feat(5.10): UX trimiteri (pill filtre, paginare, editare) + Mapari in meniu + branding ROMFAST

14 stories TDD prin echipa de workeri (lead orchestreaza, 3 teammates pe valuri cu fisiere disjuncte; routes.py + base.html serializate ca fisiere fierbinti).

- US-001 fix filtrare data (_iso_date_prefix pe garda+comparatie, prinde timestamp cu ora)
- US-002/007 operatie service distincta in payload_view + afisare in detaliu
- US-003 pill-uri categorii (button/aria-pressed; needs_mapping --warn, needs_data/error --err); fara lista ID-uri/dropdown
- US-004 paginare numerotata 25/pag (total ramificat SQL-COUNT vs fetch-all+slice, clamp page, poll pastreaza pagina)
- US-005 VIN block-level sub nr
- US-006/006b editare cod RAR + validare nomenclator + recalcul idempotency (needs_data/needs_mapping via /corecteaza, error via /repune)
- US-008 card eroare 3-niveluri doar pe read-only + rezumat top-of-form
- US-009 Mapari in meniu hamburger; scoatere tab-bar + role=tablist orfan
- US-010/011 pagina Mapari consolidata + butoane icon SVG + dirty-state (fara kebab/emoji)
- US-012/012b header centrat + logo ROMFAST (/static/romfast_logo.png) in header
- US-013 paleta azur ROMFAST (#2E74D6/#1F66C9) + IBM Plex Sans/Mono self-host (woff2 reale)
- US-014 selector tema ciclic Light/Dark/Petrol/Auto + anti-FOUC pe 4 stari

Backend trimitere (worker/masina stari/idempotenta/mapping) + schema NEATINSE (UI/UX pur + 1 fix de filtrare).
VERIFY context curat PASS; /code-review high: 1 finding material reparat (US-006b). Regresie 896 passed, 1 skipped, 0 failed.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

tests/test_web_mapari_actiuni.py

@@ -0,0 +1,141 @@
+"""Teste US-011 (PRD 5.10): butoane icon salvare/stergere + dirty state pe Mapari.
+
+Cerinte:
+- Butoane .icon-btn mereu vizibile pe rand (nu ascunse in kebab)
+- Meniu kebab (<details class="kebab">) eliminat
+- aria-label descriptiv pe fiecare buton icon
+- data-dirty-form pe butonul de salvare (permite JS dirty-state)
+"""
+
+from __future__ import annotations
+
+import os
+import re
+import tempfile
+
+import pytest
+from starlette.testclient import TestClient
+
+
+def _create_account_user(email: str, name: str = "Service", password: str = "parolasecreta10"):
+    from app.accounts import create_account
+    from app.users import create_user
+    from app.db import get_connection
+
+    conn = get_connection()
+    try:
+        acct_id = create_account(conn, name, active=True)
+        create_user(conn, acct_id, email, password)
+        return acct_id
+    finally:
+        conn.close()
+
+
+def _login(client, email: str, password: str = "parolasecreta10") -> None:
+    resp = client.get("/login")
+    m = re.search(r'name="csrf_token"\s+value="([^"]+)"', resp.text) or \
+        re.search(r'value="([^"]+)"\s+name="csrf_token"', resp.text)
+    assert m
+    resp = client.post(
+        "/login",
+        data={"email": email, "parola": password, "csrf_token": m.group(1)},
+    )
+    assert resp.status_code == 303
+
+
+def _seed_saved_mapping(acct_id: int) -> None:
+    """Insereaza o mapare salvata in operations_mapping."""
+    from app.db import get_connection
+    conn = get_connection()
+    try:
+        conn.execute(
+            "INSERT INTO operations_mapping (account_id, cod_op_service, cod_prestatie, auto_send) "
+            "VALUES (?, ?, ?, ?)",
+            (acct_id, "OP-TEST-77", "OE-1", 1),
+        )
+        conn.commit()
+    finally:
+        conn.close()
+
+
+@pytest.fixture()
+def client(monkeypatch):
+    tmp = tempfile.mkdtemp()
+    monkeypatch.setenv("AUTOPASS_DB_PATH", os.path.join(tmp, "mapari_actiuni.db"))
+    monkeypatch.setenv("AUTOPASS_WEB_AUTH_REQUIRED", "true")
+    from app.config import get_settings
+    get_settings.cache_clear()
+    from app.web import ratelimit
+    ratelimit._hits.clear()
+    from app.main import app
+    with TestClient(app, follow_redirects=False) as c:
+        yield c
+    ratelimit._hits.clear()
+    get_settings.cache_clear()
+
+
+def test_butoane_icon_vizibile_pe_rand_salvate(client):
+    """Butoanele de salvare/stergere in 'Mapari salvate' au clasa icon-btn (mereu vizibile)."""
+    acct = _create_account_user("actiuni_icon@test.com")
+    _seed_saved_mapping(acct)
+    _login(client, "actiuni_icon@test.com")
+
+    resp = client.get("/_fragments/mapari")
+    assert resp.status_code == 200
+    html = resp.text
+
+    assert 'class="icon-btn' in html, (
+        "Butoanele de actiune din 'Mapari salvate' trebuie sa aiba clasa 'icon-btn' "
+        "(mereu vizibile pe rand, nu ascunse in kebab)."
+    )
+
+
+def test_fara_kebab_meniu(client):
+    """Meniul kebab (details.kebab / kebab-menu) e eliminat din 'Mapari salvate'."""
+    acct = _create_account_user("actiuni_kebab@test.com")
+    _seed_saved_mapping(acct)
+    _login(client, "actiuni_kebab@test.com")
+
+    resp = client.get("/_fragments/mapari")
+    assert resp.status_code == 200
+    html = resp.text
+
+    assert 'class="kebab"' not in html, (
+        "Meniul kebab (details.kebab) trebuie eliminat din 'Mapari salvate' (US-011)."
+    )
+    assert '"kebab-menu"' not in html, (
+        "Clasa 'kebab-menu' trebuie eliminata complet din 'Mapari salvate' (US-011)."
+    )
+
+
+def test_butoane_cu_aria_label(client):
+    """Butoanele icon-btn au aria-label descriptiv."""
+    acct = _create_account_user("actiuni_aria@test.com")
+    _seed_saved_mapping(acct)
+    _login(client, "actiuni_aria@test.com")
+
+    resp = client.get("/_fragments/mapari")
+    assert resp.status_code == 200
+    html = resp.text
+
+    icon_btns = re.findall(r'<button[^>]+class="icon-btn[^"]*"[^>]*>', html)
+    assert icon_btns, "Trebuie sa existe butoane cu clasa icon-btn in 'Mapari salvate'."
+    assert any('aria-label' in btn for btn in icon_btns), (
+        "Cel putin un buton icon-btn trebuie sa aiba atributul aria-label descriptiv."
+    )
+
+
+def test_dirty_state_data_attr(client):
+    """Butonul de salvare are data-dirty-form pentru dirty-state JS."""
+    acct = _create_account_user("actiuni_dirty@test.com")
+    _seed_saved_mapping(acct)
+    _login(client, "actiuni_dirty@test.com")
+
+    resp = client.get("/_fragments/mapari")
+    assert resp.status_code == 200
+    html = resp.text
+
+    assert 'data-dirty-form=' in html, (
+        "Butonul de salvare trebuie sa aiba atributul data-dirty-form pentru JS dirty-state. "
+        "Cand utilizatorul schimba selectul, JS adauga clasa 'dirty' pe buton (fundal --accent)."
+    )