mantenimento-app 2.2.8 → 2.3.0

package/frontend/public/app.js

@@ -1,10 +1,10 @@
 const defaultExpenseItems = [
       { label: "🏠 Affitto", help: "Canone mensile di locazione dell'abitazione." },
-      { label: "🏡 Casa (valore locativo)", help: "Valore locativo teorico della casa in uso, se rilevante." },
       { label: "💡 Utenze", help: "Luce, gas, acqua, internet e altre utenze domestiche." },
       { label: "🛒 Cibo/Alimenti", help: "Spesa alimentare mensile imputabile al nucleo familiare." },
       { label: "👕 Abbigliamento", help: "Spese medie mensili per abbigliamento dei figli." },
       { label: "💳 Finanziamenti in corso (extra mutuo)", help: "Rate mensili di finanziamenti diversi dal mutuo." },
+      { label: "💳 Finanziamenti in corso (extra mutuo)", help: "Rate mensili di finanziamenti diversi dal mutuo." },
       { label: "🚗 Spese macchina", help: "Carburante, assicurazione, bollo, manutenzione ordinaria." },
       { label: "🏢 Amministrazione condominio", help: "Quote condominiali ordinarie e costi amministrativi ricorrenti." },
       { label: "🎒 Spese scolastiche/mensa", help: "Costi scolastici ricorrenti, mensa e contributi periodici." },
@@ -59,8 +59,8 @@ const defaultExpenseItems = [
         heroSubtitle: "Modello di calcolo orientativo adattato a <strong>reddito netto mensile/annuale</strong> oppure a <strong>CU (lordo annuale con stima del netto)</strong>, con inserimento spese separato per <strong>Coniuge 1</strong> e <strong>Coniuge 2</strong>.",
         quickActions: "Azioni rapide",
         btnReset: "Reset valori",
-        btnExport: "Esporta JSON cifrato",
-        btnImport: "Carica JSON cifrato",
+        btnExport: "Esporta JSON",
+        btnImport: "Carica JSON",
         btnPdf: "Genera e scarica PDF",
         btnZoomReset: "Reset",
         btnZoomOutTitle: "Riduci zoom",
@@ -133,6 +133,12 @@ const defaultExpenseItems = [
         authEmailNotVerified: "Email non verificata. Apri la mail di conferma e completa la verifica, poi riprova il login.",
         authInvalidCredentials: "Login fallito: credenziali non valide o utente non presente nel nuovo cloud. Usa Registrati solo se l'utente non e mai stato creato su Supabase.",
         authLoginFailed: "Login fallito: {message}",
+        authUrlLoginHttpsOnly: "Login da URL consentito solo in HTTPS.",
+        authUrlLoginMissingParams: "Login da URL ignorato: servono utente (o email) e password.",
+        authUrlLoginStarted: "Login automatico sicuro in corso...",
+        authUrlLoginPasswordDisabled: "Login da URL con password disabilitato per sicurezza. Usa authToken monouso.",
+        authUrlLoginTokenMissing: "Login da URL ignorato: manca authToken.",
+        authUrlLoginTokenExchangeFailed: "Login automatico sicuro fallito: {message}",
         authUserFallback: "utente",
         authLogoutDone: "Logout eseguito.",
         authLoginRequired: "Effettua prima il login.",
@@ -220,12 +226,21 @@ const defaultExpenseItems = [
         pdfPopupBlocked: "Il popup è stato bloccato dal browser. Consenti i popup per questo sito e riprova.",
         authLoginBeforeExportStatus: "Effettua il login KeyLock prima di esportare JSON cifrato.",
         authLoginBeforeExportAlert: "Per esportare, devi prima fare login KeyLock.",
-        authInvalidJsonFormat: "Formato JSON non valido: e richiesto un export cifrato KeyLock",
+        authInvalidJsonFormat: "Formato JSON non valido: e richiesto un export KeyLock valido (cifrato o non cifrato)",
         authLoginBeforeImport: "Effettua prima il login KeyLock per importare il file cifrato",
         authFileOwnedByOther: "Questo file appartiene a un altro utente KeyLock",
         authDecryptedContentInvalid: "Contenuto decifrato non valido",
         authEncryptedJsonImported: "JSON cifrato importato correttamente.",
         authEncryptedJsonLoaded: "Dati caricati da JSON cifrato.",
+        authExportModalTitle: "Esportazione JSON",
+        authExportModalWarning: "Per impostazione predefinita il file viene cifrato e puo essere importato solo dallo stesso utente KeyLock.",
+        authExportPlainCheckbox: "Esporta JSON non cifrato (compatibile con altri utenti)",
+        authExportPlainRisk: "Conferma esplicita richiesta: il file non cifrato puo essere letto da chiunque.",
+        authExportModalCancel: "Annulla",
+        authExportModalConfirm: "Conferma export",
+        authExportPlainFileWarning: "Attenzione: stai esportando un JSON non cifrato.",
+        authPlainJsonImported: "JSON non cifrato importato correttamente.",
+        authPlainJsonLoaded: "Dati caricati da JSON non cifrato.",
         authImportFailedStatus: "Import JSON fallito: {message}",
         authImportFailedAlert: "Impossibile caricare il JSON: {message}",
         spouse1Default: "Coniuge 1",
@@ -264,11 +279,13 @@ const defaultExpenseItems = [
         extraAnnHint2: "Quota annuale straordinaria stimata a carico di {spouse} (es. sanitarie non ricorrenti, scolastiche extra, attività non ordinarie).",
         extraMonthlyEstimate: "Quota mensile stimata: {amount}",
         firstHomeBoxTitle: "🏡 Mutuo prima casa ceduta",
-        firstHomeBoxNote: "Dichiara se esiste un mutuo sulla prima casa dei coniugi ceduta a uno dei due: il modello considera il trasferimento implicito quando la casa e assegnata al collocatario.",
-        firstHomeMortgageEnabledLabel: "Mutuo su prima casa dei coniugi",
-        firstHomeMortgageEnabledHint: "Attiva per includere il mutuo della prima casa ceduta nei benefici compensativi.",
+        firstHomeBoxNote: "Dichiara i benefici economici della prima casa assegnata: il modello considera sia il mutuo ceduto sia il valore locativo quando la casa e assegnata al collocatario.",
+        firstHomeMortgageEnabledLabel: "Benefici prima casa dei coniugi",
+        firstHomeMortgageEnabledHint: "Attiva per includere tra i benefici compensativi il mutuo ceduto e/o il valore locativo della casa assegnata.",
         firstHomeMortgageAmountLabel: "Rata mutuo mensile ({currency})",
         firstHomeMortgageAmountHint: "Importo mensile complessivo della rata del mutuo prima casa.",
+        firstHomeRentalValueLabel: "Casa (valore locativo) ({currency})",
+        firstHomeRentalValueHint: "Valore locativo mensile della casa assegnata, usato per valorizzare il beneficio economico implicito.",
         firstHomeAssignedToLabel: "Casa assegnata a",
         firstHomeAssignedToHint: "Seleziona il coniuge a cui e ceduta la prima casa.",
         firstHomeAssignedToNone: "Nessuna cessione",
@@ -280,14 +297,17 @@ const defaultExpenseItems = [
         calcNoTransferWithBenefits: "Nessun trasferimento monetario suggerito. Benefici gia allocati: {benefits}.",
         calcBenefitFamilyAllowance: "Assegno familiare INPS percepito da {spouse}",
         calcBenefitPrimaryHomeMortgage: "Quota mutuo prima casa ceduta al collocatario ({payer} -> {receiver})",
+        calcBenefitPrimaryHomeAssignment: "Assegnazione casa familiare (valore locativo) ({payer} -> {receiver})",
         pdfCompBenefitsSection: "Benefici compensativi gia allocati",
         pdfCompBenefitsItem: "Beneficio",
         pdfCompBenefitsAmount: "Valore {currency}/mese",
         pdfCompBenefitsNone: "Nessun beneficio compensativo aggiuntivo dichiarato.",
+        pdfCompBenefitsTotal: "Totale benefici allocati",
         pdfPrimaryHomeMortgage: "Mutuo prima casa ceduta",
         pdfPrimaryHomeNotDeclared: "Non dichiarato",
         pdfPrimaryHomeAssignedTo: "Assegnata a",
         pdfPrimaryHomeMonthlyAmount: "Rata mensile",
+        pdfPrimaryHomeRentalValue: "Casa (valore locativo)",
         pdfPrimaryHomeSplit: "Ripartizione mutuo",
         pdfPrimaryHomeAppliedOnlyColl: "Considerato solo se casa ceduta al collocatario.",
         pdfExtraordinaryRow: "Spese straordinarie (quota mensile da annuo)",
@@ -401,8 +421,8 @@ const defaultExpenseItems = [
         heroSubtitle: "Indicative calculation model based on <strong>monthly/yearly net income</strong> or <strong>CU gross yearly income (estimated monthly net)</strong>, with separate expense input for <strong>Spouse 1</strong> and <strong>Spouse 2</strong>.",
         quickActions: "Quick actions",
         btnReset: "Reset values",
-        btnExport: "Export encrypted JSON",
-        btnImport: "Import encrypted JSON",
+        btnExport: "Export JSON",
+        btnImport: "Import JSON",
         btnPdf: "Generate and download PDF",
         btnZoomReset: "Reset",
         btnZoomOutTitle: "Zoom out",
@@ -475,6 +495,12 @@ const defaultExpenseItems = [
         authEmailNotVerified: "Email not verified. Open your confirmation email and complete verification, then retry login.",
         authInvalidCredentials: "Login failed: invalid credentials or user not found in this cloud. Use Register only if the user was never created in Supabase.",
         authLoginFailed: "Login failed: {message}",
+        authUrlLoginHttpsOnly: "URL login is allowed only over HTTPS.",
+        authUrlLoginMissingParams: "URL login ignored: username/email and password are required.",
+        authUrlLoginStarted: "Secure automatic URL login in progress...",
+        authUrlLoginPasswordDisabled: "Password-in-URL login is disabled for security. Use one-time authToken.",
+        authUrlLoginTokenMissing: "URL login ignored: authToken is missing.",
+        authUrlLoginTokenExchangeFailed: "Secure automatic login failed: {message}",
         authUserFallback: "user",
         authLogoutDone: "Logout completed.",
         authLoginRequired: "Please login first.",
@@ -562,12 +588,21 @@ const defaultExpenseItems = [
         pdfPopupBlocked: "The popup was blocked by the browser. Allow popups for this site and try again.",
         authLoginBeforeExportStatus: "Please login to KeyLock before exporting encrypted JSON.",
         authLoginBeforeExportAlert: "You must login to KeyLock before exporting.",
-        authInvalidJsonFormat: "Invalid JSON format: an encrypted KeyLock export is required",
+        authInvalidJsonFormat: "Invalid JSON format: a valid KeyLock export is required (encrypted or unencrypted)",
         authLoginBeforeImport: "Login to KeyLock before importing the encrypted file",
         authFileOwnedByOther: "This file belongs to another KeyLock user",
         authDecryptedContentInvalid: "Invalid decrypted content",
         authEncryptedJsonImported: "Encrypted JSON imported successfully.",
         authEncryptedJsonLoaded: "Data loaded from encrypted JSON.",
+        authExportModalTitle: "JSON export",
+        authExportModalWarning: "By default, the file is encrypted and can only be imported by the same KeyLock user.",
+        authExportPlainCheckbox: "Export unencrypted JSON (compatible with other users)",
+        authExportPlainRisk: "Explicit confirmation required: unencrypted files can be read by anyone.",
+        authExportModalCancel: "Cancel",
+        authExportModalConfirm: "Confirm export",
+        authExportPlainFileWarning: "Warning: you are exporting an unencrypted JSON file.",
+        authPlainJsonImported: "Unencrypted JSON imported successfully.",
+        authPlainJsonLoaded: "Data loaded from unencrypted JSON.",
         authImportFailedStatus: "JSON import failed: {message}",
         authImportFailedAlert: "Unable to load JSON: {message}",
         spouse1Default: "Spouse 1",
@@ -606,11 +641,13 @@ const defaultExpenseItems = [
         extraAnnHint2: "Estimated yearly extraordinary share for {spouse} (e.g., non-recurring medical, extra school, non-ordinary activities).",
         extraMonthlyEstimate: "Estimated monthly share: {amount}",
         firstHomeBoxTitle: "🏡 Assigned primary home mortgage",
-        firstHomeBoxNote: "Declare whether there is a mortgage on the spouses' primary home assigned to one spouse: the model counts the implicit transfer when the home is assigned to the custodial parent.",
-        firstHomeMortgageEnabledLabel: "Mortgage on spouses' primary home",
-        firstHomeMortgageEnabledHint: "Enable to include the assigned primary-home mortgage in compensative benefits.",
+        firstHomeBoxNote: "Declare the economic benefits linked to the assigned primary home: the model counts both the transferred mortgage and the rental value when the home is assigned to the custodial parent.",
+        firstHomeMortgageEnabledLabel: "Primary-home benefits",
+        firstHomeMortgageEnabledHint: "Enable to include in compensative benefits the transferred mortgage and/or the rental value of the assigned home.",
         firstHomeMortgageAmountLabel: "Monthly mortgage payment ({currency})",
         firstHomeMortgageAmountHint: "Total monthly amount of the primary-home mortgage payment.",
+        firstHomeRentalValueLabel: "Home (rental value) ({currency})",
+        firstHomeRentalValueHint: "Monthly rental value of the assigned home, used to quantify the implicit economic benefit.",
         firstHomeAssignedToLabel: "Home assigned to",
         firstHomeAssignedToHint: "Select which spouse receives assignment of the primary home.",
         firstHomeAssignedToNone: "No assignment",
@@ -622,14 +659,17 @@ const defaultExpenseItems = [
         calcNoTransferWithBenefits: "No monetary transfer suggested. Already allocated benefits: {benefits}.",
         calcBenefitFamilyAllowance: "INPS family allowance received by {spouse}",
         calcBenefitPrimaryHomeMortgage: "Primary-home mortgage share assigned to custodial parent ({payer} -> {receiver})",
+        calcBenefitPrimaryHomeAssignment: "Assigned family home (rental value) ({payer} -> {receiver})",
         pdfCompBenefitsSection: "Compensative benefits already allocated",
         pdfCompBenefitsItem: "Benefit",
         pdfCompBenefitsAmount: "Value {currency}/month",
         pdfCompBenefitsNone: "No additional compensative benefits declared.",
+        pdfCompBenefitsTotal: "Total allocated benefits",
         pdfPrimaryHomeMortgage: "Assigned primary-home mortgage",
         pdfPrimaryHomeNotDeclared: "Not declared",
         pdfPrimaryHomeAssignedTo: "Assigned to",
         pdfPrimaryHomeMonthlyAmount: "Monthly payment",
+        pdfPrimaryHomeRentalValue: "Home (rental value)",
         pdfPrimaryHomeSplit: "Mortgage split",
         pdfPrimaryHomeAppliedOnlyColl: "Counted only when the home is assigned to the custodial parent.",
         pdfExtraordinaryRow: "Extraordinary expenses (monthly share from yearly)",
@@ -745,12 +785,13 @@ const defaultExpenseItems = [
       && !SUPABASE_ANON_KEY.includes("YOUR_PUBLIC_ANON_KEY")
         ? window.supabase.createClient(SUPABASE_URL, SUPABASE_ANON_KEY, {
             auth: {
-              persistSession: false,
-              autoRefreshToken: false,
+              persistSession: true,
+              autoRefreshToken: true,
               detectSessionInUrl: false
             }
           })
         : null;
+    const PROFILE_KEY_STORAGE_PREFIX = "m_profile_key_";
     const authSession = {
       username: null,
       email: null,
@@ -793,6 +834,7 @@ const defaultExpenseItems = [
       month: "",
       byMonth: {}
     };
+    let speseConvivenzaAutoMode = true;
     let currentLang = "it";
     let currentCurrency = "EUR";
       const CALC_API_BASE_STORAGE_KEY = "keylock_calc_api_base";
@@ -1152,6 +1194,12 @@ const defaultExpenseItems = [
       const btnZoomReset = document.getElementById("btnZoomReset");
       const btnZoomOut = document.getElementById("btnZoomOut");
       const btnZoomIn = document.getElementById("btnZoomIn");
+      const exportModeModalTitle = document.getElementById("exportModeModalTitle");
+      const exportModeModalWarning = document.getElementById("exportModeModalWarning");
+      const lblExportPlainJson = document.getElementById("lblExportPlainJson");
+      const exportModeModalRisk = document.getElementById("exportModeModalRisk");
+      const btnCancelExportMode = document.getElementById("btnCancelExportMode");
+      const btnConfirmExportMode = document.getElementById("btnConfirmExportMode");
       const lblLang = document.getElementById("lblLang");
       const lblCurrency = document.getElementById("lblCurrency");
       const authHead = document.getElementById("authHead");
@@ -1174,6 +1222,8 @@ const defaultExpenseItems = [
       const hintPrimaCasaMutuoEnabled = document.getElementById("hintPrimaCasaMutuoEnabled");
       const lblPrimaCasaMutuoImporto = document.getElementById("lblPrimaCasaMutuoImporto");
       const hintPrimaCasaMutuoImporto = document.getElementById("hintPrimaCasaMutuoImporto");
+      const lblPrimaCasaValoreLocativo = document.getElementById("lblPrimaCasaValoreLocativo");
+      const hintPrimaCasaValoreLocativo = document.getElementById("hintPrimaCasaValoreLocativo");
       const lblPrimaCasaAssegnataA = document.getElementById("lblPrimaCasaAssegnataA");
       const hintPrimaCasaAssegnataA = document.getElementById("hintPrimaCasaAssegnataA");
       const lblPrimaCasaMutuoPerc1 = document.getElementById("lblPrimaCasaMutuoPerc1");
@@ -1197,6 +1247,12 @@ const defaultExpenseItems = [
       if (btnExport) btnExport.textContent = tr("btnExport");
       if (btnImport) btnImport.textContent = tr("btnImport");
       if (btnPdf) btnPdf.textContent = tr("btnPdf");
+      if (exportModeModalTitle) exportModeModalTitle.textContent = tr("authExportModalTitle");
+      if (exportModeModalWarning) exportModeModalWarning.textContent = tr("authExportModalWarning");
+      if (lblExportPlainJson) lblExportPlainJson.textContent = tr("authExportPlainCheckbox");
+      if (exportModeModalRisk) exportModeModalRisk.textContent = tr("authExportPlainRisk");
+      if (btnCancelExportMode) btnCancelExportMode.textContent = tr("authExportModalCancel");
+      if (btnConfirmExportMode) btnConfirmExportMode.textContent = tr("authExportModalConfirm");
       if (btnZoomReset) btnZoomReset.textContent = tr("btnZoomReset");
       if (btnZoomOut) btnZoomOut.title = tr("btnZoomOutTitle");
       if (btnZoomIn) btnZoomIn.title = tr("btnZoomInTitle");
@@ -1231,6 +1287,8 @@ const defaultExpenseItems = [
       if (hintPrimaCasaMutuoEnabled) hintPrimaCasaMutuoEnabled.title = tr("firstHomeMortgageEnabledHint");
       if (lblPrimaCasaMutuoImporto) lblPrimaCasaMutuoImporto.textContent = msg("firstHomeMortgageAmountLabel", { currency: currentCurrency });
       if (hintPrimaCasaMutuoImporto) hintPrimaCasaMutuoImporto.title = tr("firstHomeMortgageAmountHint");
+      if (lblPrimaCasaValoreLocativo) lblPrimaCasaValoreLocativo.textContent = msg("firstHomeRentalValueLabel", { currency: currentCurrency });
+      if (hintPrimaCasaValoreLocativo) hintPrimaCasaValoreLocativo.title = tr("firstHomeRentalValueHint");
       if (lblPrimaCasaAssegnataA) lblPrimaCasaAssegnataA.textContent = tr("firstHomeAssignedToLabel");
       if (hintPrimaCasaAssegnataA) hintPrimaCasaAssegnataA.title = tr("firstHomeAssignedToHint");
       if (lblPrimaCasaMutuoPerc1) lblPrimaCasaMutuoPerc1.textContent = msg("firstHomeSplitLabel", { spouse: c1n() });
@@ -1598,6 +1656,32 @@ const defaultExpenseItems = [
       return /^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(String(value || "").trim());
     }
 
+    function userHasServerDonorEntitlement(user) {
+      const safeUser = user && typeof user === "object" ? user : {};
+      const userMeta = safeUser.user_metadata && typeof safeUser.user_metadata === "object"
+        ? safeUser.user_metadata
+        : {};
+      const appMeta = safeUser.app_metadata && typeof safeUser.app_metadata === "object"
+        ? safeUser.app_metadata
+        : {};
+
+      const truthy = (value) => {
+        if (value === true || value === 1) return true;
+        const normalized = String(value || "").trim().toLowerCase();
+        return normalized === "1" || normalized === "true" || normalized === "yes" || normalized === "on";
+      };
+
+      const roleValue = String(userMeta.role || appMeta.role || "").trim().toLowerCase();
+      if (roleValue === "donor" || roleValue === "premium") return true;
+
+      return truthy(userMeta.is_donor)
+        || truthy(userMeta.isDonor)
+        || truthy(userMeta.premium)
+        || truthy(appMeta.is_donor)
+        || truthy(appMeta.isDonor)
+        || truthy(appMeta.premium);
+    }
+
     const PRIMARY_PSEUDO_EMAIL_DOMAIN = "keylock-auth.app";
     function buildPseudoEmailCandidates(username) {
       const base = normalizeUsername(username);
@@ -1697,7 +1781,8 @@ const defaultExpenseItems = [
       authSession.email = normalizeEmail(user && user.email ? user.email : "");
       authSession.userId = user.id;
       authSession.keyBits = await deriveSessionKeyBits(password, user.id);
-      authSession.isDonor = localStorage.getItem(`m_donor_${user.id}`) === "1";
+      authSession.isDonor = userHasServerDonorEntitlement(user);
+      saveProfileKeyForUser(user.id, authSession.keyBits);
       updateAuthUi();
       return msg("authLoginAs", { username });
     }
@@ -1719,6 +1804,32 @@ const defaultExpenseItems = [
       return out;
     }
 
+    function saveProfileKeyForUser(userId, keyBits) {
+      try {
+        if (!userId || !(keyBits instanceof Uint8Array) || keyBits.length !== 32) return;
+        localStorage.setItem(`${PROFILE_KEY_STORAGE_PREFIX}${userId}`, bytesToBase64(keyBits));
+      } catch (_) {}
+    }
+
+    function loadProfileKeyForUser(userId) {
+      try {
+        if (!userId) return null;
+        const stored = String(localStorage.getItem(`${PROFILE_KEY_STORAGE_PREFIX}${userId}`) || "").trim();
+        if (!stored) return null;
+        const bytes = base64ToBytes(stored);
+        return bytes && bytes.length === 32 ? bytes : null;
+      } catch (_) {
+        return null;
+      }
+    }
+
+    function clearProfileKeyForUser(userId) {
+      try {
+        if (!userId) return;
+        localStorage.removeItem(`${PROFILE_KEY_STORAGE_PREFIX}${userId}`);
+      } catch (_) {}
+    }
+
     function decodeBytesFlexible(value) {
       const raw = String(value || "").trim();
       if (!raw) return null;
@@ -2480,7 +2591,164 @@ const defaultExpenseItems = [
       }
     }
 
+    function clearSensitiveAuthQueryParams() {
+      try {
+        const currentUrl = new URL(window.location.href);
+        const params = currentUrl.searchParams;
+        const hashParams = new URLSearchParams(String(currentUrl.hash || "").replace(/^#/, ""));
+        const keys = ["autologin", "authUser", "authEmail", "authPass", "authPass64", "authToken"];
+        let changed = false;
+        keys.forEach((key) => {
+          if (params.has(key)) {
+            params.delete(key);
+            changed = true;
+          }
+          if (hashParams.has(key)) {
+            hashParams.delete(key);
+            changed = true;
+          }
+        });
+        if (!changed) return;
+        const nextSearch = params.toString();
+        const nextHash = hashParams.toString();
+        const nextUrl = `${currentUrl.pathname}${nextSearch ? `?${nextSearch}` : ""}${nextHash ? `#${nextHash}` : ""}`;
+        window.history.replaceState({}, "", nextUrl);
+      } catch (_) {}
+    }
+
+    async function restorePersistedAuthSession() {
+      try {
+        if (!(supabaseClient && supabaseClient.auth && typeof supabaseClient.auth.getSession === "function")) return;
+        const sessionRes = await supabaseClient.auth.getSession();
+        const session = sessionRes && sessionRes.data ? sessionRes.data.session : null;
+        const user = session && session.user ? session.user : null;
+        if (!user || !user.id) return;
+
+        const userMeta = user && user.user_metadata ? user.user_metadata : {};
+        const effectiveUsername = normalizeUsername(userMeta.username || "")
+          || normalizeUsername(String(user.email || "").split("@")[0])
+          || tr("authUserFallback");
+
+        authSession.username = effectiveUsername;
+        authSession.email = normalizeEmail(user.email || "");
+        authSession.userId = user.id;
+        authSession.keyBits = loadProfileKeyForUser(user.id);
+        authSession.isDonor = userHasServerDonorEntitlement(user);
+        updateAuthUi();
+
+        if (authSession.keyBits) {
+          await loadScenarioForLoggedUser({ silentNoData: true, fromLogin: true });
+        }
+      } catch (_) {}
+    }
+
+    async function maybeAutoLoginFromUrl() {
+      try {
+        const params = new URLSearchParams(window.location.search || "");
+        const hasAnyAutoAuthParam = ["autologin", "authUser", "authEmail", "authPass", "authPass64", "authToken"].some((key) => params.has(key));
+        if (!hasAnyAutoAuthParam) return;
+
+        const force = String(params.get("autologin") || "1").trim().toLowerCase();
+        if (!(force === "1" || force === "true" || force === "yes" || force === "on")) return;
+
+        const isHttps = window.location.protocol === "https:" || window.location.hostname === "localhost";
+        if (!isHttps) {
+          clearSensitiveAuthQueryParams();
+          setAuthStatus(tr("authUrlLoginHttpsOnly"), true);
+          return;
+        }
+
+        const hasLegacyPasswordParams = params.has("authPass") || params.has("authPass64") || params.has("authUser") || params.has("authEmail");
+        if (hasLegacyPasswordParams) {
+          clearSensitiveAuthQueryParams();
+          setAuthStatus(tr("authUrlLoginPasswordDisabled"), true);
+          return;
+        }
+
+        const authToken = String(params.get("authToken") || "").trim();
+        const hashParams = new URLSearchParams(String(window.location.hash || "").replace(/^#/, ""));
+        const hashToken = String(hashParams.get("authToken") || "").trim();
+        const tokenForExchange = authToken || hashToken;
+        if (!tokenForExchange) {
+          clearSensitiveAuthQueryParams();
+          setAuthStatus(tr("authUrlLoginTokenMissing"), true);
+          return;
+        }
+
+        const apiBase = resolveCalculationApiBase();
+        if (!apiBase) {
+          clearSensitiveAuthQueryParams();
+          setAuthStatus(msg("authUrlLoginTokenExchangeFailed", { message: "API base non configurata" }), true);
+          return;
+        }
+
+        setAuthMode("login");
+        setAuthStatus(tr("authUrlLoginStarted"), false);
+        const response = await fetch(`${apiBase}/api/auth/url-login/exchange`, {
+          method: "POST",
+          headers: {
+            "Content-Type": "application/json"
+          },
+          body: JSON.stringify({ token: tokenForExchange })
+        });
+
+        const payload = await response.json().catch(() => ({}));
+        if (!response.ok || !payload || !payload.ok || !payload.session) {
+          clearSensitiveAuthQueryParams();
+          const reason = String(payload && payload.error ? payload.error : `HTTP ${response.status}`);
+          setAuthStatus(msg("authUrlLoginTokenExchangeFailed", { message: reason }), true);
+          return;
+        }
+
+        if (!(supabaseClient && supabaseClient.auth && typeof supabaseClient.auth.setSession === "function")) {
+          clearSensitiveAuthQueryParams();
+          setAuthStatus(msg("authUrlLoginTokenExchangeFailed", { message: "Supabase non configurato" }), true);
+          return;
+        }
+
+        const accessToken = String(payload.session.access_token || "");
+        const refreshToken = String(payload.session.refresh_token || "");
+        if (!accessToken || !refreshToken) {
+          clearSensitiveAuthQueryParams();
+          setAuthStatus(msg("authUrlLoginTokenExchangeFailed", { message: "sessione non valida" }), true);
+          return;
+        }
+
+        const setSessionRes = await supabaseClient.auth.setSession({
+          access_token: accessToken,
+          refresh_token: refreshToken
+        });
+        if (setSessionRes.error || !setSessionRes.data || !setSessionRes.data.user || !setSessionRes.data.session) {
+          clearSensitiveAuthQueryParams();
+          const reason = String(setSessionRes.error && setSessionRes.error.message ? setSessionRes.error.message : "sessione Supabase non impostabile");
+          setAuthStatus(msg("authUrlLoginTokenExchangeFailed", { message: reason }), true);
+          return;
+        }
+
+        const user = setSessionRes.data.user;
+        const userMeta = user && user.user_metadata ? user.user_metadata : {};
+        const effectiveUsername = normalizeUsername(userMeta.username || "")
+          || normalizeUsername(String(user.email || "").split("@")[0])
+          || tr("authUserFallback");
+        const profileKeyBytes = decodeBytesFlexible(payload.session.profile_key || "");
+
+        authSession.username = effectiveUsername;
+        authSession.email = normalizeEmail(user.email || "");
+        authSession.userId = user.id;
+        authSession.keyBits = profileKeyBytes && profileKeyBytes.length === 32
+          ? profileKeyBytes
+          : await deriveSessionKeyBits(tokenForExchange, user.id);
+        authSession.isDonor = userHasServerDonorEntitlement(user);
+        saveProfileKeyForUser(user.id, authSession.keyBits);
+        updateAuthUi();
+        await loadScenarioForLoggedUser({ silentNoData: true, fromLogin: true });
+
+        clearSensitiveAuthQueryParams();
+      } catch (_) {}
+    }
+
     async function logoutKeyLockUser() {
+      const previousUserId = authSession.userId;
       if (supabaseClient) {
         await supabaseClient.auth.signOut();
       }
@@ -2489,6 +2757,7 @@ const defaultExpenseItems = [
       authSession.userId = null;
       authSession.keyBits = null;
       authSession.isDonor = false;
+      clearProfileKeyForUser(previousUserId);
       cloudProfileSession.loaded = null;
       cloudProfileSession.history = [];
       updateAuthUi();
@@ -3093,6 +3362,27 @@ const defaultExpenseItems = [
       return base + extra;
     }
 
+    function getSuggestedSpeseConvivenza() {
+      const suggested = sumSpese("c1") + sumSpese("c2");
+      return Math.max(0, Math.round(Number(suggested || 0)));
+    }
+
+    function maybeAutoFillSpeseConvivenza() {
+      if (!speseConvivenzaAutoMode) return;
+      const input = document.getElementById("speseConvivenza");
+      if (!input) return;
+
+      const current = num("speseConvivenza");
+      if (current > 0.005) {
+        speseConvivenzaAutoMode = false;
+        return;
+      }
+
+      const suggested = getSuggestedSpeseConvivenza();
+      if (suggested <= 0) return;
+      input.value = String(suggested);
+    }
+
     /**
      * Stima il netto mensile da reddito lordo annuale (Certificazione Unica).
      * Applica: contributi INPS dipendente (9,19%), IRPEF 2025, detrazioni da
@@ -3311,6 +3601,7 @@ const defaultExpenseItems = [
         aFam2: num("assegnoFam2"),
         primaCasaMutuoEnabled: firstHome.enabled ? 1 : 0,
         primaCasaMutuoImporto: firstHome.amount,
+        primaCasaValoreLocativo: firstHome.rentalValue,
         primaCasaAssegnataA: firstHome.assignedTo,
         primaCasaMutuoPerc1: firstHome.share1,
         straordAnn1: num("straordAnn1"),
@@ -3352,6 +3643,7 @@ const defaultExpenseItems = [
       const aFam2 = Number(payload.aFam2 || 0);
       const primaCasaMutuoEnabled = Number(payload.primaCasaMutuoEnabled || 0) > 0;
       const primaCasaMutuoImporto = Math.max(0, Number(payload.primaCasaMutuoImporto || 0));
+      const primaCasaValoreLocativo = Math.max(0, Number(payload.primaCasaValoreLocativo || 0));
       const primaCasaAssegnataA = (String(payload.primaCasaAssegnataA || "") === "1" || String(payload.primaCasaAssegnataA || "") === "2")
         ? String(payload.primaCasaAssegnataA)
         : "";
@@ -3413,9 +3705,10 @@ const defaultExpenseItems = [
       const assegnoBaseDa1a2 = assegnoDa1a2;
       const assegnoBaseDa2a1 = assegnoDa2a1;
 
-      const primaCasaConsidered = primaCasaMutuoEnabled && primaCasaMutuoImporto > 0
+      const primaCasaAssignmentConsidered = primaCasaMutuoEnabled
         && primaCasaAssegnataA !== ""
         && Number(primaCasaAssegnataA) === collocatario;
+      const primaCasaConsidered = primaCasaAssignmentConsidered && primaCasaMutuoImporto > 0;
       let primaCasaTransfer1to2 = 0;
       let primaCasaTransfer2to1 = 0;
       if (primaCasaConsidered) {
@@ -3426,14 +3719,27 @@ const defaultExpenseItems = [
         }
       }
 
-      assegnoDa1a2 = Math.max(0, assegnoDa1a2 - primaCasaTransfer1to2);
-      assegnoDa2a1 = Math.max(0, assegnoDa2a1 - primaCasaTransfer2to1);
+      const primaCasaLocativeConsidered = primaCasaAssignmentConsidered && primaCasaValoreLocativo > 0;
+      let primaCasaLocativeTransfer1to2 = 0;
+      let primaCasaLocativeTransfer2to1 = 0;
+      if (primaCasaLocativeConsidered) {
+        if (primaCasaAssegnataA === "1") {
+          primaCasaLocativeTransfer2to1 = primaCasaValoreLocativo;
+        } else if (primaCasaAssegnataA === "2") {
+          primaCasaLocativeTransfer1to2 = primaCasaValoreLocativo;
+        }
+      }
+
+      assegnoDa1a2 = Math.max(0, assegnoDa1a2 - primaCasaTransfer1to2 - primaCasaLocativeTransfer1to2);
+      assegnoDa2a1 = Math.max(0, assegnoDa2a1 - primaCasaTransfer2to1 - primaCasaLocativeTransfer2to1);
 
       const compensativeBenefits = [];
       if (aFam1 > 0.005) compensativeBenefits.push({ type: "family", to: 1, amount: aFam1 });
       if (aFam2 > 0.005) compensativeBenefits.push({ type: "family", to: 2, amount: aFam2 });
       if (primaCasaTransfer1to2 > 0.005) compensativeBenefits.push({ type: "primary-home-mortgage", from: 1, to: 2, amount: primaCasaTransfer1to2 });
       if (primaCasaTransfer2to1 > 0.005) compensativeBenefits.push({ type: "primary-home-mortgage", from: 2, to: 1, amount: primaCasaTransfer2to1 });
+      if (primaCasaLocativeTransfer1to2 > 0.005) compensativeBenefits.push({ type: "primary-home-assignment", from: 1, to: 2, amount: primaCasaLocativeTransfer1to2 });
+      if (primaCasaLocativeTransfer2to1 > 0.005) compensativeBenefits.push({ type: "primary-home-assignment", from: 2, to: 1, amount: primaCasaLocativeTransfer2to1 });
 
       const post1 = disp1 - assegnoDa1a2 + assegnoDa2a1;
       const post2 = disp2 - assegnoDa2a1 + assegnoDa1a2;
@@ -3489,9 +3795,10 @@ const defaultExpenseItems = [
         quotaDiretta1, quotaDiretta2,
         saldo1, saldo2,
         assegnoBaseDa1a2, assegnoBaseDa2a1,
-        primaCasaMutuoEnabled, primaCasaMutuoImporto, primaCasaAssegnataA,
+        primaCasaMutuoEnabled, primaCasaMutuoImporto, primaCasaValoreLocativo, primaCasaAssegnataA,
         primaCasaMutuoPerc1, primaCasaMutuoPerc2,
-        primaCasaConsidered, primaCasaTransfer1to2, primaCasaTransfer2to1,
+        primaCasaAssignmentConsidered, primaCasaConsidered, primaCasaTransfer1to2, primaCasaTransfer2to1,
+        primaCasaLocativeConsidered, primaCasaLocativeTransfer1to2, primaCasaLocativeTransfer2to1,
         compensativeBenefits,
         assegnoDa1a2, assegnoDa2a1,
         post1, post2,
@@ -3593,16 +3900,18 @@ const defaultExpenseItems = [
     function getFirstHomeMortgageInput() {
       const enabled = !!document.getElementById("primaCasaMutuoEnabled")?.checked;
       const amount = Math.max(0, num("primaCasaMutuoImporto"));
+      const rentalValue = Math.max(0, num("primaCasaValoreLocativo"));
       const assignedToRaw = String(document.getElementById("primaCasaAssegnataA")?.value || "").trim();
       const assignedTo = (assignedToRaw === "1" || assignedToRaw === "2") ? assignedToRaw : "";
       const share1 = Math.min(100, Math.max(0, num("primaCasaMutuoPerc1")));
       const share2 = 100 - share1;
-      return { enabled, amount, assignedTo, share1, share2 };
+      return { enabled, amount, rentalValue, assignedTo, share1, share2 };
     }
 
     function updateFirstHomeMortgageUi() {
       const enabledEl = document.getElementById("primaCasaMutuoEnabled");
       const amountEl = document.getElementById("primaCasaMutuoImporto");
+      const rentalValueEl = document.getElementById("primaCasaValoreLocativo");
       const assignedEl = document.getElementById("primaCasaAssegnataA");
       const shareEl = document.getElementById("primaCasaMutuoPerc1");
       const splitInfoEl = document.getElementById("primaCasaMutuoSplitInfo");
@@ -3618,6 +3927,7 @@ const defaultExpenseItems = [
 
       const isEnabled = !!enabledEl.checked;
       amountEl.disabled = !isEnabled;
+      if (rentalValueEl) rentalValueEl.disabled = !isEnabled;
       assignedEl.disabled = !isEnabled;
       shareEl.disabled = !isEnabled;
       if (splitWrapEl) splitWrapEl.classList.toggle("is-disabled", !isEnabled);
@@ -3642,6 +3952,8 @@ const defaultExpenseItems = [
         });
       }
       if (splitCenterEl) splitCenterEl.textContent = `${normalizedShare1.toFixed(0)}% / ${share2.toFixed(0)}%`;
+      const splitRangeWrapEl = shareEl.closest(".mortgage-split-range-wrap");
+      if (splitRangeWrapEl) splitRangeWrapEl.style.setProperty("--split-left", `${normalizedShare1.toFixed(0)}%`);
       if (splitLeftNameEl) splitLeftNameEl.textContent = c1n();
       if (splitRightNameEl) splitRightNameEl.textContent = c2n();
       if (splitLeftAmountEl) splitLeftAmountEl.textContent = eur(quota1);
@@ -4333,6 +4645,29 @@ const defaultExpenseItems = [
         return `<span class="spieg-help-wrap"><button type="button" class="spieg-help-btn" aria-label="${tooltipLabel}">i</button><span class="spieg-help-tip">${safeText}</span></span>`;
       };
 
+      let benefitSectionHtml = "";
+      if (compBenefits.length) {
+        const rawBenefs = Array.isArray(m.compensativeBenefits)
+          ? m.compensativeBenefits.filter((r) => r && Number(r.amount || 0) > 0.005)
+          : [];
+        const typeIcons = { family: "\uD83C\uDFDB", "primary-home-mortgage": "\uD83C\uDFE1", "primary-home-assignment": "\uD83C\uDFE0" };
+        const cardsHtml = compBenefits
+          .map((row, i) => {
+            const icon = (rawBenefs[i] && typeIcons[rawBenefs[i].type]) || "\u2726";
+            return `<li class="spieg-benefit-card"><span class="spieg-benefit-icon">${icon}</span><span class="spieg-benefit-label">${escapeHtml(row.label)}</span><strong class="spieg-benefit-amount">${eur(row.amount)}</strong></li>`;
+          })
+          .join("");
+        const total = compBenefits.reduce((s, r) => s + r.amount, 0);
+        const totalLabel = currentLang === "en" ? "Total allocated benefits" : "Totale benefici allocati";
+        benefitSectionHtml = `
+          <div class="spieg-benefits-section">
+            <div class="spieg-benefits-label">&#127873;&ensp;${escapeHtml(tr("calcCompBenefitsLabel"))}</div>
+            <ul class="spieg-benefits-cards">${cardsHtml}</ul>
+            <div class="spieg-benefits-total"><span>${escapeHtml(totalLabel)}</span><strong>${eur(total)}</strong></div>
+          </div>
+        `;
+      }
+
       let resultHtml;
       let resultDetail;
       if (isAssegno1) {
@@ -4340,6 +4675,7 @@ const defaultExpenseItems = [
           <div class="spieg-result-flow">${n1} &rarr; ${n2}</div>
           <div class="spieg-result-formula">${n1}: ${eur(m.quotaTeorica1)} &minus; ${eur(m.quotaDiretta1)}</div>
           <div class="spieg-result-amount ok">${eur(m.assegnoDa1a2)}</div>
+          ${benefitSectionHtml}
         `;
         resultDetail = tr("spiegDetailResultTransfer");
       } else if (isAssegno2) {
@@ -4347,30 +4683,14 @@ const defaultExpenseItems = [
           <div class="spieg-result-flow">${n2} &rarr; ${n1}</div>
           <div class="spieg-result-formula">${n2}: ${eur(m.quotaTeorica2)} &minus; ${eur(m.quotaDiretta2)}</div>
           <div class="spieg-result-amount ok">${eur(m.assegnoDa2a1)}</div>
+          ${benefitSectionHtml}
         `;
         resultDetail = tr("spiegDetailResultTransfer");
       } else {
-        const benefitRows = getCompensativeBenefitRows(m, c1n(), c2n());
-        if (benefitRows.length) {
-          const rawBenefs = Array.isArray(m.compensativeBenefits)
-            ? m.compensativeBenefits.filter((r) => r && Number(r.amount || 0) > 0.005)
-            : [];
-          const typeIcons = { family: "\uD83C\uDFDB", "primary-home-mortgage": "\uD83C\uDFE1" };
-          const cardsHtml = benefitRows
-            .map((row, i) => {
-              const icon = (rawBenefs[i] && typeIcons[rawBenefs[i].type]) || "\u2726";
-              return `<li class="spieg-benefit-card"><span class="spieg-benefit-icon">${icon}</span><span class="spieg-benefit-label">${escapeHtml(row.label)}</span><strong class="spieg-benefit-amount">${eur(row.amount)}</strong></li>`;
-            })
-            .join("");
-          const total = benefitRows.reduce((s, r) => s + r.amount, 0);
-          const totalLabel = currentLang === "en" ? "Total allocated benefits" : "Totale benefici allocati";
+        if (benefitSectionHtml) {
           resultHtml = `
             <div class="spieg-no-transfer-badge">&#9878;&#65039;&ensp;${escapeHtml(tr("calcNoTransferSuggested"))}</div>
-            <div class="spieg-benefits-section">
-              <div class="spieg-benefits-label">&#127873;&ensp;${escapeHtml(tr("calcCompBenefitsLabel"))}</div>
-              <ul class="spieg-benefits-cards">${cardsHtml}</ul>
-              <div class="spieg-benefits-total"><span>${escapeHtml(totalLabel)}</span><strong>${eur(total)}</strong></div>
-            </div>
+            ${benefitSectionHtml}
           `;
         } else {
           resultHtml = `<div class="spieg-result-empty ok">${tr("calcNoTransferSuggested")}</div>`;
@@ -4454,6 +4774,11 @@ const defaultExpenseItems = [
             const receiver = Number(row.to) === 2 ? name2 : name1;
             return { label: msg("calcBenefitPrimaryHomeMortgage", { payer, receiver }), amount };
           }
+          if (row.type === "primary-home-assignment") {
+            const payer = Number(row.from) === 2 ? name2 : name1;
+            const receiver = Number(row.to) === 2 ? name2 : name1;
+            return { label: msg("calcBenefitPrimaryHomeAssignment", { payer, receiver }), amount };
+          }
           return { label: tr("calcCompBenefitsLabel"), amount };
         });
     }
@@ -4534,6 +4859,30 @@ const defaultExpenseItems = [
         ${m.incomeMode === "cu" ? `<br /><strong>${tr("calcIncomeBaseNote")}</strong> ${tr("cuNetNoteText")}` : ""}
       `;
 
+      const benefitRows = getCompensativeBenefitRows(m, c1n(), c2n());
+      let benefitCardsHtml = "";
+      if (benefitRows.length) {
+        const rawBenefs = Array.isArray(m.compensativeBenefits)
+          ? m.compensativeBenefits.filter((r) => r && Number(r.amount || 0) > 0.005)
+          : [];
+        const typeIcons = { family: "\uD83C\uDFDB", "primary-home-mortgage": "\uD83C\uDFE1", "primary-home-assignment": "\uD83C\uDFE0" };
+        const cardsHtml = benefitRows
+          .map((row, i) => {
+            const icon = (rawBenefs[i] && typeIcons[rawBenefs[i].type]) || "\u2726";
+            return `<li class="spieg-benefit-card"><span class="spieg-benefit-icon">${icon}</span><span class="spieg-benefit-label">${escapeHtml(row.label)}</span><strong class="spieg-benefit-amount">${eur(row.amount)}</strong></li>`;
+          })
+          .join("");
+        const total = benefitRows.reduce((s, r) => s + r.amount, 0);
+        const totalLabel = currentLang === "en" ? "Total allocated benefits" : "Totale benefici allocati";
+        benefitCardsHtml = `
+          <div class="result-benefits-box">
+            <div class="spieg-benefits-label">&#127873;&ensp;${escapeHtml(tr("calcCompBenefitsLabel"))}</div>
+            <ul class="spieg-benefits-cards">${cardsHtml}</ul>
+            <div class="spieg-benefits-total"><span>${escapeHtml(totalLabel)}</span><strong>${eur(total)}</strong></div>
+          </div>
+        `;
+      }
+
       let mainHtml;
       if (m.assegnoDa1a2 > 0.005) {
         const perChild = m.figli > 1 ? `<div class="result-transfer-child">${eur(m.assegnoDa1a2 / m.figli)}&thinsp;${escapeHtml(currentLang === "en" ? "per child" : "per figlio")}</div>` : "";
@@ -4545,6 +4894,7 @@ const defaultExpenseItems = [
           </div>
           <div class="result-transfer-value">${eur(m.assegnoDa1a2)}<span class="result-transfer-per">&thinsp;${escapeHtml(tr("pdfPerMonth"))}</span></div>
           ${perChild}
+          ${benefitCardsHtml}
         `;
       } else if (m.assegnoDa2a1 > 0.005) {
         const perChild = m.figli > 1 ? `<div class="result-transfer-child">${eur(m.assegnoDa2a1 / m.figli)}&thinsp;${escapeHtml(currentLang === "en" ? "per child" : "per figlio")}</div>` : "";
@@ -4556,31 +4906,9 @@ const defaultExpenseItems = [
           </div>
           <div class="result-transfer-value">${eur(m.assegnoDa2a1)}<span class="result-transfer-per">&thinsp;${escapeHtml(tr("pdfPerMonth"))}</span></div>
           ${perChild}
+          ${benefitCardsHtml}
         `;
       } else {
-        const benefitRows = getCompensativeBenefitRows(m, c1n(), c2n());
-        let benefitCardsHtml = "";
-        if (benefitRows.length) {
-          const rawBenefs = Array.isArray(m.compensativeBenefits)
-            ? m.compensativeBenefits.filter((r) => r && Number(r.amount || 0) > 0.005)
-            : [];
-          const typeIcons = { family: "\uD83C\uDFDB", "primary-home-mortgage": "\uD83C\uDFE1" };
-          const cardsHtml = benefitRows
-            .map((row, i) => {
-              const icon = (rawBenefs[i] && typeIcons[rawBenefs[i].type]) || "\u2726";
-              return `<li class="spieg-benefit-card"><span class="spieg-benefit-icon">${icon}</span><span class="spieg-benefit-label">${escapeHtml(row.label)}</span><strong class="spieg-benefit-amount">${eur(row.amount)}</strong></li>`;
-            })
-            .join("");
-          const total = benefitRows.reduce((s, r) => s + r.amount, 0);
-          const totalLabel = currentLang === "en" ? "Total allocated benefits" : "Totale benefici allocati";
-          benefitCardsHtml = `
-            <div class="result-benefits-box">
-              <div class="spieg-benefits-label">&#127873;&ensp;${escapeHtml(tr("calcCompBenefitsLabel"))}</div>
-              <ul class="spieg-benefits-cards">${cardsHtml}</ul>
-              <div class="spieg-benefits-total"><span>${escapeHtml(totalLabel)}</span><strong>${eur(total)}</strong></div>
-            </div>
-          `;
-        }
         mainHtml = `<div class="spieg-no-transfer-badge">&#9878;&#65039;&ensp;${escapeHtml(tr("calcNoTransferSuggested"))}</div>${benefitCardsHtml}`;
       }
       resultMain.innerHTML = mainHtml;
@@ -4656,6 +4984,7 @@ const defaultExpenseItems = [
             if (!input) return;
             const suggested = Math.max(0, Math.round(Number(m.speseTot || 0)));
             input.value = String(suggested);
+            speseConvivenzaAutoMode = false;
             input.focus();
             renderAll();
           });
@@ -4719,6 +5048,7 @@ const defaultExpenseItems = [
     }
 
     function renderAll() {
+      maybeAutoFillSpeseConvivenza();
       const m = computeModel();
       updateExtraordinaryModuleUi();
       updateExpensePartials();
@@ -4812,27 +5142,49 @@ const defaultExpenseItems = [
         ? `
         <tr><td>${tr("pdfPrimaryHomeAssignedTo")}</td><td>${primaryHomeAssignedLabel}</td></tr>
         <tr><td>${tr("pdfPrimaryHomeMonthlyAmount")}</td><td>${eur(m.primaCasaMutuoImporto || 0)}</td></tr>
+        <tr><td>${tr("pdfPrimaryHomeRentalValue")}</td><td>${eur(m.primaCasaValoreLocativo || 0)}</td></tr>
         <tr><td>${tr("pdfPrimaryHomeSplit")}</td><td>${c1NameEsc} ${(m.primaCasaMutuoPerc1 || 0).toFixed(0)}% · ${c2NameEsc} ${(m.primaCasaMutuoPerc2 || 0).toFixed(0)}%</td></tr>
         <tr><td>${tr("pdfPrimaryHomeAppliedOnlyColl")}</td><td>${m.primaCasaConsidered ? "OK" : tr("pdfPrimaryHomeNotDeclared")}</td></tr>`
         : `<tr><td>${tr("pdfPrimaryHomeMortgage")}</td><td>${tr("pdfPrimaryHomeNotDeclared")}</td></tr>`;
 
       let explainResultHtml = `<div class="pdf-explain-result-empty">${tr("calcNoTransferSuggested")}</div>`;
+      let pdfBenefitSectionHtml = "";
+      if (compBenefits.length) {
+        const rawBenefs = Array.isArray(m.compensativeBenefits)
+          ? m.compensativeBenefits.filter((row) => row && Number(row.amount || 0) > 0.005)
+          : [];
+        const typeIcons = { family: "\uD83C\uDFDB", "primary-home-mortgage": "\uD83C\uDFE1", "primary-home-assignment": "\uD83C\uDFE0" };
+        const cardsHtml = compBenefits.map((row, idx) => {
+          const icon = (rawBenefs[idx] && typeIcons[rawBenefs[idx].type]) || "\u2726";
+          return `<li class="pdf-explain-benefit-card"><span class="pdf-explain-benefit-icon">${icon}</span><span class="pdf-explain-benefit-label">${escapeHtml(row.label)}</span><strong class="pdf-explain-benefit-amount">${eur(row.amount)}</strong></li>`;
+        }).join("");
+        const benefitsTotal = compBenefits.reduce((sum, row) => sum + Number(row.amount || 0), 0);
+        pdfBenefitSectionHtml = `
+          <div class="pdf-explain-benefits-section">
+            <div class="pdf-explain-benefits-label">&#127873;&ensp;${escapeHtml(tr("calcCompBenefitsLabel"))}</div>
+            <ul class="pdf-explain-benefits-cards">${cardsHtml}</ul>
+            <div class="pdf-explain-benefits-total"><span>${escapeHtml(tr("pdfCompBenefitsTotal"))}</span><strong>${eur(benefitsTotal)}</strong></div>
+          </div>
+        `;
+      }
       if (m.assegnoDa1a2 > 0.005) {
         explainResultHtml = `
           <div class="pdf-explain-flow">${c1NameEsc} &rarr; ${c2NameEsc}</div>
           <div class="pdf-explain-formula">${c1NameEsc}: ${eur(m.quotaTeorica1)} &minus; ${eur(m.quotaDiretta1)}</div>
           <div class="pdf-explain-amount">${eur(m.assegnoDa1a2)}</div>
+          ${pdfBenefitSectionHtml}
         `;
       } else if (m.assegnoDa2a1 > 0.005) {
         explainResultHtml = `
           <div class="pdf-explain-flow">${c2NameEsc} &rarr; ${c1NameEsc}</div>
           <div class="pdf-explain-formula">${c2NameEsc}: ${eur(m.quotaTeorica2)} &minus; ${eur(m.quotaDiretta2)}</div>
           <div class="pdf-explain-amount">${eur(m.assegnoDa2a1)}</div>
+          ${pdfBenefitSectionHtml}
         `;
       } else if (compBenefits.length) {
         explainResultHtml = `
-          <div class="pdf-explain-result-empty">${tr("calcNoTransferSuggested")}</div>
-          <div class="pdf-explain-formula"><strong>${tr("calcCompBenefitsLabel")}:</strong> ${compBenefits.map((row) => `${escapeHtml(row.label)} (${eur(row.amount)})`).join(" | ")}</div>
+          <div class="pdf-explain-no-transfer-badge">&#9878;&#65039;&ensp;${escapeHtml(tr("calcNoTransferSuggested"))}</div>
+          ${pdfBenefitSectionHtml}
         `;
       }
 
@@ -5002,30 +5354,20 @@ const defaultExpenseItems = [
             </div>`;
           }).join("")}</div>`
         : "";
-      const separationSectionHtml = m.speseConvivenza > 0
-        ? `
-<div class="section">
-  <div class="section-title">${tr("sepCostPanelTitle")}</div>
-  <table>
-    <tbody>
-      <tr><td>${tr("sepCostNetTogether")}</td><td class="num"><strong>${eur(m.nettoInsiemeCombinato || 0)}</strong></td></tr>
-      <tr><td>${tr("sepCostNetSeparated")}</td><td class="num"><strong>${eur(m.nettoSeparatoTotale || 0)}</strong></td></tr>
-      ${m.separationAdjustmentHousingUtilities > 0 ? `<tr><td>${tr("sepCostHousingUtilityAdj")}</td><td class="num">${eur(m.separationAdjustmentHousingUtilities)}</td></tr>` : ""}
-      <tr><td>${tr("sepCostDuplication")}</td><td class="num"><strong>${eur(m.costoSeparazioneMensile || 0)}</strong></td></tr>
-      <tr><td>${tr("sepCostLossMonthly")}</td><td class="num"><strong>${eur(m.perditaMensile || 0)}</strong></td></tr>
-      <tr><td>${tr("sepCostLossAnnually")}</td><td class="num"><strong>${eur(m.perditaAnnua || 0)}</strong></td></tr>
-      <tr><td>${msg("sepCostLossSpouse", { spouse: c1NameEsc })}</td><td class="num">${eur(m.perditaSpouse1 || 0)}</td></tr>
-      <tr><td>${msg("sepCostLossSpouse", { spouse: c2NameEsc })}</td><td class="num">${eur(m.perditaSpouse2 || 0)}</td></tr>
-    </tbody>
-  </table>
-</div>`
+      const liveSepPanelSnapshot = String(document.getElementById("sepCostPanel")?.innerHTML || "").trim();
+      const separationSectionHtml = m.speseConvivenza > 0 && liveSepPanelSnapshot
+        ? `<div class="section pdf-screen-section">${liveSepPanelSnapshot}</div>`
         : "";
+      const activeAppScriptSrc = String(document.querySelector('script[src*="app.js"]')?.getAttribute("src") || "");
+      const appVersionFromScript = (activeAppScriptSrc.match(/[?&]v=([^&#]+)/) || [])[1] || String(Date.now());
+      const pdfStylesHref = `styles.css?v=${encodeURIComponent(appVersionFromScript)}`;
 
       const html = `<!DOCTYPE html>
 <html lang="${pdfLang}">
 <head>
 <meta charset="UTF-8"/>
 <title>${tr("pdfReportTitle")} – ${genDate}</title>
+<link rel="stylesheet" href="${pdfStylesHref}">
 <style>
   @page { size: A4 portrait; margin: 16mm 14mm 14mm 14mm; }
   * { box-sizing: border-box; margin: 0; padding: 0; }
@@ -5196,6 +5538,16 @@ const defaultExpenseItems = [
   .pdf-explain-formula { font-size: 8.5pt; color: #284e49; margin-bottom: 3px; }
   .pdf-explain-amount { font-size: 13pt; font-weight: 900; color: #0e6b62; }
   .pdf-explain-result-empty { font-size: 10pt; font-weight: 800; color: #0f6a61; }
+  .pdf-explain-no-transfer-badge { display: block; border: 1px solid #93d1bc; background: linear-gradient(90deg,#e7f6ef,#cdeedf); border-radius: 999px; padding: 8px 12px; text-align: center; font-size: 10pt; font-weight: 800; color: #0f6158; margin-bottom: 10px; }
+  .pdf-explain-benefits-section { border: 1px solid #b9ddd1; border-radius: 10px; background: #f8fcfb; padding: 8px 10px; }
+  .pdf-explain-benefits-label { font-size: 8pt; font-weight: 800; color: #1d5550; text-transform: uppercase; letter-spacing: 0.45px; margin-bottom: 7px; }
+  .pdf-explain-benefits-cards { list-style: none; padding: 0; margin: 0; display: flex; flex-direction: column; gap: 7px; }
+  .pdf-explain-benefit-card { display: flex; align-items: center; gap: 8px; border: 1px solid #c7e2db; border-radius: 9px; background: #fff; padding: 7px 9px; }
+  .pdf-explain-benefit-icon { width: 22px; height: 22px; border-radius: 999px; display: inline-flex; align-items: center; justify-content: center; background: #def0ea; border: 1px solid #bddbd2; font-size: 10pt; }
+  .pdf-explain-benefit-label { flex: 1; font-size: 8.4pt; color: #214b46; font-weight: 700; }
+  .pdf-explain-benefit-amount { font-size: 10pt; color: #0e645b; font-weight: 900; }
+  .pdf-explain-benefits-total { display: flex; align-items: center; justify-content: space-between; gap: 8px; margin-top: 8px; padding: 8px 10px; border-radius: 9px; background: linear-gradient(90deg,#dff3ea,#bfe8d8); border: 1px solid #9cd0bb; color: #124d46; font-size: 8.6pt; font-weight: 700; }
+  .pdf-explain-benefits-total strong { font-size: 12pt; color: #0b5d54; }
 
   /* ── PDF INLINE CALENDAR ── */
   .pdf-cal-wrap { margin-top: 8px; }
@@ -5216,6 +5568,14 @@ const defaultExpenseItems = [
   .footer { border-top: 1px solid #cde5e0; padding-top: 6px; margin-top: 20px;
     font-size: 7.5pt; color: #888; text-align: center; }
 
+  /* Keep on-screen section visuals (e.g. separation panel) close to app rendering */
+  .pdf-screen-section { break-inside: avoid; }
+  .pdf-screen-section .sep-cost-panel { margin-top: 0; }
+  .pdf-screen-section .sep-cost-title { margin-bottom: 6px; }
+  .pdf-screen-section .sep-cost-hero,
+  .pdf-screen-section .sep-cost-section--grid,
+  .pdf-screen-section .sep-cost-pill-wrap { gap: 8px; }
+
   @media print {
     body { -webkit-print-color-adjust: exact; print-color-adjust: exact; }
   }
@@ -5542,32 +5902,49 @@ ${scenarioLab.length ? `
       win.document.close();
     }
 
-    async function exportJson() {
+    async function exportJson(options = {}) {
       if (!authSession.username || !authSession.keyBits) {
         setAuthStatus(tr("authLoginBeforeExportStatus"), true);
         alert(tr("authLoginBeforeExportAlert"));
         return;
       }
 
+      const plain = !!options.plain;
       const state = serializeState();
-      const encrypted = await encryptStateForKey(state, authSession.keyBits);
-      const payloadObj = {
-        format: "keylock-encrypted-state-v1",
-        owner: authSession.username,
-        createdAt: new Date().toISOString(),
-        cipher: encrypted
-      };
+      let payloadObj;
+      if (plain) {
+        payloadObj = {
+          format: "keylock-plain-state-v1",
+          owner: authSession.username,
+          createdAt: new Date().toISOString(),
+          state
+        };
+      } else {
+        const encrypted = await encryptStateForKey(state, authSession.keyBits);
+        payloadObj = {
+          format: "keylock-encrypted-state-v1",
+          owner: authSession.username,
+          createdAt: new Date().toISOString(),
+          cipher: encrypted
+        };
+      }
       const payload = JSON.stringify(payloadObj, null, 2);
       const blob = new Blob([payload], { type: "application/json" });
       const url = URL.createObjectURL(blob);
       const a = document.createElement("a");
       const ts = new Date().toISOString().replace(/[:T]/g, "-").slice(0, 16);
       a.href = url;
-      a.download = `mantenimento-cifrato-${authSession.username}-${ts}.json`;
+      a.download = plain
+        ? `mantenimento-plain-${authSession.username}-${ts}.json`
+        : `mantenimento-cifrato-${authSession.username}-${ts}.json`;
       document.body.appendChild(a);
       a.click();
       a.remove();
       URL.revokeObjectURL(url);
+
+      if (plain) {
+        setAuthStatus(tr("authExportPlainFileWarning"), true);
+      }
     }
 
     async function importJsonFromFile(file) {
@@ -5575,26 +5952,44 @@ ${scenarioLab.length ? `
       reader.onload = async () => {
         try {
           const payload = JSON.parse(String(reader.result || "{}"));
-          if (!payload || payload.format !== "keylock-encrypted-state-v1" || !payload.owner || !payload.cipher) {
+          if (!payload || !payload.format || !payload.owner) {
             throw new Error(tr("authInvalidJsonFormat"));
           }
 
-          if (!authSession.username || !authSession.keyBits) {
+          if (!authSession.username) {
             throw new Error(tr("authLoginBeforeImport"));
           }
 
-          if (normalizeUsername(payload.owner) !== normalizeUsername(authSession.username)) {
-            throw new Error(tr("authFileOwnedByOther"));
+          let state = null;
+          if (payload.format === "keylock-encrypted-state-v1") {
+            if (!payload.cipher) {
+              throw new Error(tr("authInvalidJsonFormat"));
+            }
+            if (!authSession.keyBits) {
+              throw new Error(tr("authLoginBeforeImport"));
+            }
+            if (normalizeUsername(payload.owner) !== normalizeUsername(authSession.username)) {
+              throw new Error(tr("authFileOwnedByOther"));
+            }
+            state = await decryptStateForKey(payload.cipher, authSession.keyBits);
+          } else if (payload.format === "keylock-plain-state-v1") {
+            state = payload.state;
+          } else {
+            throw new Error(tr("authInvalidJsonFormat"));
           }
 
-          const state = await decryptStateForKey(payload.cipher, authSession.keyBits);
           if (!state || typeof state !== "object" || !state.base || !Array.isArray(state.spese)) {
             throw new Error(tr("authDecryptedContentInvalid"));
           }
 
           applyState(state);
-          setAuthStatus(tr("authEncryptedJsonImported"));
-          alert(tr("authEncryptedJsonLoaded"));
+          if (payload.format === "keylock-plain-state-v1") {
+            setAuthStatus(tr("authPlainJsonImported"));
+            alert(tr("authPlainJsonLoaded"));
+          } else {
+            setAuthStatus(tr("authEncryptedJsonImported"));
+            alert(tr("authEncryptedJsonLoaded"));
+          }
         } catch (err) {
           setAuthStatus(msg("authImportFailedStatus", { message: err.message }), true);
           alert(msg("authImportFailedAlert", { message: err.message }));
@@ -5603,6 +5998,45 @@ ${scenarioLab.length ? `
       reader.readAsText(file, "utf-8");
     }
 
+    function openExportModeModal() {
+      const modal = document.getElementById("exportModeModal");
+      const chk = document.getElementById("chkExportPlainJson");
+      if (!modal || !chk) {
+        return Promise.resolve(null);
+      }
+      chk.checked = false;
+      modal.classList.remove("is-hidden");
+      modal.setAttribute("aria-hidden", "false");
+
+      return new Promise((resolve) => {
+        const close = (confirmed) => {
+          modal.classList.add("is-hidden");
+          modal.setAttribute("aria-hidden", "true");
+          confirmBtn.removeEventListener("click", onConfirm);
+          cancelBtn.removeEventListener("click", onCancel);
+          modal.removeEventListener("click", onBackdrop);
+          resolve(confirmed ? chk.checked : null);
+        };
+        const confirmBtn = document.getElementById("btnConfirmExportMode");
+        const cancelBtn = document.getElementById("btnCancelExportMode");
+        const onConfirm = () => close(true);
+        const onCancel = () => close(false);
+        const onBackdrop = (evt) => {
+          if (evt.target && evt.target.getAttribute("data-export-modal-close") === "1") {
+            close(false);
+          }
+        };
+
+        if (!confirmBtn || !cancelBtn) {
+          close(false);
+          return;
+        }
+        confirmBtn.addEventListener("click", onConfirm);
+        cancelBtn.addEventListener("click", onCancel);
+        modal.addEventListener("click", onBackdrop);
+      });
+    }
+
     function serializeState() {
       captureUiViewStateFromDom();
       const calcProfileCfg = getCalcProfileConfig(getSelectedCalcProfileId());
@@ -5624,11 +6058,13 @@ ${scenarioLab.length ? `
         assegnoFam2: num("assegnoFam2"),
         primaCasaMutuoEnabled: document.getElementById("primaCasaMutuoEnabled")?.checked ? 1 : 0,
         primaCasaMutuoImporto: num("primaCasaMutuoImporto"),
+        primaCasaValoreLocativo: num("primaCasaValoreLocativo"),
         primaCasaAssegnataA: String(document.getElementById("primaCasaAssegnataA")?.value || ""),
         primaCasaMutuoPerc1: num("primaCasaMutuoPerc1"),
         straordAnn1: num("straordAnn1"),
         straordAnn2: num("straordAnn2"),
-        speseConvivenza: num("speseConvivenza")
+        speseConvivenza: num("speseConvivenza"),
+        speseConvivenzaAuto: speseConvivenzaAutoMode ? 1 : 0
       };
       const spese = expenseItems.map((_, i) => ({
         c1: num(`c1_${i}`),
@@ -5674,6 +6110,11 @@ ${scenarioLab.length ? `
           el.value = v;
         }
       });
+      if (state.base && Object.prototype.hasOwnProperty.call(state.base, "speseConvivenzaAuto")) {
+        speseConvivenzaAutoMode = Number(state.base.speseConvivenzaAuto || 0) > 0;
+      } else {
+        speseConvivenzaAutoMode = Math.max(0, Number(state.base && state.base.speseConvivenza || 0)) <= 0.005;
+      }
       if (Array.isArray(state.expenseItems) && state.expenseItems.length) {
         expenseItems = state.expenseItems.map((item, idx) => normalizeExpenseItem(item, idx));
       } else {
@@ -5743,6 +6184,7 @@ ${scenarioLab.length ? `
       if (firstHomeEnabled) firstHomeEnabled.checked = !!firstHomeEnabled.defaultChecked;
       if (firstHomeAssigned) firstHomeAssigned.value = "";
       permanenceCalendarState.byMonth = {};
+      speseConvivenzaAutoMode = true;
       selectedScenarioIdx = -1;
       uiViewState.spiegOpen = true;
       uiViewState.formulaOpen = false;
@@ -5764,7 +6206,11 @@ ${scenarioLab.length ? `
 
     document.getElementById("btnExportJson").addEventListener("click", async () => {
       if (!isLoggedIn()) { showAuthGateMessage(document.getElementById("btnExportJson")); return; }
-      await exportJson();
+      const plainExport = await openExportModeModal();
+      if (plainExport === null) {
+        return;
+      }
+      await exportJson({ plain: plainExport });
     });
 
     document.getElementById("btnImportJson").addEventListener("click", () => {
@@ -5896,6 +6342,13 @@ ${scenarioLab.length ? `
       }
     });
 
+    const speseConvivenzaInput = document.getElementById("speseConvivenza");
+    if (speseConvivenzaInput) {
+      speseConvivenzaInput.addEventListener("input", () => {
+        speseConvivenzaAutoMode = false;
+      });
+    }
+
     document.getElementById("btnZoomOut").addEventListener("click", () => {
       const current = normalizeUiZoom(getComputedStyle(document.documentElement).getPropertyValue("--ui-zoom"));
       setUiZoom(current - UI_ZOOM_STEP);
@@ -6003,7 +6456,7 @@ ${scenarioLab.length ? `
           syncPermanenza("perm1");
         } else if (e.target.id === "perm2") {
           syncPermanenza("perm2");
-        } else if (e.target.id === "primaCasaMutuoPerc1" || e.target.id === "primaCasaMutuoImporto") {
+        } else if (e.target.id === "primaCasaMutuoPerc1" || e.target.id === "primaCasaMutuoImporto" || e.target.id === "primaCasaValoreLocativo") {
           updateFirstHomeMortgageUi();
         } else if (e.target.id === "reddito1" || e.target.id === "reddito2") {
           const activeMode = document.getElementById("incomeMode")?.value || "monthly";
@@ -6069,6 +6522,9 @@ ${scenarioLab.length ? `
     void initVisitorCounters();
     setAuthMode("login");
     updateAuthUi();
+    void restorePersistedAuthSession().finally(() => {
+      void maybeAutoLoginFromUrl();
+    });
     renderCloudHistoryPanel();
     applyUiViewStateToDom();
     updateFirstHomeMortgageUi();