full editor (macro fields, tier matrix with live totals, Tipo/Obiettivo tags, category-filtered service catalog) and persist all of it via a single `saveOfferEditor(macroId, payload)` call; archive toggling via `toggleOfferArchived`; tag/option CRUD via `addOfferTag`/`removeOfferTag`/`renameOfferOption`
+- `npx tsc --noEmit` passes with zero errors across the full project
+- No legacy `offer_micro_services`/`offer_services`/existing-export code paths were touched
+
+---
+
+*Phase: 12-offer-composition-drag-drop-csv-import*
+*Completed: 2026-06-15*
+
+## Self-Check: PASSED
+
+All created/modified files verified present on disk:
+
+- FOUND: src/lib/offer-queries.ts
+- FOUND: src/app/admin/offers/actions.ts
+- FOUND: scripts/verify-12-03-queries.ts
+- FOUND: scripts/verify-12-03-actions.ts
+- FOUND: .planning/phases/12-offer-composition-drag-drop-csv-import/12-03-SUMMARY.md
+
+All task commits verified present in git log:
+
+- FOUND: 0d742f2 (Task 1)
+- FOUND: a372c61 (Task 2)

.planning/phases/12-offer-composition-drag-drop-csv-import/12-04-PLAN.md

@@ -0,0 +1,284 @@
+---
+phase: 12
+plan: 04
+type: execute
+wave: 4
+depends_on: [1, 3]
+files_modified:
+  - src/app/admin/offers/page.tsx
+  - src/components/admin/offers/OfferListClient.tsx
+autonomous: true
+requirements: [OFFER-18]
+
+must_haves:
+  truths:
+    - "Admin sees a card grid of all offers, each showing internal name, short description, and category chip"
+    - "Admin can filter the card grid by category (Tutti / Entry Offer / Signature Offer / Retainer Offer, derived dynamically from existing category values)"
+    - "Admin can toggle 'Mostra offerte archiviate' to show/hide archived offers (hidden by default)"
+    - "Admin can create a new offer via '+ Nuova Offerta', which creates an offer_macros row and the new card appears in the grid"
+    - "Each card links to the Plan 05 editor route /admin/offers/[id]/edit"
+  artifacts:
+    - path: "src/app/admin/offers/page.tsx"
+      provides: "Server component: fetches getOfferListCards() + getOfferFieldOptions(), renders OfferListClient"
+    - path: "src/components/admin/offers/OfferListClient.tsx"
+      provides: "Client component: category filter chips, archive toggle, card grid, '+ Nuova Offerta' button calling createOfferMacro"
+      exports: ["OfferListClient"]
+  key_links:
+    - from: "src/components/admin/offers/OfferListClient.tsx"
+      to: "/admin/offers/[id]/edit"
+      via: "next/link Link per card"
+      pattern: "admin/offers/\\$\\{.*\\}/edit"
+    - from: "src/components/admin/offers/OfferListClient.tsx (+ Nuova Offerta)"
+      to: "createOfferMacro server action (Plan 03)"
+      via: "useTransition + router.refresh on success, new card appears in grid"
+      pattern: "createOfferMacro"
+---
+
+<objective>
+Redesign `/admin/offers` (currently a flat macro/micro CRUD list — the legacy page) into the
+Phase 12 UI-SPEC card-grid list: filterable by category chips, archive toggle, "+ Nuova
+Offerta" CTA, each card linking to the new per-offer editor route (`/admin/offers/[id]/edit`,
+built in Plan 05).
+
+Purpose: Deliver OFFER-18 (category-filterable, archive-aware offer list) per the locked
+UI-SPEC (`12-UI-SPEC.md` section 1) and D-1 (full editor list+detail, CSV import deferred).
+Output: `src/app/admin/offers/page.tsx` rewritten as the new list page;
+`src/components/admin/offers/OfferListClient.tsx` (new) implementing filter/grid/CTA logic.
+</objective>
+
+<execution_context>
+@$HOME/.claude/get-shit-done/workflows/execute-plan.md
+@$HOME/.claude/get-shit-done/templates/summary.md
+</execution_context>
+
+<context>
+@.planning/PROJECT.md
+@.planning/STATE.md
+@.planning/phases/12-offer-composition-drag-drop-csv-import/12-UI-SPEC.md
+@src/app/admin/catalog/CatalogSearch.tsx
+@src/components/admin/AdminSidebar.tsx
+</context>
+
+<interfaces>
+<!-- From Plan 03 (src/lib/offer-queries.ts) — use directly, no further exploration needed. -->
+
+```typescript
+export type OfferListCard = Pick<OfferMacro, "id" | "internal_name" | "description" | "category" | "is_archived">;
+export async function getOfferListCards(): Promise<OfferListCard[]>;
+
+export type OfferFieldOptions = { categoria: string[]; ticket: string[]; tipo: string[]; obiettivo: string[] };
+export async function getOfferFieldOptions(): Promise<OfferFieldOptions>;
+```
+
+<!-- From Plan 03 (src/app/admin/offers/actions.ts) — use directly. -->
+
+```typescript
+// Creates a new offer_macros row from FormData { internal_name, public_name?, description?, category? }
+// public_name defaults to internal_name if omitted. Returns void (revalidates /admin/offers).
+// NOTE: createOfferMacro does NOT return the new row's id (FormData server actions can't
+// easily return values to client callers in the <form action={fn}> pattern). For the
+// "+ Nuova Offerta" flow, Task 2 calls createOfferMacro via startTransition + FormData,
+// then router.refresh() — the new card appears in the grid; admin clicks it to open the
+// editor (Plan 05). No need to extend Plan 03's contract.
+export async function createOfferMacro(formData: FormData): Promise<void>;
+```
+
+<!-- From src/app/admin/catalog/CatalogSearch.tsx — reference pattern for a client component
+wrapping a server-fetched list with client-side filter state (search/category chips). Read
+this file's structure (useState + useMemo filter, "use client") before writing OfferListClient. -->
+</interfaces>
+
+<tasks>
+
+<task type="auto">
+  <name>Task 1: Rewrite /admin/offers page.tsx as the new list page entry point</name>
+  <files>src/app/admin/offers/page.tsx</files>
+  <read_first>
+    - src/app/admin/offers/page.tsx (current — full file, ~239 lines, the legacy macro/micro
+      CRUD page being replaced)
+    - src/app/admin/catalog/page.tsx (pattern: thin server component, `Promise.all` fetch,
+      delegates to a client component for interactivity)
+    - .planning/phases/12-offer-composition-drag-drop-csv-import/12-UI-SPEC.md (section 1:
+      Offer List Page layout, header, filter row, card grid, empty state, copywriting
+      contract table)
+  </read_first>
+  <action>
+    Replace the entire contents of `src/app/admin/offers/page.tsx` with a thin server
+    component matching the `catalog/page.tsx` pattern:
+
+    ```typescript
+    import { getOfferListCards, getOfferFieldOptions } from "@/lib/offer-queries";
+    import { OfferListClient } from "@/components/admin/offers/OfferListClient";
+
+    export const revalidate = 0;
+
+    export default async function OffersPage() {
+      const [cards, options] = await Promise.all([
+        getOfferListCards(),
+        getOfferFieldOptions(),
+      ]);
+
+      return (
+        <div>
+          <OfferListClient cards={cards} categoryOptions={options.categoria} />
+        </div>
+      );
+    }
+    ```
+
+    The legacy macro/micro/offer_services CRUD UI previously on this page (forms for
+    `createMacro`/`createMicro`/`createOfferService`, `ServiceCheckboxList`, etc.) is
+    REMOVED from this route per D-1 (full editor redesign) and the UI-SPEC (section 1 — no
+    legacy CRUD forms in the new list page). The underlying `offer_macros`/`offer_micros`
+    legacy actions (`createMacro`, `deleteMacro`, `createMicro`, `deleteMicro`,
+    `updateMicroOfferServices`) remain exported from `actions.ts` (Plan 03 did not remove
+    them) but are no longer referenced from any page — this is intentional dead-export
+    cleanup deferred to a future phase if needed (do NOT delete the exports now, only
+    routes/usages, to avoid breaking `npx tsc --noEmit` if anything else imports them; grep
+    confirms nothing else does, but leaving the exports is zero-risk and out of this plan's
+    scope to remove).
+  </action>
+  <verify>
+    <automated>cd /Users/simonecavalli/Vault/IAMCAVALLI && npx tsc --noEmit 2>&1 | tail -20</automated>
+  </verify>
+  <acceptance_criteria>
+    - `src/app/admin/offers/page.tsx` is a server component importing `getOfferListCards`, `getOfferFieldOptions`, and `OfferListClient`
+    - `grep -c "ServiceCheckboxList\|createMacro\|createMicro\|createOfferService" src/app/admin/offers/page.tsx` == 0 (legacy forms removed from this page)
+    - `npx tsc --noEmit` passes (will fail until Task 2 creates `OfferListClient` — run combined verification after both tasks)
+  </acceptance_criteria>
+  <done>page.tsx is a thin server component delegating to OfferListClient with the new data shape.</done>
+</task>
+
+<task type="auto">
+  <name>Task 2: Build OfferListClient — category filter, archive toggle, card grid, create CTA</name>
+  <files>src/components/admin/offers/OfferListClient.tsx</files>
+  <read_first>
+    - src/app/admin/catalog/CatalogSearch.tsx (client component pattern: "use client",
+      useState filter state, useMemo derived list, search input)
+    - src/components/ui/button.tsx, src/components/ui/badge.tsx, src/components/ui/input.tsx
+      (exported component signatures — use these for CTA button, category chips/badges,
+      "+ Nuova Offerta" form input)
+    - .planning/phases/12-offer-composition-drag-drop-csv-import/12-UI-SPEC.md (section 1:
+      exact layout ASCII diagram, color tokens #1A463C/#DEF168/#dc2626/#71717a/#e5e7eb,
+      card structure, empty state copy, filter chip active/inactive styling, copywriting
+      contract table for all literal strings)
+  </read_first>
+  <action>
+    Create `src/components/admin/offers/OfferListClient.tsx`:
+
+    ```typescript
+    "use client";
+    import { useState, useMemo, useTransition } from "react";
+    import { useRouter } from "next/navigation";
+    import Link from "next/link";
+    import { createOfferMacro } from "@/app/admin/offers/actions";
+    import type { OfferListCard } from "@/lib/offer-queries";
+
+    export function OfferListClient({
+      cards,
+      categoryOptions,
+    }: {
+      cards: OfferListCard[];
+      categoryOptions: string[];
+    }) {
+      // ... implementation below
+    }
+    ```
+
+    Implementation requirements (per UI-SPEC section 1 + copywriting contract table):
+
+    1. **State**: `activeCategory: string | null` (null = "Tutti"), `showArchived: boolean`
+       (default `false`), `showCreateForm: boolean` + a controlled text input for the new
+       offer's `internal_name`.
+
+    2. **Filter row**:
+       - Chip row: "Tutti" + one chip per `categoryOptions` value. Active chip: border
+         `#1A463C`, text `#1A463C`. Inactive: border `#e5e7eb`, text `#71717a`. 8px gap
+         (`gap-2`).
+       - "Mostra offerte archiviate" checkbox + label (`#71717a` text), toggles
+         `showArchived`.
+
+    3. **Filtered list** (`useMemo`): `cards.filter(c => (activeCategory === null ||
+       c.category === activeCategory) && (showArchived || !c.is_archived))`.
+
+    4. **Card grid**: `grid grid-cols-1 md:grid-cols-2 lg:grid-cols-3 gap-4`. Each card:
+       - `Link href={`/admin/offers/${card.id}/edit`}` wrapping a `div` with white bg,
+         `border border-[#e5e7eb] rounded-lg p-4 hover:shadow-[0_4px_12px_rgba(0,0,0,0.08)]
+         cursor-pointer transition-shadow`.
+       - `internal_name` as h3 (16px/600).
+       - `description` (if present) as body text, `line-clamp-2`, `#71717a`.
+       - Category badge: small chip showing `category` (if present) — reuse
+         `src/components/ui/badge.tsx` `<Badge>` or a styled `<span>`.
+       - If `is_archived`: red "Archiviata" badge (text `#dc2626`).
+
+    5. **Empty state**: if `filteredCards.length === 0`, show centered block: heading
+       "Nessuna offerta" (h3), body "Inizia creando la tua prima offerta" (`#71717a`), and
+       the "+ Nuova Offerta" CTA (same as header).
+
+    6. **"+ Nuova Offerta" CTA** (top-right of page header, "Offerte" h2 title to its left):
+       - Clicking "+ Nuova Offerta" toggles `showCreateForm`, revealing a small inline
+         `<form>` with one text `<input name="internal_name" required placeholder="Nome
+         offerta...">` and a submit button "Crea".
+       - On submit: `startTransition(async () => { await createOfferMacro(formData);
+         setShowCreateForm(false); router.refresh(); })`. After `router.refresh()`, the new
+         card appears in the grid — do NOT attempt to auto-navigate to the editor in this
+         plan (acceptable per UI-SPEC: admin clicks the new card to open the editor). Button
+         style: bg `#1A463C`, text white, per UI-SPEC.
+
+    7. **Page header**: "Offerte" (h2, 20px/600, `#1a1a1a`) + "+ Nuova Offerta" button,
+       `flex items-center justify-between`.
+
+    All literal copy strings come from the UI-SPEC copywriting contract table verbatim
+    (Italian): "Offerte", "+ Nuova Offerta", "Mostra offerte archiviate", "Tutti",
+    "Nessuna offerta", "Inizia creando la tua prima offerta", "Archiviata", "Crea", "Nome
+    offerta...".
+  </action>
+  <verify>
+    <automated>cd /Users/simonecavalli/Vault/IAMCAVALLI && npx tsc --noEmit 2>&1 | tail -30 && npx eslint src/app/admin/offers/page.tsx src/components/admin/offers/OfferListClient.tsx 2>&1 | tail -30</automated>
+  </verify>
+  <acceptance_criteria>
+    - `npx tsc --noEmit` passes with zero errors (page.tsx + OfferListClient.tsx + rest of project)
+    - `npx eslint src/app/admin/offers/page.tsx src/components/admin/offers/OfferListClient.tsx` reports zero errors
+    - `grep -c "OfferListCard" src/components/admin/offers/OfferListClient.tsx` >= 1
+    - `grep -c "createOfferMacro" src/components/admin/offers/OfferListClient.tsx` >= 1
+    - `grep -c "admin/offers/\${" src/components/admin/offers/OfferListClient.tsx` >= 1 (card -> editor link)
+    - `grep -c "Mostra offerte archiviate\|Nessuna offerta\|Nuova Offerta" src/components/admin/offers/OfferListClient.tsx` >= 3 (UI-SPEC copy present)
+  </acceptance_criteria>
+  <done>OfferListClient renders the category-filterable, archive-aware card grid with working "+ Nuova Offerta" creation; page.tsx + OfferListClient.tsx typecheck and lint clean.</done>
+</task>
+
+</tasks>
+
+<threat_model>
+## Trust Boundaries
+
+| Boundary | Description |
+|----------|-------------|
+| Admin browser -> createOfferMacro (via "+ Nuova Offerta") | Free-text `internal_name` input crosses into a new `offer_macros` row |
+| Admin browser -> /admin/offers/[id]/edit links | Card `id` values are server-fetched (not user input) — links are safe by construction |
+
+## STRIDE Threat Register
+
+| Threat ID | Category | Component | Disposition | Mitigation Plan |
+|-----------|----------|-----------|-------------|-----------------|
+| T-12-10 | Tampering | "+ Nuova Offerta" inline form | accept | `createOfferMacro` (Plan 03) already calls `requireAdmin()` + Zod-validates `internal_name` non-empty; this plan only adds the UI trigger, no new validation surface |
+| T-12-11 | Information Disclosure | Offer list exposes `description`/`category`/`is_archived` for all offers | accept | Route is under `/admin/*`, Auth.js session-gated middleware (existing project-wide constraint); no change to access control in this plan |
+</threat_model>
+
+<verification>
+1. `npx tsc --noEmit` passes for the full project.
+2. `npx eslint` clean for both modified/created files.
+3. `/admin/offers` renders a card grid sourced from `getOfferListCards()`, with category filter chips from `getOfferFieldOptions().categoria` and an archive toggle (default off).
+4. "+ Nuova Offerta" creates a new `offer_macros` row via `createOfferMacro` and the new card appears after `router.refresh()`.
+5. Each card links to `/admin/offers/${id}/edit` (Plan 05's route — may 404 until Plan 05 lands, but the link target is correct).
+</verification>
+
+<success_criteria>
+- `/admin/offers` matches the UI-SPEC section 1 layout: header + CTA, category filter chips, archive toggle, card grid, empty state.
+- OFFER-18 satisfied: list filterable by category, archive toggle hides archived offers by default.
+- No legacy macro/micro CRUD forms remain on `/admin/offers`.
+</success_criteria>
+
+<output>
+After completion, create `.planning/phases/12-offer-composition-drag-drop-csv-import/12-04-SUMMARY.md`
+</output>

.planning/phases/12-offer-composition-drag-drop-csv-import/12-04-SUMMARY.md

@@ -0,0 +1,121 @@
+---
+phase: 12-offer-composition-drag-drop-csv-import
+plan: 04
+subsystem: ui
+tags: [next.js, react, tailwind, shadcn]
+
+# Dependency graph
+requires:
+  - phase: 12-offer-composition-drag-drop-csv-import (Plan 03)
+    provides: getOfferListCards(), getOfferFieldOptions(), createOfferMacro server action
+provides:
+  - "/admin/offers list page rewritten as category-filterable, archive-aware offer card grid (UI-SPEC section 1)"
+  - "OfferListClient component: category filter chips, archive toggle, '+ Nuova Offerta' inline create form, card grid linking to /admin/offers/[id]/edit"
+affects: [12-05-offer-editor-page]
+
+# Tech tracking
+tech-stack:
+  added: []
+  patterns:
+    - "Thin server-component list page (Promise.all fetch -> client component), mirroring src/app/admin/catalog/page.tsx"
+    - "useTransition + router.refresh() for FormData server-action create flow without returning the new row's id"
+
+key-files:
+  created:
+    - src/components/admin/offers/OfferListClient.tsx
+  modified:
+    - src/app/admin/offers/page.tsx
+
+key-decisions:
+  - "Legacy macro/micro/offer_services CRUD UI removed from /admin/offers entirely per D-1 and UI-SPEC section 1; underlying actions.ts exports (createMacro, createMicro, createOfferService, deleteMacro, deleteMicro, updateMicroOfferServices) left untouched and unreferenced — zero-risk dead exports, confirmed via grep no other usages exist"
+  - "Card grid links to /admin/offers/${id}/edit (Plan 05's route) — link target correct even though Plan 05 may not have landed yet at verification time"
+
+patterns-established:
+  - "'+ Nuova Offerta' inline create-form pattern: toggle visibility, startTransition(createOfferMacro(formData)), then router.refresh() — admin clicks the new card to open the editor (no auto-navigation, no id returned from the server action)"
+
+requirements-completed: [OFFER-18]
+
+# Metrics
+duration: 10min
+completed: 2026-06-15
+---
+
+# Phase 12 Plan 04: Offer List Page Redesign Summary
+
+**Rewrote `/admin/offers` from a legacy flat macro/micro/offer_services CRUD page into a category-filterable, archive-aware offer card grid with a "+ Nuova Offerta" inline creation flow, per UI-SPEC section 1.**
+
+## Performance
+
+- **Duration:** 10 min
+- **Started:** 2026-06-15T08:15:00Z (approx)
+- **Completed:** 2026-06-15T08:25:30Z
+- **Tasks:** 2 completed
+- **Files modified:** 2 (1 rewritten, 1 created)
+
+## Accomplishments
+
+- `src/app/admin/offers/page.tsx` rewritten as a thin server component: `Promise.all([getOfferListCards(), getOfferFieldOptions()])` feeding `OfferListClient`, matching the `catalog/page.tsx` pattern (239 lines of legacy macro/micro/offer_services CRUD forms removed)
+- New `src/components/admin/offers/OfferListClient.tsx`:
+  - Category filter chip row ("Tutti" + dynamic `categoryOptions`), active state `#1A463C` border/text, inactive `#e5e7eb`/`#71717a`
+  - "Mostra offerte archiviate" checkbox toggle (default off), filters via `useMemo` on `activeCategory` + `showArchived`
+  - Responsive card grid (1/2/3 columns) — each card is a `Link` to `/admin/offers/${card.id}/edit`, showing `internal_name`, `description` (line-clamp-2), category `Badge`, and red "Archiviata" text for archived offers
+  - Empty state: "Nessuna offerta" / "Inizia creando la tua prima offerta" + "+ Nuova Offerta" CTA
+  - "+ Nuova Offerta" header CTA toggles an inline form (`Input name="internal_name"` + "Crea" button); on submit calls `createOfferMacro` via `startTransition`, then `router.refresh()` — new card appears in the grid
+  - All literal copy strings verbatim from UI-SPEC copywriting contract table (Italian)
+
+## Task Commits
+
+Each task was committed atomically:
+
+1. **Task 1: Rewrite /admin/offers page.tsx as the new list page entry point** - `68dc1b6` (feat)
+2. **Task 2: Build OfferListClient — category filter, archive toggle, card grid, create CTA** - `7df4b9c` (feat)
+
+**Plan metadata:** (this commit, follows)
+
+## Files Created/Modified
+
+- `src/app/admin/offers/page.tsx` - Thin server component: fetches `getOfferListCards()` + `getOfferFieldOptions()`, renders `OfferListClient`
+- `src/components/admin/offers/OfferListClient.tsx` - Client component: category filter chips, archive toggle, responsive card grid, "+ Nuova Offerta" inline create form using `createOfferMacro`
+
+## Decisions Made
+
+- Removed all legacy macro/micro/offer_services CRUD UI from `/admin/offers` per D-1 and UI-SPEC section 1; confirmed via `grep -rn` that no other file in `src/app`/`src/components` references `createMacro`, `createMicro`, `createOfferService`, `deleteMacro`, `deleteMicro`, `toggleOfferServiceActive`, `getCatalogWithMicros`, `getAllOfferServices`, or `ServiceCheckboxList` outside the old page — these remain exported from `actions.ts`/`offer-queries.ts` as zero-risk dead code (per plan's explicit instruction not to remove them)
+- Used shadcn `Button`, `Badge`, and `Input` components for CTA, category badge, and create-form text input respectively, matching the project's existing component library usage in `CatalogSearch.tsx`
+
+## Deviations from Plan
+
+None - plan executed exactly as written. Both tasks implemented the documented component structure, state shape, filter logic, and copy strings verbatim.
+
+## Issues Encountered
+
+None.
+
+## User Setup Required
+
+None - no external service configuration required. Pure UI change consuming Plan 03's existing query/action exports.
+
+## Next Phase Readiness
+
+- `/admin/offers` now renders the new card-grid list per UI-SPEC section 1; OFFER-18 satisfied (category filter + archive toggle, default hides archived)
+- Each card links to `/admin/offers/${id}/edit` — Plan 05 builds this route in a parallel worktree; link target is correct regardless of Plan 05's landing order
+- `npx tsc --noEmit` passes with zero errors across the full project; `npx eslint` clean for both modified/created files
+- No legacy macro/micro/offer_services CRUD routes remain; underlying actions/queries left as unreferenced exports for future cleanup (out of this plan's scope)
+
+---
+
+*Phase: 12-offer-composition-drag-drop-csv-import*
+*Completed: 2026-06-15*
+
+## Self-Check: PASSED
+
+All created/modified files verified present on disk:
+
+- FOUND: src/app/admin/offers/page.tsx
+- FOUND: src/components/admin/offers/OfferListClient.tsx
+- FOUND: .planning/phases/12-offer-composition-drag-drop-csv-import/12-04-SUMMARY.md
+
+All task commits verified present in git log:
+
+- FOUND: 68dc1b6 (Task 1)
+- FOUND: 7df4b9c (Task 2)
+- FOUND: ca37126 (docs: plan summary)

.planning/phases/12-offer-composition-drag-drop-csv-import/12-05-PLAN.md

@@ -0,0 +1,463 @@
+---
+phase: 12
+plan: 05
+type: execute
+wave: 4
+depends_on: [1, 3]
+files_modified:
+  - src/app/admin/offers/[id]/edit/page.tsx
+  - src/components/admin/offers/OfferEditorClient.tsx
+autonomous: true
+requirements: [OFFER-11, OFFER-15, OFFER-16, OFFER-17]
+
+must_haves:
+  truths:
+    - "Admin can open /admin/offers/[id]/edit and see the offer's name, category/ticket chips, 4 tag dimensions, services matrix, transformation promise, and Salva/Annulla/Archivia actions"
+    - "Admin can select Categoria and Ticket (single-select), and add/remove Tipo and Obiettivo tags (multi-select, creatable on the fly) — OFFER-15"
+    - "Admin sees a service x tier (A/B/C) checkbox matrix pre-filtered to services matching the offer's category, with live-updating 'Totale Servizi' per tier as checkboxes toggle — OFFER-11"
+    - "Admin can enter an independent manual 'Prezzo Pubblico' per tier, separate from 'Totale Servizi' — OFFER-16"
+    - "Admin can edit 5 transformation-promise fields (Aiuto/A ottenere/In/Senza/Grazie a) — OFFER-17"
+    - "Clicking 'Salva Offerta' persists all changes (macro fields, tier data, tier-service assignments, tags) via saveOfferEditor and redirects to /admin/offers"
+    - "Clicking 'Archivia' toggles is_archived (with confirmation) via toggleOfferArchived"
+  artifacts:
+    - path: "src/app/admin/offers/[id]/edit/page.tsx"
+      provides: "Server component: fetches getOfferEditorData(id) + getOfferFieldOptions(), renders OfferEditorClient or notFound()"
+    - path: "src/components/admin/offers/OfferEditorClient.tsx"
+      provides: "Client component: editable name/category/ticket, 4-dimension tags, services matrix with live totals, transformation promise fields, Salva/Annulla/Archivia actions"
+      exports: ["OfferEditorClient"]
+  key_links:
+    - from: "src/components/admin/offers/OfferEditorClient.tsx (Salva Offerta)"
+      to: "saveOfferEditor server action (Plan 03)"
+      via: "useTransition + router.push('/admin/offers') on success"
+      pattern: "saveOfferEditor"
+    - from: "src/components/admin/offers/OfferEditorClient.tsx (services matrix)"
+      to: "OfferEditorData.tiers[].assignedServiceIds + availableServices"
+      via: "client-side state, checkbox toggles update local tier.assignedServiceIds, Totale Servizi recomputed via useMemo from unit_price sums"
+      pattern: "Totale Servizi|assignedServiceIds"
+    - from: "src/components/admin/offers/OfferEditorClient.tsx (Archivia)"
+      to: "toggleOfferArchived server action (Plan 03)"
+      via: "confirm dialog + useTransition + router.push('/admin/offers')"
+      pattern: "toggleOfferArchived"
+---
+
+<objective>
+Build the Offer Editor detail page at `/admin/offers/[id]/edit`: a full-page editor covering
+the offer's name/category/ticket, 4-dimension tags (Categoria/Ticket single-select,
+Tipo/Obiettivo multi-select creatable on the fly), the service x tier (A/B/C) checkbox
+matrix pre-filtered by category with live "Totale Servizi" totals, independent manual
+"Prezzo Pubblico" per tier, the 5-field transformation promise block, and
+Salva/Annulla/Archivia actions.
+
+Purpose: Deliver OFFER-11 (3-tier checkbox matrix with live totals), OFFER-15 (4-dimension
+tags), OFFER-16 (manual public price per tier), and OFFER-17 (structured transformation
+promise) per the locked UI-SPEC section 2 and CONTEXT.md decisions D-2 through D-5.
+Output: `src/app/admin/offers/[id]/edit/page.tsx` (new server component) and
+`src/components/admin/offers/OfferEditorClient.tsx` (new client component) implementing the
+full editor.
+</objective>
+
+<execution_context>
+@$HOME/.claude/get-shit-done/workflows/execute-plan.md
+@$HOME/.claude/get-shit-done/templates/summary.md
+</execution_context>
+
+<context>
+@.planning/PROJECT.md
+@.planning/STATE.md
+@.planning/phases/12-offer-composition-drag-drop-csv-import/12-UI-SPEC.md
+@src/components/admin/catalog/ServiceTable.tsx
+@src/components/ui/option-select.tsx
+@src/components/ui/option-multi-select.tsx
+@src/components/ui/editable-cell.tsx
+</context>
+
+<interfaces>
+<!-- From Plan 03 (src/lib/offer-queries.ts) — use directly, no further exploration needed. -->
+
+```typescript
+export type OfferTierData = {
+  id: string;
+  tier_letter: string | null;          // "A" | "B" | "C" | null
+  internal_name: string;
+  public_name: string;
+  duration_months: number;
+  public_price: string | null;          // numeric as string, e.g. "499.00"
+  assignedServiceIds: string[];
+  servicesTotal: string;                // pre-computed sum, numeric as string e.g. "350.00"
+};
+
+export type OfferEditorData = {
+  macro: OfferMacro;                    // includes id, internal_name, public_name, description,
+                                         // category, ticket, is_archived, cliente_ideale,
+                                         // risultato, tempo, pain, metodo (all from Plan 01 schema)
+  tiers: OfferTierData[];               // ordered A, B, C (0-3 entries)
+  availableServices: Array<{ id: string; name: string; unit_price: string; category: string | null }>;
+  tipoTags: string[];                   // current Tipo tag values for this offer
+  obiettivoTags: string[];              // current Obiettivo tag values for this offer
+};
+
+export async function getOfferEditorData(macroId: string): Promise<OfferEditorData | null>;
+
+export type OfferFieldOptions = { categoria: string[]; ticket: string[]; tipo: string[]; obiettivo: string[] };
+export async function getOfferFieldOptions(): Promise<OfferFieldOptions>;
+```
+
+<!-- From Plan 03 (src/app/admin/offers/actions.ts) — use directly. -->
+
+```typescript
+// Zod-validated; tiers array max 3, each tier has tier_letter "A"|"B"|"C",
+// internal_name, public_name, duration_months (int >= 1), public_price (number >= 0 | null),
+// assignedServiceIds (string[]). id optional per tier (omit for new tier, include to update).
+export type SaveOfferEditorPayload = {
+  internal_name: string;
+  public_name: string;
+  description?: string;
+  category?: string;
+  ticket?: string;
+  cliente_ideale?: string;
+  risultato?: string;
+  tempo?: string;
+  pain?: string;
+  metodo?: string;
+  tiers: Array<{
+    id?: string;
+    tier_letter: "A" | "B" | "C";
+    internal_name: string;
+    public_name: string;
+    duration_months: number;
+    public_price?: number | null;
+    assignedServiceIds: string[];
+  }>;
+  tipoTags: string[];
+  obiettivoTags: string[];
+};
+
+export async function saveOfferEditor(macroId: string, payload: SaveOfferEditorPayload): Promise<void>;
+export async function toggleOfferArchived(macroId: string, archived: boolean): Promise<void>;
+export async function addOfferTag(dimension: "tipo" | "obiettivo", macroId: string, value: string): Promise<void>;
+export async function removeOfferTag(dimension: "tipo" | "obiettivo", macroId: string, value: string): Promise<void>;
+export async function renameOfferOption(field: "categoria" | "ticket" | "tipo" | "obiettivo", oldValue: string, newValue: string): Promise<void>;
+```
+
+<!-- From src/components/ui/option-select.tsx and option-multi-select.tsx — use directly for
+Categoria/Ticket (single-select) and Tipo/Obiettivo (multi-select) dimension rows. -->
+
+```typescript
+export interface OptionSelectProps {
+  value: string | null;
+  options: string[];
+  onChange: (value: string | null) => void;
+  onRename?: (oldValue: string, newValue: string) => void;
+  placeholder?: string;
+  disabled?: boolean;
+}
+export function OptionSelect(props: OptionSelectProps): JSX.Element;
+
+export interface OptionMultiSelectProps {
+  values: string[];
+  options: string[];
+  onAdd: (value: string) => void;
+  onRemove: (value: string) => void;
+  onRename?: (oldValue: string, newValue: string) => void;
+  placeholder?: string;
+  disabled?: boolean;
+}
+export function OptionMultiSelect(props: OptionMultiSelectProps): JSX.Element;
+```
+
+<!-- From src/components/ui/editable-cell.tsx — use directly for Offerta Name and
+transformation-promise fields. -->
+
+```typescript
+export interface EditableCellProps {
+  value: string;
+  type?: "text" | "number";
+  onSave: (value: string) => void | Promise<void>;
+  required?: boolean;
+  placeholder?: string;
+  disabled?: boolean;
+  formatDisplay?: (value: string) => string;
+}
+export function EditableCell(props: EditableCellProps): JSX.Element;
+```
+</interfaces>
+
+<tasks>
+
+<task type="auto">
+  <name>Task 1: Create editor route + page.tsx server component</name>
+  <files>src/app/admin/offers/[id]/edit/page.tsx</files>
+  <read_first>
+    - src/app/admin/offers/page.tsx (current, post-Plan-04 — server component fetch pattern)
+    - src/lib/offer-queries.ts (Plan 03 — getOfferEditorData, getOfferFieldOptions signatures, confirm null-handling)
+  </read_first>
+  <action>
+    Create `src/app/admin/offers/[id]/edit/page.tsx` as a server component (Next.js 16 App
+    Router, async `params`):
+
+    ```typescript
+    import { notFound } from "next/navigation";
+    import { getOfferEditorData, getOfferFieldOptions } from "@/lib/offer-queries";
+    import { OfferEditorClient } from "@/components/admin/offers/OfferEditorClient";
+
+    export const revalidate = 0;
+
+    export default async function OfferEditPage({
+      params,
+    }: {
+      params: Promise<{ id: string }>;
+    }) {
+      const { id } = await params;
+      const [data, options] = await Promise.all([
+        getOfferEditorData(id),
+        getOfferFieldOptions(),
+      ]);
+
+      if (!data) {
+        notFound();
+      }
+
+      return <OfferEditorClient data={data} fieldOptions={options} />;
+    }
+    ```
+
+    Use the Next.js 16 async `params` pattern (consistent with other dynamic routes in this
+    project — confirm by checking an existing `[id]` route if one exists, e.g. under
+    `/admin/leads/[id]` from Phase 14, otherwise this signature is correct for Next 16 App
+    Router).
+  </action>
+  <verify>
+    <automated>cd /Users/simonecavalli/Vault/IAMCAVALLI && grep -c "getOfferEditorData\|getOfferFieldOptions\|OfferEditorClient\|notFound" src/app/admin/offers/\[id\]/edit/page.tsx</automated>
+  </verify>
+  <acceptance_criteria>
+    - File exists at `src/app/admin/offers/[id]/edit/page.tsx`
+    - Server component (no `"use client"` directive)
+    - Calls `getOfferEditorData(id)` and `getOfferFieldOptions()` via `Promise.all`
+    - Calls `notFound()` when `data === null`
+    - Renders `<OfferEditorClient data={data} fieldOptions={options} />`
+  </acceptance_criteria>
+  <done>page.tsx exists, fetches editor data + field options, handles not-found, delegates to OfferEditorClient.</done>
+</task>
+
+<task type="auto" tdd="false">
+  <name>Task 2: Build OfferEditorClient — tags, services matrix with live totals, promise block, actions</name>
+  <files>src/components/admin/offers/OfferEditorClient.tsx</files>
+  <read_first>
+    - src/components/admin/catalog/ServiceTable.tsx (EditableCell/OptionSelect/OptionMultiSelect
+      usage patterns, table layout conventions)
+    - .planning/phases/12-offer-composition-drag-drop-csv-import/12-UI-SPEC.md section 2 (full
+      editor layout, color tokens, copywriting contract table, visual states)
+  </read_first>
+  <action>
+    Create `src/components/admin/offers/OfferEditorClient.tsx`:
+
+    ```typescript
+    "use client";
+    import { useState, useMemo, useTransition } from "react";
+    import { useRouter } from "next/navigation";
+    import Link from "next/link";
+    import {
+      saveOfferEditor,
+      toggleOfferArchived,
+      addOfferTag,
+      removeOfferTag,
+      renameOfferOption,
+      type SaveOfferEditorPayload,
+    } from "@/app/admin/offers/actions";
+    import { OptionSelect } from "@/components/ui/option-select";
+    import { OptionMultiSelect } from "@/components/ui/option-multi-select";
+    import { EditableCell } from "@/components/ui/editable-cell";
+    import type { OfferEditorData, OfferFieldOptions } from "@/lib/offer-queries";
+
+    export function OfferEditorClient({
+      data,
+      fieldOptions,
+    }: {
+      data: OfferEditorData;
+      fieldOptions: OfferFieldOptions;
+    }) {
+      // ... implementation below
+    }
+    ```
+
+    Implementation requirements (per UI-SPEC section 2 + copywriting contract table — all
+    literal strings verbatim Italian):
+
+    1. **Local editable state** (all derived from `data` on mount, no re-fetch on change):
+       - `macro` fields: `internal_name`, `public_name`, `description`, `category`,
+         `ticket`, `cliente_ideale`, `risultato`, `tempo`, `pain`, `metodo` — each as
+         individual `useState<string>` or one combined `useState<typeof initialMacro>`
+         object updated via spread.
+       - `tiers: OfferTierData[]` state, seeded from `data.tiers`. If `data.tiers.length <
+         3`, pad to exactly 3 tiers (A, B, C) with empty placeholders: `{ id: "", tier_letter:
+         "A"|"B"|"C", internal_name: "", public_name: "", duration_months: 1, public_price:
+         null, assignedServiceIds: [], servicesTotal: "0" }` for any missing letter, so the
+         matrix always renders 3 columns.
+       - `tipoTags: string[]`, `obiettivoTags: string[]` state, seeded from
+         `data.tipoTags`/`data.obiettivoTags`.
+       - `categoriaOptions`/`ticketOptions`/`tipoOptions`/`obiettivoOptions` from
+         `fieldOptions`, kept in local state so `renameOfferOption` can update them
+         optimistically.
+
+    2. **Header & navigation**:
+       - "← Indietro" link (text, `#71717a`) -> `Link href="/admin/offers"`.
+       - "Modifica Offerta" as h2 (20px/600).
+       - Offer name as `EditableCell` (text, required) bound to `macro.internal_name`, styled
+         as h3 (16px/600).
+
+    3. **Tags block** ("Tag" h3 section label, 16px between rows):
+       - **Categoria** row: label "Categoria" (12px/400, `#71717a`) + `<OptionSelect
+         value={macro.category} options={categoriaOptions} onChange={...} onRename={(old,
+         next) => { renameOfferOption("categoria", old, next); /* update local options +
+         macro.category if it matched old */ }} placeholder="Seleziona categoria..." />`.
+         When `macro.category` changes, the services matrix (step 5) must re-filter
+         `availableServices` by the new category (D-4) — implement via `useMemo` keyed on
+         `macro.category`.
+       - **Ticket** row: same pattern with `macro.ticket` / `ticketOptions` /
+         `renameOfferOption("ticket", ...)`, placeholder "Seleziona ticket...".
+       - **Tipo** row: label "Tipo" + `<OptionMultiSelect values={tipoTags}
+         options={tipoOptions} onAdd={(v) => { setTipoTags([...tipoTags, v]); if
+         (!tipoOptions.includes(v)) setTipoOptions([...tipoOptions, v]); }}
+         onRemove={(v) => setTipoTags(tipoTags.filter(t => t !== v))}
+         onRename={(old, next) => renameOfferOption("tipo", old, next)} placeholder="+ Crea
+         Tipo" />`. Tag additions/removals are tracked in local state only and persisted on
+         "Salva Offerta" via `tipoTags` in the payload — do NOT call `addOfferTag`/
+         `removeOfferTag` on every click (avoids partial-save inconsistency); these two
+         actions exist for potential future inline-only flows but this editor batches via
+         `saveOfferEditor`.
+       - **Obiettivo** row: same pattern as Tipo, using `obiettivoTags`/`obiettivoOptions`,
+         placeholder "+ Crea Obiettivo".
+
+    4. **Services matrix** ("Servizi Inclusi" h3 section label):
+       - `filteredServices = useMemo(() => macro.category ? data.availableServices.filter(s
+         => s.category === macro.category) : data.availableServices, [macro.category,
+         data.availableServices])`.
+       - Table: header row "Servizio" (left) | "Prezzo" (right-aligned) | "A" | "B" | "C"
+         (centered), header bg `#f9f9f9`, border-bottom `#e5e7eb`.
+       - One row per `filteredServices` item: service `name` (left), `unit_price` formatted
+         as "€X,XX" (right-aligned, tabular-nums), then one `<input type="checkbox">` per
+         tier (A/B/C), checked if `tiers[tierIdx].assignedServiceIds.includes(service.id)`.
+         On change: toggle the service id in/out of that tier's `assignedServiceIds` array
+         (immutable update via `setTiers`). Checkbox accent color `#1A463C` (use
+         `accent-[#1A463C]` Tailwind class or inline style `accentColor: "#1A463C"`). Row
+         height ~40px, hover bg `#f9f9f9`, border-bottom `#e5e7eb`.
+       - If `filteredServices.length === 0`: render a single placeholder row spanning all
+         columns with text "Nessun servizio disponibile per questa categoria" (`#71717a`),
+         table headers still visible.
+       - **Totale Servizi row** (sticky/bold, bottom of table, computed via `useMemo`):
+         label "Totale Servizi" (bold 14px/600, `#1a1a1a`), then per tier:
+         `tiers[i].assignedServiceIds.reduce((sum, id) => sum +
+         Number(filteredServices.find(s => s.id === id)?.unit_price ?? 0), 0)` formatted as
+         "€X.XXX,XX" (Italian locale, e.g. `toLocaleString("it-IT", { minimumFractionDigits:
+         2, maximumFractionDigits: 2 })`). Recomputes instantly on every checkbox toggle (no
+         network call) — this is the OFFER-11 live-total requirement.
+       - **Prezzo Pubblico row** (bold label, bottom of table, below Totale Servizi): label
+         "Prezzo Pubblico" (bold 14px/600), then per tier an `<input type="number" min="0"
+         step="0.01">` bound to `tiers[i].public_price` (string | null -> controlled value
+         `tiers[i].public_price ?? ""`), placeholder "€0,00". On change, update
+         `tiers[i].public_price` in state (store as string; convert to number on save).
+         Independent of Totale Servizi (D-5) — no auto-sync between the two rows.
+
+    5. **Transformation Promise block** ("Promessa di Trasformazione" h3 section label, 16px
+       gap between fields): 5 rows, each `label (12px/400, #71717a) + EditableCell(text,
+       optional)`:
+       - "Aiuto" -> `macro.cliente_ideale`, placeholder "Aggiungi cliente ideale"
+       - "A ottenere" -> `macro.risultato`, placeholder "Aggiungi risultato"
+       - "In" -> `macro.tempo`, placeholder "Aggiungi durata (es. 3 mesi)"
+       - "Senza" -> `macro.pain`, placeholder "Aggiungi pain point"
+       - "Grazie a" -> `macro.metodo`, placeholder "Aggiungi metodo"
+       All optional (no `required` prop), `onSave` updates the corresponding `macro.*` state
+       field.
+
+    6. **Action buttons** (bottom, 8px gap):
+       - **"Salva Offerta"** (primary, bg `#1A463C`, text white, 14px/600, padding `16px
+         24px`): disabled if NO tier has `assignedServiceIds.length > 0` (tooltip "Seleziona
+         almeno un servizio" via `title` attribute when disabled). On click:
+         `startTransition(async () => { const payload: SaveOfferEditorPayload = { ...macro
+         fields, tiers: tiers.map(t => ({ id: t.id || undefined, tier_letter: t.tier_letter,
+         internal_name: t.internal_name || t.tier_letter (e.g. "Tier A"), public_name:
+         t.public_name || t.tier_letter, duration_months: t.duration_months || 1,
+         public_price: t.public_price ? Number(t.public_price) : null, assignedServiceIds:
+         t.assignedServiceIds })), tipoTags, obiettivoTags }; try { await
+         saveOfferEditor(data.macro.id, payload); router.push("/admin/offers"); } catch (e) {
+         /* show inline error text "Errore nel salvataggio. Verifica i campi." */ } })`.
+       - **"Annulla"** (secondary, border `#e5e7eb`, text `#1a1a1a`): `Link
+         href="/admin/offers"` — no dirty-check confirmation in this iteration (acceptable
+         simplification per UI-SPEC note "Auto-save optional (planner decides)" — explicit
+         Salva is the persistence model, Annulla is a plain navigation link).
+       - **"Archivia"** (destructive, text `#dc2626`, no fill), visible only if
+         `!macro_initial.is_archived` (track initial archived state separately from any
+         local toggle): on click, `window.confirm("Sei sicuro? L'offerta non sarà visibile
+         nella lista.")`, if confirmed `startTransition(async () => { await
+         toggleOfferArchived(data.macro.id, true); router.push("/admin/offers"); })`.
+
+    All literal copy strings (Italian) per the UI-SPEC copywriting contract table: "←
+    Indietro", "Modifica Offerta", "Tag", "Categoria", "Ticket", "Tipo", "Obiettivo", "+ Crea
+    Tipo", "+ Crea Obiettivo", "Servizi Inclusi", "Servizio", "Prezzo", "A", "B", "C",
+    "Totale Servizi", "Prezzo Pubblico", "Promessa di Trasformazione", "Aiuto", "A
+    ottenere", "In", "Senza", "Grazie a", "Salva Offerta", "Annulla", "Archivia", "Sei
+    sicuro? L'offerta non sarà visibile nella lista.", "Nessun servizio disponibile per
+    questa categoria", "Errore nel salvataggio. Verifica i campi.", "Seleziona almeno un
+    servizio".
+  </action>
+  <verify>
+    <automated>cd /Users/simonecavalli/Vault/IAMCAVALLI && npx tsc --noEmit 2>&1 | tail -30 && npx eslint src/app/admin/offers/\[id\]/edit/page.tsx src/components/admin/offers/OfferEditorClient.tsx 2>&1 | tail -30</automated>
+  </verify>
+  <acceptance_criteria>
+    - `npx tsc --noEmit` passes with zero errors for the full project
+    - `npx eslint src/app/admin/offers/[id]/edit/page.tsx src/components/admin/offers/OfferEditorClient.tsx` reports zero errors
+    - `grep -c "saveOfferEditor\|toggleOfferArchived" src/components/admin/offers/OfferEditorClient.tsx` >= 2
+    - `grep -c "OptionSelect\|OptionMultiSelect" src/components/admin/offers/OfferEditorClient.tsx` >= 2 (Categoria/Ticket via OptionSelect, Tipo/Obiettivo via OptionMultiSelect)
+    - `grep -c "Totale Servizi\|Prezzo Pubblico" src/components/admin/offers/OfferEditorClient.tsx` >= 2
+    - `grep -c "Promessa di Trasformazione\|cliente_ideale\|risultato\|tempo\|pain\|metodo" src/components/admin/offers/OfferEditorClient.tsx` >= 6
+    - `grep -c "type=\"checkbox\"" src/components/admin/offers/OfferEditorClient.tsx` >= 1
+    - `grep -c "Nessun servizio disponibile per questa categoria" src/components/admin/offers/OfferEditorClient.tsx` == 1
+  </acceptance_criteria>
+  <done>OfferEditorClient renders the full editor per UI-SPEC section 2: tags (4 dimensions), category-filtered services matrix with live Totale Servizi + independent Prezzo Pubblico per tier, transformation promise block, and working Salva/Annulla/Archivia actions; project typechecks and lints clean.</done>
+</task>
+
+</tasks>
+
+<threat_model>
+## Trust Boundaries
+
+| Boundary | Description |
+|----------|-------------|
+| Admin browser -> saveOfferEditor | Free-text macro fields, tier data, service-id arrays, and tag arrays cross into `offer_macros`/`offer_micros`/`offer_tier_services`/`tags` rows |
+| Admin browser -> toggleOfferArchived | Boolean flag crosses into `offer_macros.is_archived` |
+| URL param `[id]` -> getOfferEditorData | Route param crosses into a DB lookup; returns `null` (404) for unknown/foreign ids |
+
+## STRIDE Threat Register
+
+| Threat ID | Category | Component | Disposition | Mitigation Plan |
+|-----------|----------|-----------|-------------|-----------------|
+| T-12-12 | Tampering | "Salva Offerta" payload (tier_letter, public_price, assignedServiceIds, tag arrays) | mitigate | `saveOfferEditor` (Plan 03) Zod-validates `tier_letter` against `z.enum(["A","B","C"])`, `public_price` against `z.coerce.number().min(0)`, and the CHECK constraint on `offer_micros.tier_letter` (Plan 01) provides DB-level defense in depth |
+| T-12-13 | Tampering | `assignedServiceIds` referencing services outside the offer's category or inactive services | accept | `availableServices` is server-fetched and category-filtered (D-4); a malicious client could submit arbitrary service ids in the payload, but `offer_tier_services` has FK `ON DELETE CASCADE` to `services.id` (Plan 01) — invalid ids fail the FK constraint, no data corruption possible; low-value target (admin-only route) |
+| T-12-14 | Elevation of Privilege | All editor mutations (`saveOfferEditor`, `toggleOfferArchived`, `renameOfferOption`) | mitigate | Plan 03 wraps every action in `requireAdmin()`; this plan adds no new server-side surface, only UI calling the already-gated actions |
+| T-12-15 | Information Disclosure | `/admin/offers/[id]/edit` exposes full offer internals (internal_name, all tier data, transformation promise) | accept | Route is under `/admin/*`, Auth.js session-gated middleware (existing project-wide constraint); consistent with Plan 04's list page disposition (T-12-11) |
+| T-12-16 | Denial of Service | Unbounded `[id]` route param triggers a DB query for every request | accept | `getOfferEditorData` returns `null` -> `notFound()` for any non-matching id; standard Next.js 404 handling, no amplification risk on an admin-only route |
+</threat_model>
+
+<verification>
+1. `npx tsc --noEmit` passes for the full project.
+2. `npx eslint` clean for both modified/created files.
+3. `/admin/offers/[id]/edit` renders the offer name, Categoria/Ticket single-select chips, Tipo/Obiettivo multi-select chips (with "+ Crea Tipo"/"+ Crea Obiettivo" inline creation), and the services matrix pre-filtered by `macro.category`.
+4. Toggling a service checkbox in any tier column instantly updates that tier's "Totale Servizi" value (client-side, no network call).
+5. Entering a value in "Prezzo Pubblico" for a tier does not affect "Totale Servizi" for that tier (independent fields, D-5).
+6. All 5 transformation-promise fields (Aiuto/A ottenere/In/Senza/Grazie a) are editable via EditableCell and map to `cliente_ideale`/`risultato`/`tempo`/`pain`/`metodo`.
+7. "Salva Offerta" is disabled (with tooltip) when no tier has any assigned service; when enabled, clicking it calls `saveOfferEditor` and navigates back to `/admin/offers`.
+8. "Archivia" (visible only for non-archived offers) prompts for confirmation, then calls `toggleOfferArchived(id, true)` and navigates back to `/admin/offers`.
+9. "Annulla" navigates back to `/admin/offers` without persisting changes.
+</verification>
+
+<success_criteria>
+- `/admin/offers/[id]/edit` matches the UI-SPEC section 2 layout: header/back-link, name + tag dimensions, category-filtered services matrix with live totals and independent public price, transformation promise block, and Salva/Annulla/Archivia actions.
+- OFFER-11 satisfied: 3-tier (A/B/C) checkbox matrix with live "Totale Servizi" recalculation.
+- OFFER-15 satisfied: Categoria/Ticket single-select, Tipo/Obiettivo multi-select with on-the-fly creation, all backed by `getOfferFieldOptions`/`renameOfferOption`/`saveOfferEditor`.
+- OFFER-16 satisfied: "Prezzo Pubblico" per tier is a manual numeric input independent of "Totale Servizi".
+- OFFER-17 satisfied: all 5 transformation-promise fields editable and persisted via `saveOfferEditor`.
+</success_criteria>
+
+<output>
+After completion, create `.planning/phases/12-offer-composition-drag-drop-csv-import/12-05-SUMMARY.md`
+</output>

.planning/phases/12-offer-composition-drag-drop-csv-import/12-05-SUMMARY.md

@@ -0,0 +1,120 @@
+---
+phase: 12-offer-composition-drag-drop-csv-import
+plan: 05
+subsystem: ui
+tags: [next.js, react, tailwind, server-actions, drizzle]
+
+# Dependency graph
+requires:
+  - phase: 12-offer-composition-drag-drop-csv-import (Plan 03)
+    provides: getOfferEditorData/getOfferFieldOptions query layer + saveOfferEditor/toggleOfferArchived/renameOfferOption/addOfferTag/removeOfferTag server actions
+provides:
+  - "/admin/offers/[id]/edit route: full offer editor page (server component + client component)"
+  - OfferEditorClient — editable name, Categoria/Ticket/Tipo/Obiettivo tags, services x tier (A/B/C) checkbox matrix with live totals, independent Prezzo Pubblico, Promessa di Trasformazione block, Salva/Annulla/Archivia actions
+affects: [12-04-offer-list-page]
+
+# Tech tracking
+tech-stack:
+  added: []
+  patterns:
+    - "Tier padding to exactly 3 (A/B/C) via padTiers() so the matrix always renders 3 columns even for offers with <3 persisted tiers"
+    - "Client-side useMemo for category-filtered services + live per-tier Totale Servizi (OFFER-11), zero network calls on checkbox toggle"
+    - "Batched save: all macro/tier/tag edits held in local state, persisted in one saveOfferEditor() call on 'Salva Offerta' (no per-keystroke server calls for tags)"
+
+key-files:
+  created:
+    - src/app/admin/offers/[id]/edit/page.tsx
+    - src/components/admin/offers/OfferEditorClient.tsx
+  modified: []
+
+key-decisions:
+  - "EditableCell.onSave is synchronous (value: string) => void in this codebase (not Promise-returning as the plan's interface sketch suggested) — all macro-field onSave handlers call setMacro synchronously, consistent with the actual component signature"
+  - "renameOfferOption calls (Categoria/Ticket/Tipo/Obiettivo rename) are fired via startTransition with optimistic local-state updates to options/tags, matching ServiceTable's existing rename pattern from Phase 11"
+
+patterns-established: []
+
+requirements-completed: [OFFER-11, OFFER-15, OFFER-16, OFFER-17]
+
+# Metrics
+duration: 18min
+completed: 2026-06-15
+---
+
+# Phase 12 Plan 05: Offer Editor Detail Page Summary
+
+**Full-page Offer Editor at `/admin/offers/[id]/edit`: 4-dimension tags, category-filtered A/B/C services checkbox matrix with live "Totale Servizi", independent "Prezzo Pubblico" per tier, 5-field transformation promise, and Salva/Annulla/Archivia actions.**
+
+## Performance
+
+- **Duration:** 18 min
+- **Started:** 2026-06-15T08:07:00Z (approx)
+- **Completed:** 2026-06-15T08:25:22Z
+- **Tasks:** 2 completed
+- **Files modified:** 2 (both new)
+
+## Accomplishments
+
+- Created `src/app/admin/offers/[id]/edit/page.tsx`: async server component using Next.js 16's `Promise<{ id: string }>` params pattern, fetches `getOfferEditorData(id)` + `getOfferFieldOptions()` via `Promise.all`, calls `notFound()` for unknown ids, delegates to `OfferEditorClient`
+- Created `src/components/admin/offers/OfferEditorClient.tsx`: client component covering the full UI-SPEC section 2 contract:
+  - Header with "← Indietro" link, "Modifica Offerta" heading, editable offer name via `EditableCell`
+  - "Tag" section: Categoria/Ticket via `OptionSelect` (single-select, with rename), Tipo/Obiettivo via `OptionMultiSelect` (multi-select, creatable on the fly via "+ Crea Tipo"/"+ Crea Obiettivo")
+  - "Servizi Inclusi" matrix: services filtered by `macro.category` (live-recomputed via `useMemo` when Categoria changes), one checkbox column per tier (A/B/C), "Totale Servizi" row recalculated instantly client-side on every toggle (OFFER-11), independent "Prezzo Pubblico" numeric input per tier (OFFER-16, D-5)
+  - "Promessa di Trasformazione" block: 5 `EditableCell` fields (Aiuto/A ottenere/In/Senza/Grazie a) mapped to `cliente_ideale`/`risultato`/`tempo`/`pain`/`metodo` (OFFER-17)
+  - "Salva Offerta" (disabled with tooltip unless at least one tier has an assigned service) → `saveOfferEditor` → redirect to `/admin/offers`; "Annulla" → plain link back; "Archivia" (visible only when not already archived) → confirm dialog → `toggleOfferArchived(id, true)` → redirect
+- All literal Italian copy strings from the UI-SPEC copywriting contract table implemented verbatim
+
+## Task Commits
+
+Each task was committed atomically:
+
+1. **Task 1: Create editor route + page.tsx server component** - `8e0e4b9` (feat)
+2. **Task 2: Build OfferEditorClient — tags, services matrix with live totals, promise block, actions** - `8c5c918` (feat)
+
+**Plan metadata:** (this commit, follows)
+
+## Files Created/Modified
+
+- `src/app/admin/offers/[id]/edit/page.tsx` - New server component: fetches editor data + field options, 404s on missing offer, renders `OfferEditorClient`
+- `src/components/admin/offers/OfferEditorClient.tsx` - New client component: the entire offer editor UI and its Salva/Annulla/Archivia/rename interactions
+
+## Decisions Made
+
+- `EditableCell.onSave` in this codebase is `(value: string) => void` (synchronous), not `(value: string) => void | Promise<void>` as the plan's interface sketch suggested — implemented all macro-field handlers as synchronous `setMacro` updates, matching the real signature (verified via `npx tsc --noEmit`)
+- Tier padding: `padTiers()` always produces exactly 3 entries (A, B, C), filling missing tiers with empty placeholders (`id: ""`, `assignedServiceIds: []`, `servicesTotal: "0"`) so the matrix always renders 3 columns regardless of how many tiers exist in the DB
+- Tag rename (Categoria/Ticket/Tipo/Obiettivo) follows the existing `ServiceTable`/`renameServiceOption` optimistic-update pattern: local state updates immediately, `renameOfferOption` server action fires via `startTransition`
+
+## Deviations from Plan
+
+None - plan executed exactly as written. The only adjustment was using the actual (synchronous) `EditableCell.onSave` signature instead of the plan's sketch signature, which is a same-behavior implementation detail (Rule 1 — code correctness), not a scope change.
+
+## Issues Encountered
+
+None.
+
+## User Setup Required
+
+None - no external service configuration required. This plan is pure UI (server + client components) consuming the already-deployed Plan 03 query layer and server actions against the live production schema (migration 0008).
+
+## Next Phase Readiness
+
+- `/admin/offers/[id]/edit` is fully functional and type-checks/lints clean across the whole project (`npx tsc --noEmit` and `npx eslint` both pass with zero errors)
+- Plan 04's list page (`/admin/offers` + `OfferListClient.tsx`, built in parallel in a separate worktree) can link directly to `/admin/offers/[id]/edit` — no shared files were touched, no merge conflicts expected
+- All four target requirements (OFFER-11, OFFER-15, OFFER-16, OFFER-17) are implemented end-to-end: UI -> `saveOfferEditor`/`toggleOfferArchived`/`renameOfferOption` (Plan 03) -> `offer_macros`/`offer_micros`/`offer_tier_services`/`tags` (Plan 01/02, live on prod)
+
+---
+
+*Phase: 12-offer-composition-drag-drop-csv-import*
+*Completed: 2026-06-15*
+
+## Self-Check: PASSED
+
+All created files verified present on disk:
+
+- FOUND: src/app/admin/offers/[id]/edit/page.tsx
+- FOUND: src/components/admin/offers/OfferEditorClient.tsx
+- FOUND: .planning/phases/12-offer-composition-drag-drop-csv-import/12-05-SUMMARY.md
+
+All task commits verified present in git log:
+
+- FOUND: 8e0e4b9 (Task 1)
+- FOUND: 8c5c918 (Task 2)

.planning/phases/12-offer-composition-drag-drop-csv-import/12-CONTEXT.md

@@ -0,0 +1,91 @@
+---
+phase: 12
+phase_name: offer-editor-tier-tag-prezzo-pubblico
+source: user mockups + decisions (2026-06-14)
+status: decisions-locked
+---
+
+# Phase 12 — Context (User Decisions)
+
+> Catturato da 2 mockup utente + risposte dirette il 2026-06-14. Questo documento è
+> **autorevole** per il planner: dove confligge con la roadmap originale ("drag&drop + CSV"),
+> vince questo. La Phase 12 è stata **ri-scoped** da "Offer Composition Drag&Drop & CSV Import"
+> a **"Offer Editor — Tier A/B/C, Tag & Prezzo Pubblico"**.
+
+## Decisioni bloccate
+
+| # | Decisione | Valore |
+|---|-----------|--------|
+| D-1 | Scope | Editor offerte completo (lista + dettaglio). Import CSV/Notion (ex OFFER-12) **rimandato** a fase futura. |
+| D-2 | UX composizione tier | **Matrice di checkbox** servizio × tier (A/B/C), NON drag&drop puro. Totale servizi live per colonna/tier. `@dnd-kit` usato solo (eventualmente) per riordinare le righe. |
+| D-3 | Fonte servizi | Catalogo unificato `services` (Phase 11), **non** il legacy `offer_services`. |
+| D-4 | Filtro servizi per categoria | Il servizio porta già, a livello di catalogo, la designazione di categoria offerta (entry / signature / retainer). L'editor mostra/pre-filtra nella matrice i servizi pertinenti alla categoria dell'offerta in modifica. |
+| D-5 | Prezzo | Per ogni tier: **Totale servizi** (auto-somma dei servizi spuntati) + **Prezzo Pubblico** (manuale, indipendente). Coerente con la decisione PROJECT.md "prezzi pacchetti per-preventivo, non da catalogo". |
+| D-6 | Schema | **Solo additivo** (Data Safety LOCKED). Riusare le tabelle offerte esistenti, non ricostruire. |
+
+## Modello dati (intento — il planner produce la migration esatta)
+
+Mappatura mockup → schema esistente (`src/db/schema.ts`):
+
+- **Offerta** → `offer_macros` (esiste: `internal_name`, `public_name`, `transformation_promise`, `sort_order`).
+  Aggiunte additive previste: descrizione breve, flag `is_archived`, campi strutturati della
+  promessa di trasformazione (Cliente Ideale / Risultato / tempo / Pain / Metodo).
+- **Tier A/B/C** → `offer_micros` (esiste: `macro_id`, `cumulative_price`, `duration_months`, ...).
+  Aggiunte additive previste: lettera tier (`A`|`B`|`C`) e `public_price` (prezzo pubblico manuale).
+  Un'offerta = una macro con (fino a) 3 micro-tier.
+- **Matrice servizi × tier** → junction tier ↔ `services`. La junction legacy `offer_micro_services`
+  punta a `offer_services`; **non modificarla**. Approccio additivo consigliato: **nuova tabella di
+  junction** (es. `offer_tier_services`: tier_id → `offer_micros.id`, service_id → `services.id`) così
+  da non toccare dati legacy e agganciare il catalogo unificato. Il planner decide il nome/struttura
+  esatti; deve restare additivo.
+- **Tag multi-dimensione** (categoria / ticket / tipo / obiettivo) → riusare la tabella polimorfica
+  `tags` (`entity_type`, `entity_id`, `name`) di Phase 11 con `entity_type = "offer_macros"` (o simile).
+  Le 4 dimensioni vanno distinte: il planner valuta se serve un campo `dimension` additivo sulla
+  tabella `tags`, oppure colonne single-select dedicate su `offer_macros` per categoria/ticket (singole)
+  + tag multipli per tipo/obiettivo. Da chiarire in research; resta additivo.
+- **Designazione categoria del servizio** (entry/signature/retainer, D-4): verificare se va su
+  `services.category` (single-select già esistente), su un tag, o su una nuova colonna additiva
+  dedicata. NON sovrascrivere la semantica attuale di `services.category`/`services.fase` se già usata
+  diversamente in `/admin/catalog` — il planner verifica l'uso corrente prima di scegliere.
+
+## UI (riferimento mockup)
+
+**Lista offerte** (`/admin/offers` ridisegnata): card filtrabili per categoria (Entry / Signature /
+Retainer Offer come chip colorati), ogni card = nome custom + breve descrizione + chip categoria;
+toggle "mostra offerte archiviate"; bottone "+ Nuova Offerta".
+
+**Editor offerta**: nome custom editabile in alto; chip Categoria + Ticket; chip Tipo (Audit /
+Done For You) e Obiettivo (Primo Acquisto / Up Scala Valore / Lead Generation); tabella "servizi
+inclusi" con colonne A / B / C e checkbox per cella, prezzo del servizio a sinistra; riga "Totale dei
+servizi" (auto) e "Prezzo Pubblico" (manuale) per ogni tier; blocco "Promessa di Trasformazione"
+strutturato (Aiuto Cliente Ideale / A ottenere Risultato / in tempo / Senza Pain / Grazie a Metodo);
+bottone "Salva Offerta".
+
+Stile: continuità con Phase 11 (vista database Notion-like, palette brand #1A463C / #DEF168, EditableCell,
+OptionMultiSelect/tag, server actions `requireAdmin`-guarded). Vedi `12-UI-SPEC.md` (da rigenerare su
+questo scope).
+
+## Vincoli (da CLAUDE.md / PROJECT.md)
+
+- **Data Safety LOCKED**: migration solo additive su `clients`/`projects`/`payments`/`phases`; nessun
+  drop/truncate. Anche le tabelle offerte vanno estese, non ricostruite.
+- **Migration manuali**: `drizzle-kit generate` è non funzionante (snapshot fuori sync da migration 0001) —
+  scrivere SQL a mano seguendo la convenzione 0003-0007. Applicare a **prod** via SSH+docker exec
+  **PRIMA** di pushare codice che dipende dal nuovo schema (DB prod firewalled, raggiungibile solo via SSH).
+- `quote_items` mai esposti via client API. L'editor offerte è admin-only (`/admin/*`, sessione Auth.js).
+
+## Fuori scope (questa fase)
+
+- Import CSV / import da Notion (OFFER-12, rimandato).
+- Sezioni analitiche Notion (psicologia/rating/performance — OFFER-14, v2).
+- Collegamento offerta→preventivo/pagamento (Proposal AI, Phase 16/17).
+- Pagina pubblica dell'offerta (Phase 17).
+
+## Domande risolte (erano aperte nel primo RESEARCH)
+
+1. Placement composer → **`/admin/offers` ridisegnata** (lista + editor). ✓
+2. Persistenza offerta → **macro = offerta, micro = tier A/B/C** (riuso additivo). ✓
+3. Tag audit CSV → **N/A** (import rimandato). ✓
+4. Duplicati / parsing CSV → **N/A** (import rimandato). ✓
+5. Prezzi servizi editabili → **no inline qui**: il tier ha totale auto + prezzo pubblico manuale; i
+   prezzi unitari restano gestiti nel catalogo `services` (Phase 11). ✓

.planning/phases/12-offer-composition-drag-drop-csv-import/12-RESEARCH.md

@@ -0,0 +1,819 @@
+# Phase 12: Offer Editor — Tier A/B/C, Tag & Prezzo Pubblico - Research
+
+**Researched:** 2026-06-14
+**Domain:** Offer composition UI + additive schema (tier designations, tag dimensions, public pricing)
+**Confidence:** HIGH
+
+## Summary
+
+Phase 12 is a **complete UI + schema redesign** of offer composition, re-scoped from "drag-drop composer + CSV import" to a **tier-matrix offer editor** (A/B/C tiers with checkbox matrix, live totals, tag dimensions, structured transformation promise, public pricing per tier). The design follows Phase 11's database-view patterns (inline edit, polymorphic tagging, Notion-style option pools) and extends the catalog with additive schema only.
+
+**Key finding:** The critical constraint is **additive schema only** (Data Safety LOCKED). This means:
+- ✅ Extend `offer_macros` and `offer_micros` with new columns
+- ✅ Create **new junction table** `offer_tier_services` (tier → `services.id`, not `offer_services.id`)
+- ✅ Extend `tags` table with polymorphic entity_type scoping
+- ❌ NEVER modify legacy `offer_micro_services` (points to deprecated `offer_services`)
+- ❌ NEVER drop/rename columns on existing tables in the locked set
+
+**Primary recommendation:** 
+1. Create schema migrations **by hand** (drizzle-kit generate is broken; follow 0003-0007 pattern)
+2. Extend `offer_macros`: `description`, `is_archived`, `categoria_single`, `ticket_single`, `transformation_promise_json` (structured fields)
+3. Extend `offer_micros`: `tier_letter` (A|B|C), `public_price`
+4. Add **new junction table** `offer_tier_services`: `(tier_id, service_id)` as PK
+5. Tag 4 dimensions using **polymorphic entity_type scoping**: `"offer_macros"`, `"offer_macros.ticket"`, `"offer_macros.tipo"`, `"offer_macros.obiettivo"`
+6. Query layer: fetch offers with categories, tags, and service matrix pre-computed
+7. Editor UI: use Phase 11 patterns (`EditableCell`, `OptionMultiSelect`, `requireAdmin` server actions, inline validation via Zod)
+
+---
+
+## User Constraints (from CONTEXT.md)
+
+### Locked Decisions
+- **D-1 (Scope):** Editor offerte completo (lista + dettaglio). Import CSV/Notion (ex OFFER-12) **rimandato** a fase futura.
+- **D-2 (UX composizione tier):** **Matrice di checkbox** servizio × tier (A/B/C), NON drag&drop puro. Totale servizi live per colonna/tier. `@dnd-kit` usato solo (eventualmente) per riordinare le righe.
+- **D-3 (Fonte servizi):** Catalogo unificato `services` (Phase 11), **non** il legacy `offer_services`.
+- **D-4 (Filtro servizi per categoria):** Il servizio porta già, a livello di catalogo, la designazione di categoria offerta (entry / signature / retainer). L'editor mostra/pre-filtra nella matrice i servizi pertinenti alla categoria dell'offerta in modifica.
+- **D-5 (Prezzo):** Per ogni tier: **Totale servizi** (auto-somma dei servizi spuntati) + **Prezzo Pubblico** (manuale, indipendente). Coerente con la decisione PROJECT.md "prezzi pacchetti per-preventivo, non da catalogo".
+- **D-6 (Schema):** **Solo additivo** (Data Safety LOCKED). Riusare le tabelle offerte esistenti, non ricostruire.
+
+### Claude's Discretion
+- **Tag dimension model:** Use polymorphic `entity_type` scoping or add additive `dimension` column? Recommend: polymorphic entity_type (`"offer_macros.categoria"`, `"offer_macros.ticket"`, etc.) to avoid schema change and reuse Phase 11 pattern.
+- **Junction table naming:** `offer_tier_services` suggested; planner may choose alternative.
+- **Tier letter persistence:** Store in `offer_micros.tier_letter` or compute from row position? Recommend: store explicitly for clarity.
+- **Public price per tier:** Manual input or formula? Locked as manual (D-5).
+
+### Deferred Ideas (OUT OF SCOPE)
+- **Import CSV / import da Notion** (OFFER-12, rimandato a fase futura su decisione utente 2026-06-14).
+- **Sezioni analitiche Notion** (psicologia/rating/performance — OFFER-14, v2).
+- **Drag&drop composer** (originally in Phase 12 scope per UI-SPEC 12-UI-SPEC.md, now replaced by checkbox matrix).
+- **Collegamento offerta→preventivo/pagamento** (Proposal AI, Phase 16/17).
+
+---
+
+## Phase Requirements
+
+| ID | Description | Research Support |
+|----|-------------|------------------|
+| OFFER-11 | L'admin compone un'offerta a 3 tier (A/B/C) assegnando i servizi del catalogo unificato `services` tramite matrice di checkbox; il totale servizi di ogni tier si aggiorna live | Schema: `offer_micros.tier_letter`, new junction `offer_tier_services`; UI: checkbox matrix with live total calculation (client-side sum per tier) |
+| OFFER-15 | Ogni offerta ha tag su 4 dimensioni (categoria, ticket, tipo, obiettivo) creabili al volo, riusando il sistema tag di Phase 11 | Tag pattern: polymorphic `tags` table with scoped `entity_type` (e.g. `"offer_macros.categoria"`, `"offer_macros.ticket"`) — reuse Phase 11 pattern; addServiceOption/removeServiceOption actions |
+| OFFER-16 | Per ogni tier l'admin imposta un "prezzo pubblico" manuale, distinto e indipendente dal totale dei servizi | Schema: `offer_micros.public_price` (numeric); UI: EditableCell input per tier row |
+| OFFER-17 | Ogni offerta ha una promessa di trasformazione strutturata (Cliente Ideale / Risultato / tempo / Pain / Metodo) | Schema: `offer_macros.transformation_promise_json` (JSONB); structured form in editor with 5 text inputs |
+| OFFER-18 | La lista offerte è filtrabile per categoria e supporta l'archiviazione (mostra/nascondi archiviate) | Schema: `offer_macros.is_archived` (boolean); UI: category chip filter + "Mostra archiviate" toggle |
+
+---
+
+## Architectural Responsibility Map
+
+| Capability | Primary Tier | Secondary Tier | Rationale |
+|------------|-------------|----------------|-----------|
+| Offer list rendering (cards, filters) | Frontend Server (SSR) | — | Server-side query fetch (offer list + tags + counts), hydrate React component for filter UI |
+| Offer editor (form + matrix) | Browser / Frontend | Frontend Server | Browser state (tier matrix checkboxes, live total); form submission to server action |
+| Live tier total calculation | Browser / Frontend | — | Deterministic sum of selected service prices per tier; no server round-trip per toggle |
+| Tag management (add/remove/rename) | API / Backend | Frontend | Server actions (`addOfferTag`, `removeOfferTag`, `renameOfferTag` — requireAdmin-guarded) |
+| Service filtering by offer category | Frontend Server (SSR) | — | Query layer: fetch services filtered by category, return in hydrated props |
+| Transformation promise validation | API / Backend | — | Zod schema validation on offer save |
+| Schema migrations | Database / Infrastructure | — | Hand-written SQL (drizzle-kit broken); applies to prod via SSH+docker exec before code push |
+
+---
+
+## Standard Stack
+
+### Core (Locked from CLAUDE.md)
+| Library | Version | Purpose | Why Standard |
+|---------|---------|---------|--------------|
+| Next.js | 16 App Router | Framework with SSR, server actions, revalidatePath | Project standard |
+| Neon Postgres | Latest | Managed Postgres | Project standard |
+| Drizzle ORM | Latest | Type-safe SQL with relations | Project standard; hand-write migrations (drizzle-kit broken) |
+| Auth.js v4 | v4 | Session-based auth, `/admin/*` middleware | Project standard, requireAdmin pattern used throughout Phase 11 |
+| Tailwind v4 | v4 | CSS utility framework | Project standard |
+| shadcn/ui | Latest | Headless component library (Button, Input, Dialog, Badge, Table) | Phase 11 established; re-export from @/components/ui |
+| Zod | Latest | Runtime schema validation (forms, server action inputs) | Phase 11 established (`serviceSchema`, `catalogFieldSchema`, etc.) |
+
+### Supporting (Reuse Phase 11 patterns)
+| Library | Version | Purpose | When to Use |
+|---------|---------|---------|-------------|
+| react-hook-form | Latest | Uncontrolled form state (optional; Phase 11 uses mostly FormData) | Only if structured form (5-field transformation promise) requires form state |
+| Lucide React | Latest | Icon library | Drag handle, trash icon, filter chips (Phase 11 pattern) |
+
+### NOT Used (Deferred)
+| Instead of | Could Use | Why Not Used |
+|-----------|-----------|--------------|
+| `@dnd-kit/core` + `@dnd-kit/sortable` | Native drag-and-drop API | Originally in scope (D-2 mentions "@dnd-kit usato solo eventualmente per riordinare le righe"); checkbox matrix is simpler and preferred UX (D-2 locked). Row reorder optional; defer to Phase 12 plan. |
+| papaparse / CSV import | Native JS text parsing | CSV import (OFFER-12) is deferred; not in scope for Phase 12. |
+
+---
+
+## Architecture Patterns
+
+### System Architecture Diagram
+
+```
+┌──────────────────────────────────────────────────────────────────┐
+│                      /admin/offers                                │
+│                   (OffersList + OfferEditor)                      │
+└────────────┬──────────────────────────────────┬───────────────────┘
+             │                                  │
+             ▼                                  ▼
+    ┌────────────────────┐         ┌──────────────────────┐
+    │  OfferListQuery    │         │  OfferEditorQuery    │
+    │ (SSR page.tsx)     │         │  (SSR page.tsx)      │
+    │                    │         │                      │
+    │ • getAllOffers()   │         │ • getOfferDetail()   │
+    │ • filter by cat    │         │ • getCategoriesOpts  │
+    │ • getTagOptions()  │         │ • getServicesForOffer│
+    │                    │         │ • getServicesByCateg │
+    └────────┬───────────┘         └──────────┬───────────┘
+             │                                  │
+             ▼                                  ▼
+    ┌────────────────────┐         ┌──────────────────────┐
+    │ OfferListUI        │         │ OfferEditorUI        │
+    │ (React Client)     │         │ (React Client)       │
+    │                    │         │                      │
+    │ • Chip filter cat  │         │ • Offer header form  │
+    │ • Archive toggle   │         │ • 4-dim tag inputs   │
+    │ • Card list        │         │ • Tier matrix        │
+    │ • "+New" button    │         │ • Live totals/tier   │
+    │ • Edit/delete      │         │ • Transform promise  │
+    └────────┬───────────┘         │ • [Salva]/[Annulla]  │
+             │                    └──────────┬───────────┘
+             │                               │
+             └───────────┬───────────────────┘
+                         │
+              ┌──────────▼──────────┐
+              │  Server Actions     │
+              │ (actions.ts)        │
+              │                     │
+              │ • createOffer()     │
+              │ • updateOffer()     │
+              │ • deleteOffer()     │
+              │ • updateOfferTiers()│
+              │ • addOfferTag()     │
+              │ • removeOfferTag()  │
+              │ • renameOfferTag()  │
+              └──────────┬──────────┘
+                         │
+              ┌──────────▼────────────────────┐
+              │ Database Layer (Drizzle)      │
+              │                               │
+              │ Tables:                       │
+              │ • offer_macros (+)            │
+              │ • offer_micros (+)            │
+              │ • offer_tier_services (NEW)   │
+              │ • services (Phase 11)         │
+              │ • tags (polymorphic scoped)   │
+              └───────────────────────────────┘
+```
+
+**Data flow:**
+1. **List view:** SSR page fetches `getAllOffers()` → query returns macros + micro counts + tag counts per offer, filtered by category/archive
+2. **Editor view:** SSR page fetches `getOfferDetail(macroId)` → query returns macro + all micros with tier letters + services for matrix + tag pools
+3. **Service matrix source:** `getServicesForOfferCategory(categoryId)` → filters catalog by category field (set in Phase 11)
+4. **Live total:** Browser state (checkboxes) → sum prices client-side (no server call per toggle)
+5. **Save:** Form submission → server action validates (Zod) → updates offer_macros + offer_micros + offer_tier_services + tags → revalidatePath
+
+### Recommended Project Structure
+
+```
+src/
+├── app/admin/offers/
+│   ├── page.tsx                 # OffersList (SSR, list + filters)
+│   ├── [macroId]/
+│   │   └── page.tsx             # OfferEditor (SSR, detail + matrix editor)
+│   ├── actions.ts               # Server actions (CRUD, tags)
+│   └── layout.tsx               # Shared layout
+├── lib/
+│   └── offer-queries.ts         # Query layer (new/extended)
+├── components/admin/offers/
+│   ├── OffersList.tsx           # List component (filters, cards)
+│   ├── OfferEditor.tsx          # Editor component (form + matrix)
+│   ├── OfferMatrix.tsx          # Tier×Service checkbox matrix
+│   ├── TransformationPromiseForm.tsx  # 5-field structured form
+│   ├── OfferTagInput.tsx        # Multi-select tag input
+│   └── OfferCategoryFilter.tsx  # Category chip filter
+└── db/
+    └── schema.ts                # (Extension additions only)
+```
+
+### Pattern 1: Additive Schema (Data Safety LOCKED)
+
+**What:** Extend existing offer tables with new columns; create new junction tables for new relationships; NEVER modify or drop existing columns in locked tables.
+
+**When to use:** Every schema change in Phase 12. The rule is absolute: `clients`, `projects`, `payments`, `phases`, `offer_macros`, `offer_micros`, `offer_micro_services` (legacy), `quote_items` are all READ-ONLY at the column/table level.
+
+**Example migrations (hand-written SQL):**
+```sql
+-- Migration 0008: offer_tier_schema.sql (following 0003-0007 convention)
+
+-- Extend offer_macros with new columns
+ALTER TABLE offer_macros ADD COLUMN description TEXT;
+ALTER TABLE offer_macros ADD COLUMN is_archived BOOLEAN NOT NULL DEFAULT false;
+ALTER TABLE offer_macros ADD COLUMN transformation_promise_json JSONB;
+
+-- Extend offer_micros with tier designations and public pricing
+ALTER TABLE offer_micros ADD COLUMN tier_letter TEXT CHECK (tier_letter IN ('A', 'B', 'C'));
+ALTER TABLE offer_micros ADD COLUMN public_price NUMERIC(10, 2);
+
+-- NEW junction table: tier ↔ services (replaces legacy offer_micro_services reference)
+CREATE TABLE offer_tier_services (
+  tier_id TEXT NOT NULL REFERENCES offer_micros(id) ON DELETE CASCADE,
+  service_id TEXT NOT NULL REFERENCES services(id) ON DELETE CASCADE,
+  created_at TIMESTAMP NOT NULL DEFAULT NOW(),
+  PRIMARY KEY (tier_id, service_id),
+  INDEX offer_tier_services_tier_idx (tier_id)
+);
+
+-- Tags for offers are scoped via entity_type (no schema change needed)
+-- entity_type values: "offer_macros", "offer_macros.ticket", "offer_macros.tipo", "offer_macros.obiettivo"
+```
+
+**Apply to production:**
+```bash
+# SSH to prod host, then:
+docker exec -it clienthub-db psql -U $DB_USER -d $DB_NAME < src/db/migrations/0008_offer_tier_schema.sql
+# BEFORE pushing code that references offer_tier_services
+```
+
+---
+
+### Pattern 2: Polymorphic Tags (Phase 11 Extended)
+
+**What:** The `tags` table uses `entity_type` + `entity_id` to scope tags across different entities. Phase 11 scoped tags as `"services"` and `"services.pacchetto"`. Phase 12 extends this to offers with 4 dimensions.
+
+**Design choice: Polymorphic entity_type scoping (Recommended)**
+```sql
+-- tags table (unchanged structure from Phase 11)
+-- entity_type values determine which dimension:
+--   "offer_macros"              → categoria (single-select, though stored in tags table)
+--   "offer_macros.ticket"       → ticket (single-select, though stored in tags table)
+--   "offer_macros.tipo"         → tipo (multi-select)
+--   "offer_macros.obiettivo"    → obiettivo (multi-select)
+
+-- Query: all categoria tags for offer
+SELECT name FROM tags WHERE entity_type = 'offer_macros' AND entity_id = '12345'
+
+-- Query: all ticket tags for offer
+SELECT name FROM tags WHERE entity_type = 'offer_macros.ticket' AND entity_id = '12345'
+```
+
+**Why this design:**
+- Reuses Phase 11 unique constraint: `UNIQUE(entity_type, entity_id, name)` — no schema change needed
+- Scopes tag pools naturally: categoria pool separate from ticket pool (no collisions)
+- Matches Phase 11 code pattern (`TAG_ENTITY = "services"`, `PACCHETTO_ENTITY = "services.pacchetto"`)
+- Avoids adding a new `dimension` column (avoids 5th schema change)
+
+**Drizzle constants (in src/lib/admin-queries.ts):**
+```typescript
+const OFFER_CATEGORIA_ENTITY = "offer_macros";
+const OFFER_TICKET_ENTITY = "offer_macros.ticket";
+const OFFER_TIPO_ENTITY = "offer_macros.tipo";
+const OFFER_OBIETTIVO_ENTITY = "offer_macros.obiettivo";
+```
+
+**Server action pattern (reuse from Phase 11):**
+```typescript
+export async function addOfferTag(
+  macroId: string,
+  dimension: "categoria" | "ticket" | "tipo" | "obiettivo",
+  tagName: string
+) {
+  await requireAdmin();
+  const entity_type = {
+    categoria: OFFER_CATEGORIA_ENTITY,
+    ticket: OFFER_TICKET_ENTITY,
+    tipo: OFFER_TIPO_ENTITY,
+    obiettivo: OFFER_OBIETTIVO_ENTITY,
+  }[dimension];
+  
+  await db.insert(tags).values({
+    entity_type,
+    entity_id: macroId,
+    name: tagName.trim(),
+  }).onConflictDoNothing();
+  
+  revalidatePath("/admin/offers");
+}
+```
+
+---
+
+### Pattern 3: Tier Matrix Composition (Checkbox Pattern)
+
+**What:** Instead of drag-and-drop, use a simple checkbox matrix: rows are services, columns are tiers (A/B/C), cells are checkboxes.
+
+**When to use:** Building the OfferMatrix UI component.
+
+**Example UX:**
+```
+┌──────────────────────────────────────────────────────────────┐
+│ Servizi inclusi nella tua offerta                            │
+├─────────────────────────────┬──────┬──────┬──────┬──────────┤
+│ Servizio                    │ Tier │ Tier │ Tier │ Prezzo   │
+│                             │  A   │  B   │  C   │ unitario │
+├─────────────────────────────┼──────┼──────┼──────┼──────────┤
+│ Personal Branding Audit     │ [x]  │ [ ]  │ [ ]  │ €500     │
+│ Brand Strategy Workshop     │ [x]  │ [x]  │ [ ]  │ €300     │
+│ Logo Design                 │ [ ]  │ [x]  │ [x]  │ €800     │
+├─────────────────────────────┼──────┼──────┼──────┼──────────┤
+│ Totale servizi (auto)       │ €800 │ €1.1K│ €800 │          │
+│ Prezzo pubblico (manuale)   │ [ €900 ] │ [ €1.2K ] │ [ €900 ] │
+└─────────────────────────────┴──────┴──────┴──────┴──────────┘
+```
+
+**React component pattern:**
+```typescript
+// OfferMatrix.tsx
+type OfferMatrixProps = {
+  services: Service[];           // filtered by offer category
+  tiers: Array<OfferMicro & { tier_letter: 'A'|'B'|'C' }>;
+  initialAssignments: Map<string, string[]>; // Map<tier_id, service_ids>
+  onChange: (assignments: Map<string, string[]>) => void;
+};
+
+export function OfferMatrix({ services, tiers, initialAssignments, onChange }: OfferMatrixProps) {
+  const [assignments, setAssignments] = useState<Map<string, Set<string>>>(
+    new Map(Array.from(initialAssignments.entries()).map(([k, v]) => [k, new Set(v)]))
+  );
+
+  const handleToggle = (tierId: string, serviceId: string, checked: boolean) => {
+    const next = new Map(assignments);
+    const tierSet = new Set(next.get(tierId) ?? []);
+    if (checked) tierSet.add(serviceId);
+    else tierSet.delete(serviceId);
+    next.set(tierId, tierSet);
+    setAssignments(next);
+    onChange(next);  // parent updates form state for submission
+  };
+
+  const totals = useMemo(() => {
+    return tiers.map(tier => ({
+      tier_id: tier.id,
+      total: Array.from(assignments.get(tier.id) ?? [])
+        .map(sid => parseFloat(services.find(s => s.id === sid)?.unit_price ?? "0"))
+        .reduce((a, b) => a + b, 0),
+    }));
+  }, [assignments, services, tiers]);
+
+  return (
+    <table className="w-full border-collapse">
+      <thead>
+        <tr className="bg-[#f9f9f9] border-b border-[#e5e7eb]">
+          <th className="text-left px-4 py-2 font-semibold">Servizio</th>
+          <th className="text-center px-4 py-2 font-semibold">Prezzo</th>
+          {tiers.map(tier => (
+            <th key={tier.id} className="text-center px-4 py-2 font-semibold">
+              Tier {tier.tier_letter}
+            </th>
+          ))}
+        </tr>
+      </thead>
+      <tbody>
+        {services.map(service => (
+          <tr key={service.id} className="border-b border-[#e5e7eb] hover:bg-[#f9f9f9]">
+            <td className="px-4 py-3 font-medium">{service.name}</td>
+            <td className="text-center px-4 py-3 text-[#71717a]">
+              €{parseFloat(service.unit_price).toFixed(2)}
+            </td>
+            {tiers.map(tier => (
+              <td key={tier.id} className="text-center px-4 py-3">
+                <input
+                  type="checkbox"
+                  checked={(assignments.get(tier.id) ?? new Set()).has(service.id)}
+                  onChange={e => handleToggle(tier.id, service.id, e.target.checked)}
+                  className="cursor-pointer"
+                />
+              </td>
+            ))}
+          </tr>
+        ))}
+      </tbody>
+    </table>
+  );
+}
+```
+
+**Data flow on save:**
+1. User toggles checkbox → state updates → live total recalculates (client-side)
+2. User clicks "Salva" → form submission with Map<tier_id, Set<service_id>>
+3. Server action converts to array, validates via Zod, then:
+   - Delete all rows in `offer_tier_services` where tier_id IN (this offer's tiers)
+   - Insert new rows: `INSERT INTO offer_tier_services (tier_id, service_id) VALUES ...`
+4. Revalidate `/admin/offers` → user sees updated matrix
+
+---
+
+### Pattern 4: Live Total Calculation (Client-Side)
+
+**What:** Sum of selected service prices per tier, updated immediately on checkbox toggle.
+
+**When to use:** OfferMatrix component and any form showing price aggregates.
+
+**Implementation:**
+```typescript
+const computeTierTotal = (selectedServiceIds: string[], services: Service[]): number => {
+  return services
+    .filter(s => selectedServiceIds.includes(s.id))
+    .reduce((sum, s) => sum + parseFloat(s.unit_price), 0);
+};
+
+// On checkbox toggle:
+const tierTotal = computeTierTotal(Array.from(checkedIds), services);
+setTotals(prev => ({ ...prev, [tierId]: tierTotal }));
+```
+
+**Why client-side:**
+- Deterministic (sum is pure function of selected items + prices)
+- No server round-trip per toggle (better UX)
+- Prices sourced from Phase 11 catalog (immutable, already in props)
+- Validation on save (server-side Zod schema ensures data integrity)
+
+---
+
+### Pattern 5: Server Actions with requireAdmin (Phase 11 Reuse)
+
+**What:** Use `getServerSession(authOptions)` to guard server actions; throw on non-admin.
+
+**When to use:** All mutation operations.
+
+**Example:**
+```typescript
+// src/app/admin/offers/actions.ts
+
+async function requireAdmin() {
+  const session = await getServerSession(authOptions);
+  if (!session) throw new Error("Non autorizzato");
+}
+
+const updateOfferTiersSchema = z.object({
+  macro_id: z.string().min(1),
+  tiers: z.array(
+    z.object({
+      micro_id: z.string().min(1),
+      tier_letter: z.enum(["A", "B", "C"]),
+      public_price: z.coerce.number().min(0),
+      service_ids: z.array(z.string()),
+    })
+  ),
+});
+
+export async function updateOfferTiers(formData: FormData) {
+  await requireAdmin();
+
+  const parsed = updateOfferTiersSchema.safeParse({
+    macro_id: formData.get("macro_id"),
+    tiers: JSON.parse(formData.get("tiers_json") as string),
+  });
+
+  if (!parsed.success) throw new Error(parsed.error.issues[0].message);
+
+  const { macro_id, tiers } = parsed.data;
+
+  // Update each tier
+  for (const tier of tiers) {
+    await db.update(offer_micros)
+      .set({
+        tier_letter: tier.tier_letter,
+        public_price: tier.public_price.toFixed(2),
+      })
+      .where(eq(offer_micros.id, tier.micro_id));
+
+    // Delete + re-insert services for this tier
+    await db.delete(offer_tier_services)
+      .where(eq(offer_tier_services.tier_id, tier.micro_id));
+
+    if (tier.service_ids.length > 0) {
+      await db.insert(offer_tier_services).values(
+        tier.service_ids.map(sid => ({ tier_id: tier.micro_id, service_id: sid }))
+      );
+    }
+  }
+
+  revalidatePath("/admin/offers");
+}
+```
+
+---
+
+### Anti-Patterns to Avoid
+
+- **❌ Exposing offer details via client API:** Only `/admin/offers` (admin-only routes with session check). Never `/api/offers` (public endpoint). Offer composition is locked behind Auth.js.
+- **❌ Computing cumulative_price at schema time:** It's a derived value (sum of selected services). Compute at **query time** (SQL SUM), not stored.
+- **❌ Storing tier letter as computed rank:** Store as explicit column `tier_letter` so it's immutable and queryable.
+- **❌ Re-using `offer_micro_services` for the new matrix:** It's legacy and points to deprecated `offer_services`. Always use the **new `offer_tier_services`** junction to `services.id`.
+- **❌ Bulk-updating tier prices inline:** Each tier edit is a separate save. Avoid multi-tier batch updates unless required by spec.
+
+---
+
+## Don't Hand-Roll
+
+| Problem | Don't Build | Use Instead | Why |
+|---------|------------|-------------|-----|
+| Multi-select tag input | Custom autocomplete with tag picker | `shadcn/ui` Badge + Input with onKeyDown, pattern from Phase 11 `OptionMultiSelect` | Phase 11 already solved this; reuse component + logic |
+| Tier matrix checkbox logic | Custom matrix renderer | React state (useState) + table component | Simple enough; native HTML + React state is cleaner than a library |
+| Live total calculation | Custom sum function | `reduce()` over selected services | Standard JS; no library needed for deterministic arithmetic |
+| Tag management (add/remove/rename) | Custom CRUD logic | Mirror Phase 11 server actions: `addOfferTag`, `removeOfferTag`, `renameOfferTag` | Tag lifecycle is identical across entities; DRY principle |
+| Offer schema validation | Regex or ad-hoc checks | Zod schema (`offerMacroSchema`, `offerMicroSchema`) | Type-safe, composable, reuses project standard |
+| JSON transformation promise | String concatenation | JSONB column with typed read/write (Zod parse on read) | Structured data → queryable later; no parsing fragility |
+
+**Key insight:** Phase 11 established production-grade patterns for inline edit, tagging, quick-add. Phase 12 must inherit these patterns exactly; the only new logic is tier matrix composition (fundamentally simpler than drag-drop).
+
+---
+
+## Code Examples
+
+### Example 1: Query — Offer Detail with Tags & Services
+
+```typescript
+// src/lib/offer-queries.ts (new function)
+
+export type OfferDetailWithServices = {
+  macro: OfferMacro & { 
+    tags: {
+      categoria: string[];
+      ticket: string[];
+      tipo: string[];
+      obiettivo: string[];
+    }
+  };
+  micros: Array<OfferMicro & {
+    services: Array<{ id: string; name: string; unit_price: string }>;
+    cumulative_price: string;
+  }>;
+};
+
+export async function getOfferDetail(macroId: string): Promise<OfferDetailWithServices | null> {
+  const macro = await db.query.offer_macros.findFirst({ where: eq(offer_macros.id, macroId) });
+  if (!macro) return null;
+
+  // Fetch tags scoped to this offer (4 dimensions)
+  const tagRows = await db
+    .select({ entity_type: tags.entity_type, name: tags.name })
+    .from(tags)
+    .where(
+      and(
+        eq(tags.entity_id, macroId),
+        inArray(tags.entity_type, [
+          "offer_macros",
+          "offer_macros.ticket",
+          "offer_macros.tipo",
+          "offer_macros.obiettivo",
+        ])
+      )
+    );
+
+  const tagsMap = {
+    categoria: tagRows.filter(t => t.entity_type === "offer_macros").map(t => t.name),
+    ticket: tagRows.filter(t => t.entity_type === "offer_macros.ticket").map(t => t.name),
+    tipo: tagRows.filter(t => t.entity_type === "offer_macros.tipo").map(t => t.name),
+    obiettivo: tagRows.filter(t => t.entity_type === "offer_macros.obiettivo").map(t => t.name),
+  };
+
+  // Fetch micros + services via NEW junction
+  const micros = await db.select().from(offer_micros).where(eq(offer_micros.macro_id, macroId));
+  const microIds = micros.map(m => m.id);
+
+  const servicesForMicros = await db
+    .select({
+      micro_id: offer_tier_services.tier_id,
+      service_id: offer_tier_services.service_id,
+      name: services.name,
+      unit_price: services.unit_price,
+    })
+    .from(offer_tier_services)
+    .innerJoin(services, eq(offer_tier_services.service_id, services.id))
+    .where(inArray(offer_tier_services.tier_id, microIds));
+
+  // Compute cumulative totals at query time
+  const cumulPrices = await db
+    .select({
+      micro_id: offer_tier_services.tier_id,
+      cumulative: sql<string>`COALESCE(SUM(${services.unit_price}::numeric), 0)`,
+    })
+    .from(offer_tier_services)
+    .innerJoin(services, eq(offer_tier_services.service_id, services.id))
+    .where(inArray(offer_tier_services.tier_id, microIds))
+    .groupBy(offer_tier_services.tier_id);
+
+  const cumulMap = new Map(cumulPrices.map(r => [r.micro_id, r.cumulative]));
+  const servicesMap = new Map<string, typeof servicesForMicros>();
+  for (const s of servicesForMicros) {
+    if (!servicesMap.has(s.micro_id)) servicesMap.set(s.micro_id, []);
+    servicesMap.get(s.micro_id)!.push(s);
+  }
+
+  return {
+    macro: { ...macro, tags: tagsMap },
+    micros: micros.map(m => ({
+      ...m,
+      services: (servicesMap.get(m.id) ?? []).map(s => ({
+        id: s.service_id,
+        name: s.name,
+        unit_price: s.unit_price,
+      })),
+      cumulative_price: cumulMap.get(m.id) ?? "0",
+    })),
+  };
+}
+```
+
+**Source:** [VERIFIED: Pattern from Phase 11 getAllServices + getCatalogWithMicros in offer-queries.ts lines 20–79]
+
+---
+
+### Example 2: Tier Matrix Component
+
+```typescript
+// src/components/admin/offers/OfferMatrix.tsx
+"use client";
+
+import { useState, useMemo } from "react";
+import type { Service, OfferMicro } from "@/db/schema";
+
+type Props = {
+  services: Service[];
+  tiers: Array<OfferMicro & { tier_letter: 'A'|'B'|'C' }>;
+  initialAssignments: Map<string, string[]>;
+  onChange: (assignments: Map<string, string[]>) => void;
+};
+
+export function OfferMatrix({ services, tiers, initialAssignments, onChange }: Props) {
+  const [assignments, setAssignments] = useState<Map<string, Set<string>>>(
+    new Map(Array.from(initialAssignments.entries()).map(([k, v]) => [k, new Set(v)]))
+  );
+
+  const handleToggle = (tierId: string, serviceId: string, checked: boolean) => {
+    const next = new Map(assignments);
+    const tierSet = new Set(next.get(tierId) ?? []);
+    if (checked) tierSet.add(serviceId);
+    else tierSet.delete(serviceId);
+    next.set(tierId, tierSet);
+    setAssignments(next);
+    onChange(next);
+  };
+
+  const totals = useMemo(() => {
+    return tiers.map(tier => ({
+      tier_id: tier.id,
+      total: Array.from(assignments.get(tier.id) ?? [])
+        .map(sid => parseFloat(services.find(s => s.id === sid)?.unit_price ?? "0"))
+        .reduce((a, b) => a + b, 0),
+    }));
+  }, [assignments, services, tiers]);
+
+  return (
+    <div className="overflow-x-auto">
+      <table className="w-full border-collapse text-sm">
+        <thead>
+          <tr className="bg-[#f9f9f9] border-b border-[#e5e7eb]">
+            <th className="text-left px-4 py-2 font-semibold">Servizio</th>
+            <th className="text-center px-4 py-2 font-semibold">Prezzo</th>
+            {tiers.map(tier => (
+              <th key={tier.id} className="text-center px-4 py-2 font-semibold">
+                Tier {tier.tier_letter}
+              </th>
+            ))}
+          </tr>
+        </thead>
+        <tbody>
+          {services.map(service => (
+            <tr key={service.id} className="border-b border-[#e5e7eb] hover:bg-[#f9f9f9]">
+              <td className="px-4 py-3 font-medium">{service.name}</td>
+              <td className="text-center px-4 py-3 text-[#71717a]">
+                €{parseFloat(service.unit_price).toFixed(2)}
+              </td>
+              {tiers.map(tier => (
+                <td key={tier.id} className="text-center px-4 py-3">
+                  <input
+                    type="checkbox"
+                    checked={(assignments.get(tier.id) ?? new Set()).has(service.id)}
+                    onChange={e => handleToggle(tier.id, service.id, e.target.checked)}
+                    className="cursor-pointer"
+                  />
+                </td>
+              ))}
+            </tr>
+          ))}
+        </tbody>
+      </table>
+
+      <div className="mt-4 flex gap-8 font-semibold">
+        {totals.map(({ tier_id, total }) => (
+          <div key={tier_id}>
+            <span className="text-[#71717a]">Tier {tiers.find(t => t.id === tier_id)?.tier_letter}:</span>
+            <span className="ml-2">€{total.toFixed(2)}</span>
+          </div>
+        ))}
+      </div>
+    </div>
+  );
+}
+```
+
+**Source:** [VERIFIED: React hooks pattern + browser native checkbox]
+
+---
+
+## State of the Art
+
+| Old Approach | Current Approach | When Changed | Impact |
+|--------------|------------------|--------------|--------|
+| `offer_micro_services` → `offer_services` | `offer_tier_services` → `services` (unified) | Phase 11 / Phase 12 | Single service catalog reduces duplication |
+| Drag-and-drop composer (UI-SPEC.md, original scope) | Checkbox matrix (CONTEXT.md D-2, re-scoped 2026-06-14) | 2026-06-14 user decision | Simpler UX, faster implementation, better accessibility |
+| Offer tiers as implicit rows | Explicit tier letters A/B/C in schema | Phase 12 (D-2) | Tier designations immutable, queryable, unambiguous |
+| Manual text transformation promise | Structured JSON fields (5-field JSONB) | Phase 12 (OFFER-17) | Enables future analytics, templating, per-field editing |
+| Shared `tags` table with single pool | Polymorphic entity_type scoping | Phase 11 / Phase 12 | Multiple tag dimensions stay separate; no collision risk |
+
+---
+
+## Assumptions Log
+
+| # | Claim | Section | Risk if Wrong |
+|---|-------|---------|---------------|
+| A1 | Services already filtered by category field in Phase 11; offer editor can pre-filter matrix by `services.category` | D-4 | If category is not set or semantics differ, matrix shows all services instead of relevant ones |
+| A2 | `cumulative_price` should be **computed at query time** (SQL SUM), not stored | Schema Design | If developer stores cumulative_price and forgets to update it, totals will be stale |
+| A3 | Public pricing (public_price) is **always manual input**, never auto-calculated | D-5 | If business logic changes to auto-calculate public price, schema will need redesign |
+| A4 | Tier letters are **always exactly 3 tiers** (A/B/C) per offer | D-2 | If future phases add variable tier counts, CHECK constraint will fail |
+| A5 | **New `offer_tier_services` junction is not used elsewhere**; legacy `offer_micro_services` untouched | Schema Design | If downstream code accidentally reads offer_tier_services, queries will break |
+| A6 | Phase 11's `services.category` and `services.fase` are not overloaded with other semantics | D-4 | If category/fase used differently elsewhere, offer editor filtering will be wrong |
+
+---
+
+## Open Questions
+
+1. **Services all have category set? (Assumption A1)**
+   - **Recommendation:** In Phase 12 plan: verify all services have category; add default ("General") for nulls if needed
+
+2. **Transformation promise: JSON or 5 columns? (OFFER-17)**
+   - **Recommendation:** Use **single JSONB column** for type safety and future queryability
+
+3. **Tag dimensions: polymorphic entity_type or dimension column? (OFFER-15)**
+   - **Recommendation:** Use polymorphic entity_type (Design A) to avoid schema change, reuse Phase 11 pattern
+
+4. **Row reordering via @dnd-kit? (D-2 optional mention)**
+   - **Recommendation:** Not in initial scope. If required, add `@dnd-kit/sortable` in Phase 12 plan
+
+---
+
+## Environment Availability
+
+Not applicable — Phase 12 is code/schema only, no external service dependencies beyond existing Postgres/Neon.
+
+---
+
+## Security Domain
+
+### Applicable ASVS Categories
+
+| ASVS Category | Applies | Standard Control |
+|---------------|---------|-----------------|
+| V2 Authentication | Yes | Auth.js v4 session, requireAdmin guard on all server actions |
+| V3 Session Management | Yes | Auth.js v4, immutable session, HTTPS-only cookies |
+| V4 Access Control | Yes | `/admin/offers/*` routes check session; public routes don't expose offer data |
+| V5 Input Validation | Yes | Zod schema on server action inputs; HTML5 numeric validation on prices |
+| V6 Cryptography | No | Session token encrypted by Auth.js framework |
+
+### Known Threat Patterns
+
+| Pattern | STRIDE | Mitigation |
+|---------|--------|-----------|
+| CSRF on form submission | Tampering | Next.js server actions auto-include SameSite=Strict cookie |
+| SQL injection via ORM | Tampering | Drizzle ORM uses parameterized queries; no string interpolation |
+| Unvalidated price input | Tampering | Zod validates numeric range; coerced to number, min 0 |
+| Privilege escalation | Elevation | requireAdmin() checks session; throws if missing |
+| Data exposure via API | Information Disclosure | No public API; only `/admin/offers*` (private) access offer data |
+| Race condition on service assignment | Tampering | PK constraint on junction prevents duplicates; last-write-wins acceptable for admin-only |
+
+---
+
+## Sources
+
+### Primary (HIGH confidence)
+- **12-CONTEXT.md** — User decisions locked (D-1 through D-6)
+- **ROADMAP.md Phase 12** — Requirements OFFER-11, OFFER-15, OFFER-16, OFFER-17, OFFER-18; re-scoped 2026-06-14
+- **REQUIREMENTS.md** — All phase requirements explicitly mapped; OFFER-12 deferred
+- **src/db/schema.ts** — Current `offer_macros` (lines 262–271), `offer_micros` (lines 274–286), `tags` (lines 119–140)
+- **src/app/admin/catalog/actions.ts** — Phase 11 patterns for tag management (lines 74–199)
+- **src/lib/admin-queries.ts** — Query patterns (lines 366–449); polymorphic tagging (lines 889–927)
+
+### Secondary (MEDIUM confidence)
+- **CLAUDE.md** — Architecture Constraints (LOCKED): additive schema only, hand-write migrations, schema push via SSH+docker exec
+- **12-UI-SPEC.md** — Original drag-drop scope; superseded by CONTEXT.md; kept for UI pattern reference
+
+---
+
+## Metadata
+
+**Confidence breakdown:**
+- **Standard stack:** HIGH — All locked in CLAUDE.md; versions current
+- **Architecture:** HIGH — Schema additions minimal, scoped; query patterns mirror Phase 11
+- **Additive schema:** HIGH — Data Safety locked; requires hand-written SQL (drizzle-kit broken)
+- **Polymorphic tag model:** HIGH — Phase 11 establishes pattern; straightforward extension
+- **Tier matrix UX:** MEDIUM — Checkbox pattern simpler than drag-drop; spec from CONTEXT.md user decision
+- **Service category filtering:** MEDIUM — Assumes Phase 11 populated all services with category (Assumption A1)
+- **Public pricing:** HIGH — Locked as manual input (D-5)
+
+**Research date:** 2026-06-14
+**Valid until:** 2026-06-21 (7 days — offer editor straightforward; schema stable; low tech drift risk)
+
+---
+
+*Research completed. Ready for Phase 12 planning.*

.planning/phases/12-offer-composition-drag-drop-csv-import/12-REVIEW.md

@@ -0,0 +1,413 @@
+---
+phase: 12-offer-composition-drag-drop-csv-import
+reviewed: 2026-06-15T10:36:00Z
+depth: standard
+files_reviewed: 12
+files_reviewed_list:
+  - scripts/push-12-offer-tier-schema.ts
+  - scripts/verify-12-03-actions.ts
+  - scripts/verify-12-03-queries.ts
+  - src/app/admin/offers/[id]/edit/page.tsx
+  - src/app/admin/offers/actions.ts
+  - src/app/admin/offers/page.tsx
+  - src/components/admin/offers/OfferEditorClient.tsx
+  - src/components/admin/offers/OfferListClient.tsx
+  - src/db/migrations/0008_offer_tier_schema.sql
+  - src/db/migrations/meta/_journal.json
+  - src/db/schema.ts
+  - src/lib/offer-queries.ts
+findings:
+  critical: 0
+  warning: 6
+  info: 4
+  total: 10
+status: issues_found
+---
+
+# Phase 12: Code Review Report
+
+**Reviewed:** 2026-06-15T10:36:00Z
+**Depth:** standard
+**Files Reviewed:** 12
+**Status:** issues_found
+
+## Summary
+
+This batch implements the Phase 12 Offer Editor: an additive DB migration (tier
+designation, public pricing, archive flag, category/ticket dimensions, tipo/obiettivo
+tags), a query layer (`offer-queries.ts`), server actions
+(`saveOfferEditor`/`toggleOfferArchived`/`addOfferTag`/`removeOfferTag`/
+`renameOfferOption`/`createOfferMacro`), and the editor/list client components.
+
+The migration and push script are correctly additive/idempotent and respect the
+Data Safety constraints in CLAUDE.md (no drops/truncates, `ADD COLUMN IF NOT
+EXISTS`, guarded `DO $$` block for the CHECK constraint). `requireAdmin()` is
+consistently called at the top of every new server action.
+
+No critical/security issues were found. The main concerns are: (1) the tier
+upsert in `saveOfferEditor` doesn't enforce uniqueness of `tier_letter` within a
+single macro, which can desync the UI's `padTiers()` assumption and silently
+orphan rows; (2) `renameOfferOption("tipo"/"obiettivo", ...)` can throw an
+uncaught unique-constraint violation when the target name already exists,
+surfacing as a generic 500 with no user-facing message; (3) the "unarchive" path
+(`toggleOfferArchived(macroId, false)`) is implemented server-side and covered by
+the verify script but has no reachable UI entry point, making it effectively dead
+code from the user's perspective; and (4) several smaller robustness/UX gaps
+around empty tiers being persisted with placeholder names, and total mismatches
+when an assigned service falls outside the category filter.
+
+## Warnings
+
+### WR-01: `saveOfferEditor` does not enforce unique `tier_letter` per macro
+
+**File:** `src/app/admin/offers/actions.ts:152-238`
+**Issue:** `tierSchema` validates each tier's `tier_letter` is one of `"A"|"B"|"C"`
+and `saveOfferEditorSchema.tiers` is capped at `.max(3)`, but nothing prevents two
+tiers in the same payload from sharing the same `tier_letter` (e.g., two tiers
+both `"A"`). The loop at lines 200-238 will happily update/insert both rows
+independently — both ending up in `offer_micros` with `macro_id = macroId` and
+`tier_letter = "A"`.
+
+On the next load, `getOfferEditorData` (`src/lib/offer-queries.ts:163-167`) orders
+by `tierOrder` (A→B→C, ties broken arbitrarily/by insertion), and
+`OfferEditorClient.padTiers()` (`src/components/admin/offers/OfferEditorClient.tsx:33-37`)
+uses `tiers.find((t) => t.tier_letter === letter)` — which returns only the FIRST
+matching tier. The second "A" tier becomes invisible in the UI but still exists in
+the DB (with its own `offer_tier_services` rows), and a subsequent save will
+silently drop it from the `tiers` array sent to `saveOfferEditor` (since
+`OfferEditorClient` state only ever holds 3 padded tiers) — leaving an orphaned
+`offer_micros` row that's never cleaned up.
+
+**Fix:** Either enforce uniqueness in `saveOfferEditorSchema` via a `.refine()`
+check, or — more robustly — have `saveOfferEditor` delete any existing tiers for
+`macroId` whose `tier_letter` is NOT present in the incoming payload (so stale/
+duplicate rows get cleaned up):
+
+```ts
+const saveOfferEditorSchema = z.object({
+  // ...
+  tiers: z.array(tierSchema).max(3).refine(
+    (tiers) => {
+      const letters = tiers.map((t) => t.tier_letter);
+      return new Set(letters).size === letters.length;
+    },
+    { message: "Ogni tier deve avere una lettera univoca (A/B/C)" }
+  ),
+  // ...
+});
+```
+
+### WR-02: `renameOfferOption("tipo"/"obiettivo", ...)` can throw on unique constraint violation
+
+**File:** `src/app/admin/offers/actions.ts:337-341`
+**Issue:** For `field === "tipo" | "obiettivo"`, the action runs:
+
+```ts
+await db
+  .update(tags)
+  .set({ name: next })
+  .where(and(eq(tags.entity_type, OFFER_TAG_ENTITY[field]), eq(tags.name, oldValue)));
+```
+
+This is a global rename across ALL macros that have a tag named `oldValue` for
+that `entity_type`. The `tags` table has a unique index
+`tags_entity_name_unique` on `(entity_type, entity_id, name)`
+(`src/db/schema.ts:133-137`). If any macro already has a tag named `next` for the
+same `entity_type` (e.g., renaming "Audit" → "Coaching" but macro X already has a
+"Coaching" tag), the UPDATE on macro X's row will violate the unique index and
+throw a raw Postgres error. This error is not caught here, and propagates up to
+`OfferEditorClient.handleRenameTipo`/`handleRenameObiettivo`
+(`src/components/admin/offers/OfferEditorClient.tsx:210-232`), which `catch` it
+generically and show "Errore nel salvataggio. Verifica i campi." — but by that
+point the optimistic client-side state update (`setTipoOptions`, `setTipoTags`)
+has ALREADY applied for ALL macros' local view, while the DB only partially
+applied the rename (some rows renamed, the colliding row left as `oldValue` or
+the whole statement rolled back depending on transaction semantics — Drizzle here
+issues a single statement so it's atomic per-statement, but the local UI state for
+THIS macro is now inconsistent with the DB: `tipoTags` shows `next` even though
+the DB row may not have been updated due to the throw on a *different* row update
+within the same UPDATE statement — actually since it's one UPDATE affecting
+multiple rows, a constraint violation on any row aborts the whole statement,
+meaning NO rows are renamed in the DB, but the UI already shows the renamed tag).
+
+**Fix:** Wrap in `onConflictDoNothing`-style handling isn't directly possible for
+UPDATE; instead, pre-check or catch the specific error and surface a meaningful
+message:
+
+```ts
+} else if (field === "tipo" || field === "obiettivo") {
+  try {
+    await db
+      .update(tags)
+      .set({ name: next })
+      .where(and(eq(tags.entity_type, OFFER_TAG_ENTITY[field]), eq(tags.name, oldValue)));
+  } catch (err) {
+    throw new Error(`Esiste già un tag "${next}" per questo campo`);
+  }
+}
+```
+
+### WR-03: `toggleOfferArchived(macroId, false)` has no reachable UI entry point
+
+**File:** `src/components/admin/offers/OfferEditorClient.tsx:174-184, 487-496`
+**Issue:** `handleArchive` only ever calls `toggleOfferArchived(data.macro.id,
+true)` (line 178), and the "Archivia" button is only rendered when
+`!initialArchived` (line 487). There is no button/action that calls
+`toggleOfferArchived(macroId, false)` to un-archive an offer. Once an offer is
+archived, the only way back is presumably a direct DB edit — `OfferListClient`'s
+"Mostra offerte archiviate" toggle (line 116-124 in `OfferListClient.tsx`) lets
+the admin SEE archived offers and click through to `/admin/offers/[id]/edit`, but
+the edit page gives them no way to restore it. `toggleOfferArchived(macroId,
+false)` is exercised in `scripts/verify-12-03-actions.ts` (Test 6) but is
+effectively dead code from a product standpoint.
+
+**Fix:** Add a "Ripristina" (restore) button shown when `initialArchived` is
+true, calling `toggleOfferArchived(data.macro.id, false)`:
+
+```tsx
+{initialArchived && (
+  <button
+    type="button"
+    onClick={() => startTransition(async () => {
+      try {
+        await toggleOfferArchived(data.macro.id, false);
+        router.push("/admin/offers");
+      } catch {
+        setSaveError("Errore nel salvataggio. Verifica i campi.");
+      }
+    })}
+    disabled={isPending}
+    className="text-[#1A463C] text-sm font-semibold px-6 py-4 rounded hover:bg-[#f0f7f4] transition-colors duration-150 disabled:opacity-50"
+  >
+    Ripristina
+  </button>
+)}
+```
+
+### WR-04: Empty/unused tier slots are persisted as real `offer_micros` rows with placeholder names
+
+**File:** `src/components/admin/offers/OfferEditorClient.tsx:138-172`, `src/app/admin/offers/actions.ts:200-238`
+**Issue:** `padTiers()` always produces exactly 3 `OfferTierData` entries (A/B/C),
+filling missing ones with `emptyTier(letter)` (`id: ""`, empty names,
+`assignedServiceIds: []`). `handleSave` (lines 151-159) maps ALL 3 tiers
+unconditionally into the payload, defaulting `internal_name` to `` `Tier
+${tier.tier_letter}` `` and `public_name` to `t.tier_letter || "Tier"` when
+empty. `saveOfferEditor`'s tier loop (lines 200-238) then inserts a NEW
+`offer_micros` row for every tier without an `id` — including these placeholder
+"empty" tiers — as long as `canSave` is true (i.e., AT LEAST ONE of the 3 tiers
+has assigned services).
+
+Concretely: if the admin only fills in Tier A with services and leaves B/C empty,
+saving creates 3 `offer_micros` rows total — 2 of which are "ghost" tiers named
+"Tier B"/"Tier C" with `duration_months: 1`, `public_price: null`, and zero
+assigned services — visible in any other view that lists `offer_micros` for this
+macro (e.g., `getCatalogWithMicros`, used elsewhere in the admin).
+
+**Fix:** Skip tiers that are both unsaved (`!t.id`) AND empty
+(`assignedServiceIds.length === 0` and no `internal_name`/`public_name` entered)
+when building the payload:
+
+```ts
+tiers: tiers
+  .filter((t) => t.id || t.assignedServiceIds.length > 0 || t.internal_name || t.public_name)
+  .map((t) => ({ ... })),
+```
+
+### WR-05: `tierTotals` silently treats services outside the category filter as €0, diverging from server-computed `servicesTotal`
+
+**File:** `src/components/admin/offers/OfferEditorClient.tsx:96-109`
+**Issue:** `filteredServices` (lines 96-100) is `data.availableServices` filtered
+by `macro.category` (client-side, reactive to the in-progress edit of
+`macro.category`). `tierTotals` (lines 102-109) computes each tier's total by
+looking up `tier.assignedServiceIds` against `filteredServices` only, defaulting
+to `0` via `Number(service?.unit_price ?? 0)` for any assigned service ID not
+found in `filteredServices`.
+
+If a tier has services assigned that belong to a DIFFERENT category than the
+macro's current `category` (e.g., the macro's category was just changed in this
+editing session, or a service's category changed since assignment), those
+services drop out of `filteredServices` and their price silently becomes €0 in
+the "Totale Servizi" row — even though `data.tiers[i].servicesTotal` (computed
+server-side in `getOfferEditorData`, `src/lib/offer-queries.ts:183-193`, which
+does NOT filter by category) would include them. This produces a displayed total
+that's lower than what's stored/will be recomputed after save, with no
+indication to the admin why.
+
+**Fix:** Compute `tierTotals` against `data.availableServices` (unfiltered) or a
+combined lookup map that includes all services ever referenced by
+`assignedServiceIds`, not just the category-filtered subset:
+
+```ts
+const serviceById = useMemo(
+  () => new Map(data.availableServices.map((s) => [s.id, s])),
+  [data.availableServices]
+);
+const tierTotals = useMemo(() => {
+  return tiers.map((tier) =>
+    tier.assignedServiceIds.reduce((sum, id) => {
+      const service = serviceById.get(id);
+      return sum + Number(service?.unit_price ?? 0);
+    }, 0)
+  );
+}, [tiers, serviceById]);
+```
+(Note: this still won't be 100% accurate if a service belongs to a category
+outside `data.availableServices` entirely — but that's the same best-effort
+boundary the server-side query already has.)
+
+### WR-06: `createOfferMacro` allows whitespace-only `internal_name`
+
+**File:** `src/app/admin/offers/actions.ts:351-376`
+**Issue:** `createOfferMacroSchema.internal_name` is `z.string().min(1, "Nome
+interno richiesto")`. Zod's `.min(1)` checks string LENGTH, not trimmed content
+— a value of `" "` (single space) passes validation. Line 370 then does
+`parsed.data.public_name?.trim() || parsed.data.internal_name` — if
+`public_name` is empty/whitespace, `public_name` ends up being the untrimmed
+`" "` as well. The result is a new `offer_macros` row with
+`internal_name = " "` and `public_name = " "`, which will render as a blank card
+in `OfferListClient` (line 142: `<h3>{card.internal_name}</h3>` shows nothing
+visible) with no way to identify or rename it cleanly from the list view (the
+only `EditableCell` for `internal_name` is on the edit page, line 246-251, which
+itself has `required` but the same `tempValue.trim().length === 0` check in
+`EditableCell.commit` — so once created, it actually CAN be fixed, but the
+initial blank card is confusing).
+
+**Fix:** Trim and re-validate in the Zod schema:
+
+```ts
+const createOfferMacroSchema = z.object({
+  internal_name: z.string().trim().min(1, "Nome interno richiesto"),
+  public_name: z.string().optional(),
+  description: z.string().optional(),
+  category: z.string().optional(),
+});
+```
+and at line 370, trim `internal_name` too:
+```ts
+public_name: parsed.data.public_name?.trim() || parsed.data.internal_name.trim(),
+```
+
+## Info
+
+### IN-01: `OfferListClient.handleCreateSubmit` always calls `router.refresh()` even when `createOfferMacro` throws
+
+**File:** `src/components/admin/offers/OfferListClient.tsx:34-41`
+**Issue:**
+
+```ts
+function handleCreateSubmit(formData: FormData) {
+  startTransition(async () => {
+    await createOfferMacro(formData);
+    setShowCreateForm(false);
+    setNewOfferName("");
+    router.refresh();
+  });
+}
+```
+
+`createOfferMacro` can throw (e.g., Zod validation failure if `internal_name` is
+empty — though the `required` attribute on the `<Input>` at line 59 mitigates
+this for normal browser usage). If it throws, the `await` rejects, and since
+there's no `try/catch`, the rejection becomes an unhandled promise rejection
+inside `startTransition`'s async callback — `setShowCreateForm(false)`,
+`setNewOfferName("")`, and `router.refresh()` never run, but there's also no
+`saveError`-style state to inform the user anything went wrong. The form stays
+open with stale state and no feedback.
+
+**Fix:** Wrap in try/catch and surface an error state, mirroring the pattern used
+in `OfferEditorClient`:
+
+```ts
+const [createError, setCreateError] = useState<string | null>(null);
+
+function handleCreateSubmit(formData: FormData) {
+  setCreateError(null);
+  startTransition(async () => {
+    try {
+      await createOfferMacro(formData);
+      setShowCreateForm(false);
+      setNewOfferName("");
+      router.refresh();
+    } catch {
+      setCreateError("Errore nella creazione dell'offerta.");
+    }
+  });
+}
+```
+
+### IN-02: `requireAdmin()` discards the session without using it for ownership/role checks
+
+**File:** `src/app/admin/offers/actions.ts:18-21`
+**Issue:**
+
+```ts
+async function requireAdmin() {
+  const session = await getServerSession(authOptions);
+  if (!session) throw new Error("Non autorizzato");
+}
+```
+
+This is consistent with the existing pattern in this file (pre-existing, not
+introduced by this phase), so it's not a regression — but worth flagging as a
+pre-existing gap: any authenticated session is treated as "admin" with no role
+check. Since this is a single-admin app per CLAUDE.md's architecture, this is
+likely fine, but the function name `requireAdmin` implies a role check that
+doesn't exist. Purely informational — no change required unless multi-user admin
+roles are planned.
+
+**Fix:** None required for this phase; consider renaming to `requireSession` for
+clarity in a future cleanup, or add a role check if multi-admin support is ever
+introduced.
+
+### IN-03: `formatUnitPrice` and `formatEuro` duplicate locale-formatting logic
+
+**File:** `src/components/admin/offers/OfferEditorClient.tsx:39-46`
+**Issue:**
+
+```ts
+function formatEuro(value: number): string {
+  return `€${value.toLocaleString("it-IT", { minimumFractionDigits: 2, maximumFractionDigits: 2 })}`;
+}
+
+function formatUnitPrice(raw: string): string {
+  const num = parseFloat(raw);
+  return `€${(isNaN(num) ? 0 : num).toLocaleString("it-IT", { minimumFractionDigits: 2, maximumFractionDigits: 2 })}`;
+}
+```
+
+Both functions produce identical output format; `formatUnitPrice` is just
+`formatEuro(parseFloat(raw) || 0)`. Minor duplication — not a bug, but could be
+collapsed into one helper that accepts `string | number`.
+
+**Fix (optional):**
+
+```ts
+function formatEuro(value: number | string): string {
+  const num = typeof value === "string" ? parseFloat(value) : value;
+  return `€${(isNaN(num) ? 0 : num).toLocaleString("it-IT", { minimumFractionDigits: 2, maximumFractionDigits: 2 })}`;
+}
+```
+
+### IN-04: `push-12-offer-tier-schema.ts` and `0008_offer_tier_schema.sql` can drift independently
+
+**File:** `scripts/push-12-offer-tier-schema.ts:1-143`, `src/db/migrations/0008_offer_tier_schema.sql:1-45`
+**Issue:** The push script (`scripts/push-12-offer-tier-schema.ts`) is a
+hand-written duplicate of the SQL migration file's statements (per the comment at
+the top of `0008_offer_tier_schema.sql`, this is because `drizzle-kit generate` is
+broken per project memory). Both files express the same schema change in two
+different forms (column lists in a TS array vs. raw `ALTER TABLE` statements).
+This is a deliberate, documented workaround, but creates a maintenance hazard: if
+either file is edited in isolation in a future phase, the two can silently
+diverge (e.g., a column added to the `.sql` migration but not to the push
+script's `offerMacrosColumns`/`offerMicrosColumns` arrays, or vice versa).
+
+**Fix (optional):** Add a comment cross-reference in both files pointing at each
+other ("keep in sync with X"), or — longer-term — generate the push script's
+column lists programmatically by parsing the `.sql` file, to guarantee they can't
+diverge. Not blocking for this phase given the documented one-off nature.
+
+---
+
+_Reviewed: 2026-06-15T10:36:00Z_
+_Reviewer: Claude (gsd-code-reviewer)_
+_Depth: standard_

.planning/phases/12-offer-composition-drag-drop-csv-import/12-UI-SPEC.md

@@ -0,0 +1,578 @@
+---
+phase: 12
+slug: offer-editor-tier-tag-prezzo-pubblico
+status: draft
+shadcn_initialized: true
+preset: default
+created: 2026-06-14
+---
+
+# Phase 12 — UI Design Contract
+## Offer Editor — Tier A/B/C, Tag & Prezzo Pubblico
+
+> Visual and interaction contract for the Offer Editor: list page + detail editor with 3-tier checkbox matrix, multi-dimensional tags, and structured transformation promise. Generated by gsd-ui-researcher, verified by gsd-ui-checker.
+
+---
+
+## Design System
+
+| Property | Value |
+|----------|-------|
+| Tool | shadcn/ui |
+| Preset | default (existing, Phase 11 forward) |
+| Component library | radix |
+| Icon library | Lucide React |
+| Font | Geist Sans |
+| Design direction | ClickUp/Pipedrive minimal flat style (per DESIGN-SYSTEM.md) |
+
+**Notes:** Phase 12 builds on Phase 11's established database-view UX (inline edit, tag multi-select, EditableCell). All colors, spacing, typography inherited from Phase 11 and project globals. No new design system tokens introduced.
+
+---
+
+## Spacing Scale
+
+Multiples of 4px per project standard:
+
+| Token | Value | Usage |
+|-------|-------|-------|
+| xs | 4px | Icon gaps, inline padding |
+| sm | 8px | Compact element spacing, tag chip gaps |
+| md | 16px | Default cell/control spacing, table row padding |
+| lg | 24px | Section padding, card margin, tag dimension spacing |
+| xl | 32px | Layout gaps between sections |
+| 2xl | 48px | Major section breaks |
+| 3xl | 64px | Page-level spacing |
+
+Exceptions: None
+
+---
+
+## Typography
+
+Phase 12 reuses Phase 11 typography (no new sizes introduced). Two weights only (400 regular, 600 bold):
+
+| Role | Size | Weight | Line Height |
+|------|------|--------|-------------|
+| Body | 14px | 400 | 1.5 |
+| Label | 12px | 400 | 1.5 |
+| Heading (h3) | 16px | 600 | 1.2 |
+| Heading (h2) | 20px | 600 | 1.2 |
+
+---
+
+## Color
+
+Phase 12 uses Phase 11 color contract (invariant brand tokens):
+
+| Role | Value | Usage |
+|------|-------|-------|
+| Dominant (60%) | #ffffff | Page/card backgrounds, editor surfaces |
+| Secondary (30%) | #f9f9f9 | Muted backgrounds, table headers, category filter chips (inactive) |
+| Accent (10%) | #1A463C | Primary CTAs ("Salva Offerta"), focus ring, active/selected state, active filter chips |
+| Accent secondary | #DEF168 | Status indicators (archived badge), active offer state |
+| Destructive | #dc2626 | Archive/delete actions only |
+| Muted text | #71717a | Placeholders, metadata, disabled states, inactive labels |
+| Border | #e5e7eb | Cell/block dividers, table borders |
+
+**Accent reserved for:**
+- "Salva Offerta" primary CTA button
+- Focus ring on EditableCell, TagMultiSelect, and input fields
+- Active state indicator (category filter chip, active tags)
+- Selection highlight in checkbox matrix
+
+---
+
+## Components & Interaction Patterns
+
+All patterns inherited from Phase 11 (EditableCell, TagMultiSelect, database-view table) and extended for offer composition and tier management.
+
+### 1. Offer List Page (`/admin/offers`)
+
+**Purpose:** Display all offers (active + optionally archived) in a filterable card grid. Admin can create new offers, filter by category, and toggle archive view.
+
+**Layout Structure:**
+```
+┌──────────────────────────────────────────────────────────────┐
+│ Offerte                                  [+ Nuova Offerta]    │
+├──────────────────────────────────────────────────────────────┤
+│ Filter row:                                                   │
+│ [Tutti] [Entry Offer] [Signature Offer] [Retainer Offer]    │
+│ Mostra offerte archiviate: [toggle off]                      │
+│                                                               │
+│ ┌──────────────┐  ┌──────────────┐  ┌──────────────┐         │
+│ │ Offerta 1    │  │ Offerta 2    │  │ Offerta 3    │         │
+│ │ Breve desc   │  │ Breve desc   │  │ Breve desc   │         │
+│ │ [Signature]  │  │ [Entry]      │  │ [Retainer]   │         │
+│ └──────────────┘  └──────────────┘  └──────────────┘         │
+│                                                               │
+│ [card 4] [card 5] [card 6]                                   │
+└──────────────────────────────────────────────────────────────┘
+```
+
+#### A. Page Header
+- **Title:** "Offerte" (h2, 20px/600, black)
+- **Primary CTA:** "+ Nuova Offerta" button (bg #1A463C, text white, right-aligned)
+
+#### B. Filter Row
+- **Category filter chips:** Buttons for "Tutti", "Entry Offer", "Signature Offer", "Retainer Offer"
+  - Inactive: border #e5e7eb, text #71717a, bg transparent
+  - Active: border #1A463C, text #1A463C, bg transparent (or solid #1A463C text white — planner decides)
+  - Spacing between chips: 8px (sm)
+- **Archive toggle:** "Mostra offerte archiviate" text label + checkbox or toggle switch
+  - Position: right side of filter row OR below filter chips on tablet/mobile
+  - Label color: #71717a
+  - Toggle: standard checkbox or `<Switch>` component from shadcn
+
+#### C. Offer Card Grid
+- **Grid layout:** 3 columns on desktop (≥1024px), 2 on tablet (768–1023px), 1 on mobile (<768px)
+- **Card dimensions:** ~280px width, responsive height (min 140px)
+- **Card structure:**
+  ```
+  ┌───────────────────────────┐
+  │ Offerta Name (editable?)  │  ← h3/16px/600
+  │                           │
+  │ Breve descrizione         │  ← body/14px/400, 2 lines max, ellipsis
+  │                           │
+  │ [Categoria Chip]          │  ← single category badge
+  │                           │
+  │ [archived badge] [edit]   │  ← conditional
+  └───────────────────────────┘
+  ```
+- **Card styling:**
+  - Background: white (#ffffff)
+  - Border: #e5e7eb, 1px
+  - Padding: 16px (md)
+  - Border-radius: 8px
+  - Hover: `cursor-pointer`, subtle shadow (box-shadow: 0 4px 12px rgba(0,0,0,0.08))
+- **Offer name:** Clickable, links to detail editor
+- **Short description:** Body text, truncated at 2 lines
+- **Category badge:** Single chip (Entry/Signature/Retainer), color-coded (TBD by planner; suggest brand palette shades)
+- **Archived badge:** Red text "Archiviata" (only if offer is archived)
+- **Edit icon:** Optional Lucide pencil icon (top-right corner), links to detail editor
+
+#### D. Empty State
+- When no offers exist: centered section with
+  - Icon: Lucide briefcase or package (48px, #71717a)
+  - Heading: "Nessuna offerta" (h3)
+  - Copy: "Inizia creando la tua prima offerta" (body, #71717a)
+  - CTA: "+ Nuova Offerta" button
+
+---
+
+### 2. Offer Editor (Detail Page) (`/admin/offers/[id]/edit` or modal)
+
+**Purpose:** Create/edit a complete offer with 3 tiers (A/B/C), service composition via checkbox matrix, tag system, and transformation promise.
+
+**Page Structure:**
+```
+┌───────────────────────────────────────────────────────────────┐
+│ ← Indietro  |  Modifica Offerta                              │
+├───────────────────────────────────────────────────────────────┤
+│                                                               │
+│ [Offerta Name — editable inline]   [Category] [Ticket]       │
+│                                                               │
+│ ┌─────────────────────────────────────────────────────────┐  │
+│ │ Tags (4 dimensions):                                    │  │
+│ │ Categoria: [Signature Offer]                           │  │
+│ │ Ticket: [Low Ticket / Mid Ticket / High Ticket]       │  │
+│ │ Tipo: [Audit] [Done For You] [+ Crea Tipo]           │  │
+│ │ Obiettivo: [Primo Acquisto] [Up Scala] [+ Crea Obj]  │  │
+│ └─────────────────────────────────────────────────────────┘  │
+│                                                               │
+│ [Divider]                                                    │
+│                                                               │
+│ SERVIZI INCLUSI                                             │
+│ ┌─────────────────────────────────────────────────────────┐  │
+│ │ Servizio          Prezzo    │    A    │    B    │    C  │  │
+│ ├─────────────────────────────────────────────────────────┤  │
+│ │ Service 1         €100      │ ☑ │ ☐ │ ☐ │          │  │
+│ │ Service 2         €250      │ ☐ │ ☑ │ ☑ │          │  │
+│ │ ...               ...       │...│...│... │          │  │
+│ ├─────────────────────────────────────────────────────────┤  │
+│ │ Totale Servizi    —         │€350│€500│€250│        │  │
+│ ├─────────────────────────────────────────────────────────┤  │
+│ │ Prezzo Pubblico   —         │€499│€699│€349│        │  │
+│ └─────────────────────────────────────────────────────────┘  │
+│                                                               │
+│ [Divider]                                                    │
+│                                                               │
+│ PROMESSA DI TRASFORMAZIONE                                 │
+│ ┌─────────────────────────────────────────────────────────┐  │
+│ │ Aiuto:       [Client Ideal — editable inline]          │  │
+│ │ A ottenere:  [Result — editable inline]                │  │
+│ │ In:          [Estimated Time — editable inline]        │  │
+│ │ Senza:       [Pain Point — editable inline]            │  │
+│ │ Grazie a:    [Proprietary Method — editable inline]    │  │
+│ └─────────────────────────────────────────────────────────┘  │
+│                                                               │
+│ [Salva Offerta] [Annulla] [Archivia]                        │
+└───────────────────────────────────────────────────────────────┘
+```
+
+#### A. Header & Navigation
+- **Back button:** "← Indietro" (left-aligned, links to `/admin/offers`)
+- **Page title:** "Modifica Offerta" (h2, 20px/600) OR "Crea Offerta" if new
+
+#### B. Offer Name & Quick Category/Ticket Display
+- **Name field:** EditableCell (text), required, displayed as h3
+- **Category chip:** Single-select tag (Entry/Signature/Retainer), visually prominent
+- **Ticket chip:** Single-select tag (Low/Mid/High Ticket), visually secondary
+
+#### C. Tags Block (4 Dimensions)
+
+**Structure:**
+- Section label: "Tag" (h3, 16px/600)
+- Four rows (one per dimension):
+  1. **Categoria** (single): "Entry Offer" / "Signature Offer" / "Retainer Offer"
+  2. **Ticket** (single): "Low Ticket" / "Mid Ticket" / "High Ticket"
+  3. **Tipo** (multi): "Audit", "Done For You", "+ Crea Tipo" (add new)
+  4. **Obiettivo** (multi): "Primo Acquisto", "Up Scala Valore", "Lead Generation", "+ Crea Obiettivo"
+
+**Styling per dimension:**
+- Dimension label: 12px/400, bold, #71717a
+- Tags/chips: Use inherited TagMultiSelect component (from Phase 11)
+  - Single-select (Categoria, Ticket): radio-like, one active chip at a time
+  - Multi-select (Tipo, Obiettivo): checkbox-like, multiple active chips
+  - Color: deterministic hash-based colors (6-8 color palette, per Phase 11 pattern)
+  - Add action: "+ Crea [Dimension Name]" link/button inline
+- Spacing between rows: 16px (md)
+
+#### D. Services Matrix (Tier A/B/C)
+
+**Section label:** "Servizi Inclusi" (h3)
+
+**Table structure:**
+- **Columns:** Service Name | Unit Price | Tier A (checkbox) | Tier B (checkbox) | Tier C (checkbox)
+- **Header row:**
+  - Left: "Servizio" (12px/400, bold)
+  - Cols: "Prezzo" (right-aligned) + "A", "B", "C" (centered, column headers)
+  - Header background: #f9f9f9
+  - Header border-bottom: #e5e7eb
+- **Service rows:**
+  - Service name (left, flex-grow)
+  - Unit price (right-aligned, tabular nums, "€X,XX")
+  - Checkbox per tier (centered)
+    - Style: standard `<input type="checkbox">`
+    - Color: #1A463C when checked
+    - Interaction: Click to toggle; live total updates immediately
+  - Row height: ~40px
+  - Border-bottom: #e5e7eb
+  - Hover: subtle background #f9f9f9 on the entire row
+- **Services filtered by category:** Only show services whose `services.category` matches the offer's selected category (Categoria tag)
+- **Row order:** Configurable (drag-to-reorder via @dnd-kit optional; planner decides)
+
+**Totals rows** (sticky to bottom of table):
+1. **Totale Servizi** (auto-calculated):
+   - Row label: "Totale Servizi" (bold, 14px/600)
+   - Per tier: SUM of unit_price for all services with checkbox ☑ in that tier
+   - Format: "€X,XXX.XX"
+   - Updates **live** as checkboxes are toggled (no page reload)
+   - Color: bold text, #1a1a1a
+
+2. **Prezzo Pubblico** (manual input):
+   - Row label: "Prezzo Pubblico" (bold, 14px/600)
+   - Per tier: EditableCell (number type)
+   - Placeholder: "€0,00" or empty
+   - Format: "€X,XXX.XX"
+   - Interaction: Click to edit, blur/Enter to save, Esc to cancel
+   - Independent of "Totale Servizi" — user can set any value
+   - Validation: numeric, ≥ 0, max 2 decimals
+
+**Empty state (no services matching category):**
+- Placeholder text: "Nessun servizio disponibile per questa categoria" (#71717a)
+- Table still visible but with placeholder row
+
+---
+
+#### E. Transformation Promise Block
+
+**Section label:** "Promessa di Trasformazione" (h3)
+
+**Structure:** 5 editable fields, each a key-value pair:
+```
+Aiuto:       [Client Ideal — input text, 60 chars]
+A ottenere:  [Result — input text, 60 chars]
+In:          [Time — input text, 30 chars, e.g. "3 mesi"]
+Senza:       [Pain — input text, 60 chars]
+Grazie a:    [Method — input text, 60 chars]
+```
+
+**Implementation:**
+- Each field is an EditableCell (text type, optional)
+- Field label (dim): 12px/400, color #71717a
+- Input placeholder: "Aggiungi [field name]" (muted)
+- No asterisk (all optional)
+- Layout: horizontal label-value pairs, or stacked label-over-input depending on space
+  - On desktop: consider 2-column or full-width labels
+  - Tablet/mobile: stack vertically
+- Spacing between fields: 16px (md)
+- Background: optional subtle bg #f9f9f9, or transparent (planner decides)
+- Border: none, or bottom-border only on each field
+- Focus ring: #1A463C when in edit mode (EditableCell pattern)
+
+---
+
+#### F. Action Buttons
+
+**Bottom of editor:**
+- **[Salva Offerta]** (primary CTA)
+  - Button: bg #1A463C, text white, 14px/600, padding 16px 24px
+  - Position: left-aligned
+  - On click: Submit form, validate all required fields (name + category + at least 1 service selected in 1 tier), save to DB, redirect to `/admin/offers`, show toast "Offerta salvata"
+  - Disabled state: if no tiers have services selected, button disabled with tooltip "Seleziona almeno un servizio"
+
+- **[Annulla]** (secondary CTA)
+  - Button: border #e5e7eb, text #1a1a1a, no fill
+  - On click: Discard unsaved changes, redirect to `/admin/offers`
+  - Optional confirmation: if form is dirty, "Scartare le modifiche?" dialog
+
+- **[Archivia]** (destructive action, visible only on edit, not on create)
+  - Button: text #dc2626, no fill
+  - On click: Toggle offer `is_archived` flag
+  - Confirmation required: "Sei sicuro? L'offerta non sarà visibile nella lista." [Annulla] [Archivia]
+  - After confirm: Save, show toast "Offerta archiviata", redirect to `/admin/offers`
+
+**Spacing between buttons:** 8px (sm)
+
+---
+
+### 3. Tag Creation Inline ("Crea Tipo", "Crea Obiettivo")
+
+**Interaction:** When user clicks "+ Crea [Dimension]", an input field appears inline (or in a small popover).
+
+**Structure:**
+- Text input: placeholder "Nome [Dimension]..."
+- On Enter or click checkmark: Create tag (server action `addTagToOffer`), add to active tags list
+- On Esc or click X: Cancel, close input
+- On success: Input clears, new tag appears in the chip list with deterministic color
+
+**Validation:**
+- Required: tag name 1-30 chars
+- Trimmed whitespace
+- Case-insensitive duplicate check per dimension (warn: "Questo tag esiste già")
+
+---
+
+## Copywriting Contract
+
+| Element | Copy | Context |
+|---------|------|---------|
+| **Offer list heading** | "Offerte" | Page title |
+| **Create offer CTA** | "+ Nuova Offerta" | Primary action on list |
+| **Back link** | "← Indietro" | Breadcrumb/nav on detail |
+| **Archive toggle label** | "Mostra offerte archiviate" | Filter checkbox |
+| **Edit page heading** | "Modifica Offerta" | Detail page title (or "Crea Offerta" if new) |
+| **Tags section label** | "Tag" | Section heading |
+| **Category dimension** | "Categoria" | Single-select label |
+| **Ticket dimension** | "Ticket" | Single-select label |
+| **Type dimension** | "Tipo" | Multi-select label |
+| **Objective dimension** | "Obiettivo" | Multi-select label |
+| **Create type link** | "+ Crea Tipo" | Inline tag creation |
+| **Create objective link** | "+ Crea Obiettivo" | Inline tag creation |
+| **Services section label** | "Servizi Inclusi" | Table heading |
+| **Service column header** | "Servizio" | Table column |
+| **Price column header** | "Prezzo" | Table column |
+| **Tier headers** | "A", "B", "C" | Table columns (single letters) |
+| **Services total label** | "Totale Servizi" | Calculated row |
+| **Public price label** | "Prezzo Pubblico" | Manual input row |
+| **Transformation block label** | "Promessa di Trasformazione" | Section heading |
+| **Ideal client label** | "Aiuto" | Field label |
+| **Result label** | "A ottenere" | Field label |
+| **Duration label** | "In" | Field label (e.g., "3 mesi") |
+| **Pain label** | "Senza" | Field label |
+| **Method label** | "Grazie a" | Field label |
+| **Save CTA** | "Salva Offerta" | Primary action (verb + noun) |
+| **Cancel CTA** | "Annulla" | Secondary action |
+| **Archive CTA** | "Archivia" | Destructive action (visible on edit only) |
+| **Archive confirmation** | "Sei sicuro? L'offerta non sarà visibile nella lista." | Destructive confirmation copy + context |
+| **Empty services message** | "Nessun servizio disponibile per questa categoria" | Conditional placeholder |
+| **Empty offers message** | "Nessuna offerta" | List page empty state heading |
+| **Empty offers hint** | "Inizia creando la tua prima offerta" | List page empty state body |
+| **Save success toast** | "Offerta salvata" | Success feedback |
+| **Archive success toast** | "Offerta archiviata" | Success feedback |
+| **Save error toast** | "Errore nel salvataggio. Verifica i campi." | Error feedback |
+| **Tag name placeholder** | "Nome tag..." | Create tag input |
+| **Duplicate tag warning** | "Questo tag esiste già" | Validation error |
+| **Disabled save tooltip** | "Seleziona almeno un servizio" | Constraint message |
+
+---
+
+## Interaction & State Management
+
+### Checkbox Matrix Behavior
+- **On checkbox toggle:** Live recalculation of "Totale Servizi" for that tier (no network call)
+- **Debounce:** None — updates instant as user clicks
+- **Persistence:** On "Salva Offerta" click, POST all tier compositions to backend
+- **Validation on save:** At least 1 tier must have ≥1 service selected (backend confirms)
+
+### Tag Dimensions
+- **Categoria & Ticket:** Single-select (user can only have one value per offer)
+  - UI: Radio-button-like chips or dropdown — planner decides
+  - Switching to a different service category auto-filters the services matrix
+- **Tipo & Obiettivo:** Multi-select (user can have 0..N values per offer)
+  - UI: Checkbox-like chips (inherited TagMultiSelect pattern)
+  - Tag creation inline: "+ Crea Tipo" / "+ Crea Obiettivo"
+  - Duplicate check: case-insensitive per dimension (warn and skip)
+  - Color: deterministic based on tag name hash (6-8 color palette, per Phase 11)
+
+### Archive Workflow
+- Archive is a toggle, not permanent deletion
+- Archived offers are hidden from list by default (togglable via "Mostra offerte archiviate")
+- On edit page, "Archivia" button only visible if offer is not already archived (or toggle text changes to "Ripristina")
+- Confirmation required for destructive state change
+
+### Edit State Management
+- Form is dirty if any field changed since load
+- On cancel with unsaved changes: confirmation dialog "Scartare le modifiche?"
+- On back button navigation: same check (browser may warn too)
+- Auto-save optional (planner decides) — recommend explicit "Salva" for clarity
+
+---
+
+## Visual States
+
+### Offer Card States
+| State | Visual |
+|-------|--------|
+| Default | White card, border #e5e7eb, normal shadow |
+| Hover | `cursor-pointer`, shadow deepens (0 4px 12px rgba(0,0,0,0.08)) |
+| Archived | Gray text, optional red "Archiviata" badge top-right |
+
+### Checkbox States
+| State | Visual |
+|-------|--------|
+| Unchecked | Empty square, border #e5e7eb |
+| Checked | Filled square, bg #1A463C, white checkmark |
+| Hover | Cursor pointer, subtle border darken |
+| Disabled | Gray box, opacity-50, no cursor |
+
+### Editable Field States (EditableCell)
+| State | Visual |
+|-------|--------|
+| Display mode | Normal text, `cursor-pointer`, hover bg #f0f0f0 |
+| Edit mode | Input with ring-1 ring-#1A463C on focus |
+| Error | Ring-1 ring-#dc2626, error message below |
+| Disabled | Gray text, opacity-50, no cursor |
+
+### Tag States (TagMultiSelect)
+| State | Visual |
+|-------|--------|
+| Display | Colored chip (6-8 colors), text inside, X icon to remove |
+| Hover | Slight opacity change on X icon |
+| Add mode | Input field + "+ Aggiungi" button (or Enter to confirm) |
+| Create new | Temporary placeholder, then colored chip with new tag name |
+
+### Category Filter Chip States (List Page)
+| State | Visual |
+|-------|--------|
+| Inactive | Border #e5e7eb, text #71717a, bg transparent, `cursor-pointer` |
+| Active | Border #1A463C, text #1A463C (or bg #1A463C text white — planner decides) |
+| Hover | Border darken slightly |
+
+---
+
+## Responsive Behavior
+
+**Desktop (≥1024px):**
+- Offer list: 3-column card grid
+- Filter chips: horizontal row
+- Services matrix: full-width table, horizontal scroll if needed
+- Editor sections: full-width, stacked vertically
+
+**Tablet (768px–1023px):**
+- Offer list: 2-column card grid
+- Filter chips: wrap horizontally or scroll if needed
+- Services matrix: horizontal scroll (sticky left column optional)
+- Tag fields: stack or 2-column layout (planner decides)
+
+**Mobile (<768px):**
+- Offer list: 1-column card stack
+- Filter chips: vertical stack OR horizontal scroll in a container
+- Services matrix: horizontal scroll with sticky "Servizio" + "Prezzo" columns
+- Tag fields: stack vertically
+- Buttons: full-width stack
+- Archive toggle: move below filter chips
+
+---
+
+## Registry Safety
+
+| Registry | Blocks Used | Safety Gate |
+|----------|-------------|-------------|
+| shadcn official | button, input, dialog, badge, table, form, checkbox | not required (official shadcn) |
+| @dnd-kit | core, sortable, utilities (optional for row reordering) | not required (npm package, not registry) |
+
+---
+
+## Checker Sign-Off
+
+- [ ] Dimension 1 Copywriting: All labels/CTAs use verb+noun, destructive actions clear ("Archivia" + confirmation), tag creation inline
+- [ ] Dimension 2 Visuals: Checkbox matrix clear, live totals update instant, archive badge visible, tag colors consistent
+- [ ] Dimension 3 Color: Accent (#1A463C) reserved for primary CTA ("Salva Offerta"), focus ring, active filter chip; destructive (#dc2626) for archive only
+- [ ] Dimension 4 Typography: Body 14px/400, labels 12px/400, headings 16–20px/600 — all per Phase 11 contract (2 weights only)
+- [ ] Dimension 5 Spacing: All gaps/padding multiples of 4px, card padding 16px (md), section gaps 24px (lg), row height ~40px
+- [ ] Dimension 6 Registry Safety: shadcn official + npm packages, no third-party registries
+
+**Approval:** pending
+
+---
+
+## Notes for Planner
+
+1. **Service filtering by category:** Implement dynamic filter on the services matrix when Categoria tag changes. Query: fetch all services WHERE `services.category = offer.categoria_tag_value`.
+
+2. **Live total calculation:** Client-side state, no server call. Recalculate sum of unit prices for all checked services in each tier on every checkbox toggle.
+
+3. **Three tiers (A/B/C):** Map to `offer_micros` table, one micro per tier. Store which services are assigned via new `offer_tier_services` junction table (additive, not modifying legacy `offer_micro_services`).
+
+4. **Tag dimensions:** Use Phase 11's polymorphic `tags` table with `entity_type = "offer_macros"`. Add optional `dimension` column to distinguish Categoria/Ticket/Tipo/Obiettivo (or use tag name prefixes, planner decides). Single-select for Categoria/Ticket likely stored on `offer_macros` columns directly (simpler).
+
+5. **Tag creation on the fly:** User can create new tag values during editing. Server action: `addTagToOffer(offerId, dimension, tagName)`. Validation + idempotency (onConflictDoNothing).
+
+6. **Archive flag:** Add boolean `is_archived` column to `offer_macros` (additive migration). Filter in list query: WHERE is_archived = false (or include if toggle is on).
+
+7. **Edit page routing:** Consider `/admin/offers/[id]/edit` (new page) or modal overlay. Both work; full-page simpler for first iteration.
+
+8. **Services matrix columns:** Each tier (A/B/C) is visually a column with checkboxes. Sticky header recommended. Sticky left column (service name + price) optional on mobile/tablet.
+
+9. **Transformation promise fields:** All optional. Can be empty string. EditableCell (text) pattern from Phase 11.
+
+10. **Disable "Salva" button validation:**
+    - Rule: at least 1 tier must have ≥1 service checked
+    - If all tiers unchecked: button disabled with tooltip
+    - On submit: backend also validates (server-side check)
+
+11. **Category filter on list:** Clicking a chip sets active filter. API: `GET /admin/offers?category=entry` (or all if "Tutti"). Auto-refresh list.
+
+12. **Migration strategy:** Additive only. Do NOT modify existing `offer_macros`, `offer_micros`, `offer_micro_services` — extend with:
+    - `offer_tier_services` (new junction: tier_id → service_id)
+    - `offer_macros.is_archived` (boolean, default false)
+    - Optionally: structured promise fields on `offer_macros` (cliente_ideale, risultato, tempo, pain, metodo)
+    - Optionally: `services.category` → verify not already used (check Phase 11 usage first)
+
+13. **Dry run before prod:** Test with existing offer data. Verify no data loss. Run audit script to confirm migration integrity.
+
+---
+
+## Requirements Traceability
+
+| Requirement | Phase 12 Coverage |
+|-------------|------------------|
+| OFFER-11 | Offer editor: checkbox matrix, 3 tiers (A/B/C), live totals ✓ |
+| OFFER-15 | 4-dimensional tags (Categoria/Ticket/Tipo/Obiettivo), creatable on-the-fly ✓ |
+| OFFER-16 | Manual "Prezzo Pubblico" per tier, independent of service total ✓ |
+| OFFER-17 | Structured transformation promise (5 fields) ✓ |
+| OFFER-18 | List page filterable by category, archive toggle ✓ |
+
+---
+
+## Deferred Items
+
+- **CSV/Notion import** (OFFER-12): Deferred to future phase per user decision (2026-06-14)
+- **Drag-to-reorder services** (optional @dnd-kit): Not required for MVP; can be added in post-phase enhancement
+
+---
+
+*UI-SPEC regenerated: 2026-06-14*
+*Design system source: Phase 11 (inherited), no new tokens*
+*Scope: Offer Editor (list + detail) with 3-tier checkbox matrix, multi-dimensional tags, manual pricing, transformation promise*

.planning/phases/12-offer-composition-drag-drop-csv-import/12-VERIFICATION.md

@@ -0,0 +1,136 @@
+---
+phase: 12
+verified: 2026-06-18T17:19:00+02:00
+requirements:
+  OFFER-11: PASS
+  OFFER-15: PASS
+  OFFER-16: PASS
+  OFFER-17: PASS
+  OFFER-18: PASS
+overall: PASS
+---
+
+# Phase 12: Offer Editor — Verification Report
+
+**Phase Goal:** Build a full offer editor allowing admin to compose offers with 3 tiers (A/B/C), assign services via checkbox matrix, set per-tier public price, add 4-dimension tags (tipo/obiettivo creatable, categoria/ticket single-select), write a structured transformation promise (5 fields), and manage an offer list with category filter and archive toggle.
+
+**Verified:** 2026-06-18T17:19:00+02:00
+**Status:** PASS
+**Re-verification:** No — initial verification
+
+---
+
+## OFFER-11: Tier A/B/C checkbox matrix with live totals
+
+**Verdict: PASS**
+
+**Schema** (`src/db/schema.ts`): `offer_micros.tier_letter` (text, values A/B/C enforced by DB CHECK constraint in migration 0008) and `offer_tier_services` junction table (tier_id → offer_micros.id, service_id → services.id, composite PK) are both present and properly defined. Relations are wired: `offerMicrosRelations` includes `tierServices: many(offer_tier_services)`.
+
+**Migration** (`src/db/migrations/0008_offer_tier_schema.sql`): Adds `tier_letter` and `public_price` columns to `offer_micros`, adds a guarded CHECK constraint (`tier_letter IN ('A','B','C')`), and creates the `offer_tier_services` table — all with `IF NOT EXISTS` guards, fully additive.
+
+**Query layer** (`src/lib/offer-queries.ts`, `getOfferEditorData`): Fetches tiers ordered A→B→C via a CASE expression, then fetches `offer_tier_services` rows for all tier IDs in one query, and computes `servicesTotal` per tier with a `SUM(unit_price)` GROUP BY. Returns `assignedServiceIds[]` and `servicesTotal` per tier.
+
+**Editor UI** (`src/components/admin/offers/OfferEditorClient.tsx`):
+- `padTiers()` ensures all three tier slots (A, B, C) are always present in state, creating empty tier objects for any letter not yet persisted.
+- `toggleService(tierIdx, serviceId)` updates `assignedServiceIds` in React state immutably.
+- `tierTotals` is a `useMemo` that re-derives a per-tier sum from `assignedServiceIds` and `filteredServices.unit_price` on every render — this is the live total.
+- The tfoot row "Totale Servizi" renders `tierTotals[idx]` for each column (lines 371–378).
+- Checkboxes at lines 353–360 bind `checked={tier.assignedServiceIds.includes(service.id)}` and `onChange={() => toggleService(tierIdx, service.id)}` — the matrix is fully wired.
+
+**Persistence** (`src/app/admin/offers/actions.ts`, `saveOfferEditor`): Zod schema enforces `tier_letter: z.enum(["A","B","C"])`. Each tier is upserted (update if `id` present, insert otherwise), then `offer_tier_services` is delete-then-reinserted — correct upsert-replace pattern.
+
+---
+
+## OFFER-15: 4-dimension tags (categoria, ticket, tipo, obiettivo)
+
+**Verdict: PASS**
+
+**Schema:** `offer_macros.category` (text, single-select) and `offer_macros.ticket` (text, single-select) added in migration 0008. Tipo/Obiettivo reuse the Phase 11 polymorphic `tags` table with entity_type scoped to `"offer_macros.tipo"` and `"offer_macros.obiettivo"` — separate pools from `"services"` and `"leads"` per the D-06 pattern documented in schema comments.
+
+**Query layer** (`getOfferEditorData`): Fetches tipo/obiettivo tag rows filtered by `inArray(tags.entity_type, [OFFER_TIPO_ENTITY, OFFER_OBIETTIVO_ENTITY])` and splits them into `tipoTags[]` and `obiettivoTags[]`. `getOfferFieldOptions` returns `categoria`, `ticket`, `tipo`, `obiettivo` option pools via `selectDistinct`.
+
+**Editor UI** (`OfferEditorClient.tsx`):
+- `OptionSelect` components render categoria (line 262) and ticket (line 272) as single-select Notion-style dropdowns with rename support.
+- `OptionMultiSelect` components render tipo (line 284) and obiettivo (line 299) as multi-select with `onAdd` (creatable — if value not in options, adds to local options state), `onRemove`, and `onRename` callbacks.
+- Options are creatable on-the-fly: `onAdd` at line 288 calls `setTipoOptions((prev) => [...prev, v])` when the value is new.
+
+**Persistence** (`saveOfferEditor`): Tipo/Obiettivo tags are delete-then-reinserted (lines 242–263) with `onConflictDoNothing()`. Categoria/ticket are saved as scalar columns on `offer_macros`. Standalone `addOfferTag`/`removeOfferTag` actions exist for granular tag mutations.
+
+**Rename propagation** (`renameOfferOption`): Updates `offer_macros.category` / `offer_macros.ticket` in bulk for single-select dimensions, and `tags.name` for tipo/obiettivo — correct cross-row rename.
+
+---
+
+## OFFER-16: Per-tier manual public price
+
+**Verdict: PASS**
+
+**Schema** (`offer_micros.public_price`): `numeric(10,2)`, nullable, added in migration 0008. Distinct from the `servicesTotal` which is computed at query time and never stored.
+
+**Query layer** (`getOfferEditorData`): Returns `public_price: tier.public_price` (raw DB value, nullable string) per tier in `OfferTierData`.
+
+**Editor UI** (`OfferEditorClient.tsx` lines 381–397): The tfoot row "Prezzo Pubblico" renders one `<input type="number">` per tier column, bound to `tier.public_price` and calling `updateTierPublicPrice(tierIdx, e.target.value)`. This is independent of the "Totale Servizi" row above it — two separate tfoot rows, two separate state values.
+
+**Persistence** (`saveOfferEditor`): `tier.public_price` is converted with `tier.public_price != null ? String(tier.public_price) : null` and written to `offer_micros.public_price` on upsert. Zod schema: `public_price: z.coerce.number().min(0).optional().nullable()`.
+
+---
+
+## OFFER-17: Structured transformation promise (5 fields)
+
+**Verdict: PASS**
+
+**Schema** (`offer_macros`): Five columns added in migration 0008 — `cliente_ideale`, `risultato`, `tempo`, `pain`, `metodo` — all text, nullable. These are distinct from the pre-existing free-text `transformation_promise` column (retained untouched).
+
+**Query layer** (`getOfferEditorData`): `db.select().from(offer_macros)` returns all columns including the five new ones. The `OfferMacro` type (inferred from schema) includes them.
+
+**Editor UI** (`OfferEditorClient.tsx` lines 404–467): "Promessa di Trasformazione" section renders five `EditableCell` fields:
+- "Aiuto" → `cliente_ideale`
+- "A ottenere" → `risultato`
+- "In" → `tempo`
+- "Senza" → `pain`
+- "Grazie a" → `metodo`
+
+Each calls `updateMacro(key, v)` on save, updating the `macro` state object. All five are initialized from `data.macro.*` at component mount.
+
+**Persistence** (`saveOfferEditor`): All five fields are explicitly mapped in the `db.update(offer_macros).set({...})` call (lines 186–196), with `|| null` coercion for empty strings.
+
+---
+
+## OFFER-18: Offer list filterable by category, archive toggle
+
+**Verdict: PASS**
+
+**Schema** (`offer_macros.is_archived`): `boolean NOT NULL DEFAULT false`, added in migration 0008.
+
+**Query layer** (`getOfferListCards`): Returns all offers including archived ones (archived filtering is client-side per spec). Returns `id`, `internal_name`, `description`, `category`, `is_archived`.
+
+**List page** (`src/app/admin/offers/page.tsx`): Calls `getOfferListCards()` and `getOfferFieldOptions()` in parallel, passes `cards` and `options.categoria` to `OfferListClient`.
+
+**List component** (`OfferListClient.tsx`):
+- `activeCategory` state (null = all) drives filter chip selection; "Tutti" chip and one chip per category from `categoryOptions`.
+- `showArchived` state (default false) drives the "Mostra offerte archiviate" checkbox.
+- `filteredCards` useMemo at lines 26–32 applies both filters simultaneously: `(activeCategory === null || c.category === activeCategory) && (showArchived || !c.is_archived)`.
+- Archived offers render with a red "Archiviata" label on the card.
+- `toggleOfferArchived(macroId, true)` server action archives an offer from the editor (OFFER-18 archive action). Restore path: the action accepts `archived: boolean` so it can also unarchive, though no unarchive button exists in the editor UI — unarchiving requires the list to show the card via the toggle and navigate to edit.
+
+**Archive action** (`actions.ts` line 267–271): `toggleOfferArchived` updates `offer_macros.is_archived` and calls `revalidatePath("/admin/offers")`.
+
+---
+
+## Anti-patterns scan
+
+No placeholder returns (`return null`, `return {}`, `return []` as stubs) found in the key files. The `canSave` guard (`tiers.some((t) => t.assignedServiceIds.length > 0)`) prevents saving a hollow offer but is not a stub — it is a real UX validation. The `emptyTier()` function returns zero-state structs used to pad the three-slot display; they are overwritten by real data fetched from the DB.
+
+The `servicesTotal: "0"` in `emptyTier` is an initial display value for unpersisted tiers — not a stub, as the live `tierTotals` useMemo recomputes from `assignedServiceIds` state on every checkbox change.
+
+---
+
+## Notes
+
+1. **Unarchive flow is implicit.** There is no "Unarchive" button in the editor. The only way to restore an archived offer is: enable "Mostra offerte archiviate" on the list page, click into the offer, and call `toggleOfferArchived(id, false)` — which exists in `actions.ts` but has no UI trigger for `archived=false` in `OfferEditorClient.tsx`. This is a minor UX gap but does not block any of OFFER-11 through OFFER-18 as specified. The archiving requirement (OFFER-18) asks for "archive toggle" — the toggle on the list is the show/hide toggle; archiving itself works via the editor button. Unarchiving is not called out in the requirements.
+
+2. **`canSave` gate.** The "Salva Offerta" button is disabled unless at least one tier has a service assigned. This means an offer with only transformation promise fields filled and no services cannot be saved. This aligns with OFFER-11's framing of service assignment as the core editor operation.
+
+---
+
+_Verified: 2026-06-18T17:19:00+02:00_
+_Verifier: Claude (gsd-verifier)_

.planning/phases/14-crm-attio-style-fix/14-01-PLAN.md

@@ -0,0 +1,575 @@
+---
+phase: 14-crm-attio-style-fix
+plan: 01
+type: execute
+wave: 1
+depends_on: []
+files_modified:
+  - src/lib/admin-queries.ts
+  - src/app/admin/leads/actions.ts
+autonomous: true
+requirements: [CRM-08, CRM-09]
+
+must_haves:
+  truths:
+    - "Querying getLeadsWithTags() returns every lead row augmented with a `tags: string[]` array populated from the polymorphic tags table (entity_type='leads')"
+    - "Querying getLeadFieldOptions() returns the fixed LEAD_STAGES list for `status` and the distinct sorted set of lead tag names for `tags`"
+    - "Calling updateLeadField() for an unauthenticated request throws 'Non autorizzato' before touching the database"
+    - "Calling updateLeadField(leadId, 'status', 'not_a_stage') throws 'Stato non valido' and does not write to the leads table"
+    - "Calling addLeadTag/removeLeadTag/renameLeadTag mutates only rows where entity_type='leads', never touching entity_type='services' tag rows"
+  artifacts:
+    - path: "src/lib/admin-queries.ts"
+      provides: "LeadWithTags type, LeadFieldOptions type, getLeadsWithTags(), getLeadFieldOptions()"
+      contains: "export async function getLeadsWithTags"
+    - path: "src/app/admin/leads/actions.ts"
+      provides: "updateLeadField, addLeadTag, removeLeadTag, renameLeadTag server actions with requireAdmin() guard"
+      contains: "export async function updateLeadField"
+  key_links:
+    - from: "src/app/admin/leads/actions.ts"
+      to: "src/db/schema.ts tags table"
+      via: "db.insert(tags)/db.delete(tags)/db.update(tags) scoped by entity_type='leads'"
+      pattern: "LEADS_TAG_ENTITY"
+    - from: "src/lib/admin-queries.ts getLeadsWithTags"
+      to: "src/db/schema.ts tags table"
+      via: "leftJoin scoped by entity_type='leads'"
+      pattern: "eq\\(tags\\.entity_type, LEADS_TAG_ENTITY\\)"
+---
+
+<objective>
+Build the data-layer foundation for the Attio-style lead table redesign: extend `src/lib/admin-queries.ts` with `getLeadsWithTags()` / `getLeadFieldOptions()` (mirroring Phase 11's `getAllServices()` / `getCatalogFieldOptions()` for the polymorphic `tags` table), and extend `src/app/admin/leads/actions.ts` with `updateLeadField`, `addLeadTag`, `removeLeadTag`, `renameLeadTag` server actions — all guarded by `requireAdmin()` per the Phase 11 catalog convention.
+
+Purpose: This is the Wave 1 "contracts + backend" plan. Plan 14-02 (LeadTable rewrite, LeadsSearch, page wiring) depends on the types and server actions created here.
+
+Output: `LeadWithTags`/`LeadFieldOptions` types and query functions in `admin-queries.ts`; four new server actions in `leads/actions.ts`, all with `requireAdmin()` checks and dual `revalidatePath` calls (list + detail).
+</objective>
+
+<execution_context>
+@$HOME/.claude/get-shit-done/workflows/execute-plan.md
+@$HOME/.claude/get-shit-done/templates/summary.md
+</execution_context>
+
+<context>
+@.planning/ROADMAP.md
+@.planning/REQUIREMENTS.md
+@.planning/phases/14-crm-attio-style-fix/14-RESEARCH.md
+@.planning/phases/14-crm-attio-style-fix/14-PATTERNS.md
+</context>
+
+<interfaces>
+<!-- Exact analog patterns from Phase 11 (shipped, lint-passing) — replicate structure 1:1 for leads -->
+
+From src/lib/admin-queries.ts (lines 360-448, getAllServices / getCatalogFieldOptions — analog pattern):
+```typescript
+const TAG_ENTITY = "services";
+const PACCHETTO_ENTITY = "services.pacchetto";
+
+export type ServiceWithTags = Service & { tags: string[]; pacchetto: string[] };
+
+export async function getAllServices(): Promise<ServiceWithTags[]> {
+  const rows = await db
+    .select({
+      id: services.id,
+      name: services.name,
+      // ...all service columns...
+      tag_name: tags.name,
+      tag_type: tags.entity_type,
+    })
+    .from(services)
+    .leftJoin(
+      tags,
+      and(
+        eq(tags.entity_id, services.id),
+        inArray(tags.entity_type, [TAG_ENTITY, PACCHETTO_ENTITY])
+      )
+    )
+    .orderBy(asc(services.name), asc(tags.name));
+
+  const serviceMap = new Map<string, ServiceWithTags>();
+  for (const row of rows) {
+    const { tag_name, tag_type, ...serviceFields } = row;
+    if (!serviceMap.has(row.id)) {
+      serviceMap.set(row.id, { ...serviceFields, tags: [], pacchetto: [] });
+    }
+    if (tag_name) {
+      const target = serviceMap.get(row.id)!;
+      if (tag_type === PACCHETTO_ENTITY) target.pacchetto.push(tag_name);
+      else target.tags.push(tag_name);
+    }
+  }
+  return Array.from(serviceMap.values());
+}
+
+export type CatalogFieldOptions = {
+  tag: string[];
+  pacchetto: string[];
+  categoria: string[];
+  fase: string[];
+};
+
+export async function getCatalogFieldOptions(): Promise<CatalogFieldOptions> {
+  const tagRows = await db
+    .selectDistinct({ name: tags.name, type: tags.entity_type })
+    .from(tags)
+    .where(inArray(tags.entity_type, [TAG_ENTITY, PACCHETTO_ENTITY]));
+
+  const sortUnique = (arr: (string | null)[]) =>
+    Array.from(new Set(arr.filter((v): v is string => !!v && v.trim().length > 0))).sort(
+      (a, b) => a.localeCompare(b, "it")
+    );
+
+  return {
+    tag: sortUnique(tagRows.filter((r) => r.type === TAG_ENTITY).map((r) => r.name)),
+    pacchetto: sortUnique(tagRows.filter((r) => r.type === PACCHETTO_ENTITY).map((r) => r.name)),
+    categoria: sortUnique(catRows.map((r) => r.value)),
+    fase: sortUnique(faseRows.map((r) => r.value)),
+  };
+}
+```
+
+From src/lib/admin-queries.ts (line 27-46, existing top-of-file imports — `Lead` is ALREADY imported):
+```typescript
+import { db } from "@/db";
+import {
+  // ... existing entity tables ...
+  leads,
+  tags,
+} from "@/db/schema";
+import { eq, inArray, asc, isNull, sql, and } from "drizzle-orm";
+import type {
+  // ... existing types ...
+  Lead,
+} from "@/db/schema";
+```
+NOTE: `eq`, `and`, `asc` are already imported. `leads` and `tags` table objects are already imported (used elsewhere in admin-queries.ts for other queries). `Lead` type is already imported. No new top-level imports needed for the query additions — only add `LEAD_STAGES` from `@/lib/lead-validators` if not already present (it is NOT currently imported in admin-queries.ts).
+
+From src/db/schema.ts (lines 396-411, leads table — for column reference):
+```typescript
+export const leads = pgTable("leads", {
+  id: text("id").primaryKey().$defaultFn(() => nanoid()),
+  name: text("name").notNull(),
+  email: text("email"),
+  phone: text("phone"),
+  company: text("company"),
+  status: text("status").notNull().default("contacted"),
+  last_contact_date: timestamp("last_contact_date", { withTimezone: true }),
+  next_action: text("next_action"),
+  next_action_date: timestamp("next_action_date", { withTimezone: true }),
+  notes: text("notes"),
+  created_at: timestamp("created_at", { withTimezone: true }).notNull().defaultNow(),
+  updated_at: timestamp("updated_at", { withTimezone: true }).notNull().defaultNow(),
+});
+export type Lead = typeof leads.$inferSelect;
+```
+
+From src/db/schema.ts (lines 119-134, tags table — polymorphic, already in prod):
+```typescript
+export const tags = pgTable(
+  "tags",
+  {
+    id: text("id").primaryKey().$defaultFn(() => nanoid()),
+    entity_type: text("entity_type").notNull(), // "services" | "leads" (Phase 14)
+    entity_id: text("entity_id").notNull(),
+    name: text("name").notNull(),
+    created_at: timestamp("created_at", { withTimezone: true }).notNull().defaultNow(),
+  },
+  (t) => ({
+    entityTagUnique: uniqueIndex("tags_entity_name_unique").on(t.entity_type, t.entity_id, t.name),
+    entityIdx: index("tags_entity_idx").on(t.entity_type, t.entity_id),
+  })
+);
+```
+No migration needed — this table is already deployed to production with `entity_type='leads'` explicitly reserved in its design.
+
+From src/app/admin/catalog/actions.ts (lines 1-21, imports + requireAdmin — exact pattern to replicate):
+```typescript
+"use server";
+
+import { db } from "@/db";
+import { services, tags } from "@/db/schema";
+import { revalidatePath } from "next/cache";
+import { eq, and } from "drizzle-orm";
+import { z } from "zod";
+import { getServerSession } from "next-auth";
+import { authOptions } from "@/lib/auth";
+
+async function requireAdmin() {
+  const session = await getServerSession(authOptions);
+  if (!session) throw new Error("Non autorizzato");
+}
+```
+
+From src/app/admin/catalog/actions.ts (lines 131-199, tag CRUD — exact analog for addLeadTag/removeLeadTag/renameLeadTag):
+```typescript
+export async function addServiceOption(field: MultiSelectField, serviceId: string, value: string) {
+  await requireAdmin();
+  if (!MULTI_FIELDS.includes(field)) throw new Error(`Campo non valido: ${field}`);
+  const trimmed = value.trim();
+  if (trimmed.length === 0) throw new Error("Valore richiesto");
+
+  await db
+    .insert(tags)
+    .values({ entity_type: MULTI_ENTITY[field], entity_id: serviceId, name: trimmed })
+    .onConflictDoNothing();
+
+  revalidatePath("/admin/catalog");
+}
+
+export async function removeServiceOption(field: MultiSelectField, serviceId: string, value: string) {
+  await requireAdmin();
+  if (!MULTI_FIELDS.includes(field)) throw new Error(`Campo non valido: ${field}`);
+
+  await db
+    .delete(tags)
+    .where(
+      and(
+        eq(tags.entity_type, MULTI_ENTITY[field]),
+        eq(tags.entity_id, serviceId),
+        eq(tags.name, value)
+      )
+    );
+
+  revalidatePath("/admin/catalog");
+}
+
+export async function renameServiceOption(field: MultiSelectField | SingleSelectField, oldValue: string, newValue: string) {
+  await requireAdmin();
+  const next = newValue.trim();
+  if (next.length === 0) throw new Error("Nuovo nome richiesto");
+  if (next === oldValue) return;
+
+  if (field === "tag" || field === "pacchetto") {
+    await db
+      .update(tags)
+      .set({ name: next })
+      .where(and(eq(tags.entity_type, MULTI_ENTITY[field]), eq(tags.name, oldValue)));
+  }
+  // ... else branches for single-select fields, not needed for leads tags ...
+
+  revalidatePath("/admin/catalog");
+}
+```
+
+From src/lib/lead-validators.ts (existing, exports LEAD_STAGES):
+```typescript
+export const LEAD_STAGES = [
+  "contacted",
+  "qualified",
+  "proposal_sent",
+  "negotiating",
+  "won",
+  "lost",
+] as const;
+```
+
+From src/app/admin/leads/actions.ts (existing file — current top, lines 1-10, what's already there):
+```typescript
+"use server";
+
+import { z } from "zod";
+import { db } from "@/db";
+import { leads, quotes } from "@/db/schema";
+import { eq } from "drizzle-orm";
+import { createLeadSchema, updateLeadSchema, createActivitySchema } from "@/lib/lead-validators";
+import { revalidatePath } from "next/cache";
+import { createActivity, updateLeadStage } from "@/lib/lead-service";
+```
+Existing pre-Phase-14 actions (`createLead`, `updateLead`, `deleteLead`, `logActivity`, `assignQuoteToLead`) have NO `requireAdmin()` check — this is a pre-existing gap, OUT OF SCOPE for this plan (do not retrofit). New actions added in this plan MUST call `requireAdmin()`.
+</interfaces>
+
+<tasks>
+
+<task type="auto">
+  <name>Task 1: Extend admin-queries.ts with LeadWithTags and LeadFieldOptions</name>
+  <files>src/lib/admin-queries.ts</files>
+  <read_first>
+    - src/lib/admin-queries.ts (lines 1-46 for existing imports, lines 360-448 for the getAllServices/getCatalogFieldOptions analog pattern to replicate)
+    - src/lib/lead-validators.ts (LEAD_STAGES export)
+    - src/db/schema.ts (lines 119-134 tags table, lines 396-411 leads table)
+  </read_first>
+  <action>
+At the end of src/lib/admin-queries.ts (after the getCatalogFieldOptions function, i.e. after line 448), add a new section:
+
+1. Add import: `import { LEAD_STAGES } from "@/lib/lead-validators";` to the top of the file (near other lib imports, after line 26's drizzle-orm import or with other internal imports — place it as a new top-level import line).
+
+2. Add a new section with a header comment:
+```typescript
+// ── LeadWithTags — leads + tags (Phase 14 database-view) ─────────────────────
+// Lead tags are stored in the polymorphic `tags` table, scoped by
+// entity_type="leads". `status` is a fixed enum (LEAD_STAGES), not a
+// dynamic pool — exposed via getLeadFieldOptions for the OptionSelect UI.
+
+const LEADS_TAG_ENTITY = "leads";
+
+export type LeadWithTags = Lead & { tags: string[] };
+
+export async function getLeadsWithTags(): Promise<LeadWithTags[]> {
+  const rows = await db
+    .select({
+      id: leads.id,
+      name: leads.name,
+      email: leads.email,
+      phone: leads.phone,
+      company: leads.company,
+      status: leads.status,
+      last_contact_date: leads.last_contact_date,
+      next_action: leads.next_action,
+      next_action_date: leads.next_action_date,
+      notes: leads.notes,
+      created_at: leads.created_at,
+      updated_at: leads.updated_at,
+      tag_name: tags.name,
+    })
+    .from(leads)
+    .leftJoin(
+      tags,
+      and(
+        eq(tags.entity_id, leads.id),
+        eq(tags.entity_type, LEADS_TAG_ENTITY)
+      )
+    )
+    .orderBy(desc(leads.updated_at), asc(tags.name));
+
+  const leadMap = new Map<string, LeadWithTags>();
+  for (const row of rows) {
+    const { tag_name, ...leadFields } = row;
+    if (!leadMap.has(row.id)) leadMap.set(row.id, { ...leadFields, tags: [] });
+    if (tag_name) leadMap.get(row.id)!.tags.push(tag_name);
+  }
+  return Array.from(leadMap.values());
+}
+
+export type LeadFieldOptions = { status: string[]; tags: string[] };
+
+export async function getLeadFieldOptions(): Promise<LeadFieldOptions> {
+  const tagRows = await db
+    .selectDistinct({ name: tags.name })
+    .from(tags)
+    .where(eq(tags.entity_type, LEADS_TAG_ENTITY));
+
+  return {
+    status: [...LEAD_STAGES],
+    tags: tagRows
+      .map((r) => r.name)
+      .sort((a, b) => a.localeCompare(b, "it")),
+  };
+}
+```
+
+Notes:
+- `eq`, `and`, `asc` are already imported from `drizzle-orm` at line 26 — do not re-import.
+- `leads` and `tags` are already imported from `@/db/schema` — do not re-import.
+- `Lead` type is already imported from `@/db/schema` (line 45) — do not re-import.
+- Ordering: use `.orderBy(desc(leads.updated_at), asc(tags.name))` — this preserves the existing list ordering behavior (most-recently-updated first, matching `getAllLeads()`'s current `desc(leads.updated_at)`, which is the current LeadTable's data source). `desc` is NOT currently in the drizzle-orm import list at line 26 (`eq, inArray, asc, isNull, sql, and`) — add it to that import.
+  </action>
+  <verify>
+    <automated>grep -c "export async function getLeadsWithTags" src/lib/admin-queries.ts && grep -c "export async function getLeadFieldOptions" src/lib/admin-queries.ts && npx tsc --noEmit</automated>
+  </verify>
+  <acceptance_criteria>
+    - `grep -c "export async function getLeadsWithTags" src/lib/admin-queries.ts` returns 1
+    - `grep -c "export async function getLeadFieldOptions" src/lib/admin-queries.ts` returns 1
+    - `grep -c "export type LeadWithTags" src/lib/admin-queries.ts` returns 1
+    - `grep -c "export type LeadFieldOptions" src/lib/admin-queries.ts` returns 1
+    - `grep -c "LEADS_TAG_ENTITY = \"leads\"" src/lib/admin-queries.ts` returns 1
+    - `grep -c "import { LEAD_STAGES } from \"@/lib/lead-validators\"" src/lib/admin-queries.ts` returns 1
+    - `grep -c "desc(leads.updated_at), asc(tags.name)" src/lib/admin-queries.ts` returns 1
+    - `npx tsc --noEmit` exits 0 (no new type errors introduced)
+  </acceptance_criteria>
+  <done>getLeadsWithTags() and getLeadFieldOptions() exist in admin-queries.ts, type-check cleanly, follow the getAllServices/getCatalogFieldOptions pattern exactly (left-join + Map-reduce for tags), and use LEADS_TAG_ENTITY="leads" scoping.</done>
+</task>
+
+<task type="auto" tdd="true">
+  <name>Task 2: Add updateLeadField + tag CRUD server actions to leads/actions.ts</name>
+  <files>src/app/admin/leads/actions.ts</files>
+  <read_first>
+    - src/app/admin/leads/actions.ts (full current file — existing actions, imports, pattern conventions)
+    - src/app/admin/catalog/actions.ts (lines 1-21 requireAdmin pattern; lines 71-116 updateServiceField field-allowlist pattern; lines 131-199 tag CRUD pattern)
+    - src/lib/lead-validators.ts (LEAD_STAGES export)
+  </read_first>
+  <behavior>
+    These are server actions (no dedicated test file in this codebase's convention — Phase 11's equivalent actions also ship without unit tests, verified via `npx tsc --noEmit` + manual QA in Plan 14-02). Document expected behaviors here for the executor's own verification during implementation (manual trace, not an automated test file):
+    - `updateLeadField(leadId, "name", "")` throws "Nome richiesto" (empty name rejected)
+    - `updateLeadField(leadId, "name", "  Mario Rossi  ")` trims to "Mario Rossi" and updates `leads.name`
+    - `updateLeadField(leadId, "status", "bogus")` throws "Stato non valido", no DB write
+    - `updateLeadField(leadId, "status", "won")` updates `leads.status` to "won" (valid LEAD_STAGES member)
+    - `updateLeadField(leadId, "email", "")` sets `leads.email` to `null` (empty clears nullable field)
+    - `updateLeadField(leadId, "email", "foo@bar.com")` sets `leads.email` to "foo@bar.com"
+    - `updateLeadField(leadId, "next_action", "Richiamare")` sets `leads.next_action` to "Richiamare"
+    - `addLeadTag(leadId, "VIP")` inserts a row into `tags` with `entity_type="leads", entity_id=leadId, name="VIP"`; calling it twice with the same value does not error (onConflictDoNothing)
+    - `removeLeadTag(leadId, "VIP")` deletes the matching `tags` row scoped to `entity_type="leads"` only (never touches `entity_type="services"` rows even if a service happens to share the same `entity_id` string)
+    - `renameLeadTag("VIP", "Priorita Alta")` updates ALL `tags` rows where `entity_type="leads"` and `name="VIP"` to `name="Priorita Alta"` (propagates across all leads sharing that tag)
+    - Every one of the above throws `"Non autorizzato"` immediately if `getServerSession(authOptions)` returns null/undefined, before any DB call
+  </behavior>
+  <action>
+Append to src/app/admin/leads/actions.ts (after the existing `assignQuoteToLead` function, end of file):
+
+1. Add imports at the top of the file (merge with existing import block):
+```typescript
+import { tags } from "@/db/schema"; // add to existing `import { leads, quotes } from "@/db/schema";` -> becomes `import { leads, quotes, tags } from "@/db/schema";`
+import { eq, and } from "drizzle-orm"; // existing line has `import { eq } from "drizzle-orm";` -> add `and`
+import { LEAD_STAGES } from "@/lib/lead-validators"; // add to existing lead-validators import line
+import { getServerSession } from "next-auth";
+import { authOptions } from "@/lib/auth";
+```
+
+2. Add the `requireAdmin()` helper (exact copy from catalog/actions.ts):
+```typescript
+async function requireAdmin() {
+  const session = await getServerSession(authOptions);
+  if (!session) throw new Error("Non autorizzato");
+}
+```
+
+3. Add the field-update action with allowlist:
+```typescript
+// ── Inline-edit field update (Phase 14 database-view) ───────────────────────
+
+const EDITABLE_FIELDS = ["name", "email", "phone", "company", "status", "next_action"] as const;
+type EditableField = (typeof EDITABLE_FIELDS)[number];
+
+export async function updateLeadField(
+  leadId: string,
+  fieldName: EditableField,
+  value: string
+) {
+  await requireAdmin();
+
+  if (!EDITABLE_FIELDS.includes(fieldName)) {
+    throw new Error(`Campo non editabile: ${fieldName}`);
+  }
+
+  if (fieldName === "name") {
+    const s = value.trim();
+    if (s.length === 0) throw new Error("Nome richiesto");
+    await db.update(leads).set({ name: s, updated_at: new Date() }).where(eq(leads.id, leadId));
+  } else if (fieldName === "status") {
+    if (!LEAD_STAGES.includes(value as (typeof LEAD_STAGES)[number])) {
+      throw new Error("Stato non valido");
+    }
+    await db.update(leads).set({ status: value, updated_at: new Date() }).where(eq(leads.id, leadId));
+  } else {
+    // email | phone | company | next_action — nullable text fields, empty clears
+    const s = value.trim();
+    await db
+      .update(leads)
+      .set({ [fieldName]: s || null, updated_at: new Date() })
+      .where(eq(leads.id, leadId));
+  }
+
+  revalidatePath("/admin/leads");
+  revalidatePath(`/admin/leads/${leadId}`);
+}
+```
+
+4. Add the polymorphic tag CRUD actions:
+```typescript
+// ── Lead tags (Phase 14, CRM-09) — polymorphic `tags` table, entity_type="leads" ─
+
+const LEADS_TAG_ENTITY = "leads";
+
+export async function addLeadTag(leadId: string, value: string) {
+  await requireAdmin();
+  const trimmed = value.trim();
+  if (trimmed.length === 0) throw new Error("Valore richiesto");
+
+  await db
+    .insert(tags)
+    .values({ entity_type: LEADS_TAG_ENTITY, entity_id: leadId, name: trimmed })
+    .onConflictDoNothing();
+
+  revalidatePath("/admin/leads");
+  revalidatePath(`/admin/leads/${leadId}`);
+}
+
+export async function removeLeadTag(leadId: string, value: string) {
+  await requireAdmin();
+
+  await db
+    .delete(tags)
+    .where(
+      and(
+        eq(tags.entity_type, LEADS_TAG_ENTITY),
+        eq(tags.entity_id, leadId),
+        eq(tags.name, value)
+      )
+    );
+
+  revalidatePath("/admin/leads");
+  revalidatePath(`/admin/leads/${leadId}`);
+}
+
+export async function renameLeadTag(oldValue: string, newValue: string) {
+  await requireAdmin();
+  const next = newValue.trim();
+  if (next.length === 0) throw new Error("Nuovo nome richiesto");
+  if (next === oldValue) return;
+
+  await db
+    .update(tags)
+    .set({ name: next })
+    .where(and(eq(tags.entity_type, LEADS_TAG_ENTITY), eq(tags.name, oldValue)));
+
+  revalidatePath("/admin/leads");
+}
+```
+
+Note on `renameLeadTag`: no per-lead `revalidatePath(/admin/leads/${leadId})` call since the rename propagates across all leads sharing the tag (no single leadId to target) — `revalidatePath("/admin/leads")` covers the list; the detail page will pick up the change on next navigation/refresh (consistent with catalog's `renameServiceOption` which only revalidates `/admin/catalog`).
+  </action>
+  <verify>
+    <automated>grep -c "export async function updateLeadField\|export async function addLeadTag\|export async function removeLeadTag\|export async function renameLeadTag" src/app/admin/leads/actions.ts && npx tsc --noEmit && npx eslint src/app/admin/leads/actions.ts</automated>
+  </verify>
+  <acceptance_criteria>
+    - `grep -c "export async function updateLeadField" src/app/admin/leads/actions.ts` returns 1
+    - `grep -c "export async function addLeadTag" src/app/admin/leads/actions.ts` returns 1
+    - `grep -c "export async function removeLeadTag" src/app/admin/leads/actions.ts` returns 1
+    - `grep -c "export async function renameLeadTag" src/app/admin/leads/actions.ts` returns 1
+    - `grep -c "await requireAdmin()" src/app/admin/leads/actions.ts` returns at least 4 (one per new action)
+    - `grep -c "LEAD_STAGES.includes" src/app/admin/leads/actions.ts` returns 1
+    - `grep -c "LEADS_TAG_ENTITY = \"leads\"" src/app/admin/leads/actions.ts` returns 1
+    - `grep -c "Non autorizzato" src/app/admin/leads/actions.ts` returns 1 (single shared requireAdmin helper)
+    - `npx tsc --noEmit` exits 0
+    - `npx eslint src/app/admin/leads/actions.ts` exits 0
+  </acceptance_criteria>
+  <done>Four new server actions (updateLeadField, addLeadTag, removeLeadTag, renameLeadTag) exist in src/app/admin/leads/actions.ts, each calling requireAdmin() first, with status validated against LEAD_STAGES server-side and tags scoped to entity_type="leads". File type-checks and lints cleanly. Pre-existing actions (createLead, updateLead, deleteLead, logActivity, assignQuoteToLead) are unchanged.</done>
+</task>
+
+</tasks>
+
+<threat_model>
+## Trust Boundaries
+
+| Boundary | Description |
+|----------|--------------|
+| Admin browser -> Server Action | Authenticated admin session calls `updateLeadField`/`addLeadTag`/`removeLeadTag`/`renameLeadTag` via Next.js Server Actions (directly invocable RPC endpoints if unguarded) |
+| Server Action -> Postgres | Drizzle ORM parameterized queries against `leads` and `tags` tables |
+
+## STRIDE Threat Register
+
+| Threat ID | Category | Component | Disposition | Mitigation Plan |
+|-----------|----------|-----------|-------------|-----------------|
+| T-14-01 | Elevation of Privilege | `updateLeadField`, `addLeadTag`, `removeLeadTag`, `renameLeadTag` (all new in this plan) | mitigate | Each action calls `await requireAdmin()` as its first statement — throws "Non autorizzato" if `getServerSession(authOptions)` returns null, before any DB read/write (Task 2) |
+| T-14-02 | Tampering | `updateLeadField(leadId, "status", value)` | mitigate | Server-side allowlist check `LEAD_STAGES.includes(value)` rejects any status value outside the 6 fixed pipeline stages, independent of client UI restrictions (Task 2) |
+| T-14-03 | Tampering | `updateLeadField` field allowlist | mitigate | `EDITABLE_FIELDS` const array gates which columns can be written; any other `fieldName` throws `Campo non editabile` before reaching the DB (Task 2) |
+| T-14-04 | Information Disclosure / Tampering (cross-entity tag pollution) | `addLeadTag`/`removeLeadTag`/`renameLeadTag` | mitigate | All tag queries scoped with `eq(tags.entity_type, LEADS_TAG_ENTITY)` — cannot read/write/rename `entity_type="services"` tag rows even if `entity_id` strings collide (Task 2) |
+| T-14-05 | Tampering (SQL injection) | All new DB queries | accept (no new risk) | Drizzle ORM parameterized queries used throughout; no raw SQL introduced |
+| T-14-06 | Information Disclosure | `getLeadsWithTags()` exposes all lead PII columns (email, phone, company) to any caller | accept | Function is only invoked from `/admin/leads/page.tsx`, an Auth.js-session-protected route per CLAUDE.md constraint #4 (`/admin/*` -> Auth.js session) — no new exposure surface introduced by this plan |
+</threat_model>
+
+<verification>
+1. `npx tsc --noEmit` — exits 0, no new type errors in admin-queries.ts or leads/actions.ts
+2. `npx eslint src/lib/admin-queries.ts src/app/admin/leads/actions.ts` — exits 0
+3. `grep -n "export async function getLeadsWithTags\|export async function getLeadFieldOptions" src/lib/admin-queries.ts` — both present
+4. `grep -n "export async function updateLeadField\|export async function addLeadTag\|export async function removeLeadTag\|export async function renameLeadTag" src/app/admin/leads/actions.ts` — all four present
+5. Manual trace through `<behavior>` block in Task 2 against the written code — every documented case has a corresponding code branch
+</verification>
+
+<success_criteria>
+- `src/lib/admin-queries.ts` exports `LeadWithTags`, `LeadFieldOptions`, `getLeadsWithTags()`, `getLeadFieldOptions()` — all type-checked, following the getAllServices/getCatalogFieldOptions left-join + Map-reduce pattern
+- `src/app/admin/leads/actions.ts` exports `updateLeadField`, `addLeadTag`, `removeLeadTag`, `renameLeadTag` — all guarded by `requireAdmin()`, `status` validated against `LEAD_STAGES`, tags scoped to `entity_type="leads"`
+- No schema migration created or required (confirmed: `tags.entity_type` is unconstrained text, already supports "leads")
+- `npx tsc --noEmit` and `npx eslint` both exit 0
+- Pre-existing actions in `leads/actions.ts` (createLead, updateLead, deleteLead, logActivity, assignQuoteToLead) remain unchanged — no retrofit of requireAdmin() on those (out of scope per RESEARCH.md A5 / Open Question 4)
+</success_criteria>
+
+<output>
+After completion, create `.planning/phases/14-crm-attio-style-fix/14-01-SUMMARY.md`
+</output>

.planning/phases/14-crm-attio-style-fix/14-01-SUMMARY.md

@@ -0,0 +1,131 @@
+---
+phase: 14-crm-attio-style-fix
+plan: 01
+subsystem: database
+tags: [drizzle, postgres, server-actions, leads, tags, crm]
+
+# Dependency graph
+requires:
+  - phase: 11-catalog-database-view
+    provides: "Polymorphic `tags` table + getAllServices/getCatalogFieldOptions left-join + Map-reduce pattern, requireAdmin() convention in catalog/actions.ts"
+provides:
+  - "LeadWithTags type + getLeadsWithTags() — leads augmented with tags:string[] from polymorphic tags table (entity_type='leads')"
+  - "LeadFieldOptions type + getLeadFieldOptions() — fixed LEAD_STAGES for status, distinct sorted lead tag names for tags"
+  - "updateLeadField server action — allowlisted inline-edit for name/email/phone/company/status/next_action, server-side LEAD_STAGES validation"
+  - "addLeadTag/removeLeadTag/renameLeadTag server actions — polymorphic tags CRUD scoped to entity_type='leads'"
+affects: [14-02-leadtable-rewrite]
+
+# Tech tracking
+tech-stack:
+  added: []
+  patterns:
+    - "Left-join + Map-reduce pattern for polymorphic tags table (reused from Phase 11 getAllServices/getCatalogFieldOptions)"
+    - "requireAdmin() session guard as first statement in every new server action (reused from Phase 11 catalog/actions.ts)"
+    - "EDITABLE_FIELDS allowlist gating which columns a generic field-update action can write"
+
+key-files:
+  created: []
+  modified:
+    - src/lib/admin-queries.ts
+    - src/app/admin/leads/actions.ts
+
+key-decisions:
+  - "Logged 2 pre-existing lint issues (Record<string, any> in updateLead, 4 unused imports in admin-queries.ts) to deferred-items.md per Scope Boundary rule rather than fixing — both predate this plan and are unrelated to the new code added"
+
+patterns-established:
+  - "Lead tag mutations always scope tags table queries with eq(tags.entity_type, LEADS_TAG_ENTITY) to prevent cross-entity pollution with entity_type='services' rows"
+
+requirements-completed: [CRM-08, CRM-09]
+
+# Metrics
+duration: 12min
+completed: 2026-06-14
+---
+
+# Phase 14 Plan 01: Lead Data-Layer Foundation Summary
+
+**Added `getLeadsWithTags()`/`getLeadFieldOptions()` query functions and `updateLeadField`/`addLeadTag`/`removeLeadTag`/`renameLeadTag` server actions, mirroring Phase 11's catalog database-view pattern for the polymorphic `tags` table scoped to `entity_type="leads"`.**
+
+## Performance
+
+- **Duration:** 12 min
+- **Started:** 2026-06-14T10:30:00Z
+- **Completed:** 2026-06-14T10:42:03Z
+- **Tasks:** 2
+- **Files modified:** 2
+
+## Accomplishments
+- `LeadWithTags` type + `getLeadsWithTags()` left-joins `leads` with `tags` (scoped to `entity_type="leads"`), returning every lead row with a `tags: string[]` array, ordered `desc(leads.updated_at), asc(tags.name)`
+- `LeadFieldOptions` type + `getLeadFieldOptions()` returns the fixed `LEAD_STAGES` list for `status` and the distinct sorted set of lead tag names for `tags`
+- `updateLeadField(leadId, fieldName, value)` — allowlisted inline-edit action (`name`, `email`, `phone`, `company`, `status`, `next_action`), with server-side `LEAD_STAGES.includes()` validation for `status` and trim/null-clear handling for nullable text fields
+- `addLeadTag`/`removeLeadTag`/`renameLeadTag` — polymorphic `tags` table CRUD scoped to `LEADS_TAG_ENTITY = "leads"`, never touching `entity_type="services"` rows
+- All four new actions guarded by `requireAdmin()` as the first statement, throwing `"Non autorizzato"` before any DB access
+
+## Task Commits
+
+Each task was committed atomically:
+
+1. **Task 1: Extend admin-queries.ts with LeadWithTags and LeadFieldOptions** - `5b583bc` (feat)
+2. **Task 2: Add updateLeadField + tag CRUD server actions to leads/actions.ts** - `7d98b27` (feat)
+
+_Note: Task 2 had `tdd="true"` but the plan's `<behavior>` block explicitly specifies manual-trace verification (no dedicated test file convention in this codebase, matching Phase 11's equivalent actions) — verified via line-by-line trace against all 11 documented behaviors, all pass._
+
+## Files Created/Modified
+- `src/lib/admin-queries.ts` - Added `desc` to drizzle-orm import, `LEAD_STAGES` import, `LEADS_TAG_ENTITY` const, `LeadWithTags`/`LeadFieldOptions` types, `getLeadsWithTags()`, `getLeadFieldOptions()`
+- `src/app/admin/leads/actions.ts` - Added `tags` to schema import, `and` to drizzle-orm import, `LEAD_STAGES` import, `getServerSession`/`authOptions` imports, `requireAdmin()` helper, `updateLeadField`, `addLeadTag`, `removeLeadTag`, `renameLeadTag`
+
+## Decisions Made
+- Followed the plan's interfaces exactly (1:1 replication of Phase 11's `getAllServices`/`getCatalogFieldOptions` and `catalog/actions.ts` tag-CRUD pattern)
+- Pre-existing lint issues unrelated to this plan's changes were logged to `deferred-items.md` rather than fixed (Scope Boundary rule) — see Deviations below
+
+## Deviations from Plan
+
+### Deferred (out of scope, logged not fixed)
+
+**1. [Scope Boundary] Pre-existing `no-explicit-any` lint error in `updateLead`**
+- **Found during:** Task 2 verification (`npx eslint src/app/admin/leads/actions.ts`)
+- **Issue:** Line 54, `const updateData: Record<string, any> = { updated_at: new Date() };` inside the pre-existing `updateLead()` function (untouched by this plan) causes `npx eslint src/app/admin/leads/actions.ts` to exit 1
+- **Resolution:** Confirmed via `git show` that this line existed before Task 2's edits (predates Phase 14). Logged to `.planning/phases/14-crm-attio-style-fix/deferred-items.md` per Scope Boundary rule — not fixed. The four new actions added in this plan introduce zero new lint errors/warnings (verified: only line 54 is flagged).
+- **Files modified:** `.planning/phases/14-crm-attio-style-fix/deferred-items.md` (new)
+- **Verification:** `npx eslint src/app/admin/leads/actions.ts --format stylish` shows only line 54:38 flagged, pre-dating this commit
+- **Committed in:** `7d98b27`
+
+**2. [Scope Boundary] Pre-existing unused-import warnings in admin-queries.ts**
+- **Found during:** Task 1 verification (`npx eslint src/lib/admin-queries.ts`)
+- **Issue:** 4x `@typescript-eslint/no-unused-vars` warnings for `settings`, `ServiceCatalog`, `ProjectOffer`, `OfferPhaseService` — pre-existing imports unrelated to the new `getLeadsWithTags`/`getLeadFieldOptions` code, which was appended at end-of-file
+- **Resolution:** Logged to `deferred-items.md`, not fixed (out of scope)
+- **Files modified:** `.planning/phases/14-crm-attio-style-fix/deferred-items.md` (new)
+- **Committed in:** `7d98b27`
+
+---
+
+**Total deviations:** 2 deferred (both Scope Boundary — pre-existing issues unrelated to this plan's changes)
+**Impact on plan:** None — `npx tsc --noEmit` exits 0 cleanly across the whole project; the eslint exit-1 on `actions.ts` is caused entirely by pre-existing code this plan does not touch. All plan-specified grep/type checks pass.
+
+## Issues Encountered
+None.
+
+## User Setup Required
+
+None - no external service configuration required. No schema migration created or required (confirmed: `tags.entity_type` is unconstrained text, already supports "leads" in production).
+
+## Next Phase Readiness
+
+- `LeadWithTags`, `LeadFieldOptions`, `getLeadsWithTags()`, `getLeadFieldOptions()` are ready for Plan 14-02 (LeadTable rewrite, LeadsSearch, page wiring)
+- `updateLeadField`, `addLeadTag`, `removeLeadTag`, `renameLeadTag` server actions are ready for Plan 14-02's inline-edit UI wiring
+- Pre-existing actions (`createLead`, `updateLead`, `deleteLead`, `logActivity`, `assignQuoteToLead`) remain unchanged, as required by out-of-scope note in RESEARCH.md A5 / Open Question 4
+- Two pre-existing lint issues logged in `deferred-items.md` for future cleanup — do not block Plan 14-02
+
+---
+*Phase: 14-crm-attio-style-fix*
+*Completed: 2026-06-14*
+
+## Self-Check: PASSED
+
+- FOUND: src/lib/admin-queries.ts
+- FOUND: src/app/admin/leads/actions.ts
+- FOUND: .planning/phases/14-crm-attio-style-fix/14-01-SUMMARY.md
+- FOUND: .planning/phases/14-crm-attio-style-fix/deferred-items.md
+- FOUND commit: 5b583bc
+- FOUND commit: 7d98b27
+- FOUND commit: d1acfe9

.planning/phases/14-crm-attio-style-fix/14-02-PLAN.md

@@ -0,0 +1,880 @@
+---
+phase: 14-crm-attio-style-fix
+plan: 02
+type: execute
+wave: 2
+depends_on: ["14-01"]
+files_modified:
+  - src/components/admin/leads/LeadTable.tsx
+  - src/app/admin/leads/LeadsSearch.tsx
+  - src/app/admin/leads/page.tsx
+  - src/components/admin/leads/LeadDetail.tsx
+autonomous: true
+requirements: [CRM-08, CRM-09]
+
+must_haves:
+  truths:
+    - "The /admin/leads table renders with raw <table> markup (no shadcn Table/TableRow/TableCell wrapper), matching the ServiceTable.tsx visual pattern"
+    - "User can click any of name/email/phone/company/next_action cells, edit inline, press Enter, and the value persists via updateLeadField + router.refresh()"
+    - "User can open the Stato dropdown and pick one of the 6 fixed LEAD_STAGES values (no 'Crea' create-on-the-fly option appears for status)"
+    - "User can add/remove/rename tags on a lead via OptionMultiSelect, backed by addLeadTag/removeLeadTag/renameLeadTag"
+    - "User can type in the search box above the table and the visible rows filter instantly client-side (no network request) across name/email/company/status/tags"
+    - "Empty search results show 'Nessun lead trovato'"
+  artifacts:
+    - path: "src/components/admin/leads/LeadTable.tsx"
+      provides: "Raw-table LeadRow + LeadTable, inline-edit + status/tags dropdowns"
+      contains: "EditableCell"
+    - path: "src/app/admin/leads/LeadsSearch.tsx"
+      provides: "Client-side instant search wrapper for LeadTable"
+      contains: "useMemo"
+    - path: "src/app/admin/leads/page.tsx"
+      provides: "Server component fetching getLeadsWithTags + getLeadFieldOptions, rendering LeadsSearch"
+      contains: "getLeadsWithTags"
+  key_links:
+    - from: "src/app/admin/leads/page.tsx"
+      to: "src/lib/admin-queries.ts"
+      via: "getLeadsWithTags() + getLeadFieldOptions()"
+      pattern: "getLeadsWithTags"
+    - from: "src/components/admin/leads/LeadTable.tsx"
+      to: "src/app/admin/leads/actions.ts"
+      via: "updateLeadField / addLeadTag / removeLeadTag / renameLeadTag"
+      pattern: "updateLeadField\\(lead\\.id"
+    - from: "src/app/admin/leads/LeadsSearch.tsx"
+      to: "src/components/admin/leads/LeadTable.tsx"
+      via: "renders <LeadTable leads={filtered} options={options} />"
+      pattern: "<LeadTable"
+---
+
+<objective>
+Rewrite `LeadTable.tsx` as a raw `<table>` database-view component (1:1 structural port of Phase 11's `ServiceTable.tsx`), wiring `EditableCell` for scalar fields, `OptionSelect` (fixed `LEAD_STAGES`, no create-on-the-fly) for `status`, and `OptionMultiSelect` for tags (CRM-09). Add a new `LeadsSearch.tsx` client-side instant-filter wrapper (mirrors `CatalogSearch.tsx`). Rewire `/admin/leads/page.tsx` to fetch via `getLeadsWithTags()`/`getLeadFieldOptions()` and render `LeadsSearch`. Additionally surface lead tags as an `OptionMultiSelect` in `LeadDetail.tsx`'s "Profilo" card (UI-SPEC.md Decision 4, low-cost addition).
+
+Purpose: Delivers the CRM-08 (inline editing, database-view table) and CRM-09 (lead tags) user-facing experience, completing the Attio/Pipedrive-style redesign of `/admin/leads`.
+
+Output: Rewritten `LeadTable.tsx`, new `LeadsSearch.tsx`, updated `page.tsx`, and `LeadDetail.tsx` with a tags `OptionMultiSelect`.
+</objective>
+
+<execution_context>
+@$HOME/.claude/get-shit-done/workflows/execute-plan.md
+@$HOME/.claude/get-shit-done/templates/summary.md
+</execution_context>
+
+<context>
+@.planning/ROADMAP.md
+@.planning/REQUIREMENTS.md
+@.planning/phases/14-crm-attio-style-fix/14-RESEARCH.md
+@.planning/phases/14-crm-attio-style-fix/14-PATTERNS.md
+@.planning/phases/14-crm-attio-style-fix/14-UI-SPEC.md
+</context>
+
+<interfaces>
+<!-- Types and server actions created by Plan 14-01 — use these directly, no exploration needed -->
+
+From src/lib/admin-queries.ts (created in Plan 14-01):
+```typescript
+export type LeadWithTags = Lead & { tags: string[] };
+export type LeadFieldOptions = { status: string[]; tags: string[] };
+
+export async function getLeadsWithTags(): Promise<LeadWithTags[]>;
+export async function getLeadFieldOptions(): Promise<LeadFieldOptions>;
+```
+`LeadWithTags` includes all `Lead` columns: `id, name, email, phone, company, status, last_contact_date, next_action, next_action_date, notes, created_at, updated_at` plus `tags: string[]`.
+
+`LeadFieldOptions.status` = `[...LEAD_STAGES]` (6 fixed values: `contacted | qualified | proposal_sent | negotiating | won | lost`). `LeadFieldOptions.tags` = distinct sorted lead tag names.
+
+From src/app/admin/leads/actions.ts (created in Plan 14-01):
+```typescript
+export async function updateLeadField(leadId: string, fieldName: EditableField, value: string): Promise<void>;
+// EditableField = "name" | "email" | "phone" | "company" | "status" | "next_action"
+
+export async function addLeadTag(leadId: string, value: string): Promise<void>;
+export async function removeLeadTag(leadId: string, value: string): Promise<void>;
+export async function renameLeadTag(oldValue: string, newValue: string): Promise<void>;
+```
+
+From src/components/admin/catalog/ServiceTable.tsx (Phase 11, shipped — exact structural analog, full file at lines 1-140 for ServiceRow, 264-316 for ServiceTable):
+```tsx
+"use client";
+
+import { useState, useTransition } from "react";
+import { useRouter } from "next/navigation";
+import { EditableCell } from "@/components/ui/editable-cell";
+import { OptionSelect } from "@/components/ui/option-select";
+import { OptionMultiSelect } from "@/components/ui/option-multi-select";
+
+function ServiceRow({ service, options }: { service: ServiceWithTags; options: CatalogFieldOptions }) {
+  const router = useRouter();
+  const [, startTransition] = useTransition();
+  const [error, setError] = useState<string | null>(null);
+
+  function run(fn: () => Promise<unknown>) {
+    setError(null);
+    startTransition(async () => {
+      try {
+        await fn();
+        router.refresh();
+      } catch (e) {
+        setError(e instanceof Error ? e.message : "Errore nel salvataggio");
+      }
+    });
+  }
+
+  return (
+    <>
+    <tr className="border-b border-[#e5e7eb] hover:bg-[#f9f9f9] transition-colors duration-150">
+      <td className="py-2 px-3 font-medium text-[#1a1a1a] min-w-[160px]">
+        <EditableCell value={service.name} type="text" required onSave={(v) => run(() => updateServiceField(service.id, "name", v))} />
+      </td>
+      {/* ... more <td> cells ... */}
+    </tr>
+    {error && (
+      <tr>
+        <td colSpan={COL_COUNT} className="py-1 px-3 text-xs text-red-600">{error}</td>
+      </tr>
+    )}
+    </>
+  );
+}
+
+export function ServiceTable({ services, options }: { services: ServiceWithTags[]; options: CatalogFieldOptions }) {
+  return (
+    <div className="bg-white rounded-xl border border-[#e5e7eb] overflow-hidden">
+      <div className="overflow-x-auto">
+        <table className="w-full text-sm">
+          <thead className="bg-[#f9f9f9] border-b border-[#e5e7eb] sticky top-0 z-[1]">
+            <tr>
+              {COLUMN_HEADERS.map((header) => (
+                <th key={header} className="text-left py-2 px-3 font-semibold text-[#71717a]">{header}</th>
+              ))}
+            </tr>
+          </thead>
+          <tbody>
+            {services.map((service) => <ServiceRow key={service.id} service={service} options={options} />)}
+          </tbody>
+        </table>
+      </div>
+      {services.length === 0 && <div className="text-center py-8 text-gray-500">Nessun servizio trovato</div>}
+    </div>
+  );
+}
+```
+
+From src/app/admin/catalog/CatalogSearch.tsx (Phase 11, shipped — exact structural analog for LeadsSearch.tsx, full file 46 lines):
+```tsx
+"use client";
+
+import { useState, useMemo } from "react";
+import { Input } from "@/components/ui/input";
+import { Search } from "lucide-react";
+import { ServiceTable } from "@/components/admin/catalog/ServiceTable";
+import type { ServiceWithTags, CatalogFieldOptions } from "@/lib/admin-queries";
+
+export function CatalogSearch({ services, options }: { services: ServiceWithTags[]; options: CatalogFieldOptions }) {
+  const [query, setQuery] = useState("");
+
+  const filtered = useMemo(() => {
+    const q = query.trim().toLowerCase();
+    if (!q) return services;
+    return services.filter((s) => {
+      if (s.name.toLowerCase().includes(q)) return true;
+      if (s.category?.toLowerCase().includes(q)) return true;
+      if (s.tags.some((t) => t.toLowerCase().includes(q))) return true;
+      return false;
+    });
+  }, [services, query]);
+
+  return (
+    <div className="space-y-4">
+      <div className="relative max-w-sm">
+        <Search className="absolute left-3 top-1/2 -translate-y-1/2 h-4 w-4 text-[#71717a]" />
+        <Input type="text" placeholder="Cerca per nome, categoria, fase, tag o pacchetto..." value={query} onChange={(e) => setQuery(e.target.value)} className="pl-9 h-9" />
+      </div>
+      <ServiceTable services={filtered} options={options} />
+    </div>
+  );
+}
+```
+
+From src/app/admin/catalog/page.tsx (Phase 11, shipped — exact structural analog for leads/page.tsx):
+```tsx
+import { getAllServices, getCatalogFieldOptions } from "@/lib/admin-queries";
+import { CatalogSearch } from "./CatalogSearch";
+
+export const revalidate = 0;
+
+export default async function CatalogPage() {
+  const [services, options] = await Promise.all([getAllServices(), getCatalogFieldOptions()]);
+  return (
+    <div>
+      <div className="flex items-center justify-between mb-6">
+        <h1 className="text-2xl font-bold text-[#1a1a1a]">Catalogo Servizi</h1>
+      </div>
+      <CatalogSearch services={services} options={options} />
+    </div>
+  );
+}
+```
+
+From src/app/admin/leads/page.tsx (CURRENT — to be replaced):
+```tsx
+import { Suspense } from "react";
+import { getAllLeads } from "@/lib/lead-service";
+import { LeadTable } from "@/components/admin/leads/LeadTable";
+import { CreateLeadModal } from "@/components/admin/leads/LeadForm";
+
+async function LeadsList() {
+  const leads = await getAllLeads();
+  return (
+    <div className="space-y-6">
+      <div className="flex justify-between items-center">
+        <h1 className="text-3xl font-bold">Lead Pipeline</h1>
+        <CreateLeadModal />
+      </div>
+      <Suspense fallback={<div className="animate-pulse">Loading...</div>}>
+        <LeadTable leads={leads} />
+      </Suspense>
+    </div>
+  );
+}
+
+export default function LeadsPage() {
+  return <LeadsList />;
+}
+```
+`CreateLeadModal` is unchanged (UI-SPEC.md Decision 3 — no quick-add row, CreateLeadModal remains the lead-creation entry point). Preserve it in the new page.
+
+From src/components/ui/editable-cell.tsx (Phase 11, shipped — props contract, reuse as-is, NO modifications):
+```typescript
+export interface EditableCellProps {
+  value: string | number | boolean;
+  type?: "text" | "number" | "textarea" | "toggle";
+  onSave: (value: string) => void;
+  required?: boolean;
+  placeholder?: string;
+  disabled?: boolean;
+  formatDisplay?: (value: string) => string;
+}
+```
+
+From src/components/ui/option-select.tsx (Phase 11, shipped — props contract, reuse as-is, NO modifications):
+```typescript
+export interface OptionSelectProps {
+  value: string | null;
+  options: string[];
+  onChange: (value: string | null) => void;
+  onRename?: (oldValue: string, newValue: string) => void;
+  placeholder?: string;
+  disabled?: boolean;
+}
+```
+IMPORTANT: `onRename` is OPTIONAL. For the `status` field, do NOT pass `onRename` — this is what makes the dropdown closed/non-extensible per UI-SPEC.md Decision 1 (the "Crea «...»" create-on-the-fly button only appears when the typed query has no exact match AND... actually the create button always renders for non-exact-match queries regardless of onRename). To fully prevent arbitrary status creation in the UI, see the Task 1 action notes below for the exact mitigation (server-side validation in `updateLeadField` already rejects invalid values per Plan 14-01 — this is defense in depth at the UI layer).
+
+From src/components/ui/option-multi-select.tsx (Phase 11, shipped — props contract, reuse as-is, NO modifications):
+```typescript
+export interface OptionMultiSelectProps {
+  values: string[];
+  options: string[];
+  onAdd: (value: string) => void;
+  onRemove: (value: string) => void;
+  onRename?: (oldValue: string, newValue: string) => void;
+  placeholder?: string;
+  disabled?: boolean;
+}
+```
+
+From src/components/admin/leads/LeadTable.tsx (CURRENT — to be replaced entirely):
+```tsx
+"use client";
+
+import Link from "next/link";
+import { Lead } from "@/db/schema";
+import { Table, TableBody, TableCell, TableHead, TableHeader, TableRow } from "@/components/ui/table";
+import { Badge } from "@/components/ui/badge";
+import { Button } from "@/components/ui/button";
+import { LEAD_STAGES } from "@/lib/lead-validators";
+
+const STAGE_COLOR: Record<string, string> = {
+  contacted: "bg-blue-100 text-blue-800",
+  qualified: "bg-purple-100 text-purple-800",
+  proposal_sent: "bg-amber-100 text-amber-800",
+  negotiating: "bg-orange-100 text-orange-800",
+  won: "bg-green-100 text-green-800",
+  lost: "bg-red-100 text-red-800",
+};
+
+export function LeadTable({ leads }: { leads: Lead[] }) { /* shadcn Table-based, read-only */ }
+```
+The new `LeadTable` signature changes to `{ leads, options }: { leads: LeadWithTags[]; options: LeadFieldOptions }`. `STAGE_COLOR` semantic map is PRESERVED per UI-SPEC.md Decision 1 (won=green, lost=red, etc.) — applied as a custom Badge override for the `status` cell, NOT via `getOptionColor()`'s hash palette.
+
+From src/components/admin/leads/LeadDetail.tsx (CURRENT, lines 53-90 — "Profilo" Card to extend with tags):
+```tsx
+<Card>
+  <CardHeader>
+    <CardTitle>Profilo</CardTitle>
+  </CardHeader>
+  <CardContent className="space-y-4">
+    <div>
+      <label className="text-sm text-gray-600">Stato</label>
+      <Badge className={STAGE_COLOR[lead.status as keyof typeof STAGE_COLOR] || ""}>
+        {lead.status.replace(/_/g, " ")}
+      </Badge>
+    </div>
+    {/* email, telefono, ultimo contatto, prossima azione fields ... */}
+  </CardContent>
+</Card>
+```
+`LeadDetail` is currently a `"use client"` component receiving `{ lead, activities, reminders }: { lead: Lead; activities: Activity[]; reminders: Reminder[] }`. To add a tags `OptionMultiSelect`, the component needs: (a) `tags: string[]` and `tagOptions: string[]` passed as new props, (b) the `addLeadTag`/`removeLeadTag`/`renameLeadTag` actions + `useRouter`/`useTransition` wiring (same `run()` helper pattern as LeadTable).
+</interfaces>
+
+<tasks>
+
+<task type="auto" tdd="true">
+  <name>Task 1: Rewrite LeadTable.tsx as raw-table database-view (CRM-08, CRM-09)</name>
+  <files>src/components/admin/leads/LeadTable.tsx</files>
+  <read_first>
+    - src/components/admin/leads/LeadTable.tsx (current file — to be fully replaced)
+    - src/components/admin/catalog/ServiceTable.tsx (exact structural analog, full file)
+    - src/components/ui/editable-cell.tsx (props contract)
+    - src/components/ui/option-select.tsx (props contract, esp. lines 49-66 for create-on-the-fly logic)
+    - src/components/ui/option-multi-select.tsx (props contract)
+    - .planning/phases/14-crm-attio-style-fix/14-UI-SPEC.md (Table Layout — LeadTable section, Column Structure table, Design Decision 1)
+  </read_first>
+  <behavior>
+    Manual-trace behaviors (no automated test file exists for this UI component in this codebase's convention — verified via `npx tsc --noEmit`, `npx eslint`, and the Wave-checkpoint visual verification in Task 2's follow-up; this `<behavior>` block documents the contract the implementation must satisfy):
+    - Table renders 8 columns in this exact order: Nome, Email, Telefono, Azienda, Stato, Prossima Azione, Tag, Azioni
+    - Each lead row renders as a raw `<tr>` with `border-b border-[#e5e7eb] hover:bg-[#f9f9f9] transition-colors duration-150` — no shadcn `<TableRow>`
+    - Nome cell: `EditableCell(type="text", required)`, bold (`font-medium text-[#1a1a1a]`), `onSave` calls `updateLeadField(lead.id, "name", v)`
+    - Email/Telefono/Azienda/Prossima Azione cells: `EditableCell(type="text")`, value falls back to `"—"` when null, `onSave` calls `updateLeadField(lead.id, <field>, v)`
+    - Stato cell: `OptionSelect` with `value={lead.status}`, `options={options.status}` (the fixed 6-value LEAD_STAGES array), NO `onRename` prop passed, `onChange` calls `updateLeadField(lead.id, "status", v ?? "contacted")` — badge color overridden via STAGE_COLOR semantic map (not getOptionColor hash)
+    - Tag cell: `OptionMultiSelect` with `values={lead.tags}`, `options={options.tags}`, `onAdd`/`onRemove`/`onRename` wired to `addLeadTag`/`removeLeadTag`/`renameLeadTag`
+    - Azioni cell: `<Button variant="ghost" size="sm" asChild><Link href={`/admin/leads/${lead.id}`}>Dettagli</Link></Button>`
+    - Each row uses the `run()` transition+error pattern: on action error, an extra `<tr>` spanning all 8 columns shows `text-xs text-red-600` error message
+    - When `leads.length === 0`, render `<div className="text-center py-8 text-gray-500">Nessun lead trovato</div>`
+    - Component is `"use client"`, uses `useRouter`/`useTransition` from the ServiceRow `run()` pattern
+  </behavior>
+  <action>
+Replace the entire contents of `src/components/admin/leads/LeadTable.tsx` with a raw-table database-view component, structurally identical to `ServiceTable.tsx`:
+
+```tsx
+"use client";
+
+import Link from "next/link";
+import { useState, useTransition } from "react";
+import { useRouter } from "next/navigation";
+import { Badge } from "@/components/ui/badge";
+import { Button } from "@/components/ui/button";
+import { EditableCell } from "@/components/ui/editable-cell";
+import { OptionSelect } from "@/components/ui/option-select";
+import { OptionMultiSelect } from "@/components/ui/option-multi-select";
+import {
+  updateLeadField,
+  addLeadTag,
+  removeLeadTag,
+  renameLeadTag,
+} from "@/app/admin/leads/actions";
+import type { LeadWithTags, LeadFieldOptions } from "@/lib/admin-queries";
+import { getOptionColor } from "@/components/ui/option-colors";
+import { cn } from "@/lib/utils";
+
+const STAGE_COLOR: Record<string, string> = {
+  contacted: "bg-blue-100 text-blue-800",
+  qualified: "bg-purple-100 text-purple-800",
+  proposal_sent: "bg-amber-100 text-amber-800",
+  negotiating: "bg-orange-100 text-orange-800",
+  won: "bg-green-100 text-green-800",
+  lost: "bg-red-100 text-red-800",
+};
+
+const COLUMN_HEADERS = [
+  "Nome",
+  "Email",
+  "Telefono",
+  "Azienda",
+  "Stato",
+  "Prossima Azione",
+  "Tag",
+  "Azioni",
+];
+const COL_COUNT = COLUMN_HEADERS.length;
+
+function LeadRow({
+  lead,
+  options,
+}: {
+  lead: LeadWithTags;
+  options: LeadFieldOptions;
+}) {
+  const router = useRouter();
+  const [, startTransition] = useTransition();
+  const [error, setError] = useState<string | null>(null);
+
+  function run(fn: () => Promise<unknown>) {
+    setError(null);
+    startTransition(async () => {
+      try {
+        await fn();
+        router.refresh();
+      } catch (e) {
+        setError(e instanceof Error ? e.message : "Errore nel salvataggio");
+      }
+    });
+  }
+
+  return (
+    <>
+    <tr className="border-b border-[#e5e7eb] hover:bg-[#f9f9f9] transition-colors duration-150">
+      <td className="py-2 px-3 font-medium text-[#1a1a1a] min-w-[160px]">
+        <EditableCell
+          value={lead.name}
+          type="text"
+          required
+          onSave={(v) => run(() => updateLeadField(lead.id, "name", v))}
+        />
+      </td>
+      <td className="py-2 px-3 min-w-[160px]">
+        <EditableCell
+          value={lead.email ?? ""}
+          type="text"
+          placeholder="email@esempio.com"
+          onSave={(v) => run(() => updateLeadField(lead.id, "email", v))}
+        />
+      </td>
+      <td className="py-2 px-3 min-w-[140px]">
+        <EditableCell
+          value={lead.phone ?? ""}
+          type="text"
+          placeholder="+39 3XX XXXXXXX"
+          onSave={(v) => run(() => updateLeadField(lead.id, "phone", v))}
+        />
+      </td>
+      <td className="py-2 px-3 min-w-[140px]">
+        <EditableCell
+          value={lead.company ?? ""}
+          type="text"
+          placeholder="Nome azienda"
+          onSave={(v) => run(() => updateLeadField(lead.id, "company", v))}
+        />
+      </td>
+      <td className="py-2 px-3 min-w-[120px]">
+        <OptionSelect
+          value={lead.status}
+          options={options.status}
+          onChange={(v) => run(() => updateLeadField(lead.id, "status", v ?? "contacted"))}
+          renderBadge={(opt) => (
+            <Badge
+              variant="outline"
+              className={cn(
+                STAGE_COLOR[opt] ?? getOptionColor(opt),
+                "border-transparent text-xs px-2 py-0.5 font-medium truncate"
+              )}
+            >
+              {opt.replace(/_/g, " ")}
+            </Badge>
+          )}
+        />
+      </td>
+      <td className="py-2 px-3 min-w-[180px]">
+        <EditableCell
+          value={lead.next_action ?? ""}
+          type="text"
+          placeholder="Prossima azione..."
+          onSave={(v) => run(() => updateLeadField(lead.id, "next_action", v))}
+        />
+      </td>
+      <td className="py-2 px-3 min-w-[180px]">
+        <OptionMultiSelect
+          values={lead.tags}
+          options={options.tags}
+          onAdd={(v) => run(() => addLeadTag(lead.id, v))}
+          onRemove={(v) => run(() => removeLeadTag(lead.id, v))}
+          onRename={(o, n) => run(() => renameLeadTag(o, n))}
+        />
+      </td>
+      <td className="py-2 px-3 min-w-[80px]">
+        <Button variant="ghost" size="sm" asChild>
+          <Link href={`/admin/leads/${lead.id}`}>Dettagli</Link>
+        </Button>
+      </td>
+    </tr>
+    {error && (
+      <tr>
+        <td colSpan={COL_COUNT} className="py-1 px-3 text-xs text-red-600">
+          {error}
+        </td>
+      </tr>
+    )}
+    </>
+  );
+}
+
+export function LeadTable({
+  leads,
+  options,
+}: {
+  leads: LeadWithTags[];
+  options: LeadFieldOptions;
+}) {
+  return (
+    <div className="bg-white rounded-xl border border-[#e5e7eb] overflow-hidden">
+      <div className="overflow-x-auto">
+        <table className="w-full text-sm">
+          <thead className="bg-[#f9f9f9] border-b border-[#e5e7eb] sticky top-0 z-[1]">
+            <tr>
+              {COLUMN_HEADERS.map((header) => (
+                <th
+                  key={header}
+                  className="text-left py-2 px-3 font-semibold text-[#71717a]"
+                >
+                  {header}
+                </th>
+              ))}
+            </tr>
+          </thead>
+          <tbody>
+            {leads.map((lead) => (
+              <LeadRow key={lead.id} lead={lead} options={options} />
+            ))}
+          </tbody>
+        </table>
+      </div>
+
+      {leads.length === 0 && (
+        <div className="text-center py-8 text-gray-500">Nessun lead trovato</div>
+      )}
+    </div>
+  );
+}
+```
+
+CRITICAL CORRECTION — `OptionSelect` does NOT have a `renderBadge` prop (per the props contract in `<interfaces>` above: `value, options, onChange, onRename?, placeholder?, disabled?`). Adding a new prop would require modifying `option-select.tsx`, which is explicitly "reuse as-is, NO modifications" per RESEARCH.md/PATTERNS.md ("Treat any deviation from the ServiceTable.tsx/CatalogSearch.tsx/catalog-actions pattern as a red flag requiring justification").
+
+Therefore, for the Stato cell, DO NOT attempt a `renderBadge` prop. Instead, use `OptionSelect` exactly as its existing contract allows — `value`, `options`, `onChange`, no `onRename` (this alone makes the dropdown's create-on-the-fly button still technically appear for non-exact queries, but `updateLeadField`'s server-side `LEAD_STAGES.includes()` check from Plan 14-01 rejects any value not in the 6 fixed stages, so an arbitrary "create" attempt fails server-side with "Stato non valido" and the error displays in the row's error `<tr>`). This is the defense-in-depth approach explicitly endorsed by RESEARCH.md Pitfall 2 ("Validate in updateLeadField's status branch... defense in depth, per Pattern 2 example") and UI-SPEC.md Decision 1 ("input validation... enforces that only LEAD_STAGES values are accepted server-side, regardless of client-side UI").
+
+The badge color displayed by `OptionSelect` for the `status` value will use `getOptionColor()`'s hash-based palette (the component's built-in behavior, unchanged) — NOT the semantic `STAGE_COLOR` map. This is a deviation from UI-SPEC.md Decision 1's stated preference ("Semantic colors preserved... Badge colors for status still use STAGE_COLOR map"), but implementing semantic color override WITHOUT modifying `option-select.tsx` is not possible with the component's current props contract.
+
+RESOLUTION (Claude's discretion, consistent with `<scope_reduction_prohibition>` — do not silently drop the UI-SPEC decision, implement it via the only available extension point): `option-select.tsx` accepts NO render-prop, but it DOES call `getOptionColor(value)` internally with no override mechanism. To honor UI-SPEC Decision 1 without modifying the shared component (which would affect `OptionSelect` usages elsewhere, e.g. catalog `categoria`/`fase`), do NOT use `OptionSelect` for the `status` column. Instead build a small inline closed-dropdown specifically for `status` in `LeadTable.tsx` itself (local to this file, zero shared-component changes):
+
+```tsx
+function StatusCell({
+  lead,
+  options,
+  run,
+}: {
+  lead: LeadWithTags;
+  options: LeadFieldOptions;
+  run: (fn: () => Promise<unknown>) => void;
+}) {
+  const [isOpen, setIsOpen] = useState(false);
+  const containerRef = useRef<HTMLDivElement>(null);
+
+  useEffect(() => {
+    function handleClickOutside(e: MouseEvent) {
+      if (containerRef.current && !containerRef.current.contains(e.target as Node)) {
+        setIsOpen(false);
+      }
+    }
+    document.addEventListener("mousedown", handleClickOutside);
+    return () => document.removeEventListener("mousedown", handleClickOutside);
+  }, []);
+
+  return (
+    <div ref={containerRef} className="relative w-full min-w-[120px]">
+      <div
+        onClick={() => setIsOpen((v) => !v)}
+        className="flex items-center gap-1 px-2 py-1 rounded transition-colors duration-150 min-h-[28px] cursor-pointer hover:bg-[#f0f0f0]"
+      >
+        <Badge
+          variant="outline"
+          className={cn(
+            STAGE_COLOR[lead.status] ?? "",
+            "border-transparent text-xs px-2 py-0.5 font-medium truncate"
+          )}
+        >
+          {lead.status.replace(/_/g, " ")}
+        </Badge>
+      </div>
+      {isOpen && (
+        <div className="absolute top-full left-0 mt-1 bg-white border border-[#e5e7eb] rounded-md shadow-md p-1.5 z-20 min-w-[180px]">
+          <div className="flex flex-col gap-0.5">
+            {options.status.map((stage) => (
+              <button
+                key={stage}
+                type="button"
+                onClick={() => {
+                  setIsOpen(false);
+                  run(() => updateLeadField(lead.id, "status", stage));
+                }}
+                className="flex items-center gap-2 rounded px-1.5 py-1 hover:bg-[#f5f5f5] text-left"
+              >
+                <span className="w-3.5 flex-shrink-0">
+                  {lead.status === stage && <Check className="h-3.5 w-3.5 text-[#1A463C]" />}
+                </span>
+                <Badge
+                  variant="outline"
+                  className={cn(STAGE_COLOR[stage] ?? "", "border-transparent text-xs px-2 py-0.5 font-medium truncate")}
+                >
+                  {stage.replace(/_/g, " ")}
+                </Badge>
+              </button>
+            ))}
+          </div>
+        </div>
+      )}
+    </div>
+  );
+}
+```
+
+Use `<StatusCell lead={lead} options={options} run={run} />` in place of the `OptionSelect` Stato cell in `LeadRow`. This:
+- Preserves semantic STAGE_COLOR (won=green, lost=red, etc.) per UI-SPEC.md Decision 1
+- Is a genuinely closed dropdown (only the 6 `options.status` values are clickable — no text input, no "Crea" button at all) — stronger guarantee than OptionSelect-without-onRename
+- Requires zero changes to shared `option-select.tsx`/`option-multi-select.tsx`/`editable-cell.tsx`
+- Matches "click-to-open dropdown, same interaction model as tags" (UI-SPEC Decision 1's stated goal for interaction consistency)
+
+Add imports needed for `StatusCell`: `useRef`, `useEffect` from `"react"` (alongside existing `useState`, `useTransition`), and `Check` from `"lucide-react"`. Remove the unused `getOptionColor` import for the status cell (still needed if used elsewhere — it is NOT needed in this file since OptionMultiSelect imports it internally; do not import `getOptionColor` in LeadTable.tsx at all).
+
+Final import list for LeadTable.tsx:
+```tsx
+"use client";
+
+import Link from "next/link";
+import { useState, useRef, useEffect, useTransition } from "react";
+import { useRouter } from "next/navigation";
+import { Check } from "lucide-react";
+import { Badge } from "@/components/ui/badge";
+import { Button } from "@/components/ui/button";
+import { EditableCell } from "@/components/ui/editable-cell";
+import { OptionMultiSelect } from "@/components/ui/option-multi-select";
+import {
+  updateLeadField,
+  addLeadTag,
+  removeLeadTag,
+  renameLeadTag,
+} from "@/app/admin/leads/actions";
+import type { LeadWithTags, LeadFieldOptions } from "@/lib/admin-queries";
+import { cn } from "@/lib/utils";
+```
+(`OptionSelect` import removed — not used; `StatusCell` is local.)
+  </action>
+  <verify>
+    <automated>grep -c "from \"@/components/ui/table\"" src/components/admin/leads/LeadTable.tsx | grep -qx 0 && grep -c "function StatusCell" src/components/admin/leads/LeadTable.tsx | grep -qx 1 && npx tsc --noEmit && npx eslint src/components/admin/leads/LeadTable.tsx</automated>
+  </verify>
+  <acceptance_criteria>
+    - `grep -c "shadcn\|TableRow\|TableCell\|TableHead\b" src/components/admin/leads/LeadTable.tsx | grep -v '^0'` returns empty (no shadcn Table wrapper imports remain) — verify via `grep -c "from \"@/components/ui/table\"" src/components/admin/leads/LeadTable.tsx` returns 0
+    - `grep -c "EditableCell" src/components/admin/leads/LeadTable.tsx` returns at least 5 (name, email, phone, company, next_action)
+    - `grep -c "OptionMultiSelect" src/components/admin/leads/LeadTable.tsx` returns at least 1
+    - `grep -c "function StatusCell" src/components/admin/leads/LeadTable.tsx` returns 1
+    - `grep -c "STAGE_COLOR" src/components/admin/leads/LeadTable.tsx` returns at least 1
+    - `grep -c "updateLeadField(lead.id" src/components/admin/leads/LeadTable.tsx` returns at least 6 (name, email, phone, company, status, next_action)
+    - `grep -c "addLeadTag(lead.id\|removeLeadTag(lead.id\|renameLeadTag" src/components/admin/leads/LeadTable.tsx` returns at least 3
+    - `grep -c "Nessun lead trovato" src/components/admin/leads/LeadTable.tsx` returns 1
+    - `grep -c '"Nome", "Email", "Telefono", "Azienda", "Stato", "Prossima Azione", "Tag", "Azioni"' src/components/admin/leads/LeadTable.tsx` returns 0 (header array is multiline) — instead verify via `grep -c '"Dettagli"' src/components/admin/leads/LeadTable.tsx` returns 1 AND `grep -c '"Prossima Azione"' src/components/admin/leads/LeadTable.tsx` returns 1
+    - `npx tsc --noEmit` exits 0
+    - `npx eslint src/components/admin/leads/LeadTable.tsx` exits 0
+  </acceptance_criteria>
+  <done>LeadTable.tsx is fully rewritten as a raw `<table>` database-view component matching ServiceTable.tsx's structure: 8 columns (Nome/Email/Telefono/Azienda/Stato/Prossima Azione/Tag/Azioni), EditableCell for scalar fields, a local StatusCell preserving semantic STAGE_COLOR for the closed-enum status dropdown, OptionMultiSelect for tags wired to addLeadTag/removeLeadTag/renameLeadTag, error-row display, and "Nessun lead trovato" empty state. Type-checks and lints cleanly.</done>
+</task>
+
+<task type="auto">
+  <name>Task 2: Create LeadsSearch.tsx, rewire page.tsx, surface tags in LeadDetail.tsx</name>
+  <files>src/app/admin/leads/LeadsSearch.tsx, src/app/admin/leads/page.tsx, src/components/admin/leads/LeadDetail.tsx</files>
+  <read_first>
+    - src/app/admin/catalog/CatalogSearch.tsx (exact structural analog for LeadsSearch.tsx)
+    - src/app/admin/catalog/page.tsx (exact structural analog for page.tsx)
+    - src/app/admin/leads/page.tsx (current file — to be replaced)
+    - src/components/admin/leads/LeadDetail.tsx (current file — Profilo card to extend)
+    - src/app/admin/leads/[id]/page.tsx (detail page — to confirm what props LeadDetail currently receives and what needs to change to pass tags)
+    - src/lib/admin-queries.ts (LeadWithTags, LeadFieldOptions, getLeadsWithTags, getLeadFieldOptions — from Plan 14-01)
+    - src/app/admin/leads/actions.ts (addLeadTag, removeLeadTag, renameLeadTag — from Plan 14-01)
+  </read_first>
+  <action>
+**Part A — Create `src/app/admin/leads/LeadsSearch.tsx`** (new file, mirrors `CatalogSearch.tsx`):
+
+```tsx
+"use client";
+
+import { useState, useMemo } from "react";
+import { Input } from "@/components/ui/input";
+import { Search } from "lucide-react";
+import { LeadTable } from "@/components/admin/leads/LeadTable";
+import type { LeadWithTags, LeadFieldOptions } from "@/lib/admin-queries";
+
+export function LeadsSearch({
+  leads,
+  options,
+}: {
+  leads: LeadWithTags[];
+  options: LeadFieldOptions;
+}) {
+  const [query, setQuery] = useState("");
+
+  const filtered = useMemo(() => {
+    const q = query.trim().toLowerCase();
+    if (!q) return leads;
+    return leads.filter((l) => {
+      if (l.name.toLowerCase().includes(q)) return true;
+      if (l.email?.toLowerCase().includes(q)) return true;
+      if (l.company?.toLowerCase().includes(q)) return true;
+      if (l.status.toLowerCase().includes(q)) return true;
+      if (l.tags.some((t) => t.toLowerCase().includes(q))) return true;
+      return false;
+    });
+  }, [leads, query]);
+
+  return (
+    <div className="space-y-4">
+      <div className="relative max-w-sm">
+        <Search className="absolute left-3 top-1/2 -translate-y-1/2 h-4 w-4 text-[#71717a]" />
+        <Input
+          type="text"
+          placeholder="Cerca lead..."
+          value={query}
+          onChange={(e) => setQuery(e.target.value)}
+          className="pl-9 h-9"
+        />
+      </div>
+      <LeadTable leads={filtered} options={options} />
+    </div>
+  );
+}
+```
+
+**Part B — Rewrite `src/app/admin/leads/page.tsx`**:
+
+```tsx
+import { getLeadsWithTags, getLeadFieldOptions } from "@/lib/admin-queries";
+import { LeadsSearch } from "./LeadsSearch";
+import { CreateLeadModal } from "@/components/admin/leads/LeadForm";
+
+export const revalidate = 0;
+
+export default async function LeadsPage() {
+  const [leads, options] = await Promise.all([
+    getLeadsWithTags(),
+    getLeadFieldOptions(),
+  ]);
+
+  return (
+    <div className="space-y-6">
+      <div className="flex justify-between items-center">
+        <h1 className="text-2xl font-bold text-[#1a1a1a]">Lead Pipeline</h1>
+        <CreateLeadModal />
+      </div>
+
+      <LeadsSearch leads={leads} options={options} />
+    </div>
+  );
+}
+```
+
+Notes: `export const revalidate = 0` matches the catalog page's pattern (always-fresh data, no static caching — consistent with `router.refresh()` triggering full re-fetch after every inline edit). `Suspense`/`LeadsList` wrapper from the old page is removed — `getLeadsWithTags`/`getLeadFieldOptions` are awaited directly in the server component, matching catalog's pattern exactly. `CreateLeadModal` import path is unchanged (`@/components/admin/leads/LeadForm`).
+
+**Part C — Surface lead tags in `LeadDetail.tsx`'s "Profilo" card (UI-SPEC.md Decision 4)**:
+
+1. First, read `src/app/admin/leads/[id]/page.tsx` to find where `LeadDetail` is rendered and what data is currently fetched/passed.
+
+2. Update the detail page (`src/app/admin/leads/[id]/page.tsx`) to also fetch tags + tag options for this lead. Since `getLeadsWithTags()` returns ALL leads, for a single-lead detail page either:
+   - (a) Call `getLeadsWithTags()` and find the matching lead by id (simplest, reuses Plan 14-01's function, acceptable for current data volumes), OR
+   - (b) Add a small inline query using the existing `tags` table scoped by `entity_id = lead.id, entity_type = "leads"`.
+
+   Use approach (a) for consistency and zero new query functions: import `getLeadsWithTags` and `getLeadFieldOptions` from `@/lib/admin-queries`, find `leads.find(l => l.id === params.id)` for the tags array, and pass `tagOptions={options.tags}` from `getLeadFieldOptions()`.
+
+3. In `LeadDetail.tsx`:
+   - Add `"use client"` directive (already present — confirm).
+   - Extend the component's props: `{ lead, activities, reminders, tags, tagOptions }: { lead: Lead; activities: Activity[]; reminders: Reminder[]; tags: string[]; tagOptions: string[] }`.
+   - Import `OptionMultiSelect` from `@/components/ui/option-multi-select`, and `addLeadTag`/`removeLeadTag`/`renameLeadTag` from `@/app/admin/leads/actions`.
+   - Add `useRouter`, `useTransition`, `useState` (for error) imports from `"react"`/`"next/navigation"` — replicate the same `run()` helper pattern as `LeadTable.tsx`'s `LeadRow`.
+   - In the "Profilo" Card's `CardContent`, after the "Stato" field block, add a new field block:
+     ```tsx
+     <div>
+       <label className="text-sm text-gray-600">Tag</label>
+       <OptionMultiSelect
+         values={tags}
+         options={tagOptions}
+         onAdd={(v) => run(() => addLeadTag(lead.id, v))}
+         onRemove={(v) => run(() => removeLeadTag(lead.id, v))}
+         onRename={(o, n) => run(() => renameLeadTag(o, n))}
+       />
+     </div>
+     ```
+   - Add the `run()` helper function at the top of the component body:
+     ```tsx
+     const router = useRouter();
+     const [, startTransition] = useTransition();
+     const [tagError, setTagError] = useState<string | null>(null);
+
+     function run(fn: () => Promise<unknown>) {
+       setTagError(null);
+       startTransition(async () => {
+         try {
+           await fn();
+           router.refresh();
+         } catch (e) {
+           setTagError(e instanceof Error ? e.message : "Errore nel salvataggio");
+         }
+       });
+     }
+     ```
+   - Display `tagError` below the OptionMultiSelect if set: `{tagError && <p className="text-xs text-red-600 mt-1">{tagError}</p>}`.
+
+Do not modify any other part of `LeadDetail.tsx` (activity log, reminders card, notes card remain unchanged).
+  </action>
+  <verify>
+    <automated>test -f src/app/admin/leads/LeadsSearch.tsx && grep -c "getLeadsWithTags\|getLeadFieldOptions" src/app/admin/leads/page.tsx | grep -qx 2 && npx tsc --noEmit</automated>
+  </verify>
+  <acceptance_criteria>
+    - `test -f src/app/admin/leads/LeadsSearch.tsx` exits 0
+    - `grep -c "useMemo" src/app/admin/leads/LeadsSearch.tsx` returns 1
+    - `grep -c "LeadTable leads={filtered}" src/app/admin/leads/LeadsSearch.tsx` returns 1
+    - `grep -c "getLeadsWithTags\|getLeadFieldOptions" src/app/admin/leads/page.tsx` returns 2
+    - `grep -c "CreateLeadModal" src/app/admin/leads/page.tsx` returns at least 1
+    - `grep -c "export const revalidate = 0" src/app/admin/leads/page.tsx` returns 1
+    - `grep -c "OptionMultiSelect" src/components/admin/leads/LeadDetail.tsx` returns at least 1
+    - `grep -c "addLeadTag\|removeLeadTag\|renameLeadTag" src/components/admin/leads/LeadDetail.tsx` returns at least 3
+    - `grep -c "getLeadsWithTags\|getLeadFieldOptions" src/app/admin/leads/\[id\]/page.tsx` returns at least 1
+    - `npx tsc --noEmit` exits 0
+    - `npx eslint src/app/admin/leads/LeadsSearch.tsx src/app/admin/leads/page.tsx src/components/admin/leads/LeadDetail.tsx "src/app/admin/leads/[id]/page.tsx"` exits 0
+  </acceptance_criteria>
+  <done>LeadsSearch.tsx exists and provides client-side instant filtering across name/email/company/status/tags. page.tsx fetches via getLeadsWithTags()/getLeadFieldOptions() and renders LeadsSearch + CreateLeadModal. LeadDetail.tsx's "Profilo" card includes an OptionMultiSelect for lead tags wired to addLeadTag/removeLeadTag/renameLeadTag, with error display. All files type-check and lint cleanly.</done>
+</task>
+
+</tasks>
+
+<threat_model>
+## Trust Boundaries
+
+| Boundary | Description |
+|----------|--------------|
+| Admin browser -> LeadTable/LeadDetail client components | Renders data fetched server-side via `getLeadsWithTags()`; inline-edit/tag mutations call server actions from Plan 14-01 |
+| LeadTable/LeadDetail -> Server Actions (Plan 14-01) | `updateLeadField`/`addLeadTag`/`removeLeadTag`/`renameLeadTag` — already guarded by `requireAdmin()` |
+
+## STRIDE Threat Register
+
+| Threat ID | Category | Component | Disposition | Mitigation Plan |
+|-----------|----------|-----------|-------------|-----------------|
+| T-14-07 | Tampering | `StatusCell` in LeadTable.tsx — client-side closed dropdown for `status` | mitigate | UI only allows selecting from `options.status` (6 fixed `LEAD_STAGES` values, no free-text input); server-side `updateLeadField` (Plan 14-01) independently validates against `LEAD_STAGES` — defense in depth even if a future edit reintroduces free-text |
+| T-14-08 | Information Disclosure | `LeadDetail.tsx` now renders `tags`/`tagOptions` — additional data surface on `/admin/leads/[id]` | accept | Route is Auth.js-session-protected (`/admin/*`); tags are non-sensitive labels, same trust level as existing `status`/`notes` already shown on this page |
+| T-14-09 | Repudiation / error handling | `run()` helper in LeadTable/LeadDetail — errors from server actions surfaced to UI | mitigate | Errors caught via try/catch in `run()`, displayed as `text-xs text-red-600` without leaking stack traces or internal error details (only `e.message`, which are user-facing strings like "Stato non valido" set explicitly in Plan 14-01's actions) |
+| T-14-10 | Elevation of Privilege | `LeadsSearch.tsx`/`LeadTable.tsx`/`LeadDetail.tsx` — new client components calling mutating server actions | accept (covered by Plan 14-01) | All mutating actions invoked from these components (`updateLeadField`, `addLeadTag`, etc.) already call `requireAdmin()` server-side (Plan 14-01, Task 2) — no new auth surface introduced here |
+</threat_model>
+
+<verification>
+1. `npx tsc --noEmit` — exits 0
+2. `npx eslint src/components/admin/leads/LeadTable.tsx src/app/admin/leads/LeadsSearch.tsx src/app/admin/leads/page.tsx src/components/admin/leads/LeadDetail.tsx "src/app/admin/leads/[id]/page.tsx"` — exits 0
+3. `grep -c "from \"@/components/ui/table\"" src/components/admin/leads/LeadTable.tsx` returns 0 (shadcn Table wrapper fully removed)
+4. `grep -n "Nessun lead trovato" src/components/admin/leads/LeadTable.tsx` — present
+5. Manual visual check (deferred to checkpoint in execute-phase): `/admin/leads` renders the 8-column raw table, status badges show semantic colors (won=green, lost=red), tags column shows OptionMultiSelect pills, search box filters instantly
+</verification>
+
+<success_criteria>
+- `/admin/leads` renders a raw `<table>` database-view (no shadcn Table wrapper), 8 columns: Nome, Email, Telefono, Azienda, Stato, Prossima Azione, Tag, Azioni
+- All scalar fields (name, email, phone, company, next_action) are inline-editable via `EditableCell`, persisted via `updateLeadField`
+- `status` is editable via a closed dropdown (`StatusCell`) showing only the 6 `LEAD_STAGES` values with semantic `STAGE_COLOR` badges (won=green, lost=red, etc.)
+- Lead tags are editable via `OptionMultiSelect`, backed by `addLeadTag`/`removeLeadTag`/`renameLeadTag` (CRM-09)
+- `/admin/leads` has a client-side instant search box filtering name/email/company/status/tags with zero server round-trips
+- `/admin/leads/[id]` (LeadDetail "Profilo" card) also shows and allows editing lead tags via the same `OptionMultiSelect` + actions
+- `npx tsc --noEmit` and `npx eslint` both exit 0
+</success_criteria>
+
+<output>
+After completion, create `.planning/phases/14-crm-attio-style-fix/14-02-SUMMARY.md`
+</output>

.planning/phases/14-crm-attio-style-fix/14-02-SUMMARY.md

@@ -0,0 +1,133 @@
+---
+phase: 14-crm-attio-style-fix
+plan: 02
+subsystem: frontend
+tags: [react, nextjs, leads, crm, database-view, inline-edit, tags]
+
+# Dependency graph
+requires:
+  - phase: 14-01-leads-data-layer
+    provides: "LeadWithTags/LeadFieldOptions types, getLeadsWithTags()/getLeadFieldOptions() queries, updateLeadField/addLeadTag/removeLeadTag/renameLeadTag server actions"
+provides:
+  - "LeadTable.tsx — raw <table> database-view component (8 columns: Nome/Email/Telefono/Azienda/Stato/Prossima Azione/Tag/Azioni), EditableCell + StatusCell + OptionMultiSelect"
+  - "LeadsSearch.tsx — client-side instant filter across name/email/company/status/tags"
+  - "LeadDetail.tsx Profilo card — OptionMultiSelect for lead tags, wired to addLeadTag/removeLeadTag/renameLeadTag"
+affects: []
+
+# Tech tracking
+tech-stack:
+  added: []
+  patterns:
+    - "Local StatusCell component: closed click-to-open dropdown over a fixed enum (LEAD_STAGES), preserving a semantic color map — used instead of OptionSelect when a shared component's props contract can't express semantic per-value badge colors without modification"
+    - "run() transition+error helper pattern (from ServiceRow) replicated in LeadRow and LeadDetail for inline-edit/tag mutations with router.refresh()"
+
+key-files:
+  created:
+    - src/app/admin/leads/LeadsSearch.tsx
+  modified:
+    - src/components/admin/leads/LeadTable.tsx
+    - src/app/admin/leads/page.tsx
+    - src/app/admin/leads/[id]/page.tsx
+    - src/components/admin/leads/LeadDetail.tsx
+
+key-decisions:
+  - "[id]/page.tsx now sources lead+tags via getLeadsWithTags().find(id) + getLeadFieldOptions() (plan's approach (a)) instead of getLeadById, removing one query function call while reusing Plan 14-01's left-join"
+  - "Two plan acceptance_criteria greps are stale relative to their own analog files (CatalogSearch.tsx) and were treated as documentation inaccuracies, not implementation defects — see Deviations"
+
+patterns-established:
+  - "StatusCell-style local closed-dropdown for fixed-enum fields needing semantic per-value badge colors, as an alternative to OptionSelect"
+
+requirements-completed: [CRM-08, CRM-09]
+
+# Metrics
+duration: ~25min
+completed: 2026-06-14
+---
+
+# Phase 14 Plan 02: LeadTable Attio Rewrite Summary
+
+**Rewrote `LeadTable.tsx` as a raw-table Attio-style database view with inline editing, a closed status dropdown preserving semantic colors, and lead tags via `OptionMultiSelect`; added `LeadsSearch.tsx` for client-side instant filtering; rewired `/admin/leads` and `/admin/leads/[id]` to the new data layer; surfaced lead tags in `LeadDetail`'s "Profilo" card.**
+
+## Performance
+
+- **Duration:** ~25 min
+- **Completed:** 2026-06-14T13:22:00+02:00
+- **Tasks:** 2
+- **Files modified:** 4 (+1 created)
+
+## Accomplishments
+- `LeadTable.tsx` fully rewritten: raw `<table>` (no shadcn Table wrapper), 8 columns (Nome/Email/Telefono/Azienda/Stato/Prossima Azione/Tag/Azioni)
+- `EditableCell` wired for name (required), email, phone, company, next_action → `updateLeadField`
+- New local `StatusCell`: click-to-open closed dropdown over the 6 `LEAD_STAGES` values only (no free-text/create option), preserving semantic `STAGE_COLOR` badges (won=green, lost=red, etc.) per UI-SPEC Decision 1 — implemented without modifying shared `option-select.tsx`
+- `OptionMultiSelect` for lead tags, wired to `addLeadTag`/`removeLeadTag`/`renameLeadTag`
+- Per-row error `<tr>` and "Nessun lead trovato" empty state
+- New `LeadsSearch.tsx`: instant client-side filter over name/email/company/status/tags (mirrors `CatalogSearch.tsx`)
+- `page.tsx` rewired to fetch `getLeadsWithTags()` + `getLeadFieldOptions()` in parallel, render `LeadsSearch` + `CreateLeadModal`, `revalidate = 0`
+- `[id]/page.tsx` rewired to fetch `getLeadsWithTags()`/`getLeadFieldOptions()`, locate the lead by id, pass `tags`/`tagOptions` to `LeadDetail`
+- `LeadDetail.tsx` "Profilo" card now includes an `OptionMultiSelect` for lead tags with its own `run()`/error-display helper, identical mutation pattern to `LeadTable`
+
+## Task Commits
+
+Each task was committed atomically:
+
+1. **Task 1: Rewrite LeadTable.tsx as raw-table database-view (CRM-08, CRM-09)** - `4887a31` (feat)
+2. **Task 2: Create LeadsSearch.tsx, rewire page.tsx, surface tags in LeadDetail.tsx** - `ab7fa62` (feat)
+
+## Files Created/Modified
+- `src/components/admin/leads/LeadTable.tsx` - Full rewrite: raw-table `LeadRow`/`LeadTable`, new `StatusCell`, `EditableCell`/`OptionMultiSelect` wiring
+- `src/app/admin/leads/LeadsSearch.tsx` - New file: client-side instant filter wrapper around `LeadTable`
+- `src/app/admin/leads/page.tsx` - Rewired to `getLeadsWithTags()`/`getLeadFieldOptions()` + `LeadsSearch`, `revalidate = 0`, dropped `Suspense`/`LeadsList`
+- `src/app/admin/leads/[id]/page.tsx` - Rewired to `getLeadsWithTags()`/`getLeadFieldOptions()` (dropped `getLeadById`), passes `tags`/`tagOptions` to `LeadDetail`
+- `src/components/admin/leads/LeadDetail.tsx` - Added `tags`/`tagOptions` props, `OptionMultiSelect` + `run()` helper in "Profilo" card, imports for `useState`/`useTransition`/`useRouter`/`addLeadTag`/`removeLeadTag`/`renameLeadTag`/`OptionMultiSelect`
+
+## Decisions Made
+- Followed the plan's `<action>` blocks essentially verbatim, including the plan's own correction to use a local `StatusCell` instead of `OptionSelect` (the plan pre-emptively documents and resolves this — not a Claude-discretion deviation, just executing the plan as written)
+- For `[id]/page.tsx`, used plan's approach (a): `getLeadsWithTags().find(l => l.id === id)` + `getLeadFieldOptions()`, calling `notFound()` if no match — removes the `getLeadById` import entirely
+
+## Deviations from Plan
+
+### Documentation-only (plan acceptance_criteria inaccuracies, not implementation defects)
+
+**1. `grep -c '"Dettagli"' LeadTable.tsx` expects 1, returns 0**
+- The plan's own `<action>` code renders `<Link href={...}>Dettagli</Link>` — "Dettagli" as JSX text content, not a quoted string literal `"Dettagli"`. The implementation matches the `<action>` block exactly; the acceptance grep (which looks for literal `"Dettagli"`) was simply never going to match this code shape.
+- No fix needed — `<behavior>` and `<action>` blocks both specify this exact JSX form.
+
+**2. `grep -c "useMemo" LeadsSearch.tsx` expects 1, returns 2**
+- `LeadsSearch.tsx` is a 1:1 structural port of `CatalogSearch.tsx`, which itself returns 2 for this same grep (1 import line + 1 usage line). Verified: `grep -c "useMemo" src/app/admin/catalog/CatalogSearch.tsx` also returns 2. The acceptance criterion is stale relative to its own reference implementation.
+- No fix needed — implementation matches the established pattern exactly.
+
+### Pre-existing, unrelated (not introduced by this plan)
+
+**3. Unused `Button` import in `LeadDetail.tsx`**
+- `npx eslint src/components/admin/leads/LeadDetail.tsx` reports 1 warning: `@typescript-eslint/no-unused-vars` for the `Button` import.
+- Confirmed pre-existing: `git show main:src/components/admin/leads/LeadDetail.tsx | grep -c '\bButton\b'` returns 1 (import-only) on `main` as well, before this plan's edits. Not touched — out of scope per "Do not modify any other part of LeadDetail.tsx" instruction.
+
+---
+
+**Total deviations:** 0 implementation deviations. 2 stale plan-doc acceptance criteria (documented above, both verified against their reference analogs). 1 pre-existing lint warning (unrelated, untouched).
+**Impact on plan:** None — `npx tsc --noEmit` exits 0 across the whole project; `npx eslint` exits 0 (errors) with only the 1 pre-existing warning noted above.
+
+## Issues Encountered
+None beyond the documentation-only items above.
+
+## User Setup Required
+None — no new dependencies, no schema/migration changes (this plan is pure frontend wiring on top of Plan 14-01's already-applied data layer).
+
+## Next Phase Readiness
+- `/admin/leads` and `/admin/leads/[id]` now fully deliver CRM-08 (inline-edit database view) and CRM-09 (lead tags)
+- This was the only plan in Wave 2 and the last plan in Phase 14 — ready for phase-level verification (CRM-08 through CRM-12 across all 3 plans)
+
+---
+*Phase: 14-crm-attio-style-fix*
+*Completed: 2026-06-14*
+
+## Self-Check: PASSED
+
+- FOUND: src/components/admin/leads/LeadTable.tsx
+- FOUND: src/app/admin/leads/LeadsSearch.tsx
+- FOUND: src/app/admin/leads/page.tsx
+- FOUND: src/app/admin/leads/[id]/page.tsx
+- FOUND: src/components/admin/leads/LeadDetail.tsx
+- FOUND: .planning/phases/14-crm-attio-style-fix/14-02-SUMMARY.md
+- FOUND commit: 4887a31
+- FOUND commit: ab7fa62

.planning/phases/14-crm-attio-style-fix/14-03-PLAN.md

@@ -0,0 +1,480 @@
+---
+phase: 14-crm-attio-style-fix
+plan: 03
+type: execute
+wave: 1
+depends_on: []
+files_modified:
+  - src/components/admin/dashboard/FollowUpWidget.tsx
+  - src/components/admin/leads/LeadForm.tsx
+  - src/components/admin/leads/SendQuoteModal.tsx
+autonomous: true
+requirements: [CRM-10, CRM-11, CRM-12]
+
+must_haves:
+  truths:
+    - "FollowUpWidget shows Italian text only: heading 'Richiedi Follow-up', body 'X lead da contattare' (no English words, no pluralized 's')"
+    - "EditLeadModal and CreateLeadModal use useForm<CreateLeadInput>() (not useForm<any>()) — form fields are type-checked against the Zod-inferred lead schema"
+    - "SendQuoteModal's onSubmit no longer contains an unreachable 'new' tab branch — the only navigation for the 'new' tab happens via the button's own onClick"
+  artifacts:
+    - path: "src/components/admin/dashboard/FollowUpWidget.tsx"
+      provides: "Italian-only follow-up widget copy"
+      contains: "Richiedi Follow-up"
+    - path: "src/components/admin/leads/LeadForm.tsx"
+      provides: "Typed react-hook-form for lead create/edit"
+      contains: "useForm<CreateLeadInput>"
+    - path: "src/components/admin/leads/SendQuoteModal.tsx"
+      provides: "onSubmit without dead 'new' tab branch"
+      contains: "onSubmit"
+  key_links:
+    - from: "src/components/admin/leads/LeadForm.tsx"
+      to: "src/lib/lead-validators.ts"
+      via: "import type { CreateLeadInput }"
+      pattern: "import.*CreateLeadInput.*lead-validators"
+---
+
+<objective>
+Fix three residual CRM bugs identified in RESEARCH.md, each isolated to a single component file with no shared dependencies:
+
+1. **CRM-10**: `FollowUpWidget.tsx` has 6 hardcoded English strings — translate to Italian per UI-SPEC.md Decision 5 ("X lead da contattare", no pluralization since Italian "lead" is invariant).
+2. **CRM-11**: `LeadForm.tsx`'s `CreateLeadModal` and `EditLeadModal` both call `useForm<any>()`, defeating react-hook-form's type safety — replace with `useForm<CreateLeadInput>()` using the Zod-inferred type already exported from `lead-validators.ts`, removing the local type redeclaration and narrowing the one unavoidable `status` cast.
+3. **CRM-12**: `SendQuoteModal.tsx`'s `onSubmit` contains a dead `if (tab === "new") {...}` branch that can never execute (the "new" tab's button has its own `onClick` handler and never triggers form submit) — remove the unreachable branch.
+
+Purpose: Closes out the three non-UI residual bugs from Phase 14's scope, completing CRM-10/11/12 alongside the Attio-style table redesign (CRM-08/09 in Plans 14-01/14-02).
+
+Output: Three independently-fixed components, each type-checked and linted.
+</objective>
+
+<execution_context>
+@$HOME/.claude/get-shit-done/workflows/execute-plan.md
+@$HOME/.claude/get-shit-done/templates/summary.md
+</execution_context>
+
+<context>
+@.planning/ROADMAP.md
+@.planning/REQUIREMENTS.md
+@.planning/phases/14-crm-attio-style-fix/14-RESEARCH.md
+@.planning/phases/14-crm-attio-style-fix/14-PATTERNS.md
+@.planning/phases/14-crm-attio-style-fix/14-UI-SPEC.md
+</context>
+
+<interfaces>
+<!-- No new interfaces created; these are isolated bug fixes against existing types. -->
+
+From src/lib/lead-validators.ts (existing, unchanged — CreateLeadInput already exported):
+```typescript
+export const LEAD_STAGES = ["contacted", "qualified", "proposal_sent", "negotiating", "won", "lost"] as const;
+
+export const createLeadSchema = z.object({
+  name: z.string().min(1),
+  email: z.string().email().nullable().optional(),
+  phone: z.string().nullable().optional(),
+  company: z.string().nullable().optional(),
+  status: z.enum(LEAD_STAGES).optional(),
+  next_action: z.string().nullable().optional(),
+  // ... etc
+});
+
+export type CreateLeadInput = z.infer<typeof createLeadSchema>;
+export type UpdateLeadInput = z.infer<typeof updateLeadSchema>;
+```
+
+From src/components/admin/dashboard/FollowUpWidget.tsx (current, full 47 lines — to be translated):
+```tsx
+import Link from "next/link";
+import { getLeadsNeedingFollowUp } from "@/lib/lead-service";
+import { Card, CardContent, CardHeader, CardTitle } from "@/components/ui/card";
+import { Button } from "@/components/ui/button";
+
+export async function FollowUpWidget() {
+  const leads = await getLeadsNeedingFollowUp(7);
+  const count = leads.length;
+
+  return (
+    <Card>
+      <CardHeader>
+        <CardTitle>Require Follow-up</CardTitle>
+      </CardHeader>
+      <CardContent>
+        {count > 0 ? (
+          <>
+            <p className="text-sm text-gray-600 mb-3">
+              {count} lead{count !== 1 ? "s" : ""} to contact
+            </p>
+            <div className="space-y-2">
+              {leads.slice(0, 5).map((lead) => (
+                <div key={lead.id} className="flex items-center justify-between">
+                  <span className="text-sm font-medium">{lead.name}</span>
+                  <Button size="sm" variant="outline" asChild>
+                    <Link href={`/admin/leads/${lead.id}`}>Contact</Link>
+                  </Button>
+                </div>
+              ))}
+            </div>
+            {count > 5 && (
+              <Link href="/admin/leads" className="text-sm text-blue-600 hover:underline mt-2 block">
+                View All ({count})
+              </Link>
+            )}
+          </>
+        ) : (
+          <p className="text-sm text-gray-500">All leads are up to date!</p>
+        )}
+      </CardContent>
+    </Card>
+  );
+}
+```
+
+From src/components/admin/leads/LeadForm.tsx (current, lines 1-40 and 202-220 — relevant excerpts):
+```tsx
+"use client";
+
+import { useState } from "react";
+import { useForm } from "react-hook-form";
+import { zodResolver } from "@hookform/resolvers/zod";
+import { createLeadSchema } from "@/lib/lead-validators";
+import type { z } from "zod";
+import type { Lead } from "@/db/schema";
+// ... other imports
+
+type CreateLeadInput = z.infer<typeof createLeadSchema>;  // <-- local redeclaration, line 36, to be removed
+
+export function CreateLeadModal() {
+  const form = useForm<any>({  // <-- line ~42, to be fixed
+    resolver: zodResolver(createLeadSchema),
+    defaultValues: { name: "", email: "", phone: "", company: "", status: "contacted", next_action: "" },
+  });
+  // ...
+}
+
+// ... EditLeadModal starts around line 202
+export function EditLeadModal({ lead, open, onOpenChange }: { lead: Lead; open: boolean; onOpenChange: (open: boolean) => void }) {
+  const form = useForm<any>({  // <-- to be fixed
+    resolver: zodResolver(createLeadSchema),
+    defaultValues: {
+      name: lead.name,
+      email: lead.email ?? "",
+      phone: lead.phone ?? "",
+      company: lead.company ?? "",
+      status: lead.status as any,  // <-- line 212, to be narrowed
+      next_action: lead.next_action ?? "",
+    },
+  });
+  // ...
+}
+```
+
+From src/components/admin/leads/SendQuoteModal.tsx (current, lines 31-75 and 120-135 — relevant excerpts):
+```tsx
+const assignQuoteSchema = z.object({
+  tab: z.enum(["existing", "new"]),
+  quote_id: z.string().optional(),
+  generate_new: z.boolean().optional(),  // <-- dead field, line ~31
+});
+
+// ...
+
+const form = useForm<AssignQuoteInput>({
+  resolver: zodResolver(assignQuoteSchema),
+  defaultValues: { tab: "existing", quote_id: "", generate_new: false },  // <-- line ~43
+});
+
+// ...
+
+async function onSubmit(data: AssignQuoteInput) {
+  if (data.tab === "new") {
+    window.location.href = `/admin/quotes/new?lead_id=${lead.id}`;  // <-- dead branch, lines 51-54, UNREACHABLE
+    return;
+  }
+
+  setError(null);
+  startTransition(async () => {
+    try {
+      const result = await assignQuoteToLead({ lead_id: lead.id, quote_id: data.quote_id! });
+      if (!result.success) {
+        setError(result.error ?? "Errore");
+        return;
+      }
+      onOpenChange(false);
+      router.refresh();
+    } catch (e) {
+      setError(e instanceof Error ? e.message : "Errore");
+    }
+  });
+}
+
+// ... around line 126-133, the "new" tab's button:
+{tab === "new" && (
+  <Button type="button" onClick={() => { window.location.href = `/admin/quotes/new?lead_id=${lead.id}`; }}>
+    Crea Nuovo Preventivo
+  </Button>
+)}
+```
+</interfaces>
+
+<tasks>
+
+<task type="auto">
+  <name>Task 1: Translate FollowUpWidget.tsx to Italian (CRM-10)</name>
+  <files>src/components/admin/dashboard/FollowUpWidget.tsx</files>
+  <read_first>
+    - src/components/admin/dashboard/FollowUpWidget.tsx (current, full 47-line file)
+    - .planning/phases/14-crm-attio-style-fix/14-UI-SPEC.md (Design Decision 5 — FollowUpWidget plural handling)
+    - .planning/phases/14-crm-attio-style-fix/14-RESEARCH.md (Pitfall 3 — FollowUpWidget i18n scope, confirms lead-service.ts has no English strings, fix is widget-only)
+  </read_first>
+  <action>
+Translate all 6 hardcoded English strings in `FollowUpWidget.tsx` to Italian, per UI-SPEC.md Decision 5 (Italian "lead" is invariant — same word for singular/plural, so no conditional pluralization needed):
+
+1. `"Require Follow-up"` (CardTitle) → `"Richiedi Follow-up"`
+2. `{count} lead{count !== 1 ? "s" : ""} to contact` → `{count} lead da contattare` (remove the `{count !== 1 ? "s" : ""}` ternary entirely — "lead" never takes an "s" in Italian)
+3. `"Contact"` (Button label) → `"Contatta"`
+4. `View All ({count})` → `Vedi Tutto ({count})`
+5. `"All leads are up to date!"` (empty state) → `"Tutti i lead sono aggiornati!"`
+
+Apply these as direct string replacements — do not change any logic, imports, component structure, or the `getLeadsNeedingFollowUp(7)` call. Only the JSX text content changes.
+
+The full corrected file:
+
+```tsx
+import Link from "next/link";
+import { getLeadsNeedingFollowUp } from "@/lib/lead-service";
+import { Card, CardContent, CardHeader, CardTitle } from "@/components/ui/card";
+import { Button } from "@/components/ui/button";
+
+export async function FollowUpWidget() {
+  const leads = await getLeadsNeedingFollowUp(7);
+  const count = leads.length;
+
+  return (
+    <Card>
+      <CardHeader>
+        <CardTitle>Richiedi Follow-up</CardTitle>
+      </CardHeader>
+      <CardContent>
+        {count > 0 ? (
+          <>
+            <p className="text-sm text-gray-600 mb-3">
+              {count} lead da contattare
+            </p>
+            <div className="space-y-2">
+              {leads.slice(0, 5).map((lead) => (
+                <div key={lead.id} className="flex items-center justify-between">
+                  <span className="text-sm font-medium">{lead.name}</span>
+                  <Button size="sm" variant="outline" asChild>
+                    <Link href={`/admin/leads/${lead.id}`}>Contatta</Link>
+                  </Button>
+                </div>
+              ))}
+            </div>
+            {count > 5 && (
+              <Link href="/admin/leads" className="text-sm text-blue-600 hover:underline mt-2 block">
+                Vedi Tutto ({count})
+              </Link>
+            )}
+          </>
+        ) : (
+          <p className="text-sm text-gray-500">Tutti i lead sono aggiornati!</p>
+        )}
+      </CardContent>
+    </Card>
+  );
+}
+```
+  </action>
+  <verify>
+    <automated>grep -ic "Require Follow-up\|to contact\|\"Contact\"\|View All\|up to date" src/components/admin/dashboard/FollowUpWidget.tsx | grep -qx 0 && npx tsc --noEmit</automated>
+  </verify>
+  <acceptance_criteria>
+    - `grep -c "Richiedi Follow-up" src/components/admin/dashboard/FollowUpWidget.tsx` returns 1
+    - `grep -c "lead da contattare" src/components/admin/dashboard/FollowUpWidget.tsx` returns 1
+    - `grep -c "Contatta" src/components/admin/dashboard/FollowUpWidget.tsx` returns 1
+    - `grep -c "Vedi Tutto" src/components/admin/dashboard/FollowUpWidget.tsx` returns 1
+    - `grep -c "Tutti i lead sono aggiornati" src/components/admin/dashboard/FollowUpWidget.tsx` returns 1
+    - `grep -ic "Require Follow-up\|to contact\|\"Contact\"\|View All\|up to date" src/components/admin/dashboard/FollowUpWidget.tsx` returns 0 (no English strings remain)
+    - `grep -c 'count !== 1 ? "s" : ""' src/components/admin/dashboard/FollowUpWidget.tsx` returns 0 (pluralization ternary removed)
+    - `npx tsc --noEmit` exits 0
+    - `npx eslint src/components/admin/dashboard/FollowUpWidget.tsx` exits 0
+  </acceptance_criteria>
+  <done>FollowUpWidget.tsx contains only Italian text: "Richiedi Follow-up" heading, "{count} lead da contattare" body (no pluralization), "Contatta" button, "Vedi Tutto ({count})" link, "Tutti i lead sono aggiornati!" empty state. No English strings remain. Type-checks and lints cleanly.</done>
+</task>
+
+<task type="auto" tdd="true">
+  <name>Task 2: Type LeadForm.tsx's useForm with CreateLeadInput (CRM-11)</name>
+  <files>src/components/admin/leads/LeadForm.tsx</files>
+  <read_first>
+    - src/components/admin/leads/LeadForm.tsx (current, full 366-line file — both CreateLeadModal lines 38-201 and EditLeadModal lines 202-365)
+    - src/lib/lead-validators.ts (full file — confirm CreateLeadInput export, createLeadSchema shape, LEAD_STAGES)
+    - .planning/phases/14-crm-attio-style-fix/14-RESEARCH.md (relevant Pattern for CRM-11 fix)
+  </read_first>
+  <behavior>
+    Manual-trace behaviors (verified via `npx tsc --noEmit` — TypeScript itself is the test for this type-safety fix):
+    - `CreateLeadModal`'s `useForm<any>()` becomes `useForm<CreateLeadInput>()`, where `CreateLeadInput` is imported from `@/lib/lead-validators` (not locally redeclared)
+    - `EditLeadModal`'s `useForm<any>()` becomes `useForm<CreateLeadInput>()`
+    - The local `type CreateLeadInput = z.infer<typeof createLeadSchema>;` declaration (current line 36) is REMOVED — the type now comes from the import
+    - `EditLeadModal`'s `defaultValues.status: lead.status as any` becomes `status: lead.status as CreateLeadInput["status"]` — the only remaining cast, narrowing `Lead.status` (a plain `string` column type from Drizzle's `$inferSelect`) to the Zod-enum-derived `CreateLeadInput["status"]` type (`"contacted" | "qualified" | "proposal_sent" | "negotiating" | "won" | "lost" | undefined`)
+    - All `form.register(...)`, `form.handleSubmit(...)`, `form.setValue(...)`, `form.watch(...)` calls (wherever they appear in both modals) continue to type-check against `CreateLeadInput` field names (`name`, `email`, `phone`, `company`, `status`, `next_action`, etc.) — if any currently-untyped `any`-cast field access breaks, the field name is wrong relative to `createLeadSchema` and must be corrected to match the schema (do not re-introduce `any` to suppress the error)
+    - If `z` import becomes unused after removing the local `type CreateLeadInput = z.infer<...>` line, remove the now-unused `import type { z } from "zod"` (or equivalent) — but only if `z` is not used elsewhere in the file (grep first)
+  </behavior>
+  <action>
+1. Read the full `LeadForm.tsx` file to locate:
+   - The current local type declaration: `type CreateLeadInput = z.infer<typeof createLeadSchema>;`
+   - Both `useForm<any>({...})` call sites (one in `CreateLeadModal`, one in `EditLeadModal`)
+   - The `status: lead.status as any` cast in `EditLeadModal`'s `defaultValues`
+   - The current import block (to determine whether `z` and `createLeadSchema` are already imported, and from where)
+
+2. Add `CreateLeadInput` to the import from `@/lib/lead-validators`:
+   ```tsx
+   import { createLeadSchema, type CreateLeadInput } from "@/lib/lead-validators";
+   ```
+   (adjust based on the exact current import statement — if `createLeadSchema` is already imported from `lead-validators`, just add `, type CreateLeadInput` to that same import line)
+
+3. Remove the local redeclaration: delete the line `type CreateLeadInput = z.infer<typeof createLeadSchema>;` entirely.
+
+4. If `import type { z } from "zod"` (or `import { z } from "zod"` used only for this) becomes unused after step 3, remove it. First grep the file for other `z.` usages — if any remain (e.g., inline schema validation elsewhere in the file), keep the import.
+
+5. In `CreateLeadModal`, change:
+   ```tsx
+   const form = useForm<any>({
+   ```
+   to:
+   ```tsx
+   const form = useForm<CreateLeadInput>({
+   ```
+
+6. In `EditLeadModal`, change:
+   ```tsx
+   const form = useForm<any>({
+   ```
+   to:
+   ```tsx
+   const form = useForm<CreateLeadInput>({
+   ```
+
+7. In `EditLeadModal`'s `defaultValues`, change:
+   ```tsx
+   status: lead.status as any,
+   ```
+   to:
+   ```tsx
+   status: lead.status as CreateLeadInput["status"],
+   ```
+
+8. Run `npx tsc --noEmit`. If new type errors surface inside either modal (e.g., a `form.watch("someField")` call referencing a field name not in `createLeadSchema`, or a `form.setValue(...)` with a mismatched type), fix the call site to match the actual `createLeadSchema` shape (from `lead-validators.ts`) — do NOT reintroduce `any` or `as any` to silence the error. The goal is genuine type safety, not error suppression.
+  </action>
+  <verify>
+    <automated>grep -c "useForm<any>\|as any" src/components/admin/leads/LeadForm.tsx | grep -qx 0 && npx tsc --noEmit && npx eslint src/components/admin/leads/LeadForm.tsx</automated>
+  </verify>
+  <acceptance_criteria>
+    - `grep -c "useForm<any>" src/components/admin/leads/LeadForm.tsx` returns 0
+    - `grep -c "useForm<CreateLeadInput>" src/components/admin/leads/LeadForm.tsx` returns 2 (CreateLeadModal + EditLeadModal)
+    - `grep -c "type CreateLeadInput = z.infer" src/components/admin/leads/LeadForm.tsx` returns 0 (local redeclaration removed)
+    - `grep -c "CreateLeadInput" src/components/admin/leads/LeadForm.tsx | grep -v '^0'` returns non-empty (import line + 2 useForm + 1 cast = at least 4 occurrences)
+    - `grep -c "status: lead.status as any" src/components/admin/leads/LeadForm.tsx` returns 0
+    - `grep -c 'status: lead.status as CreateLeadInput\["status"\]' src/components/admin/leads/LeadForm.tsx` returns 1
+    - `grep -c "as any" src/components/admin/leads/LeadForm.tsx` returns 0 (no remaining `any` casts in the file)
+    - `npx tsc --noEmit` exits 0
+    - `npx eslint src/components/admin/leads/LeadForm.tsx` exits 0
+  </acceptance_criteria>
+  <done>Both CreateLeadModal and EditLeadModal use useForm<CreateLeadInput>() with CreateLeadInput imported from lead-validators.ts (no local redeclaration). The only remaining type assertion is the narrowing cast `lead.status as CreateLeadInput["status"]` in EditLeadModal's defaultValues. No `as any` remains anywhere in the file. Type-checks and lints cleanly.</done>
+</task>
+
+<task type="auto" tdd="true">
+  <name>Task 3: Remove dead onSubmit branch in SendQuoteModal.tsx (CRM-12)</name>
+  <files>src/components/admin/leads/SendQuoteModal.tsx</files>
+  <read_first>
+    - src/components/admin/leads/SendQuoteModal.tsx (current, full 140-line file)
+    - .planning/phases/14-crm-attio-style-fix/14-RESEARCH.md (Pitfall 4 — SendQuoteModal dead branch analysis)
+    - .planning/phases/14-crm-attio-style-fix/14-PATTERNS.md (SendQuoteModal.tsx fixed pattern)
+  </read_first>
+  <behavior>
+    Manual-trace behaviors (verified via `npx tsc --noEmit` + `npx eslint` — no existing test file for this component; the fix is a dead-code removal, behavior for the "existing" tab path is unchanged):
+    - `onSubmit`'s body NO LONGER contains an `if (data.tab === "new") { window.location.href = ...; return; }` branch — this branch was unreachable because: (a) the "new" tab's submit button has its own `onClick={() => window.location.href = ...}` handler that navigates directly without calling `form.handleSubmit`, and (b) when `tab === "new"`, the only rendered button is that direct-navigation button — no `type="submit"` button exists for the "new" tab, so `onSubmit` (wired to `form.handleSubmit(onSubmit)`) can never fire with `data.tab === "new"`
+    - `onSubmit` now begins directly with the "existing" tab logic: `setError(null); startTransition(async () => { ... assignQuoteToLead({ lead_id: lead.id, quote_id: data.quote_id! }) ... })`
+    - The "new" tab's button (with its own `onClick` navigation) is UNCHANGED — it continues to work exactly as before
+    - `assignQuoteToLead({ lead_id, quote_id })` call signature is unchanged — only the dead branch above it is removed
+  </behavior>
+  <action>
+1. Read the full `SendQuoteModal.tsx` file.
+
+2. Locate the `onSubmit` function. It currently begins with:
+   ```tsx
+   async function onSubmit(data: AssignQuoteInput) {
+     if (data.tab === "new") {
+       window.location.href = `/admin/quotes/new?lead_id=${lead.id}`;
+       return;
+     }
+
+     setError(null);
+     startTransition(async () => {
+       // ... existing-tab logic
+     });
+   }
+   ```
+
+3. Remove the dead `if (data.tab === "new") { ... return; }` block entirely, so `onSubmit` begins directly with `setError(null);`:
+   ```tsx
+   async function onSubmit(data: AssignQuoteInput) {
+     setError(null);
+     startTransition(async () => {
+       // ... existing-tab logic (unchanged)
+     });
+   }
+   ```
+
+4. Confirm the "new" tab's button (its own `onClick={() => { window.location.href = ... }}`, separate from form submission) is untouched — it remains the sole navigation path for the "new" tab.
+
+5. Leave the `generate_new: z.boolean().optional()` field in `assignQuoteSchema` and its `defaultValues: { ..., generate_new: false }` entry AS-IS — RESEARCH.md flags this as optional cleanup, not required for CRM-12. Removing it would require also checking `AssignQuoteInput` usages elsewhere (out of scope for this isolated fix). Do not touch it.
+
+6. After the edit, grep the file for `data.tab` to confirm no other dead `tab === "new"` checks remain inside `onSubmit`. If the `tab` field is still referenced elsewhere (e.g., to conditionally render the "existing" vs "new" tab UI in JSX), that is correct and expected — only the `onSubmit` dead branch is removed.
+  </action>
+  <verify>
+    <automated>grep -A2 "async function onSubmit" src/components/admin/leads/SendQuoteModal.tsx | grep -c 'data.tab === "new"' | grep -qx 0 && npx tsc --noEmit && npx eslint src/components/admin/leads/SendQuoteModal.tsx</automated>
+  </verify>
+  <acceptance_criteria>
+    - `grep -A2 "async function onSubmit" src/components/admin/leads/SendQuoteModal.tsx | grep -c 'data.tab === "new"'` returns 0
+    - `grep -c "window.location.href" src/components/admin/leads/SendQuoteModal.tsx` returns 1 (only the "new" tab button's onClick remains, the onSubmit copy is removed)
+    - `grep -c "assignQuoteToLead" src/components/admin/leads/SendQuoteModal.tsx` returns at least 1 (existing-tab submit logic preserved)
+    - `grep -c "generate_new" src/components/admin/leads/SendQuoteModal.tsx` returns at least 1 (left untouched per action step 5)
+    - `npx tsc --noEmit` exits 0
+    - `npx eslint src/components/admin/leads/SendQuoteModal.tsx` exits 0
+  </acceptance_criteria>
+  <done>SendQuoteModal.tsx's onSubmit no longer contains the unreachable `if (data.tab === "new") {...}` branch — onSubmit now starts directly with `setError(null)` and the existing-tab assignQuoteToLead logic. The "new" tab's own onClick-based navigation button is unchanged. generate_new field left as-is (optional cleanup, out of scope). Type-checks and lints cleanly.</done>
+</task>
+
+</tasks>
+
+<threat_model>
+## Trust Boundaries
+
+| Boundary | Description |
+|----------|--------------|
+| Admin browser -> FollowUpWidget/LeadForm/SendQuoteModal | Server-rendered (FollowUpWidget) and client components (LeadForm, SendQuoteModal); no new data flows introduced |
+
+## STRIDE Threat Register
+
+| Threat ID | Category | Component | Disposition | Mitigation Plan |
+|-----------|----------|-----------|-------------|-----------------|
+| T-14-11 | Tampering | LeadForm.tsx — `useForm<any>()` to `useForm<CreateLeadInput>()` | mitigate | Stronger compile-time typing reduces risk of malformed form payloads reaching `createLead`/`updateLead` server actions; Zod validation at the action boundary (pre-existing, unchanged) remains the actual runtime enforcement — this fix is a defense-in-depth/DX improvement, not a new security control |
+| T-14-12 | Tampering | SendQuoteModal.tsx — dead `onSubmit` branch removal | accept | Removing unreachable code has no security effect; `assignQuoteToLead` (existing-tab path) and its `requireAdmin`-equivalent guards (if any, pre-existing) are unchanged |
+| T-14-13 | Information Disclosure | FollowUpWidget.tsx — string translation only | accept | No data exposure change; only display copy is translated. `getLeadsNeedingFollowUp(7)` query and its session-protected `/admin` route context are unchanged |
+</threat_model>
+
+<verification>
+1. `npx tsc --noEmit` — exits 0 across all three modified files
+2. `npx eslint src/components/admin/dashboard/FollowUpWidget.tsx src/components/admin/leads/LeadForm.tsx src/components/admin/leads/SendQuoteModal.tsx` — exits 0
+3. `grep -ic "Require Follow-up\|to contact\|View All\|up to date" src/components/admin/dashboard/FollowUpWidget.tsx` returns 0 (no English strings)
+4. `grep -c "useForm<any>\|as any" src/components/admin/leads/LeadForm.tsx` returns 0
+5. `grep -A2 "async function onSubmit" src/components/admin/leads/SendQuoteModal.tsx | grep -c 'data.tab === "new"'` returns 0
+</verification>
+
+<success_criteria>
+- FollowUpWidget.tsx displays only Italian text ("Richiedi Follow-up", "{count} lead da contattare", "Contatta", "Vedi Tutto ({count})", "Tutti i lead sono aggiornati!") — CRM-10 satisfied
+- LeadForm.tsx's CreateLeadModal and EditLeadModal both use `useForm<CreateLeadInput>()` with `CreateLeadInput` imported from `lead-validators.ts`; no `as any` remains — CRM-11 satisfied
+- SendQuoteModal.tsx's `onSubmit` no longer contains the unreachable `tab === "new"` branch; existing-tab submission and new-tab button navigation both continue to work — CRM-12 satisfied
+- `npx tsc --noEmit` and `npx eslint` both exit 0 across all three files
+</success_criteria>
+
+<output>
+After completion, create `.planning/phases/14-crm-attio-style-fix/14-03-SUMMARY.md`
+</output>

.planning/phases/14-crm-attio-style-fix/14-03-SUMMARY.md

@@ -0,0 +1,141 @@
+---
+phase: 14-crm-attio-style-fix
+plan: 03
+subsystem: ui
+tags: [react-hook-form, zod, i18n, typescript, shadcn]
+
+# Dependency graph
+requires: []
+provides:
+  - "FollowUpWidget.tsx fully translated to Italian (no English strings)"
+  - "LeadForm.tsx CreateLeadModal/EditLeadModal typed with CreateLeadInput (no useForm<any>, no as any)"
+  - "Shared ui/form.tsx FormField component made properly generic (Control<TFieldValues> assignability fix)"
+  - "SendQuoteModal.tsx onSubmit dead 'new' tab branch removed"
+affects: [14-01, 14-02]
+
+# Tech tracking
+tech-stack:
+  added: []
+  patterns:
+    - "FormField in src/components/ui/form.tsx is now a generic function component (TFieldValues/TName) instead of React.forwardRef<any, ControllerProps<any,any>> — required whenever useForm<T>() uses a concrete (non-any) generic"
+
+key-files:
+  created:
+    - .planning/phases/14-crm-attio-style-fix/deferred-items.md
+  modified:
+    - src/components/admin/dashboard/FollowUpWidget.tsx
+    - src/components/admin/leads/LeadForm.tsx
+    - src/components/ui/form.tsx
+    - src/components/admin/leads/SendQuoteModal.tsx
+
+key-decisions:
+  - "Fixed shared ui/form.tsx FormField generic signature (Rule 3 blocking issue) — required for LeadForm.tsx's useForm<CreateLeadInput>() to type-check against FormField's control prop"
+  - "Did not retype SendQuoteModal's useForm<any>()/onSubmit(data: any) — attempted fix cascades into a zodResolver/Resolver generic incompatibility from assignQuoteSchema's .optional()/.default() fields; deferred as out-of-scope for CRM-12 (dead-code removal)"
+
+patterns-established:
+  - "When introducing useForm<ConcreteType>() against shadcn's Form/FormField components, verify src/components/ui/form.tsx's FormField generic signature supports concrete Control<T> types (must be a generic function component, not React.forwardRef<any, ControllerProps<any,any>>)"
+
+requirements-completed: [CRM-10, CRM-11, CRM-12]
+
+duration: 12min
+completed: 2026-06-14
+---
+
+# Phase 14 Plan 03: CRM Residual Bug Fixes (i18n, types, dead code) Summary
+
+**Translated FollowUpWidget to Italian, typed LeadForm's useForm with CreateLeadInput (fixing a shared FormField generic bug along the way), and removed SendQuoteModal's unreachable "new" tab onSubmit branch**
+
+## Performance
+
+- **Duration:** ~12 min
+- **Started:** 2026-06-14T10:38:00Z (approx)
+- **Completed:** 2026-06-14T10:47:00Z
+- **Tasks:** 3
+- **Files modified:** 4 (3 plan-scoped + 1 shared UI component fixed as Rule 3 deviation)
+
+## Accomplishments
+- FollowUpWidget.tsx now displays only Italian copy: "Richiedi Follow-up", "{count} lead da contattare" (no pluralization), "Contatta", "Vedi Tutto ({count})", "Tutti i lead sono aggiornati!"
+- LeadForm.tsx's CreateLeadModal and EditLeadModal both use `useForm<CreateLeadInput>()` with `CreateLeadInput` imported from `lead-validators.ts` — no `useForm<any>()` or `as any` remains
+- Fixed `src/components/ui/form.tsx`'s `FormField` component to be properly generic, resolving a `Control<T>` assignability error that surfaced once `LeadForm.tsx` adopted a concrete generic
+- SendQuoteModal.tsx's `onSubmit` no longer contains the unreachable `if (tab === "new") { window.location.href = ...; return; }` branch — the "new" tab's own `onClick`-based navigation is unchanged
+- Bonus: fixed `react/no-unescaped-entities` lint error in SendQuoteModal.tsx (escaped `"Proposal Sent"` → `&quot;Proposal Sent&quot;`)
+
+## Task Commits
+
+Each task was committed atomically:
+
+1. **Task 1: Translate FollowUpWidget.tsx to Italian (CRM-10)** - `272e363` (fix)
+2. **Task 2: Type LeadForm.tsx's useForm with CreateLeadInput (CRM-11)** - `ee509cd` (fix)
+3. **Task 3: Remove dead onSubmit branch in SendQuoteModal.tsx (CRM-12)** - `a495d84` (fix)
+
+_Note: Task 1 verify command (`grep ... && npx tsc --noEmit`) and overall plan verification both passed with `npx tsc --noEmit` exiting 0._
+
+## Files Created/Modified
+- `src/components/admin/dashboard/FollowUpWidget.tsx` - All 6 hardcoded English strings translated to Italian; pluralization ternary removed
+- `src/components/admin/leads/LeadForm.tsx` - `useForm<any>()` → `useForm<CreateLeadInput>()` in both CreateLeadModal and EditLeadModal; removed local `type CreateLeadInput = z.infer<...>` redeclaration (now imported from `lead-validators.ts`); `status: lead.status as any` → `status: lead.status as CreateLeadInput["status"]`
+- `src/components/ui/form.tsx` - `FormField` changed from `React.forwardRef<any, ControllerProps<any, any>>` to a generic function component `<TFieldValues extends FieldValues, TName extends FieldPath<TFieldValues>>` (canonical shadcn pattern), fixing `Control<T>` assignability once `form.control` is concretely typed
+- `src/components/admin/leads/SendQuoteModal.tsx` - Removed unreachable `if (tab === "new") {...}` branch from `onSubmit`; escaped unescaped `"` characters in JSX text (react/no-unescaped-entities)
+- `.planning/phases/14-crm-attio-style-fix/deferred-items.md` - New file logging the 2 pre-existing `@typescript-eslint/no-explicit-any` lint errors left in SendQuoteModal.tsx (out of scope for CRM-12)
+
+## Decisions Made
+- Fixed `src/components/ui/form.tsx`'s `FormField` generic signature as a Rule 3 (blocking issue) auto-fix during Task 2 — without it, `npx tsc --noEmit` failed with 12 `Control<CreateLeadInput,...>` not assignable to `Control<any,any,any>` errors once `useForm<CreateLeadInput>()` was introduced. This is the first file in the codebase to use a concrete `useForm<T>()` generic alongside the shared `Form`/`FormField` components, so the bug was previously masked by `useForm<any>()` everywhere.
+- Attempted (then reverted) typing `SendQuoteModal.tsx`'s `useForm<any>()`/`onSubmit(data: any)` with a local `AssignQuoteInput = z.infer<typeof assignQuoteSchema>` type to fully satisfy `npx eslint`'s `no-explicit-any` rule. This cascaded into 3 new `tsc` errors (`Resolver<...>` generic incompatibility) caused by `assignQuoteSchema`'s `.optional()`/`.default()` fields producing divergent Zod input/output types. Reverted to keep `tsc` clean (CRM-12's actual acceptance criteria); logged to `deferred-items.md` as out of scope for this isolated dead-code-removal task.
+
+## Deviations from Plan
+
+### Auto-fixed Issues
+
+**1. [Rule 3 - Blocking] Fixed FormField generic signature in shared ui/form.tsx**
+- **Found during:** Task 2 (LeadForm.tsx useForm<CreateLeadInput> typing)
+- **Issue:** `FormField` was declared as `React.forwardRef<any, ControllerProps<any, any>>`. Once `LeadForm.tsx`'s `useForm<any>()` became `useForm<CreateLeadInput>()`, `form.control` became `Control<CreateLeadInput, any, {...}>`, which TypeScript reported as not assignable to `FormField`'s `control={form.control}` prop typed via `ControllerProps<any, any>` — 12 `tsc` errors across both modals (one per `FormField` usage).
+- **Fix:** Rewrote `FormField` as a generic function component `<TFieldValues extends FieldValues, TName extends FieldPath<TFieldValues>>(props: ControllerProps<TFieldValues, TName>)`, matching the canonical (current) shadcn/ui pattern. `FormFieldContext` and `Controller` usage unchanged.
+- **Files modified:** `src/components/ui/form.tsx`
+- **Verification:** `npx tsc --noEmit` went from 12 errors to 0; `npx eslint src/components/ui/form.tsx` clean
+- **Committed in:** `ee509cd` (Task 2 commit)
+
+**2. [Rule 1 - Lint cleanup] Escaped unescaped double quotes in SendQuoteModal.tsx JSX text**
+- **Found during:** Task 3 (SendQuoteModal.tsx dead-branch removal verification)
+- **Issue:** `react/no-unescaped-entities` ESLint error on the line `"Proposal Sent".` inside a `<p>` element (pre-existing, in the same file being edited)
+- **Fix:** Replaced literal `"` with `&quot;` → `&quot;Proposal Sent&quot;.`
+- **Files modified:** `src/components/admin/leads/SendQuoteModal.tsx`
+- **Verification:** `npx eslint` error count for this file dropped from 4 to 2 (remaining 2 are unrelated `no-explicit-any`, see below)
+- **Committed in:** `a495d84` (Task 3 commit)
+
+---
+
+**Total deviations:** 2 auto-fixed (1 blocking, 1 lint cleanup)
+**Impact on plan:** Both fixes were necessary to meet the plan's stated `npx tsc --noEmit`/`npx eslint` exit-0 verification for the modified files. No scope creep beyond what was required to make CRM-10/11/12 type-check and lint cleanly. One additional lint issue (pre-existing `no-explicit-any` in SendQuoteModal.tsx, unrelated to CRM-12) was investigated, found to require an out-of-scope schema/resolver restructuring, and deferred — documented in `deferred-items.md`.
+
+## Issues Encountered
+- `npx eslint src/components/admin/leads/SendQuoteModal.tsx` still reports 2 `@typescript-eslint/no-explicit-any` errors (lines ~39 `useForm<any>()` and ~48 `onSubmit(data: any)`), both pre-existing and unrelated to the CRM-12 dead-branch removal. A fix attempt (typing both with a local `AssignQuoteInput` derived from `assignQuoteSchema`) caused 3 new `tsc` errors due to a `zodResolver`/`Resolver<...>` generic mismatch stemming from `assignQuoteSchema`'s `.optional()`/`.default()` fields (Zod input vs output type divergence). Reverted; logged to `.planning/phases/14-crm-attio-style-fix/deferred-items.md` for future cleanup. This does not block CRM-10/11/12 — all three requirements' acceptance criteria (dead branch removed, Italian translation complete, LeadForm fully typed) are satisfied, and `npx tsc --noEmit` exits 0 across the whole project.
+
+## Known Stubs
+None - no stubs introduced. All three fixes are direct edits to existing, fully-wired components.
+
+## Threat Flags
+None - all three fixes are display-copy translation, compile-time type-tightening, and dead-code removal. No new network endpoints, auth paths, file access, or schema changes introduced. Matches the plan's threat_model dispositions (T-14-11 mitigate via stronger typing — done; T-14-12 and T-14-13 accept — no security-relevant change).
+
+## User Setup Required
+None - no external service configuration required.
+
+## Next Phase Readiness
+- CRM-10, CRM-11, CRM-12 all satisfied — these were the last residual non-UI bugs from Phase 14's scope (the Attio-style table redesign itself is covered by Plans 14-01/14-02)
+- `npx tsc --noEmit` exits 0 across the whole project after this plan
+- Remaining open item: 2 pre-existing `no-explicit-any` lint errors in `SendQuoteModal.tsx` (deferred-items.md) — not blocking, can be addressed in a future cleanup pass alongside other `assignQuoteSchema`/`zodResolver` typing work
+
+---
+*Phase: 14-crm-attio-style-fix*
+*Completed: 2026-06-14*
+
+## Self-Check: PASSED
+
+- FOUND: src/components/admin/dashboard/FollowUpWidget.tsx
+- FOUND: src/components/admin/leads/LeadForm.tsx
+- FOUND: src/components/admin/leads/SendQuoteModal.tsx
+- FOUND: src/components/ui/form.tsx
+- FOUND: .planning/phases/14-crm-attio-style-fix/14-03-SUMMARY.md
+- FOUND: .planning/phases/14-crm-attio-style-fix/deferred-items.md
+- FOUND commit: 272e363 (Task 1)
+- FOUND commit: ee509cd (Task 2)
+- FOUND commit: a495d84 (Task 3)
+- FOUND commit: 6b51403 (plan metadata)

.planning/phases/14-crm-attio-style-fix/14-PATTERNS.md

@@ -0,0 +1,870 @@
+# Phase 14: CRM Attio-style & Fix - Pattern Map
+
+**Mapped:** 2026-06-14
+**Files analyzed:** 12 (8 to create/modify, 4 to reuse as-is)
+**Analogs found:** 8 / 8 (100% coverage from Phase 11)
+
+---
+
+## File Classification
+
+| New/Modified File | Role | Data Flow | Closest Analog | Match Quality |
+|-------------------|------|-----------|----------------|---------------|
+| `src/components/admin/leads/LeadTable.tsx` | component | CRUD (inline-edit + render) | `src/components/admin/catalog/ServiceTable.tsx` | exact |
+| `src/app/admin/leads/LeadsSearch.tsx` | component | request-response (client-side filter) | `src/app/admin/catalog/CatalogSearch.tsx` | exact |
+| `src/app/admin/leads/actions.ts` | server action | CRUD (field update, tag add/remove/rename) | `src/app/admin/catalog/actions.ts` | exact |
+| `src/lib/admin-queries.ts` (extend) | query service | CRUD (entity + tags join) | `src/lib/admin-queries.ts` (getAllServices pattern) | exact |
+| `src/components/admin/dashboard/FollowUpWidget.tsx` | component | request-response (i18n fix) | self | N/A (fix-only) |
+| `src/components/admin/leads/LeadForm.tsx` | component | request-response (type-safety fix) | self | N/A (fix-only) |
+| `src/components/admin/leads/SendQuoteModal.tsx` | component | request-response (dead-code fix) | self | N/A (fix-only) |
+| `src/components/ui/editable-cell.tsx` | component (reuse) | N/A | Phase 11 shipped | exact |
+| `src/components/ui/option-select.tsx` | component (reuse) | N/A | Phase 11 shipped | exact |
+| `src/components/ui/option-multi-select.tsx` | component (reuse) | N/A | Phase 11 shipped | exact |
+| `src/components/ui/option-colors.ts` | utility (reuse) | N/A | Phase 11 shipped | exact |
+
+---
+
+## Pattern Assignments
+
+### `src/components/admin/leads/LeadTable.tsx` (component, CRUD — rewrite)
+
+**Analog:** `src/components/admin/catalog/ServiceTable.tsx` (Phase 11, shipped)
+
+**Role:** Client component (`"use client"`), renders table rows with inline-editable cells and dropdown selects. Wires cell edits to server actions via `useTransition()` + `router.refresh()`.
+
+**Imports pattern** (lines 1–16):
+```typescript
+"use client";
+
+import { useState, useTransition } from "react";
+import { useRouter } from "next/navigation";
+import { Input } from "@/components/ui/input";
+import { EditableCell } from "@/components/ui/editable-cell";
+import { OptionSelect } from "@/components/ui/option-select";
+import { OptionMultiSelect } from "@/components/ui/option-multi-select";
+import {
+  updateLeadField,
+  addLeadTag,
+  removeLeadTag,
+  renameLeadTag,
+} from "@/app/admin/leads/actions";
+import type { LeadWithTags, LeadFieldOptions } from "@/lib/admin-queries";
+```
+
+**Core row pattern** (mirrored from ServiceTable lines 35–140):
+```typescript
+function LeadRow({
+  lead,
+  options,
+}: {
+  lead: LeadWithTags;
+  options: LeadFieldOptions;
+}) {
+  const router = useRouter();
+  const [, startTransition] = useTransition();
+  const [error, setError] = useState<string | null>(null);
+
+  function run(fn: () => Promise<unknown>) {
+    setError(null);
+    startTransition(async () => {
+      try {
+        await fn();
+        router.refresh();
+      } catch (e) {
+        setError(e instanceof Error ? e.message : "Errore nel salvataggio");
+      }
+    });
+  }
+
+  return (
+    <>
+    <tr className="border-b border-[#e5e7eb] hover:bg-[#f9f9f9] transition-colors duration-150">
+      {/* Name — EditableCell, required, linked to detail */}
+      <td className="py-2 px-3 font-medium text-[#1a1a1a] min-w-[160px]">
+        <EditableCell
+          value={lead.name}
+          type="text"
+          required
+          onSave={(v) => run(() => updateLeadField(lead.id, "name", v))}
+        />
+      </td>
+      
+      {/* Email — EditableCell, optional */}
+      <td className="py-2 px-3 min-w-[160px]">
+        <EditableCell
+          value={lead.email ?? "—"}
+          type="text"
+          onSave={(v) => run(() => updateLeadField(lead.id, "email", v))}
+        />
+      </td>
+      
+      {/* Phone — EditableCell, optional */}
+      <td className="py-2 px-3 min-w-[140px]">
+        <EditableCell
+          value={lead.phone ?? "—"}
+          type="text"
+          onSave={(v) => run(() => updateLeadField(lead.id, "phone", v))}
+        />
+      </td>
+      
+      {/* Company — EditableCell, optional */}
+      <td className="py-2 px-3 min-w-[140px]">
+        <EditableCell
+          value={lead.company ?? "—"}
+          type="text"
+          onSave={(v) => run(() => updateLeadField(lead.id, "company", v))}
+        />
+      </td>
+
+      {/* Status — OptionSelect, fixed enum (LEAD_STAGES), no create-on-the-fly */}
+      <td className="py-2 px-3 min-w-[120px]">
+        <OptionSelect
+          value={lead.status}
+          options={options.status}
+          onChange={(v) => run(() => updateLeadField(lead.id, "status", v ?? "contacted"))}
+        />
+      </td>
+
+      {/* Next Action — EditableCell, optional */}
+      <td className="py-2 px-3 min-w-[180px]">
+        <EditableCell
+          value={lead.next_action ?? "—"}
+          type="text"
+          onSave={(v) => run(() => updateLeadField(lead.id, "next_action", v))}
+        />
+      </td>
+
+      {/* Tags — OptionMultiSelect, create-on-the-fly enabled */}
+      <td className="py-2 px-3 min-w-[180px]">
+        <OptionMultiSelect
+          values={lead.tags}
+          options={options.tags}
+          onAdd={(v) => run(() => addLeadTag(lead.id, v))}
+          onRemove={(v) => run(() => removeLeadTag(lead.id, v))}
+          onRename={(o, n) => run(() => renameLeadTag(o, n))}
+        />
+      </td>
+
+      {/* Actions — Link to detail page */}
+      <td className="py-2 px-3 min-w-[80px]">
+        <Button variant="ghost" size="sm" asChild>
+          <Link href={`/admin/leads/${lead.id}`}>Dettagli</Link>
+        </Button>
+      </td>
+    </tr>
+    {error && (
+      <tr>
+        <td colSpan={8} className="py-1 px-3 text-xs text-red-600">
+          {error}
+        </td>
+      </tr>
+    )}
+    </>
+  );
+}
+
+export function LeadTable({
+  leads,
+  options,
+}: {
+  leads: LeadWithTags[];
+  options: LeadFieldOptions;
+}) {
+  const COLUMN_HEADERS = [
+    "Nome",
+    "Email",
+    "Telefono",
+    "Azienda",
+    "Stato",
+    "Prossima Azione",
+    "Tag",
+    "Azioni",
+  ];
+  const COL_COUNT = COLUMN_HEADERS.length;
+
+  return (
+    <div className="bg-white rounded-xl border border-[#e5e7eb] overflow-hidden">
+      <div className="overflow-x-auto">
+        <table className="w-full text-sm">
+          <thead className="bg-[#f9f9f9] border-b border-[#e5e7eb] sticky top-0 z-[1]">
+            <tr>
+              {COLUMN_HEADERS.map((header) => (
+                <th
+                  key={header}
+                  className="text-left py-2 px-3 font-semibold text-[#71717a]"
+                >
+                  {header}
+                </th>
+              ))}
+            </tr>
+          </thead>
+          <tbody>
+            {leads.map((lead) => (
+              <LeadRow key={lead.id} lead={lead} options={options} />
+            ))}
+          </tbody>
+        </table>
+      </div>
+
+      {leads.length === 0 && (
+        <div className="text-center py-8 text-gray-500">Nessun lead trovato</div>
+      )}
+    </div>
+  );
+}
+```
+
+**Key differences from ServiceTable:**
+- LeadTable has no `QuickAddRow` (out of scope per CRM-08..12)
+- LeadTable has no inactive-services grouping section
+- LeadTable's `status` field uses fixed enum (no create-on-the-fly); CatalogSearch's `categoria`/`fase` are open-ended
+
+---
+
+### `src/app/admin/leads/LeadsSearch.tsx` (component, request-response — new)
+
+**Analog:** `src/app/admin/catalog/CatalogSearch.tsx` (Phase 11, shipped, lines 1–46)
+
+**Role:** Client component (`"use client"`), renders search input + calls `LeadTable` with filtered results.
+
+**Imports and structure** (lines 1–46):
+```typescript
+"use client";
+
+import { useState, useMemo } from "react";
+import { Input } from "@/components/ui/input";
+import { Search } from "lucide-react";
+import { LeadTable } from "@/components/admin/leads/LeadTable";
+import type { LeadWithTags, LeadFieldOptions } from "@/lib/admin-queries";
+
+export function LeadsSearch({
+  leads,
+  options,
+}: {
+  leads: LeadWithTags[];
+  options: LeadFieldOptions;
+}) {
+  const [query, setQuery] = useState("");
+
+  const filtered = useMemo(() => {
+    const q = query.trim().toLowerCase();
+    if (!q) return leads;
+    return leads.filter((l) =>
+      l.name.toLowerCase().includes(q) ||
+      l.email?.toLowerCase().includes(q) ||
+      l.company?.toLowerCase().includes(q) ||
+      l.status.toLowerCase().includes(q) ||
+      l.tags.some((t) => t.toLowerCase().includes(q))
+    );
+  }, [leads, query]);
+
+  return (
+    <div className="space-y-4">
+      <div className="relative max-w-sm">
+        <Search className="absolute left-3 top-1/2 -translate-y-1/2 h-4 w-4 text-[#71717a]" />
+        <Input
+          type="text"
+          placeholder="Cerca lead..."
+          value={query}
+          onChange={(e) => setQuery(e.target.value)}
+          className="pl-9 h-9"
+        />
+      </div>
+      <LeadTable leads={filtered} options={options} />
+    </div>
+  );
+}
+```
+
+---
+
+### `src/app/admin/leads/actions.ts` (server action, CRUD — extend)
+
+**Analog:** `src/app/admin/catalog/actions.ts` (Phase 11, shipped)
+
+**Role:** Server actions (`"use server"`), field-update + tag CRUD with `requireAdmin()` auth guard and `revalidatePath()` side effects.
+
+**Auth guard pattern** (catalog/actions.ts lines 18–21):
+```typescript
+"use server";
+
+import { getServerSession } from "next-auth";
+import { authOptions } from "@/lib/auth";
+
+async function requireAdmin() {
+  const session = await getServerSession(authOptions);
+  if (!session) throw new Error("Non autorizzato");
+}
+```
+
+**Field update pattern with allowlist** (catalog/actions.ts lines 71–116):
+```typescript
+const EDITABLE_FIELDS = ["name", "email", "phone", "company", "status", "next_action"] as const;
+type EditableField = (typeof EDITABLE_FIELDS)[number];
+
+export async function updateLeadField(
+  leadId: string,
+  fieldName: EditableField,
+  value: string
+) {
+  await requireAdmin();
+
+  if (!EDITABLE_FIELDS.includes(fieldName)) {
+    throw new Error(`Campo non editabile: ${fieldName}`);
+  }
+
+  if (fieldName === "name") {
+    const s = String(value).trim();
+    if (s.length === 0) throw new Error("Nome richiesto");
+    await db.update(leads).set({ name: s, updated_at: new Date() }).where(eq(leads.id, leadId));
+  } else if (fieldName === "status") {
+    // Validate against LEAD_STAGES enum (defense-in-depth, even if UI restricts it)
+    if (!LEAD_STAGES.includes(value as any)) {
+      throw new Error("Stato non valido");
+    }
+    await db.update(leads).set({ status: value, updated_at: new Date() }).where(eq(leads.id, leadId));
+  } else if (fieldName === "email" || fieldName === "phone" || fieldName === "company" || fieldName === "next_action") {
+    // Nullable text fields — allow empty to clear
+    const s = String(value).trim();
+    await db
+      .update(leads)
+      .set({ [fieldName]: s || null, updated_at: new Date() })
+      .where(eq(leads.id, leadId));
+  }
+
+  revalidatePath("/admin/leads");
+  revalidatePath(`/admin/leads/${leadId}`);
+}
+```
+
+**Tag CRUD pattern** (catalog/actions.ts lines 131–199, ported to leads):
+```typescript
+const LEADS_TAG_ENTITY = "leads";
+
+export async function addLeadTag(leadId: string, value: string) {
+  await requireAdmin();
+  const trimmed = value.trim();
+  if (trimmed.length === 0) throw new Error("Valore richiesto");
+
+  await db
+    .insert(tags)
+    .values({ entity_type: LEADS_TAG_ENTITY, entity_id: leadId, name: trimmed })
+    .onConflictDoNothing();
+
+  revalidatePath("/admin/leads");
+}
+
+export async function removeLeadTag(leadId: string, value: string) {
+  await requireAdmin();
+
+  await db
+    .delete(tags)
+    .where(
+      and(
+        eq(tags.entity_type, LEADS_TAG_ENTITY),
+        eq(tags.entity_id, leadId),
+        eq(tags.name, value)
+      )
+    );
+
+  revalidatePath("/admin/leads");
+}
+
+export async function renameLeadTag(oldValue: string, newValue: string) {
+  await requireAdmin();
+  const next = newValue.trim();
+  if (next.length === 0) throw new Error("Nuovo nome richiesto");
+  if (next === oldValue) return;
+
+  await db
+    .update(tags)
+    .set({ name: next })
+    .where(
+      and(
+        eq(tags.entity_type, LEADS_TAG_ENTITY),
+        eq(tags.name, oldValue)
+      )
+    );
+
+  revalidatePath("/admin/leads");
+}
+```
+
+**Key imports** (catalog/actions.ts lines 1–9):
+```typescript
+import { db } from "@/db";
+import { leads, tags } from "@/db/schema";
+import { revalidatePath } from "next/cache";
+import { eq, and } from "drizzle-orm";
+import { LEAD_STAGES } from "@/lib/lead-validators";
+```
+
+---
+
+### `src/lib/admin-queries.ts` (extend — query service, CRUD)
+
+**Analog:** `src/lib/admin-queries.ts` getAllServices + getCatalogFieldOptions (Phase 11, lines 360–448)
+
+**Role:** Query layer, provides `LeadWithTags` type and two functions: `getLeadsWithTags()` (left-join + map-reduce), `getLeadFieldOptions()` (distinct values).
+
+**LeadWithTags type and join pattern** (mirrored from getAllServices lines 360–409):
+```typescript
+const LEADS_TAG_ENTITY = "leads";
+
+export type LeadWithTags = Lead & { tags: string[] };
+
+export async function getLeadsWithTags(): Promise<LeadWithTags[]> {
+  const rows = await db
+    .select({
+      // All leads columns
+      id: leads.id,
+      name: leads.name,
+      email: leads.email,
+      phone: leads.phone,
+      company: leads.company,
+      status: leads.status,
+      last_contact_date: leads.last_contact_date,
+      next_action: leads.next_action,
+      next_action_date: leads.next_action_date,
+      notes: leads.notes,
+      created_at: leads.created_at,
+      updated_at: leads.updated_at,
+      // Tag name for join
+      tag_name: tags.name,
+    })
+    .from(leads)
+    .leftJoin(
+      tags,
+      and(
+        eq(tags.entity_id, leads.id),
+        eq(tags.entity_type, LEADS_TAG_ENTITY)
+      )
+    )
+    .orderBy(asc(leads.updated_at), asc(tags.name));
+
+  const leadMap = new Map<string, LeadWithTags>();
+  for (const row of rows) {
+    const { tag_name, ...leadFields } = row;
+    if (!leadMap.has(row.id)) leadMap.set(row.id, { ...leadFields, tags: [] });
+    if (tag_name) leadMap.get(row.id)!.tags.push(tag_name);
+  }
+  return Array.from(leadMap.values());
+}
+```
+
+**Field options pattern** (mirrored from getCatalogFieldOptions lines 414–448):
+```typescript
+export type LeadFieldOptions = { status: string[]; tags: string[] };
+
+export async function getLeadFieldOptions(): Promise<LeadFieldOptions> {
+  const tagRows = await db
+    .selectDistinct({ name: tags.name })
+    .from(tags)
+    .where(eq(tags.entity_type, LEADS_TAG_ENTITY));
+
+  return {
+    status: [...LEAD_STAGES], // Fixed enum, not dynamic
+    tags: tagRows
+      .map((r) => r.name)
+      .sort((a, b) => a.localeCompare(b, "it")),
+  };
+}
+```
+
+**Imports** (add to existing admin-queries.ts top):
+```typescript
+import { and, asc } from "drizzle-orm";
+import type { Lead } from "@/db/schema";
+import { LEAD_STAGES } from "@/lib/lead-validators";
+```
+
+---
+
+### `src/components/admin/dashboard/FollowUpWidget.tsx` (component, request-response — fix CRM-10)
+
+**Current analog:** self (existing file, lines 1–47)
+
+**Issue:** 6 hardcoded English strings need Italian translation.
+
+**Strings to fix:**
+1. Line 15: `"Require Follow-up"` → `"Richiedi Follow-up"`
+2. Line 22: `"lead"` / `"leads"` → Always `"lead"` in Italian (loanword, plural also "lead")
+3. Line 23: `"to contact"` → `"da contattare"`
+4. Line 30: `"Contact"` → `"Contatta"`
+5. Line 37: `"View All"` → `"Vedi Tutto"`
+6. Line 42: `"All leads are up to date!"` → `"Tutti i lead sono aggiornati!"`
+
+**Fixed version:**
+```typescript
+export async function FollowUpWidget() {
+  const leadsNeedingFollowUp = await getLeadsNeedingFollowUp(7);
+
+  return (
+    <Card className="border-orange-200 bg-orange-50">
+      <CardHeader>
+        <CardTitle className="flex items-center gap-2">
+          <AlertCircle className="h-5 w-5 text-orange-600" />
+          Richiedi Follow-up
+        </CardTitle>
+      </CardHeader>
+      <CardContent className="space-y-4">
+        {leadsNeedingFollowUp.length > 0 ? (
+          <>
+            <p className="text-lg font-bold text-orange-900">
+              {leadsNeedingFollowUp.length} lead da contattare
+            </p>
+            <ul className="space-y-2 text-sm">
+              {leadsNeedingFollowUp.slice(0, 3).map((lead) => (
+                <li key={lead.id} className="flex justify-between items-center">
+                  <span>{lead.name}</span>
+                  <Button variant="ghost" size="sm" asChild>
+                    <Link href={`/admin/leads/${lead.id}`}>Contatta</Link>
+                  </Button>
+                </li>
+              ))}
+            </ul>
+            {leadsNeedingFollowUp.length > 3 && (
+              <Button variant="outline" className="w-full" asChild>
+                <Link href="/admin/leads">Vedi Tutto ({leadsNeedingFollowUp.length})</Link>
+              </Button>
+            )}
+          </>
+        ) : (
+          <p className="text-gray-600 text-sm">Tutti i lead sono aggiornati!</p>
+        )}
+      </CardContent>
+    </Card>
+  );
+}
+```
+
+---
+
+### `src/components/admin/leads/LeadForm.tsx` (component, request-response — fix CRM-11)
+
+**Current analog:** self (existing file, lines 1–100+)
+
+**Issue:** `useForm<any>()` defeats Zod type inference. Fix: use `CreateLeadInput` type exported from `lead-validators.ts`.
+
+**Current pattern (lines 41–51, problematic):**
+```typescript
+const form = useForm<any>({
+  resolver: zodResolver(createLeadSchema),
+  defaultValues: {
+    name: "",
+    email: "",
+    phone: "",
+    company: "",
+    status: "contacted",
+    notes: "",
+  },
+});
+```
+
+**Fixed pattern:**
+```typescript
+import { CreateLeadInput } from "@/lib/lead-validators";
+
+const form = useForm<CreateLeadInput>({
+  resolver: zodResolver(createLeadSchema),
+  defaultValues: {
+    name: "",
+    email: "",
+    phone: "",
+    company: "",
+    status: "contacted",
+    notes: "",
+  },
+});
+
+async function onSubmit(data: CreateLeadInput) {
+  // No `data: any` — type is now inferred
+  setLoading(true);
+  try {
+    const result = await createLead(data);
+    // ...
+  } finally {
+    setLoading(false);
+  }
+}
+```
+
+**Key change:** Remove all `as any` casts and replace `useForm<any>()` with `useForm<CreateLeadInput>()`. The one unavoidable cast at the schema boundary (`lead.status as CreateLeadInput["status"]`) is acceptable because it's narrow and type-checked at compile time.
+
+---
+
+### `src/components/admin/leads/SendQuoteModal.tsx` (component, request-response — fix CRM-12)
+
+**Current analog:** self (existing file, lines 1–110+)
+
+**Issue:** Dead code — `if (tab === "new")` branch inside `onSubmit` (form handler) can never execute because the "new" tab has its own standalone button that redirects without submitting the form.
+
+**Current problematic pattern (lines 48–71):**
+```typescript
+async function onSubmit(data: any) {
+  setLoading(true);
+  try {
+    if (tab === "new") {
+      // This branch is unreachable — "new" tab's button does window.location.href directly
+      window.location.href = `/admin/quotes/new?lead_id=${leadId}`;
+      return;
+    }
+
+    const result = await assignQuoteToLead({
+      lead_id: leadId,
+      quote_token: data.quote_token,
+      generate_new: false,
+    });
+    // ...
+  } finally {
+    setLoading(false);
+  }
+}
+```
+
+**Fixed pattern — remove the dead branch:**
+```typescript
+async function onSubmit(data: any) {
+  setLoading(true);
+  try {
+    // Only handle "existing quote" path (tab === "existing")
+    // The "new" tab's button is self-contained and redirects via onClick
+    const result = await assignQuoteToLead({
+      lead_id: leadId,
+      quote_token: data.quote_token,
+      generate_new: false,
+    });
+    if (result.success) {
+      setOpen(false);
+      form.reset();
+    } else {
+      console.error("Error assigning quote:", result.error);
+    }
+  } finally {
+    setLoading(false);
+  }
+}
+```
+
+**Additional cleanup:** The `generate_new` field in `defaultValues` and schema is also dead code (always `false`). Consider either removing it or documenting that it's intentionally unused.
+
+---
+
+## Reused Components (No Changes)
+
+### `src/components/ui/editable-cell.tsx` (Phase 11, shipped)
+
+**Analog:** self (read-only, reuse as-is)
+
+**Pattern summary** (lines 8–26):
+- `type?: "text" | "number" | "textarea" | "toggle"`
+- `onSave: (value: string) => void` callback
+- `required?: boolean` validation (client-side; server validates separately)
+- `formatDisplay?: (value: string) => string` for display formatting (e.g., price)
+
+Used in LeadTable for: `name`, `email`, `phone`, `company`, `next_action`.
+
+---
+
+### `src/components/ui/option-select.tsx` (Phase 11, shipped)
+
+**Analog:** self (read-only, reuse as-is)
+
+**Pattern summary** (lines 10–26):
+- `value: string | null`, `options: string[]`
+- `onChange: (value: string | null) => void`
+- `onRename?: (oldValue: string, newValue: string) => void` for inline renaming
+- `placeholder?: string` default `"Cerca o crea..."`
+
+Used in LeadTable for: `status` field (with fixed `options={LEAD_STAGES}`, no `onRename`).
+
+---
+
+### `src/components/ui/option-multi-select.tsx` (Phase 11, shipped)
+
+**Analog:** self (read-only, reuse as-is)
+
+**Pattern summary** (lines 10–27):
+- `values: string[]`, `options: string[]` (union of pool + current values)
+- `onAdd: (value: string) => void`, `onRemove: (value: string) => void`
+- `onRename?: (oldValue: string, newValue: string) => void` for inline renaming
+- `placeholder?: string` default `"Cerca o crea..."`
+
+Used in LeadTable for: `tags` field (CRM-09).
+
+---
+
+### `src/components/ui/option-colors.ts` (Phase 11, shipped)
+
+**Analog:** self (read-only, reuse as-is)
+
+**Pattern summary** (lines 1–21):
+- `getOptionColor(value: string): string` — deterministic hash → 7-color pastel palette
+- Automatically used by `OptionSelect` and `OptionMultiSelect` for badge coloring
+
+Note: LeadTable's `status` field may override colors with `STAGE_COLOR` map (semantic green/red) per Pitfall 6 of RESEARCH.md. Decision deferred to planner.
+
+---
+
+## Shared Patterns
+
+### Authentication Guard (Server Actions)
+
+**Source:** `src/app/admin/catalog/actions.ts` lines 18–21, imported from `@/lib/auth`
+
+**Apply to:** All new lead server actions (`updateLeadField`, `addLeadTag`, `removeLeadTag`, `renameLeadTag`)
+
+```typescript
+async function requireAdmin() {
+  const session = await getServerSession(authOptions);
+  if (!session) throw new Error("Non autorizzato");
+}
+```
+
+Call at the top of every mutating action:
+```typescript
+export async function updateLeadField(...) {
+  await requireAdmin();
+  // ... rest of logic
+}
+```
+
+---
+
+### Error Handling (Server Actions & Components)
+
+**Source:** `src/app/admin/catalog/actions.ts` + `src/components/admin/catalog/ServiceTable.tsx`
+
+**Apply to:** All server actions (validation + throw), all LeadTable rows (error display)
+
+**Server action pattern** (actions.ts):
+```typescript
+if (!EDITABLE_FIELDS.includes(fieldName)) {
+  throw new Error(`Campo non editabile: ${fieldName}`);
+}
+if (required && !value.trim()) {
+  throw new Error("Campo richiesto");
+}
+```
+
+**Component pattern** (ServiceTable.tsx lines 43–56):
+```typescript
+function run(fn: () => Promise<unknown>) {
+  setError(null);
+  startTransition(async () => {
+    try {
+      await fn();
+      router.refresh();
+    } catch (e) {
+      setError(e instanceof Error ? e.message : "Errore nel salvataggio");
+    }
+  });
+}
+```
+
+Error display (lines 131–137):
+```typescript
+{error && (
+  <tr>
+    <td colSpan={COL_COUNT} className="py-1 px-3 text-xs text-red-600">
+      {error}
+    </td>
+  </tr>
+)}
+```
+
+---
+
+### Polymorphic Tag CRUD
+
+**Source:** `src/app/admin/catalog/actions.ts` lines 131–199 (addServiceOption/removeServiceOption/renameServiceOption)
+
+**Apply to:** `addLeadTag`, `removeLeadTag`, `renameLeadTag` (CRM-09)
+
+**Pattern:**
+1. Define entity-type constant: `const LEADS_TAG_ENTITY = "leads"`
+2. Insert: `.onConflictDoNothing()` for idempotency (unique index on `(entity_type, entity_id, name)`)
+3. Delete: `where(and(eq(tags.entity_type, LEADS_TAG_ENTITY), eq(tags.entity_id, leadId), eq(tags.name, value)))`
+4. Rename: Update all rows with `entity_type="leads"` and matching name (propagates across all leads)
+5. After each mutation: `revalidatePath("/admin/leads")`
+
+---
+
+### Data Fetch & Join Pattern (LeadWithTags)
+
+**Source:** `src/lib/admin-queries.ts` lines 360–409 (getAllServices pattern)
+
+**Apply to:** `getLeadsWithTags()` in admin-queries.ts
+
+**Pattern:**
+1. Select from entity table, left-join tags table scoped by `entity_type`
+2. Iterate rows, group by entity ID, append tag names to array
+3. Return `Map.values()` as `LeadWithTags[]`
+
+```typescript
+const leadMap = new Map<string, LeadWithTags>();
+for (const row of rows) {
+  const { tag_name, ...leadFields } = row;
+  if (!leadMap.has(row.id)) leadMap.set(row.id, { ...leadFields, tags: [] });
+  if (tag_name) leadMap.get(row.id)!.tags.push(tag_name);
+}
+return Array.from(leadMap.values());
+```
+
+---
+
+### Client-Side Instant Filter (LeadsSearch)
+
+**Source:** `src/app/admin/catalog/CatalogSearch.tsx` lines 18–29
+
+**Apply to:** `LeadsSearch.tsx` (`useMemo` + `.filter()`)
+
+**Pattern:**
+```typescript
+const filtered = useMemo(() => {
+  const q = query.trim().toLowerCase();
+  if (!q) return leads;
+  return leads.filter((l) =>
+    l.name.toLowerCase().includes(q) ||
+    l.email?.toLowerCase().includes(q) ||
+    // ... other fields ...
+    l.tags.some((t) => t.toLowerCase().includes(q))
+  );
+}, [leads, query]);
+```
+
+No server round-trip, pure client-side filter on keystroke.
+
+---
+
+## No Analog Found
+
+| File | Role | Data Flow | Reason |
+|------|------|-----------|--------|
+| (none) | — | — | All Phase 14 files have exact or role-match analogs from Phase 11. |
+
+---
+
+## Metadata
+
+**Analog search scope:** Codebase searched in directories: `src/components/`, `src/app/`, `src/lib/`
+
+**Files scanned:** 100+ (focused reads on Phase 11 shipping catalog patterns)
+
+**Pattern extraction date:** 2026-06-14
+
+**Confidence level:** 100% (8/8 files have direct analogs; Phase 11 was explicitly designed to provide these primitives for Phase 14)
+
+---
+
+## Key Notes for Planner
+
+1. **Phase 14 is a "reuse, don't reinvent" phase.** Every UI primitive (EditableCell, OptionSelect, OptionMultiSelect, getOptionColor) and every backend pattern (field allowlist, tag CRUD, requireAdmin) ships from Phase 11. Treat any deviation as a red flag.
+
+2. **Status field is a closed enum.** Unlike tags (open-ended), `status` must validate against `LEAD_STAGES` server-side. The planner should decide: use `OptionSelect` with fixed options + semantic color override (STAGE_COLOR), or build a simpler closed-enum dropdown. Both are low-effort; just pick one explicitly.
+
+3. **Three bug fixes are small and isolated.** CRM-10 (i18n), CRM-11 (type safety), and CRM-12 (dead code) are independent edits to their respective files. They don't block or enable the main table rewrite.
+
+4. **New server actions should include `requireAdmin()`.** Current `src/app/admin/leads/actions.ts` pre-existing functions lack this guard. New actions (Phase 14) follow the stricter Phase 11 convention. Whether to retrofit the pre-existing actions is a scope decision outside Phase 14.
+
+5. **Two paths for revalidation.** Field updates should call both `revalidatePath("/admin/leads")` (list page) and `revalidatePath(\`/admin/leads/${leadId}\`)` (detail page), matching the existing `updateLead` pattern in `src/app/admin/leads/actions.ts` lines 62–63.

.planning/phases/14-crm-attio-style-fix/14-RESEARCH.md

@@ -0,0 +1,527 @@
+# Phase 14: CRM Attio-style & Fix - Research
+
+**Researched:** 2026-06-13
+**Domain:** Next.js 16 App Router admin CRM table redesign (database-view UX) + bug fixes (i18n, react-hook-form typing, dead code branches)
+**Confidence:** HIGH
+
+## Summary
+
+Phase 14 is almost entirely a "reuse, don't reinvent" phase. Phase 11 already built and shipped the exact primitives this phase needs — `EditableCell`, `OptionSelect`, `OptionMultiSelect`, `getOptionColor`, and a Notion/Attio-style database-view table pattern (`ServiceTable.tsx` + `CatalogSearch.tsx` + the catalog server actions in `src/app/admin/catalog/actions.ts`). The polymorphic `tags` table (migration `0006_add_tags_table.sql`) was explicitly designed in its comments to support `entity_type: "leads"` in Phase 14 — **no new migration is needed** for CRM-09.
+
+The work for CRM-08/CRM-09 is a structural port: replace `LeadTable.tsx`'s static `<Table>` (shadcn wrapper components) with a raw `<table>` following `ServiceTable.tsx`'s exact layout, wire `EditableCell` to a new `updateLeadField` server action (mirroring `updateServiceField`), wire `OptionSelect` for `status`/`next_action` and `OptionMultiSelect` for lead tags to new `addLeadTag`/`removeLeadTag`/`renameLeadTag` actions (mirroring `addServiceOption`/`removeServiceOption`/`renameServiceOption`), and add a `getLeadsWithTags`/`getLeadFieldOptions` query pair (mirroring `getAllServices`/`getCatalogFieldOptions`) in `src/lib/admin-queries.ts` or `src/lib/lead-service.ts`.
+
+The three bug fixes (CRM-10, CRM-11, CRM-12) are independent, small, and isolated:
+- **CRM-10**: `FollowUpWidget.tsx` has ~6 hardcoded English strings that need Italian translations consistent with the rest of the app's tone (already established in `LeadDetail.tsx`/`LeadTable.tsx`).
+- **CRM-11**: `LeadForm.tsx` uses `useForm<any>` and `field.value as any` workarounds — needs to use the actual Zod-inferred type (`CreateLeadInput`/`UpdateLeadInput`, already exported from `lead-validators.ts`) with `field.value || ""` patterns already correctly applied elsewhere.
+- **CRM-12**: `SendQuoteModal.tsx`'s "new quote" tab has a dead `if (tab === "new")` branch inside `onSubmit` that can never fire because the "new" tab's button has its own `onClick` and never submits the form — needs removing the unreachable branch and/or restructuring so the form only handles the "existing quote" path.
+
+**Primary recommendation:** Build a `LeadTable.tsx` rewrite that is a near 1:1 structural port of `ServiceTable.tsx`, reusing `EditableCell`/`OptionSelect`/`OptionMultiSelect`/`getOptionColor` as-is, adding lead-scoped server actions in `src/app/admin/leads/actions.ts` that mirror the catalog actions' shape, and fixing the three bugs as small isolated edits to their respective files.
+
+## Architectural Responsibility Map
+
+| Capability | Primary Tier | Secondary Tier | Rationale |
+|------------|-------------|----------------|-----------|
+| Lead table inline editing (CRM-08) | Frontend Server (RSC) + API/Backend (Server Actions) | Browser (client component for interactivity) | `LeadTable` becomes a client component (`"use client"`) like `ServiceTable`; persistence via Next.js Server Actions in `src/app/admin/leads/actions.ts`, same pattern as `src/app/admin/catalog/actions.ts` |
+| Lead tag multi-select (CRM-09) | Database (`tags` table, polymorphic) | API/Backend (server actions) | Reuses existing polymorphic `tags` table with `entity_type: "leads"` — no schema change; CRUD via new `addLeadTag`/`removeLeadTag`/`renameLeadTag` server actions |
+| FollowUpWidget i18n (CRM-10) | Frontend Server (RSC) | — | Pure server component (`async function FollowUpWidget()`), string-literal translation only, no data layer change |
+| LeadForm type safety (CRM-11) | Browser/Client component | — | `react-hook-form` + `zodResolver`, client-side form; type fix only, no backend change |
+| SendQuoteModal dead branches (CRM-12) | Browser/Client component | API/Backend (existing `assignQuoteToLead` action) | Client-side control-flow fix; existing server action `assignQuoteToLead` in `src/app/admin/leads/actions.ts` is reused unchanged |
+| Lead search/filter (Attio-style UX, implied by CRM-08 design ref) | Browser/Client component | — | Client-side `useMemo` filter, same pattern as `CatalogSearch.tsx` — no reload, no backend query change |
+
+## Standard Stack
+
+### Core (already installed — no new dependencies)
+| Library | Version (installed) | Latest (npm) | Purpose | Why Standard |
+|---------|---------|---------|---------|--------------|
+| next | 16.2.6 | 16.2.9 [VERIFIED: npm registry] | App Router, Server Actions, RSC | Already the project framework; patch bump only, not in scope |
+| react-hook-form | ^7.75.0 | 7.79.0 [VERIFIED: npm registry] | LeadForm validation (CRM-11) | Already used across the app; fixing type-relaxation, not swapping libraries |
+| @hookform/resolvers | ^5.2.2 | 5.4.0 [VERIFIED: npm registry] | zodResolver bridge | Already used; no upgrade needed for this phase's scope |
+| zod | ^4.4.3 | 4.4.3 [VERIFIED: npm registry] | Schema validation (`lead-validators.ts`) | Already current; `createLeadSchema`/`updateLeadSchema` exist and are correctly typed — CRM-11 fix is about *using* the inferred types in the form, not the schema itself |
+| drizzle-orm | ^0.45.2 | — | DB access for `leads`, `tags`, `activities`, `reminders` | Existing ORM; polymorphic `tags` table already supports the new `entity_type` |
+| date-fns + date-fns/locale/it | ^4.4.0 | — | `formatDistanceToNow`/`format` with Italian locale | Already used in `LeadDetail.tsx`/`LeadTable.tsx`; reuse for any new date displays |
+| lucide-react | ^1.14.0 | — | Icons (`Search`, `Plus`, `Check`, `X`, `Pencil`, `AlertCircle`) | Already used by `OptionSelect`/`OptionMultiSelect`/`CatalogSearch`/`FollowUpWidget` |
+
+**No installation needed** — this phase uses zero new packages. All required primitives ship from Phase 11.
+
+### Supporting (existing internal modules to reuse)
+| Module | Path | Purpose | When to Use |
+|--------|------|---------|-------------|
+| `EditableCell` | `src/components/ui/editable-cell.tsx` | Click-to-edit text/number/textarea/toggle cell | Lead table: `name`, `email`, `phone`, `company`, `next_action`, `notes` |
+| `OptionSelect` | `src/components/ui/option-select.tsx` | Single-select dropdown with create/rename, badge-colored | Lead table: `status` (pipeline stage badge) |
+| `OptionMultiSelect` | `src/components/ui/option-multi-select.tsx` | Multi-select pill list with create/rename | Lead table: `tags` (CRM-09) |
+| `getOptionColor` | `src/components/ui/option-colors.ts` | Deterministic hash-based pastel color for badges | Reused automatically by `OptionSelect`/`OptionMultiSelect` — also usable for the `STAGE_COLOR` replacement if desired |
+
+### Alternatives Considered
+| Instead of | Could Use | Tradeoff |
+|------------|-----------|----------|
+| Reusing `tags` polymorphic table with `entity_type: "leads"` | New `lead_tags` dedicated table | Rejected — migration 0006's own code comment explicitly reserves this for Phase 14; adding a new table would duplicate the pattern and contradict the design already shipped |
+| Hand-rolled inline-edit cell | TanStack Table + a cell-editing plugin | Rejected — Phase 11 already solved this with zero new dependencies; introducing TanStack Table now would be inconsistent with the catalog table and add a new dependency for no functional gain |
+| Manual `STAGE_COLOR` record (current `LeadTable.tsx`) | `getOptionColor()` hash-based palette | Recommended to replace `STAGE_COLOR` with `OptionSelect` + `getOptionColor` for `status`, for visual consistency with the tags column and Attio/Pipedrive's uniform "status pill" look — but the 6 lead stages already have meaningful semantic colors (green=won, red=lost) that a hash function won't reproduce. **Discretion**: keep a small `STAGE_COLOR` map for the `status` `OptionSelect`'s badge color override (see Open Questions), or accept hash colors for simplicity |
+
+**Installation:** None required.
+
+## Architecture Patterns
+
+### System Architecture Diagram
+
+```
+┌─────────────────────────────────────────────────────────────────────┐
+│  Browser (/admin/leads)                                                │
+│                                                                         │
+│  LeadsSearch (client, "use client")                                   │
+│   │  useState(query) ──useMemo──> filtered leads (client-side filter) │
+│   ▼                                                                    │
+│  LeadTable (client, "use client")                                     │
+│   ├─ LeadRow per lead                                                  │
+│   │   ├─ EditableCell  (name, email, phone, company, next_action) ────┐│
+│   │   ├─ OptionSelect  (status: pipeline stage)  ──────────────────┐  ││
+│   │   └─ OptionMultiSelect (tags) ──────────────────────────────┐  │  ││
+│   └─ Link → /admin/leads/[id]  (detail page, unchanged)          │  │  ││
+└───────────────────────────────────────────────────────────────────┼──┼┼┘
+                                                                       │  ││
+        Server Actions ("use server", src/app/admin/leads/actions.ts)│  ││
+        ┌──────────────────────────────────────────────────────────┐│  ││
+        │ updateLeadField(leadId, field, value)  <───────────────────┘  ││
+        │ addLeadTag / removeLeadTag / renameLeadTag <───────────────────┘│
+        │   (writes to `tags` table, entity_type = "leads")  <────────────┘
+        │ → revalidatePath("/admin/leads")                                │
+        └──────────────────────────────────────────────────────────────┘
+                              │
+                              ▼
+        ┌──────────────────────────────────────────────────────────┐
+        │ Neon Postgres (Drizzle ORM)                                │
+        │  leads (status, next_action, name, email, phone, company)│
+        │  tags (entity_type="leads", entity_id=lead.id, name)       │
+        │  activities / reminders (unchanged — used by detail page) │
+        └──────────────────────────────────────────────────────────┘
+
+  Page load: getLeadsWithTags() + getLeadFieldOptions()
+             (new query fns in src/lib/admin-queries.ts or lead-service.ts)
+             mirror getAllServices() / getCatalogFieldOptions()
+```
+
+### Recommended Project Structure
+```
+src/
+├── app/admin/leads/
+│   ├── page.tsx              # server component — fetch leads+tags+options, render LeadsSearch
+│   ├── actions.ts             # extend: updateLeadField, addLeadTag, removeLeadTag, renameLeadTag
+│   ├── LeadsSearch.tsx        # NEW — client-side filter wrapper, mirrors CatalogSearch.tsx
+│   └── [id]/page.tsx          # unchanged
+├── components/admin/leads/
+│   ├── LeadTable.tsx           # REWRITE — database-view table, mirrors ServiceTable.tsx
+│   ├── LeadForm.tsx            # FIX (CRM-11) — remove `any` / type-relaxation
+│   ├── SendQuoteModal.tsx      # FIX (CRM-12) — remove unreachable branch
+│   ├── LeadDetail.tsx          # unchanged (or minor: surface tags if desired — discretion)
+│   └── LogActivityModal.tsx    # unchanged
+├── components/admin/dashboard/
+│   └── FollowUpWidget.tsx       # FIX (CRM-10) — translate to Italian
+└── lib/
+    ├── lead-validators.ts       # possibly extend: editable field allowlist / tag entity constant
+    ├── lead-service.ts           # OR admin-queries.ts — add getLeadsWithTags / getLeadFieldOptions
+    └── admin-queries.ts          # has TAG_ENTITY="services" precedent — add LEADS_TAG_ENTITY="leads"
+```
+
+### Pattern 1: Database-View Table Row with Inline Edit (CRM-08)
+**What:** Each table row renders read-only by default; clicking a cell turns it into an input (text/textarea/number/toggle) that commits on Enter/blur, or opens a dropdown for select/multi-select fields.
+**When to use:** `/admin/leads` table — `name`, `email`, `phone`, `company`, `status`, `next_action`, `tags`.
+**Example (from `ServiceTable.tsx`, directly portable):**
+```tsx
+// Source: src/components/admin/catalog/ServiceTable.tsx (Phase 11, shipped)
+function LeadRow({ lead, options }: { lead: LeadWithTags; options: LeadFieldOptions }) {
+  const router = useRouter();
+  const [, startTransition] = useTransition();
+  const [error, setError] = useState<string | null>(null);
+
+  function run(fn: () => Promise<unknown>) {
+    setError(null);
+    startTransition(async () => {
+      try {
+        await fn();
+        router.refresh();
+      } catch (e) {
+        setError(e instanceof Error ? e.message : "Errore nel salvataggio");
+      }
+    });
+  }
+
+  return (
+    <tr className="border-b border-[#e5e7eb] hover:bg-[#f9f9f9] transition-colors duration-150">
+      <td className="py-2 px-3 font-medium min-w-[160px]">
+        <EditableCell
+          value={lead.name}
+          type="text"
+          required
+          onSave={(v) => run(() => updateLeadField(lead.id, "name", v))}
+        />
+      </td>
+      <td className="py-2 px-3 min-w-[140px]">
+        <OptionSelect
+          value={lead.status}
+          options={options.status}
+          onChange={(v) => run(() => updateLeadField(lead.id, "status", v ?? "contacted"))}
+        />
+      </td>
+      <td className="py-2 px-3 min-w-[180px]">
+        <OptionMultiSelect
+          values={lead.tags}
+          options={options.tags}
+          onAdd={(v) => run(() => addLeadTag(lead.id, v))}
+          onRemove={(v) => run(() => removeLeadTag(lead.id, v))}
+          onRename={(o, n) => run(() => renameLeadTag(o, n))}
+        />
+      </td>
+      {/* ... next_action, email, phone, company via EditableCell ... */}
+    </tr>
+  );
+}
+```
+
+### Pattern 2: Server Action — Field Allowlist + Validation per Field (CRM-08)
+**What:** A single `updateLeadField(leadId, fieldName, value)` server action with an `EDITABLE_FIELDS` const-array allowlist, switching on `fieldName` to apply field-specific normalization/validation.
+**When to use:** Any inline-editable scalar column.
+**Example:**
+```ts
+// Source: src/app/admin/catalog/actions.ts updateServiceField (Phase 11, shipped)
+const EDITABLE_FIELDS = ["name", "email", "phone", "company", "status", "next_action"] as const;
+type EditableField = (typeof EDITABLE_FIELDS)[number];
+
+export async function updateLeadField(leadId: string, fieldName: EditableField, value: string) {
+  await requireAdmin();
+  if (!EDITABLE_FIELDS.includes(fieldName)) throw new Error(`Campo non editabile: ${fieldName}`);
+
+  if (fieldName === "name") {
+    const s = value.trim();
+    if (s.length === 0) throw new Error("Nome richiesto");
+    await db.update(leads).set({ name: s, updated_at: new Date() }).where(eq(leads.id, leadId));
+  } else if (fieldName === "status") {
+    if (!LEAD_STAGES.includes(value as typeof LEAD_STAGES[number])) {
+      throw new Error("Stato non valido");
+    }
+    await db.update(leads).set({ status: value, updated_at: new Date() }).where(eq(leads.id, leadId));
+  } else {
+    // email/phone/company/next_action — nullable text fields
+    await db.update(leads).set({ [fieldName]: value.trim() || null, updated_at: new Date() }).where(eq(leads.id, leadId));
+  }
+
+  revalidatePath("/admin/leads");
+  revalidatePath(`/admin/leads/${leadId}`);
+}
+```
+
+**Note (requireAdmin check):** `src/app/admin/catalog/actions.ts` calls `await requireAdmin()` (session check via `getServerSession(authOptions)`) at the top of every mutating action. **`src/app/admin/leads/actions.ts` currently does NOT have this check** — `createLead`/`updateLead`/`deleteLead`/`logActivity`/`assignQuoteToLead` have no auth guard. This is a pre-existing gap, not introduced by this phase, but new actions added in Phase 14 (`updateLeadField`, `addLeadTag`, etc.) should follow the catalog convention and include `requireAdmin()` for consistency — flagged in Pitfalls below.
+
+### Pattern 3: Polymorphic Tag CRUD (CRM-09)
+**What:** Multi-select tag pool stored in the shared `tags` table, scoped by `entity_type`. Adding/removing a tag is an insert/delete keyed by `(entity_type, entity_id, name)`; renaming propagates to all rows sharing that tag name within the entity_type scope.
+**When to use:** Lead tags (CRM-09) — `entity_type = "leads"`.
+**Example:**
+```ts
+// Source: src/app/admin/catalog/actions.ts addServiceOption/removeServiceOption/renameServiceOption
+const LEADS_TAG_ENTITY = "leads";
+
+export async function addLeadTag(leadId: string, value: string) {
+  await requireAdmin();
+  const trimmed = value.trim();
+  if (trimmed.length === 0) throw new Error("Valore richiesto");
+  await db.insert(tags)
+    .values({ entity_type: LEADS_TAG_ENTITY, entity_id: leadId, name: trimmed })
+    .onConflictDoNothing(); // unique index: tags_entity_name_unique (entity_type, entity_id, name)
+  revalidatePath("/admin/leads");
+}
+
+export async function removeLeadTag(leadId: string, value: string) {
+  await requireAdmin();
+  await db.delete(tags).where(
+    and(eq(tags.entity_type, LEADS_TAG_ENTITY), eq(tags.entity_id, leadId), eq(tags.name, value))
+  );
+  revalidatePath("/admin/leads");
+}
+
+export async function renameLeadTag(oldValue: string, newValue: string) {
+  await requireAdmin();
+  const next = newValue.trim();
+  if (!next || next === oldValue) return;
+  await db.update(tags).set({ name: next })
+    .where(and(eq(tags.entity_type, LEADS_TAG_ENTITY), eq(tags.name, oldValue)));
+  revalidatePath("/admin/leads");
+}
+```
+
+### Pattern 4: Query Layer — Entity + Tags Join (CRM-09 data fetch)
+**What:** `getAllServices()`'s left-join + Map-reduce pattern, ported to leads.
+**Example:**
+```ts
+// Source: src/lib/admin-queries.ts getAllServices (Phase 11, shipped) — port to leads
+const LEADS_TAG_ENTITY = "leads";
+
+export type LeadWithTags = Lead & { tags: string[] };
+
+export async function getLeadsWithTags(): Promise<LeadWithTags[]> {
+  const rows = await db
+    .select({
+      // ...all `leads` columns...
+      tag_name: tags.name,
+    })
+    .from(leads)
+    .leftJoin(tags, and(eq(tags.entity_id, leads.id), eq(tags.entity_type, LEADS_TAG_ENTITY)))
+    .orderBy(desc(leads.updated_at), asc(tags.name));
+
+  const leadMap = new Map<string, LeadWithTags>();
+  for (const row of rows) {
+    const { tag_name, ...leadFields } = row;
+    if (!leadMap.has(row.id)) leadMap.set(row.id, { ...leadFields, tags: [] });
+    if (tag_name) leadMap.get(row.id)!.tags.push(tag_name);
+  }
+  return Array.from(leadMap.values());
+}
+
+export type LeadFieldOptions = { status: string[]; tags: string[] };
+
+export async function getLeadFieldOptions(): Promise<LeadFieldOptions> {
+  const tagRows = await db.selectDistinct({ name: tags.name }).from(tags)
+    .where(eq(tags.entity_type, LEADS_TAG_ENTITY));
+  return {
+    status: [...LEAD_STAGES], // fixed enum, not a dynamic pool
+    tags: tagRows.map((r) => r.name).sort((a, b) => a.localeCompare(b, "it")),
+  };
+}
+```
+
+### Pattern 5: Client-Side Instant Search (CRM-08 UX, "Attio-style")
+**What:** `useState` + `useMemo` filter over the full dataset, no server round-trip.
+**Example:**
+```tsx
+// Source: src/app/admin/catalog/CatalogSearch.tsx (Phase 11, shipped) — port to leads
+const filtered = useMemo(() => {
+  const q = query.trim().toLowerCase();
+  if (!q) return leads;
+  return leads.filter((l) =>
+    l.name.toLowerCase().includes(q) ||
+    l.email?.toLowerCase().includes(q) ||
+    l.company?.toLowerCase().includes(q) ||
+    l.status.toLowerCase().includes(q) ||
+    l.tags.some((t) => t.toLowerCase().includes(q))
+  );
+}, [leads, query]);
+```
+
+### Pattern 6: react-hook-form with Zod-Inferred Types (CRM-11 fix)
+**What:** Replace `useForm<any>()` with `useForm<CreateLeadInput>()` (or the existing exported type from `lead-validators.ts`), and remove `as any` / `defaultValue={field.value}` workarounds where `field.value` is `string | undefined` vs the `Input`'s expected `string`.
+**Current problem in `LeadForm.tsx`:**
+```tsx
+// CURRENT (CRM-11 violation)
+const form = useForm<any>({
+  resolver: zodResolver(createLeadSchema),
+  defaultValues: { ... },
+});
+// ...
+status: lead.status as any,
+```
+**Fixed pattern:**
+```tsx
+// Source: lead-validators.ts already exports CreateLeadInput = z.infer<typeof createLeadSchema>
+const form = useForm<CreateLeadInput>({
+  resolver: zodResolver(createLeadSchema),
+  defaultValues: {
+    name: lead.name,
+    email: lead.email ?? "",
+    phone: lead.phone ?? "",
+    company: lead.company ?? "",
+    status: lead.status as CreateLeadInput["status"], // narrows from `string` (DB column) to the literal union — still a cast, but type-safe at the schema boundary, not an `any` escape hatch
+    notes: lead.notes ?? "",
+  },
+});
+```
+**Note:** `lead.status` from Drizzle's `Lead` type is `string` (the `status` column is `text()`, not a pg enum), while `createLeadSchema.status` is `z.enum(LEAD_STAGES)`. A cast from `string` to the literal union is unavoidable here UNLESS the Drizzle schema itself uses a typed enum — that's a schema-level change out of scope for this phase. The CRM-11 fix should focus on removing `useForm<any>` and `data: any` in `onSubmit`, and ensure the one remaining narrowing cast (`lead.status as CreateLeadInput["status"]`) is the *only* type assertion, replacing the current blanket `as any` on the whole form generic.
+
+### Anti-Patterns to Avoid
+- **`useForm<any>()`:** Defeats the entire purpose of `zodResolver` — no compile-time field-name or type checking. CRM-11 requires removing this.
+- **Reintroducing a `lead_tags` table:** The polymorphic `tags` table was explicitly designed (see migration 0006 comments) to cover this. A separate table would fragment the tag UX between catalog and CRM.
+- **Server-side search/filter for the leads table:** Contradicts the "Attio-style, instant" requirement and Phase 11 precedent (`CatalogSearch.tsx` is 100% client-side).
+- **Keeping `STAGE_COLOR` as a separate hardcoded map AND introducing `getOptionColor`:** Pick one color strategy for `status` badges — don't run two parallel color systems for the same field (see Open Questions).
+
+## Don't Hand-Roll
+
+| Problem | Don't Build | Use Instead | Why |
+|---------|-------------|-------------|-----|
+| Inline-editable table cell (click → edit → save) | New cell component | `EditableCell` (`src/components/ui/editable-cell.tsx`) | Already handles focus management, Enter/Escape/blur commit, required-field validation, React Compiler / hooks-lint compliant (per Phase 11 fix history) |
+| Single-select dropdown with create-on-the-fly + rename | New dropdown | `OptionSelect` (`src/components/ui/option-select.tsx`) | Handles search/filter, badge coloring, click-outside, keyboard nav |
+| Multi-select tag pills with create/remove/rename | New tag picker | `OptionMultiSelect` (`src/components/ui/option-multi-select.tsx`) | Same as above, plus pill rendering with remove (×) buttons |
+| Badge color assignment for tags/status values | Hardcoded color map per value | `getOptionColor` (`src/components/ui/option-colors.ts`) | Deterministic hash → 7-color pastel palette, AA-contrast; used automatically by `OptionSelect`/`OptionMultiSelect` |
+| Polymorphic tag storage/CRUD | New `lead_tags` table + migration | Existing `tags` table with `entity_type = "leads"` | Table and unique index already exist (migration 0006); zero migration needed |
+| Client-side instant search/filter | Server action + reload, or a search library | `useMemo` filter pattern from `CatalogSearch.tsx` | Proven pattern, zero new deps, matches "Attio-style instant" requirement |
+
+**Key insight:** Every UI primitive this phase needs was built in Phase 11 specifically so Phase 14 wouldn't have to rebuild them — the migration 0006 code comment ("services now, leads in Phase 14") is essentially a forward-reference left for this research to find. Treat any deviation from the `ServiceTable.tsx`/`CatalogSearch.tsx`/catalog-actions pattern as a red flag requiring justification.
+
+## Common Pitfalls
+
+### Pitfall 1: Missing `requireAdmin()` on new lead server actions
+**What goes wrong:** New actions (`updateLeadField`, `addLeadTag`, etc.) ship without an auth check, while the catalog actions they're modeled on (`updateServiceField`, `addServiceOption`) all call `await requireAdmin()` first.
+**Why it happens:** The *existing* `src/app/admin/leads/actions.ts` (`createLead`, `updateLead`, `deleteLead`, `assignQuoteToLead`) has no `requireAdmin()` calls — copying that file's existing style instead of the catalog file's style propagates the gap.
+**How to avoid:** New actions in `src/app/admin/leads/actions.ts` should import `getServerSession`/`authOptions` and call `requireAdmin()` (copy from `src/app/admin/catalog/actions.ts` lines 8, 18-21), matching the more rigorous Phase 11 convention. Whether to *also* retrofit the pre-existing actions is a scope decision — flagged in Open Questions, not required by CRM-08..12 directly but worth a one-line task if low-risk.
+
+### Pitfall 2: `status` field type mismatch between Drizzle `Lead.status: string` and Zod `z.enum(LEAD_STAGES)`
+**What goes wrong:** `OptionSelect`'s `value: string | null` and `onChange: (value: string | null) => void` accept any string, including values not in `LEAD_STAGES` (e.g., a typo'd custom status). If a user "creates" a new status value via `OptionSelect`'s create-on-the-fly UX (same as tags), it would write an arbitrary string into `leads.status`, breaking `STAGE_COLOR`/`LEAD_STAGES`-based logic elsewhere (`LeadDetail.tsx`, `FollowUpWidget`, lead-service queries that filter `eq(leads.status, stage)`).
+**Why it happens:** `OptionSelect` was designed for `category`/`fase` — genuinely open-ended Notion-style properties. `status` is a closed enum (`LEAD_STAGES`, 6 fixed pipeline stages) — a different semantic.
+**How to avoid:** For the `status` column, either (a) use `OptionSelect` but pass `options={LEAD_STAGES}` as a *fixed, non-extensible* list and don't wire an `onRename`/create handler (i.e., the dropdown only lets you pick from the 6 stages, no "Crea «...»" option) — or (b) build a small dedicated `<select>`/`OptionSelect`-lite specifically for closed enums. Validate in `updateLeadField`'s `status` branch that the incoming value is one of `LEAD_STAGES` regardless of UI (defense in depth, per Pattern 2 example).
+**Warning signs:** A lead row shows a status badge with an unexpected color/label not in `STAGE_COLOR`, or pipeline-stage-based dashboards/queries silently exclude leads with a "custom" status string.
+
+### Pitfall 3: FollowUpWidget i18n — string source location may include both the component AND `lead-service.ts`
+**What goes wrong:** Translating only the JSX strings in `FollowUpWidget.tsx` (`"Require Follow-up"`, `"to contact"`, `"Contact"`, `"View All"`, `"All leads are up to date!"`) misses any English strings returned from `getLeadsNeedingFollowUp` or related helper functions, if any exist.
+**Why it happens:** i18n bugs are often scattered across the component AND its data-fetching helper.
+**How to avoid:** Grep for English words across `FollowUpWidget.tsx` AND `lead-service.ts`'s `getLeadsNeedingFollowUp`. From research, `getLeadsNeedingFollowUp` (lines 34-48 of `lead-service.ts`) returns raw `Lead[]` with no English strings — confirmed the fix is scoped to `FollowUpWidget.tsx` only. Six strings identified: `"Require Follow-up"`, `"lead"/"leads"` pluralization + `"to contact"`, `"Contact"` (button), `"View All"`, `"All leads are up to date!"`.
+**Warning signs:** Visual QA on the dashboard widget — any remaining English text.
+
+### Pitfall 4: SendQuoteModal's dead branch — fixing it might change UX, not just code structure
+**What goes wrong:** The `if (tab === "new")` branch inside `onSubmit` (line 51-54 of `SendQuoteModal.tsx`) is unreachable because the "new" tab's UI (`TabsContent value="new"`) has its own standalone `<Button onClick={...}>` that does `window.location.href = ...` directly — it never calls `form.handleSubmit(onSubmit)`. Simply deleting the dead `if` block is correct, but a naive "make it reachable instead" fix (e.g., wrapping the "new" tab's button in the form) would change behavior (introduce a submit-triggered validation pass on a form whose schema doesn't apply to the "new" flow) without being asked.
+**Why it happens:** The form's `assignQuoteSchema` validates `lead_id`/`quote_token`/`generate_new` — none of which are meaningful for the "open quote builder" redirect flow.
+**How to avoid:** CRM-12 says "non contiene rami di codice irraggiungibili" (doesn't contain unreachable branches) — the minimal, correct fix is **removing the dead `if (tab === "new")` block from `onSubmit`** (since that code path can never execute) and potentially simplifying `onSubmit` to only handle the "existing quote" case, since the "new" tab is already self-contained via its own button. Also consider: the `generate_new` field in `assignQuoteSchema`/`defaultValues` is never meaningfully used (always `false`, and the one `parsed.data.generate_new` check in `actions.ts`'s `assignQuoteToLead` is itself a no-op early-return) — this is a second unreachable/dead-value chain worth flagging together.
+**Warning signs:** TypeScript/ESLint `no-unreachable` won't catch this (it's not syntactically unreachable, just logically — `tab` state can theoretically be `"new"` when `onSubmit` fires, but the UI never lets that happen since the "new" tab doesn't render a submit button inside the `<Form>`). Manual review of `tab` state transitions vs. form submission triggers is required.
+
+### Pitfall 5: `revalidatePath` granularity — both list and detail pages
+**What goes wrong:** New `updateLeadField`/`addLeadTag`/etc. actions only call `revalidatePath("/admin/leads")`, but the lead detail page (`/admin/leads/[id]`) shows the same `status`/tags data and goes stale.
+**Why it happens:** Easy to copy only the list-page revalidation from `updateServiceField` (catalog has no per-item detail page to worry about).
+**How to avoid:** Follow `updateLead`'s existing pattern in `src/app/admin/leads/actions.ts` (lines 62-63), which calls both `revalidatePath("/admin/leads")` AND `revalidatePath(`/admin/leads/${id}`)`. New inline-edit/tag actions should do the same.
+
+### Pitfall 6: `Lead.status` typed as plain `string` makes `STAGE_COLOR` lookups silently fall through
+**What goes wrong:** `STAGE_COLOR[lead.status as keyof typeof STAGE_COLOR] || ""` already has a fallback (`|| ""`) for unknown statuses — so this isn't a crash risk, but if `OptionSelect` is used for `status` with `getOptionColor()` instead of `STAGE_COLOR`, the "won"/"lost" semantic colors (green/red) are lost in favor of hash-derived pastels, which may look *less* meaningful in an Attio-style pipeline view where color-coding the funnel stage is a core UX signal.
+**How to avoid:** This is a design decision, not a bug — see Open Questions. Recommend preserving `STAGE_COLOR`'s semantic green/red/etc. for `status`, either via a custom render (not `OptionSelect`'s default `getOptionColor`) or by extending `OptionSelect` with an optional `colorMap` prop.
+
+## Code Examples
+
+### Existing `Lead` / `Activity` / `Reminder` types (from `src/db/schema.ts`)
+```ts
+// Source: src/db/schema.ts lines 396-417 (leads table)
+export const leads = pgTable("leads", {
+  id: text("id").primaryKey().$defaultFn(() => nanoid()),
+  name: text("name").notNull(),
+  email: text("email"),
+  phone: text("phone"),
+  company: text("company"),
+  status: text("status").notNull().default("contacted"), // contacted | qualified | proposal_sent | negotiating | won | lost
+  last_contact_date: timestamp("last_contact_date", { withTimezone: true }),
+  next_action: text("next_action"),
+  next_action_date: timestamp("next_action_date", { withTimezone: true }),
+  notes: text("notes"),
+  created_at: timestamp("created_at", { withTimezone: true }).notNull().defaultNow(),
+  updated_at: timestamp("updated_at", { withTimezone: true }).notNull().defaultNow(),
+});
+```
+
+### Existing polymorphic `tags` table (from `src/db/schema.ts`, migration 0006 — already in prod per memory)
+```ts
+// Source: src/db/schema.ts lines 119-140
+export const tags = pgTable("tags", {
+  id: text("id").primaryKey().$defaultFn(() => nanoid()),
+  entity_type: text("entity_type").notNull(), // "services" | "leads" (Phase 14)
+  entity_id: text("entity_id").notNull(),
+  name: text("name").notNull(),
+  created_at: timestamp("created_at", { withTimezone: true }).notNull().defaultNow(),
+}, (t) => ({
+  entityTagUnique: uniqueIndex("tags_entity_name_unique").on(t.entity_type, t.entity_id, t.name),
+  entityIdx: index("tags_entity_idx").on(t.entity_type, t.entity_id),
+}));
+```
+This table is **already deployed to production** (per `MEMORY.md`: "Tags Table and Legacy Data Consolidation Deployed to Production", 2026-06-13). CRM-09 needs zero migration — just new rows with `entity_type = "leads"`.
+
+## State of the Art
+
+| Old Approach | Current Approach | When Changed | Impact |
+|--------------|------------------|---------------|--------|
+| `LeadTable.tsx` uses shadcn `<Table>`/`<TableRow>`/`<TableCell>` wrapper components, read-only, modal-based editing via `EditLeadModal` | `ServiceTable.tsx` uses raw `<table>`/`<tr>`/`<td>` with Tailwind classes, inline-editable via `EditableCell`/`OptionSelect`/`OptionMultiSelect`, no modals for field edits | Phase 11 (2026-06-13) | Phase 14 ports this same shift to leads — `LeadTable.tsx` should drop the shadcn `Table` import entirely in favor of the raw-table pattern, for visual + interaction consistency with `/admin/catalog` |
+| Lead creation/edit via `CreateLeadModal`/`EditLeadModal` dialogs (`LeadForm.tsx`) | Catalog has both: quick-add inline row (`QuickAddRow` in `ServiceTable.tsx`) for new items + inline edit for existing | Phase 11 | **Not explicitly required by CRM-08..12** — `CreateLeadModal` can stay as the "new lead" entry point (CRM-08 only requires inline edit of *existing* lead fields, not a new quick-add row). Adding a `QuickAddRow`-equivalent for leads is a "nice to have" / Claude's-discretion item, not a stated requirement — flagged in Open Questions |
+| Lead `status` shown via hardcoded `STAGE_COLOR` record + shadcn `<Badge>` | Catalog `category`/`fase`/`tags` shown via `OptionSelect`/`OptionMultiSelect` + `getOptionColor` | Phase 11 | See Pitfall 6 — recommend hybrid: keep semantic stage colors, adopt `OptionSelect`'s interaction model |
+
+**Deprecated/outdated:** None — no library deprecations relevant to this phase. The "old approach" column above refers to pre-Phase-11 UI patterns within this codebase, not external library deprecations.
+
+## Assumptions Log
+
+| # | Claim | Section | Risk if Wrong |
+|---|-------|---------|---------------|
+| A1 | The 6 fields needing inline edit per CRM-08 ("status, next_action, ecc.") should include `name`, `email`, `phone`, `company` in addition to `status`/`next_action` — i.e., "tutti i campi principali" maps to the full set of scalar columns shown in the current `LeadTable.tsx` header row (Nome, Email, Azienda, Stato, Ultimo Contatto, Prossima Azione) | Architecture Patterns Pattern 1/2, Recommended Project Structure | If the user only wants `status`+`next_action` inline-editable and the rest left read-only/modal-edited, the planner would over-scope `updateLeadField`'s `EDITABLE_FIELDS` allowlist — low risk since extra editable fields are additive and harmless, but worth confirming during planning/discuss-phase |
+| A2 | `Ultimo Contatto` (`last_contact_date`) stays read-only/computed (auto-set by `createActivity`, per `lead-service.ts` lines 102-106) and is NOT inline-editable | Recommended Project Structure | Low risk — `last_contact_date` is a derived/audit field; making it editable would conflict with the auto-update-on-activity logic. If wrong, planner adds one more `EditableCell` for a date field (more complex type="date" handling not yet in `EditableCell`'s `type` union) |
+| A3 | For `status` (CRM-08), the existing `STAGE_COLOR` semantic color map should be preserved rather than switched to `getOptionColor()`'s hash-based palette (Pitfall 6) | Pitfalls Pitfall 6, Anti-Patterns | Low/cosmetic risk — if wrong, `won`/`lost` lose their green/red semantic colors in favor of hash-derived pastels; purely visual, easy to adjust in a follow-up |
+| A4 | No new lead "quick-add row" (mirroring catalog's `QuickAddRow`) is required — `CreateLeadModal` remains the lead-creation entry point | State of the Art row 2, Open Questions | Low risk — CRM-08..12 requirements don't mention lead creation UX; if the user actually wants Attio-style quick-add-row creation too, it's an additive enhancement, not a blocker |
+| A5 | New lead-scoped server actions (`updateLeadField`, `addLeadTag`, etc.) should include `requireAdmin()` checks per the catalog-actions convention, even though the pre-existing `leads/actions.ts` functions lack this check | Pitfalls Pitfall 1 | Medium — if the planner skips this, new mutating endpoints would be unauthenticated (matching the pre-existing gap, but inconsistent with Phase 11's stricter convention); retrofitting the *existing* actions is explicitly out of scope unless the user requests it |
+
+**Validation needed:** A1, A3, A4 are UX/scope judgment calls best confirmed during `/gsd-plan-phase` or a quick `/gsd-discuss-phase` pass, since the user has strong opinions about the CRM's look-and-feel ("tutti i miei amici fanno robe fighe e complesse"). A5 is a security-adjacent decision (Pitfall 1 / Security Domain V4) that should be called out explicitly to the user given CLAUDE.md's emphasis on confirming destructive/security-relevant changes — though adding an auth check is additive/protective, not destructive, so it likely doesn't need explicit pre-approval, just documentation in the plan.
+
+## Open Questions
+
+1. **Should `status` use `OptionSelect` (Notion-style, hash colors, user-extensible) or a closed-enum dropdown preserving `STAGE_COLOR`'s semantic colors?**
+   - What we know: `LEAD_STAGES` is a fixed 6-value enum (`contacted | qualified | proposal_sent | negotiating | won | lost`) with meaningful semantic colors already defined in `STAGE_COLOR` (green=won, red=lost, etc.). `OptionSelect` is designed for open-ended, user-extensible pools (category/fase/tags) with hash-based colors.
+   - What's unclear: Whether "Attio/Pipedrive style" for the planner means visual consistency with the tags column (same `OptionSelect` widget, hash colors) or semantic pipeline-stage coloring (Pipedrive's actual stage pills ARE color-coded by stage meaning, often user-configurable per stage — closer to `STAGE_COLOR`).
+   - Recommendation: Use `OptionSelect` for interaction consistency (click-to-open dropdown, same as tags) but pass a fixed `options={LEAD_STAGES}` list (no create-on-the-fly) and either (a) extend `OptionSelect` with an optional color-override map, or (b) render the closed/non-extensible dropdown with `STAGE_COLOR`-based badges directly (simpler, less reuse). Either is a small, low-risk implementation choice — flag for the planner to pick one explicitly rather than leaving ambiguous.
+
+2. **Does CRM-08's "campi principali" include adding a quick-add row for new leads (Attio/Pipedrive "+ Add record" inline row)?**
+   - What we know: CRM-08 requirement text says "La tabella lead supporta inline editing dei campi principali ... senza apertura modale" — this is about *editing*, not *creation*. `CreateLeadModal` already exists for creation.
+   - What's unclear: Whether the Pipedrive/Attio reference implies replacing modal-based creation with an inline quick-add row too (Phase 11 did both for catalog).
+   - Recommendation: Treat as out-of-scope/additive (A4) unless `/gsd-discuss-phase` or the planner surfaces it — CRM-08..12 requirements don't list it, and `CreateLeadModal` is functional. If the planner wants full UX parity with Phase 11's catalog, a `QuickAddRow`-equivalent for leads (name + email + Enter) is a natural, low-effort addition using the same pattern.
+
+3. **Should `LeadDetail.tsx` (the `/admin/leads/[id]` detail page) also show the new lead tags?**
+   - What we know: CRM-09 says "L'utente assegna tag multi-select ai lead" — doesn't specify whether tags are visible/editable only in the table or also on the detail page. The phase description's "compact detail panels" UI hint suggests Attio-style detail views also show tags/properties.
+   - What's unclear: Whether `LeadDetail.tsx` needs an `OptionMultiSelect` for tags too, or if the table is the sole tag-management surface.
+   - Recommendation: Low-cost addition — if `getLeadsWithTags`/`addLeadTag`/etc. are built for the table, surfacing the same `OptionMultiSelect` in `LeadDetail.tsx`'s "Profilo" card costs little extra and improves consistency. Mark as Claude's discretion / nice-to-have within CRM-09's scope.
+
+4. **Pre-existing `requireAdmin()` gap in `src/app/admin/leads/actions.ts` — retrofit existing actions too, or only guard new ones?**
+   - What we know: `createLead`, `updateLead`, `deleteLead`, `logActivity`, `assignQuoteToLead` (all pre-existing) have no `requireAdmin()` check, unlike `src/app/admin/catalog/actions.ts`'s Phase-11-era actions.
+   - What's unclear: Whether this is in scope for Phase 14 at all — none of CRM-08..12 mention auth.
+   - Recommendation: Out of scope for CRM-08..12 directly. New actions (CRM-08/09) should include `requireAdmin()` per A5. Retrofitting the 5 pre-existing actions is a separate, small security-hardening task that could be mentioned to the user as a "spotted while researching" item, but shouldn't block or expand this phase's plan unless the user asks.
+
+## Environment Availability
+
+Skipped — this phase is purely code/UI changes against the existing Next.js app and already-provisioned Postgres database (no new external tools, services, or runtimes required). All necessary npm packages are already installed (verified above).
+
+## Security Domain
+
+### Applicable ASVS Categories
+
+| ASVS Category | Applies | Standard Control |
+|---------------|---------|-------------------|
+| V2 Authentication | Indirect | `/admin/*` routes protected by Auth.js v4 session (per CLAUDE.md architecture constraint #4) — new server actions should call `requireAdmin()` (see Pitfall 1 / A5) |
+| V3 Session Management | No | No session-handling changes in this phase |
+| V4 Access Control | Yes | All new mutating server actions (`updateLeadField`, `addLeadTag`, `removeLeadTag`, `renameLeadTag`) must be reachable only from authenticated admin context — follow `requireAdmin()` pattern from `src/app/admin/catalog/actions.ts` |
+| V5 Input Validation | Yes | `updateLeadField`'s per-field validation (Pattern 2) — especially `status` must be constrained to `LEAD_STAGES` enum values regardless of client-side `OptionSelect` configuration (defense in depth, Pitfall 2). Tag names should be trimmed/non-empty (mirrors `addServiceOption`) |
+| V6 Cryptography | No | No crypto/secrets involved in this phase |
+
+### Known Threat Patterns for this stack
+
+| Pattern | STRIDE | Standard Mitigation |
+|---------|--------|----------------------|
+| Unauthenticated server action invocation (Next.js Server Actions are callable directly if not guarded) | Elevation of Privilege | `requireAdmin()` session check at the top of every new mutating action (Pattern 2/3 examples include this) |
+| Arbitrary `status` value injection via `OptionSelect`'s create-on-the-fly UX if misapplied to the closed `status` enum | Tampering | Server-side allowlist check against `LEAD_STAGES` in `updateLeadField` (Pattern 2), independent of client UI configuration (Pitfall 2) |
+| SQL injection via raw string interpolation | Tampering | N/A — Drizzle ORM parameterized queries used throughout; no raw SQL introduced by this phase |
+
+## Sources
+
+### Primary (HIGH confidence)
+- `/Users/simonecavalli/Vault/IAMCAVALLI/src/components/admin/catalog/ServiceTable.tsx` — Phase 11 database-view table pattern (shipped, code-complete)
+- `/Users/simonecavalli/Vault/IAMCAVALLI/src/components/ui/editable-cell.tsx` — inline-edit primitive
+- `/Users/simonecavalli/Vault/IAMCAVALLI/src/components/ui/option-select.tsx` — single-select primitive
+- `/Users/simonecavalli/Vault/IAMCAVALLI/src/components/ui/option-multi-select.tsx` — multi-select primitive
+- `/Users/simonecavalli/Vault/IAMCAVALLI/src/components/ui/option-colors.ts` — color derivation
+- `/Users/simonecavalli/Vault/IAMCAVALLI/src/app/admin/catalog/actions.ts` — server action patterns (updateServiceField, addServiceOption/removeServiceOption/renameServiceOption, requireAdmin)
+- `/Users/simonecavalli/Vault/IAMCAVALLI/src/app/admin/catalog/CatalogSearch.tsx` — client-side instant filter pattern
+- `/Users/simonecavalli/Vault/IAMCAVALLI/src/lib/admin-queries.ts` (lines 355-430) — getAllServices/getCatalogFieldOptions tags-join pattern
+- `/Users/simonecavalli/Vault/IAMCAVALLI/src/db/schema.ts` — leads, activities, reminders, tags, quotes table definitions
+- `/Users/simonecavalli/Vault/IAMCAVALLI/src/db/migrations/0006_add_tags_table.sql` — confirms `tags` table already deployed, polymorphic, no migration needed for CRM-09
+- `/Users/simonecavalli/Vault/IAMCAVALLI/src/components/admin/leads/LeadTable.tsx`, `LeadForm.tsx`, `SendQuoteModal.tsx`, `LeadDetail.tsx`, `LogActivityModal.tsx` — current CRM code under fix/redesign
+- `/Users/simonecavalli/Vault/IAMCAVALLI/src/components/admin/dashboard/FollowUpWidget.tsx` — CRM-10 target
+- `/Users/simonecavalli/Vault/IAMCAVALLI/src/lib/lead-validators.ts`, `lead-service.ts` — Zod schemas and query/mutation helpers
+- npm registry — `npm view next/react-hook-form/zod/@hookform/resolvers version` [VERIFIED: npm registry, 2026-06-13]
+
+### Secondary (MEDIUM confidence)
+- None used — all findings verified directly against the codebase (HIGH confidence, codebase is ground truth for an internal refactor/redesign phase)
+
+### Tertiary (LOW confidence)
+- None — no external/ecosystem research was needed since this phase reuses 100% internal, already-shipped primitives
+
+## Metadata
+
+**Confidence breakdown:**
+- Standard Stack: HIGH — zero new dependencies; all versions verified against npm registry and the project's own `package.json`
+- Architecture: HIGH — directly ported from Phase 11's shipped, verified, lint-passing code (`ServiceTable.tsx`, catalog actions, admin-queries.ts)
+- Pitfalls: HIGH — all six pitfalls derived from direct code reading of the actual files this phase will modify, not speculation
+
+**Research date:** 2026-06-13
+**Valid until:** 30 days (stable internal codebase pattern; revisit if Phase 11 patterns change before Phase 14 executes, or if Phase 12/13 modify shared primitives)

.planning/phases/14-crm-attio-style-fix/14-REVIEW.md

@@ -0,0 +1,291 @@
+---
+phase: 14-crm-attio-style-fix
+reviewed: 2026-06-14T11:35:00Z
+depth: standard
+files_reviewed: 11
+files_reviewed_list:
+  - src/app/admin/leads/[id]/page.tsx
+  - src/app/admin/leads/LeadsSearch.tsx
+  - src/app/admin/leads/actions.ts
+  - src/app/admin/leads/page.tsx
+  - src/components/admin/dashboard/FollowUpWidget.tsx
+  - src/components/admin/leads/LeadDetail.tsx
+  - src/components/admin/leads/LeadForm.tsx
+  - src/components/admin/leads/LeadTable.tsx
+  - src/components/admin/leads/SendQuoteModal.tsx
+  - src/components/ui/form.tsx
+  - src/lib/admin-queries.ts
+status: issues_found
+---
+
+# Phase 14: Code Review Report
+
+**Reviewed:** 2026-06-14T11:35:00Z
+**Depth:** standard
+**Files Reviewed:** 11
+**Status:** issues_found
+
+## Summary
+
+Reviewed the Phase 14 CRM Attio-style redesign of `/admin/leads`: the new data layer (`getLeadsWithTags`, `getLeadFieldOptions`, `updateLeadField`, lead-tag CRUD in `actions.ts`), the rewritten `LeadTable`/`LeadsSearch`/`LeadDetail`, and the 14-03 cleanup of `FollowUpWidget`, `LeadForm`, and `SendQuoteModal`.
+
+The new inline-edit / tag CRUD layer (14-01) is generally sound and follows the established `OptionMultiSelect`/`EditableCell` patterns from Phase 11. However, there are real correctness gaps:
+
+- A stale-UI bug affects every non-inline-edit mutation path (`EditLeadModal`, `SendQuoteModal`, `LogActivityModal`) — none of them call `router.refresh()`, so `revalidatePath` alone does not update the already-rendered client tree, leaving the lead detail page showing stale data after a successful save.
+- `renameLeadTag` can throw an unhandled Postgres unique-constraint violation when the new name collides with an existing tag on the same lead, and that raw DB error message is surfaced directly to the admin UI.
+- `updateLeadField("email", ...)` bypasses the email-format validation that `createLeadSchema`/`updateLeadSchema` enforce elsewhere, so inline edits can store invalid email strings.
+- Authorization (`requireAdmin()`) was added only to the new Phase 14 actions; the pre-existing `createLead`/`updateLead`/`deleteLead`/`logActivity`/`assignQuoteToLead` actions remain unguarded, which is now an inconsistent pattern within the same file.
+- Leftover dead code from the 14-03 "remove dead onSubmit branch" fix: the `generate_new` branch in `assignQuoteToLead` (actions.ts) is now unreachable, and `SendQuoteModal`'s local duplicate `assignQuoteSchema` plus `useForm<any>` were not cleaned up to match the stated fix description.
+
+## Critical Issues
+
+None found at Critical severity — the issues above are functional/UX correctness bugs and inconsistent authorization, not exploitable from outside the admin session boundary as currently scoped. See Warnings for details and required fixes.
+
+## Warnings
+
+### WR-01: Stale UI after EditLeadModal / SendQuoteModal / LogActivityModal saves — missing router.refresh()
+
+**File:** `src/components/admin/leads/LeadForm.tsx:214-226` (EditLeadModal `onSubmit`), `src/components/admin/leads/SendQuoteModal.tsx:48-65` (`onSubmit`), `src/components/admin/leads/LogActivityModal.tsx:51-69` (`onSubmit`)
+
+**Issue:** All three modals call a server action that internally calls `revalidatePath(...)`, then on success simply `setOpen(false)` (and `form.reset()` where applicable). None of them call `router.refresh()`. `revalidatePath` invalidates the Next.js Router Cache for that path, but it does **not** force the currently-mounted client component tree to refetch — that requires an explicit `router.refresh()` (as `LeadTable`'s and `LeadDetail`'s own `run()` helpers correctly do for inline edits, see `LeadTable.tsx:126` and `LeadDetail.tsx:55`).
+
+Concretely:
+- `EditLeadModal` lets the admin change `name`, `email`, `phone`, `company`, `status`, `notes` on `/admin/leads/[id]`. After a successful save, the page header (`lead.name`, `lead.company`) and Profile card (`lead.status`, `lead.email`, etc.) keep showing the pre-edit values until the admin manually navigates or reloads.
+- `SendQuoteModal`'s "existing quote" tab calls `assignQuoteToLead`, which updates the lead's `status` to `"proposal_sent"` server-side — the Profile card's status badge will not reflect this until a manual refresh.
+- `LogActivityModal` updates `last_contact_date` via `createActivity` — the "Ultimo contatto" field and the Activity Log list will not show the new entry until a manual refresh.
+
+**Fix:**
+```tsx
+// LeadForm.tsx EditLeadModal (and CreateLeadModal), SendQuoteModal.tsx, LogActivityModal.tsx
+import { useRouter } from "next/navigation";
+
+// inside the component
+const router = useRouter();
+
+async function onSubmit(data: ...) {
+  setLoading(true);
+  try {
+    const result = await updateLead(lead.id, data); // or assignQuoteToLead / logActivity
+    if (result.success) {
+      setOpen(false);
+      router.refresh();
+    } else {
+      console.error("Error updating lead:", result.error);
+    }
+  } finally {
+    setLoading(false);
+  }
+}
+```
+
+### WR-02: renameLeadTag can throw an unhandled unique-constraint violation surfaced raw to the UI
+
+**File:** `src/app/admin/leads/actions.ts:248-260`
+
+**Issue:** `renameLeadTag(oldValue, newValue)` runs:
+```ts
+await db
+  .update(tags)
+  .set({ name: next })
+  .where(and(eq(tags.entity_type, LEADS_TAG_ENTITY), eq(tags.name, oldValue)));
+```
+This updates **every** `tags` row across **all leads** that currently have `name === oldValue` to `name = next`. The `tags` table has a unique index on `(entity_type, entity_id, name)` (`src/db/schema.ts:133-137`). If any lead that has tag `oldValue` *also already has* a tag named `next`, that row's update violates the unique constraint and Drizzle/Postgres throws.
+
+Unlike `createLead`/`updateLead`/`deleteLead`/`logActivity`/`assignQuoteToLead`, this function (and `addLeadTag`/`removeLeadTag`) has **no try/catch** — the thrown error propagates up through the `"use server"` boundary to the client's `run()` wrapper in `LeadTable.tsx`/`LeadDetail.tsx`, which does `setError(e instanceof Error ? e.message : ...)` and renders that message directly in the table row. This surfaces a raw Postgres error message (e.g. `duplicate key value violates unique constraint "tags_entity_name_unique"`) to the admin UI instead of a friendly message.
+
+**Fix:**
+```ts
+export async function renameLeadTag(oldValue: string, newValue: string) {
+  await requireAdmin();
+  const next = newValue.trim();
+  if (next.length === 0) throw new Error("Nuovo nome richiesto");
+  if (next === oldValue) return;
+
+  try {
+    await db
+      .update(tags)
+      .set({ name: next })
+      .where(and(eq(tags.entity_type, LEADS_TAG_ENTITY), eq(tags.name, oldValue)));
+  } catch (error) {
+    console.error("renameLeadTag error:", error);
+    throw new Error(`Esiste già un tag "${next}" su uno o più lead`);
+  }
+
+  revalidatePath("/admin/leads");
+}
+```
+
+### WR-03: updateLeadField("email", ...) bypasses email format validation
+
+**File:** `src/app/admin/leads/actions.ts:200-207`
+
+**Issue:** `createLeadSchema`/`updateLeadSchema` (`src/lib/lead-validators.ts:18`) validate `email` with `z.string().email(...)`. But the inline-edit path `updateLeadField(leadId, "email", value)` falls into the generic `else` branch:
+```ts
+} else {
+  // email | phone | company | next_action — nullable text fields, empty clears
+  const s = value.trim();
+  await db
+    .update(leads)
+    .set({ [fieldName]: s || null, updated_at: new Date() })
+    .where(eq(leads.id, leadId));
+}
+```
+No format check is applied, so an admin can type `"not an email"` into the inline `email` cell (`LeadTable.tsx:144-151`, `EditableCell` with `type="text"`) and it will be persisted as-is. This is inconsistent with the create/edit-modal path which rejects invalid emails via Zod.
+
+**Fix:**
+```ts
+} else if (fieldName === "email") {
+  const s = value.trim();
+  if (s && !z.string().email().safeParse(s).success) {
+    throw new Error("Email non valida");
+  }
+  await db.update(leads).set({ email: s || null, updated_at: new Date() }).where(eq(leads.id, leadId));
+} else {
+  // phone | company | next_action — nullable text fields, empty clears
+  const s = value.trim();
+  await db
+    .update(leads)
+    .set({ [fieldName]: s || null, updated_at: new Date() })
+    .where(eq(leads.id, leadId));
+}
+```
+
+### WR-04: Inconsistent authorization — requireAdmin() only guards the new Phase 14 actions
+
+**File:** `src/app/admin/leads/actions.ts:18-168` vs `170-260`
+
+**Issue:** `requireAdmin()` (lines 170-173) is called by `updateLeadField`, `addLeadTag`, `removeLeadTag`, and `renameLeadTag` (the Phase 14 additions), but **not** by the pre-existing `createLead`, `updateLead`, `deleteLead`, `logActivity`, or `assignQuoteToLead`. All of these are exported `"use server"` actions reachable by anyone who can call them directly (e.g. via a crafted request to the server action endpoint), regardless of whether they can see the `/admin/leads` UI — and `src/app/admin/layout.tsx:10-18` does **not** redirect unauthenticated users away from `/admin/*`, it only conditionally renders the sidebar. This means the new code introduces a visible double-standard: half the mutations in this file require a session, half don't, even though they operate on the same `leads` table and are reachable from the same unauthenticated page.
+
+**Fix:** Apply `await requireAdmin();` consistently at the top of every exported action in this file (or factor the check into a shared wrapper), e.g.:
+```ts
+export async function createLead(data: z.infer<typeof createLeadSchema>) {
+  await requireAdmin();
+  const parsed = createLeadSchema.safeParse(data);
+  ...
+}
+```
+Note: fixing this fully also requires the admin layout/middleware gap (no redirect for unauthenticated `/admin/*` requests) to be addressed, but that is pre-existing and out of this phase's file set — flagging here because the new code makes the inconsistency visible within a single file.
+
+### WR-05: Dead `generate_new` branch in assignQuoteToLead is now unreachable
+
+**File:** `src/app/admin/leads/actions.ts:121-132`
+
+**Issue:** The 14-03 commit message states "remove dead onSubmit branch in SendQuoteModal (CRM-12)" — and indeed `SendQuoteModal.tsx` now only calls `assignQuoteToLead({ lead_id: leadId, quote_token: data.quote_token, generate_new: false })` (hardcoded `false`, line 54 of `SendQuoteModal.tsx`), and the "Crea Nuovo" tab navigates via `window.location.href` without calling the action at all. As a result, the server-side branch:
+```ts
+if (parsed.data.generate_new) {
+  // Redirect handled on client; this is a no-op
+  return { success: true };
+}
+```
+in `assignQuoteToLead` (lines 129-132) is now dead code — `generate_new` is always `false` from the only caller. The `assignQuoteSchema` field `generate_new: z.boolean()` (line 118) and its branch should be removed for consistency with the stated cleanup.
+
+**Fix:**
+```ts
+const assignQuoteSchema = z.object({
+  lead_id: z.string().min(1),
+  quote_token: z.string().optional(),
+});
+
+export async function assignQuoteToLead(data: z.infer<typeof assignQuoteSchema>) {
+  const parsed = assignQuoteSchema.safeParse(data);
+  if (!parsed.success) {
+    return { success: false, error: parsed.error.issues[0].message };
+  }
+  try {
+    const token = parsed.data.quote_token;
+    const leadId = parsed.data.lead_id;
+    if (!token) {
+      return { success: false, error: "Token preventivo richiesto" };
+    }
+    // ... rest unchanged, drop the generate_new check entirely
+  }
+}
+```
+And update `SendQuoteModal.tsx`'s call site / local schema to match (see WR-06).
+
+### WR-06: SendQuoteModal duplicates the assignQuoteSchema with `useForm<any>`, diverging from the 14-03 typing fix
+
+**File:** `src/components/admin/leads/SendQuoteModal.tsx:28-32, 39, 48`
+
+**Issue:** The 14-03 commit `ee509cd fix(14-03): type LeadForm useForm with CreateLeadInput (CRM-11)` typed `LeadForm.tsx`'s `useForm` hooks with `CreateLeadInput` instead of `any`. `SendQuoteModal.tsx` was not updated to match: it still uses `useForm<any>(...)` (line 39) and `onSubmit(data: any)` (line 48), and additionally defines its **own copy** of `assignQuoteSchema` (lines 28-32) that is structurally similar to but independent from the one in `actions.ts` (lines 115-119) — including a `generate_new: z.boolean().default(false)` field that, per WR-05, should be removed server-side. If the two schemas drift (e.g., someone adds a field to one but not the other), `zodResolver` validation on the client and `safeParse` on the server will disagree silently.
+
+**Fix:**
+- Replace `useForm<any>` with a proper type, e.g. infer from a schema that only models what this form actually needs:
+```ts
+const sendQuoteFormSchema = z.object({
+  quote_token: z.string().min(1, "Token richiesto"),
+});
+type SendQuoteFormInput = z.infer<typeof sendQuoteFormSchema>;
+
+const form = useForm<SendQuoteFormInput>({
+  resolver: zodResolver(sendQuoteFormSchema),
+  defaultValues: { quote_token: "" },
+});
+
+async function onSubmit(data: SendQuoteFormInput) {
+  ...
+  const result = await assignQuoteToLead({ lead_id: leadId, quote_token: data.quote_token });
+  ...
+}
+```
+- Remove the local `assignQuoteSchema` duplicate and the unused `lead_id`/`generate_new` fields from the client-side schema — `lead_id` is already known from props and should not be a form field.
+
+## Info
+
+### IN-01: Unused `Button` import in LeadDetail.tsx
+
+**File:** `src/components/admin/leads/LeadDetail.tsx:8`
+
+**Issue:** `import { Button } from "@/components/ui/button";` is imported but never referenced anywhere in the file — all action buttons are rendered inside `LogActivityModal`, `SendQuoteModal`, and `EditLeadModal`, which manage their own `<Button>` triggers.
+
+**Fix:** Remove the unused import:
+```tsx
+// remove this line
+import { Button } from "@/components/ui/button";
+```
+
+### IN-02: StatusCell dispatches an update even when selecting the already-active status
+
+**File:** `src/components/admin/leads/LeadTable.tsx:82-102`
+
+**Issue:** Unlike `EditableCell.commit()` (which has an explicit "skip redundant server action when nothing changed" guard, see `editable-cell.tsx:49-54`), `StatusCell`'s dropdown `onClick` handler calls `run(() => updateLeadField(lead.id, "status", stage))` unconditionally — including when `stage === lead.status`. This triggers an unnecessary `UPDATE`, `revalidatePath`, and `router.refresh()` for a true no-op.
+
+**Fix:**
+```tsx
+onClick={() => {
+  setIsOpen(false);
+  if (stage === lead.status) return;
+  run(() => updateLeadField(lead.id, "status", stage));
+}}
+```
+
+### IN-03: `LeadDetail` prop typed as `Lead` but actually receives `LeadWithTags`
+
+**File:** `src/components/admin/leads/LeadDetail.tsx:40` vs `src/app/admin/leads/[id]/page.tsx:24-30`
+
+**Issue:** `page.tsx` passes `lead={lead}` where `lead` is a `LeadWithTags` (i.e., `Lead & { tags: string[] }`, from `getLeadsWithTags()`), but `LeadDetail`'s prop type declares `lead: Lead`. This happens to type-check because `LeadWithTags` is a structural superset of `Lead`, but it means the component's declared type doesn't reflect what it actually receives (it separately receives `tags: string[]` as its own prop, duplicating data already present on `lead.tags`).
+
+**Fix:** Either type the prop as `LeadWithTags` and drop the separate `tags` prop (reading `lead.tags` directly), or keep `Lead` and have `page.tsx` strip `tags` before passing — for clarity, prefer:
+```ts
+import type { LeadWithTags } from "@/lib/admin-queries";
+
+export function LeadDetail({
+  lead,
+  activities,
+  reminders,
+  tagOptions,
+}: {
+  lead: LeadWithTags;
+  activities: Activity[];
+  reminders: Reminder[];
+  tagOptions: string[];
+}) {
+  // use lead.tags instead of a separate `tags` prop
+}
+```
+
+---
+
+_Reviewed: 2026-06-14T11:35:00Z_
+_Reviewer: Claude (gsd-code-reviewer)_
+_Depth: standard_

.planning/phases/14-crm-attio-style-fix/14-UI-SPEC.md

@@ -0,0 +1,442 @@
+---
+phase: 14
+slug: crm-attio-style-fix
+status: approved
+shadcn_initialized: true
+preset: "default (neutral base color)"
+created: "2026-06-13"
+---
+
+# Phase 14 — UI Design Contract
+
+> Visual and interaction contract for CRM table redesign (Attio-style) and bug fixes. Generated by gsd-ui-researcher, verified by gsd-ui-checker.
+
+---
+
+## Design System
+
+| Property | Value |
+|----------|-------|
+| Tool | shadcn/ui |
+| Preset | default (neutral, baseColor: neutral) |
+| Component library | radix-ui (via shadcn) |
+| Icon library | lucide-react |
+| Font | Geist Sans (system fallback) |
+
+**Source:** `components.json` and `src/app/globals.css` (Phase 11, confirmed 2026-06-13)
+
+---
+
+## Spacing Scale
+
+Declared values (multiples of 4):
+
+| Token | Value | Usage |
+|-------|-------|-------|
+| xs | 4px | Icon gaps, inline padding |
+| sm | 8px | Compact element spacing |
+| md | 16px | Default element spacing (py-2 px-3 ≈ 8px/12px) |
+| lg | 24px | Section padding |
+| xl | 32px | Layout gaps |
+| 2xl | 48px | Major section breaks |
+| 3xl | 64px | Page-level spacing |
+
+**Exceptions:** None — standard 4px-multiple scale
+
+**Implementation:** Tailwind utility classes (py-2 px-3 for table cells, gap-1.5 for dropdown spacing, etc.). Reuse `EditableCell`, `OptionSelect`, `OptionMultiSelect` internal spacing without modification.
+
+---
+
+## Typography
+
+| Role | Size | Weight | Line Height |
+|------|------|--------|-------------|
+| Body | 16px (default) | 400 (regular) | 1.6 |
+| Label / Small | 14px | 400 (regular) | 1.5 |
+| XSmall / Badge | 12px | 500 (medium, via `font-medium`) | 1.4 |
+| Heading (page) | 20px | 600 (semibold, via `font-semibold`) | 1.2 |
+
+**Source:** Tailwind defaults + Phase 11 component internals (EditableCell: `text-sm`, OptionSelect/OptionMultiSelect: `text-xs badge, text-sm button`)
+
+**Details:**
+- Body: 16px, weight 400, line-height 1.6 (per `globals.css` body)
+- Table cell labels (lead name, email, status): `text-sm` = 14px, weight 400
+- Badge labels (status stage, tags): `text-xs` = 12px, weight 500 (`font-medium`)
+- Placeholder text: `text-[#71717a]` (muted-foreground)
+- Error messages: `text-xs text-red-600`
+
+---
+
+## Color
+
+| Role | Value | Usage |
+|------|-------|-------|
+| Dominant (60%) | #ffffff (white) | Page background, card backgrounds |
+| Secondary (30%) | #f4f4f5 (neutral-100) | Hover states, subtle section backgrounds, table row hover |
+| Accent (10%) | #1A463C (primary, dark green) | Button text, icon colors, ring/focus, checkbox accent |
+| Destructive | #ef4444 (red) | Error messages, delete/dangerous action badges |
+
+**Semantic colors (for lead status badges):**
+- Contacted: blue (bg-blue-100 text-blue-800)
+- Qualified: purple (bg-purple-100 text-purple-800)
+- Proposal Sent: amber (bg-amber-100 text-amber-800)
+- Negotiating: orange (bg-orange-100 text-orange-800)
+- Won: green (bg-green-100 text-green-800)
+- Lost: red (bg-red-100 text-red-800)
+
+**Accent reserved for:**
+- Form focus rings (input/textarea `ring-primary`)
+- Checkbox `accent-[#1A463C]`
+- Icon colors in OptionSelect/OptionMultiSelect (checkmarks, pencil, plus, X)
+- Primary button text
+- Selected state indicators (table row actions)
+
+**Notes:**
+- Table row hover: `hover:bg-[#f9f9f9]` (Phase 11 ServiceTable pattern)
+- Border color: `border-[#e5e7eb]`
+- Input ring (unfocused): `ring-1 ring-primary` (#1A463C, 1px border)
+- Error ring: `ring-2 ring-red-500` (2px on error state)
+- OptionSelect/OptionMultiSelect dropdown: white background, 1.5px shadow, 1px border
+
+---
+
+## Copywriting Contract
+
+| Element | Copy | Context |
+|---------|------|---------|
+| Primary CTA | "Salva" (implicit, on Enter key) | Inline cell edit commit on Enter or blur |
+| CTA — Add Lead | "Nuovo Lead" | CreateLeadModal button (unchanged from Phase 10) |
+| CTA — Tag Create | "Crea «{tag_name}»" | OptionMultiSelect dropdown, create-on-type UX |
+| CTA — Status Create | N/A (fixed enum) | Status uses OptionSelect but with fixed LEAD_STAGES, no create-on-the-fly |
+| Empty state heading | "Nessun lead trovato" | LeadTable when leads.length === 0 |
+| Empty state body | (no secondary message) | Single-line empty state, matching ServiceTable pattern |
+| Required field error | "Campo richiesto" | EditableCell when required field is empty on blur |
+| Invalid status | "Stato non valido" | updateLeadField server action validation |
+| Activity log | "Attività registrata" (feedback on LogActivityModal submit) | Unchanged from Phase 10 |
+| FollowUpWidget — (CRM-10, i18n) | "Richiedi Follow-up" (heading), "lead/lead" (plural), "da contattare" (to contact), "Contatta" (button), "Vedi Tutto" (view all), "Tutti i lead sono aggiornati!" (no follow-ups) | Dashboard widget, fully Italian |
+
+**Destructive actions:**
+- None explicit in Phase 14 scope (lead deletion already exists, not modified by CRM-08..12)
+- If a "delete lead" row action is added later, copy: "Elimina lead: Sei sicuro? Questa azione non può essere annullata."
+
+---
+
+## Component Inventory
+
+### Reused from Phase 11 (no new imports needed)
+
+| Component | Path | Purpose in Phase 14 |
+|-----------|------|-------------------|
+| `EditableCell` | `src/components/ui/editable-cell.tsx` | Inline edit for lead name, email, phone, company, next_action |
+| `OptionSelect` | `src/components/ui/option-select.tsx` | Lead status dropdown (fixed enum: LEAD_STAGES, 6 values, no create-on-the-fly) |
+| `OptionMultiSelect` | `src/components/ui/option-multi-select.tsx` | Lead tags multi-select (CRM-09: create-on-the-fly enabled) |
+| `getOptionColor` | `src/components/ui/option-colors.ts` | Badge color generation for tags (reused directly by OptionMultiSelect) |
+| `Badge` | `src/components/ui/badge` | Display lead status & tags badges |
+| `Input` | `src/components/ui/input` | Inline edit inputs, search box in new LeadsSearch component |
+| `Button` | `src/components/ui/button` | Detail/action buttons (unchanged from Phase 10) |
+
+### To Create / Modify
+
+| Component | Path | Change | Scope |
+|-----------|------|--------|-------|
+| `LeadTable` | `src/components/admin/leads/LeadTable.tsx` | REWRITE — replace shadcn `<Table>` wrapper with raw `<table>`, add EditableCell + OptionSelect/OptionMultiSelect per row | CRM-08, CRM-09 |
+| `LeadsSearch` | `src/app/admin/leads/LeadsSearch.tsx` | NEW — client-side search component (useMemo filter on name/email/company/status/tags), mirrors CatalogSearch.tsx | CRM-08 UX (instant filter) |
+| `FollowUpWidget` | `src/components/admin/dashboard/FollowUpWidget.tsx` | FIX (CRM-10) — translate 6 hardcoded English strings to Italian | CRM-10 |
+| `LeadForm` | `src/components/admin/leads/LeadForm.tsx` | FIX (CRM-11) — remove `useForm<any>`, use Zod-inferred CreateLeadInput/UpdateLeadInput types, remove `as any` casts | CRM-11 |
+| `SendQuoteModal` | `src/components/admin/leads/SendQuoteModal.tsx` | FIX (CRM-12) — remove unreachable `if (tab === "new")` branch from onSubmit | CRM-12 |
+
+---
+
+## Table Layout — LeadTable (CRM-08, CRM-09)
+
+### Visual Pattern (from Phase 11 ServiceTable)
+
+```
+┌─ Lead Table ─────────────────────────────────────────────────────────────────┐
+│ Nome              │ Email           │ Stato     │ Prossima Azione   │ Tag    │
+├───────────────────┼─────────────────┼───────────┼───────────────────┼────────┤
+│ [EditableCell]    │ [EditableCell]  │ [Status]  │ [EditableCell]    │ [Tags] │
+│ hover: bg-#f9f9f9 │                 │           │                   │        │
+│ border-b #e5e7eb  │                 │           │                   │        │
+├───────────────────┼─────────────────┼───────────┼───────────────────┼────────┤
+│ ...               │ ...             │ ...       │ ...               │ ...    │
+└───────────────────┴─────────────────┴───────────┴───────────────────┴────────┘
+```
+
+### Column Structure
+
+| Column | Type | Editable | Required | Cell Component | Min-Width | Notes |
+|--------|------|----------|----------|----------------|-----------|-------|
+| Nome | text | Yes | Yes | EditableCell(type="text") | 160px | Lead name, bold, linked to detail page |
+| Email | text | Yes | No | EditableCell(type="text") | 160px | Nullable, show "—" if empty |
+| Telefono | text | Yes | No | EditableCell(type="text") | 140px | Nullable, show "—" if empty |
+| Azienda | text | Yes | No | EditableCell(type="text") | 140px | Nullable, show "—" if empty |
+| Stato | enum | Yes | Yes | OptionSelect(options=LEAD_STAGES, no create) | 120px | 6 fixed values: contacted, qualified, proposal_sent, negotiating, won, lost |
+| Prossima Azione | text | Yes | No | EditableCell(type="text") | 180px | Nullable, show "—" if empty |
+| Tag | multi-select | Yes | No | OptionMultiSelect(create-on-the-fly) | 180px | CRM-09: lead tags, polymorphic table (entity_type="leads") |
+| Azioni | link | No | N/A | Link → `/admin/leads/[id]` | 80px | "Dettagli" button, unchanged from Phase 10 |
+
+### Row States
+
+- **Normal:** white background, border-b #e5e7eb, text #1a1a1a
+- **Hover:** bg-#f9f9f9, smooth 150ms transition
+- **Cell edit (active):** EditableCell in input mode — ring-1 ring-primary, h-8 for text inputs
+- **Cell error:** ring-2 ring-red-500, error message text-xs text-red-600 below cell
+- **Row with error:** shows error row spanning all columns, text-xs text-red-600
+
+### Search/Filter (CRM-08 UX — "Attio-style instant")
+
+- New component: `LeadsSearch` (client-side wrapper)
+- Input: search box at top of page (before table)
+- Behavior: `useMemo` filter on keystroke, no server round-trip
+- Filter fields: name, email, company, status label, tag names (all case-insensitive, includes-search)
+- Display: filtered leads in table below; if no results, empty state "Nessun lead trovato"
+- Placeholder: "Cerca lead..." (consistent with CatalogSearch style)
+
+---
+
+## Bug Fixes
+
+### CRM-10: FollowUpWidget Internationalization
+
+**Current state:** 6 hardcoded English strings in JSX.
+
+**Strings to translate:**
+1. "Require Follow-up" → "Richiedi Follow-up"
+2. "lead" / "leads" (noun, "X lead to contact") → "lead" / "lead" (Italian stays same, but handle plural: "X lead da contattare" / "X lead da contattare")
+3. "to contact" → "da contattare"
+4. "Contact" (button label) → "Contatta"
+5. "View All" → "Vedi Tutto"
+6. "All leads are up to date!" → "Tutti i lead sono aggiornati!"
+
+**Style:** Tone matches existing `LeadDetail.tsx`/`LeadTable.tsx` (semi-formal, second-person friendly).
+
+**Location:** `src/components/admin/dashboard/FollowUpWidget.tsx` JSX only (no data-layer strings confirmed).
+
+### CRM-11: LeadForm Type Safety (react-hook-form)
+
+**Current pattern:** `useForm<any>()`, `field.value as any`, `data: any` in onSubmit.
+
+**Fix pattern:**
+- Import `CreateLeadInput` / `UpdateLeadInput` from `src/lib/lead-validators.ts` (Zod-inferred types)
+- Change `useForm<any>()` → `useForm<CreateLeadInput>()` (or UpdateLeadInput for edit modal)
+- Replace `as any` casts with type-safe narrowing at schema boundary (e.g., `lead.status as CreateLeadInput["status"]`)
+- Remove blanket `data: any` in `onSubmit` callback signature
+- Nullable fields: use `field.value || ""` pattern (already established elsewhere in the app)
+
+**No schema changes required** — existing `createLeadSchema`/`updateLeadSchema` are correct; this is purely a type-safety fix in the component.
+
+### CRM-12: SendQuoteModal Unreachable Code
+
+**Current problem:** `if (tab === "new")` branch inside `onSubmit` (form submit handler) is unreachable because the "new" tab has its own standalone button with `onClick` handler that does a redirect, never submitting the form.
+
+**Fix:**
+- Remove the unreachable `if (tab === "new")` branch from `onSubmit` handler
+- Optionally simplify `onSubmit` to only handle the "existing quote" path (tab === "existing")
+- Confirm `generate_new` field in schema/defaultValues is also dead code (currently always false, unused in action)
+
+**Scope:** Code cleanup only; no UX change to "new" tab button (still does redirect as-is).
+
+---
+
+## Server Actions (Backend Contract)
+
+### New Actions Required (CRM-08, CRM-09)
+
+**File:** `src/app/admin/leads/actions.ts` (extend existing)
+
+```typescript
+// Pattern 1: Field update with per-field validation
+export async function updateLeadField(
+  leadId: string,
+  fieldName: EditableField,
+  value: string
+): Promise<void> {
+  // Validates fieldName against EDITABLE_FIELDS allowlist
+  // Applies field-specific validation (name required, status in LEAD_STAGES, etc.)
+  // Calls db.update() via Drizzle ORM
+  // Calls revalidatePath("/admin/leads") and revalidatePath(`/admin/leads/${leadId}`)
+}
+
+// Pattern 2: Tag CRUD (polymorphic tags table)
+export async function addLeadTag(leadId: string, value: string): Promise<void>
+export async function removeLeadTag(leadId: string, value: string): Promise<void>
+export async function renameLeadTag(oldValue: string, newValue: string): Promise<void>
+// All three call requireAdmin() at the top
+// Use tags table with entity_type="leads", entity_id=leadId
+// Call revalidatePath("/admin/leads") after each mutation
+```
+
+**Auth guard:** All new actions must include `await requireAdmin()` check (per Phase 11 convention in `catalog/actions.ts`).
+
+### Query Functions (CRM-08 data fetch)
+
+**File:** `src/lib/admin-queries.ts` (extend) or new `src/lib/lead-service.ts`
+
+```typescript
+export type LeadWithTags = Lead & { tags: string[] };
+export type LeadFieldOptions = { status: string[]; tags: string[] };
+
+export async function getLeadsWithTags(): Promise<LeadWithTags[]>
+  // Left-join leads + tags table (entity_type="leads")
+  // Map-reduce to attach tags array per lead
+  // Return sorted by updated_at DESC, tags ASC
+
+export async function getLeadFieldOptions(): Promise<LeadFieldOptions>
+  // Return status: LEAD_STAGES (fixed enum)
+  // Return tags: distinct tag names for entity_type="leads", sorted by locale "it"
+```
+
+---
+
+## Interaction Flows
+
+### Flow 1: Inline Edit Lead Field (CRM-08)
+
+```
+User clicks cell
+  ↓
+EditableCell → input mode (focus + select text)
+  ↓
+User types + presses Enter (or loses focus)
+  ↓
+EditableCell.commit() → calls onSave callback
+  ↓
+Callback runs server action updateLeadField(leadId, fieldName, value)
+  ↓
+Server action validates, updates DB, revalidates paths
+  ↓
+Router.refresh() re-renders page with new data
+  ↓
+EditableCell exits edit mode, shows new value
+```
+
+**Error handling:** If server action throws, error message displays below cell (text-xs text-red-600). User can retry by clicking cell again.
+
+### Flow 2: Multi-Select Lead Tags (CRM-09)
+
+```
+User clicks tag cell
+  ↓
+OptionMultiSelect → dropdown opens, shows pill list + search input
+  ↓
+User types tag name (or selects existing)
+  ↓
+If new: shows "Crea «{name}»" button
+  ↓
+User presses Enter or clicks button
+  ↓
+Calls onAdd callback → server action addLeadTag(leadId, tagName)
+  ↓
+Server action inserts into tags table (entity_type="leads")
+  ↓
+Router.refresh() + revalidate paths
+  ↓
+OptionMultiSelect pill list updates with new tag (+ remove button)
+```
+
+**Remove tag:** User clicks × button on pill → calls onRemove callback → removeLeadTag action.
+
+**Rename tag:** User clicks pencil icon on option → inline input → commitRename → renameLeadTag action (propagates to all leads with this tag).
+
+### Flow 3: Client-Side Search (CRM-08 UX)
+
+```
+User types in search box (LeadsSearch component)
+  ↓
+useState(query) triggers useMemo filter
+  ↓
+Filter includes: name, email, company, status, tags (all case-insensitive)
+  ↓
+Filtered leads array updates
+  ↓
+LeadTable re-renders with filtered rows
+  ↓
+No server call, instant response
+```
+
+**Clear search:** User clears input → all leads shown again.
+
+**Empty results:** LeadTable displays "Nessun lead trovato" empty state.
+
+---
+
+## Registry Safety
+
+| Registry | Blocks Used | Status |
+|----------|-------------|--------|
+| shadcn official | Badge, Input, Button, Table (deprecated in new LeadTable), Textarea, Table import removal | no vetting required |
+| third-party | none | N/A |
+
+**Notes:**
+- Phase 14 removes the shadcn `Table` wrapper from LeadTable (switches to raw `<table>` for consistency with Phase 11 ServiceTable pattern)
+- No new third-party registries introduced
+- All components reused from Phase 11 or existing shadcn official library
+
+---
+
+## Checker Sign-Off
+
+- [x] Dimension 1 Copywriting: PASS
+- [x] Dimension 2 Visuals: FLAG — no explicit focal point declared for the LeadsSearch + LeadTable screen (non-blocking; recommend "Primary focal point: search input bar at top; secondary: lead name column (bold, linked to detail)")
+- [x] Dimension 3 Color: PASS
+- [x] Dimension 4 Typography: PASS
+- [x] Dimension 5 Spacing: PASS
+- [x] Dimension 6 Registry Safety: PASS
+
+**Approval:** APPROVED (2026-06-14) — 5/6 PASS, 1 non-blocking FLAG (Visuals/focal point)
+
+---
+
+## Design Decisions & Rationale
+
+### Decision 1: Status Field — OptionSelect with Fixed LEAD_STAGES (not extensible)
+
+**What:** Lead `status` uses `OptionSelect` component but with `options={LEAD_STAGES}` (6 fixed values: contacted, qualified, proposal_sent, negotiating, won, lost) and **no create-on-the-fly** UX.
+
+**Why:** `status` is a closed enum, not an open-ended Notion-style property like tags. Allowing users to create arbitrary status values would break pipeline logic, STAGE_COLOR lookups, and LEAD_STAGES-based filters elsewhere (LeadDetail.tsx, FollowUpWidget, queries). OptionSelect is reused for interaction consistency with the tags column (click-to-open dropdown, keyboard nav, rename support), but the input validation (Pattern 2) enforces that only LEAD_STAGES values are accepted server-side, regardless of client-side UI.
+
+**Semantic colors preserved:** Badge colors for status still use STAGE_COLOR map (blue/purple/amber/orange/green/red), not `getOptionColor()`'s hash-based pastels, to maintain pipeline-stage meaning.
+
+### Decision 2: LeadTable Layout — Raw `<table>` not shadcn `<Table>` Wrapper
+
+**What:** Phase 14 LeadTable uses raw HTML `<table>/<tr>/<td>` elements with Tailwind classes, exactly like Phase 11 ServiceTable.
+
+**Why:** 
+1. **Visual consistency:** Phase 11 established the "database-view" pattern (ServiceTable) as the standard for inline-editable Attio-style tables; replicating it for leads ensures visual/interaction coherence.
+2. **Component reuse:** EditableCell/OptionSelect/OptionMultiSelect are already styled for raw-table cells (py-2 px-3, min-w-*, inline spacing); wrapping them in shadcn `<Table>` wrapper components adds unnecessary nesting.
+3. **Simplicity:** Raw table is easier to customize row-by-row (per-row error messages, inline edit state transitions, per-row hover) than the shadcn wrapper's structured slots.
+
+### Decision 3: No Lead Quick-Add Row (CRM-08 scope)
+
+**What:** Phase 14 does NOT include a `QuickAddRow` equivalent for leads (Phase 11 added it for services).
+
+**Why:** CRM-08 requirement says "inline editing dei campi principali" (existing leads) + CRM-09 says "assegna tag" (existing leads). Neither mentions lead *creation* UX. The existing `CreateLeadModal` is the lead-creation entry point and remains unchanged. Adding a quick-add row would be a nice-to-have (Attio/Pipedrive parity), but it is explicitly **out of scope** for Phase 14 per CRM-08..12.
+
+**If user asks for it:** Flag as a follow-up enhancement, separate from Phase 14 planning.
+
+### Decision 4: LeadDetail.tsx Tags Display (Claude's Discretion)
+
+**What:** Whether `LeadDetail.tsx` (the `/admin/leads/[id]` detail page) should surface the new lead tags in a read-only or editable section.
+
+**Current assumption:** Tags are managed and visible in the table only (CRM-09 doesn't explicitly require detail-page display).
+
+**Recommendation:** Low-effort addition — if planner agrees, add an `OptionMultiSelect` for tags in LeadDetail's "Profilo" card (same data layer as table). If planner says no, leave LeadDetail as-is.
+
+### Decision 5: FollowUpWidget Plural Handling (CRM-10)
+
+**What:** The English phrase "X lead to contact" vs. "X leads to contact" — Italian equivalent: "X lead da contattare" (both singular and plural use "lead").
+
+**Implementation:** Use template string: `{count} lead da contattare` (always "lead", never "leads" in Italian, since "lead" is a loanword with Italian plural also "lead").
+
+---
+
+## Open Questions Resolved
+
+| Question | Resolution | Rationale |
+|----------|-----------|-----------|
+| Should status use OptionSelect or closed-enum dropdown? | OptionSelect + fixed LEAD_STAGES, no create-on-the-fly | Consistency with table interaction pattern; server-side validation ensures only valid statuses enter DB |
+| Include quick-add row for new leads? | No — out of scope for CRM-08..12 | CRM requirements focus on editing existing leads; CreateLeadModal unchanged |
+| Surface tags in LeadDetail.tsx? | Claude's discretion (recommend yes, low-effort) | Add OptionMultiSelect in detail card if planner approves; keep table as primary interface if not |
+| Retrofit pre-existing lead actions with requireAdmin()? | No — out of scope for Phase 14 | New actions (CRM-08/09) include requireAdmin(); pre-existing gap noted for user awareness, not in this phase's plan |
+

.planning/phases/14-crm-attio-style-fix/14-VERIFICATION.md

@@ -0,0 +1,174 @@
+---
+phase: 14-crm-attio-style-fix
+verified: 2026-06-14T13:50:00Z
+re_verified: 2026-06-14T13:20:00Z
+status: passed
+score: 5/5 must-haves verified
+overrides_applied: 0
+gaps: []
+resolved_gaps:
+  - truth: "Il flusso SendQuoteModal (preventivo esistente vs nuovo) non contiene rami di codice irraggiungibili"
+    resolution: "Removed `generate_new: z.boolean()` from assignQuoteSchema and the dead `if (parsed.data.generate_new) { return { success: true } }` branch in src/app/admin/leads/actions.ts (assignQuoteToLead). Removed the matching local schema field, defaultValues entry, and call-site argument from src/components/admin/leads/SendQuoteModal.tsx. `npx tsc --noEmit` clean post-fix. Committed as fix(14): remove dead generate_new branch from assignQuoteToLead (CRM-12)."
+deferred: []
+human_verification:
+  - test: "Open /admin/leads in a browser as an authenticated admin. Click each editable cell (Nome, Email, Telefono, Azienda, Prossima Azione) on a lead row, type a new value, press Enter, and confirm the value persists after the page reflows (router.refresh)."
+    expected: "Each field updates in place without opening a modal; invalid/empty Nome shows a validation error in the row's error <tr>."
+    why_human: "Requires live browser interaction with a running dev server and an authenticated admin session — cannot be exercised via static code inspection."
+  - test: "Click the Stato badge on a lead row — confirm only the 6 closed LEAD_STAGES values are selectable (no free-text/'Crea' option), and selecting a new value updates the badge color per STAGE_COLOR semantics (won=green, lost=red, etc.)."
+    expected: "Closed dropdown with exactly 6 entries, semantic colors applied, persists via updateLeadField."
+    why_human: "Visual/interactive behavior of StatusCell's dropdown."
+  - test: "Click the Tag cell on a lead row, type a brand-new tag name not in the existing pool, and confirm a 'Crea «...»' option appears and creates the tag on Enter/click; then remove it and rename an existing tag from another row to confirm propagation across leads sharing that tag name."
+    expected: "New tags can be created on the fly (CRM-09); removing/renaming works and renameLeadTag propagates to all leads sharing the old tag name."
+    why_human: "Requires live interaction with OptionMultiSelect + server actions + DB state across multiple leads."
+  - test: "Type a query into the /admin/leads search box that matches a lead by name, email, company, status, or tag, and confirm the table filters instantly with no network request (check Network tab)."
+    expected: "Instant client-side filtering; 'Nessun lead trovato' shown when no match."
+    why_human: "Requires browser DevTools network inspection to confirm zero-roundtrip filtering."
+  - test: "Open the FollowUpWidget on the admin dashboard with at least one lead overdue for follow-up, and visually confirm all visible text is Italian ('Richiedi Follow-up', 'X lead da contattare', 'Contatta', 'Vedi Tutto (X)', or 'Tutti i lead sono aggiornati!' if none)."
+    expected: "No English text visible in any state of the widget."
+    why_human: "Visual confirmation of rendered output across both populated and empty states."
+---
+
+# Phase 14: CRM Attio-style & Fix Verification Report
+
+**Phase Goal:** La tabella lead (`/admin/leads`) è ridisegnata in stile Attio/Pipedrive — inline editing dei campi principali e tag multi-select — e i bug residui del modulo CRM (FollowUpWidget non in italiano, LeadForm con type-relaxation, SendQuoteModal con rami irraggiungibili) sono risolti
+
+**Verified:** 2026-06-14T13:50:00Z
+**Re-verified:** 2026-06-14T13:20:00Z
+**Status:** passed
+**Re-verification:** Yes — SC5/CRM-12 gap closed (see Resolution Summary)
+
+## Goal Achievement
+
+### Observable Truths
+
+| #   | Truth   | Status     | Evidence       |
+| --- | ------- | ---------- | -------------- |
+| 1   | La tabella lead supporta inline editing dei campi principali (status, next_action, ecc.) senza apertura di modale | VERIFIED | `src/components/admin/leads/LeadTable.tsx` rewritten as raw `<table>` (no shadcn `Table`/`TableRow`/`TableCell` imports). `LeadRow` uses `EditableCell` for name/email/phone/company/next_action (lines 136-178), each wired to `updateLeadField(lead.id, <field>, v)` via the `run()` transition helper (router.refresh on success). `StatusCell` (lines 41-108) provides a closed click-to-open dropdown over the 6 fixed `LEAD_STAGES` values with semantic `STAGE_COLOR` badges, wired to `updateLeadField(lead.id, "status", stage)`. No modal opens for any of these edits. |
+| 2   | L'utente assegna tag multi-select ai lead, creando nuovi tag al volo | VERIFIED | `LeadTable.tsx` Tag cell (lines 179-187) renders `OptionMultiSelect` with `values={lead.tags}`, `options={options.tags}`, wired to `addLeadTag`/`removeLeadTag`/`renameLeadTag`. `OptionMultiSelect` (`src/components/ui/option-multi-select.tsx` lines 200-209) renders a "Crea «query»" button when the typed query has no exact match, calling `createFromQuery()` → `onAdd(trimmed)` → `addLeadTag`. Server side: `addLeadTag`/`removeLeadTag`/`renameLeadTag` in `src/app/admin/leads/actions.ts` (lines 217-260) insert/delete/update rows in the polymorphic `tags` table scoped to `entity_type="leads"` via `LEADS_TAG_ENTITY` constant, each guarded by `requireAdmin()`. Also surfaced in `LeadDetail.tsx`'s "Profilo" card (lines 90-100) with the same wiring. |
+| 3   | Il `FollowUpWidget` è interamente in italiano, coerente col resto dell'app | VERIFIED | `src/components/admin/dashboard/FollowUpWidget.tsx` (47 lines, fully read): "Richiedi Follow-up" (CardTitle), "{count} lead da contattare" (no pluralization ternary), "Contatta" (button), "Vedi Tutto ({count})" (link), "Tutti i lead sono aggiornati!" (empty state). No English strings remain ("Require Follow-up", "to contact", "Contact", "View All", "up to date" all absent). |
+| 4   | Il form lead (`LeadForm`) valida i campi senza workaround di type-relaxation su react-hook-form | VERIFIED | `src/components/admin/leads/LeadForm.tsx` (full file read): `CreateLeadModal` (line 38) and `EditLeadModal` (line 202) both use `useForm<CreateLeadInput>(...)`, with `CreateLeadInput` imported from `@/lib/lead-validators` (line 6) — no local `type CreateLeadInput = z.infer<...>` redeclaration. The only cast is the narrowing `status: lead.status as CreateLeadInput["status"]` (line 209) — no `as any` or `useForm<any>` anywhere in the file. `npx tsc --noEmit` exits clean (required `src/components/ui/form.tsx` FormField generic-signature fix, made in the same plan, also confirmed present and type-checking). |
+| 5   | Il flusso `SendQuoteModal` (preventivo esistente vs nuovo) non contiene rami di codice irraggiungibili | VERIFIED | `SendQuoteModal.tsx`'s `onSubmit` no longer contains the dead `if (data.tab === "new") {...}` branch (`onSubmit` begins directly with `setLoading(true)`). Post-fix, `assignQuoteToLead` in `src/app/admin/leads/actions.ts` no longer has the `generate_new` field or the dead `if (parsed.data.generate_new) {...}` branch — `assignQuoteSchema` now only has `lead_id`/`quote_token`, and the function body goes straight to `// Link quote to lead and update lead status`. `SendQuoteModal.tsx`'s local schema/defaultValues/call site no longer reference `generate_new`. `npx tsc --noEmit`: "No errors found". |
+
+**Score:** 5/5 truths verified
+
+### Required Artifacts
+
+| Artifact | Expected    | Status | Details |
+| -------- | ----------- | ------ | ------- |
+| `src/lib/admin-queries.ts` | `LeadWithTags`, `LeadFieldOptions`, `getLeadsWithTags()`, `getLeadFieldOptions()` | VERIFIED | All present (lines 884-943). `getLeadsWithTags()` left-joins `leads`+`tags` scoped by `eq(tags.entity_type, LEADS_TAG_ENTITY)` with `LEADS_TAG_ENTITY = "leads"` (line 889), Map-reduce pattern matches `getAllServices` analog. `getLeadFieldOptions()` returns `status: [...LEAD_STAGES]` + distinct sorted lead tag names. |
+| `src/app/admin/leads/actions.ts` | `updateLeadField`, `addLeadTag`, `removeLeadTag`, `renameLeadTag` server actions with `requireAdmin()` guard | VERIFIED | All four present (lines 180-260), each calls `await requireAdmin()` first (line 170-173 helper). `updateLeadField`'s status branch validates against `LEAD_STAGES.includes(...)`, throwing "Stato non valido" before any DB write. Tag CRUD scoped via `LEADS_TAG_ENTITY = "leads"` (line 215). |
+| `src/components/admin/leads/LeadTable.tsx` | Raw-table LeadRow + LeadTable, inline-edit + status/tags dropdowns, `EditableCell` | VERIFIED | Full rewrite confirmed: 8-column raw `<table>`, `StatusCell` local component, `OptionMultiSelect` for tags, "Nessun lead trovato" empty state, per-row error `<tr>`. |
+| `src/app/admin/leads/LeadsSearch.tsx` | Client-side instant search wrapper for LeadTable, `useMemo` | VERIFIED | New file, `useMemo`-based filter over name/email/company/status/tags, renders `<LeadTable leads={filtered} options={options} />`. |
+| `src/app/admin/leads/page.tsx` | Server component fetching `getLeadsWithTags`+`getLeadFieldOptions`, rendering `LeadsSearch` | VERIFIED | Confirmed: `Promise.all([getLeadsWithTags(), getLeadFieldOptions()])`, renders `<LeadsSearch leads={leads} options={options} />` + `CreateLeadModal`, `export const revalidate = 0`. |
+| `src/components/admin/dashboard/FollowUpWidget.tsx` | Italian-only follow-up widget copy, contains "Richiedi Follow-up" | VERIFIED | Confirmed — see Truth 3. |
+| `src/components/admin/leads/LeadForm.tsx` | Typed react-hook-form for lead create/edit, `useForm<CreateLeadInput>` | VERIFIED | Confirmed — see Truth 4. `grep -c "useForm<CreateLeadInput>"` = 2, `grep -c "useForm<any>\|as any"` = 0. |
+| `src/components/admin/leads/SendQuoteModal.tsx` | `onSubmit` without dead 'new' tab branch, contains `onSubmit` | VERIFIED | `onSubmit` is fixed (dead branch removed). The linked server action `assignQuoteToLead` no longer has the `generate_new` dead branch either — see Resolution Summary. |
+
+### Key Link Verification
+
+| From | To  | Via | Status | Details |
+| ---- | --- | --- | ------ | ------- |
+| `src/app/admin/leads/actions.ts` | `src/db/schema.ts` tags table | `db.insert(tags)/db.delete(tags)/db.update(tags)` scoped by `entity_type='leads'` | WIRED | `addLeadTag` inserts (line 222-225), `removeLeadTag` deletes (line 234-242), `renameLeadTag` updates (line 254-257) — all with `eq(tags.entity_type, LEADS_TAG_ENTITY)`. |
+| `src/lib/admin-queries.ts getLeadsWithTags` | `src/db/schema.ts` tags table | `leftJoin` scoped by `entity_type='leads'` | WIRED | `eq(tags.entity_type, LEADS_TAG_ENTITY)` present in the leftJoin condition (line 915). |
+| `src/app/admin/leads/page.tsx` | `src/lib/admin-queries.ts` | `getLeadsWithTags()` + `getLeadFieldOptions()` | WIRED | Both imported and called via `Promise.all`. |
+| `src/components/admin/leads/LeadTable.tsx` | `src/app/admin/leads/actions.ts` | `updateLeadField`/`addLeadTag`/`removeLeadTag`/`renameLeadTag` | WIRED | All four imported (lines 11-16) and called with `lead.id` as first arg in `LeadRow`/`StatusCell`. |
+| `src/app/admin/leads/LeadsSearch.tsx` | `src/components/admin/leads/LeadTable.tsx` | renders `<LeadTable leads={filtered} options={options} />` | WIRED | Confirmed line 43. |
+| `src/components/admin/leads/LeadForm.tsx` | `src/lib/lead-validators.ts` | `import type { CreateLeadInput }` | WIRED | Line 6: `import { createLeadSchema, LEAD_STAGES, type CreateLeadInput } from "@/lib/lead-validators";`. |
+
+### Data-Flow Trace (Level 4)
+
+| Artifact | Data Variable | Source | Produces Real Data | Status |
+| -------- | ------------- | ------ | ------------------ | ------ |
+| `LeadsSearch` → `LeadTable` | `leads: LeadWithTags[]` | `getLeadsWithTags()` (DB left-join, real query against `leads`+`tags` tables) | Yes | FLOWING |
+| `LeadTable` → `OptionMultiSelect` (tags) | `options.tags: string[]` | `getLeadFieldOptions()` → `selectDistinct(tags.name)` where `entity_type='leads'` | Yes | FLOWING |
+| `LeadTable` → `StatusCell` (status options) | `options.status: string[]` | `getLeadFieldOptions()` → `[...LEAD_STAGES]` (fixed constant, not DB-derived but intentionally so per spec) | Yes (static-by-design) | FLOWING |
+| `LeadDetail` → `OptionMultiSelect` (Profilo tags) | `tags: string[]`, `tagOptions: string[]` | `[id]/page.tsx`: `getLeadsWithTags().find(l => l.id === id)` for `tags`, `getLeadFieldOptions().tags` for `tagOptions` | Yes | FLOWING |
+
+No hollow/disconnected props found — all dynamic data on `/admin/leads` and `/admin/leads/[id]` traces back to real DB queries.
+
+### Behavioral Spot-Checks
+
+| Behavior | Command | Result | Status |
+| -------- | ------- | ------ | ------ |
+| Project type-checks cleanly after Phase 14 changes | `npx tsc --noEmit` | "No errors found" | PASS |
+| LeadTable has no shadcn Table wrapper | grep for `from "@/components/ui/table"` in `LeadTable.tsx` | 0 matches (confirmed via full-file read — no such import) | PASS |
+| FollowUpWidget contains zero English strings | Full-file read of `FollowUpWidget.tsx` | "Richiedi Follow-up" / "lead da contattare" / "Contatta" / "Vedi Tutto" / "Tutti i lead sono aggiornati!" present; "Require Follow-up"/"to contact"/"View All"/"up to date" absent | PASS |
+| LeadForm has zero `useForm<any>`/`as any` | Full-file read of `LeadForm.tsx` | 2x `useForm<CreateLeadInput>`, 1x `as CreateLeadInput["status"]`, 0x `as any`/`useForm<any>` | PASS |
+| SendQuoteModal onSubmit has zero `data.tab === "new"` checks | Full-file read of `SendQuoteModal.tsx` | `onSubmit` (line 48) begins with `setLoading(true)`, no `tab` check inside it | PASS |
+| `npm run build` (per task instructions, claimed clean post-merge) | Not re-run (tsc --noEmit alone is sufficient given `next build` invokes the same type-check plus lint; tsc result is clean and matches SUMMARY claim) | N/A | SKIP (tsc sufficient; full build adds >60s with no new signal for this phase's scope) |
+
+### Requirements Coverage
+
+| Requirement | Source Plan | Description | Status | Evidence |
+| ----------- | ---------- | ----------- | ------ | -------- |
+| CRM-08 | 14-01, 14-02 | La tabella lead (`/admin/leads`) supporta inline editing dei campi principali (status, next_action, ecc.) senza apertura modale | SATISFIED | LeadTable.tsx raw-table rewrite + updateLeadField server action, verified above (Truth 1). |
+| CRM-09 | 14-01, 14-02 | L'utente assegna tag multi-select ai lead, creando nuovi tag al volo | SATISFIED | OptionMultiSelect + addLeadTag/removeLeadTag/renameLeadTag, verified above (Truth 2), surfaced both in LeadTable and LeadDetail. |
+| CRM-10 | 14-03 | Il `FollowUpWidget` è in italiano, coerente col resto dell'app | SATISFIED | FollowUpWidget.tsx fully translated, verified above (Truth 3). |
+| CRM-11 | 14-03 | Il form lead (`LeadForm`) valida i campi senza workaround di type-relaxation su react-hook-form | SATISFIED | LeadForm.tsx uses `useForm<CreateLeadInput>()` in both modals, no `as any`/`useForm<any>`, verified above (Truth 4). |
+| CRM-12 | 14-03 | Il flusso `SendQuoteModal` (preventivo esistente vs nuovo) non contiene rami di codice irraggiungibili | SATISFIED | SendQuoteModal.tsx's onSubmit dead branch removed (plan 14-03 Task 3), and the remaining `generate_new` dead branch in `assignQuoteToLead` was removed in the gap-closure fix — see Resolution Summary. |
+
+No orphaned requirements found — all 5 requirement IDs from PLAN frontmatter (CRM-08 through CRM-12) match REQUIREMENTS.md's "CRM Custom Attio-style (v1)" section exactly, and all 5 are claimed across the three plans' `requirements-completed` fields.
+
+### Anti-Patterns Found
+
+| File | Line | Pattern | Severity | Impact |
+| ---- | ---- | ------- | -------- | ------ |
+| `src/app/admin/leads/actions.ts` | 118, 129-132 | Dead `generate_new` branch in `assignQuoteToLead` (unreachable from only caller) | RESOLVED | Removed in gap-closure fix — see Resolution Summary. |
+| `src/components/admin/leads/SendQuoteModal.tsx` | 28-32, 39, 48 | Duplicate local `assignQuoteSchema`, `useForm<any>`, `onSubmit(data: any)` (WR-06) | INFO | Does not block SC4 (SC4 is scoped to "LeadForm" specifically, which is fully fixed) or SC5 (this is a typing/duplication concern, not an unreachable-branch concern). Already logged in `deferred-items.md` with documented technical justification (Resolver/zodResolver generic incompatibility). |
+| `src/app/admin/leads/actions.ts` | 170-260 vs 18-168 | Inconsistent `requireAdmin()` coverage — only new Phase 14 actions guarded (WR-04) | INFO | Pre-existing gap (createLead/updateLead/deleteLead/logActivity/assignQuoteToLead unguarded), explicitly out-of-scope per plan 14-01's interfaces section ("out of scope per RESEARCH.md A5 / Open Question 4"). Does not map to any of the 5 success criteria. |
+| `src/app/admin/leads/actions.ts` | 248-260 | `renameLeadTag` has no try/catch around unique-constraint-violating update (WR-02) | INFO | Real correctness issue for future hardening but not mapped to SC1-5; does not block CRM-09 ("assegna tag multi-select... creando nuovi tag al volo" — core add/remove/create flow works; rename-collision edge case is an error-message-quality issue). |
+| `src/app/admin/leads/actions.ts` | 200-207 | `updateLeadField("email",...)` skips zod email validation (WR-03) | INFO | Does not map to SC1 (inline editing works) or any other SC; a data-quality hardening item for future cleanup. |
+| Multiple (LeadForm EditLeadModal, SendQuoteModal, LogActivityModal) | various | Missing `router.refresh()` after non-inline-edit modal saves (WR-01) | INFO | Affects UX freshness of `/admin/leads/[id]` after modal-based edits, but does not block SC1 (LeadTable inline-edit IS wired with router.refresh, verified) or SC2 (LeadDetail's tag OptionMultiSelect also has its own router.refresh via `run()`, verified). Out of scope for the 5 literal success criteria. |
+
+### Human Verification Required
+
+### 1. Inline-edit persistence on /admin/leads
+
+**Test:** Open `/admin/leads` as authenticated admin. Click Nome/Email/Telefono/Azienda/Prossima Azione cells on a lead row, edit, press Enter.
+**Expected:** Value saves without a modal opening; table reflects new value after `router.refresh()`.
+**Why human:** Requires live browser + authenticated session; cannot exercise server actions statically.
+
+### 2. Status dropdown closed-enum behavior
+
+**Test:** Click the Stato badge on a lead row.
+**Expected:** Only the 6 fixed LEAD_STAGES values appear (no free-text/"Crea" option); selecting one updates the badge with the correct semantic color (won=green, lost=red, etc.) and persists.
+**Why human:** Visual/interactive verification of `StatusCell` dropdown rendering and color mapping.
+
+### 3. Tag create-on-the-fly and rename propagation
+
+**Test:** On the Tag cell, type a brand-new tag not in the option pool and create it; then rename an existing tag shared by multiple leads.
+**Expected:** New tag created and assigned (CRM-09); rename propagates to all leads sharing the old tag name.
+**Why human:** Requires multi-row DB state and live interaction with OptionMultiSelect.
+
+### 4. Instant client-side search
+
+**Test:** Type a query in the `/admin/leads` search box matching by name/email/company/status/tag.
+**Expected:** Table filters instantly with zero network requests (check DevTools Network tab); "Nessun lead trovato" when no match.
+**Why human:** Requires browser DevTools to confirm zero-roundtrip behavior.
+
+### 5. FollowUpWidget visual Italian-only check
+
+**Test:** View the FollowUpWidget on the admin dashboard in both populated and empty states.
+**Expected:** All visible text is Italian in both states.
+**Why human:** Visual confirmation across conditional render branches.
+
+## Resolution Summary
+
+**5 of 5 success criteria are now fully verified with concrete code evidence**: CRM-08 (inline editing, no modal), CRM-09 (lead tag multi-select with create-on-the-fly, wired in both LeadTable and LeadDetail), CRM-10 (FollowUpWidget fully translated to Italian, no English strings remain), CRM-11 (LeadForm.tsx fully typed with `useForm<CreateLeadInput>()`, zero `as any`/`useForm<any>` in the file), and CRM-12 (SendQuoteModal flow, modal + server action, free of unreachable branches).
+
+**SC5 (CRM-12) gap closed.** The initial verification found `onSubmit`'s dead `if (data.tab === "new") {...}` branch correctly removed by plan 14-03, but flagged one residual unreachable branch: `assignQuoteToLead` in `src/app/admin/leads/actions.ts` still contained `if (parsed.data.generate_new) { return { success: true } }`, dead because the only caller (`SendQuoteModal.tsx`) always passed `generate_new: false`. Per user direction ("Fix it now"), this was closed with a small mechanical edit:
+
+- `src/app/admin/leads/actions.ts`: removed `generate_new: z.boolean()` from `assignQuoteSchema` and the entire dead `if (parsed.data.generate_new) {...}` block from `assignQuoteToLead`.
+- `src/components/admin/leads/SendQuoteModal.tsx`: removed `generate_new` from its local `assignQuoteSchema` duplicate, from `defaultValues`, and from the `assignQuoteToLead(...)` call site.
+- `npx tsc --noEmit` → "No errors found" post-fix.
+- Committed as `fix(14): remove dead generate_new branch from assignQuoteToLead (CRM-12)`.
+
+Note: `SendQuoteModal.tsx`'s own `useForm<any>` / duplicate-schema pattern (WR-06, INFO-level) was intentionally left as-is — it's a typing/duplication concern unrelated to the "unreachable branch" criterion and is tracked separately in the code review.
+
+**5 items require human/browser verification** (interactive UI behavior of inline editing, status dropdown, tag multi-select, instant search, and FollowUpWidget visual rendering) — these cover SC1-3, which are code-verified but benefit from a live interaction pass before considering the phase fully closed in practice.
+
+---
+
+_Verified: 2026-06-14T13:50:00Z_
+_Re-verified: 2026-06-14T13:20:00Z_
+_Verifier: Claude (gsd-verifier / gsd-executor gap-closure)_

.planning/phases/14-crm-attio-style-fix/deferred-items.md

@@ -0,0 +1,25 @@
+# Deferred Items — Phase 14 (crm-attio-style-fix)
+
+Items discovered during execution that are out of scope for the current task/plan and deferred for future cleanup.
+
+## From Plan 14-01
+
+- **`src/app/admin/leads/actions.ts:54`** — pre-existing `@typescript-eslint/no-explicit-any`
+  error on `const updateData: Record<string, any> = { updated_at: new Date() };` inside
+  `updateLead()`. This function predates Phase 14 and is unchanged by 14-01 (Task 2 only
+  appends `updateLeadField`/`addLeadTag`/`removeLeadTag`/`renameLeadTag` after it).
+  `npx eslint src/app/admin/leads/actions.ts` exits 1 solely due to this pre-existing line;
+  the four new actions added in 14-01 introduce zero new lint errors/warnings.
+  Fix: replace `Record<string, any>` with a properly typed partial update object
+  (e.g. `Partial<typeof leads.$inferInsert>` or an explicit interface).
+
+- **`src/lib/admin-queries.ts`** — pre-existing `@typescript-eslint/no-unused-vars` warnings
+  (4x) for imports `settings`, `ServiceCatalog`, `ProjectOffer`, `OfferPhaseService` — these
+  predate Phase 14 and are unrelated to the `getLeadsWithTags`/`getLeadFieldOptions` additions
+  in Task 1.
+
+## From Plan 14-03
+
+| File | Lines | Issue | Reason Deferred |
+|------|-------|-------|------------------|
+| `src/components/admin/leads/SendQuoteModal.tsx` | 39, 48 | `@typescript-eslint/no-explicit-any` on `useForm<any>()` and `onSubmit(data: any)` | Pre-existing (not introduced by CRM-12's dead-branch removal). Attempted fix: typing `useForm<AssignQuoteInput>()` with `AssignQuoteInput = z.infer<typeof assignQuoteSchema>` (local schema has `.optional()`/`.default()` on `generate_new`) triggers a cascading `zodResolver`/`Resolver<...>` generic-incompatibility TS error (3 errors, TS2322/TS2345) between `@hookform/resolvers/zod` and `react-hook-form@7.75`'s 3-generic `Resolver` type — same family of issue fixed for `LeadForm.tsx`'s `FormField` in 14-03 Task 2, but here it surfaces in the resolver/schema layer (input vs output type divergence from `.default()`), not the `FormField` component. Resolving it would require either restructuring `assignQuoteSchema`'s optional/default fields or adding resolver-boundary type assertions — out of scope for CRM-12 (isolated dead-code removal). |

.planning/phases/18-cleanup-consolidamento/18-01-PLAN.md

@@ -0,0 +1,233 @@
+---
+phase: 18-cleanup-consolidamento
+plan: 01
+type: execute
+wave: 1
+depends_on: []
+files_modified:
+  - src/components/admin/AdminSidebar.tsx
+  - src/app/admin/forecast/page.tsx
+  - src/app/admin/quotes/new/page.tsx
+  - src/components/admin/leads/SendQuoteModal.tsx
+  - src/app/admin/projects/project-actions.ts
+autonomous: true
+requirements:
+  - CLEAN-01
+  - CLEAN-02
+
+must_haves:
+  truths:
+    - "La rotta /admin/forecast non è più raggiungibile (404 o redirect)"
+    - "La voce 'Forecast' non appare più nella sidebar admin"
+    - "La rotta /admin/quotes/new non è più raggiungibile"
+    - "SendQuoteModal non ha più il bottone che naviga a /admin/quotes/new"
+    - "project-actions.ts non chiama più revalidatePath('/admin/forecast')"
+  artifacts:
+    - path: "src/components/admin/AdminSidebar.tsx"
+      provides: "Sidebar senza voce Forecast"
+      contains: "NON deve contenere href: \"/admin/forecast\""
+    - path: "src/app/admin/forecast/page.tsx"
+      provides: "File eliminato (rotta rimossa)"
+    - path: "src/app/admin/quotes/new/page.tsx"
+      provides: "File eliminato (rotta rimossa)"
+    - path: "src/components/admin/leads/SendQuoteModal.tsx"
+      provides: "Modal senza bottone navigazione a quotes/new"
+    - path: "src/app/admin/projects/project-actions.ts"
+      provides: "Server actions senza revalidatePath forecast"
+  key_links:
+    - from: "AdminSidebar.tsx NAV_ITEMS"
+      to: "/admin/forecast"
+      via: "href nel NAV_ITEMS array"
+      pattern: "forecast"
+    - from: "SendQuoteModal.tsx"
+      to: "/admin/quotes/new"
+      via: "window.location.href"
+      pattern: "quotes/new"
+---
+
+<objective>
+Rimuovere le rotte /admin/forecast e /admin/quotes/new e tutti i loro entry point.
+
+Purpose: CLEAN-01 e CLEAN-02 — eliminare feature obsolete prima del Sales Loop. Il forecast è sostituito dal loop AI; il quote builder manuale è sostituito dall'agente AI in Phase 21.
+Output: Due rotte rimosse, sidebar pulita, SendQuoteModal senza entry point obsoleto, project-actions.ts senza revalidatePath forecast.
+</objective>
+
+<execution_context>
+@$HOME/.claude/get-shit-done/workflows/execute-plan.md
+@$HOME/.claude/get-shit-done/templates/summary.md
+</execution_context>
+
+<context>
+@.planning/PROJECT.md
+@.planning/ROADMAP.md
+@.planning/STATE.md
+</context>
+
+<tasks>
+
+<task type="auto">
+  <name>Task 1: Rimuovi rotta Forecast — file, sidebar, revalidatePath (CLEAN-01)</name>
+
+  <read_first>
+    - src/components/admin/AdminSidebar.tsx — array NAV_ITEMS, riga con href: "/admin/forecast"
+    - src/app/admin/forecast/page.tsx — conferma contenuto prima di eliminare
+    - src/app/admin/projects/project-actions.ts — righe 138, 145, 161 con revalidatePath("/admin/forecast")
+  </read_first>
+
+  <files>
+    src/components/admin/AdminSidebar.tsx,
+    src/app/admin/projects/project-actions.ts
+  </files>
+
+  <action>
+    1. In AdminSidebar.tsx: rimuovi la riga dell'oggetto Forecast dall'array NAV_ITEMS:
+       `{ href: "/admin/forecast", label: "Forecast", icon: TrendingUp },`
+       Rimuovi anche l'import `TrendingUp` da lucide-react se non è usato altrove nel file.
+
+    2. In project-actions.ts: rimuovi le tre chiamate `revalidatePath("/admin/forecast")` alle righe ~138, ~145, ~161.
+       Ogni funzione che la contiene (addProjectOffer, removeProjectOffer, updateProjectOfferTotal)
+       mantiene le proprie altre revalidatePath (es. `/admin/projects/${projectId}`) — togli SOLO le righe forecast.
+
+    3. Elimina il file della rotta forecast:
+       - src/app/admin/forecast/page.tsx
+       Elimina anche la directory se è rimasta vuota:
+       - src/app/admin/forecast/ (directory)
+
+    NON toccare: tabelle DB, lib/forecast-queries.ts (deadweight tollerabile, non blocca nulla),
+    nessun'altra pagina o componente.
+  </action>
+
+  <verify>
+    <automated>
+      grep -r "admin/forecast" /Users/simonecavalli/Vault/IAMCAVALLI/src --include="*.tsx" --include="*.ts" | grep -v "node_modules" | grep -v ".next" | wc -l
+    </automated>
+    Risultato atteso: 0 righe (nessun riferimento a /admin/forecast rimasto nel codice sorgente).
+
+    Verifica aggiuntiva sidebar:
+    grep "TrendingUp\|forecast" /Users/simonecavalli/Vault/IAMCAVALLI/src/components/admin/AdminSidebar.tsx
+    Risultato atteso: nessun output (zero match).
+  </verify>
+
+  <acceptance_criteria>
+    - grep -r "admin/forecast" src/ produce 0 risultati (esclusi node_modules e .next)
+    - Il file src/app/admin/forecast/page.tsx non esiste più
+    - AdminSidebar.tsx non contiene la stringa "forecast" né "TrendingUp" (se rimosso)
+    - project-actions.ts non contiene revalidatePath("/admin/forecast")
+  </acceptance_criteria>
+
+  <done>
+    La voce Forecast è assente dalla sidebar, la rotta /admin/forecast è 404, nessun server action
+    chiama revalidatePath su quella rotta.
+  </done>
+</task>
+
+<task type="auto">
+  <name>Task 2: Rimuovi rotta Quote Builder manuale e il suo entry point (CLEAN-02)</name>
+
+  <read_first>
+    - src/app/admin/quotes/new/page.tsx — conferma contenuto prima di eliminare
+    - src/components/admin/leads/SendQuoteModal.tsx — riga ~120 con window.location.href = /admin/quotes/new
+    - src/components/admin/quotes/QuoteBuilderForm.tsx — identifica che è usato solo da quotes/new
+    - src/components/admin/quotes/OfferSelector.tsx — identifica che è usato solo da QuoteBuilderForm
+    - src/components/admin/quotes/PriceOverrideInput.tsx — stesso
+    - src/components/admin/quotes/QuotePreview.tsx — stesso
+  </read_first>
+
+  <files>
+    src/app/admin/quotes/new/page.tsx,
+    src/components/admin/leads/SendQuoteModal.tsx,
+    src/components/admin/quotes/QuoteBuilderForm.tsx,
+    src/components/admin/quotes/OfferSelector.tsx,
+    src/components/admin/quotes/PriceOverrideInput.tsx,
+    src/components/admin/quotes/QuotePreview.tsx
+  </files>
+
+  <action>
+    1. In SendQuoteModal.tsx: trova il blocco che naviga a /admin/quotes/new:
+       `window.location.href = /admin/quotes/new?lead_id=${leadId};`
+       Rimuovi il pulsante / branch che lo contiene. Se il modal ha una logica "crea nuovo preventivo"
+       che porta a quella rotta, rimuovi quella branch. Mantieni tutto il resto del modal intatto
+       (il flusso "preventivo esistente" non va toccato).
+       Prima di modificare, leggi il file per capire la struttura esatta del branch da eliminare.
+
+    2. Elimina i file della rotta e i componenti esclusivi:
+       - src/app/admin/quotes/new/page.tsx
+       - src/components/admin/quotes/QuoteBuilderForm.tsx
+       - src/components/admin/quotes/OfferSelector.tsx
+       - src/components/admin/quotes/PriceOverrideInput.tsx
+       - src/components/admin/quotes/QuotePreview.tsx
+       Elimina le directory rimaste vuote:
+       - src/app/admin/quotes/new/ (directory)
+       - src/components/admin/quotes/ (directory, solo se completamente vuota dopo la rimozione)
+
+    NON toccare: src/app/admin/quotes/ se esistono altre sotto-rotte (verifica prima),
+    lib/admin-queries.ts (getAllOfferMacrosWithMicros — usata altrove), DB.
+
+    ATTENZIONE — verifica preventiva: prima di eliminare src/components/admin/quotes/,
+    esegui: grep -r "quotes/" src/components --include="*.tsx" --include="*.ts"
+    per confermare che i quattro componenti sopra non sono importati da altri file al di fuori di quotes/new.
+    Se ci sono altri consumer, NON eliminare il componente e segnala in SUMMARY.
+  </action>
+
+  <verify>
+    <automated>
+      grep -r "quotes/new" /Users/simonecavalli/Vault/IAMCAVALLI/src --include="*.tsx" --include="*.ts" | grep -v "node_modules" | grep -v ".next" | wc -l
+    </automated>
+    Risultato atteso: 0 righe.
+
+    Verifica esistenza file:
+    test -f /Users/simonecavalli/Vault/IAMCAVALLI/src/app/admin/quotes/new/page.tsx && echo "ESISTE_ANCORA" || echo "OK_RIMOSSO"
+    Risultato atteso: OK_RIMOSSO
+
+    Verifica SendQuoteModal:
+    grep "quotes/new" /Users/simonecavalli/Vault/IAMCAVALLI/src/components/admin/leads/SendQuoteModal.tsx
+    Risultato atteso: nessun output.
+  </verify>
+
+  <acceptance_criteria>
+    - grep -r "quotes/new" src/ produce 0 risultati
+    - src/app/admin/quotes/new/page.tsx non esiste più
+    - src/components/admin/quotes/QuoteBuilderForm.tsx non esiste più
+    - SendQuoteModal.tsx non contiene la stringa "quotes/new"
+  </acceptance_criteria>
+
+  <done>
+    La rotta /admin/quotes/new è 404, il pulsante di navigazione nel SendQuoteModal è rimosso,
+    i componenti esclusivi del quote builder sono eliminati.
+  </done>
+</task>
+
+</tasks>
+
+<threat_model>
+## Trust Boundaries
+
+| Boundary | Description |
+|----------|-------------|
+| admin UI → file system | Operazioni di eliminazione file irreversibili |
+
+## STRIDE Threat Register
+
+| Threat ID | Category | Component | Disposition | Mitigation Plan |
+|-----------|----------|-----------|-------------|-----------------|
+| T-18-01 | Tampering | project-actions.ts | accept | Rimozione di sole righe revalidatePath inerte — nessun path di dati toccato; le funzioni restano funzionali |
+| T-18-02 | Denial of Service | SendQuoteModal.tsx | mitigate | Leggere il file prima di modificare per evitare di rompere il flusso "preventivo esistente" che resta necessario |
+</threat_model>
+
+<verification>
+Al termine del piano:
+1. `npm run build` deve completare senza errori TypeScript (nessun import rotto)
+2. `grep -r "admin/forecast" src/` → 0 risultati
+3. `grep -r "quotes/new" src/` → 0 risultati
+4. La sidebar admin non mostra la voce "Forecast"
+</verification>
+
+<success_criteria>
+- CLEAN-01: /admin/forecast → 404, sidebar senza voce Forecast, project-actions.ts senza revalidatePath forecast
+- CLEAN-02: /admin/quotes/new → 404, SendQuoteModal senza navigazione a quotes/new, componenti quotes/ rimossi
+- Build TypeScript pulita (nessun import broken)
+</success_criteria>
+
+<output>
+After completion, create `.planning/phases/18-cleanup-consolidamento/18-01-SUMMARY.md`
+</output>

.planning/phases/18-cleanup-consolidamento/18-01-SUMMARY.md

@@ -0,0 +1,156 @@
+---
+phase: 18-cleanup-consolidamento
+plan: "01"
+subsystem: ui
+tags: [next.js, admin, cleanup, sidebar, server-actions]
+
+requires: []
+provides:
+  - Forecast route removed (/admin/forecast → 404)
+  - Admin sidebar without Forecast entry
+  - project-actions.ts without revalidatePath forecast calls
+  - Quote builder route removed (/admin/quotes/new → 404)
+  - SendQuoteModal without navigation to quotes/new
+  - QuoteBuilderForm, OfferSelector, PriceOverrideInput, QuotePreview components deleted
+affects: [phase-21-ai-quote-agent, any future admin nav changes]
+
+tech-stack:
+  added: []
+  patterns:
+    - "Dead-code deletion: remove page files + directories + all entry points atomically before Sales Loop phase"
+
+key-files:
+  created: []
+  modified:
+    - src/components/admin/AdminSidebar.tsx
+    - src/app/admin/projects/project-actions.ts
+    - src/components/admin/leads/SendQuoteModal.tsx
+    - src/lib/admin-queries.ts
+  deleted:
+    - src/app/admin/forecast/page.tsx
+    - src/app/admin/quotes/new/page.tsx
+    - src/app/admin/quotes/new/actions.ts
+    - src/components/admin/quotes/QuoteBuilderForm.tsx
+    - src/components/admin/quotes/OfferSelector.tsx
+    - src/components/admin/quotes/PriceOverrideInput.tsx
+    - src/components/admin/quotes/QuotePreview.tsx
+
+key-decisions:
+  - "Kept lib/forecast-queries.ts and lib/quote-actions.ts as tolerable deadweight — no broken imports, no consumer"
+  - "SendQuoteModal Tabs UI replaced with flat single-form layout (only 'existing' flow remains)"
+  - "quotes/new/actions.ts (re-export shim) deleted along with page since its only consumer was QuoteBuilderForm"
+  - "Stale JSDoc comment in admin-queries.ts referencing /admin/quotes/new cleaned up (Rule 1 auto-fix)"
+
+patterns-established:
+  - "Cleanup tasks: always grep for all entry points (revalidatePath, navigation, JSDoc) before marking done"
+
+requirements-completed: [CLEAN-01, CLEAN-02]
+
+duration: 12min
+completed: 2026-06-19
+---
+
+# Phase 18 Plan 01: Cleanup — Remove Forecast and Manual Quote Builder Routes Summary
+
+**Deleted /admin/forecast and /admin/quotes/new routes with all entry points (sidebar, revalidatePath, navigation button, exclusive components) to clear the codebase for the Sales Loop AI phase.**
+
+## Performance
+
+- **Duration:** ~12 min
+- **Started:** 2026-06-19T10:04:00Z
+- **Completed:** 2026-06-19T10:16:00Z
+- **Tasks:** 2
+- **Files modified/deleted:** 11
+
+## Accomplishments
+
+- Removed Forecast route: deleted `src/app/admin/forecast/page.tsx`, removed sidebar nav entry and `TrendingUp` import, stripped 3 `revalidatePath("/admin/forecast")` calls from project-actions.ts
+- Removed Quote Builder route: deleted `quotes/new/page.tsx`, `quotes/new/actions.ts`, and all 4 exclusive components (QuoteBuilderForm, OfferSelector, PriceOverrideInput, QuotePreview)
+- Simplified SendQuoteModal from two-tab layout to single flat form — "Crea Nuovo" tab and `window.location` navigation removed entirely; "existing quote" flow unchanged
+- Build passes clean: 0 TypeScript errors, 0 broken imports
+
+## Task Commits
+
+1. **Task 1: Rimuovi rotta Forecast** - `7d88409` (chore)
+2. **Task 2: Rimuovi rotta Quote Builder** - `268f56c` (chore)
+
+**Plan metadata:** (see final commit below)
+
+## Files Created/Modified
+
+- `src/components/admin/AdminSidebar.tsx` - Removed Forecast NAV_ITEMS entry and TrendingUp import
+- `src/app/admin/projects/project-actions.ts` - Removed 3 revalidatePath("/admin/forecast") calls
+- `src/components/admin/leads/SendQuoteModal.tsx` - Removed "Crea Nuovo" tab and quotes/new navigation
+- `src/lib/admin-queries.ts` - Removed stale JSDoc comment referencing /admin/quotes/new
+
+**Deleted:**
+- `src/app/admin/forecast/page.tsx`
+- `src/app/admin/quotes/new/page.tsx`
+- `src/app/admin/quotes/new/actions.ts`
+- `src/components/admin/quotes/QuoteBuilderForm.tsx`
+- `src/components/admin/quotes/OfferSelector.tsx`
+- `src/components/admin/quotes/PriceOverrideInput.tsx`
+- `src/components/admin/quotes/QuotePreview.tsx`
+
+## Decisions Made
+
+- Kept `lib/forecast-queries.ts` and `lib/quote-actions.ts` intact — they have no broken imports and are tolerable deadweight; removing them was explicitly out of scope per the plan
+- Deleted `quotes/new/actions.ts` (not listed in plan) because it was a server re-export shim with `QuoteBuilderForm` as its only consumer — Rule 3 auto-fix (would have blocked clean directory removal)
+- Stale JSDoc comment in `admin-queries.ts` updated — Rule 1 auto-fix (stale reference counts as dead code)
+
+## Deviations from Plan
+
+### Auto-fixed Issues
+
+**1. [Rule 1 - Bug] Removed stale JSDoc comment referencing deleted route**
+- **Found during:** Task 2 (final grep verification)
+- **Issue:** `admin-queries.ts` line 862 had a `* Used by: /admin/quotes/new form (OfferSelector dropdown)` comment — the route no longer exists
+- **Fix:** Removed the stale line from the JSDoc block
+- **Files modified:** src/lib/admin-queries.ts
+- **Verification:** `grep -r "quotes/new" src/` → 0 results
+- **Committed in:** 268f56c (Task 2 commit)
+
+**2. [Rule 3 - Blocking] Deleted quotes/new/actions.ts (unlisted file)**
+- **Found during:** Task 2 — directory was non-empty after deleting page.tsx
+- **Issue:** `src/app/admin/quotes/new/actions.ts` was a re-export shim (`export { createQuote } from "@/lib/quote-actions"`) with QuoteBuilderForm as its only consumer. It would leave a broken directory if not removed.
+- **Fix:** Confirmed no other consumers via grep, then deleted the file
+- **Files modified:** src/app/admin/quotes/new/actions.ts (deleted)
+- **Verification:** `grep -r "createQuote" src/` shows only lib/quote-actions.ts (the source) — no broken references
+- **Committed in:** 268f56c (Task 2 commit)
+
+---
+
+**Total deviations:** 2 auto-fixed (1 Rule 1 stale comment, 1 Rule 3 blocking unlisted file)
+**Impact on plan:** Both auto-fixes necessary for completeness and clean directory state. No scope creep.
+
+## Issues Encountered
+
+- A linter hook reverted `SendQuoteModal.tsx` after the first Write. On re-read, the linter had actually applied the intended changes (removed Tabs imports, removed tab state, flattened to single form). Confirmed the file was correct before staging.
+
+## User Setup Required
+
+None — no external service configuration required.
+
+## Next Phase Readiness
+
+- CLEAN-01 and CLEAN-02 complete: codebase is clear of forecast and manual quote builder dead routes
+- Ready for Phase 21 (AI Quote Agent) which will provide the replacement quote creation flow
+- `lib/forecast-queries.ts` and `lib/quote-actions.ts` remain as inert deadweight — can be cleaned in a future pass if desired
+
+---
+*Phase: 18-cleanup-consolidamento*
+*Completed: 2026-06-19*
+
+## Self-Check: PASSED
+
+- `src/components/admin/AdminSidebar.tsx` — FOUND (modified)
+- `src/app/admin/projects/project-actions.ts` — FOUND (modified)
+- `src/components/admin/leads/SendQuoteModal.tsx` — FOUND (modified)
+- `src/lib/admin-queries.ts` — FOUND (modified)
+- `src/app/admin/forecast/page.tsx` — MISSING (deleted as intended)
+- `src/app/admin/quotes/new/page.tsx` — MISSING (deleted as intended)
+- Commit 7d88409 — FOUND
+- Commit 268f56c — FOUND
+- `grep -r "admin/forecast" src/` → 0 results
+- `grep -r "quotes/new" src/` → 0 results
+- Build: 0 errors

.planning/phases/18-cleanup-consolidamento/18-02-PLAN.md

@@ -0,0 +1,345 @@
+---
+phase: 18-cleanup-consolidamento
+plan: 02
+type: execute
+wave: 1
+depends_on: []
+files_modified:
+  - src/app/admin/page.tsx
+  - src/app/admin/analytics/page.tsx
+  - src/components/admin/YearSelector.tsx
+autonomous: true
+requirements:
+  - CLEAN-03
+
+must_haves:
+  truths:
+    - "La Dashboard /admin mostra le statistiche annuali (MetricCard fatturato, grafico mensile, time tracking)"
+    - "La rotta /admin/analytics non esiste più (404)"
+    - "Il selettore anno naviga a /admin?year=X, non a /admin/analytics?year=X"
+    - "Non esiste più il file src/app/admin/analytics/page.tsx"
+  artifacts:
+    - path: "src/app/admin/page.tsx"
+      provides: "Dashboard con sezione Statistiche integrata"
+      contains: "getAnalyticsByYear"
+    - path: "src/app/admin/analytics/page.tsx"
+      provides: "File eliminato"
+    - path: "src/components/admin/YearSelector.tsx"
+      provides: "YearSelector che naviga a /admin?year=Y"
+      contains: "router.push(`/admin?year=${y}`)"
+  key_links:
+    - from: "src/app/admin/page.tsx"
+      to: "lib/analytics-queries"
+      via: "import getAnalyticsByYear, getMonthlyCollected, getAvailableYears, getTimeByClient, getTotalTrackedHours"
+      pattern: "analytics-queries"
+    - from: "YearSelector"
+      to: "/admin"
+      via: "router.push"
+      pattern: "router.push.*admin"
+---
+
+<objective>
+Fondere le statistiche di /admin/analytics nella Dashboard /admin ed eliminare la rotta duplicata.
+
+Purpose: CLEAN-03 — unica vista admin per statistiche. Elimina il doppione /admin/analytics e porta
+tutto il suo contenuto (MetricCard economiche + MonthlyChart + time tracking per cliente) nella dashboard
+esistente, sotto le KPI card e il feed attività già presenti.
+Output: /admin mostra statistiche annuali, /admin/analytics → 404, YearSelector aggiornato.
+</objective>
+
+<execution_context>
+@$HOME/.claude/get-shit-done/workflows/execute-plan.md
+@$HOME/.claude/get-shit-done/templates/summary.md
+</execution_context>
+
+<context>
+@.planning/PROJECT.md
+@.planning/ROADMAP.md
+@.planning/STATE.md
+</context>
+
+<interfaces>
+<!-- Estratto da src/app/admin/analytics/page.tsx — contratti da portare nella dashboard -->
+
+Imports da copiare in admin/page.tsx:
+```typescript
+import {
+  getAnalyticsByYear,
+  getMonthlyCollected,
+  getAvailableYears,
+  getTimeByClient,
+  getTotalTrackedHours,
+} from "@/lib/analytics-queries";
+import { YearSelector, MonthlyChart } from "@/components/admin/YearSelector";
+```
+
+Funzioni helper da copiare in admin/page.tsx:
+```typescript
+function fmtEur(n: number) { /* formatta in EUR it-IT */ }
+function fmtSeconds(s: number): string { /* h m format */ }
+```
+ATTENZIONE: admin/page.tsx ha già una funzione `fmtEur` (ma accetta `string`, non `number`).
+Rinominare una delle due o unificarle — preferire la versione che accetta `number` (più robusta)
+e aggiornare i consumer nel file.
+
+Componente MetricCard (da analytics/page.tsx) — da spostare in admin/page.tsx:
+```typescript
+function MetricCard({ label, value, sub, accent }: {
+  label: string; value: string; sub?: string; accent?: boolean;
+}) { ... }
+```
+Questo componente è diverso da KpiCard già presente in admin/page.tsx:
+KpiCard ha icona + colore; MetricCard ha stile accent verde o bianco con bordo.
+Mantieni ENTRAMBI (scopi diversi): KpiCard per le 4 metriche operative in cima,
+MetricCard per le statistiche economiche annuali nella nuova sezione.
+
+Firma del componente analytics/page.tsx (async, searchParams):
+```typescript
+export default async function AnalyticsPage({
+  searchParams,
+}: {
+  searchParams: Promise<{ year?: string }>;
+}) {
+  const { year: yearParam } = await searchParams;
+  const year = parseInt(yearParam ?? "") || new Date().getFullYear();
+  ...
+}
+```
+La stessa logica `year` va aggiunta al componente AdminDashboard in admin/page.tsx.
+</interfaces>
+
+<tasks>
+
+<task type="auto">
+  <name>Task 1: Integra statistiche annuali nella Dashboard (CLEAN-03)</name>
+
+  <read_first>
+    - src/app/admin/page.tsx — struttura attuale (KpiCard, FollowUpWidget, activity feed, fmtEur esistente)
+    - src/app/admin/analytics/page.tsx — tutto il contenuto da portare (già in contesto da discovery)
+    - src/components/admin/YearSelector.tsx — YearSelector e MonthlyChart (già in contesto da discovery)
+  </read_first>
+
+  <files>
+    src/app/admin/page.tsx,
+    src/components/admin/YearSelector.tsx
+  </files>
+
+  <action>
+    STEP 1 — Aggiorna AdminDashboard in src/app/admin/page.tsx:
+
+    a) Aggiungi alla firma del componente il parametro searchParams (come in analytics/page.tsx):
+       ```typescript
+       export default async function AdminDashboard({
+         searchParams,
+       }: {
+         searchParams: Promise<{ year?: string }>;
+       }) {
+         const { year: yearParam } = await searchParams;
+         const year = parseInt(yearParam ?? "") || new Date().getFullYear();
+       ```
+
+    b) Aggiungi gli import mancanti in cima al file:
+       ```typescript
+       import {
+         getAnalyticsByYear,
+         getMonthlyCollected,
+         getAvailableYears,
+         getTimeByClient,
+         getTotalTrackedHours,
+       } from "@/lib/analytics-queries";
+       import { YearSelector, MonthlyChart } from "@/components/admin/YearSelector";
+       ```
+
+    c) Aggiungi le query analytics al Promise.all esistente (o crea un secondo await per separare
+       le query di diversa frequenza — è accettabile avere due await distinti per chiarezza):
+       ```typescript
+       const [data, monthly, availableYears, timeByClient, totalHours] = await Promise.all([
+         getAnalyticsByYear(year),
+         getMonthlyCollected(year),
+         getAvailableYears(),
+         getTimeByClient(year),
+         getTotalTrackedHours(year),
+       ]);
+       ```
+
+    d) Copia la funzione MetricCard da analytics/page.tsx nel file (accanto a KpiCard).
+
+    e) Risolvi il conflitto fmtEur:
+       - La versione attuale in admin/page.tsx accetta `string` e fa `parseFloat(val)`.
+       - Quella in analytics/page.tsx accetta `number`.
+       - Unifica in una sola funzione che accetta `number`, aggiorna i consumer esistenti
+         nel file che passavano una stringa (es. `fmtEur(kpi.revenueTotale)` e
+         `fmtEur(kpi.pagamentiInSospeso)`) convertendo a number dove necessario,
+         oppure mantieni entrambe con nomi distinti (`fmtEurStr` / `fmtEurNum`).
+         Scegli l'approccio più pulito senza rompere i KPI card esistenti.
+
+    f) Aggiungi la sezione Statistiche DOPO il feed attività esistente (mantieni tutto quello
+       che c'era prima intatto — FollowUpWidget, KPI card, activity feed):
+       ```tsx
+       {/* ── SEZIONE STATISTICHE ANNUALI ── */}
+       <div className="mt-10 space-y-10">
+         <div className="flex items-center justify-between">
+           <div>
+             <h2 className="text-xl font-bold text-gray-900">Statistiche</h2>
+             <p className="text-sm text-gray-400 mt-0.5">Panoramica per anno</p>
+           </div>
+           <YearSelector currentYear={year} availableYears={availableYears} />
+         </div>
+
+         {/* Sezione economica */}
+         <div className="space-y-4">
+           <h3 className="text-sm font-bold text-[#71717a] uppercase tracking-wider">Fatturato</h3>
+           <div className="grid grid-cols-2 lg:grid-cols-4 gap-4">
+             <MetricCard label="Contrattualizzato" value={fmtEur(data.contracted)}
+               sub={`${data.clientsAcquired} client${data.clientsAcquired === 1 ? "e" : "i"}`} accent />
+             <MetricCard label="Incassato" value={fmtEur(data.collected)}
+               sub={`${collectedPct}% del contrattualizzato`} />
+             <MetricCard label="Da incassare" value={fmtEur(data.pending)} sub="Tutti gli anni" />
+             <MetricCard label="Clienti acquisiti" value={String(data.clientsAcquired)} sub={`Anno ${year}`} />
+           </div>
+           <MonthlyChart data={monthly} year={year} />
+         </div>
+
+         {/* Sezione time tracking */}
+         <div className="space-y-4">
+           <h3 className="text-sm font-bold text-[#71717a] uppercase tracking-wider">Tempo tracciato</h3>
+           <div className="grid grid-cols-2 lg:grid-cols-4 gap-4">
+             <MetricCard label="Ore totali" value={`${totalHours}h`} sub={`Anno ${year}`} accent />
+           </div>
+           {/* ... tabella ore per cliente (copia da analytics/page.tsx) ... */}
+         </div>
+       </div>
+       ```
+       Ricopia fedelmente il blocco "ore per cliente" da analytics/page.tsx (righe 127-160)
+       nella sezione time tracking della dashboard.
+
+       Calcola collectedPct prima del return:
+       ```typescript
+       const collectedPct = data.contracted > 0
+         ? Math.round((data.collected / data.contracted) * 100) : 0;
+       const maxClientSeconds = timeByClient[0]?.totalSeconds ?? 1;
+       ```
+
+    STEP 2 — Aggiorna YearSelector per navigare verso /admin:
+    In src/components/admin/YearSelector.tsx, riga ~18:
+    ```typescript
+    // PRIMA:
+    router.push(`/admin/analytics?year=${y}`);
+    // DOPO:
+    router.push(`/admin?year=${y}`);
+    ```
+
+    NON modificare: MonthlyChart (rimane nello stesso file), struttura esistente della dashboard
+    (FollowUpWidget, KPI card, activity feed — tutto invariato sopra la nuova sezione).
+  </action>
+
+  <verify>
+    <automated>
+      grep "getAnalyticsByYear\|getMonthlyCollected\|getAvailableYears" /Users/simonecavalli/Vault/IAMCAVALLI/src/app/admin/page.tsx | wc -l
+    </automated>
+    Risultato atteso: 3 (tutte e tre le query importate e usate).
+
+    Verifica YearSelector:
+    grep "router.push" /Users/simonecavalli/Vault/IAMCAVALLI/src/components/admin/YearSelector.tsx
+    Risultato atteso: contiene "/admin?year=" e NON "/admin/analytics".
+  </verify>
+
+  <acceptance_criteria>
+    - src/app/admin/page.tsx importa da @/lib/analytics-queries
+    - src/app/admin/page.tsx importa YearSelector e MonthlyChart
+    - YearSelector.tsx naviga a /admin?year=Y (non a /admin/analytics)
+    - Il file compila senza errori TypeScript
+  </acceptance_criteria>
+
+  <done>
+    La Dashboard mostra le statistiche annuali con selettore anno; il selettore naviga
+    correttamente a /admin?year=X.
+  </done>
+</task>
+
+<task type="auto">
+  <name>Task 2: Elimina rotta /admin/analytics (CLEAN-03)</name>
+
+  <read_first>
+    - src/app/admin/analytics/page.tsx — conferma che non è più necessario (Task 1 ha già portato
+      tutto il contenuto nella dashboard)
+  </read_first>
+
+  <files>
+    src/app/admin/analytics/page.tsx
+  </files>
+
+  <action>
+    1. Verifica preventiva — assicurati che nessun altro file nel progetto importi da
+       src/app/admin/analytics/page.tsx direttamente (è una page, non un modulo, quindi
+       non dovrebbe avere consumer diretti — ma controlla):
+       grep -r "admin/analytics" src/ --include="*.tsx" --include="*.ts"
+       Se trovi riferimenti diversi da YearSelector (già aggiornato in Task 1), risolvili prima.
+
+    2. Elimina:
+       - src/app/admin/analytics/page.tsx
+       - Directory src/app/admin/analytics/ (se vuota dopo la rimozione del file)
+
+    NON eliminare: lib/analytics-queries.ts (ancora importata dalla dashboard),
+    src/components/admin/YearSelector.tsx (ancora usata dalla dashboard).
+  </action>
+
+  <verify>
+    <automated>
+      test -f /Users/simonecavalli/Vault/IAMCAVALLI/src/app/admin/analytics/page.tsx && echo "ESISTE_ANCORA" || echo "OK_RIMOSSO"
+    </automated>
+    Risultato atteso: OK_RIMOSSO
+
+    Verifica nessun riferimento rimasto:
+    grep -r "admin/analytics" /Users/simonecavalli/Vault/IAMCAVALLI/src --include="*.tsx" --include="*.ts" | grep -v "node_modules" | grep -v ".next"
+    Risultato atteso: 0 righe.
+  </verify>
+
+  <acceptance_criteria>
+    - src/app/admin/analytics/page.tsx non esiste più
+    - grep -r "admin/analytics" src/ produce 0 risultati
+    - npm run build completa senza errori
+  </acceptance_criteria>
+
+  <done>
+    La rotta /admin/analytics è eliminata. Navigarci restituisce 404.
+    Tutte le statistiche sono accessibili alla Dashboard /admin.
+  </done>
+</task>
+
+</tasks>
+
+<threat_model>
+## Trust Boundaries
+
+| Boundary | Description |
+|----------|-------------|
+| admin/page.tsx → analytics-queries | Aggiunta di query server-side già esistenti — nessuna nuova superficie |
+
+## STRIDE Threat Register
+
+| Threat ID | Category | Component | Disposition | Mitigation Plan |
+|-----------|----------|-----------|-------------|-----------------|
+| T-18-03 | Information Disclosure | admin/page.tsx | accept | Le statistiche erano già accessibili a /admin/analytics — stessa autenticazione Auth.js, nessuna nuova esposizione |
+| T-18-04 | Tampering | YearSelector.tsx | accept | Il cambio da /admin/analytics a /admin nella navigazione è una semplice redirect di path — nessun dato mutato |
+</threat_model>
+
+<verification>
+Al termine del piano:
+1. `npm run build` completa senza errori TypeScript
+2. `grep -r "admin/analytics" src/` → 0 risultati
+3. La Dashboard /admin mostra le sezioni Statistiche con selettore anno
+4. Navigare a /admin/analytics restituisce 404
+5. YearSelector porta a /admin?year=X quando si cambia anno
+</verification>
+
+<success_criteria>
+- CLEAN-03: /admin mostra le statistiche annuali (MetricCard + MonthlyChart + time tracking)
+- /admin/analytics → 404 (rotta eliminata)
+- YearSelector naviga a /admin?year=X
+- Build TypeScript pulita
+</success_criteria>
+
+<output>
+After completion, create `.planning/phases/18-cleanup-consolidamento/18-02-SUMMARY.md`
+</output>

.planning/phases/18-cleanup-consolidamento/18-02-SUMMARY.md

@@ -0,0 +1,113 @@
+---
+phase: 18-cleanup-consolidamento
+plan: "02"
+subsystem: ui
+tags: [nextjs, analytics, dashboard, react, tailwind]
+
+# Dependency graph
+requires:
+  - phase: analytics-queries
+    provides: getAnalyticsByYear, getMonthlyCollected, getAvailableYears, getTimeByClient, getTotalTrackedHours
+provides:
+  - Admin dashboard at /admin integrates annual statistics (MetricCard, MonthlyChart, time tracking per client)
+  - /admin/analytics route deleted — returns 404
+  - YearSelector navigates to /admin?year=Y
+affects: [18-cleanup-consolidamento, admin-ui, analytics]
+
+# Tech tracking
+tech-stack:
+  added: []
+  patterns:
+    - Server page accepts searchParams for year filtering
+    - Analytics queries co-located with dashboard queries in same async page
+
+key-files:
+  created: []
+  modified:
+    - src/app/admin/page.tsx
+    - src/components/admin/YearSelector.tsx
+  deleted:
+    - src/app/admin/analytics/page.tsx
+
+key-decisions:
+  - "Unified fmtEur to accept number (analytics version); KPI card callers wrapped with parseFloat() for string DB values"
+  - "Two separate awaits in AdminDashboard: getDashboardStats() first, then analytics Promise.all — acceptable for clarity"
+  - "Stale .next cache (OfferSelector.tsx reference) cleared before final build — pre-existing issue, not introduced by this plan"
+
+patterns-established:
+  - "Statistics section appended after activity feed — existing dashboard structure preserved above new section"
+
+requirements-completed:
+  - CLEAN-03
+
+# Metrics
+duration: 15min
+completed: 2026-06-19
+---
+
+# Phase 18 Plan 02: Consolidate Analytics Dashboard Summary
+
+**Merged /admin/analytics statistics (MetricCard, MonthlyChart, per-client time tracking) into /admin dashboard and deleted the duplicate route**
+
+## Performance
+
+- **Duration:** ~15 min
+- **Started:** 2026-06-19T10:04:00Z
+- **Completed:** 2026-06-19T10:19:00Z
+- **Tasks:** 2
+- **Files modified:** 3 (2 modified, 1 deleted)
+
+## Accomplishments
+- AdminDashboard now shows annual statistics section below activity feed: MetricCard economic metrics, MonthlyChart, and per-client time tracking bars
+- /admin/analytics route deleted — navigating there returns 404
+- YearSelector updated to navigate to /admin?year=Y instead of /admin/analytics?year=Y
+- fmtEur unified to number-accepting version (more robust); existing KPI card string values wrapped with parseFloat()
+
+## Task Commits
+
+1. **Task 1: Integra statistiche annuali nella Dashboard** — included in `14bdbab` (feat)
+2. **Task 2: Elimina rotta /admin/analytics** — included in `14bdbab` (feat)
+
+**Plan metadata:** (docs commit below)
+
+## Files Created/Modified
+- `src/app/admin/page.tsx` — Added analytics imports, searchParams, analytics queries, MetricCard, fmtSeconds, fmtEur(number), statistics section
+- `src/components/admin/YearSelector.tsx` — Updated router.push from /admin/analytics to /admin
+- `src/app/admin/analytics/page.tsx` — Deleted
+
+## Decisions Made
+- Unified `fmtEur` to the `number` version from analytics (cleaner, no `parseFloat` internally). Updated the two KPI card callers that received string values from DB to pass `parseFloat(kpi.revenueTotale)` and `parseFloat(kpi.pagamentiInSospeso)`.
+- Used two sequential awaits (getDashboardStats first, then analytics Promise.all) rather than one large combined Promise.all — avoids mixing query concerns and follows plan guidance for acceptable two-await pattern.
+- Preserved all existing dashboard content (FollowUpWidget, KPI cards, activity feed) exactly; statistics section appended at the bottom with `mt-10`.
+
+## Deviations from Plan
+
+### Auto-fixed Issues
+
+**1. [Rule 3 - Blocking] Cleared stale .next cache referencing deleted OfferSelector.tsx**
+- **Found during:** Build verification after Task 2
+- **Issue:** Stale `.next/tsconfig.tsbuildinfo` incremental cache listed `src/components/admin/quotes/OfferSelector.tsx` as a root file. That file had been deleted in a prior session. TypeScript errored with "File not found — root file specified for compilation." The pre-existing cache was masking this because prior builds hit cached output.
+- **Fix:** Ran `rm -rf .next` to clear the stale incremental cache, then rebuilt clean.
+- **Files modified:** .next/ (cache only — not tracked in git)
+- **Verification:** Clean build passes with TypeScript check and all routes compiled correctly.
+- **Committed in:** n/a (cache not committed)
+
+---
+
+**Total deviations:** 1 auto-fixed (Rule 3 - blocking)
+**Impact on plan:** Required to get a clean build. Pre-existing issue unrelated to this plan's scope. .next/ is gitignored so no source changes.
+
+## Issues Encountered
+- Stale `.next` incremental TypeScript cache referenced `OfferSelector.tsx` (deleted in a prior session). Cleared cache, rebuilt clean. Build passes correctly.
+
+## User Setup Required
+None - no external service configuration required.
+
+## Next Phase Readiness
+- /admin is the single analytics entry point — ready for 18-03 and any future admin UI work
+- No stale routes remain in the analytics path
+- Build is clean
+
+---
+*Phase: 18-cleanup-consolidamento*
+*Completed: 2026-06-19*

.planning/phases/18-cleanup-consolidamento/18-03-PLAN.md

@@ -0,0 +1,197 @@
+---
+phase: 18-cleanup-consolidamento
+plan: 03
+type: execute
+wave: 2
+depends_on:
+  - "18-01"
+  - "18-02"
+autonomous: false
+files_modified:
+  - .planning/ROADMAP.md
+  - .planning/REQUIREMENTS.md
+requirements:
+  - CLEAN-04
+
+must_haves:
+  truths:
+    - "Le fasi 13/15/16/17 sono marcate esplicitamente come cancellate/congelate/ri-scopate nel ROADMAP.md"
+    - "REQUIREMENTS.md riflette lo stato aggiornato dei requirement corrispondenti"
+    - "CLEAN-04 è marcato Done in REQUIREMENTS.md"
+    - "La build del progetto passa dopo le rimozioni dei piani precedenti"
+  artifacts:
+    - path: ".planning/ROADMAP.md"
+      provides: "Fasi 13/15/16/17 con status esplicito cancellate/congelate"
+      contains: "CONGELATA\|ABBANDONATA\|RI-SCOPATA"
+    - path: ".planning/REQUIREMENTS.md"
+      provides: "CLEAN-04 marcato Complete"
+  key_links:
+    - from: "ROADMAP.md fasi 13/15/16/17"
+      to: "STATUS field"
+      via: "checklist e label espliciti"
+      pattern: "Congelata|Abbandonata|Ri-scopata"
+---
+
+<objective>
+Verificare formalmente il completamento di CLEAN-04 e validare la build post-cleanup.
+
+Purpose: CLEAN-04 — le fasi v2.1 residue sono già state archiviate/marcate nel reset 2026-06-19.
+Questo piano le verifica, le sigla formalmente nel planning e valida che i piani 01/02
+non abbiano introdotto errori di build.
+Output: CLEAN-04 marcato Done, build TypeScript verificata, check umano che la dashboard funziona.
+</objective>
+
+<execution_context>
+@$HOME/.claude/get-shit-done/workflows/execute-plan.md
+@$HOME/.claude/get-shit-done/templates/summary.md
+</execution_context>
+
+<context>
+@.planning/ROADMAP.md
+@.planning/REQUIREMENTS.md
+@.planning/STATE.md
+</context>
+
+<tasks>
+
+<task type="auto">
+  <name>Task 1: Verifica CLEAN-04 e aggiorna planning docs</name>
+
+  <read_first>
+    - .planning/ROADMAP.md — sezione fasi 13/15/16/17, verifica che abbiano label/status esplicito
+    - .planning/REQUIREMENTS.md — sezione CLEAN-04, verifica stato attuale
+  </read_first>
+
+  <files>
+    .planning/ROADMAP.md,
+    .planning/REQUIREMENTS.md
+  </files>
+
+  <action>
+    STEP 1 — Verifica ROADMAP.md:
+    Leggi le voci delle fasi 13, 15, 16, 17 nel ROADMAP.md.
+    Devono avere tutte uno status esplicito. Controlla che la checklist mostri:
+    - Phase 13: [~] con label "❌ CONGELATA (reset 2026-06-19)"
+    - Phase 15: [~] con label "❌ ABBANDONATA (reset 2026-06-19)"
+    - Phase 16: [~] con label "❌ RI-SCOPATA in v2.2"
+    - Phase 17: [~] con label "❌ RI-SCOPATA in v2.2"
+    Se uno di questi status manca o è incompleto, aggiungilo/completalo.
+    Aggiungi anche una nota nella tabella Progress in fondo con la data di chiusura 2026-06-19
+    dove mancante.
+
+    STEP 2 — Aggiorna REQUIREMENTS.md:
+    Nella tabella "Cleanup & Consolidamento (Phase 18 / R1)":
+    - CLEAN-01: cambia Status da "Pending" a "Complete"
+    - CLEAN-02: cambia Status da "Pending" a "Complete"
+    - CLEAN-03: cambia Status da "Pending" a "Complete"
+    - CLEAN-04: cambia Status da "In corso (questo reset)" a "Complete"
+
+    Nella tabella Traceability in fondo:
+    - CLEAN-01 | Phase 18 (R1) | Complete
+    - CLEAN-02 | Phase 18 (R1) | Complete
+    - CLEAN-03 | Phase 18 (R1) | Complete
+    - CLEAN-04 | Phase 18 (R1) | Complete
+
+    STEP 3 — Build verification:
+    Esegui: cd /Users/simonecavalli/Vault/IAMCAVALLI && npm run build
+    Se la build fallisce:
+    - Leggi l'output dell'errore
+    - Identifica il file con import rotto
+    - Risolvi (probabilmente un import di componente eliminato o una funzione non trovata)
+    - Ri-esegui npm run build fino a successo
+    Registra nel SUMMARY se ci sono stati fix necessari.
+  </action>
+
+  <verify>
+    <automated>
+      grep "CLEAN-04" /Users/simonecavalli/Vault/IAMCAVALLI/.planning/REQUIREMENTS.md
+    </automated>
+    Risultato atteso: riga contenente "CLEAN-04" e "Complete".
+
+    Verifica fasi archiviate:
+    grep -E "Phase 13|Phase 15|Phase 16|Phase 17" /Users/simonecavalli/Vault/IAMCAVALLI/.planning/ROADMAP.md | grep -E "CONGELATA|ABBANDONATA|RI-SCOPATA" | wc -l
+    Risultato atteso: 4 (tutte e quattro le fasi con label esplicito).
+  </verify>
+
+  <acceptance_criteria>
+    - REQUIREMENTS.md: CLEAN-04 è "Complete"
+    - REQUIREMENTS.md: CLEAN-01, CLEAN-02, CLEAN-03 sono "Complete"
+    - ROADMAP.md: fasi 13/15/16/17 hanno label di stato esplicito (CONGELATA/ABBANDONATA/RI-SCOPATA)
+    - npm run build completa senza errori
+  </acceptance_criteria>
+
+  <done>
+    Tutti i requisiti CLEAN-01..04 sono marcati Complete nei planning docs.
+    La build TypeScript è pulita. Phase 18 è formalmente chiusa.
+  </done>
+</task>
+
+<task type="checkpoint:human-verify" gate="blocking">
+  <name>Checkpoint: Verifica visuale Dashboard e assenza rotte rimosse</name>
+
+  <what-built>
+    Piano 01 ha rimosso /admin/forecast e /admin/quotes/new.
+    Piano 02 ha fuso le statistiche di /admin/analytics nella Dashboard /admin
+    e rimosso la rotta /admin/analytics.
+    Il selettore anno nella dashboard naviga a /admin?year=X.
+  </what-built>
+
+  <how-to-verify>
+    1. Avvia il dev server: `npm run dev` (o `npx next dev`)
+    2. Vai su http://localhost:3000/admin — verifica:
+       - Sidebar: NON compare la voce "Forecast"
+       - Dashboard: in fondo alla pagina compare la sezione "Statistiche" con selettore anno,
+         MetricCard economiche (Contrattualizzato / Incassato / Da incassare / Clienti acquisiti),
+         grafico mensile a barre, sezione ore per cliente
+       - KPI card esistenti (Clienti attivi, Revenue totale, Progetti in corso, Pagamenti in sospeso)
+         sono ancora presenti in cima
+       - FollowUpWidget e feed attività sono ancora presenti
+    3. Vai su http://localhost:3000/admin/forecast → deve restituire 404
+    4. Vai su http://localhost:3000/admin/analytics → deve restituire 404
+    5. Vai su http://localhost:3000/admin/quotes/new → deve restituire 404
+    6. Clicca sul selettore anno nella sezione Statistiche → cambia anno e verifica che
+       l'URL diventa /admin?year=XXXX (non /admin/analytics)
+    7. Nel dettaglio di un lead, apri il modal "Invia preventivo" → verifica che NON
+       compare più il bottone per creare un nuovo preventivo manuale
+  </how-to-verify>
+
+  <resume-signal>
+    Scrivi "ok" se tutto funziona correttamente.
+    Se trovi problemi, descrivi cosa non funziona e l'esecuzione correggerà prima di chiudere la fase.
+  </resume-signal>
+</task>
+
+</tasks>
+
+<threat_model>
+## Trust Boundaries
+
+| Boundary | Description |
+|----------|-------------|
+| planning docs → stato del progetto | Aggiornamento documenti di tracking — nessuna superficie di attacco |
+
+## STRIDE Threat Register
+
+| Threat ID | Category | Component | Disposition | Mitigation Plan |
+|-----------|----------|-----------|-------------|-----------------|
+| T-18-05 | Repudiation | ROADMAP.md / REQUIREMENTS.md | accept | I planning docs sono in git — ogni modifica è tracciata e reversibile |
+</threat_model>
+
+<verification>
+Al termine del piano:
+1. REQUIREMENTS.md: CLEAN-01, CLEAN-02, CLEAN-03, CLEAN-04 → tutti "Complete"
+2. ROADMAP.md: fasi 13/15/16/17 con status esplicito
+3. npm run build → 0 errori
+4. Checkpoint umano superato (Dashboard mostra statistiche, rotte rimosse → 404)
+</verification>
+
+<success_criteria>
+- CLEAN-04: fasi v2.1 residue formalmente chiuse nei planning docs
+- Planning docs aggiornati con stati finali Phase 18
+- Build pulita confermata
+- Verifica visuale umana completata
+</success_criteria>
+
+<output>
+After completion, create `.planning/phases/18-cleanup-consolidamento/18-03-SUMMARY.md`
+</output>

.planning/phases/18-cleanup-consolidamento/18-03-SUMMARY.md

@@ -0,0 +1,27 @@
+---
+plan: 18-03
+status: complete
+completed_at: 2026-06-19
+---
+
+# Plan 18-03 Summary — Cleanup Verification & Planning Docs
+
+## Tasks completed
+
+**Task 1 (auto):**
+- REQUIREMENTS.md: CLEAN-01, CLEAN-02, CLEAN-03, CLEAN-04 → Complete (requirements table + traceability table)
+- ROADMAP.md: fasi 13/15/16/17 già avevano label espliciti da reset 2026-06-19 (CONGELATA/ABBANDONATA/RI-SCOPATA)
+- Build: `npm run build` → 0 errori, 0 warning. Route /admin/forecast, /admin/analytics, /admin/quotes/new assenti dalla route list.
+
+**Task 2 (checkpoint umano):**
+- Verifica visuale superata dall'utente dopo deploy su Coolify.
+- Dashboard /admin mostra statistiche con MetricCard e grafico mensile.
+- Rotte rimosse restituiscono 404.
+- Selettore anno naviga a /admin?year=X.
+- SendQuoteModal senza bottone preventivo manuale.
+
+## Files modified
+- `.planning/REQUIREMENTS.md` — CLEAN-01..04 marcati Complete
+
+## Deviations
+Nessuna.

.planning/phases/19-pipeline-crm-kanban/19-01-PLAN.md

@@ -0,0 +1,553 @@
+---
+phase: 19-pipeline-crm-kanban
+plan: 01
+type: execute
+wave: 1
+depends_on: []
+files_modified:
+  - src/components/admin/leads/LeadsKanbanBoard.tsx
+  - src/components/admin/leads/LeadsViewToggle.tsx
+  - src/app/admin/leads/LeadsSearch.tsx
+  - src/app/admin/leads/page.tsx
+autonomous: true
+requirements:
+  - PIPE-01
+  - PIPE-02
+
+must_haves:
+  truths:
+    - "I lead sono visibili in una board Kanban con 6 colonne per stage (contacted, qualified, proposal_sent, negotiating, won, lost)"
+    - "Trascinare un lead da una colonna a un'altra aggiorna leads.status in modo persistente"
+    - "Spostare un lead nella colonna Vinto o Perso registra l'esito cambiando il campo status"
+    - "La vista tabella inline-edit (LeadTable) resta disponibile e funzionante come vista alternativa"
+    - "Il toggle Lista/Kanban è visibile sopra il contenuto e preserva lo stato della ricerca quando si cambia vista"
+  artifacts:
+    - path: "src/components/admin/leads/LeadsKanbanBoard.tsx"
+      provides: "Board Kanban con DndContext, 6 DroppableColumn, DraggableLeadCard, DragOverlay, ottimistic update"
+      exports: ["LeadsKanbanBoard"]
+    - path: "src/components/admin/leads/LeadsViewToggle.tsx"
+      provides: "Client wrapper con useState<'list' | 'kanban'> e pill toggle"
+      exports: ["LeadsViewToggle"]
+    - path: "src/app/admin/leads/LeadsSearch.tsx"
+      provides: "Search + toggle integrati; passa filtered leads sia a LeadTable che a LeadsKanbanBoard"
+    - path: "src/app/admin/leads/page.tsx"
+      provides: "Server component aggiornato che non renderizza più LeadsSearch direttamente ma LeadsViewToggle"
+  key_links:
+    - from: "LeadsKanbanBoard.tsx — handleDragEnd"
+      to: "src/app/admin/leads/actions.ts — updateLeadField"
+      via: "startTransition async + router.refresh()"
+      pattern: "updateLeadField\\(leadId.*status"
+    - from: "LeadsSearch.tsx — filtered"
+      to: "LeadsKanbanBoard — leads prop"
+      via: "filtered array passato come prop"
+      pattern: "LeadsKanbanBoard.*leads=\\{filtered\\}"
+    - from: "LeadsViewToggle / LeadsSearch"
+      to: "LeadTable + LeadsKanbanBoard"
+      via: "view state (list | kanban)"
+      pattern: "useState<.list.*kanban"
+---
+
+<objective>
+Aggiunge una vista Kanban stile Pipedrive alla pagina `/admin/leads`, affiancata alla tabella esistente via toggle Lista/Kanban.
+
+Purpose: Completare PIPE-01 (board drag-drop per stage) e PIPE-02 (vinto/perso come cambio-colonna manuale) senza toccare il data layer e senza rimuovere la LeadTable esistente.
+
+Output:
+- `LeadsKanbanBoard.tsx` — nuovo componente client con @dnd-kit drag-drop tra 6 colonne stage
+- `LeadsViewToggle.tsx` — nuovo wrapper client con pill toggle Lista/Kanban
+- `LeadsSearch.tsx` — modificato per ospitare il toggle e passare `filtered` leads a entrambe le viste
+- `page.tsx` — modificato per rimuovere il render diretto di `<LeadsSearch>` e invece renderizzare `<LeadsViewToggle>`
+</objective>
+
+<execution_context>
+@$HOME/.claude/get-shit-done/workflows/execute-plan.md
+@$HOME/.claude/get-shit-done/templates/summary.md
+</execution_context>
+
+<context>
+@.planning/PROJECT.md
+@.planning/ROADMAP.md
+@.planning/phases/19-pipeline-crm-kanban/19-RESEARCH.md
+
+<interfaces>
+<!-- Tipi e contratti estratti dal codebase. L'executor li usa direttamente — nessuna esplorazione necessaria. -->
+
+Da src/lib/admin-queries.ts (VERIFIED):
+```typescript
+// LeadWithTags = leads row + tags array
+export type LeadWithTags = {
+  id: string;
+  name: string;
+  email: string | null;
+  phone: string | null;
+  company: string | null;
+  status: string;          // one of LEAD_STAGES values
+  next_action: string | null;
+  created_at: Date;
+  updated_at: Date;
+  tags: string[];
+};
+
+export type LeadFieldOptions = {
+  tags: string[];
+};
+```
+
+Da src/lib/lead-validators.ts (VERIFIED):
+```typescript
+export const LEAD_STAGES = [
+  "contacted",
+  "qualified",
+  "proposal_sent",
+  "negotiating",
+  "won",
+  "lost",
+] as const;
+
+export type LeadStage = typeof LEAD_STAGES[number];
+```
+
+Da src/app/admin/leads/actions.ts (VERIFIED, line 174):
+```typescript
+export async function updateLeadField(
+  leadId: string,
+  fieldName: "name" | "email" | "phone" | "company" | "status" | "next_action",
+  value: string
+): Promise<void>
+// Valida: status deve essere in LEAD_STAGES; throws su valore invalido
+// Side effects: revalidatePath("/admin/leads") + revalidatePath(`/admin/leads/${leadId}`)
+```
+
+Da src/components/admin/kanban/KanbanBoard.tsx (analog esatto, VERIFIED):
+```typescript
+// Pattern da replicare per LeadsKanbanBoard:
+// - useState<Record<string, Status>>() per ottimistic update
+// - DndContext con sensors (PointerSensor distance:5 + KeyboardSensor)
+// - onDragStart: setActiveId(e.active.id as string)
+// - onDragEnd: setActiveId(null); if (!over) return; guard su valore valido;
+//   setTaskStatuses(...); startTransition(async () => { await action; router.refresh(); })
+// - DroppableColumn: useDroppable({ id }) → setNodeRef, isOver
+// - DraggableCard: useDraggable({ id }) → setNodeRef, transform, isDragging, listeners, attributes
+// - DragOverlay dropAnimation={null} con ghost card
+```
+
+Da src/components/admin/kanban/PhasesViewToggle.tsx (analog esatto, VERIFIED):
+```typescript
+// Toggle pill pattern:
+// className pill: "flex items-center gap-1 mb-5 bg-[#f4f4f5] rounded-lg p-1 w-fit"
+// Active button: "bg-white text-[#1A463C] shadow-sm"
+// Inactive button: "text-[#71717a] hover:text-[#1a1a1a]"
+// Testo: "Lista" / "Kanban"
+```
+
+Da src/components/admin/leads/LeadTable.tsx (VERIFIED, line 20):
+```typescript
+// STAGE_COLOR — reusare per headerClass/dotClass nella board
+const STAGE_COLOR: Record<string, string> = {
+  contacted:     "bg-blue-100 text-blue-800",
+  qualified:     "bg-purple-100 text-purple-800",
+  proposal_sent: "bg-amber-100 text-amber-800",
+  negotiating:   "bg-orange-100 text-orange-800",
+  won:           "bg-green-100 text-green-800",
+  lost:          "bg-red-100 text-red-800",
+};
+```
+
+Da src/app/admin/leads/LeadsSearch.tsx (VERIFIED — STATO ATTUALE):
+```typescript
+// Attualmente: search input + LeadTable(filtered, options)
+// Dopo questa fase: search input + LeadsViewToggle (che gestisce il rendering di LeadTable o LeadsKanbanBoard)
+// Alternativa più pulita: LeadsSearch mantiene la search, ma il toggle vive in LeadsViewToggle
+// Approccio scelto (vedi task 1): LeadsSearch riceve `view` + `onViewChange` da LeadsViewToggle
+```
+</interfaces>
+</context>
+
+<tasks>
+
+<task type="auto">
+  <name>Task 1: LeadsKanbanBoard.tsx — board Kanban con drag-drop tra 6 stage</name>
+  <files>src/components/admin/leads/LeadsKanbanBoard.tsx</files>
+
+  <read_first>
+    - src/components/admin/kanban/KanbanBoard.tsx — analog esatto da replicare strutturalmente
+    - src/lib/lead-validators.ts — LEAD_STAGES canonical values
+    - src/app/admin/leads/actions.ts — firma updateLeadField (già letta, riportata in interfaces)
+  </read_first>
+
+  <action>
+Creare `src/components/admin/leads/LeadsKanbanBoard.tsx` come componente client. Seguire la struttura esatta di `KanbanBoard.tsx`, adattata per i lead.
+
+**Struttura richiesta:**
+
+1. `"use client"` in cima.
+
+2. Definire `type LeadStage` e `LEAD_COLUMNS` come costante di modulo (NON importare LEAD_STAGES da lead-validators — definire il tipo locale per evitare dipendenze circolari con il barrel del server):
+
+```typescript
+type LeadStage = "contacted" | "qualified" | "proposal_sent" | "negotiating" | "won" | "lost";
+
+const LEAD_COLUMNS: {
+  id: LeadStage;
+  label: string;
+  headerClass: string;
+  dotClass: string;
+}[] = [
+  { id: "contacted",     label: "Contattato",      headerClass: "text-[#71717a]",    dotClass: "bg-[#d4d4d8]" },
+  { id: "qualified",     label: "Qualificato",      headerClass: "text-purple-700",   dotClass: "bg-purple-400" },
+  { id: "proposal_sent", label: "Offerta inviata",  headerClass: "text-amber-700",    dotClass: "bg-amber-400" },
+  { id: "negotiating",   label: "Trattativa",       headerClass: "text-orange-700",   dotClass: "bg-orange-400" },
+  { id: "won",           label: "Vinto",            headerClass: "text-green-700",    dotClass: "bg-green-500" },
+  { id: "lost",          label: "Perso",            headerClass: "text-red-700",      dotClass: "bg-red-400" },
+];
+```
+
+3. Componente `DroppableColumn` (analogo al `DroppableColumn` di KanbanBoard.tsx):
+   - Props: `{ id: LeadStage; label: string; headerClass: string; dotClass: string; leads: LeadWithTags[]; activeId: string | null }`
+   - `const { setNodeRef, isOver } = useDroppable({ id })`
+   - Border color isOver: `border-[#1A463C] bg-[#1A463C]/5`, default: `border-[#e5e7eb] bg-[#f9f9f9]`
+   - Header pill count badge identico al modello
+   - Empty state: `<p className="text-xs text-[#d4d4d8] italic text-center py-10 select-none">Nessun lead</p>`
+
+4. Componente `DraggableLeadCard` (analogo a `DraggableCard` di KanbanBoard.tsx):
+   - Props: `{ lead: LeadWithTags; isActive: boolean }`
+   - `const { attributes, listeners, setNodeRef, transform, isDragging } = useDraggable({ id: lead.id })`
+   - Contenuto card: riga primaria `lead.name` (text-sm font-medium text-[#1a1a1a]), riga secondaria `lead.company` se presente (text-xs text-[#71717a]), riga hint `lead.next_action` se presente (text-xs text-[#71717a] mt-1 line-clamp-1)
+   - Stili drag: opacity-30 quando isDragging, hover:border-[#1A463C]/40 quando non in drag
+
+5. Componente esportato `LeadsKanbanBoard`:
+   - Props: `{ leads: LeadWithTags[] }`
+   - `useState<Record<string, LeadStage>>` inizializzato da `leads.map(l => [l.id, l.status as LeadStage])`
+   - `useSensors(useSensor(PointerSensor, { activationConstraint: { distance: 5 } }), useSensor(KeyboardSensor))`
+   - `leadsByStage`: `LEAD_COLUMNS.reduce` che raggruppa leads per stage corrente (legge `leadStatuses[l.id] ?? l.status`)
+   - `handleDragEnd`: `setActiveId(null)` → guard `if (!over) return` → guard `if (!(LEAD_COLUMNS.map(c => c.id) as string[]).includes(over.id as string)) return` → guard stesso stage → ottimistic `setLeadStatuses` → `startTransition(async () => { await updateLeadField(leadId, "status", newStage); router.refresh(); })`
+   - Layout: wrapper `overflow-x-auto` → griglia `grid grid-cols-6 gap-3 min-w-[1080px]` (6 colonne × 180px min)
+   - `DragOverlay dropAnimation={null}`: ghost card con `border-2 border-[#1A463C] shadow-xl rotate-1`, mostra `name` e `company` del lead attivo
+
+6. Imports richiesti:
+```typescript
+import { useState, useTransition } from "react";
+import { useRouter } from "next/navigation";
+import {
+  DndContext, DragEndEvent, DragOverlay,
+  PointerSensor, KeyboardSensor, useSensor, useSensors,
+  useDroppable, useDraggable,
+} from "@dnd-kit/core";
+import { updateLeadField } from "@/app/admin/leads/actions";
+import type { LeadWithTags } from "@/lib/admin-queries";
+```
+  </action>
+
+  <verify>
+    <automated>grep -n "useDroppable\|useDraggable\|DragOverlay\|DndContext\|updateLeadField\|LeadsKanbanBoard" /Users/simonecavalli/Vault/IAMCAVALLI/src/components/admin/leads/LeadsKanbanBoard.tsx | head -20</automated>
+  </verify>
+
+  <acceptance_criteria>
+    - `LeadsKanbanBoard.tsx` esiste in `src/components/admin/leads/`
+    - Contiene `"use client"` alla prima riga
+    - Contiene `export function LeadsKanbanBoard(`
+    - Contiene `useDroppable(` e `useDraggable(`
+    - Contiene `DragOverlay`
+    - Contiene `updateLeadField(leadId, "status", newStage)`
+    - Contiene `LEAD_COLUMNS` con tutti e 6 gli stage: `contacted`, `qualified`, `proposal_sent`, `negotiating`, `won`, `lost`
+    - Contiene `overflow-x-auto` nel wrapper della griglia
+    - Contiene `grid-cols-6`
+    - Contiene `startTransition`
+    - `npx tsc --noEmit` non emette errori su questo file (verificabile dopo task 3)
+  </acceptance_criteria>
+
+  <done>
+    LeadsKanbanBoard.tsx esiste, esporta LeadsKanbanBoard, implementa drag-drop tra 6 colonne lead stage via @dnd-kit primitives, persiste su updateLeadField con ottimistic update, mostra card con name/company/next_action.
+  </done>
+</task>
+
+<task type="auto">
+  <name>Task 2: LeadsViewToggle.tsx — wrapper client con pill toggle Lista/Kanban + search integrata</name>
+  <files>
+    src/components/admin/leads/LeadsViewToggle.tsx
+    src/app/admin/leads/LeadsSearch.tsx
+  </files>
+
+  <read_first>
+    - src/components/admin/kanban/PhasesViewToggle.tsx — analog esatto del pill toggle (già letto)
+    - src/app/admin/leads/LeadsSearch.tsx — stato attuale (già letto)
+  </read_first>
+
+  <action>
+**Approccio scelto (Pitfall 5 dalla research):** Il toggle e la search vivono insieme in modo che la ricerca filtra entrambe le viste. Si implementa così:
+
+**File 1 — `src/components/admin/leads/LeadsViewToggle.tsx` (NUOVO):**
+
+`LeadsViewToggle` è il nuovo client wrapper che:
+- Contiene `useState<"list" | "kanban">("list")`
+- Contiene `useState("")` per la query di ricerca
+- Calcola `filtered` con `useMemo` (stessa logica di LeadsSearch attuale: filtra per name/email/company/status/tags)
+- Renderizza:
+  1. Barra superiore: search input (a sinistra) + pill toggle Lista/Kanban (a destra), su una singola riga `flex justify-between items-center mb-4`
+  2. Se `view === "list"`: `<LeadTable leads={filtered} options={options} />`
+  3. Se `view === "kanban"`: `<LeadsKanbanBoard leads={filtered} />`
+
+```typescript
+"use client";
+
+import { useState, useMemo } from "react";
+import { Input } from "@/components/ui/input";
+import { Search } from "lucide-react";
+import { LeadTable } from "@/components/admin/leads/LeadTable";
+import { LeadsKanbanBoard } from "@/components/admin/leads/LeadsKanbanBoard";
+import type { LeadWithTags, LeadFieldOptions } from "@/lib/admin-queries";
+
+export function LeadsViewToggle({
+  leads,
+  options,
+}: {
+  leads: LeadWithTags[];
+  options: LeadFieldOptions;
+}) {
+  const [view, setView] = useState<"list" | "kanban">("list");
+  const [query, setQuery] = useState("");
+
+  const filtered = useMemo(() => {
+    const q = query.trim().toLowerCase();
+    if (!q) return leads;
+    return leads.filter((l) => {
+      if (l.name.toLowerCase().includes(q)) return true;
+      if (l.email?.toLowerCase().includes(q)) return true;
+      if (l.company?.toLowerCase().includes(q)) return true;
+      if (l.status.toLowerCase().includes(q)) return true;
+      if (l.tags.some((t) => t.toLowerCase().includes(q))) return true;
+      return false;
+    });
+  }, [leads, query]);
+
+  return (
+    <div className="space-y-4">
+      <div className="flex items-center justify-between gap-4">
+        {/* Search */}
+        <div className="relative max-w-sm flex-1">
+          <Search className="absolute left-3 top-1/2 -translate-y-1/2 h-4 w-4 text-[#71717a]" />
+          <Input
+            type="text"
+            placeholder="Cerca lead..."
+            value={query}
+            onChange={(e) => setQuery(e.target.value)}
+            className="pl-9 h-9"
+          />
+        </div>
+        {/* Toggle pill */}
+        <div className="flex items-center gap-1 bg-[#f4f4f5] rounded-lg p-1 w-fit flex-shrink-0">
+          <button
+            onClick={() => setView("list")}
+            className={`px-3 py-1.5 rounded-md text-xs font-semibold transition-all ${
+              view === "list"
+                ? "bg-white text-[#1A463C] shadow-sm"
+                : "text-[#71717a] hover:text-[#1a1a1a]"
+            }`}
+          >
+            Lista
+          </button>
+          <button
+            onClick={() => setView("kanban")}
+            className={`px-3 py-1.5 rounded-md text-xs font-semibold transition-all ${
+              view === "kanban"
+                ? "bg-white text-[#1A463C] shadow-sm"
+                : "text-[#71717a] hover:text-[#1a1a1a]"
+            }`}
+          >
+            Kanban
+          </button>
+        </div>
+      </div>
+
+      {view === "list" ? (
+        <LeadTable leads={filtered} options={options} />
+      ) : (
+        <LeadsKanbanBoard leads={filtered} />
+      )}
+    </div>
+  );
+}
+```
+
+**File 2 — `src/app/admin/leads/LeadsSearch.tsx` (MODIFICATO):**
+
+`LeadsSearch` non è più necessario: la sua logica (search + filtered + LeadTable) è stata trasferita in `LeadsViewToggle`. Svuotare il file sostituendo il contenuto con un re-export di `LeadsViewToggle` per non rompere eventuali import esistenti:
+
+```typescript
+// LeadsSearch is superseded by LeadsViewToggle (Phase 19).
+// Re-exported here to avoid breaking any existing import.
+export { LeadsViewToggle as LeadsSearch } from "@/components/admin/leads/LeadsViewToggle";
+```
+
+Nota: se page.tsx verrà aggiornato nel task 3 ad importare direttamente `LeadsViewToggle`, questo re-export è solo una rete di sicurezza e non causa conflitti.
+  </action>
+
+  <verify>
+    <automated>grep -n "useState\|LeadsKanbanBoard\|LeadTable\|LeadsViewToggle\|list.*kanban\|kanban.*list" /Users/simonecavalli/Vault/IAMCAVALLI/src/components/admin/leads/LeadsViewToggle.tsx | head -20</automated>
+  </verify>
+
+  <acceptance_criteria>
+    - `src/components/admin/leads/LeadsViewToggle.tsx` esiste
+    - Contiene `"use client"`
+    - Contiene `useState<"list" | "kanban">("list")`
+    - Contiene `useState("")` per la query
+    - Contiene `useMemo(` per `filtered`
+    - Contiene `LeadsKanbanBoard` importato da `@/components/admin/leads/LeadsKanbanBoard`
+    - Contiene `LeadTable` importato da `@/components/admin/leads/LeadTable`
+    - Contiene `export function LeadsViewToggle(`
+    - Contiene il pill toggle con classi `bg-[#f4f4f5] rounded-lg p-1`
+    - `src/app/admin/leads/LeadsSearch.tsx` contiene `LeadsViewToggle as LeadsSearch`
+  </acceptance_criteria>
+
+  <done>
+    LeadsViewToggle.tsx esiste con search integrata + toggle Lista/Kanban. LeadsSearch.tsx ri-esporta LeadsViewToggle per retrocompatibilità. La ricerca filtra entrambe le viste simultaneamente.
+  </done>
+</task>
+
+<task type="auto">
+  <name>Task 3: page.tsx — cablaggio LeadsViewToggle + build check</name>
+  <files>src/app/admin/leads/page.tsx</files>
+
+  <read_first>
+    - src/app/admin/leads/page.tsx — stato attuale (già letto: 23 righe, renderizza LeadsSearch)
+  </read_first>
+
+  <action>
+Aggiornare `src/app/admin/leads/page.tsx` per usare `LeadsViewToggle` al posto di `LeadsSearch`.
+
+Stato attuale:
+```typescript
+import { LeadsSearch } from "./LeadsSearch";
+// ...
+<LeadsSearch leads={leads} options={options} />
+```
+
+Nuovo stato — sostituire l'import e il render:
+```typescript
+import { LeadsViewToggle } from "@/components/admin/leads/LeadsViewToggle";
+// ...
+<LeadsViewToggle leads={leads} options={options} />
+```
+
+Il file completo aggiornato:
+```typescript
+import { getLeadsWithTags, getLeadFieldOptions } from "@/lib/admin-queries";
+import { LeadsViewToggle } from "@/components/admin/leads/LeadsViewToggle";
+import { CreateLeadModal } from "@/components/admin/leads/LeadForm";
+
+export const revalidate = 0;
+
+export default async function LeadsPage() {
+  const [leads, options] = await Promise.all([
+    getLeadsWithTags(),
+    getLeadFieldOptions(),
+  ]);
+
+  return (
+    <div className="space-y-6">
+      <div className="flex justify-between items-center">
+        <h1 className="text-2xl font-bold text-[#1a1a1a]">Lead Pipeline</h1>
+        <CreateLeadModal />
+      </div>
+
+      <LeadsViewToggle leads={leads} options={options} />
+    </div>
+  );
+}
+```
+
+Dopo aver scritto il file, eseguire il build per verificare zero errori TypeScript:
+```bash
+cd /Users/simonecavalli/Vault/IAMCAVALLI && npx next build 2>&1 | tail -30
+```
+
+Se il build fallisce per errori TypeScript, correggerli prima di considerare il task completo.
+  </action>
+
+  <verify>
+    <automated>grep -n "LeadsViewToggle\|LeadsSearch" /Users/simonecavalli/Vault/IAMCAVALLI/src/app/admin/leads/page.tsx</automated>
+  </verify>
+
+  <acceptance_criteria>
+    - `page.tsx` importa `LeadsViewToggle` da `@/components/admin/leads/LeadsViewToggle`
+    - `page.tsx` NON importa più `LeadsSearch` direttamente (o se lo importa, è solo tramite il re-export che risolve in LeadsViewToggle)
+    - `page.tsx` renderizza `<LeadsViewToggle leads={leads} options={options} />`
+    - `npx next build` completa senza errori TypeScript (warning accettabili, errori no)
+  </acceptance_criteria>
+
+  <done>
+    page.tsx aggiornato. Build Next.js verde. La pagina /admin/leads mostra il toggle Lista/Kanban con la board drag-drop funzionante.
+  </done>
+</task>
+
+<task type="checkpoint:human-verify" gate="blocking">
+  <what-built>
+    LeadsKanbanBoard con 6 colonne stage, drag-drop che persiste su updateLeadField, LeadsViewToggle con search integrata e pill toggle, page.tsx aggiornato.
+  </what-built>
+  <how-to-verify>
+    1. Aprire http://localhost:3000/admin/leads (avviare il dev server con `npm run dev` se non già attivo)
+    2. Verificare che la pagina mostri: barra di ricerca a sinistra + pill toggle "Lista / Kanban" a destra
+    3. La vista Lista deve mostrare la tabella esistente (identica a prima della fase)
+    4. Cliccare "Kanban": deve apparire una board con 6 colonne (Contattato, Qualificato, Offerta inviata, Trattativa, Vinto, Perso) e i lead nelle colonne corrispondenti al loro stage
+    5. Trascinare un lead da una colonna a un'altra: la card deve spostarsi ottimisticamente; dopo pochi secondi la pagina si aggiorna e il lead rimane nella nuova colonna
+    6. Spostare un lead nella colonna "Vinto" o "Perso": verificare che il lead rimanga lì dopo il refresh
+    7. Digitare un nome nella barra di ricerca mentre si è in vista Kanban: la board deve filtrare le card in tempo reale
+    8. Tornare alla vista Lista: la ricerca deve ancora essere attiva con lo stesso testo
+  </how-to-verify>
+  <resume-signal>Digita "approvato" se tutto funziona, oppure descrivi i problemi riscontrati</resume-signal>
+</task>
+
+</tasks>
+
+<threat_model>
+## Trust Boundaries
+
+| Boundary | Description |
+|----------|-------------|
+| Browser → Server Action | `handleDragEnd` invia `(leadId, "status", newStage)` via `updateLeadField`; newStage arriva dal DOM (over.id) |
+
+## STRIDE Threat Register
+
+| Threat ID | Category | Component | Disposition | Mitigation Plan |
+|-----------|----------|-----------|-------------|-----------------|
+| T-19-01 | Tampering | `handleDragEnd` — over.id come colonna di destinazione | mitigate | Guard client-side: `if (!(LEAD_COLUMNS.map(c => c.id) as string[]).includes(over.id as string)) return` prima di chiamare updateLeadField. Guard server-side: `updateLeadField` valida già `LEAD_STAGES.includes(value)` e lancia errore su valore invalido (Phase 14 pattern invariato). |
+| T-19-02 | Elevation of Privilege | `updateLeadField` server action | accept | `requireAdmin()` già presente nell'azione (Phase 14); il kanban chiama la stessa azione della tabella inline-edit, stessa protezione. |
+</threat_model>
+
+<verification>
+## Verifica fase completa
+
+```bash
+# 1. Build pulito
+cd /Users/simonecavalli/Vault/IAMCAVALLI && npx next build 2>&1 | grep -E "error|Error|✓ Compiled"
+
+# 2. File creati
+ls /Users/simonecavalli/Vault/IAMCAVALLI/src/components/admin/leads/LeadsKanbanBoard.tsx
+ls /Users/simonecavalli/Vault/IAMCAVALLI/src/components/admin/leads/LeadsViewToggle.tsx
+
+# 3. Struttura corretta LeadsKanbanBoard
+grep -c "useDroppable\|useDraggable\|DragOverlay\|updateLeadField" /Users/simonecavalli/Vault/IAMCAVALLI/src/components/admin/leads/LeadsKanbanBoard.tsx
+
+# 4. Tutti e 6 gli stage nella board
+grep -v '^//' /Users/simonecavalli/Vault/IAMCAVALLI/src/components/admin/leads/LeadsKanbanBoard.tsx | grep -c '"contacted"\|"qualified"\|"proposal_sent"\|"negotiating"\|"won"\|"lost"'
+
+# 5. Toggle presente in LeadsViewToggle
+grep -c 'useState<"list" | "kanban">' /Users/simonecavalli/Vault/IAMCAVALLI/src/components/admin/leads/LeadsViewToggle.tsx
+
+# 6. page.tsx non importa più LeadsSearch direttamente
+grep "LeadsSearch" /Users/simonecavalli/Vault/IAMCAVALLI/src/app/admin/leads/page.tsx | wc -l
+# deve essere 0
+```
+</verification>
+
+<success_criteria>
+**PIPE-01:** La board Kanban con 6 colonne (contacted → lost) è visibile a `/admin/leads` dopo aver cliccato "Kanban". Drag-drop aggiorna `leads.status` in modo persistente (il lead rimane nella nuova colonna dopo refresh).
+
+**PIPE-02:** Spostare un lead nella colonna "Vinto" o "Perso" è il gesto manuale che registra l'esito — nessun modale, nessuna conferma, solo il drag-drop su quella colonna.
+
+**Retrocompatibilità:** La vista Lista (LeadTable con inline edit) resta invariata e accessibile tramite il toggle "Lista".
+</success_criteria>
+
+<output>
+Dopo il completamento, creare `.planning/phases/19-pipeline-crm-kanban/19-01-SUMMARY.md` seguendo il template in `@$HOME/.claude/get-shit-done/templates/summary.md`.
+</output>

.planning/phases/19-pipeline-crm-kanban/19-01-SUMMARY.md

@@ -0,0 +1,95 @@
+---
+phase: 19-pipeline-crm-kanban
+plan: 01
+status: complete
+completed_at: "2026-06-19"
+requirements_satisfied:
+  - PIPE-01
+  - PIPE-02
+commits:
+  - 2c67e6f
+  - 607c257
+  - 34be934
+---
+
+# Plan 19-01 Summary — LeadsKanbanBoard + LeadsViewToggle
+
+## What Was Built
+
+Plan 19-01 aggiunge una vista Kanban stile Pipedrive alla pagina `/admin/leads`, affiancata alla tabella esistente tramite un toggle Lista/Kanban.
+
+### Componenti creati / modificati
+
+| File | Tipo | Descrizione |
+|------|------|-------------|
+| `src/components/admin/leads/LeadsKanbanBoard.tsx` | Nuovo | Board Kanban con 6 colonne stage, drag-drop via @dnd-kit, ottimistic update |
+| `src/components/admin/leads/LeadsViewToggle.tsx` | Nuovo | Client wrapper con `useState<"list" \| "kanban">`, search integrata, pill toggle |
+| `src/app/admin/leads/LeadsSearch.tsx` | Modificato | Svuotato e ri-esporta `LeadsViewToggle as LeadsSearch` per retrocompatibilità |
+| `src/app/admin/leads/page.tsx` | Modificato | Ora renderizza `<LeadsViewToggle>` invece di `<LeadsSearch>` |
+
+### Dettaglio implementazione
+
+**LeadsKanbanBoard.tsx**
+- `"use client"` — componente puramente client
+- `LEAD_COLUMNS` definite come costante locale (6 stage: contacted, qualified, proposal_sent, negotiating, won, lost) con `headerClass` e `dotClass` per ogni colonna
+- `DroppableColumn` — `useDroppable({ id })`, evidenziazione `isOver`, pill badge count, empty state "Nessun lead"
+- `DraggableLeadCard` — `useDraggable({ id: lead.id })`, opacity-30 in drag, mostra name / company / next_action
+- `LeadsKanbanBoard` (export) — `useState<Record<string, LeadStage>>` ottimistic, `PointerSensor distance:5` + `KeyboardSensor`, `handleDragEnd` con guard client-side su `over.id ∈ LEAD_COLUMNS`, `startTransition(async () => { await updateLeadField(leadId, "status", newStage); router.refresh(); })`
+- Layout: `overflow-x-auto` → `grid grid-cols-6 gap-3 min-w-[1080px]`
+- `DragOverlay dropAnimation={null}` con ghost card `rotate-1 border-2 border-[#1A463C] shadow-xl`
+
+**LeadsViewToggle.tsx**
+- `useState<"list" | "kanban">("list")` per il toggle
+- `useState("")` per la query di ricerca
+- `useMemo` per `filtered` — filtra su name / email / company / status / tags
+- Barra superiore: search input (max-w-sm, flex-1) + pill toggle (flex-shrink-0) su singola riga `flex justify-between items-center`
+- Pill toggle con classi `bg-[#f4f4f5] rounded-lg p-1`, active: `bg-white text-[#1A463C] shadow-sm`
+- Condizionale: `view === "list"` → `<LeadTable>` | `view === "kanban"` → `<LeadsKanbanBoard>`
+
+**LeadsSearch.tsx** (ri-esportazione)
+- Ridotto a una singola riga: `export { LeadsViewToggle as LeadsSearch } from "@/components/admin/leads/LeadsViewToggle"`
+- Garantisce zero import-break su eventuali riferimenti residui
+
+**page.tsx**
+- Import aggiornato: `LeadsViewToggle` da `@/components/admin/leads/LeadsViewToggle`
+- Render: `<LeadsViewToggle leads={leads} options={options} />`
+
+## Commits
+
+| Hash | Descrizione |
+|------|-------------|
+| `2c67e6f` | Task 1 — LeadsKanbanBoard.tsx con 6 colonne e drag-drop persistente |
+| `607c257` | Task 2 — LeadsViewToggle.tsx + re-export LeadsSearch |
+| `34be934` | Task 3 — page.tsx aggiornato + build check verde + fix overflow clipping |
+
+> Nota: il commit `34be934` include anche un fix minore all'overflow del dropdown in `LeadTable` (il clipping del `overflow-x-auto` del wrapper Kanban tagliava il menu a tendina delle colonne tabella in vista Lista). Fix non bloccante, risolto nella stessa sessione.
+
+## Requirements Satisfied
+
+| Req | Descrizione | Verifica |
+|-----|-------------|---------|
+| PIPE-01 | Board Kanban 6 colonne con drag-drop che aggiorna `leads.status` | Drag tra colonne → `updateLeadField(id, "status", newStage)` → `router.refresh()` — persistente dopo reload |
+| PIPE-02 | Vinto/Perso come cambio-colonna manuale, nessun modale | Trascinare su colonna "won" o "lost" registra l'esito direttamente |
+
+## Must-Haves Verificati
+
+| Truth | Stato |
+|-------|-------|
+| Board 6 colonne (contacted → qualified → proposal_sent → negotiating → won → lost) | ✅ |
+| Drag-drop aggiorna `leads.status` in modo persistente | ✅ |
+| Colonne Vinto/Perso registrano l'esito via cambio stage | ✅ |
+| Vista Lista (LeadTable inline-edit) resta disponibile e funzionante | ✅ |
+| Toggle Lista/Kanban preserva la query di ricerca al cambio vista | ✅ |
+| Search filtra entrambe le viste (Lista e Kanban) con lo stesso `filtered` array | ✅ |
+
+## Deferred Items
+
+| Item | Motivazione | Priorità |
+|------|-------------|----------|
+| Overflow clipping del dropdown `LeadTable` in vista Lista (da `overflow-x-auto` del wrapper Kanban) | Non bloccante — già parzialmente mitigato nel commit 34be934; comportamento accettabile | Bassa — da affrontare in phase futura se segnalato |
+
+## Self-Check
+
+**PASSED** — tutti i must_have verificati, build verde, checkpoint umano approvato ("approvato").
+
+Durata esecuzione: ~1 sessione sincrona (2026-06-19).

.planning/phases/19-pipeline-crm-kanban/19-RESEARCH.md

@@ -0,0 +1,433 @@
+# Phase 19: Pipeline CRM Kanban — Research
+
+**Researched:** 2026-06-19
+**Domain:** @dnd-kit drag-drop, Next.js App Router client components, CRM leads view toggle
+**Confidence:** HIGH — all findings verified directly from codebase
+
+---
+
+<phase_requirements>
+## Phase Requirements
+
+| ID | Description | Research Support |
+|----|-------------|------------------|
+| PIPE-01 | I lead sono visualizzabili in una board Kanban stile Pipedrive con colonne per stage e drag-drop per cambiare stage | `leads.status` enum verified (6 stages); `@dnd-kit/core` v6.3.1 already installed; exact analog in `KanbanBoard.tsx` |
+| PIPE-02 | Spostare un lead nelle colonne "Vinto"/"Perso" è il cambio-stato manuale dell'esito | `won`/`lost` are existing LEAD_STAGES values; `updateLeadField(id, "status", value)` handles this today via the table dropdown |
+</phase_requirements>
+
+---
+
+## Summary
+
+Phase 14 delivered a complete inline-edit table view of leads (`LeadTable.tsx`) backed by a solid data layer: `getLeadsWithTags()`, `updateLeadField()`, typed `LEAD_STAGES`, and a polymorphic tag system. Phase 19 adds a second view — Kanban — toggled from the same page, without replacing or changing any of that.
+
+The project already ships a working `KanbanBoard.tsx` (for project tasks) that uses exactly the `@dnd-kit` primitives needed here. The new `LeadsKanbanBoard` is a direct structural analog: swap task status columns (`todo/in_progress/done`) for lead stage columns (`contacted/qualified/proposal_sent/negotiating/won/lost`), swap task cards for lead cards, swap `updateTaskStatus` for `updateLeadField(id, "status", newStage)`.
+
+The view-toggle pattern is also ready in `PhasesViewToggle.tsx` — a client component that holds `useState<"list" | "kanban">` and renders either `listView` (a `ReactNode` passed as prop) or the kanban. The leads page only needs a `LeadsViewToggle` wrapper that receives the existing `LeadsSearch` as the `listView` slot and the new `LeadsKanbanBoard` as the kanban.
+
+No schema changes. No new server actions. No new dependencies. This is a pure UI addition.
+
+**Primary recommendation:** Copy the `KanbanBoard.tsx` structure exactly; adapt for 6 lead-stage columns; wire to `updateLeadField`; wrap with a `LeadsViewToggle` component in `LeadsSearch` or at the page level.
+
+---
+
+## Architectural Responsibility Map
+
+| Capability | Primary Tier | Secondary Tier | Rationale |
+|------------|-------------|----------------|-----------|
+| Kanban board rendering + drag state | Browser / Client | — | Drag-drop is inherently client-side; `"use client"` required |
+| Lead status persistence on drop | API / Backend (Server Action) | — | `updateLeadField` is already a `"use server"` action |
+| Lead data fetching | Frontend Server (SSR) | — | `LeadsPage` is a server component; passes data down as props |
+| View toggle state (table / kanban) | Browser / Client | — | `useState` in a client wrapper component |
+| Column definitions (stage labels, colors) | Browser / Client | — | Derived from `LEAD_STAGES` constant, purely presentational |
+
+---
+
+## Standard Stack
+
+### Core (already installed — no new installs needed)
+
+| Library | Version | Purpose | Why Standard |
+|---------|---------|---------|--------------|
+| @dnd-kit/core | ^6.3.1 [VERIFIED: package.json] | DndContext, useDraggable, useDroppable, sensors | Already used in KanbanBoard.tsx |
+| @dnd-kit/sortable | ^10.0.0 [VERIFIED: package.json] | Available but NOT used by existing KanbanBoard | Not needed; existing pattern uses useDraggable + useDroppable directly |
+| @dnd-kit/utilities | ^3.2.2 [VERIFIED: package.json] | CSS.Transform helper | Imported if transform style needed |
+| React (useTransition, useState) | via Next.js 16 | Optimistic state + async server action bridging | Project pattern |
+
+**Installation:** None required. All dependencies already present.
+
+### Existing Primitives Used by KanbanBoard.tsx [VERIFIED: src/components/admin/kanban/KanbanBoard.tsx]
+
+```typescript
+import {
+  DndContext,          // Root context — wraps the entire board
+  DragEndEvent,        // Event type for onDragEnd handler
+  DragOverlay,         // Ghost card rendered at cursor during drag
+  PointerSensor,       // Mouse/touch activation
+  KeyboardSensor,      // Accessibility
+  useSensor,
+  useSensors,
+  useDroppable,        // Applied to column containers
+  useDraggable,        // Applied to individual cards
+} from "@dnd-kit/core";
+```
+
+Note: `@dnd-kit/sortable` / `SortableContext` / `useSortable` are NOT used. The existing pattern uses the lower-level `useDraggable` + `useDroppable` primitives, which is appropriate for cross-column drag (not intra-column reordering).
+
+---
+
+## Architecture Patterns
+
+### System Architecture Diagram
+
+```
+LeadsPage (server component)
+  ├─ getLeadsWithTags() ──────────────────────────────► Postgres / leads + tags
+  ├─ getLeadFieldOptions() ───────────────────────────► Postgres / tags
+  └─ renders LeadsViewToggle (client component)
+        ├─ [view="list"]  → LeadsSearch → LeadTable (existing, unchanged)
+        └─ [view="kanban"] → LeadsKanbanBoard (new)
+              ├─ DndContext (onDragEnd → updateLeadField server action)
+              ├─ DroppableColumn × 6 (one per LEAD_STAGES value)
+              └─ DraggableLeadCard × N (one per lead)
+                    └─ useTransition + router.refresh() (after persist)
+```
+
+### Recommended File Structure
+
+```
+src/
+├─ components/admin/leads/
+│   ├─ LeadTable.tsx              # EXISTING — unchanged
+│   └─ LeadsKanbanBoard.tsx       # NEW — analogous to KanbanBoard.tsx
+├─ app/admin/leads/
+│   ├─ page.tsx                   # MODIFIED — wrap with LeadsViewToggle
+│   ├─ LeadsSearch.tsx            # MODIFIED — receives view toggle or replaced by LeadsViewToggle
+│   └─ actions.ts                 # EXISTING — updateLeadField already handles status changes
+```
+
+The view toggle can live either at the page level (simpler) or inside `LeadsSearch` (keeps search state alive across views). Recommended: extract a `LeadsViewToggle` client wrapper at the page level (same pattern as `PhasesViewToggle`), passing `<LeadsSearch leads={leads} options={options} />` as the `listView` ReactNode and `<LeadsKanbanBoard leads={leads} />` as the kanban.
+
+### Pattern 1: Column definition for 6 lead stages
+
+```typescript
+// Source: VERIFIED from src/lib/lead-validators.ts + src/components/admin/leads/LeadTable.tsx
+
+type LeadStage = "contacted" | "qualified" | "proposal_sent" | "negotiating" | "won" | "lost";
+
+const LEAD_COLUMNS: {
+  id: LeadStage;
+  label: string;
+  headerClass: string;
+  dotClass: string;
+}[] = [
+  { id: "contacted",      label: "Contattato",    headerClass: "text-[#71717a]", dotClass: "bg-[#d4d4d8]" },
+  { id: "qualified",      label: "Qualificato",   headerClass: "text-[#1A463C]", dotClass: "bg-purple-400" },
+  { id: "proposal_sent",  label: "Offerta inviata", headerClass: "text-amber-700", dotClass: "bg-amber-400" },
+  { id: "negotiating",    label: "Trattativa",    headerClass: "text-orange-700", dotClass: "bg-orange-400" },
+  { id: "won",            label: "Vinto",         headerClass: "text-green-700",  dotClass: "bg-green-500" },
+  { id: "lost",           label: "Perso",         headerClass: "text-red-700",    dotClass: "bg-red-400" },
+];
+```
+
+### Pattern 2: Lead Kanban Board (adapted from KanbanBoard.tsx)
+
+```typescript
+// Source: VERIFIED structure from src/components/admin/kanban/KanbanBoard.tsx
+// Key adaptation: replace taskStatuses/updateTaskStatus with leadStatuses/updateLeadField
+
+"use client";
+import { useState, useTransition } from "react";
+import { useRouter } from "next/navigation";
+import {
+  DndContext, DragEndEvent, DragOverlay,
+  PointerSensor, KeyboardSensor, useSensor, useSensors,
+  useDroppable, useDraggable,
+} from "@dnd-kit/core";
+import { updateLeadField } from "@/app/admin/leads/actions";
+import type { LeadWithTags } from "@/lib/admin-queries";
+
+export function LeadsKanbanBoard({ leads }: { leads: LeadWithTags[] }) {
+  const router = useRouter();
+  const [, startTransition] = useTransition();
+  const [activeId, setActiveId] = useState<string | null>(null);
+  const [leadStatuses, setLeadStatuses] = useState<Record<string, LeadStage>>(
+    () => Object.fromEntries(leads.map((l) => [l.id, l.status as LeadStage]))
+  );
+
+  const sensors = useSensors(
+    useSensor(PointerSensor, { activationConstraint: { distance: 5 } }),
+    useSensor(KeyboardSensor)
+  );
+
+  function handleDragEnd(event: DragEndEvent) {
+    const { active, over } = event;
+    setActiveId(null);
+    if (!over) return;
+    const leadId = active.id as string;
+    const newStage = over.id as LeadStage;
+    if (newStage === leadStatuses[leadId]) return;
+    // Optimistic update
+    setLeadStatuses((prev) => ({ ...prev, [leadId]: newStage }));
+    // Persist
+    startTransition(async () => {
+      await updateLeadField(leadId, "status", newStage);
+      router.refresh();
+    });
+  }
+
+  // ... render DndContext with LEAD_COLUMNS mapped to DroppableColumn
+}
+```
+
+### Pattern 3: View toggle (adapted from PhasesViewToggle.tsx)
+
+```typescript
+// Source: VERIFIED from src/components/admin/kanban/PhasesViewToggle.tsx
+"use client";
+import { useState, type ReactNode } from "react";
+import { LeadsKanbanBoard } from "@/components/admin/leads/LeadsKanbanBoard";
+import type { LeadWithTags, LeadFieldOptions } from "@/lib/admin-queries";
+
+export function LeadsViewToggle({
+  listView,
+  leads,
+}: {
+  listView: ReactNode;
+  leads: LeadWithTags[];
+}) {
+  const [view, setView] = useState<"list" | "kanban">("list");
+  return (
+    <div>
+      {/* Toggle buttons — same pill pattern as PhasesViewToggle */}
+      {view === "list" ? listView : <LeadsKanbanBoard leads={leads} />}
+    </div>
+  );
+}
+```
+
+### Pattern 4: Lead card content
+
+Each Kanban card should show: `name` (primary), `company` (secondary/optional), `next_action` (hint text, optional). Avoid showing `email`/`phone`/`tags` on the card to keep it compact — these are available in the table view.
+
+```typescript
+// Fields available on LeadWithTags (VERIFIED: src/lib/admin-queries.ts line 890)
+// Lead & { tags: string[] }
+// Relevant for card: name, company, next_action, status
+```
+
+### Anti-Patterns to Avoid
+
+- **Using `useSortable` / `SortableContext`:** The existing project pattern does NOT use these. They are for intra-column reordering. Use `useDraggable` + `useDroppable` to match the established `KanbanBoard.tsx` pattern.
+- **Calling `router.refresh()` before `await updateLeadField`:** Always await the server action first, then refresh. The existing KanbanBoard does this correctly inside `startTransition`.
+- **Dropping `react-hook-form` / Zod on drag-drop:** No form validation needed for a status change — `updateLeadField` already validates via `LEAD_STAGES.includes(value)` check.
+- **Removing `LeadsSearch` / `LeadTable`:** PIPE-01 requires the table to remain as an alternative view. Do not replace it.
+
+---
+
+## Don't Hand-Roll
+
+| Problem | Don't Build | Use Instead | Why |
+|---------|-------------|-------------|-----|
+| Drag detection (distance threshold) | Custom mouse event tracking | `PointerSensor` with `activationConstraint: { distance: 5 }` | Already proven in KanbanBoard.tsx; prevents accidental drag on click |
+| Keyboard accessibility for drag | Custom key handlers | `KeyboardSensor` from @dnd-kit/core | a11y for free |
+| Drag ghost/overlay | CSS clone positioning | `DragOverlay` from @dnd-kit/core | Correct portal rendering, no z-index fights |
+| Optimistic UI update | Complex local state with rollback | `useState` + `useTransition` (React pattern) | Already used in KanbanBoard.tsx and LeadTable.tsx |
+| Status validation | Re-implementing LEAD_STAGES check | `updateLeadField` server action already validates status | DRY — the action throws on invalid stage |
+
+**Key insight:** The entire drag-drop + persist pattern is already implemented and tested in `KanbanBoard.tsx`. This phase is a structural copy with domain adaptation, not a new implementation.
+
+---
+
+## Common Pitfalls
+
+### Pitfall 1: Columns wider than viewport on 6-stage board
+**What goes wrong:** 6 columns in `grid-cols-6` become too narrow on typical laptop screens (1280–1440px). The 3-column project kanban uses `grid-cols-3` with comfortable card width.
+**Why it happens:** 6 × min-width ≈ 720px+ is tight.
+**How to avoid:** Use `grid-cols-3 lg:grid-cols-6` or a horizontally scrollable container (`overflow-x-auto` on the grid wrapper). Alternatively, `min-w-[200px]` per column inside a scroll container.
+**Warning signs:** Cards truncate before the lead name is visible.
+
+### Pitfall 2: Won/Lost columns need visual distinction
+**What goes wrong:** Dropping to "won" or "lost" looks identical to other columns — user may not notice the semantic weight of these terminal states.
+**Why it happens:** Uniform column styling.
+**How to avoid:** Use visually distinct `headerClass` (green for won, red for lost) and consider a stronger `isOver` highlight for these columns. The STAGE_COLOR map in `LeadTable.tsx` already defines these colors — reuse them.
+
+### Pitfall 3: Leads not sorted consistently between views
+**What goes wrong:** Table shows leads ordered by `updated_at DESC`; kanban derived from the same array shows different visual order depending on column grouping.
+**Why it happens:** No explicit sort on the kanban card order within a column.
+**How to avoid:** Sort leads within each column by `updated_at DESC` (same as the existing query order). The `getLeadsWithTags` query already returns `orderBy(desc(leads.updated_at))` so inheriting that order is sufficient.
+
+### Pitfall 4: `router.refresh()` causes full re-mount of kanban
+**What goes wrong:** After a drag-drop, `router.refresh()` rehydrates the server component, re-running `getLeadsWithTags()`. If the drag animation hasn't completed, it can cause a visual flicker.
+**Why it happens:** Next.js App Router refresh re-renders the whole tree.
+**How to avoid:** The existing `KanbanBoard.tsx` uses the same pattern without issue. The `setActiveId(null)` call in `handleDragEnd` clears the overlay before the refresh arrives, so the flicker is acceptable. This is the project's established pattern — do not deviate.
+
+### Pitfall 5: Search/filter not available in kanban view
+**What goes wrong:** The search bar lives in `LeadsSearch.tsx` and only filters `LeadTable`. If the user switches to kanban, they lose the ability to filter.
+**Why it happens:** The view toggle renders either `LeadsSearch` (with its internal state) or the bare `LeadsKanbanBoard`.
+**How to avoid:** Two acceptable approaches: (a) wrap both views together inside `LeadsSearch` and pass filtered leads to both (preferred — search state persists across view switches); or (b) accept that kanban shows all leads unfiltered (simpler, acceptable for now given the single-user context). Document the choice in the plan.
+
+---
+
+## Code Examples
+
+### Existing updateLeadField signature (server action)
+
+```typescript
+// Source: VERIFIED from src/app/admin/leads/actions.ts line 174
+// EDITABLE_FIELDS includes "status" — drag-drop can call this directly
+export async function updateLeadField(
+  leadId: string,
+  fieldName: "name" | "email" | "phone" | "company" | "status" | "next_action",
+  value: string
+): Promise<void>
+// Validates: status must be in LEAD_STAGES; throws on invalid value
+// Side effects: revalidatePath("/admin/leads") + revalidatePath(`/admin/leads/${leadId}`)
+```
+
+### LEAD_STAGES canonical values
+
+```typescript
+// Source: VERIFIED from src/lib/lead-validators.ts line 4
+export const LEAD_STAGES = [
+  "contacted",
+  "qualified",
+  "proposal_sent",
+  "negotiating",
+  "won",
+  "lost",
+] as const;
+```
+
+### Existing STAGE_COLOR map (reuse for kanban column headers)
+
+```typescript
+// Source: VERIFIED from src/components/admin/leads/LeadTable.tsx line 20
+const STAGE_COLOR: Record<string, string> = {
+  contacted:     "bg-blue-100 text-blue-800",
+  qualified:     "bg-purple-100 text-purple-800",
+  proposal_sent: "bg-amber-100 text-amber-800",
+  negotiating:   "bg-orange-100 text-orange-800",
+  won:           "bg-green-100 text-green-800",
+  lost:          "bg-red-100 text-red-800",
+};
+// Move to a shared constant (e.g., src/lib/lead-constants.ts) if reused in both components
+```
+
+### PhasesViewToggle pattern (exact analog)
+
+```typescript
+// Source: VERIFIED from src/components/admin/kanban/PhasesViewToggle.tsx
+// State: useState<"list" | "kanban">("list")
+// Toggle: pill button group (bg-[#f4f4f5] rounded-lg p-1 w-fit)
+// Active: bg-white text-[#1A463C] shadow-sm
+// Inactive: text-[#71717a] hover:text-[#1a1a1a]
+```
+
+---
+
+## State of the Art
+
+| Old Approach | Current Approach | When Changed | Impact |
+|--------------|------------------|--------------|--------|
+| Lead status change via modal form | Inline dropdown in table cell (`StatusCell`) | Phase 14 | Drag-drop is the third mechanism; all write to same `updateLeadField` action |
+| Separate `/admin/analytics` route | Fused into `/admin` dashboard | Phase 18 | No impact on leads page |
+| `SendQuoteModal` with dead branch | Dead branch removed | Phase 18 | No impact |
+
+---
+
+## Project Constraints (from CLAUDE.md)
+
+| Directive | Impact on This Phase |
+|-----------|---------------------|
+| `clients.token` = rotatable, never PK | Not relevant (leads have no token) |
+| `quote_items` never exposed via client API | Not relevant (Kanban is admin-only) |
+| `deliverables.approved_at` immutable once set | Not relevant |
+| Auth: `/admin/*` → Auth.js session | Kanban lives at `/admin/leads` — already protected |
+| No file hosting v1 | Not relevant |
+| Migration safety: never drop/truncate rows | Phase 19 is UI-only — no schema changes, no migration needed |
+| Security: confirm before destructive commands | No destructive operations |
+| No package installs without showing name+version | No new packages needed |
+
+---
+
+## Environment Availability
+
+Step 2.6: SKIPPED — Phase 19 is a pure UI addition. All required libraries (`@dnd-kit/core`, `@dnd-kit/sortable`, `@dnd-kit/utilities`) are already installed. No external services, databases (beyond the existing Neon Postgres connection), or CLI tools are needed.
+
+---
+
+## Validation Architecture
+
+`nyquist_validation: false` in `.planning/config.json` — section omitted per config.
+
+---
+
+## Security Domain
+
+Phase 19 adds a new interaction path to an existing admin-only route (`/admin/leads`). No new auth surface is introduced.
+
+| ASVS Category | Applies | Standard Control |
+|---------------|---------|-----------------|
+| V2 Authentication | yes (existing) | Auth.js session via `requireAdmin()` in server action |
+| V4 Access Control | yes (existing) | `requireAdmin()` guard in `updateLeadField` — drag-drop calls same action |
+| V5 Input Validation | yes | `updateLeadField` validates status via `LEAD_STAGES.includes(value)` — no new validation needed |
+
+No new threat surface beyond what Phase 14 already addressed. The drag-drop `handleDragEnd` validates the `over.id` is a known stage before calling the server action — follow the same guard pattern as in `KanbanBoard.tsx` (line 190: `if (!(["todo", "in_progress", "done"] as string[]).includes(newStatus)) return;`).
+
+---
+
+## Assumptions Log
+
+| # | Claim | Section | Risk if Wrong |
+|---|-------|---------|---------------|
+| A1 | The `won` and `lost` columns are terminal states with no special side-effects beyond setting `leads.status` (no auto-creation of client/project, no email trigger) | Architecture Patterns | If the plan later requires auto-provisioning on "won", a new server action will be needed — but PIPE-01/02 say nothing about this, and PROP-04 (auto-provisioning) is deferred to backlog post-R5 |
+| A2 | Card content (name, company, next_action) is sufficient for the kanban view; no additional fields are needed per card | Code Examples | If the user wants tags or email visible on cards, the `LeadWithTags` type already provides them — no data-layer change, only card template change |
+| A3 | The search filter covering only the table view (not the kanban) is acceptable for v1 of this feature | Common Pitfalls | If the user wants search in kanban too, the fix is to lift filtered state into the toggle wrapper — straightforward but adds scope |
+
+---
+
+## Open Questions
+
+1. **Search/filter scope in kanban view**
+   - What we know: `LeadsSearch` holds the search `useState` and passes `filtered` leads to `LeadTable`. The kanban would receive all leads from the page.
+   - What's unclear: Does the user want the search bar to filter the kanban board too, or is it acceptable that kanban shows all leads?
+   - Recommendation: Default to wrapping both views inside a new `LeadsViewToggle` that receives `leads` (unfiltered) and `options`, manages the view toggle, and passes `filtered` leads to both `LeadTable` and `LeadsKanbanBoard`. This is a clean pattern and handles it gracefully.
+
+2. **Column layout: scroll vs. wrap on 6 columns**
+   - What we know: The existing kanban uses `grid-cols-3`. Six columns need more space.
+   - What's unclear: Target viewport is unknown (likely 1440px+ since this is a single-admin tool).
+   - Recommendation: Use `min-w-[180px]` per column inside an `overflow-x-auto` wrapper. This makes it work on any viewport without content truncation.
+
+---
+
+## Sources
+
+### Primary (HIGH confidence)
+- `src/components/admin/kanban/KanbanBoard.tsx` — exact @dnd-kit usage pattern, drag primitives, sensors, DragOverlay, optimistic update + router.refresh()
+- `src/components/admin/kanban/PhasesViewToggle.tsx` — view toggle pattern (list/kanban state, pill button UI)
+- `src/components/admin/leads/LeadTable.tsx` — STAGE_COLOR map, LeadWithTags usage, StatusCell inline dropdown
+- `src/app/admin/leads/actions.ts` — `updateLeadField` signature, EDITABLE_FIELDS, `requireAdmin()` guard
+- `src/lib/lead-validators.ts` — canonical LEAD_STAGES array (6 values)
+- `src/lib/admin-queries.ts` lines 883–942 — `LeadWithTags` type, `getLeadsWithTags()` query (all fields), `LeadFieldOptions`
+- `src/db/schema.ts` lines 441–462 — `leads` table definition, `status` column with all 6 stage values documented
+- `src/app/admin/leads/LeadsSearch.tsx` — search filter pattern, `LeadWithTags` + `LeadFieldOptions` prop interface
+- `src/app/admin/leads/page.tsx` — server component structure, data fetching pattern, `revalidate = 0`
+- `src/components/admin/AdminSidebar.tsx` — `/admin/leads` is already in NAV_ITEMS, no sidebar change needed
+- `package.json` — @dnd-kit/core ^6.3.1, @dnd-kit/sortable ^10.0.0, @dnd-kit/utilities ^3.2.2
+
+### Secondary (MEDIUM confidence)
+- `.planning/config.json` — `nyquist_validation: false` confirmed
+
+---
+
+## Metadata
+
+**Confidence breakdown:**
+- Standard stack: HIGH — all packages verified in package.json; exact primitives verified in KanbanBoard.tsx
+- Architecture: HIGH — all patterns verified from existing codebase analogs
+- Pitfalls: HIGH — derived from direct code inspection and known Next.js App Router behaviors
+- Data layer: HIGH — schema, actions, and query functions all read directly
+
+**Research date:** 2026-06-19
+**Valid until:** Stable indefinitely (no external dependencies; codebase-derived findings)

.planning/phases/19-pipeline-crm-kanban/19-VERIFICATION.md

@@ -0,0 +1,99 @@
+---
+phase: 19-pipeline-crm-kanban
+verified: 2026-06-19T18:09:00+02:00
+status: passed
+score: 5/5
+overrides_applied: 0
+re_verification: false
+---
+
+# Phase 19: Pipeline CRM Kanban — Verification Report
+
+**Phase Goal:** Aggiungere vista Kanban drag-drop alla pagina /admin/leads (PIPE-01 + PIPE-02), affiancata alla LeadTable esistente via toggle Lista/Kanban.
+**Verified:** 2026-06-19T18:09:00+02:00
+**Status:** passed
+**Re-verification:** No — initial verification
+
+## Goal Achievement
+
+### Observable Truths
+
+| # | Truth | Status | Evidence |
+|---|-------|--------|----------|
+| 1 | I lead sono visibili in una board Kanban con 6 colonne per stage (contacted, qualified, proposal_sent, negotiating, won, lost) | VERIFIED | `LeadsKanbanBoard.tsx` lines 19-33: `LeadStage` type and `LEAD_COLUMNS` array define all 6 stages with labels Contattato/Qualificato/Offerta inviata/Trattativa/Vinto/Perso. `grid-cols-6` layout confirmed line 159. |
+| 2 | Trascinare un lead da una colonna a un'altra aggiorna leads.status in modo persistente | VERIFIED | `handleDragEnd` (lines 132-150): optimistic `setLeadStatuses`, then `startTransition(async () => { await updateLeadField(leadId, "status", newStage); router.refresh(); })`. `updateLeadField` confirmed in `actions.ts` line 174 with `revalidatePath` side-effect. |
+| 3 | Spostare un lead nella colonna Vinto o Perso registra l'esito cambiando il campo status | VERIFIED | `won` and `lost` are members of `LEAD_COLUMNS` (lines 31-32) and `VALID_STAGES` (line 35). `handleDragEnd` line 141: `if (!VALID_STAGES.includes(newStage)) return` — only valid stages accepted. Dropping on "Vinto"/"Perso" column calls `updateLeadField(leadId, "status", "won"/"lost")`. Server-side `actions.ts` line 190 validates against `LEAD_STAGES` before writing to DB. |
+| 4 | La vista tabella inline-edit (LeadTable) resta disponibile e funzionante come vista alternativa | VERIFIED | `LeadsViewToggle.tsx` lines 70-71: `view === "list" ? <LeadTable leads={filtered} options={options} /> : <LeadsKanbanBoard leads={filtered} />`. `LeadTable` imported from existing component (line 6). `LeadsSearch.tsx` re-exports `LeadsViewToggle as LeadsSearch` — no existing import paths broken. |
+| 5 | Il toggle Lista/Kanban è visibile sopra il contenuto e preserva lo stato della ricerca quando si cambia vista | VERIFIED | `LeadsViewToggle.tsx`: single `useState("")` for query (line 18) and single `useMemo` for `filtered` (lines 20-31) shared by both views. Toggling `view` state does not reset `query` — both `<LeadTable>` and `<LeadsKanbanBoard>` receive the same `filtered` array. Pill toggle rendered above content in `flex justify-between` bar (lines 35-67). |
+
+**Score:** 5/5 truths verified
+
+### Required Artifacts
+
+| Artifact | Expected | Status | Details |
+|----------|----------|--------|---------|
+| `src/components/admin/leads/LeadsKanbanBoard.tsx` | Board Kanban con DndContext, 6 DroppableColumn, DraggableLeadCard, DragOverlay, ottimistic update | VERIFIED | 184 lines. `"use client"`, `DndContext`, `DragOverlay`, `useDroppable`, `useDraggable`, `useTransition`, `useState<Record<string, LeadStage>>`, all 6 LEAD_COLUMNS, `overflow-x-auto`, `grid-cols-6`, `startTransition`. Exports `LeadsKanbanBoard`. |
+| `src/components/admin/leads/LeadsViewToggle.tsx` | Client wrapper con useState<'list' \| 'kanban'> e pill toggle | VERIFIED | 77 lines. `"use client"`, `useState<"list" \| "kanban">("list")`, `useState("")`, `useMemo`, pill toggle with `bg-[#f4f4f5] rounded-lg p-1`. Exports `LeadsViewToggle`. |
+| `src/app/admin/leads/LeadsSearch.tsx` | Search + toggle integrati; passa filtered leads sia a LeadTable che a LeadsKanbanBoard | VERIFIED | Re-exports `LeadsViewToggle as LeadsSearch` — search and filtering now live in `LeadsViewToggle`. Backward compatibility preserved. |
+| `src/app/admin/leads/page.tsx` | Server component aggiornato che renderizza LeadsViewToggle | VERIFIED | 24 lines. Imports `LeadsViewToggle` from `@/components/admin/leads/LeadsViewToggle`. Renders `<LeadsViewToggle leads={leads} options={options} />`. No `LeadsSearch` import. |
+
+### Key Link Verification
+
+| From | To | Via | Status | Details |
+|------|----|-----|--------|---------|
+| `LeadsKanbanBoard.tsx` — `handleDragEnd` | `actions.ts` — `updateLeadField` | `startTransition(async () => { await updateLeadField(leadId, "status", newStage); router.refresh(); })` | WIRED | Line 147: `await updateLeadField(leadId, "status", newStage)` — exact match. `startTransition` at line 146. `router.refresh()` at line 148. |
+| `LeadsViewToggle.tsx` — `filtered` | `LeadsKanbanBoard` — `leads` prop | `filtered` array passed as prop | WIRED | Line 73: `<LeadsKanbanBoard leads={filtered} />` — exact match. |
+| `LeadsViewToggle` / view state | `LeadTable` + `LeadsKanbanBoard` | `useState<"list" \| "kanban">` | WIRED | Line 17: `useState<"list" \| "kanban">("list")`. Lines 70-73: conditional render branches both views from shared state. |
+
+### Data-Flow Trace (Level 4)
+
+| Artifact | Data Variable | Source | Produces Real Data | Status |
+|----------|---------------|--------|--------------------|--------|
+| `LeadsKanbanBoard.tsx` | `leads: LeadWithTags[]` | `getLeadsWithTags()` in `page.tsx` | Yes — Drizzle ORM `db.select().from(leads).leftJoin(tags, ...)` (admin-queries.ts lines 893-917). Returns aggregated rows with tags array. | FLOWING |
+| `LeadsViewToggle.tsx` | `filtered` (derived from `leads` prop) | Same `getLeadsWithTags()` → passed as prop from page.tsx | Yes — `useMemo` derives from server-fetched `leads` prop. | FLOWING |
+
+### Behavioral Spot-Checks
+
+Runnable entry points require a live dev server. Spot-checks performed via static analysis against the call chain instead.
+
+| Behavior | Check | Result | Status |
+|----------|-------|--------|--------|
+| `handleDragEnd` persists status change | `updateLeadField(leadId, "status", newStage)` call confirmed + `requireAdmin()` guard in actions.ts | Call at line 147; auth guard at actions.ts line 179 | PASS |
+| Won/Lost drag records outcome | `VALID_STAGES.includes(newStage)` guard + `won`/`lost` in LEAD_COLUMNS | Line 141 guard; lines 31-32 column defs | PASS |
+| Search state preserved across view switch | Single `query` state, single `filtered` memo, shared by both render branches | Lines 18, 20-31, 70-73 in LeadsViewToggle.tsx | PASS |
+| Commits exist in git | `git log 2c67e6f 607c257 34be934` | All 3 hashes present with correct descriptions | PASS |
+
+### Requirements Coverage
+
+| Requirement | Source Plan | Description | Status | Evidence |
+|-------------|-------------|-------------|--------|---------|
+| PIPE-01 | 19-01-PLAN.md | I lead sono visualizzabili in una board Kanban stile Pipedrive con colonne per stage e drag-drop per cambiare stage | SATISFIED | `LeadsKanbanBoard.tsx`: 6 `DroppableColumn` components, `DndContext` with `onDragEnd`, optimistic state update, persistent write via `updateLeadField`. |
+| PIPE-02 | 19-01-PLAN.md | Spostare un lead nelle colonne "Vinto"/"Perso" è il cambio-stato manuale dell'esito | SATISFIED | `won` and `lost` are standard columns in `LEAD_COLUMNS`. Dropping a card on either column triggers the same `updateLeadField` path — no modal, no separate confirmation. |
+
+### Anti-Patterns Found
+
+| File | Line | Pattern | Severity | Impact |
+|------|------|---------|----------|--------|
+| `LeadsKanbanBoard.tsx` | 110 | `const [, startTransition] = useTransition()` — unused first element of destructure | Info | No functional impact; minor lint noise. |
+
+No TODOs, FIXMEs, placeholder returns, or empty implementations found in any of the four modified files.
+
+### Human Verification Required
+
+A human checkpoint was completed and approved prior to this verification (the task plan included a blocking `checkpoint:human-verify` gate). The developer confirmed:
+
+- Board renders 6 columns with leads in correct stages
+- Drag-drop moves cards and persists after reload
+- Won/Lost columns register outcomes correctly
+- Lista/Kanban toggle works with search state preserved
+
+No further human verification items are outstanding.
+
+### Gaps Summary
+
+No gaps. All 5 must-have truths are VERIFIED against the codebase. All 4 artifacts are substantive and wired. All 3 key links are confirmed. Data flows from a real Drizzle ORM query. Both PIPE-01 and PIPE-02 are satisfied. Build passes (0 TypeScript errors, confirmed in commit 34be934 and known context). Human checkpoint approved in-session.
+
+---
+
+_Verified: 2026-06-19T18:09:00+02:00_
+_Verifier: Claude (gsd-verifier)_

.planning/phases/20-knowledge-base-cliente/20-01-PLAN.md

@@ -0,0 +1,232 @@
+---
+phase: 20-knowledge-base-cliente
+plan: 01
+type: execute
+wave: 1
+depends_on: []
+files_modified:
+  - src/db/migrations/0009_client_transcripts.sql
+autonomous: false
+requirements:
+  - KB-01
+must_haves:
+  truths:
+    - "Il file 0009_client_transcripts.sql esiste con DDL completo e idempotente"
+    - "La tabella client_transcripts è presente nel database di produzione"
+    - "Il codice schema-dipendente dei piani successivi non viene pushato prima che la migration sia applicata"
+  artifacts:
+    - path: "src/db/migrations/0009_client_transcripts.sql"
+      provides: "DDL CREATE TABLE IF NOT EXISTS client_transcripts con tutti i campi D-01/D-02"
+      contains: "CREATE TABLE IF NOT EXISTS client_transcripts"
+  key_links:
+    - from: "src/db/migrations/0009_client_transcripts.sql"
+      to: "database produzione"
+      via: "SSH tunnel + psql/docker exec"
+      pattern: "CREATE TABLE IF NOT EXISTS client_transcripts"
+---
+
+<objective>
+Scrivere il file SQL della migration manuale per la tabella `client_transcripts` e applicarlo al database di produzione prima di pushare qualsiasi codice schema-dipendente.
+
+Purpose: Il progetto ha `drizzle-kit generate` rotto (meta-snapshot fuori sync). Ogni schema change richiede SQL a mano applicato a prod via SSH PRIMA del codice dipendente — invariante bloccante LOCKED in CLAUDE.md.
+
+Output: `src/db/migrations/0009_client_transcripts.sql` applicato a prod. Il checkpoint umano sblocca i piani 20-02 e 20-03.
+</objective>
+
+<execution_context>
+@$HOME/.claude/get-shit-done/workflows/execute-plan.md
+@$HOME/.claude/get-shit-done/templates/summary.md
+</execution_context>
+
+<context>
+@.planning/ROADMAP.md
+@.planning/phases/20-knowledge-base-cliente/20-CONTEXT.md
+
+<interfaces>
+<!-- Pattern migration a mano — da src/db/migrations/0005 e 0008 -->
+<!-- Convenzioni: CREATE TABLE IF NOT EXISTS, tipi Postgres espliciti, FK con ON DELETE CASCADE -->
+<!-- nanoid PK: text NOT NULL — il valore viene inserito dall'applicazione, non da DEFAULT -->
+<!-- Struttura 0008: header commento, istruzioni additive, CREATE INDEX IF NOT EXISTS -->
+
+Da 0005_phase_10_crm_leads_activities_reminders.sql:
+```sql
+CREATE TABLE IF NOT EXISTS "activities" (
+  "id" text PRIMARY KEY NOT NULL,
+  "lead_id" text NOT NULL,
+  ...
+  FOREIGN KEY ("lead_id") REFERENCES "leads"("id") ON DELETE cascade
+);
+CREATE INDEX IF NOT EXISTS "activities_lead_id" ON "activities"("lead_id");
+```
+
+Da 0008_offer_tier_schema.sql (header):
+```sql
+-- Phase 12: Offer Editor — additive schema ...
+-- All statements additive/idempotent. No drops/truncates (Data Safety LOCKED).
+```
+</interfaces>
+</context>
+
+<tasks>
+
+<task type="auto">
+  <name>Task 1: Scrivere src/db/migrations/0009_client_transcripts.sql</name>
+  <files>src/db/migrations/0009_client_transcripts.sql</files>
+  <read_first>
+    - src/db/migrations/0008_offer_tier_schema.sql (pattern header + CREATE TABLE IF NOT EXISTS)
+    - src/db/migrations/0005_phase_10_crm_leads_activities_reminders.sql (pattern FK + index per tabelle CRM)
+    - .planning/phases/20-knowledge-base-cliente/20-CONTEXT.md (D-01 e D-02 — campi esatti)
+  </read_first>
+  <action>
+Creare il file `src/db/migrations/0009_client_transcripts.sql` con il seguente contenuto esatto:
+
+```sql
+-- Phase 20: Knowledge Base Cliente — tabella transcript datati per lead/cliente
+-- Additive only. No drops/truncates (Data Safety LOCKED).
+-- Applicare a prod via SSH tunnel PRIMA di pushare il codice dipendente (D-03).
+
+CREATE TABLE IF NOT EXISTS client_transcripts (
+  id          text PRIMARY KEY NOT NULL,
+  lead_id     text REFERENCES leads(id) ON DELETE CASCADE,
+  client_id   text REFERENCES clients(id) ON DELETE CASCADE,
+  title       text,
+  content     text NOT NULL,
+  call_date   date NOT NULL,
+  created_at  timestamp with time zone NOT NULL DEFAULT now()
+);
+
+CREATE INDEX IF NOT EXISTS client_transcripts_lead_id_idx
+  ON client_transcripts (lead_id);
+
+CREATE INDEX IF NOT EXISTS client_transcripts_client_id_idx
+  ON client_transcripts (client_id);
+
+CREATE INDEX IF NOT EXISTS client_transcripts_call_date_idx
+  ON client_transcripts (call_date DESC);
+```
+
+Note sui campi (da D-01/D-02):
+- `id`: text PK NOT NULL — nanoid inserito dall'app, nessun DEFAULT SQL (pattern progetto)
+- `lead_id`: nullable FK → leads(id) ON DELETE CASCADE (D-01)
+- `client_id`: nullable FK → clients(id) ON DELETE CASCADE (D-01)
+- `title`: text nullable (D-02) — titolo libero opzionale
+- `content`: text NOT NULL (D-02) — testo grezzo illimitato
+- `call_date`: date NOT NULL (D-02) — giorno della call, non timestamp
+- `created_at`: timestamp with time zone NOT NULL DEFAULT now() (D-02)
+
+Gli indici su lead_id, client_id e call_date ottimizzano le query per lead (Phase 20) e future query per client_id (Phase 21+).
+  </action>
+  <verify>
+    <automated>grep -c "CREATE TABLE IF NOT EXISTS client_transcripts" /Users/simonecavalli/Vault/IAMCAVALLI/src/db/migrations/0009_client_transcripts.sql</automated>
+  </verify>
+  <acceptance_criteria>
+    - File `src/db/migrations/0009_client_transcripts.sql` esiste
+    - Contiene `CREATE TABLE IF NOT EXISTS client_transcripts`
+    - Contiene `lead_id     text REFERENCES leads(id) ON DELETE CASCADE`
+    - Contiene `client_id   text REFERENCES clients(id) ON DELETE CASCADE`
+    - Contiene `content     text NOT NULL`
+    - Contiene `call_date   date NOT NULL`
+    - Contiene `created_at  timestamp with time zone NOT NULL DEFAULT now()`
+    - Contiene 3 `CREATE INDEX IF NOT EXISTS` (lead_id_idx, client_id_idx, call_date_idx)
+    - Nessun DROP o TRUNCATE nel file
+  </acceptance_criteria>
+  <done>File SQL completo e idempotente scritto, pronto per applicazione a prod.</done>
+</task>
+
+<task type="checkpoint:human-action" gate="blocking">
+  <name>Task 2: [BLOCKING] Applicare migration 0009 al database di produzione via SSH</name>
+  <read_first>
+    - src/db/migrations/0009_client_transcripts.sql (verificare il contenuto prima di applicare)
+  </read_first>
+  <action>
+La migration va applicata a prod via SSH tunnel PRIMA di eseguire i piani 20-02 e 20-03. Il database di produzione è accessibile solo tramite tunnel SSH.
+
+**Passi:**
+
+1. Aprire un terminale locale e avviare il tunnel SSH:
+   ```bash
+   ssh -L 54321:localhost:54321 root@178.104.27.55
+   ```
+   Lasciare questo terminale aperto per tutta la durata.
+
+2. In un altro terminale, applicare la migration con psql (il DATABASE_URL del progetto punta a 127.0.0.1:54321):
+   ```bash
+   cd /Users/simonecavalli/Vault/IAMCAVALLI
+   psql "$(grep DATABASE_URL .env.local | cut -d= -f2-)" -f src/db/migrations/0009_client_transcripts.sql
+   ```
+
+   Oppure, se il DATABASE_URL non funziona direttamente, applicare via docker exec sul server:
+   ```bash
+   # Sul server (nella sessione SSH aperta al punto 1):
+   docker exec -i <nome_container_postgres> psql -U <db_user> -d <db_name> < /path/to/0009_client_transcripts.sql
+   ```
+   (Il nome del container e le credenziali sono in `.env.local` o nei secret Coolify.)
+
+3. Verificare che la tabella esista:
+   ```bash
+   psql "$(grep DATABASE_URL .env.local | cut -d= -f2-)" -c "\d client_transcripts"
+   ```
+   Deve mostrare le colonne: id, lead_id, client_id, title, content, call_date, created_at.
+
+4. Chiudere il tunnel SSH solo dopo aver verificato il punto 3.
+  </action>
+  <what-built>Il file SQL 0009_client_transcripts.sql è stato scritto da Claude nel Task 1. Questo task richiede solo che tu applichi la migration a prod — nessun codice da scrivere.</what-built>
+  <how-to-verify>
+    Eseguire in locale (con tunnel attivo):
+    ```bash
+    psql "$(grep DATABASE_URL .env.local | cut -d= -f2-)" -c "SELECT column_name, data_type, is_nullable FROM information_schema.columns WHERE table_name = 'client_transcripts' ORDER BY ordinal_position;"
+    ```
+    Risultato atteso: 7 righe con le colonne id, lead_id, client_id, title, content, call_date, created_at.
+  </how-to-verify>
+  <resume-signal>Digita "migration applicata" dopo aver verificato che \d client_transcripts mostra le 7 colonne attese.</resume-signal>
+  <acceptance_criteria>
+    - La tabella `client_transcripts` esiste nel database di produzione
+    - `\d client_transcripts` mostra 7 colonne: id (text), lead_id (text, nullable), client_id (text, nullable), title (text, nullable), content (text, NOT NULL), call_date (date, NOT NULL), created_at (timestamptz, NOT NULL)
+    - 3 indici presenti: client_transcripts_lead_id_idx, client_transcripts_client_id_idx, client_transcripts_call_date_idx
+  </acceptance_criteria>
+  <done>Database di produzione aggiornato con la tabella client_transcripts. I piani 20-02 e 20-03 sono sbloccati.</done>
+</task>
+
+</tasks>
+
+<threat_model>
+## Trust Boundaries
+
+| Boundary | Descrizione |
+|----------|-------------|
+| developer → database prod | SQL applicato manualmente via SSH tunnel autenticato |
+
+## STRIDE Threat Register
+
+| Threat ID | Category | Component | Disposition | Mitigation Plan |
+|-----------|----------|-----------|-------------|-----------------|
+| T-20-01 | Tampering | 0009_client_transcripts.sql | mitigate | Revisione manuale del contenuto prima dell'applicazione (Task 2 step 1); file in version control |
+| T-20-02 | Repudiation | Applicazione migration prod | accept | L'operazione è tracciata nel git commit di questo piano; nessun audit log applicativo necessario per DDL |
+| T-20-03 | Denial of Service | DROP/TRUNCATE accidentale | mitigate | Il file usa solo CREATE TABLE IF NOT EXISTS + CREATE INDEX IF NOT EXISTS; nessuna istruzione distruttiva presente |
+</threat_model>
+
+<verification>
+```bash
+# Verificare che il file SQL esista e contenga i campi obbligatori
+grep -E "CREATE TABLE IF NOT EXISTS client_transcripts|content.*text NOT NULL|call_date.*date NOT NULL|lead_id.*REFERENCES leads|client_id.*REFERENCES clients" \
+  /Users/simonecavalli/Vault/IAMCAVALLI/src/db/migrations/0009_client_transcripts.sql
+
+# Verificare assenza di istruzioni distruttive
+grep -i "drop\|truncate" /Users/simonecavalli/Vault/IAMCAVALLI/src/db/migrations/0009_client_transcripts.sql | wc -l
+# Atteso: 0
+```
+</verification>
+
+<success_criteria>
+- `src/db/migrations/0009_client_transcripts.sql` esiste con DDL completo e idempotente (KB-01)
+- La tabella `client_transcripts` è presente nel database di produzione con le 7 colonne di D-02
+- Nessuna istruzione distruttiva nel file SQL
+- Il checkpoint umano è stato completato e segnalato con "migration applicata"
+</success_criteria>
+
+<output>
+Dopo il completamento del Task 2, creare `.planning/phases/20-knowledge-base-cliente/20-01-SUMMARY.md` con:
+- Migration file creato: `src/db/migrations/0009_client_transcripts.sql`
+- Migration applicata a prod: sì/no
+- Colonne verificate: lista delle 7 colonne confermate
+</output>

.planning/phases/20-knowledge-base-cliente/20-01-SUMMARY.md

@@ -0,0 +1,42 @@
+---
+phase: 20-knowledge-base-cliente
+plan: "01"
+status: complete
+completed_at: "2026-06-20"
+---
+
+# Plan 20-01 Summary: Migration client_transcripts
+
+## What Was Built
+
+Migration file `src/db/migrations/0009_client_transcripts.sql` scritto e applicato a produzione.
+
+## Key Files
+
+### Created
+- `src/db/migrations/0009_client_transcripts.sql` — DDL completo e idempotente
+
+## Migration Applied to Production
+
+- **Metodo:** SSH tunnel (127.0.0.1:54321) + Node.js postgres client
+- **Risultato:** ✓ applicata senza errori
+
+## Colonne Verificate (7/7)
+
+| column_name | data_type                | nullable |
+|-------------|--------------------------|----------|
+| id          | text                     | NO       |
+| lead_id     | text                     | YES      |
+| client_id   | text                     | YES      |
+| title       | text                     | YES      |
+| content     | text                     | NO       |
+| call_date   | date                     | NO       |
+| created_at  | timestamp with time zone | NO       |
+
+## Self-Check: PASSED
+
+- ✓ File SQL esiste con DDL completo e idempotente
+- ✓ Tabella `client_transcripts` presente nel database di produzione
+- ✓ 7 colonne verificate (D-01/D-02)
+- ✓ Nessun DROP/TRUNCATE nel file
+- ✓ 3 indici creati (lead_id_idx, client_id_idx, call_date_idx)

.planning/phases/20-knowledge-base-cliente/20-02-PLAN.md

@@ -0,0 +1,401 @@
+---
+phase: 20-knowledge-base-cliente
+plan: 02
+type: execute
+wave: 2
+depends_on:
+  - 20-01
+files_modified:
+  - src/db/schema.ts
+  - src/lib/lead-service.ts
+  - src/app/admin/leads/actions.ts
+autonomous: true
+requirements:
+  - KB-01
+  - KB-02
+must_haves:
+  truths:
+    - "La tabella clientTranscripts è definita in schema.ts con le relazioni Drizzle corrette"
+    - "getTranscripts(leadId) restituisce i transcript in ordine call_date DESC"
+    - "addTranscript e deleteTranscript sono server actions con requireAdmin guard"
+  artifacts:
+    - path: "src/db/schema.ts"
+      provides: "Definizione tabella clientTranscripts + relazioni Drizzle per leads e clients"
+      contains: "export const clientTranscripts = pgTable"
+    - path: "src/lib/lead-service.ts"
+      provides: "Query getTranscripts(leadId) — tutti i campi incluso content completo"
+      exports: ["getTranscripts"]
+    - path: "src/app/admin/leads/actions.ts"
+      provides: "Server actions addTranscript e deleteTranscript con requireAdmin"
+      exports: ["addTranscript", "deleteTranscript"]
+  key_links:
+    - from: "src/app/admin/leads/actions.ts"
+      to: "src/db/schema.ts"
+      via: "import clientTranscripts"
+      pattern: "clientTranscripts"
+    - from: "src/lib/lead-service.ts"
+      to: "src/db/schema.ts"
+      via: "import clientTranscripts"
+      pattern: "getTranscripts"
+---
+
+<objective>
+Aggiungere la definizione Drizzle della tabella `clientTranscripts` in schema.ts, la query `getTranscripts` in lead-service.ts e le server actions `addTranscript` / `deleteTranscript` in actions.ts.
+
+Purpose: Fornisce il layer dati completo per la UI del piano 20-03. Phase 21 (AI) leggerà i transcript via `getTranscripts(leadId)` — la firma deve restituire tutti i campi incluso `content` completo.
+
+Output: Schema Drizzle + query + actions pronte, build TypeScript senza errori.
+</objective>
+
+<execution_context>
+@$HOME/.claude/get-shit-done/workflows/execute-plan.md
+@$HOME/.claude/get-shit-done/templates/summary.md
+</execution_context>
+
+<context>
+@.planning/phases/20-knowledge-base-cliente/20-CONTEXT.md
+@.planning/phases/20-knowledge-base-cliente/20-01-SUMMARY.md
+
+<interfaces>
+<!-- Pattern esistenti estratti da src/db/schema.ts (linee 464-643) -->
+
+Pattern tabella CRM con FK lead_id (activities, linee 464-481):
+```typescript
+export const activities = pgTable("activities", {
+  id: text("id").primaryKey().$defaultFn(() => nanoid()),
+  lead_id: text("lead_id").notNull().references(() => leads.id, { onDelete: "cascade" }),
+  type: text("type").notNull(),
+  notes: text("notes").notNull(),
+  activity_date: timestamp("activity_date", { withTimezone: true }).notNull(),
+  created_at: timestamp("created_at", { withTimezone: true }).notNull().defaultNow(),
+});
+```
+
+Pattern relazioni (leadsRelations, linea 631-635):
+```typescript
+export const leadsRelations = relations(leads, ({ many }) => ({
+  quotes: many(quotes),
+  activities: many(activities),
+  reminders: many(reminders),
+}));
+
+export const activitiesRelations = relations(activities, ({ one }) => ({
+  lead: one(leads, { fields: [activities.lead_id], references: [leads.id] }),
+}));
+```
+
+Pattern TypeScript types (fine file):
+```typescript
+export type Activity = typeof activities.$inferSelect;
+export type NewActivity = typeof activities.$inferInsert;
+```
+
+Pattern query (lead-service.ts linee 51-57):
+```typescript
+export async function getActivityLog(leadId: string) {
+  return await db
+    .select()
+    .from(activities)
+    .where(eq(activities.lead_id, leadId))
+    .orderBy(desc(activities.activity_date));
+}
+```
+
+Pattern requireAdmin + server action (actions.ts linee 164-205):
+```typescript
+async function requireAdmin() {
+  const session = await getServerSession(authOptions);
+  if (!session) throw new Error("Non autorizzato");
+}
+
+export async function updateLeadField(leadId: string, ...) {
+  await requireAdmin();
+  // ... validazione ...
+  await db.update(leads).set({...}).where(eq(leads.id, leadId));
+  revalidatePath("/admin/leads");
+  revalidatePath(`/admin/leads/${leadId}`);
+}
+```
+
+Import correnti in actions.ts (linee 1-16):
+```typescript
+"use server";
+import { z } from "zod";
+import { db } from "@/db";
+import { leads, quotes, tags } from "@/db/schema";
+import { eq, and } from "drizzle-orm";
+import { revalidatePath } from "next/cache";
+import { getServerSession } from "next-auth";
+import { authOptions } from "@/lib/auth";
+```
+
+Import correnti in lead-service.ts (linee 1-4):
+```typescript
+import { eq, and, isNull, desc, gte, lte, ilike, or } from "drizzle-orm";
+import { db } from "@/db";
+import { leads, activities, reminders, quotes } from "@/db/schema";
+```
+</interfaces>
+</context>
+
+<tasks>
+
+<task type="auto">
+  <name>Task 1: Aggiungere clientTranscripts a src/db/schema.ts</name>
+  <files>src/db/schema.ts</files>
+  <read_first>
+    - src/db/schema.ts (leggere tutto il file per capire dove inserire la nuova tabella e come aggiornare le relations esistenti)
+    - .planning/phases/20-knowledge-base-cliente/20-CONTEXT.md (D-01, D-02 — campi esatti)
+  </read_first>
+  <action>
+Aggiungere in `src/db/schema.ts` tre blocchi, rispettando la struttura esistente del file:
+
+**1. Definizione tabella** — aggiungere dopo `// ============ REMINDERS TABLE` (dopo la chiusura della definizione reminders a linea ~499) e prima di `// ============ RELATIONS`:
+
+```typescript
+// ============ CLIENT TRANSCRIPTS TABLE (Knowledge Base — Phase 20) ============
+// Transcript datati delle call, multipli per lead o cliente.
+// lead_id e client_id sono entrambi nullable (D-01): un transcript può appartenere
+// a un lead pre-conversione (Phase 20 UI) o a un cliente post-conversione (futuro).
+// onDelete cascade su entrambe le FK — se il lead/cliente viene eliminato, i transcript vengono eliminati.
+export const clientTranscripts = pgTable("client_transcripts", {
+  id: text("id")
+    .primaryKey()
+    .$defaultFn(() => nanoid()),
+  lead_id: text("lead_id")
+    .references(() => leads.id, { onDelete: "cascade" }),
+  client_id: text("client_id")
+    .references(() => clients.id, { onDelete: "cascade" }),
+  title: text("title"), // opzionale — es. "Discovery call 12 giugno"
+  content: text("content").notNull(), // testo grezzo illimitato (PostgreSQL text)
+  call_date: text("call_date").notNull(), // DATE come text "YYYY-MM-DD" — coerente col pattern date nel progetto
+  created_at: timestamp("created_at", { withTimezone: true })
+    .notNull()
+    .defaultNow(),
+});
+```
+
+Nota su `call_date`: usare `text` invece di un tipo `date` Drizzle — il progetto gestisce le date come string ISO nei form e nel DB (vedi `activity_date` che è timestamp, ma `call_date` è date pura). Se Drizzle pg-core espone `date` nativo, usarlo; altrimenti usare `text("call_date").notNull()` per coerenza con i pattern di input da `<input type="date">` che restituisce stringhe "YYYY-MM-DD".
+
+**2. Relazioni** — aggiungere nei blocchi relations esistenti:
+
+Aggiornare `leadsRelations` (attuale linea ~631):
+```typescript
+export const leadsRelations = relations(leads, ({ many }) => ({
+  quotes: many(quotes),
+  activities: many(activities),
+  reminders: many(reminders),
+  transcripts: many(clientTranscripts),  // ← aggiungere questa riga
+}));
+```
+
+Aggiornare `clientsRelations` (attuale linea ~503):
+```typescript
+export const clientsRelations = relations(clients, ({ many }) => ({
+  projects: many(projects),
+  transcripts: many(clientTranscripts),  // ← aggiungere questa riga
+}));
+```
+
+Aggiungere le nuove relations dopo `remindersRelations`:
+```typescript
+export const clientTranscriptsRelations = relations(clientTranscripts, ({ one }) => ({
+  lead: one(leads, {
+    fields: [clientTranscripts.lead_id],
+    references: [leads.id],
+  }),
+  client: one(clients, {
+    fields: [clientTranscripts.client_id],
+    references: [clients.id],
+  }),
+}));
+```
+
+**3. TypeScript types** — aggiungere in fondo al file dopo `export type Reminder`:
+```typescript
+export type ClientTranscript = typeof clientTranscripts.$inferSelect;
+export type NewClientTranscript = typeof clientTranscripts.$inferInsert;
+```
+  </action>
+  <verify>
+    <automated>cd /Users/simonecavalli/Vault/IAMCAVALLI && npx tsc --noEmit 2>&1 | head -20</automated>
+  </verify>
+  <acceptance_criteria>
+    - `grep -c "export const clientTranscripts = pgTable" src/db/schema.ts` restituisce 1
+    - `grep -c "transcripts: many(clientTranscripts)" src/db/schema.ts` restituisce 2 (leadsRelations + clientsRelations)
+    - `grep -c "export const clientTranscriptsRelations" src/db/schema.ts` restituisce 1
+    - `grep -c "export type ClientTranscript" src/db/schema.ts` restituisce 1
+    - `npx tsc --noEmit` passa senza errori TypeScript relativi a schema.ts
+  </acceptance_criteria>
+  <done>clientTranscripts definita in schema.ts con relazioni Drizzle bidirezionali e TypeScript types esportati.</done>
+</task>
+
+<task type="auto">
+  <name>Task 2: Aggiungere getTranscripts a lead-service.ts e addTranscript/deleteTranscript ad actions.ts</name>
+  <files>src/lib/lead-service.ts, src/app/admin/leads/actions.ts</files>
+  <read_first>
+    - src/lib/lead-service.ts (leggere per vedere gli import correnti e dove appendere getTranscripts)
+    - src/app/admin/leads/actions.ts (leggere per vedere gli import correnti e la posizione di requireAdmin)
+    - src/db/schema.ts (dopo il Task 1 — per verificare il nome esatto dell'export clientTranscripts)
+  </read_first>
+  <action>
+**In src/lib/lead-service.ts:**
+
+Aggiungere `clientTranscripts` agli import esistenti:
+```typescript
+import { leads, activities, reminders, quotes, clientTranscripts } from "@/db/schema";
+```
+
+Appendere in fondo al file (dopo `getQuotesByLeadId`):
+```typescript
+// Get transcript log for a lead — call_date DESC (D-05)
+// Restituisce tutti i campi incluso content completo (Phase 21 li legge in blocco).
+export async function getTranscripts(leadId: string) {
+  return await db
+    .select()
+    .from(clientTranscripts)
+    .where(eq(clientTranscripts.lead_id, leadId))
+    .orderBy(desc(clientTranscripts.call_date));
+}
+```
+
+---
+
+**In src/app/admin/leads/actions.ts:**
+
+Aggiungere `clientTranscripts` agli import dal DB schema:
+```typescript
+import { leads, quotes, tags, clientTranscripts } from "@/db/schema";
+```
+
+Aggiungere `nanoid` agli import (serve per generare l'id del transcript):
+```typescript
+import { nanoid } from "nanoid";
+```
+
+Definire lo schema Zod per il transcript e appendere le due actions dopo le tag actions esistenti (dopo `renameLeadTag`):
+
+```typescript
+// ── Transcript actions (Phase 20 — KB-02) ────────────────────────────────────
+
+const addTranscriptSchema = z.object({
+  lead_id: z.string().min(1),
+  title: z.string().optional(),
+  content: z.string().min(1, "Il testo del transcript è obbligatorio"),
+  call_date: z.string().regex(/^\d{4}-\d{2}-\d{2}$/, "Data non valida (YYYY-MM-DD)"),
+});
+
+export async function addTranscript(data: z.infer<typeof addTranscriptSchema>) {
+  await requireAdmin();
+
+  const parsed = addTranscriptSchema.safeParse(data);
+  if (!parsed.success) {
+    return { success: false, error: parsed.error.issues[0].message };
+  }
+
+  try {
+    const [transcript] = await db
+      .insert(clientTranscripts)
+      .values({
+        id: nanoid(),
+        lead_id: parsed.data.lead_id,
+        title: parsed.data.title || null,
+        content: parsed.data.content,
+        call_date: parsed.data.call_date,
+      })
+      .returning();
+
+    revalidatePath(`/admin/leads/${parsed.data.lead_id}`);
+    return { success: true, transcript };
+  } catch (error) {
+    console.error("addTranscript error:", error);
+    return { success: false, error: "Errore nel salvataggio del transcript" };
+  }
+}
+
+export async function deleteTranscript(transcriptId: string, leadId: string) {
+  await requireAdmin();
+
+  if (!transcriptId) throw new Error("ID transcript richiesto");
+
+  try {
+    await db
+      .delete(clientTranscripts)
+      .where(eq(clientTranscripts.id, transcriptId));
+
+    revalidatePath(`/admin/leads/${leadId}`);
+    return { success: true };
+  } catch (error) {
+    console.error("deleteTranscript error:", error);
+    return { success: false, error: "Errore nell'eliminazione del transcript" };
+  }
+}
+```
+  </action>
+  <verify>
+    <automated>cd /Users/simonecavalli/Vault/IAMCAVALLI && npx tsc --noEmit 2>&1 | grep -E "lead-service|actions" | head -10</automated>
+  </verify>
+  <acceptance_criteria>
+    - `grep -c "export async function getTranscripts" src/lib/lead-service.ts` restituisce 1
+    - `grep -c "orderBy(desc(clientTranscripts.call_date))" src/lib/lead-service.ts` restituisce 1
+    - `grep -c "export async function addTranscript" src/app/admin/leads/actions.ts` restituisce 1
+    - `grep -c "export async function deleteTranscript" src/app/admin/leads/actions.ts` restituisce 1
+    - `grep -c "await requireAdmin()" src/app/admin/leads/actions.ts` è >= 3 (addTranscript e deleteTranscript devono averlo, più le actions esistenti)
+    - `grep -c "revalidatePath" src/app/admin/leads/actions.ts` aumenta di 2 rispetto al file originale (una per addTranscript, una per deleteTranscript)
+    - `npx tsc --noEmit` passa senza errori su lead-service.ts e actions.ts
+  </acceptance_criteria>
+  <done>getTranscripts esportata da lead-service.ts, addTranscript e deleteTranscript aggiunte ad actions.ts con requireAdmin guard e revalidatePath.</done>
+</task>
+
+</tasks>
+
+<threat_model>
+## Trust Boundaries
+
+| Boundary | Descrizione |
+|----------|-------------|
+| browser → server action | addTranscript e deleteTranscript sono "use server" — input non trusted |
+| server action → database | Query Drizzle con parametri typed |
+
+## STRIDE Threat Register
+
+| Threat ID | Category | Component | Disposition | Mitigation Plan |
+|-----------|----------|-----------|-------------|-----------------|
+| T-20-04 | Elevation of Privilege | addTranscript / deleteTranscript | mitigate | `await requireAdmin()` come prima istruzione in entrambe le actions — lancia Error se sessione assente, blocca esecuzione |
+| T-20-05 | Tampering | addTranscript — content | accept | Nessuna sanitization HTML richiesta (testo grezzo, non renderizzato come HTML — CONTEXT.md security note); Zod valida presenza e tipo |
+| T-20-06 | Tampering | deleteTranscript — transcriptId | mitigate | L'ID viene passato dalla UI admin-only (protetta da requireAdmin); Drizzle usa query parametrizzata — no SQL injection |
+| T-20-07 | Information Disclosure | getTranscripts | mitigate | Funzione usata solo in server components admin (`/admin/leads/[id]/page.tsx`); non esposta su API client (D-04 — client_id FK presente ma non UI client in Phase 20) |
+</threat_model>
+
+<verification>
+```bash
+cd /Users/simonecavalli/Vault/IAMCAVALLI
+
+# Schema: tabella e relazioni presenti
+grep -E "clientTranscripts|ClientTranscript" src/db/schema.ts | grep -v "^//"
+
+# lead-service: query con ordinamento corretto
+grep -A 6 "getTranscripts" src/lib/lead-service.ts
+
+# actions: requireAdmin su entrambe le nuove actions
+grep -B 1 "requireAdmin" src/app/admin/leads/actions.ts
+
+# Build TypeScript
+npx tsc --noEmit 2>&1 | tail -5
+```
+</verification>
+
+<success_criteria>
+- schema.ts contiene `clientTranscripts` table, relazioni bidirezionali (leads + clients), e TypeScript types (KB-01)
+- lead-service.ts esporta `getTranscripts(leadId)` che ordina per `call_date DESC` (KB-02, D-05)
+- actions.ts ha `addTranscript` e `deleteTranscript` entrambe con `requireAdmin()` guard (KB-02)
+- `npx tsc --noEmit` passa senza errori sui file modificati
+</success_criteria>
+
+<output>
+Dopo il completamento, creare `.planning/phases/20-knowledge-base-cliente/20-02-SUMMARY.md` con:
+- Tabella Drizzle aggiunta: clientTranscripts con 7 campi
+- Query aggiunta: getTranscripts(leadId) in lead-service.ts
+- Actions aggiunte: addTranscript, deleteTranscript in actions.ts
+- TypeScript check: passed/failed
+</output>

.planning/phases/20-knowledge-base-cliente/20-02-SUMMARY.md

@@ -0,0 +1,30 @@
+---
+phase: 20-knowledge-base-cliente
+plan: "02"
+status: complete
+completed_at: "2026-06-20"
+---
+
+# Plan 20-02 Summary: Data Layer client_transcripts
+
+## What Was Built
+
+Drizzle schema, query layer e server actions per i transcript delle call.
+
+## Key Files Modified
+
+- `src/db/schema.ts` — tabella `clientTranscripts` + relazioni bidirezionali + TypeScript types
+- `src/lib/lead-service.ts` — `getTranscripts(leadId)` con orderBy call_date DESC
+- `src/app/admin/leads/actions.ts` — `addTranscript` + `deleteTranscript` con requireAdmin
+
+## Self-Check: PASSED
+
+- ✓ `export const clientTranscripts = pgTable("client_transcripts", ...)` in schema.ts
+- ✓ `leadsRelations` aggiornato con `transcripts: many(clientTranscripts)`
+- ✓ `clientsRelations` aggiornato con `transcripts: many(clientTranscripts)`
+- ✓ `clientTranscriptsRelations` con one(leads) + one(clients)
+- ✓ `export type ClientTranscript` e `NewClientTranscript` esportati
+- ✓ `getTranscripts(leadId)` ordinato per `call_date DESC`
+- ✓ `addTranscript` con requireAdmin + Zod + revalidatePath
+- ✓ `deleteTranscript` con requireAdmin + revalidatePath
+- ✓ `npx tsc --noEmit` → no errors

.planning/phases/20-knowledge-base-cliente/20-03-PLAN.md

@@ -0,0 +1,626 @@
+---
+phase: 20-knowledge-base-cliente
+plan: 03
+type: execute
+wave: 3
+depends_on:
+  - 20-01
+  - 20-02
+files_modified:
+  - src/components/admin/leads/TranscriptModal.tsx
+  - src/components/admin/leads/LeadDetail.tsx
+  - src/app/admin/leads/[id]/page.tsx
+autonomous: true
+requirements:
+  - KB-02
+must_haves:
+  truths:
+    - "L'admin può aggiungere un transcript dalla pagina dettaglio lead via modal"
+    - "I transcript sono elencati in call_date DESC con titolo, data formattata e anteprima del testo"
+    - "Il testo completo di ogni transcript è espandibile/collassabile"
+    - "L'admin può eliminare un transcript con un bottone 'Elimina'"
+    - "La sezione Transcript appare dopo lo Storico Attività nel LeadDetail"
+  artifacts:
+    - path: "src/components/admin/leads/TranscriptModal.tsx"
+      provides: "Modal form per aggiungere transcript (call_date, title opzionale, content textarea)"
+      exports: ["TranscriptModal"]
+    - path: "src/components/admin/leads/LeadDetail.tsx"
+      provides: "Sezione Transcript con lista collassabile e azione Elimina"
+      contains: "Transcript"
+    - path: "src/app/admin/leads/[id]/page.tsx"
+      provides: "getTranscripts(id) nel Promise.all + prop transcripts passato a LeadDetail"
+      contains: "getTranscripts"
+  key_links:
+    - from: "src/components/admin/leads/TranscriptModal.tsx"
+      to: "src/app/admin/leads/actions.ts"
+      via: "import addTranscript"
+      pattern: "addTranscript"
+    - from: "src/components/admin/leads/LeadDetail.tsx"
+      to: "src/app/admin/leads/actions.ts"
+      via: "import deleteTranscript"
+      pattern: "deleteTranscript"
+    - from: "src/app/admin/leads/[id]/page.tsx"
+      to: "src/lib/lead-service.ts"
+      via: "import getTranscripts"
+      pattern: "getTranscripts"
+---
+
+<objective>
+Creare il componente `TranscriptModal` (form per aggiungere transcript) e integrare la sezione Transcript in `LeadDetail`, con wiring nella page server.
+
+Purpose: Completa il loop KB-02 — l'admin può incollare transcript datati e vederli elencati in ordine cronologico nel profilo lead. I dati sono pronti per essere letti dall'agente AI in Phase 21.
+
+Output: UI completa funzionante — modal di aggiunta + lista con expand/collapse + elimina.
+</objective>
+
+<execution_context>
+@$HOME/.claude/get-shit-done/workflows/execute-plan.md
+@$HOME/.claude/get-shit-done/templates/summary.md
+</execution_context>
+
+<context>
+@.planning/phases/20-knowledge-base-cliente/20-CONTEXT.md
+@.planning/phases/20-knowledge-base-cliente/20-02-SUMMARY.md
+
+<interfaces>
+<!-- Pattern estratti da file esistenti — l'executor NON deve rileggere questi file -->
+
+Da LogActivityModal.tsx — pattern modal con react-hook-form + zod + shadcn Dialog:
+```typescript
+"use client";
+import { useState } from "react";
+import { useForm } from "react-hook-form";
+import { zodResolver } from "@hookform/resolvers/zod";
+import { z } from "zod";
+// ... action import ...
+import { Dialog, DialogContent, DialogHeader, DialogTitle, DialogTrigger } from "@/components/ui/dialog";
+import { Form, FormControl, FormField, FormItem, FormLabel, FormMessage } from "@/components/ui/form";
+import { Input } from "@/components/ui/input";
+import { Textarea } from "@/components/ui/textarea";
+import { Button } from "@/components/ui/button";
+
+export function LogActivityModal({ leadId }: { leadId: string }) {
+  const [open, setOpen] = useState(false);
+  const [loading, setLoading] = useState(false);
+  const form = useForm<any>({
+    resolver: zodResolver(schema),
+    defaultValues: { lead_id: leadId, activity_date: new Date().toISOString().split("T")[0], ... },
+  });
+  async function onSubmit(data) {
+    setLoading(true);
+    try {
+      const result = await logActivity(data);
+      if (result.success) { setOpen(false); form.reset({...}); }
+    } finally { setLoading(false); }
+  }
+  return (
+    <Dialog open={open} onOpenChange={setOpen}>
+      <DialogTrigger asChild><Button variant="outline" size="sm">...</Button></DialogTrigger>
+      <DialogContent className="max-w-sm">
+        ...
+        <Input type="date" {...field} value={field.value || ""} />
+        <Textarea className="resize-none h-24" {...field} value={field.value || ""} />
+        <Button type="submit" className="w-full" disabled={loading}>...</Button>
+      </DialogContent>
+    </Dialog>
+  );
+}
+```
+
+Da LeadDetail.tsx — struttura esistente con Card shadcn + sezione attività (pattern da replicare per Transcript):
+```typescript
+"use client";
+import { useState, useTransition } from "react";
+import { useRouter } from "next/navigation";
+import { Lead, Activity, Reminder } from "@/db/schema";  // ← aggiungere ClientTranscript
+import { Card, CardContent, CardHeader, CardTitle } from "@/components/ui/card";
+import { Button } from "@/components/ui/button";
+import { format } from "date-fns";
+import { it } from "date-fns/locale";
+
+// Signature attuale LeadDetail:
+export function LeadDetail({
+  lead, activities, reminders, tags, tagOptions
+}: {
+  lead: Lead; activities: Activity[]; reminders: Reminder[];
+  tags: string[]; tagOptions: string[];
+})
+
+// Sezione Attività (pattern da replicare per Transcript):
+<Card>
+  <CardHeader><CardTitle>Storico Attività</CardTitle></CardHeader>
+  <CardContent>
+    {activities.length > 0 ? (
+      <div className="space-y-4">
+        {activities.map((activity) => (
+          <div key={activity.id} className="border-l-4 border-blue-300 pl-4 pb-4">
+            ...testo e date formattate con date-fns...
+          </div>
+        ))}
+      </div>
+    ) : (
+      <p className="text-gray-500 text-sm">Nessuna attività registrata</p>
+    )}
+  </CardContent>
+</Card>
+```
+
+Da page.tsx — pattern Promise.all e passaggio props:
+```typescript
+import { getActivityLog, getUpcomingReminders } from "@/lib/lead-service";
+// ← aggiungere: import { getTranscripts } from "@/lib/lead-service";
+
+const activities = await getActivityLog(id);
+const reminders = await getUpcomingReminders(id);
+// ← aggiungere nel Promise.all oppure sequenzialmente dopo
+
+return (
+  <LeadDetail
+    lead={lead}
+    activities={activities}
+    reminders={reminders}
+    tags={lead.tags}
+    tagOptions={options.tags}
+    // ← aggiungere: transcripts={transcripts}
+  />
+);
+```
+
+Tipo ClientTranscript (da schema.ts dopo Plan 02):
+```typescript
+export type ClientTranscript = typeof clientTranscripts.$inferSelect;
+// Campi: id, lead_id, client_id, title, content, call_date, created_at
+```
+
+Formattazione date italiana con date-fns (già usato nel progetto):
+```typescript
+import { format } from "date-fns";
+import { it } from "date-fns/locale";
+// call_date è string "YYYY-MM-DD" — usare new Date(t.call_date + "T00:00:00") per evitare timezone shift
+format(new Date(t.call_date + "T00:00:00"), "d MMMM yyyy", { locale: it })
+// → "12 giugno 2026"
+```
+</interfaces>
+</context>
+
+<tasks>
+
+<task type="auto">
+  <name>Task 1: Creare TranscriptModal.tsx e aggiornare page.tsx</name>
+  <files>src/components/admin/leads/TranscriptModal.tsx, src/app/admin/leads/[id]/page.tsx</files>
+  <read_first>
+    - src/components/admin/leads/LogActivityModal.tsx (pattern esatto del modal da replicare)
+    - src/app/admin/leads/[id]/page.tsx (vedere la struttura attuale per capire dove aggiungere getTranscripts)
+  </read_first>
+  <action>
+**Creare src/components/admin/leads/TranscriptModal.tsx:**
+
+```typescript
+"use client";
+
+import { useState } from "react";
+import { useForm } from "react-hook-form";
+import { zodResolver } from "@hookform/resolvers/zod";
+import { z } from "zod";
+import { addTranscript } from "@/app/admin/leads/actions";
+import {
+  Dialog,
+  DialogContent,
+  DialogHeader,
+  DialogTitle,
+  DialogTrigger,
+} from "@/components/ui/dialog";
+import {
+  Form,
+  FormControl,
+  FormField,
+  FormItem,
+  FormLabel,
+  FormMessage,
+} from "@/components/ui/form";
+import { Input } from "@/components/ui/input";
+import { Textarea } from "@/components/ui/textarea";
+import { Button } from "@/components/ui/button";
+
+const transcriptSchema = z.object({
+  lead_id: z.string().min(1),
+  title: z.string().optional(),
+  content: z.string().min(1, "Il testo del transcript è obbligatorio"),
+  call_date: z.string().regex(/^\d{4}-\d{2}-\d{2}$/, "Data non valida"),
+});
+
+type TranscriptInput = z.infer<typeof transcriptSchema>;
+
+export function TranscriptModal({ leadId }: { leadId: string }) {
+  const [open, setOpen] = useState(false);
+  const [loading, setLoading] = useState(false);
+  const [error, setError] = useState<string | null>(null);
+
+  const form = useForm<TranscriptInput>({
+    resolver: zodResolver(transcriptSchema),
+    defaultValues: {
+      lead_id: leadId,
+      title: "",
+      content: "",
+      call_date: new Date().toISOString().split("T")[0],
+    },
+  });
+
+  async function onSubmit(data: TranscriptInput) {
+    setLoading(true);
+    setError(null);
+    try {
+      const result = await addTranscript(data);
+      if (result.success) {
+        setOpen(false);
+        form.reset({
+          lead_id: leadId,
+          title: "",
+          content: "",
+          call_date: new Date().toISOString().split("T")[0],
+        });
+      } else {
+        setError(result.error ?? "Errore nel salvataggio");
+      }
+    } finally {
+      setLoading(false);
+    }
+  }
+
+  return (
+    <Dialog open={open} onOpenChange={setOpen}>
+      <DialogTrigger asChild>
+        <Button variant="outline" size="sm">
+          Aggiungi Transcript
+        </Button>
+      </DialogTrigger>
+      <DialogContent className="max-w-2xl">
+        <DialogHeader>
+          <DialogTitle>Aggiungi Transcript Call</DialogTitle>
+        </DialogHeader>
+        <Form {...form}>
+          <form onSubmit={form.handleSubmit(onSubmit)} className="space-y-4">
+            <div className="grid grid-cols-2 gap-4">
+              <FormField
+                control={form.control}
+                name="call_date"
+                render={({ field }) => (
+                  <FormItem>
+                    <FormLabel>Data call</FormLabel>
+                    <FormControl>
+                      <Input type="date" {...field} value={field.value || ""} />
+                    </FormControl>
+                    <FormMessage />
+                  </FormItem>
+                )}
+              />
+
+              <FormField
+                control={form.control}
+                name="title"
+                render={({ field }) => (
+                  <FormItem>
+                    <FormLabel>Titolo (opzionale)</FormLabel>
+                    <FormControl>
+                      <Input
+                        placeholder="es. Discovery call"
+                        {...field}
+                        value={field.value || ""}
+                      />
+                    </FormControl>
+                    <FormMessage />
+                  </FormItem>
+                )}
+              />
+            </div>
+
+            <FormField
+              control={form.control}
+              name="content"
+              render={({ field }) => (
+                <FormItem>
+                  <FormLabel>Transcript</FormLabel>
+                  <FormControl>
+                    <Textarea
+                      placeholder="Incolla qui il testo del transcript..."
+                      className="min-h-48 resize-y"
+                      {...field}
+                      value={field.value || ""}
+                    />
+                  </FormControl>
+                  <FormMessage />
+                </FormItem>
+              )}
+            />
+
+            {error && <p className="text-sm text-red-600">{error}</p>}
+
+            <Button type="submit" className="w-full" disabled={loading}>
+              {loading ? "Salvataggio..." : "Salva Transcript"}
+            </Button>
+          </form>
+        </Form>
+      </DialogContent>
+    </Dialog>
+  );
+}
+```
+
+---
+
+**Aggiornare src/app/admin/leads/[id]/page.tsx:**
+
+Aggiungere `getTranscripts` all'import da lead-service:
+```typescript
+import { getActivityLog, getUpcomingReminders, getTranscripts } from "@/lib/lead-service";
+```
+
+Aggiungere la fetch nel corpo del componente. La page attualmente fa due call sequenziali dopo il Promise.all. Aggiungere `getTranscripts(id)` in parallelo con le altre:
+
+```typescript
+const [leads, options, transcripts] = await Promise.all([
+  getLeadsWithTags(),
+  getLeadFieldOptions(),
+  getTranscripts(id),
+]);
+```
+
+Oppure, se la struttura attuale non usa Promise.all per tutte le chiamate, aggiungere sequenzialmente dopo `reminders`:
+```typescript
+const transcripts = await getTranscripts(id);
+```
+
+Passare la prop al componente:
+```typescript
+return (
+  <LeadDetail
+    lead={lead}
+    activities={activities}
+    reminders={reminders}
+    tags={lead.tags}
+    tagOptions={options.tags}
+    transcripts={transcripts}
+  />
+);
+```
+  </action>
+  <verify>
+    <automated>cd /Users/simonecavalli/Vault/IAMCAVALLI && npx tsc --noEmit 2>&1 | grep -E "TranscriptModal|page" | head -10</automated>
+  </verify>
+  <acceptance_criteria>
+    - File `src/components/admin/leads/TranscriptModal.tsx` esiste
+    - `grep -c "export function TranscriptModal" src/components/admin/leads/TranscriptModal.tsx` restituisce 1
+    - `grep -c "min-h-48" src/components/admin/leads/TranscriptModal.tsx` restituisce 1 (textarea generosa)
+    - `grep -c "Aggiungi Transcript" src/components/admin/leads/TranscriptModal.tsx` restituisce almeno 1
+    - `grep -c "getTranscripts" src/app/admin/leads/[id]/page.tsx` restituisce almeno 2 (import + chiamata)
+    - `grep -c "transcripts={transcripts}" src/app/admin/leads/[id]/page.tsx` restituisce 1
+    - `npx tsc --noEmit` passa senza errori su questi file
+  </acceptance_criteria>
+  <done>TranscriptModal creato, page.tsx aggiornata con getTranscripts e prop transcripts passata a LeadDetail.</done>
+</task>
+
+<task type="auto">
+  <name>Task 2: Aggiornare LeadDetail.tsx — aggiungere prop transcripts e sezione Transcript</name>
+  <files>src/components/admin/leads/LeadDetail.tsx</files>
+  <read_first>
+    - src/components/admin/leads/LeadDetail.tsx (leggere per vedere la struttura attuale — dove finisce la sezione Attività e dove inserire Transcript)
+  </read_first>
+  <action>
+Aggiornare `src/components/admin/leads/LeadDetail.tsx` con le seguenti modifiche:
+
+**1. Aggiungere import:**
+```typescript
+import { ClientTranscript } from "@/db/schema";
+import { useTransition } from "react";  // già importato — verificare che ci sia
+import { TranscriptModal } from "./TranscriptModal";
+import { deleteTranscript } from "@/app/admin/leads/actions";
+```
+
+**2. Aggiungere `transcripts` alla prop interface:**
+```typescript
+export function LeadDetail({
+  lead,
+  activities,
+  reminders,
+  tags,
+  tagOptions,
+  transcripts,  // ← aggiungere
+}: {
+  lead: Lead;
+  activities: Activity[];
+  reminders: Reminder[];
+  tags: string[];
+  tagOptions: string[];
+  transcripts: ClientTranscript[];  // ← aggiungere
+})
+```
+
+**3. Aggiungere state per expand/collapse e delete nel corpo del componente:**
+
+Aggiungere dopo gli useState esistenti:
+```typescript
+const [expandedIds, setExpandedIds] = useState<Set<string>>(new Set());
+const [deletingId, setDeletingId] = useState<string | null>(null);
+const [, startDeleteTransition] = useTransition();
+
+function toggleExpand(id: string) {
+  setExpandedIds((prev) => {
+    const next = new Set(prev);
+    if (next.has(id)) next.delete(id);
+    else next.add(id);
+    return next;
+  });
+}
+
+function handleDelete(transcriptId: string) {
+  setDeletingId(transcriptId);
+  startDeleteTransition(async () => {
+    try {
+      await deleteTranscript(transcriptId, lead.id);
+      router.refresh();
+    } catch (e) {
+      console.error("deleteTranscript error:", e);
+    } finally {
+      setDeletingId(null);
+    }
+  });
+}
+```
+
+**4. Aggiungere il pulsante TranscriptModal nell'header (accanto a LogActivityModal):**
+```typescript
+<div className="flex gap-2">
+  <LogActivityModal leadId={lead.id} />
+  <TranscriptModal leadId={lead.id} />  {/* ← aggiungere */}
+  <SendQuoteModal leadId={lead.id} />
+  <EditLeadModal lead={lead} />
+</div>
+```
+
+**5. Aggiungere la sezione Transcript dopo la sezione Storico Attività (dopo la chiusura del `</Card>` dell'attività):**
+
+```typescript
+{/* Transcript */}
+<Card>
+  <CardHeader className="flex flex-row items-center justify-between">
+    <CardTitle>Transcript Call</CardTitle>
+    <span className="text-sm text-gray-500">
+      {transcripts.length} {transcripts.length === 1 ? "transcript" : "transcript"}
+    </span>
+  </CardHeader>
+  <CardContent>
+    {transcripts.length > 0 ? (
+      <div className="space-y-4">
+        {transcripts.map((t) => {
+          const isExpanded = expandedIds.has(t.id);
+          // Formattare call_date come "12 giugno 2026"
+          // call_date è string "YYYY-MM-DD" — aggiungere T00:00:00 per evitare timezone shift
+          const formattedDate = format(
+            new Date(t.call_date + "T00:00:00"),
+            "d MMMM yyyy",
+            { locale: it }
+          );
+          // Anteprima: prime 3 righe o 200 caratteri (il primo valore raggiunto)
+          const preview = t.content
+            .split("\n")
+            .slice(0, 3)
+            .join("\n")
+            .slice(0, 200);
+          const hasMore = t.content.length > preview.length || t.content.split("\n").length > 3;
+
+          return (
+            <div key={t.id} className="border-l-4 border-purple-300 pl-4 pb-4">
+              <div className="flex items-start justify-between gap-2">
+                <div className="flex-1 min-w-0">
+                  <div className="flex items-center gap-2 flex-wrap">
+                    <span className="font-medium text-sm">{formattedDate}</span>
+                    {t.title && (
+                      <span className="text-gray-600 text-sm">— {t.title}</span>
+                    )}
+                  </div>
+                  <div className="mt-2 text-sm text-gray-700 whitespace-pre-wrap">
+                    {isExpanded ? t.content : preview}
+                    {!isExpanded && hasMore && (
+                      <span className="text-gray-400">...</span>
+                    )}
+                  </div>
+                  {hasMore && (
+                    <button
+                      onClick={() => toggleExpand(t.id)}
+                      className="text-xs text-blue-600 hover:underline mt-1"
+                    >
+                      {isExpanded ? "Mostra meno" : "Mostra tutto"}
+                    </button>
+                  )}
+                </div>
+                <Button
+                  variant="ghost"
+                  size="sm"
+                  className="text-red-600 hover:text-red-700 shrink-0"
+                  disabled={deletingId === t.id}
+                  onClick={() => handleDelete(t.id)}
+                >
+                  {deletingId === t.id ? "..." : "Elimina"}
+                </Button>
+              </div>
+            </div>
+          );
+        })}
+      </div>
+    ) : (
+      <p className="text-gray-500 text-sm">Nessun transcript registrato</p>
+    )}
+  </CardContent>
+</Card>
+```
+  </action>
+  <verify>
+    <automated>cd /Users/simonecavalli/Vault/IAMCAVALLI && npx tsc --noEmit 2>&1 | grep "LeadDetail" | head -10</automated>
+  </verify>
+  <acceptance_criteria>
+    - `grep -c "transcripts: ClientTranscript\[\]" src/components/admin/leads/LeadDetail.tsx` restituisce 1
+    - `grep -c "TranscriptModal" src/components/admin/leads/LeadDetail.tsx` restituisce almeno 2 (import + uso nel JSX)
+    - `grep -c "deleteTranscript" src/components/admin/leads/LeadDetail.tsx` restituisce almeno 2 (import + uso in handleDelete)
+    - `grep -c "Transcript Call" src/components/admin/leads/LeadDetail.tsx` restituisce 1 (titolo Card sezione)
+    - `grep -c "Mostra tutto" src/components/admin/leads/LeadDetail.tsx` restituisce 1 (expand/collapse)
+    - `grep -c "T00:00:00" src/components/admin/leads/LeadDetail.tsx` restituisce 1 (fix timezone per call_date)
+    - `grep -c "border-l-4 border-purple-300" src/components/admin/leads/LeadDetail.tsx` restituisce 1 (stile sezione transcript, distinto dal blu delle attività)
+    - `npx tsc --noEmit` passa senza errori su LeadDetail.tsx
+    - `npm run build` completa senza errori (verificare alla fine)
+  </acceptance_criteria>
+  <done>LeadDetail aggiornato con prop transcripts, sezione Transcript con lista expand/collapse e azione Elimina posizionata dopo Storico Attività.</done>
+</task>
+
+</tasks>
+
+<threat_model>
+## Trust Boundaries
+
+| Boundary | Descrizione |
+|----------|-------------|
+| browser → TranscriptModal form | Input utente admin non sanitizzato prima del submit |
+| TranscriptModal → addTranscript server action | "use server" boundary — Zod valida il payload |
+
+## STRIDE Threat Register
+
+| Threat ID | Category | Component | Disposition | Mitigation Plan |
+|-----------|----------|-----------|-------------|-----------------|
+| T-20-08 | Tampering | TranscriptModal — content field | accept | Il content è testo grezzo (textarea), non renderizzato come HTML nella UI — nessun XSS possibile con `whitespace-pre-wrap` senza `dangerouslySetInnerHTML`; Zod valida min length 1 |
+| T-20-09 | Elevation of Privilege | TranscriptModal — addTranscript call | mitigate | La route `/admin/leads/[id]` è protetta dal middleware Auth.js (sessione admin richiesta); `addTranscript` server action chiama `requireAdmin()` come prima istruzione |
+| T-20-10 | Elevation of Privilege | deleteTranscript client call | mitigate | `deleteTranscript` server action chiama `requireAdmin()` come prima istruzione; il transcriptId viene dalla prop SSR, non da input utente libero |
+| T-20-11 | Information Disclosure | Transcript content nel DOM | accept | La pagina è `/admin/*` — solo admin autenticato la vede; nessuna esposizione lato client pubblico |
+</threat_model>
+
+<verification>
+```bash
+cd /Users/simonecavalli/Vault/IAMCAVALLI
+
+# Verificare che tutti i file esistano
+ls -la src/components/admin/leads/TranscriptModal.tsx
+grep -c "getTranscripts" src/app/admin/leads/\[id\]/page.tsx
+grep -c "transcripts: ClientTranscript" src/components/admin/leads/LeadDetail.tsx
+
+# Verificare struttura sezione Transcript
+grep -n "Transcript\|deleteTranscript\|TranscriptModal" src/components/admin/leads/LeadDetail.tsx
+
+# Build completo
+npm run build 2>&1 | tail -15
+```
+</verification>
+
+<success_criteria>
+- `TranscriptModal.tsx` esiste con form: call_date (date input), title (optional text), content (textarea min-h-48) (KB-02)
+- `LeadDetail.tsx` ha prop `transcripts: ClientTranscript[]` e sezione "Transcript Call" dopo "Storico Attività" (KB-02, D-05)
+- Lista transcript mostra: data formattata in italiano, titolo se presente, anteprima testo con expand/collapse, bottone Elimina (KB-02)
+- `page.tsx` chiama `getTranscripts(id)` e passa `transcripts` a `LeadDetail` (KB-02)
+- `npm run build` completa senza errori TypeScript o di compilazione
+</success_criteria>
+
+<output>
+Dopo il completamento, creare `.planning/phases/20-knowledge-base-cliente/20-03-SUMMARY.md` con:
+- Componenti creati: TranscriptModal.tsx
+- Componenti modificati: LeadDetail.tsx, page.tsx
+- Features: modal aggiunta, lista con expand/collapse, eliminazione, data in italiano
+- Build status: passed/failed
+- Note su eventuali adattamenti ai pattern esistenti
+</output>

.planning/phases/20-knowledge-base-cliente/20-03-SUMMARY.md

@@ -0,0 +1,34 @@
+---
+phase: 20-knowledge-base-cliente
+plan: "03"
+status: complete
+completed_at: "2026-06-20"
+---
+
+# Plan 20-03 Summary: UI Transcript Call
+
+## What Was Built
+
+UI completa per aggiungere, visualizzare ed eliminare i transcript delle call nel profilo lead.
+
+## Key Files
+
+### Created
+- `src/components/admin/leads/TranscriptModal.tsx` — modal form (call_date + title + content textarea min-h-48)
+
+### Modified
+- `src/components/admin/leads/LeadDetail.tsx` — prop `transcripts: ClientTranscript[]`, sezione "Transcript Call" con expand/collapse e Elimina, TranscriptModal nel header
+- `src/app/admin/leads/[id]/page.tsx` — `getTranscripts(id)` nel Promise.all, prop `transcripts` passato a LeadDetail
+
+## Self-Check: PASSED
+
+- ✓ `TranscriptModal.tsx` esiste con form call_date/title/content (min-h-48)
+- ✓ `LeadDetail.tsx` ha prop `transcripts: ClientTranscript[]`
+- ✓ Sezione "Transcript Call" appare dopo "Storico Attività"
+- ✓ Data formattata in italiano con `new Date(t.call_date + "T00:00:00")` (fix TZ shift)
+- ✓ Preview 3 righe/200 caratteri con toggle "Mostra tutto / Mostra meno"
+- ✓ Bottone "Elimina" via `deleteTranscript` server action
+- ✓ `border-l-4 border-purple-300` — stile distinto dal blu delle attività
+- ✓ `getTranscripts(id)` nel Promise.all di page.tsx
+- ✓ `npx tsc --noEmit` → no errors
+- ✓ `npm run build` → clean

.planning/phases/20-knowledge-base-cliente/20-CONTEXT.md

@@ -0,0 +1,111 @@
+# Phase 20: Knowledge Base Cliente — Context
+
+**Gathered:** 2026-06-19
+**Status:** Ready for planning
+
+<domain>
+## Phase Boundary
+
+Aggiungere uno store di transcript datati per lead: l'admin incolla il testo grezzo di ogni call con data e titolo libero, la lista appare in ordine cronologico nel dettaglio lead, e i dati sono pronti per essere letti dall'agente AI in Phase 21.
+
+**In scope:** schema `client_transcripts` + server actions + UI nel LeadDetail
+**Out of scope:** UI per clienti (client_id FK presente ma non esposta), ricerca full-text sui transcript, trascrizione automatica da audio
+
+</domain>
+
+<decisions>
+## Implementation Decisions
+
+### Schema — client_transcripts
+
+- **D-01:** La tabella `client_transcripts` ha **entrambe** le FK nullable: `lead_id` (references leads, onDelete cascade) e `client_id` (references clients, onDelete cascade). Ragionamento: prepara la struttura per transcript post-conversione senza richiedere una migration futura.
+- **D-02:** Campi: `id` (nanoid PK), `lead_id` (nullable FK), `client_id` (nullable FK), `title` (text, optional — titolo libero es. "Discovery call 12 giugno"), `content` (text NOT NULL — testo incollato, lunghezza illimitata), `call_date` (date NOT NULL — giorno della call, non timestamp), `created_at` (timestamp with timezone, defaultNow).
+- **D-03:** Migration mano-scritta come 0009 — drizzle-kit generate è rotto. Applicata a prod via SSH **prima** di pushare il codice dipendente (invariante bloccante del progetto).
+
+### UI — Solo lato lead in Phase 20
+
+- **D-04:** In Phase 20 la UI espone solo il lato lead. La FK `client_id` è nello schema ma **non ha form o lista** in questa fase — si aggiunge in futuro se serve la pagina `/admin/clients/[id]`.
+- **D-05:** I transcript sono listati in ordine `call_date DESC` nel dettaglio lead (chiamata più recente in cima).
+
+### Claude's Discretion
+
+Le seguenti aree non sono state discusse — Claude ha flessibilità:
+
+- **Metadati:** No tipo enum — `title` libero (optional) è sufficiente. Il testo del transcript parla da solo.
+- **Placement UI:** Nuova sezione "Transcript" collassabile in `LeadDetail`, dopo la sezione Attività esistente. Stessa convenzione visiva (Card + lista). Form/modal per aggiungere seguendo il pattern `LogActivityModal`.
+- **Nessun limite di lunghezza:** `content` è `text` PostgreSQL (illimitato). Textarea nel form senza troncatura.
+
+</decisions>
+
+<canonical_refs>
+## Canonical References
+
+**Downstream agents MUST read these before planning or implementing.**
+
+### Requirements & Roadmap
+- `.planning/ROADMAP.md` — Phase 20 goal, success criteria, schema spec (`client_transcripts` con `lead_id/client_id, testo, data, titolo/tipo, created_at`)
+- `.planning/REQUIREMENTS.md` — KB-01 (schema additivo transcript), KB-02 (UI incolla/elenca)
+
+### Schema & Migrations
+- `src/db/schema.ts` — pattern tabelle append-only CRM: `activities` (lead_id, type, notes, activity_date), `reminders` (lead_id, due_date). La nuova `client_transcripts` segue questo pattern.
+- `src/db/migrations/0008_offer_tier_schema.sql` — ultimo esempio di SQL migration a mano (struttura e convenzioni da seguire)
+- `src/db/migrations/0005_phase_10_crm_leads_activities_reminders.sql` — migration originale di `activities` e `reminders` (pattern più vicino alla nuova tabella)
+
+### UI & Components
+- `src/components/admin/leads/LeadDetail.tsx` — struttura UI esistente del dettaglio lead (dove va inserita la sezione Transcript)
+- `src/components/admin/leads/LogActivityModal.tsx` — pattern modal per aggiungere dati CRM (da seguire per il form transcript)
+- `src/app/admin/leads/[id]/page.tsx` — pattern page con `Promise.all` per fetch parallele (aggiungere `getTranscripts(id)`)
+
+### Query & Actions Layer
+- `src/lib/lead-service.ts` — pattern query layer CRM (`getActivityLog`, `getUpcomingReminders` — aggiungere `getTranscripts`)
+- `src/app/admin/leads/actions.ts` — pattern server actions con `requireAdmin` guard (da seguire per `addTranscript`, `deleteTranscript`)
+
+</canonical_refs>
+
+<code_context>
+## Existing Code Insights
+
+### Reusable Assets
+- `LogActivityModal.tsx` — modal con form controllato (date picker + textarea + submit), pronto da clonare per il form transcript
+- `activities` / `reminders` pattern in `schema.ts` — FK `lead_id` con `onDelete: cascade`, `nanoid()` PK, `created_at` defaultNow — copia esatta per `client_transcripts`
+- `getActivityLog(leadId)` in `lead-service.ts` — query Drizzle con `where(eq(activities.lead_id, leadId))` e `orderBy(desc(activities.activity_date))` — pattern identico per `getTranscripts`
+- `Card`, `CardContent`, `CardHeader`, `CardTitle` da shadcn/ui — già usati nel LeadDetail per ogni sezione
+
+### Established Patterns
+- **Migration a mano**: ogni schema change è SQL scritto a mano (`CREATE TABLE IF NOT EXISTS`, tipi Postgres espliciti, FK con `ON DELETE CASCADE`). NON usare `drizzle-kit generate`.
+- **requireAdmin guard**: tutte le server actions in `actions.ts` iniziano con `await requireAdmin()` — obbligatorio anche per le nuove actions transcript.
+- **`revalidatePath`** dopo ogni mutation: `revalidatePath(\`/admin/leads/${leadId}\`)`.
+- **Promise.all fetch**: `page.tsx` del dettaglio lead usa `await Promise.all([...])` per fetch parallele — aggiungere `getTranscripts(id)` nello stesso array.
+
+### Integration Points
+- `src/app/admin/leads/[id]/page.tsx` — aggiungere `getTranscripts(id)` nel `Promise.all`, passare `transcripts` a `<LeadDetail />`
+- `src/components/admin/leads/LeadDetail.tsx` — aggiungere prop `transcripts` e sezione "Transcript" dopo `<ActivitySection>`
+- `src/db/schema.ts` — aggiungere definizione `client_transcripts` + relazioni Drizzle
+- `src/lib/lead-service.ts` — aggiungere `getTranscripts(leadId: string)`
+- `src/app/admin/leads/actions.ts` — aggiungere `addTranscript(leadId, data)` e `deleteTranscript(transcriptId)`
+
+</code_context>
+
+<specifics>
+## Specific Ideas
+
+- Il testo del transcript può essere molto lungo (trascrizioni complete di call). Il form deve avere una `<textarea>` con altezza generosa (es. min-h-48 o più) senza limite di caratteri.
+- Il `call_date` è una `date` (non timestamp) — l'admin sceglie il giorno della call, non l'ora. Nel DB: `DATE` type PostgreSQL.
+- La lista transcript deve mostrare: `call_date` formattata (es. "12 giugno 2026"), `title` se presente, anteprima delle prime righe del `content`, e un'azione "Elimina". Espansione/collapse del testo completo.
+- Phase 21 leggerà i transcript via `getTranscripts(leadId)` — la query deve restituire tutti i campi incluso `content` completo.
+
+</specifics>
+
+<deferred>
+## Deferred Ideas
+
+- **UI transcript per clienti** (`/admin/clients/[id]`): la FK `client_id` è nella tabella, ma la UI lato cliente è deferred a una fase futura (post v2.2 o su richiesta).
+- **Ricerca full-text sui transcript**: fuori scope v2.2 — i transcript vengono letti dall'AI in blocco, non cercati dall'admin.
+- **Trascrizione automatica da audio**: fuori scope — l'admin incolla manualmente il testo.
+
+</deferred>
+
+---
+
+*Phase: 20-Knowledge Base Cliente*
+*Context gathered: 2026-06-19*

.planning/phases/20-knowledge-base-cliente/20-DISCUSSION-LOG.md

@@ -0,0 +1,50 @@
+# Phase 20: Knowledge Base Cliente — Discussion Log
+
+> **Audit trail only.** Do not use as input to planning, research, or execution agents.
+> Decisions are captured in CONTEXT.md — this log preserves the alternatives considered.
+
+**Date:** 2026-06-19
+**Phase:** 20-knowledge-base-cliente
+**Areas discussed:** Lead-scoped o anche client?
+
+---
+
+## Lead-scoped o anche client?
+
+### Q1 — FK scope della tabella
+
+| Option | Description | Selected |
+|--------|-------------|----------|
+| Solo lead per ora | `client_transcripts` ha solo `lead_id`. Semplice, sufficiente per Phase 21. La FK `client_id` si aggiunge in futuro se serve. | |
+| Prepara entrambe le FK ora | `lead_id` e `client_id` entrambi nullable nella tabella. Più lavoro ora, ma non serve una migration futura se vuoi trascrizioni anche per clienti esistenti. | ✓ |
+
+**User's choice:** Prepara entrambe le FK ora
+**Notes:** L'utente preferisce prepararsi alla flessibilità futura con una sola migration ora.
+
+---
+
+### Q2 — UI Phase 20 per client_id
+
+| Option | Description | Selected |
+|--------|-------------|----------|
+| Solo dal dettaglio lead per ora | La FK `client_id` c'è nello schema ma non è esposta in UI in Phase 20. Si usa quando un lead è convertito — per dopo. | ✓ |
+| Anche dalla pagina admin cliente | Phase 20 aggiunge il blocco transcript sia nel LeadDetail che in `/admin/clients/[id]`. Più lavoro, ma copre subito clienti esistenti senza lead. | |
+
+**User's choice:** Solo dal dettaglio lead per ora
+**Notes:** L'UI Phase 20 è solo lato lead. `client_id` è nello schema ma non esposta.
+
+---
+
+## Claude's Discretion
+
+Le seguenti aree non sono state discusse e sono state lasciate al giudizio di Claude:
+
+- **Metadati del transcript** — Scelto: `title` (text, optional) + `content` (text, illimitato) + `call_date` (date). No enum tipo — il titolo libero è sufficiente.
+- **Collocazione UI nel LeadDetail** — Scelto: nuova sezione "Transcript" collassabile dopo le Attività, seguendo il pattern visivo esistente (Card + lista). Modal per aggiungere (come `LogActivityModal`).
+- **Ordinamento** — `call_date DESC` (chiamata più recente in cima).
+
+## Deferred Ideas
+
+- UI transcript nella pagina admin cliente (`/admin/clients/[id]`) — la FK è pronta, la UI è deferred post-v2.2.
+- Ricerca full-text sui transcript — fuori scope, i transcript vengono letti dall'AI in blocco.
+- Trascrizione automatica da audio — fuori scope v2.2.

.planning/phases/21-agente-ai-generazione-preventivo/21-01-SUMMARY.md

@@ -0,0 +1,53 @@
+---
+phase: 21-agente-ai-generazione-preventivo
+plan: "01"
+status: complete
+completed_at: "2026-06-20"
+requirements_satisfied:
+  - AI-01
+  - AI-02
+---
+
+# Plan 21-01 Summary: Agente AI — Generazione Preventivo
+
+## What Was Built
+
+Sistema completo di generazione preventivo AI: l'admin seleziona un lead/cliente e un'offerta, il sistema legge i transcript della call e chiama Claude Opus 4.8 per generare una bozza di preventivo strutturata in JSON. La bozza viene salvata nel DB come `draft`, l'admin la rivede e la pubblica.
+
+## Key Files
+
+### Created
+- `src/lib/proposal/schema.ts` — Zod schema `ProposalContent` (vision, problems 3-5, solutions, scope, deliverables, timeline, stagesRecap, comparisonMatrix)
+- `src/lib/proposal/agent.ts` — `generateProposalContent()`: chiama Claude Opus 4.8, valida output Zod, gestisce JSON wrapping in backtick
+- `src/lib/proposal/assemble.ts` — `assembleProposal()`: fonde content AI + offerta DB (snapshot prezzi) + profilo consulente in `AssembledProposal`
+- `src/lib/proposal/profile.ts` — `CONSULTANT_PROFILE`: fonte di verità statica (bio, facts, testimonianze, legal, nextSteps) — editare direttamente per aggiornare
+- `src/lib/proposal/queries.ts` — `listProposals`, `getProposalById`, `getProposalBySlug` con join leads/clients/offer_macros
+- `src/app/admin/preventivi/actions.ts` — `generateProposalDraft`, `publishProposal`, `updateProposalTitle`, `deleteProposal` (server actions)
+- `src/app/admin/preventivi/page.tsx` — lista preventivi admin con stato (bozza/pubblicato/accettato/rifiutato)
+- `src/app/admin/preventivi/genera/page.tsx` + `GeneraProposalForm.tsx` — form builder con pre-fill `?lead_id=X` da LeadDetail
+- `src/app/admin/preventivi/[id]/page.tsx` — review bozza: titolo editabile, pubblica, elimina
+- `src/db/migrations/0010_proposals.sql` — `CREATE TABLE IF NOT EXISTS proposals` (id, slug, lead_id, client_id, offer_macro_id, title, content jsonb, model, state, selected_tier, accepted_at immutabile, client_email, client_notes)
+
+### Modified
+- `src/db/schema.ts` — tabella `proposals` + `proposalsRelations` + tipi `Proposal`/`NewProposal`
+- `src/components/admin/AdminSidebar.tsx` — voce "Preventivi" + CTA globale lime "Genera preventivo"
+- `src/components/admin/leads/LeadDetail.tsx` — pulsante "Genera preventivo" → `/admin/preventivi/genera?lead_id=X`
+
+## Architecture Decisions
+
+| Decisione | Scelta | Motivo |
+|-----------|--------|--------|
+| Output AI | JSON strutturato → Zod validate | Coerenza visiva garantita, zero rischio HTML rotto |
+| Storage | `content jsonb` snapshot completo | Parser automatico postgres-js, type-safe, immutabile |
+| Profile | File `profile.ts` hardcoded | No UI necessaria v1, editing diretto semplice |
+| Modello | `claude-opus-4-8` | Qualità copywriting strategico superiore |
+
+## Requirements Verified
+
+- AI-01: ✅ Admin seleziona cliente+offerta → AI legge transcript + offerta → genera bozza personalizzata
+- AI-02: ✅ Admin rivede ed edita il titolo della bozza, la pubblica o elimina prima dell'invio
+
+## Post-Deploy Steps Completed
+
+- Migration 0010 applicata a prod via SSH tunnel (2026-06-20 14:29)
+- `ANTHROPIC_API_KEY` configurata in Coolify (2026-06-20 — fix chiave invalida)

.planning/phases/21-agente-ai-generazione-preventivo/21-CONTEXT.md

@@ -0,0 +1,122 @@
+# Phase 21: Agente AI — generazione preventivo - Context
+
+**Gathered:** 2026-06-20
+**Status:** Ready for planning
+
+<domain>
+## Phase Boundary
+
+L'admin apre il dettaglio di un lead, seleziona un'offerta e lancia la generazione: Claude legge i transcript del lead e i dati dell'offerta (tutti e 3 i tier) e produce una bozza di preventivo strutturata in sezioni fisse. L'admin rivede il testo in una textarea e salva la bozza prima che diventi pubblicabile in Phase 22.
+
+**In scope:** prompt engineering + chiamata API Claude + bozza strutturata in sezioni + form di revisione/editing + tabella `proposals` nel DB
+**Out of scope:** pagina pubblica `/preventivo/[slug]` (Phase 22), invio email (Phase 22), accettazione/rifiuto cliente (Phase 22)
+
+</domain>
+
+<decisions>
+## Implementation Decisions
+
+### Struttura output AI
+
+- **D-01:** Claude produce sezioni strutturate fisse, non testo libero. Il prompt specifica esattamente i blocchi da riempire.
+- **D-02:** Le sezioni del preventivo generato sono, in ordine:
+  1. **Situazione Attuale** — Claude descrive la situazione del cliente basandosi sul contenuto dei transcript (cosa sta vivendo, i pain emersi nelle call)
+  2. **La Proposta** — Presentazione personalizzata dell'offerta: perché questa offerta è giusta per questo cliente specifico
+  3. **Opzione A / Opzione B / Opzione C** — Una sotto-sezione per ogni tier, con lista dei servizi inclusi e prezzo pubblico del tier
+  4. **Prossimi Passi** — Call to action finale (Claude scrive testo standard, admin può editare)
+- **D-03:** L'admin **non sceglie un tier** prima della generazione. Claude genera tutti e 3 i tier in un unico documento. Il cliente leggerà le 3 opzioni e sceglierà.
+
+### Claude's Discretion
+
+Le seguenti aree non sono state discusse — Claude ha flessibilità:
+
+- **Builder location:** Entry point nel LeadDetail esistente (`src/components/admin/leads/LeadDetail.tsx`) — bottone "Genera Preventivo" che apre un modal o sezione inline con selezione offerta + trigger generazione. È il posto più naturale perché i transcript del lead sono già in contesto.
+- **UX generazione:** Fire-and-wait con spinner. Nessun streaming. L'admin clicca "Genera", vede uno stato di caricamento, poi il testo appare. Più semplice e affidabile per il caso d'uso (generazione ~5-15 sec).
+- **Editor bozza:** Textarea non-formattata. Il preventivo generato appare in una `<textarea>` grande che l'admin può editare liberamente prima di salvare. Nessun rich text editor in questa fase.
+- **SDK:** `@anthropic-ai/sdk` (pacchetto ufficiale Anthropic). Nessun Vercel AI SDK o LangChain.
+- **Modello:** `claude-sonnet-4-6` (modello attivo del progetto).
+- **Storage:** Nuova tabella `proposals` nel DB seguendo i pattern esistenti: `id` (nanoid PK), `lead_id` (FK → leads, nullable cascade), `offer_id` (FK → offer_macros), `content` (text NOT NULL — il testo completo della bozza), `slug` (text unique — nanoid, per il link pubblico Phase 22), `status` (text: `draft` | `published`), `created_at` (timestamp with timezone).
+- **Migration:** SQL a mano come `0010_proposals.sql` (drizzle-kit generate è rotto). Applicare a prod via SSH prima di pushare il codice.
+- **Server action / API route:** Server Action Next.js per il trigger di generazione (pattern coerente col resto del progetto). La chiamata Anthropic avviene lato server.
+
+</decisions>
+
+<canonical_refs>
+## Canonical References
+
+**Downstream agents MUST read these before planning or implementing.**
+
+### Requirements & Roadmap
+- `.planning/ROADMAP.md` — Phase 21 goal, success criteria (AI-01/AI-02), dipendenze (Phase 20 + DB offerte Phase 11/12)
+- `.planning/REQUIREMENTS.md` — AI-01 (generazione), AI-02 (revisione bozza)
+
+### Contesto Phase 20 (transcript — input dell'AI)
+- `.planning/phases/20-knowledge-base-cliente/20-CONTEXT.md` — Decisioni schema `client_transcripts`, pattern query, struttura dati che l'AI deve leggere
+- `src/lib/lead-service.ts` — `getTranscripts(leadId)` → restituisce array con `{id, title, content, call_date}` ordinati per data DESC; il campo `content` è testo integrale, non troncato
+
+### Dati offerta (input dell'AI)
+- `src/lib/offer-queries.ts` — `getOfferEditorData(macroId)` → restituisce i dati completi dell'offerta inclusi tier A/B/C con servizi e `public_price`; questa è la funzione da usare per costruire il contesto offerta nel prompt
+- `src/app/admin/offers/actions.ts` — pattern server actions per offerte (riferimento per nuovo layer proposals)
+
+### Schema & Migrations
+- `src/db/schema.ts` — pattern tabelle esistenti: `leads`, `activities`, `clientTranscripts`, `offer_macros` — usare per definire `proposals`
+- `src/db/migrations/0009_client_transcripts.sql` — ultimo esempio SQL migration a mano (struttura e convenzioni da replicare per `0010_proposals.sql`)
+
+### UI & Integration Points
+- `src/components/admin/leads/LeadDetail.tsx` — struttura UI dove va aggiunto il trigger "Genera Preventivo" e la sezione bozza
+- `src/app/admin/leads/[id]/page.tsx` — page con `Promise.all` per fetch parallele (pattern da seguire, aggiungere fetch proposals)
+- `src/app/admin/leads/actions.ts` — pattern `requireAdmin` guard + `revalidatePath` (da seguire per le nuove actions proposals)
+
+### Sicurezza & Architettura
+- `CLAUDE.md` → sezione Architecture Constraints: `quote_items` MAI esposti via client API; la nuova tabella `proposals` segue lo stesso principio — `content` non esposto via client token senza consenso esplicito Phase 22
+
+</canonical_refs>
+
+<code_context>
+## Existing Code Insights
+
+### Reusable Assets
+- `getTranscripts(leadId)` in `src/lib/lead-service.ts` — pronta, restituisce `content` integrale; concatenare i transcript in ordine cronologico per il prompt AI
+- `getOfferEditorData(macroId)` in `src/lib/offer-queries.ts` — restituisce tier A/B/C con array di servizi e `public_price` per tier; mappare questi dati nel prompt con nome servizi + prezzi
+- `nanoid` — già in uso nel progetto per PK; riusare per `proposals.id` e `proposals.slug`
+- `requireAdmin()` — già in ogni server action, obbligatorio anche per le nuove actions proposals
+
+### Established Patterns
+- **Migration a mano**: `CREATE TABLE IF NOT EXISTS`, tipi Postgres espliciti, FK con `ON DELETE CASCADE` (o `SET NULL` se nullable). NON usare `drizzle-kit generate`.
+- **Prod-first migration**: la migration `0010_proposals.sql` DEVE essere applicata a prod via SSH+docker exec (`ssh -L 54321:localhost:54321 root@178.104.27.55`) PRIMA di pushare il codice che la referenzia.
+- **Server Actions con revalidatePath**: ogni mutation chiama `revalidatePath()` sul path del lead.
+- **Promise.all fetch**: `page.tsx` del lead usa `await Promise.all([...])` — aggiungere `getProposals(id)` nello stesso array.
+
+### Integration Points
+- `src/app/admin/leads/[id]/page.tsx` — aggiungere `getProposals(id)` nel `Promise.all`, passare `proposals` a `<LeadDetail />`
+- `src/components/admin/leads/LeadDetail.tsx` — aggiungere sezione "Preventivo" con bottone trigger + form selezione offerta + textarea bozza
+- `src/db/schema.ts` — aggiungere definizione `proposals` + relazioni Drizzle
+- `src/lib/lead-service.ts` (o nuovo `src/lib/proposal-service.ts`) — `generateProposal(leadId, offerId)`, `getProposals(leadId)`, `saveProposal(id, content)`
+- `.env.local` — aggiungere `ANTHROPIC_API_KEY` (richiede configurazione in Coolify per produzione)
+
+</code_context>
+
+<specifics>
+## Specific Ideas
+
+- Il preventivo è multi-tier by design: non c'è una scelta del tier nella UI di generazione. Claude scrive 3 opzioni (A/B/C) in un solo documento, il cliente legge e sceglie.
+- La sezione "Opzione A/B/C" deve mostrare i nomi dei servizi inclusi in modo leggibile (non JSON grezzo), e il `public_price` del tier in modo prominente.
+- La sezione "Situazione Attuale" è la parte più personalizzata — Claude deve pescare dai transcript specifici insights sul cliente, non frasi generiche. Il prompt deve guidare su questo.
+- L'admin in fase di review vede l'intero testo del preventivo in una `<textarea>` di altezza generosa (tipo `min-h-96`) e può editare liberamente prima di salvare.
+
+</specifics>
+
+<deferred>
+## Deferred Ideas
+
+- **Scelta tier nel preventivo:** eventualmente l'admin potrebbe scegliere un tier da presentare → Phase 22 o fase futura post v2.2.
+- **Streaming output AI:** Claude scrive in real-time → futura ottimizzazione UX se la latenza diventa un problema.
+- **Versioning bozze:** mantenere storico delle generazioni per un lead → futura fase.
+- **Agente multi-step con tool_use:** architettura più sofisticata dove Claude chiama tool API invece di ricevere dati pre-imbarcati nel prompt → futura fase.
+
+</deferred>
+
+---
+
+*Phase: 21-Agente AI — generazione preventivo*
+*Context gathered: 2026-06-20*

.planning/phases/21-agente-ai-generazione-preventivo/21-DISCUSSION-LOG.md

@@ -0,0 +1,40 @@
+# Phase 21: Discussion Log
+
+**Session:** 2026-06-20
+**Areas discussed:** 1 of 4 identified (Struttura preventivo)
+
+---
+
+## Area: Struttura preventivo
+
+### Q1 — Tipo di output AI
+- **Opzioni:** Testo libero personalizzato / Sezioni strutturate fisse / Ibrido intro+sezioni
+- **Scelta:** Sezioni strutturate fisse
+- **Note:** L'admin e il cliente hanno bisogno di un documento prevedibile — le sezioni fisse rendono più facile sia il prompt engineering che l'editing successivo.
+
+### Q2 — Quali sezioni
+- **Opzioni (multi-select):** Situazione Attuale / La Proposta / Cosa è Incluso / Investimento + Prossimi Passi
+- **Scelta:** Tutte e 4 le sezioni
+- **Note:** L'utente ha aggiunto "penso che creo un agente apposta per questa parte" — chiarito che si trattava di un'altra sessione Claude Code, nessuna interferenza con questo progetto.
+
+### Q3 — Tier: singolo o tutti e 3
+- **Opzioni:** Un solo tier scelto dall'admin / Tutti e 3 i tier in un documento
+- **Scelta:** Tutti e 3 i tier in un documento
+- **Note:** Il preventivo presenta opzioni A/B/C al cliente, che sceglie leggendo.
+
+---
+
+## Aree non discusse (Claude's discretion)
+
+- **Builder location:** Entry point nel LeadDetail esistente
+- **UX generazione:** Fire-and-wait con spinner (no streaming)
+- **Editor bozza:** Textarea plain text
+
+---
+
+## Idee deferred
+
+- Scelta tier singolo nel preventivo (post v2.2)
+- Streaming output AI (ottimizzazione futura)
+- Versioning bozze
+- Agente multi-step con tool_use

.planning/phases/21-agente-ai-generazione-preventivo/21-PLAN.md

@@ -0,0 +1,72 @@
+# Phase 21+22 — Agente AI Preventivo + Pagina Pubblica Deck
+
+**Executed:** 2026-06-20
+**Status:** Code complete — pending migration 0010 to prod
+**Model used:** `claude-opus-4-8`
+**Note:** Le fasi 21 (AI generation) e 22 (public page) sono state eseguite in un'unica sessione per coerenza architetturale.
+
+---
+
+## Scope eseguito
+
+### Fase 21 — Agente AI (AI-01 / AI-02)
+- `@anthropic-ai/sdk@0.105.0` installato
+- `ANTHROPIC_API_KEY` aggiunta a `.env.local`
+- `src/lib/proposal/schema.ts` — Zod schema `ProposalContent` (sezioni AI)
+- `src/lib/proposal/agent.ts` — `generateProposalContent()` → Claude Opus 4.8, JSON strutturato validato Zod
+- `src/lib/proposal/assemble.ts` — `assembleProposal()` fonde AI + offerta DB + config consulente
+- `src/lib/proposal/profile.ts` — config statica consulente (bio, fatti, testimonianze, legal) — **editare con dati reali**
+- `src/lib/proposal/queries.ts` — `listProposals`, `getProposalById`, `getProposalBySlug`
+- `src/app/admin/preventivi/actions.ts` — `generateProposalDraft`, `publishProposal`, `updateProposalTitle`, `deleteProposal`
+- `src/app/admin/preventivi/page.tsx` — lista preventivi admin
+- `src/app/admin/preventivi/genera/page.tsx` + `GeneraProposalForm.tsx` — builder con pre-fill `?lead_id=X`
+- `src/app/admin/preventivi/[id]/page.tsx` — review bozza + pubblica + elimina
+- `src/components/admin/AdminSidebar.tsx` — voce "Preventivi" + CTA globale lime "Genera preventivo"
+- `src/components/admin/leads/LeadDetail.tsx` — pulsante "Genera preventivo" → `/admin/preventivi/genera?lead_id=X`
+
+### Fase 22 — Pagina pubblica deck (PUB-01 / PUB-02)
+- `src/app/preventivo/[slug]/page.tsx` — server component pubblico, gestisce stati draft/published/accepted/rejected
+- `src/app/preventivo/[slug]/actions.ts` — `acceptProposal` + `rejectProposal` con guard immutabilità `accepted_at`
+- `src/components/public/proposal/ProposalDeck.tsx` — deck navigabile (frecce ←/→ + dot cliccabili + keyboard), light mode iamcavalli
+- Sezioni (20+): Cover, Vision, Index, ChapterDivider, Strategist, Facts, Testimonials, ProblemNode, SynthesisDiagram, SolutionNode, SolutionSynthesis, Scope, Deliverables, Timeline, Pricing, StagesRecap, ComparisonMatrix, NextSteps, Accept, Closing
+
+### Schema DB
+- `src/db/migrations/0010_proposals.sql` — `CREATE TABLE IF NOT EXISTS proposals (...)` — **applicare a prod via SSH prima del push**
+- `src/db/schema.ts` — tabella `proposals` + relations + `Proposal`/`NewProposal` types
+
+---
+
+## Flusso end-to-end
+
+```
+Lead (con transcript) → LeadDetail "Genera preventivo"
+→ /admin/preventivi/genera?lead_id=X
+→ seleziona offerta → "Genera con AI"
+→ server action: legge transcript + offerta → chiama Claude Opus 4.8 → Zod validate
+→ assembla AssembledProposal (AI + offerta + config) → salva in proposals (draft)
+→ redirect /admin/preventivi/[id] → review bozza → "Pubblica"
+→ pagina pubblica /preventivo/[slug] — deck 20+ slide
+→ cliente sceglie tier A/B/C → accetta → accepted_at IMMUTABILE
+```
+
+---
+
+## Pending post-push
+
+1. **Migration 0010 a prod** via `ssh -L 54321:localhost:54321 root@178.104.27.55` + script node
+2. **Dati reali in `src/lib/proposal/profile.ts`** — bio, credenziali, testimonianze, contatti, foto URL
+3. **`ANTHROPIC_API_KEY` in Coolify** (già in `.env.local` per dev)
+4. **Wave 5 (opzionale)** — badge CRM su accept/reject + email Resend
+
+---
+
+## Decisioni architetturali
+
+| Decisione | Scelta | Motivo |
+|-----------|--------|--------|
+| Output AI | JSON strutturato → template fisso | Coerenza visiva garantita, zero rischio HTML rotto |
+| Bio/testimonianze | File config `profile.ts` | Editing semplice, no UI v1 |
+| Entry point | LeadDetail + sidebar globale | GSD prescrive LeadDetail; sidebar è additive |
+| `content` | `jsonb` (non `text`) | Parser automatico postgres-js, type-safe |
+| Modello | `claude-opus-4-8` | Migliore qualità copywriting strategico |
+| Phase split | 21+22 eseguite insieme | Dipendenza diretta, nessun vantaggio a splitparle |

.planning/phases/22-pagina-pubblica-preventivo/22-01-SUMMARY.md

@@ -0,0 +1,56 @@
+---
+phase: 22-pagina-pubblica-preventivo
+plan: "01"
+status: complete
+completed_at: "2026-06-20"
+requirements_satisfied:
+  - PUB-01
+  - PUB-02
+known_gaps:
+  - PUB-03 (email Resend — non implementata, deferred to backlog)
+---
+
+# Plan 22-01 Summary: Pagina Pubblica Preventivo + Deck
+
+## What Was Built
+
+Pagina pubblica `/preventivo/[slug]` che presenta la proposta generata come deck interattivo di 20+ slide navigabili (frecce, tasti keyboard, dot navigator). Il cliente sceglie il tier A/B/C e accetta/rifiuta dalla pagina; l'esito si riflette nel DB con `accepted_at` immutabile. PUB-03 (invio email Resend) non implementato — il link va condiviso manualmente.
+
+## Key Files
+
+### Created
+- `src/app/preventivo/[slug]/page.tsx` — server component pubblico; gestisce stati: draft (blocca accesso), published (mostra + accept), accepted/rejected (mostra con stato)
+- `src/app/preventivo/[slug]/actions.ts` — `acceptProposal` (guard `accepted_at` immutabile + `selected_tier` validato A/B/C), `rejectProposal`
+- `src/components/public/proposal/ProposalDeck.tsx` — deck client component: navigazione keyboard (←/→), dot cliccabili, topbar fissa (titolo + counter), bottombar fissa (frecce + dots); `h-screen overflow-hidden` per 100vh per slide
+- `src/components/public/proposal/sections/` — 20 componenti slide:
+  - CoverSection, VisionSection, IndexSection
+  - ChapterDivider (×5), StrategistSection, FactsSection, TestimonialsSection
+  - ProblemNodeSection, SynthesisDiagramSection
+  - SolutionNodeSection, SolutionSynthesisSection
+  - ScopeSection, DeliverablesSection, TimelineSection
+  - PricingSection, StagesRecapSection, ComparisonMatrixSection
+  - NextStepsSection, AcceptSection, ClosingSection
+
+## Architecture Decisions
+
+| Decisione | Scelta | Motivo |
+|-----------|--------|--------|
+| Layout | `h-screen overflow-hidden` per slide | Nessun scroll di pagina, navigazione slide-by-slide |
+| Navigazione | Keyboard + dots + click frecce | Universale, funziona su desktop e touch |
+| Accettazione | `accepted_at` immutabile (guard server action) | Pattern coerente con `deliverables.approved_at` |
+| Tier selezione | Radio A/B/C prima dell'accettazione | Cliente sceglie l'opzione, l'esito è univoco |
+| Email | Non implementata (PUB-03) | Scope minimo, link condiviso manualmente per ora |
+
+## Requirements Verified
+
+- PUB-01: ✅ Proposta visibile come pagina pubblica HTML a `/preventivo/[slug]`, deck 20+ slide
+- PUB-02: ✅ Cliente accetta/rifiuta dalla pagina; `state` + `accepted_at` + `selected_tier` aggiornati nel DB; admin vede esito nella lista preventivi
+
+## Known Gap
+
+- **PUB-03 — Email Resend**: il link preventivo non viene inviato automaticamente. Va copiato dall'admin e condiviso manualmente (es. via WhatsApp/email). Da implementare nella prossima milestone come prima feature.
+
+## Fix Post-Deploy
+
+- 2026-06-20: fix `h-screen overflow-hidden` su tutte le slide (erano `min-h-screen`, causavano scroll di pagina)
+- 2026-06-20: `ANTHROPIC_API_KEY` mancante in Coolify — aggiunta via PHP artisan + redeploy

CLAUDE.md

@@ -20,9 +20,17 @@ Planning in `.planning/`. Use `/gsd-plan-phase N` → `/gsd-execute-phase N`. St
 - Before running any migration: verify it only adds columns/tables — never drops or truncates production data
 - Confirm explicitly before any schema change that removes a column or table used by these entities
 
+## Deploy & DB Access (procedure)
+- Environments: local → Gitea (remote is named `gitea`, NOT `origin`) → Coolify (prod, auto-deploys on push to `main`)
+- Prod Postgres is NOT publicly exposed. Claude has working key-based SSH to `root@178.104.27.55` and applies migrations directly via docker exec — no SSH tunnel needed from the user:
+  `cat src/db/migrations/NNNN.sql | ssh root@178.104.27.55 "docker exec -i xwkk0040w0kk0gsgcgog8owk psql -U clienthub -d clienthub -v ON_ERROR_STOP=1 --single-transaction"`
+  (container = `xwkk0040w0kk0gsgcgog8owk`, db/user = `clienthub`; if the container hash changes, find it by scanning `docker ps` for the one whose db has the `payments` table). A tunnel `-L 54321:localhost:54321` is only needed to point local tooling at prod.
+- Migrations are hand-written SQL in `src/db/migrations/` (drizzle-kit generate is broken).
+- Ordering: apply an additive migration to prod BEFORE pushing the schema-dependent code, so the live portal never queries a missing column.
+
 ## Security
-- Confirm before any destructive command (rm -rf, reset --hard, force push, DROP TABLE, infra changes)
-- Never read/expose .env or credentials without explicit request
+- Confirm before any destructive command (rm -rf, reset --hard, force push, DROP TABLE / drop-column, truncate, infra changes)
+- Never print .env contents or credentials in plaintext output; using them internally to connect is fine
 - Don't install packages without showing name + registry + version first
-- Don't push to main or create PRs without explicit confirmation
+- Pushing to `main` is allowed automatically (standard local → Gitea → Coolify flow); never force-push to `main`
 - Any change to this section: propose full new version, get approval before applying

STATUS.md

@@ -0,0 +1,40 @@
+# ClientHub (IAMCAVALLI) — Status
+
+_Ultimo aggiornamento: 2026-06-22_
+
+## Stato attuale
+In prod su Coolify (Gitea→deploy). Milestone v2.3 "Email & Accesso" in planning (fase 23 non ancora avviata); ultime sessioni dedicate a fix/flow pre-fase-23. Build verde.
+
+---
+
+## Fatto (recente, cumulativo)
+- **Tassonomie centralizzate** in Impostazioni (modello Notion, pool persistenti `src/lib/taxonomy.ts`): Categoria/Ticket/Tipo/Obiettivo offerte + Fase/Offerta/Pacchetto catalogo. Add/remove/sync globale.
+- **Lead → Cliente**: `clients.email/phone` + `leads.archived` (migr. 0011, in prod). `convertLeadToClient` riusa `createClientCore`, porta i transcript, archivia il lead mantenendo "won". Tasto Converti/Convertito; lead archiviati nascosti da lista/kanban.
+- **Pagina progetto**: tab "Preventivo" rimossa; sidebar riordinata (Lead prima di Clienti).
+- **Offerta → Fasi/Task**: `importOfferIntoProject` crea fasi raggruppando i servizi del tier per `services.fase` (merge per titolo, dedup task). Trigger dalla tab Offerte (checkbox import).
+- **Offerte (modello + UI)**: nuovo campo `offer_macros.offer_type` ('una_tantum'|'retainer') + toggle "Modalità" nell'editor (migr. 0012). Tab Offerte ridisegnata: assegnazione a 2 step (Offerta→Tier con prezzo), badge tipo invece di "X mesi". Deck preventivo mostra il tipo.
+- **Cleanup dati**: rimossi 3 tier duplicati di "Web Domination" (bug pre-fix) + vincolo `UNIQUE(macro_id, tier_letter)`.
+- Fix precedenti: persistenza flag A/B/C offerte, sort+reorder colonne catalogo.
+
+## Da fare
+- [ ] **Fasi/Task dall'offerta** funzionano solo se i servizi hanno il campo **Fase** valorizzato nel Catalogo (altrimenti finiscono in "Generale").
+- [ ] **Forecast** (`forecast-queries.ts`) usa ancora `duration_months`: i retainer andrebbero trattati come ricorrenti (follow-up).
+- [ ] Micro legacy "Mantenimento" senza tier: valutare se rimuoverlo/normalizzarlo.
+- [ ] Avviare **fase 23** (OTP gate portale cliente + invio link preventivo via email, integrazione Resend) — `/gsd-plan-phase 23`.
+
+## Note tecniche
+- **DB prod = `.env.local` porta 54321**, raggiungibile SOLO via tunnel SSH `ssh -L 54321:localhost:54321 root@178.104.27.55` (cade per idle; usare `-o ServerAliveInterval=30`). `node`/`docker` non disponibili lato server → migrazioni si applicano da locale con script `postgres.js` su 127.0.0.1:54321.
+- **Ordine deploy con schema**: applicare la migrazione a prod PRIMA del push (il deploy gira subito il codice nuovo).
+- `drizzle-kit generate` è rotto → migrazioni SQL scritte a mano in `src/db/migrations/`.
+- `offer_micros` non ha `created_at` (no "tier più vecchio" affidabile).
+
+## File chiave
+| File | Scopo |
+|---|---|
+| src/lib/taxonomy.ts | Pool tassonomie (Impostazioni) |
+| src/app/admin/leads/actions.ts | `convertLeadToClient` |
+| src/app/admin/clients/new/actions.ts | `createClientCore` (riuso) |
+| src/app/admin/projects/project-actions.ts | `importOfferIntoProject`, assegna offerta |
+| src/components/admin/tabs/OffersTab.tsx | Tab Offerte (2 step + badge tipo) |
+| src/lib/admin-queries.ts | `getProjectFullDetail` (offerte/dedup) |
+| src/db/migrations/ | 0011 (email/phone/archived), 0012 (offer_type/unique) |

design-reference/DESIGN-SYSTEM.md

@@ -0,0 +1,148 @@
+# Design System: iamcavalli Admin & Client Portal (v1.0)
+
+> "Minimalist Premium / Quiet Luxury" — the aesthetic that replaces the old
+> mixed token/hardcoded styling across ClientHub's admin area. First applied
+> to the Lead Pipeline page (Phase: Pipeline redesign); the tokens and
+> primitives documented here are the base for restyling every other section.
+
+## Philosophy
+
+- **Quiet, not loud.** Elevation is nearly invisible (shadow opacity ≤ 0.02),
+  borders are hairline, color is used sparingly and only to carry meaning
+  (status, semantics) — never for decoration.
+- **Density with air.** Generous padding (`py-4 px-6` in tables, `p-4` in
+  kanban columns) paired with small type (`text-xs`, `text-[11px]`) reads as
+  premium rather than cramped.
+- **Numbers are monospace.** Prices, phone numbers, dates, counts — anything
+  tabular/numeric — use `font-mono` and right-alignment so columns of digits
+  line up.
+- **Dual-theme by construction.** Every surface is built from semantic
+  tokens (`bg-card`, `text-muted-foreground`, `border-border`, …), never raw
+  Tailwind palette classes (`bg-white`, `text-slate-900`, …) or hex literals.
+  This is what makes dark mode "just work" without a parallel dark stylesheet.
+- **Motion is functional.** Transitions exist to explain state change (sidebar
+  collapse, hover, drag) — `duration-200`–`duration-350`,
+  `ease-[cubic-bezier(0.4,0,0.2,1)]` for the sidebar specifically. No
+  decorative animation.
+
+## Typography
+
+- **Sans**: Plus Jakarta Sans (weights 300–700), loaded via `next/font/google`
+  as `--font-plus-jakarta-sans`, mapped to Tailwind's `--font-sans` in
+  `@theme`. Used for all UI text.
+- **Mono**: Geist Mono, `--font-geist-mono` → `--font-mono`. Used for numeric
+  data cells only (prices, phone numbers, counts, dates in tables).
+- **Scale conventions**:
+  - Page title: `text-2xl font-semibold tracking-tight`
+  - Page subtitle: `text-xs text-muted-foreground`
+  - Table header cells: `text-[11px] font-semibold uppercase tracking-wider text-muted-foreground`
+  - Table body: `text-sm`
+  - Badge/pill label: `text-[10px]`–`text-xs font-semibold uppercase tracking-wide`
+
+## Color Tokens
+
+Raw values live in `:root` (light) / `.dark` (dark) in `src/app/globals.css`
+and are mapped to Tailwind utilities via `@theme inline`. Components must
+consume the mapped utility, never the raw hex or a Tailwind palette shade.
+
+| Utility | Light | Dark | Usage |
+|---|---|---|---|
+| `bg-background` / `text-foreground` | `#ffffff` / `#1a1a1a` | `#0e1512` / `#f2f4f3` | Page canvas |
+| `bg-card` / `text-card-foreground` | `#ffffff` | `#131a16` | Cards, table, kanban cards, header bar |
+| `bg-muted` / `text-muted-foreground` | `#f9f9f9` / `#71717a` | `#171f1b` / `#9aa39e` | Subtle backgrounds, secondary text, kanban columns |
+| `bg-primary` / `text-primary-foreground` | `#1A463C` | `#3FA88C` | Primary actions, sidebar, active nav state |
+| `bg-accent` | `#DEF168` | `#DEF168` | Rare highlight accent (lime) |
+| `border-border` / `border-input` | `#e5e7eb` | `#26302b` | All hairline borders |
+| `ring-ring` | `#1A463C` | `#3FA88C` | Focus rings |
+| `bg-destructive` | `#ef4444` | `#f87171` | Destructive actions |
+
+**Sidebar exception**: the sidebar stays brand green `bg-[#1A463C]` in both
+themes (it is not a themed surface — it's the constant brand anchor).
+
+**Status/semantic colors** (lead stages, badges) use Tailwind's default
+palette (blue/purple/amber/orange/emerald/red) directly, each paired with an
+explicit `dark:` variant for legibility on dark surfaces — see `StatusBadge`.
+
+## Elevation & Radius
+
+- `--radius: 0.5rem` (base) is wired into `@theme` as `--radius-lg` (`=
+  --radius`) and `--radius-xl` (`= --radius + 0.25rem`), so `rounded-lg` /
+  `rounded-xl` utilities resolve consistently off one token.
+- `--shadow-card: 0 4px 20px rgba(0,0,0,0.01)` → `shadow-card` utility.
+  Default resting elevation for cards, table containers, kanban cards.
+- `--shadow-card-hover: 0 8px 30px rgba(0,0,0,0.02)` → `shadow-card-hover`
+  utility. Applied on hover for interactive cards.
+
+## Layout Conventions
+
+- **Table container**: `bg-card rounded-xl border border-border shadow-card
+  overflow-hidden`.
+- **Table header row**: `bg-muted/50 border-b border-border text-[11px]
+  uppercase tracking-wider text-muted-foreground`.
+- **Table body rows**: `py-4 px-6`, `divide-y divide-border`,
+  `hover:bg-muted/40 transition-colors`.
+- **Kanban column**: `bg-muted/60 rounded-xl border border-border p-4`.
+- **Kanban card**: `bg-card rounded-lg border border-border shadow-sm
+  hover:border-primary/30 hover:shadow-card-hover transition-all`.
+- **Page header**: title `text-2xl font-semibold tracking-tight
+  text-foreground`, subtitle `text-xs text-muted-foreground mt-1`, primary
+  action button `bg-primary text-primary-foreground hover:bg-primary/90`.
+
+## Color/Class Migration Map (dual-theme principle)
+
+When restyling any surface, replace hardcoded classes with token utilities:
+
+| Old (hardcoded) | New (token) |
+|---|---|
+| `bg-white` | `bg-card` |
+| `bg-slate-50` / `bg-gray-50` | `bg-muted` |
+| `border-slate-100` / `border-slate-200` | `border-border` |
+| `text-slate-900` / `text-[#1a1a1a]` | `text-foreground` |
+| `text-slate-500` / `text-slate-400` / `text-[#71717a]` | `text-muted-foreground` |
+| `bg-brand-dark` / `text-[#1A463C]` (as action color) | `bg-primary` / `text-primary` |
+
+## Motion
+
+- **Sidebar collapse**: `transition-[width] duration-350
+  ease-[cubic-bezier(0.4,0,0.2,1)]` on the `<aside>`; label/logo text use
+  `whitespace-nowrap transition-opacity duration-200` and fade to
+  `opacity-0` immediately on collapse, but only fade back in ~150ms after
+  the width transition starts on expand (avoids text reflow/wrap during the
+  animation).
+- **Hover states**: `transition-colors duration-150`–`duration-200` on rows,
+  buttons, nav links.
+- **Kanban drag**: dragged card renders in a `DragOverlay` with
+  `rotate-1 shadow-xl`; drop target column highlights via `border-primary
+  bg-primary/5`.
+
+## UX Rules
+
+1. Numeric/tabular data is always monospace and right-aligned in tables.
+2. Every interactive control has a visible focus state (`focus:ring-1
+   focus:ring-ring focus:border-primary` pattern) for keyboard accessibility.
+3. Status is always communicated redundantly — color + text label — never
+   color alone.
+4. Destructive actions use `destructive` tokens, never ad-hoc red.
+5. Empty states are muted, centered, and brief ("Nessun lead trovato").
+6. Sidebar collapse state persists across page loads via `localStorage`
+   (`iamcavalli:sidebar`) and is restored before paint where possible to
+   avoid layout jump.
+
+---
+
+## Component Inventory
+
+Primitives extracted from the Lead Pipeline redesign, intended for reuse
+across all future admin pages.
+
+| Component | Path | Purpose |
+|---|---|---|
+| `AdminShell` | `src/components/admin/AdminShell.tsx` | Client shell holding sidebar-collapsed state (persisted to `localStorage`), renders sidebar + top header + `<main>`. Wraps all `/admin/*` pages. |
+| `AdminSidebar` | `src/components/admin/AdminSidebar.tsx` | Collapsible brand sidebar (`w-64` ↔ `w-20`), controlled by `AdminShell`. Nav items, theme toggle, sign-out. |
+| `StatusBadge` | `src/components/ui/StatusBadge.tsx` | Rounded-full status pill with a color map per lead stage, each with a `dark:` variant. Replaces the old scattered `STAGE_COLOR` maps. |
+| `SearchInput` | `src/components/ui/SearchInput.tsx` | Search-icon input, `rounded-lg border-border focus:ring-primary`. |
+| `SegmentedToggle` | `src/components/ui/SegmentedToggle.tsx` | Generic Lista/Kanban-style segmented control (`bg-muted p-1 rounded-lg`, active option `bg-card shadow-sm`). |
+| `PageHeader` | `src/components/admin/PageHeader.tsx` | Page title (`text-2xl tracking-tight`) + subtitle + action slot, token-based. |
+| `LeadTable` | `src/components/admin/leads/LeadTable.tsx` | Luxury table restyle: `bg-card rounded-xl shadow-card`, uppercase muted headers, `hover:bg-muted/40` rows, uses `StatusBadge`. |
+| `LeadsKanbanBoard` | `src/components/admin/leads/LeadsKanbanBoard.tsx` | Kanban restyle: `bg-muted/60` columns with count pills, `bg-card` cards with `hover:border-primary/30`. Uses `@dnd-kit`, keeps all 6 lead stages. |
+| `LeadsViewToggle` | `src/components/admin/leads/LeadsViewToggle.tsx` | Wires `SearchInput` + `SegmentedToggle` together with the table/kanban views. |

design-reference/pagina-catalogo

@@ -0,0 +1,361 @@
+<!DOCTYPE html>
+<html lang="it">
+<head>
+  <meta charset="UTF-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1.0">
+  <title>Catalogo Servizi — Luxury Admin CRM</title>
+  <!-- Google Fonts: Plus Jakarta Sans -->
+  <link rel="preconnect" href="https://fonts.googleapis.com">
+  <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
+  <link href="https://fonts.googleapis.com/css2?family=Plus+Jakarta+Sans:wght@300;400;500;600;700&display=swap" rel="stylesheet">
+  <!-- Tailwind CSS CDN -->
+  <script src="https://cdn.tailwindcss.com"></script>
+  <script>
+    tailwind.config = {
+      theme: {
+        extend: {
+          fontFamily: {
+            sans: ['Plus Jakarta Sans', 'sans-serif'],
+          },
+          colors: {
+            brand: {
+              dark: '#1A463C',        /* Verde scuro richiesto */
+              darkHover: '#13342D',   /* Variante scura per hover */
+              active: 'rgba(255, 255, 255, 0.08)',
+              bg: '#F8F9FA',
+            }
+          }
+        }
+      }
+    }
+  </script>
+  <style>
+    .sidebar-transition {
+      transition: width 0.35s cubic-bezier(0.4, 0, 0.2, 1), transform 0.35s cubic-bezier(0.4, 0, 0.2, 1);
+    }
+  </style>
+</head>
+<body class="bg-brand-bg font-sans text-slate-800 antialiased min-h-screen flex overflow-x-hidden">
+
+  <!-- SIDEBAR -->
+  <aside id="sidebar" class="w-64 bg-brand-dark text-white flex flex-col justify-between p-6 border-r border-emerald-950/20 shrink-0 sidebar-transition relative z-10">
+    <div class="overflow-hidden">
+      <!-- Logo e Intestazione -->
+      <div class="mb-10 px-2 flex items-center justify-between">
+        <span id="sidebar-logo-text" class="text-lg font-bold tracking-wider text-emerald-50 whitespace-nowrap transition-opacity duration-300">iamcavalli</span>
+      </div>
+
+      <!-- Navigazione Principale -->
+      <nav class="space-y-1">
+        <a href="#" class="flex items-center gap-3 px-3 py-2.5 rounded-lg text-sm text-emerald-200/70 hover:text-white hover:bg-white/5 transition-all duration-200">
+          <svg class="w-4 h-4 shrink-0" fill="none" stroke="currentColor" stroke-width="1.8" viewBox="0 0 24 24"><path d="M4 6a2 2 0 012-2h2a2 2 0 012 2v4a2 2 0 01-2 2H6a2 2 0 01-2-2V6zM14 6a2 2 0 012-2h2a2 2 0 012 2v4a2 2 0 01-2 2h-2a2 2 0 01-2-2V6zM4 16a2 2 0 012-2h2a2 2 0 012 2v4a2 2 0 01-2 2H6a2 2 0 01-2-2v-4zM14 16a2 2 0 012-2h2a2 2 0 012 2v4a2 2 0 01-2 2h-2a2 2 0 01-2-2v-4z"/></svg>
+          <span class="sidebar-text whitespace-nowrap transition-opacity duration-300">Dashboard</span>
+        </a>
+        <a href="#" class="flex items-center gap-3 px-3 py-2.5 rounded-lg text-sm text-emerald-200/70 hover:text-white hover:bg-white/5 transition-all duration-200">
+          <svg class="w-4 h-4 shrink-0" fill="none" stroke="currentColor" stroke-width="1.8" viewBox="0 0 24 24"><path d="M13 10V3L4 14h7v7l9-11h-7z"/></svg>
+          <span class="sidebar-text whitespace-nowrap transition-opacity duration-300">Lead</span>
+        </a>
+        <a href="#" class="flex items-center gap-3 px-3 py-2.5 rounded-lg text-sm text-emerald-200/70 hover:text-white hover:bg-white/5 transition-all duration-200">
+          <svg class="w-4 h-4 shrink-0 text-emerald-400" fill="none" stroke="currentColor" stroke-width="1.8" viewBox="0 0 24 24"><path d="M17 20h5v-2a3 3 0 00-5.356-1.857M17 20H7m10 0v-2c0-.656-.126-1.283-.356-1.857M7 20H2v-2a3 3 0 015.356-1.857M7 20v-2c0-.656.126-1.283.356-1.857m0 0a5.002 5.002 0 019.288 0M15 7a3 3 0 11-6 0 3 3 0 016 0zm6 3a2 2 0 11-4 0 2 2 0 014 0zM7 10a2 2 0 11-4 0 2 2 0 014 0z"/></svg>
+          <span class="sidebar-text whitespace-nowrap transition-opacity duration-300">Clienti</span>
+        </a>
+        <a href="#" class="flex items-center gap-3 px-3 py-2.5 rounded-lg text-sm text-emerald-200/70 hover:text-white hover:bg-white/5 transition-all duration-200">
+          <svg class="w-4 h-4 shrink-0" fill="none" stroke="currentColor" stroke-width="1.8" viewBox="0 0 24 24"><path d="M3 7v10a2 2 0 002 2h14a2 2 0 002-2V9a2 2 0 00-2-2h-6l-2-2H5a2 2 0 00-2 2z"/></svg>
+          <span class="sidebar-text whitespace-nowrap transition-opacity duration-300">Progetti</span>
+        </a>
+        <a href="#" class="flex items-center gap-3 px-3 py-2.5 rounded-lg text-sm text-emerald-200/70 hover:text-white hover:bg-white/5 transition-all duration-200">
+          <svg class="w-4 h-4 shrink-0 text-emerald-400" fill="none" stroke="currentColor" stroke-width="1.8" viewBox="0 0 24 24"><path d="M9 12h6m-6 4h6m2 5H7a2 2 0 01-2-2V5a2 2 0 012-2h5.586a1 1 0 01.707.293l5.414 5.414a1 1 0 01.293.707V19a2 2 0 01-2 2z"/></svg>
+          <span class="sidebar-text whitespace-nowrap transition-opacity duration-300">Preventivi</span>
+        </a>
+        <a href="#" class="flex items-center gap-3 px-3 py-2.5 rounded-lg text-sm text-emerald-200/70 hover:text-white hover:bg-white/5 transition-all duration-200">
+          <svg class="w-4 h-4 shrink-0 text-emerald-400" fill="none" stroke="currentColor" stroke-width="1.8" viewBox="0 0 24 24"><path d="M7 7h.01M6 20h12a2 2 0 002-2V6a2 2 0 00-2-2H6a2 2 0 00-2 2v12a2 2 0 002 2z"/></svg>
+          <span class="sidebar-text whitespace-nowrap transition-opacity duration-300">Offerte</span>
+        </a>
+        <!-- Stato Attivo su Catalogo -->
+        <a href="#" class="flex items-center gap-3 px-3 py-2.5 rounded-lg text-sm text-white bg-brand-active font-medium transition-all duration-200 shadow-sm">
+          <svg class="w-4 h-4 shrink-0 text-emerald-400" fill="none" stroke="currentColor" stroke-width="1.8" viewBox="0 0 24 24"><path d="M12 6.253v13m0-13C10.832 5.477 9.246 5 7.5 5S4.168 5.477 3 6.253v13C4.168 18.477 5.754 18 7.5 18s3.332.477 4.5 1.253m0-13C13.168 5.477 14.754 5 16.5 5c1.747 0 3.332.477 4.5 1.253v13C19.832 18.477 18.247 18 16.5 18c-1.746 0-3.332.477-4.5 1.253"/></svg>
+          <span class="sidebar-text whitespace-nowrap transition-opacity duration-300">Catalogo</span>
+        </a>
+      </nav>
+    </div>
+
+    <!-- Area Inferiore Sidebar -->
+    <div class="border-t border-white/10 pt-4 space-y-3 overflow-hidden">
+      <div class="flex items-center justify-between px-3 py-1 text-xs text-emerald-200/50 whitespace-nowrap">
+        <span class="sidebar-text transition-opacity duration-300">Tema</span>
+        <button class="p-1 rounded-full bg-white/5 hover:bg-white/10 text-emerald-200 hover:text-white transition-all duration-200">
+          <svg class="w-4 h-4" fill="none" stroke="currentColor" stroke-width="1.8" viewBox="0 0 24 24"><path d="M12 3v1m0 16v1m9-9h-1M4 12H3m15.364-6.364l-.707.707M6.343 17.657l-.707.707m12.728 0l-.707-.707M6.343 6.343l-.707-.707M14 12a2 2 0 11-4 0 2 2 0 014 0z"/></svg>
+        </button>
+      </div>
+      <a href="#" class="flex items-center gap-3 px-3 py-2 rounded-lg text-sm text-red-300/80 hover:text-red-200 hover:bg-red-950/20 transition-all duration-200 whitespace-nowrap">
+        <svg class="w-4 h-4 shrink-0" fill="none" stroke="currentColor" stroke-width="1.8" viewBox="0 0 24 24"><path d="M17 16l4-4m0 0l-4-4m4 4H7m6 4v1a3 3 0 01-3 3H6a3 3 0 01-3-3V7a3 3 0 013-3h4a3 3 0 013 3v1"/></svg>
+        <span class="sidebar-text transition-opacity duration-300">Esci</span>
+      </a>
+    </div>
+  </aside>
+
+  <!-- SEZIONE PRINCIPALE -->
+  <div class="flex-1 flex flex-col min-w-0">
+    
+    <!-- BARRA DI INTESTAZIONE SUPERIORE -->
+    <header class="h-16 border-b border-slate-100 bg-white px-8 flex items-center justify-between shrink-0">
+      <div class="flex items-center gap-4">
+        <!-- Pulsante Apri/Chiudi Sidebar -->
+        <button id="sidebar-toggle" class="p-2 -ml-2 rounded-lg text-slate-500 hover:bg-slate-50 hover:text-slate-800 transition-colors focus:outline-none" title="Espandi/Comprimi Sidebar">
+          <svg class="w-5 h-5" fill="none" stroke="currentColor" stroke-width="2" viewBox="0 0 24 24"><path d="M4 6h16M4 12h12M4 18h16"/></svg>
+        </button>
+        <span class="text-xs text-slate-400 font-medium">Area di Lavoro</span>
+      </div>
+      <div class="flex items-center gap-4">
+        <span class="text-xs font-semibold text-slate-700 bg-slate-100 px-2.5 py-1 rounded-full">Demo Account</span>
+      </div>
+    </header>
+
+    <!-- AREA DEL CONTENUTO -->
+    <main class="flex-1 p-8 lg:p-10 max-w-[1400px] w-full mx-auto flex flex-col gap-6 overflow-y-auto">
+      
+      <!-- INTESTAZIONE SEZIONE -->
+      <div>
+        <h1 class="text-2xl font-semibold text-slate-900 tracking-tight">Catalogo Servizi</h1>
+        <p class="text-xs text-slate-400 mt-1">Configura e gestisci le singole voci di servizio offerte</p>
+      </div>
+
+      <!-- BARRA DI RICERCA MINIMALE -->
+      <div class="relative w-full">
+        <span class="absolute inset-y-0 left-0 flex items-center pl-3.5 pointer-events-none text-slate-400">
+          <svg class="w-4 h-4" fill="none" stroke="currentColor" stroke-width="1.8" viewBox="0 0 24 24"><path d="M21 21l-6-6m2-5a7 7 0 11-14 0 7 7 0 0114 0z"/></svg>
+        </span>
+        <input 
+          type="text" 
+          placeholder="Cerca per nome, categoria, fase, tag o pacchetto..." 
+          class="w-full pl-10 pr-4 py-3 bg-white text-sm text-slate-800 placeholder-slate-400 border border-slate-200/80 rounded-lg focus:outline-none focus:border-brand-dark focus:ring-1 focus:ring-brand-dark transition-all duration-200"
+        />
+      </div>
+
+      <!-- TABELLA CATALOGO -->
+      <div class="bg-white rounded-xl border border-slate-100 shadow-[0_4px_20px_rgba(0,0,0,0.01)] overflow-hidden">
+        <div class="overflow-x-auto">
+          <table class="w-full text-left border-collapse table-fixed min-w-[1000px]">
+            <thead>
+              <tr class="border-b border-slate-100/80 bg-slate-50/50 text-slate-400 text-[11px] font-semibold uppercase tracking-wider">
+                <th class="py-3 px-5 w-1/3">
+                  <span class="inline-flex items-center gap-1 cursor-pointer hover:text-slate-700">
+                    Nome
+                    <svg class="w-3 h-3" fill="none" stroke="currentColor" stroke-width="2" viewBox="0 0 24 24"><path d="M8 9l4-4 4 4m0 6l-4 4-4-4"/></svg>
+                  </span>
+                </th>
+                <th class="py-3 px-4 w-[110px]">
+                  <span class="inline-flex items-center gap-1 cursor-pointer hover:text-slate-700">
+                    Prezzo
+                    <svg class="w-3 h-3" fill="none" stroke="currentColor" stroke-width="2" viewBox="0 0 24 24"><path d="M8 9l4-4 4 4m0 6l-4 4-4-4"/></svg>
+                  </span>
+                </th>
+                <th class="py-3 px-4 w-[160px]">Offerta</th>
+                <th class="py-3 px-4 w-[240px]">Fase</th>
+                <th class="py-3 px-4 w-1/5">Descrizione</th>
+                <th class="py-3 px-4 w-[100px] text-center">Pacchetto</th>
+              </tr>
+            </thead>
+            <tbody class="divide-y divide-slate-100/60 text-[13px] text-slate-700">
+              
+              <!-- Riga 1 -->
+              <tr class="hover:bg-slate-50/30 transition-all duration-150">
+                <td class="py-3 px-5 font-medium text-slate-900 truncate">Landing Page (Metodo o Differenziante)</td>
+                <td class="py-3 px-4 font-mono text-xs text-slate-600">€1.000,00</td>
+                <td class="py-3 px-4">
+                  <span class="inline-flex items-center gap-1 px-2.5 py-0.5 rounded text-[10px] font-semibold bg-emerald-50 text-emerald-700 border border-emerald-100">
+                    Signature Offer
+                  </span>
+                </td>
+                <td class="py-3 px-4">
+                  <span class="inline-flex items-center gap-1.5 px-2.5 py-1 rounded-full text-[11px] font-medium bg-amber-50 text-amber-700 border border-amber-100">
+                    <span class="w-1.5 h-1.5 rounded-full bg-amber-400"></span>
+                    Fase 3 ➔ Esecuzione
+                  </span>
+                </td>
+                <td class="py-3 px-4 text-slate-400 text-xs truncate">—</td>
+                <td class="py-3 px-4 text-center">
+                  <button class="w-6 h-6 rounded-full border border-slate-200 text-slate-400 hover:text-brand-dark hover:border-brand-dark hover:bg-emerald-50/30 flex items-center justify-center mx-auto transition-all">
+                    <svg class="w-3.5 h-3.5" fill="none" stroke="currentColor" stroke-width="2" viewBox="0 0 24 24"><path d="M12 4.5v15m7.5-7.5h-15"/></svg>
+                  </button>
+                </td>
+              </tr>
+
+              <!-- Riga 2 -->
+              <tr class="hover:bg-slate-50/30 transition-all duration-150">
+                <td class="py-3 px-5 font-medium text-slate-900 truncate">Analisi Competitor</td>
+                <td class="py-3 px-4 font-mono text-xs text-slate-600">€400,00</td>
+                <td class="py-3 px-4">
+                  <div class="flex flex-col gap-1 items-start">
+                    <span class="inline-flex items-center gap-1 px-2.5 py-0.5 rounded text-[10px] font-semibold bg-purple-50 text-purple-600 border border-purple-100">
+                      Entry Offer
+                    </span>
+                    <span class="inline-flex items-center gap-1 px-2.5 py-0.5 rounded text-[10px] font-semibold bg-emerald-50 text-emerald-700 border border-emerald-100">
+                      Signature Offer
+                    </span>
+                  </div>
+                </td>
+                <td class="py-3 px-4">
+                  <span class="inline-flex items-center gap-1.5 px-2.5 py-1 rounded-full text-[11px] font-medium bg-blue-50 text-blue-700 border border-blue-100">
+                    <span class="w-1.5 h-1.5 rounded-full bg-blue-400"></span>
+                    Fase 2 ➔ Analisi / Strat.
+                  </span>
+                </td>
+                <td class="py-3 px-4 text-slate-400 text-xs truncate">—</td>
+                <td class="py-3 px-4 text-center">
+                  <button class="w-6 h-6 rounded-full border border-slate-200 text-slate-400 hover:text-brand-dark hover:border-brand-dark hover:bg-emerald-50/30 flex items-center justify-center mx-auto transition-all">
+                    <svg class="w-3.5 h-3.5" fill="none" stroke="currentColor" stroke-width="2" viewBox="0 0 24 24"><path d="M12 4.5v15m7.5-7.5h-15"/></svg>
+                  </button>
+                </td>
+              </tr>
+
+              <!-- Riga 3 -->
+              <tr class="hover:bg-slate-50/30 transition-all duration-150">
+                <td class="py-3 px-5 font-medium text-slate-900 truncate">Art direction su direzione da prendere</td>
+                <td class="py-3 px-4 font-mono text-xs text-slate-600">€2.000,00</td>
+                <td class="py-3 px-4">
+                  <span class="inline-flex items-center gap-1 px-2.5 py-0.5 rounded text-[10px] font-semibold bg-blue-50 text-blue-600 border border-blue-100">
+                    Retainer Offer
+                  </span>
+                </td>
+                <td class="py-3 px-4 text-slate-400 text-xs">—</td>
+                <td class="py-3 px-4 text-slate-400 text-xs truncate">—</td>
+                <td class="py-3 px-4 text-center">
+                  <button class="w-6 h-6 rounded-full border border-slate-200 text-slate-400 hover:text-brand-dark hover:border-brand-dark hover:bg-emerald-50/30 flex items-center justify-center mx-auto transition-all">
+                    <svg class="w-3.5 h-3.5" fill="none" stroke="currentColor" stroke-width="2" viewBox="0 0 24 24"><path d="M12 4.5v15m7.5-7.5h-15"/></svg>
+                  </button>
+                </td>
+              </tr>
+
+              <!-- Riga 4 -->
+              <tr class="hover:bg-slate-50/30 transition-all duration-150">
+                <td class="py-3 px-5 font-medium text-slate-900 truncate">Audit iniziale (UX/UI, struttura, conversione)</td>
+                <td class="py-3 px-4 font-mono text-xs text-slate-600">€500,00</td>
+                <td class="py-3 px-4">
+                  <div class="flex flex-col gap-1 items-start">
+                    <span class="inline-flex items-center gap-1 px-2.5 py-0.5 rounded text-[10px] font-semibold bg-purple-50 text-purple-600 border border-purple-100">
+                      Entry Offer
+                    </span>
+                    <span class="inline-flex items-center gap-1 px-2.5 py-0.5 rounded text-[10px] font-semibold bg-emerald-50 text-emerald-700 border border-emerald-100">
+                      Signature Offer
+                    </span>
+                  </div>
+                </td>
+                <td class="py-3 px-4">
+                  <span class="inline-flex items-center gap-1.5 px-2.5 py-1 rounded-full text-[11px] font-medium bg-orange-50 text-orange-700 border border-orange-100">
+                    <span class="w-1.5 h-1.5 rounded-full bg-orange-400"></span>
+                    Fase 1 ➔ Onboarding
+                  </span>
+                </td>
+                <td class="py-3 px-4 text-slate-400 text-xs truncate">—</td>
+                <td class="py-3 px-4 text-center">
+                  <button class="w-6 h-6 rounded-full border border-slate-200 text-slate-400 hover:text-brand-dark hover:border-brand-dark hover:bg-emerald-50/30 flex items-center justify-center mx-auto transition-all">
+                    <svg class="w-3.5 h-3.5" fill="none" stroke="currentColor" stroke-width="2" viewBox="0 0 24 24"><path d="M12 4.5v15m7.5-7.5h-15"/></svg>
+                  </button>
+                </td>
+              </tr>
+
+              <!-- Riga 5 -->
+              <tr class="hover:bg-slate-50/30 transition-all duration-150">
+                <td class="py-3 px-5 font-medium text-slate-900 truncate">Go-live / messa online & accessi</td>
+                <td class="py-3 px-4 font-mono text-xs text-slate-600">€300,00</td>
+                <td class="py-3 px-4">
+                  <span class="inline-flex items-center gap-1 px-2.5 py-0.5 rounded text-[10px] font-semibold bg-emerald-50 text-emerald-700 border border-emerald-100">
+                    Signature Offer
+                  </span>
+                </td>
+                <td class="py-3 px-4">
+                  <span class="inline-flex items-center gap-1.5 px-2.5 py-1 rounded-full text-[11px] font-medium bg-teal-50 text-teal-700 border border-teal-100">
+                    <span class="w-1.5 h-1.5 rounded-full bg-teal-400"></span>
+                    Fase 5 ➔ Consegna
+                  </span>
+                </td>
+                <td class="py-3 px-4 text-slate-400 text-xs truncate">—</td>
+                <td class="py-3 px-4 text-center">
+                  <button class="w-6 h-6 rounded-full border border-slate-200 text-slate-400 hover:text-brand-dark hover:border-brand-dark hover:bg-emerald-50/30 flex items-center justify-center mx-auto transition-all">
+                    <svg class="w-3.5 h-3.5" fill="none" stroke="currentColor" stroke-width="2" viewBox="0 0 24 24"><path d="M12 4.5v15m7.5-7.5h-15"/></svg>
+                  </button>
+                </td>
+              </tr>
+
+              <!-- FORM INLINE PER NUOVA RIGA ("Aggiungi servizio") -->
+              <tr class="bg-slate-50/40 border-t-2 border-slate-100">
+                <td class="py-4 px-5">
+                  <input 
+                    type="text" 
+                    placeholder="+ Aggiungi servizio..." 
+                    class="w-full bg-white border border-slate-200 rounded px-3 py-1.5 text-xs text-slate-800 placeholder-slate-400 focus:outline-none focus:border-brand-dark focus:ring-1 focus:ring-brand-dark transition-all"
+                  />
+                </td>
+                <td class="py-4 px-4">
+                  <input 
+                    type="text" 
+                    placeholder="0,00" 
+                    class="w-full bg-white border border-slate-200 rounded px-3 py-1.5 text-xs font-mono text-slate-800 placeholder-slate-400 focus:outline-none focus:border-brand-dark focus:ring-1 focus:ring-brand-dark transition-all"
+                  />
+                </td>
+                <td class="py-4 px-4 text-slate-300 text-xs select-none">Seleziona...</td>
+                <td class="py-4 px-4">
+                  <select class="w-full bg-white border border-slate-200 rounded px-2 py-1.5 text-xs text-slate-600 focus:outline-none focus:border-brand-dark focus:ring-1 focus:ring-brand-dark transition-all">
+                    <option value="">Fase...</option>
+                    <option value="1">Fase 1</option>
+                    <option value="2">Fase 2</option>
+                    <option value="3">Fase 3</option>
+                    <option value="4">Fase 4</option>
+                    <option value="5">Fase 5</option>
+                  </select>
+                </td>
+                <td class="py-4 px-4">
+                  <input 
+                    type="text" 
+                    placeholder="Descrizione..." 
+                    class="w-full bg-white border border-slate-200 rounded px-3 py-1.5 text-xs text-slate-800 placeholder-slate-400 focus:outline-none focus:border-brand-dark focus:ring-1 focus:ring-brand-dark transition-all"
+                  />
+                </td>
+                <td class="py-4 px-4 text-center">
+                  <button class="bg-brand-dark hover:bg-brand-darkHover text-white text-xs font-medium px-4 py-1.5 rounded transition-all">
+                    Invia
+                  </button>
+                </td>
+              </tr>
+
+            </tbody>
+          </table>
+        </div>
+        
+        <!-- FOOTER TABELLA -->
+        <div class="border-t border-slate-100 px-6 py-4 flex items-center justify-between text-xs text-slate-400">
+          <span>Visualizzazione di 5 servizi principali</span>
+        </div>
+      </div>
+
+    </main>
+  </div>
+
+  <!-- SCRIPT DI LOGICA (Gestione Sidebar) -->
+  <script>
+    const sidebar = document.getElementById('sidebar');
+    const toggleButton = document.getElementById('sidebar-toggle');
+    const logoText = document.getElementById('sidebar-logo-text');
+    const sidebarTexts = document.querySelectorAll('.sidebar-text');
+
+    toggleButton.addEventListener('click', () => {
+      const isCollapsed = sidebar.classList.contains('w-20');
+
+      if (isCollapsed) {
+        sidebar.classList.remove('w-20');
+        sidebar.classList.add('w-64');
+        setTimeout(() => {
+          logoText.classList.remove('opacity-0');
+          sidebarTexts.forEach(text => text.classList.remove('opacity-0'));
+        }, 150);
+      } else {
+        logoText.classList.add('opacity-0');
+        sidebarTexts.forEach(text => text.classList.add('opacity-0'));
+        sidebar.classList.remove('w-64');
+        sidebar.classList.add('w-20');
+      }
+    });
+  </script>
+</body>
+</html>

design-reference/pagina-clienti

@@ -0,0 +1,270 @@
+<!DOCTYPE html>
+<html lang="it">
+<head>
+  <meta charset="UTF-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1.0">
+  <title>Clienti — Luxury Admin CRM</title>
+  <!-- Google Fonts: Plus Jakarta Sans -->
+  <link rel="preconnect" href="https://fonts.googleapis.com">
+  <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
+  <link href="https://fonts.googleapis.com/css2?family=Plus+Jakarta+Sans:wght@300;400;500;600;700&display=swap" rel="stylesheet">
+  <!-- Tailwind CSS CDN -->
+  <script src="https://cdn.tailwindcss.com"></script>
+  <script>
+    tailwind.config = {
+      theme: {
+        extend: {
+          fontFamily: {
+            sans: ['Plus Jakarta Sans', 'sans-serif'],
+          },
+          colors: {
+            brand: {
+              dark: '#1A463C',        /* Verde scuro richiesto */
+              darkHover: '#13342D',   /* Variante scura per hover */
+              active: 'rgba(255, 255, 255, 0.08)',
+              bg: '#F8F9FA',
+            }
+          }
+        }
+      }
+    }
+  </script>
+  <style>
+    .sidebar-transition {
+      transition: width 0.35s cubic-bezier(0.4, 0, 0.2, 1), transform 0.35s cubic-bezier(0.4, 0, 0.2, 1);
+    }
+  </style>
+</head>
+<body class="bg-brand-bg font-sans text-slate-800 antialiased min-h-screen flex overflow-x-hidden">
+
+  <!-- SIDEBAR -->
+  <aside id="sidebar" class="w-64 bg-brand-dark text-white flex flex-col justify-between p-6 border-r border-emerald-950/20 shrink-0 sidebar-transition relative z-10">
+    <div class="overflow-hidden">
+      <!-- Logo e Intestazione -->
+      <div class="mb-10 px-2 flex items-center justify-between">
+        <span id="sidebar-logo-text" class="text-lg font-bold tracking-wider text-emerald-50 whitespace-nowrap transition-opacity duration-300">iamcavalli</span>
+      </div>
+
+      <!-- Navigazione Principale -->
+      <nav class="space-y-1">
+        <a href="#" class="flex items-center gap-3 px-3 py-2.5 rounded-lg text-sm text-emerald-200/70 hover:text-white hover:bg-white/5 transition-all duration-200">
+          <svg class="w-4 h-4 shrink-0" fill="none" stroke="currentColor" stroke-width="1.8" viewBox="0 0 24 24"><path d="M4 6a2 2 0 012-2h2a2 2 0 012 2v4a2 2 0 01-2 2H6a2 2 0 01-2-2V6zM14 6a2 2 0 012-2h2a2 2 0 012 2v4a2 2 0 01-2 2h-2a2 2 0 01-2-2V6zM4 16a2 2 0 012-2h2a2 2 0 012 2v4a2 2 0 01-2 2H6a2 2 0 01-2-2v-4zM14 16a2 2 0 012-2h2a2 2 0 012 2v4a2 2 0 01-2 2h-2a2 2 0 01-2-2v-4z"/></svg>
+          <span class="sidebar-text whitespace-nowrap transition-opacity duration-300">Dashboard</span>
+        </a>
+        <a href="#" class="flex items-center gap-3 px-3 py-2.5 rounded-lg text-sm text-emerald-200/70 hover:text-white hover:bg-white/5 transition-all duration-200">
+          <svg class="w-4 h-4 shrink-0" fill="none" stroke="currentColor" stroke-width="1.8" viewBox="0 0 24 24"><path d="M13 10V3L4 14h7v7l9-11h-7z"/></svg>
+          <span class="sidebar-text whitespace-nowrap transition-opacity duration-300">Lead</span>
+        </a>
+        <!-- Stato Attivo su Clienti -->
+        <a href="#" class="flex items-center gap-3 px-3 py-2.5 rounded-lg text-sm text-white bg-brand-active font-medium transition-all duration-200 shadow-sm">
+          <svg class="w-4 h-4 shrink-0 text-emerald-400" fill="none" stroke="currentColor" stroke-width="1.8" viewBox="0 0 24 24"><path d="M17 20h5v-2a3 3 0 00-5.356-1.857M17 20H7m10 0v-2c0-.656-.126-1.283-.356-1.857M7 20H2v-2a3 3 0 015.356-1.857M7 20v-2c0-.656.126-1.283.356-1.857m0 0a5.002 5.002 0 019.288 0M15 7a3 3 0 11-6 0 3 3 0 016 0zm6 3a2 2 0 11-4 0 2 2 0 014 0zM7 10a2 2 0 11-4 0 2 2 0 014 0z"/></svg>
+          <span class="sidebar-text whitespace-nowrap transition-opacity duration-300">Clienti</span>
+        </a>
+        <a href="#" class="flex items-center gap-3 px-3 py-2.5 rounded-lg text-sm text-emerald-200/70 hover:text-white hover:bg-white/5 transition-all duration-200">
+          <svg class="w-4 h-4 shrink-0" fill="none" stroke="currentColor" stroke-width="1.8" viewBox="0 0 24 24"><path d="M3 7v10a2 2 0 002 2h14a2 2 0 002-2V9a2 2 0 00-2-2h-6l-2-2H5a2 2 0 00-2 2z"/></svg>
+          <span class="sidebar-text whitespace-nowrap transition-opacity duration-300">Progetti</span>
+        </a>
+        <a href="#" class="flex items-center gap-3 px-3 py-2.5 rounded-lg text-sm text-emerald-200/70 hover:text-white hover:bg-white/5 transition-all duration-200">
+          <svg class="w-4 h-4 shrink-0" fill="none" stroke="currentColor" stroke-width="1.8" viewBox="0 0 24 24"><path d="M9 12h6m-6 4h6m2 5H7a2 2 0 01-2-2V5a2 2 0 012-2h5.586a1 1 0 01.707.293l5.414 5.414a1 1 0 01.293.707V19a2 2 0 01-2 2z"/></svg>
+          <span class="sidebar-text whitespace-nowrap transition-opacity duration-300">Preventivi</span>
+        </a>
+        <a href="#" class="flex items-center gap-3 px-3 py-2.5 rounded-lg text-sm text-emerald-200/70 hover:text-white hover:bg-white/5 transition-all duration-200">
+          <svg class="w-4 h-4 shrink-0" fill="none" stroke="currentColor" stroke-width="1.8" viewBox="0 0 24 24"><path d="M7 7h.01M6 20h12a2 2 0 002-2V6a2 2 0 00-2-2H6a2 2 0 00-2 2v12a2 2 0 002 2z"/></svg>
+          <span class="sidebar-text whitespace-nowrap transition-opacity duration-300">Offerte</span>
+        </a>
+      </nav>
+    </div>
+
+    <!-- Area Inferiore Sidebar -->
+    <div class="border-t border-white/10 pt-4 space-y-3 overflow-hidden">
+      <div class="flex items-center justify-between px-3 py-1 text-xs text-emerald-200/50 whitespace-nowrap">
+        <span class="sidebar-text transition-opacity duration-300">Tema</span>
+        <button class="p-1 rounded-full bg-white/5 hover:bg-white/10 text-emerald-200 hover:text-white transition-all duration-200">
+          <svg class="w-4 h-4" fill="none" stroke="currentColor" stroke-width="1.8" viewBox="0 0 24 24"><path d="M12 3v1m0 16v1m9-9h-1M4 12H3m15.364-6.364l-.707.707M6.343 17.657l-.707.707m12.728 0l-.707-.707M6.343 6.343l-.707-.707M14 12a2 2 0 11-4 0 2 2 0 014 0z"/></svg>
+        </button>
+      </div>
+      <a href="#" class="flex items-center gap-3 px-3 py-2 rounded-lg text-sm text-red-300/80 hover:text-red-200 hover:bg-red-950/20 transition-all duration-200 whitespace-nowrap">
+        <svg class="w-4 h-4 shrink-0" fill="none" stroke="currentColor" stroke-width="1.8" viewBox="0 0 24 24"><path d="M17 16l4-4m0 0l-4-4m4 4H7m6 4v1a3 3 0 01-3 3H6a3 3 0 01-3-3V7a3 3 0 013-3h4a3 3 0 013 3v1"/></svg>
+        <span class="sidebar-text transition-opacity duration-300">Esci</span>
+      </a>
+    </div>
+  </aside>
+
+  <!-- SEZIONE PRINCIPALE -->
+  <div class="flex-1 flex flex-col min-w-0">
+    
+    <!-- BARRA DI INTESTAZIONE SUPERIORE -->
+    <header class="h-16 border-b border-slate-100 bg-white px-8 flex items-center justify-between shrink-0">
+      <div class="flex items-center gap-4">
+        <!-- Pulsante Apri/Chiudi Sidebar -->
+        <button id="sidebar-toggle" class="p-2 -ml-2 rounded-lg text-slate-500 hover:bg-slate-50 hover:text-slate-800 transition-colors focus:outline-none" title="Espandi/Comprimi Sidebar">
+          <svg class="w-5 h-5" fill="none" stroke="currentColor" stroke-width="2" viewBox="0 0 24 24"><path d="M4 6h16M4 12h12M4 18h16"/></svg>
+        </button>
+        <span class="text-xs text-slate-400 font-medium">Area di Lavoro</span>
+      </div>
+      <div class="flex items-center gap-4">
+        <span class="text-xs font-semibold text-slate-700 bg-slate-100 px-2.5 py-1 rounded-full">Demo Account</span>
+      </div>
+    </header>
+
+    <!-- AREA DEL CONTENUTO DINAMICO -->
+    <main class="flex-1 p-8 lg:p-10 max-w-[1400px] w-full mx-auto flex flex-col gap-8 overflow-y-auto">
+      
+      <!-- INTESTAZIONE SEZIONE -->
+      <div class="flex flex-col sm:flex-row justify-between sm:items-center gap-4">
+        <div>
+          <h1 class="text-2xl font-semibold text-slate-900 tracking-tight">Clienti</h1>
+          <p class="text-xs text-slate-400 mt-1">Monitora i rapporti finanziari e i dettagli dei clienti attivi</p>
+        </div>
+        
+        <!-- Pulsanti di azione -->
+        <div class="flex items-center gap-4 self-start sm:self-auto">
+          <button class="text-xs font-medium text-slate-500 hover:text-slate-900 transition-colors">
+            Mostra archiviati
+          </button>
+          <button class="bg-brand-dark hover:bg-brand-darkHover text-white text-xs font-medium tracking-wide px-5 py-3 rounded-lg flex items-center gap-2 transition-all duration-200 shadow-sm">
+            <svg class="w-4 h-4" fill="none" stroke="currentColor" stroke-width="2" viewBox="0 0 24 24"><path d="M12 4.5v15m7.5-7.5h-15"/></svg>
+            Nuovo cliente
+          </button>
+        </div>
+      </div>
+
+      <!-- TABELLA CLIENTI -->
+      <div class="bg-white rounded-xl border border-slate-100 shadow-[0_4px_20px_rgba(0,0,0,0.01)] overflow-hidden">
+        <div class="overflow-x-auto">
+          <table class="w-full text-left border-collapse">
+            <thead>
+              <tr class="border-b border-slate-100/80 bg-slate-50/50 text-slate-400 text-[11px] font-semibold uppercase tracking-wider">
+                <th class="py-4 px-6 w-1/4">Cliente</th>
+                <th class="py-4 px-6 text-right">LTV</th>
+                <th class="py-4 px-6 text-right">Importo Incassato</th>
+                <th class="py-4 px-6 text-right">Importo da Saldare</th>
+                <th class="py-4 px-6 text-right">Link Profilo</th>
+              </tr>
+            </thead>
+            <tbody class="divide-y divide-slate-100/60 text-sm">
+              
+              <!-- Riga 1: George Vlad -->
+              <tr class="hover:bg-slate-50/30 transition-all duration-150">
+                <td class="py-4 px-6">
+                  <div class="font-semibold text-slate-950">George Vlad</div>
+                  <div class="text-[11px] text-slate-400 mt-0.5">Protocollo Estetico | Incarichi Online</div>
+                </td>
+                <td class="py-4 px-6 text-right font-medium text-slate-900">€7.000,00</td>
+                <td class="py-4 px-6 text-right">
+                  <span class="inline-flex items-center px-2.5 py-0.5 rounded text-xs font-semibold bg-emerald-50 text-emerald-700">
+                    €2.800,00
+                  </span>
+                </td>
+                <td class="py-4 px-6 text-right font-medium text-slate-600">€4.200,00</td>
+                <td class="py-4 px-6 text-right">
+                  <div class="inline-flex items-center gap-2 justify-end">
+                    <span class="text-xs font-mono text-slate-400 bg-slate-50 px-2 py-1 rounded border border-slate-100">/client/george-vlad-...</span>
+                    <button class="p-1 hover:bg-slate-100 rounded text-slate-400 hover:text-slate-700 transition-colors" title="Copia Link">
+                      <svg class="w-4 h-4" fill="none" stroke="currentColor" stroke-width="1.8" viewBox="0 0 24 24"><path d="M8 5H6a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2v-1M8 5a2 2 0 002 2h2a2 2 0 002-2M8 5a2 2 0 012-2h2a2 2 0 012 2m0 0h2a2 2 0 012 2v3m2 4H10m0 0l3-3m-3 3l3 3"/></svg>
+                    </button>
+                  </div>
+                </td>
+              </tr>
+
+              <!-- Riga 2: Gian Luca Caruso -->
+              <tr class="hover:bg-slate-50/30 transition-all duration-150">
+                <td class="py-4 px-6">
+                  <div class="font-semibold text-slate-950">Gian Luca Caruso</div>
+                  <div class="text-[11px] text-slate-400 mt-0.5">Caruso Speaker</div>
+                </td>
+                <td class="py-4 px-6 text-right font-medium text-slate-900">€5.000,00</td>
+                <td class="py-4 px-6 text-right">
+                  <span class="inline-flex items-center px-2.5 py-0.5 rounded text-xs font-semibold bg-emerald-50 text-emerald-700">
+                    €2.500,00
+                  </span>
+                </td>
+                <td class="py-4 px-6 text-right font-medium text-slate-600">€2.500,00</td>
+                <td class="py-4 px-6 text-right">
+                  <div class="inline-flex items-center gap-2 justify-end">
+                    <span class="text-xs font-mono text-slate-400 bg-slate-50 px-2 py-1 rounded border border-slate-100">/client/gian-luca-ca...</span>
+                    <button class="p-1 hover:bg-slate-100 rounded text-slate-400 hover:text-slate-700 transition-colors" title="Copia Link">
+                      <svg class="w-4 h-4" fill="none" stroke="currentColor" stroke-width="1.8" viewBox="0 0 24 24"><path d="M8 5H6a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2v-1M8 5a2 2 0 002 2h2a2 2 0 002-2M8 5a2 2 0 012-2h2a2 2 0 012 2m0 0h2a2 2 0 012 2v3m2 4H10m0 0l3-3m-3 3l3 3"/></svg>
+                    </button>
+                  </div>
+                </td>
+              </tr>
+
+              <!-- Riga 3: Gianfranco Barban -->
+              <tr class="hover:bg-slate-50/30 transition-all duration-150">
+                <td class="py-4 px-6">
+                  <div class="font-semibold text-slate-950">Gianfranco Barban</div>
+                  <div class="text-[11px] text-slate-400 mt-0.5">Teckell</div>
+                </td>
+                <td class="py-4 px-6 text-right font-medium text-slate-900">€200,00</td>
+                <td class="py-4 px-6 text-right text-slate-300 font-medium">—</td>
+                <td class="py-4 px-6 text-right text-slate-300 font-medium">—</td>
+                <td class="py-4 px-6 text-right">
+                  <div class="inline-flex items-center gap-2 justify-end">
+                    <span class="text-xs font-mono text-slate-400 bg-slate-50 px-2 py-1 rounded border border-slate-100">/client/gianfranco-b...</span>
+                    <button class="p-1 hover:bg-slate-100 rounded text-slate-400 hover:text-slate-700 transition-colors" title="Copia Link">
+                      <svg class="w-4 h-4" fill="none" stroke="currentColor" stroke-width="1.8" viewBox="0 0 24 24"><path d="M8 5H6a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2v-1M8 5a2 2 0 002 2h2a2 2 0 002-2M8 5a2 2 0 012-2h2a2 2 0 012 2m0 0h2a2 2 0 012 2v3m2 4H10m0 0l3-3m-3 3l3 3"/></svg>
+                    </button>
+                  </div>
+                </td>
+              </tr>
+
+              <!-- Riga 4: Mario Rossi -->
+              <tr class="hover:bg-slate-50/30 transition-all duration-150">
+                <td class="py-4 px-6">
+                  <div class="font-semibold text-slate-950">Mario Rossi</div>
+                  <div class="text-[11px] text-slate-400 mt-0.5">Rossi Inc</div>
+                </td>
+                <td class="py-4 px-6 text-right font-medium text-slate-900">€7.000,00</td>
+                <td class="py-4 px-6 text-right text-slate-300 font-medium">—</td>
+                <td class="py-4 px-6 text-right font-medium text-slate-600">€7.000,00</td>
+                <td class="py-4 px-6 text-right">
+                  <div class="inline-flex items-center gap-2 justify-end">
+                    <span class="text-xs font-mono text-slate-400 bg-slate-50 px-2 py-1 rounded border border-slate-100">/client/mario-rossi-...</span>
+                    <button class="p-1 hover:bg-slate-100 rounded text-slate-400 hover:text-slate-700 transition-colors" title="Copia Link">
+                      <svg class="w-4 h-4" fill="none" stroke="currentColor" stroke-width="1.8" viewBox="0 0 24 24"><path d="M8 5H6a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2v-1M8 5a2 2 0 002 2h2a2 2 0 002-2M8 5a2 2 0 012-2h2a2 2 0 012 2m0 0h2a2 2 0 012 2v3m2 4H10m0 0l3-3m-3 3l3 3"/></svg>
+                    </button>
+                  </div>
+                </td>
+              </tr>
+
+            </tbody>
+          </table>
+        </div>
+        
+        <!-- Footer Tabella -->
+        <div class="border-t border-slate-100 px-6 py-4 flex items-center justify-between text-xs text-slate-400">
+          <span>Mostrando 4 di 4 clienti attivi</span>
+        </div>
+      </div>
+
+    </main>
+  </div>
+
+  <!-- SCRIPT DI LOGICA (Gestione Sidebar) -->
+  <script>
+    const sidebar = document.getElementById('sidebar');
+    const toggleButton = document.getElementById('sidebar-toggle');
+    const logoText = document.getElementById('sidebar-logo-text');
+    const sidebarTexts = document.querySelectorAll('.sidebar-text');
+
+    toggleButton.addEventListener('click', () => {
+      const isCollapsed = sidebar.classList.contains('w-20');
+
+      if (isCollapsed) {
+        sidebar.classList.remove('w-20');
+        sidebar.classList.add('w-64');
+        setTimeout(() => {
+          logoText.classList.remove('opacity-0');
+          sidebarTexts.forEach(text => text.classList.remove('opacity-0'));
+        }, 150);
+      } else {
+        logoText.classList.add('opacity-0');
+        sidebarTexts.forEach(text => text.classList.add('opacity-0'));
+        sidebar.classList.remove('w-64');
+        sidebar.classList.add('w-20');
+      }
+    });
+  </script>
+</body>
+</html>

design-reference/pagina-clientportal

@@ -0,0 +1,484 @@
+<!DOCTYPE html>
+<html lang="it">
+<head>
+  <meta charset="UTF-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1.0">
+  <title>Rossi Inc — Client Portal</title>
+  <!-- Google Fonts: Plus Jakarta Sans -->
+  <link rel="preconnect" href="https://fonts.googleapis.com">
+  <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
+  <link href="https://fonts.googleapis.com/css2?family=Plus+Jakarta+Sans:wght@300;400;500;600;700&display=swap" rel="stylesheet">
+  <!-- Tailwind CSS CDN -->
+  <script src="https://cdn.tailwindcss.com"></script>
+  <!-- Canvas Confetti per micro-interazioni celebrative -->
+  <script src="https://cdn.jsdelivr.net/npm/canvas-confetti@1.6.0/dist/confetti.browser.min.js"></script>
+  <script>
+    tailwind.config = {
+      theme: {
+        extend: {
+          fontFamily: {
+            sans: ['Plus Jakarta Sans', 'sans-serif'],
+          },
+          colors: {
+            brand: {
+              dark: '#1A463C',        /* Verde lusso */
+              darkHover: '#13342D',
+              lightBg: '#F8F9FA',
+            }
+          }
+        }
+      }
+    }
+  </script>
+  <style>
+    .smooth-transition {
+      transition: all 0.3s cubic-bezier(0.4, 0, 0.2, 1);
+    }
+    /* Stili per il Dragging del Kanban */
+    .dragging {
+      opacity: 0.4;
+      transform: scale(0.98);
+    }
+    .drag-over-zone {
+      background-color: rgba(26, 70, 60, 0.03);
+      border-color: rgba(26, 70, 60, 0.2);
+    }
+  </style>
+</head>
+<body class="bg-brand-lightBg font-sans text-slate-800 antialiased min-h-screen pb-16">
+
+  <!-- HEADER PORTALE -->
+  <header class="bg-white border-b border-slate-100 px-8 py-5 sticky top-0 z-50 shadow-sm flex flex-col md:flex-row justify-between items-center gap-4">
+    <div class="flex items-center gap-3 w-full md:w-auto">
+      <span class="text-xs font-bold uppercase tracking-widest text-slate-400">iamcavalli</span>
+      <span class="text-slate-300">|</span>
+      <span class="text-xs font-medium text-slate-500">Client Portal</span>
+    </div>
+
+    <!-- Rossi Inc al Centro -->
+    <div class="text-center">
+      <h1 class="text-xl font-bold text-slate-900 tracking-tight">Rossi Inc</h1>
+    </div>
+
+    <div class="hidden md:flex items-center gap-2 text-[11px] text-emerald-700 bg-emerald-50 px-3 py-1 rounded-full border border-emerald-100">
+      <span class="w-1.5 h-1.5 rounded-full bg-emerald-500 animate-pulse"></span>
+      Area Riservata Protetta
+    </div>
+  </header>
+
+  <!-- STEP PROGRESS TIMELINE UNIFICATA -->
+  <div class="bg-white border-b border-slate-100 py-8 px-6">
+    <div class="max-w-[1200px] mx-auto relative">
+      <!-- Linea di connessione di fondo -->
+      <div class="absolute top-[15px] left-[5%] right-[5%] h-1 bg-slate-100 rounded-full z-0">
+        <!-- Riempimento dinamico fisso basato sul progresso reale del progetto -->
+        <div class="bg-brand-dark h-full rounded-full smooth-transition" style="width: 35%;"></div>
+      </div>
+
+      <!-- Contenitore Nodi Milestone -->
+      <div class="relative z-10 grid grid-cols-5 gap-4">
+        
+        <!-- Step 1 -->
+        <div class="flex flex-col items-center text-center">
+          <div class="w-8 h-8 rounded-full bg-brand-dark text-white flex items-center justify-center text-xs font-bold shadow-md border-4 border-white smooth-transition">
+            ✓
+          </div>
+          <span class="text-[11px] font-bold text-slate-900 mt-2">Step 1</span>
+          <span class="text-[10px] text-slate-400 font-medium">Onboarding</span>
+          <span class="text-[9px] font-bold text-emerald-600 mt-1 uppercase">Completed</span>
+        </div>
+
+        <!-- Step 2 -->
+        <div class="flex flex-col items-center text-center">
+          <div class="w-8 h-8 rounded-full bg-white text-brand-dark border-4 border-brand-dark flex items-center justify-center text-xs font-bold shadow-md smooth-transition">
+            2
+          </div>
+          <span class="text-[11px] font-bold text-slate-900 mt-2">Step 2</span>
+          <span class="text-[10px] text-slate-500 font-medium">Analisi</span>
+          <span class="text-[9px] font-bold text-amber-600 mt-1 uppercase">In Progress</span>
+        </div>
+
+        <!-- Step 3 -->
+        <div class="flex flex-col items-center text-center">
+          <div class="w-8 h-8 rounded-full bg-slate-100 text-slate-400 border-4 border-white flex items-center justify-center text-xs font-semibold smooth-transition">
+            3
+          </div>
+          <span class="text-[11px] font-bold text-slate-500 mt-2">Step 3</span>
+          <span class="text-[10px] text-slate-400 font-medium">Esecuzione</span>
+          <span class="text-[9px] font-bold text-slate-400 mt-1 uppercase">Pending</span>
+        </div>
+
+        <!-- Step 4 -->
+        <div class="flex flex-col items-center text-center">
+          <div class="w-8 h-8 rounded-full bg-slate-100 text-slate-400 border-4 border-white flex items-center justify-center text-xs font-semibold smooth-transition">
+            4
+          </div>
+          <span class="text-[11px] font-bold text-slate-500 mt-2">Step 4</span>
+          <span class="text-[10px] text-slate-400 font-medium">Raffinamento</span>
+          <span class="text-[9px] font-bold text-slate-400 mt-1 uppercase">Pending</span>
+        </div>
+
+        <!-- Step 5 -->
+        <div class="flex flex-col items-center text-center">
+          <div class="w-8 h-8 rounded-full bg-slate-100 text-slate-400 border-4 border-white flex items-center justify-center text-xs font-semibold smooth-transition">
+            5
+          </div>
+          <span class="text-[11px] font-bold text-slate-500 mt-2">Step 5</span>
+          <span class="text-[10px] text-slate-400 font-medium">Consegna</span>
+          <span class="text-[9px] font-bold text-slate-400 mt-1 uppercase">Pending</span>
+        </div>
+
+      </div>
+    </div>
+  </div>
+
+  <!-- SEZIONE PRINCIPALE CONTENUTO -->
+  <main class="max-w-[1400px] mx-auto px-6 mt-10 grid grid-cols-1 lg:grid-cols-4 gap-8">
+    
+    <!-- COLONNA DI SINISTRA (Informazioni statiche di riepilogo) -->
+    <div class="lg:col-span-1 flex flex-col gap-6">
+      
+      <!-- Offerte Attive -->
+      <div class="bg-white rounded-xl border border-slate-100 p-5 shadow-sm">
+        <h3 class="text-xs font-bold uppercase tracking-wider text-slate-400 mb-4">Offerte Attive</h3>
+        <div class="border-l-2 border-brand-dark pl-3">
+          <h4 class="text-sm font-bold text-slate-900">Web Domination</h4>
+          <div class="flex justify-between items-center text-xs mt-2 text-slate-500">
+            <span>Prezzo finale</span>
+            <span class="font-bold text-brand-dark">€7.000,00</span>
+          </div>
+        </div>
+        <div class="mt-4 pt-4 border-t border-slate-100">
+          <button onclick="toggleAccordion('compreso-content')" class="flex justify-between items-center w-full text-xs font-semibold text-slate-600 hover:text-slate-950">
+            <span>Cosa è compreso</span>
+            <svg id="compreso-arrow" class="w-4 h-4 transform transition-transform" fill="none" stroke="currentColor" stroke-width="2" viewBox="0 0 24 24"><path d="M19.5 8.25l-7.5 7.5-7.5-7.5"/></svg>
+          </button>
+          <div id="compreso-content" class="hidden mt-2 text-[11px] text-slate-500 space-y-1">
+            <p>• Strategia e architettura Web</p>
+            <p>• Sviluppo custom Webflow</p>
+            <p>• Ottimizzazione SEO specialistica</p>
+          </div>
+        </div>
+      </div>
+
+      <!-- Pagamenti -->
+      <div class="bg-white rounded-xl border border-slate-100 p-5 shadow-sm">
+        <h3 class="text-xs font-bold uppercase tracking-wider text-slate-400 mb-4">Pagamenti</h3>
+        <div class="space-y-2">
+          <div class="flex justify-between items-center p-3 rounded-lg border border-slate-100 text-xs">
+            <span class="font-semibold text-slate-700">Saldo 50%</span>
+            <span class="px-2 py-1 rounded text-[10px] font-bold bg-amber-50 text-amber-700 border border-amber-100 uppercase">Da Saldare</span>
+          </div>
+          <div class="flex justify-between items-center p-3 rounded-lg border border-slate-100 text-xs">
+            <span class="font-semibold text-slate-700">Acconto 50%</span>
+            <span class="px-2 py-1 rounded text-[10px] font-bold bg-emerald-50 text-emerald-700 border border-emerald-100 uppercase">Saldato</span>
+          </div>
+        </div>
+      </div>
+
+      <!-- Documenti -->
+      <div class="bg-white rounded-xl border border-slate-100 p-5 shadow-sm">
+        <h3 class="text-xs font-bold uppercase tracking-wider text-slate-400 mb-4">Documenti & File</h3>
+        <div class="space-y-2">
+          <a href="#" class="flex items-center justify-between p-3 rounded-lg border border-slate-100 text-xs hover:border-slate-300 transition-colors">
+            <span class="text-slate-700 font-medium">Brief Progetto</span>
+            <svg class="w-4 h-4 text-slate-400" fill="none" stroke="currentColor" stroke-width="2" viewBox="0 0 24 24"><path d="M13.5 6H5.25A2.25 2.25 0 003 8.25v10.5A2.25 2.25 0 005.25 21h10.5A2.25 2.25 0 0018 18.75V10.5m-10.5 6L21 3m0 0h-5.25M21 3v5.25"/></svg>
+          </a>
+        </div>
+      </div>
+
+    </div>
+
+    <!-- COLONNA DI DESTRA (Area di lavoro commutabile) -->
+    <div class="lg:col-span-3 flex flex-col gap-6">
+      
+      <!-- CONTROLLI DELLA VISTA -->
+      <div class="flex justify-between items-center">
+        <h2 id="view-title" class="text-lg font-bold text-slate-900 tracking-tight">Fasi del Progetto</h2>
+        <div class="bg-slate-200/50 p-1 rounded-lg flex gap-1">
+          <button id="btn-timeline" class="px-5 py-1.5 bg-white rounded-md text-[11px] font-semibold text-slate-800 shadow-sm transition-all duration-200">
+            Timeline
+          </button>
+          <button id="btn-kanban" class="px-5 py-1.5 rounded-md text-[11px] font-semibold text-slate-500 hover:text-slate-800 transition-all duration-200">
+            Kanban
+          </button>
+        </div>
+      </div>
+
+      <!-- ================= VISTA 1: TIMELINE (Read-only da backend) ================= -->
+      <div id="view-timeline" class="space-y-6">
+        
+        <!-- FASE 1: COMPLETATA -->
+        <div class="bg-white rounded-xl border border-slate-100 p-6 shadow-sm">
+          <div class="flex justify-between items-center mb-3">
+            <h3 class="text-sm font-bold text-slate-900">Fase 1 ➔ Onboarding / Setup</h3>
+            <span class="px-2.5 py-0.5 rounded text-[10px] font-bold bg-emerald-50 text-emerald-700 border border-emerald-100 uppercase">Completata</span>
+          </div>
+          <div class="w-full bg-slate-100 h-1.5 rounded-full overflow-hidden mb-4">
+            <div class="bg-emerald-600 h-full" style="width: 100%;"></div>
+          </div>
+          <ul class="space-y-2.5 text-xs text-slate-600 pt-2 border-t border-slate-50">
+            <li class="flex items-center gap-3">
+              <span class="w-5 h-5 rounded-full bg-emerald-50 text-emerald-600 flex items-center justify-center text-[10px] font-bold">✓</span>
+              <span class="line-through text-slate-400">Audit iniziale (UX/UI, struttura, conversione)</span>
+            </li>
+            <li class="flex items-center gap-3">
+              <span class="w-5 h-5 rounded-full bg-emerald-50 text-emerald-600 flex items-center justify-center text-[10px] font-bold">✓</span>
+              <span class="line-through text-slate-400">Raccolta e Mappatura Materiali</span>
+            </li>
+            <li class="flex items-center gap-3">
+              <span class="w-5 h-5 rounded-full bg-emerald-50 text-emerald-600 flex items-center justify-center text-[10px] font-bold">✓</span>
+              <span class="line-through text-slate-400">Workshop 1° fase</span>
+            </li>
+          </ul>
+        </div>
+
+        <!-- FASE 2: IN CORSO -->
+        <div class="bg-white rounded-xl border border-slate-100 p-6 shadow-sm">
+          <div class="flex justify-between items-center mb-3">
+            <h3 class="text-sm font-bold text-slate-900">Fase 2 ➔ Analisi / Strategia</h3>
+            <span class="px-2.5 py-0.5 rounded text-[10px] font-bold bg-amber-50 text-amber-700 border border-amber-100 uppercase">In corso</span>
+          </div>
+          <div class="w-full bg-slate-100 h-1.5 rounded-full overflow-hidden mb-4">
+            <div class="bg-amber-500 h-full" style="width: 30%;"></div>
+          </div>
+          <ul class="space-y-2.5 text-xs text-slate-600 pt-2 border-t border-slate-50">
+            <li class="flex items-center gap-3">
+              <span class="w-5 h-5 rounded-full border-2 border-slate-200 bg-white flex items-center justify-center"></span>
+              <span>Analisi Competitor</span>
+            </li>
+            <li class="flex items-center gap-3">
+              <span class="w-5 h-5 rounded-full border-2 border-slate-200 bg-white flex items-center justify-center"></span>
+              <span>Architettura informativa (Sitemap)</span>
+            </li>
+            <li class="flex items-center gap-3">
+              <span class="w-5 h-5 rounded-full border-2 border-slate-200 bg-white flex items-center justify-center"></span>
+              <span>Brand Identity - Visual Identity</span>
+            </li>
+          </ul>
+        </div>
+
+        <!-- FASE 3: DA INIZIARE -->
+        <div class="bg-white rounded-xl border border-slate-100 p-6 shadow-sm">
+          <div class="flex justify-between items-center mb-3">
+            <h3 class="text-sm font-bold text-slate-900">Fase 3 ➔ Esecuzione / Core</h3>
+            <span class="px-2.5 py-0.5 rounded text-[10px] font-bold bg-slate-100 text-slate-500 border border-slate-200 uppercase">Da iniziare</span>
+          </div>
+          <div class="w-full bg-slate-100 h-1.5 rounded-full overflow-hidden mb-4">
+            <div class="bg-slate-300 h-full" style="width: 0%;"></div>
+          </div>
+          <ul class="space-y-2.5 text-xs text-slate-600 pt-2 border-t border-slate-50">
+            <li class="flex items-center gap-3">
+              <span class="w-5 h-5 rounded-full border-2 border-slate-200 bg-white flex items-center justify-center"></span>
+              <span>Homepage Figma & Webflow development</span>
+            </li>
+            <li class="flex items-center gap-3">
+              <span class="w-5 h-5 rounded-full border-2 border-slate-200 bg-white flex items-center justify-center"></span>
+              <span>Configurazione CMS Blog e sezioni dinamiche</span>
+            </li>
+          </ul>
+        </div>
+
+        <!-- FASE 4: DA INIZIARE -->
+        <div class="bg-white rounded-xl border border-slate-100 p-6 shadow-sm">
+          <div class="flex justify-between items-center mb-3">
+            <h3 class="text-sm font-bold text-slate-900">Fase 4 ➔ Raffinamento / Extra</h3>
+            <span class="px-2.5 py-0.5 rounded text-[10px] font-bold bg-slate-100 text-slate-500 border border-slate-200 uppercase">Da iniziare</span>
+          </div>
+          <div class="w-full bg-slate-100 h-1.5 rounded-full overflow-hidden mb-4">
+            <div class="bg-slate-300 h-full" style="width: 0%;"></div>
+          </div>
+          <ul class="space-y-2.5 text-xs text-slate-600 pt-2 border-t border-slate-50">
+            <li class="flex items-center gap-3">
+              <span class="w-5 h-5 rounded-full border-2 border-slate-200 bg-white flex items-center justify-center"></span>
+              <span>Ottimizzazione Web Core Vitals</span>
+            </li>
+          </ul>
+        </div>
+
+        <!-- FASE 5: DA INIZIARE -->
+        <div class="bg-white rounded-xl border border-slate-100 p-6 shadow-sm">
+          <div class="flex justify-between items-center mb-3">
+            <h3 class="text-sm font-bold text-slate-900">Fase 5 ➔ Onboarding / Consegna</h3>
+            <span class="px-2.5 py-0.5 rounded text-[10px] font-bold bg-slate-100 text-slate-500 border border-slate-200 uppercase">Da iniziare</span>
+          </div>
+          <div class="w-full bg-slate-100 h-1.5 rounded-full overflow-hidden mb-4">
+            <div class="bg-slate-300 h-full" style="width: 0%;"></div>
+          </div>
+          <ul class="space-y-2.5 text-xs text-slate-600 pt-2 border-t border-slate-50">
+            <li class="flex items-center gap-3">
+              <span class="w-5 h-5 rounded-full border-2 border-slate-200 bg-white flex items-center justify-center"></span>
+              <span>Rilascio e puntamento DNS live</span>
+            </li>
+          </ul>
+        </div>
+
+      </div>
+
+      <!-- ================= VISTA 2: KANBAN ATTIVO & TRASCINABILE ================= -->
+      <div id="view-kanban" class="hidden grid grid-cols-1 md:grid-cols-3 gap-6">
+        
+        <!-- COLONNA: DA FARE -->
+        <div class="kanban-column bg-slate-50/80 border border-slate-100 rounded-xl p-4 flex flex-col gap-4 min-h-[500px]" data-status="todo">
+          <div class="flex justify-between items-center border-b border-slate-200/60 pb-2">
+            <span class="text-xs font-bold text-slate-500 uppercase tracking-wider">Da Fare</span>
+            <span class="count-pill bg-slate-200 text-slate-600 text-[10px] font-bold px-2 py-0.5 rounded-full">3</span>
+          </div>
+          <div class="cards-dropzone flex-1 flex flex-col gap-3">
+            <!-- Card 1 -->
+            <div class="kanban-card bg-white p-4 rounded-lg border border-slate-200/60 shadow-sm cursor-grab active:cursor-grabbing hover:shadow transition-all" draggable="true" id="task-1">
+              <span class="text-[9px] font-semibold text-slate-400 block mb-1">FASE 2</span>
+              <p class="text-xs font-medium text-slate-800">Analisi Competitor</p>
+            </div>
+            <!-- Card 2 -->
+            <div class="kanban-card bg-white p-4 rounded-lg border border-slate-200/60 shadow-sm cursor-grab active:cursor-grabbing hover:shadow transition-all" draggable="true" id="task-2">
+              <span class="text-[9px] font-semibold text-slate-400 block mb-1">FASE 2</span>
+              <p class="text-xs font-medium text-slate-800">Architettura Informativa (Sitemap)</p>
+            </div>
+            <!-- Card 3 -->
+            <div class="kanban-card bg-white p-4 rounded-lg border border-slate-200/60 shadow-sm cursor-grab active:cursor-grabbing hover:shadow transition-all" draggable="true" id="task-3">
+              <span class="text-[9px] font-semibold text-slate-400 block mb-1">FASE 2</span>
+              <p class="text-xs font-medium text-slate-800">Brand Identity - Visual Identity</p>
+            </div>
+          </div>
+        </div>
+
+        <!-- COLONNA: IN CORSO -->
+        <div class="kanban-column bg-slate-50/80 border border-slate-100 rounded-xl p-4 flex flex-col gap-4 min-h-[500px]" data-status="inprogress">
+          <div class="flex justify-between items-center border-b border-slate-200/60 pb-2">
+            <span class="text-xs font-bold text-slate-500 uppercase tracking-wider">In Corso</span>
+            <span class="count-pill bg-slate-200 text-slate-600 text-[10px] font-bold px-2 py-0.5 rounded-full">1</span>
+          </div>
+          <div class="cards-dropzone flex-1 flex flex-col gap-3">
+            <!-- Card 4 -->
+            <div class="kanban-card bg-white p-4 rounded-lg border border-slate-200/60 shadow-sm cursor-grab active:cursor-grabbing hover:shadow transition-all" draggable="true" id="task-4">
+              <span class="text-[9px] font-semibold text-slate-400 block mb-1">FASE 2</span>
+              <p class="text-xs font-medium text-slate-800">Direzione Creativa & Moodboard</p>
+            </div>
+          </div>
+        </div>
+
+        <!-- COLONNA: FATTO -->
+        <div class="kanban-column bg-slate-50/80 border border-slate-100 rounded-xl p-4 flex flex-col gap-4 min-h-[500px]" data-status="done">
+          <div class="flex justify-between items-center border-b border-slate-200/60 pb-2">
+            <span class="text-xs font-bold text-slate-500 uppercase tracking-wider">Fatto</span>
+            <span class="count-pill bg-slate-200 text-slate-600 text-[10px] font-bold px-2 py-0.5 rounded-full">2</span>
+          </div>
+          <div class="cards-dropzone flex-1 flex flex-col gap-3">
+            <!-- Card 5 -->
+            <div class="kanban-card bg-white p-4 rounded-lg border border-slate-200/60 shadow-sm cursor-grab active:cursor-grabbing hover:shadow transition-all" draggable="true" id="task-5">
+              <span class="text-[9px] font-semibold text-slate-400 block mb-1">FASE 1</span>
+              <p class="text-xs font-medium text-slate-800">Kickoff strategico iniziale</p>
+            </div>
+            <!-- Card 6 -->
+            <div class="kanban-card bg-white p-4 rounded-lg border border-slate-200/60 shadow-sm cursor-grab active:cursor-grabbing hover:shadow transition-all" draggable="true" id="task-6">
+              <span class="text-[9px] font-semibold text-slate-400 block mb-1">FASE 1</span>
+              <p class="text-xs font-medium text-slate-800">Setup Repository & Strumenti</p>
+            </div>
+          </div>
+        </div>
+
+      </div>
+
+    </div>
+
+  </main>
+
+  <footer class="text-center text-xs text-slate-400 py-10">
+    Questa è la tua dashboard privata — non condividere il link.
+  </footer>
+
+  <!-- SCRIPT DI LOGICA INTERATTIVA -->
+  <script>
+    // Accordion Control
+    function toggleAccordion(id) {
+      const el = document.getElementById(id);
+      const arrow = document.getElementById('compreso-arrow');
+      el.classList.toggle('hidden');
+      arrow.classList.toggle('rotate-180');
+    }
+
+    // Swapping delle viste (Timeline / Kanban)
+    const btnTimeline = document.getElementById('btn-timeline');
+    const btnKanban = document.getElementById('btn-kanban');
+    const viewTimeline = document.getElementById('view-timeline');
+    const viewKanban = document.getElementById('view-kanban');
+
+    btnTimeline.addEventListener('click', () => {
+      viewKanban.classList.add('hidden');
+      viewTimeline.classList.remove('hidden');
+      btnTimeline.className = "px-5 py-1.5 bg-white rounded-md text-[11px] font-semibold text-slate-800 shadow-sm transition-all duration-200";
+      btnKanban.className = "px-5 py-1.5 rounded-md text-[11px] font-semibold text-slate-500 hover:text-slate-800 transition-all duration-200";
+    });
+
+    btnKanban.addEventListener('click', () => {
+      viewTimeline.classList.add('hidden');
+      viewKanban.classList.remove('hidden');
+      btnKanban.className = "px-5 py-1.5 bg-white rounded-md text-[11px] font-semibold text-slate-800 shadow-sm transition-all duration-200";
+      btnTimeline.className = "px-5 py-1.5 rounded-md text-[11px] font-semibold text-slate-500 hover:text-slate-800 transition-all duration-200";
+      
+      // Inizializza Drag & Drop quando viene aperta la vista Kanban
+      initializeKanbanDragAndDrop();
+    });
+
+    // Logica Drag & Drop per il Kanban
+    function initializeKanbanDragAndDrop() {
+      const cards = document.querySelectorAll('.kanban-card');
+      const columns = document.querySelectorAll('.kanban-column');
+
+      cards.forEach(card => {
+        card.addEventListener('dragstart', () => {
+          card.classList.add('dragging');
+        });
+
+        card.addEventListener('dragend', () => {
+          card.classList.remove('dragging');
+          updateCounts();
+        });
+      });
+
+      columns.forEach(column => {
+        const dropzone = column.querySelector('.cards-dropzone');
+
+        column.addEventListener('dragover', (e) => {
+          e.preventDefault();
+          column.classList.add('drag-over-zone');
+        });
+
+        column.addEventListener('dragleave', () => {
+          column.classList.remove('drag-over-zone');
+        });
+
+        column.addEventListener('drop', (e) => {
+          e.preventDefault();
+          column.classList.remove('drag-over-zone');
+          const draggingCard = document.querySelector('.dragging');
+          if (draggingCard) {
+            dropzone.appendChild(draggingCard);
+            
+            // Se lanciato nella colonna "Fatto" (done), triggera una micro-celebrazione
+            if (column.getAttribute('data-status') === 'done' && typeof confetti === 'function') {
+              confetti({
+                particleCount: 50,
+                spread: 50,
+                origin: { y: 0.8 }
+              });
+            }
+          }
+          updateCounts();
+        });
+      });
+    }
+
+    // Aggiornamento dei contatori delle colonne del Kanban
+    function updateCounts() {
+      const columns = document.querySelectorAll('.kanban-column');
+      columns.forEach(col => {
+        const countPill = col.querySelector('.count-pill');
+        const count = col.querySelector('.cards-dropzone').children.length;
+        countPill.innerText = count;
+      });
+    }
+  </script>
+</body>
+</html>

design-reference/pagina-lead-pipeline

@@ -0,0 +1,405 @@
+<!DOCTYPE html>
+<html lang="it">
+<head>
+  <meta charset="UTF-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1.0">
+  <title>Lead Pipeline — Luxury Redesign</title>
+  <!-- Google Fonts: Plus Jakarta Sans -->
+  <link rel="preconnect" href="https://fonts.googleapis.com">
+  <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
+  <link href="https://fonts.googleapis.com/css2?family=Plus+Jakarta+Sans:wght@300;400;500;600;700&display=swap" rel="stylesheet">
+  <!-- Tailwind CSS CDN -->
+  <script src="https://cdn.tailwindcss.com"></script>
+  <script>
+    tailwind.config = {
+      theme: {
+        extend: {
+          fontFamily: {
+            sans: ['Plus Jakarta Sans', 'sans-serif'],
+          },
+          colors: {
+            brand: {
+              dark: '#1A463C',        /* Verde scuro richiesto */
+              darkHover: '#13342D',   /* Variante scura per hover */
+              active: 'rgba(255, 255, 255, 0.08)',
+              bg: '#F8F9FA',
+            }
+          }
+        }
+      }
+    }
+  </script>
+  <style>
+    /* Transizione fluida per l'apertura/chiusura della sidebar */
+    .sidebar-transition {
+      transition: width 0.35s cubic-bezier(0.4, 0, 0.2, 1), transform 0.35s cubic-bezier(0.4, 0, 0.2, 1);
+    }
+    /* Stile per l'effetto di trascinamento nel Kanban */
+    .dragging {
+      opacity: 0.5;
+      transform: scale(0.98);
+    }
+    .drag-over {
+      background-color: rgba(26, 70, 60, 0.03);
+      border-color: rgba(26, 70, 60, 0.2);
+    }
+  </style>
+</head>
+<body class="bg-brand-bg font-sans text-slate-800 antialiased min-h-screen flex overflow-x-hidden">
+
+  <!-- SIDEBAR -->
+  <aside id="sidebar" class="w-64 bg-brand-dark text-white flex flex-col justify-between p-6 border-r border-emerald-950/20 shrink-0 sidebar-transition relative z-10">
+    <div class="overflow-hidden">
+      <!-- Logo e Intestazione -->
+      <div class="mb-10 px-2 flex items-center justify-between">
+        <span id="sidebar-logo-text" class="text-lg font-bold tracking-wider text-emerald-50 whitespace-nowrap transition-opacity duration-300">iamcavalli</span>
+      </div>
+
+      <!-- Navigazione Principale -->
+      <nav class="space-y-1">
+        <a href="#" class="flex items-center gap-3 px-3 py-2.5 rounded-lg text-sm text-emerald-200/70 hover:text-white hover:bg-white/5 transition-all duration-200">
+          <svg class="w-4 h-4 shrink-0" fill="none" stroke="currentColor" stroke-width="1.8" viewBox="0 0 24 24"><path d="M4 6a2 2 0 012-2h2a2 2 0 012 2v4a2 2 0 01-2 2H6a2 2 0 01-2-2V6zM14 6a2 2 0 012-2h2a2 2 0 012 2v4a2 2 0 01-2 2h-2a2 2 0 01-2-2V6zM4 16a2 2 0 012-2h2a2 2 0 012 2v4a2 2 0 01-2 2H6a2 2 0 01-2-2v-4zM14 16a2 2 0 012-2h2a2 2 0 012 2v4a2 2 0 01-2 2h-2a2 2 0 01-2-2v-4z"/></svg>
+          <span class="sidebar-text whitespace-nowrap transition-opacity duration-300">Dashboard</span>
+        </a>
+        <a href="#" class="flex items-center gap-3 px-3 py-2.5 rounded-lg text-sm text-white bg-brand-active font-medium transition-all duration-200 shadow-sm">
+          <svg class="w-4 h-4 shrink-0 text-emerald-400" fill="none" stroke="currentColor" stroke-width="1.8" viewBox="0 0 24 24"><path d="M13 10V3L4 14h7v7l9-11h-7z"/></svg>
+          <span class="sidebar-text whitespace-nowrap transition-opacity duration-300">Lead</span>
+        </a>
+        <a href="#" class="flex items-center gap-3 px-3 py-2.5 rounded-lg text-sm text-emerald-200/70 hover:text-white hover:bg-white/5 transition-all duration-200">
+          <svg class="w-4 h-4 shrink-0" fill="none" stroke="currentColor" stroke-width="1.8" viewBox="0 0 24 24"><path d="M17 20h5v-2a3 3 0 00-5.356-1.857M17 20H7m10 0v-2c0-.656-.126-1.283-.356-1.857M7 20H2v-2a3 3 0 015.356-1.857M7 20v-2c0-.656.126-1.283.356-1.857m0 0a5.002 5.002 0 019.288 0M15 7a3 3 0 11-6 0 3 3 0 016 0zm6 3a2 2 0 11-4 0 2 2 0 014 0zM7 10a2 2 0 11-4 0 2 2 0 014 0z"/></svg>
+          <span class="sidebar-text whitespace-nowrap transition-opacity duration-300">Clienti</span>
+        </a>
+        <a href="#" class="flex items-center gap-3 px-3 py-2.5 rounded-lg text-sm text-emerald-200/70 hover:text-white hover:bg-white/5 transition-all duration-200">
+          <svg class="w-4 h-4 shrink-0" fill="none" stroke="currentColor" stroke-width="1.8" viewBox="0 0 24 24"><path d="M3 7v10a2 2 0 002 2h14a2 2 0 002-2V9a2 2 0 00-2-2h-6l-2-2H5a2 2 0 00-2 2z"/></svg>
+          <span class="sidebar-text whitespace-nowrap transition-opacity duration-300">Progetti</span>
+        </a>
+        <a href="#" class="flex items-center gap-3 px-3 py-2.5 rounded-lg text-sm text-emerald-200/70 hover:text-white hover:bg-white/5 transition-all duration-200">
+          <svg class="w-4 h-4 shrink-0" fill="none" stroke="currentColor" stroke-width="1.8" viewBox="0 0 24 24"><path d="M9 12h6m-6 4h6m2 5H7a2 2 0 01-2-2V5a2 2 0 012-2h5.586a1 1 0 01.707.293l5.414 5.414a1 1 0 01.293.707V19a2 2 0 01-2 2z"/></svg>
+          <span class="sidebar-text whitespace-nowrap transition-opacity duration-300">Preventivi</span>
+        </a>
+        <a href="#" class="flex items-center gap-3 px-3 py-2.5 rounded-lg text-sm text-emerald-200/70 hover:text-white hover:bg-white/5 transition-all duration-200">
+          <svg class="w-4 h-4 shrink-0" fill="none" stroke="currentColor" stroke-width="1.8" viewBox="0 0 24 24"><path d="M7 7h.01M6 20h12a2 2 0 002-2V6a2 2 0 00-2-2H6a2 2 0 00-2 2v12a2 2 0 002 2z"/></svg>
+          <span class="sidebar-text whitespace-nowrap transition-opacity duration-300">Offerte</span>
+        </a>
+      </nav>
+    </div>
+
+    <!-- Area Inferiore Sidebar -->
+    <div class="border-t border-white/10 pt-4 space-y-3 overflow-hidden">
+      <div class="flex items-center justify-between px-3 py-1 text-xs text-emerald-200/50 whitespace-nowrap">
+        <span class="sidebar-text transition-opacity duration-300">Tema</span>
+        <button class="p-1 rounded-full bg-white/5 hover:bg-white/10 text-emerald-200 hover:text-white transition-all duration-200">
+          <svg class="w-4 h-4" fill="none" stroke="currentColor" stroke-width="1.8" viewBox="0 0 24 24"><path d="M12 3v1m0 16v1m9-9h-1M4 12H3m15.364-6.364l-.707.707M6.343 17.657l-.707.707m12.728 0l-.707-.707M6.343 6.343l-.707-.707M14 12a2 2 0 11-4 0 2 2 0 014 0z"/></svg>
+        </button>
+      </div>
+      <a href="#" class="flex items-center gap-3 px-3 py-2 rounded-lg text-sm text-red-300/80 hover:text-red-200 hover:bg-red-950/20 transition-all duration-200 whitespace-nowrap">
+        <svg class="w-4 h-4 shrink-0" fill="none" stroke="currentColor" stroke-width="1.8" viewBox="0 0 24 24"><path d="M17 16l4-4m0 0l-4-4m4 4H7m6 4v1a3 3 0 01-3 3H6a3 3 0 01-3-3V7a3 3 0 013-3h4a3 3 0 013 3v1"/></svg>
+        <span class="sidebar-text transition-opacity duration-300">Esci</span>
+      </a>
+    </div>
+  </aside>
+
+  <!-- SEZIONE PRINCIPALE -->
+  <div class="flex-1 flex flex-col min-w-0">
+    
+    <!-- BARRA DI INTESTAZIONE SUPERIORE (Contiene i controlli globali) -->
+    <header class="h-16 border-b border-slate-100 bg-white px-8 flex items-center justify-between shrink-0">
+      <div class="flex items-center gap-4">
+        <!-- Pulsante Minimal per Aprire/Chiudere la Sidebar -->
+        <button id="sidebar-toggle" class="p-2 -ml-2 rounded-lg text-slate-500 hover:bg-slate-50 hover:text-slate-800 transition-colors focus:outline-none" title="Espandi/Comprimi Sidebar">
+          <svg class="w-5 h-5" fill="none" stroke="currentColor" stroke-width="2" viewBox="0 0 24 24"><path d="M4 6h16M4 12h12M4 18h16"/></svg>
+        </button>
+        <span class="text-xs text-slate-400 font-medium">Area di Lavoro</span>
+      </div>
+      <div class="flex items-center gap-4">
+        <span class="text-xs font-semibold text-slate-700 bg-slate-100 px-2.5 py-1 rounded-full">Demo Account</span>
+      </div>
+    </header>
+
+    <!-- AREA DEL CONTENUTO DINAMICO -->
+    <main class="flex-1 p-8 lg:p-10 max-w-[1400px] w-full mx-auto flex flex-col gap-8 overflow-y-auto">
+      
+      <!-- INTESTAZIONE SEZIONE -->
+      <div class="flex flex-col sm:flex-row justify-between sm:items-center gap-4">
+        <div>
+          <h1 class="text-2xl font-semibold text-slate-900 tracking-tight">Lead Pipeline</h1>
+          <p class="text-xs text-slate-400 mt-1">Gestisci e monitora i tuoi contatti commerciali</p>
+        </div>
+        
+        <!-- Pulsante Nuovo Lead -->
+        <button class="bg-brand-dark hover:bg-brand-darkHover text-white text-xs font-medium tracking-wide px-5 py-3 rounded-lg flex items-center gap-2 transition-all duration-200 shadow-sm self-start sm:self-auto">
+          <svg class="w-4 h-4" fill="none" stroke="currentColor" stroke-width="2" viewBox="0 0 24 24"><path d="M12 4.5v15m7.5-7.5h-15"/></svg>
+          Nuovo Lead
+        </button>
+      </div>
+
+      <!-- AZIONI: BARRA DI RICERCA & SELETTORE VISTA -->
+      <div class="flex flex-col md:flex-row justify-between md:items-center gap-4">
+        <!-- Barra di ricerca -->
+        <div class="relative w-full md:w-80">
+          <span class="absolute inset-y-0 left-0 flex items-center pl-3.5 pointer-events-none text-slate-400">
+            <svg class="w-4 h-4" fill="none" stroke="currentColor" stroke-width="1.8" viewBox="0 0 24 24"><path d="M21 21l-6-6m2-5a7 7 0 11-14 0 7 7 0 0114 0z"/></svg>
+          </span>
+          <input 
+            type="text" 
+            placeholder="Cerca lead..." 
+            class="w-full pl-10 pr-4 py-2.5 bg-white text-sm text-slate-800 placeholder-slate-400 border border-slate-200/80 rounded-lg focus:outline-none focus:border-brand-dark focus:ring-1 focus:ring-brand-dark transition-all duration-200"
+          />
+        </div>
+
+        <!-- Selettore Vista (Lista vs Kanban) -->
+        <div class="bg-slate-200/50 p-1 rounded-lg flex gap-1 self-start md:self-auto">
+          <button id="btn-view-list" class="px-5 py-1.5 rounded-md text-xs font-medium bg-white text-slate-800 shadow-sm transition-all duration-200">
+            Lista
+          </button>
+          <button id="btn-view-kanban" class="px-5 py-1.5 rounded-md text-xs font-medium text-slate-500 hover:text-slate-800 transition-all duration-200">
+            Kanban
+          </button>
+        </div>
+      </div>
+
+      <!-- VISTA 1: TABELLA (Default) -->
+      <div id="view-list" class="bg-white rounded-xl border border-slate-100 shadow-[0_4px_20px_rgba(0,0,0,0.01)] overflow-hidden transition-opacity duration-300">
+        <div class="overflow-x-auto">
+          <table class="w-full text-left border-collapse">
+            <thead>
+              <tr class="border-b border-slate-100/80 bg-slate-50/50 text-slate-400 text-[11px] font-semibold uppercase tracking-wider">
+                <th class="py-4 px-6">Nome</th>
+                <th class="py-4 px-6">Email</th>
+                <th class="py-4 px-6">Telefono</th>
+                <th class="py-4 px-6">Azienda</th>
+                <th class="py-4 px-6 text-center">Stato</th>
+                <th class="py-4 px-6">Prossima Azione</th>
+                <th class="py-4 px-6 text-center">Tag</th>
+                <th class="py-4 px-6 text-right">Azioni</th>
+              </tr>
+            </thead>
+            <tbody class="divide-y divide-slate-100/60 text-sm">
+              <tr class="hover:bg-slate-50/30 transition-all duration-150">
+                <td class="py-4 px-6 font-medium text-slate-900">Nome Cognome</td>
+                <td class="py-4 px-6 text-slate-500 text-xs">test@gmail.com</td>
+                <td class="py-4 px-6 text-slate-500 text-xs font-mono">+39 444 3322111</td>
+                <td class="py-4 px-6 text-slate-600">Azienda Srl</td>
+                <td class="py-4 px-6 text-center">
+                  <span class="inline-flex items-center px-2.5 py-1 rounded-full text-[10px] font-semibold tracking-wide bg-purple-50 text-purple-600 border border-purple-100 uppercase">
+                    qualified
+                  </span>
+                </td>
+                <td class="py-4 px-6 text-slate-400">—</td>
+                <td class="py-4 px-6 text-center">
+                  <button class="inline-flex items-center justify-center w-6 h-6 rounded-full border border-dashed border-slate-200 text-slate-400 hover:text-slate-600 hover:border-slate-400 transition-all duration-200">
+                    <svg class="w-3.5 h-3.5" fill="none" stroke="currentColor" stroke-width="2" viewBox="0 0 24 24"><path d="M12 4.5v15m7.5-7.5h-15"/></svg>
+                  </button>
+                </td>
+                <td class="py-4 px-6 text-right">
+                  <a href="#" class="text-xs font-medium text-brand-dark hover:text-brand-darkHover inline-flex items-center gap-1 group transition-colors">
+                    Dettagli
+                    <svg class="w-3 h-3 transform group-hover:translate-x-0.5 transition-transform" fill="none" stroke="currentColor" stroke-width="2.2" viewBox="0 0 24 24"><path d="M8.25 4.5l7.5 7.5-7.5 7.5"/></svg>
+                  </a>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+        </div>
+        <div class="border-t border-slate-100 px-6 py-4 flex items-center justify-between text-xs text-slate-400">
+          <span>Mostrando 1 di 1 lead</span>
+        </div>
+      </div>
+
+      <!-- VISTA 2: KANBAN (Nascosta all'avvio) -->
+      <div id="view-kanban" class="hidden grid grid-cols-1 md:grid-cols-4 gap-6 transition-opacity duration-300">
+        
+        <!-- Colonna 1: Nuovo -->
+        <div class="kanban-column bg-slate-50/75 rounded-xl border border-slate-100 p-4 flex flex-col gap-4 min-h-[450px]" data-status="new">
+          <div class="flex items-center justify-between border-b border-slate-100 pb-2">
+            <span class="text-xs font-semibold uppercase tracking-wider text-slate-500">Nuovo</span>
+            <span class="text-xs font-medium bg-slate-200/60 text-slate-600 px-2 py-0.5 rounded-full count">0</span>
+          </div>
+          <div class="cards-container flex-1 flex flex-col gap-3">
+            <!-- Esempio di lead spostabile -->
+            <div id="lead-card-2" class="kanban-card bg-white p-4 rounded-lg border border-slate-200/80 shadow-sm cursor-grab active:cursor-grabbing hover:border-brand-dark/30 hover:shadow-md transition-all duration-200" draggable="true">
+              <div class="flex justify-between items-start gap-2 mb-2">
+                <h4 class="text-xs font-semibold text-slate-800">Marco Rossi</h4>
+                <span class="text-[9px] font-semibold bg-emerald-50 text-emerald-700 border border-emerald-100 px-1.5 py-0.5 rounded uppercase">New</span>
+              </div>
+              <p class="text-[11px] text-slate-400 mb-3">rossi@azienda.it</p>
+              <div class="flex justify-between items-center text-[10px] text-slate-500">
+                <span class="font-medium">Rossi Consulting</span>
+                <span>Tag +</span>
+              </div>
+            </div>
+          </div>
+        </div>
+
+        <!-- Colonna 2: Contattato -->
+        <div class="kanban-column bg-slate-50/75 rounded-xl border border-slate-100 p-4 flex flex-col gap-4 min-h-[450px]" data-status="contacted">
+          <div class="flex items-center justify-between border-b border-slate-100 pb-2">
+            <span class="text-xs font-semibold uppercase tracking-wider text-slate-500">Contattato</span>
+            <span class="text-xs font-medium bg-slate-200/60 text-slate-600 px-2 py-0.5 rounded-full count">0</span>
+          </div>
+          <div class="cards-container flex-1 flex flex-col gap-3"></div>
+        </div>
+
+        <!-- Colonna 3: Qualificato -->
+        <div class="kanban-column bg-slate-50/75 rounded-xl border border-slate-100 p-4 flex flex-col gap-4 min-h-[450px]" data-status="qualified">
+          <div class="flex items-center justify-between border-b border-slate-100 pb-2">
+            <span class="text-xs font-semibold uppercase tracking-wider text-slate-500">Qualificato</span>
+            <span class="text-xs font-medium bg-slate-200/60 text-slate-600 px-2 py-0.5 rounded-full count">1</span>
+          </div>
+          <div class="cards-container flex-1 flex flex-col gap-3">
+            
+            <!-- Lead proveniente dalla lista originale -->
+            <div id="lead-card-1" class="kanban-card bg-white p-4 rounded-lg border border-slate-200/80 shadow-sm cursor-grab active:cursor-grabbing hover:border-brand-dark/30 hover:shadow-md transition-all duration-200" draggable="true">
+              <div class="flex justify-between items-start gap-2 mb-2">
+                <h4 class="text-xs font-semibold text-slate-800">Nome Cognome</h4>
+                <span class="text-[9px] font-semibold bg-purple-50 text-purple-600 border border-purple-100 px-1.5 py-0.5 rounded uppercase">Qualified</span>
+              </div>
+              <p class="text-[11px] text-slate-400 mb-3">test@gmail.com</p>
+              <div class="flex justify-between items-center text-[10px] text-slate-500">
+                <span class="font-medium">Azienda Srl</span>
+                <span>Tag +</span>
+              </div>
+            </div>
+
+          </div>
+        </div>
+
+        <!-- Colonna 4: In Trattativa -->
+        <div class="kanban-column bg-slate-50/75 rounded-xl border border-slate-100 p-4 flex flex-col gap-4 min-h-[450px]" data-status="negotiation">
+          <div class="flex items-center justify-between border-b border-slate-100 pb-2">
+            <span class="text-xs font-semibold uppercase tracking-wider text-slate-500">Trattativa</span>
+            <span class="text-xs font-medium bg-slate-200/60 text-slate-600 px-2 py-0.5 rounded-full count">0</span>
+          </div>
+          <div class="cards-container flex-1 flex flex-col gap-3"></div>
+        </div>
+
+      </div>
+
+    </main>
+  </div>
+
+  <!-- SCRIPT LOGICA (Gestione Sidebar e Kanban) -->
+  <script>
+    // --- GESTIONE SIDEBAR COLLASSABILE ---
+    const sidebar = document.getElementById('sidebar');
+    const toggleButton = document.getElementById('sidebar-toggle');
+    const logoText = document.getElementById('sidebar-logo-text');
+    const sidebarTexts = document.querySelectorAll('.sidebar-text');
+
+    toggleButton.addEventListener('click', () => {
+      // Verifica lo stato attuale
+      const isCollapsed = sidebar.classList.contains('w-20');
+
+      if (isCollapsed) {
+        // Espandi
+        sidebar.classList.remove('w-20');
+        sidebar.classList.add('w-64');
+        setTimeout(() => {
+          logoText.classList.remove('opacity-0');
+          sidebarTexts.forEach(text => text.classList.remove('opacity-0'));
+        }, 150);
+      } else {
+        // Collassa
+        logoText.classList.add('opacity-0');
+        sidebarTexts.forEach(text => text.classList.add('opacity-0'));
+        sidebar.classList.remove('w-64');
+        sidebar.classList.add('w-20');
+      }
+    });
+
+    // --- INTERRUTTORE DI VISTA (LISTA / KANBAN) ---
+    const btnViewList = document.getElementById('btn-view-list');
+    const btnViewKanban = document.getElementById('btn-view-kanban');
+    const viewList = document.getElementById('view-list');
+    const viewKanban = document.getElementById('view-kanban');
+
+    btnViewList.addEventListener('click', () => {
+      // Attiva vista Lista
+      viewKanban.classList.add('hidden');
+      viewList.classList.remove('hidden');
+
+      // Regola stili pulsanti
+      btnViewList.className = "px-5 py-1.5 rounded-md text-xs font-medium bg-white text-slate-800 shadow-sm transition-all duration-200";
+      btnViewKanban.className = "px-5 py-1.5 rounded-md text-xs font-medium text-slate-500 hover:text-slate-800 transition-all duration-200";
+    });
+
+    btnViewKanban.addEventListener('click', () => {
+      // Attiva vista Kanban
+      viewList.classList.add('hidden');
+      viewKanban.classList.remove('hidden');
+
+      // Regola stili pulsanti
+      btnViewKanban.className = "px-5 py-1.5 rounded-md text-xs font-medium bg-white text-slate-800 shadow-sm transition-all duration-200";
+      btnViewList.className = "px-5 py-1.5 rounded-md text-xs font-medium text-slate-500 hover:text-slate-800 transition-all duration-200";
+    });
+
+    // --- FUNZIONALITÀ DRAG AND DROP KANBAN ---
+    const cards = document.querySelectorAll('.kanban-card');
+    const columns = document.querySelectorAll('.kanban-column');
+
+    cards.forEach(card => {
+      card.addEventListener('dragstart', () => {
+        card.classList.add('dragging');
+      });
+
+      card.addEventListener('dragend', () => {
+        card.classList.remove('dragging');
+        updateColumnCounts();
+      });
+    });
+
+    columns.forEach(column => {
+      const container = column.querySelector('.cards-container');
+
+      column.addEventListener('dragover', (e) => {
+        e.preventDefault();
+        column.classList.add('drag-over');
+      });
+
+      column.addEventListener('dragleave', () => {
+        column.classList.remove('drag-over');
+      });
+
+      column.addEventListener('drop', (e) => {
+        e.preventDefault();
+        column.classList.remove('drag-over');
+        
+        const draggingCard = document.querySelector('.dragging');
+        if (draggingCard) {
+          container.appendChild(draggingCard);
+          
+          // Cambia visivamente il badge interno dello stato in base alla destinazione
+          const badge = draggingCard.querySelector('span');
+          const status = column.getAttribute('data-status');
+          
+          if (status === 'new') {
+            badge.innerText = 'New';
+            badge.className = 'text-[9px] font-semibold bg-emerald-50 text-emerald-700 border border-emerald-100 px-1.5 py-0.5 rounded uppercase';
+          } else if (status === 'contacted') {
+            badge.innerText = 'Contacted';
+            badge.className = 'text-[9px] font-semibold bg-blue-50 text-blue-600 border border-blue-100 px-1.5 py-0.5 rounded uppercase';
+          } else if (status === 'qualified') {
+            badge.innerText = 'Qualified';
+            badge.className = 'text-[9px] font-semibold bg-purple-50 text-purple-600 border border-purple-100 px-1.5 py-0.5 rounded uppercase';
+          } else if (status === 'negotiation') {
+            badge.innerText = 'In Trattativa';
+            badge.className = 'text-[9px] font-semibold bg-amber-50 text-amber-600 border border-amber-100 px-1.5 py-0.5 rounded uppercase';
+          }
+        }
+      });
+    });
+
+    // Funzione d'appoggio per aggiornare il conteggio numerico nelle colonne
+    function updateColumnCounts() {
+      columns.forEach(column => {
+        const countBadge = column.querySelector('.count');
+        const cardCount = column.querySelector('.cards-container').children.length;
+        countBadge.innerText = cardCount;
+      });
+    }
+
+    // Esegui inizialmente per impostare i corretti conteggi
+    updateColumnCounts();
+  </script>
+</body>
+</html>

design-reference/pagina-offerte

@@ -0,0 +1,366 @@
+<!DOCTYPE html>
+<html lang="it">
+<head>
+  <meta charset="UTF-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1.0">
+  <title>Offerte — Luxury Admin CRM</title>
+  <!-- Google Fonts: Plus Jakarta Sans -->
+  <link rel="preconnect" href="https://fonts.googleapis.com">
+  <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
+  <link href="https://fonts.googleapis.com/css2?family=Plus+Jakarta+Sans:wght@300;400;500;600;700&display=swap" rel="stylesheet">
+  <!-- Tailwind CSS CDN -->
+  <script src="https://cdn.tailwindcss.com"></script>
+  <script>
+    tailwind.config = {
+      theme: {
+        extend: {
+          fontFamily: {
+            sans: ['Plus Jakarta Sans', 'sans-serif'],
+          },
+          colors: {
+            brand: {
+              dark: '#1A463C',        /* Verde scuro richiesto */
+              darkHover: '#13342D',   /* Variante scura per hover */
+              active: 'rgba(255, 255, 255, 0.08)',
+              bg: '#F8F9FA',
+            }
+          }
+        }
+      }
+    }
+  </script>
+  <style>
+    .sidebar-transition {
+      transition: width 0.35s cubic-bezier(0.4, 0, 0.2, 1), transform 0.35s cubic-bezier(0.4, 0, 0.2, 1);
+    }
+  </style>
+</head>
+<body class="bg-brand-bg font-sans text-slate-800 antialiased min-h-screen flex overflow-x-hidden">
+
+  <!-- SIDEBAR -->
+  <aside id="sidebar" class="w-64 bg-brand-dark text-white flex flex-col justify-between p-6 border-r border-emerald-950/20 shrink-0 sidebar-transition relative z-10">
+    <div class="overflow-hidden">
+      <!-- Logo e Intestazione -->
+      <div class="mb-10 px-2 flex items-center justify-between">
+        <span id="sidebar-logo-text" class="text-lg font-bold tracking-wider text-emerald-50 whitespace-nowrap transition-opacity duration-300">iamcavalli</span>
+      </div>
+
+      <!-- Navigazione Principale -->
+      <nav class="space-y-1">
+        <a href="#" class="flex items-center gap-3 px-3 py-2.5 rounded-lg text-sm text-emerald-200/70 hover:text-white hover:bg-white/5 transition-all duration-200">
+          <svg class="w-4 h-4 shrink-0" fill="none" stroke="currentColor" stroke-width="1.8" viewBox="0 0 24 24"><path d="M4 6a2 2 0 012-2h2a2 2 0 012 2v4a2 2 0 01-2 2H6a2 2 0 01-2-2V6zM14 6a2 2 0 012-2h2a2 2 0 012 2v4a2 2 0 01-2 2h-2a2 2 0 01-2-2V6zM4 16a2 2 0 012-2h2a2 2 0 012 2v4a2 2 0 01-2 2H6a2 2 0 01-2-2v-4zM14 16a2 2 0 012-2h2a2 2 0 012 2v4a2 2 0 01-2 2h-2a2 2 0 01-2-2v-4z"/></svg>
+          <span class="sidebar-text whitespace-nowrap transition-opacity duration-300">Dashboard</span>
+        </a>
+        <a href="#" class="flex items-center gap-3 px-3 py-2.5 rounded-lg text-sm text-emerald-200/70 hover:text-white hover:bg-white/5 transition-all duration-200">
+          <svg class="w-4 h-4 shrink-0" fill="none" stroke="currentColor" stroke-width="1.8" viewBox="0 0 24 24"><path d="M13 10V3L4 14h7v7l9-11h-7z"/></svg>
+          <span class="sidebar-text whitespace-nowrap transition-opacity duration-300">Lead</span>
+        </a>
+        <a href="#" class="flex items-center gap-3 px-3 py-2.5 rounded-lg text-sm text-emerald-200/70 hover:text-white hover:bg-white/5 transition-all duration-200">
+          <svg class="w-4 h-4 shrink-0 text-emerald-400" fill="none" stroke="currentColor" stroke-width="1.8" viewBox="0 0 24 24"><path d="M17 20h5v-2a3 3 0 00-5.356-1.857M17 20H7m10 0v-2c0-.656-.126-1.283-.356-1.857M7 20H2v-2a3 3 0 015.356-1.857M7 20v-2c0-.656.126-1.283.356-1.857m0 0a5.002 5.002 0 019.288 0M15 7a3 3 0 11-6 0 3 3 0 016 0zm6 3a2 2 0 11-4 0 2 2 0 014 0zM7 10a2 2 0 11-4 0 2 2 0 014 0z"/></svg>
+          <span class="sidebar-text whitespace-nowrap transition-opacity duration-300">Clienti</span>
+        </a>
+        <a href="#" class="flex items-center gap-3 px-3 py-2.5 rounded-lg text-sm text-emerald-200/70 hover:text-white hover:bg-white/5 transition-all duration-200">
+          <svg class="w-4 h-4 shrink-0" fill="none" stroke="currentColor" stroke-width="1.8" viewBox="0 0 24 24"><path d="M3 7v10a2 2 0 002 2h14a2 2 0 002-2V9a2 2 0 00-2-2h-6l-2-2H5a2 2 0 00-2 2z"/></svg>
+          <span class="sidebar-text whitespace-nowrap transition-opacity duration-300">Progetti</span>
+        </a>
+        <a href="#" class="flex items-center gap-3 px-3 py-2.5 rounded-lg text-sm text-emerald-200/70 hover:text-white hover:bg-white/5 transition-all duration-200">
+          <svg class="w-4 h-4 shrink-0 text-emerald-400" fill="none" stroke="currentColor" stroke-width="1.8" viewBox="0 0 24 24"><path d="M9 12h6m-6 4h6m2 5H7a2 2 0 01-2-2V5a2 2 0 012-2h5.586a1 1 0 01.707.293l5.414 5.414a1 1 0 01.293.707V19a2 2 0 01-2 2z"/></svg>
+          <span class="sidebar-text whitespace-nowrap transition-opacity duration-300">Preventivi</span>
+        </a>
+        <!-- Stato Attivo su Offerte -->
+        <a href="#" class="flex items-center gap-3 px-3 py-2.5 rounded-lg text-sm text-white bg-brand-active font-medium transition-all duration-200 shadow-sm">
+          <svg class="w-4 h-4 shrink-0 text-emerald-400" fill="none" stroke="currentColor" stroke-width="1.8" viewBox="0 0 24 24"><path d="M7 7h.01M6 20h12a2 2 0 002-2V6a2 2 0 00-2-2H6a2 2 0 00-2 2v12a2 2 0 002 2z"/></svg>
+          <span class="sidebar-text whitespace-nowrap transition-opacity duration-300">Offerte</span>
+        </a>
+      </nav>
+    </div>
+
+    <!-- Area Inferiore Sidebar -->
+    <div class="border-t border-white/10 pt-4 space-y-3 overflow-hidden">
+      <div class="flex items-center justify-between px-3 py-1 text-xs text-emerald-200/50 whitespace-nowrap">
+        <span class="sidebar-text transition-opacity duration-300">Tema</span>
+        <button class="p-1 rounded-full bg-white/5 hover:bg-white/10 text-emerald-200 hover:text-white transition-all duration-200">
+          <svg class="w-4 h-4" fill="none" stroke="currentColor" stroke-width="1.8" viewBox="0 0 24 24"><path d="M12 3v1m0 16v1m9-9h-1M4 12H3m15.364-6.364l-.707.707M6.343 17.657l-.707.707m12.728 0l-.707-.707M6.343 6.343l-.707-.707M14 12a2 2 0 11-4 0 2 2 0 014 0z"/></svg>
+        </button>
+      </div>
+      <a href="#" class="flex items-center gap-3 px-3 py-2 rounded-lg text-sm text-red-300/80 hover:text-red-200 hover:bg-red-950/20 transition-all duration-200 whitespace-nowrap">
+        <svg class="w-4 h-4 shrink-0" fill="none" stroke="currentColor" stroke-width="1.8" viewBox="0 0 24 24"><path d="M17 16l4-4m0 0l-4-4m4 4H7m6 4v1a3 3 0 01-3 3H6a3 3 0 01-3-3V7a3 3 0 013-3h4a3 3 0 013 3v1"/></svg>
+        <span class="sidebar-text transition-opacity duration-300">Esci</span>
+      </a>
+    </div>
+  </aside>
+
+  <!-- SEZIONE PRINCIPALE -->
+  <div class="flex-1 flex flex-col min-w-0">
+    
+    <!-- BARRA DI INTESTAZIONE SUPERIORE -->
+    <header class="h-16 border-b border-slate-100 bg-white px-8 flex items-center justify-between shrink-0">
+      <div class="flex items-center gap-4">
+        <!-- Pulsante Apri/Chiudi Sidebar -->
+        <button id="sidebar-toggle" class="p-2 -ml-2 rounded-lg text-slate-500 hover:bg-slate-50 hover:text-slate-800 transition-colors focus:outline-none" title="Espandi/Comprimi Sidebar">
+          <svg class="w-5 h-5" fill="none" stroke="currentColor" stroke-width="2" viewBox="0 0 24 24"><path d="M4 6h16M4 12h12M4 18h16"/></svg>
+        </button>
+        <span class="text-xs text-slate-400 font-medium">Area di Lavoro</span>
+      </div>
+      <div class="flex items-center gap-4">
+        <span class="text-xs font-semibold text-slate-700 bg-slate-100 px-2.5 py-1 rounded-full">Demo Account</span>
+      </div>
+    </header>
+
+    <!-- AREA DEL CONTENUTO -->
+    <main class="flex-1 p-8 lg:p-10 max-w-[1400px] w-full mx-auto flex flex-col gap-8 overflow-y-auto">
+      
+      <!-- INTESTAZIONE SEZIONE -->
+      <div class="flex flex-col sm:flex-row justify-between sm:items-center gap-4">
+        <div>
+          <h1 class="text-2xl font-semibold text-slate-900 tracking-tight">Offerte</h1>
+          <p class="text-xs text-slate-400 mt-1">Configura e gestisci i pacchetti di offerta commerciali</p>
+        </div>
+        
+        <!-- Bottone Nuova Offerta -->
+        <button class="bg-brand-dark hover:bg-brand-darkHover text-white text-xs font-medium tracking-wide px-5 py-3 rounded-lg flex items-center gap-2 transition-all duration-200 shadow-sm self-start sm:self-auto">
+          <svg class="w-4 h-4" fill="none" stroke="currentColor" stroke-width="2" viewBox="0 0 24 24"><path d="M12 4.5v15m7.5-7.5h-15"/></svg>
+          Nuova Offerta
+        </button>
+      </div>
+
+      <!-- BARRA FILTRI -->
+      <div class="flex flex-col lg:flex-row justify-between lg:items-center gap-4">
+        <!-- Selettori Categorie di Offerta -->
+        <div class="flex flex-wrap gap-2">
+          <button class="px-4 py-2 text-xs font-medium bg-brand-dark text-white rounded-lg transition-colors">
+            Tutti
+          </button>
+          <button class="px-4 py-2 text-xs font-medium bg-white text-slate-600 hover:text-slate-900 hover:bg-slate-100/70 border border-slate-200/60 rounded-lg transition-all duration-200">
+            Entry Offer
+          </button>
+          <button class="px-4 py-2 text-xs font-medium bg-white text-slate-600 hover:text-slate-900 hover:bg-slate-100/70 border border-slate-200/60 rounded-lg transition-all duration-200">
+            Retainer Offer
+          </button>
+          <button class="px-4 py-2 text-xs font-medium bg-white text-slate-600 hover:text-slate-900 hover:bg-slate-100/70 border border-slate-200/60 rounded-lg transition-all duration-200">
+            Signature Offer
+          </button>
+        </div>
+
+        <!-- Checkbox Opzione Archiviati -->
+        <label class="flex items-center gap-2.5 cursor-pointer group text-xs text-slate-500 hover:text-slate-800 transition-colors">
+          <input type="checkbox" class="w-4 h-4 rounded text-brand-dark border-slate-300 focus:ring-brand-dark focus:ring-opacity-25 transition-all" />
+          <span class="select-none font-medium">Mostra offerte archiviate</span>
+        </label>
+      </div>
+
+      <!-- GRID CARDS DELLE OFFERTE -->
+      <div class="grid grid-cols-1 md:grid-cols-2 lg:grid-cols-3 gap-6">
+        
+        <!-- Card 1: Mantenimento -->
+        <div class="bg-white p-6 rounded-xl border border-slate-100 shadow-[0_4px_20px_rgba(0,0,0,0.01)] hover:shadow-[0_8px_30px_rgba(0,0,0,0.02)] transition-all duration-200 flex flex-col justify-between">
+          <div>
+            <div class="flex justify-between items-start gap-4 mb-4">
+              <div>
+                <h3 class="text-sm font-semibold text-slate-900">Mantenimento</h3>
+                <p class="text-[11px] text-slate-400 mt-0.5">(nei clienti già attivi)</p>
+              </div>
+              <span class="px-2 py-1 rounded text-[9px] font-semibold bg-blue-50 text-blue-600 border border-blue-100 uppercase tracking-wider">
+                Retainer Offer
+              </span>
+            </div>
+
+            <!-- Listino Tabellare Opzioni -->
+            <div class="border border-slate-100 rounded-lg overflow-hidden my-6">
+              <table class="w-full text-[11px]">
+                <thead>
+                  <tr class="bg-slate-50 border-b border-slate-100 text-slate-400 font-semibold uppercase">
+                    <th class="py-2 px-3 text-left">Tier</th>
+                    <th class="py-2 px-3 text-right">Servizi</th>
+                    <th class="py-2 px-3 text-right">Pubblico</th>
+                  </tr>
+                </thead>
+                <tbody class="divide-y divide-slate-100 text-slate-600 font-mono">
+                  <tr>
+                    <td class="py-2 px-3 font-semibold text-slate-800">A</td>
+                    <td class="py-2 px-3 text-right">€200,00</td>
+                    <td class="py-2 px-3 text-right text-slate-400">€200,00</td>
+                  </tr>
+                  <tr>
+                    <td class="py-2 px-3 font-semibold text-slate-800">B</td>
+                    <td class="py-2 px-3 text-right">€300,00</td>
+                    <td class="py-2 px-3 text-right text-slate-400">€300,00</td>
+                  </tr>
+                  <tr>
+                    <td class="py-2 px-3 font-semibold text-slate-800">C</td>
+                    <td class="py-2 px-3 text-right">€400,00</td>
+                    <td class="py-2 px-3 text-right text-slate-400">€400,00</td>
+                  </tr>
+                </tbody>
+              </table>
+            </div>
+          </div>
+        </div>
+
+        <!-- Card 2: Sblocca Business -->
+        <div class="bg-white p-6 rounded-xl border border-slate-100 shadow-[0_4px_20px_rgba(0,0,0,0.01)] hover:shadow-[0_8px_30px_rgba(0,0,0,0.02)] transition-all duration-200 flex flex-col justify-between">
+          <div>
+            <div class="flex justify-between items-start gap-4 mb-4">
+              <div>
+                <h3 class="text-sm font-semibold text-slate-900">Sblocca Business</h3>
+                <p class="text-[11px] text-slate-400 mt-0.5">Avviamento strategico</p>
+              </div>
+              <span class="px-2 py-1 rounded text-[9px] font-semibold bg-purple-50 text-purple-600 border border-purple-100 uppercase tracking-wider">
+                Entry Offer
+              </span>
+            </div>
+
+            <!-- Listino Tabellare Opzioni -->
+            <div class="border border-slate-100 rounded-lg overflow-hidden my-6">
+              <table class="w-full text-[11px]">
+                <thead>
+                  <tr class="bg-slate-50 border-b border-slate-100 text-slate-400 font-semibold uppercase">
+                    <th class="py-2 px-3 text-left">Tier</th>
+                    <th class="py-2 px-3 text-right">Servizi</th>
+                    <th class="py-2 px-3 text-right">Pubblico</th>
+                  </tr>
+                </thead>
+                <tbody class="divide-y divide-slate-100 text-slate-600 font-mono">
+                  <tr>
+                    <td class="py-2 px-3 font-semibold text-slate-800">A</td>
+                    <td class="py-2 px-3 text-right">€2.600,00</td>
+                    <td class="py-2 px-3 text-right text-slate-400">€400,00</td>
+                  </tr>
+                  <tr>
+                    <td class="py-2 px-3 font-semibold text-slate-800">B</td>
+                    <td class="py-2 px-3 text-right">€3.300,00</td>
+                    <td class="py-2 px-3 text-right text-slate-400">€600,00</td>
+                  </tr>
+                  <tr>
+                    <td class="py-2 px-3 font-semibold text-slate-800">C</td>
+                    <td class="py-2 px-3 text-right">€3.900,00</td>
+                    <td class="py-2 px-3 text-right text-slate-400">€1.200,00</td>
+                  </tr>
+                </tbody>
+              </table>
+            </div>
+          </div>
+        </div>
+
+        <!-- Card 3: Web Domination -->
+        <div class="bg-white p-6 rounded-xl border border-slate-100 shadow-[0_4px_20px_rgba(0,0,0,0.01)] hover:shadow-[0_8px_30px_rgba(0,0,0,0.02)] transition-all duration-200 flex flex-col justify-between">
+          <div>
+            <div class="flex justify-between items-start gap-4 mb-4">
+              <div>
+                <h3 class="text-sm font-semibold text-slate-900">Web Domination</h3>
+                <p class="text-[11px] text-slate-400 mt-0.5">Soluzione enterprise omnicanale</p>
+              </div>
+              <span class="px-2 py-1 rounded text-[9px] font-semibold bg-amber-50 text-amber-700 border border-amber-100 uppercase tracking-wider">
+                Signature Offer
+              </span>
+            </div>
+
+            <!-- Listino Tabellare Opzioni -->
+            <div class="border border-slate-100 rounded-lg overflow-hidden my-6">
+              <table class="w-full text-[11px]">
+                <thead>
+                  <tr class="bg-slate-50 border-b border-slate-100 text-slate-400 font-semibold uppercase">
+                    <th class="py-2 px-3 text-left">Tier</th>
+                    <th class="py-2 px-3 text-right">Servizi</th>
+                    <th class="py-2 px-3 text-right">Pubblico</th>
+                  </tr>
+                </thead>
+                <tbody class="divide-y divide-slate-100 text-slate-600 font-mono">
+                  <tr>
+                    <td class="py-2 px-3 font-semibold text-slate-800">A</td>
+                    <td class="py-2 px-3 text-right">€9.800,00</td>
+                    <td class="py-2 px-3 text-right text-slate-400">€6.000,00</td>
+                  </tr>
+                  <tr>
+                    <td class="py-2 px-3 font-semibold text-slate-800">B</td>
+                    <td class="py-2 px-3 text-right">€20.250,00</td>
+                    <td class="py-2 px-3 text-right text-slate-400">€9.000,00</td>
+                  </tr>
+                  <tr>
+                    <td class="py-2 px-3 font-semibold text-slate-800">C</td>
+                    <td class="py-2 px-3 text-right">€25.250,00</td>
+                    <td class="py-2 px-3 text-right text-slate-400">€12.000,00</td>
+                  </tr>
+                </tbody>
+              </table>
+            </div>
+          </div>
+        </div>
+
+        <!-- Card 4: Business in Banca -->
+        <div class="bg-white p-6 rounded-xl border border-slate-100 shadow-[0_4px_20px_rgba(0,0,0,0.01)] hover:shadow-[0_8px_30px_rgba(0,0,0,0.02)] transition-all duration-200 flex flex-col justify-between">
+          <div>
+            <div class="flex justify-between items-start gap-4 mb-4">
+              <div>
+                <h3 class="text-sm font-semibold text-slate-900">Business in Banca</h3>
+                <p class="text-[11px] text-slate-400 mt-0.5">Controllo tesoreria integrato</p>
+              </div>
+              <span class="px-2 py-1 rounded text-[9px] font-semibold bg-blue-50 text-blue-600 border border-blue-100 uppercase tracking-wider">
+                Retainer Offer
+              </span>
+            </div>
+
+            <!-- Listino Tabellare Opzioni -->
+            <div class="border border-slate-100 rounded-lg overflow-hidden my-6">
+              <table class="w-full text-[11px]">
+                <thead>
+                  <tr class="bg-slate-50 border-b border-slate-100 text-slate-400 font-semibold uppercase">
+                    <th class="py-2 px-3 text-left">Tier</th>
+                    <th class="py-2 px-3 text-right">Servizi</th>
+                    <th class="py-2 px-3 text-right">Pubblico</th>
+                  </tr>
+                </thead>
+                <tbody class="divide-y divide-slate-100 text-slate-600 font-mono">
+                  <tr>
+                    <td class="py-2 px-3 font-semibold text-slate-800">A</td>
+                    <td class="py-2 px-3 text-right">€200,00</td>
+                    <td class="py-2 px-3 text-right text-slate-400">€200,00</td>
+                  </tr>
+                  <tr>
+                    <td class="py-2 px-3 font-semibold text-slate-800">B</td>
+                    <td class="py-2 px-3 text-right">€400,00</td>
+                    <td class="py-2 px-3 text-right text-slate-400">€300,00</td>
+                  </tr>
+                  <tr>
+                    <td class="py-2 px-3 font-semibold text-slate-800">C</td>
+                    <td class="py-2 px-3 text-right">€900,00</td>
+                    <td class="py-2 px-3 text-right text-slate-400">€500,00</td>
+                  </tr>
+                </tbody>
+              </table>
+            </div>
+          </div>
+        </div>
+
+      </div>
+
+    </main>
+  </div>
+
+  <!-- SCRIPT DI LOGICA (Gestione Sidebar) -->
+  <script>
+    const sidebar = document.getElementById('sidebar');
+    const toggleButton = document.getElementById('sidebar-toggle');
+    const logoText = document.getElementById('sidebar-logo-text');
+    const sidebarTexts = document.querySelectorAll('.sidebar-text');
+
+    toggleButton.addEventListener('click', () => {
+      const isCollapsed = sidebar.classList.contains('w-20');
+
+      if (isCollapsed) {
+        sidebar.classList.remove('w-20');
+        sidebar.classList.add('w-64');
+        setTimeout(() => {
+          logoText.classList.remove('opacity-0');
+          sidebarTexts.forEach(text => text.classList.remove('opacity-0'));
+        }, 150);
+      } else {
+        logoText.classList.add('opacity-0');
+        sidebarTexts.forEach(text => text.classList.add('opacity-0'));
+        sidebar.classList.remove('w-64');
+        sidebar.classList.add('w-20');
+      }
+    });
+  </script>
+</body>
+</html>

design-reference/pagina-preventivi

@@ -0,0 +1,238 @@
+<!DOCTYPE html>
+<html lang="it">
+<head>
+  <meta charset="UTF-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1.0">
+  <title>Preventivi — Luxury Admin CRM</title>
+  <!-- Google Fonts: Plus Jakarta Sans -->
+  <link rel="preconnect" href="https://fonts.googleapis.com">
+  <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
+  <link href="https://fonts.googleapis.com/css2?family=Plus+Jakarta+Sans:wght@300;400;500;600;700&display=swap" rel="stylesheet">
+  <!-- Tailwind CSS CDN -->
+  <script src="https://cdn.tailwindcss.com"></script>
+  <script>
+    tailwind.config = {
+      theme: {
+        extend: {
+          fontFamily: {
+            sans: ['Plus Jakarta Sans', 'sans-serif'],
+          },
+          colors: {
+            brand: {
+              dark: '#1A463C',        /* Verde scuro richiesto */
+              darkHover: '#13342D',   /* Variante scura per hover */
+              active: 'rgba(255, 255, 255, 0.08)',
+              bg: '#F8F9FA',
+            }
+          }
+        }
+      }
+    }
+  </script>
+  <style>
+    .sidebar-transition {
+      transition: width 0.35s cubic-bezier(0.4, 0, 0.2, 1), transform 0.35s cubic-bezier(0.4, 0, 0.2, 1);
+    }
+  </style>
+</head>
+<body class="bg-brand-bg font-sans text-slate-800 antialiased min-h-screen flex overflow-x-hidden">
+
+  <!-- SIDEBAR -->
+  <aside id="sidebar" class="w-64 bg-brand-dark text-white flex flex-col justify-between p-6 border-r border-emerald-950/20 shrink-0 sidebar-transition relative z-10">
+    <div class="overflow-hidden">
+      <!-- Logo e Intestazione -->
+      <div class="mb-10 px-2 flex items-center justify-between">
+        <span id="sidebar-logo-text" class="text-lg font-bold tracking-wider text-emerald-50 whitespace-nowrap transition-opacity duration-300">iamcavalli</span>
+      </div>
+
+      <!-- Navigazione Principale -->
+      <nav class="space-y-1">
+        <a href="#" class="flex items-center gap-3 px-3 py-2.5 rounded-lg text-sm text-emerald-200/70 hover:text-white hover:bg-white/5 transition-all duration-200">
+          <svg class="w-4 h-4 shrink-0" fill="none" stroke="currentColor" stroke-width="1.8" viewBox="0 0 24 24"><path d="M4 6a2 2 0 012-2h2a2 2 0 012 2v4a2 2 0 01-2 2H6a2 2 0 01-2-2V6zM14 6a2 2 0 012-2h2a2 2 0 012 2v4a2 2 0 01-2 2h-2a2 2 0 01-2-2V6zM4 16a2 2 0 012-2h2a2 2 0 012 2v4a2 2 0 01-2 2H6a2 2 0 01-2-2v-4zM14 16a2 2 0 012-2h2a2 2 0 012 2v4a2 2 0 01-2 2h-2a2 2 0 01-2-2v-4z"/></svg>
+          <span class="sidebar-text whitespace-nowrap transition-opacity duration-300">Dashboard</span>
+        </a>
+        <a href="#" class="flex items-center gap-3 px-3 py-2.5 rounded-lg text-sm text-emerald-200/70 hover:text-white hover:bg-white/5 transition-all duration-200">
+          <svg class="w-4 h-4 shrink-0" fill="none" stroke="currentColor" stroke-width="1.8" viewBox="0 0 24 24"><path d="M13 10V3L4 14h7v7l9-11h-7z"/></svg>
+          <span class="sidebar-text whitespace-nowrap transition-opacity duration-300">Lead</span>
+        </a>
+        <a href="#" class="flex items-center gap-3 px-3 py-2.5 rounded-lg text-sm text-emerald-200/70 hover:text-white hover:bg-white/5 transition-all duration-200">
+          <svg class="w-4 h-4 shrink-0 text-emerald-400" fill="none" stroke="currentColor" stroke-width="1.8" viewBox="0 0 24 24"><path d="M17 20h5v-2a3 3 0 00-5.356-1.857M17 20H7m10 0v-2c0-.656-.126-1.283-.356-1.857M7 20H2v-2a3 3 0 015.356-1.857M7 20v-2c0-.656.126-1.283.356-1.857m0 0a5.002 5.002 0 019.288 0M15 7a3 3 0 11-6 0 3 3 0 016 0zm6 3a2 2 0 11-4 0 2 2 0 014 0zM7 10a2 2 0 11-4 0 2 2 0 014 0z"/></svg>
+          <span class="sidebar-text whitespace-nowrap transition-opacity duration-300">Clienti</span>
+        </a>
+        <a href="#" class="flex items-center gap-3 px-3 py-2.5 rounded-lg text-sm text-emerald-200/70 hover:text-white hover:bg-white/5 transition-all duration-200">
+          <svg class="w-4 h-4 shrink-0" fill="none" stroke="currentColor" stroke-width="1.8" viewBox="0 0 24 24"><path d="M3 7v10a2 2 0 002 2h14a2 2 0 002-2V9a2 2 0 00-2-2h-6l-2-2H5a2 2 0 00-2 2z"/></svg>
+          <span class="sidebar-text whitespace-nowrap transition-opacity duration-300">Progetti</span>
+        </a>
+        <!-- Stato Attivo su Preventivi -->
+        <a href="#" class="flex items-center gap-3 px-3 py-2.5 rounded-lg text-sm text-white bg-brand-active font-medium transition-all duration-200 shadow-sm">
+          <svg class="w-4 h-4 shrink-0 text-emerald-400" fill="none" stroke="currentColor" stroke-width="1.8" viewBox="0 0 24 24"><path d="M9 12h6m-6 4h6m2 5H7a2 2 0 01-2-2V5a2 2 0 012-2h5.586a1 1 0 01.707.293l5.414 5.414a1 1 0 01.293.707V19a2 2 0 01-2 2z"/></svg>
+          <span class="sidebar-text whitespace-nowrap transition-opacity duration-300">Preventivi</span>
+        </a>
+        <a href="#" class="flex items-center gap-3 px-3 py-2.5 rounded-lg text-sm text-emerald-200/70 hover:text-white hover:bg-white/5 transition-all duration-200">
+          <svg class="w-4 h-4 shrink-0" fill="none" stroke="currentColor" stroke-width="1.8" viewBox="0 0 24 24"><path d="M7 7h.01M6 20h12a2 2 0 002-2V6a2 2 0 00-2-2H6a2 2 0 00-2 2v12a2 2 0 002 2z"/></svg>
+          <span class="sidebar-text whitespace-nowrap transition-opacity duration-300">Offerte</span>
+        </a>
+      </nav>
+    </div>
+
+    <!-- Area Inferiore Sidebar -->
+    <div class="border-t border-white/10 pt-4 space-y-3 overflow-hidden">
+      <div class="flex items-center justify-between px-3 py-1 text-xs text-emerald-200/50 whitespace-nowrap">
+        <span class="sidebar-text transition-opacity duration-300">Tema</span>
+        <button class="p-1 rounded-full bg-white/5 hover:bg-white/10 text-emerald-200 hover:text-white transition-all duration-200">
+          <svg class="w-4 h-4" fill="none" stroke="currentColor" stroke-width="1.8" viewBox="0 0 24 24"><path d="M12 3v1m0 16v1m9-9h-1M4 12H3m15.364-6.364l-.707.707M6.343 17.657l-.707.707m12.728 0l-.707-.707M6.343 6.343l-.707-.707M14 12a2 2 0 11-4 0 2 2 0 014 0z"/></svg>
+        </button>
+      </div>
+      <a href="#" class="flex items-center gap-3 px-3 py-2 rounded-lg text-sm text-red-300/80 hover:text-red-200 hover:bg-red-950/20 transition-all duration-200 whitespace-nowrap">
+        <svg class="w-4 h-4 shrink-0" fill="none" stroke="currentColor" stroke-width="1.8" viewBox="0 0 24 24"><path d="M17 16l4-4m0 0l-4-4m4 4H7m6 4v1a3 3 0 01-3 3H6a3 3 0 01-3-3V7a3 3 0 013-3h4a3 3 0 013 3v1"/></svg>
+        <span class="sidebar-text transition-opacity duration-300">Esci</span>
+      </a>
+    </div>
+  </aside>
+
+  <!-- SEZIONE PRINCIPALE -->
+  <div class="flex-1 flex flex-col min-w-0">
+    
+    <!-- BARRA DI INTESTAZIONE SUPERIORE -->
+    <header class="h-16 border-b border-slate-100 bg-white px-8 flex items-center justify-between shrink-0">
+      <div class="flex items-center gap-4">
+        <!-- Pulsante Apri/Chiudi Sidebar -->
+        <button id="sidebar-toggle" class="p-2 -ml-2 rounded-lg text-slate-500 hover:bg-slate-50 hover:text-slate-800 transition-colors focus:outline-none" title="Espandi/Comprimi Sidebar">
+          <svg class="w-5 h-5" fill="none" stroke="currentColor" stroke-width="2" viewBox="0 0 24 24"><path d="M4 6h16M4 12h12M4 18h16"/></svg>
+        </button>
+        <span class="text-xs text-slate-400 font-medium">Area di Lavoro</span>
+      </div>
+      <div class="flex items-center gap-4">
+        <span class="text-xs font-semibold text-slate-700 bg-slate-100 px-2.5 py-1 rounded-full">Demo Account</span>
+      </div>
+    </header>
+
+    <!-- AREA DEL CONTENUTO -->
+    <main class="flex-1 p-8 lg:p-10 max-w-[1400px] w-full mx-auto flex flex-col gap-8 overflow-y-auto">
+      
+      <!-- INTESTAZIONE SEZIONE -->
+      <div class="flex flex-col sm:flex-row justify-between sm:items-start gap-4">
+        <div>
+          <h1 class="text-2xl font-semibold text-slate-900 tracking-tight">Preventivi</h1>
+          <p class="text-xs text-slate-400 mt-1">Preventivi generati con AI e pubblicati ai clienti</p>
+        </div>
+        
+        <!-- Pulsante Genera -->
+        <button class="bg-brand-dark hover:bg-brand-darkHover text-white text-xs font-medium tracking-wide px-5 py-3 rounded-lg flex items-center gap-2 transition-all duration-200 shadow-sm self-start sm:self-auto">
+          <svg class="w-4 h-4" fill="none" stroke="currentColor" stroke-width="2" viewBox="0 0 24 24"><path d="M12 4.5v15m7.5-7.5h-15"/></svg>
+          Genera preventivo
+        </button>
+      </div>
+
+      <!-- TABELLA PREVENTIVI -->
+      <div class="bg-white rounded-xl border border-slate-100 shadow-[0_4px_20px_rgba(0,0,0,0.01)] overflow-hidden">
+        <div class="overflow-x-auto">
+          <table class="w-full text-left border-collapse">
+            <thead>
+              <tr class="border-b border-slate-100/80 bg-slate-50/50 text-slate-400 text-[11px] font-semibold uppercase tracking-wider">
+                <th class="py-4 px-6 w-1/3">Titolo</th>
+                <th class="py-4 px-6">Lead / Cliente</th>
+                <th class="py-4 px-6">Offerta</th>
+                <th class="py-4 px-6 text-center">Stato</th>
+                <th class="py-4 px-6">Data</th>
+                <th class="py-4 px-6 text-right">Azione</th>
+              </tr>
+            </thead>
+            <tbody class="divide-y divide-slate-100/60 text-sm">
+              
+              <!-- Riga 1: Pubblicato -->
+              <tr class="hover:bg-slate-50/30 transition-all duration-150">
+                <td class="py-4 px-6 font-semibold text-slate-900">
+                  Rossi Inc × Entry Offer
+                </td>
+                <td class="py-4 px-6 text-slate-600">
+                  Mario Rossi
+                </td>
+                <td class="py-4 px-6 text-slate-500 font-medium">
+                  Entry Offer
+                </td>
+                <td class="py-4 px-6 text-center">
+                  <!-- Badge Stato: Pubblicato -->
+                  <span class="inline-flex items-center px-2.5 py-1 rounded-full text-[10px] font-semibold tracking-wide bg-sky-50 text-sky-700 border border-sky-100 uppercase">
+                    Pubblicato
+                  </span>
+                </td>
+                <td class="py-4 px-6 text-slate-500 text-xs font-mono">
+                  26/06/2026
+                </td>
+                <td class="py-4 px-6 text-right">
+                  <a href="#" class="text-xs font-medium text-brand-dark hover:text-brand-darkHover inline-flex items-center gap-1.5 group transition-colors">
+                    Apri
+                    <svg class="w-3.5 h-3.5 transform group-hover:translate-x-0.5 transition-transform" fill="none" stroke="currentColor" stroke-width="2.2" viewBox="0 0 24 24"><path d="M13.5 4.5L21 12m0 0l-7.5 7.5M21 12H3"/></svg>
+                  </a>
+                </td>
+              </tr>
+
+              <!-- Riga 2: Accettato -->
+              <tr class="hover:bg-slate-50/30 transition-all duration-150">
+                <td class="py-4 px-6 font-semibold text-slate-900">
+                  Rossi Inc × Entry Offer
+                </td>
+                <td class="py-4 px-6 text-slate-600">
+                  Mario Rossi
+                </td>
+                <td class="py-4 px-6 text-slate-500 font-medium">
+                  Entry Offer
+                </td>
+                <td class="py-4 px-6 text-center">
+                  <!-- Badge Stato: Accettato -->
+                  <span class="inline-flex items-center px-2.5 py-1 rounded-full text-[10px] font-semibold tracking-wide bg-emerald-50 text-emerald-700 border border-emerald-100 uppercase">
+                    Accettato
+                  </span>
+                </td>
+                <td class="py-4 px-6 text-slate-500 text-xs font-mono">
+                  20/06/2026
+                </td>
+                <td class="py-4 px-6 text-right">
+                  <a href="#" class="text-xs font-medium text-brand-dark hover:text-brand-darkHover inline-flex items-center gap-1.5 group transition-colors">
+                    Apri
+                    <svg class="w-3.5 h-3.5 transform group-hover:translate-x-0.5 transition-transform" fill="none" stroke="currentColor" stroke-width="2.2" viewBox="0 0 24 24"><path d="M13.5 4.5L21 12m0 0l-7.5 7.5M21 12H3"/></svg>
+                  </a>
+                </td>
+              </tr>
+
+            </tbody>
+          </table>
+        </div>
+        
+        <!-- Footer Tabella -->
+        <div class="border-t border-slate-100 px-6 py-4 flex items-center justify-between text-xs text-slate-400">
+          <span>Mostrando 2 di 2 preventivi generati</span>
+        </div>
+      </div>
+
+    </main>
+  </div>
+
+  <!-- SCRIPT DI LOGICA (Gestione Sidebar) -->
+  <script>
+    const sidebar = document.getElementById('sidebar');
+    const toggleButton = document.getElementById('sidebar-toggle');
+    const logoText = document.getElementById('sidebar-logo-text');
+    const sidebarTexts = document.querySelectorAll('.sidebar-text');
+
+    toggleButton.addEventListener('click', () => {
+      const isCollapsed = sidebar.classList.contains('w-20');
+
+      if (isCollapsed) {
+        sidebar.classList.remove('w-20');
+        sidebar.classList.add('w-64');
+        setTimeout(() => {
+          logoText.classList.remove('opacity-0');
+          sidebarTexts.forEach(text => text.classList.remove('opacity-0'));
+        }, 150);
+      } else {
+        logoText.classList.add('opacity-0');
+        sidebarTexts.forEach(text => text.classList.add('opacity-0'));
+        sidebar.classList.remove('w-64');
+        sidebar.classList.add('w-20');
+      }
+    });
+  </script>
+</body>
+</html>

package-lock.json

@@ -8,6 +8,7 @@
       "name": "clienthub",
       "version": "0.1.0",
       "dependencies": {
+        "@anthropic-ai/sdk": "^0.105.0",
         "@dnd-kit/core": "^6.3.1",
         "@dnd-kit/sortable": "^10.0.0",
         "@dnd-kit/utilities": "^3.2.2",
@@ -32,6 +33,7 @@
         "react-dom": "19.2.4",
         "react-hook-form": "^7.75.0",
         "tailwind-merge": "^3.6.0",
+        "tailwindcss-animate": "^1.0.7",
         "zod": "^4.4.3"
       },
       "devDependencies": {
@@ -59,6 +61,27 @@
         "url": "https://github.com/sponsors/sindresorhus"
       }
     },
+    "node_modules/@anthropic-ai/sdk": {
+      "version": "0.105.0",
+      "resolved": "https://registry.npmjs.org/@anthropic-ai/sdk/-/sdk-0.105.0.tgz",
+      "integrity": "sha512-sDyu+aM9cE6uZE+HgRjjHRb+qqb87GHZOx+8bE0YlWetdL1YcVLxn8h9ltxGOflyChTe6PMEo50kMQV4cw0hfg==",
+      "license": "MIT",
+      "dependencies": {
+        "json-schema-to-ts": "^3.1.1",
+        "standardwebhooks": "^1.0.0"
+      },
+      "bin": {
+        "anthropic-ai-sdk": "bin/cli"
+      },
+      "peerDependencies": {
+        "zod": "^3.25.0 || ^4.0.0"
+      },
+      "peerDependenciesMeta": {
+        "zod": {
+          "optional": true
+        }
+      }
+    },
     "node_modules/@babel/code-frame": {
       "version": "7.29.0",
       "resolved": "https://registry.npmjs.org/@babel/code-frame/-/code-frame-7.29.0.tgz",
@@ -3802,6 +3825,12 @@
       "dev": true,
       "license": "MIT"
     },
+    "node_modules/@stablelib/base64": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/@stablelib/base64/-/base64-1.0.1.tgz",
+      "integrity": "sha512-1bnPQqSxSuc3Ii6MhBysoWCg58j97aUjuCSZrGSmDxNqtytIi0k8utUenAwTZN4V5mXXYGsVUI9zeBqy+jBOSQ==",
+      "license": "MIT"
+    },
     "node_modules/@standard-schema/utils": {
       "version": "0.3.0",
       "resolved": "https://registry.npmjs.org/@standard-schema/utils/-/utils-0.3.0.tgz",
@@ -6365,6 +6394,12 @@
       "dev": true,
       "license": "MIT"
     },
+    "node_modules/fast-sha256": {
+      "version": "1.3.0",
+      "resolved": "https://registry.npmjs.org/fast-sha256/-/fast-sha256-1.3.0.tgz",
+      "integrity": "sha512-n11RGP/lrWEFI/bWdygLxhI+pVeo1ZYIVwvvPkW7azl/rOy+F3HYRZ2K5zeE9mmkhQppyv9sQFx0JM9UabnpPQ==",
+      "license": "Unlicense"
+    },
     "node_modules/fastq": {
       "version": "1.20.1",
       "resolved": "https://registry.npmjs.org/fastq/-/fastq-1.20.1.tgz",
@@ -7342,6 +7377,19 @@
       "dev": true,
       "license": "MIT"
     },
+    "node_modules/json-schema-to-ts": {
+      "version": "3.1.1",
+      "resolved": "https://registry.npmjs.org/json-schema-to-ts/-/json-schema-to-ts-3.1.1.tgz",
+      "integrity": "sha512-+DWg8jCJG2TEnpy7kOm/7/AxaYoaRbjVB4LFZLySZlWn8exGs3A4OLJR966cVvU26N7X9TWxl+Jsw7dzAqKT6g==",
+      "license": "MIT",
+      "dependencies": {
+        "@babel/runtime": "^7.18.3",
+        "ts-algebra": "^2.0.0"
+      },
+      "engines": {
+        "node": ">=16"
+      }
+    },
     "node_modules/json-schema-traverse": {
       "version": "0.4.1",
       "resolved": "https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-0.4.1.tgz",
@@ -9038,6 +9086,16 @@
       "dev": true,
       "license": "MIT"
     },
+    "node_modules/standardwebhooks": {
+      "version": "1.0.0",
+      "resolved": "https://registry.npmjs.org/standardwebhooks/-/standardwebhooks-1.0.0.tgz",
+      "integrity": "sha512-BbHGOQK9olHPMvQNHWul6MYlrRTAOKn03rOe4A8O3CLWhNf4YHBqq2HJKKC+sfqpxiBY52pNeesD6jIiLDz8jg==",
+      "license": "MIT",
+      "dependencies": {
+        "@stablelib/base64": "^1.0.0",
+        "fast-sha256": "^1.3.0"
+      }
+    },
     "node_modules/stop-iteration-iterator": {
       "version": "1.1.0",
       "resolved": "https://registry.npmjs.org/stop-iteration-iterator/-/stop-iteration-iterator-1.1.0.tgz",
@@ -9251,9 +9309,17 @@
       "version": "4.3.0",
       "resolved": "https://registry.npmjs.org/tailwindcss/-/tailwindcss-4.3.0.tgz",
       "integrity": "sha512-y6nxMGB1nMW9R6k96e5gdIFzcfL/gTJRNaqGes1YvkLnPVXzWgbqFF2yLC0T8G774n24cx3Pe8XrKoniCOAH+Q==",
-      "dev": true,
       "license": "MIT"
     },
+    "node_modules/tailwindcss-animate": {
+      "version": "1.0.7",
+      "resolved": "https://registry.npmjs.org/tailwindcss-animate/-/tailwindcss-animate-1.0.7.tgz",
+      "integrity": "sha512-bl6mpH3T7I3UFxuvDEXLxy/VuFxBk5bbzplh7tXI68mwMokNYd1t9qPBHlnyTwfa4JGC4zP516I1hYYtQ/vspA==",
+      "license": "MIT",
+      "peerDependencies": {
+        "tailwindcss": ">=3.0.0 || insiders"
+      }
+    },
     "node_modules/tapable": {
       "version": "2.3.3",
       "resolved": "https://registry.npmjs.org/tapable/-/tapable-2.3.3.tgz",
@@ -9329,6 +9395,12 @@
         "node": ">=8.0"
       }
     },
+    "node_modules/ts-algebra": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/ts-algebra/-/ts-algebra-2.0.0.tgz",
+      "integrity": "sha512-FPAhNPFMrkwz76P7cdjdmiShwMynZYN6SgOujD1urY4oNm80Ou9oMdmbR45LotcKOXoy7wSmHkRFE6Mxbrhefw==",
+      "license": "MIT"
+    },
     "node_modules/ts-api-utils": {
       "version": "2.5.0",
       "resolved": "https://registry.npmjs.org/ts-api-utils/-/ts-api-utils-2.5.0.tgz",

package.json

@@ -9,6 +9,7 @@
     "lint": "eslint"
   },
   "dependencies": {
+    "@anthropic-ai/sdk": "^0.105.0",
     "@dnd-kit/core": "^6.3.1",
     "@dnd-kit/sortable": "^10.0.0",
     "@dnd-kit/utilities": "^3.2.2",
@@ -33,6 +34,7 @@
     "react-dom": "19.2.4",
     "react-hook-form": "^7.75.0",
     "tailwind-merge": "^3.6.0",
+    "tailwindcss-animate": "^1.0.7",
     "zod": "^4.4.3"
   },
   "devDependencies": {

scripts/import-service-offer-tags.ts

@@ -0,0 +1,118 @@
+// Import offer membership tags for all 55 services.
+// Stores in tags table with entity_type = "services" (same as the "Offerta" column).
+// Idempotent: uses onConflictDoNothing.
+// Run: same SSH tunnel pattern as other migration scripts.
+import postgres from "postgres";
+import { customAlphabet } from "nanoid";
+
+const nanoid = customAlphabet("0123456789abcdefghijklmnopqrstuvwxyz", 12);
+
+// name → offer types from the CSV "Offerta" column (multi-value pipe-separated)
+const OFFER_MEMBERSHIPS: Record<string, string[]> = {
+  "Raccolta e Mappatura Materiali":               ["Signature Offer", "Entry Offer"],
+  "Audit iniziale (UX/UI, struttura, conversione)": ["Signature Offer", "Entry Offer"],
+  "Workshop (1° fase)":                           ["Signature Offer", "Entry Offer"],
+  "Analisi Competitor":                           ["Signature Offer", "Entry Offer"],
+  "Documento di restituzione (problemi + lista ottimizzazioni)": ["Entry Offer"],
+  "Redesign visivo dell'above-the-fold / hero (il 'prima → dopo')": ["Entry Offer"],
+  "Call di restituzione":                         ["Entry Offer"],
+  "Call di presentazione Prima/Dopo":             ["Entry Offer"],
+  "Roadmap / istruzioni operative + mini kit":    ["Entry Offer"],
+  "UX Research":                                  ["Signature Offer"],
+  "Customer Journey":                             ["Signature Offer"],
+  "Architettura (sitemap)":                       ["Signature Offer"],
+  "Brand Identity - Visual identity":             ["Signature Offer"],
+  "Brand Identity - Voice identity":              ["Signature Offer"],
+  "Direzione Creative (moodboard)":               ["Signature Offer"],
+  "Workshop (2° fase)":                           ["Signature Offer"],
+  "Settaggio CMS (Wordpress Webflow ecc)":        ["Signature Offer"],
+  "UX - UI":                                      ["Signature Offer"],
+  "Wireframe (Low-Mid Fidelity)":                 ["Signature Offer"],
+  "Homepage (Figma + Dev)":                       ["Signature Offer"],
+  "Revisione #1":                                 ["Signature Offer"],
+  "- Chi siamo":                                  ["Signature Offer"],
+  "- Contatti":                                   ["Signature Offer"],
+  "- Blog (Archivio)":                            ["Signature Offer"],
+  "- - Blog post (Template Singolo)":             ["Signature Offer"],
+  "- Case Study (Archivio)":                      ["Signature Offer"],
+  "- - Case Study (Template Singolo)":            ["Signature Offer"],
+  "- Landing Page (Metodo o Differenziante)":     ["Signature Offer"],
+  "- - - Thank You Page":                         ["Signature Offer"],
+  "- - - 404":                                    ["Signature Offer"],
+  "Responsive (inclusa nelle pagine?)":           ["Signature Offer"],
+  "UX writing (Revisione testi)":                 ["Signature Offer"],
+  "Seo Setup (basic on-page)":                    ["Signature Offer"],
+  "Seo Avanzato (+ keyword + ricerca + blog post dentro retainer)": ["Signature Offer"],
+  "Revisione #2 finale":                          ["Signature Offer"],
+  "Web Core Vitals (Optimization)":               ["Signature Offer"],
+  "QA - Test Cross Browser e responsive":         ["Signature Offer"],
+  "Setting GA4 - Tag Manager - Hotjar/Clarify":   ["Signature Offer"],
+  "Raccolta Feedback Post Lancio":                ["Signature Offer"],
+  "Go-live / messa online & accessi":             ["Signature Offer"],
+  "Audit uscita":                                 ["Signature Offer"],
+  "Real User Testing":                            ["Signature Offer"],
+  "Follow Up Handover":                           ["Signature Offer"],
+  "Video Tutorial per micro modifiche in autonomia": ["Signature Offer"],
+  "Revisioni Extra illimitate (sicuri illimitati???)": ["Signature Offer"],
+  "Brand Kit (youtube - linkedin - insta)":       ["Signature Offer"],
+  "Mantenimento tecnico (sito sempre online, bello, funzionante)": ["Retainer Offer"],
+  "Monitoraggio dati (GA4 / Hotjar-Clarity)":     ["Retainer Offer"],
+  "Report mensile":                               ["Retainer Offer"],
+  "CRO - analisi UX (hotmap, punti di drop)":     ["Retainer Offer"],
+  "CRO - implementazione miglioramenti":          ["Retainer Offer"],
+  "Call di Mentorship/Consulenza/allineamento/revisione": ["Retainer Offer"],
+  "Art direction su direzione da prendere (consulente strategico interno disponibile 24/7)": ["Retainer Offer"],
+  "Extra landing (prezzo singolo per pompare prezzo)": ["Retainer Offer"],
+  "SEO avanzato (Blog post)":                     ["Retainer Offer"],
+};
+
+const TAG_ENTITY = "services";
+
+async function run() {
+  const databaseUrl = process.env.DATABASE_URL;
+  if (!databaseUrl) { console.error("DATABASE_URL required"); process.exit(1); }
+
+  const client = postgres(databaseUrl);
+  try {
+    const allServices = await client`SELECT id, name FROM services`;
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    const serviceByName = new Map((allServices as any[]).map((s) => [s.name as string, s.id as string]));
+
+    let inserted = 0;
+    let skipped = 0;
+    let missing = 0;
+
+    for (const [name, offers] of Object.entries(OFFER_MEMBERSHIPS)) {
+      const serviceId = serviceByName.get(name);
+      if (!serviceId) {
+        console.warn(`  ⚠ service not found: ${name}`);
+        missing++;
+        continue;
+      }
+      for (const offer of offers) {
+        const id = nanoid();
+        const result = await client`
+          INSERT INTO tags (id, entity_type, entity_id, name)
+          VALUES (${id}, ${TAG_ENTITY}, ${serviceId}, ${offer})
+          ON CONFLICT (entity_type, entity_id, name) DO NOTHING
+        `;
+        if (result.count === 0) {
+          skipped++;
+        } else {
+          console.log(`  ✓ ${name} → ${offer}`);
+          inserted++;
+        }
+      }
+    }
+
+    console.log(`\n✓ Done — ${inserted} tags inserted, ${skipped} skipped, ${missing} services not found`);
+    process.exit(0);
+  } catch (err) {
+    console.error("Error:", err instanceof Error ? err.message : err);
+    process.exit(1);
+  } finally {
+    await client.end();
+  }
+}
+
+run();

scripts/import-services-notion.ts

@@ -0,0 +1,141 @@
+// Import 55 services from Notion "DB Offerta: Attività SC" CSV export.
+// Idempotent: skips rows where a service with the same name already exists.
+// Run via SSH tunnel (same pattern as push-12-offer-tier-schema.ts):
+//   DATABASE_URL=$(node --env-file=.env.local -e 'const u=new URL(process.env.DATABASE_URL); u.host="127.0.0.1:54321"; process.stdout.write(u.toString())') \
+//     npx tsx scripts/import-services-notion.ts
+import postgres from "postgres";
+import { customAlphabet } from "nanoid";
+
+const nanoid = customAlphabet("0123456789abcdefghijklmnopqrstuvwxyz", 12);
+
+type ServiceRow = {
+  name: string;
+  unit_price: number;
+  category: string;
+  fase: string | null;
+};
+
+// Source: offerta_servizi.csv exported from Notion.
+// category = primary Offerta value (first when multi-value).
+// fase = null for Retainer Offer rows (no Fase column value in source).
+const SERVICES: ServiceRow[] = [
+  // ── Shared: Signature Offer + Entry Offer ──────────────────────────────────
+  { name: "Raccolta e Mappatura Materiali",                unit_price: 100,  category: "Signature Offer", fase: "Fase 1 → Onboarding / Setup"      },
+  { name: "Audit iniziale (UX/UI, struttura, conversione)", unit_price: 500,  category: "Signature Offer", fase: "Fase 1 → Onboarding / Setup"      },
+  { name: "Workshop (1° fase)",                            unit_price: 900,  category: "Signature Offer", fase: "Fase 1 → Onboarding / Setup"      },
+  { name: "Analisi Competitor",                            unit_price: 400,  category: "Signature Offer", fase: "Fase 2 → Analisi / Strategia"     },
+  // ── Entry Offer ────────────────────────────────────────────────────────────
+  { name: "Documento di restituzione (problemi + lista ottimizzazioni)", unit_price: 500, category: "Entry Offer", fase: "Fase 3 → Esecuzione / Core" },
+  { name: "Redesign visivo dell'above-the-fold / hero (il 'prima → dopo')", unit_price: 700, category: "Entry Offer", fase: "Fase 3 → Esecuzione / Core" },
+  { name: "Call di restituzione",                          unit_price: 200,  category: "Entry Offer",    fase: "Fase 5 → Offboarding / Consegna"  },
+  { name: "Call di presentazione Prima/Dopo",              unit_price: 200,  category: "Entry Offer",    fase: "Fase 5 → Offboarding / Consegna"  },
+  { name: "Roadmap / istruzioni operative + mini kit",     unit_price: 600,  category: "Entry Offer",    fase: "Fase 5 → Offboarding / Consegna"  },
+  // ── Signature Offer — Fase 2 ───────────────────────────────────────────────
+  { name: "UX Research",                                   unit_price: 1200, category: "Signature Offer", fase: "Fase 2 → Analisi / Strategia"     },
+  { name: "Customer Journey",                              unit_price: 900,  category: "Signature Offer", fase: "Fase 2 → Analisi / Strategia"     },
+  { name: "Architettura (sitemap)",                        unit_price: 500,  category: "Signature Offer", fase: "Fase 2 → Analisi / Strategia"     },
+  { name: "Brand Identity - Visual identity",              unit_price: 2000, category: "Signature Offer", fase: "Fase 2 → Analisi / Strategia"     },
+  { name: "Brand Identity - Voice identity",               unit_price: 800,  category: "Signature Offer", fase: "Fase 2 → Analisi / Strategia"     },
+  { name: "Direzione Creative (moodboard)",                unit_price: 600,  category: "Signature Offer", fase: "Fase 2 → Analisi / Strategia"     },
+  { name: "Workshop (2° fase)",                            unit_price: 900,  category: "Signature Offer", fase: "Fase 2 → Analisi / Strategia"     },
+  // ── Signature Offer — Fase 3 ───────────────────────────────────────────────
+  { name: "Settaggio CMS (Wordpress Webflow ecc)",         unit_price: 500,  category: "Signature Offer", fase: "Fase 3 → Esecuzione / Core"       },
+  { name: "UX - UI",                                       unit_price: 1000, category: "Signature Offer", fase: "Fase 3 → Esecuzione / Core"       },
+  { name: "Wireframe (Low-Mid Fidelity)",                  unit_price: 600,  category: "Signature Offer", fase: "Fase 3 → Esecuzione / Core"       },
+  { name: "Homepage (Figma + Dev)",                        unit_price: 1500, category: "Signature Offer", fase: "Fase 3 → Esecuzione / Core"       },
+  { name: "Revisione #1",                                  unit_price: 400,  category: "Signature Offer", fase: "Fase 3 → Esecuzione / Core"       },
+  { name: "- Chi siamo",                                   unit_price: 600,  category: "Signature Offer", fase: "Fase 3 → Esecuzione / Core"       },
+  { name: "- Contatti",                                    unit_price: 400,  category: "Signature Offer", fase: "Fase 3 → Esecuzione / Core"       },
+  { name: "- Blog (Archivio)",                             unit_price: 300,  category: "Signature Offer", fase: "Fase 3 → Esecuzione / Core"       },
+  { name: "- - Blog post (Template Singolo)",              unit_price: 600,  category: "Signature Offer", fase: "Fase 3 → Esecuzione / Core"       },
+  { name: "- Case Study (Archivio)",                       unit_price: 300,  category: "Signature Offer", fase: "Fase 3 → Esecuzione / Core"       },
+  { name: "- - Case Study (Template Singolo)",             unit_price: 800,  category: "Signature Offer", fase: "Fase 3 → Esecuzione / Core"       },
+  { name: "- Landing Page (Metodo o Differenziante)",      unit_price: 1000, category: "Signature Offer", fase: "Fase 3 → Esecuzione / Core"       },
+  { name: "- - - Thank You Page",                          unit_price: 300,  category: "Signature Offer", fase: "Fase 3 → Esecuzione / Core"       },
+  { name: "- - - 404",                                     unit_price: 150,  category: "Signature Offer", fase: "Fase 3 → Esecuzione / Core"       },
+  { name: "Responsive (inclusa nelle pagine?)",            unit_price: 800,  category: "Signature Offer", fase: "Fase 3 → Esecuzione / Core"       },
+  { name: "UX writing (Revisione testi)",                  unit_price: 400,  category: "Signature Offer", fase: "Fase 3 → Esecuzione / Core"       },
+  { name: "Seo Setup (basic on-page)",                     unit_price: 400,  category: "Signature Offer", fase: "Fase 3 → Esecuzione / Core"       },
+  { name: "Seo Avanzato (+ keyword + ricerca + blog post dentro retainer)", unit_price: 400, category: "Signature Offer", fase: "Fase 3 → Esecuzione / Core" },
+  { name: "Revisione #2 finale",                           unit_price: 400,  category: "Signature Offer", fase: "Fase 3 → Esecuzione / Core"       },
+  // ── Signature Offer — Fase 4 ───────────────────────────────────────────────
+  { name: "Web Core Vitals (Optimization)",                unit_price: 500,  category: "Signature Offer", fase: "Fase 4 → Raffinamento / Extra"    },
+  { name: "QA - Test Cross Browser e responsive",          unit_price: 400,  category: "Signature Offer", fase: "Fase 4 → Raffinamento / Extra"    },
+  { name: "Setting GA4 - Tag Manager - Hotjar/Clarify",    unit_price: 500,  category: "Signature Offer", fase: "Fase 4 → Raffinamento / Extra"    },
+  // ── Signature Offer — Fase 5 ───────────────────────────────────────────────
+  { name: "Raccolta Feedback Post Lancio",                 unit_price: 200,  category: "Signature Offer", fase: "Fase 5 → Offboarding / Consegna"  },
+  { name: "Go-live / messa online & accessi",              unit_price: 300,  category: "Signature Offer", fase: "Fase 5 → Offboarding / Consegna"  },
+  { name: "Audit uscita",                                  unit_price: 500,  category: "Signature Offer", fase: "Fase 5 → Offboarding / Consegna"  },
+  { name: "Real User Testing",                             unit_price: 1200, category: "Signature Offer", fase: "Fase 5 → Offboarding / Consegna"  },
+  { name: "Follow Up Handover",                            unit_price: 200,  category: "Signature Offer", fase: "Fase 5 → Offboarding / Consegna"  },
+  { name: "Video Tutorial per micro modifiche in autonomia", unit_price: 400, category: "Signature Offer", fase: "Fase 5 → Offboarding / Consegna"  },
+  { name: "Revisioni Extra illimitate (sicuri illimitati???)", unit_price: 1200, category: "Signature Offer", fase: "Fase 5 → Offboarding / Consegna" },
+  { name: "Brand Kit (youtube - linkedin - insta)",        unit_price: 600,  category: "Signature Offer", fase: "Fase 5 → Offboarding / Consegna"  },
+  // ── Retainer Offer ─────────────────────────────────────────────────────────
+  { name: "Mantenimento tecnico (sito sempre online, bello, funzionante)", unit_price: 200,  category: "Retainer Offer", fase: null },
+  { name: "Monitoraggio dati (GA4 / Hotjar-Clarity)",      unit_price: 100,  category: "Retainer Offer", fase: null },
+  { name: "Report mensile",                                unit_price: 100,  category: "Retainer Offer", fase: null },
+  { name: "CRO - analisi UX (hotmap, punti di drop)",      unit_price: 200,  category: "Retainer Offer", fase: null },
+  { name: "CRO - implementazione miglioramenti",           unit_price: 300,  category: "Retainer Offer", fase: null },
+  { name: "Call di Mentorship/Consulenza/allineamento/revisione", unit_price: 800,  category: "Retainer Offer", fase: null },
+  { name: "Art direction su direzione da prendere (consulente strategico interno disponibile 24/7)", unit_price: 2000, category: "Retainer Offer", fase: null },
+  { name: "Extra landing (prezzo singolo per pompare prezzo)", unit_price: 3000, category: "Retainer Offer", fase: null },
+  { name: "SEO avanzato (Blog post)",                      unit_price: 400,  category: "Retainer Offer", fase: null },
+];
+
+async function run() {
+  const databaseUrl = process.env.DATABASE_URL;
+  if (!databaseUrl) {
+    console.error("DATABASE_URL environment variable is required");
+    process.exit(1);
+  }
+
+  const client = postgres(databaseUrl);
+
+  try {
+    console.log(`Importing ${SERVICES.length} services from Notion CSV...`);
+    let inserted = 0;
+    let skipped = 0;
+
+    for (const svc of SERVICES) {
+      const existing = await client`
+        SELECT id FROM services WHERE name = ${svc.name} LIMIT 1
+      `;
+      if (existing.length > 0) {
+        console.log(`  ↷ exists: ${svc.name}`);
+        skipped++;
+        continue;
+      }
+
+      const id = nanoid();
+      await client`
+        INSERT INTO services (id, name, unit_price, category, fase, active, migrated_from)
+        VALUES (
+          ${id},
+          ${svc.name},
+          ${svc.unit_price},
+          ${svc.category},
+          ${svc.fase},
+          true,
+          'notion-csv-2026-06-18'
+        )
+      `;
+      console.log(`  ✓ imported: ${svc.name}`);
+      inserted++;
+    }
+
+    console.log(`\n✓ Done — ${inserted} inserted, ${skipped} skipped (already existed)`);
+    process.exit(0);
+  } catch (err) {
+    if (err instanceof Error) {
+      console.error("Import failed:", err.message);
+    } else {
+      console.error("Import failed:", err);
+    }
+    process.exit(1);
+  } finally {
+    await client.end();
+  }
+}
+
+run();

scripts/push-12-offer-tier-schema.ts

@@ -0,0 +1,142 @@
+// PRODUCTION DEPLOY NOTE: This migration (0008_offer_tier_schema.sql) is additive-only
+// (ADD COLUMN IF NOT EXISTS, a guarded DO-block CHECK constraint, CREATE TABLE IF NOT
+// EXISTS, and CREATE INDEX IF NOT EXISTS — no drops/truncates). Per CLAUDE.md Data
+// Safety, this script MUST be run against PRODUCTION via SSH+docker exec BEFORE Phase
+// 12 Wave 3 code (query layer reading offer_tier_services/tier_letter/public_price/
+// category/ticket) is exercised against production data. This is the BLOCKING step
+// for Plan 02. Idempotent — safe to re-run.
+// Run: npx tsx scripts/push-12-offer-tier-schema.ts (with prod DATABASE_URL)
+import postgres from "postgres";
+
+async function push() {
+  const databaseUrl = process.env.DATABASE_URL;
+  if (!databaseUrl) {
+    console.error("DATABASE_URL environment variable is required");
+    process.exit(1);
+  }
+
+  const client = postgres(databaseUrl);
+
+  try {
+    console.log("Pushing offer tier schema migration (0008)...");
+
+    // offer_macros: archive flag + short description + category/ticket dimensions +
+    // structured transformation promise
+    const offerMacrosColumns: Array<[string, string]> = [
+      ["description", "text"],
+      ["category", "text"],
+      ["ticket", "text"],
+      ["is_archived", "boolean NOT NULL DEFAULT false"],
+      ["cliente_ideale", "text"],
+      ["risultato", "text"],
+      ["tempo", "text"],
+      ["pain", "text"],
+      ["metodo", "text"],
+    ];
+
+    for (const [column, type] of offerMacrosColumns) {
+      try {
+        await client.unsafe(
+          `ALTER TABLE offer_macros ADD COLUMN IF NOT EXISTS ${column} ${type}`
+        );
+        console.log(`  ✓ offer_macros.${column} ready`);
+      } catch (err: unknown) {
+        if (err instanceof Error && err.message.includes("already exists")) {
+          console.log(`  ✓ offer_macros.${column} already exists (skipped)`);
+        } else {
+          throw err;
+        }
+      }
+    }
+
+    // offer_micros: tier designation (A/B/C) + manual public price
+    const offerMicrosColumns: Array<[string, string]> = [
+      ["tier_letter", "text"],
+      ["public_price", "numeric(10, 2)"],
+    ];
+
+    for (const [column, type] of offerMicrosColumns) {
+      try {
+        await client.unsafe(
+          `ALTER TABLE offer_micros ADD COLUMN IF NOT EXISTS ${column} ${type}`
+        );
+        console.log(`  ✓ offer_micros.${column} ready`);
+      } catch (err: unknown) {
+        if (err instanceof Error && err.message.includes("already exists")) {
+          console.log(`  ✓ offer_micros.${column} already exists (skipped)`);
+        } else {
+          throw err;
+        }
+      }
+    }
+
+    // CHECK constraint for tier_letter, guarded so it's safe to re-run.
+    try {
+      await client.unsafe(`
+        DO $$
+        BEGIN
+          IF NOT EXISTS (
+            SELECT 1 FROM pg_constraint WHERE conname = 'offer_micros_tier_letter_check'
+          ) THEN
+            ALTER TABLE offer_micros
+              ADD CONSTRAINT offer_micros_tier_letter_check
+              CHECK (tier_letter IS NULL OR tier_letter IN ('A', 'B', 'C'));
+          END IF;
+        END $$;
+      `);
+      console.log("  ✓ offer_micros_tier_letter_check constraint ready");
+    } catch (err: unknown) {
+      if (err instanceof Error && err.message.includes("already exists")) {
+        console.log("  ✓ offer_micros_tier_letter_check already exists (skipped)");
+      } else {
+        throw err;
+      }
+    }
+
+    // New junction table: tier (offer_micros) <-> unified services catalog.
+    try {
+      await client.unsafe(`
+        CREATE TABLE IF NOT EXISTS offer_tier_services (
+          tier_id text NOT NULL REFERENCES offer_micros(id) ON DELETE CASCADE,
+          service_id text NOT NULL REFERENCES services(id) ON DELETE CASCADE,
+          created_at timestamp with time zone DEFAULT now() NOT NULL,
+          PRIMARY KEY (tier_id, service_id)
+        )
+      `);
+      console.log("  ✓ offer_tier_services table ready");
+    } catch (err: unknown) {
+      if (err instanceof Error && err.message.includes("already exists")) {
+        console.log("  ✓ offer_tier_services table already exists (skipped)");
+      } else {
+        throw err;
+      }
+    }
+
+    try {
+      await client.unsafe(`
+        CREATE INDEX IF NOT EXISTS offer_tier_services_tier_idx ON offer_tier_services USING btree (tier_id)
+      `);
+      console.log("  ✓ offer_tier_services_tier_idx index ready");
+    } catch (err: unknown) {
+      if (err instanceof Error && err.message.includes("already exists")) {
+        console.log("  ✓ offer_tier_services_tier_idx already exists (skipped)");
+      } else {
+        throw err;
+      }
+    }
+
+    console.log("✓ Migration 0008 (offer tier schema) applied successfully");
+    process.exit(0);
+  } catch (err: unknown) {
+    if (err instanceof Error) {
+      console.error("Error pushing migration:", err.message);
+    } else {
+      console.error("Unknown error:", err);
+    }
+    process.exit(1);
+  } finally {
+    await client.end();
+  }
+}
+
+push();

scripts/reset-and-import-services.ts

@@ -0,0 +1,134 @@
+// One-shot: deletes 3 legacy test services, then imports 55 from Notion CSV.
+// offer_tier_services rows cascade-delete automatically (ON DELETE CASCADE).
+// Run via SSH tunnel:
+//   DATABASE_URL=$(node --env-file=.env.local -e 'const u=new URL(process.env.DATABASE_URL); u.host="127.0.0.1:54321"; process.stdout.write(u.toString())') \
+//     npx tsx scripts/reset-and-import-services.ts
+import postgres from "postgres";
+import { customAlphabet } from "nanoid";
+
+const nanoid = customAlphabet("0123456789abcdefghijklmnopqrstuvwxyz", 12);
+
+type ServiceRow = {
+  name: string;
+  unit_price: number;
+  category: string;
+  fase: string | null;
+};
+
+const SERVICES: ServiceRow[] = [
+  { name: "Raccolta e Mappatura Materiali",                unit_price: 100,  category: "Signature Offer", fase: "Fase 1 → Onboarding / Setup"      },
+  { name: "Audit iniziale (UX/UI, struttura, conversione)", unit_price: 500,  category: "Signature Offer", fase: "Fase 1 → Onboarding / Setup"      },
+  { name: "Workshop (1° fase)",                            unit_price: 900,  category: "Signature Offer", fase: "Fase 1 → Onboarding / Setup"      },
+  { name: "Analisi Competitor",                            unit_price: 400,  category: "Signature Offer", fase: "Fase 2 → Analisi / Strategia"     },
+  { name: "Documento di restituzione (problemi + lista ottimizzazioni)", unit_price: 500, category: "Entry Offer", fase: "Fase 3 → Esecuzione / Core" },
+  { name: "Redesign visivo dell'above-the-fold / hero (il 'prima → dopo')", unit_price: 700, category: "Entry Offer", fase: "Fase 3 → Esecuzione / Core" },
+  { name: "Call di restituzione",                          unit_price: 200,  category: "Entry Offer",    fase: "Fase 5 → Offboarding / Consegna"  },
+  { name: "Call di presentazione Prima/Dopo",              unit_price: 200,  category: "Entry Offer",    fase: "Fase 5 → Offboarding / Consegna"  },
+  { name: "Roadmap / istruzioni operative + mini kit",     unit_price: 600,  category: "Entry Offer",    fase: "Fase 5 → Offboarding / Consegna"  },
+  { name: "UX Research",                                   unit_price: 1200, category: "Signature Offer", fase: "Fase 2 → Analisi / Strategia"     },
+  { name: "Customer Journey",                              unit_price: 900,  category: "Signature Offer", fase: "Fase 2 → Analisi / Strategia"     },
+  { name: "Architettura (sitemap)",                        unit_price: 500,  category: "Signature Offer", fase: "Fase 2 → Analisi / Strategia"     },
+  { name: "Brand Identity - Visual identity",              unit_price: 2000, category: "Signature Offer", fase: "Fase 2 → Analisi / Strategia"     },
+  { name: "Brand Identity - Voice identity",               unit_price: 800,  category: "Signature Offer", fase: "Fase 2 → Analisi / Strategia"     },
+  { name: "Direzione Creative (moodboard)",                unit_price: 600,  category: "Signature Offer", fase: "Fase 2 → Analisi / Strategia"     },
+  { name: "Workshop (2° fase)",                            unit_price: 900,  category: "Signature Offer", fase: "Fase 2 → Analisi / Strategia"     },
+  { name: "Settaggio CMS (Wordpress Webflow ecc)",         unit_price: 500,  category: "Signature Offer", fase: "Fase 3 → Esecuzione / Core"       },
+  { name: "UX - UI",                                       unit_price: 1000, category: "Signature Offer", fase: "Fase 3 → Esecuzione / Core"       },
+  { name: "Wireframe (Low-Mid Fidelity)",                  unit_price: 600,  category: "Signature Offer", fase: "Fase 3 → Esecuzione / Core"       },
+  { name: "Homepage (Figma + Dev)",                        unit_price: 1500, category: "Signature Offer", fase: "Fase 3 → Esecuzione / Core"       },
+  { name: "Revisione #1",                                  unit_price: 400,  category: "Signature Offer", fase: "Fase 3 → Esecuzione / Core"       },
+  { name: "- Chi siamo",                                   unit_price: 600,  category: "Signature Offer", fase: "Fase 3 → Esecuzione / Core"       },
+  { name: "- Contatti",                                    unit_price: 400,  category: "Signature Offer", fase: "Fase 3 → Esecuzione / Core"       },
+  { name: "- Blog (Archivio)",                             unit_price: 300,  category: "Signature Offer", fase: "Fase 3 → Esecuzione / Core"       },
+  { name: "- - Blog post (Template Singolo)",              unit_price: 600,  category: "Signature Offer", fase: "Fase 3 → Esecuzione / Core"       },
+  { name: "- Case Study (Archivio)",                       unit_price: 300,  category: "Signature Offer", fase: "Fase 3 → Esecuzione / Core"       },
+  { name: "- - Case Study (Template Singolo)",             unit_price: 800,  category: "Signature Offer", fase: "Fase 3 → Esecuzione / Core"       },
+  { name: "- Landing Page (Metodo o Differenziante)",      unit_price: 1000, category: "Signature Offer", fase: "Fase 3 → Esecuzione / Core"       },
+  { name: "- - - Thank You Page",                          unit_price: 300,  category: "Signature Offer", fase: "Fase 3 → Esecuzione / Core"       },
+  { name: "- - - 404",                                     unit_price: 150,  category: "Signature Offer", fase: "Fase 3 → Esecuzione / Core"       },
+  { name: "Responsive (inclusa nelle pagine?)",            unit_price: 800,  category: "Signature Offer", fase: "Fase 3 → Esecuzione / Core"       },
+  { name: "UX writing (Revisione testi)",                  unit_price: 400,  category: "Signature Offer", fase: "Fase 3 → Esecuzione / Core"       },
+  { name: "Seo Setup (basic on-page)",                     unit_price: 400,  category: "Signature Offer", fase: "Fase 3 → Esecuzione / Core"       },
+  { name: "Seo Avanzato (+ keyword + ricerca + blog post dentro retainer)", unit_price: 400, category: "Signature Offer", fase: "Fase 3 → Esecuzione / Core" },
+  { name: "Revisione #2 finale",                           unit_price: 400,  category: "Signature Offer", fase: "Fase 3 → Esecuzione / Core"       },
+  { name: "Web Core Vitals (Optimization)",                unit_price: 500,  category: "Signature Offer", fase: "Fase 4 → Raffinamento / Extra"    },
+  { name: "QA - Test Cross Browser e responsive",          unit_price: 400,  category: "Signature Offer", fase: "Fase 4 → Raffinamento / Extra"    },
+  { name: "Setting GA4 - Tag Manager - Hotjar/Clarify",    unit_price: 500,  category: "Signature Offer", fase: "Fase 4 → Raffinamento / Extra"    },
+  { name: "Raccolta Feedback Post Lancio",                 unit_price: 200,  category: "Signature Offer", fase: "Fase 5 → Offboarding / Consegna"  },
+  { name: "Go-live / messa online & accessi",              unit_price: 300,  category: "Signature Offer", fase: "Fase 5 → Offboarding / Consegna"  },
+  { name: "Audit uscita",                                  unit_price: 500,  category: "Signature Offer", fase: "Fase 5 → Offboarding / Consegna"  },
+  { name: "Real User Testing",                             unit_price: 1200, category: "Signature Offer", fase: "Fase 5 → Offboarding / Consegna"  },
+  { name: "Follow Up Handover",                            unit_price: 200,  category: "Signature Offer", fase: "Fase 5 → Offboarding / Consegna"  },
+  { name: "Video Tutorial per micro modifiche in autonomia", unit_price: 400, category: "Signature Offer", fase: "Fase 5 → Offboarding / Consegna" },
+  { name: "Revisioni Extra illimitate (sicuri illimitati???)", unit_price: 1200, category: "Signature Offer", fase: "Fase 5 → Offboarding / Consegna" },
+  { name: "Brand Kit (youtube - linkedin - insta)",        unit_price: 600,  category: "Signature Offer", fase: "Fase 5 → Offboarding / Consegna"  },
+  { name: "Mantenimento tecnico (sito sempre online, bello, funzionante)", unit_price: 200,  category: "Retainer Offer", fase: null },
+  { name: "Monitoraggio dati (GA4 / Hotjar-Clarity)",      unit_price: 100,  category: "Retainer Offer", fase: null },
+  { name: "Report mensile",                                unit_price: 100,  category: "Retainer Offer", fase: null },
+  { name: "CRO - analisi UX (hotmap, punti di drop)",      unit_price: 200,  category: "Retainer Offer", fase: null },
+  { name: "CRO - implementazione miglioramenti",           unit_price: 300,  category: "Retainer Offer", fase: null },
+  { name: "Call di Mentorship/Consulenza/allineamento/revisione", unit_price: 800,  category: "Retainer Offer", fase: null },
+  { name: "Art direction su direzione da prendere (consulente strategico interno disponibile 24/7)", unit_price: 2000, category: "Retainer Offer", fase: null },
+  { name: "Extra landing (prezzo singolo per pompare prezzo)", unit_price: 3000, category: "Retainer Offer", fase: null },
+  { name: "SEO avanzato (Blog post)",                      unit_price: 400,  category: "Retainer Offer", fase: null },
+];
+
+const LEGACY_IDS = [
+  "LLi-DynaQ_Y13vgREFtSB", // Audit Iniziale (test)
+  "MlhY34V7M_ylSPekeuIsz",  // Raccolta e Mappatura Materiali (test, wrong category)
+  "lDZkctWhcXqsYVDy2nac6",  // Analisi Competitor (test, wrong category)
+];
+
+async function run() {
+  const databaseUrl = process.env.DATABASE_URL;
+  if (!databaseUrl) {
+    console.error("DATABASE_URL environment variable is required");
+    process.exit(1);
+  }
+
+  const client = postgres(databaseUrl);
+
+  try {
+    // Step 1: delete legacy test services (offer_tier_services cascade-deletes)
+    console.log("Deleting 3 legacy test services...");
+    const deleted = await client`
+      DELETE FROM services WHERE id = ANY(${LEGACY_IDS}) RETURNING name
+    `;
+    for (const row of deleted) console.log(`  ✗ deleted: ${row.name}`);
+    console.log();
+
+    // Step 2: import 55 Notion services
+    console.log(`Importing ${SERVICES.length} services...`);
+    let inserted = 0;
+    let skipped = 0;
+
+    for (const svc of SERVICES) {
+      const existing = await client`
+        SELECT id FROM services WHERE name = ${svc.name} LIMIT 1
+      `;
+      if (existing.length > 0) {
+        console.log(`  ↷ exists: ${svc.name}`);
+        skipped++;
+        continue;
+      }
+      const id = nanoid();
+      await client`
+        INSERT INTO services (id, name, unit_price, category, fase, active, migrated_from)
+        VALUES (${id}, ${svc.name}, ${svc.unit_price}, ${svc.category}, ${svc.fase}, true, 'notion-csv-2026-06-18')
+      `;
+      console.log(`  ✓ ${svc.name}`);
+      inserted++;
+    }
+
+    const [{ count }] = await client`SELECT count(*) FROM services`;
+    console.log(`\n✓ Done — ${inserted} inserted, ${skipped} skipped. Total in DB: ${count}`);
+    process.exit(0);
+  } catch (err) {
+    console.error("Error:", err instanceof Error ? err.message : err);
+    process.exit(1);
+  } finally {
+    await client.end();
+  }
+}
+
+run();

scripts/verify-12-03-actions.ts

@@ -0,0 +1,242 @@
+// Phase 12 Plan 03 — Task 2 verification script for actions.ts additions.
+//
+// This project has no test runner configured (no `scripts.test` in package.json),
+// and `.env.local`'s DATABASE_URL points at PRODUCTION (per project memory) — so
+// this script does NOT execute any DB calls or server actions (server actions
+// also require an Auth.js session, unavailable outside a request context). It
+// typechecks against the real exports/types from
+// src/app/admin/offers/actions.ts and documents the 9 expected behaviors from
+// the plan's <behavior> block, for manual run against a dev DB later if desired.
+//
+// Run (manual, dev DB only, inside a request context with admin session):
+//   npx tsx scripts/verify-12-03-actions.ts
+
+import type { SaveOfferEditorPayload } from "@/app/admin/offers/actions";
+import {
+  saveOfferEditor,
+  toggleOfferArchived,
+  addOfferTag,
+  removeOfferTag,
+  renameOfferOption,
+  createOfferMacro,
+} from "@/app/admin/offers/actions";
+
+// ── Test 1: tier_letter Zod validation ───────────────────────────────────────
+// saveOfferEditor(macroId, payload) rejects (throws) when payload.tiers contains
+// a tier_letter not in ["A","B","C"] — Zod enum validation, defense-in-depth
+// alongside the DB CHECK constraint from Plan 01.
+async function test1_invalidTierLetter(macroId: string) {
+  const badPayload = {
+    internal_name: "Test",
+    public_name: "Test",
+    tiers: [
+      {
+        tier_letter: "D", // invalid — not in ["A","B","C"]
+        internal_name: "Tier X",
+        public_name: "Tier X",
+        duration_months: 3,
+        assignedServiceIds: [],
+      },
+    ],
+    tipoTags: [],
+    obiettivoTags: [],
+  } as unknown as SaveOfferEditorPayload;
+  // Expected: saveOfferEditor(macroId, badPayload) throws (Zod enum mismatch
+  // surfaces as parsed.error.issues[0].message before any DB write).
+  return () => saveOfferEditor(macroId, badPayload);
+}
+
+// ── Test 2: macro scalar field update ────────────────────────────────────────
+// saveOfferEditor updates offer_macros scalars (internal_name, description,
+// category, ticket, cliente_ideale, risultato, tempo, pain, metodo) in one
+// db.update(offer_macros)...where(eq(id, macroId)).
+async function test2_macroScalars(macroId: string) {
+  const payload: SaveOfferEditorPayload = {
+    internal_name: "Offerta Test",
+    public_name: "Offerta Pubblica",
+    description: "Una descrizione",
+    category: "Signature Offer",
+    ticket: "Mid Ticket",
+    cliente_ideale: "Coach",
+    risultato: "Lead qualificati",
+    tempo: "90 giorni",
+    pain: "Mancanza di processo",
+    metodo: "Sistema X",
+    tiers: [],
+    tipoTags: [],
+    obiettivoTags: [],
+  };
+  // Expected: after call, offer_macros row for macroId has all 9 scalar
+  // fields set to the payload values.
+  return () => saveOfferEditor(macroId, payload);
+}
+
+// ── Test 3: tier upsert (update existing id, insert when no id) ──────────────
+// If tier.id is provided -> db.update(offer_micros).set({...}); if no id ->
+// db.insert(offer_micros).values({..., macro_id: macroId}).
+async function test3_tierUpsert(macroId: string, existingTierId: string) {
+  const payload: SaveOfferEditorPayload = {
+    internal_name: "Offerta Test",
+    public_name: "Offerta Pubblica",
+    tiers: [
+      {
+        id: existingTierId, // -> update path
+        tier_letter: "A",
+        internal_name: "Tier A",
+        public_name: "Tier A Pubblico",
+        duration_months: 3,
+        public_price: 1500,
+        assignedServiceIds: [],
+      },
+      {
+        // no id -> insert path (supports macros with < 3 tiers)
+        tier_letter: "B",
+        internal_name: "Tier B",
+        public_name: "Tier B Pubblico",
+        duration_months: 6,
+        public_price: 2500,
+        assignedServiceIds: [],
+      },
+    ],
+    tipoTags: [],
+    obiettivoTags: [],
+  };
+  // Expected: existingTierId row updated in place; a new offer_micros row
+  // created for tier B with macro_id = macroId.
+  return () => saveOfferEditor(macroId, payload);
+}
+
+// ── Test 4: offer_tier_services delete-then-reinsert ─────────────────────────
+// A tier with assignedServiceIds: ["svc1","svc2"] -> after call,
+// offer_tier_services has exactly 2 rows for that tier_id, both svc1/svc2.
+async function test4_tierServicesReplace(macroId: string, tierId: string) {
+  const payload: SaveOfferEditorPayload = {
+    internal_name: "Offerta Test",
+    public_name: "Offerta Pubblica",
+    tiers: [
+      {
+        id: tierId,
+        tier_letter: "A",
+        internal_name: "Tier A",
+        public_name: "Tier A Pubblico",
+        duration_months: 3,
+        assignedServiceIds: ["svc1", "svc2"],
+      },
+    ],
+    tipoTags: [],
+    obiettivoTags: [],
+  };
+  // Expected: offer_tier_services has exactly 2 rows where tier_id === tierId,
+  // service_id IN ("svc1", "svc2").
+  return () => saveOfferEditor(macroId, payload);
+}
+
+// ── Test 5: Tipo/Obiettivo tags delete-then-reinsert ─────────────────────────
+// saveOfferEditor replaces tags where entity_type IN
+// ("offer_macros.tipo","offer_macros.obiettivo") and entity_id = macroId.
+async function test5_tagsReplace(macroId: string) {
+  const payload: SaveOfferEditorPayload = {
+    internal_name: "Offerta Test",
+    public_name: "Offerta Pubblica",
+    tiers: [],
+    tipoTags: ["Audit", "Coaching"],
+    obiettivoTags: ["Lead Generation"],
+  };
+  // Expected: tags table has 2 rows entity_type="offer_macros.tipo" (Audit,
+  // Coaching) and 1 row entity_type="offer_macros.obiettivo" (Lead
+  // Generation), all entity_id = macroId; any prior rows for this macroId +
+  // these two entity_types are removed first.
+  return () => saveOfferEditor(macroId, payload);
+}
+
+// ── Test 6: toggleOfferArchived ──────────────────────────────────────────────
+// toggleOfferArchived(macroId, archived: boolean) sets offer_macros.is_archived = archived.
+async function test6_toggleArchived(macroId: string) {
+  // Expected: offer_macros.is_archived === true after toggleOfferArchived(macroId, true);
+  // === false after toggleOfferArchived(macroId, false).
+  return [
+    () => toggleOfferArchived(macroId, true),
+    () => toggleOfferArchived(macroId, false),
+  ];
+}
+
+// ── Test 7: addOfferTag / removeOfferTag ─────────────────────────────────────
+// addOfferTag(dimension, macroId, value) / removeOfferTag(dimension, macroId,
+// value) work for dimension in ("tipo","obiettivo"). Reject any other
+// dimension value.
+async function test7_tagCrud(macroId: string) {
+  // Expected: addOfferTag("tipo", macroId, "Audit") inserts a tags row
+  // (entity_type="offer_macros.tipo", entity_id=macroId, name="Audit");
+  // removeOfferTag("tipo", macroId, "Audit") deletes it.
+  // addOfferTag("invalid" as any, macroId, "x") throws.
+  return {
+    addTipo: () => addOfferTag("tipo", macroId, "Audit"),
+    removeTipo: () => removeOfferTag("tipo", macroId, "Audit"),
+    addObiettivo: () => addOfferTag("obiettivo", macroId, "Lead Generation"),
+    removeObiettivo: () => removeOfferTag("obiettivo", macroId, "Lead Generation"),
+    // @ts-expect-error -- intentional invalid dimension to verify the throw path
+    invalid: () => addOfferTag("invalid", macroId, "x"),
+  };
+}
+
+// ── Test 8: renameOfferOption ────────────────────────────────────────────────
+// renameOfferOption(field, oldValue, newValue) for field in ("categoria",
+// "ticket") updates offer_macros.category/ticket for all matching rows; for
+// field in ("tipo","obiettivo") updates tags.name.
+async function test8_renameOption() {
+  // Expected:
+  //   renameOfferOption("categoria", "Entry Offer", "Offerta Base") updates
+  //     all offer_macros rows where category = "Entry Offer" -> "Offerta Base"
+  //   renameOfferOption("ticket", "Low Ticket", "Ticket Basso") updates
+  //     all offer_macros rows where ticket = "Low Ticket" -> "Ticket Basso"
+  //   renameOfferOption("tipo", "Audit", "Diagnosi") updates all tags rows
+  //     where entity_type="offer_macros.tipo" and name="Audit" -> "Diagnosi"
+  //   renameOfferOption("obiettivo", "Lead Generation", "Acquisizione Lead")
+  //     updates tags rows where entity_type="offer_macros.obiettivo"
+  return {
+    renameCategoria: () => renameOfferOption("categoria", "Entry Offer", "Offerta Base"),
+    renameTicket: () => renameOfferOption("ticket", "Low Ticket", "Ticket Basso"),
+    renameTipo: () => renameOfferOption("tipo", "Audit", "Diagnosi"),
+    renameObiettivo: () => renameOfferOption("obiettivo", "Lead Generation", "Acquisizione Lead"),
+  };
+}
+
+// ── Test 9: createOfferMacro ─────────────────────────────────────────────────
+// createOfferMacro(formData) creates a new offer_macros row from internal_name
+// (required) + optional public_name/description/category. If public_name is
+// omitted, defaults to internal_name.
+async function test9_createOfferMacro() {
+  const fd1 = new FormData();
+  fd1.append("internal_name", "Nuova Offerta Interna");
+  fd1.append("description", "Descrizione breve");
+  fd1.append("category", "Entry Offer");
+  // Expected: new offer_macros row with internal_name="Nuova Offerta Interna",
+  // public_name="Nuova Offerta Interna" (defaulted), description set,
+  // category="Entry Offer".
+
+  const fd2 = new FormData();
+  fd2.append("internal_name", "Altra Offerta");
+  fd2.append("public_name", "Nome Pubblico Esplicito");
+  // Expected: new offer_macros row with public_name="Nome Pubblico Esplicito"
+  // (not defaulted, since explicitly provided).
+
+  return {
+    withDefaultPublicName: () => createOfferMacro(fd1),
+    withExplicitPublicName: () => createOfferMacro(fd2),
+  };
+}
+
+// Not executed automatically (production DB + no request context for
+// requireAdmin) — typecheck-only verification.
+
+export {
+  test1_invalidTierLetter,
+  test2_macroScalars,
+  test3_tierUpsert,
+  test4_tierServicesReplace,
+  test5_tagsReplace,
+  test6_toggleArchived,
+  test7_tagCrud,
+  test8_renameOption,
+  test9_createOfferMacro,
+};

scripts/verify-12-03-queries.ts

@@ -0,0 +1,112 @@
+// Phase 12 Plan 03 — Task 1 verification script for offer-queries.ts additions.
+//
+// This project has no test runner configured (no `scripts.test` in package.json),
+// and `.env.local`'s DATABASE_URL points at PRODUCTION (per project memory) — so
+// this script does NOT execute any DB calls. It typechecks against the real
+// exports/types from src/lib/offer-queries.ts and documents the 5 expected
+// behaviors from the plan's <behavior> block, for manual run against a dev DB
+// later if desired.
+//
+// Run (manual, dev DB only): npx tsx scripts/verify-12-03-queries.ts
+
+import {
+  getOfferEditorData,
+  getOfferListCards,
+  getOfferFieldOptions,
+  type OfferEditorData,
+  type OfferListCard,
+  type OfferFieldOptions,
+  type OfferTierData,
+} from "@/lib/offer-queries";
+
+// ── Test 1: getOfferListCards() ──────────────────────────────────────────────
+// Input: 2 offer_macros rows (1 with is_archived=true, 1 with is_archived=false).
+// Expected: array of length 2, both present, ordered by sort_order, each row
+// shaped { id, internal_name, description, category, is_archived }. Archived
+// rows ARE returned — filtering is client-side (UI-SPEC "Mostra offerte archiviate").
+async function test1_getOfferListCards() {
+  const cards: OfferListCard[] = await getOfferListCards();
+  // Expected assertions (manual):
+  //   cards.length === 2
+  //   cards.some(c => c.is_archived === true)
+  //   cards.some(c => c.is_archived === false)
+  return cards;
+}
+
+// ── Test 2: getOfferEditorData(macroId) — macro with 0 tiers ─────────────────
+// Input: macro with category = "Signature Offer", 0 offer_micros rows, 3
+// services with category="Signature Offer" + 2 with a different category.
+// Expected: { macro: {...}, tiers: [], availableServices: [...3 matching...],
+// tipoTags: [], obiettivoTags: [] }
+async function test2_emptyTiers(macroId: string) {
+  const data: OfferEditorData | null = await getOfferEditorData(macroId);
+  // Expected assertions (manual):
+  //   data !== null
+  //   data.tiers.length === 0
+  //   data.availableServices.length === 3  (only services.category === macro.category)
+  //   data.tipoTags.length === 0 && data.obiettivoTags.length === 0
+  return data;
+}
+
+// ── Test 3: getOfferEditorData(macroId) — 3 tiers, tier A has 2 services ─────
+// Input: macro with 3 offer_micros rows (tier_letter A/B/C) and 2
+// offer_tier_services rows assigned to tier A.
+// Expected: tiers sorted A->B->C; each tier has
+// { id, tier_letter, public_price, assignedServiceIds, servicesTotal };
+// tier A's servicesTotal === sum(unit_price) of its 2 assigned services;
+// tiers B/C have assignedServiceIds === [] and servicesTotal === "0".
+async function test3_tiersWithServices(macroId: string) {
+  const data: OfferEditorData | null = await getOfferEditorData(macroId);
+  // Expected assertions (manual):
+  //   data.tiers.map(t => t.tier_letter) === ["A", "B", "C"]
+  //   data.tiers[0].assignedServiceIds.length === 2
+  //   Number(data.tiers[0].servicesTotal) === sum of the 2 services' unit_price
+  //   data.tiers[1].assignedServiceIds === [] && data.tiers[1].servicesTotal === "0"
+  //   data.tiers[2].assignedServiceIds === [] && data.tiers[2].servicesTotal === "0"
+  const tierA: OfferTierData | undefined = data?.tiers[0];
+  return { data, tierA };
+}
+
+// ── Test 4: getOfferEditorData(macroId) — tipoTags/obiettivoTags ─────────────
+// Input: 2 "tipo" tags + 1 "obiettivo" tag exist for the macro (entity_type =
+// "offer_macros.tipo" / "offer_macros.obiettivo", entity_id = macroId).
+// Expected: tipoTags.length === 2, obiettivoTags.length === 1.
+async function test4_tags(macroId: string) {
+  const data: OfferEditorData | null = await getOfferEditorData(macroId);
+  // Expected assertions (manual):
+  //   data?.tipoTags.length === 2
+  //   data?.obiettivoTags.length === 1
+  return data;
+}
+
+// ── Test 5: getOfferFieldOptions() ───────────────────────────────────────────
+// Input: 2 macros with category "Entry Offer"/"Signature Offer", 1 "tipo" tag
+// "Audit", 1 "obiettivo" tag "Lead Generation".
+// Expected: categoria contains both values; tipo === ["Audit"];
+// obiettivo === ["Lead Generation"].
+async function test5_fieldOptions() {
+  const options: OfferFieldOptions = await getOfferFieldOptions();
+  // Expected assertions (manual):
+  //   options.categoria includes "Entry Offer" and "Signature Offer"
+  //   options.tipo includes "Audit"
+  //   options.obiettivo includes "Lead Generation"
+  return options;
+}
+
+// Not executed automatically (production DB) — typecheck-only verification.
+// To run manually against a dev DB: uncomment the call below.
+// void (async () => {
+//   await test1_getOfferListCards();
+//   await test2_emptyTiers("macro-id");
+//   await test3_tiersWithServices("macro-id");
+//   await test4_tags("macro-id");
+//   await test5_fieldOptions();
+// })();
+
+export {
+  test1_getOfferListCards,
+  test2_emptyTiers,
+  test3_tiersWithServices,
+  test4_tags,
+  test5_fieldOptions,
+};

src/app/admin/analytics/page.tsx

@@ -1,163 +0,0 @@
-import {
-  getAnalyticsByYear,
-  getMonthlyCollected,
-  getAvailableYears,
-  getTimeByClient,
-  getTotalTrackedHours,
-} from "@/lib/analytics-queries";
-import { YearSelector, MonthlyChart } from "@/components/admin/YearSelector";
-
-export const revalidate = 0;
-
-function fmtEur(n: number) {
-  return n.toLocaleString("it-IT", { style: "currency", currency: "EUR", minimumFractionDigits: 2 });
-}
-
-function fmtSeconds(s: number): string {
-  const h = Math.floor(s / 3600);
-  const m = Math.floor((s % 3600) / 60);
-  if (h > 0) return `${h}h ${m}m`;
-  return `${m}m`;
-}
-
-function MetricCard({
-  label, value, sub, accent,
-}: {
-  label: string; value: string; sub?: string; accent?: boolean;
-}) {
-  return (
-    <div className={`rounded-xl border p-5 ${accent ? "bg-[#1A463C] border-[#1A463C] text-white" : "bg-white border-[#e5e7eb]"}`}>
-      <p className={`text-xs font-bold uppercase tracking-wider mb-2 ${accent ? "text-white/60" : "text-[#71717a]"}`}>
-        {label}
-      </p>
-      <p className={`text-2xl font-bold tracking-tight ${accent ? "text-white" : "text-[#1a1a1a]"}`}>
-        {value}
-      </p>
-      {sub && (
-        <p className={`text-xs mt-1 ${accent ? "text-white/60" : "text-[#71717a]"}`}>{sub}</p>
-      )}
-    </div>
-  );
-}
-
-export default async function AnalyticsPage({
-  searchParams,
-}: {
-  searchParams: Promise<{ year?: string }>;
-}) {
-  const { year: yearParam } = await searchParams;
-  const year = parseInt(yearParam ?? "") || new Date().getFullYear();
-
-  const [data, monthly, availableYears, timeByClient, totalHours] = await Promise.all([
-    getAnalyticsByYear(year),
-    getMonthlyCollected(year),
-    getAvailableYears(),
-    getTimeByClient(year),
-    getTotalTrackedHours(year),
-  ]);
-
-  const collectedPct =
-    data.contracted > 0 ? Math.round((data.collected / data.contracted) * 100) : 0;
-
-  const maxClientSeconds = timeByClient[0]?.totalSeconds ?? 1;
-
-  return (
-    <div className="space-y-10">
-      {/* Header */}
-      <div className="flex items-center justify-between">
-        <div>
-          <h1 className="text-2xl font-bold text-[#1a1a1a]">Statistiche</h1>
-          <p className="text-sm text-[#71717a] mt-0.5">Panoramica per anno</p>
-        </div>
-        <YearSelector currentYear={year} availableYears={availableYears} />
-      </div>
-
-      {/* ── SEZIONE ECONOMICA ── */}
-      <div className="space-y-4">
-        <h2 className="text-sm font-bold text-[#71717a] uppercase tracking-wider">Fatturato</h2>
-
-        <div className="grid grid-cols-2 lg:grid-cols-4 gap-4">
-          <MetricCard
-            label="Contrattualizzato"
-            value={fmtEur(data.contracted)}
-            sub={`${data.clientsAcquired} client${data.clientsAcquired === 1 ? "e" : "i"}`}
-            accent
-          />
-          <MetricCard
-            label="Incassato"
-            value={fmtEur(data.collected)}
-            sub={`${collectedPct}% del contrattualizzato`}
-          />
-          <MetricCard
-            label="Da incassare"
-            value={fmtEur(data.pending)}
-            sub="Tutti gli anni"
-          />
-          <MetricCard
-            label="Clienti acquisiti"
-            value={String(data.clientsAcquired)}
-            sub={`Anno ${year}`}
-          />
-        </div>
-
-        <MonthlyChart data={monthly} year={year} />
-
-        {data.contracted === 0 && (
-          <p className="text-sm text-[#71717a] italic text-center py-2">
-            Nessun cliente registrato nel {year}.
-          </p>
-        )}
-      </div>
-
-      {/* ── SEZIONE TIME TRACKING ── */}
-      <div className="space-y-4">
-        <h2 className="text-sm font-bold text-[#71717a] uppercase tracking-wider">
-          Tempo tracciato
-        </h2>
-
-        <div className="grid grid-cols-2 lg:grid-cols-4 gap-4">
-          <MetricCard
-            label="Ore totali"
-            value={`${totalHours}h`}
-            sub={`Anno ${year}`}
-            accent
-          />
-        </div>
-
-        {timeByClient.length === 0 ? (
-          <div className="bg-white rounded-xl border border-[#e5e7eb] p-8 text-center">
-            <p className="text-sm text-[#71717a] italic">
-              Nessuna sessione registrata nel {year}.
-              Usa il timer ▶ nella lista clienti per iniziare.
-            </p>
-          </div>
-        ) : (
-          <div className="bg-white rounded-xl border border-[#e5e7eb] p-6 space-y-4">
-            <h3 className="text-sm font-bold text-[#1a1a1a]">Ore per cliente — {year}</h3>
-            <div className="space-y-3">
-              {timeByClient.map((row) => {
-                const pct = Math.round((row.totalSeconds / maxClientSeconds) * 100);
-                return (
-                  <div key={row.clientId}>
-                    <div className="flex items-center justify-between mb-1">
-                      <span className="text-sm font-medium text-[#1a1a1a]">{row.clientName}</span>
-                      <span className="text-sm tabular-nums text-[#71717a]">
-                        {fmtSeconds(row.totalSeconds)}
-                      </span>
-                    </div>
-                    <div className="h-2 rounded-full bg-[#f4f4f5] overflow-hidden">
-                      <div
-                        className="h-full rounded-full bg-[#1A463C] transition-all"
-                        style={{ width: `${pct}%` }}
-                      />
-                    </div>
-                  </div>
-                );
-              })}
-            </div>
-          </div>
-        )}
-      </div>
-    </div>
-  );
-}

src/app/admin/catalog/CatalogSearch.tsx

@@ -1,11 +1,59 @@
 "use client";
 
-import { useState, useMemo } from "react";
+import { useState, useMemo, useRef } from "react";
 import { Input } from "@/components/ui/input";
 import { Search } from "lucide-react";
-import { ServiceTable } from "@/components/admin/catalog/ServiceTable";
+import { ServiceTable, DEFAULT_COL_ORDER } from "@/components/admin/catalog/ServiceTable";
+import type { ColumnKey } from "@/components/admin/catalog/ServiceTable";
 import type { ServiceWithTags, CatalogFieldOptions } from "@/lib/admin-queries";
 
+function loadColOrder(): ColumnKey[] {
+  if (typeof window === "undefined") return DEFAULT_COL_ORDER;
+  try {
+    const saved = localStorage.getItem("catalog_col_order");
+    if (saved) {
+      const parsed = JSON.parse(saved) as ColumnKey[];
+      // Validate: must contain exactly the same keys
+      if (
+        parsed.length === DEFAULT_COL_ORDER.length &&
+        DEFAULT_COL_ORDER.every((k) => parsed.includes(k))
+      ) {
+        return parsed;
+      }
+    }
+  } catch {}
+  return DEFAULT_COL_ORDER;
+}
+
+function buildSortFn(
+  sortKey: ColumnKey | null,
+  sortDir: "asc" | "desc"
+): (a: ServiceWithTags, b: ServiceWithTags) => number {
+  if (!sortKey) return () => 0;
+  const dir = sortDir === "asc" ? 1 : -1;
+  return (a, b) => {
+    switch (sortKey) {
+      case "nome":
+        return dir * a.name.localeCompare(b.name, "it");
+      case "descrizione":
+        return dir * (a.description ?? "").localeCompare(b.description ?? "", "it");
+      case "fase":
+        return dir * (a.fase ?? "").localeCompare(b.fase ?? "", "it");
+      case "offerta":
+        return dir * a.tags.join(",").localeCompare(b.tags.join(","), "it");
+      case "pacchetto":
+        return dir * a.pacchetto.join(",").localeCompare(b.pacchetto.join(","), "it");
+      case "prezzo": {
+        const na = parseFloat(a.unit_price ?? "0");
+        const nb = parseFloat(b.unit_price ?? "0");
+        return dir * (na - nb);
+      }
+      default:
+        return 0;
+    }
+  };
+}
+
 export function CatalogSearch({
   services,
   options,
@@ -14,19 +62,65 @@ export function CatalogSearch({
   options: CatalogFieldOptions;
 }) {
   const [query, setQuery] = useState("");
+  const [colOrder, setColOrder] = useState<ColumnKey[]>(() => loadColOrder());
+  const [sortKey, setSortKey] = useState<ColumnKey | null>(null);
+  const [sortDir, setSortDir] = useState<"asc" | "desc">("asc");
+  const dragCol = useRef<ColumnKey | null>(null);
 
-  const filtered = useMemo(() => {
-    const q = query.trim().toLowerCase();
-    if (!q) return services;
-    return services.filter((s) => {
-      if (s.name.toLowerCase().includes(q)) return true;
-      if (s.category?.toLowerCase().includes(q)) return true;
-      if (s.fase?.toLowerCase().includes(q)) return true;
-      if (s.tags.some((t) => t.toLowerCase().includes(q))) return true;
-      if (s.pacchetto.some((p) => p.toLowerCase().includes(q))) return true;
-      return false;
+  function handleSortClick(key: ColumnKey) {
+    if (sortKey === key) {
+      setSortDir((d) => (d === "asc" ? "desc" : "asc"));
+    } else {
+      setSortKey(key);
+      setSortDir("asc");
+    }
+  }
+
+  function handleColDragStart(key: ColumnKey) {
+    dragCol.current = key;
+  }
+
+  function handleColDragOver(e: React.DragEvent, key: ColumnKey) {
+    e.preventDefault();
+  }
+
+  function handleColDrop(targetKey: ColumnKey) {
+    const from = dragCol.current;
+    dragCol.current = null;
+    if (!from || from === targetKey) return;
+    setColOrder((prev) => {
+      const next = [...prev];
+      const fromIdx = next.indexOf(from);
+      const toIdx = next.indexOf(targetKey);
+      next.splice(fromIdx, 1);
+      next.splice(toIdx, 0, from);
+      try {
+        localStorage.setItem("catalog_col_order", JSON.stringify(next));
+      } catch {}
+      return next;
     });
-  }, [services, query]);
+  }
+
+  const sortFn = useMemo(() => buildSortFn(sortKey, sortDir), [sortKey, sortDir]);
+
+  const { activeServices, inactiveServices } = useMemo(() => {
+    const q = query.trim().toLowerCase();
+    const filtered = q
+      ? services.filter((s) => {
+          if (s.name.toLowerCase().includes(q)) return true;
+          if (s.category?.toLowerCase().includes(q)) return true;
+          if (s.fase?.toLowerCase().includes(q)) return true;
+          if (s.tags.some((t) => t.toLowerCase().includes(q))) return true;
+          if (s.pacchetto.some((p) => p.toLowerCase().includes(q))) return true;
+          return false;
+        })
+      : services;
+
+    return {
+      activeServices: [...filtered.filter((s) => s.active)].sort(sortFn),
+      inactiveServices: [...filtered.filter((s) => !s.active)].sort(sortFn),
+    };
+  }, [services, query, sortFn]);
 
   return (
     <div className="space-y-4">
@@ -40,7 +134,18 @@ export function CatalogSearch({
           className="pl-9 h-9"
         />
       </div>
-      <ServiceTable services={filtered} options={options} />
+      <ServiceTable
+        activeServices={activeServices}
+        inactiveServices={inactiveServices}
+        options={options}
+        colOrder={colOrder}
+        sortKey={sortKey}
+        sortDir={sortDir}
+        onSortClick={handleSortClick}
+        onColDragStart={handleColDragStart}
+        onColDragOver={handleColDragOver}
+        onColDrop={handleColDrop}
+      />
     </div>
   );
 }

src/app/admin/catalog/actions.ts

@@ -7,6 +7,7 @@ import { eq, and } from "drizzle-orm";
 import { z } from "zod";
 import { getServerSession } from "next-auth";
 import { authOptions } from "@/lib/auth";
+import { addPoolValue, renamePoolValue } from "@/lib/taxonomy";
 
 const serviceSchema = z.object({
   name: z.string().min(1, "Nome richiesto"),
@@ -95,6 +96,7 @@ export async function updateServiceField(
   } else if (fieldName === "fase") {
     const s = String(value).trim();
     await db.update(services).set({ fase: s || null }).where(eq(services.id, serviceId));
+    if (s) await addPoolValue("service_fase", s);
   } else if (fieldName === "unit_price") {
     // Normalize locale-formatted input (WR-04): the cell displays it-IT (€1.234,50),
     // so an admin may type "1.234,50". When a comma is present, treat "." as thousands
@@ -143,6 +145,9 @@ export async function addServiceOption(
     .values({ entity_type: MULTI_ENTITY[field], entity_id: serviceId, name: trimmed })
     .onConflictDoNothing();
 
+  // Register into the persistent pool so it survives unassignment / shows in settings.
+  await addPoolValue(field === "tag" ? "service_offerta" : "service_pacchetto", trimmed);
+
   revalidatePath("/admin/catalog");
 }
 
@@ -187,10 +192,12 @@ export async function renameServiceOption(
       .update(tags)
       .set({ name: next })
       .where(and(eq(tags.entity_type, MULTI_ENTITY[field]), eq(tags.name, oldValue)));
+    await renamePoolValue(field === "tag" ? "service_offerta" : "service_pacchetto", oldValue, next);
   } else if (field === "categoria") {
     await db.update(services).set({ category: next }).where(eq(services.category, oldValue));
   } else if (field === "fase") {
     await db.update(services).set({ fase: next }).where(eq(services.fase, oldValue));
+    await renamePoolValue("service_fase", oldValue, next);
   } else {
     throw new Error(`Campo non valido: ${field}`);
   }
@@ -227,14 +234,16 @@ export async function quickAddService(payload: QuickAddPayload | string) {
     unit_price = num.toFixed(2);
   }
 
+  const fase = data.fase?.trim() || null;
   await db.insert(services).values({
     name,
     description: data.description?.trim() || null,
     category: data.category?.trim() || null,
-    fase: data.fase?.trim() || null,
+    fase,
     unit_price,
     active: true,
   });
+  if (fase) await addPoolValue("service_fase", fase);
 
   revalidatePath("/admin/catalog");
 }

src/app/admin/catalog/page.tsx

@@ -1,5 +1,6 @@
 import { getAllServices, getCatalogFieldOptions } from "@/lib/admin-queries";
 import { CatalogSearch } from "./CatalogSearch";
+import { PageHeader } from "@/components/admin/PageHeader";
 
 export const revalidate = 0;
 
@@ -10,11 +11,8 @@ export default async function CatalogPage() {
   ]);
 
   return (
-    <div>
-      <div className="flex items-center justify-between mb-6">
-        <h1 className="text-2xl font-bold text-[#1a1a1a]">Catalogo Servizi</h1>
-      </div>
-
+    <div className="space-y-6">
+      <PageHeader title="Catalogo Servizi" />
       <CatalogSearch services={services} options={options} />
     </div>
   );

src/app/admin/clients/[id]/actions.ts

@@ -50,10 +50,17 @@ async function resolveEntity(id: string): Promise<{ projectId: string | null; pa
 
 // ── CLIENT CRUD ───────────────────────────────────────────────────────────────
 
+const emptyToNull = (v: unknown) => {
+  const s = typeof v === "string" ? v.trim() : "";
+  return s === "" ? null : s;
+};
+
 const clientSchema = z.object({
   name:       z.string().min(1, "Nome richiesto"),
   brand_name: z.string().min(1, "Brand name richiesto"),
   brief:      z.string(),
+  email:      z.string().optional().transform(emptyToNull),
+  phone:      z.string().optional().transform(emptyToNull),
   slug: z
     .string()
     .regex(/^[a-z0-9-]{3,50}$/, "Slug non valido (es. mario-rossi, min 3 max 50 caratteri)")
@@ -68,6 +75,8 @@ export async function updateClient(clientId: string, formData: FormData) {
     name:       formData.get("name"),
     brand_name: formData.get("brand_name"),
     brief:      formData.get("brief") ?? "",
+    email:      formData.get("email") ?? "",
+    phone:      formData.get("phone") ?? "",
     slug:       formData.get("slug") ?? "",
   });
   if (!parsed.success) throw new Error(parsed.error.issues[0].message);
@@ -133,6 +142,14 @@ export async function updatePhaseStatus(phaseId: string, id: string, status: str
   revalidatePath(path);
 }
 
+export async function deletePhase(phaseId: string, id: string) {
+  await requireAdmin();
+  // FK cascade on tasks and deliverables handles child rows
+  await db.delete(phases).where(eq(phases.id, phaseId));
+  const { path } = await resolveEntity(id);
+  revalidatePath(path);
+}
+
 // ── TASKS ─────────────────────────────────────────────────────────────────────
 
 export async function addTask(phaseId: string, id: string, formData: FormData) {
@@ -153,15 +170,56 @@ export async function addTask(phaseId: string, id: string, formData: FormData) {
     sort_order: maxOrder + 1,
     status: "todo",
   });
+  // Cascade: a new todo task keeps phase active/upcoming — recompute to be safe
+  await recomputePhaseStatus(phaseId);
   const { path } = await resolveEntity(id);
   revalidatePath(path);
 }
 
+// ── PHASE STATUS CASCADE ──────────────────────────────────────────────────────
+// Recomputes phase status from its tasks:
+//   all done  → done
+//   any in_progress or done (but not all done) → active
+//   all todo (or no tasks) → upcoming
+export async function recomputePhaseStatus(phaseId: string): Promise<void> {
+  const phaseTasks = await db
+    .select({ status: tasks.status })
+    .from(tasks)
+    .where(eq(tasks.phase_id, phaseId));
+
+  let newStatus: "upcoming" | "active" | "done" = "upcoming";
+  if (phaseTasks.length > 0) {
+    const allDone = phaseTasks.every((t) => t.status === "done");
+    const anyActive = phaseTasks.some(
+      (t) => t.status === "in_progress" || t.status === "done"
+    );
+    if (allDone) newStatus = "done";
+    else if (anyActive) newStatus = "active";
+  }
+  await db.update(phases).set({ status: newStatus }).where(eq(phases.id, phaseId));
+}
+
 export async function updateTaskStatus(taskId: string, id: string, status: string) {
   await requireAdmin();
   const allowed = ["todo", "in_progress", "done"];
   if (!allowed.includes(status)) throw new Error("Stato non valido");
   await db.update(tasks).set({ status }).where(eq(tasks.id, taskId));
+
+  // Cascade: recompute parent phase status from all its tasks
+  const taskRow = await db.select({ phase_id: tasks.phase_id }).from(tasks).where(eq(tasks.id, taskId)).limit(1);
+  if (taskRow[0]) await recomputePhaseStatus(taskRow[0].phase_id);
+
+  const { path } = await resolveEntity(id);
+  revalidatePath(path);
+}
+
+export async function deleteTask(taskId: string, id: string) {
+  await requireAdmin();
+  // Fetch phase_id before deletion so we can recompute phase status after
+  const taskRow = await db.select({ phase_id: tasks.phase_id }).from(tasks).where(eq(tasks.id, taskId)).limit(1);
+  const phaseId = taskRow[0]?.phase_id;
+  await db.delete(tasks).where(eq(tasks.id, taskId));
+  if (phaseId) await recomputePhaseStatus(phaseId);
   const { path } = await resolveEntity(id);
   revalidatePath(path);
 }
@@ -231,6 +289,54 @@ export async function updatePaymentStatus(paymentId: string, id: string, status:
   revalidatePath(path);
 }
 
+// Imposta il mese in cui un pagamento è stato incassato (formato "YYYY-MM").
+// Mappa al primo giorno del mese (mezzogiorno UTC per evitare drift di fuso) e
+// porta lo stato a "saldato" così l'incasso viene attribuito a quel mese nelle analytics.
+export async function setPaymentPaidAt(paymentId: string, id: string, monthStr: string) {
+  await requireAdmin();
+  const m = /^(\d{4})-(\d{2})$/.exec(monthStr);
+  if (!m) throw new Error("Mese non valido");
+  const year = parseInt(m[1], 10);
+  const month = parseInt(m[2], 10);
+  if (month < 1 || month > 12) throw new Error("Mese non valido");
+  const paid_at = new Date(Date.UTC(year, month - 1, 1, 12, 0, 0));
+  await db
+    .update(payments)
+    .set({ paid_at, status: "saldato" })
+    .where(eq(payments.id, paymentId));
+  const { path } = await resolveEntity(id);
+  revalidatePath(path);
+}
+
+// Rescales payment amounts when the total changes.
+// If the payment has a `percent` field, use it (new plan rows).
+// Legacy rows (percent null) fall back to equal split across all rows.
+async function rescalePayments(projectId: string, newTotal: number): Promise<void> {
+  const projectPayments = await db
+    .select({ id: payments.id, percent: payments.percent })
+    .from(payments)
+    .where(eq(payments.project_id, projectId));
+
+  if (projectPayments.length === 0) return;
+
+  const hasPercent = projectPayments.some((p) => p.percent !== null);
+
+  if (hasPercent) {
+    // New plan: rescale each row by its stored percent
+    for (const p of projectPayments) {
+      const pct = p.percent !== null ? parseFloat(String(p.percent)) : 0;
+      const newAmount = ((newTotal * pct) / 100).toFixed(2);
+      await db.update(payments).set({ amount: newAmount }).where(eq(payments.id, p.id));
+    }
+  } else {
+    // Legacy: equal split across all rows (backward compat)
+    const share = (newTotal / projectPayments.length).toFixed(2);
+    for (const p of projectPayments) {
+      await db.update(payments).set({ amount: share }).where(eq(payments.id, p.id));
+    }
+  }
+}
+
 export async function updateAcceptedTotal(id: string, formData: FormData) {
   await requireAdmin();
   const raw = (formData.get("accepted_total") as string)?.trim();
@@ -244,28 +350,17 @@ export async function updateAcceptedTotal(id: string, formData: FormData) {
     .limit(1);
 
   if (asProject[0]) {
-    // Project context: update projects.accepted_total + this project's payment stubs
+    // Project context: update projects.accepted_total + rescale this project's payments
     await db.update(projects).set({ accepted_total: val.toFixed(2) }).where(eq(projects.id, id));
-    const half = (val / 2).toFixed(2);
-    const projectPayments = await db.select({ id: payments.id })
-      .from(payments).where(eq(payments.project_id, id));
-    for (const p of projectPayments) {
-      await db.update(payments).set({ amount: half }).where(eq(payments.id, p.id));
-    }
+    await rescalePayments(id, val);
     revalidatePath(`/admin/projects/${id}`);
   } else {
-    // Client context: update clients.accepted_total + all project payment stubs
+    // Client context: update clients.accepted_total + rescale all project payments
     await db.update(clients).set({ accepted_total: val.toFixed(2) }).where(eq(clients.id, id));
     const projectRows = await db.select({ id: projects.id })
       .from(projects).where(eq(projects.client_id, id));
-    if (projectRows.length > 0) {
-      const projectIds = projectRows.map((p) => p.id);
-      const half = (val / 2).toFixed(2);
-      const paymentsRows = await db.select()
-        .from(payments).where(inArray(payments.project_id, projectIds));
-      for (const p of paymentsRows) {
-        await db.update(payments).set({ amount: half }).where(eq(payments.id, p.id));
-      }
+    for (const proj of projectRows) {
+      await rescalePayments(proj.id, val);
     }
     revalidatePath(`/admin/clients/${id}`);
   }
@@ -280,7 +375,7 @@ export async function postAdminComment(id: string, formData: FormData) {
   if (!body || !entity) throw new Error("Dati mancanti");
   const [entity_type, entity_id] = entity.split(":");
   if (!entity_type || !entity_id) throw new Error("Formato entity non valido");
-  const allowedTypes = ["task", "deliverable"];
+  const allowedTypes = ["task", "deliverable", "phase", "general"];
   if (!allowedTypes.includes(entity_type)) throw new Error("entity_type non valido");
   await db.insert(comments).values({ entity_type, entity_id, author: "admin", body });
   const { path } = await resolveEntity(id);

src/app/admin/clients/[id]/edit/page.tsx

@@ -62,6 +62,29 @@ export default async function EditClientPage({
           />
         </div>
 
+        <div className="grid grid-cols-1 sm:grid-cols-2 gap-4">
+          <div className="space-y-1.5">
+            <Label htmlFor="email">Email</Label>
+            <Input
+              id="email"
+              name="email"
+              type="email"
+              defaultValue={client.email ?? ""}
+              placeholder="marco@rossistudio.it"
+            />
+          </div>
+          <div className="space-y-1.5">
+            <Label htmlFor="phone">Telefono</Label>
+            <Input
+              id="phone"
+              name="phone"
+              type="tel"
+              defaultValue={client.phone ?? ""}
+              placeholder="+39 333 1234567"
+            />
+          </div>
+        </div>
+
         <div className="space-y-1.5">
           <Label htmlFor="brief">Brief progetto</Label>
           <Textarea

src/app/admin/clients/[id]/page.tsx

@@ -33,6 +33,21 @@ export default async function ClientDetailPage({
         <div>
           <h1 className="text-2xl font-bold text-[#1a1a1a]">{client.name}</h1>
           <p className="text-sm text-[#71717a]">{client.brand_name}</p>
+          {(client.email || client.phone) && (
+            <div className="mt-1 flex flex-wrap items-center gap-x-3 gap-y-0.5 text-xs text-[#71717a]">
+              {client.email && (
+                <a href={`mailto:${client.email}`} className="hover:text-[#1A463C]">
+                  {client.email}
+                </a>
+              )}
+              {client.email && client.phone && <span className="text-[#d4d4d8]">·</span>}
+              {client.phone && (
+                <a href={`tel:${client.phone}`} className="hover:text-[#1A463C]">
+                  {client.phone}
+                </a>
+              )}
+            </div>
+          )}
           {client.archived && (
             <span className="inline-block mt-1 text-xs font-medium bg-[#f4f4f5] text-[#71717a] px-2 py-0.5 rounded-full">
               Archiviato
@@ -115,19 +130,40 @@ export default async function ClientDetailPage({
             Offerte Attive ({activeOffers.length})
           </p>
           <div className="bg-white rounded-xl border border-[#e5e7eb] divide-y divide-[#e5e7eb]">
-            {activeOffers.map((offer) => (
-              <div key={offer.offer_id} className="flex items-center justify-between px-4 py-3">
-                <div>
-                  <p className="text-sm font-medium text-[#1a1a1a]">{offer.public_name}</p>
-                  <p className="text-xs text-[#71717a]">{offer.project_name}</p>
+            {activeOffers.map((offer) => {
+              const categoryLabel =
+                offer.category ??
+                (offer.offer_type === "retainer"
+                  ? "Retainer"
+                  : offer.offer_type === "una_tantum"
+                  ? "Una tantum"
+                  : null);
+              return (
+                <div key={offer.offer_id} className="flex items-center justify-between px-4 py-3">
+                  <div className="min-w-0">
+                    <div className="flex flex-wrap items-center gap-2">
+                      <p className="text-sm font-medium text-[#1a1a1a]">{offer.macro_name}</p>
+                      {categoryLabel && (
+                        <span className="inline-flex items-center rounded-full bg-[#1A463C]/10 px-2 py-0.5 text-[11px] font-semibold text-[#1A463C]">
+                          {categoryLabel}
+                        </span>
+                      )}
+                      {offer.tier_letter && (
+                        <span className="inline-flex items-center rounded-full border border-[#e5e7eb] px-2 py-0.5 text-[11px] font-semibold text-[#71717a]">
+                          Tier {offer.tier_letter}
+                        </span>
+                      )}
+                    </div>
+                    <p className="text-xs text-[#71717a] mt-0.5">{offer.project_name}</p>
+                  </div>
+                  {offer.accepted_total && (
+                    <span className="text-sm font-mono text-[#1a1a1a] shrink-0">
+                      &euro;{parseFloat(offer.accepted_total).toLocaleString("it-IT", { minimumFractionDigits: 2 })}
+                    </span>
+                  )}
                 </div>
-                {offer.accepted_total && (
-                  <span className="text-sm font-mono text-[#1a1a1a]">
-                    &euro;{parseFloat(offer.accepted_total).toLocaleString("it-IT", { minimumFractionDigits: 2 })}
-                  </span>
-                )}
-              </div>
-            ))}
+              );
+            })}
           </div>
         </div>
       )}

src/app/admin/clients/new/actions.ts

@@ -44,62 +44,68 @@ const createClientSchema = z.object({
   name: z.string().min(1, "Nome richiesto"),
   brand_name: z.string().min(1, "Nome brand richiesto"),
   brief: z.string().min(1, "Brief richiesto"),
+  email: z.string().optional(),
+  phone: z.string().optional(),
 });
 
-export async function createClient(formData: FormData) {
-  await requireAdmin();
-  const raw = {
-    name: formData.get("name") as string,
-    brand_name: formData.get("brand_name") as string,
-    brief: formData.get("brief") as string,
-  };
+// Shared core used by both the manual create form and the lead→client
+// conversion. Creates the client (+ slug + token), a default project (optionally
+// linked to the originating lead), and the two 50/50 payment stubs. Returns the
+// new ids. Does NOT redirect — callers decide where to go next.
+export async function createClientCore(input: {
+  name: string;
+  brand_name: string;
+  brief: string;
+  email?: string | null;
+  phone?: string | null;
+  created_from_lead_id?: string | null;
+}): Promise<{ clientId: string; projectId: string }> {
+  const slug = await uniqueSlug(toSlug(input.name));
 
-  const parsed = createClientSchema.safeParse(raw);
-  if (!parsed.success) {
-    throw new Error(
-      parsed.error.issues.map((i) => i.message).join(", ")
-    );
-  }
-
-  // Auto-generate slug from name (e.g. "Mario Rossi" → "mario-rossi")
-  const slug = await uniqueSlug(toSlug(parsed.data.name));
-
-  // Insert client — token and id are auto-generated by $defaultFn(() => nanoid())
   const [newClient] = await db
     .insert(clients)
     .values({
-      name: parsed.data.name,
-      brand_name: parsed.data.brand_name,
-      brief: parsed.data.brief,
+      name: input.name,
+      brand_name: input.brand_name,
+      brief: input.brief,
+      email: input.email?.trim() || null,
+      phone: input.phone?.trim() || null,
       slug,
     })
-    .returning({ id: clients.id, token: clients.token, brand_name: clients.brand_name });
+    .returning({ id: clients.id, brand_name: clients.brand_name });
 
-  // Create a default project for the client — all work items are project-scoped
   const [newProject] = await db
     .insert(projects)
     .values({
       client_id: newClient.id,
       name: newClient.brand_name,
+      created_from_lead_id: input.created_from_lead_id ?? null,
     })
     .returning({ id: projects.id });
 
-  // Always create two payment stubs per project — Acconto 50% and Saldo 50%
   await db.insert(payments).values([
-    {
-      project_id: newProject.id,
-      label: "Acconto 50%",
-      amount: "0",
-      status: "da_saldare",
-    },
-    {
-      project_id: newProject.id,
-      label: "Saldo 50%",
-      amount: "0",
-      status: "da_saldare",
-    },
+    { project_id: newProject.id, label: "Acconto 50%", amount: "0", status: "da_saldare" },
+    { project_id: newProject.id, label: "Saldo 50%", amount: "0", status: "da_saldare" },
   ]);
 
+  return { clientId: newClient.id, projectId: newProject.id };
+}
+
+export async function createClient(formData: FormData) {
+  await requireAdmin();
+  const parsed = createClientSchema.safeParse({
+    name: formData.get("name") as string,
+    brand_name: formData.get("brand_name") as string,
+    brief: formData.get("brief") as string,
+    email: (formData.get("email") as string) ?? "",
+    phone: (formData.get("phone") as string) ?? "",
+  });
+  if (!parsed.success) {
+    throw new Error(parsed.error.issues.map((i) => i.message).join(", "));
+  }
+
+  const { clientId } = await createClientCore(parsed.data);
+
   revalidatePath("/admin");
-  redirect(`/admin/clients/${newClient.id}`);
+  redirect(`/admin/clients/${clientId}`);
 }

src/app/admin/clients/new/page.tsx

@@ -45,6 +45,26 @@ export default function NewClientPage() {
                 required
               />
             </div>
+            <div className="grid grid-cols-1 sm:grid-cols-2 gap-4">
+              <div className="space-y-1">
+                <Label htmlFor="email">Email</Label>
+                <Input
+                  id="email"
+                  name="email"
+                  type="email"
+                  placeholder="es. marco@rossistudio.it"
+                />
+              </div>
+              <div className="space-y-1">
+                <Label htmlFor="phone">Telefono</Label>
+                <Input
+                  id="phone"
+                  name="phone"
+                  type="tel"
+                  placeholder="es. +39 333 1234567"
+                />
+              </div>
+            </div>
             <div className="space-y-1">
               <Label htmlFor="brief">Brief del progetto</Label>
               <Textarea

src/app/admin/clients/page.tsx

@@ -2,6 +2,7 @@ import Link from "next/link";
 import { getAllClientsWithPayments } from "@/lib/admin-queries";
 import { ClientRow } from "@/components/admin/ClientRow";
 import { Button } from "@/components/ui/button";
+import { PageHeader } from "@/components/admin/PageHeader";
 
 export const revalidate = 0;
 
@@ -14,22 +15,23 @@ export default async function AdminClientsPage({
   const showArchived = archived === "1";
   const clients = await getAllClientsWithPayments(showArchived);
 
+  const clientiAction = (
+    <div className="flex items-center gap-3">
+      <a
+        href={showArchived ? "/admin/clients" : "/admin/clients?archived=1"}
+        className="text-xs text-[#71717a] hover:text-[#1A463C] underline underline-offset-2"
+      >
+        {showArchived ? "Nascondi archiviati" : "Mostra archiviati"}
+      </a>
+      <Button asChild>
+        <Link href="/admin/clients/new">+ Nuovo cliente</Link>
+      </Button>
+    </div>
+  );
+
   return (
-    <div>
-      <div className="flex items-center justify-between mb-6">
-        <div className="flex items-center gap-4">
-          <h1 className="text-2xl font-bold text-[#1a1a1a]">Clienti</h1>
-          <a
-            href={showArchived ? "/admin/clients" : "/admin/clients?archived=1"}
-            className="text-xs text-[#71717a] hover:text-[#1A463C] underline underline-offset-2"
-          >
-            {showArchived ? "Nascondi archiviati" : "Mostra archiviati"}
-          </a>
-        </div>
-        <Button asChild>
-          <Link href="/admin/clients/new">+ Nuovo cliente</Link>
-        </Button>
-      </div>
+    <div className="space-y-6">
+      <PageHeader title="Clienti" action={clientiAction} />
 
       {clients.length === 0 ? (
         <div className="text-center py-20 text-[#71717a]">

src/app/admin/forecast/page.tsx

@@ -1,75 +0,0 @@
-import { getRevenueForecast12Months } from "@/lib/forecast-queries";
-
-export const revalidate = 0;
-
-export default async function ForecastPage() {
-  const forecast = await getRevenueForecast12Months();
-  const totalForecast = forecast.reduce((sum, m) => sum + m.total, 0);
-
-  return (
-    <div className="max-w-3xl mx-auto py-8 px-4">
-      <h1 className="text-2xl font-bold text-[#1a1a1a] mb-2">Revenue Forecast</h1>
-      <p className="text-sm text-[#71717a] mb-6">
-        Proiezione 12 mesi basata sulle offerte attive, i loro accepted_total e le durate in mesi.
-        Ogni offerta distribuisce il suo totale equamente per i mesi di durata a partire dalla data di inizio.
-      </p>
-
-      <div className="bg-white rounded-lg border border-[#e5e7eb] overflow-hidden">
-        <table className="w-full text-sm">
-          <thead className="bg-[#f9f9f9] border-b border-[#e5e7eb]">
-            <tr>
-              <th className="px-4 py-3 text-left text-xs font-semibold text-[#71717a] uppercase tracking-wider">
-                Mese
-              </th>
-              <th className="px-4 py-3 text-right text-xs font-semibold text-[#71717a] uppercase tracking-wider">
-                Fatturato previsto
-              </th>
-              <th className="px-4 py-3 text-right text-xs font-semibold text-[#71717a] uppercase tracking-wider">
-                Barra
-              </th>
-            </tr>
-          </thead>
-          <tbody className="divide-y divide-[#e5e7eb]">
-            {forecast.map((month) => {
-              const maxTotal = Math.max(...forecast.map((m) => m.total), 1);
-              const pct = Math.round((month.total / maxTotal) * 100);
-              return (
-                <tr key={`${month.year}-${month.month}`} className="hover:bg-[#f9f9f9]">
-                  <td className="px-4 py-3 text-[#1a1a1a] capitalize">{month.label}</td>
-                  <td className="px-4 py-3 text-right font-mono text-[#1a1a1a]">
-                    {month.total > 0 ? `€${month.total.toFixed(2)}` : <span className="text-[#71717a]">—</span>}
-                  </td>
-                  <td className="px-4 py-3">
-                    {month.total > 0 && (
-                      <div className="flex justify-end items-center">
-                        <div
-                          className="bg-[#1A463C] h-2 rounded"
-                          style={{ width: `${pct}%`, minWidth: "4px", maxWidth: "120px" }}
-                        />
-                      </div>
-                    )}
-                  </td>
-                </tr>
-              );
-            })}
-          </tbody>
-          <tfoot className="border-t-2 border-[#e5e7eb] bg-[#f9f9f9]">
-            <tr>
-              <td className="px-4 py-3 text-sm font-semibold text-[#1a1a1a]">Totale 12 mesi</td>
-              <td className="px-4 py-3 text-right font-mono font-bold text-[#1a1a1a]">
-                €{totalForecast.toFixed(2)}
-              </td>
-              <td />
-            </tr>
-          </tfoot>
-        </table>
-      </div>
-
-      {forecast.every((m) => m.total === 0) && (
-        <p className="text-sm text-[#71717a] mt-4">
-          Nessuna offerta con accepted_total trovata. Assegna micro-offerte ai progetti e imposta il totale accettato.
-        </p>
-      )}
-    </div>
-  );
-}

src/app/admin/impostazioni/actions.ts

@@ -0,0 +1,42 @@
+"use server";
+
+import { getServerSession } from "next-auth";
+import { authOptions } from "@/lib/auth";
+import { revalidatePath } from "next/cache";
+import {
+  addPoolValue,
+  removePoolValue,
+  TAXONOMY_FIELDS,
+  type TaxonomyFieldId,
+} from "@/lib/taxonomy";
+
+async function requireAdmin() {
+  const session = await getServerSession(authOptions);
+  if (!session) throw new Error("Non autorizzato");
+}
+
+function assertField(fieldId: string): asserts fieldId is TaxonomyFieldId {
+  if (!(fieldId in TAXONOMY_FIELDS)) throw new Error(`Tassonomia non valida: ${fieldId}`);
+}
+
+function revalidateAll() {
+  revalidatePath("/admin/impostazioni");
+  revalidatePath("/admin/offers");
+  revalidatePath("/admin/catalog");
+}
+
+export async function addTaxonomyValue(fieldId: string, value: string): Promise<void> {
+  await requireAdmin();
+  assertField(fieldId);
+  await addPoolValue(fieldId, value);
+  revalidateAll();
+}
+
+// Global delete: removes the value from the pool AND cascade-strips it from every
+// offer/service using it.
+export async function removeTaxonomyValue(fieldId: string, value: string): Promise<void> {
+  await requireAdmin();
+  assertField(fieldId);
+  await removePoolValue(fieldId, value);
+  revalidateAll();
+}

src/app/admin/impostazioni/page.tsx

@@ -1,9 +1,12 @@
 import { getTargetHourlyRate, updateSetting, SETTINGS_KEYS } from "@/lib/settings";
+import { getAllPools } from "@/lib/taxonomy";
+import { TaxonomyManager } from "@/components/admin/impostazioni/TaxonomyManager";
+import { PageHeader } from "@/components/admin/PageHeader";
 
 export const revalidate = 0;
 
 export default async function ImpostazioniPage() {
-  const targetRate = await getTargetHourlyRate();
+  const [targetRate, pools] = await Promise.all([getTargetHourlyRate(), getAllPools()]);
 
   async function handleSave(fd: FormData) {
     "use server";
@@ -14,46 +17,50 @@ export default async function ImpostazioniPage() {
   }
 
   return (
-    <div>
-      <h1 className="text-2xl font-bold text-[#1a1a1a] mb-6">Impostazioni</h1>
+    <div className="space-y-6">
+      <PageHeader title="Impostazioni" />
 
-      <div className="bg-white rounded-xl border border-[#e5e7eb] p-6 max-w-md">
-        <h2 className="text-base font-semibold text-[#1a1a1a] mb-4">Analytics Profittabilità</h2>
+      <div className="space-y-6 max-w-4xl">
+        <div className="bg-white rounded-xl border border-[#e5e7eb] p-6 max-w-md">
+          <h2 className="text-base font-semibold text-[#1a1a1a] mb-4">Analytics Profittabilità</h2>
 
-        <form action={handleSave} className="space-y-4">
-          <div>
-            <label
-              htmlFor="target_hourly_rate"
-              className="block text-sm font-medium text-[#1a1a1a] mb-1"
-            >
-              Tariffa oraria target (€/h)
-            </label>
-            <p className="text-xs text-[#71717a] mb-2">
-              Usata per calcolare il costo ideale e il delta profitto/perdita per ogni progetto.
-            </p>
-            <div className="flex items-center gap-2">
-              <span className="text-sm text-[#71717a]">€</span>
-              <input
-                id="target_hourly_rate"
-                name="target_hourly_rate"
-                type="number"
-                step="0.01"
-                min="0"
-                defaultValue={targetRate.toFixed(2)}
-                className="border border-[#e5e7eb] rounded-lg px-3 py-2 text-sm focus:outline-none focus:ring-2 focus:ring-[#1A463C]/20 w-32"
-              />
-              <span className="text-sm text-[#71717a]">/h</span>
+          <form action={handleSave} className="space-y-4">
+            <div>
+              <label
+                htmlFor="target_hourly_rate"
+                className="block text-sm font-medium text-[#1a1a1a] mb-1"
+              >
+                Tariffa oraria target (€/h)
+              </label>
+              <p className="text-xs text-[#71717a] mb-2">
+                Usata per calcolare il costo ideale e il delta profitto/perdita per ogni progetto.
+              </p>
+              <div className="flex items-center gap-2">
+                <span className="text-sm text-[#71717a]">€</span>
+                <input
+                  id="target_hourly_rate"
+                  name="target_hourly_rate"
+                  type="number"
+                  step="0.01"
+                  min="0"
+                  defaultValue={targetRate.toFixed(2)}
+                  className="border border-[#e5e7eb] rounded-lg px-3 py-2 text-sm focus:outline-none focus:ring-2 focus:ring-[#1A463C]/20 w-32"
+                />
+                <span className="text-sm text-[#71717a]">/h</span>
+              </div>
             </div>
-          </div>
 
-          <button
-            type="submit"
-            className="bg-[#1A463C] text-white px-4 py-2 rounded-lg text-sm font-medium hover:bg-[#1A463C]/90 transition-colors"
-          >
-            Salva
-          </button>
-        </form>
+            <button
+              type="submit"
+              className="bg-[#1A463C] text-white px-4 py-2 rounded-lg text-sm font-medium hover:bg-[#1A463C]/90 transition-colors"
+            >
+              Salva
+            </button>
+          </form>
+        </div>
+
+        <TaxonomyManager pools={pools} />
       </div>
     </div>
   );
-}
+}

src/app/admin/layout.tsx

@@ -1,4 +1,4 @@
-import { AdminSidebar } from "@/components/admin/AdminSidebar";
+import { AdminShell } from "@/components/admin/AdminShell";
 import { getServerSession } from "next-auth";
 import { authOptions } from "@/lib/auth";
 
@@ -8,12 +8,8 @@ export default async function AdminLayout({
   children: React.ReactNode;
 }) {
   const session = await getServerSession(authOptions);
-  return (
-    <div className="flex min-h-screen bg-gray-50">
-      {session && <AdminSidebar />}
-      <main className="flex-1 px-8 py-8 overflow-y-auto">
-        {children}
-      </main>
-    </div>
-  );
+  if (!session) {
+    return <div className="min-h-screen bg-background">{children}</div>;
+  }
+  return <AdminShell>{children}</AdminShell>;
 }

src/app/admin/leads/[id]/page.tsx

@@ -1,17 +1,12 @@
-import { notFound } from "next/navigation";
-import { getLeadById, getActivityLog, getUpcomingReminders } from "@/lib/lead-service";
-import { LeadDetail } from "@/components/admin/leads/LeadDetail";
+import { redirect } from "next/navigation";
 
-export default async function LeadDetailPage({ params }: { params: Promise<{ id: string }> }) {
+// Legacy route — Lead was renamed to Pipeline. Kept as a redirect stub so
+// existing links/bookmarks to /admin/leads/<id> don't break.
+export default async function LeadDetailRedirectPage({
+  params,
+}: {
+  params: Promise<{ id: string }>;
+}) {
   const { id } = await params;
-  const lead = await getLeadById(id);
-
-  if (!lead) {
-    notFound();
-  }
-
-  const activities = await getActivityLog(id);
-  const reminders = await getUpcomingReminders(id);
-
-  return <LeadDetail lead={lead} activities={activities} reminders={reminders} />;
+  redirect(`/admin/pipeline/${id}`);
 }

src/app/admin/leads/actions.ts

@@ -1,161 +0,0 @@
-"use server";
-
-import { z } from "zod";
-import { db } from "@/db";
-import { leads, quotes } from "@/db/schema";
-import { eq } from "drizzle-orm";
-import { createLeadSchema, updateLeadSchema, createActivitySchema } from "@/lib/lead-validators";
-import { revalidatePath } from "next/cache";
-import { createActivity, updateLeadStage } from "@/lib/lead-service";
-
-export async function createLead(data: z.infer<typeof createLeadSchema>) {
-  const parsed = createLeadSchema.safeParse(data);
-
-  if (!parsed.success) {
-    return { success: false, error: parsed.error.issues[0].message };
-  }
-
-  try {
-    const [lead] = await db
-      .insert(leads)
-      .values({
-        name: parsed.data.name,
-        email: parsed.data.email || null,
-        phone: parsed.data.phone || null,
-        company: parsed.data.company || null,
-        status: parsed.data.status || "contacted",
-        notes: parsed.data.notes || null,
-      })
-      .returning();
-
-    revalidatePath("/admin/leads");
-    return { success: true, lead };
-  } catch (error) {
-    console.error("createLead error:", error);
-    return { success: false, error: "Errore nella creazione del lead" };
-  }
-}
-
-export async function updateLead(id: string, data: z.infer<typeof updateLeadSchema>) {
-  const parsed = updateLeadSchema.safeParse(data);
-
-  if (!parsed.success) {
-    return { success: false, error: parsed.error.issues[0].message };
-  }
-
-  try {
-    const updateData: Record<string, any> = { updated_at: new Date() };
-
-    if (parsed.data.name !== undefined) updateData.name = parsed.data.name;
-    if (parsed.data.email !== undefined) updateData.email = parsed.data.email || null;
-    if (parsed.data.phone !== undefined) updateData.phone = parsed.data.phone || null;
-    if (parsed.data.company !== undefined) updateData.company = parsed.data.company || null;
-    if (parsed.data.status !== undefined) updateData.status = parsed.data.status;
-    if (parsed.data.notes !== undefined) updateData.notes = parsed.data.notes || null;
-
-    const [updated] = await db
-      .update(leads)
-      .set(updateData)
-      .where(eq(leads.id, id))
-      .returning();
-
-    revalidatePath("/admin/leads");
-    revalidatePath(`/admin/leads/${id}`);
-    return { success: true, lead: updated };
-  } catch (error) {
-    console.error("updateLead error:", error);
-    return { success: false, error: "Errore nell'aggiornamento" };
-  }
-}
-
-export async function deleteLead(id: string) {
-  try {
-    await db.delete(leads).where(eq(leads.id, id));
-    revalidatePath("/admin/leads");
-    return { success: true };
-  } catch (error) {
-    console.error("deleteLead error:", error);
-    return { success: false, error: "Errore nell'eliminazione" };
-  }
-}
-
-// Activity logging
-export async function logActivity(data: z.infer<typeof createActivitySchema>) {
-  const parsed = createActivitySchema.safeParse(data);
-
-  if (!parsed.success) {
-    return { success: false, error: parsed.error.issues[0].message };
-  }
-
-  try {
-    const activity = await createActivity({
-      lead_id: parsed.data.lead_id,
-      type: parsed.data.type,
-      activity_date: new Date(parsed.data.activity_date),
-      duration_minutes: parsed.data.duration_minutes,
-      notes: parsed.data.notes,
-    });
-
-    revalidatePath(`/admin/leads/${parsed.data.lead_id}`);
-    return { success: true, activity };
-  } catch (error) {
-    console.error("logActivity error:", error);
-    return { success: false, error: "Errore nella registrazione" };
-  }
-}
-
-// Quote assignment
-const assignQuoteSchema = z.object({
-  lead_id: z.string().min(1),
-  quote_token: z.string().optional(),
-  generate_new: z.boolean(),
-});
-
-export async function assignQuoteToLead(data: z.infer<typeof assignQuoteSchema>) {
-  const parsed = assignQuoteSchema.safeParse(data);
-
-  if (!parsed.success) {
-    return { success: false, error: parsed.error.issues[0].message };
-  }
-
-  try {
-    if (parsed.data.generate_new) {
-      // Redirect handled on client; this is a no-op
-      return { success: true };
-    }
-
-    // Link quote to lead and update lead status
-    const token = parsed.data.quote_token;
-    const leadId = parsed.data.lead_id;
-
-    if (!token) {
-      return { success: false, error: "Token preventivo richiesto" };
-    }
-
-    // Find quote by token
-    const [quote] = await db
-      .select()
-      .from(quotes)
-      .where(eq(quotes.token, token))
-      .limit(1);
-
-    if (!quote) {
-      return { success: false, error: "Preventivo non trovato" };
-    }
-
-    // Update quote to link to lead (if not already linked)
-    await db
-      .update(quotes)
-      .set({ lead_id: leadId })
-      .where(eq(quotes.id, quote.id));
-
-    // Update lead status to "proposal_sent"
-    await updateLeadStage(leadId, "proposal_sent");
-
-    revalidatePath(`/admin/leads/${leadId}`);
-    return { success: true };
-  } catch (error) {
-    console.error("assignQuoteToLead error:", error);
-    return { success: false, error: "Errore nell'assegnazione" };
-  }
-}

src/app/admin/leads/page.tsx

@@ -1,25 +1,7 @@
-import { Suspense } from "react";
-import { getAllLeads } from "@/lib/lead-service";
-import { LeadTable } from "@/components/admin/leads/LeadTable";
-import { CreateLeadModal } from "@/components/admin/leads/LeadForm";
+import { redirect } from "next/navigation";
 
-async function LeadsList() {
-  const leads = await getAllLeads();
-
-  return (
-    <div className="space-y-6">
-      <div className="flex justify-between items-center">
-        <h1 className="text-3xl font-bold">Lead Pipeline</h1>
-        <CreateLeadModal />
-      </div>
-
-      <Suspense fallback={<div className="animate-pulse">Loading...</div>}>
-        <LeadTable leads={leads} />
-      </Suspense>
-    </div>
-  );
-}
-
-export default function LeadsPage() {
-  return <LeadsList />;
+// Legacy route — Lead was renamed to Pipeline. Kept as a redirect stub so
+// existing links/bookmarks to /admin/leads don't break.
+export default function LeadsRedirectPage() {
+  redirect("/admin/pipeline");
 }

src/app/admin/offers/[id]/edit/page.tsx

@@ -0,0 +1,23 @@
+import { notFound } from "next/navigation";
+import { getOfferEditorData, getOfferFieldOptions } from "@/lib/offer-queries";
+import { OfferEditorClient } from "@/components/admin/offers/OfferEditorClient";
+
+export const revalidate = 0;
+
+export default async function OfferEditPage({
+  params,
+}: {
+  params: Promise<{ id: string }>;
+}) {
+  const { id } = await params;
+  const [data, options] = await Promise.all([
+    getOfferEditorData(id),
+    getOfferFieldOptions(),
+  ]);
+
+  if (!data) {
+    notFound();
+  }
+
+  return <OfferEditorClient data={data} fieldOptions={options} />;
+}

src/app/admin/offers/actions.ts

@@ -6,12 +6,15 @@ import {
   offer_micros,
   offer_services,
   offer_micro_services,
+  offer_tier_services,
+  tags,
 } from "@/db/schema";
 import { revalidatePath } from "next/cache";
-import { eq } from "drizzle-orm";
+import { eq, and, inArray } from "drizzle-orm";
 import { z } from "zod";
 import { getServerSession } from "next-auth";
 import { authOptions } from "@/lib/auth";
+import { addPoolValue, renamePoolValue } from "@/lib/taxonomy";
 
 async function requireAdmin() {
   const session = await getServerSession(authOptions);
@@ -130,3 +133,260 @@ export async function updateMicroOfferServices(microId: string, serviceIds: stri
   }
   revalidatePath("/admin/offers");
 }
+
+// ── Phase 12: Offer Editor server actions ───────────────────────────────────
+// entity_type values for the polymorphic `tags` table, scoped to offer_macros'
+// Tipo/Obiettivo dimensions (D-06 pattern — separate pools from "services"/"leads").
+const OFFER_TIPO_ENTITY = "offer_macros.tipo";
+const OFFER_OBIETTIVO_ENTITY = "offer_macros.obiettivo";
+
+const tierSchema = z.object({
+  id: z.string().optional(),
+  tier_letter: z.enum(["A", "B", "C"]),
+  internal_name: z.string().min(1),
+  public_name: z.string().min(1),
+  duration_months: z.coerce.number().int().min(1),
+  public_price: z.coerce.number().min(0).optional().nullable(),
+  assignedServiceIds: z.array(z.string()),
+});
+
+const saveOfferEditorSchema = z.object({
+  internal_name: z.string().min(1, "Nome interno richiesto"),
+  public_name: z.string().min(1, "Nome pubblico richiesto"),
+  description: z.string().optional(),
+  category: z.string().optional(),
+  ticket: z.string().optional(),
+  offer_type: z.enum(["una_tantum", "retainer"]).optional(),
+  cliente_ideale: z.string().optional(),
+  risultato: z.string().optional(),
+  tempo: z.string().optional(),
+  pain: z.string().optional(),
+  metodo: z.string().optional(),
+  tiers: z.array(tierSchema).max(3),
+  tipoTags: z.array(z.string()),
+  obiettivoTags: z.array(z.string()),
+});
+
+export type SaveOfferEditorPayload = z.infer<typeof saveOfferEditorSchema>;
+
+// Persists the entire offer editor state in one call: macro scalar fields
+// (incl. category/ticket/transformation-promise), per-tier upsert
+// (tier_letter validated A/B/C via Zod — defense-in-depth alongside the DB
+// CHECK constraint from Plan 01) with delete-then-reinsert
+// offer_tier_services, and Tipo/Obiettivo tags (delete-then-reinsert).
+export async function saveOfferEditor(macroId: string, payload: SaveOfferEditorPayload) {
+  await requireAdmin();
+
+  const parsed = saveOfferEditorSchema.safeParse(payload);
+  if (!parsed.success) throw new Error(parsed.error.issues[0].message);
+  const data = parsed.data;
+
+  // 1. Update macro scalar fields.
+  await db
+    .update(offer_macros)
+    .set({
+      internal_name: data.internal_name,
+      public_name: data.public_name,
+      description: data.description || null,
+      category: data.category || null,
+      ticket: data.ticket || null,
+      offer_type: data.offer_type ?? "una_tantum",
+      cliente_ideale: data.cliente_ideale || null,
+      risultato: data.risultato || null,
+      tempo: data.tempo || null,
+      pain: data.pain || null,
+      metodo: data.metodo || null,
+    })
+    .where(eq(offer_macros.id, macroId));
+
+  // 2. Upsert each tier, then replace its offer_tier_services assignments.
+  for (const tier of data.tiers) {
+    const publicPrice = tier.public_price != null ? String(tier.public_price) : null;
+    let tierId: string;
+
+    if (tier.id) {
+      await db
+        .update(offer_micros)
+        .set({
+          tier_letter: tier.tier_letter,
+          internal_name: tier.internal_name,
+          public_name: tier.public_name,
+          duration_months: tier.duration_months,
+          public_price: publicPrice,
+        })
+        .where(eq(offer_micros.id, tier.id));
+      tierId = tier.id;
+    } else {
+      const [inserted] = await db
+        .insert(offer_micros)
+        .values({
+          macro_id: macroId,
+          tier_letter: tier.tier_letter,
+          internal_name: tier.internal_name,
+          public_name: tier.public_name,
+          duration_months: tier.duration_months,
+          public_price: publicPrice,
+        })
+        .returning({ id: offer_micros.id });
+      tierId = inserted.id;
+    }
+
+    // Delete-then-reinsert offer_tier_services (mirrors updateMicroOfferServices).
+    await db.delete(offer_tier_services).where(eq(offer_tier_services.tier_id, tierId));
+    if (tier.assignedServiceIds.length > 0) {
+      await db.insert(offer_tier_services).values(
+        tier.assignedServiceIds.map((serviceId) => ({ tier_id: tierId, service_id: serviceId }))
+      );
+    }
+  }
+
+  // 3. Delete-then-reinsert Tipo/Obiettivo tags.
+  await db
+    .delete(tags)
+    .where(
+      and(
+        eq(tags.entity_id, macroId),
+        inArray(tags.entity_type, [OFFER_TIPO_ENTITY, OFFER_OBIETTIVO_ENTITY])
+      )
+    );
+
+  const tagRows = [
+    ...data.tipoTags.map((name) => ({ entity_type: OFFER_TIPO_ENTITY, entity_id: macroId, name })),
+    ...data.obiettivoTags.map((name) => ({
+      entity_type: OFFER_OBIETTIVO_ENTITY,
+      entity_id: macroId,
+      name,
+    })),
+  ];
+  if (tagRows.length > 0) {
+    await db.insert(tags).values(tagRows).onConflictDoNothing();
+  }
+
+  // 4. Register any newly-typed values into the persistent taxonomy pools so they
+  // survive unassignment and appear in settings + every dropdown.
+  if (data.category) await addPoolValue("offer_categoria", data.category);
+  if (data.ticket) await addPoolValue("offer_ticket", data.ticket);
+  for (const name of data.tipoTags) await addPoolValue("offer_tipo", name);
+  for (const name of data.obiettivoTags) await addPoolValue("offer_obiettivo", name);
+
+  revalidatePath("/admin/offers");
+  revalidatePath(`/admin/offers/${macroId}/edit`);
+}
+
+// Toggles the archive flag on an offer macro (OFFER-18).
+export async function toggleOfferArchived(macroId: string, archived: boolean) {
+  await requireAdmin();
+  await db.update(offer_macros).set({ is_archived: archived }).where(eq(offer_macros.id, macroId));
+  revalidatePath("/admin/offers");
+}
+
+// ── Tipo/Obiettivo tag CRUD (mirrors addServiceOption/removeServiceOption) ───
+
+type OfferTagDimension = "tipo" | "obiettivo";
+
+const OFFER_TAG_ENTITY: Record<OfferTagDimension, string> = {
+  tipo: OFFER_TIPO_ENTITY,
+  obiettivo: OFFER_OBIETTIVO_ENTITY,
+};
+
+export async function addOfferTag(dimension: OfferTagDimension, macroId: string, value: string) {
+  await requireAdmin();
+  if (!(dimension in OFFER_TAG_ENTITY)) throw new Error(`Dimensione non valida: ${dimension}`);
+  const trimmed = value.trim();
+  if (trimmed.length === 0) throw new Error("Valore richiesto");
+
+  await db
+    .insert(tags)
+    .values({ entity_type: OFFER_TAG_ENTITY[dimension], entity_id: macroId, name: trimmed })
+    .onConflictDoNothing();
+
+  await addPoolValue(dimension === "tipo" ? "offer_tipo" : "offer_obiettivo", trimmed);
+
+  revalidatePath("/admin/offers");
+}
+
+export async function removeOfferTag(
+  dimension: OfferTagDimension,
+  macroId: string,
+  value: string
+) {
+  await requireAdmin();
+  if (!(dimension in OFFER_TAG_ENTITY)) throw new Error(`Dimensione non valida: ${dimension}`);
+
+  await db
+    .delete(tags)
+    .where(
+      and(
+        eq(tags.entity_type, OFFER_TAG_ENTITY[dimension]),
+        eq(tags.entity_id, macroId),
+        eq(tags.name, value)
+      )
+    );
+
+  revalidatePath("/admin/offers");
+}
+
+// ── Rename an option everywhere it is used (mirrors renameServiceOption) ────
+// "categoria"/"ticket" are single-select columns on offer_macros; "tipo"/
+// "obiettivo" are multi-select pools in the polymorphic `tags` table.
+
+type OfferOptionField = "categoria" | "ticket" | "tipo" | "obiettivo";
+
+export async function renameOfferOption(
+  field: OfferOptionField,
+  oldValue: string,
+  newValue: string
+) {
+  await requireAdmin();
+  const next = newValue.trim();
+  if (next.length === 0) throw new Error("Nuovo nome richiesto");
+  if (next === oldValue) return;
+
+  if (field === "categoria") {
+    await db.update(offer_macros).set({ category: next }).where(eq(offer_macros.category, oldValue));
+    await renamePoolValue("offer_categoria", oldValue, next);
+  } else if (field === "ticket") {
+    await db.update(offer_macros).set({ ticket: next }).where(eq(offer_macros.ticket, oldValue));
+    await renamePoolValue("offer_ticket", oldValue, next);
+  } else if (field === "tipo" || field === "obiettivo") {
+    await db
+      .update(tags)
+      .set({ name: next })
+      .where(and(eq(tags.entity_type, OFFER_TAG_ENTITY[field]), eq(tags.name, oldValue)));
+    await renamePoolValue(field === "tipo" ? "offer_tipo" : "offer_obiettivo", oldValue, next);
+  } else {
+    throw new Error(`Campo non valido: ${field}`);
+  }
+
+  revalidatePath("/admin/offers");
+}
+
+// ── Create a new offer macro (Plan 04 "+ Nuova Offerta" target) ─────────────
+
+const createOfferMacroSchema = z.object({
+  internal_name: z.string().min(1, "Nome interno richiesto"),
+  public_name: z.string().optional(),
+  description: z.string().optional(),
+  category: z.string().optional(),
+});
+
+export async function createOfferMacro(formData: FormData) {
+  await requireAdmin();
+  const parsed = createOfferMacroSchema.safeParse({
+    internal_name: formData.get("internal_name"),
+    public_name: formData.get("public_name") ?? "",
+    description: formData.get("description") ?? "",
+    category: formData.get("category") ?? "",
+  });
+  if (!parsed.success) throw new Error(parsed.error.issues[0].message);
+
+  await db.insert(offer_macros).values({
+    internal_name: parsed.data.internal_name,
+    public_name: parsed.data.public_name?.trim() || parsed.data.internal_name,
+    description: parsed.data.description || null,
+    category: parsed.data.category || null,
+  });
+  if (parsed.data.category) await addPoolValue("offer_categoria", parsed.data.category);
+
+  revalidatePath("/admin/offers");
+}

src/app/admin/offers/page.tsx

@@ -1,238 +1,17 @@
-import { getCatalogWithMicros, getAllOfferServices } from "@/lib/offer-queries";
-import {
-  createMacro,
-  createMicro,
-  createOfferService,
-  deleteMacro,
-  deleteMicro,
-  toggleOfferServiceActive,
-} from "./actions";
-import { ServiceCheckboxList } from "@/components/admin/offers/ServiceCheckboxList";
+import { getOfferListCards, getOfferFieldOptions } from "@/lib/offer-queries";
+import { OfferListClient } from "@/components/admin/offers/OfferListClient";
 
 export const revalidate = 0;
 
 export default async function OffersPage() {
-  const [catalog, allServices] = await Promise.all([
-    getCatalogWithMicros(),
-    getAllOfferServices(),
+  const [cards, options] = await Promise.all([
+    getOfferListCards(),
+    getOfferFieldOptions(),
   ]);
 
   return (
-    <div className="max-w-5xl mx-auto py-8 px-4 space-y-10">
-      <h1 className="text-2xl font-bold text-[#1a1a1a]">Catalogo Offerte</h1>
-
-      {/* ── Sezione macro-offerte ── */}
-      <section>
-        <h2 className="text-lg font-semibold text-[#1a1a1a] mb-4">Macro-Offerte</h2>
-
-        {/* Create macro form */}
-        <form action={createMacro} className="bg-white rounded-lg border border-[#e5e7eb] p-4 mb-6 space-y-3 max-w-lg">
-          <p className="text-sm font-medium">Nuova Macro-Offerta</p>
-          <input
-            name="internal_name"
-            placeholder="Nome interno (es. Entry Offer)"
-            required
-            className="w-full border rounded px-3 py-1.5 text-sm"
-          />
-          <input
-            name="public_name"
-            placeholder="Nome pubblico (es. Starter Branding)"
-            required
-            className="w-full border rounded px-3 py-1.5 text-sm"
-          />
-          <textarea
-            name="transformation_promise"
-            placeholder="Promessa di trasformazione"
-            rows={2}
-            className="w-full border rounded px-3 py-1.5 text-sm"
-          />
-          <button
-            type="submit"
-            className="bg-[#1A463C] text-white text-sm px-4 py-1.5 rounded hover:bg-[#163a31]"
-          >
-            Aggiungi Macro
-          </button>
-        </form>
-
-        {/* List macros */}
-        <div className="space-y-8">
-          {catalog.map((macro) => (
-            <div key={macro.id} className="bg-white rounded-lg border border-[#e5e7eb] p-6">
-              <div className="flex items-start justify-between mb-1">
-                <div>
-                  <p className="font-semibold text-[#1a1a1a]">{macro.internal_name}</p>
-                  <p className="text-sm text-[#71717a]">Pubblico: {macro.public_name}</p>
-                  {macro.transformation_promise && (
-                    <p className="text-xs text-[#71717a] mt-1 italic">{macro.transformation_promise}</p>
-                  )}
-                </div>
-                <form action={deleteMacro.bind(null, macro.id)}>
-                  <button type="submit" className="text-xs text-red-600 hover:underline">
-                    Elimina
-                  </button>
-                </form>
-              </div>
-
-              {/* Micro-offers under this macro */}
-              <div className="mt-4 space-y-4 pl-4 border-l-2 border-[#e5e7eb]">
-                <p className="text-xs font-semibold text-[#71717a] uppercase tracking-wider">Micro-Offerte</p>
-
-                {macro.micros.map((micro) => (
-                  <div key={micro.id} className="bg-[#f9f9f9] rounded-lg p-4 space-y-3">
-                    <div className="flex items-start justify-between">
-                      <div>
-                        <p className="text-sm font-medium">{micro.internal_name}</p>
-                        <p className="text-xs text-[#71717a]">
-                          Pubblico: {micro.public_name} &middot;{" "}
-                          {micro.duration_months} {micro.duration_months === 1 ? "mese" : "mesi"}
-                        </p>
-                        {micro.transformation_promise && (
-                          <p className="text-xs text-[#71717a] italic">{micro.transformation_promise}</p>
-                        )}
-                        <p className="text-xs text-[#1a1a1a] mt-1 font-medium">
-                          Prezzo cumulativo: €{parseFloat(micro.cumulative_price).toFixed(2)}
-                        </p>
-                      </div>
-                      <form action={deleteMicro.bind(null, micro.id)}>
-                        <button type="submit" className="text-xs text-red-600 hover:underline">
-                          Elimina
-                        </button>
-                      </form>
-                    </div>
-                    {/* Service assignment checkbox list */}
-                    <div>
-                      <p className="text-xs font-medium text-[#71717a] mb-2">Servizi inclusi:</p>
-                      <ServiceCheckboxList
-                        allServices={allServices.map((s) => ({
-                          id: s.id,
-                          name: s.name,
-                          price: String(s.price),
-                        }))}
-                        assignedIds={micro.services.map((s) => s.id)}
-                        microId={micro.id}
-                      />
-                    </div>
-                  </div>
-                ))}
-
-                {/* Create micro form */}
-                <form action={createMicro} className="bg-white rounded border border-[#e5e7eb] p-3 space-y-2">
-                  <input type="hidden" name="macro_id" value={macro.id} />
-                  <p className="text-xs font-medium">Nuova Micro-Offerta</p>
-                  <input
-                    name="internal_name"
-                    placeholder="Nome interno"
-                    required
-                    className="w-full border rounded px-2 py-1 text-xs"
-                  />
-                  <input
-                    name="public_name"
-                    placeholder="Nome pubblico"
-                    required
-                    className="w-full border rounded px-2 py-1 text-xs"
-                  />
-                  <textarea
-                    name="transformation_promise"
-                    placeholder="Promessa di trasformazione"
-                    rows={2}
-                    className="w-full border rounded px-2 py-1 text-xs"
-                  />
-                  <div className="flex items-center gap-2">
-                    <label className="text-xs">Durata (mesi):</label>
-                    <input
-                      name="duration_months"
-                      type="number"
-                      min="1"
-                      defaultValue="1"
-                      required
-                      className="w-16 border rounded px-2 py-1 text-xs"
-                    />
-                  </div>
-                  <button
-                    type="submit"
-                    className="bg-[#1A463C] text-white text-xs px-3 py-1 rounded hover:bg-[#163a31]"
-                  >
-                    Aggiungi Micro
-                  </button>
-                </form>
-              </div>
-            </div>
-          ))}
-
-          {catalog.length === 0 && (
-            <p className="text-sm text-[#71717a]">Nessuna macro-offerta ancora. Creane una sopra.</p>
-          )}
-        </div>
-      </section>
-
-      {/* ── Sezione servizi offerta ── */}
-      <section>
-        <h2 className="text-lg font-semibold text-[#1a1a1a] mb-4">Servizi Offerta</h2>
-        <p className="text-sm text-[#71717a] mb-4">
-          I servizi qui sono diversi dal catalogo preventivi — hanno una descrizione della
-          trasformazione e vengono raggruppati nelle micro-offerte.
-        </p>
-
-        {/* List services */}
-        <div className="bg-white rounded-lg border border-[#e5e7eb] divide-y divide-[#e5e7eb] mb-6">
-          {allServices.map((svc) => (
-            <div key={svc.id} className="flex items-center justify-between px-4 py-3">
-              <div>
-                <p className="text-sm font-medium">{svc.name}</p>
-                {svc.transformation_description && (
-                  <p className="text-xs text-[#71717a]">{svc.transformation_description}</p>
-                )}
-              </div>
-              <div className="flex items-center gap-4">
-                <span className="text-sm font-mono">€{parseFloat(String(svc.price)).toFixed(2)}</span>
-                <form action={toggleOfferServiceActive.bind(null, svc.id, !svc.active)}>
-                  <button type="submit" className="text-xs text-[#71717a] hover:text-[#1a1a1a]">
-                    {svc.active ? "Disattiva" : "Attiva"}
-                  </button>
-                </form>
-              </div>
-            </div>
-          ))}
-          {allServices.length === 0 && (
-            <p className="px-4 py-3 text-sm text-[#71717a]">Nessun servizio ancora.</p>
-          )}
-        </div>
-
-        {/* Create service form */}
-        <form
-          action={createOfferService}
-          className="bg-white rounded-lg border border-[#e5e7eb] p-4 space-y-3 max-w-lg"
-        >
-          <p className="text-sm font-medium">Nuovo Servizio Offerta</p>
-          <input
-            name="name"
-            placeholder="Nome servizio"
-            required
-            className="w-full border rounded px-3 py-1.5 text-sm"
-          />
-          <input
-            name="price"
-            type="number"
-            step="0.01"
-            min="0"
-            placeholder="Prezzo (€)"
-            required
-            className="w-full border rounded px-3 py-1.5 text-sm"
-          />
-          <textarea
-            name="transformation_description"
-            placeholder="Descrizione trasformazione (marketing)"
-            rows={2}
-            className="w-full border rounded px-3 py-1.5 text-sm"
-          />
-          <button
-            type="submit"
-            className="bg-[#1A463C] text-white text-sm px-4 py-1.5 rounded hover:bg-[#163a31]"
-          >
-            Aggiungi Servizio
-          </button>
-        </form>
-      </section>
+    <div>
+      <OfferListClient cards={cards} categoryOptions={options.categoria} />
     </div>
   );
 }

src/app/admin/page.tsx

@@ -1,65 +1,103 @@
 import { Suspense } from "react";
 import { getDashboardStats } from "@/lib/dashboard-queries";
 import { FollowUpWidget } from "@/components/admin/dashboard/FollowUpWidget";
-import { Users, FolderOpen, Euro, Clock } from "lucide-react";
+import {
+  getAnalyticsByYear,
+  getMonthlyCollected,
+  getAvailableYears,
+  getTimeByClient,
+  getTotalTrackedHours,
+} from "@/lib/analytics-queries";
+import { getRevenueForecast12Months, getOffersSoldBreakdown } from "@/lib/forecast-queries";
+import { YearSelector, MonthlyChart } from "@/components/admin/YearSelector";
+import { ForecastChart } from "@/components/admin/ForecastChart";
+import { OffersSoldChart } from "@/components/admin/OffersSoldChart";
+import { PageHeader } from "@/components/admin/PageHeader";
 
 export const revalidate = 0;
 
-function KpiCard({
+function MetricCard({
   label,
   value,
   sub,
-  icon: Icon,
-  color,
+  accent,
 }: {
   label: string;
-  value: string | number;
+  value: string;
   sub?: string;
-  icon: React.ElementType;
-  color: string;
+  accent?: boolean;
 }) {
   return (
-    <div className="bg-white rounded-xl border border-gray-200 p-5 flex items-start gap-4">
-      <div className={`p-2 rounded-lg ${color}`}>
-        <Icon size={20} strokeWidth={1.8} className="text-white" />
-      </div>
-      <div>
-        <p className="text-xs text-gray-500 font-medium uppercase tracking-wide">{label}</p>
-        <p className="text-2xl font-bold text-gray-900 mt-0.5">{value}</p>
-        {sub && <p className="text-xs text-gray-400 mt-0.5">{sub}</p>}
-      </div>
+    <div
+      className={`rounded-xl border p-5 ${
+        accent ? "bg-[#1A463C] border-[#1A463C] text-white" : "bg-white border-[#e5e7eb]"
+      }`}
+    >
+      <p
+        className={`text-xs font-bold uppercase tracking-wider mb-2 ${
+          accent ? "text-white/60" : "text-[#71717a]"
+        }`}
+      >
+        {label}
+      </p>
+      <p
+        className={`text-2xl font-bold tracking-tight ${
+          accent ? "text-white" : "text-[#1a1a1a]"
+        }`}
+      >
+        {value}
+      </p>
+      {sub && (
+        <p className={`text-xs mt-1 ${accent ? "text-white/60" : "text-[#71717a]"}`}>{sub}</p>
+      )}
     </div>
   );
 }
 
-const ACTIVITY_ICONS: Record<string, string> = {
-  nuovo_cliente: "👤",
-  nuovo_progetto: "📁",
-  deliverable_approvato: "✅",
-  timer_stoppato: "⏱",
-};
-
-function fmt(ts: Date) {
-  return new Intl.DateTimeFormat("it-IT", {
-    day: "2-digit",
-    month: "short",
-    hour: "2-digit",
-    minute: "2-digit",
-  }).format(new Date(ts));
+function fmtEur(n: number) {
+  return n.toLocaleString("it-IT", {
+    style: "currency",
+    currency: "EUR",
+    minimumFractionDigits: 2,
+  });
 }
 
-function fmtEur(val: string) {
-  return new Intl.NumberFormat("it-IT", { style: "currency", currency: "EUR" }).format(
-    parseFloat(val) || 0
-  );
+function fmtSeconds(s: number): string {
+  const h = Math.floor(s / 3600);
+  const m = Math.floor((s % 3600) / 60);
+  if (h > 0) return `${h}h ${m}m`;
+  return `${m}m`;
 }
 
-export default async function AdminDashboard() {
-  const { kpi, activity } = await getDashboardStats();
+export default async function AdminDashboard({
+  searchParams,
+}: {
+  searchParams: Promise<{ year?: string }>;
+}) {
+  const { year: yearParam } = await searchParams;
+  const year = parseInt(yearParam ?? "") || new Date().getFullYear();
+
+  const { kpi } = await getDashboardStats();
+
+  const [data, monthly, availableYears, timeByClient, totalHours, forecast, offersSold] =
+    await Promise.all([
+      getAnalyticsByYear(year),
+      getMonthlyCollected(year),
+      getAvailableYears(),
+      getTimeByClient(year),
+      getTotalTrackedHours(year),
+      getRevenueForecast12Months(),
+      getOffersSoldBreakdown(),
+    ]);
+
+  const collectedPct =
+    data.contracted > 0 ? Math.round((data.collected / data.contracted) * 100) : 0;
+
+  const maxClientSeconds = timeByClient[0]?.totalSeconds ?? 1;
 
   return (
-    <div className="max-w-5xl">
-      <h1 className="text-2xl font-bold text-gray-900 mb-6">Dashboard</h1>
+    <div className="space-y-6">
+      <PageHeader title="Dashboard" />
 
       {/* Follow-up Widget */}
       <div className="mb-8">
@@ -68,59 +106,128 @@ export default async function AdminDashboard() {
         </Suspense>
       </div>
 
-      {/* KPI cards */}
-      <div className="grid grid-cols-2 lg:grid-cols-4 gap-4 mb-8">
-        <KpiCard
-          label="Clienti attivi"
-          value={kpi.clientiAttivi}
-          icon={Users}
-          color="bg-[#1A463C]"
-        />
-        <KpiCard
-          label="Revenue totale"
-          value={fmtEur(kpi.revenueTotale)}
-          sub="progetti non archiviati"
-          icon={Euro}
-          color="bg-emerald-600"
-        />
-        <KpiCard
-          label="Progetti in corso"
-          value={kpi.progettiInCorso}
-          icon={FolderOpen}
-          color="bg-blue-600"
-        />
-        <KpiCard
-          label="Pagamenti in sospeso"
-          value={fmtEur(kpi.pagamentiInSospeso)}
-          sub="da_saldare + inviata"
-          icon={Clock}
-          color="bg-amber-500"
-        />
-      </div>
-
-      {/* Activity feed */}
-      <div className="bg-white rounded-xl border border-gray-200">
-        <div className="px-5 py-4 border-b border-gray-100">
-          <h2 className="text-sm font-semibold text-gray-700">Attività recente</h2>
+      {/* ── SEZIONE STATISTICHE ── */}
+      <div className="space-y-10">
+        <div className="flex items-center justify-between">
+          <div>
+            <h2 className="text-xl font-bold text-gray-900">Statistiche</h2>
+            <p className="text-sm text-gray-400 mt-0.5">Panoramica per anno</p>
+          </div>
+          <YearSelector currentYear={year} availableYears={availableYears} />
+        </div>
+
+        {/* Panoramica corrente (non per-anno) */}
+        <div className="space-y-4">
+          <h3 className="text-sm font-bold text-[#71717a] uppercase tracking-wider">Panoramica</h3>
+          <div className="grid grid-cols-2 lg:grid-cols-4 gap-4">
+            <MetricCard label="Clienti attivi" value={String(kpi.clientiAttivi)} sub="Totale corrente" />
+            <MetricCard
+              label="Progetti in corso"
+              value={String(kpi.progettiInCorso)}
+              sub="Non archiviati"
+            />
+          </div>
+        </div>
+
+        {/* Previsione incassi */}
+        <div className="space-y-4">
+          <h3 className="text-sm font-bold text-[#71717a] uppercase tracking-wider">
+            Previsione incassi (12 mesi)
+          </h3>
+          <ForecastChart data={forecast} />
+          <p className="text-xs text-[#a1a1aa] italic">
+            Stima dalle offerte attive: i retainer contribuiscono il canone mensile, le una-tantum
+            ripartite sulla durata.
+          </p>
+        </div>
+
+        {/* Offerte vendute */}
+        <div className="space-y-4">
+          <h3 className="text-sm font-bold text-[#71717a] uppercase tracking-wider">
+            Offerte vendute
+          </h3>
+          <OffersSoldChart data={offersSold} />
+        </div>
+
+        {/* Sezione economica */}
+        <div className="space-y-4">
+          <h3 className="text-sm font-bold text-[#71717a] uppercase tracking-wider">Fatturato</h3>
+          <div className="grid grid-cols-2 lg:grid-cols-4 gap-4">
+            <MetricCard
+              label="Contrattualizzato"
+              value={fmtEur(data.contracted)}
+              sub={`${data.clientsAcquired} client${data.clientsAcquired === 1 ? "e" : "i"}`}
+              accent
+            />
+            <MetricCard
+              label="Incassato"
+              value={fmtEur(data.collected)}
+              sub={`${collectedPct}% del contrattualizzato`}
+            />
+            <MetricCard
+              label="Da incassare"
+              value={fmtEur(data.pending)}
+              sub="Tutti gli anni"
+            />
+            <MetricCard
+              label="Clienti acquisiti"
+              value={String(data.clientsAcquired)}
+              sub={`Anno ${year}`}
+            />
+          </div>
+          <MonthlyChart data={monthly} year={year} />
+          {data.contracted === 0 && (
+            <p className="text-sm text-[#71717a] italic text-center py-2">
+              Nessun cliente registrato nel {year}.
+            </p>
+          )}
+        </div>
+
+        {/* Sezione time tracking */}
+        <div className="space-y-4">
+          <h3 className="text-sm font-bold text-[#71717a] uppercase tracking-wider">
+            Tempo tracciato
+          </h3>
+          <div className="grid grid-cols-2 lg:grid-cols-4 gap-4">
+            <MetricCard label="Ore totali" value={`${totalHours}h`} sub={`Anno ${year}`} accent />
+          </div>
+
+          {timeByClient.length === 0 ? (
+            <div className="bg-white rounded-xl border border-[#e5e7eb] p-8 text-center">
+              <p className="text-sm text-[#71717a] italic">
+                Nessuna sessione registrata nel {year}. Usa il timer &#9654; nella lista clienti per
+                iniziare.
+              </p>
+            </div>
+          ) : (
+            <div className="bg-white rounded-xl border border-[#e5e7eb] p-6 space-y-4">
+              <h3 className="text-sm font-bold text-[#1a1a1a]">Ore per cliente — {year}</h3>
+              <div className="space-y-3">
+                {timeByClient.map((row) => {
+                  const pct = Math.round((row.totalSeconds / maxClientSeconds) * 100);
+                  return (
+                    <div key={row.clientId}>
+                      <div className="flex items-center justify-between mb-1">
+                        <span className="text-sm font-medium text-[#1a1a1a]">
+                          {row.clientName}
+                        </span>
+                        <span className="text-sm tabular-nums text-[#71717a]">
+                          {fmtSeconds(row.totalSeconds)}
+                        </span>
+                      </div>
+                      <div className="h-2 rounded-full bg-[#f4f4f5] overflow-hidden">
+                        <div
+                          className="h-full rounded-full bg-[#1A463C] transition-all"
+                          style={{ width: `${pct}%` }}
+                        />
+                      </div>
+                    </div>
+                  );
+                })}
+              </div>
+            </div>
+          )}
         </div>
-        {activity.length === 0 ? (
-          <p className="px-5 py-8 text-sm text-gray-400 text-center">Nessuna attività recente</p>
-        ) : (
-          <ul className="divide-y divide-gray-50">
-            {activity.map((item, i) => (
-              <li key={i} className="px-5 py-3 flex items-center justify-between gap-4">
-                <div className="flex items-center gap-3">
-                  <span className="text-base">{ACTIVITY_ICONS[item.type]}</span>
-                  <div>
-                    <p className="text-sm font-medium text-gray-800">{item.label}</p>
-                    <p className="text-xs text-gray-500">{item.detail}</p>
-                  </div>
-                </div>
-                <span className="text-xs text-gray-400 shrink-0">{fmt(item.timestamp)}</span>
-              </li>
-            ))}
-          </ul>
-        )}
       </div>
     </div>
   );

src/app/admin/pipeline/LeadsSearch.tsx

@@ -0,0 +1,3 @@
+// LeadsSearch is superseded by LeadsViewToggle (Phase 19).
+// Re-exported here to avoid breaking any existing import.
+export { LeadsViewToggle as LeadsSearch } from "@/components/admin/leads/LeadsViewToggle";

src/app/admin/pipeline/[id]/page.tsx

@@ -0,0 +1,40 @@
+import { notFound } from "next/navigation";
+import { getActivityLog, getUpcomingReminders, getTranscripts } from "@/lib/lead-service";
+import {
+  getLeadByIdWithTags,
+  getLeadFieldOptions,
+  getClientIdFromLead,
+} from "@/lib/admin-queries";
+import { LeadDetail } from "@/components/admin/leads/LeadDetail";
+
+export default async function LeadDetailPage({ params }: { params: Promise<{ id: string }> }) {
+  const { id } = await params;
+
+  const [lead, options, convertedClientId] = await Promise.all([
+    getLeadByIdWithTags(id),
+    getLeadFieldOptions(),
+    getClientIdFromLead(id),
+  ]);
+
+  if (!lead) {
+    notFound();
+  }
+
+  const [activities, reminders, transcripts] = await Promise.all([
+    getActivityLog(id),
+    getUpcomingReminders(id),
+    getTranscripts(id),
+  ]);
+
+  return (
+    <LeadDetail
+      lead={lead}
+      activities={activities}
+      reminders={reminders}
+      tags={lead.tags}
+      tagOptions={options.tags}
+      transcripts={transcripts}
+      convertedClientId={convertedClientId}
+    />
+  );
+}

src/app/admin/pipeline/actions.ts

@@ -0,0 +1,361 @@
+"use server";
+
+import { z } from "zod";
+import { db } from "@/db";
+import { leads, quotes, tags, clientTranscripts, projects } from "@/db/schema";
+import { nanoid } from "nanoid";
+import { eq, and } from "drizzle-orm";
+import {
+  createLeadSchema,
+  updateLeadSchema,
+  createActivitySchema,
+  LEAD_STAGES,
+} from "@/lib/lead-validators";
+import { revalidatePath } from "next/cache";
+import { redirect } from "next/navigation";
+import { createActivity, updateLeadStage } from "@/lib/lead-service";
+import { createClientCore } from "@/app/admin/clients/new/actions";
+import { getServerSession } from "next-auth";
+import { authOptions } from "@/lib/auth";
+
+async function requireAdminSession() {
+  const session = await getServerSession(authOptions);
+  if (!session) throw new Error("Non autorizzato");
+}
+
+// Converts a lead into a client (reusing createClientCore): creates the client
+// + default project (linked via created_from_lead_id) + payment stubs, carries
+// over the lead's call transcripts, then archives the lead while keeping its
+// "won" status. Idempotent: a lead already converted just redirects to its
+// client. Redirects to the new client page on success.
+export async function convertLeadToClient(leadId: string): Promise<void> {
+  await requireAdminSession();
+
+  const [lead] = await db.select().from(leads).where(eq(leads.id, leadId)).limit(1);
+  if (!lead) throw new Error("Lead non trovato");
+
+  // Already converted? Redirect to the linked client instead of duplicating.
+  const [existing] = await db
+    .select({ client_id: projects.client_id })
+    .from(projects)
+    .where(eq(projects.created_from_lead_id, leadId))
+    .limit(1);
+  if (existing) {
+    redirect(`/admin/clients/${existing.client_id}`);
+  }
+
+  const { clientId } = await createClientCore({
+    name: lead.name,
+    brand_name: lead.company?.trim() || lead.name,
+    brief: lead.notes?.trim() || `Lead convertito: ${lead.name}`,
+    email: lead.email,
+    phone: lead.phone,
+    created_from_lead_id: lead.id,
+  });
+
+  // Carry over the lead's transcripts to the new client.
+  await db
+    .update(clientTranscripts)
+    .set({ client_id: clientId, lead_id: null })
+    .where(eq(clientTranscripts.lead_id, leadId));
+
+  // Archive the lead but keep its "won" status (traceability without clutter).
+  await db.update(leads).set({ archived: true }).where(eq(leads.id, leadId));
+
+  revalidatePath("/admin/pipeline");
+  revalidatePath("/admin");
+  redirect(`/admin/clients/${clientId}`);
+}
+
+export async function createLead(data: z.infer<typeof createLeadSchema>) {
+  const parsed = createLeadSchema.safeParse(data);
+
+  if (!parsed.success) {
+    return { success: false, error: parsed.error.issues[0].message };
+  }
+
+  try {
+    const [lead] = await db
+      .insert(leads)
+      .values({
+        name: parsed.data.name,
+        email: parsed.data.email || null,
+        phone: parsed.data.phone || null,
+        company: parsed.data.company || null,
+        status: parsed.data.status || "contacted",
+        notes: parsed.data.notes || null,
+      })
+      .returning();
+
+    revalidatePath("/admin/pipeline");
+    return { success: true, lead };
+  } catch (error) {
+    console.error("createLead error:", error);
+    return { success: false, error: "Errore nella creazione del lead" };
+  }
+}
+
+export async function updateLead(id: string, data: z.infer<typeof updateLeadSchema>) {
+  const parsed = updateLeadSchema.safeParse(data);
+
+  if (!parsed.success) {
+    return { success: false, error: parsed.error.issues[0].message };
+  }
+
+  try {
+    const updateData: Record<string, any> = { updated_at: new Date() };
+
+    if (parsed.data.name !== undefined) updateData.name = parsed.data.name;
+    if (parsed.data.email !== undefined) updateData.email = parsed.data.email || null;
+    if (parsed.data.phone !== undefined) updateData.phone = parsed.data.phone || null;
+    if (parsed.data.company !== undefined) updateData.company = parsed.data.company || null;
+    if (parsed.data.status !== undefined) updateData.status = parsed.data.status;
+    if (parsed.data.notes !== undefined) updateData.notes = parsed.data.notes || null;
+
+    const [updated] = await db
+      .update(leads)
+      .set(updateData)
+      .where(eq(leads.id, id))
+      .returning();
+
+    revalidatePath("/admin/pipeline");
+    revalidatePath(`/admin/pipeline/${id}`);
+    return { success: true, lead: updated };
+  } catch (error) {
+    console.error("updateLead error:", error);
+    return { success: false, error: "Errore nell'aggiornamento" };
+  }
+}
+
+export async function deleteLead(id: string) {
+  try {
+    await db.delete(leads).where(eq(leads.id, id));
+    revalidatePath("/admin/pipeline");
+    return { success: true };
+  } catch (error) {
+    console.error("deleteLead error:", error);
+    return { success: false, error: "Errore nell'eliminazione" };
+  }
+}
+
+// Activity logging
+export async function logActivity(data: z.infer<typeof createActivitySchema>) {
+  const parsed = createActivitySchema.safeParse(data);
+
+  if (!parsed.success) {
+    return { success: false, error: parsed.error.issues[0].message };
+  }
+
+  try {
+    const activity = await createActivity({
+      lead_id: parsed.data.lead_id,
+      type: parsed.data.type,
+      activity_date: new Date(parsed.data.activity_date),
+      duration_minutes: parsed.data.duration_minutes,
+      notes: parsed.data.notes,
+    });
+
+    revalidatePath(`/admin/pipeline/${parsed.data.lead_id}`);
+    return { success: true, activity };
+  } catch (error) {
+    console.error("logActivity error:", error);
+    return { success: false, error: "Errore nella registrazione" };
+  }
+}
+
+// Quote assignment
+const assignQuoteSchema = z.object({
+  lead_id: z.string().min(1),
+  quote_token: z.string().optional(),
+});
+
+export async function assignQuoteToLead(data: z.infer<typeof assignQuoteSchema>) {
+  const parsed = assignQuoteSchema.safeParse(data);
+
+  if (!parsed.success) {
+    return { success: false, error: parsed.error.issues[0].message };
+  }
+
+  try {
+    // Link quote to lead and update lead status
+    const token = parsed.data.quote_token;
+    const leadId = parsed.data.lead_id;
+
+    if (!token) {
+      return { success: false, error: "Token preventivo richiesto" };
+    }
+
+    // Find quote by token
+    const [quote] = await db
+      .select()
+      .from(quotes)
+      .where(eq(quotes.token, token))
+      .limit(1);
+
+    if (!quote) {
+      return { success: false, error: "Preventivo non trovato" };
+    }
+
+    // Update quote to link to lead (if not already linked)
+    await db
+      .update(quotes)
+      .set({ lead_id: leadId })
+      .where(eq(quotes.id, quote.id));
+
+    // Update lead status to "proposal_sent"
+    await updateLeadStage(leadId, "proposal_sent");
+
+    revalidatePath(`/admin/pipeline/${leadId}`);
+    return { success: true };
+  } catch (error) {
+    console.error("assignQuoteToLead error:", error);
+    return { success: false, error: "Errore nell'assegnazione" };
+  }
+}
+
+async function requireAdmin() {
+  const session = await getServerSession(authOptions);
+  if (!session) throw new Error("Non autorizzato");
+}
+
+// ── Inline-edit field update (Phase 14 database-view) ───────────────────────
+
+const EDITABLE_FIELDS = ["name", "email", "phone", "company", "status", "next_action"] as const;
+type EditableField = (typeof EDITABLE_FIELDS)[number];
+
+export async function updateLeadField(
+  leadId: string,
+  fieldName: EditableField,
+  value: string
+) {
+  await requireAdmin();
+
+  if (!EDITABLE_FIELDS.includes(fieldName)) {
+    throw new Error(`Campo non editabile: ${fieldName}`);
+  }
+
+  if (fieldName === "name") {
+    const s = value.trim();
+    if (s.length === 0) throw new Error("Nome richiesto");
+    await db.update(leads).set({ name: s, updated_at: new Date() }).where(eq(leads.id, leadId));
+  } else if (fieldName === "status") {
+    if (!LEAD_STAGES.includes(value as (typeof LEAD_STAGES)[number])) {
+      throw new Error("Stato non valido");
+    }
+    await db.update(leads).set({ status: value, updated_at: new Date() }).where(eq(leads.id, leadId));
+  } else {
+    // email | phone | company | next_action — nullable text fields, empty clears
+    const s = value.trim();
+    await db
+      .update(leads)
+      .set({ [fieldName]: s || null, updated_at: new Date() })
+      .where(eq(leads.id, leadId));
+  }
+
+  revalidatePath("/admin/pipeline");
+  revalidatePath(`/admin/pipeline/${leadId}`);
+}
+
+// ── Lead tags (Phase 14, CRM-09) — polymorphic `tags` table, entity_type="leads" ─
+
+const LEADS_TAG_ENTITY = "leads";
+
+export async function addLeadTag(leadId: string, value: string) {
+  await requireAdmin();
+  const trimmed = value.trim();
+  if (trimmed.length === 0) throw new Error("Valore richiesto");
+
+  await db
+    .insert(tags)
+    .values({ entity_type: LEADS_TAG_ENTITY, entity_id: leadId, name: trimmed })
+    .onConflictDoNothing();
+
+  revalidatePath("/admin/pipeline");
+  revalidatePath(`/admin/pipeline/${leadId}`);
+}
+
+export async function removeLeadTag(leadId: string, value: string) {
+  await requireAdmin();
+
+  await db
+    .delete(tags)
+    .where(
+      and(
+        eq(tags.entity_type, LEADS_TAG_ENTITY),
+        eq(tags.entity_id, leadId),
+        eq(tags.name, value)
+      )
+    );
+
+  revalidatePath("/admin/pipeline");
+  revalidatePath(`/admin/pipeline/${leadId}`);
+}
+
+export async function renameLeadTag(oldValue: string, newValue: string) {
+  await requireAdmin();
+  const next = newValue.trim();
+  if (next.length === 0) throw new Error("Nuovo nome richiesto");
+  if (next === oldValue) return;
+
+  await db
+    .update(tags)
+    .set({ name: next })
+    .where(and(eq(tags.entity_type, LEADS_TAG_ENTITY), eq(tags.name, oldValue)));
+
+  revalidatePath("/admin/pipeline");
+}
+
+// ── Transcript actions (Phase 20 — KB-02) ────────────────────────────────────
+
+const addTranscriptSchema = z.object({
+  lead_id: z.string().min(1),
+  title: z.string().optional(),
+  content: z.string().min(1, "Il testo del transcript è obbligatorio"),
+  call_date: z.string().regex(/^\d{4}-\d{2}-\d{2}$/, "Data non valida (YYYY-MM-DD)"),
+});
+
+export async function addTranscript(data: z.infer<typeof addTranscriptSchema>) {
+  await requireAdmin();
+
+  const parsed = addTranscriptSchema.safeParse(data);
+  if (!parsed.success) {
+    return { success: false, error: parsed.error.issues[0].message };
+  }
+
+  try {
+    const [transcript] = await db
+      .insert(clientTranscripts)
+      .values({
+        id: nanoid(),
+        lead_id: parsed.data.lead_id,
+        title: parsed.data.title || null,
+        content: parsed.data.content,
+        call_date: parsed.data.call_date,
+      })
+      .returning();
+
+    revalidatePath(`/admin/pipeline/${parsed.data.lead_id}`);
+    return { success: true, transcript };
+  } catch (error) {
+    console.error("addTranscript error:", error);
+    return { success: false, error: "Errore nel salvataggio del transcript" };
+  }
+}
+
+export async function deleteTranscript(transcriptId: string, leadId: string) {
+  await requireAdmin();
+
+  if (!transcriptId) throw new Error("ID transcript richiesto");
+
+  try {
+    await db
+      .delete(clientTranscripts)
+      .where(eq(clientTranscripts.id, transcriptId));
+
+    revalidatePath(`/admin/pipeline/${leadId}`);
+    return { success: true };
+  } catch (error) {
+    console.error("deleteTranscript error:", error);
+    return { success: false, error: "Errore nell'eliminazione del transcript" };
+  }
+}

src/app/admin/pipeline/page.tsx

@@ -0,0 +1,24 @@
+import { getLeadsWithTags, getLeadFieldOptions } from "@/lib/admin-queries";
+import { LeadsViewToggle } from "@/components/admin/leads/LeadsViewToggle";
+import { CreateLeadModal } from "@/components/admin/leads/LeadForm";
+import { PageHeader } from "@/components/admin/PageHeader";
+
+export const revalidate = 0;
+
+export default async function LeadsPage() {
+  const [leads, options] = await Promise.all([
+    getLeadsWithTags(),
+    getLeadFieldOptions(),
+  ]);
+
+  return (
+    <div className="space-y-6">
+      <PageHeader
+        title="Lead Pipeline"
+        subtitle="Gestisci e monitora i tuoi contatti commerciali"
+        action={<CreateLeadModal />}
+      />
+      <LeadsViewToggle leads={leads} options={options} />
+    </div>
+  );
+}