release: v1.7.10 — banner fixes, opened tracking, anomaly detection improvements

CHANGELOG.md

@@ -5,7 +5,96 @@ All notable changes to EverShelf will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
-## [1.7.4] - 2026-05-07
+## [1.7.10] - 2026-05-11
+
+### Fixed
+- **Banner "Imposta scadenza" non faceva nulla** — `editBannerNoExpiry()` chiamava `openEditInventoryModal()` che non esiste. Corretto in `editInventoryItem()` (la funzione corretta usata da tutti gli altri handler banner). Aggiunto anche il fetch preventivo di `inventory_list` perché `currentInventory` è vuoto sulla dashboard.
+- **"Prodotto non trovato" aprendo modal da banner** — `currentInventory` è sempre vuoto sulla dashboard; il fetch dell'inventario ora avviene prima di aprire la modal (stesso pattern di `editReviewItem` e `weighBannerItem`).
+- **Banner scaduto su latte UHT aperto** — Il testo mostrava "Scaduto!" invece di "Aperto da troppo tempo". Ora i prodotti con `opened_at` mostrano "Aperto da N giorni in [posizione]" sia nel titolo che nel dettaglio del banner.
+- **Shelf life latte generico 4 → 7 giorni** — Il latte senza qualificatori (es. "Latte") veniva trattato come fresco (4 giorni). Il latte fresco è già gestito esplicitamente (`latte fresco/intero/parzial/scremato` → 3gg); il generico ora vale 7 giorni (default UHT). Fix applicato sia in PHP (`database.php`) che in JS (`app.js`).
+- **`opened_at` stale sulle confezioni intere dopo split** — Quando un uso splitta la riga in "confezioni intere + frazione aperta", la riga delle intere non azzerava `opened_at`. Ora tutti e 3 i percorsi di split eseguono `opened_at = NULL` sulla riga sigillata.
+- **`inventory_update` non registrava transazioni** — La modal di modifica quantità aggiornava l'inventario senza creare transazioni. La differenza viene ora registrata automaticamente come `'in'` o `'out'` con nota `[Correzione manuale]`, evitando falsi positivi nel rilevatore di anomalie.
+- **False anomalie di consumo dopo la spesa** — La baseline della prediction usava solo la quantità del rifornimento (`restockQty`), ignorando le scorte preesistenti → `actual > expected` sistematicamente. Nuova baseline: `qty_attuale + consumato_da_ultimo_rifornimento`, che riflette correttamente la realtà indipendentemente dalle scorte pregresse.
+- **Banner "consumo anomalo" su quasi tutti i prodotti** — Due fix:
+  1. `expected = 0` non genera più anomalia "more" (il modello pensa che dovresti aver finito, ma hai ricomprato).
+  2. Soglia "more than expected" alzata al 400% (era 30%); "less than expected" rimane al 30%.
+- **Sezione scaduti mostra prodotti già buttati** — La query `expired` mancava di `AND i.quantity > 0`; i prodotti buttati (qty=0) con scadenza passata continuavano ad apparire. Corretta la query + pulizia righe orfane nel DB.
+- **Hardcoded `scade il` in banner** — Stringa italiana hardcodata nel dettaglio del banner scaduti rimossa.
+- **Docker: `SQLSTATE[HY000][14] unable to open database file`** — Aggiunta `_ensureDataDir()` in `database.php` che crea la directory se mancante e tenta `chmod(0775)` se non scrivibile.
+
+### Added
+- **i18n completa** — Aggiunti ~25 chiavi di traduzione mancanti per UI kiosk, gemini, banner, scanner, shopping, appliances in tutti e 3 i file (`it.json`, `en.json`, `de.json`). Totale: 934 chiavi per lingua.
+
+
+### Added
+- **Category badge on inventory items** — Every product in the inventory now displays a macro-category badge (icon + label) next to the location badge. Badges showing `altro` are asynchronously refined via the new `guess_category` AI endpoint (Gemini + `data/category_ai_cache.json` cache) so the correct category appears automatically after the page loads.
+- **Category search** — The inventory search bar now matches items by category. Typing "biscotti" returns every cookie/biscuit regardless of brand or exact name; the match uses both the direct category key and the translated label.
+- **Brand map in `guessCategoryFromName`** — A fast-path brand table (Oreo, Ringo, Uno, Barilla, De Cecco, Galbani, Mutti, Lavazza, etc.) provides instant category resolution before any regex evaluation.
+- **PHP `guess_category` endpoint** — New server-side action that calls Gemini to classify a product name into a local category key, with file-based caching (`data/category_ai_cache.json`). Returns `altro` immediately when no Gemini API key is configured.
+
+### Fixed
+- **Duplicate banner alerts** — `loadBannerAlerts()` was occasionally enqueuing the same item multiple times when called concurrently. Fixed with a `_bannerLoading` re-entrancy guard and a `_queuedItemIds` Set that prevents any item from being pushed more than once per refresh cycle.
+- **`mapToLocalCategory` with `en:dairies` / `en:dairies-and-eggs`** — The dairy regex was not matching OpenFoodFacts tags that use the `dairi` stem; extended to cover the full range of dairy tags.
+- **`mapToLocalCategory` always returning `altro`** — When the input category was already `altro`, the function exited the direct-match loop before attempting any fallback, losing all name-based guesses. The loop now skips the `altro` key for the early-return and falls back to `guessCategoryFromName(productName)` at the end.
+- **"Tonno all'olio" → condimenti** — `tonno\b` was matched after `olio\b` (condimenti) due to regex ordering. Moved the conserve block before the condimenti block so tuna products resolve correctly.
+
+### Security
+- **AI function guards** — All Gemini-powered functions now check `_geminiAvailable` (JS) or the presence of `GEMINI_API_KEY` (PHP) before executing. Affected functions: `_refineCategoryBadgesAsync`, `fetchAllPrices`, `getShoppingPrice`. The PHP endpoint returns `{"success":false,"error":"no_api_key"}` instead of silently returning empty results, making the missing-key state explicit and diagnosable.
+
+## [1.7.8] - 2026-05-10
+
+### Added
+- **Trasferisci a Ricette dalla chat** — Quando la chat con Gemini Chef genera una ricetta, compare il bottone "📥 Trasferisci a Ricette". Premendolo, Gemini converte il testo in JSON strutturato completo (titolo, pasti, ingredienti, passi), il backend arricchisce ogni ingrediente con product_id e location via fuzzy-match (identico a generateRecipe), la ricetta viene salvata in archivio e si apre direttamente nella sezione Ricette con tutti i pulsanti "Usa" e la modalità cottura completa.
+- **Bottone "Apri la ricetta"** — Dopo un trasferimento riuscito, il bottone "📥 Trasferisci a Ricette" si trasforma direttamente in "📖 Apri la ricetta" (stesso elemento DOM), evitando problemi di sovrapposizione.
+- **Crea una ricetta per ingrediente** — Nel pannello azione di ogni alimento in inventario compare il bottone "👨‍🍳 Crea una ricetta con questo" (teal, larghezza piena). Premendolo, Gemini genera una ricetta italiana usando quell'alimento come protagonista (stesso pipeline di chatToRecipe: arricchimento fuzzy-match inventario, meal=null, 8192 token max).
+- **meal non auto-categorizzato** — Le ricette generate da chat o da ingrediente non vengono più auto-categorizzate (meal rimane null); il tag pasto nell'UI viene mostrato solo se valorizzato.
+
+### Fixed
+- **Smart shopping: falso positivo "quasi finito"** — Se un prodotto in grammi/ml era quasi esaurito (es. Burro 30g = 12%) ma lo stesso prodotto era disponibile anche come confezione (Burro 1 conf = 99%), il sistema segnalava ugualmente "sta finendo". Ora verifica se la famiglia `shopping_name` ha scorte da altri prodotti: se sì, l'alert viene soppresso. (Esempio: 30g di Burro + 1 conf di Burro → nessun alert.)
+- **Traduzioni JSON corrotte** — La sezione `action` era duplicata nei file `de.json`, `en.json` e `it.json`, causando errori di parsing che bloccavano la CI/CD. Rimossa la sezione spuria.
+
+## [1.7.7] - 2026-05-10
+
+### Fixed
+- **Smart shopping family suppression** — La logica `recentlyExhausted` (prodotti terminati < 14gg) bypassava erroneamente anche la suppression per `shopping_name` family, causando falsi positivi: prodotti come Yaourt Vanille apparivano come urgenti anche con 2kg di Yogurt in stock, Salame Paesano con 1kg di Affettato in stock, Gran bauletto rustico con più pani in stock. Ora `recentlyExhausted` bypassa solo il check token-based (match lasco), mentre la family suppression per `shopping_name` si applica sempre.
+- **Shelf life pre-warming nel cron** — Il cron ora chiama `prewarmShelfLifeCache()` ogni 5 minuti, precaricando via Gemini AI la shelf life degli item aperti in inventario (max 5 item per ciclo) prima che l'utente li visualizzi. Questo elimina il delay percepibile al primo click su "Aperto il...".
+
+## [1.7.6] - 2026-05-10
+
+### Fixed
+- **`shopping_name` troncato (Piadina)** — Il prodotto "Piadine medie" aveva `shopping_name='Pi'` (troncato), non veniva aggruppato correttamente nella famiglia. Corretto in `Piadina`.
+- **Family merges DB** — Grana Padano ora sotto `Formaggio` (era `Grana` singleton), Prosciutto cotto ora sotto `Affettato`, Panna acida ora sotto `Panna`.
+- **`daily_rate` su periodo effettivo** — Il tasso di consumo giornaliero usava `first_in → now` come finestra, diluendo il rate con periodi in cui il prodotto era già esaurito (es. aglio esaurito a 34gg veniva calcolato su 60+). Ora usa `first_in → last_activity` (ultimo acquisto o ultimo uso), più preciso per le previsioni di riordino.
+- **Anomaly dismiss key stabile** — La chiave di dismiss usava `product_id + round(expected)` che cambiava ad ogni nuova transazione, causando la ricomparsa delle anomalie già chiuse. Ora usa `product_id + direction` (phantom/missing/untracked) — stabile finché la direzione non cambia.
+- **Smart shopping: prodotti esauriti < 14 giorni** — Prodotti terminati negli ultimi 14 giorni non vengono più soppressi dal check token-coverage o shopping_name-family: se li hai appena finiti, è probabile tu voglia ricomprarli indipendentemente dalla presenza di equivalenti in stock.
+- **Chat pruning** — `chatSave()` ora esegue `DELETE` dei messaggi oltre i 200 più recenti dopo ogni salvataggio, evitando crescita illimitata della tabella `chat_messages`.
+- **`getStats()` query consolidate** — Le 5 query separate (COUNT products, SUM inventory, COUNT locations, COUNT recent_in, COUNT recent_out) sono ora una sola query con subselect, riducendo i round-trip SQLite da 5 a 1.
+- **Bring! cleanup rate-limiting** — Aggiunto `usleep(300ms)` tra le rimozioni multiple per evitare di sovraccaricare l'API Bring! in burst.
+- **Indici compositi su `transactions`** — Aggiunti `idx_transactions_type_date(type, created_at)` (per `getStats`) e `idx_transactions_pid_type_undone(product_id, type, undone)` (per `smartShopping`), con migration automatica per DB esistenti.
+
+### Security
+- **CSRF protection** — Le action di scrittura (inventory_add, bring_add, product_save, ecc.) richiedono ora `X-EverShelf-Request: 1` oppure `Content-Type: application/json`. Il frontend `api()` invia sempre il header su POST. Questo previene attacchi CSRF cross-site tramite form HTML.
+
+## [1.7.5] - 2026-05-10
+
+### Added
+- **Vacuum sealed prompt on item use** — After using a conf/weighted-unit item that still has remaining stock, a sliding popup asks "🔒 Messo sotto vuoto?" with Sì/No buttons and an 8-second auto-dismiss countdown bar. Default is Sì if the item was previously sealed, No otherwise. Works for all container units (conf, g, kg, ml, l) and any item previously marked as vacuum sealed.
+- **Multi-function appliance awareness in recipes** — When the user sets a multi-function appliance (Cookeo, Bimby, Thermomix, Monsieur Cuisine, Instant Pot, Multicooker, Robot da cucina) in Settings, all Gemini recipe prompts (chat, recipe generation, weekly meal plan) now explicitly instruct the AI to consolidate as many cooking steps as possible into that single machine. Each appliance's available functions (rosolare, tritare, vapore, cuocere a pressione, etc.) are listed and the AI is required to indicate the specific mode/program at each step.
+- **Server-side Bring! cleanup in cron** — `bringCleanupObsolete()` now runs every 5 minutes via cron without requiring any client page load. Items auto-added by the app (identified by `⚡`/`🟠`/`🛒` markers in their Bring! spec) are automatically removed when the smart shopping engine no longer flags them as needed. Works across all devices/clients.
+- **`shopping_name` in `inventory_list` API** — The `inventory_list` endpoint now returns the `shopping_name` field from the products table, enabling family-based stock matching in the client-side cleanup fallback.
+
+### Fixed
+- **Bring! cleanup: false token match (Succo/Frutta)** — `bringCleanupObsolete` previously indexed smart items by product name tokens. "Pera Italiana **Succo** e polpa **frutta**" (shopping_name: "Pere") caused "Succo" and "Frutta" to be retained on Bring! indefinitely even when fully stocked. Now indexes **only** by `shopping_name` tokens.
+- **Bring! cleanup: expired items with fresh family stock (Verdure)** — When a product is expired but its `shopping_name` family has ≥50% fresh stock from other products (e.g. Minestrone tradizione scaduto 01/05 but 590g fresh Verdure in freezer/pantry), it is no longer flagged as `critical` and is removed from the shopping list.
+- **Bring! remove: catalog items not removed (Formaggio/Käse)** — `bringRemoveItem()` and `bringCleanupObsolete()` now try both the Italian display name and the Bring! internal German catalog key (e.g. `Käse` for `Formaggio`). Previously, catalog items with a German key were silently not removed.
+- **Barcode scanner: EAN auto-submit on manual input** — Typing or pasting a valid 8/13-digit EAN in the manual barcode field now auto-submits immediately without needing to press a button. Checksum validation gives a warning toast for invalid codes without blocking entry.
+- **Shopping list: `isExpiringSoon` false positives** — Products bought in bulk that expire naturally in 3 days (e.g. fresh produce) were flagged `medium` urgency on the shopping list despite having 100%+ stock. Now requires `pctLeft < 50%` before triggering.
+- **Shopping list: expired batch with fresh restock suppressed** — Products with an expired batch AND a recent fresh restock (≥50% fresh stock) are no longer flagged `critical` for shopping. The expired-batch UI banner on the dashboard handles the disposal prompt instead.
+- **Shopping list: cross-device cleanup** — Client-side `cleanupObsoleteBringItems()` now detects app-added items by their spec markers (`⚡`/`🟠`/`🛒`) instead of a per-device localStorage map, making cleanup work correctly on all clients including newly logged-in devices. Throttle reduced from 30 minutes to 3 minutes.
+- **API fetch caching disabled** — All `api()` calls in the frontend now set `cache: 'no-store'` to prevent stale data from browser cache.
+- **Shopping page multi-client sync** — Added 45-second polling on the shopping page so changes made on another device are reflected automatically.
+
+
 
 ### Added
 - **AI price estimation for shopping list** — Each item on the Bring! shopping list now shows an estimated retail price badge (per unit and total). Prices are fetched from Gemini AI and cached server-side for 3 months (`PRICE_UPDATE_MONTHS`). The running estimated total is displayed both in the shopping tab and as a green pill badge on the dashboard stat card.

README.md

@@ -25,11 +25,18 @@
 [![SQLite](https://img.shields.io/badge/SQLite-3-blue.svg)](https://www.sqlite.org/)
 [![Docker](https://img.shields.io/badge/Docker-Ready-2496ED.svg)](Dockerfile)
 [![i18n](https://img.shields.io/badge/i18n-IT%20%7C%20EN%20%7C%20DE-orange.svg)](translations/)
+[![Version](https://img.shields.io/badge/version-1.7.10-brightgreen.svg)](CHANGELOG.md)
 
 ---
 
-## 🌍 Recent Updates
+## 🌍 Recent Updates (v1.7.10)
 
+- **Banner "Imposta scadenza" ora funziona** — Il pulsante sul banner "nessuna scadenza" apriva una funzione inesistente. Corretto, ora apre correttamente la modal di modifica.
+- **Banner aperto vs scaduto** — I prodotti con `opened_at` mostrano "Aperto da N giorni in [posizione]" invece di "Scaduto!", con la posizione (frigo/dispensa/freezer) esplicitamente indicata.
+- **Shelf life latte UHT** — Il latte generico è ora trattato come UHT (7 giorni dopo apertura) invece che fresco (4 giorni).
+- **Niente più false anomalie di consumo** — Il rilevatore ora ignora i casi in cui `expected = 0` (prodotto probabilmente ricomprato) e alza la soglia "more than expected" al 400%. Le notifiche rimangono solo per consumi significativamente inferiori al previsto.
+- **Scaduti nascondono prodotti già buttati** — La sezione scaduti ora filtra correttamente i prodotti con `quantity = 0`.
+- **Docker: fix permessi DB al primo avvio** — `_ensureDataDir()` crea la directory `data/` se mancante e tenta `chmod(0775)` se non scrivibile, risolvendo `SQLSTATE[HY000][14]` su volumi Docker freschi.
 - **AI price estimation for shopping list** — Each Bring! shopping item now shows an estimated retail price badge (unit price + total). Prices are fetched via Gemini AI, cached server-side for 3 months, and stored client-side in `sessionStorage` to survive navigation. The dashboard shopping stat card shows a live green `ca. €X.XX` badge that updates in real-time as prices are calculated — even in background when you're on another tab.
 - **Kiosk v1.7.0: OTA update system** — "Cerca aggiornamenti" button in Settings triggers a forced GitHub release check; new `installUpdate()` JS bridge calls Android `DownloadManager` directly (lockTask mode blocks external browser links); graceful degradation for older APKs with manual instructions. Automatic OTA check every 6 hours with native update banner.
 - **Kiosk: consistent APK signing** — Project keystore (`evershelf.jks`) committed to the repo; every build — local or CI — now produces an APK with the same signature, eliminating "APK incompatible / signature conflict" errors on OTA update.

api/cron_smart_shopping.php

@@ -39,8 +39,50 @@ try {
         throw new RuntimeException('Cannot write cache file: ' . CACHE_FILE);
     }
 
-    echo '[' . date('Y-m-d H:i:s') . '] OK — ' . count($decoded['items'] ?? []) . " items cached\n";
+    $itemCount = count($decoded['items'] ?? []);
+    echo '[' . date('Y-m-d H:i:s') . '] OK — ' . $itemCount . " items cached\n";
+
+    // ── Bring! server-side cleanup ────────────────────────────────────────
+    // After computing smart shopping, automatically remove stale Bring! items
+    // and add/update critical ones. This runs fully server-side every cron cycle.
+    try {
+        $cleanupResult = bringCleanupObsolete($db);
+        if (isset($cleanupResult['skipped'])) {
+            echo '[' . date('Y-m-d H:i:s') . '] Bring! cleanup skipped: ' . $cleanupResult['skipped'] . "\n";
+        } else {
+            echo '[' . date('Y-m-d H:i:s') . '] Bring! cleanup — removed: ' . ($cleanupResult['removed'] ?? 0)
+                . '/' . ($cleanupResult['candidates'] ?? 0) . ' candidates'
+                . ($cleanupResult['errors'] ? ', errors: ' . $cleanupResult['errors'] : '') . "\n";
+        }
+
+        $addResult = bringAutoAddCritical($db);
+        if (isset($addResult['skipped'])) {
+            echo '[' . date('Y-m-d H:i:s') . '] Bring! auto-add skipped: ' . $addResult['skipped'] . "\n";
+        } else {
+            echo '[' . date('Y-m-d H:i:s') . '] Bring! auto-add — added: ' . ($addResult['added'] ?? 0)
+                . ', updated specs: ' . ($addResult['updated'] ?? 0) . "\n";
+        }
+    } catch (Throwable $be) {
+        echo '[' . date('Y-m-d H:i:s') . '] Bring! sync warning: ' . $be->getMessage() . "\n";
+    }
+
+    // ── Shelf life pre-warming ────────────────────────────────────────────
+    // Pre-warm the opened shelf life cache for opened items not yet cached.
+    // Capped at 5 items per cron cycle to avoid Gemini rate limits.
+    try {
+        $prewarmResult = prewarmShelfLifeCache($db, 5);
+        if ($prewarmResult['warmed'] > 0) {
+            echo '[' . date('Y-m-d H:i:s') . '] Shelf life pre-warm — warmed: ' . $prewarmResult['warmed']
+                . ', skipped: ' . $prewarmResult['skipped'] . "\n";
+        }
+    } catch (Throwable $pe) {
+        echo '[' . date('Y-m-d H:i:s') . '] Shelf life pre-warm warning: ' . $pe->getMessage() . "\n";
+    }
+
 } catch (Throwable $e) {
-    echo '[' . date('Y-m-d H:i:s') . '] ERROR: ' . $e->getMessage() . "\n";
+    $msg = $e->getMessage();
+    echo '[' . date('Y-m-d H:i:s') . '] ERROR: ' . $msg . "\n";
+    // Report to GitHub Issues (uses the same _phpErrorReport from index.php)
+    _phpErrorReport($msg, $e->getFile(), $e->getLine(), $e->getTraceAsString(), get_class($e));
     exit(1);
 }

api/database.php

@@ -9,7 +9,37 @@
 
 define('DB_PATH', __DIR__ . '/../data/evershelf.db');
 
+/**
+ * Ensure the data directory exists and is writable by the web-server user.
+ * This is needed when a Docker volume is first mounted: the image's chown
+ * step is applied to the image layer, but a fresh named volume starts empty
+ * (owned by root), making SQLite's PDO::__construct fail with HY000[14].
+ */
+function _ensureDataDir(): void {
+    $dir = dirname(DB_PATH);
+    if (!is_dir($dir)) {
+        if (!mkdir($dir, 0775, true) && !is_dir($dir)) {
+            throw new \RuntimeException("Cannot create data directory: $dir");
+        }
+    }
+    if (!is_writable($dir)) {
+        // Try to fix permissions (only works when running as root, e.g. first boot)
+        @chmod($dir, 0775);
+        if (!is_writable($dir)) {
+            throw new \RuntimeException(
+                "Data directory is not writable: $dir — run: chown -R www-data:www-data $dir"
+            );
+        }
+    }
+    // Ensure backups sub-directory exists too
+    $backups = $dir . '/backups';
+    if (!is_dir($backups)) {
+        @mkdir($backups, 0775, true);
+    }
+}
+
 function getDB(): PDO {
+    _ensureDataDir();
     $isNew = !file_exists(DB_PATH);
     $db = new PDO('sqlite:' . DB_PATH);
     $db->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
@@ -74,6 +104,11 @@ function initializeDB(PDO $db): void {
         CREATE INDEX IF NOT EXISTS idx_inventory_location ON inventory(location);
         CREATE INDEX IF NOT EXISTS idx_transactions_product ON transactions(product_id);
         CREATE INDEX IF NOT EXISTS idx_transactions_date ON transactions(created_at);
+        -- Composite indexes for hot queries
+        -- getStats(): WHERE type IN (...) AND created_at >= ...
+        CREATE INDEX IF NOT EXISTS idx_transactions_type_date ON transactions(type, created_at);
+        -- smartShopping(): GROUP BY product_id filtering on type+undone
+        CREATE INDEX IF NOT EXISTS idx_transactions_pid_type_undone ON transactions(product_id, type, undone);
     ");
 }
 
@@ -108,6 +143,8 @@ function migrateDB(PDO $db): void {
         $db->exec("DROP TABLE transactions_old");
         $db->exec("CREATE INDEX IF NOT EXISTS idx_transactions_product ON transactions(product_id)");
         $db->exec("CREATE INDEX IF NOT EXISTS idx_transactions_date ON transactions(created_at)");
+        $db->exec("CREATE INDEX IF NOT EXISTS idx_transactions_type_date ON transactions(type, created_at)");
+        $db->exec("CREATE INDEX IF NOT EXISTS idx_transactions_pid_type_undone ON transactions(product_id, type, undone)");
     }
 
     // --- New shared tables ---
@@ -192,6 +229,10 @@ function migrateDB(PDO $db): void {
     if (!in_array('undone', $txColNames)) {
         $db->exec("ALTER TABLE transactions ADD COLUMN undone INTEGER DEFAULT 0");
     }
+
+    // Ensure composite indexes exist (added in v1.7.5 for performance)
+    $db->exec("CREATE INDEX IF NOT EXISTS idx_transactions_type_date ON transactions(type, created_at)");
+    $db->exec("CREATE INDEX IF NOT EXISTS idx_transactions_pid_type_undone ON transactions(product_id, type, undone)");
 }
 
 /**
@@ -324,7 +365,7 @@ function estimateOpenedExpiryDaysPHP(string $name, string $category, string $loc
     if (preg_match('/latte\s+(uht|a\s+lunga)/', $n)) return 7;
     // Long-life mountain/brand milks stored in pantry before use (UHT)
     if (preg_match('/latte.*(montagna|alta\s+qual|parmalat|granarolo|esselunga|conservaz|microfiltrat)/i', $n)) return 7;
-    if (preg_match('/\blatte\b/', $n)) return 4;
+    if (preg_match('/\blatte\b/', $n)) return 7; // generic: default to UHT (most common in IT households)
     if (preg_match('/\b(yogurt|yaourt|yoghurt)\b/', $n)) return 5;
     if (preg_match('/mozzarella|burrata|stracciatella/', $n)) return 3;
     if (preg_match('/philadelphia|spalmabile/', $n)) return 7;

assets/css/style.css

@@ -378,6 +378,51 @@ body {
 
 /* (scan active is defined above in .header-scan-btn:active) */
 
+/* ── Offline / server-unreachable banner ──────────────────────────────── */
+.offline-banner {
+    display: flex;
+    align-items: center;
+    justify-content: center;
+    gap: 8px;
+    background: #dc2626;
+    color: #fff;
+    padding: 9px 16px;
+    font-size: 0.88rem;
+    font-weight: 600;
+    position: sticky;
+    top: 0;
+    z-index: 950;
+    box-shadow: 0 2px 8px rgba(220,38,38,0.35);
+}
+.offline-banner-icon { font-size: 1rem; line-height: 1; }
+.offline-banner-text { flex: 1; text-align: center; }
+.offline-banner-retry {
+    background: rgba(255,255,255,0.22);
+    border: 1px solid rgba(255,255,255,0.55);
+    color: #fff;
+    border-radius: 6px;
+    padding: 3px 11px;
+    font-size: 0.8rem;
+    font-weight: 600;
+    cursor: pointer;
+    white-space: nowrap;
+    transition: background 0.15s;
+}
+.offline-banner-retry:hover { background: rgba(255,255,255,0.38); }
+
+/* When server is offline, block interactions with the main content */
+body.server-offline .app-content {
+    opacity: 0.4;
+    pointer-events: none;
+    user-select: none;
+    transition: opacity 0.3s;
+}
+body.server-offline .bottom-nav {
+    opacity: 0.4;
+    pointer-events: none;
+    transition: opacity 0.3s;
+}
+
 /* Spesa mode banner */
 .spesa-mode-banner {
     display: flex;
@@ -1098,6 +1143,11 @@ body {
     color: #1d4ed8;
 }
 
+.badge-category {
+    background: #f1f5f9;
+    color: #475569;
+}
+
 .badge-qty {
     background: #d1fae5;
     color: #047857;
@@ -4991,6 +5041,27 @@ body.cooking-mode-active .app-header {
     background: #4f46e5;
 }
 
+.btn-recipe-from-ingredient {
+    grid-column: 1 / -1;
+    background: linear-gradient(135deg, #0f766e, #0d9488);
+    color: white;
+    border: none;
+    border-radius: 14px;
+    padding: 14px 20px;
+    font-size: 1rem;
+    font-weight: 600;
+    cursor: pointer;
+    transition: opacity 0.15s;
+    display: flex;
+    align-items: center;
+    justify-content: center;
+    gap: 8px;
+}
+
+.btn-recipe-from-ingredient:active {
+    opacity: 0.85;
+}
+
 /* ===== STRUCTURED QUANTITY IN INVENTORY ===== */
 .inv-qty-col {
     display: flex;
@@ -5630,6 +5701,28 @@ body.cooking-mode-active .app-header {
     30% { transform: translateY(-6px); opacity: 1; }
 }
 
+/* ====== Chat Transfer to Recipes button ====== */
+.btn-chat-use-recipe {
+    display: inline-block;
+    margin-top: 10px;
+    padding: 7px 14px;
+    background: var(--card-bg, #1e293b);
+    border: 1px solid #6366f1;
+    color: #a5b4fc;
+    border-radius: 20px;
+    font-size: 0.82rem;
+    cursor: pointer;
+    transition: all 0.15s;
+}
+.btn-chat-use-recipe:hover {
+    background: #312e81;
+    color: white;
+}
+.btn-chat-use-recipe:disabled {
+    opacity: 0.6;
+    cursor: default;
+}
+
 /* ====== Recipe Archive ====== */
 .recipe-archive {
     display: flex;

data/anomaly_dismissed.json

@@ -1 +1 @@
-{"a_32_572":1776776330,"a_17_171":1776776404,"a_25_-777":1776776427,"a_7_-279":1776776434,"a_168_253":1777223925,"a_191_1":1777300414,"a_183_291":1777310462,"a_213_150":1777378506,"a_183_290":1777380000}
+{}

data/opened_shelf_cache.json

@@ -1,51 +1,170 @@
 {
-  "226887def70e33ef73290ebfe75ed4d0": {
-    "days": 7,
-    "source": "ai",
-    "name": "Polpa di pomodoro finissima",
-    "location": "frigo",
-    "ts": 1777444819
-  },
-  "0ed51c9496aa9edfe38caf41772f54ed": {
-    "days": 7,
-    "source": "rule",
-    "name": "Latte di Montagna",
-    "location": "frigo",
-    "ts": 1777444820
-  },
-  "2d63d0216a75d46b465150e925d2e7ad": {
-    "days": 30,
-    "source": "rule",
-    "name": "Burro",
-    "location": "frigo",
-    "ts": 1777444821
-  },
-  "9afdf35c4a256867ef47c32495349eb6": {
-    "days": 5,
-    "source": "rule",
-    "name": "Yaourt Vanille",
-    "location": "frigo",
-    "ts": 1777480477
-  },
-  "584f57418733a1f2acd29fe2e8816129": {
-    "days": 5,
-    "source": "rule",
-    "name": "Passata di pomodoro",
-    "location": "frigo",
-    "ts": 1778133522
-  },
-  "baeb7f2021b4bb91c368c9131a61f07c": {
-    "days": 10,
-    "source": "rule",
-    "name": "Formaggio Monte Maria",
-    "location": "frigo",
-    "ts": 1778133523
-  },
-  "063f2d534407214786d039bb2bffbb93": {
-    "days": 5,
-    "source": "rule",
-    "name": "Carote",
-    "location": "frigo",
-    "ts": 1778133524
-  }
+    "226887def70e33ef73290ebfe75ed4d0": {
+        "days": 7,
+        "source": "ai",
+        "name": "Polpa di pomodoro finissima",
+        "location": "frigo",
+        "ts": 1777444819
+    },
+    "0ed51c9496aa9edfe38caf41772f54ed": {
+        "days": 7,
+        "source": "rule",
+        "name": "Latte di Montagna",
+        "location": "frigo",
+        "ts": 1777444820
+    },
+    "2d63d0216a75d46b465150e925d2e7ad": {
+        "days": 30,
+        "source": "rule",
+        "name": "Burro",
+        "location": "frigo",
+        "ts": 1777444821
+    },
+    "9afdf35c4a256867ef47c32495349eb6": {
+        "days": 5,
+        "source": "rule",
+        "name": "Yaourt Vanille",
+        "location": "frigo",
+        "ts": 1777480477
+    },
+    "584f57418733a1f2acd29fe2e8816129": {
+        "days": 5,
+        "source": "rule",
+        "name": "Passata di pomodoro",
+        "location": "frigo",
+        "ts": 1778133522
+    },
+    "baeb7f2021b4bb91c368c9131a61f07c": {
+        "days": 10,
+        "source": "rule",
+        "name": "Formaggio Monte Maria",
+        "location": "frigo",
+        "ts": 1778133523
+    },
+    "063f2d534407214786d039bb2bffbb93": {
+        "days": 5,
+        "source": "rule",
+        "name": "Carote",
+        "location": "frigo",
+        "ts": 1778133524
+    },
+    "10a3d07c19bb1f889ebc9293862b4b36": {
+        "days": 60,
+        "source": "rule",
+        "name": "Ovomaltine",
+        "location": "dispensa",
+        "ts": 1778419084
+    },
+    "0fbad7ccd8b6155c06aaa6b3c17a67d3": {
+        "days": 365,
+        "source": "rule",
+        "name": "Linguine pasta di Gragnano Igp",
+        "location": "dispensa",
+        "ts": 1778419084
+    },
+    "b4a03e7356e7a0983b9c8af5f3cd8c57": {
+        "days": 60,
+        "source": "rule",
+        "name": "Polpa di pomodoro finissima",
+        "location": "dispensa",
+        "ts": 1778419085
+    },
+    "b8334ff0febd5c0440c9b24c9f3132ed": {
+        "days": 180,
+        "source": "rule",
+        "name": "Basilico tritato surgelato",
+        "location": "freezer",
+        "ts": 1778419086
+    },
+    "0cb14384d0ba763ccf12e079d6aa8d34": {
+        "days": 60,
+        "source": "rule",
+        "name": "Salsa Pronta Ciliegini",
+        "location": "dispensa",
+        "ts": 1778419086
+    },
+    "188634f49edb8b014a46942ee9fad689": {
+        "days": 180,
+        "source": "rule",
+        "name": "Farina Barilla",
+        "location": "dispensa",
+        "ts": 1778419204
+    },
+    "c8db359d8709c69a95f0e6f68216d220": {
+        "days": 9999,
+        "source": "rule",
+        "name": "Bicarbonato",
+        "location": "dispensa",
+        "ts": 1778419205
+    },
+    "a6d16a09fd9a6bfbd0a915f05dd71780": {
+        "days": 7,
+        "source": "ai",
+        "name": "Salsa Pronta Ciliegini",
+        "location": "frigo",
+        "ts": 1778419205
+    },
+    "4f8f1bb04a00e5fc62d7a9cfb21e1796": {
+        "days": 365,
+        "source": "rule",
+        "name": "Riso Chicchi Ricchi Gran Risparmio",
+        "location": "dispensa",
+        "ts": 1778419206
+    },
+    "e116e4c11084a463f9aaac02e1749fe7": {
+        "days": 90,
+        "source": "rule",
+        "name": "Salsa di soia",
+        "location": "dispensa",
+        "ts": 1778419207
+    },
+    "b1ad9afd4139b3f225b79af4dae256ce": {
+        "days": 60,
+        "source": "rule",
+        "name": "Tè Al limone",
+        "location": "dispensa",
+        "ts": 1778419504
+    },
+    "7ff2b7d326dcba52a664cebbf12f78a2": {
+        "days": 3,
+        "source": "ai",
+        "name": "Piselli fini 1\/2 vapore",
+        "location": "frigo",
+        "ts": 1778419505
+    },
+    "71062dc7ffd82b3ee4f40bad076a7c91": {
+        "days": 60,
+        "source": "rule",
+        "name": "Cioccolato bianco",
+        "location": "frigo",
+        "ts": 1778419506
+    },
+    "38a0eaea422dfe970eba125494e75981": {
+        "days": 180,
+        "source": "rule",
+        "name": "Zucca a pezzi",
+        "location": "freezer",
+        "ts": 1778419506
+    },
+    "cde21270e1cd50c431742e49117b225d": {
+        "days": 7,
+        "source": "rule",
+        "name": "Pancetta Dolce",
+        "location": "frigo",
+        "ts": 1778419507
+    },
+    "9e4189bd3f8cb1121e7389967dd4f74c": {
+        "days": 180,
+        "source": "rule",
+        "name": "Farina di grano tenero tipo rossa",
+        "location": "dispensa",
+        "ts": 1778427005
+    },
+    "e3472dd051ed13ae18fc96bbebedc1ba": {
+        "days": 60,
+        "source": "rule",
+        "name": "Lievito di birra",
+        "location": "dispensa",
+        "ts": 1778427005
+    }
 }

data/shopping_total_cache.json

@@ -0,0 +1 @@
+{}

evershelf-kiosk/app/src/main/kotlin/it/dadaloop/evershelf/kiosk/KioskActivity.kt

@@ -23,16 +23,20 @@ import android.view.View
 import android.view.WindowInsets
 import android.view.WindowInsetsController
 import android.view.WindowManager
+import android.content.ComponentCallbacks2
 import android.webkit.ConsoleMessage
 import android.webkit.JavascriptInterface
 import android.webkit.PermissionRequest
+import android.webkit.RenderProcessGoneDetail
 import android.webkit.SslErrorHandler
 import android.webkit.ValueCallback
 import android.webkit.WebChromeClient
 import android.webkit.WebResourceError
 import android.webkit.WebResourceRequest
+import android.webkit.WebResourceResponse
 import android.webkit.WebView
 import android.webkit.WebViewClient
+import androidx.annotation.RequiresApi
 import android.widget.ImageButton
 import android.widget.LinearLayout
 import android.widget.ProgressBar
@@ -334,6 +338,40 @@ class KioskActivity : AppCompatActivity() {
                     view?.loadData(errorPageHtml(), "text/html", "UTF-8")
                 }
             }
+            override fun onReceivedHttpError(
+                view: WebView?,
+                request: WebResourceRequest?,
+                errorResponse: WebResourceResponse?
+            ) {
+                val code = errorResponse?.statusCode ?: 0
+                val url  = request?.url?.toString() ?: ""
+                if (code >= 500) {
+                    ErrorReporter.reportMessage(
+                        type    = "webview-http-error",
+                        message = "Server returned HTTP $code",
+                        extra   = mapOf("url" to url, "status" to code,
+                                        "main_frame" to (request?.isForMainFrame == true))
+                    )
+                    if (request?.isForMainFrame == true) {
+                        view?.loadData(errorPageHtml(), "text/html", "UTF-8")
+                    }
+                }
+            }
+            @RequiresApi(Build.VERSION_CODES.O)
+            override fun onRenderProcessGone(view: WebView?, detail: RenderProcessGoneDetail?): Boolean {
+                val crashed = detail?.didCrash() ?: true
+                val priority = if (Build.VERSION.SDK_INT >= Build.VERSION_CODES.O)
+                    detail?.rendererPriorityAtExit() ?: -1 else -1
+                ErrorReporter.reportMessage(
+                    type    = if (crashed) "renderer-crashed" else "renderer-killed-oom",
+                    message = "WebView renderer process ${if (crashed) "crashed" else "killed by system (OOM)"}",
+                    extra   = mapOf("priority" to priority),
+                    forceReport = true
+                )
+                // Give the reporter 600 ms to queue the POST, then restart the Activity cleanly
+                Handler(Looper.getMainLooper()).postDelayed({ recreate() }, 600)
+                return true // we handled it — do NOT let the system kill the Activity immediately
+            }
             override fun onPageFinished(view: WebView?, url: String?) {
                 super.onPageFinished(view, url)
                 injectKioskOverlay()
@@ -972,6 +1010,35 @@ class KioskActivity : AppCompatActivity() {
         }
     }
 
+    override fun onLowMemory() {
+        super.onLowMemory()
+        ErrorReporter.reportMessage(
+            type    = "low-memory",
+            message = "Device reported onLowMemory — risk of OOM renderer kill"
+        )
+    }
+
+    override fun onTrimMemory(level: Int) {
+        super.onTrimMemory(level)
+        if (level >= ComponentCallbacks2.TRIM_MEMORY_MODERATE) {
+            val label = when (level) {
+                ComponentCallbacks2.TRIM_MEMORY_MODERATE         -> "MODERATE"
+                ComponentCallbacks2.TRIM_MEMORY_COMPLETE         -> "COMPLETE"
+                ComponentCallbacks2.TRIM_MEMORY_BACKGROUND       -> "BACKGROUND"
+                ComponentCallbacks2.TRIM_MEMORY_UI_HIDDEN        -> "UI_HIDDEN"
+                ComponentCallbacks2.TRIM_MEMORY_RUNNING_MODERATE -> "RUNNING_MODERATE"
+                ComponentCallbacks2.TRIM_MEMORY_RUNNING_LOW      -> "RUNNING_LOW"
+                ComponentCallbacks2.TRIM_MEMORY_RUNNING_CRITICAL -> "RUNNING_CRITICAL"
+                else -> "LEVEL_$level"
+            }
+            ErrorReporter.reportMessage(
+                type    = "trim-memory",
+                message = "System memory trim: $label (level $level)",
+                extra   = mapOf("level" to level, "label" to label)
+            )
+        }
+    }
+
     override fun onDestroy() {
         tts?.stop()
         tts?.shutdown()

evershelf-scale-gateway/app/src/main/kotlin/it/dadaloop/evershelf/scalegate/GatewayWebSocketServer.kt

@@ -94,6 +94,8 @@ class GatewayWebSocketServer(
 
     override fun onError(conn: WebSocket?, ex: Exception) {
         Log.e(TAG, "WebSocket error on ${conn?.remoteSocketAddress}", ex)
+        ErrorReporter.report(ex, "GatewayWebSocketServer.onError",
+            mapOf("remote_addr" to (conn?.remoteSocketAddress?.toString() ?: "null")))
     }
 
     // ─── Publishing API ────────────────────────────────────────────────────────

index.html

@@ -11,7 +11,7 @@
     <title>EverShelf</title>
     <link rel="manifest" href="manifest.json">
     <link rel="icon" type="image/png" href="assets/img/logo/logo_icon.png">
-    <link rel="stylesheet" href="assets/css/style.css?v=20260508b">
+    <link rel="stylesheet" href="assets/css/style.css?v=20260511j">
     <!-- QuaggaJS for barcode scanning -->
     <script src="https://cdn.jsdelivr.net/npm/@ericblade/quagga2@1.8.4/dist/quagga.min.js"></script>
     <!-- @xenova/transformers: ES-module bootstrap that exposes a lazy category-classifier as window._categoryPipelinePromise -->
@@ -67,7 +67,7 @@
         <!-- Title — left-aligned; grows to fill space -->
         <div class="header-title-wrap">
             <h1 class="header-title" onclick="showPage('dashboard')">
-                <img src="assets/img/logo/logo_icon.png" alt="" class="header-logo-icon" aria-hidden="true" /><span data-i18n="nav.title">EverShelf</span><span class="header-version">v1.7.4</span>
+                <img src="assets/img/logo/logo_icon.png" alt="" class="header-logo-icon" aria-hidden="true" /><span data-i18n="nav.title">EverShelf</span><span class="header-version">v1.7.9</span>
             </h1>
             <!-- Update badge — shown alongside title, never replaces it -->
             <span class="header-update-badge" id="header-update-badge" style="display:none"></span>
@@ -94,6 +94,13 @@
     </div>
 </header>
 
+<!-- Offline / server-unreachable banner -->
+<div id="offline-banner" class="offline-banner" style="display:none" role="alert" aria-live="assertive">
+    <span class="offline-banner-icon" aria-hidden="true">🔌</span>
+    <span class="offline-banner-text" data-i18n="error.server_offline">Connessione al server persa</span>
+    <button class="offline-banner-retry" onclick="_heartbeatRetry()" data-i18n="error.server_retry">Riprova</button>
+</div>
+
 <!-- Main Content Area -->
 <main class="app-content" id="app-content">
 
@@ -227,7 +234,7 @@
             <div class="scan-result" id="scan-result" style="display:none"></div>
             <div class="barcode-manual-entry">
                 <div class="barcode-input-row">
-                    <input type="text" id="manual-barcode-input" class="form-input" placeholder="Inserisci codice a barre..." inputmode="numeric" pattern="[0-9]*" onkeydown="if(event.key==='Enter')submitManualBarcode()" data-i18n-placeholder="scan.barcode_placeholder">
+                    <input type="text" id="manual-barcode-input" class="form-input" placeholder="Inserisci codice a barre..." inputmode="numeric" pattern="[0-9]*" maxlength="14" oninput="autoSubmitEAN(this)" onkeydown="if(event.key==='Enter')submitManualBarcode()" data-i18n-placeholder="scan.barcode_placeholder">
                     <button class="btn btn-primary" onclick="submitManualBarcode()" data-i18n="btn.search">🔍 Cerca</button>
                 </div>
             </div>
@@ -1462,6 +1469,6 @@
     </div>
 </div>
 
-<script src="assets/js/app.js?v=20260508c"></script>
+<script src="assets/js/app.js?v=20260511j"></script>
 </body>
 </html>

manifest.json

@@ -2,7 +2,7 @@
     "name": "EverShelf",
     "short_name": "EverShelf",
     "description": "Gestione completa della dispensa di casa con scansione barcode",
-    "version": "1.7.4",
+    "version": "1.7.9",
     "start_url": "/evershelf/",
     "display": "standalone",
     "background_color": "#f0f4e8",