Aggiunge il mute del microfono in diretta per evitare claim YouTube sulla musica in palestra.

Co-authored-by: Cursor <cursoragent@cursor.com>

backend/app/channels/session_channel.rb

@@ -55,6 +55,10 @@ class SessionChannel < ApplicationCable::Channel
       Sessions::Pause.new(session).call
     when "resume_stream"
       Sessions::Resume.new(session).call
+    when "mute_audio"
+      Sessions::SetAudioMute.new(session, muted: true).call
+    when "unmute_audio"
+      Sessions::SetAudioMute.new(session, muted: false).call
     end
   end
 

backend/app/controllers/admin/passwords_controller.rb

@@ -9,13 +9,23 @@ module Admin
         return render :edit, status: :unprocessable_entity
       end
 
-      if params[:password].blank? || params[:password].length < 8
+      if params[:password] != params[:password_confirmation]
-        flash.now[:alert] = t("admin.flash.password_too_short")
+        flash.now[:alert] = t("admin.flash.password_mismatch")
         return render :edit, status: :unprocessable_entity
       end
 
-      if params[:password] != params[:password_confirmation]
+      if (code = PasswordComplexity.violation(params[:password]))
-        flash.now[:alert] = t("admin.flash.password_mismatch")
+        key = case code
+              when :blank, :too_short then :password_too_short
+              when :too_long then :password_too_long
+              else :password_too_weak
+              end
+        flash.now[:alert] = t("admin.flash.#{key}")
+        return render :edit, status: :unprocessable_entity
+      end
+
+      if PasswordComplexity.same_as_current?(current_admin_account, params[:password])
+        flash.now[:alert] = t("admin.flash.password_same_as_current")
         return render :edit, status: :unprocessable_entity
       end
 

backend/app/controllers/api/v1/accounts_controller.rb

@@ -0,0 +1,60 @@
+module Api
+  module V1
+    class AccountsController < ApplicationController
+      def show
+        render json: user_json(current_user)
+      end
+
+      def update
+        name = params[:name].to_s.strip
+        if name.blank?
+          return render json: { error: I18n.t("flash.accounts.name_required") }, status: :unprocessable_entity
+        end
+
+        if current_user.update(name: name)
+          render json: user_json(current_user)
+        else
+          render json: { error: current_user.errors.full_messages.join(", ") }, status: :unprocessable_entity
+        end
+      end
+
+      def password
+        result = Users::ChangePassword.call(
+          user: current_user,
+          current_password: params[:current_password],
+          password: params[:password],
+          password_confirmation: params[:password_confirmation]
+        )
+
+        unless result.ok?
+          return render json: { error: password_error_message(result.error) }, status: :unprocessable_entity
+        end
+
+        render json: { message: I18n.t("flash.accounts.password_updated") }
+      end
+
+      private
+
+      def user_json(user)
+        {
+          id: user.id,
+          email: user.email,
+          name: user.name,
+          role: user.role
+        }
+      end
+
+      def password_error_message(code)
+        case code
+        when :current_incorrect then I18n.t("flash.accounts.password_current_incorrect")
+        when :too_short then I18n.t("flash.accounts.password_too_short")
+        when :too_long then I18n.t("flash.accounts.password_too_long")
+        when :too_weak then I18n.t("flash.accounts.password_too_weak")
+        when :same_as_current then I18n.t("flash.accounts.password_same_as_current")
+        when :mismatch then I18n.t("flash.accounts.password_mismatch")
+        else I18n.t("flash.accounts.password_update_failed")
+        end
+      end
+    end
+  end
+end

backend/app/controllers/api/v1/auth_controller.rb

@@ -1,7 +1,7 @@
 module Api
   module V1
     class AuthController < ApplicationController
-      skip_before_action :authenticate_request!, only: %i[login refresh register]
+      skip_before_action :authenticate_request!, only: %i[login refresh register forgot_password]
 
       def register
         user = User.new(
@@ -22,18 +22,18 @@ module Api
         if user&.authenticate(params[:password])
           render json: token_response(user), status: :ok
         else
-          render json: { error: "Invalid credentials" }, status: :unauthorized
+          render json: { error: I18n.t("flash.sessions.invalid_credentials") }, status: :unauthorized
         end
       end
 
       def logout
-        render json: { message: "Logged out" }
+        render json: { message: I18n.t("flash.sessions.logged_out") }
       end
 
       def refresh
         payload = JsonWebToken.decode(params[:refresh_token] || bearer_token)
         user = User.find_by(id: payload&.dig(:user_id))
-        return render json: { error: "Invalid token" }, status: :unauthorized unless user
+        return render json: { error: I18n.t("flash.sessions.invalid_token") }, status: :unauthorized unless user
 
         render json: token_response(user)
       end
@@ -42,6 +42,13 @@ module Api
         render json: user_json(current_user)
       end
 
+      def forgot_password
+        Users::RequestPasswordReset.call(email: params[:email])
+        render json: {
+          message: I18n.t("flash.password_resets.email_sent")
+        }
+      end
+
       private
 
       def token_response(user)

backend/app/controllers/api/v1/stream_sessions_controller.rb

@@ -34,6 +34,12 @@ module Api
         render json: session_json(@session)
       end
 
+      def audio_mute
+        muted = params.key?(:muted) ? params[:muted] : true
+        Sessions::SetAudioMute.new(@session, muted: muted).call
+        render json: session_json(@session)
+      end
+
       def score
         Scoring::SyncState.new(session: @session, payload: score_sync_params).call
         render json: session_json(@session, detail: true)
@@ -189,7 +195,8 @@ module Api
           quality_preset: session.quality_preset,
           target_bitrate: session.target_bitrate,
           started_at: session.started_at,
-          disconnection_count: session.disconnection_count
+          disconnection_count: session.disconnection_count,
+          audio_muted: session.audio_muted
         }
         if detail
           data[:score] = session.score_state&.as_cable_payload

backend/app/controllers/application_controller.rb

@@ -1,17 +1,25 @@
 class ApplicationController < ActionController::API
   include ActionController::HttpAuthentication::Token::ControllerMethods
 
+  before_action :set_api_locale
   before_action :authenticate_request!
 
   attr_reader :current_user
 
   private
 
+  def set_api_locale
+    explicit = LocaleResolver.normalize(request.headers["X-Locale"])
+    I18n.locale = explicit ||
+                  LocaleResolver.from_accept_language(request.headers["Accept-Language"]) ||
+                  I18n.default_locale
+  end
+
   def authenticate_request!
     token = bearer_token
     payload = JsonWebToken.decode(token)
     @current_user = User.find_by(id: payload[:user_id]) if payload
-    render json: { error: "Unauthorized" }, status: :unauthorized unless @current_user
+    render json: { error: I18n.t("flash.sessions.unauthorized") }, status: :unauthorized unless @current_user
   end
 
   def bearer_token

backend/app/controllers/public/accounts_controller.rb

@@ -0,0 +1,39 @@
+module Public
+  class AccountsController < WebBaseController
+    before_action :require_login!
+
+    def show
+    end
+
+    def update
+      name = params[:name].to_s.strip
+      if name.blank?
+        flash.now[:alert] = t("flash.accounts.name_required")
+        return render :show, status: :unprocessable_entity
+      end
+
+      if current_user.update(name: name)
+        redirect_to public_account_path, notice: t("flash.accounts.profile_updated")
+      else
+        flash.now[:alert] = current_user.errors.full_messages.to_sentence
+        render :show, status: :unprocessable_entity
+      end
+    end
+
+    def update_password
+      result = Users::ChangePassword.call(
+        user: current_user,
+        current_password: params[:current_password],
+        password: params[:password],
+        password_confirmation: params[:password_confirmation]
+      )
+
+      unless result.ok?
+        redirect_to public_account_path, alert: t("flash.accounts.password_#{result.error}")
+        return
+      end
+
+      redirect_to public_account_path, notice: t("flash.accounts.password_updated")
+    end
+  end
+end

backend/app/controllers/public/pages_controller.rb

@@ -11,17 +11,8 @@ module Public
       load_club_billing_context_for_pricing
     end
 
-    private
+    def support
-
+      @app_store_review_chrome = true
-    def load_club_billing_context_for_pricing
-      return unless logged_in?
-
-      @club = current_user.primary_club
-      return unless @club
-
-      @subscription = @club.subscription
-      @team = @club.teams.order(:name).first
-      @entitlements = @team&.entitlements
     end
 
     def privacy
@@ -38,5 +29,18 @@ module Public
 
     def pallavolo
     end
+
+    private
+
+    def load_club_billing_context_for_pricing
+      return unless logged_in?
+
+      @club = current_user.primary_club
+      return unless @club
+
+      @subscription = @club.subscription
+      @team = @club.teams.order(:name).first
+      @entitlements = @team&.entitlements
+    end
   end
 end

backend/app/controllers/public/password_resets_controller.rb

@@ -4,11 +4,7 @@ module Public
     end
 
     def create
-      user = User.find_by(email: params[:email]&.downcase&.strip)
+      Users::RequestPasswordReset.call(email: params[:email])
-      if user
-        token = user.generate_password_reset!
-        UserMailer.password_reset(user, token).deliver_now
-      end
 
       redirect_to public_login_path,
                   notice: t("flash.password_resets.email_sent")
@@ -17,7 +13,7 @@ module Public
     def edit
       @user = User.find_by_password_reset_token(params[:token])
       if @user.nil? || @user.password_reset_expired?
-        redirect_to new_public_password_reset_path,
+        redirect_to public_password_forgot_path,
                     alert: t("flash.password_resets.invalid_or_expired_link")
         return
       end
@@ -27,19 +23,25 @@ module Public
     def update
       @user = User.find_by_password_reset_token(params[:token])
       if @user.nil? || @user.password_reset_expired?
-        redirect_to new_public_password_reset_path,
+        redirect_to public_password_forgot_path,
                     alert: t("flash.password_resets.invalid_or_expired_link")
         return
       end
 
-      if params[:password].blank? || params[:password].length < 8
+      if params[:password] != params[:password_confirmation]
-        flash.now[:alert] = t("flash.password_resets.password_min_length")
+        flash.now[:alert] = t("flash.password_resets.password_mismatch")
         @token = params[:token]
         return render :edit, status: :unprocessable_entity
       end
 
-      if params[:password] != params[:password_confirmation]
+      if (code = PasswordComplexity.violation(params[:password]))
-        flash.now[:alert] = t("flash.password_resets.password_mismatch")
+        flash.now[:alert] = t("flash.password_resets.password_#{code == :blank ? :too_short : code}")
+        @token = params[:token]
+        return render :edit, status: :unprocessable_entity
+      end
+
+      if PasswordComplexity.same_as_current?(@user, params[:password])
+        flash.now[:alert] = t("flash.password_resets.password_same_as_current")
         @token = params[:token]
         return render :edit, status: :unprocessable_entity
       end

backend/app/controllers/public/regia_controller.rb

@@ -7,7 +7,7 @@ module Public
     layout "regia"
 
     protect_from_forgery with: :null_session
-    skip_before_action :verify_authenticity_token, only: %i[score pause resume stop]
+    skip_before_action :verify_authenticity_token, only: %i[score pause resume stop audio_mute]
 
     before_action :set_session_from_token
 
@@ -61,6 +61,12 @@ module Public
       render json: status_payload
     end
 
+    def audio_mute
+      muted = params.key?(:muted) ? params[:muted] : !@session.audio_muted
+      Sessions::SetAudioMute.new(@session, muted: muted).call
+      render json: status_payload
+    end
+
     private
 
     def set_session_from_token
@@ -78,6 +84,7 @@ module Public
       {
         status: @session.status,
         paused: @session.paused?,
+        audio_muted: @session.audio_muted,
         stream_closed: closed,
         live: !closed && (@session.live? || @session.paused? || publisher_online),
         on_air: playable || (!closed && @session.status.in?(%w[connecting live reconnecting paused])),

backend/app/controllers/public/sitemap_controller.rb

@@ -11,6 +11,7 @@ module Public
         { loc: "#{base}/live", changefreq: "hourly", priority: "0.85" },
         { loc: "#{base}/squadre", changefreq: "daily", priority: "0.85" },
         { loc: "#{base}/privacy", changefreq: "yearly", priority: "0.3" },
+        { loc: "#{base}/support", changefreq: "yearly", priority: "0.3" },
         { loc: "#{base}/cookie", changefreq: "yearly", priority: "0.3" },
         { loc: "#{base}/termini", changefreq: "yearly", priority: "0.3" }
       ]

backend/app/helpers/public/regia_helper.rb

@@ -44,9 +44,12 @@ module Public
         partialsPrefix: t("regia.board.partials_prefix"),
         resumed: t("regia.js.resumed"),
         pausedCover: t("regia.js.paused_cover"),
+        muted: t("regia.js.muted"),
+        unmuted: t("regia.js.unmuted"),
         closed: t("regia.js.closed"),
         resumeError: t("regia.js.resume_error"),
         pauseError: t("regia.js.pause_error"),
+        muteError: t("regia.js.mute_error"),
         closeError: t("regia.js.close_error"),
         closeConfirm: t("regia.js.close_confirm"),
         linkUnavailable: t("regia.js.link_unavailable"),
@@ -58,6 +61,8 @@ module Public
         streamEnded: t("regia.preview_ended"),
         resumeLabel: t("regia.resume"),
         pauseLabel: t("regia.pause"),
+        muteLabel: t("regia.mute"),
+        unmuteLabel: t("regia.unmute"),
         endedBadge: t("regia.status.ended"),
         pausedBadge: t("regia.status.paused"),
         liveBadge: t("regia.status.live"),

backend/app/models/admin_account.rb

@@ -1,4 +1,6 @@
 class AdminAccount < ApplicationRecord
+  include PasswordComplexity
+
   has_secure_password
 
   validates :username, presence: true, uniqueness: true

backend/app/models/concerns/password_complexity.rb

@@ -0,0 +1,62 @@
+# Criteri "di mercato" (stile Cognito/Auth0 bilanciato):
+# - minimo 8 caratteri (max 72 per bcrypt)
+# - almeno 3 classi su 4: minuscole, maiuscole, numeri, simboli
+module PasswordComplexity
+  extend ActiveSupport::Concern
+
+  MIN_LENGTH = 8
+  MAX_LENGTH = 72
+  REQUIRED_CLASSES = 3
+
+  CLASS_CHECKS = {
+    lowercase: /[a-z]/,
+    uppercase: /[A-Z]/,
+    digit: /\d/,
+    symbol: /[^A-Za-z0-9]/
+  }.freeze
+
+  class << self
+    def violation(password)
+      value = password.to_s
+      return :blank if value.blank?
+      return :too_short if value.length < MIN_LENGTH
+      return :too_long if value.bytesize > MAX_LENGTH
+      return :too_weak unless strong_enough?(value)
+
+      nil
+    end
+
+    def strong_enough?(password)
+      matched = CLASS_CHECKS.count { |_, pattern| password.match?(pattern) }
+      matched >= REQUIRED_CLASSES
+    end
+
+    # Confronta con il digest già salvato (prima di assegnare la nuova password).
+    def same_as_current?(record, password)
+      return false if password.blank? || !record.respond_to?(:authenticate)
+
+      record.authenticate(password).present?
+    end
+
+    def requirement_summary
+      I18n.t("password_policy.hint")
+    end
+  end
+
+  included do
+    validate :password_meets_complexity_policy, if: -> { password.present? }
+  end
+
+  private
+
+  def password_meets_complexity_policy
+    case PasswordComplexity.violation(password)
+    when :too_short
+      errors.add(:password, :too_short, count: MIN_LENGTH)
+    when :too_long
+      errors.add(:password, :too_long, count: MAX_LENGTH)
+    when :too_weak
+      errors.add(:password, :complexity)
+    end
+  end
+end

backend/app/models/stream_event.rb

@@ -1,7 +1,7 @@
 class StreamEvent < ApplicationRecord
   EVENT_TYPES = %w[
     connected disconnected reconnected quality_changed error paused resumed
-    started ended network_test pairing youtube_ready
+    started ended network_test pairing youtube_ready audio_muted audio_unmuted
   ].freeze
 
   belongs_to :stream_session

backend/app/models/user.rb

@@ -1,4 +1,6 @@
 class User < ApplicationRecord
+  include PasswordComplexity
+
   ROLES = %w[admin coach parent volunteer].freeze
 
   has_secure_password

backend/app/services/sessions/set_audio_mute.rb

@@ -0,0 +1,28 @@
+module Sessions
+  # Silenzia o riattiva il microfono della camera in onda.
+  # Lo stream continua a inviare AAC silenzioso (YouTube/MediaMTX richiedono la traccia audio).
+  class SetAudioMute
+    def initialize(session, muted:)
+      @session = session
+      @muted = ActiveModel::Type::Boolean.new.cast(muted)
+    end
+
+    def call
+      return @session if @session.audio_muted == @muted
+
+      @session.update!(audio_muted: @muted)
+      action = @muted ? "mute_audio" : "unmute_audio"
+      event_type = @muted ? "audio_muted" : "audio_unmuted"
+      log_event(event_type)
+      SessionChannel.broadcast_message(@session, { type: "command", action: action, muted: @muted })
+      SessionChannel.broadcast_message(@session, { type: "stream_event", event: "audio_muted", muted: @muted })
+      @session
+    end
+
+    private
+
+    def log_event(type)
+      @session.stream_events.create!(event_type: type, occurred_at: Time.current, metadata: { muted: @muted })
+    end
+  end
+end

backend/app/services/users/change_password.rb

@@ -0,0 +1,47 @@
+module Users
+  class ChangePassword
+    Result = Struct.new(:ok?, :error, keyword_init: true)
+
+    def self.call(user:, current_password:, password:, password_confirmation:)
+      new(
+        user: user,
+        current_password: current_password,
+        password: password,
+        password_confirmation: password_confirmation
+      ).call
+    end
+
+    def initialize(user:, current_password:, password:, password_confirmation:)
+      @user = user
+      @current_password = current_password.to_s
+      @password = password.to_s
+      @password_confirmation = password_confirmation.to_s
+    end
+
+    def call
+      unless @user.authenticate(@current_password)
+        return Result.new(ok?: false, error: :current_incorrect)
+      end
+
+      if @password != @password_confirmation
+        return Result.new(ok?: false, error: :mismatch)
+      end
+
+      if (code = PasswordComplexity.violation(@password))
+        return Result.new(ok?: false, error: code == :blank ? :too_short : code)
+      end
+
+      if PasswordComplexity.same_as_current?(@user, @password)
+        return Result.new(ok?: false, error: :same_as_current)
+      end
+
+      unless @user.update(password: @password)
+        complexity_error = @user.errors.details[:password]&.any? { |d| d[:error] == :complexity }
+        return Result.new(ok?: false, error: complexity_error ? :too_weak : :too_short)
+      end
+
+      @user.clear_password_reset!
+      Result.new(ok?: true)
+    end
+  end
+end

backend/app/services/users/request_password_reset.rb

@@ -0,0 +1,19 @@
+module Users
+  class RequestPasswordReset
+    def self.call(email:)
+      new(email: email).call
+    end
+
+    def initialize(email:)
+      @email = email.to_s.downcase.strip
+    end
+
+    def call
+      user = User.find_by(email: @email)
+      return if user.nil?
+
+      token = user.generate_password_reset!
+      UserMailer.password_reset(user, token).deliver_now
+    end
+  end
+end

backend/app/views/layouts/marketing.html.erb

@@ -8,17 +8,17 @@
     <%= render "shared/meta_tags" %>
     <%= yield :head %>
     <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.2/css/all.min.css" integrity="sha512-SnH5WK+bZxgPHs44uWIX+LLJAJ9/2PkPKZ5QiAj6Ta86w+fsb2TkcmfRyVX3pBnMFcV7oQPJkl9QevSCWr3W6A==" crossorigin="anonymous" referrerpolicy="no-referrer">
-    <link rel="stylesheet" href="/marketing.css?v=44">
+    <link rel="stylesheet" href="/marketing.css?v=50">
   </head>
   <body data-confirm-i18n='<%= raw confirm_dialog_i18n_json %>'<% if MatchLiveTv.google_analytics_configured? %> data-ga-id="<%= MatchLiveTv.google_analytics_measurement_id %>"<% end %>>
     <%= render "shared/cookie_banner" %>
-    <%= render "shared/marketing_nav" %>
+    <%= render(@app_store_review_chrome ? "shared/marketing_nav_app_store" : "shared/marketing_nav") %>
     <main>
       <% if flash[:notice] %><div class="wrap"><div class="flash notice"><%= flash[:notice] %></div></div><% end %>
       <% if flash[:alert] %><div class="wrap"><div class="flash alert"><%= flash[:alert] %></div></div><% end %>
       <%= yield %>
     </main>
-    <%= render "shared/marketing_footer" %>
+    <%= render(@app_store_review_chrome ? "shared/marketing_footer_app_store" : "shared/marketing_footer") %>
     <script src="/branding-form.js?v=1" defer></script>
     <script src="/roster-form.js?v=1" defer></script>
     <script src="/password-toggle.js?v=2" defer></script>

backend/app/views/layouts/marketing_live.html.erb

@@ -6,7 +6,7 @@
     <title><%= content_for?(:title) ? yield(:title) : "Match Live TV" %></title>
     <%= render "shared/meta_tags" %>
     <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.2/css/all.min.css" integrity="sha512-SnH5WK+bZxgPHs44uWIX+LLJAJ9/2PkPKZ5QiAj6Ta86w+fsb2TkcmfRyVX3pBnMFcV7oQPJkl9QevSCWr3W6A==" crossorigin="anonymous" referrerpolicy="no-referrer">
-    <link rel="stylesheet" href="/marketing.css?v=44">
+    <link rel="stylesheet" href="/marketing.css?v=50">
     <link rel="stylesheet" href="/live.css?v=26">
     <%= yield :head %>
   </head>

backend/app/views/layouts/public.html.erb

@@ -41,6 +41,7 @@
             <% elsif current_user.manageable_teams.any? %>
               · <%= link_to t("nav.my_team"), public_team_details_path(current_user.manageable_teams.first) %>
             <% end %>
+            · <%= link_to t("nav.account"), public_account_path %>
             · <%= button_to t("nav.logout"), public_logout_path, method: :delete, form: { style: "display:inline" }, class: "btn btn-secondary", style: "padding:6px 12px;font-size:0.85rem" %>
           <% else %>
             · <%= link_to t("nav.login"), public_login_path %>

backend/app/views/public/accounts/show.html.erb

@@ -0,0 +1,56 @@
+<% content_for :title, t("auth.account.meta_title") %>
+<% content_for :meta_description, t("auth.account.meta_description") %>
+<% content_for :robots, "noindex, nofollow" %>
+
+<section class="auth-page">
+  <h1><%= t("auth.account.title") %></h1>
+
+  <div class="card" style="margin-bottom:1.5rem">
+    <h2 style="font-size:1.1rem;margin-top:0"><%= t("auth.account.profile_heading") %></h2>
+    <%= form_with url: public_account_path, method: :patch, local: true do %>
+      <p>
+        <label for="account_email"><%= t("auth.email") %></label><br>
+        <input type="email" id="account_email" value="<%= current_user.email %>" readonly
+               class="input" autocomplete="username"
+               style="width:100%;opacity:0.75;cursor:not-allowed">
+      </p>
+      <p class="muted" style="margin-top:-0.5rem;font-size:0.9rem">
+        <%= t("auth.account.role_label", role: current_user.role) %>
+      </p>
+      <%= render "shared/input_toggle",
+            name: :name,
+            label: t("auth.account.name_label"),
+            value: current_user.name,
+            required: true,
+            autocomplete: "name",
+            masked: false %>
+      <%= submit_tag t("auth.account.save_profile"), class: "btn btn-primary" %>
+    <% end %>
+  </div>
+
+  <div class="card">
+    <h2 style="font-size:1.1rem;margin-top:0"><%= t("auth.account.password_heading") %></h2>
+    <p class="muted" style="font-size:0.9rem"><%= t("password_policy.hint") %></p>
+    <%= form_with url: public_account_password_path, method: :patch, local: true do %>
+      <%= render "shared/input_toggle",
+            name: :current_password,
+            label: t("auth.account.current_password_label"),
+            input_type: "password",
+            required: true,
+            autocomplete: "current-password" %>
+      <%= render "shared/input_toggle",
+            name: :password,
+            label: t("auth.account.new_password_label"),
+            input_type: "password",
+            required: true,
+            autocomplete: "new-password" %>
+      <%= render "shared/input_toggle",
+            name: :password_confirmation,
+            label: t("auth.password_confirmation"),
+            input_type: "password",
+            required: true,
+            autocomplete: "new-password" %>
+      <%= submit_tag t("auth.account.save_password"), class: "btn btn-primary" %>
+    <% end %>
+  </div>
+</section>

backend/app/views/public/invitations/show.html.erb

@@ -2,7 +2,8 @@
 <% content_for :meta_description, t("auth.invitation.meta_description") %>
 <% content_for :robots, "noindex, nofollow" %>
 
-<div class="card" style="max-width:480px">
+<section class="auth-page">
+  <div class="card">
     <h1><%= raw t("auth.invitation.title_html", team_name: @invitation.team.name) %></h1>
     <p><%= raw t("auth.invitation.role_notice_html", email: @invitation.email) %></p>
     <p class="muted" style="font-size:0.9rem;margin-bottom:16px">
@@ -23,4 +24,5 @@
       <%= t("auth.invitation.mobile_app_label") %>
       <a href="matchlivetv://join/<%= @token %>"><%= t("auth.invitation.open_in_app") %></a>
     </p>
-</div>
+  </div>
+</section>

backend/app/views/public/pages/cookies.html.erb

@@ -46,6 +46,7 @@
 
     <h3><%= t("legal.cookies.s4_1_title") %></h3>
     <p><%= t("legal.cookies.s4_1_intro") %></p>
+    <div class="table-scroll">
       <table class="legal-table">
       <thead>
         <tr><th><%= t("legal.cookies.table_col_name") %></th><th><%= t("legal.cookies.table_col_purpose") %></th><th><%= t("legal.cookies.table_col_duration") %></th><th><%= t("legal.cookies.table_col_provider") %></th></tr>
@@ -65,6 +66,7 @@
         </tr>
       </tbody>
       </table>
+    </div>
 
     <h3><%= t("legal.cookies.s4_2_title") %></h3>
     <p>
@@ -75,6 +77,7 @@
     <% else %>
       <p class="muted"><%= t("legal.cookies.s4_2_inactive") %></p>
     <% end %>
+    <div class="table-scroll">
       <table class="legal-table">
       <thead>
         <tr><th><%= t("legal.cookies.table2_col_name") %></th><th><%= t("legal.cookies.table_col_purpose") %></th><th><%= t("legal.cookies.table_col_duration") %></th><th><%= t("legal.cookies.table_col_provider") %></th></tr>
@@ -100,6 +103,7 @@
         </tr>
       </tbody>
       </table>
+    </div>
     <p>
       <%= raw t(
         "legal.cookies.s4_2_p2_html",

backend/app/views/public/pages/pricing.html.erb

@@ -22,6 +22,7 @@
 
   <%= render "shared/plan_cards" %>
 
+  <div class="table-scroll">
     <table class="compare-table">
       <thead>
         <tr><th></th><th>Free</th><th>Premium Light</th><th>Premium Full</th></tr>
@@ -36,6 +37,7 @@
         <tr><td><%= t("pages.pricing.table_price") %></td><td><%= t("pages.pricing.table_price_free") %></td><td><%= raw t("pages.pricing.table_price_light_html") %></td><td><%= raw t("pages.pricing.table_price_full_html") %></td></tr>
       </tbody>
     </table>
+  </div>
 
   <div class="card" style="margin-top:32px;text-align:center">
     <h3 style="margin-top:0"><%= t("pages.pricing.different_title") %></h3>

backend/app/views/public/pages/privacy.html.erb

@@ -77,6 +77,7 @@
 
   <section>
     <h2><%= t("legal.privacy.s5_title") %></h2>
+    <div class="table-scroll">
       <table class="legal-table">
       <thead>
         <tr><th><%= t("legal.privacy.s5_col_purpose") %></th><th><%= t("legal.privacy.s5_col_basis") %></th></tr>
@@ -108,6 +109,7 @@
         </tr>
       </tbody>
       </table>
+    </div>
   </section>
 
   <section>

backend/app/views/public/pages/support.html.erb

@@ -0,0 +1,38 @@
+<% content_for :title, t("legal.support.title") %>
+<% content_for :meta_description, t("legal.support.meta_description") %>
+<% content_for :canonical_url, seo_absolute_url(public_support_path) %>
+
+<div class="wrap legal-doc">
+  <h1><%= t("legal.support.h1") %></h1>
+  <p><%= t("legal.support.intro") %></p>
+
+  <p>
+    <%= t("legal.support.email_label") %>
+    <a href="mailto:<%= MatchLiveTv.support_email %>"><%= MatchLiveTv.support_email %></a>
+  </p>
+
+  <section>
+    <h2><%= t("legal.support.access_title") %></h2>
+    <p><%= t("legal.support.access_body") %></p>
+  </section>
+
+  <section>
+    <h2><%= t("legal.support.live_title") %></h2>
+    <p><%= t("legal.support.live_body") %></p>
+  </section>
+
+  <section>
+    <h2><%= t("legal.support.team_title") %></h2>
+    <p><%= t("legal.support.team_body") %></p>
+  </section>
+
+  <section>
+    <h2><%= t("legal.support.privacy_title") %></h2>
+    <p>
+      <%= raw t(
+        "legal.support.privacy_body_html",
+        privacy_link: link_to(t("legal.support.privacy_link_text"), public_privacy_path)
+      ) %>
+    </p>
+  </section>
+</div>

backend/app/views/public/password_resets/edit.html.erb

@@ -4,6 +4,7 @@
 <section class="auth-page">
   <h1><%= t("auth.password_reset.title") %></h1>
   <div class="card">
+    <p class="muted" style="font-size:0.9rem"><%= t("password_policy.hint") %></p>
     <%= form_with url: public_password_reset_path, method: :patch, local: true do %>
       <%= hidden_field_tag :token, @token %>
       <%= render "shared/input_toggle",

backend/app/views/public/regia/show.html.erb

@@ -15,6 +15,7 @@
      data-score-url="<%= j public_regia_score_path(params[:token]) %>"
      data-pause-url="<%= j public_regia_pause_path(params[:token]) %>"
      data-resume-url="<%= j public_regia_resume_path(params[:token]) %>"
+     data-audio-mute-url="<%= j public_regia_audio_mute_path(params[:token]) %>"
      data-stop-url="<%= j public_regia_stop_path(params[:token]) %>"
      data-cable-url="<%= j "/cable?regia_token=#{params[:token]}" %>"
      data-hls-url="<%= j @session.hls_playback_url %>"
@@ -26,7 +27,8 @@
      data-live-share-title="<%= j @live_share_title %>"
      data-points-target="<%= @match.effective_board_type.in?(%w[volley racket]) ? Scoring::Rules.from_match(@match).points_target(@score.current_set) : 0 %>"
      data-stream-closed="<%= @stream_closed %>"
-     data-initial-paused="<%= @session.paused? %>">
+     data-initial-paused="<%= @session.paused? %>"
+     data-initial-audio-muted="<%= @session.audio_muted %>">
 
   <header class="regia-header">
     <h1><%= @team.name %> vs <%= @match.opponent_name %></h1>
@@ -77,6 +79,7 @@
 
   <% unless @stream_closed %>
     <button type="button" class="regia-btn regia-btn--outline" id="btn-pause"><%= @session.paused? ? t("regia.resume") : t("regia.pause") %></button>
+    <button type="button" class="regia-btn regia-btn--outline<%= @session.audio_muted ? ' is-muted' : '' %>" id="btn-audio-mute"><%= @session.audio_muted ? t("regia.unmute") : t("regia.mute") %></button>
     <button type="button" class="regia-btn regia-btn--danger" id="btn-stop"><%= t("regia.stop") %></button>
   <% end %>
 </div>
@@ -94,4 +97,4 @@
   </div>
 </div>
 
-<script src="/regia.js?v=8"></script>
+<script src="/regia.js?v=9"></script>

backend/app/views/public/registrations/new.html.erb

@@ -25,6 +25,7 @@
             required: true,
             minlength: 8,
             autocomplete: "new-password" %>
+      <p class="muted" style="font-size:0.9rem;margin-top:-0.5rem"><%= t("password_policy.hint") %></p>
       <%= render "shared/input_toggle",
             name: "user[password_confirmation]",
             id: "user_password_confirmation",

backend/app/views/shared/_billing_documents.html.erb

@@ -20,6 +20,7 @@
 
   <h3 style="margin-top:28px;font-size:1.1rem"><%= t("billing.documents.table_heading") %></h3>
   <% if payments.any? %>
+    <div class="table-scroll">
     <table class="data billing-table">
       <thead>
         <tr>
@@ -60,6 +61,7 @@
         <% end %>
       </tbody>
     </table>
+    </div>
   <% else %>
     <p style="color:#888"><%= t("billing.documents.no_payments") %></p>
   <% end %>

backend/app/views/shared/_language_switcher.html.erb

@@ -58,10 +58,18 @@
   }
 
   toggle.addEventListener("click", function (e) {
+    e.preventDefault();
     e.stopPropagation();
     setOpen(menu.hidden);
   });
 
+  // Keep parent mobile nav open while interacting with the switcher UI.
+  root.addEventListener("click", function (e) {
+    if (e.target.closest(".lang-switcher__toggle")) {
+      e.stopPropagation();
+    }
+  });
+
   document.addEventListener("click", function (e) {
     if (!root.contains(e.target)) setOpen(false);
   });

backend/app/views/shared/_marketing_footer.html.erb

@@ -4,6 +4,7 @@
       <strong style="color:#fff">Match Live TV</strong> — <%= t("footer.tagline") %>
     </div>
     <div>
+      <%= link_to t("common.support"), public_support_path %> ·
       <%= link_to t("common.pricing"), public_prezzi_path %> ·
       <%= link_to t("footer.live"), public_live_index_path %> ·
       <%= link_to t("common.faq"), public_faq_path %> ·

backend/app/views/shared/_marketing_footer_app_store.html.erb

@@ -0,0 +1,19 @@
+<%# Footer minimale per App Store Review: solo link legali/supporto, nessun CTA commerciale. %>
+<footer class="site-footer">
+  <div class="wrap">
+    <div>
+      <strong style="color:#fff">Match Live TV</strong> — <%= t("footer.tagline") %>
+    </div>
+    <div>
+      <%= link_to t("common.support"), public_support_path %> ·
+      <%= link_to t("common.privacy"), public_privacy_path %> ·
+      <%= link_to t("common.cookies"), public_cookies_path %> ·
+      <%= link_to t("common.terms"), public_termini_path %>
+      · <button type="button" class="footer-link-btn" data-cookie-manage><%= t("footer.manage_cookies") %></button>
+    </div>
+    <div class="site-footer__legal">
+      <p><%= t("footer.copyright") %></p>
+      <p><%= t("footer.responsibility") %></p>
+    </div>
+  </div>
+</footer>

backend/app/views/shared/_marketing_nav.html.erb

@@ -19,6 +19,15 @@
 
   <nav id="site-nav" class="nav" aria-label="<%= t('nav.main_menu') %>" aria-hidden="true">
     <div class="nav-panel">
+      <div class="nav-mobile-head">
+        <%= link_to root_path, class: "nav-mobile-brand", aria: { label: "Match Live TV" }, title: "Match Live TV" do %>
+          <img class="nav-mobile-brand-logo" src="/logo.png?v=3" alt="" width="40" height="40" decoding="async">
+          <span class="brand">Match <span>Live TV</span></span>
+        <% end %>
+        <div class="nav-lang">
+          <%= render "shared/language_switcher" %>
+        </div>
+      </div>
       <%= link_to t("nav.home"), root_path, class: (request.path == "/" ? "nav-active" : nil) %>
       <%= link_to t("nav.features"), public_features_path, class: (request.path == "/funzionalita" ? "nav-active" : nil) %>
       <%= link_to t("nav.pricing"), public_prezzi_path, class: (request.path == "/prezzi" ? "nav-active" : nil) %>
@@ -34,14 +43,12 @@
               <%= link_to t("nav.my_team"), public_team_details_path(current_user.manageable_teams.first), class: "nav-link-item" %>
             <% end %>
           <% end %>
+          <%= link_to t("nav.account"), public_account_path, class: (request.path == "/account" ? "nav-link-item nav-active" : "nav-link-item") %>
           <%= button_to t("nav.logout"), public_logout_path, method: :delete, class: "btn btn-secondary nav-btn" %>
         <% else %>
           <%= link_to t("nav.login"), public_login_path, class: "nav-link-item" %>
           <%= link_to t("nav.signup"), public_signup_path, class: "btn btn-primary nav-btn" %>
         <% end %>
-        <div class="nav-lang">
-          <%= render "shared/language_switcher" %>
-        </div>
       </div>
     </div>
   </nav>
@@ -77,8 +84,16 @@
 
   if (backdrop) backdrop.addEventListener("click", closeMenu);
 
+  function shouldCloseNavOnControl(el) {
+    // Language toggle must keep the mobile menu open; only a locale choice may close it.
+    if (!el.closest("[data-lang-switcher]")) return true;
+    return el.classList.contains("lang-switcher__option");
+  }
+
   nav.querySelectorAll("a, button").forEach(function (el) {
-    el.addEventListener("click", closeMenu);
+    el.addEventListener("click", function () {
+      if (shouldCloseNavOnControl(el)) closeMenu();
+    });
   });
 
   window.addEventListener("resize", function () {

backend/app/views/shared/_marketing_nav_app_store.html.erb

@@ -0,0 +1,86 @@
+<%# Chrome minimale per App Store Review: branding, lingua, Privacy e Supporto — senza CTA commerciali. %>
+<div class="site-chrome">
+  <div class="site-masthead">
+    <div class="wrap mast-inner">
+      <%= link_to public_support_path, class: "mast-brand", aria: { label: "Match Live TV" }, title: "Match Live TV" do %>
+        <img class="mast-brand-logo" src="/logo.png?v=3" alt="Match Live TV" width="40" height="40" decoding="async">
+        <span class="brand" aria-hidden="true">Match <span>Live TV</span></span>
+      <% end %>
+
+      <div class="mast-tools">
+        <button type="button" class="nav-toggle" aria-label="<%= t('nav.open_menu') %>" aria-expanded="false" aria-controls="site-nav">
+          <span class="nav-toggle-bar" aria-hidden="true"></span>
+          <span class="nav-toggle-bar" aria-hidden="true"></span>
+          <span class="nav-toggle-bar" aria-hidden="true"></span>
+        </button>
+      </div>
+    </div>
+  </div>
+
+  <nav id="site-nav" class="nav" aria-label="<%= t('nav.main_menu') %>" aria-hidden="true">
+    <div class="nav-panel">
+      <div class="nav-mobile-head">
+        <%= link_to public_support_path, class: "nav-mobile-brand", aria: { label: "Match Live TV" }, title: "Match Live TV" do %>
+          <img class="nav-mobile-brand-logo" src="/logo.png?v=3" alt="" width="40" height="40" decoding="async">
+          <span class="brand">Match <span>Live TV</span></span>
+        <% end %>
+        <div class="nav-lang">
+          <%= render "shared/language_switcher" %>
+        </div>
+      </div>
+      <%= link_to t("common.support"), public_support_path, class: "nav-active" %>
+      <%= link_to t("common.privacy"), public_privacy_path, class: (request.path == "/privacy" ? "nav-active" : nil) %>
+    </div>
+  </nav>
+</div>
+
+<div class="nav-backdrop" id="nav-backdrop" aria-hidden="true"></div>
+
+<script>
+(function () {
+  var chrome = document.querySelector(".site-chrome");
+  var toggle = document.querySelector(".nav-toggle");
+  var backdrop = document.getElementById("nav-backdrop");
+  var nav = document.getElementById("site-nav");
+  if (!chrome || !toggle || !nav) return;
+  var openLabel = <%= raw t("nav.open_menu").to_json %>;
+  var closeLabel = <%= raw t("nav.close_menu").to_json %>;
+
+  function setOpen(open) {
+    chrome.classList.toggle("nav-open", open);
+    document.body.classList.toggle("nav-menu-open", open);
+    toggle.setAttribute("aria-expanded", open ? "true" : "false");
+    toggle.setAttribute("aria-label", open ? closeLabel : openLabel);
+    nav.setAttribute("aria-hidden", open ? "false" : "true");
+    if (backdrop) backdrop.setAttribute("aria-hidden", open ? "false" : "true");
+  }
+
+  function closeMenu() { setOpen(false); }
+
+  toggle.addEventListener("click", function (e) {
+    e.stopPropagation();
+    document.body.classList.contains("nav-menu-open") ? closeMenu() : setOpen(true);
+  });
+
+  if (backdrop) backdrop.addEventListener("click", closeMenu);
+
+  function shouldCloseNavOnControl(el) {
+    if (!el.closest("[data-lang-switcher]")) return true;
+    return el.classList.contains("lang-switcher__option");
+  }
+
+  nav.querySelectorAll("a, button").forEach(function (el) {
+    el.addEventListener("click", function () {
+      if (shouldCloseNavOnControl(el)) closeMenu();
+    });
+  });
+
+  window.addEventListener("resize", function () {
+    if (window.matchMedia("(min-width: 900px)").matches) closeMenu();
+  });
+
+  document.addEventListener("keydown", function (e) {
+    if (e.key === "Escape") closeMenu();
+  });
+})();
+</script>

backend/config/initializers/match_live_tv.rb

@@ -81,6 +81,12 @@ module MatchLiveTv
       ENV.fetch("PRIVACY_CONTACT_EMAIL", "privacy@matchlivetv.it")
     end
 
+    # Email di supporto (App Store Support URL e contatti assistenza).
+    # Preferisce SUPPORT_CONTACT_EMAIL; default = contatto commerciale già usato nel sito.
+    def support_email
+      ENV["SUPPORT_CONTACT_EMAIL"].presence || "info@matchlivetv.it"
+    end
+
     def privacy_controller_address
       ENV.fetch("PRIVACY_CONTROLLER_ADDRESS", "Via Guido De Ruggiero, 89 - 20142 - Milano (MI)")
     end

backend/config/locales/admin.de.yml

@@ -18,6 +18,9 @@ de:
       logout_success: Abgemeldet
       password_current_incorrect: Das aktuelle Passwort ist falsch
       password_too_short: Das neue Passwort muss mindestens 8 Zeichen lang sein
+      password_too_long: Das neue Passwort darf höchstens 72 Zeichen lang sein
+      password_too_weak: Das neue Passwort muss mindestens 3 aus Kleinbuchstaben, Großbuchstaben, Zahlen und Symbolen enthalten
+      password_same_as_current: Das neue Passwort muss sich vom aktuellen unterscheiden
       password_mismatch: Die Passwörter stimmen nicht überein
       password_updated: Passwort aktualisiert
       ops_acknowledged: Vorfall übernommen
@@ -53,7 +56,7 @@ de:
       edit:
         title: Passwort ändern
         current_password_label: Aktuelles Passwort
-        new_password_label: "Neues Passwort (mind. 8 Zeichen)"
+        new_password_label: "Neues Passwort (mind. 8, mindestens 3 Zeichenarten)"
         confirm_password_label: Neues Passwort bestätigen
         submit: Passwort speichern
         cancel: Abbrechen

backend/config/locales/admin.en.yml

@@ -18,6 +18,9 @@ en:
       logout_success: Signed out
       password_current_incorrect: Current password is incorrect
       password_too_short: The new password must be at least 8 characters long
+      password_too_long: New password cannot exceed 72 characters
+      password_too_weak: "New password must include at least 3 of: lowercase, uppercase, numbers and symbols"
+      password_same_as_current: New password must be different from the current password
       password_mismatch: Passwords do not match
       password_updated: Password updated
       ops_acknowledged: Incident acknowledged
@@ -53,7 +56,7 @@ en:
       edit:
         title: Change password
         current_password_label: Current password
-        new_password_label: "New password (min. 8 characters)"
+        new_password_label: "New password (min. 8, at least 3 character types)"
         confirm_password_label: Confirm new password
         submit: Save password
         cancel: Cancel

backend/config/locales/admin.es.yml

@@ -18,6 +18,9 @@ es:
       logout_success: Sesión cerrada
       password_current_incorrect: La contraseña actual no es correcta
       password_too_short: La nueva contraseña debe tener al menos 8 caracteres
+      password_too_long: La nueva contraseña no puede superar los 72 caracteres
+      password_too_weak: "La nueva contraseña debe incluir al menos 3 entre: minúsculas, mayúsculas, números y símbolos"
+      password_same_as_current: La nueva contraseña debe ser distinta de la actual
       password_mismatch: Las contraseñas no coinciden
       password_updated: Contraseña actualizada
       ops_acknowledged: Incidencia asumida
@@ -53,7 +56,7 @@ es:
       edit:
         title: Cambiar contraseña
         current_password_label: Contraseña actual
-        new_password_label: "Nueva contraseña (mín. 8 caracteres)"
+        new_password_label: "Nueva contraseña (mín. 8, al menos 3 tipos de caracteres)"
         confirm_password_label: Confirma la nueva contraseña
         submit: Guardar contraseña
         cancel: Cancelar

backend/config/locales/admin.fr.yml

@@ -18,6 +18,9 @@ fr:
       logout_success: Déconnecté
       password_current_incorrect: Le mot de passe actuel est incorrect
       password_too_short: Le nouveau mot de passe doit contenir au moins 8 caractères
+      password_too_long: Le nouveau mot de passe ne peut pas dépasser 72 caractères
+      password_too_weak: "Le nouveau mot de passe doit inclure au moins 3 parmi : minuscules, majuscules, chiffres et symboles"
+      password_same_as_current: "Le nouveau mot de passe doit être différent de l'actuel"
       password_mismatch: Les mots de passe ne correspondent pas
       password_updated: Mot de passe mis à jour
       ops_acknowledged: Incident pris en charge
@@ -53,7 +56,7 @@ fr:
       edit:
         title: Changer le mot de passe
         current_password_label: Mot de passe actuel
-        new_password_label: "Nouveau mot de passe (min. 8 caractères)"
+        new_password_label: "Nouveau mot de passe (min. 8, au moins 3 types de caractères)"
         confirm_password_label: Confirmer le nouveau mot de passe
         submit: Enregistrer le mot de passe
         cancel: Annuler

backend/config/locales/admin.it.yml

@@ -18,6 +18,9 @@ it:
       logout_success: Disconnesso
       password_current_incorrect: Password attuale non corretta
       password_too_short: La nuova password deve avere almeno 8 caratteri
+      password_too_long: La nuova password non può superare i 72 caratteri
+      password_too_weak: "La nuova password deve includere almeno 3 tra: minuscole, maiuscole, numeri e simboli"
+      password_same_as_current: La nuova password deve essere diversa da quella attuale
       password_mismatch: Le password non coincidono
       password_updated: Password aggiornata
       ops_acknowledged: Incidente preso in carico
@@ -53,7 +56,7 @@ it:
       edit:
         title: Cambia password
         current_password_label: Password attuale
-        new_password_label: "Nuova password (min. 8 caratteri)"
+        new_password_label: "Nuova password (min. 8, almeno 3 tipi di caratteri)"
         confirm_password_label: Conferma nuova password
         submit: Salva password
         cancel: Annulla

backend/config/locales/app.de.yml

@@ -1,4 +1,26 @@
 de:
+  password_policy:
+    hint: "Mindestens 8 Zeichen, mit mindestens 3 aus: Kleinbuchstaben, Großbuchstaben, Zahlen und Symbolen."
+  activerecord:
+    attributes:
+      user:
+        password: Passwort
+      admin_account:
+        password: Passwort
+    errors:
+      models:
+        user:
+          attributes:
+            password:
+              too_short: "ist zu kurz (mindestens %{count} Zeichen)"
+              too_long: "ist zu lang (höchstens %{count} Zeichen)"
+              complexity: "muss mindestens 3 aus Kleinbuchstaben, Großbuchstaben, Zahlen und Symbolen enthalten"
+        admin_account:
+          attributes:
+            password:
+              too_short: "ist zu kurz (mindestens %{count} Zeichen)"
+              too_long: "ist zu lang (höchstens %{count} Zeichen)"
+              complexity: "muss mindestens 3 aus Kleinbuchstaben, Großbuchstaben, Zahlen und Symbolen enthalten"
   club:
     back_to_club: "← Verein"
     sport_label: Hauptsportart
@@ -419,6 +441,8 @@ de:
     preview_waiting: Vorschau wartet auf Signal…
     pause: Pausieren
     resume: Livestream fortsetzen
+    mute: Audio stummschalten
+    unmute: Audio einschalten
     stop: Livestream beenden
     modal:
       set_won_title: Satz gewonnen
@@ -454,9 +478,12 @@ de:
       unknown_period: "—"
       resumed: Übertragung fortgesetzt
       paused_cover: "Übertragung pausiert — Deckbild auf Sendung"
+      muted: "Audio stumm — YouTube empfängt das Mikrofon nicht"
+      unmuted: "Mikrofon-Audio wieder aktiv"
       closed: Übertragung beendet
       resume_error: Fehler beim Fortsetzen der Übertragung
       pause_error: Fehler beim Pausieren der Übertragung
+      mute_error: Fehler beim Stummschalten
       close_error: Fehler beim Beenden
       close_confirm: Übertragung endgültig beenden?
       link_unavailable: Link nicht verfügbar
@@ -600,12 +627,29 @@ de:
       welcome_back: Willkommen zurück!
       invalid_credentials: E-Mail oder Passwort ungültig
       logged_out: Abgemeldet
+      unauthorized: Nicht autorisiert
+      invalid_token: Ungültiges Token
     password_resets:
       email_sent: Wenn die E-Mail registriert ist, erhältst du in Kürze einen Link zum Zurücksetzen des Passworts.
       invalid_or_expired_link: Link ungültig oder abgelaufen. Fordere ein neues Zurücksetzen des Passworts an.
       password_min_length: Das Passwort muss mindestens 8 Zeichen lang sein
+      password_too_short: Das Passwort muss mindestens 8 Zeichen lang sein
+      password_too_long: Das Passwort darf höchstens 72 Zeichen lang sein
+      password_too_weak: Das Passwort muss mindestens 3 aus Kleinbuchstaben, Großbuchstaben, Zahlen und Symbolen enthalten
+      password_same_as_current: Das neue Passwort muss sich vom aktuellen unterscheiden
       password_mismatch: Die Passwörter stimmen nicht überein
       password_updated: Passwort aktualisiert. Du kannst dich jetzt anmelden.
+    accounts:
+      name_required: Der Name ist erforderlich
+      profile_updated: Profil aktualisiert.
+      password_current_incorrect: Das aktuelle Passwort ist falsch
+      password_too_short: Das Passwort muss mindestens 8 Zeichen haben
+      password_too_long: Das Passwort darf höchstens 72 Zeichen lang sein
+      password_too_weak: Das Passwort muss mindestens 3 aus Kleinbuchstaben, Großbuchstaben, Zahlen und Symbolen enthalten
+      password_same_as_current: Das neue Passwort muss sich vom aktuellen unterscheiden
+      password_mismatch: Die Passwörter stimmen nicht überein
+      password_updated: Passwort aktualisiert.
+      password_update_failed: Passwort konnte nicht aktualisiert werden
     replay:
       download_unavailable: Download nicht verfügbar
       not_available: Replay nicht verfügbar

backend/config/locales/app.en.yml

@@ -1,4 +1,21 @@
 en:
+  password_policy:
+    hint: "At least 8 characters, including 3 of: lowercase, uppercase, numbers and symbols."
+  activerecord:
+    errors:
+      models:
+        user:
+          attributes:
+            password:
+              too_short: "is too short (minimum is %{count} characters)"
+              too_long: "is too long (maximum is %{count} characters)"
+              complexity: "must include at least 3 of: lowercase letters, uppercase letters, numbers and symbols"
+        admin_account:
+          attributes:
+            password:
+              too_short: "is too short (minimum is %{count} characters)"
+              too_long: "is too long (maximum is %{count} characters)"
+              complexity: "must include at least 3 of: lowercase letters, uppercase letters, numbers and symbols"
   club:
     back_to_club: "← Club"
     sport_label: Main sport
@@ -419,6 +436,8 @@ en:
     preview_waiting: Waiting for signal…
     pause: Pause stream
     resume: Resume stream
+    mute: Mute audio
+    unmute: Unmute audio
     stop: End stream
     modal:
       set_won_title: Set won
@@ -454,9 +473,12 @@ en:
       unknown_period: "—"
       resumed: Stream resumed
       paused_cover: "Stream paused — cover on air"
+      muted: "Audio muted — YouTube is not receiving the microphone"
+      unmuted: "Microphone audio restored"
       closed: Stream closed
       resume_error: Error resuming the stream
       pause_error: Error pausing the stream
+      mute_error: Error muting audio
       close_error: Error closing
       close_confirm: Permanently close the live stream?
       link_unavailable: Link not available
@@ -600,12 +622,29 @@ en:
       welcome_back: Welcome back!
       invalid_credentials: Invalid email or password
       logged_out: Logged out
+      unauthorized: Unauthorized
+      invalid_token: Invalid token
     password_resets:
       email_sent: If the email is registered, you'll receive a password reset link shortly.
       invalid_or_expired_link: Invalid or expired link. Request a new password reset.
       password_min_length: Password must be at least 8 characters
+      password_too_short: Password must be at least 8 characters
+      password_too_long: Password cannot exceed 72 characters
+      password_too_weak: "Password must include at least 3 of: lowercase, uppercase, numbers and symbols"
+      password_same_as_current: New password must be different from the current password
       password_mismatch: Passwords don't match
       password_updated: Password updated. You can now log in.
+    accounts:
+      name_required: Name is required
+      profile_updated: Profile updated.
+      password_current_incorrect: Current password is incorrect
+      password_too_short: Password must be at least 8 characters
+      password_too_long: Password cannot exceed 72 characters
+      password_too_weak: "Password must include at least 3 of: lowercase, uppercase, numbers and symbols"
+      password_same_as_current: New password must be different from the current password
+      password_mismatch: Passwords do not match
+      password_updated: Password updated.
+      password_update_failed: Unable to update password
     replay:
       download_unavailable: Download not available
       not_available: Replay not available

backend/config/locales/app.es.yml

@@ -1,4 +1,26 @@
 es:
+  password_policy:
+    hint: "Mínimo 8 caracteres, con al menos 3 entre: minúsculas, mayúsculas, números y símbolos."
+  activerecord:
+    attributes:
+      user:
+        password: Contraseña
+      admin_account:
+        password: Contraseña
+    errors:
+      models:
+        user:
+          attributes:
+            password:
+              too_short: "es demasiado corta (mínimo %{count} caracteres)"
+              too_long: "es demasiado larga (máximo %{count} caracteres)"
+              complexity: "debe incluir al menos 3 entre: minúsculas, mayúsculas, números y símbolos"
+        admin_account:
+          attributes:
+            password:
+              too_short: "es demasiado corta (mínimo %{count} caracteres)"
+              too_long: "es demasiado larga (máximo %{count} caracteres)"
+              complexity: "debe incluir al menos 3 entre: minúsculas, mayúsculas, números y símbolos"
   club:
     back_to_club: "← Club"
     sport_label: Deporte principal
@@ -419,6 +441,8 @@ es:
     preview_waiting: Vista previa a la espera de señal…
     pause: Pausar directo
     resume: Reanudar directo
+    mute: Silenciar audio
+    unmute: Reactivar audio
     stop: Finalizar directo
     modal:
       set_won_title: Set ganado
@@ -454,9 +478,12 @@ es:
       unknown_period: "—"
       resumed: Retransmisión reanudada
       paused_cover: "Retransmisión en pausa — cortinilla al aire"
+      muted: "Audio silenciado — YouTube no recibe el micrófono"
+      unmuted: "Audio del micrófono reactivado"
       closed: Retransmisión finalizada
       resume_error: Error al reanudar la retransmisión
       pause_error: Error al pausar la retransmisión
+      mute_error: Error al silenciar el audio
       close_error: Error al cerrar
       close_confirm: "¿Cerrar definitivamente la retransmisión?"
       link_unavailable: Enlace no disponible
@@ -600,12 +627,29 @@ es:
       welcome_back: "¡Bienvenido de nuevo!"
       invalid_credentials: Correo o contraseña no válidos
       logged_out: Sesión cerrada
+      unauthorized: No autorizado
+      invalid_token: Token no válido
     password_resets:
       email_sent: Si el correo está registrado, recibirás en breve un enlace para restablecer la contraseña.
       invalid_or_expired_link: Enlace no válido o caducado. Solicita un nuevo restablecimiento de contraseña.
       password_min_length: La contraseña debe tener al menos 8 caracteres
+      password_too_short: La contraseña debe tener al menos 8 caracteres
+      password_too_long: La contraseña no puede superar los 72 caracteres
+      password_too_weak: "La contraseña debe incluir al menos 3 entre: minúsculas, mayúsculas, números y símbolos"
+      password_same_as_current: La nueva contraseña debe ser distinta de la actual
       password_mismatch: Las contraseñas no coinciden
       password_updated: Contraseña actualizada. Ya puedes iniciar sesión.
+    accounts:
+      name_required: El nombre es obligatorio
+      profile_updated: Perfil actualizado.
+      password_current_incorrect: La contraseña actual no es correcta
+      password_too_short: La contraseña debe tener al menos 8 caracteres
+      password_too_long: La contraseña no puede superar los 72 caracteres
+      password_too_weak: "La contraseña debe incluir al menos 3 entre: minúsculas, mayúsculas, números y símbolos"
+      password_same_as_current: La nueva contraseña debe ser distinta de la actual
+      password_mismatch: Las contraseñas no coinciden
+      password_updated: Contraseña actualizada.
+      password_update_failed: No se pudo actualizar la contraseña
     replay:
       download_unavailable: Descarga no disponible
       not_available: Repetición no disponible

backend/config/locales/app.fr.yml

@@ -1,4 +1,26 @@
 fr:
+  password_policy:
+    hint: "Au moins 8 caractères, avec au moins 3 parmi : minuscules, majuscules, chiffres et symboles."
+  activerecord:
+    attributes:
+      user:
+        password: Mot de passe
+      admin_account:
+        password: Mot de passe
+    errors:
+      models:
+        user:
+          attributes:
+            password:
+              too_short: "est trop court (minimum %{count} caractères)"
+              too_long: "est trop long (maximum %{count} caractères)"
+              complexity: "doit inclure au moins 3 parmi : minuscules, majuscules, chiffres et symboles"
+        admin_account:
+          attributes:
+            password:
+              too_short: "est trop court (minimum %{count} caractères)"
+              too_long: "est trop long (maximum %{count} caractères)"
+              complexity: "doit inclure au moins 3 parmi : minuscules, majuscules, chiffres et symboles"
   club:
     back_to_club: "← Club"
     sport_label: Sport principal
@@ -419,6 +441,8 @@ fr:
     preview_waiting: Aperçu en attente du signal…
     pause: Mettre en pause
     resume: Reprendre le direct
+    mute: Couper l'audio
+    unmute: Réactiver l'audio
     stop: Terminer le direct
     modal:
       set_won_title: Set gagné
@@ -454,9 +478,12 @@ fr:
       unknown_period: "—"
       resumed: Direct repris
       paused_cover: "Direct en pause — habillage à l'antenne"
+      muted: "Audio coupé — YouTube ne reçoit pas le micro"
+      unmuted: "Audio du micro rétabli"
       closed: Direct terminé
       resume_error: Erreur lors de la reprise du direct
       pause_error: Erreur lors de la mise en pause du direct
+      mute_error: Erreur lors de la coupure audio
       close_error: Erreur de clôture
       close_confirm: Clôturer définitivement le direct ?
       link_unavailable: Lien non disponible
@@ -600,12 +627,29 @@ fr:
       welcome_back: Bon retour !
       invalid_credentials: E-mail ou mot de passe invalide
       logged_out: Déconnecté
+      unauthorized: Non autorisé
+      invalid_token: Jeton invalide
     password_resets:
       email_sent: Si l'e-mail est enregistré, tu recevras bientôt un lien pour réinitialiser le mot de passe.
       invalid_or_expired_link: Lien invalide ou expiré. Demande une nouvelle réinitialisation du mot de passe.
       password_min_length: Le mot de passe doit comporter au moins 8 caractères
+      password_too_short: Le mot de passe doit comporter au moins 8 caractères
+      password_too_long: Le mot de passe ne peut pas dépasser 72 caractères
+      password_too_weak: "Le mot de passe doit inclure au moins 3 parmi : minuscules, majuscules, chiffres et symboles"
+      password_same_as_current: "Le nouveau mot de passe doit être différent de l'actuel"
       password_mismatch: Les mots de passe ne correspondent pas
       password_updated: Mot de passe mis à jour. Tu peux maintenant te connecter.
+    accounts:
+      name_required: Le nom est obligatoire
+      profile_updated: Profil mis à jour.
+      password_current_incorrect: Le mot de passe actuel est incorrect
+      password_too_short: Le mot de passe doit contenir au moins 8 caractères
+      password_too_long: Le mot de passe ne peut pas dépasser 72 caractères
+      password_too_weak: "Le mot de passe doit inclure au moins 3 parmi : minuscules, majuscules, chiffres et symboles"
+      password_same_as_current: "Le nouveau mot de passe doit être différent de l'actuel"
+      password_mismatch: Les mots de passe ne correspondent pas
+      password_updated: Mot de passe mis à jour.
+      password_update_failed: Impossible de mettre à jour le mot de passe
     replay:
       download_unavailable: Téléchargement non disponible
       not_available: Replay non disponible

backend/config/locales/app.it.yml

@@ -1,4 +1,21 @@
 it:
+  password_policy:
+    hint: "Minimo 8 caratteri, con almeno 3 tra: minuscole, maiuscole, numeri e simboli."
+  activerecord:
+    errors:
+      models:
+        user:
+          attributes:
+            password:
+              too_short: "è troppo corta (minimo %{count} caratteri)"
+              too_long: "è troppo lunga (massimo %{count} caratteri)"
+              complexity: "deve includere almeno 3 tra: lettere minuscole, maiuscole, numeri e simboli"
+        admin_account:
+          attributes:
+            password:
+              too_short: "è troppo corta (minimo %{count} caratteri)"
+              too_long: "è troppo lunga (massimo %{count} caratteri)"
+              complexity: "deve includere almeno 3 tra: lettere minuscole, maiuscole, numeri e simboli"
   club:
     back_to_club: "← Società"
     sport_label: Sport principale
@@ -419,6 +436,8 @@ it:
     preview_waiting: Anteprima in attesa del segnale…
     pause: Metti in pausa
     resume: Riprendi diretta
+    mute: Silenzia audio
+    unmute: Riattiva audio
     stop: Chiudi diretta
     modal:
       set_won_title: Set vinto
@@ -454,9 +473,12 @@ it:
       unknown_period: "—"
       resumed: Diretta ripresa
       paused_cover: "Diretta in pausa — copertina in onda"
+      muted: "Audio silenziato — YouTube non riceve il microfono"
+      unmuted: "Audio microfono riattivato"
       closed: Diretta chiusa
       resume_error: Errore ripresa diretta
       pause_error: Errore pausa diretta
+      mute_error: Errore silenziamento audio
       close_error: Errore chiusura
       close_confirm: Chiudere definitivamente la diretta?
       link_unavailable: Link non disponibile
@@ -600,12 +622,34 @@ it:
       welcome_back: Bentornato!
       invalid_credentials: Email o password non validi
       logged_out: Disconnesso
+      unauthorized: Non autorizzato
+      invalid_token: Token non valido
     password_resets:
       email_sent: Se l'email è registrata, riceverai a breve un link per reimpostare la password.
       invalid_or_expired_link: Link non valido o scaduto. Richiedi un nuovo reset password.
       password_min_length: La password deve avere almeno 8 caratteri
+      password_too_short: La password deve avere almeno 8 caratteri
+      password_too_long: La password non può superare i 72 caratteri
+      password_too_weak: "La password deve includere almeno 3 tra: minuscole, maiuscole, numeri e simboli"
+      password_same_as_current: La nuova password deve essere diversa da quella attuale
+      password_too_short: La password deve avere almeno 8 caratteri
+      password_too_long: La password non può superare i 72 caratteri
+      password_too_weak: "La password deve includere almeno 3 tra: minuscole, maiuscole, numeri e simboli"
       password_mismatch: Le password non coincidono
       password_updated: Password aggiornata. Ora puoi accedere.
+    accounts:
+      name_required: Il nome è obbligatorio
+      profile_updated: Profilo aggiornato.
+      password_current_incorrect: La password attuale non è corretta
+      password_too_short: La password deve avere almeno 8 caratteri
+      password_too_long: La password non può superare i 72 caratteri
+      password_too_weak: "La password deve includere almeno 3 tra: minuscole, maiuscole, numeri e simboli"
+      password_same_as_current: La nuova password deve essere diversa da quella attuale
+      password_too_long: La password non può superare i 72 caratteri
+      password_too_weak: "La password deve includere almeno 3 tra: minuscole, maiuscole, numeri e simboli"
+      password_mismatch: Le password non coincidono
+      password_updated: Password aggiornata.
+      password_update_failed: Impossibile aggiornare la password
     replay:
       download_unavailable: Download non disponibile
       not_available: Replay non disponibile

backend/config/locales/legal.de.yml

@@ -195,3 +195,18 @@ de:
       s6_body_html: "Um die von der DSGVO vorgesehenen Rechte auszuüben (Zugang, Löschung, Widerspruch, Widerruf der Einwilligung), schreiben Sie an %{email_link}. Details finden Sie im %{privacy_doc_link}."
       s6_privacy_doc_link_text: Datenschutzdokument
       manage_button: Cookie-Einstellungen verwalten
+    support:
+      title: Match Live TV Support
+      meta_description: "Match Live TV Hilfe: Zugangsprobleme, Livestreams, Teamverwaltung und Support-Kontaktdaten."
+      h1: Match Live TV Support
+      intro: "Brauchen Sie Hilfe mit Match Live TV? Bei Problemen mit dem Zugang, der Einrichtung von Livestreams, der Spielverwaltung oder der Nutzung der App können Sie unseren Support kontaktieren."
+      email_label: "Support-E-Mail:"
+      access_title: Zugangsprobleme
+      access_body: "Wenn Sie sich nicht anmelden können, prüfen Sie die Zugangsdaten, die Sie von Ihrem Sportverein erhalten haben. Wenn das Problem weiterhin besteht, kontaktieren Sie den Support."
+      live_title: Probleme während eines Livestreams
+      live_body: "Prüfen Sie Ihre Internetverbindung und versuchen Sie erneut, die Übertragung in der App zu starten. Wenn das Problem weiterhin besteht, kontaktieren Sie den Support und geben Sie Gerät, App-Version und eine kurze Beschreibung des Problems an."
+      team_title: Teamverwaltung
+      team_body: "Konten und Übertragungsberechtigungen werden vom Sportverein verwaltet."
+      privacy_title: Datenschutz
+      privacy_body_html: "Informationen zur Verarbeitung personenbezogener Daten finden Sie auf der Seite %{privacy_link}."
+      privacy_link_text: Datenschutz

backend/config/locales/legal.en.yml

@@ -195,3 +195,18 @@ en:
       s6_body_html: "To exercise the rights provided by the GDPR (access, erasure, objection, withdrawal of consent) write to %{email_link}. Details are in the %{privacy_doc_link}."
       s6_privacy_doc_link_text: privacy document
       manage_button: Manage cookie preferences
+    support:
+      title: Match Live TV Support
+      meta_description: "Match Live TV help: access issues, live streaming, team management and support contact details."
+      h1: Match Live TV Support
+      intro: "Need help with Match Live TV? For access issues, live stream setup, match management or app usage, you can contact our support team."
+      email_label: "Support email:"
+      access_title: Access issues
+      access_body: "If you cannot sign in, check the credentials provided by your sports club. If the problem persists, contact support."
+      live_title: Issues during a live stream
+      live_body: "Check your Internet connection and try starting the broadcast from the app again. If the problem persists, contact support and include your device, app version and a short description of the issue."
+      team_title: Team management
+      team_body: "Accounts and broadcasting permissions are managed by the sports club."
+      privacy_title: Privacy
+      privacy_body_html: "For information on personal data processing, see the %{privacy_link} page."
+      privacy_link_text: Privacy

backend/config/locales/legal.es.yml

@@ -195,3 +195,18 @@ es:
       s6_body_html: "Para ejercer los derechos previstos por el RGPD (acceso, supresión, oposición, revocación del consentimiento) escribe a %{email_link}. Más detalles en el %{privacy_doc_link}."
       s6_privacy_doc_link_text: documento de privacidad
       manage_button: Gestionar preferencias de cookies
+    support:
+      title: Soporte Match Live TV
+      meta_description: "Ayuda de Match Live TV: problemas de acceso, directos, gestión del equipo y datos de contacto del soporte."
+      h1: Soporte Match Live TV
+      intro: "¿Necesitas ayuda con Match Live TV? Para problemas de acceso, configuración de directos, gestión de partidos o uso de la app puedes contactar con nuestro soporte."
+      email_label: "Correo de soporte:"
+      access_title: Problemas de acceso
+      access_body: "Si no puedes acceder, verifica las credenciales recibidas de tu club deportivo. Si el problema continúa, contacta con el soporte."
+      live_title: Problemas durante un directo
+      live_body: "Verifica la conexión a Internet e intenta de nuevo iniciar la transmisión desde la app. Si el problema continúa, contacta con el soporte indicando el dispositivo, la versión de la app y una breve descripción del problema."
+      team_title: Gestión del equipo
+      team_body: "Las cuentas y los permisos de transmisión los gestiona el club deportivo."
+      privacy_title: Privacidad
+      privacy_body_html: "Para información sobre el tratamiento de datos personales, consulta la página %{privacy_link}."
+      privacy_link_text: Privacidad

backend/config/locales/legal.fr.yml

@@ -195,3 +195,18 @@ fr:
       s6_body_html: "Pour exercer les droits prévus par le RGPD (accès, effacement, opposition, retrait du consentement), écrivez à %{email_link}. Détails dans le %{privacy_doc_link}."
       s6_privacy_doc_link_text: document de confidentialité
       manage_button: Gérer les préférences de cookies
+    support:
+      title: Support Match Live TV
+      meta_description: "Assistance Match Live TV : problèmes d'accès, directs, gestion d'équipe et coordonnées du support."
+      h1: Support Match Live TV
+      intro: "Besoin d'aide avec Match Live TV ? Pour les problèmes d'accès, la configuration des directs, la gestion des matchs ou l'utilisation de l'application, vous pouvez contacter notre support."
+      email_label: "E-mail du support :"
+      access_title: Problèmes d'accès
+      access_body: "Si vous ne parvenez pas à vous connecter, vérifiez les identifiants fournis par votre club sportif. Si le problème persiste, contactez le support."
+      live_title: Problèmes pendant un direct
+      live_body: "Vérifiez votre connexion Internet et réessayez de démarrer la diffusion depuis l'application. Si le problème persiste, contactez le support en indiquant l'appareil, la version de l'application et une brève description du problème."
+      team_title: Gestion de l'équipe
+      team_body: "Les comptes et les autorisations de diffusion sont gérés par le club sportif."
+      privacy_title: Confidentialité
+      privacy_body_html: "Pour les informations sur le traitement des données personnelles, consultez la page %{privacy_link}."
+      privacy_link_text: Confidentialité

backend/config/locales/legal.it.yml

@@ -195,3 +195,18 @@ it:
       s6_body_html: "Per esercitare i diritti previsti dal GDPR (accesso, cancellazione, opposizione, revoca consenso) scrivi a %{email_link}. Dettagli nel %{privacy_doc_link}."
       s6_privacy_doc_link_text: documento privacy
       manage_button: Gestisci preferenze cookie
+    support:
+      title: Supporto Match Live TV
+      meta_description: "Assistenza Match Live TV: problemi di accesso, dirette live, gestione squadra e contatti del supporto."
+      h1: Supporto Match Live TV
+      intro: "Hai bisogno di assistenza con Match Live TV? Per problemi di accesso, configurazione delle dirette, gestione delle partite o utilizzo dell’app puoi contattare il nostro supporto."
+      email_label: "Email di supporto:"
+      access_title: Problemi di accesso
+      access_body: "Se non riesci ad accedere, verifica le credenziali ricevute dalla tua società sportiva. Se il problema persiste, contatta il supporto."
+      live_title: Problemi durante una diretta
+      live_body: "Verifica la connessione Internet e riprova ad avviare la trasmissione dall’app. Se il problema persiste, contatta il supporto indicando dispositivo, versione dell’app e una breve descrizione del problema."
+      team_title: Gestione della squadra
+      team_body: "Gli account e le autorizzazioni per la trasmissione sono gestiti dalla società sportiva."
+      privacy_title: Privacy
+      privacy_body_html: "Per informazioni sul trattamento dei dati personali consulta la pagina %{privacy_link}."
+      privacy_link_text: Privacy

backend/config/locales/ui.de.yml

@@ -16,6 +16,7 @@ de:
     my_team: Mein Team
     login: Anmelden
     logout: Abmelden
+    account: Konto
     signup: Team registrieren
   footer:
     tagline: Jedes Spiel, jedes Event, für alle, die nicht dabei sein können
@@ -102,7 +103,7 @@ de:
     password_reset:
       meta_title: "Neues Passwort — Match Live TV"
       title: Neues Passwort wählen
-      new_password_label: "Neues Passwort (min. 8 Zeichen)"
+      new_password_label: "Neues Passwort (mind. 8, mindestens 3 Zeichenarten)"
       submit: Passwort speichern
       back_to_login: Zurück zur Anmeldung
     invitation:
@@ -118,8 +119,21 @@ de:
       signup_link: registrieren Sie sich
       mobile_app_label: "Mobile App:"
       open_in_app: Einladung in der App öffnen
+    account:
+      meta_title: "Dein Konto — Match Live TV"
+      meta_description: Name und Passwort deines Match Live TV-Kontos verwalten.
+      title: Dein Konto
+      profile_heading: Profil
+      password_heading: Passwort ändern
+      name_label: Name
+      role_label: "Rolle: %{role}"
+      current_password_label: Aktuelles Passwort
+      new_password_label: "Neues Passwort (mind. 8, mindestens 3 Zeichenarten)"
+      save_profile: Profil speichern
+      save_password: Passwort aktualisieren
   common:
     privacy: Datenschutz
+    support: Support
     cookies: Cookies
     terms: AGB
     pricing: Preise

backend/config/locales/ui.en.yml

@@ -16,6 +16,7 @@ en:
     my_team: My team
     login: Log in
     logout: Log out
+    account: Account
     signup: Register a team
   footer:
     tagline: Every match, every event, for those who can't be there
@@ -102,7 +103,7 @@ en:
     password_reset:
       meta_title: "New password — Match Live TV"
       title: Choose a new password
-      new_password_label: "New password (min. 8 characters)"
+      new_password_label: "New password (min. 8, at least 3 character types)"
       submit: Save password
       back_to_login: Back to login
     invitation:
@@ -118,8 +119,21 @@ en:
       signup_link: sign up
       mobile_app_label: "Mobile app:"
       open_in_app: Open invitation in the app
+    account:
+      meta_title: "Your account — Match Live TV"
+      meta_description: Manage your Match Live TV account name and password.
+      title: Your account
+      profile_heading: Profile
+      password_heading: Change password
+      name_label: Name
+      role_label: "Role: %{role}"
+      current_password_label: Current password
+      new_password_label: "New password (min. 8, at least 3 character types)"
+      save_profile: Save profile
+      save_password: Update password
   common:
     privacy: Privacy
+    support: Support
     cookies: Cookies
     terms: Terms
     pricing: Pricing

backend/config/locales/ui.es.yml

@@ -16,6 +16,7 @@ es:
     my_team: Mi equipo
     login: Acceder
     logout: Salir
+    account: Cuenta
     signup: Registrar equipo
   footer:
     tagline: Cada partido, cada evento, para quien no puede estar
@@ -102,7 +103,7 @@ es:
     password_reset:
       meta_title: "Nueva contraseña — Match Live TV"
       title: Elige una nueva contraseña
-      new_password_label: "Nueva contraseña (mín. 8 caracteres)"
+      new_password_label: "Nueva contraseña (mín. 8, al menos 3 tipos de caracteres)"
       submit: Guardar contraseña
       back_to_login: Volver al inicio de sesión
     invitation:
@@ -118,8 +119,21 @@ es:
       signup_link: regístrate
       mobile_app_label: "App móvil:"
       open_in_app: Abrir invitación en la app
+    account:
+      meta_title: "Tu cuenta — Match Live TV"
+      meta_description: Gestiona el nombre y la contraseña de tu cuenta Match Live TV.
+      title: Tu cuenta
+      profile_heading: Perfil
+      password_heading: Cambiar contraseña
+      name_label: Nombre
+      role_label: "Rol: %{role}"
+      current_password_label: Contraseña actual
+      new_password_label: "Nueva contraseña (mín. 8, al menos 3 tipos de caracteres)"
+      save_profile: Guardar perfil
+      save_password: Actualizar contraseña
   common:
     privacy: Privacidad
+    support: Soporte
     cookies: Cookies
     terms: Términos
     pricing: Precios

backend/config/locales/ui.fr.yml

@@ -16,6 +16,7 @@ fr:
     my_team: Mon équipe
     login: Connexion
     logout: Déconnexion
+    account: Compte
     signup: Inscrire une équipe
   footer:
     tagline: Chaque match, chaque événement, pour ceux qui ne peuvent pas être là
@@ -102,7 +103,7 @@ fr:
     password_reset:
       meta_title: "Nouveau mot de passe — Match Live TV"
       title: Choisissez un nouveau mot de passe
-      new_password_label: "Nouveau mot de passe (8 caractères min.)"
+      new_password_label: "Nouveau mot de passe (min. 8, au moins 3 types de caractères)"
       submit: Enregistrer le mot de passe
       back_to_login: Retour à la connexion
     invitation:
@@ -118,8 +119,21 @@ fr:
       signup_link: inscrivez-vous
       mobile_app_label: "Application mobile :"
       open_in_app: Ouvrir l'invitation dans l'application
+    account:
+      meta_title: "Votre compte — Match Live TV"
+      meta_description: Gérez le nom et le mot de passe de votre compte Match Live TV.
+      title: Votre compte
+      profile_heading: Profil
+      password_heading: Changer le mot de passe
+      name_label: Nom
+      role_label: "Rôle : %{role}"
+      current_password_label: Mot de passe actuel
+      new_password_label: "Nouveau mot de passe (min. 8, au moins 3 types de caractères)"
+      save_profile: Enregistrer le profil
+      save_password: Mettre à jour le mot de passe
   common:
     privacy: Confidentialité
+    support: Support
     cookies: Cookies
     terms: Conditions
     pricing: Tarifs

backend/config/locales/ui.it.yml

@@ -16,6 +16,7 @@ it:
     my_team: La mia squadra
     login: Accedi
     logout: Esci
+    account: Account
     signup: Registra squadra
   footer:
     tagline: Ogni partita, ogni evento, per chi non può esserci
@@ -102,7 +103,7 @@ it:
     password_reset:
       meta_title: "Nuova password — Match Live TV"
       title: Scegli una nuova password
-      new_password_label: "Nuova password (min. 8 caratteri)"
+      new_password_label: "Nuova password (min. 8, almeno 3 tipi di caratteri)"
       submit: Salva password
       back_to_login: Torna al login
     invitation:
@@ -118,8 +119,21 @@ it:
       signup_link: registrati
       mobile_app_label: "App mobile:"
       open_in_app: Apri invito nell'app
+    account:
+      meta_title: "Il tuo account — Match Live TV"
+      meta_description: Gestisci nome e password del tuo account Match Live TV.
+      title: Il tuo account
+      profile_heading: Profilo
+      password_heading: Cambia password
+      name_label: Nome
+      role_label: "Ruolo: %{role}"
+      current_password_label: Password attuale
+      new_password_label: "Nuova password (min. 8, almeno 3 tipi di caratteri)"
+      save_profile: Salva profilo
+      save_password: Aggiorna password
   common:
     privacy: Privacy
+    support: Supporto
     cookies: Cookie
     terms: Termini
     pricing: Prezzi

backend/config/routes.rb

@@ -11,6 +11,10 @@ Rails.application.routes.draw do
       post "auth/logout", to: "auth#logout"
       post "auth/refresh", to: "auth#refresh"
       get "auth/me", to: "auth#me"
+      post "auth/password/forgot", to: "auth#forgot_password"
+      get "account", to: "accounts#show"
+      patch "account", to: "accounts#update"
+      patch "account/password", to: "accounts#password"
       get "sports", to: "sports#index"
 
       get "invitations/:token", to: "invitations#show"
@@ -43,6 +47,7 @@ Rails.application.routes.draw do
           patch :stop
           patch :pause
           patch :resume
+          patch :audio_mute
           patch :score
           post :score_action
           get :events
@@ -138,6 +143,7 @@ Rails.application.routes.draw do
   patch "regia/:token/score", to: "public/regia#score", as: :public_regia_score
   post "regia/:token/pause", to: "public/regia#pause", as: :public_regia_pause
   post "regia/:token/resume", to: "public/regia#resume", as: :public_regia_resume
+  post "regia/:token/audio_mute", to: "public/regia#audio_mute", as: :public_regia_audio_mute
   post "regia/:token/stop", to: "public/regia#stop", as: :public_regia_stop
 
   root to: "public/pages#home"
@@ -150,6 +156,7 @@ Rails.application.routes.draw do
     get "prezzi", to: "pages#pricing", as: :prezzi
     get "pricing", to: redirect("/prezzi")
     get "privacy", to: "pages#privacy", as: :privacy
+    get "support", to: "pages#support", as: :support
     get "cookie", to: "pages#cookies", as: :cookies
     get "cookies", to: redirect("/cookie")
     get "termini", to: "pages#terms", as: :termini
@@ -163,6 +170,10 @@ Rails.application.routes.draw do
     post "password/forgot", to: "password_resets#create"
     get "password/reset", to: "password_resets#edit", as: :password_reset
     patch "password/reset", to: "password_resets#update"
+    get "account", to: "accounts#show", as: :account
+    patch "account", to: "accounts#update"
+    get "account/password", to: redirect("/account"), as: nil
+    patch "account/password", to: "accounts#update_password", as: :account_password
     get "clubs/new", to: "clubs#new", as: :new_club
     post "clubs", to: "clubs#create"
     get "clubs/:id", to: "clubs#show", as: :club

backend/db/migrate/20260812220000_add_audio_muted_to_stream_sessions.rb

@@ -0,0 +1,5 @@
+class AddAudioMutedToStreamSessions < ActiveRecord::Migration[7.2]
+  def change
+    add_column :stream_sessions, :audio_muted, :boolean, default: false, null: false
+  end
+end

backend/db/schema.rb

@@ -10,7 +10,7 @@
 #
 # It's strongly recommended that you check this file into your version control system.
 
-ActiveRecord::Schema[7.2].define(version: 2026_06_12_120000) do
+ActiveRecord::Schema[7.2].define(version: 2026_08_12_220000) do
   # These are extensions that must be enabled in order to support this database
   enable_extension "pgcrypto"
   enable_extension "plpgsql"
@@ -280,6 +280,7 @@ ActiveRecord::Schema[7.2].define(version: 2026_06_12_120000) do
     t.datetime "updated_at", null: false
     t.string "regia_token_digest"
     t.datetime "regia_token_expires_at"
+    t.boolean "audio_muted", default: false, null: false
     t.index ["match_id"], name: "index_stream_sessions_on_match_id"
     t.index ["publish_token"], name: "index_stream_sessions_on_publish_token", unique: true
     t.index ["regia_token_digest"], name: "index_stream_sessions_on_regia_token_digest", unique: true

backend/db/seeds.rb

@@ -1,18 +1,18 @@
 load Rails.root.join("db/seeds/plans.rb")
 
 AdminAccount.find_or_create_by!(username: "admin") do |a|
-  a.password = "admin"
+  a.password = "AdminPass123"
 end
 
 coach = User.find_or_create_by!(email: "coach@matchlivetv.test") do |u|
   u.name = "Coach Demo"
-  u.password = "password123"
+  u.password = "Password123"
   u.role = "coach"
 end
 
 admin = User.find_or_create_by!(email: "admin@matchlivetv.test") do |u|
   u.name = "Admin"
-  u.password = "password123"
+  u.password = "Password123"
   u.role = "admin"
 end
 
@@ -41,5 +41,5 @@ match = team.matches.find_or_create_by!(opponent_name: "ASD Eagles Pavia") do |m
   m.phase = "Semifinale"
 end
 
-puts "Seed OK: coach@matchlivetv.test / password123"
+puts "Seed OK: coach@matchlivetv.test / Password123"
 puts "Club: #{club.name}, Team: #{team.name}, Match: #{match.opponent_name}"

backend/public/marketing.css

@@ -199,6 +199,17 @@ body.nav-menu-open { overflow: hidden; }
   body.nav-menu-open .site-chrome {
     z-index: 1300;
   }
+  /* Keep the close control above the full-screen sheet; hide duplicate mast brand. */
+  body.nav-menu-open .site-masthead {
+    z-index: 1320;
+    background: transparent;
+    border-bottom-color: transparent;
+    backdrop-filter: none;
+  }
+  body.nav-menu-open .mast-brand {
+    visibility: hidden;
+    pointer-events: none;
+  }
   .nav-backdrop {
     display: block;
     position: fixed;
@@ -236,16 +247,50 @@ body.nav-menu-open { overflow: hidden; }
   .nav-panel {
     flex: 1;
     flex-direction: column;
+    flex-wrap: nowrap;
     align-items: stretch;
     gap: 0;
     width: 100%;
     max-width: none;
+    min-height: 0;
     margin: 0;
-    padding: 72px 24px 32px;
+    padding: 16px 24px 32px;
-    padding-top: calc(72px + env(safe-area-inset-top, 0px));
+    padding-top: calc(16px + env(safe-area-inset-top, 0px));
     padding-bottom: calc(32px + env(safe-area-inset-bottom, 0px));
+    overflow-x: hidden;
     overflow-y: auto;
   }
+  .nav-mobile-head {
+    order: -1;
+    display: flex;
+    align-items: center;
+    justify-content: space-between;
+    gap: 12px;
+    width: 100%;
+    min-height: 44px;
+    margin: 0 0 8px;
+    padding: 0 52px 16px 0; /* room for the close (X) control on the right */
+    border-bottom: 1px solid #252530;
+    flex-shrink: 0;
+  }
+  .nav-mobile-brand {
+    display: flex;
+    align-items: center;
+    gap: 10px;
+    min-width: 0;
+    text-decoration: none;
+    line-height: 1;
+  }
+  .nav-mobile-brand:hover { text-decoration: none; opacity: 0.92; }
+  .nav-mobile-brand .brand { font-size: 1.05rem; }
+  .nav-mobile-brand-logo {
+    display: block;
+    width: 40px;
+    height: 40px;
+    border-radius: 8px;
+    object-fit: contain;
+    flex-shrink: 0;
+  }
   .nav-panel > a,
   .nav-panel .nav-link-item {
     display: block;
@@ -263,11 +308,13 @@ body.nav-menu-open { overflow: hidden; }
   }
   .nav-actions {
     flex-direction: column;
+    flex-wrap: nowrap;
     align-items: stretch;
-    gap: 14px;
+    gap: 0;
-    margin-top: 24px;
+    margin-top: 8px;
-    padding: 24px 0 0;
+    padding: 0;
-    border-top: 1px solid #252530;
+    border-top: none;
+    width: 100%;
   }
   .nav-actions .nav-link-item {
     display: block;
@@ -289,10 +336,14 @@ body.nav-menu-open { overflow: hidden; }
     border-radius: 10px;
   }
   .nav-lang {
-    margin-left: 0;
+    margin: 0;
-    margin-top: 4px;
     justify-content: flex-end;
-    width: 100%;
+    width: auto;
+    flex-shrink: 0;
+  }
+  .nav-lang .lang-switcher__menu {
+    /* Keep the list inside the open mobile sheet */
+    z-index: 1320;
   }
 }
 
@@ -342,14 +393,22 @@ body.nav-menu-open { overflow: hidden; }
     flex-wrap: nowrap;
     gap: 8px 20px;
   }
+  .nav-mobile-head {
+    display: contents;
+  }
+  .nav-mobile-brand {
+    display: none;
+  }
+  .nav-lang {
+    order: 2;
+    margin-left: 2px;
+  }
   .nav-actions {
+    order: 1;
     flex-wrap: nowrap;
     gap: 8px 12px;
     margin-left: auto;
   }
-  .nav-lang {
-    margin-left: 2px;
-  }
   .nav-backdrop { display: none !important; }
 }
 .btn { display: inline-block; padding: 10px 18px; border-radius: 8px; font-weight: 700; font-size: 0.9rem; border: none; cursor: pointer; text-decoration: none; }
@@ -1230,7 +1289,22 @@ body.nav-menu-open { overflow: hidden; }
   .hero-split .hero-cta { flex-direction: column; }
   .hero-split .hero-cta .btn { width: 100%; text-align: center; }
 }
-.section { padding: 40px 0; }
+.section {
+  padding-top: 40px;
+  padding-bottom: 40px;
+}
+/* Keep horizontal inset when .section shares a node with .wrap (padding shorthand must not win). */
+.section.wrap {
+  padding-left: 20px;
+  padding-right: 20px;
+}
+.table-scroll {
+  width: 100%;
+  max-width: 100%;
+  overflow-x: auto;
+  -webkit-overflow-scrolling: touch;
+  margin-top: 20px;
+}
 .section h2 { font-size: 1.6rem; margin: 0 0 20px; text-align: center; }
 .steps { display: grid; grid-template-columns: repeat(auto-fit, minmax(220px, 1fr)); gap: 20px; }
 .step { background: #14141c; border: 1px solid #2a2a36; border-radius: 12px; padding: 22px; }
@@ -1363,7 +1437,7 @@ body.nav-menu-open { overflow: hidden; }
 .site-footer__legal { flex: 1 1 100%; margin-top: 4px; }
 .site-footer__legal p { margin: 0 0 6px; line-height: 1.45; }
 .site-footer__legal p:last-child { margin-bottom: 0; }
-.compare-table { width: 100%; border-collapse: collapse; margin-top: 20px; font-size: 0.9rem; }
+.compare-table { width: 100%; min-width: 520px; border-collapse: collapse; margin-top: 0; font-size: 0.9rem; }
 .compare-table th, .compare-table td { padding: 10px 12px; border-bottom: 1px solid #2a2a36; text-align: left; }
 .compare-table th { color: #aaa; font-weight: 600; }
 .billing-documents h2 { margin-top: 0; }
@@ -1372,11 +1446,14 @@ body.nav-menu-open { overflow: hidden; }
 .card { background: #14141c; border: 1px solid #2a2a36; border-radius: 12px; padding: 20px; margin-bottom: 16px; }
 
 .seo-prose { max-width: 720px; margin: 0 auto; color: #bbb; line-height: 1.65; }
-.seo-prose h2 { color: #fff; font-size: 1.25rem; margin: 28px 0 12px; }
+.seo-prose h2 { color: #fff; font-size: 1.25rem; margin: 28px 0 12px; text-align: left; }
 .seo-prose h2:first-child { margin-top: 0; }
 .seo-prose p { margin: 0 0 14px; }
 .seo-prose ul { margin: 0 0 16px; padding-left: 1.25rem; }
 .seo-prose a { color: #e53935; }
+@media (max-width: 899px) {
+  .seo-prose h2 { font-size: 1.15rem; line-height: 1.35; }
+}
 .seo-page .seo-lead { color: #aaa; max-width: 640px; line-height: 1.55; margin-bottom: 28px; }
 .faq-list { max-width: 720px; margin: 0 auto; }
 .faq-item {
@@ -1412,7 +1489,8 @@ body.nav-menu-open { overflow: hidden; }
 .legal-doc a { color: #e53935; }
 .legal-meta { color: #888; font-size: 0.88rem; margin-bottom: 24px; }
 .legal-back { margin-top: 32px; }
-.legal-table { width: 100%; border-collapse: collapse; margin: 12px 0 16px; font-size: 0.88rem; }
+.legal-doc .table-scroll { margin: 12px 0 16px; }
+.legal-table { width: 100%; min-width: 560px; border-collapse: collapse; margin: 0; font-size: 0.88rem; }
 .legal-table th, .legal-table td { border: 1px solid #2a2a36; padding: 10px 12px; text-align: left; vertical-align: top; }
 .legal-table th { background: #14141c; color: #ccc; }
 .legal-accept {
@@ -1447,6 +1525,19 @@ body.nav-menu-open { overflow: hidden; }
 .auth-forgot a { color: #e53935; }
 table.data { width: 100%; border-collapse: collapse; }
 table.data th, table.data td { padding: 8px; border-bottom: 1px solid #2a2a36; text-align: left; }
+/* Wide roster/match tables: scroll inside the card instead of expanding the page. */
+@media (max-width: 899px) {
+  .card:has(table.data),
+  .team-streaming-staff:has(table.data),
+  .billing-documents:has(table.data) {
+    overflow-x: auto;
+    -webkit-overflow-scrolling: touch;
+    max-width: 100%;
+  }
+  table.data {
+    min-width: 520px;
+  }
+}
 input, select {
   width: 100%;
   padding: 12px 14px;

backend/public/regia.css

@@ -165,6 +165,10 @@
   width: 100%;
   margin-top: 8px;
 }
+.regia-btn--outline.is-muted {
+  border-color: var(--regia-yellow);
+  color: var(--regia-yellow);
+}
 .regia-btn--danger {
   background: transparent;
   border: 1px solid var(--regia-red);

backend/public/regia.js

@@ -25,9 +25,12 @@
     partialsPrefix: "Parziali:",
     resumed: "Diretta ripresa",
     pausedCover: "Diretta in pausa — copertina in onda",
+    muted: "Audio silenziato — YouTube non riceve il microfono",
+    unmuted: "Audio microfono riattivato",
     closed: "Diretta chiusa",
     resumeError: "Errore ripresa diretta",
     pauseError: "Errore pausa diretta",
+    muteError: "Errore silenziamento audio",
     closeError: "Errore chiusura",
     closeConfirm: "Chiudere definitivamente la diretta?",
     linkUnavailable: "Link non disponibile",
@@ -39,6 +42,8 @@
     streamEnded: "Diretta terminata",
     resumeLabel: "Riprendi diretta",
     pauseLabel: "Metti in pausa",
+    muteLabel: "Silenzia audio",
+    unmuteLabel: "Riattiva audio",
     endedBadge: "Terminata",
     pausedBadge: "In pausa",
     liveBadge: "In onda",
@@ -76,6 +81,7 @@
     scoreUrl: root.dataset.scoreUrl,
     pauseUrl: root.dataset.pauseUrl,
     resumeUrl: root.dataset.resumeUrl,
+    audioMuteUrl: root.dataset.audioMuteUrl,
     stopUrl: root.dataset.stopUrl,
     cableUrl: root.dataset.cableUrl,
     hlsUrl: root.dataset.hlsUrl,
@@ -103,6 +109,7 @@
     preview: document.getElementById("regia-preview"),
     previewPlaceholder: document.getElementById("regia-preview-placeholder"),
     btnPause: document.getElementById("btn-pause"),
+    btnAudioMute: document.getElementById("btn-audio-mute"),
     subtitle: document.getElementById("regia-subtitle")
   };
 
@@ -111,6 +118,7 @@
   let previewStarted = false;
   let wasPausedPreview = false;
   let streamPaused = root.dataset.initialPaused === "true";
+  let audioMuted = root.dataset.initialAudioMuted === "true";
 
   function hlsUrlFresh() {
     const sep = cfg.hlsUrl.includes("?") ? "&" : "?";
@@ -246,8 +254,18 @@
     els.btnPause.textContent = paused ? I18N.resumeLabel : I18N.pauseLabel;
   }
 
+  function syncMuteButton(data) {
+    if (!els.btnAudioMute) return;
+    if (typeof data.audio_muted === "boolean") {
+      audioMuted = data.audio_muted;
+    }
+    els.btnAudioMute.textContent = audioMuted ? I18N.unmuteLabel : I18N.muteLabel;
+    els.btnAudioMute.classList.toggle("is-muted", audioMuted);
+  }
+
   function setBadge(data) {
     syncPauseButton(data);
+    syncMuteButton(data);
     if (data.stream_closed) {
       els.badge.textContent = I18N.endedBadge;
       els.badge.className = "regia-badge regia-badge--ended";
@@ -458,6 +476,24 @@
     toast(wasPaused ? I18N.resumed : I18N.pausedCover);
   }
 
+  async function toggleMuteAudio() {
+    if (!cfg.audioMuteUrl) return;
+    const nextMuted = !audioMuted;
+    const res = await fetch(cfg.audioMuteUrl, {
+      method: "POST",
+      headers: { "Content-Type": "application/json", Accept: "application/json" },
+      body: JSON.stringify({ muted: nextMuted })
+    });
+    if (!res.ok) {
+      const body = await res.json().catch(() => ({}));
+      throw new Error(body.error || I18N.muteError);
+    }
+    const data = await res.json();
+    applyScorePayload(data);
+    setBadge(data);
+    toast(audioMuted ? I18N.muted : I18N.unmuted);
+  }
+
   async function stopStream() {
     const ok = confirm(I18N.closeConfirm);
     if (!ok) return null;
@@ -471,6 +507,7 @@
   }
 
   els.btnPause?.addEventListener("click", () => togglePauseStream().catch((e) => toast(e.message)));
+  els.btnAudioMute?.addEventListener("click", () => toggleMuteAudio().catch((e) => toast(e.message)));
   document.getElementById("btn-stop")?.addEventListener("click", () => stopStream().catch((e) => toast(e.message)));
 
   async function shareLink(url, title, text) {

backend/spec/models/password_complexity_spec.rb

@@ -0,0 +1,45 @@
+require "rails_helper"
+
+RSpec.describe PasswordComplexity do
+  describe ".violation" do
+    it "accepts a password with 3 character classes" do
+      expect(described_class.violation("NewPass123")).to be_nil
+    end
+
+    it "accepts symbols instead of one letter class" do
+      expect(described_class.violation("newpass1!")).to be_nil
+    end
+
+    it "rejects passwords that are too short" do
+      expect(described_class.violation("Ab1!")).to eq(:too_short)
+    end
+
+    it "rejects passwords with fewer than 3 classes" do
+      expect(described_class.violation("password123")).to eq(:too_weak)
+      expect(described_class.violation("PASSWORD123")).to eq(:too_weak)
+      expect(described_class.violation("Password")).to eq(:too_weak)
+    end
+  end
+
+  describe ".same_as_current?" do
+    let!(:user) { User.create!(email: "same@example.com", name: "Same", password: "Password123", role: "coach") }
+
+    it "detects when the new password matches the current one" do
+      expect(described_class.same_as_current?(user, "Password123")).to eq(true)
+      expect(described_class.same_as_current?(user, "OtherPass123")).to eq(false)
+    end
+  end
+
+  describe "User validation" do
+    it "blocks weak passwords on create" do
+      user = User.new(email: "weak@example.com", name: "Weak", password: "password123", role: "coach")
+      expect(user).not_to be_valid
+      expect(user.errors[:password]).to be_present
+    end
+
+    it "allows strong passwords on create" do
+      user = User.new(email: "strong@example.com", name: "Strong", password: "NewPass123", role: "coach")
+      expect(user).to be_valid
+    end
+  end
+end

backend/spec/requests/account_spec.rb

@@ -0,0 +1,127 @@
+require "rails_helper"
+
+RSpec.describe "Account API", type: :request do
+  let!(:user) { User.create!(email: "account@example.com", name: "Account User", password: "Password123", role: "coach") }
+  let(:auth_headers) do
+    post "/api/v1/auth/login", params: { email: user.email, password: "Password123" }
+    token = JSON.parse(response.body).fetch("access_token")
+    { "Authorization" => "Bearer #{token}" }
+  end
+
+  describe "GET /api/v1/account" do
+    it "returns the current user profile" do
+      get "/api/v1/account", headers: auth_headers
+      expect(response).to have_http_status(:ok)
+      body = JSON.parse(response.body)
+      expect(body).to include("email" => user.email, "name" => "Account User", "role" => "coach")
+    end
+
+    it "requires authentication" do
+      get "/api/v1/account"
+      expect(response).to have_http_status(:unauthorized)
+    end
+  end
+
+  describe "PATCH /api/v1/account" do
+    it "updates the name" do
+      patch "/api/v1/account", params: { name: "Nuovo Nome" }, headers: auth_headers
+      expect(response).to have_http_status(:ok)
+      expect(JSON.parse(response.body)["name"]).to eq("Nuovo Nome")
+      expect(user.reload.name).to eq("Nuovo Nome")
+    end
+
+    it "rejects a blank name" do
+      patch "/api/v1/account", params: { name: "  " }, headers: auth_headers
+      expect(response).to have_http_status(:unprocessable_entity)
+    end
+  end
+
+  describe "PATCH /api/v1/account/password" do
+    it "changes the password with the current password" do
+      patch "/api/v1/account/password",
+            params: {
+              current_password: "Password123",
+              password: "NewPass123",
+              password_confirmation: "NewPass123"
+            },
+            headers: auth_headers
+      expect(response).to have_http_status(:ok)
+      expect(user.reload.authenticate("NewPass123")).to be_truthy
+    end
+
+    it "rejects an incorrect current password" do
+      patch "/api/v1/account/password",
+            params: {
+              current_password: "wrong",
+              password: "NewPass123",
+              password_confirmation: "NewPass123"
+            },
+            headers: auth_headers
+      expect(response).to have_http_status(:unprocessable_entity)
+      expect(user.reload.authenticate("Password123")).to be_truthy
+    end
+
+    it "rejects a password that fails complexity rules" do
+      patch "/api/v1/account/password",
+            params: {
+              current_password: "Password123",
+              password: "newpass123",
+              password_confirmation: "newpass123"
+            },
+            headers: auth_headers.merge("Accept-Language" => "en")
+      expect(response).to have_http_status(:unprocessable_entity)
+      expect(JSON.parse(response.body)["error"]).to match(/3 of/i)
+      expect(user.reload.authenticate("Password123")).to be_truthy
+    end
+
+    it "rejects reusing the current password" do
+      patch "/api/v1/account/password",
+            params: {
+              current_password: "Password123",
+              password: "Password123",
+              password_confirmation: "Password123"
+            },
+            headers: auth_headers.merge("Accept-Language" => "en")
+      expect(response).to have_http_status(:unprocessable_entity)
+      expect(JSON.parse(response.body)["error"]).to match(/different/i)
+      expect(user.reload.authenticate("Password123")).to be_truthy
+    end
+
+    it "localizes password errors from Accept-Language" do
+      patch "/api/v1/account/password",
+            params: {
+              current_password: "Password123",
+              password: "Password123",
+              password_confirmation: "Password123"
+            },
+            headers: auth_headers.merge("Accept-Language" => "it")
+      expect(response).to have_http_status(:unprocessable_entity)
+      expect(JSON.parse(response.body)["error"]).to eq("La nuova password deve essere diversa da quella attuale")
+    end
+  end
+
+    describe "POST /api/v1/auth/password/forgot" do
+    it "always returns ok and sends mail when the user exists" do
+      expect {
+        post "/api/v1/auth/password/forgot", params: { email: user.email }
+      }.to change { ActionMailer::Base.deliveries.size }.by(1)
+      expect(response).to have_http_status(:ok)
+      expect(user.reload.password_reset_digest).to be_present
+    end
+
+    it "returns the same message for unknown emails" do
+      expect {
+        post "/api/v1/auth/password/forgot", params: { email: "nobody@example.com" }
+      }.not_to change { ActionMailer::Base.deliveries.size }
+      expect(response).to have_http_status(:ok)
+    end
+
+    it "localizes the response message from Accept-Language" do
+      post "/api/v1/auth/password/forgot",
+           params: { email: user.email },
+           headers: { "Accept-Language" => "fr" }
+      expect(response).to have_http_status(:ok)
+      expect(JSON.parse(response.body)["message"]).to include("réinitialiser")
+    end
+  end
+end

backend/spec/requests/api/v1/stream_sessions_audio_mute_spec.rb

@@ -0,0 +1,37 @@
+require "rails_helper"
+
+RSpec.describe "Api::V1 stream session audio mute", type: :request do
+  let!(:user) { User.create!(email: "mute-api@test.it", name: "U", password: "Password123", role: "coach") }
+  let!(:club) { Club.create!(name: "C", sport: "volleyball", primary_color: "#e53935", secondary_color: "#ffffff") }
+  let!(:owner) { club.club_memberships.create!(user: user, role: "owner") }
+  let!(:team) { club.teams.create!(name: "T", sport: "volleyball") }
+  let!(:match) { team.matches.create!(opponent_name: "Opp", sport: "volleyball") }
+  let!(:session) { StreamSession.create!(match: match, user: user, platform: "youtube", status: "live") }
+
+  def auth_headers
+    post "/api/v1/auth/login", params: { email: user.email, password: "Password123" }
+    token = response.parsed_body["access_token"]
+    { "Authorization" => "Bearer #{token}", "Content-Type" => "application/json" }
+  end
+
+  it "include audio_muted nello show della sessione" do
+    get "/api/v1/sessions/#{session.id}", headers: auth_headers
+    expect(response).to have_http_status(:ok)
+    expect(response.parsed_body["audio_muted"]).to eq(false)
+  end
+
+  it "silenzia e riattiva l'audio via PATCH" do
+    patch "/api/v1/sessions/#{session.id}/audio_mute",
+          params: { muted: true }.to_json,
+          headers: auth_headers
+    expect(response).to have_http_status(:ok)
+    expect(response.parsed_body["audio_muted"]).to eq(true)
+    expect(session.reload.audio_muted).to eq(true)
+
+    patch "/api/v1/sessions/#{session.id}/audio_mute",
+          params: { muted: false }.to_json,
+          headers: auth_headers
+    expect(response).to have_http_status(:ok)
+    expect(response.parsed_body["audio_muted"]).to eq(false)
+  end
+end

backend/spec/requests/auth_spec.rb

@@ -1,10 +1,10 @@
 require "rails_helper"
 
 RSpec.describe "Auth API", type: :request do
-  let!(:user) { User.create!(email: "test@example.com", name: "Test", password: "password123", role: "coach") }
+  let!(:user) { User.create!(email: "test@example.com", name: "Test", password: "Password123", role: "coach") }
 
   it "logs in with valid credentials" do
-    post "/api/v1/auth/login", params: { email: user.email, password: "password123" }
+    post "/api/v1/auth/login", params: { email: user.email, password: "Password123" }
     expect(response).to have_http_status(:ok)
     expect(JSON.parse(response.body)).to have_key("access_token")
   end

backend/spec/requests/public/regia_spec.rb

@@ -1,7 +1,7 @@
 require "rails_helper"
 
 RSpec.describe "Public regia", type: :request do
-  let!(:user) { User.create!(email: "regia@test.it", name: "U", password: "password123", role: "coach") }
+  let!(:user) { User.create!(email: "regia@test.it", name: "U", password: "Password123", role: "coach") }
   let!(:club) { Club.create!(name: "C", sport: "volleyball", primary_color: "#e53935", secondary_color: "#ffffff") }
   let!(:team) { club.teams.create!(name: "T", sport: "volleyball") }
   let!(:match) { team.matches.create!(opponent_name: "Opp", sport: "volleyball") }
@@ -148,6 +148,29 @@ RSpec.describe "Public regia", type: :request do
     expect(session.reload.status).to eq("connecting")
   end
 
+  it "silenzia e riattiva l'audio della diretta" do
+    token = Sessions::RegiaAccess.new(session).issue_token!
+    expect(session.audio_muted).to eq(false)
+
+    post public_regia_audio_mute_path(token), params: { muted: true }, as: :json
+    expect(response).to have_http_status(:ok)
+    expect(response.parsed_body["audio_muted"]).to eq(true)
+    expect(session.reload.audio_muted).to eq(true)
+
+    post public_regia_audio_mute_path(token), params: { muted: false }, as: :json
+    expect(response).to have_http_status(:ok)
+    expect(response.parsed_body["audio_muted"]).to eq(false)
+    expect(session.reload.audio_muted).to eq(false)
+  end
+
+  it "mostra il pulsante mute sulla pagina regia" do
+    token = Sessions::RegiaAccess.new(session).issue_token!
+    get public_regia_path(token)
+    expect(response).to have_http_status(:ok)
+    expect(response.body).to include("Silenzia audio")
+    expect(response.body).to include("btn-audio-mute")
+  end
+
   it "emette token valido anche oltre le 8 ore dalla partenza" do
     session.update!(started_at: 9.hours.ago)
     token = Sessions::RegiaAccess.new(session).issue_token!

backend/spec/requests/public/support_page_spec.rb

@@ -0,0 +1,57 @@
+require "rails_helper"
+
+RSpec.describe "Public support page", type: :request do
+  it "è pubblica, indicizzabile e mostra l'email di supporto configurata" do
+    get public_support_path
+
+    expect(response).to have_http_status(:ok)
+    expect(response.body).to include(MatchLiveTv.support_email)
+    expect(response.body).to include("mailto:#{MatchLiveTv.support_email}")
+    expect(response.body).to include(I18n.t("legal.support.h1", locale: :it))
+    expect(response.body).to include('rel="canonical"')
+    expect(response.body).to include(public_support_path)
+    expect(response.body).to include(public_privacy_path)
+  end
+
+  it "non espone CTA o link commerciali (App Store Review)" do
+    get public_support_path
+    body = response.body
+
+    expect(body).not_to include(public_prezzi_path)
+    expect(body).not_to include(public_signup_path)
+    expect(body).not_to include('href="/prezzi"')
+    expect(body).not_to include('href="/signup"')
+    expect(body).not_to include(I18n.t("nav.signup", locale: :it))
+    expect(body).not_to include(I18n.t("nav.pricing", locale: :it))
+    expect(body).not_to include(I18n.t("common.pricing", locale: :it))
+    expect(body).not_to match(/\bPremium Light\b/i)
+    expect(body).not_to match(/\bPremium Full\b/i)
+    expect(body).not_to match(/\bpiano Free\b/i)
+    expect(body).not_to match(/\bAbbonati\b/i)
+    expect(body).not_to match(/\bAcquista\b/i)
+  end
+
+  {
+    "it" => "Supporto Match Live TV",
+    "en" => "Match Live TV Support",
+    "fr" => "Support Match Live TV",
+    "de" => "Match Live TV Support",
+    "es" => "Soporte Match Live TV"
+  }.each do |locale, heading|
+    it "renderizza correttamente in #{locale} senza translation missing" do
+      cookies[:mltv_locale] = locale
+      get public_support_path
+
+      expect(response).to have_http_status(:ok)
+      expect(response.body).to include(heading)
+      expect(response.body).not_to include("translation missing")
+    end
+  end
+
+  it "include /support nella sitemap" do
+    get "/sitemap.xml"
+
+    expect(response).to have_http_status(:ok)
+    expect(response.body).to include("#{MatchLiveTv.app_public_url.chomp('/')}/support")
+  end
+end

backend/spec/services/sessions/set_audio_mute_spec.rb

@@ -0,0 +1,27 @@
+require "rails_helper"
+
+RSpec.describe Sessions::SetAudioMute do
+  let!(:user) { User.create!(email: "mute@test.it", name: "U", password: "Password123", role: "coach") }
+  let!(:club) { Club.create!(name: "C", sport: "volleyball", primary_color: "#e53935", secondary_color: "#ffffff") }
+  let!(:team) { club.teams.create!(name: "T", sport: "volleyball") }
+  let!(:match) { team.matches.create!(opponent_name: "Opp", sport: "volleyball") }
+  let!(:session) { StreamSession.create!(match: match, user: user, platform: "matchlivetv", status: "live") }
+
+  it "attiva il mute e persiste lo stato" do
+    described_class.new(session, muted: true).call
+    expect(session.reload.audio_muted).to eq(true)
+    expect(session.stream_events.order(:occurred_at).last.event_type).to eq("audio_muted")
+  end
+
+  it "disattiva il mute" do
+    session.update!(audio_muted: true)
+    described_class.new(session, muted: false).call
+    expect(session.reload.audio_muted).to eq(false)
+    expect(session.stream_events.order(:occurred_at).last.event_type).to eq("audio_unmuted")
+  end
+
+  it "è idempotente se lo stato è già quello richiesto" do
+    described_class.new(session, muted: false).call
+    expect(session.stream_events.count).to eq(0)
+  end
+end

docs/APP_YOUTUBE_LIVE.md

@@ -38,10 +38,10 @@ Solo se la società vuole il **proprio** canale invece di Match Live TV:
 
 Nella home app (**Partite**):
 
-- **Partita programmata** — scegli dal calendario una gara già inserita (sito o app)
 - **Nuova partita** — programma data/ora oppure **Avvia subito** senza orario
+- Oppure tocca una gara già in calendario (sito o app)
 
-Poi tocca la card o conferma dal foglio: si apre il wizard (Partita → Trasmissione → …).
+Poi conferma dal foglio o tocca la card: si apre il wizard (Partita → Trasmissione → …).
 
 ## 4. Avvia diretta
 

docs/ARCHITECTURE.md

@@ -399,7 +399,8 @@ cd infra && cp .env.example .env && docker compose up -d --build
 | [`infrastructure/SERVER_DEPLOYMENT.md`](infrastructure/SERVER_DEPLOYMENT.md) | Bootstrap server, NPM, cron, backup |
 | [`infrastructure/HETZNER_CLOUD_RELAY_OVERFLOW.md`](infrastructure/HETZNER_CLOUD_RELAY_OVERFLOW.md) | Piano overflow relay YouTube su Hetzner Cloud (picchi) |
 | [`ANDROID_APP_LINKS.md`](ANDROID_APP_LINKS.md) | Digital Asset Links / deep link Play (`assetlinks.json`) |
-| [`LIVE_STREAMING.md`](LIVE_STREAMING.md) | MediaMTX, pausa, HLS, ruolo ffmpeg |
+| [`LIVE_STREAMING.md`](LIVE_STREAMING.md) | MediaMTX, pausa, mute audio, HLS, ruolo ffmpeg |
+| [`IOS_STREAM_AUDIO_MUTE.md`](IOS_STREAM_AUDIO_MUTE.md) | Mute microfono iOS (allineamento Mac) |
 | [`REPLAY_MODULE.md`](REPLAY_MODULE.md) | Garage, retention, YouTube VOD |
 | [`OPS_MONITORING.md`](OPS_MONITORING.md) | ntfy, variabili ops, troubleshooting |
 | [`TABELLONI_E_OVERLAY.md`](TABELLONI_E_OVERLAY.md) | Tabelloni e overlay (app nativa) |
@@ -416,7 +417,7 @@ cd infra && cp .env.example .env && docker compose up -d --build
 | 2026-06 | Replay: redirect 302 a `/media/` → Garage (fuori da Puma) |
 | 2026-06 | HLS live: edge → MediaMTX (fuori da Puma) |
 | 2026-06 | Ops: check `http_rails` + `http_public` separati, latenza p95 `UpLatencyTracker` |
-| 2026-06 | `RAILS_MAX_THREADS=5`; relay YouTube da MediaMTX (non via Puma) |
+| 2026-08 | Mute microfono in diretta (`audio_muted`) per evitare claim YouTube sulla musica in palestra |
 | 2026-06 | Cleanup path MediaMTX orfani (`Mediamtx::CleanupOrphanPaths`); delete path sempre a fine diretta |
 | 2026-07 | Rimosso overlay server (`OverlayRelay`); tabellone bruciato in app; HLS su path camera (non `*_air`); `YoutubeRelay` = copy video + AAC |
 | 2026-08 | `YoutubeRelay` = remux copy video+audio (niente ricodifica AAC); profilo app/slate AAC 48k mono |

docs/IOS_ANDROID_I18N_GAP.md

@@ -1,12 +1,14 @@
 # Gap Android → iOS: allineamento app nativa
 
-Documento operativo per continuare su **Mac** lo sviluppo iOS e rilasciare un’app **allineata ad Android `2.0.5-native`**.
+Documento operativo per continuare su **Mac** lo sviluppo iOS e rilasciare un’app **allineata ad Android**.
 
-**Aggiornato:** 24 luglio 2026  
+**Aggiornato:** 12 agosto 2026  
-**Riferimento Android (produzione / telefono / Play):** `2.0.5-native` (`versionCode` **26**), API `https://www.matchlivetv.it`  
+**Riferimento Android (produzione / telefono / Play):** `2.0.10-native` (`versionCode` **31**), API `https://www.matchlivetv.it`  
-**Stato iOS attuale:** marketing `2.0.5`, build `26` — i18n **allineato** (Login, hub, sheet/dialog, wizard, broadcast)
+**Stato iOS attuale:** marketing `2.0.10`, build `31` — i18n **allineato** (Login, hub, sheet/dialog, wizard, broadcast, account/forgot)
 
-Obiettivo iOS: **stessa copertura lingua** di Android (Login, hub, sheet/dialog, wizard, broadcast) + bump versione, **senza** i bug di sessione/crash già risolti su Android 2.0.5.
+**Nuovo (branch `feature/stream-audio-mute`):** mute microfono in diretta. Codice iOS già nel branch; verifica su Mac in [`IOS_STREAM_AUDIO_MUTE.md`](IOS_STREAM_AUDIO_MUTE.md).
+
+Obiettivo iOS: **stessa copertura lingua** di Android (Login, hub, sheet/dialog, wizard, broadcast, account) + bump versione, **senza** i bug di sessione/crash già risolti su Android.
 
 ---
 
@@ -59,7 +61,7 @@ Queste sono regressioni/bug già visti su Android; **non ripeterli** su iOS.
 | Broadcast + score dialog | Sì | `broadcast.*` / `score.*` | **Fatto** |
 | Catalogo stringhe | `values*` (~230) | `AppLanguage.swift` L10n (~225, no FGS) | **Fatto** |
 | Logout UI | Icona | Icona SF Symbol | **Fatto** |
-| Versione | `2.0.5-native` / **26** | `2.0.5` / **26** | **Fatto** |
+| Versione | `2.0.10-native` / **31** | `2.0.10` / **31** | **Fatto** |
 | RTMP ingest | `RtmpIngestUrl.kt` | `MediaUrl.swift` | OK |
 
 ### Residui fuori scope Android (opzionali)
@@ -141,7 +143,7 @@ xcodebuild -project MatchLiveTv.xcodeproj -scheme MatchLiveTv \
 
 Nessuna modifica server richiesta.
 
-Versione store target: **`2.0.5` / build `26`** (parità con Android `2.0.5-native` / versionCode `26`).
+Versione store target: **`2.0.10` / build `31`** (parità con Android `2.0.10-native` / versionCode `31`).
 
 ---
 

docs/IOS_PASSWORD_POLICY_ALIGN.md

@@ -0,0 +1,88 @@
+# iOS — allineamento password policy + errori API localizzati
+
+Documento operativo per **Cursor su Mac**: allineare l’app iOS a backend/Android dopo il ramo `feature/password-policy` (merge su `main`).
+
+**Aggiornato:** 2026-08-08  
+**Android di riferimento:** `2.0.10-native` (`versionCode` **31**)  
+**iOS (allineato):** marketing `2.0.10` / build `31`  
+**API produzione:** `https://www.matchlivetv.it`
+
+---
+
+## Contesto (già in produzione backend dopo questo rilascio)
+
+### Policy password (server)
+
+Definita in `backend/app/models/concerns/password_complexity.rb`:
+
+- minimo **8** caratteri, massimo **72** byte (bcrypt)
+- almeno **3 classi su 4**: minuscole, maiuscole, numeri, simboli
+- in **cambio password** e **reset**: la nuova password **non** può coincidere con quella attuale
+
+Validazione ActiveModel su `User` / `AdminAccount`. Endpoint che la applicano:
+
+| Endpoint | Note |
+|----------|------|
+| `PATCH /api/v1/account/password` | App native + stessi codici errore |
+| `PATCH /account/password` (web) | Flash I18n |
+| reset password pubblico | Stesse regole |
+| registrazione (`auth/register`) | Validazione modello |
+
+### Errori API localizzati
+
+`ApplicationController#set_api_locale` legge, in ordine:
+
+1. header `X-Locale`
+2. `Accept-Language`
+3. `I18n.default_locale` (fallback; **retrocompatibile** se l’app vecchia non manda nulla)
+
+Risposta invariata: `{ "error": "<messaggio già tradotto>" }` (o `{ "message": "..." }` su alcuni successi).
+
+Chiavi rilevanti (`backend/config/locales/app.{it,en,fr,de,es}.yml`):
+
+- `flash.accounts.password_too_short`
+- `flash.accounts.password_too_long`
+- `flash.accounts.password_too_weak`
+- `flash.accounts.password_same_as_current`
+- `flash.accounts.password_current_incorrect`
+- `flash.accounts.password_mismatch`
+- `flash.accounts.password_updated` / `name_required`
+- analoghi in `flash.password_resets.*` e `flash.sessions.*`
+
+---
+
+## Stato iOS vs Android
+
+| Area | Android 2.0.10 | iOS | Stato |
+|------|----------------|-----|-------|
+| Header `Accept-Language` su tutte le request API | OkHttp interceptor | `MatchLiveAPI.request` + `multipartPatch` | **OK** |
+| Hint UI nuova password | `account_new_password` | `account.new.password` | **OK** |
+| Schermata Account | AccountScreen | AccountScreen | **OK** |
+| Forgot password | ForgotPasswordScreen | ForgotPasswordScreen | **OK** |
+| Parsing errori API | body `error` | `APIError.friendlyHttpMessage` | **OK** |
+| Client-side pre-check complessità | No | No | N/A (come Android) |
+| Versione store | `2.0.10-native` / **31** | `2.0.10` / **31** | **OK** |
+| Signup in-app | Non principale | Nessuna UI register | N/A (signup web) |
+
+### File iOS
+
+```
+native/ios/MatchLiveTv/Data/API/MatchLiveAPI.swift
+native/ios/MatchLiveTv/Core/AppLanguage.swift
+native/ios/MatchLiveTv/UI/Account/AccountScreen.swift
+native/ios/MatchLiveTv/UI/Login/ForgotPasswordScreen.swift
+native/ios/MatchLiveTv/Resources/Info.plist
+native/ios/generate_xcodeproj.py
+```
+
+---
+
+## Criterio “fatto”
+
+- [x] `Accept-Language` su login, me, account, change password, forgot (`MatchLiveAPI`)
+- [x] Hint campo nuova password parla di “min. 8 / 3 tipi”
+- [x] Catalogo stringhe account/forgot in it/en/fr/de/es
+- [x] Versione bumpata a `2.0.10` / `31`
+- [ ] QA manuale errori password in lingua UI (weak / same / mismatch / success)
+
+Quando rilasci su TestFlight/App Store, conferma la build `31`.

docs/IOS_STREAM_AUDIO_MUTE.md

@@ -0,0 +1,149 @@
+# iOS — mute audio in diretta (allineamento da Mac)
+
+Documento operativo per **Cursor su Mac**: verificare e, se serve, ritoccare l’app iOS dopo il ramo `feature/stream-audio-mute`.
+
+**Aggiornato:** 2026-08-12  
+**Branch:** `feature/stream-audio-mute` (parte da `main`)  
+**Android di riferimento:** mute microfono in overlay + sync regia  
+**API produzione:** `https://www.matchlivetv.it`
+
+Il codice iOS è **già nel branch** (engine, overlay, API, Cable, L10n). Su Mac va **compilato, testato su device** e, se HaishinKit 2.2.5 rifiuta un parametro, adattato come sotto.
+
+---
+
+## Perché esiste
+
+In palestra la musica di sottofondo finisce nel microfono del telefono. Il relay YouTube fa `-c:a copy`, quindi YouTube sente quella musica e può reclamare il copyright.
+
+Il mute **non ferma** lo stream: continua video + overlay + AAC, ma i sample audio sono silenzio.
+
+---
+
+## Contratto API / Cable (già in backend)
+
+| Pezzo | Dettaglio |
+|-------|-----------|
+| Campo sessione | `audio_muted` (boolean, default `false`) in JSON sessione e `GET/POST /regia/:token/status.json` |
+| REST app | `PATCH /api/v1/sessions/:id/audio_mute` body `{ "muted": true \| false }` |
+| REST regia | `POST /regia/:token/audio_mute` body `{ "muted": true \| false }` (senza body: toggle) |
+| Cable command | `{ "type": "command", "action": "mute_audio" \| "unmute_audio", "muted": true \| false }` |
+| Cable event | `{ "type": "stream_event", "event": "audio_muted", "muted": true \| false }` |
+
+Idempotente: se lo stato è già quello richiesto, il backend non reinvia eventi.
+
+---
+
+## File iOS già modificati
+
+```
+native/ios/MatchLiveTv/Streaming/BroadcastModels.swift          # BroadcastMetrics.audioMuted
+native/ios/MatchLiveTv/Streaming/LiveBroadcastEngine.swift      # setAudioMuted + AudioMixerSettings.isMuted
+native/ios/MatchLiveTv/Streaming/LiveBroadcastCoordinator.swift # setAudioMuted
+native/ios/MatchLiveTv/Domain/Models.swift                      # StreamSession.audioMuted + withAudioMuted
+native/ios/MatchLiveTv/Data/API/ApiDtos.swift                   # audioMuted + AudioMuteRequest
+native/ios/MatchLiveTv/Data/API/MatchLiveAPI.swift              # setAudioMute
+native/ios/MatchLiveTv/Data/Repository/SessionRepository.swift
+native/ios/MatchLiveTv/Data/Cable/SessionCableService.swift     # onAudioMute + AudioMuteCommandLogic
+native/ios/MatchLiveTv/UI/Broadcast/BroadcastControlsOverlay.swift
+native/ios/MatchLiveTv/UI/Broadcast/BroadcastScreen.swift
+native/ios/MatchLiveTv/Core/AppLanguage.swift                   # IT/EN/FR/DE/ES
+native/ios/MatchLiveTvTests/LiveBroadcastCoordinatorTests.swift
+```
+
+---
+
+## Engine HaishinKit 2.2.5 (punto da verificare su Mac)
+
+Implementazione attesa in `LiveBroadcastEngine`:
+
+```swift
+func setAudioMuted(_ muted: Bool) async {
+    audioMuted = muted
+    await applyAudioMute()
+    metrics.audioMuted = muted
+    emitMetrics()
+}
+
+private func applyAudioMute() async {
+    guard pipelineConfigured else { return }
+    var settings = await mixer.audioMixerSettings
+    settings.isMuted = audioMuted
+    var track = settings.tracks[0] ?? AudioMixerTrackSettings(downmix: true, channelMap: [0])
+    track.isMuted = audioMuted
+    settings.tracks[0] = track
+    try? await mixer.setAudioMixerSettings(settings)
+}
+```
+
+In `configurePipeline` i settings iniziali passano `isMuted: audioMuted` sia sul mixer sia sulla track 0.
+
+**Se il build fallisce:**
+
+1. `AudioMixerSettings` potrebbe non avere `isMuted` nel memberwise usato oggi — in quel caso muta solo `settings.tracks[0].isMuted`.
+2. `setAudioMixerSettings` è `async throws` nel codice attuale; se la signature è sync, togli `try await`.
+3. Non staccare il microfono (`attachAudio(nil)`): YouTube/MediaMTX vogliono AAC continuo. Mute = silenzio, non assenza di traccia.
+
+Dopo `prepareBroadcast` / `resumeBroadcast` la schermata richiama `setAudioMuted(session.audioMuted)` per riallineare lo stato persistito.
+
+---
+
+## UI overlay
+
+Toolbar destra (come Android), sotto pausa:
+
+| Stato | SF Symbol | Chiave L10n |
+|-------|-----------|-------------|
+| Audio on | `speaker.wave.2.fill` | `broadcast.mute.cd` |
+| Audio off | `speaker.slash.fill` | `broadcast.unmute.cd` |
+
+Bottone `highlighted` quando mutato (stesso verde della pausa). Pannello telemetria: riga `broadcast.audio.muted.label` se mutato.
+
+---
+
+## Chiavi L10n (già aggiunte, 5 lingue)
+
+| Android | iOS |
+|---------|-----|
+| `broadcast_mute_cd` | `broadcast.mute.cd` |
+| `broadcast_unmute_cd` | `broadcast.unmute.cd` |
+| `broadcast_audio_muted_label` | `broadcast.audio.muted.label` |
+| `broadcast_snackbar_muted` | `broadcast.snackbar.muted` |
+| `broadcast_snackbar_unmuted` | `broadcast.snackbar.unmuted` |
+| `broadcast_snackbar_muted_remote` | `broadcast.snackbar.muted.remote` |
+| `broadcast_snackbar_unmuted_remote` | `broadcast.snackbar.unmuted.remote` |
+| `broadcast_snackbar_mute_error` | `broadcast.snackbar.mute.error` |
+
+---
+
+## Test su Mac (acceptance)
+
+1. `cd native/ios && python3 generate_xcodeproj.py`
+2. Build simulatore / device.
+3. Avvia una diretta (anche verso ambiente di staging).
+4. Overlay: tap mute → icona speaker.slash, snackbar «Audio silenziato», telemetria «Audio off».
+5. Apri la **regia** sullo stesso match → il pulsante deve dire «Riattiva audio».
+6. Dalla regia riattiva → il telefono mostra speaker.wave e snackbar «dalla regia».
+7. Mute, metti in **pausa**, riprendi: l’audio resta mutato (stato persistito).
+8. YouTube / player HLS: video continua, audio silenzioso (non assente).
+9. Unit test: `LiveBroadcastCoordinatorTests.testAudioMuteCommandFromCable`.
+
+```bash
+cd native/ios
+python3 generate_xcodeproj.py
+xcodebuild -project MatchLiveTv.xcodeproj -scheme MatchLiveTv \
+  -destination 'generic/platform=iOS Simulator' \
+  -derivedDataPath build/DerivedData \
+  ONLY_ACTIVE_ARCH=YES ARCHS=arm64 EXCLUDED_ARCHS=x86_64 \
+  build
+```
+
+---
+
+## Criterio “fatto”
+
+- [ ] Build iOS senza errori HaishinKit
+- [ ] Mute/unmute locale in overlay
+- [ ] Sync bidirezionale con la regia via Cable + REST
+- [ ] Mute sopravvive a pausa/ripresa
+- [ ] AAC silenzioso in onda (niente drop della traccia audio)
+- [ ] Stringhe IT/EN/FR/DE/ES visibili in overlay

docs/LIVE_STREAMING.md

@@ -1,6 +1,6 @@
 # Diretta live — architettura MediaMTX
 
-**Ultimo aggiornamento:** 2026-07-29
+**Ultimo aggiornamento:** 2026-08-12
 
 ## Idea
 
@@ -106,6 +106,19 @@ L’app mobile persiste il punteggio con `PATCH /api/v1/sessions/:id/score` (o `
 
 `GET /live/:id/status.json` resta per messaggi sotto il player e recovery HLS; `Cache-Control: no-store`.
 
+### Mute audio (copyright palestra / YouTube)
+
+Se in palestra c’è musica di sottofondo, YouTube può reclamare il copyright sul flusso inoltrato (`-c:a copy`). L’operatore può **silenziare il microfono** senza interrompere video, overlay, HLS o relay:
+
+1. Lo stato `audio_muted` è persistito su `stream_sessions` (default `false`).
+2. API `PATCH /api/v1/sessions/:id/audio_mute` `{ "muted": true|false }` e `POST /regia/:token/audio_mute`.
+3. Action Cable: `{ type: "command", action: "mute_audio"|"unmute_audio" }` e `{ type: "stream_event", event: "audio_muted", muted: true|false }`.
+4. L’app **non toglie la traccia AAC**: azzera i sample PCM (silenzio). YouTube e MediaMTX continuano a ricevere audio 48 kHz mono.
+
+Pulsante mute: overlay diretta (Android/iOS, accanto a pausa) e pagina regia.
+
+Dettaglio implementazione iOS: [`IOS_STREAM_AUDIO_MUTE.md`](IOS_STREAM_AUDIO_MUTE.md).
+
 ## Rigenerare la slate
 
 ```bash

infra/.env.example

@@ -15,6 +15,8 @@ YOUTUBE_MOCK_STREAM_KEY=mock-stream-key
 PRIVACY_CONTROLLER_NAME=Emiliano Frascaro
 PRIVACY_CONTROLLER_ADDRESS=Via Guido De Ruggiero, 89 - 20142 - Milano (MI)
 PRIVACY_CONTACT_EMAIL=privacy@matchlivetv.it
+# Opzionale: email dedicata di supporto (default = info@matchlivetv.it)
+# SUPPORT_CONTACT_EMAIL=info@matchlivetv.it
 MAILER_FROM=Match Live TV <noreply@matchlivetv.it>
 PASSWORD_RESET_EXPIRY_HOURS=2
 

infra/.env.production.example

@@ -39,6 +39,8 @@ RAILS_LOG_LEVEL=info
 PRIVACY_CONTROLLER_NAME=Emiliano Frascaro
 PRIVACY_CONTROLLER_ADDRESS=Via Guido De Ruggiero, 89 - 20142 - Milano (MI)
 PRIVACY_CONTACT_EMAIL=privacy@matchlivetv.it
+# Opzionale: email di supporto App Store (default = info@matchlivetv.it)
+# SUPPORT_CONTACT_EMAIL=info@matchlivetv.it
 PRIVACY_CONTROLLER_VAT=
 
 # Email transazionali (reset password, inviti)

infra/docker-compose.prod.yml

@@ -73,6 +73,7 @@ services:
       HLS_PUBLIC_URL: ${HLS_PUBLIC_URL:-http://localhost:8888}
       APP_PUBLIC_URL: ${APP_PUBLIC_URL:-http://localhost:3000}
       PRIVACY_CONTACT_EMAIL: ${PRIVACY_CONTACT_EMAIL:-privacy@matchlivetv.it}
+      SUPPORT_CONTACT_EMAIL: ${SUPPORT_CONTACT_EMAIL:-}
       PRIVACY_CONTROLLER_NAME: ${PRIVACY_CONTROLLER_NAME:-Emiliano Frascaro}
       PRIVACY_CONTROLLER_ADDRESS: ${PRIVACY_CONTROLLER_ADDRESS:-Via Guido De Ruggiero, 89 - 20142 - Milano (MI)}
       PRIVACY_CONTROLLER_VAT: ${PRIVACY_CONTROLLER_VAT:-}

infra/docker-compose.yml

@@ -71,6 +71,7 @@ services:
       PRIVACY_CONTROLLER_NAME: ${PRIVACY_CONTROLLER_NAME:-Emiliano Frascaro}
       PRIVACY_CONTROLLER_ADDRESS: ${PRIVACY_CONTROLLER_ADDRESS:-Via Guido De Ruggiero, 89 - 20142 - Milano (MI)}
       PRIVACY_CONTACT_EMAIL: ${PRIVACY_CONTACT_EMAIL:-privacy@matchlivetv.it}
+      SUPPORT_CONTACT_EMAIL: ${SUPPORT_CONTACT_EMAIL:-}
       MAILER_FROM: ${MAILER_FROM:-Match Live TV <noreply@matchlivetv.it>}
       APP_PUBLIC_URL: ${APP_PUBLIC_URL:-http://localhost:3000}
       STRIPE_SECRET_KEY: ${STRIPE_SECRET_KEY:-}

native/android/.gitignore

@@ -5,6 +5,7 @@
 *.iml
 /captures/
 /app/build/
+/dist/
 .DS_Store
 keystore.properties
 keystore/

native/android/app/build.gradle.kts

@@ -1,4 +1,8 @@
+import java.io.File
 import java.util.Properties
+import java.util.zip.ZipEntry
+import java.util.zip.ZipFile
+import java.util.zip.ZipOutputStream
 
 plugins {
     id("com.android.application")
@@ -20,13 +24,18 @@ android {
         applicationId = "com.matchlivetv.match_live_tv"
         minSdk = 24
         targetSdk = 36
-        versionCode = 29
+        versionCode = 31
-        versionName = "2.0.8-native"
+        versionName = "2.0.10-native"
 
         val apiBaseUrl = project.findProperty("API_BASE_URL") as String?
             ?: "https://www.matchlivetv.it"
         buildConfigField("String", "API_BASE_URL", "\"$apiBaseUrl\"")
         testInstrumentationRunner = "androidx.test.runner.AndroidJUnitRunner"
+
+        // Anche in defaultConfig: AGP estrae simboli se le .so non sono già stripped.
+        ndk {
+            debugSymbolLevel = "SYMBOL_TABLE"
+        }
     }
 
     signingConfigs {
@@ -47,7 +56,8 @@ android {
                 getDefaultProguardFile("proguard-android-optimize.txt"),
                 "proguard-rules.pro",
             )
-            // Simboli .so per crash/ANR su Play Console (evita l'avviso "native code senza debug symbols")
+            // Le .so AndroidX arrivano già stripped: AGP non genera metadata.
+            // Il task injectNativeDebugSymbolsInReleaseBundle le incorpora nell'AAB.
             ndk {
                 debugSymbolLevel = "SYMBOL_TABLE"
             }
@@ -112,3 +122,118 @@ dependencies {
     androidTestImplementation("androidx.test:core:1.6.1")
     androidTestImplementation("androidx.test.uiautomator:uiautomator:2.3.0")
 }
+
+// Play Console: le .so prebuilt (AndroidX) sono già stripped → AGP salta l'estrazione
+// (niente BUNDLE-METADATA/com.android.tools.build.debugsymbols). Generiamo i .so.sym
+// come fa AGP (llvm-objcopy --strip-debug) e li iniettiamo nell'intermediary AAB.
+fun findLlvmObjcopy(): File {
+    val ndkRoot = File(android.sdkDirectory, "ndk")
+    val ndkDirs = ndkRoot.listFiles()?.filter { it.isDirectory }?.sortedByDescending { it.name }.orEmpty()
+    for (ndk in ndkDirs) {
+        val candidate = ndk.resolve("toolchains/llvm/prebuilt/linux-x86_64/bin/llvm-objcopy")
+        if (candidate.isFile) return candidate
+    }
+    error("llvm-objcopy non trovato sotto ${ndkRoot.absolutePath}")
+}
+
+val injectNativeDebugSymbolsInReleaseBundle by tasks.registering {
+    description = "Embed native-debug-symbols.zip (.so.sym) into the release AAB intermediary"
+    val mergeNative = tasks.named("mergeReleaseNativeLibs")
+    val packageBundle = tasks.named("packageReleaseBundle")
+    dependsOn(mergeNative, packageBundle)
+    inputs.dir(
+        layout.buildDirectory.dir(
+            "intermediates/merged_native_libs/release/mergeReleaseNativeLibs/out/lib",
+        ),
+    )
+    inputs.file(
+        layout.buildDirectory.file(
+            "intermediates/intermediary_bundle/release/packageReleaseBundle/intermediary-bundle.aab",
+        ),
+    )
+    outputs.file(
+        layout.buildDirectory.file(
+            "intermediates/intermediary_bundle/release/packageReleaseBundle/intermediary-bundle.aab",
+        ),
+    )
+    doLast {
+        val libsDir = layout.buildDirectory
+            .dir("intermediates/merged_native_libs/release/mergeReleaseNativeLibs/out/lib")
+            .get()
+            .asFile
+        val aabFile = layout.buildDirectory
+            .file("intermediates/intermediary_bundle/release/packageReleaseBundle/intermediary-bundle.aab")
+            .get()
+            .asFile
+        require(libsDir.isDirectory) { "Native libs missing: $libsDir" }
+        require(aabFile.isFile) { "Intermediary AAB missing: $aabFile" }
+
+        val objcopy = findLlvmObjcopy()
+        val workDir = layout.buildDirectory.dir("tmp/native-debug-symbols-inject").get().asFile
+        workDir.deleteRecursively()
+        workDir.mkdirs()
+        val symbolsRoot = workDir.resolve("symbols")
+        symbolsRoot.mkdirs()
+
+        var count = 0
+        libsDir.walkTopDown().filter { it.isFile && it.extension == "so" }.forEach { so ->
+            val rel = so.relativeTo(libsDir).invariantSeparatorsPath
+            val outRel = "$rel.sym"
+            val outFile = symbolsRoot.resolve(outRel)
+            outFile.parentFile.mkdirs()
+            // Allineato ad AGP SYMBOL_TABLE: llvm-objcopy --strip-debug → *.so.sym
+            val proc = ProcessBuilder(
+                objcopy.absolutePath,
+                "--strip-debug",
+                so.absolutePath,
+                outFile.absolutePath,
+            ).redirectErrorStream(true).start()
+            val out = proc.inputStream.bufferedReader().readText()
+            check(proc.waitFor() == 0) {
+                "objcopy failed for $rel: $out"
+            }
+            count++
+        }
+        check(count > 0) { "Nessuna .so da cui generare simboli in $libsDir" }
+
+        val symbolsZip = workDir.resolve("native-debug-symbols.zip")
+        ZipOutputStream(symbolsZip.outputStream().buffered()).use { zos ->
+            symbolsRoot.walkTopDown().filter { it.isFile }.forEach { f ->
+                val rel = f.relativeTo(symbolsRoot).invariantSeparatorsPath
+                zos.putNextEntry(ZipEntry(rel))
+                f.inputStream().use { it.copyTo(zos) }
+                zos.closeEntry()
+            }
+        }
+
+        val metaPath = "BUNDLE-METADATA/com.android.tools.build.debugsymbols/native-debug-symbols.zip"
+        val outAab = workDir.resolve("intermediary-with-symbols.aab")
+        ZipFile(aabFile).use { src ->
+            ZipOutputStream(outAab.outputStream().buffered()).use { dst ->
+                val entries = src.entries()
+                while (entries.hasMoreElements()) {
+                    val entry = entries.nextElement()
+                    if (entry.name == metaPath) continue
+                    val newEntry = ZipEntry(entry.name)
+                    newEntry.time = entry.time
+                    // Deflate all entries when rewriting; STORED copy is fragile across ZipFile.
+                    newEntry.method = ZipEntry.DEFLATED
+                    dst.putNextEntry(newEntry)
+                    src.getInputStream(entry).use { it.copyTo(dst) }
+                    dst.closeEntry()
+                }
+                dst.putNextEntry(ZipEntry(metaPath))
+                symbolsZip.inputStream().use { it.copyTo(dst) }
+                dst.closeEntry()
+            }
+        }
+        outAab.copyTo(aabFile, overwrite = true)
+        logger.lifecycle(
+            "Injected $metaPath ($count .so.sym, ${symbolsZip.length()} bytes) into ${aabFile.name} via ${objcopy.name}",
+        )
+    }
+}
+
+tasks.matching { it.name == "signReleaseBundle" }.configureEach {
+    dependsOn(injectNativeDebugSymbolsInReleaseBundle)
+}

native/android/app/src/main/kotlin/com/matchlivetv/match_live_tv/data/AppContainer.kt

@@ -2,6 +2,7 @@ package com.matchlivetv.match_live_tv.data
 
 import android.content.Context
 import com.matchlivetv.match_live_tv.core.AppConfig
+import com.matchlivetv.match_live_tv.core.AppLocale
 import com.matchlivetv.match_live_tv.core.TokenStore
 import com.matchlivetv.match_live_tv.data.api.MatchLiveApi
 import com.matchlivetv.match_live_tv.data.cable.SessionCableService
@@ -37,10 +38,20 @@ class AppContainer(context: Context) {
             accessToken?.let { header("Authorization", "Bearer $it") }
             header("Accept", "application/json")
             header("Content-Type", "application/json")
+            header("Accept-Language", apiLanguageTag())
         }.build()
         chain.proceed(request)
     }
 
+    private fun apiLanguageTag(): String {
+        val tag = AppLocale.currentTag(appContext)
+        return if (tag.isBlank()) {
+            java.util.Locale.getDefault().language.ifBlank { "it" }
+        } else {
+            tag
+        }
+    }
+
     private val okHttp = OkHttpClient.Builder()
         .connectTimeout(30, TimeUnit.SECONDS)
         .readTimeout(60, TimeUnit.SECONDS)

native/android/app/src/main/kotlin/com/matchlivetv/match_live_tv/data/api/ApiDtos.kt

@@ -13,6 +13,22 @@ data class LoginRequest(val email: String, val password: String)
 
 data class RefreshRequest(@Json(name = "refresh_token") val refreshToken: String)
 
+data class ForgotPasswordRequest(val email: String)
+
+data class ForgotPasswordResponse(val message: String)
+
+data class UpdateAccountRequest(val name: String)
+
+data class ChangePasswordRequest(
+    @Json(name = "current_password") val currentPassword: String,
+    val password: String,
+    @Json(name = "password_confirmation") val passwordConfirmation: String,
+)
+
+data class MessageResponse(val message: String)
+
+data class ApiErrorResponse(val error: String? = null)
+
 data class LoginResponse(
     val user: UserDto,
     @Json(name = "access_token") val accessToken: String,
@@ -168,6 +184,7 @@ data class StreamSessionDto(
     @Json(name = "target_fps") val targetFps: Int? = null,
     @Json(name = "quality_preset") val qualityPreset: String? = null,
     @Json(name = "started_at") val startedAt: String? = null,
+    @Json(name = "audio_muted") val audioMuted: Boolean? = null,
     val score: ScoreStateDto? = null,
 ) {
     fun toDomain() = StreamSession(
@@ -187,6 +204,7 @@ data class StreamSessionDto(
         qualityPreset = qualityPreset ?: "720p_30_2.5mbps",
         startedAt = startedAt,
         score = score?.toDomain(),
+        audioMuted = audioMuted ?: false,
     )
 }
 
@@ -351,6 +369,10 @@ data class RegiaLinkResponse(
     @Json(name = "regia_url") val regiaUrl: String,
 )
 
+data class AudioMuteRequest(
+    val muted: Boolean,
+)
+
 data class CreateMatchBody(
     @Json(name = "opponent_name") val opponentName: String,
     val sport: String = "volleyball",

native/android/app/src/main/kotlin/com/matchlivetv/match_live_tv/data/api/MatchLiveApi.kt

@@ -23,6 +23,18 @@ interface MatchLiveApi {
     @POST("auth/logout")
     suspend fun logout()
 
+    @POST("auth/password/forgot")
+    suspend fun forgotPassword(@Body body: ForgotPasswordRequest): ForgotPasswordResponse
+
+    @GET("account")
+    suspend fun account(): UserDto
+
+    @PATCH("account")
+    suspend fun updateAccount(@Body body: UpdateAccountRequest): UserDto
+
+    @PATCH("account/password")
+    suspend fun changePassword(@Body body: ChangePasswordRequest): MessageResponse
+
     @GET("sports")
     suspend fun sports(): List<SportDto>
 
@@ -105,6 +117,12 @@ interface MatchLiveApi {
     @PATCH("sessions/{sessionId}/resume")
     suspend fun resumeSession(@Path("sessionId") sessionId: String): StreamSessionDto
 
+    @PATCH("sessions/{sessionId}/audio_mute")
+    suspend fun setAudioMute(
+        @Path("sessionId") sessionId: String,
+        @Body body: AudioMuteRequest,
+    ): StreamSessionDto
+
     @POST("sessions/{sessionId}/network_test")
     suspend fun networkTest(
         @Path("sessionId") sessionId: String,

native/android/app/src/main/kotlin/com/matchlivetv/match_live_tv/data/cable/AudioMuteCommands.kt

@@ -0,0 +1,26 @@
+package com.matchlivetv.match_live_tv.data.cable
+
+/**
+ * Interpreta i payload ActionCable del mute audio.
+ * Usato da app e test: lo stream resta in onda, cambia solo il microfono.
+ */
+object AudioMuteCommands {
+    fun mutedFromPayload(
+        type: String?,
+        action: String? = null,
+        event: String? = null,
+        muted: Any? = null,
+    ): Boolean? = when (type) {
+        "command" -> when (action) {
+            "mute_audio" -> true
+            "unmute_audio" -> false
+            else -> null
+        }
+        "stream_event" -> if (event == "audio_muted") {
+            muted == true || muted == "true"
+        } else {
+            null
+        }
+        else -> null
+    }
+}

native/android/app/src/main/kotlin/com/matchlivetv/match_live_tv/data/cable/SessionCableService.kt

@@ -33,6 +33,7 @@ class SessionCableService(
     var onPauseStream: (() -> Unit)? = null
     var onResumeStream: (() -> Unit)? = null
     var onEndStream: (() -> Unit)? = null
+    var onAudioMute: ((Boolean) -> Unit)? = null
 
     fun connect(sessionId: String, accessToken: String, deviceRole: String = "camera") {
         intentionalDisconnect = false
@@ -105,18 +106,31 @@ class SessionCableService(
         val payload = unwrapCablePayload(data)
         when (payload["type"] as? String) {
             "score_update" -> onScoreUpdate?.invoke(parseScore(payload))
-            "command" -> when (payload["action"] as? String) {
+            "command" -> {
+                AudioMuteCommands.mutedFromPayload(
+                    type = "command",
+                    action = payload["action"] as? String,
+                )?.let { onAudioMute?.invoke(it) }
+                when (payload["action"] as? String) {
                     "pause_stream" -> onPauseStream?.invoke()
                     "resume_stream" -> onResumeStream?.invoke()
                     "stop_stream" -> onEndStream?.invoke()
                 }
-            "stream_event" -> when (payload["event"] as? String) {
+            }
+            "stream_event" -> {
+                AudioMuteCommands.mutedFromPayload(
+                    type = "stream_event",
+                    event = payload["event"] as? String,
+                    muted = payload["muted"],
+                )?.let { onAudioMute?.invoke(it) }
+                when (payload["event"] as? String) {
                     "paused" -> onPauseStream?.invoke()
                     "resumed" -> onResumeStream?.invoke()
                     "ended" -> onEndStream?.invoke()
                 }
             }
         }
+    }
 
     /** Compat: messaggi legacy `{ method: receive_message, data: {...} }`. */
     private fun unwrapCablePayload(raw: Map<String, Any?>): Map<String, Any?> {

native/android/app/src/main/kotlin/com/matchlivetv/match_live_tv/data/repository/AuthRepository.kt

@@ -2,9 +2,13 @@ package com.matchlivetv.match_live_tv.data.repository
 
 import com.matchlivetv.match_live_tv.core.StoredSession
 import com.matchlivetv.match_live_tv.core.TokenStore
+import com.matchlivetv.match_live_tv.data.api.ChangePasswordRequest
+import com.matchlivetv.match_live_tv.data.api.ForgotPasswordRequest
 import com.matchlivetv.match_live_tv.data.api.LoginRequest
 import com.matchlivetv.match_live_tv.data.api.MatchLiveApi
 import com.matchlivetv.match_live_tv.data.api.RefreshRequest
+import com.matchlivetv.match_live_tv.data.api.UpdateAccountRequest
+import com.matchlivetv.match_live_tv.domain.User
 import kotlinx.coroutines.flow.first
 
 class AuthRepository(
@@ -46,6 +50,33 @@ class AuthRepository(
         return session
     }
 
+    suspend fun forgotPassword(email: String): String {
+        return api.forgotPassword(ForgotPasswordRequest(email.trim())).message
+    }
+
+    suspend fun fetchAccount(): User = api.account().toDomain()
+
+    suspend fun updateName(name: String): User {
+        val user = api.updateAccount(UpdateAccountRequest(name.trim())).toDomain()
+        val stored = currentSession() ?: return user
+        tokenStore.saveSession(stored.copy(user = user))
+        return user
+    }
+
+    suspend fun changePassword(
+        currentPassword: String,
+        password: String,
+        passwordConfirmation: String,
+    ) {
+        api.changePassword(
+            ChangePasswordRequest(
+                currentPassword = currentPassword,
+                password = password,
+                passwordConfirmation = passwordConfirmation,
+            ),
+        )
+    }
+
     suspend fun logout() {
         runCatching { api.logout() }
         tokenStore.clear()

native/android/app/src/main/kotlin/com/matchlivetv/match_live_tv/data/repository/SessionRepository.kt

@@ -38,6 +38,9 @@ class SessionRepository(
     suspend fun resumeSession(sessionId: String): StreamSession =
         api.resumeSession(sessionId).toDomain()
 
+    suspend fun setAudioMute(sessionId: String, muted: Boolean): StreamSession =
+        api.setAudioMute(sessionId, com.matchlivetv.match_live_tv.data.api.AudioMuteRequest(muted)).toDomain()
+
     suspend fun submitNetworkTest(
         sessionId: String,
         downloadMbps: Double,

native/android/app/src/main/kotlin/com/matchlivetv/match_live_tv/domain/Models.kt

@@ -128,6 +128,7 @@ data class StreamSession(
     val qualityPreset: String = "720p_30_2.5mbps",
     val startedAt: String? = null,
     val score: ScoreState? = null,
+    val audioMuted: Boolean = false,
 ) {
     val isLive: Boolean get() = status == "live" || status == "reconnecting"
 

native/android/app/src/main/kotlin/com/matchlivetv/match_live_tv/streaming/BroadcastModels.kt

@@ -39,4 +39,5 @@ data class BroadcastMetrics(
     val fps: Int = 0,
     val connected: Boolean = false,
     val lastError: String? = null,
+    val audioMuted: Boolean = false,
 )

native/android/app/src/main/kotlin/com/matchlivetv/match_live_tv/streaming/LiveBroadcastCoordinator.kt

@@ -33,6 +33,10 @@ class LiveBroadcastCoordinator(context: Context) {
         engine.updateOverlay(state)
     }
 
+    fun setAudioMuted(muted: Boolean) {
+        engine.setAudioMuted(muted)
+    }
+
     fun startService() {
         val intent = LiveBroadcastService.startIntent(appContext)
         if (Build.VERSION.SDK_INT >= Build.VERSION_CODES.O) {

native/android/app/src/main/kotlin/com/matchlivetv/match_live_tv/streaming/LiveBroadcastEngine.kt

@@ -8,6 +8,8 @@ import android.util.Log
 import android.view.Surface
 import android.view.WindowManager
 import com.pedro.common.ConnectChecker
+import com.pedro.encoder.input.sources.audio.MicrophoneSource
+import com.pedro.encoder.input.sources.audio.MixAudioSource
 import com.pedro.library.generic.GenericStream
 import com.pedro.library.util.SensorRotationManager
 import com.matchlivetv.match_live_tv.streaming.overlay.OverlayRenderer
@@ -42,6 +44,7 @@ class LiveBroadcastEngine(
     private val pausingIntentionally = AtomicBoolean(false)
     private val reconnectAttempts = AtomicInteger(0)
     private val overlayRenderer = OverlayRenderer(appContext)
+    private val desiredAudioMuted = AtomicBoolean(false)
 
     private val rebindRunnable = Runnable {
         reattachPreviewIfNeeded()
@@ -227,6 +230,7 @@ class LiveBroadcastEngine(
             currentBitrateKbps = 0
             currentFps = 0
             reconnectAttempts.set(0)
+            desiredAudioMuted.set(false)
             setPhase(BroadcastPhase.IDLE)
         }
     }
@@ -264,6 +268,17 @@ class LiveBroadcastEngine(
         }
     }
 
+    /** Silenzia il microfono senza togliere la traccia AAC (YouTube/MediaMTX richiedono audio continuo). */
+    fun setAudioMuted(muted: Boolean) {
+        mainHandler.post {
+            desiredAudioMuted.set(muted)
+            applyAudioMuteInternal()
+            emitMetrics()
+        }
+    }
+
+    fun isAudioMuted(): Boolean = desiredAudioMuted.get()
+
     /** Adattamento termico: riduce bitrate/FPS senza fermare lo stream. */
     fun applyThermalProfile(videoBitrate: Int, fps: Int) {
         mainHandler.post {
@@ -340,6 +355,7 @@ class LiveBroadcastEngine(
         applyInitialOrientation()
         attachOverlayFilter(cfg)
         startSensor()
+        applyAudioMuteInternal()
         return true
     }
 
@@ -514,6 +530,7 @@ class LiveBroadcastEngine(
                 },
                 connected = phase == BroadcastPhase.LIVE,
                 lastError = error,
+                audioMuted = desiredAudioMuted.get(),
             ),
         )
     }
@@ -579,6 +596,21 @@ class LiveBroadcastEngine(
         }
     }
 
+    private fun applyAudioMuteInternal() {
+        val muted = desiredAudioMuted.get()
+        val source = genericStream?.audioSource ?: return
+        runCatching {
+            when (source) {
+                is MicrophoneSource -> if (muted) source.mute() else source.unMute()
+                is MixAudioSource -> if (muted) source.muteMicrophone() else source.unMuteMicrophone()
+                else -> Log.w(TAG, "applyAudioMute: unsupported source ${source::class.java.simpleName}")
+            }
+            Log.i(TAG, "audio muted=$muted source=${source::class.java.simpleName}")
+        }.onFailure {
+            Log.w(TAG, "applyAudioMute failed: ${it.message}")
+        }
+    }
+
     private fun userFacingError(reason: String): String = when {
         reason.contains("broken pipe", ignoreCase = true) ->
             "Connessione persa — riprova a riavviare la diretta"

native/android/app/src/main/kotlin/com/matchlivetv/match_live_tv/ui/account/AccountScreen.kt

@@ -0,0 +1,313 @@
+package com.matchlivetv.match_live_tv.ui.account
+
+import androidx.compose.foundation.layout.Column
+import androidx.compose.foundation.layout.Spacer
+import androidx.compose.foundation.layout.fillMaxWidth
+import androidx.compose.foundation.layout.height
+import androidx.compose.foundation.layout.padding
+import androidx.compose.foundation.rememberScrollState
+import androidx.compose.foundation.text.KeyboardOptions
+import androidx.compose.foundation.verticalScroll
+import androidx.compose.material.icons.Icons
+import androidx.compose.material.icons.automirrored.filled.ArrowBack
+import androidx.compose.material.icons.filled.Visibility
+import androidx.compose.material.icons.filled.VisibilityOff
+import androidx.compose.material3.ExperimentalMaterial3Api
+import androidx.compose.material3.Icon
+import androidx.compose.material3.IconButton
+import androidx.compose.material3.MaterialTheme
+import androidx.compose.material3.OutlinedTextField
+import androidx.compose.material3.OutlinedTextFieldDefaults
+import androidx.compose.material3.Text
+import androidx.compose.material3.TopAppBar
+import androidx.compose.material3.TopAppBarDefaults
+import androidx.compose.runtime.Composable
+import androidx.compose.runtime.LaunchedEffect
+import androidx.compose.runtime.getValue
+import androidx.compose.runtime.mutableStateOf
+import androidx.compose.runtime.remember
+import androidx.compose.runtime.rememberCoroutineScope
+import androidx.compose.runtime.setValue
+import androidx.compose.ui.Modifier
+import androidx.compose.ui.graphics.Color
+import androidx.compose.ui.res.stringResource
+import androidx.compose.ui.text.input.KeyboardType
+import androidx.compose.ui.text.input.PasswordVisualTransformation
+import androidx.compose.ui.text.input.VisualTransformation
+import androidx.compose.ui.unit.dp
+import com.matchlivetv.match_live_tv.R
+import com.matchlivetv.match_live_tv.data.AppContainer
+import com.matchlivetv.match_live_tv.ui.components.MatchPrimaryButton
+import com.matchlivetv.match_live_tv.ui.components.MatchScreenScaffold
+import com.matchlivetv.match_live_tv.ui.components.MatchSecondaryButton
+import com.matchlivetv.match_live_tv.ui.theme.MatchColors
+import kotlinx.coroutines.launch
+import retrofit2.HttpException
+
+@OptIn(ExperimentalMaterial3Api::class)
+@Composable
+fun AccountScreen(
+    container: AppContainer,
+    onBack: () -> Unit,
+    onLoggedOut: () -> Unit,
+) {
+    val scope = rememberCoroutineScope()
+    var email by remember { mutableStateOf("") }
+    var role by remember { mutableStateOf("") }
+    var name by remember { mutableStateOf("") }
+    var currentPassword by remember { mutableStateOf("") }
+    var newPassword by remember { mutableStateOf("") }
+    var confirmPassword by remember { mutableStateOf("") }
+    var passwordVisible by remember { mutableStateOf(false) }
+    var loadingProfile by remember { mutableStateOf(true) }
+    var savingProfile by remember { mutableStateOf(false) }
+    var savingPassword by remember { mutableStateOf(false) }
+    var loggingOut by remember { mutableStateOf(false) }
+    var profileMessage by remember { mutableStateOf<String?>(null) }
+    var profileError by remember { mutableStateOf<String?>(null) }
+    var passwordMessage by remember { mutableStateOf<String?>(null) }
+    var passwordError by remember { mutableStateOf<String?>(null) }
+
+    val errGeneric = stringResource(R.string.common_error_generic)
+    val profileSaved = stringResource(R.string.account_profile_saved)
+    val passwordSaved = stringResource(R.string.account_password_saved)
+
+    LaunchedEffect(Unit) {
+        runCatching { container.authRepository.fetchAccount() }
+            .onSuccess { user ->
+                email = user.email
+                name = user.name
+                role = user.role
+            }
+            .onFailure {
+                profileError = apiErrorMessage(it) ?: errGeneric
+            }
+        loadingProfile = false
+    }
+
+    MatchScreenScaffold(
+        topBar = {
+            TopAppBar(
+                title = { Text(stringResource(R.string.account_title)) },
+                navigationIcon = {
+                    IconButton(onClick = onBack) {
+                        Icon(
+                            imageVector = Icons.AutoMirrored.Filled.ArrowBack,
+                            contentDescription = stringResource(R.string.common_close),
+                            tint = MatchColors.TextSecondary,
+                        )
+                    }
+                },
+                colors = TopAppBarDefaults.topAppBarColors(
+                    containerColor = MatchColors.Background,
+                    titleContentColor = Color.White,
+                ),
+            )
+        },
+    ) {
+        Column(
+            modifier = Modifier
+                .verticalScroll(rememberScrollState())
+                .padding(horizontal = 24.dp, vertical = 16.dp),
+        ) {
+            Text(
+                text = stringResource(R.string.account_profile_heading),
+                style = MaterialTheme.typography.titleMedium,
+                color = Color.White,
+            )
+            Spacer(Modifier.height(12.dp))
+            OutlinedTextField(
+                value = email,
+                onValueChange = {},
+                enabled = false,
+                label = { Text(stringResource(R.string.login_email)) },
+                modifier = Modifier.fillMaxWidth(),
+                colors = accountFieldColors(),
+            )
+            if (role.isNotBlank()) {
+                Spacer(Modifier.height(8.dp))
+                Text(
+                    text = stringResource(R.string.account_role, role),
+                    color = MatchColors.TextSecondary,
+                    style = MaterialTheme.typography.bodySmall,
+                )
+            }
+            Spacer(Modifier.height(12.dp))
+            OutlinedTextField(
+                value = name,
+                onValueChange = { name = it },
+                label = { Text(stringResource(R.string.account_name_label)) },
+                modifier = Modifier.fillMaxWidth(),
+                singleLine = true,
+                enabled = !loadingProfile && !savingProfile,
+                colors = accountFieldColors(),
+            )
+            profileError?.let {
+                Spacer(Modifier.height(8.dp))
+                Text(it, color = MatchColors.PrimaryRed)
+            }
+            profileMessage?.let {
+                Spacer(Modifier.height(8.dp))
+                Text(it, color = MatchColors.TextSecondary)
+            }
+            Spacer(Modifier.height(16.dp))
+            MatchPrimaryButton(
+                label = stringResource(R.string.account_save_profile),
+                loading = savingProfile,
+                enabled = !loadingProfile && name.isNotBlank() && !savingProfile,
+                onClick = {
+                    savingProfile = true
+                    profileError = null
+                    profileMessage = null
+                    scope.launch {
+                        runCatching { container.authRepository.updateName(name) }
+                            .onSuccess {
+                                name = it.name
+                                profileMessage = profileSaved
+                            }
+                            .onFailure {
+                                profileError = apiErrorMessage(it) ?: errGeneric
+                            }
+                        savingProfile = false
+                    }
+                },
+            )
+
+            Spacer(Modifier.height(32.dp))
+            Text(
+                text = stringResource(R.string.account_password_heading),
+                style = MaterialTheme.typography.titleMedium,
+                color = Color.White,
+            )
+            Spacer(Modifier.height(12.dp))
+            PasswordField(
+                value = currentPassword,
+                onValueChange = { currentPassword = it },
+                label = stringResource(R.string.account_current_password),
+                visible = passwordVisible,
+                onToggleVisible = { passwordVisible = !passwordVisible },
+            )
+            Spacer(Modifier.height(12.dp))
+            PasswordField(
+                value = newPassword,
+                onValueChange = { newPassword = it },
+                label = stringResource(R.string.account_new_password),
+                visible = passwordVisible,
+                onToggleVisible = { passwordVisible = !passwordVisible },
+            )
+            Spacer(Modifier.height(12.dp))
+            PasswordField(
+                value = confirmPassword,
+                onValueChange = { confirmPassword = it },
+                label = stringResource(R.string.account_confirm_password),
+                visible = passwordVisible,
+                onToggleVisible = { passwordVisible = !passwordVisible },
+            )
+            passwordError?.let {
+                Spacer(Modifier.height(8.dp))
+                Text(it, color = MatchColors.PrimaryRed)
+            }
+            passwordMessage?.let {
+                Spacer(Modifier.height(8.dp))
+                Text(it, color = MatchColors.TextSecondary)
+            }
+            Spacer(Modifier.height(16.dp))
+            MatchPrimaryButton(
+                label = stringResource(R.string.account_save_password),
+                loading = savingPassword,
+                enabled = currentPassword.isNotBlank() &&
+                    newPassword.isNotBlank() &&
+                    confirmPassword.isNotBlank() &&
+                    !savingPassword,
+                onClick = {
+                    savingPassword = true
+                    passwordError = null
+                    passwordMessage = null
+                    scope.launch {
+                        runCatching {
+                            container.authRepository.changePassword(
+                                currentPassword = currentPassword,
+                                password = newPassword,
+                                passwordConfirmation = confirmPassword,
+                            )
+                        }.onSuccess {
+                            currentPassword = ""
+                            newPassword = ""
+                            confirmPassword = ""
+                            passwordMessage = passwordSaved
+                        }.onFailure {
+                            passwordError = apiErrorMessage(it) ?: errGeneric
+                        }
+                        savingPassword = false
+                    }
+                },
+            )
+
+            Spacer(Modifier.height(40.dp))
+            MatchSecondaryButton(
+                label = stringResource(R.string.action_logout),
+                enabled = !loggingOut,
+                onClick = {
+                    loggingOut = true
+                    scope.launch {
+                        container.authRepository.logout()
+                        onLoggedOut()
+                    }
+                },
+            )
+            Spacer(Modifier.height(24.dp))
+        }
+    }
+}
+
+@Composable
+private fun PasswordField(
+    value: String,
+    onValueChange: (String) -> Unit,
+    label: String,
+    visible: Boolean,
+    onToggleVisible: () -> Unit,
+) {
+    OutlinedTextField(
+        value = value,
+        onValueChange = onValueChange,
+        label = { Text(label) },
+        modifier = Modifier.fillMaxWidth(),
+        singleLine = true,
+        visualTransformation = if (visible) VisualTransformation.None else PasswordVisualTransformation(),
+        trailingIcon = {
+            IconButton(onClick = onToggleVisible) {
+                Icon(
+                    imageVector = if (visible) Icons.Filled.VisibilityOff else Icons.Filled.Visibility,
+                    contentDescription = null,
+                    tint = MatchColors.TextSecondary,
+                )
+            }
+        },
+        keyboardOptions = KeyboardOptions(keyboardType = KeyboardType.Password),
+        colors = accountFieldColors(),
+    )
+}
+
+@Composable
+private fun accountFieldColors() = OutlinedTextFieldDefaults.colors(
+    focusedTextColor = Color.White,
+    unfocusedTextColor = Color.White,
+    disabledTextColor = MatchColors.TextSecondary,
+    focusedBorderColor = MatchColors.PrimaryRed,
+    unfocusedBorderColor = MatchColors.Outline,
+    disabledBorderColor = MatchColors.Outline,
+    focusedLabelColor = MatchColors.PrimaryRed,
+    unfocusedLabelColor = MatchColors.TextSecondary,
+    disabledLabelColor = MatchColors.TextSecondary,
+    cursorColor = MatchColors.PrimaryRed,
+)
+
+private fun apiErrorMessage(error: Throwable): String? {
+    if (error is HttpException) {
+        val body = error.response()?.errorBody()?.string().orEmpty()
+        val match = Regex("\"error\"\\s*:\\s*\"([^\"]+)\"").find(body)
+        if (match != null) return match.groupValues[1]
+    }
+    return error.message
+}

native/android/app/src/main/kotlin/com/matchlivetv/match_live_tv/ui/broadcast/BroadcastControlsOverlay.kt

@@ -32,6 +32,8 @@ import androidx.compose.material.icons.filled.Stop
 import androidx.compose.material.icons.filled.Visibility
 import androidx.compose.material.icons.filled.VisibilityOff
 import androidx.compose.material.icons.filled.Videocam
+import androidx.compose.material.icons.automirrored.filled.VolumeOff
+import androidx.compose.material.icons.automirrored.filled.VolumeUp
 import androidx.compose.material3.AlertDialog
 import androidx.compose.material3.ExperimentalMaterial3Api
 import androidx.compose.material3.Icon
@@ -100,6 +102,8 @@ fun BroadcastControlsOverlay(
     onCloseSet: (() -> Unit)? = null,
     onAdvancePeriod: (() -> Unit)? = null,
     onPauseOrResume: () -> Unit,
+    onToggleAudioMute: () -> Unit,
+    audioMuted: Boolean,
     onTerminate: () -> Unit,
     onShareLive: () -> Unit,
     onShareRegia: () -> Unit,
@@ -174,6 +178,7 @@ fun BroadcastControlsOverlay(
                 bitrateKbps = bitrateKbps,
                 networkType = networkType,
                 deviceHealth = deviceHealth,
+                audioMuted = audioMuted,
             )
         }
 
@@ -227,6 +232,16 @@ fun BroadcastControlsOverlay(
                     onClick = onPauseOrResume,
                     highlighted = isPaused,
                 )
+                SideIconButton(
+                    icon = if (audioMuted) Icons.AutoMirrored.Filled.VolumeOff else Icons.AutoMirrored.Filled.VolumeUp,
+                    contentDescription = if (audioMuted) {
+                        stringResource(R.string.broadcast_unmute_cd)
+                    } else {
+                        stringResource(R.string.broadcast_mute_cd)
+                    },
+                    onClick = onToggleAudioMute,
+                    highlighted = audioMuted,
+                )
                 SideIconButton(
                     icon = Icons.Default.Stop,
                     contentDescription = stringResource(R.string.broadcast_terminate_cd),
@@ -287,6 +302,7 @@ private fun BroadcastTelemetryPanel(
     bitrateKbps: Long,
     networkType: String,
     deviceHealth: DeviceHealthSnapshot,
+    audioMuted: Boolean,
     modifier: Modifier = Modifier,
 ) {
     val labelStyle = MaterialTheme.typography.labelSmall
@@ -326,6 +342,14 @@ private fun BroadcastTelemetryPanel(
             style = labelStyle,
             color = MatchColors.TextSecondary,
         )
+        if (audioMuted) {
+            Text(
+                stringResource(R.string.broadcast_audio_muted_label),
+                style = labelStyle,
+                color = MatchColors.AccentYellow,
+                fontWeight = FontWeight.Bold,
+            )
+        }
         ThermalIndicator(state = deviceHealth.thermalState)
     }
 }

native/android/app/src/main/kotlin/com/matchlivetv/match_live_tv/ui/broadcast/BroadcastScreen.kt

@@ -78,6 +78,7 @@ fun BroadcastScreen(
     var loading by remember { mutableStateOf(true) }
     var pauseInFlight by remember { mutableStateOf(false) }
     var resumeInFlight by remember { mutableStateOf(false) }
+    var muteInFlight by remember { mutableStateOf(false) }
     var controlsVisible by remember { mutableStateOf(true) }
     var logoReady by remember { mutableStateOf(0) }
     var deviceHealth by remember { mutableStateOf(DeviceTelemetry.snapshot(context)) }
@@ -145,6 +146,7 @@ fun BroadcastScreen(
             }
             updated = container.sessionRepository.fetchSession(sessionId)
             session = updated
+            container.broadcastCoordinator.setAudioMuted(updated.audioMuted)
             snackbar.showSnackbar(context.getString(R.string.broadcast_snackbar_resumed))
         } catch (e: Exception) {
             snackbar.showSnackbar(
@@ -174,6 +176,7 @@ fun BroadcastScreen(
             thermalManager.updateBaseline(cfg)
             container.broadcastCoordinator.engine.resumeBroadcast(cfg)
             snackbar.showSnackbar(context.getString(R.string.broadcast_snackbar_resumed_remote))
+            container.broadcastCoordinator.setAudioMuted(current.audioMuted)
         } catch (e: Exception) {
             snackbar.showSnackbar(
                 context.getString(R.string.broadcast_snackbar_resume_rtmp_error, e.message ?: genericError),
@@ -191,6 +194,40 @@ fun BroadcastScreen(
         onFinished()
     }
 
+    suspend fun setAudioMuted(muted: Boolean, remote: Boolean) {
+        if (muteInFlight) return
+        if ((session?.audioMuted == true || metrics.audioMuted) == muted) {
+            container.broadcastCoordinator.setAudioMuted(muted)
+            return
+        }
+        muteInFlight = true
+        try {
+            if (!remote) {
+                val updated = container.sessionRepository.setAudioMute(sessionId, muted)
+                session = updated
+            } else {
+                session = session?.copy(audioMuted = muted)
+            }
+            container.broadcastCoordinator.setAudioMuted(muted)
+            snackbar.showSnackbar(
+                context.getString(
+                    when {
+                        remote && muted -> R.string.broadcast_snackbar_muted_remote
+                        remote && !muted -> R.string.broadcast_snackbar_unmuted_remote
+                        muted -> R.string.broadcast_snackbar_muted
+                        else -> R.string.broadcast_snackbar_unmuted
+                    },
+                ),
+            )
+        } catch (e: Exception) {
+            snackbar.showSnackbar(
+                context.getString(R.string.broadcast_snackbar_mute_error, e.message ?: genericError),
+            )
+        } finally {
+            muteInFlight = false
+        }
+    }
+
     LaunchedEffect(sessionId, permissions.granted) {
         if (!permissions.granted) return@LaunchedEffect
         loading = true
@@ -215,6 +252,9 @@ fun BroadcastScreen(
                 container.sessionCable.onEndStream = {
                     scope.launch { applyRemoteStop() }
                 }
+                container.sessionCable.onAudioMute = { muted ->
+                    if (!muteInFlight) scope.launch { setAudioMuted(muted, remote = true) }
+                }
                 container.sessionCable.connect(sessionId, token, deviceRole = "camera")
             }
             container.broadcastCoordinator.startService()
@@ -225,8 +265,10 @@ fun BroadcastScreen(
                 val cfg = broadcastConfig(loaded)
                 thermalManager.updateBaseline(cfg)
                 container.broadcastCoordinator.engine.startBroadcast(cfg)
+                container.broadcastCoordinator.setAudioMuted(loaded.audioMuted)
             } else {
                 thermalManager.updateBaseline(broadcastConfig(loaded))
+                container.broadcastCoordinator.setAudioMuted(loaded.audioMuted)
             }
         }.onFailure {
             error = it.message ?: context.getString(R.string.broadcast_error_session_unavailable)
@@ -364,6 +406,7 @@ fun BroadcastScreen(
             container.sessionCable.onPauseStream = null
             container.sessionCable.onResumeStream = null
             container.sessionCable.onEndStream = null
+            container.sessionCable.onAudioMute = null
             container.sessionCable.disconnect()
             container.broadcastCoordinator.stopService()
             container.broadcastCoordinator.engine.stopBroadcast()
@@ -371,6 +414,7 @@ fun BroadcastScreen(
     }
 
     val isPaused = session?.isPaused == true || metrics.phase == BroadcastPhase.PAUSED
+    val audioMuted = session?.audioMuted == true || metrics.audioMuted
     val statusText = when {
         isPaused -> stringResource(R.string.broadcast_status_paused)
         metrics.phase == BroadcastPhase.LIVE -> stringResource(R.string.broadcast_status_live)
@@ -544,6 +588,10 @@ fun BroadcastScreen(
                         if (isPaused) resumeStream() else pauseStream()
                     }
                 },
+                onToggleAudioMute = {
+                    scope.launch { setAudioMuted(!audioMuted, remote = false) }
+                },
+                audioMuted = audioMuted,
                 onTerminate = { scope.launch { stopStreamPermanently() } },
                 onShareLive = {
                     val url = shareUrl

native/android/app/src/main/kotlin/com/matchlivetv/match_live_tv/ui/login/ForgotPasswordScreen.kt

@@ -0,0 +1,138 @@
+package com.matchlivetv.match_live_tv.ui.login
+
+import androidx.compose.foundation.layout.Column
+import androidx.compose.foundation.layout.Spacer
+import androidx.compose.foundation.layout.fillMaxWidth
+import androidx.compose.foundation.layout.height
+import androidx.compose.foundation.layout.padding
+import androidx.compose.foundation.rememberScrollState
+import androidx.compose.foundation.text.KeyboardActions
+import androidx.compose.foundation.text.KeyboardOptions
+import androidx.compose.foundation.verticalScroll
+import androidx.compose.material.icons.Icons
+import androidx.compose.material.icons.automirrored.filled.ArrowBack
+import androidx.compose.material3.ExperimentalMaterial3Api
+import androidx.compose.material3.Icon
+import androidx.compose.material3.IconButton
+import androidx.compose.material3.OutlinedTextField
+import androidx.compose.material3.OutlinedTextFieldDefaults
+import androidx.compose.material3.Text
+import androidx.compose.material3.TopAppBar
+import androidx.compose.material3.TopAppBarDefaults
+import androidx.compose.runtime.Composable
+import androidx.compose.runtime.getValue
+import androidx.compose.runtime.mutableStateOf
+import androidx.compose.runtime.remember
+import androidx.compose.runtime.rememberCoroutineScope
+import androidx.compose.runtime.setValue
+import androidx.compose.ui.Alignment
+import androidx.compose.ui.Modifier
+import androidx.compose.ui.graphics.Color
+import androidx.compose.ui.res.stringResource
+import androidx.compose.ui.text.input.ImeAction
+import androidx.compose.ui.text.input.KeyboardType
+import androidx.compose.ui.text.style.TextAlign
+import androidx.compose.ui.unit.dp
+import com.matchlivetv.match_live_tv.R
+import com.matchlivetv.match_live_tv.data.AppContainer
+import com.matchlivetv.match_live_tv.ui.components.MatchPrimaryButton
+import com.matchlivetv.match_live_tv.ui.components.MatchScreenScaffold
+import com.matchlivetv.match_live_tv.ui.theme.MatchColors
+import kotlinx.coroutines.launch
+
+@OptIn(ExperimentalMaterial3Api::class)
+@Composable
+fun ForgotPasswordScreen(
+    container: AppContainer,
+    onBack: () -> Unit,
+) {
+    var email by remember { mutableStateOf("") }
+    var loading by remember { mutableStateOf(false) }
+    var error by remember { mutableStateOf<String?>(null) }
+    var success by remember { mutableStateOf(false) }
+    val scope = rememberCoroutineScope()
+    val errGeneric = stringResource(R.string.common_error_generic)
+    val successMessage = stringResource(R.string.forgot_password_success)
+
+    MatchScreenScaffold(
+        topBar = {
+            TopAppBar(
+                title = { Text(stringResource(R.string.forgot_password_title)) },
+                navigationIcon = {
+                    IconButton(onClick = onBack) {
+                        Icon(
+                            imageVector = Icons.AutoMirrored.Filled.ArrowBack,
+                            contentDescription = stringResource(R.string.common_close),
+                            tint = MatchColors.TextSecondary,
+                        )
+                    }
+                },
+                colors = TopAppBarDefaults.topAppBarColors(
+                    containerColor = MatchColors.Background,
+                    titleContentColor = Color.White,
+                ),
+            )
+        },
+    ) {
+        Column(
+            modifier = Modifier
+                .verticalScroll(rememberScrollState())
+                .padding(horizontal = 24.dp, vertical = 16.dp),
+            horizontalAlignment = Alignment.CenterHorizontally,
+        ) {
+            Text(
+                text = stringResource(R.string.forgot_password_lead),
+                color = MatchColors.TextSecondary,
+                textAlign = TextAlign.Center,
+                modifier = Modifier.fillMaxWidth(),
+            )
+            Spacer(Modifier.height(24.dp))
+            OutlinedTextField(
+                value = email,
+                onValueChange = { email = it },
+                label = { Text(stringResource(R.string.login_email)) },
+                modifier = Modifier.fillMaxWidth(),
+                singleLine = true,
+                enabled = !success,
+                keyboardOptions = KeyboardOptions(
+                    keyboardType = KeyboardType.Email,
+                    imeAction = ImeAction.Done,
+                ),
+                keyboardActions = KeyboardActions(onDone = { }),
+                colors = OutlinedTextFieldDefaults.colors(
+                    focusedTextColor = Color.White,
+                    unfocusedTextColor = Color.White,
+                    focusedBorderColor = MatchColors.PrimaryRed,
+                    unfocusedBorderColor = MatchColors.Outline,
+                    focusedLabelColor = MatchColors.PrimaryRed,
+                    unfocusedLabelColor = MatchColors.TextSecondary,
+                    cursorColor = MatchColors.PrimaryRed,
+                ),
+            )
+            error?.let {
+                Spacer(Modifier.height(12.dp))
+                Text(it, color = MatchColors.PrimaryRed, textAlign = TextAlign.Center)
+            }
+            if (success) {
+                Spacer(Modifier.height(12.dp))
+                Text(successMessage, color = MatchColors.TextSecondary, textAlign = TextAlign.Center)
+            }
+            Spacer(Modifier.height(32.dp))
+            MatchPrimaryButton(
+                label = stringResource(R.string.forgot_password_submit),
+                loading = loading,
+                enabled = email.isNotBlank() && !loading && !success,
+                onClick = {
+                    loading = true
+                    error = null
+                    scope.launch {
+                        runCatching { container.authRepository.forgotPassword(email) }
+                            .onSuccess { success = true }
+                            .onFailure { error = it.message ?: errGeneric }
+                        loading = false
+                    }
+                },
+            )
+        }
+    }
+}

native/android/app/src/main/kotlin/com/matchlivetv/match_live_tv/ui/login/LoginScreen.kt

@@ -1,5 +1,6 @@
 package com.matchlivetv.match_live_tv.ui.login
 
+import androidx.compose.foundation.clickable
 import androidx.compose.foundation.layout.Column
 import androidx.compose.foundation.layout.Spacer
 import androidx.compose.foundation.layout.fillMaxWidth
@@ -38,6 +39,7 @@ import androidx.compose.ui.text.input.KeyboardType
 import androidx.compose.ui.text.input.PasswordVisualTransformation
 import androidx.compose.ui.text.input.VisualTransformation
 import androidx.compose.ui.text.style.TextAlign
+import androidx.compose.ui.text.style.TextDecoration
 import androidx.compose.ui.unit.dp
 import com.matchlivetv.match_live_tv.R
 import com.matchlivetv.match_live_tv.data.AppContainer
@@ -53,6 +55,7 @@ import kotlinx.coroutines.launch
 fun LoginScreen(
     container: AppContainer,
     onLoggedIn: () -> Unit,
+    onForgotPassword: () -> Unit,
 ) {
     var email by remember { mutableStateOf("") }
     var password by remember { mutableStateOf("") }
@@ -170,6 +173,16 @@ fun LoginScreen(
                 keyboardActions = KeyboardActions(onDone = { submitLogin() }),
                 colors = matchTextFieldColors(),
             )
+            Spacer(Modifier.height(12.dp))
+            Text(
+                text = stringResource(R.string.login_forgot_password),
+                color = MatchColors.TextSecondary,
+                textDecoration = TextDecoration.Underline,
+                modifier = Modifier
+                    .align(Alignment.End)
+                    .clickable(onClick = onForgotPassword)
+                    .padding(vertical = 4.dp),
+            )
             error?.let {
                 Spacer(Modifier.height(12.dp))
                 Text(