emilsoftware-utilities 2.0.0-dev.22 → 2.0.0-dev.23

package/dist/accessi-module/Services/UserService/UserService.js

@@ -23,6 +23,7 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.UserService = void 0;
 const common_1 = require("@nestjs/common");
+const optionalColumns_1 = require("../../database-updates/optionalColumns");
 const autobind_1 = require("../../../autobind");
 const Orm_1 = require("../../../Orm");
 const Utilities_1 = require("../../../Utilities");
@@ -38,12 +39,34 @@ let UserService = class UserService {
         this.permissionService = permissionService;
         this.filtriService = filtriService;
     }
+    validateApplicationFields(value) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const applicationFields = [['nummac', 'NUMMAC'], ['ragSocCli', 'RAGSOCCLI']];
+            let configColumns;
+            if (applicationFields.some(([key]) => value[key] !== undefined)) {
+                configColumns = yield (0, optionalColumns_1.getTableColumns)(this.accessiOptions, 'UTENTI_CONFIG');
+                for (const [key, column] of applicationFields) {
+                    if (value[key] !== undefined && value[key] !== null && !configColumns.has(column)) {
+                        throw new common_1.BadRequestException(`Campo applicativo non configurato: UTENTI_CONFIG.${column}`);
+                    }
+                }
+            }
+            const filterKeys = Object.keys(FiltriUtente_1.FILTRI_UTENTE_DB_MAPPING);
+            if (filterKeys.some(key => value[key] !== undefined && value[key] !== null && value[key] !== '')) {
+                yield this.filtriService.validateSupportedFields(value);
+            }
+            return { configColumns };
+        });
+    }
     normalizeDatabaseBoolean(value) {
         return value === true || value === 1 || value === '1';
     }
+    normalizeUserFlags(user) {
+        return Object.assign(Object.assign({}, user), { flagSuper: this.normalizeDatabaseBoolean(user.flagSuper), flagAdminConfigurator: this.normalizeDatabaseBoolean(user.flagAdminConfigurator), flagDueFattori: this.normalizeDatabaseBoolean(user.flagDueFattori), passwordlessLoginEnabled: this.normalizeDatabaseBoolean(user.passwordlessLoginEnabled), passwordLoginEnabled: user.passwordLoginEnabled == null || this.normalizeDatabaseBoolean(user.passwordLoginEnabled) });
+    }
     normalizeEmail(email) {
         if (typeof email !== 'string' || email.trim() === '') {
-            throw new Error("L'email e' obbligatoria.");
+            throw new common_1.BadRequestException({ code: 'ACCESSI_EMAIL_REQUIRED', message: "L'email è obbligatoria." });
         }
         return email.trim().toLowerCase();
     }
@@ -53,10 +76,11 @@ let UserService = class UserService {
             const existingUser = result.map(Utilities_1.RestUtilities.convertKeysToCamelCase)[0];
             if ((existingUser === null || existingUser === void 0 ? void 0 : existingUser.codiceUtente) &&
                 (!currentUserCode || existingUser.codiceUtente !== currentUserCode)) {
-                throw new Error("Questa e-mail e' gia stata utilizzata!");
+                throw new common_1.ConflictException({ code: 'ACCESSI_EMAIL_ALREADY_EXISTS', message: "L'email è già associata a un utente Accessi." });
             }
         });
     }
+    /** Determina se l'utente puo amministrare il configuratore Accessi (`FLGADMINCONFIG`). */
     isAdminConfigurator(codiceUtente) {
         return __awaiter(this, void 0, void 0, function* () {
             var _a;
@@ -72,6 +96,10 @@ let UserService = class UserService {
             return this.normalizeDatabaseBoolean((_a = mapped[0]) === null || _a === void 0 ? void 0 : _a.flagAdminConfigurator);
         });
     }
+    /**
+     * Legge il minimo profilo autorevole usato da JWT e middleware. Restituisce `null` per utenti inesistenti.
+     * Non usare `UserDto` dal token per decisioni di sicurezza: i flag vengono sempre riletti qui.
+     */
     getAuthenticatedUserSnapshot(codiceUtente) {
         return __awaiter(this, void 0, void 0, function* () {
             if (!codiceUtente || codiceUtente <= 0) {
@@ -84,6 +112,9 @@ let UserService = class UserService {
           U.STAREG AS stato_registrazione,
           C.FLGSUPER AS flag_super,
           C.FLGADMINCONFIG AS flag_admin_configurator
+          , C.FLG2FATT AS flag_due_fattori
+          , C.FLGPWDLESS AS passwordless_login_enabled
+          , COALESCE(C.FLGPASSWORD, 1) AS password_login_enabled
         FROM UTENTI U
         LEFT JOIN UTENTI_CONFIG C ON C.CODUTE = U.CODUTE
         WHERE U.CODUTE = ?
@@ -98,12 +129,21 @@ let UserService = class UserService {
                 statoRegistrazione: Number(user.statoRegistrazione),
                 flagSuper: this.normalizeDatabaseBoolean(user.flagSuper),
                 flagAdminConfigurator: this.normalizeDatabaseBoolean(user.flagAdminConfigurator),
+                flagDueFattori: this.normalizeDatabaseBoolean(user.flagDueFattori),
+                passwordlessLoginEnabled: this.normalizeDatabaseBoolean(user.passwordlessLoginEnabled),
+                passwordLoginEnabled: this.normalizeDatabaseBoolean(user.passwordLoginEnabled),
             };
         });
     }
+    /**
+     * Elenca gli utenti con filtri opzionali. Grant e campi estesi sono costosi e vengono caricati soltanto
+     * quando richiesti esplicitamente nelle opzioni; usare filtri puntuali nei flussi di autenticazione.
+     */
     getUsers(filters, options) {
         return __awaiter(this, void 0, void 0, function* () {
             try {
+                const configColumns = yield (0, optionalColumns_1.getTableColumns)(this.accessiOptions, 'UTENTI_CONFIG');
+                const filterColumns = yield (0, optionalColumns_1.getTableColumns)(this.accessiOptions, 'FILTRI');
                 let query = ` 
             SELECT  
                 U.CODUTE as codice_utente, 
@@ -117,23 +157,25 @@ let UserService = class UserService {
                 G.COGNOME as cognome, 
                 G.NOME as nome, 
                 G.AVATAR as avatar, 
-                G.FLG2FATT as flag_due_fattori, 
+                G.FLG2FATT as flag_due_fattori,
+                G.FLGPWDLESS as passwordless_login_enabled,
                 G.CODLINGUA as codice_lingua,
                 G.CELLULARE as cellulare,
                 G.FLGSUPER as flag_super, 
                 G.FLGADMINCONFIG as flag_admin_configurator,
+                COALESCE(G.FLGPASSWORD, 1) as password_login_enabled,
                 G.PAGDEF as pagina_default,
                 G.JSON_METADATA as json_metadata,
-                G.RAGSOCCLI as rag_soc_cli,
-                G.NUMMAC as nummac,
-                F.NUMREP AS num_rep,
-                F.IDXPERS AS idx_pers,
-                F.CODCLISUPER AS cod_cli_super,
-                F.CODAGE AS cod_age,
-                F.CODCLICOL AS cod_cli_col,
-                F.CODCLIENTI AS cod_clienti,
+                ${(0, optionalColumns_1.optionalColumn)(configColumns, 'RAGSOCCLI', 'G', 'rag_soc_cli', false)},
+                ${(0, optionalColumns_1.optionalColumn)(configColumns, 'NUMMAC', 'G', 'nummac')},
+                ${(0, optionalColumns_1.optionalColumn)(filterColumns, 'NUMREP', 'F', 'num_rep', true)},
+                ${(0, optionalColumns_1.optionalColumn)(filterColumns, 'IDXPERS', 'F', 'idx_pers', true)},
+                ${(0, optionalColumns_1.optionalColumn)(filterColumns, 'CODCLISUPER', 'F', 'cod_cli_super', true)},
+                ${(0, optionalColumns_1.optionalColumn)(filterColumns, 'CODAGE', 'F', 'cod_age', true)},
+                ${(0, optionalColumns_1.optionalColumn)(filterColumns, 'CODCLICOL', 'F', 'cod_cli_col', true)},
+                ${(0, optionalColumns_1.optionalColumn)(filterColumns, 'CODCLIENTI', 'F', 'cod_clienti', false)},
                 F.TIPFIL AS tip_fil,
-                F.IDXPOS AS idx_postazione
+                ${(0, optionalColumns_1.optionalColumn)(filterColumns, 'IDXPOS', 'F', 'idx_postazione', true)}
             FROM UTENTI U 
             INNER JOIN UTENTI_CONFIG G ON U.CODUTE = G.CODUTE
             LEFT JOIN FILTRI F ON F.CODUTE = U.CODUTE
@@ -150,7 +192,7 @@ let UserService = class UserService {
                 }
                 query += ` ORDER BY U.CODUTE DESC `;
                 let users = (yield Orm_1.Orm.query(this.accessiOptions.databaseOptions, query, queryParams));
-                users = users.map(Utilities_1.RestUtilities.convertKeysToCamelCase);
+                users = users.map(Utilities_1.RestUtilities.convertKeysToCamelCase).map(user => this.normalizeUserFlags(user));
                 const usersResponse = [];
                 for (const user of users) {
                     let userGrants;
@@ -180,6 +222,7 @@ let UserService = class UserService {
             }
         });
     }
+    /** Cerca il codice interno per email normalizzata. Il chiamante deve gestire il caso senza righe. */
     getCodiceUtenteByEmail(email) {
         return __awaiter(this, void 0, void 0, function* () {
             try {
@@ -194,9 +237,10 @@ let UserService = class UserService {
             }
         });
     }
+    /** Recupera il profilo locale usato dal login, compresi filtri Accessi eventualmente presenti. */
     getUserByEmail(email) {
         return __awaiter(this, void 0, void 0, function* () {
-            var _a;
+            const configColumns = yield (0, optionalColumns_1.getTableColumns)(this.accessiOptions, 'UTENTI_CONFIG');
             const query = `
             SELECT 
                 U.CODUTE AS codice_utente, 
@@ -208,22 +252,23 @@ let UserService = class UserService {
                 C.NOME AS nome, 
                 C.AVATAR AS avatar, 
                 C.FLG2FATT AS flag_due_fattori,
+                C.FLGPWDLESS AS passwordless_login_enabled,
                 C.CODLINGUA AS codice_lingua, 
                 C.CELLULARE AS cellulare, 
                 C.FLGSUPER AS flag_super,
                 C.FLGADMINCONFIG AS flag_admin_configurator,
+                COALESCE(C.FLGPASSWORD, 1) AS password_login_enabled,
                 C.PAGDEF AS pagina_default,
-                C.NUMMAC AS nummac,
-                C.RAGSOCCLI AS rag_soc_cli
+                ${(0, optionalColumns_1.optionalColumn)(configColumns, 'NUMMAC', 'C', 'nummac')},
+                ${(0, optionalColumns_1.optionalColumn)(configColumns, 'RAGSOCCLI', 'C', 'rag_soc_cli', false)}
             FROM UTENTI U
             INNER JOIN UTENTI_CONFIG C ON C.CODUTE = U.CODUTE
             WHERE LOWER(U.USRNAME) = ?
         `;
             const utenti = (yield Orm_1.Orm.query(this.accessiOptions.databaseOptions, query, [email]).then((results) => results.map(Utilities_1.RestUtilities.convertKeysToCamelCase)));
-            const filtriUtente = yield this.filtriService.getFiltriUser((_a = utenti[0]) === null || _a === void 0 ? void 0 : _a.codiceUtente);
-            if (utenti.length <= 0) {
+            if (utenti.length <= 0)
                 return null;
-            }
+            const filtriUtente = yield this.filtriService.getFiltriUser(utenti[0].codiceUtente);
             if (utenti.length > 0 && filtriUtente.length > 0) {
                 const user = utenti[0];
                 const filtro = filtriUtente[0];
@@ -235,7 +280,7 @@ let UserService = class UserService {
                 });
                 Object.assign(user, filterValues);
             }
-            return utenti.length > 0 ? utenti[0] : null;
+            return utenti.length > 0 ? this.normalizeUserFlags(utenti[0]) : null;
         });
     }
     insertUserFilters(codiceUtente, filterData) {
@@ -248,25 +293,38 @@ let UserService = class UserService {
             yield operation();
         });
     }
+    /**
+     * Crea utente, configurazione e filtri. La registrazione pubblica resta in stato `INVIO` e non puo
+     * impostare privilegi, ruoli o grant; soltanto flussi backend fidati possono usare `allowPrivilegedFields`.
+     */
     register(registrationData, options) {
         return __awaiter(this, void 0, void 0, function* () {
-            var _a, _b, _c;
+            var _a, _b, _c, _d;
             try {
                 const allowPrivilegedFields = (options === null || options === void 0 ? void 0 : options.allowPrivilegedFields) === true;
                 const normalizedEmail = this.normalizeEmail(registrationData.email);
+                if (registrationData.flagDueFattori !== undefined && typeof registrationData.flagDueFattori !== 'boolean') {
+                    throw new common_1.BadRequestException('Il flag due fattori deve essere booleano.');
+                }
+                if (registrationData.flagDueFattori && !/^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(normalizedEmail)) {
+                    throw new common_1.BadRequestException('Per attivare i codici di accesso serve un indirizzo email valido.');
+                }
                 if (!allowPrivilegedFields &&
                     (registrationData.flagSuper !== undefined ||
                         registrationData.flagAdminConfigurator !== undefined ||
+                        registrationData.flagDueFattori !== undefined ||
                         registrationData.roles !== undefined ||
                         registrationData.permissions !== undefined)) {
                     throw new Error('I campi privilegiati non sono consentiti nella registrazione pubblica.');
                 }
+                yield this.validateApplicationFields(registrationData);
                 yield this.ensureEmailIsAvailable(normalizedEmail);
                 const queryUtenti = `INSERT INTO UTENTI (USRNAME, STAREG) VALUES (?,?)`;
-                const paramsUtenti = [normalizedEmail, StatoRegistrazione_1.StatoRegistrazione.INVIO];
+                // Public/local registrations keep the historic INVIO state; trusted master or SSO flows may opt into CONF.
+                const paramsUtenti = [normalizedEmail, (_a = options === null || options === void 0 ? void 0 : options.initialState) !== null && _a !== void 0 ? _a : StatoRegistrazione_1.StatoRegistrazione.INVIO];
                 yield Orm_1.Orm.execute(this.accessiOptions.databaseOptions, queryUtenti, paramsUtenti);
                 const codiceUtenteResult = yield Orm_1.Orm.query(this.accessiOptions.databaseOptions, 'SELECT FIRST 1 CODUTE FROM UTENTI WHERE USRNAME = ? ORDER BY CODUTE DESC', [normalizedEmail]);
-                const codiceUtente = Number((_b = (_a = codiceUtenteResult === null || codiceUtenteResult === void 0 ? void 0 : codiceUtenteResult[0]) === null || _a === void 0 ? void 0 : _a.CODUTE) !== null && _b !== void 0 ? _b : (_c = codiceUtenteResult === null || codiceUtenteResult === void 0 ? void 0 : codiceUtenteResult[0]) === null || _c === void 0 ? void 0 : _c.codute);
+                const codiceUtente = Number((_c = (_b = codiceUtenteResult === null || codiceUtenteResult === void 0 ? void 0 : codiceUtenteResult[0]) === null || _b === void 0 ? void 0 : _b.CODUTE) !== null && _c !== void 0 ? _c : (_d = codiceUtenteResult === null || codiceUtenteResult === void 0 ? void 0 : codiceUtenteResult[0]) === null || _d === void 0 ? void 0 : _d.codute);
                 if (!codiceUtente) {
                     throw new Error('Creazione utente non riuscita: impossibile recuperare CODUTE.');
                 }
@@ -342,20 +400,45 @@ let UserService = class UserService {
             }
         });
     }
+    /**
+     * Aggiorna il profilo utente e i filtri. Le modifiche a stato, ruoli, grant e flag amministrativi richiedono
+     * `allowPrivilegedChanges`; gli array ruolo/grant passati in un flusso fidato sostituiscono le assegnazioni.
+     */
     updateUser(codiceUtente, user, options) {
         return __awaiter(this, void 0, void 0, function* () {
+            var _a, _b, _c, _d;
             try {
                 if (!codiceUtente)
                     throw new Error('Impossibile aggiornare senza codice utente.');
                 const allowPrivilegedChanges = (options === null || options === void 0 ? void 0 : options.allowPrivilegedChanges) === true;
+                for (const value of [user.flagDueFattori, user.passwordlessLoginEnabled]) {
+                    if (value !== undefined && typeof value !== 'boolean')
+                        throw new common_1.BadRequestException('Le policy di autenticazione devono essere booleane.');
+                }
                 if (!allowPrivilegedChanges &&
                     (user.statoRegistrazione !== undefined ||
                         user.flagSuper !== undefined ||
                         user.flagAdminConfigurator !== undefined ||
+                        user.passwordLoginEnabled !== undefined ||
+                        user.passwordlessLoginEnabled !== undefined ||
+                        user.flagDueFattori !== undefined ||
                         user.roles !== undefined ||
                         user.permissions !== undefined)) {
                     throw new Error('Non e consentito modificare campi privilegiati.');
                 }
+                if (user.flagDueFattori !== undefined || user.passwordlessLoginEnabled !== undefined || user.email !== undefined) {
+                    const current = yield this.getAuthenticatedUserSnapshot(codiceUtente);
+                    if (!current)
+                        throw new common_1.BadRequestException('Utente non trovato.');
+                    const twoFactor = (_a = user.flagDueFattori) !== null && _a !== void 0 ? _a : current.flagDueFattori;
+                    const passwordless = (_b = user.passwordlessLoginEnabled) !== null && _b !== void 0 ? _b : current.passwordlessLoginEnabled;
+                    if (passwordless && !twoFactor)
+                        throw new common_1.BadRequestException('Il login senza password richiede il codice di accesso attivo.');
+                    if (twoFactor && !/^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(((_d = (_c = user.email) !== null && _c !== void 0 ? _c : current.email) !== null && _d !== void 0 ? _d : '').trim())) {
+                        throw new common_1.BadRequestException('Per attivare i codici di accesso serve un indirizzo email valido.');
+                    }
+                }
+                const { configColumns } = yield this.validateApplicationFields(user);
                 const utentiUpdates = [];
                 const utentiParams = [];
                 if (user.email !== undefined) {
@@ -393,7 +476,11 @@ let UserService = class UserService {
                 }
                 if (user.flagDueFattori !== undefined) {
                     utentiConfigUpdates.push('flg2fatt = ?');
-                    utentiConfigParams.push(user.flagDueFattori);
+                    utentiConfigParams.push(user.flagDueFattori ? 1 : 0);
+                }
+                if (user.passwordlessLoginEnabled !== undefined) {
+                    utentiConfigUpdates.push('flgpwdless = ?');
+                    utentiConfigParams.push(user.passwordlessLoginEnabled ? 1 : 0);
                 }
                 if (user.codiceLingua !== undefined) {
                     utentiConfigUpdates.push('codlingua = ?');
@@ -411,6 +498,10 @@ let UserService = class UserService {
                     utentiConfigUpdates.push('flgadminconfig = ?');
                     utentiConfigParams.push(user.flagAdminConfigurator);
                 }
+                if (allowPrivilegedChanges && user.passwordLoginEnabled !== undefined) {
+                    utentiConfigUpdates.push('flgpassword = ?');
+                    utentiConfigParams.push(user.passwordLoginEnabled ? 1 : 0);
+                }
                 if (user.paginaDefault !== undefined) {
                     utentiConfigUpdates.push('pagdef = ?');
                     utentiConfigParams.push(user.paginaDefault);
@@ -419,7 +510,7 @@ let UserService = class UserService {
                     utentiConfigUpdates.push('json_metadata = ?');
                     utentiConfigParams.push(user.jsonMetadata);
                 }
-                if (user.ragSocCli !== undefined) {
+                if (user.ragSocCli !== undefined && (user.ragSocCli !== null || (configColumns === null || configColumns === void 0 ? void 0 : configColumns.has('RAGSOCCLI')))) {
                     utentiConfigUpdates.push('ragsoccli = ?');
                     utentiConfigParams.push(user.ragSocCli);
                 }
@@ -428,10 +519,10 @@ let UserService = class UserService {
                     utentiConfigParams.push(codiceUtente);
                     yield Orm_1.Orm.execute(this.accessiOptions.databaseOptions, queryUtentiConfig, utentiConfigParams);
                 }
-                if (allowPrivilegedChanges && !!user.roles && user.roles.length > 0) {
+                if (allowPrivilegedChanges && Array.isArray(user.roles)) {
                     yield this.permissionService.assignRolesToUser(codiceUtente, user.roles);
                 }
-                if (allowPrivilegedChanges && !!user.permissions && user.permissions.length > 0) {
+                if (allowPrivilegedChanges && Array.isArray(user.permissions)) {
                     yield this.permissionService.assignPermissionsToUser(codiceUtente, user.permissions);
                 }
                 yield this.filtriService.upsertFiltriUtente(codiceUtente, user);
@@ -446,6 +537,7 @@ let UserService = class UserService {
             yield this.filtriService.upsertFiltriUtente(codiceUtente, user);
         });
     }
+    /** Eliminazione logica: imposta lo stato `DELETE` senza cancellare lo storico o i collegamenti SSO. */
     deleteUser(codiceCliente) {
         return __awaiter(this, void 0, void 0, function* () {
             try {
@@ -460,6 +552,7 @@ let UserService = class UserService {
             }
         });
     }
+    /** Cambia esplicitamente lo stato di registrazione; usare questa API per blocco, conferma o eliminazione logica. */
     setStato(codiceCliente, statoRegistrazione) {
         return __awaiter(this, void 0, void 0, function* () {
             try {
@@ -477,9 +570,10 @@ let UserService = class UserService {
     setGdpr(codiceUtente) {
         return __awaiter(this, void 0, void 0, function* () {
             try {
-                const query = ` UPDATE OR INSERT UTENTI_GDPR SET CODUTE = ?, GDPR = ? `;
-                const params = [codiceUtente, true];
-                return yield Orm_1.Orm.execute(this.accessiOptions.databaseOptions, query, params);
+                return yield Orm_1.Orm.executeMultiple(this.accessiOptions.databaseOptions, [
+                    { query: 'INSERT INTO UTENTI_GDPR (CODUTE, GDPR) VALUES (?, ?)', params: [codiceUtente, 'true'] },
+                    { query: 'UPDATE UTENTI SET FLGGDPR = 1, DATGDPR = CURRENT_DATE WHERE CODUTE = ?', params: [codiceUtente] },
+                ]);
             }
             catch (error) {
                 throw error;

package/dist/accessi-module/Services/UserService/UserService.js.map

@@ -1 +1 @@
-{"version":3,"file":"UserService.js","sourceRoot":"","sources":["../../../../src/accessi-module/Services/UserService/UserService.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAAA,2CAAoD;AACpD,gDAA6C;AAC7C,sCAAmC;AACnC,kDAAmD;AAEnD,0DAAiF;AAGjF,sEAAmE;AAInE,+DAA4D;AAC5D,kEAA+D;AAC/D,8EAA2E;AAUpE,IAAM,WAAW,GAAjB,MAAM,WAAW;IACtB,YAC8C,cAA8B,EACzD,YAA0B,EAC1B,iBAAoC,EACpC,aAA4B;QAHD,mBAAc,GAAd,cAAc,CAAgB;QACzD,iBAAY,GAAZ,YAAY,CAAc;QAC1B,sBAAiB,GAAjB,iBAAiB,CAAmB;QACpC,kBAAa,GAAb,aAAa,CAAe;IAC5C,CAAC;IAEI,wBAAwB,CAAC,KAAc;QAC7C,OAAO,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,CAAC,IAAI,KAAK,KAAK,GAAG,CAAC;IACxD,CAAC;IAEO,cAAc,CAAC,KAAa;QAClC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACrD,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAC9C,CAAC;QAED,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACpC,CAAC;IAEa,sBAAsB,CAAC,KAAa,EAAE,eAAwB;;YAC1E,MAAM,MAAM,GAAG,MAAM,SAAG,CAAC,KAAK,CAC5B,IAAI,CAAC,cAAc,CAAC,eAAe,EACnC,6EAA6E,EAC7E,CAAC,KAAK,CAAC,CACR,CAAC;YAEF,MAAM,YAAY,GAAG,MAAM,CAAC,GAAG,CAAC,yBAAa,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAE1D,CAAC;YAEd,IACE,CAAA,YAAY,aAAZ,YAAY,uBAAZ,YAAY,CAAE,YAAY;gBAC1B,CAAC,CAAC,eAAe,IAAI,YAAY,CAAC,YAAY,KAAK,eAAe,CAAC,EACnE,CAAC;gBACD,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC;KAAA;IAEK,mBAAmB,CAAC,YAAoB;;;YAC5C,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,OAAO,KAAK,CAAC;YACf,CAAC;YAED,MAAM,KAAK,GAAG,sFAAsF,CAAC;YACrG,MAAM,MAAM,GAAG,MAAM,SAAG,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,eAAe,EAAE,KAAK,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;YAE3F,IAAI,CAAC,MAAM,IAAI,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC5B,OAAO,KAAK,CAAC;YACf,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,yBAAa,CAAC,sBAAsB,CAAC,CAAC;YAChE,OAAO,IAAI,CAAC,wBAAwB,CAAC,MAAA,MAAM,CAAC,CAAC,CAAC,0CAAE,qBAAqB,CAAC,CAAC;QACzE,CAAC;KAAA;IAEK,4BAA4B,CAChC,YAAoB;;YAEpB,IAAI,CAAC,YAAY,IAAI,YAAY,IAAI,CAAC,EAAE,CAAC;gBACvC,OAAO,IAAI,CAAC;YACd,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,SAAG,CAAC,KAAK,CAC5B,IAAI,CAAC,cAAc,CAAC,eAAe,EACnC;;;;;;;;;;OAUC,EACD,CAAC,YAAY,CAAC,CACf,CAAC;YAEF,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,yBAAa,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAQlD,CAAC;YAEd,IAAI,CAAC,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,YAAY,CAAA,EAAE,CAAC;gBACxB,OAAO,IAAI,CAAC;YACd,CAAC;YAED,OAAO;gBACL,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC;gBACvC,KAAK,EAAE,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;gBAC9D,kBAAkB,EAAE,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAuB;gBACzE,SAAS,EAAE,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,SAAS,CAAC;gBACxD,qBAAqB,EAAE,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,qBAAqB,CAAC;aACjF,CAAC;QACJ,CAAC;KAAA;IAEK,QAAQ,CACZ,OAAmD,EACnD,OAAqE;;YAErE,IAAI,CAAC;gBACH,IAAI,KAAK,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;aAkCL,CAAC;gBAER,MAAM,WAAW,GAAU,EAAE,CAAC;gBAE9B,IAAI,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,KAAK,EAAE,CAAC;oBACnB,KAAK,IAAI,4BAA4B,CAAC;oBACtC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;gBACvD,CAAC;gBAED,IAAI,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,YAAY,EAAE,CAAC;oBAC1B,KAAK,IAAI,oBAAoB,CAAC;oBAC9B,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;gBACzC,CAAC;gBAED,KAAK,IAAI,0BAA0B,CAAC;gBAEpC,IAAI,KAAK,GAAG,CAAC,MAAM,SAAG,CAAC,KAAK,CAC1B,IAAI,CAAC,cAAc,CAAC,eAAe,EACnC,KAAK,EACL,WAAW,CACZ,CAAc,CAAC;gBAChB,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,yBAAa,CAAC,sBAAsB,CAAC,CAAC;gBAExD,MAAM,aAAa,GAAqB,EAAE,CAAC;gBAE3C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;oBACzB,IAAI,UAAqC,CAAC;oBAE1C,IAAI,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,aAAa,EAAE,CAAC;wBAC3B,UAAU,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,qBAAqB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;oBACrF,CAAC;oBAED,IAAI,eAAsD,CAAC;oBAE3D,IAAI,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,sBAAsB,EAAE,CAAC;wBACpC,eAAe,GAAG,EAAE,CAAC;oBACvB,CAAC;oBAED,IAAI,eAAe,IAAI,IAAI,CAAC,cAAc,CAAC,sBAAsB,EAAE,CAAC;wBAClE,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,cAAc,CAAC,sBAAsB,EAAE,CAAC;4BAC7D,MAAM,MAAM,GAAG,CACb,MAAM,SAAG,CAAC,KAAK,CACb,GAAG,CAAC,eAAe,EACnB,UAAU,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,GAAG,CAAC,SAAS,UACvD,GAAG,CAAC,kBACN,MAAM,EACN,CAAC,IAAI,CAAC,YAAY,CAAC,CACpB,CACF,CAAC,GAAG,CAAC,yBAAa,CAAC,sBAAsB,CAAC,CAAC;4BAE5C,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,MAAM,CAAC;wBAC1C,CAAC;oBACH,CAAC;oBAED,aAAa,CAAC,IAAI,CAAC;wBACjB,MAAM,EAAE,IAAI;wBACZ,UAAU;wBACV,eAAe;qBAChB,CAAC,CAAC;gBACL,CAAC;gBAED,OAAO,aAAa,CAAC;YACvB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;KAAA;IAEK,sBAAsB,CAAC,KAAa;;YACxC,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,qEAAqE,CAAC;gBACpF,MAAM,MAAM,GAAG,MAAM,SAAG,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,eAAe,EAAE,KAAK,EAAE;oBACzE,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE;iBAC3B,CAAC,CAAC;gBACH,OAAO,MAAM,CAAC,GAAG,CAAC,yBAAa,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7D,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;KAAA;IAEK,cAAc,CAAC,KAAa;;;YAChC,MAAM,KAAK,GAAG;;;;;;;;;;;;;;;;;;;;;SAqBT,CAAC;YAEN,MAAM,MAAM,GAAG,CAAC,MAAM,SAAG,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,eAAe,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CACvF,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAa,CAAC,sBAAsB,CAAC,CAC/D,CAAc,CAAC;YAEhB,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,MAAA,MAAM,CAAC,CAAC,CAAC,0CAAE,YAAY,CAAC,CAAC;YAErF,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;gBACvB,OAAO,IAAI,CAAC;YACd,CAAC;YAED,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACjD,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;gBACvB,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;gBAC/B,MAAM,YAAY,GAA4B,EAAE,CAAC;gBAEjD,MAAM,CAAC,OAAO,CAAC,uCAAwB,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE;oBACzD,IAAI,GAAG,IAAI,MAAM,EAAE,CAAC;wBAClB,YAAY,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,GAAyB,CAAC,CAAC;oBACxD,CAAC;gBACH,CAAC,CAAC,CAAC;gBAEH,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;YACpC,CAAC;YAED,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC9C,CAAC;KAAA;IAEK,iBAAiB,CAAC,YAAoB,EAAE,UAA2B;;YACvE,MAAM,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;QACxE,CAAC;KAAA;IAEa,oBAAoB,CAAC,SAA8B;;YAC/D,MAAM,SAAS,EAAE,CAAC;QACpB,CAAC;KAAA;IAEK,QAAQ,CACZ,gBAAiC,EACjC,OAA6C;;;YAE7C,IAAI,CAAC;gBACH,MAAM,qBAAqB,GAAG,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,qBAAqB,MAAK,IAAI,CAAC;gBACtE,MAAM,eAAe,GAAG,IAAI,CAAC,cAAc,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;gBAEpE,IACE,CAAC,qBAAqB;oBACtB,CAAC,gBAAgB,CAAC,SAAS,KAAK,SAAS;wBACvC,gBAAgB,CAAC,qBAAqB,KAAK,SAAS;wBACpD,gBAAgB,CAAC,KAAK,KAAK,SAAS;wBACpC,gBAAgB,CAAC,WAAW,KAAK,SAAS,CAAC,EAC7C,CAAC;oBACD,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;gBAC5F,CAAC;gBAED,MAAM,IAAI,CAAC,sBAAsB,CAAC,eAAe,CAAC,CAAC;gBAEnD,MAAM,WAAW,GAAG,mDAAmD,CAAC;gBACxE,MAAM,YAAY,GAAG,CAAC,eAAe,EAAE,uCAAkB,CAAC,KAAK,CAAC,CAAC;gBAEjE,MAAM,SAAG,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,eAAe,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;gBAElF,MAAM,kBAAkB,GAAG,MAAM,SAAG,CAAC,KAAK,CACxC,IAAI,CAAC,cAAc,CAAC,eAAe,EACnC,0EAA0E,EAC1E,CAAC,eAAe,CAAC,CAClB,CAAC;gBAEF,MAAM,YAAY,GAAG,MAAM,CACzB,MAAA,MAAA,kBAAkB,aAAlB,kBAAkB,uBAAlB,kBAAkB,CAAG,CAAC,CAAC,0CAAE,MAAM,mCAAI,MAAA,kBAAkB,aAAlB,kBAAkB,uBAAlB,kBAAkB,CAAG,CAAC,CAAC,0CAAE,MAAM,CACnE,CAAC;gBACF,IAAI,CAAC,YAAY,EAAE,CAAC;oBAClB,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;gBACnF,CAAC;gBAED,MAAM,kBAAkB,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;gBACzD,MAAM,wBAAwB,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;gBACjD,MAAM,kBAAkB,GAAG,CAAC,YAAY,EAAE,gBAAgB,CAAC,OAAO,EAAE,gBAAgB,CAAC,IAAI,CAAC,CAAC;gBAE3F,MAAM,cAAc,GAAyB;oBAC3C;wBACE,GAAG,EAAE,WAAW;wBAChB,OAAO,EAAE,WAAW;wBACpB,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;qBAC5B;oBACD;wBACE,GAAG,EAAE,QAAQ;wBACb,OAAO,EAAE,QAAQ;wBACjB,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;qBAC5B;oBACD;wBACE,GAAG,EAAE,gBAAgB;wBACrB,OAAO,EAAE,UAAU;wBACnB,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;qBAC9B;oBACD;wBACE,GAAG,EAAE,eAAe;wBACpB,OAAO,EAAE,QAAQ;wBACjB,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;qBAC5B;oBACD;wBACE,GAAG,EAAE,QAAQ;wBACb,OAAO,EAAE,QAAQ;wBACjB,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;qBAC5B;oBACD;wBACE,GAAG,EAAE,WAAW;wBAChB,OAAO,EAAE,WAAW;wBACpB,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;qBAC5B;iBACF,CAAC;gBAEF,IAAI,qBAAqB,EAAE,CAAC;oBAC1B,cAAc,CAAC,IAAI,CACjB;wBACE,GAAG,EAAE,WAAW;wBAChB,OAAO,EAAE,UAAU;wBACnB,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;qBAC9B,EACD;wBACE,GAAG,EAAE,uBAAuB;wBAC5B,OAAO,EAAE,gBAAgB;wBACzB,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;qBAC9B,CACF,CAAC;gBACJ,CAAC;gBAED,KAAK,MAAM,KAAK,IAAI,cAAc,EAAE,CAAC;oBACnC,MAAM,KAAK,GAAG,gBAAgB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;oBAC1C,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;wBAC1C,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;wBACvC,wBAAwB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;wBACnC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;oBAC5E,CAAC;gBACH,CAAC;gBAED,MAAM,iBAAiB,GAAG,8BAA8B,kBAAkB,CAAC,IAAI,CAC7E,IAAI,CACL,aAAa,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;gBACrD,MAAM,SAAG,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,eAAe,EAAE,iBAAiB,EAAE,kBAAkB,CAAC,CAAC;gBAE9F,MAAM,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC,YAAY,EAAE,gBAAgB,CAAC,CAAC;gBAE5E,IAAI,qBAAqB,IAAI,CAAC,CAAC,gBAAgB,CAAC,KAAK,IAAI,gBAAgB,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC3F,MAAM,IAAI,CAAC,iBAAiB,CAAC,iBAAiB,CAAC,YAAY,EAAE,gBAAgB,CAAC,KAAK,CAAC,CAAC;gBACvF,CAAC;gBAED,IACE,qBAAqB;oBACrB,CAAC,CAAC,gBAAgB,CAAC,WAAW;oBAC9B,gBAAgB,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EACvC,CAAC;oBACD,MAAM,IAAI,CAAC,iBAAiB,CAAC,uBAAuB,CAClD,YAAY,EACZ,gBAAgB,CAAC,WAAW,CAC7B,CAAC;gBACJ,CAAC;gBAED,OAAO,YAAY,CAAC;YACtB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;KAAA;IAEK,UAAU,CACd,YAAoB,EACpB,IAAa,EACb,OAA8C;;YAE9C,IAAI,CAAC;gBACH,IAAI,CAAC,YAAY;oBAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;gBAClF,MAAM,sBAAsB,GAAG,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,sBAAsB,MAAK,IAAI,CAAC;gBAExE,IACE,CAAC,sBAAsB;oBACvB,CAAC,IAAI,CAAC,kBAAkB,KAAK,SAAS;wBACpC,IAAI,CAAC,SAAS,KAAK,SAAS;wBAC5B,IAAI,CAAC,qBAAqB,KAAK,SAAS;wBACxC,IAAI,CAAC,KAAK,KAAK,SAAS;wBACxB,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,EACjC,CAAC;oBACD,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;gBACrE,CAAC;gBAED,MAAM,aAAa,GAAG,EAAE,CAAC;gBACzB,MAAM,YAAY,GAAG,EAAE,CAAC;gBAExB,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;oBAC7B,MAAM,eAAe,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBACxD,MAAM,IAAI,CAAC,sBAAsB,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC;oBACjE,aAAa,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;oBAClC,YAAY,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;gBACrC,CAAC;gBACD,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;oBAChC,aAAa,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;oBAClC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACnC,CAAC;gBACD,IAAI,sBAAsB,IAAI,IAAI,CAAC,kBAAkB,KAAK,SAAS,EAAE,CAAC;oBACpE,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;oBACjC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;gBAC7C,CAAC;gBAED,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC7B,MAAM,WAAW,GAAG,qBAAqB,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC;oBACrF,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;oBAChC,MAAM,SAAG,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,eAAe,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;gBACpF,CAAC;gBAED,MAAM,mBAAmB,GAAG,EAAE,CAAC;gBAC/B,MAAM,kBAAkB,GAAG,EAAE,CAAC;gBAE9B,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;oBAC/B,mBAAmB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;oBACxC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACxC,CAAC;gBACD,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;oBAC5B,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;oBACrC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACrC,CAAC;gBACD,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;oBAC9B,mBAAmB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;oBACvC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACvC,CAAC;gBACD,IAAI,IAAI,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;oBACtC,mBAAmB,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;oBACzC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;gBAC/C,CAAC;gBACD,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;oBACpC,mBAAmB,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;oBAC1C,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;gBAC7C,CAAC;gBACD,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;oBACjC,mBAAmB,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;oBAC1C,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAC1C,CAAC;gBACD,IAAI,sBAAsB,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;oBAC3D,mBAAmB,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;oBACzC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAC1C,CAAC;gBACD,IAAI,sBAAsB,IAAI,IAAI,CAAC,qBAAqB,KAAK,SAAS,EAAE,CAAC;oBACvE,mBAAmB,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;oBAC/C,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;gBACtD,CAAC;gBACD,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;oBACrC,mBAAmB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;oBACvC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;gBAC9C,CAAC;gBACD,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;oBACpC,mBAAmB,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;oBAC9C,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;gBAC7C,CAAC;gBACD,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;oBACjC,mBAAmB,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;oBAC1C,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAC1C,CAAC;gBAED,IAAI,mBAAmB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACnC,MAAM,iBAAiB,GAAG,4BAA4B,mBAAmB,CAAC,IAAI,CAC5E,IAAI,CACL,mBAAmB,CAAC;oBACrB,kBAAkB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;oBACtC,MAAM,SAAG,CAAC,OAAO,CACf,IAAI,CAAC,cAAc,CAAC,eAAe,EACnC,iBAAiB,EACjB,kBAAkB,CACnB,CAAC;gBACJ,CAAC;gBAED,IAAI,sBAAsB,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACpE,MAAM,IAAI,CAAC,iBAAiB,CAAC,iBAAiB,CAAC,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;gBAC3E,CAAC;gBAED,IAAI,sBAAsB,IAAI,CAAC,CAAC,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAChF,MAAM,IAAI,CAAC,iBAAiB,CAAC,uBAAuB,CAAC,YAAY,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;gBACvF,CAAC;gBAED,MAAM,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;YAClE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;KAAA;IAEK,iBAAiB,CAAC,YAAoB,EAAE,IAAa;;YACzD,MAAM,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;QAClE,CAAC;KAAA;IAEK,UAAU,CAAC,aAAqB;;YACpC,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,+CAA+C,CAAC;gBAC9D,MAAM,SAAG,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,eAAe,EAAE,KAAK,EAAE;oBAC5D,uCAAkB,CAAC,MAAM;oBACzB,aAAa;iBACd,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;KAAA;IAEK,QAAQ,CAAC,aAAqB,EAAE,kBAAsC;;YAC1E,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,+CAA+C,CAAC;gBAC9D,MAAM,SAAG,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,eAAe,EAAE,KAAK,EAAE;oBAC5D,kBAAkB;oBAClB,aAAa;iBACd,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;KAAA;IAEY,OAAO,CAAC,YAAoB;;YACvC,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,yDAAyD,CAAC;gBACxE,MAAM,MAAM,GAAG,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;gBACpC,OAAO,MAAM,SAAG,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,eAAe,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;YAC/E,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;KAAA;CACF,CAAA;AAhjBY,kCAAW;sBAAX,WAAW;IAFvB,mBAAQ;IACR,IAAA,mBAAU,GAAE;IAGR,WAAA,IAAA,eAAM,EAAC,iBAAiB,CAAC,CAAA;6CACK,2BAAY;QACP,qCAAiB;QACrB,6BAAa;GALpC,WAAW,CAgjBvB","sourcesContent":["import { Inject, Injectable } from '@nestjs/common';\nimport { autobind } from '../../../autobind';\nimport { Orm } from '../../../Orm';\nimport { RestUtilities } from '../../../Utilities';\nimport { AccessiOptions } from '../../AccessiModule';\nimport { FILTRI_UTENTE_DB_MAPPING, FiltriUtente } from '../../Dtos/FiltriUtente';\nimport { GetUsersResult } from '../../Dtos/GetUsersResponse';\nimport { RegisterRequest } from '../../Dtos/RegisterRequest';\nimport { StatoRegistrazione } from '../../Dtos/StatoRegistrazione';\nimport { UserDto } from '../../Dtos/UserDto';\nimport { UserGrantsDto } from '../../Dtos/UserGrantsDto';\nimport { AccessiAuthenticatedUserSnapshot } from '../../security/authenticatedToken';\nimport { EmailService } from '../EmailService/EmailService';\nimport { FiltriService } from '../FiltriService/FiltriService';\nimport { PermissionService } from '../PermissionService/PermissionService';\n\ninterface OptionalField<T> {\n  key: keyof RegisterRequest;\n  dbField: string;\n  transform?: (value: any) => T;\n}\n\n@autobind\n@Injectable()\nexport class UserService {\n  constructor(\n    @Inject('ACCESSI_OPTIONS') private readonly accessiOptions: AccessiOptions,\n    private readonly emailService: EmailService,\n    private readonly permissionService: PermissionService,\n    private readonly filtriService: FiltriService,\n  ) {}\n\n  private normalizeDatabaseBoolean(value: unknown): boolean {\n    return value === true || value === 1 || value === '1';\n  }\n\n  private normalizeEmail(email: string): string {\n    if (typeof email !== 'string' || email.trim() === '') {\n      throw new Error(\"L'email e' obbligatoria.\");\n    }\n\n    return email.trim().toLowerCase();\n  }\n\n  private async ensureEmailIsAvailable(email: string, currentUserCode?: number): Promise<void> {\n    const result = await Orm.query(\n      this.accessiOptions.databaseOptions,\n      'SELECT FIRST 1 CODUTE as codice_utente FROM UTENTI WHERE LOWER(USRNAME) = ?',\n      [email],\n    );\n\n    const existingUser = result.map(RestUtilities.convertKeysToCamelCase)[0] as\n      | { codiceUtente?: number }\n      | undefined;\n\n    if (\n      existingUser?.codiceUtente &&\n      (!currentUserCode || existingUser.codiceUtente !== currentUserCode)\n    ) {\n      throw new Error(\"Questa e-mail e' gia stata utilizzata!\");\n    }\n  }\n\n  async isAdminConfigurator(codiceUtente: number): Promise<boolean> {\n    if (!codiceUtente) {\n      return false;\n    }\n\n    const query = `SELECT FLGADMINCONFIG AS flag_admin_configurator FROM UTENTI_CONFIG WHERE CODUTE = ?`;\n    const result = await Orm.query(this.accessiOptions.databaseOptions, query, [codiceUtente]);\n\n    if (!result || result === 0) {\n      return false;\n    }\n\n    const mapped = result.map(RestUtilities.convertKeysToCamelCase);\n    return this.normalizeDatabaseBoolean(mapped[0]?.flagAdminConfigurator);\n  }\n\n  async getAuthenticatedUserSnapshot(\n    codiceUtente: number,\n  ): Promise<AccessiAuthenticatedUserSnapshot | null> {\n    if (!codiceUtente || codiceUtente <= 0) {\n      return null;\n    }\n\n    const result = await Orm.query(\n      this.accessiOptions.databaseOptions,\n      `\n        SELECT\n          U.CODUTE AS codice_utente,\n          U.USRNAME AS email,\n          U.STAREG AS stato_registrazione,\n          C.FLGSUPER AS flag_super,\n          C.FLGADMINCONFIG AS flag_admin_configurator\n        FROM UTENTI U\n        LEFT JOIN UTENTI_CONFIG C ON C.CODUTE = U.CODUTE\n        WHERE U.CODUTE = ?\n      `,\n      [codiceUtente],\n    );\n\n    const user = result.map(RestUtilities.convertKeysToCamelCase)[0] as\n      | {\n          codiceUtente?: number;\n          email?: string;\n          statoRegistrazione?: StatoRegistrazione | number;\n          flagSuper?: unknown;\n          flagAdminConfigurator?: unknown;\n        }\n      | undefined;\n\n    if (!user?.codiceUtente) {\n      return null;\n    }\n\n    return {\n      codiceUtente: Number(user.codiceUtente),\n      email: typeof user.email === 'string' ? user.email : undefined,\n      statoRegistrazione: Number(user.statoRegistrazione) as StatoRegistrazione,\n      flagSuper: this.normalizeDatabaseBoolean(user.flagSuper),\n      flagAdminConfigurator: this.normalizeDatabaseBoolean(user.flagAdminConfigurator),\n    };\n  }\n\n  async getUsers(\n    filters?: { email?: string; codiceUtente?: number },\n    options?: { includeExtensionFields: boolean; includeGrants: boolean },\n  ): Promise<GetUsersResult[]> {\n    try {\n      let query = ` \n            SELECT  \n                U.CODUTE as codice_utente, \n                U.USRNAME as email, \n                U.FLGGDPR as flag_gdpr, \n                U.DATGDPR as data_gdpr, \n                U.DATINS as data_inserimento, \n                U.DATSCAPWD as data_scadenza_password, \n                U.DATLASTLOGIN as data_last_login, \n                U.STAREG as stato_registrazione, \n                G.COGNOME as cognome, \n                G.NOME as nome, \n                G.AVATAR as avatar, \n                G.FLG2FATT as flag_due_fattori, \n                G.CODLINGUA as codice_lingua,\n                G.CELLULARE as cellulare,\n                G.FLGSUPER as flag_super, \n                G.FLGADMINCONFIG as flag_admin_configurator,\n                G.PAGDEF as pagina_default,\n                G.JSON_METADATA as json_metadata,\n                G.RAGSOCCLI as rag_soc_cli,\n                G.NUMMAC as nummac,\n                F.NUMREP AS num_rep,\n                F.IDXPERS AS idx_pers,\n                F.CODCLISUPER AS cod_cli_super,\n                F.CODAGE AS cod_age,\n                F.CODCLICOL AS cod_cli_col,\n                F.CODCLIENTI AS cod_clienti,\n                F.TIPFIL AS tip_fil,\n                F.IDXPOS AS idx_postazione\n            FROM UTENTI U \n            INNER JOIN UTENTI_CONFIG G ON U.CODUTE = G.CODUTE\n            LEFT JOIN FILTRI F ON F.CODUTE = U.CODUTE\n            WHERE 1=1\n            `;\n\n      const queryParams: any[] = [];\n\n      if (filters?.email) {\n        query += ` AND LOWER(U.USRNAME) = ? `;\n        queryParams.push(filters.email.trim().toLowerCase());\n      }\n\n      if (filters?.codiceUtente) {\n        query += ` AND U.CODUTE = ? `;\n        queryParams.push(filters.codiceUtente);\n      }\n\n      query += ` ORDER BY U.CODUTE DESC `;\n\n      let users = (await Orm.query(\n        this.accessiOptions.databaseOptions,\n        query,\n        queryParams,\n      )) as UserDto[];\n      users = users.map(RestUtilities.convertKeysToCamelCase);\n\n      const usersResponse: GetUsersResult[] = [];\n\n      for (const user of users) {\n        let userGrants: UserGrantsDto | undefined;\n\n        if (options?.includeGrants) {\n          userGrants = await this.permissionService.getUserRolesAndGrants(user.codiceUtente);\n        }\n\n        let extensionFields: Record<string, unknown[]> | undefined;\n\n        if (options?.includeExtensionFields) {\n          extensionFields = {};\n        }\n\n        if (extensionFields && this.accessiOptions.extensionFieldsOptions) {\n          for (const ext of this.accessiOptions.extensionFieldsOptions) {\n            const values = (\n              await Orm.query(\n                ext.databaseOptions,\n                `SELECT ${ext.tableFields.join(',')} FROM ${ext.tableName} WHERE ${\n                  ext.tableJoinFieldName\n                } = ?`,\n                [user.codiceUtente],\n              )\n            ).map(RestUtilities.convertKeysToCamelCase);\n\n            extensionFields[ext.objectKey] = values;\n          }\n        }\n\n        usersResponse.push({\n          utente: user,\n          userGrants,\n          extensionFields,\n        });\n      }\n\n      return usersResponse;\n    } catch (error) {\n      throw error;\n    }\n  }\n\n  async getCodiceUtenteByEmail(email: string): Promise<{ codiceUtente: number }> {\n    try {\n      const query = `SELECT CODUTE as codice_utente FROM UTENTI WHERE LOWER(USRNAME) = ?`;\n      const result = await Orm.query(this.accessiOptions.databaseOptions, query, [\n        email.trim().toLowerCase(),\n      ]);\n      return result.map(RestUtilities.convertKeysToCamelCase)[0];\n    } catch (error) {\n      throw error;\n    }\n  }\n\n  async getUserByEmail(email: string): Promise<UserDto | null> {\n    const query = `\n            SELECT \n                U.CODUTE AS codice_utente, \n                U.USRNAME AS email, \n                U.FLGGDPR AS flag_gdpr,\n                U.DATSCAPWD as data_scadenza_password,\n                U.STAREG AS stato_registrazione, \n                C.COGNOME AS cognome, \n                C.NOME AS nome, \n                C.AVATAR AS avatar, \n                C.FLG2FATT AS flag_due_fattori,\n                C.CODLINGUA AS codice_lingua, \n                C.CELLULARE AS cellulare, \n                C.FLGSUPER AS flag_super,\n                C.FLGADMINCONFIG AS flag_admin_configurator,\n                C.PAGDEF AS pagina_default,\n                C.NUMMAC AS nummac,\n                C.RAGSOCCLI AS rag_soc_cli\n            FROM UTENTI U\n            INNER JOIN UTENTI_CONFIG C ON C.CODUTE = U.CODUTE\n            WHERE LOWER(U.USRNAME) = ?\n        `;\n\n    const utenti = (await Orm.query(this.accessiOptions.databaseOptions, query, [email]).then(\n      (results) => results.map(RestUtilities.convertKeysToCamelCase),\n    )) as UserDto[];\n\n    const filtriUtente = await this.filtriService.getFiltriUser(utenti[0]?.codiceUtente);\n\n    if (utenti.length <= 0) {\n      return null;\n    }\n\n    if (utenti.length > 0 && filtriUtente.length > 0) {\n      const user = utenti[0];\n      const filtro = filtriUtente[0];\n      const filterValues: Record<string, unknown> = {};\n\n      Object.entries(FILTRI_UTENTE_DB_MAPPING).forEach(([key]) => {\n        if (key in filtro) {\n          filterValues[key] = filtro[key as keyof FiltriUtente];\n        }\n      });\n\n      Object.assign(user, filterValues);\n    }\n\n    return utenti.length > 0 ? utenti[0] : null;\n  }\n\n  async insertUserFilters(codiceUtente: number, filterData: RegisterRequest): Promise<void> {\n    await this.filtriService.upsertFiltriUtente(codiceUtente, filterData);\n  }\n\n  private async executeInTransaction(operation: () => Promise<void>): Promise<void> {\n    await operation();\n  }\n\n  async register(\n    registrationData: RegisterRequest,\n    options?: { allowPrivilegedFields?: boolean },\n  ): Promise<number> {\n    try {\n      const allowPrivilegedFields = options?.allowPrivilegedFields === true;\n      const normalizedEmail = this.normalizeEmail(registrationData.email);\n\n      if (\n        !allowPrivilegedFields &&\n        (registrationData.flagSuper !== undefined ||\n          registrationData.flagAdminConfigurator !== undefined ||\n          registrationData.roles !== undefined ||\n          registrationData.permissions !== undefined)\n      ) {\n        throw new Error('I campi privilegiati non sono consentiti nella registrazione pubblica.');\n      }\n\n      await this.ensureEmailIsAvailable(normalizedEmail);\n\n      const queryUtenti = `INSERT INTO UTENTI (USRNAME, STAREG) VALUES (?,?)`;\n      const paramsUtenti = [normalizedEmail, StatoRegistrazione.INVIO];\n\n      await Orm.execute(this.accessiOptions.databaseOptions, queryUtenti, paramsUtenti);\n\n      const codiceUtenteResult = await Orm.query(\n        this.accessiOptions.databaseOptions,\n        'SELECT FIRST 1 CODUTE FROM UTENTI WHERE USRNAME = ? ORDER BY CODUTE DESC',\n        [normalizedEmail],\n      );\n\n      const codiceUtente = Number(\n        codiceUtenteResult?.[0]?.CODUTE ?? codiceUtenteResult?.[0]?.codute,\n      );\n      if (!codiceUtente) {\n        throw new Error('Creazione utente non riuscita: impossibile recuperare CODUTE.');\n      }\n\n      const utentiConfigFields = ['CODUTE', 'COGNOME', 'NOME'];\n      const utentiConfigPlaceholders = ['?', '?', '?'];\n      const utentiConfigParams = [codiceUtente, registrationData.cognome, registrationData.nome];\n\n      const optionalFields: OptionalField<any>[] = [\n        {\n          key: 'cellulare',\n          dbField: 'CELLULARE',\n          transform: (v) => String(v),\n        },\n        {\n          key: 'avatar',\n          dbField: 'AVATAR',\n          transform: (v) => String(v),\n        },\n        {\n          key: 'flagDueFattori',\n          dbField: 'FLG2FATT',\n          transform: (v) => (v ? 1 : 0),\n        },\n        {\n          key: 'paginaDefault',\n          dbField: 'PAGDEF',\n          transform: (v) => String(v),\n        },\n        {\n          key: 'nummac',\n          dbField: 'NUMMAC',\n          transform: (v) => Number(v),\n        },\n        {\n          key: 'ragSocCli',\n          dbField: 'RAGSOCCLI',\n          transform: (v) => String(v),\n        },\n      ];\n\n      if (allowPrivilegedFields) {\n        optionalFields.push(\n          {\n            key: 'flagSuper',\n            dbField: 'FLGSUPER',\n            transform: (v) => (v ? 1 : 0),\n          },\n          {\n            key: 'flagAdminConfigurator',\n            dbField: 'FLGADMINCONFIG',\n            transform: (v) => (v ? 1 : 0),\n          },\n        );\n      }\n\n      for (const field of optionalFields) {\n        const value = registrationData[field.key];\n        if (value !== undefined && value !== null) {\n          utentiConfigFields.push(field.dbField);\n          utentiConfigPlaceholders.push('?');\n          utentiConfigParams.push(field.transform ? field.transform(value) : value);\n        }\n      }\n\n      const queryUtentiConfig = `INSERT INTO UTENTI_CONFIG (${utentiConfigFields.join(\n        ', ',\n      )}) VALUES (${utentiConfigPlaceholders.join(', ')})`;\n      await Orm.execute(this.accessiOptions.databaseOptions, queryUtentiConfig, utentiConfigParams);\n\n      await this.filtriService.upsertFiltriUtente(codiceUtente, registrationData);\n\n      if (allowPrivilegedFields && !!registrationData.roles && registrationData.roles.length > 0) {\n        await this.permissionService.assignRolesToUser(codiceUtente, registrationData.roles);\n      }\n\n      if (\n        allowPrivilegedFields &&\n        !!registrationData.permissions &&\n        registrationData.permissions.length > 0\n      ) {\n        await this.permissionService.assignPermissionsToUser(\n          codiceUtente,\n          registrationData.permissions,\n        );\n      }\n\n      return codiceUtente;\n    } catch (error) {\n      throw error;\n    }\n  }\n\n  async updateUser(\n    codiceUtente: number,\n    user: UserDto,\n    options?: { allowPrivilegedChanges?: boolean },\n  ): Promise<void> {\n    try {\n      if (!codiceUtente) throw new Error('Impossibile aggiornare senza codice utente.');\n      const allowPrivilegedChanges = options?.allowPrivilegedChanges === true;\n\n      if (\n        !allowPrivilegedChanges &&\n        (user.statoRegistrazione !== undefined ||\n          user.flagSuper !== undefined ||\n          user.flagAdminConfigurator !== undefined ||\n          user.roles !== undefined ||\n          user.permissions !== undefined)\n      ) {\n        throw new Error('Non e consentito modificare campi privilegiati.');\n      }\n\n      const utentiUpdates = [];\n      const utentiParams = [];\n\n      if (user.email !== undefined) {\n        const normalizedEmail = this.normalizeEmail(user.email);\n        await this.ensureEmailIsAvailable(normalizedEmail, codiceUtente);\n        utentiUpdates.push('usrname = ?');\n        utentiParams.push(normalizedEmail);\n      }\n      if (user.flagGdpr !== undefined) {\n        utentiUpdates.push('flggdpr = ?');\n        utentiParams.push(user.flagGdpr);\n      }\n      if (allowPrivilegedChanges && user.statoRegistrazione !== undefined) {\n        utentiUpdates.push('stareg = ?');\n        utentiParams.push(user.statoRegistrazione);\n      }\n\n      if (utentiUpdates.length > 0) {\n        const queryUtenti = `UPDATE UTENTI SET ${utentiUpdates.join(', ')} WHERE CODUTE = ?`;\n        utentiParams.push(codiceUtente);\n        await Orm.execute(this.accessiOptions.databaseOptions, queryUtenti, utentiParams);\n      }\n\n      const utentiConfigUpdates = [];\n      const utentiConfigParams = [];\n\n      if (user.cognome !== undefined) {\n        utentiConfigUpdates.push('cognome = ?');\n        utentiConfigParams.push(user.cognome);\n      }\n      if (user.nome !== undefined) {\n        utentiConfigUpdates.push('nome = ?');\n        utentiConfigParams.push(user.nome);\n      }\n      if (user.avatar !== undefined) {\n        utentiConfigUpdates.push('avatar = ?');\n        utentiConfigParams.push(user.avatar);\n      }\n      if (user.flagDueFattori !== undefined) {\n        utentiConfigUpdates.push('flg2fatt = ?');\n        utentiConfigParams.push(user.flagDueFattori);\n      }\n      if (user.codiceLingua !== undefined) {\n        utentiConfigUpdates.push('codlingua = ?');\n        utentiConfigParams.push(user.codiceLingua);\n      }\n      if (user.cellulare !== undefined) {\n        utentiConfigUpdates.push('cellulare = ?');\n        utentiConfigParams.push(user.cellulare);\n      }\n      if (allowPrivilegedChanges && user.flagSuper !== undefined) {\n        utentiConfigUpdates.push('flgsuper = ?');\n        utentiConfigParams.push(user.flagSuper);\n      }\n      if (allowPrivilegedChanges && user.flagAdminConfigurator !== undefined) {\n        utentiConfigUpdates.push('flgadminconfig = ?');\n        utentiConfigParams.push(user.flagAdminConfigurator);\n      }\n      if (user.paginaDefault !== undefined) {\n        utentiConfigUpdates.push('pagdef = ?');\n        utentiConfigParams.push(user.paginaDefault);\n      }\n      if (user.jsonMetadata !== undefined) {\n        utentiConfigUpdates.push('json_metadata = ?');\n        utentiConfigParams.push(user.jsonMetadata);\n      }\n      if (user.ragSocCli !== undefined) {\n        utentiConfigUpdates.push('ragsoccli = ?');\n        utentiConfigParams.push(user.ragSocCli);\n      }\n\n      if (utentiConfigUpdates.length > 0) {\n        const queryUtentiConfig = `UPDATE UTENTI_CONFIG SET ${utentiConfigUpdates.join(\n          ', ',\n        )} WHERE CODUTE = ?`;\n        utentiConfigParams.push(codiceUtente);\n        await Orm.execute(\n          this.accessiOptions.databaseOptions,\n          queryUtentiConfig,\n          utentiConfigParams,\n        );\n      }\n\n      if (allowPrivilegedChanges && !!user.roles && user.roles.length > 0) {\n        await this.permissionService.assignRolesToUser(codiceUtente, user.roles);\n      }\n\n      if (allowPrivilegedChanges && !!user.permissions && user.permissions.length > 0) {\n        await this.permissionService.assignPermissionsToUser(codiceUtente, user.permissions);\n      }\n\n      await this.filtriService.upsertFiltriUtente(codiceUtente, user);\n    } catch (error) {\n      throw error;\n    }\n  }\n\n  async updateUserFilters(codiceUtente: number, user: UserDto): Promise<void> {\n    await this.filtriService.upsertFiltriUtente(codiceUtente, user);\n  }\n\n  async deleteUser(codiceCliente: number): Promise<void> {\n    try {\n      const query = `UPDATE UTENTI SET STAREG = ? WHERE CODUTE = ?`;\n      await Orm.execute(this.accessiOptions.databaseOptions, query, [\n        StatoRegistrazione.DELETE,\n        codiceCliente,\n      ]);\n    } catch (error) {\n      throw error;\n    }\n  }\n\n  async setStato(codiceCliente: number, statoRegistrazione: StatoRegistrazione) {\n    try {\n      const query = `UPDATE UTENTI SET STAREG = ? WHERE CODUTE = ?`;\n      await Orm.execute(this.accessiOptions.databaseOptions, query, [\n        statoRegistrazione,\n        codiceCliente,\n      ]);\n    } catch (error) {\n      throw error;\n    }\n  }\n\n  public async setGdpr(codiceUtente: number) {\n    try {\n      const query = ` UPDATE OR INSERT UTENTI_GDPR SET CODUTE = ?, GDPR = ? `;\n      const params = [codiceUtente, true];\n      return await Orm.execute(this.accessiOptions.databaseOptions, query, params);\n    } catch (error) {\n      throw error;\n    }\n  }\n}\n"]}
+{"version":3,"file":"UserService.js","sourceRoot":"","sources":["../../../../src/accessi-module/Services/UserService/UserService.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAAA,2CAA4F;AAC5F,4EAAyF;AACzF,gDAA6C;AAC7C,sCAAmC;AACnC,kDAAmD;AAEnD,0DAAiF;AAGjF,sEAAmE;AAInE,+DAA4D;AAC5D,kEAA+D;AAC/D,8EAA2E;AAUpE,IAAM,WAAW,GAAjB,MAAM,WAAW;IACtB,YAC8C,cAA8B,EACzD,YAA0B,EAC1B,iBAAoC,EACpC,aAA4B;QAHD,mBAAc,GAAd,cAAc,CAAgB;QACzD,iBAAY,GAAZ,YAAY,CAAc;QAC1B,sBAAiB,GAAjB,iBAAiB,CAAmB;QACpC,kBAAa,GAAb,aAAa,CAAe;IAC5C,CAAC;IAEU,yBAAyB,CAAC,KAAsE;;YAE5G,MAAM,iBAAiB,GAAuD,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC;YACjI,IAAI,aAAsC,CAAC;YAC3C,IAAI,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,SAAS,CAAC,EAAE,CAAC;gBAChE,aAAa,GAAG,MAAM,IAAA,iCAAe,EAAC,IAAI,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC;gBAC5E,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,iBAAiB,EAAE,CAAC;oBAC9C,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,SAAS,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,IAAI,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;wBAClF,MAAM,IAAI,4BAAmB,CAAC,oDAAoD,MAAM,EAAE,CAAC,CAAC;oBAC9F,CAAC;gBACH,CAAC;YACH,CAAC;YACD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,uCAAwB,CAA8B,CAAC;YACtF,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,SAAS,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC;gBACjG,MAAM,IAAI,CAAC,aAAa,CAAC,uBAAuB,CAAC,KAAK,CAAC,CAAC;YAC1D,CAAC;YACD,OAAO,EAAE,aAAa,EAAE,CAAC;QAC3B,CAAC;KAAA;IAEO,wBAAwB,CAAC,KAAc;QAC7C,OAAO,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,CAAC,IAAI,KAAK,KAAK,GAAG,CAAC;IACxD,CAAC;IAEO,kBAAkB,CAAC,IAAa;QACtC,uCAAY,IAAI,KACd,SAAS,EAAE,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,SAAS,CAAC,EACxD,qBAAqB,EAAE,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,qBAAqB,CAAC,EAChF,cAAc,EAAE,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,cAAc,CAAC,EAClE,wBAAwB,EAAE,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,wBAAwB,CAAC,EACtF,oBAAoB,EAAE,IAAI,CAAC,oBAAoB,IAAI,IAAI,IAAI,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,oBAAoB,CAAC,IACnH;IACJ,CAAC;IAEO,cAAc,CAAC,KAAa;QAClC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACrD,MAAM,IAAI,4BAAmB,CAAC,EAAE,IAAI,EAAE,wBAAwB,EAAE,OAAO,EAAE,yBAAyB,EAAE,CAAC,CAAC;QACxG,CAAC;QAED,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACpC,CAAC;IAEa,sBAAsB,CAAC,KAAa,EAAE,eAAwB;;YAC1E,MAAM,MAAM,GAAG,MAAM,SAAG,CAAC,KAAK,CAC5B,IAAI,CAAC,cAAc,CAAC,eAAe,EACnC,6EAA6E,EAC7E,CAAC,KAAK,CAAC,CACR,CAAC;YAEF,MAAM,YAAY,GAAG,MAAM,CAAC,GAAG,CAAC,yBAAa,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAE1D,CAAC;YAEd,IACE,CAAA,YAAY,aAAZ,YAAY,uBAAZ,YAAY,CAAE,YAAY;gBAC1B,CAAC,CAAC,eAAe,IAAI,YAAY,CAAC,YAAY,KAAK,eAAe,CAAC,EACnE,CAAC;gBACD,MAAM,IAAI,0BAAiB,CAAC,EAAE,IAAI,EAAE,8BAA8B,EAAE,OAAO,EAAE,8CAA8C,EAAE,CAAC,CAAC;YACjI,CAAC;QACH,CAAC;KAAA;IAED,0FAA0F;IACpF,mBAAmB,CAAC,YAAoB;;;YAC5C,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,OAAO,KAAK,CAAC;YACf,CAAC;YAED,MAAM,KAAK,GAAG,sFAAsF,CAAC;YACrG,MAAM,MAAM,GAAG,MAAM,SAAG,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,eAAe,EAAE,KAAK,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;YAE3F,IAAI,CAAC,MAAM,IAAI,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC5B,OAAO,KAAK,CAAC;YACf,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,yBAAa,CAAC,sBAAsB,CAAC,CAAC;YAChE,OAAO,IAAI,CAAC,wBAAwB,CAAC,MAAA,MAAM,CAAC,CAAC,CAAC,0CAAE,qBAAqB,CAAC,CAAC;QACzE,CAAC;KAAA;IAED;;;OAGG;IACG,4BAA4B,CAChC,YAAoB;;YAEpB,IAAI,CAAC,YAAY,IAAI,YAAY,IAAI,CAAC,EAAE,CAAC;gBACvC,OAAO,IAAI,CAAC;YACd,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,SAAG,CAAC,KAAK,CAC5B,IAAI,CAAC,cAAc,CAAC,eAAe,EACnC;;;;;;;;;;;;;OAaC,EACD,CAAC,YAAY,CAAC,CACf,CAAC;YAEF,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,yBAAa,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAWlD,CAAC;YAEd,IAAI,CAAC,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,YAAY,CAAA,EAAE,CAAC;gBACxB,OAAO,IAAI,CAAC;YACd,CAAC;YAED,OAAO;gBACL,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC;gBACvC,KAAK,EAAE,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;gBAC9D,kBAAkB,EAAE,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAuB;gBACzE,SAAS,EAAE,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,SAAS,CAAC;gBACxD,qBAAqB,EAAE,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,qBAAqB,CAAC;gBAChF,cAAc,EAAE,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,cAAc,CAAC;gBAClE,wBAAwB,EAAE,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,wBAAwB,CAAC;gBACtF,oBAAoB,EAAE,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,oBAAoB,CAAC;aAC/E,CAAC;QACJ,CAAC;KAAA;IAED;;;OAGG;IACG,QAAQ,CACZ,OAAmD,EACnD,OAAqE;;YAErE,IAAI,CAAC;gBACH,MAAM,aAAa,GAAG,MAAM,IAAA,iCAAe,EAAC,IAAI,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC;gBAClF,MAAM,aAAa,GAAG,MAAM,IAAA,iCAAe,EAAC,IAAI,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;gBAC3E,IAAI,KAAK,GAAG;;;;;;;;;;;;;;;;;;;;;;kBAsBA,IAAA,gCAAc,EAAC,aAAa,EAAE,WAAW,EAAE,GAAG,EAAE,aAAa,EAAE,KAAK,CAAC;kBACrE,IAAA,gCAAc,EAAC,aAAa,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,CAAC;kBACtD,IAAA,gCAAc,EAAC,aAAa,EAAE,QAAQ,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC;kBAC7D,IAAA,gCAAc,EAAC,aAAa,EAAE,SAAS,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,CAAC;kBAC/D,IAAA,gCAAc,EAAC,aAAa,EAAE,aAAa,EAAE,GAAG,EAAE,eAAe,EAAE,IAAI,CAAC;kBACxE,IAAA,gCAAc,EAAC,aAAa,EAAE,QAAQ,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC;kBAC7D,IAAA,gCAAc,EAAC,aAAa,EAAE,WAAW,EAAE,GAAG,EAAE,aAAa,EAAE,IAAI,CAAC;kBACpE,IAAA,gCAAc,EAAC,aAAa,EAAE,YAAY,EAAE,GAAG,EAAE,aAAa,EAAE,KAAK,CAAC;;kBAEtE,IAAA,gCAAc,EAAC,aAAa,EAAE,QAAQ,EAAE,GAAG,EAAE,gBAAgB,EAAE,IAAI,CAAC;;;;;aAKzE,CAAC;gBAER,MAAM,WAAW,GAAU,EAAE,CAAC;gBAE9B,IAAI,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,KAAK,EAAE,CAAC;oBACnB,KAAK,IAAI,4BAA4B,CAAC;oBACtC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;gBACvD,CAAC;gBAED,IAAI,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,YAAY,EAAE,CAAC;oBAC1B,KAAK,IAAI,oBAAoB,CAAC;oBAC9B,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;gBACzC,CAAC;gBAED,KAAK,IAAI,0BAA0B,CAAC;gBAEpC,IAAI,KAAK,GAAG,CAAC,MAAM,SAAG,CAAC,KAAK,CAC1B,IAAI,CAAC,cAAc,CAAC,eAAe,EACnC,KAAK,EACL,WAAW,CACZ,CAAc,CAAC;gBAChB,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,yBAAa,CAAC,sBAAsB,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC;gBAEnG,MAAM,aAAa,GAAqB,EAAE,CAAC;gBAE3C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;oBACzB,IAAI,UAAqC,CAAC;oBAE1C,IAAI,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,aAAa,EAAE,CAAC;wBAC3B,UAAU,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,qBAAqB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;oBACrF,CAAC;oBAED,IAAI,eAAsD,CAAC;oBAE3D,IAAI,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,sBAAsB,EAAE,CAAC;wBACpC,eAAe,GAAG,EAAE,CAAC;oBACvB,CAAC;oBAED,IAAI,eAAe,IAAI,IAAI,CAAC,cAAc,CAAC,sBAAsB,EAAE,CAAC;wBAClE,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,cAAc,CAAC,sBAAsB,EAAE,CAAC;4BAC7D,MAAM,MAAM,GAAG,CACb,MAAM,SAAG,CAAC,KAAK,CACb,GAAG,CAAC,eAAe,EACnB,UAAU,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,GAAG,CAAC,SAAS,UACvD,GAAG,CAAC,kBACN,MAAM,EACN,CAAC,IAAI,CAAC,YAAY,CAAC,CACpB,CACF,CAAC,GAAG,CAAC,yBAAa,CAAC,sBAAsB,CAAC,CAAC;4BAE5C,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,MAAM,CAAC;wBAC1C,CAAC;oBACH,CAAC;oBAED,aAAa,CAAC,IAAI,CAAC;wBACjB,MAAM,EAAE,IAAI;wBACZ,UAAU;wBACV,eAAe;qBAChB,CAAC,CAAC;gBACL,CAAC;gBAED,OAAO,aAAa,CAAC;YACvB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;KAAA;IAED,qGAAqG;IAC/F,sBAAsB,CAAC,KAAa;;YACxC,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,qEAAqE,CAAC;gBACpF,MAAM,MAAM,GAAG,MAAM,SAAG,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,eAAe,EAAE,KAAK,EAAE;oBACzE,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE;iBAC3B,CAAC,CAAC;gBACH,OAAO,MAAM,CAAC,GAAG,CAAC,yBAAa,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7D,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;KAAA;IAED,kGAAkG;IAC5F,cAAc,CAAC,KAAa;;YAChC,MAAM,aAAa,GAAG,MAAM,IAAA,iCAAe,EAAC,IAAI,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC;YAClF,MAAM,KAAK,GAAG;;;;;;;;;;;;;;;;;;kBAkBA,IAAA,gCAAc,EAAC,aAAa,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,CAAC;kBACtD,IAAA,gCAAc,EAAC,aAAa,EAAE,WAAW,EAAE,GAAG,EAAE,aAAa,EAAE,KAAK,CAAC;;;;SAI9E,CAAC;YAEN,MAAM,MAAM,GAAG,CAAC,MAAM,SAAG,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,eAAe,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CACvF,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAa,CAAC,sBAAsB,CAAC,CAC/D,CAAc,CAAC;YAEhB,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC;gBAAE,OAAO,IAAI,CAAC;YACpC,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;YAEpF,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACjD,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;gBACvB,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;gBAC/B,MAAM,YAAY,GAA4B,EAAE,CAAC;gBAEjD,MAAM,CAAC,OAAO,CAAC,uCAAwB,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE;oBACzD,IAAI,GAAG,IAAI,MAAM,EAAE,CAAC;wBAClB,YAAY,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,GAAyB,CAAC,CAAC;oBACxD,CAAC;gBACH,CAAC,CAAC,CAAC;gBAEH,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;YACpC,CAAC;YAED,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACvE,CAAC;KAAA;IAEK,iBAAiB,CAAC,YAAoB,EAAE,UAA2B;;YACvE,MAAM,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;QACxE,CAAC;KAAA;IAEa,oBAAoB,CAAC,SAA8B;;YAC/D,MAAM,SAAS,EAAE,CAAC;QACpB,CAAC;KAAA;IAED;;;OAGG;IACG,QAAQ,CACZ,gBAAiC,EACjC,OAAgF;;;YAEhF,IAAI,CAAC;gBACH,MAAM,qBAAqB,GAAG,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,qBAAqB,MAAK,IAAI,CAAC;gBACtE,MAAM,eAAe,GAAG,IAAI,CAAC,cAAc,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;gBAEpE,IAAI,gBAAgB,CAAC,cAAc,KAAK,SAAS,IAAI,OAAO,gBAAgB,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;oBAC1G,MAAM,IAAI,4BAAmB,CAAC,2CAA2C,CAAC,CAAC;gBAC7E,CAAC;gBACD,IAAI,gBAAgB,CAAC,cAAc,IAAI,CAAC,4BAA4B,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC;oBAC3F,MAAM,IAAI,4BAAmB,CAAC,mEAAmE,CAAC,CAAC;gBACrG,CAAC;gBAED,IACE,CAAC,qBAAqB;oBACtB,CAAC,gBAAgB,CAAC,SAAS,KAAK,SAAS;wBACvC,gBAAgB,CAAC,qBAAqB,KAAK,SAAS;wBACpD,gBAAgB,CAAC,cAAc,KAAK,SAAS;wBAC7C,gBAAgB,CAAC,KAAK,KAAK,SAAS;wBACpC,gBAAgB,CAAC,WAAW,KAAK,SAAS,CAAC,EAC7C,CAAC;oBACD,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;gBAC5F,CAAC;gBAED,MAAM,IAAI,CAAC,yBAAyB,CAAC,gBAAgB,CAAC,CAAC;gBACvD,MAAM,IAAI,CAAC,sBAAsB,CAAC,eAAe,CAAC,CAAC;gBAEnD,MAAM,WAAW,GAAG,mDAAmD,CAAC;gBACxE,2GAA2G;gBAC3G,MAAM,YAAY,GAAG,CAAC,eAAe,EAAE,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,YAAY,mCAAI,uCAAkB,CAAC,KAAK,CAAC,CAAC;gBAE1F,MAAM,SAAG,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,eAAe,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;gBAElF,MAAM,kBAAkB,GAAG,MAAM,SAAG,CAAC,KAAK,CACxC,IAAI,CAAC,cAAc,CAAC,eAAe,EACnC,0EAA0E,EAC1E,CAAC,eAAe,CAAC,CAClB,CAAC;gBAEF,MAAM,YAAY,GAAG,MAAM,CACzB,MAAA,MAAA,kBAAkB,aAAlB,kBAAkB,uBAAlB,kBAAkB,CAAG,CAAC,CAAC,0CAAE,MAAM,mCAAI,MAAA,kBAAkB,aAAlB,kBAAkB,uBAAlB,kBAAkB,CAAG,CAAC,CAAC,0CAAE,MAAM,CACnE,CAAC;gBACF,IAAI,CAAC,YAAY,EAAE,CAAC;oBAClB,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;gBACnF,CAAC;gBAED,MAAM,kBAAkB,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;gBACzD,MAAM,wBAAwB,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;gBACjD,MAAM,kBAAkB,GAAG,CAAC,YAAY,EAAE,gBAAgB,CAAC,OAAO,EAAE,gBAAgB,CAAC,IAAI,CAAC,CAAC;gBAE3F,MAAM,cAAc,GAAyB;oBAC3C;wBACE,GAAG,EAAE,WAAW;wBAChB,OAAO,EAAE,WAAW;wBACpB,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;qBAC5B;oBACD;wBACE,GAAG,EAAE,QAAQ;wBACb,OAAO,EAAE,QAAQ;wBACjB,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;qBAC5B;oBACD;wBACE,GAAG,EAAE,gBAAgB;wBACrB,OAAO,EAAE,UAAU;wBACnB,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;qBAC9B;oBACD;wBACE,GAAG,EAAE,eAAe;wBACpB,OAAO,EAAE,QAAQ;wBACjB,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;qBAC5B;oBACD;wBACE,GAAG,EAAE,QAAQ;wBACb,OAAO,EAAE,QAAQ;wBACjB,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;qBAC5B;oBACD;wBACE,GAAG,EAAE,WAAW;wBAChB,OAAO,EAAE,WAAW;wBACpB,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;qBAC5B;iBACF,CAAC;gBAEF,IAAI,qBAAqB,EAAE,CAAC;oBAC1B,cAAc,CAAC,IAAI,CACjB;wBACE,GAAG,EAAE,WAAW;wBAChB,OAAO,EAAE,UAAU;wBACnB,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;qBAC9B,EACD;wBACE,GAAG,EAAE,uBAAuB;wBAC5B,OAAO,EAAE,gBAAgB;wBACzB,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;qBAC9B,CACF,CAAC;gBACJ,CAAC;gBAED,KAAK,MAAM,KAAK,IAAI,cAAc,EAAE,CAAC;oBACnC,MAAM,KAAK,GAAG,gBAAgB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;oBAC1C,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;wBAC1C,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;wBACvC,wBAAwB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;wBACnC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;oBAC5E,CAAC;gBACH,CAAC;gBAED,MAAM,iBAAiB,GAAG,8BAA8B,kBAAkB,CAAC,IAAI,CAC7E,IAAI,CACL,aAAa,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;gBACrD,MAAM,SAAG,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,eAAe,EAAE,iBAAiB,EAAE,kBAAkB,CAAC,CAAC;gBAE9F,MAAM,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC,YAAY,EAAE,gBAAgB,CAAC,CAAC;gBAE5E,IAAI,qBAAqB,IAAI,CAAC,CAAC,gBAAgB,CAAC,KAAK,IAAI,gBAAgB,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC3F,MAAM,IAAI,CAAC,iBAAiB,CAAC,iBAAiB,CAAC,YAAY,EAAE,gBAAgB,CAAC,KAAK,CAAC,CAAC;gBACvF,CAAC;gBAED,IACE,qBAAqB;oBACrB,CAAC,CAAC,gBAAgB,CAAC,WAAW;oBAC9B,gBAAgB,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EACvC,CAAC;oBACD,MAAM,IAAI,CAAC,iBAAiB,CAAC,uBAAuB,CAClD,YAAY,EACZ,gBAAgB,CAAC,WAAW,CAC7B,CAAC;gBACJ,CAAC;gBAED,OAAO,YAAY,CAAC;YACtB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;KAAA;IAED;;;OAGG;IACG,UAAU,CACd,YAAoB,EACpB,IAAa,EACb,OAA8C;;;YAE9C,IAAI,CAAC;gBACH,IAAI,CAAC,YAAY;oBAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;gBAClF,MAAM,sBAAsB,GAAG,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,sBAAsB,MAAK,IAAI,CAAC;gBAExE,KAAK,MAAM,KAAK,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,wBAAwB,CAAC,EAAE,CAAC;oBACzE,IAAI,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,SAAS;wBAAE,MAAM,IAAI,4BAAmB,CAAC,qDAAqD,CAAC,CAAC;gBAC9I,CAAC;gBAED,IACE,CAAC,sBAAsB;oBACvB,CAAC,IAAI,CAAC,kBAAkB,KAAK,SAAS;wBACpC,IAAI,CAAC,SAAS,KAAK,SAAS;wBAC5B,IAAI,CAAC,qBAAqB,KAAK,SAAS;wBACxC,IAAI,CAAC,oBAAoB,KAAK,SAAS;wBACvC,IAAI,CAAC,wBAAwB,KAAK,SAAS;wBAC3C,IAAI,CAAC,cAAc,KAAK,SAAS;wBACjC,IAAI,CAAC,KAAK,KAAK,SAAS;wBACxB,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,EACjC,CAAC;oBACD,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;gBACrE,CAAC;gBAED,IAAI,IAAI,CAAC,cAAc,KAAK,SAAS,IAAI,IAAI,CAAC,wBAAwB,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;oBACjH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,4BAA4B,CAAC,YAAY,CAAC,CAAC;oBACtE,IAAI,CAAC,OAAO;wBAAE,MAAM,IAAI,4BAAmB,CAAC,qBAAqB,CAAC,CAAC;oBACnE,MAAM,SAAS,GAAG,MAAA,IAAI,CAAC,cAAc,mCAAI,OAAO,CAAC,cAAc,CAAC;oBAChE,MAAM,YAAY,GAAG,MAAA,IAAI,CAAC,wBAAwB,mCAAI,OAAO,CAAC,wBAAwB,CAAC;oBACvF,IAAI,YAAY,IAAI,CAAC,SAAS;wBAAE,MAAM,IAAI,4BAAmB,CAAC,+DAA+D,CAAC,CAAC;oBAC/H,IAAI,SAAS,IAAI,CAAC,4BAA4B,CAAC,IAAI,CAAC,CAAC,MAAA,MAAA,IAAI,CAAC,KAAK,mCAAI,OAAO,CAAC,KAAK,mCAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;wBAChG,MAAM,IAAI,4BAAmB,CAAC,mEAAmE,CAAC,CAAC;oBACrG,CAAC;gBACH,CAAC;gBAED,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,CAAC;gBACrE,MAAM,aAAa,GAAG,EAAE,CAAC;gBACzB,MAAM,YAAY,GAAG,EAAE,CAAC;gBAExB,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;oBAC7B,MAAM,eAAe,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBACxD,MAAM,IAAI,CAAC,sBAAsB,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC;oBACjE,aAAa,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;oBAClC,YAAY,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;gBACrC,CAAC;gBACD,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;oBAChC,aAAa,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;oBAClC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACnC,CAAC;gBACD,IAAI,sBAAsB,IAAI,IAAI,CAAC,kBAAkB,KAAK,SAAS,EAAE,CAAC;oBACpE,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;oBACjC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;gBAC7C,CAAC;gBAED,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC7B,MAAM,WAAW,GAAG,qBAAqB,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC;oBACrF,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;oBAChC,MAAM,SAAG,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,eAAe,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;gBACpF,CAAC;gBAED,MAAM,mBAAmB,GAAG,EAAE,CAAC;gBAC/B,MAAM,kBAAkB,GAAG,EAAE,CAAC;gBAE9B,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;oBAC/B,mBAAmB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;oBACxC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACxC,CAAC;gBACD,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;oBAC5B,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;oBACrC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACrC,CAAC;gBACD,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;oBAC9B,mBAAmB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;oBACvC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACvC,CAAC;gBACD,IAAI,IAAI,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;oBACtC,mBAAmB,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;oBACzC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBACvD,CAAC;gBACD,IAAI,IAAI,CAAC,wBAAwB,KAAK,SAAS,EAAE,CAAC;oBAChD,mBAAmB,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;oBAC3C,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBACjE,CAAC;gBACD,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;oBACpC,mBAAmB,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;oBAC1C,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;gBAC7C,CAAC;gBACD,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;oBACjC,mBAAmB,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;oBAC1C,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAC1C,CAAC;gBACD,IAAI,sBAAsB,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;oBAC3D,mBAAmB,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;oBACzC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAC1C,CAAC;gBACD,IAAI,sBAAsB,IAAI,IAAI,CAAC,qBAAqB,KAAK,SAAS,EAAE,CAAC;oBACvE,mBAAmB,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;oBAC/C,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;gBACtD,CAAC;gBACD,IAAI,sBAAsB,IAAI,IAAI,CAAC,oBAAoB,KAAK,SAAS,EAAE,CAAC;oBACtE,mBAAmB,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;oBAC5C,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC7D,CAAC;gBACD,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;oBACrC,mBAAmB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;oBACvC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;gBAC9C,CAAC;gBACD,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;oBACpC,mBAAmB,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;oBAC9C,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;gBAC7C,CAAC;gBACD,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,SAAS,KAAK,IAAI,KAAI,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,GAAG,CAAC,WAAW,CAAC,CAAA,CAAC,EAAE,CAAC;oBACjG,mBAAmB,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;oBAC1C,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAC1C,CAAC;gBAED,IAAI,mBAAmB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACnC,MAAM,iBAAiB,GAAG,4BAA4B,mBAAmB,CAAC,IAAI,CAC5E,IAAI,CACL,mBAAmB,CAAC;oBACrB,kBAAkB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;oBACtC,MAAM,SAAG,CAAC,OAAO,CACf,IAAI,CAAC,cAAc,CAAC,eAAe,EACnC,iBAAiB,EACjB,kBAAkB,CACnB,CAAC;gBACJ,CAAC;gBAED,IAAI,sBAAsB,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;oBACxD,MAAM,IAAI,CAAC,iBAAiB,CAAC,iBAAiB,CAAC,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;gBAC3E,CAAC;gBAED,IAAI,sBAAsB,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;oBAC9D,MAAM,IAAI,CAAC,iBAAiB,CAAC,uBAAuB,CAAC,YAAY,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;gBACvF,CAAC;gBAED,MAAM,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;YAClE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;KAAA;IAEK,iBAAiB,CAAC,YAAoB,EAAE,IAAa;;YACzD,MAAM,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;QAClE,CAAC;KAAA;IAED,uGAAuG;IACjG,UAAU,CAAC,aAAqB;;YACpC,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,+CAA+C,CAAC;gBAC9D,MAAM,SAAG,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,eAAe,EAAE,KAAK,EAAE;oBAC5D,uCAAkB,CAAC,MAAM;oBACzB,aAAa;iBACd,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;KAAA;IAED,oHAAoH;IAC9G,QAAQ,CAAC,aAAqB,EAAE,kBAAsC;;YAC1E,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,+CAA+C,CAAC;gBAC9D,MAAM,SAAG,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,eAAe,EAAE,KAAK,EAAE;oBAC5D,kBAAkB;oBAClB,aAAa;iBACd,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;KAAA;IAEY,OAAO,CAAC,YAAoB;;YACvC,IAAI,CAAC;gBACH,OAAO,MAAM,SAAG,CAAC,eAAe,CAAC,IAAI,CAAC,cAAc,CAAC,eAAe,EAAE;oBACpE,EAAE,KAAK,EAAE,sDAAsD,EAAE,MAAM,EAAE,CAAC,YAAY,EAAE,MAAM,CAAC,EAAE;oBACjG,EAAE,KAAK,EAAE,wEAAwE,EAAE,MAAM,EAAE,CAAC,YAAY,CAAC,EAAE;iBAC5G,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;KAAA;CACF,CAAA;AArpBY,kCAAW;sBAAX,WAAW;IAFvB,mBAAQ;IACR,IAAA,mBAAU,GAAE;IAGR,WAAA,IAAA,eAAM,EAAC,iBAAiB,CAAC,CAAA;6CACK,2BAAY;QACP,qCAAiB;QACrB,6BAAa;GALpC,WAAW,CAqpBvB","sourcesContent":["import { BadRequestException, ConflictException, Inject, Injectable } from '@nestjs/common';\nimport { getTableColumns, optionalColumn } from '../../database-updates/optionalColumns';\nimport { autobind } from '../../../autobind';\nimport { Orm } from '../../../Orm';\nimport { RestUtilities } from '../../../Utilities';\nimport type { AccessiOptions } from '../../AccessiModule';\nimport { FILTRI_UTENTE_DB_MAPPING, FiltriUtente } from '../../Dtos/FiltriUtente';\nimport { GetUsersResult } from '../../Dtos/GetUsersResponse';\nimport { RegisterRequest } from '../../Dtos/RegisterRequest';\nimport { StatoRegistrazione } from '../../Dtos/StatoRegistrazione';\nimport { UserDto } from '../../Dtos/UserDto';\nimport { UserGrantsDto } from '../../Dtos/UserGrantsDto';\nimport { AccessiAuthenticatedUserSnapshot } from '../../security/authenticatedToken';\nimport { EmailService } from '../EmailService/EmailService';\nimport { FiltriService } from '../FiltriService/FiltriService';\nimport { PermissionService } from '../PermissionService/PermissionService';\n\ninterface OptionalField<T> {\n  key: keyof RegisterRequest;\n  dbField: string;\n  transform?: (value: any) => T;\n}\n\n@autobind\n@Injectable()\nexport class UserService {\n  constructor(\n    @Inject('ACCESSI_OPTIONS') private readonly accessiOptions: AccessiOptions,\n    private readonly emailService: EmailService,\n    private readonly permissionService: PermissionService,\n    private readonly filtriService: FiltriService,\n  ) {}\n\n  private async validateApplicationFields(value: { nummac?: number; ragSocCli?: string } & Partial<FiltriUtente>): Promise<{ configColumns?: Set<string> }> {\n    type ApplicationField = 'nummac' | 'ragSocCli';\n    const applicationFields: ReadonlyArray<readonly [ApplicationField, string]> = [['nummac', 'NUMMAC'], ['ragSocCli', 'RAGSOCCLI']];\n    let configColumns: Set<string> | undefined;\n    if (applicationFields.some(([key]) => value[key] !== undefined)) {\n      configColumns = await getTableColumns(this.accessiOptions, 'UTENTI_CONFIG');\n      for (const [key, column] of applicationFields) {\n        if (value[key] !== undefined && value[key] !== null && !configColumns.has(column)) {\n          throw new BadRequestException(`Campo applicativo non configurato: UTENTI_CONFIG.${column}`);\n        }\n      }\n    }\n    const filterKeys = Object.keys(FILTRI_UTENTE_DB_MAPPING) as Array<keyof FiltriUtente>;\n    if (filterKeys.some(key => value[key] !== undefined && value[key] !== null && value[key] !== '')) {\n      await this.filtriService.validateSupportedFields(value);\n    }\n    return { configColumns };\n  }\n\n  private normalizeDatabaseBoolean(value: unknown): boolean {\n    return value === true || value === 1 || value === '1';\n  }\n\n  private normalizeUserFlags(user: UserDto): UserDto {\n    return { ...user,\n      flagSuper: this.normalizeDatabaseBoolean(user.flagSuper),\n      flagAdminConfigurator: this.normalizeDatabaseBoolean(user.flagAdminConfigurator),\n      flagDueFattori: this.normalizeDatabaseBoolean(user.flagDueFattori),\n      passwordlessLoginEnabled: this.normalizeDatabaseBoolean(user.passwordlessLoginEnabled),\n      passwordLoginEnabled: user.passwordLoginEnabled == null || this.normalizeDatabaseBoolean(user.passwordLoginEnabled),\n    };\n  }\n\n  private normalizeEmail(email: string): string {\n    if (typeof email !== 'string' || email.trim() === '') {\n      throw new BadRequestException({ code: 'ACCESSI_EMAIL_REQUIRED', message: \"L'email è obbligatoria.\" });\n    }\n\n    return email.trim().toLowerCase();\n  }\n\n  private async ensureEmailIsAvailable(email: string, currentUserCode?: number): Promise<void> {\n    const result = await Orm.query(\n      this.accessiOptions.databaseOptions,\n      'SELECT FIRST 1 CODUTE as codice_utente FROM UTENTI WHERE LOWER(USRNAME) = ?',\n      [email],\n    );\n\n    const existingUser = result.map(RestUtilities.convertKeysToCamelCase)[0] as\n      | { codiceUtente?: number }\n      | undefined;\n\n    if (\n      existingUser?.codiceUtente &&\n      (!currentUserCode || existingUser.codiceUtente !== currentUserCode)\n    ) {\n      throw new ConflictException({ code: 'ACCESSI_EMAIL_ALREADY_EXISTS', message: \"L'email è già associata a un utente Accessi.\" });\n    }\n  }\n\n  /** Determina se l'utente puo amministrare il configuratore Accessi (`FLGADMINCONFIG`). */\n  async isAdminConfigurator(codiceUtente: number): Promise<boolean> {\n    if (!codiceUtente) {\n      return false;\n    }\n\n    const query = `SELECT FLGADMINCONFIG AS flag_admin_configurator FROM UTENTI_CONFIG WHERE CODUTE = ?`;\n    const result = await Orm.query(this.accessiOptions.databaseOptions, query, [codiceUtente]);\n\n    if (!result || result === 0) {\n      return false;\n    }\n\n    const mapped = result.map(RestUtilities.convertKeysToCamelCase);\n    return this.normalizeDatabaseBoolean(mapped[0]?.flagAdminConfigurator);\n  }\n\n  /**\n   * Legge il minimo profilo autorevole usato da JWT e middleware. Restituisce `null` per utenti inesistenti.\n   * Non usare `UserDto` dal token per decisioni di sicurezza: i flag vengono sempre riletti qui.\n   */\n  async getAuthenticatedUserSnapshot(\n    codiceUtente: number,\n  ): Promise<AccessiAuthenticatedUserSnapshot | null> {\n    if (!codiceUtente || codiceUtente <= 0) {\n      return null;\n    }\n\n    const result = await Orm.query(\n      this.accessiOptions.databaseOptions,\n      `\n        SELECT\n          U.CODUTE AS codice_utente,\n          U.USRNAME AS email,\n          U.STAREG AS stato_registrazione,\n          C.FLGSUPER AS flag_super,\n          C.FLGADMINCONFIG AS flag_admin_configurator\n          , C.FLG2FATT AS flag_due_fattori\n          , C.FLGPWDLESS AS passwordless_login_enabled\n          , COALESCE(C.FLGPASSWORD, 1) AS password_login_enabled\n        FROM UTENTI U\n        LEFT JOIN UTENTI_CONFIG C ON C.CODUTE = U.CODUTE\n        WHERE U.CODUTE = ?\n      `,\n      [codiceUtente],\n    );\n\n    const user = result.map(RestUtilities.convertKeysToCamelCase)[0] as\n      | {\n          codiceUtente?: number;\n          email?: string;\n          statoRegistrazione?: StatoRegistrazione | number;\n          flagSuper?: unknown;\n          flagAdminConfigurator?: unknown;\n          flagDueFattori?: unknown;\n          passwordlessLoginEnabled?: unknown;\n          passwordLoginEnabled?: unknown;\n        }\n      | undefined;\n\n    if (!user?.codiceUtente) {\n      return null;\n    }\n\n    return {\n      codiceUtente: Number(user.codiceUtente),\n      email: typeof user.email === 'string' ? user.email : undefined,\n      statoRegistrazione: Number(user.statoRegistrazione) as StatoRegistrazione,\n      flagSuper: this.normalizeDatabaseBoolean(user.flagSuper),\n      flagAdminConfigurator: this.normalizeDatabaseBoolean(user.flagAdminConfigurator),\n      flagDueFattori: this.normalizeDatabaseBoolean(user.flagDueFattori),\n      passwordlessLoginEnabled: this.normalizeDatabaseBoolean(user.passwordlessLoginEnabled),\n      passwordLoginEnabled: this.normalizeDatabaseBoolean(user.passwordLoginEnabled),\n    };\n  }\n\n  /**\n   * Elenca gli utenti con filtri opzionali. Grant e campi estesi sono costosi e vengono caricati soltanto\n   * quando richiesti esplicitamente nelle opzioni; usare filtri puntuali nei flussi di autenticazione.\n   */\n  async getUsers(\n    filters?: { email?: string; codiceUtente?: number },\n    options?: { includeExtensionFields: boolean; includeGrants: boolean },\n  ): Promise<GetUsersResult[]> {\n    try {\n      const configColumns = await getTableColumns(this.accessiOptions, 'UTENTI_CONFIG');\n      const filterColumns = await getTableColumns(this.accessiOptions, 'FILTRI');\n      let query = ` \n            SELECT  \n                U.CODUTE as codice_utente, \n                U.USRNAME as email, \n                U.FLGGDPR as flag_gdpr, \n                U.DATGDPR as data_gdpr, \n                U.DATINS as data_inserimento, \n                U.DATSCAPWD as data_scadenza_password, \n                U.DATLASTLOGIN as data_last_login, \n                U.STAREG as stato_registrazione, \n                G.COGNOME as cognome, \n                G.NOME as nome, \n                G.AVATAR as avatar, \n                G.FLG2FATT as flag_due_fattori,\n                G.FLGPWDLESS as passwordless_login_enabled,\n                G.CODLINGUA as codice_lingua,\n                G.CELLULARE as cellulare,\n                G.FLGSUPER as flag_super, \n                G.FLGADMINCONFIG as flag_admin_configurator,\n                COALESCE(G.FLGPASSWORD, 1) as password_login_enabled,\n                G.PAGDEF as pagina_default,\n                G.JSON_METADATA as json_metadata,\n                ${optionalColumn(configColumns, 'RAGSOCCLI', 'G', 'rag_soc_cli', false)},\n                ${optionalColumn(configColumns, 'NUMMAC', 'G', 'nummac')},\n                ${optionalColumn(filterColumns, 'NUMREP', 'F', 'num_rep', true)},\n                ${optionalColumn(filterColumns, 'IDXPERS', 'F', 'idx_pers', true)},\n                ${optionalColumn(filterColumns, 'CODCLISUPER', 'F', 'cod_cli_super', true)},\n                ${optionalColumn(filterColumns, 'CODAGE', 'F', 'cod_age', true)},\n                ${optionalColumn(filterColumns, 'CODCLICOL', 'F', 'cod_cli_col', true)},\n                ${optionalColumn(filterColumns, 'CODCLIENTI', 'F', 'cod_clienti', false)},\n                F.TIPFIL AS tip_fil,\n                ${optionalColumn(filterColumns, 'IDXPOS', 'F', 'idx_postazione', true)}\n            FROM UTENTI U \n            INNER JOIN UTENTI_CONFIG G ON U.CODUTE = G.CODUTE\n            LEFT JOIN FILTRI F ON F.CODUTE = U.CODUTE\n            WHERE 1=1\n            `;\n\n      const queryParams: any[] = [];\n\n      if (filters?.email) {\n        query += ` AND LOWER(U.USRNAME) = ? `;\n        queryParams.push(filters.email.trim().toLowerCase());\n      }\n\n      if (filters?.codiceUtente) {\n        query += ` AND U.CODUTE = ? `;\n        queryParams.push(filters.codiceUtente);\n      }\n\n      query += ` ORDER BY U.CODUTE DESC `;\n\n      let users = (await Orm.query(\n        this.accessiOptions.databaseOptions,\n        query,\n        queryParams,\n      )) as UserDto[];\n      users = users.map(RestUtilities.convertKeysToCamelCase).map(user => this.normalizeUserFlags(user));\n\n      const usersResponse: GetUsersResult[] = [];\n\n      for (const user of users) {\n        let userGrants: UserGrantsDto | undefined;\n\n        if (options?.includeGrants) {\n          userGrants = await this.permissionService.getUserRolesAndGrants(user.codiceUtente);\n        }\n\n        let extensionFields: Record<string, unknown[]> | undefined;\n\n        if (options?.includeExtensionFields) {\n          extensionFields = {};\n        }\n\n        if (extensionFields && this.accessiOptions.extensionFieldsOptions) {\n          for (const ext of this.accessiOptions.extensionFieldsOptions) {\n            const values = (\n              await Orm.query(\n                ext.databaseOptions,\n                `SELECT ${ext.tableFields.join(',')} FROM ${ext.tableName} WHERE ${\n                  ext.tableJoinFieldName\n                } = ?`,\n                [user.codiceUtente],\n              )\n            ).map(RestUtilities.convertKeysToCamelCase);\n\n            extensionFields[ext.objectKey] = values;\n          }\n        }\n\n        usersResponse.push({\n          utente: user,\n          userGrants,\n          extensionFields,\n        });\n      }\n\n      return usersResponse;\n    } catch (error) {\n      throw error;\n    }\n  }\n\n  /** Cerca il codice interno per email normalizzata. Il chiamante deve gestire il caso senza righe. */\n  async getCodiceUtenteByEmail(email: string): Promise<{ codiceUtente: number }> {\n    try {\n      const query = `SELECT CODUTE as codice_utente FROM UTENTI WHERE LOWER(USRNAME) = ?`;\n      const result = await Orm.query(this.accessiOptions.databaseOptions, query, [\n        email.trim().toLowerCase(),\n      ]);\n      return result.map(RestUtilities.convertKeysToCamelCase)[0];\n    } catch (error) {\n      throw error;\n    }\n  }\n\n  /** Recupera il profilo locale usato dal login, compresi filtri Accessi eventualmente presenti. */\n  async getUserByEmail(email: string): Promise<UserDto | null> {\n    const configColumns = await getTableColumns(this.accessiOptions, 'UTENTI_CONFIG');\n    const query = `\n            SELECT \n                U.CODUTE AS codice_utente, \n                U.USRNAME AS email, \n                U.FLGGDPR AS flag_gdpr,\n                U.DATSCAPWD as data_scadenza_password,\n                U.STAREG AS stato_registrazione, \n                C.COGNOME AS cognome, \n                C.NOME AS nome, \n                C.AVATAR AS avatar, \n                C.FLG2FATT AS flag_due_fattori,\n                C.FLGPWDLESS AS passwordless_login_enabled,\n                C.CODLINGUA AS codice_lingua, \n                C.CELLULARE AS cellulare, \n                C.FLGSUPER AS flag_super,\n                C.FLGADMINCONFIG AS flag_admin_configurator,\n                COALESCE(C.FLGPASSWORD, 1) AS password_login_enabled,\n                C.PAGDEF AS pagina_default,\n                ${optionalColumn(configColumns, 'NUMMAC', 'C', 'nummac')},\n                ${optionalColumn(configColumns, 'RAGSOCCLI', 'C', 'rag_soc_cli', false)}\n            FROM UTENTI U\n            INNER JOIN UTENTI_CONFIG C ON C.CODUTE = U.CODUTE\n            WHERE LOWER(U.USRNAME) = ?\n        `;\n\n    const utenti = (await Orm.query(this.accessiOptions.databaseOptions, query, [email]).then(\n      (results) => results.map(RestUtilities.convertKeysToCamelCase),\n    )) as UserDto[];\n\n    if (utenti.length <= 0) return null;\n    const filtriUtente = await this.filtriService.getFiltriUser(utenti[0].codiceUtente);\n\n    if (utenti.length > 0 && filtriUtente.length > 0) {\n      const user = utenti[0];\n      const filtro = filtriUtente[0];\n      const filterValues: Record<string, unknown> = {};\n\n      Object.entries(FILTRI_UTENTE_DB_MAPPING).forEach(([key]) => {\n        if (key in filtro) {\n          filterValues[key] = filtro[key as keyof FiltriUtente];\n        }\n      });\n\n      Object.assign(user, filterValues);\n    }\n\n    return utenti.length > 0 ? this.normalizeUserFlags(utenti[0]) : null;\n  }\n\n  async insertUserFilters(codiceUtente: number, filterData: RegisterRequest): Promise<void> {\n    await this.filtriService.upsertFiltriUtente(codiceUtente, filterData);\n  }\n\n  private async executeInTransaction(operation: () => Promise<void>): Promise<void> {\n    await operation();\n  }\n\n  /**\n   * Crea utente, configurazione e filtri. La registrazione pubblica resta in stato `INVIO` e non puo\n   * impostare privilegi, ruoli o grant; soltanto flussi backend fidati possono usare `allowPrivilegedFields`.\n   */\n  async register(\n    registrationData: RegisterRequest,\n    options?: { allowPrivilegedFields?: boolean; initialState?: StatoRegistrazione },\n  ): Promise<number> {\n    try {\n      const allowPrivilegedFields = options?.allowPrivilegedFields === true;\n      const normalizedEmail = this.normalizeEmail(registrationData.email);\n\n      if (registrationData.flagDueFattori !== undefined && typeof registrationData.flagDueFattori !== 'boolean') {\n        throw new BadRequestException('Il flag due fattori deve essere booleano.');\n      }\n      if (registrationData.flagDueFattori && !/^[^\\s@]+@[^\\s@]+\\.[^\\s@]+$/.test(normalizedEmail)) {\n        throw new BadRequestException('Per attivare i codici di accesso serve un indirizzo email valido.');\n      }\n\n      if (\n        !allowPrivilegedFields &&\n        (registrationData.flagSuper !== undefined ||\n          registrationData.flagAdminConfigurator !== undefined ||\n          registrationData.flagDueFattori !== undefined ||\n          registrationData.roles !== undefined ||\n          registrationData.permissions !== undefined)\n      ) {\n        throw new Error('I campi privilegiati non sono consentiti nella registrazione pubblica.');\n      }\n\n      await this.validateApplicationFields(registrationData);\n      await this.ensureEmailIsAvailable(normalizedEmail);\n\n      const queryUtenti = `INSERT INTO UTENTI (USRNAME, STAREG) VALUES (?,?)`;\n      // Public/local registrations keep the historic INVIO state; trusted master or SSO flows may opt into CONF.\n      const paramsUtenti = [normalizedEmail, options?.initialState ?? StatoRegistrazione.INVIO];\n\n      await Orm.execute(this.accessiOptions.databaseOptions, queryUtenti, paramsUtenti);\n\n      const codiceUtenteResult = await Orm.query(\n        this.accessiOptions.databaseOptions,\n        'SELECT FIRST 1 CODUTE FROM UTENTI WHERE USRNAME = ? ORDER BY CODUTE DESC',\n        [normalizedEmail],\n      );\n\n      const codiceUtente = Number(\n        codiceUtenteResult?.[0]?.CODUTE ?? codiceUtenteResult?.[0]?.codute,\n      );\n      if (!codiceUtente) {\n        throw new Error('Creazione utente non riuscita: impossibile recuperare CODUTE.');\n      }\n\n      const utentiConfigFields = ['CODUTE', 'COGNOME', 'NOME'];\n      const utentiConfigPlaceholders = ['?', '?', '?'];\n      const utentiConfigParams = [codiceUtente, registrationData.cognome, registrationData.nome];\n\n      const optionalFields: OptionalField<any>[] = [\n        {\n          key: 'cellulare',\n          dbField: 'CELLULARE',\n          transform: (v) => String(v),\n        },\n        {\n          key: 'avatar',\n          dbField: 'AVATAR',\n          transform: (v) => String(v),\n        },\n        {\n          key: 'flagDueFattori',\n          dbField: 'FLG2FATT',\n          transform: (v) => (v ? 1 : 0),\n        },\n        {\n          key: 'paginaDefault',\n          dbField: 'PAGDEF',\n          transform: (v) => String(v),\n        },\n        {\n          key: 'nummac',\n          dbField: 'NUMMAC',\n          transform: (v) => Number(v),\n        },\n        {\n          key: 'ragSocCli',\n          dbField: 'RAGSOCCLI',\n          transform: (v) => String(v),\n        },\n      ];\n\n      if (allowPrivilegedFields) {\n        optionalFields.push(\n          {\n            key: 'flagSuper',\n            dbField: 'FLGSUPER',\n            transform: (v) => (v ? 1 : 0),\n          },\n          {\n            key: 'flagAdminConfigurator',\n            dbField: 'FLGADMINCONFIG',\n            transform: (v) => (v ? 1 : 0),\n          },\n        );\n      }\n\n      for (const field of optionalFields) {\n        const value = registrationData[field.key];\n        if (value !== undefined && value !== null) {\n          utentiConfigFields.push(field.dbField);\n          utentiConfigPlaceholders.push('?');\n          utentiConfigParams.push(field.transform ? field.transform(value) : value);\n        }\n      }\n\n      const queryUtentiConfig = `INSERT INTO UTENTI_CONFIG (${utentiConfigFields.join(\n        ', ',\n      )}) VALUES (${utentiConfigPlaceholders.join(', ')})`;\n      await Orm.execute(this.accessiOptions.databaseOptions, queryUtentiConfig, utentiConfigParams);\n\n      await this.filtriService.upsertFiltriUtente(codiceUtente, registrationData);\n\n      if (allowPrivilegedFields && !!registrationData.roles && registrationData.roles.length > 0) {\n        await this.permissionService.assignRolesToUser(codiceUtente, registrationData.roles);\n      }\n\n      if (\n        allowPrivilegedFields &&\n        !!registrationData.permissions &&\n        registrationData.permissions.length > 0\n      ) {\n        await this.permissionService.assignPermissionsToUser(\n          codiceUtente,\n          registrationData.permissions,\n        );\n      }\n\n      return codiceUtente;\n    } catch (error) {\n      throw error;\n    }\n  }\n\n  /**\n   * Aggiorna il profilo utente e i filtri. Le modifiche a stato, ruoli, grant e flag amministrativi richiedono\n   * `allowPrivilegedChanges`; gli array ruolo/grant passati in un flusso fidato sostituiscono le assegnazioni.\n   */\n  async updateUser(\n    codiceUtente: number,\n    user: UserDto,\n    options?: { allowPrivilegedChanges?: boolean },\n  ): Promise<void> {\n    try {\n      if (!codiceUtente) throw new Error('Impossibile aggiornare senza codice utente.');\n      const allowPrivilegedChanges = options?.allowPrivilegedChanges === true;\n\n      for (const value of [user.flagDueFattori, user.passwordlessLoginEnabled]) {\n        if (value !== undefined && typeof value !== 'boolean') throw new BadRequestException('Le policy di autenticazione devono essere booleane.');\n      }\n\n      if (\n        !allowPrivilegedChanges &&\n        (user.statoRegistrazione !== undefined ||\n          user.flagSuper !== undefined ||\n          user.flagAdminConfigurator !== undefined ||\n          user.passwordLoginEnabled !== undefined ||\n          user.passwordlessLoginEnabled !== undefined ||\n          user.flagDueFattori !== undefined ||\n          user.roles !== undefined ||\n          user.permissions !== undefined)\n      ) {\n        throw new Error('Non e consentito modificare campi privilegiati.');\n      }\n\n      if (user.flagDueFattori !== undefined || user.passwordlessLoginEnabled !== undefined || user.email !== undefined) {\n        const current = await this.getAuthenticatedUserSnapshot(codiceUtente);\n        if (!current) throw new BadRequestException('Utente non trovato.');\n        const twoFactor = user.flagDueFattori ?? current.flagDueFattori;\n        const passwordless = user.passwordlessLoginEnabled ?? current.passwordlessLoginEnabled;\n        if (passwordless && !twoFactor) throw new BadRequestException('Il login senza password richiede il codice di accesso attivo.');\n        if (twoFactor && !/^[^\\s@]+@[^\\s@]+\\.[^\\s@]+$/.test((user.email ?? current.email ?? '').trim())) {\n          throw new BadRequestException('Per attivare i codici di accesso serve un indirizzo email valido.');\n        }\n      }\n\n      const { configColumns } = await this.validateApplicationFields(user);\n      const utentiUpdates = [];\n      const utentiParams = [];\n\n      if (user.email !== undefined) {\n        const normalizedEmail = this.normalizeEmail(user.email);\n        await this.ensureEmailIsAvailable(normalizedEmail, codiceUtente);\n        utentiUpdates.push('usrname = ?');\n        utentiParams.push(normalizedEmail);\n      }\n      if (user.flagGdpr !== undefined) {\n        utentiUpdates.push('flggdpr = ?');\n        utentiParams.push(user.flagGdpr);\n      }\n      if (allowPrivilegedChanges && user.statoRegistrazione !== undefined) {\n        utentiUpdates.push('stareg = ?');\n        utentiParams.push(user.statoRegistrazione);\n      }\n\n      if (utentiUpdates.length > 0) {\n        const queryUtenti = `UPDATE UTENTI SET ${utentiUpdates.join(', ')} WHERE CODUTE = ?`;\n        utentiParams.push(codiceUtente);\n        await Orm.execute(this.accessiOptions.databaseOptions, queryUtenti, utentiParams);\n      }\n\n      const utentiConfigUpdates = [];\n      const utentiConfigParams = [];\n\n      if (user.cognome !== undefined) {\n        utentiConfigUpdates.push('cognome = ?');\n        utentiConfigParams.push(user.cognome);\n      }\n      if (user.nome !== undefined) {\n        utentiConfigUpdates.push('nome = ?');\n        utentiConfigParams.push(user.nome);\n      }\n      if (user.avatar !== undefined) {\n        utentiConfigUpdates.push('avatar = ?');\n        utentiConfigParams.push(user.avatar);\n      }\n      if (user.flagDueFattori !== undefined) {\n        utentiConfigUpdates.push('flg2fatt = ?');\n        utentiConfigParams.push(user.flagDueFattori ? 1 : 0);\n      }\n      if (user.passwordlessLoginEnabled !== undefined) {\n        utentiConfigUpdates.push('flgpwdless = ?');\n        utentiConfigParams.push(user.passwordlessLoginEnabled ? 1 : 0);\n      }\n      if (user.codiceLingua !== undefined) {\n        utentiConfigUpdates.push('codlingua = ?');\n        utentiConfigParams.push(user.codiceLingua);\n      }\n      if (user.cellulare !== undefined) {\n        utentiConfigUpdates.push('cellulare = ?');\n        utentiConfigParams.push(user.cellulare);\n      }\n      if (allowPrivilegedChanges && user.flagSuper !== undefined) {\n        utentiConfigUpdates.push('flgsuper = ?');\n        utentiConfigParams.push(user.flagSuper);\n      }\n      if (allowPrivilegedChanges && user.flagAdminConfigurator !== undefined) {\n        utentiConfigUpdates.push('flgadminconfig = ?');\n        utentiConfigParams.push(user.flagAdminConfigurator);\n      }\n      if (allowPrivilegedChanges && user.passwordLoginEnabled !== undefined) {\n        utentiConfigUpdates.push('flgpassword = ?');\n        utentiConfigParams.push(user.passwordLoginEnabled ? 1 : 0);\n      }\n      if (user.paginaDefault !== undefined) {\n        utentiConfigUpdates.push('pagdef = ?');\n        utentiConfigParams.push(user.paginaDefault);\n      }\n      if (user.jsonMetadata !== undefined) {\n        utentiConfigUpdates.push('json_metadata = ?');\n        utentiConfigParams.push(user.jsonMetadata);\n      }\n      if (user.ragSocCli !== undefined && (user.ragSocCli !== null || configColumns?.has('RAGSOCCLI'))) {\n        utentiConfigUpdates.push('ragsoccli = ?');\n        utentiConfigParams.push(user.ragSocCli);\n      }\n\n      if (utentiConfigUpdates.length > 0) {\n        const queryUtentiConfig = `UPDATE UTENTI_CONFIG SET ${utentiConfigUpdates.join(\n          ', ',\n        )} WHERE CODUTE = ?`;\n        utentiConfigParams.push(codiceUtente);\n        await Orm.execute(\n          this.accessiOptions.databaseOptions,\n          queryUtentiConfig,\n          utentiConfigParams,\n        );\n      }\n\n      if (allowPrivilegedChanges && Array.isArray(user.roles)) {\n        await this.permissionService.assignRolesToUser(codiceUtente, user.roles);\n      }\n\n      if (allowPrivilegedChanges && Array.isArray(user.permissions)) {\n        await this.permissionService.assignPermissionsToUser(codiceUtente, user.permissions);\n      }\n\n      await this.filtriService.upsertFiltriUtente(codiceUtente, user);\n    } catch (error) {\n      throw error;\n    }\n  }\n\n  async updateUserFilters(codiceUtente: number, user: UserDto): Promise<void> {\n    await this.filtriService.upsertFiltriUtente(codiceUtente, user);\n  }\n\n  /** Eliminazione logica: imposta lo stato `DELETE` senza cancellare lo storico o i collegamenti SSO. */\n  async deleteUser(codiceCliente: number): Promise<void> {\n    try {\n      const query = `UPDATE UTENTI SET STAREG = ? WHERE CODUTE = ?`;\n      await Orm.execute(this.accessiOptions.databaseOptions, query, [\n        StatoRegistrazione.DELETE,\n        codiceCliente,\n      ]);\n    } catch (error) {\n      throw error;\n    }\n  }\n\n  /** Cambia esplicitamente lo stato di registrazione; usare questa API per blocco, conferma o eliminazione logica. */\n  async setStato(codiceCliente: number, statoRegistrazione: StatoRegistrazione) {\n    try {\n      const query = `UPDATE UTENTI SET STAREG = ? WHERE CODUTE = ?`;\n      await Orm.execute(this.accessiOptions.databaseOptions, query, [\n        statoRegistrazione,\n        codiceCliente,\n      ]);\n    } catch (error) {\n      throw error;\n    }\n  }\n\n  public async setGdpr(codiceUtente: number) {\n    try {\n      return await Orm.executeMultiple(this.accessiOptions.databaseOptions, [\n        { query: 'INSERT INTO UTENTI_GDPR (CODUTE, GDPR) VALUES (?, ?)', params: [codiceUtente, 'true'] },\n        { query: 'UPDATE UTENTI SET FLGGDPR = 1, DATGDPR = CURRENT_DATE WHERE CODUTE = ?', params: [codiceUtente] },\n      ]);\n    } catch (error) {\n      throw error;\n    }\n  }\n}\n"]}

package/dist/accessi-module/database-updates/AccessiDatabaseUpdater.d.ts

@@ -1,17 +1,45 @@
-import { OnModuleInit } from "@nestjs/common";
-import { DatabaseUpdater } from "../../DatabaseUpdater";
-import { AccessiOptions } from "../AccessiModule";
-import { Logger } from "../../Logger";
+import { OnModuleInit } from '@nestjs/common';
+import type { AccessiOptions } from '../AccessiModule';
+import { DatabaseUpdater } from '../../DatabaseUpdater';
+import { Logger } from '../../Logger';
+export interface AccessiSchemaReport {
+    compatible: boolean;
+    issues: string[];
+}
+/** Reconciles the actual schema; version labels never bypass verification. */
 export declare class AccessiDatabaseUpdater extends DatabaseUpdater implements OnModuleInit {
     private readonly accessiOptions;
     protected static logger: Logger;
-    private static readonly updates;
+    private static readonly initialization;
+    private static readonly running;
     constructor(accessiOptions: AccessiOptions);
     onModuleInit(): Promise<void>;
-    static run(options: AccessiOptions): Promise<void>;
-    static getCurrentVersion(options: AccessiOptions): Promise<string | null>;
+    /** Shared bootstrap barrier for services in the same Nest module. Failed attempts may be retried. */
+    static initialize(options: AccessiOptions): Promise<void>;
     static getLatestVersion(): string;
-    private static ensureColumn;
-    private static upsertFiltroTipo;
-    private static upsertMenu;
+    static getCurrentVersion(options: AccessiOptions): Promise<string | null>;
+    /** Serialize callers targeting the same database in this process. Cross-process DDL is a deployment concern. */
+    static run(options: AccessiOptions): Promise<void>;
+    private static query;
+    private static execute;
+    private static relationIssues;
+    private static engineIssue;
+    private static columns;
+    private static defaultValue;
+    private static typeIssue;
+    private static constraints;
+    private static groups;
+    private static checks;
+    private static sameCheck;
+    private static indexes;
+    private static sameColumns;
+    private static triggers;
+    /** Accept historical formatting and renamed triggers, but require the operations used by Accessi. */
+    private static compatibleTrigger;
+    private static futureVersionIssue;
+    /** Read-only diagnostics, including when automatic updates are disabled. */
+    static inspectSchema(options: AccessiOptions): Promise<AccessiSchemaReport>;
+    static assertCompatible(options: AccessiOptions): Promise<void>;
+    private static normalizeDefault;
+    private static reconcile;
 }