emilsoftware-utilities 2.0.0-dev.22 → 2.0.0-dev.24

package/dist/accessi-module/Services/PermissionService/PermissionService.js.map

@@ -1 +1 @@
-{"version":3,"file":"PermissionService.js","sourceRoot":"","sources":["../../../../src/accessi-module/Services/PermissionService/PermissionService.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AACA,sCAAmC;AACnC,kDAAmD;AAEnD,qCAA0D;AAK1D,2CAAoD;AAG7C,IAAM,iBAAiB,GAAvB,MAAM,iBAAiB;IAC1B,YACgD,cAA8B;QAA9B,mBAAc,GAAd,cAAc,CAAgB;IAC1E,CAAC;IAEG,kBAAkB,CAAC,MAAa,EAAE,SAAS,GAAG,OAAO;;QACzD,MAAM,QAAQ,GAAG,MAAA,MAAA,MAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAG,CAAC,CAAC,0CAAG,SAAS,CAAC,mCAClC,MAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAG,CAAC,CAAC,0CAAG,SAAS,CAAC,WAAW,EAAE,CAAC,mCACtC,MAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAG,CAAC,CAAC,0CAAE,KAAK,CAAC;QAC1B,OAAO,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,QAAQ,aAAR,QAAQ,cAAR,QAAQ,GAAI,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;IAC/F,CAAC;IAEa,yBAAyB;;YACnC,MAAM,KAAK,GAAG;;;;;;;;;;;;;;aAcT,CAAC;YAEN,OAAO,MAAM,SAAG,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,eAAe,EAAE,KAAK,EAAE,EAAE,CAAC;iBACjE,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAa,CAAC,sBAAsB,CAAC,CAAuB,CAAC;QAClG,CAAC;KAAA;IAEa,wBAAwB,CAAC,YAAoB;;YACvD,MAAM,iBAAiB,GAAG;;;;;;;;;;;;;;;aAerB,CAAC;YAEN,OAAO,MAAM,SAAG,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,eAAe,EAAE,iBAAiB,EAAE,CAAC,YAAY,CAAC,CAAC;iBACzF,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAa,CAAC,sBAAsB,CAAC,CAAuB,CAAC;QAClG,CAAC;KAAA;IAEa,YAAY,CAAC,YAAoB;;YAC3C,MAAM,UAAU,GAAG;;;;;;;;;;;;;;;;;;aAkBd,CAAC;YACN,IAAI,WAAW,GAAG,MAAM,SAAG,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,eAAe,EAAE,UAAU,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;YACnG,WAAW,GAAG,WAAW,CAAC,GAAG,CAAC,yBAAa,CAAC,sBAAsB,CAAC,CAAC;YAEpE,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAgB,CAAC;YACzC,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;gBAC5B,MAAM,EAAE,WAAW,EAAE,gBAAgB,EAAE,UAAU,EAAE,eAAe,EAAE,gBAAgB,EAAE,GAAG,GAAG,CAAC;gBAE7F,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;oBAC7B,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE;wBACtB,WAAW;wBACX,gBAAgB,EAAE,gBAAgB,aAAhB,gBAAgB,uBAAhB,gBAAgB,CAAE,IAAI,EAAE;wBAC1C,IAAI,EAAE,EAAE;qBACX,CAAC,CAAC;gBACP,CAAC;gBAED,IAAI,UAAU,IAAI,eAAe,EAAE,CAAC;oBAChC,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAE,CAAC,IAAI,CAAC,IAAI,CAAC;wBACjC,WAAW,EAAE,WAAW;wBACxB,UAAU,EAAE,UAAU,CAAC,IAAI,EAAE;wBAC7B,gBAAgB;qBACnB,CAAC,CAAC;gBACP,CAAC;YACL,CAAC;YAED,OAAO,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QACzC,CAAC;KAAA;IAGY,eAAe,CAAC,YAAoB,EAAE,gBAAuB;;YACtE,MAAM,WAAW,GAAG,2CAA2C,CAAC;YAChE,MAAM,SAAG,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,eAAe,EAAE,WAAW,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;YAEpF,MAAM,oBAAoB,GAAG,gBAAgB;iBACxC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;iBAChC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC;iBAC3B,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,YAAY,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC;YAEzE,MAAM,WAAW,GAAG,8EAA8E,CAAC;YAEnG,KAAK,MAAM,MAAM,IAAI,oBAAoB,EAAE,CAAC;gBACxC,MAAM,SAAG,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,eAAe,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;YAChF,CAAC;QACL,CAAC;KAAA;IAGY,iBAAiB,CAAC,YAAoB;;YAC/C,MAAM,KAAK,GAAG,2CAA2C,CAAC;YAC1D,MAAM,SAAG,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,eAAe,EAAE,KAAK,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;QAClF,CAAC;KAAA;IAEY,kBAAkB;6DAAC,IAAU,EAAE,cAA6B,IAAI;;YAEzE,wBAAwB;YACxB,IAAI,WAAW,IAAI,IAAI,EAAE,CAAC;gBACtB,MAAM,eAAe,GAAG,uCAAuC,CAAC;gBAChE,MAAM,SAAG,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,eAAe,EAAE,eAAe,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC;gBAEjG,MAAM,iBAAiB,GAAG,MAAM,SAAG,CAAC,KAAK,CACrC,IAAI,CAAC,cAAc,CAAC,eAAe,EACnC,wEAAwE,EACxE,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAC1B,CAAC;gBACF,MAAM,cAAc,GAAG,MAAA,MAAA,iBAAiB,aAAjB,iBAAiB,uBAAjB,iBAAiB,CAAG,CAAC,CAAC,0CAAE,MAAM,mCAAI,MAAA,iBAAiB,aAAjB,iBAAiB,uBAAjB,iBAAiB,CAAG,CAAC,CAAC,0CAAE,MAAM,CAAC;gBACxF,MAAM,iBAAiB,GAAG,OAAO,cAAc,KAAK,QAAQ;oBACxD,CAAC,CAAC,cAAc;oBAChB,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,cAAc,aAAd,cAAc,cAAd,cAAc,GAAI,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;gBACrD,IAAI,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,CAAC;oBAClC,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;gBACpF,CAAC;gBACD,WAAW,GAAG,iBAAiB,CAAC;YACpC,CAAC;iBAAM,CAAC;gBACJ,gCAAgC;gBAChC,MAAM,eAAe,GAAG,8CAA8C,CAAC;gBACvE,MAAM,SAAG,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,eAAe,EAAE,eAAe,EAAE,CAAC,IAAI,CAAC,gBAAgB,EAAE,WAAW,CAAC,CAAC,CAAC;gBAE9G,MAAM,mBAAmB,GAAG,wCAAwC,CAAC;gBACrE,MAAM,SAAG,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,eAAe,EAAE,mBAAmB,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;YAC/F,CAAC;YAED,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;gBACvB,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;YACpF,CAAC;YAED,MAAM,mBAAmB,GAAG,iEAAiE,CAAC;YAC9F,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;gBAC3B,MAAM,SAAG,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,eAAe,EAAE,mBAAmB,EAAE,CAAC,WAAW,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC;YACvI,CAAC;QAEL,CAAC;KAAA;IAGY,iBAAiB;;YAC1B,MAAM,KAAK,GAAG;;;;;;;;;;;;aAYT,CAAC;YAEN,IAAI,MAAM,GAAG,MAAM,SAAG,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,eAAe,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;YAC7E,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,yBAAa,CAAC,sBAAsB,CAAC,CAAC;YAE1D,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAgB,CAAC;YAEzC,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;gBACvB,MAAM,EAAE,WAAW,EAAE,gBAAgB,EAAE,UAAU,EAAE,eAAe,EAAE,gBAAgB,EAAE,GAAG,GAAG,CAAC;gBAE7F,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;oBAC7B,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE;wBACtB,WAAW;wBACX,gBAAgB,EAAE,gBAAgB,aAAhB,gBAAgB,uBAAhB,gBAAgB,CAAE,IAAI,EAAE;wBAC1C,IAAI,EAAE,EAAE;qBACX,CAAC,CAAC;gBACP,CAAC;gBAED,MAAM,gBAAgB,GAAG,OAAO,gBAAgB,KAAK,QAAQ;oBACzD,CAAC,CAAC,gBAAgB;oBAClB,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,gBAAgB,aAAhB,gBAAgB,cAAhB,gBAAgB,GAAI,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;gBAEvD,IAAI,CAAC,UAAU,IAAI,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,IAAI,gBAAgB,IAAI,uBAAgB,CAAC,OAAO,EAAE,CAAC;oBAChG,SAAS;gBACb,CAAC;gBAED,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAE,CAAC,IAAI,CAAC,IAAI,CAAC;oBACjC,WAAW,EAAE,WAAW;oBACxB,UAAU,EAAE,UAAU,CAAC,IAAI,EAAE;oBAC7B,gBAAgB,EAAE,gBAAoC;iBACzD,CAAC,CAAC;YACP,CAAC;YAED,OAAO,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QACzC,CAAC;KAAA;IAGY,iBAAiB,CAAC,YAAoB,EAAE,KAAe;;YAEhE,MAAM,eAAe,GAAG,8CAA8C,CAAC;YACvE,IAAI,MAAM,GAAG,MAAM,SAAG,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,eAAe,EAAE,eAAe,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;YAEnG,IAAI,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;gBACxC,MAAM,IAAI,KAAK,CAAC,uBAAuB,YAAY,cAAc,CAAC,CAAC;YACvE,CAAC;YAED,MAAM,eAAe,GAAG,KAAK,CAAC,IAAI,CAC9B,IAAI,GAAG,CACH,KAAK;iBACA,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,IAAI,aAAJ,IAAI,cAAJ,IAAI,GAAI,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;iBACnD,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,CAC5D,CACJ,CAAC;YAEF,MAAM,iBAAiB,GAAG;gBACtB,EAAE,KAAK,EAAE,2CAA2C,EAAE,MAAM,EAAE,CAAC,YAAY,CAAC,EAAE;gBAC9E,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;oBACrC,KAAK,EAAE,yDAAyD;oBAChE,MAAM,EAAE,CAAC,YAAY,EAAE,WAAW,CAAC;iBACtC,CAAC,CAAC;aACN,CAAC;YAEF,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC7B,MAAM,eAAe,GAAG,6CAA6C,CAAC;gBACtE,KAAK,MAAM,WAAW,IAAI,eAAe,EAAE,CAAC;oBACxC,MAAM,UAAU,GAAG,MAAM,SAAG,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,eAAe,EAAE,eAAe,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;oBACxG,IAAI,IAAI,CAAC,kBAAkB,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;wBAC5C,MAAM,IAAI,KAAK,CAAC,uBAAuB,WAAW,cAAc,CAAC,CAAC;oBACtE,CAAC;gBACL,CAAC;YACL,CAAC;YAED,MAAM,SAAG,CAAC,eAAe,CAAC,IAAI,CAAC,cAAc,CAAC,eAAe,EAAE,iBAAiB,CAAC,CAAC;YAElF,MAAM,mBAAmB,GAAG,MAAM,SAAG,CAAC,KAAK,CACvC,IAAI,CAAC,cAAc,CAAC,eAAe,EACnC,oDAAoD,EACpD,CAAC,YAAY,CAAC,CACjB,CAAC;YACF,MAAM,kBAAkB,GAAG,IAAI,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAC;YACxE,IAAI,kBAAkB,KAAK,eAAe,CAAC,MAAM,EAAE,CAAC;gBAChD,MAAM,IAAI,KAAK,CACX,6CAA6C,YAAY,YAAY,eAAe,CAAC,MAAM,aAAa,kBAAkB,GAAG,CAChI,CAAC;YACN,CAAC;QACL,CAAC;KAAA;IAGY,uBAAuB,CAAC,YAAoB,EAAE,WAAyB;;YAEhF,MAAM,eAAe,GAAG,8CAA8C,CAAC;YACvE,IAAI,MAAM,GAAG,MAAM,SAAG,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,eAAe,EAAE,eAAe,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;YAEnG,IAAI,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;gBACxC,MAAM,IAAI,KAAK,CAAC,uBAAuB,YAAY,cAAc,CAAC,CAAC;YACvE,CAAC;YAED,MAAM,qBAAqB,GAAG,KAAK,CAAC,IAAI,CACpC,IAAI,GAAG,CACH,WAAW;iBACN,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE;;gBAAC,OAAA,CAAC;oBAClB,UAAU,EAAE,GAAG,MAAA,UAAU,aAAV,UAAU,uBAAV,UAAU,CAAE,UAAU,mCAAI,EAAE,EAAE,CAAC,IAAI,EAAE;oBACpD,gBAAgB,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAA,UAAU,aAAV,UAAU,uBAAV,UAAU,CAAE,gBAAgB,mCAAI,EAAE,EAAE,EAAE,EAAE,CAAC;iBACjF,CAAC,CAAA;aAAA,CAAC;iBACF,MAAM,CACH,CAAC,UAAU,EAAE,EAAE,CACX,UAAU,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,gBAAgB,CAAC,CACxF;iBACA,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,UAAU,EAAE,UAAU,CAAU,CAAC,CACzE,CAAC,MAAM,EAAE,CACb,CAAC;YAEF,MAAM,iBAAiB,GAAG;gBACtB,EAAE,KAAK,EAAE,2CAA2C,EAAE,MAAM,EAAE,CAAC,YAAY,CAAC,EAAE;gBAC9E,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;oBAC1C,KAAK,EAAE,oEAAoE;oBAC3E,MAAM,EAAE,CAAC,YAAY,EAAE,UAAU,CAAC,UAAU,EAAE,UAAU,CAAC,gBAAgB,CAAC;iBAC7E,CAAC,CAAC;aACN,CAAC;YAEF,IAAI,qBAAqB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACnC,MAAM,eAAe,GAAG,4CAA4C,CAAC;gBACrE,KAAK,MAAM,UAAU,IAAI,qBAAqB,EAAE,CAAC;oBAC7C,MAAM,UAAU,GAAG,MAAM,SAAG,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,eAAe,EAAE,eAAe,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC;oBAClH,IAAI,IAAI,CAAC,kBAAkB,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;wBAC5C,MAAM,IAAI,KAAK,CAAC,sBAAsB,UAAU,CAAC,UAAU,cAAc,CAAC,CAAC;oBAC/E,CAAC;gBACL,CAAC;YACL,CAAC;YAED,MAAM,SAAG,CAAC,eAAe,CAAC,IAAI,CAAC,cAAc,CAAC,eAAe,EAAE,iBAAiB,CAAC,CAAC;YAElF,MAAM,yBAAyB,GAAG,MAAM,SAAG,CAAC,KAAK,CAC7C,IAAI,CAAC,cAAc,CAAC,eAAe,EACnC,oDAAoD,EACpD,CAAC,YAAY,CAAC,CACjB,CAAC;YACF,MAAM,wBAAwB,GAAG,IAAI,CAAC,kBAAkB,CAAC,yBAAyB,CAAC,CAAC;YACpF,IAAI,wBAAwB,KAAK,qBAAqB,CAAC,MAAM,EAAE,CAAC;gBAC5D,MAAM,IAAI,KAAK,CACX,oDAAoD,YAAY,YAAY,qBAAqB,CAAC,MAAM,aAAa,wBAAwB,GAAG,CACnJ,CAAC;YACN,CAAC;QACL,CAAC;KAAA;IAGY,UAAU,CAAC,WAAmB;;YAEvC,MAAM,WAAW,GAAG,6CAA6C,CAAC;YAClE,IAAI,MAAM,GAAG,MAAM,SAAG,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,eAAe,EAAE,WAAW,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;YAE9F,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,EAAE,CAAC;gBACxB,MAAM,IAAI,KAAK,CAAC,uBAAuB,WAAW,cAAc,CAAC,CAAC;YACtE,CAAC;YAED,MAAM,oBAAoB,GAAG,wCAAwC,CAAC;YACtE,MAAM,SAAG,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,eAAe,EAAE,oBAAoB,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;YAE5F,MAAM,oBAAoB,GAAG,2CAA2C,CAAC;YACzE,MAAM,SAAG,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,eAAe,EAAE,oBAAoB,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;YAE5F,MAAM,eAAe,GAAG,oCAAoC,CAAC;YAC7D,MAAM,SAAG,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,eAAe,EAAE,eAAe,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;QAE3F,CAAC;KAAA;IAGY,QAAQ;;YACjB,MAAM,KAAK,GAAG;;;;;;;;;;;;;;aAcT,CAAC;YAEN,MAAM,MAAM,GAAG,MAAM,SAAG,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,eAAe,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;YAC/E,OAAO,MAAM,CAAC,GAAG,CAAC,yBAAa,CAAC,sBAAsB,CAAC,CAAC;QAC5D,CAAC;KAAA;IAGY,kBAAkB;6DAAC,eAAe,GAAG,KAAK;YACnD,MAAM,aAAa,GAAG,eAAe;gBACjC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,uEAAuE,CAAC;YAE9E,MAAM,KAAK,GAAG;;;;;;;;;;;;;;;;kBAgBJ,aAAa;;aAElB,CAAC;YAEN,MAAM,MAAM,GAAG,MAAM,SAAG,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,eAAe,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;YAE/E,MAAM,QAAQ,GAAG,IAAI,GAAG,EAGrB,CAAC;YAEJ,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE;;gBACjB,MAAM,SAAS,GAAG,yBAAa,CAAC,sBAAsB,CAAC,GAAG,CAGzD,CAAC;gBAEF,MAAM,KAA6C,SAAgB,EAA7D,EAAE,WAAW,EAAE,YAAY,OAAkC,EAA7B,QAAQ,cAAxC,+BAA0C,CAAmB,CAAC;gBACpE,MAAM,kBAAkB,GAAG,MAAA,QAAQ,CAAC,YAAY,mCAAI,eAAe,CAAC;gBACpE,MAAM,gBAAgB,GAClB,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,YAAY,KAAK,IAAI,CAAC;gBAC5F,MAAM,eAAe,GACjB,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,WAAW,KAAK,IAAI,CAAC;gBAEzF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,kBAAkB,CAAC,EAAE,CAAC;oBACpC,QAAQ,CAAC,GAAG,CAAC,kBAAkB,EAAE;wBAC7B,YAAY,EAAE,MAAA,QAAQ,CAAC,YAAY,mCAAI,kBAAkB;wBACzD,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;wBAC7C,YAAY,EAAE,QAAQ,CAAC,YAAY;wBACnC,OAAO,EAAE,gBAAgB;wBACzB,KAAK,EAAE,EAAE;qBACZ,CAAC,CAAC;gBACP,CAAC;gBAED,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;oBACtB,QAAQ,CAAC,GAAG,CAAC,kBAAkB,CAAE,CAAC,KAAK,CAAC,IAAI,iCACrC,QAAQ,KACX,OAAO,EAAE,eAAe,IAC1B,CAAC;gBACP,CAAC;YACL,CAAC,CAAC,CAAC;YAEH,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;iBAC5C,GAAG,CAAC,KAAK,CAAC,EAAE;;gBAAC,OAAA,iCACP,KAAK,KACR,KAAK,EAAE,CAAC,MAAA,KAAK,CAAC,KAAK,mCAAI,EAAE,CAAC,CAAC,IAAI,CAC3B,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,eACL,OAAA,CAAC,MAAA,CAAC,CAAC,UAAU,mCAAI,MAAM,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAA,CAAC,CAAC,UAAU,mCAAI,MAAM,CAAC,gBAAgB,CAAC,CAAA,EAAA,CAC5F,IACH,CAAA;aAAA,CAAC;iBACF,IAAI,CACD,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,eACL,OAAA,CAAC,MAAA,CAAC,CAAC,YAAY,mCAAI,MAAM,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAA,CAAC,CAAC,YAAY,mCAAI,MAAM,CAAC,gBAAgB,CAAC,CAAA,EAAA,CAChG,CAAC;YAEN,OAAO,WAAW,CAAC;QACvB,CAAC;KAAA;IAIY,qBAAqB,CAAC,YAAoB;;YAKnD,MAAM,iBAAiB,GAAG,mEAAmE,CAAC;YAC9F,IAAI,MAAM,GAAG,MAAM,SAAG,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,eAAe,EAAE,iBAAiB,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;YACrG,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,GAAG,YAAY,CAAC,CAAC;YAEjH,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,yBAAa,CAAC,sBAAsB,CAA6B,CAAC;YACtF,MAAM,YAAY,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAEzC,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC,YAAY,CAAC,CAAC;YACvE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;YAEpD,iDAAiD;YACjD,MAAM,SAAS,GAAG,IAAI,GAAG,EAA4B,CAAC;YAEtD,gCAAgC;YAChC,KAAK,MAAM,YAAY,IAAI,YAAY,EAAE,CAAC;gBACtC,SAAS,CAAC,GAAG,CAAC,YAAY,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;YACzD,CAAC;YAED,oDAAoD;YACpD,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;gBACxB,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;oBAC5B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;wBAClC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;oBACzC,CAAC;gBACL,CAAC;YACL,CAAC;YAED,MAAM,MAAM,GAAG,YAAY;gBACvB,CAAC,CAAC,MAAM,IAAI,CAAC,yBAAyB,EAAE;gBACxC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;YAErC,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAC3C,CAAC;KAAA;CAIJ,CAAA;AA1eY,8CAAiB;4BAAjB,iBAAiB;IAD7B,IAAA,mBAAU,GAAE;IAGJ,WAAA,IAAA,eAAM,EAAC,iBAAiB,CAAC,CAAA;;GAFrB,iBAAiB,CA0e7B","sourcesContent":["\nimport { Orm } from \"../../../Orm\";\nimport { RestUtilities } from \"../../../Utilities\";\nimport { AccessiOptions } from \"../../AccessiModule\";\nimport { Permission, TipoAbilitazione } from \"../../Dtos\";\nimport { AbilitazioneMenu } from \"../../Dtos/AbilitazioneMenu\";\nimport { GroupWithMenusEntity } from \"../../Dtos/GetGroupsWithMenusResponse\";\nimport { MenuEntity } from \"../../Dtos/GetMenusResponse\";\nimport { Role } from \"../../Dtos/Role\";\nimport { Inject, Injectable } from \"@nestjs/common\";\n\n@Injectable()\nexport class PermissionService {\n    constructor(\n        @Inject('ACCESSI_OPTIONS') private readonly accessiOptions: AccessiOptions\n    ) { }\n\n    private getCountFromResult(result: any[], fieldName = 'COUNT'): number {\n        const rawValue = result?.[0]?.[fieldName]\n            ?? result?.[0]?.[fieldName.toLowerCase()]\n            ?? result?.[0]?.count;\n        return typeof rawValue === 'number' ? rawValue : Number.parseInt(`${rawValue ?? '0'}`, 10);\n    }\n\n    private async getAllActiveMenusAsGrants(): Promise<AbilitazioneMenu[]> {\n        const query = `\n                SELECT\n                    M.CODMNU AS codice_menu,\n                    30 AS tipo_abilitazione,\n                    M.DESMNU AS descrizione_menu,\n                    G.DESGRP AS descrizione_gruppo,\n                    G.CODGRP AS codice_gruppo,\n                    M.ICON AS icona,\n                    M.CODTIP AS tipo,\n                    M.PAGINA AS pagina,\n                    M.NOTE AS note\n                FROM MENU M\n                LEFT JOIN MENU_GRP G ON G.CODGRP = M.CODGRP\n                WHERE M.FLGENABLED = 1 AND COALESCE(G.FLGENABLED, 1) = 1\n            `;\n\n        return await Orm.query(this.accessiOptions.databaseOptions, query, [])\n            .then(results => results.map(RestUtilities.convertKeysToCamelCase)) as AbilitazioneMenu[];\n    }\n\n    private async getUserDirectPermissions(codiceUtente: number): Promise<AbilitazioneMenu[]> {\n        const queryAbilitazioni = `\n                SELECT\n                    A.CODMNU AS codice_menu,\n                    A.TIPABI AS tipo_abilitazione,\n                    M.DESMNU AS descrizione_menu,\n                    G.DESGRP AS descrizione_gruppo,\n                    G.CODGRP AS codice_gruppo,\n                    M.ICON AS icona,\n                    M.CODTIP AS tipo,\n                    M.PAGINA AS pagina,\n                    M.NOTE AS note\n                FROM ABILITAZIONI A\n                INNER JOIN MENU M ON A.CODMNU = M.CODMNU\n                LEFT JOIN MENU_GRP G ON G.CODGRP = M.CODGRP\n                WHERE A.CODUTE = ? AND M.FLGENABLED = 1 AND COALESCE(G.FLGENABLED, 1) = 1\n            `;\n\n        return await Orm.query(this.accessiOptions.databaseOptions, queryAbilitazioni, [codiceUtente])\n            .then(results => results.map(RestUtilities.convertKeysToCamelCase)) as AbilitazioneMenu[];\n    }\n\n    private async getUserRoles(codiceUtente: number): Promise<Role[]> {\n        const queryRuoli = `\n                SELECT\n                    R.CODRUO AS codice_ruolo,\n                    R.DESRUO AS descrizione_ruolo,\n                    RM.CODMNU AS codice_menu,\n                    RM.TIPABI AS tipo_abilitazione,\n                    M.DESMNU AS descrizione_menu,\n                    M.NOTE AS note\n                FROM UTENTI_RUOLI RU\n                INNER JOIN RUOLI R ON RU.CODRUO = R.CODRUO\n                LEFT JOIN RUOLI_MNU RM ON R.CODRUO = RM.CODRUO\n                LEFT JOIN MENU M\n                    ON RM.CODMNU = M.CODMNU\n                    AND M.FLGENABLED = 1\n                LEFT JOIN MENU_GRP G\n                    ON G.CODGRP = M.CODGRP\n                    AND COALESCE(G.FLGENABLED, 1) = 1\n                WHERE RU.CODUTE = ?\n            `;\n        let ruoliResult = await Orm.query(this.accessiOptions.databaseOptions, queryRuoli, [codiceUtente]);\n        ruoliResult = ruoliResult.map(RestUtilities.convertKeysToCamelCase);\n\n        const ruoliMap = new Map<number, Role>();\n        for (const row of ruoliResult) {\n            const { codiceRuolo, descrizioneRuolo, codiceMenu, descrizioneMenu, tipoAbilitazione } = row;\n\n            if (!ruoliMap.has(codiceRuolo)) {\n                ruoliMap.set(codiceRuolo, {\n                    codiceRuolo,\n                    descrizioneRuolo: descrizioneRuolo?.trim(),\n                    menu: []\n                });\n            }\n\n            if (codiceMenu && descrizioneMenu) {\n                ruoliMap.get(codiceRuolo)!.menu.push({\n                    codiceRuolo: codiceRuolo,\n                    codiceMenu: codiceMenu.trim(),\n                    tipoAbilitazione,\n                });\n            }\n        }\n\n        return Array.from(ruoliMap.values());\n    }\n\n\n    public async addAbilitazioni(codiceUtente: number, menuAbilitazioni: any[]): Promise<void> {\n        const deleteQuery = `DELETE FROM ABILITAZIONI WHERE CODUTE = ?`;\n        await Orm.execute(this.accessiOptions.databaseOptions, deleteQuery, [codiceUtente]);\n\n        const abilitazioniToInsert = menuAbilitazioni\n            .flatMap(menuGrp => menuGrp.menu)\n            .filter(menu => menu.flgChk)\n            .map(menu => [codiceUtente, menu.codiceMenu, menu.tipoAbilitazione]);\n\n        const insertQuery = `UPDATE OR INSERT INTO ABILITAZIONI (CODUTE, CODMNU, TIPABI) VALUES (?, ?, ?)`;\n\n        for (const params of abilitazioniToInsert) {\n            await Orm.execute(this.accessiOptions.databaseOptions, insertQuery, params);\n        }\n    }\n\n\n    public async resetAbilitazioni(codiceUtente: number): Promise<void> {\n        const query = \"DELETE FROM ABILITAZIONI WHERE CODUTE = ?\";\n        await Orm.execute(this.accessiOptions.databaseOptions, query, [codiceUtente]);\n    }\n\n    public async updateOrInsertRole(role: Role, codiceRuolo: number | null = null): Promise<void> {\n\n        // creazione nuovo ruolo\n        if (codiceRuolo == null) {\n            const createRoleQuery = `INSERT INTO RUOLI (DESRUO) VALUES (?)`;\n            await Orm.execute(this.accessiOptions.databaseOptions, createRoleQuery, [role.descrizioneRuolo]);\n\n            const createdRoleResult = await Orm.query(\n                this.accessiOptions.databaseOptions,\n                'SELECT FIRST 1 CODRUO FROM RUOLI WHERE DESRUO = ? ORDER BY CODRUO DESC',\n                [role.descrizioneRuolo]\n            );\n            const rawCodiceRuolo = createdRoleResult?.[0]?.CODRUO ?? createdRoleResult?.[0]?.codruo;\n            const parsedCodiceRuolo = typeof rawCodiceRuolo === 'number'\n                ? rawCodiceRuolo\n                : Number.parseInt(`${rawCodiceRuolo ?? ''}`, 10);\n            if (Number.isNaN(parsedCodiceRuolo)) {\n                throw new Error('Creazione ruolo non riuscita: impossibile recuperare CODRUO.');\n            }\n            codiceRuolo = parsedCodiceRuolo;\n        } else {\n            // aggiornamento ruolo esistente\n            const updateRoleQuery = `UPDATE RUOLI SET DESRUO = ? WHERE CODRUO = ?`;\n            await Orm.execute(this.accessiOptions.databaseOptions, updateRoleQuery, [role.descrizioneRuolo, codiceRuolo]);\n\n            const deleteRoleMenuQuery = `DELETE FROM RUOLI_MNU WHERE CODRUO = ?`;\n            await Orm.execute(this.accessiOptions.databaseOptions, deleteRoleMenuQuery, [codiceRuolo]);\n        }\n\n        if (codiceRuolo === null) {\n            throw new Error('Operazione ruolo non riuscita: codice ruolo non valorizzato.');\n        }\n\n        const createRoleMenuQuery = `INSERT INTO RUOLI_MNU (CODRUO, CODMNU, TIPABI) VALUES (?, ?, ?)`;\n        for (const menu of role.menu) {\n            await Orm.execute(this.accessiOptions.databaseOptions, createRoleMenuQuery, [codiceRuolo, menu.codiceMenu, menu.tipoAbilitazione]);\n        }\n\n    }\n\n\n    public async getRolesWithMenus(): Promise<Role[]> {\n        const query = `\n                SELECT \n                    R.CODRUO AS codice_ruolo, \n                    R.DESRUO AS descrizione_ruolo, \n                    M.CODMNU AS codice_menu, \n                    M.DESMNU AS descrizione_menu,\n                    M.NOTE AS note,\n                    RM.TIPABI AS tipo_abilitazione\n                FROM RUOLI R\n                LEFT JOIN RUOLI_MNU RM ON R.CODRUO = RM.CODRUO\n                LEFT JOIN MENU M ON RM.CODMNU = M.CODMNU\n                ORDER BY R.CODRUO, M.CODMNU\n            `;\n\n        let result = await Orm.query(this.accessiOptions.databaseOptions, query, []);\n        result = result.map(RestUtilities.convertKeysToCamelCase);\n\n        const ruoliMap = new Map<number, Role>();\n\n        for (const row of result) {\n            const { codiceRuolo, descrizioneRuolo, codiceMenu, descrizioneMenu, tipoAbilitazione } = row;\n\n            if (!ruoliMap.has(codiceRuolo)) {\n                ruoliMap.set(codiceRuolo, {\n                    codiceRuolo,\n                    descrizioneRuolo: descrizioneRuolo?.trim(),\n                    menu: []\n                });\n            }\n\n            const abilitationValue = typeof tipoAbilitazione === 'number'\n                ? tipoAbilitazione\n                : Number.parseInt(`${tipoAbilitazione ?? ''}`, 10);\n\n            if (!codiceMenu || Number.isNaN(abilitationValue) || abilitationValue <= TipoAbilitazione.NESSUNA) {\n                continue;\n            }\n\n            ruoliMap.get(codiceRuolo)!.menu.push({\n                codiceRuolo: codiceRuolo,\n                codiceMenu: codiceMenu.trim(),\n                tipoAbilitazione: abilitationValue as TipoAbilitazione,\n            });\n        }\n\n        return Array.from(ruoliMap.values());\n    }\n\n\n    public async assignRolesToUser(codiceUtente: number, roles: number[]): Promise<void> {\n\n        const userExistsQuery = `SELECT COUNT(*) FROM UTENTI WHERE CODUTE = ?`;\n        let result = await Orm.query(this.accessiOptions.databaseOptions, userExistsQuery, [codiceUtente]);\n\n        if (this.getCountFromResult(result) === 0) {\n            throw new Error(`L'utente con codice ${codiceUtente} non esiste.`);\n        }\n\n        const normalizedRoles = Array.from(\n            new Set(\n                roles\n                    .map((role) => Number.parseInt(`${role ?? ''}`, 10))\n                    .filter((role) => Number.isInteger(role) && role > 0),\n            ),\n        );\n\n        const queriesWithParams = [\n            { query: `DELETE FROM UTENTI_RUOLI WHERE CODUTE = ?`, params: [codiceUtente] },\n            ...normalizedRoles.map((codiceRuolo) => ({\n                query: `INSERT INTO UTENTI_RUOLI (CODUTE, CODRUO) VALUES (?, ?)`,\n                params: [codiceUtente, codiceRuolo],\n            })),\n        ];\n\n        if (normalizedRoles.length > 0) {\n            const roleExistsQuery = `SELECT COUNT(*) FROM RUOLI WHERE CODRUO = ?`;\n            for (const codiceRuolo of normalizedRoles) {\n                const roleResult = await Orm.query(this.accessiOptions.databaseOptions, roleExistsQuery, [codiceRuolo]);\n                if (this.getCountFromResult(roleResult) === 0) {\n                    throw new Error(`Il ruolo con codice ${codiceRuolo} non esiste.`);\n                }\n            }\n        }\n\n        await Orm.executeMultiple(this.accessiOptions.databaseOptions, queriesWithParams);\n\n        const assignedRolesResult = await Orm.query(\n            this.accessiOptions.databaseOptions,\n            `SELECT COUNT(*) FROM UTENTI_RUOLI WHERE CODUTE = ?`,\n            [codiceUtente],\n        );\n        const assignedRolesCount = this.getCountFromResult(assignedRolesResult);\n        if (assignedRolesCount !== normalizedRoles.length) {\n            throw new Error(\n                `Persistenza ruoli non coerente per utente ${codiceUtente}: attesi ${normalizedRoles.length}, trovati ${assignedRolesCount}.`,\n            );\n        }\n    }\n\n\n    public async assignPermissionsToUser(codiceUtente: number, permissions: Permission[]): Promise<void> {\n\n        const userExistsQuery = `SELECT COUNT(*) FROM UTENTI WHERE CODUTE = ?`;\n        let result = await Orm.query(this.accessiOptions.databaseOptions, userExistsQuery, [codiceUtente]);\n\n        if (this.getCountFromResult(result) === 0) {\n            throw new Error(`L'utente con codice ${codiceUtente} non esiste.`);\n        }\n\n        const normalizedPermissions = Array.from(\n            new Map(\n                permissions\n                    .map((permission) => ({\n                        codiceMenu: `${permission?.codiceMenu ?? ''}`.trim(),\n                        tipoAbilitazione: Number.parseInt(`${permission?.tipoAbilitazione ?? ''}`, 10),\n                    }))\n                    .filter(\n                        (permission) =>\n                            permission.codiceMenu.length > 0 && Number.isInteger(permission.tipoAbilitazione),\n                    )\n                    .map((permission) => [permission.codiceMenu, permission] as const),\n            ).values(),\n        );\n\n        const queriesWithParams = [\n            { query: `DELETE FROM ABILITAZIONI WHERE CODUTE = ?`, params: [codiceUtente] },\n            ...normalizedPermissions.map((permission) => ({\n                query: `INSERT INTO ABILITAZIONI (CODUTE, CODMNU, TIPABI) VALUES (?, ?, ?)`,\n                params: [codiceUtente, permission.codiceMenu, permission.tipoAbilitazione],\n            })),\n        ];\n\n        if (normalizedPermissions.length > 0) {\n            const menuExistsQuery = `SELECT COUNT(*) FROM MENU WHERE CODMNU = ?`;\n            for (const permission of normalizedPermissions) {\n                const menuResult = await Orm.query(this.accessiOptions.databaseOptions, menuExistsQuery, [permission.codiceMenu]);\n                if (this.getCountFromResult(menuResult) === 0) {\n                    throw new Error(`Il menu con codice ${permission.codiceMenu} non esiste.`);\n                }\n            }\n        }\n\n        await Orm.executeMultiple(this.accessiOptions.databaseOptions, queriesWithParams);\n\n        const assignedPermissionsResult = await Orm.query(\n            this.accessiOptions.databaseOptions,\n            `SELECT COUNT(*) FROM ABILITAZIONI WHERE CODUTE = ?`,\n            [codiceUtente],\n        );\n        const assignedPermissionsCount = this.getCountFromResult(assignedPermissionsResult);\n        if (assignedPermissionsCount !== normalizedPermissions.length) {\n            throw new Error(\n                `Persistenza abilitazioni non coerente per utente ${codiceUtente}: attese ${normalizedPermissions.length}, trovate ${assignedPermissionsCount}.`,\n            );\n        }\n    }\n\n\n    public async deleteRole(codiceRuolo: number): Promise<void> {\n\n        const existsQuery = `SELECT COUNT(*) FROM RUOLI WHERE CODRUO = ?`;\n        let result = await Orm.query(this.accessiOptions.databaseOptions, existsQuery, [codiceRuolo]);\n\n        if (result[0].COUNT === 0) {\n            throw new Error(`Il ruolo con codice ${codiceRuolo} non esiste.`);\n        }\n\n        const deleteRoleMenusQuery = `DELETE FROM RUOLI_MNU WHERE CODRUO = ?`;\n        await Orm.execute(this.accessiOptions.databaseOptions, deleteRoleMenusQuery, [codiceRuolo]);\n\n        const deleteRoleUsersQuery = `DELETE FROM UTENTI_RUOLI WHERE CODRUO = ?`;\n        await Orm.execute(this.accessiOptions.databaseOptions, deleteRoleUsersQuery, [codiceRuolo]);\n\n        const deleteRoleQuery = `DELETE FROM RUOLI WHERE CODRUO = ?`;\n        await Orm.execute(this.accessiOptions.databaseOptions, deleteRoleQuery, [codiceRuolo]);\n\n    }\n\n\n    public async getMenus(): Promise<MenuEntity[]> {\n        const query = `\n                SELECT \n                    M.CODMNU AS codiceMenu, \n                    M.DESMNU AS descrizioneMenu,\n                    M.CODGRP AS codiceGruppo,\n                    G.DESGRP AS descrizioneGruppo,\n                    M.ICON AS icona,\n                    M.CODTIP AS tipo,\n                    M.PAGINA AS pagina,\n                    M.NOTE AS note\n                FROM MENU M\n                LEFT JOIN MENU_GRP G ON M.CODGRP = G.CODGRP\n                WHERE M.FLGENABLED = 1\n                ORDER BY G.CODGRP, M.CODMNU\n            `;\n\n        const result = await Orm.query(this.accessiOptions.databaseOptions, query, []);\n        return result.map(RestUtilities.convertKeysToCamelCase);\n    }\n\n\n    public async getGroupsWithMenus(includeDisabled = false): Promise<GroupWithMenusEntity[]> {\n        const filtersClause = includeDisabled\n            ? ''\n            : 'WHERE M.FLGENABLED = 1 AND (G.FLGENABLED IS NULL OR G.FLGENABLED = 1)';\n\n        const query = `\n                SELECT\n                    M.CODMNU AS codice_menu,\n                    M.DESMNU AS descrizione_menu,\n                    M.CODGRP AS codice_gruppo,\n                    G.DESGRP AS descrizione_gruppo,\n                    M.ICON AS icona,\n                    M.CODTIP AS tipo,\n                    M.PAGINA AS pagina,\n                    M.NOTE AS note,\n                    G.ORDINE AS ordine_gruppo,\n                    M.ORDINE as ordine_menu,\n                    M.FLGENABLED AS menu_enabled,\n                    G.FLGENABLED AS group_enabled\n                FROM MENU M\n                LEFT JOIN MENU_GRP G ON M.CODGRP = G.CODGRP\n                ${filtersClause}\n                ORDER BY G.CODGRP, M.CODMNU\n            `;\n\n        const result = await Orm.query(this.accessiOptions.databaseOptions, query, []);\n\n        const groupMap = new Map<\n            string,\n            GroupWithMenusEntity & { menus: (MenuEntity & { enabled?: boolean })[] }\n        >();\n\n        result.forEach(row => {\n            const converted = RestUtilities.convertKeysToCamelCase(row) as MenuEntity & {\n                menuEnabled?: number | boolean;\n                groupEnabled?: number | boolean;\n            };\n\n            const { menuEnabled, groupEnabled, ...menuBase } = converted as any;\n            const normalizedGroupKey = menuBase.codiceGruppo ?? '__UNGROUPED__';\n            const groupEnabledFlag =\n                groupEnabled === undefined ? true : Number(groupEnabled) === 1 || groupEnabled === true;\n            const menuEnabledFlag =\n                menuEnabled === undefined ? true : Number(menuEnabled) === 1 || menuEnabled === true;\n\n            if (!groupMap.has(normalizedGroupKey)) {\n                groupMap.set(normalizedGroupKey, {\n                    codiceGruppo: menuBase.codiceGruppo ?? normalizedGroupKey,\n                    descrizioneGruppo: menuBase.descrizioneGruppo,\n                    ordineGruppo: menuBase.ordineGruppo,\n                    enabled: groupEnabledFlag,\n                    menus: [],\n                });\n            }\n\n            if (menuBase.codiceMenu) {\n                groupMap.get(normalizedGroupKey)!.menus.push({\n                    ...menuBase,\n                    enabled: menuEnabledFlag,\n                });\n            }\n        });\n\n        const groupsArray = Array.from(groupMap.values())\n            .map(group => ({\n                ...group,\n                menus: (group.menus ?? []).sort(\n                    (a, b) =>\n                        (a.ordineMenu ?? Number.MAX_SAFE_INTEGER) - (b.ordineMenu ?? Number.MAX_SAFE_INTEGER),\n                ),\n            }))\n            .sort(\n                (a, b) =>\n                    (a.ordineGruppo ?? Number.MAX_SAFE_INTEGER) - (b.ordineGruppo ?? Number.MAX_SAFE_INTEGER),\n            );\n\n        return groupsArray;\n    }\n\n\n\n    public async getUserRolesAndGrants(codiceUtente: number): Promise<{\n        abilitazioni: AbilitazioneMenu[],\n        ruoli: Role[],\n        grants: AbilitazioneMenu[]\n    }> {\n        const codiceUtenteQuery = \"SELECT FLGSUPER as flag_super FROM UTENTI_CONFIG WHERE CODUTE = ?\";\n        let result = await Orm.query(this.accessiOptions.databaseOptions, codiceUtenteQuery, [codiceUtente]);\n        if (!result || result.length == 0) throw new Error(\"Nessun utente trovato con il codice utente \" + codiceUtente);\n\n        result = result.map(RestUtilities.convertKeysToCamelCase) as { flagSuper: boolean }[];\n        const isSuperAdmin = result[0].flagSuper;\n\n        const abilitazioni = await this.getUserDirectPermissions(codiceUtente);\n        const ruoli = await this.getUserRoles(codiceUtente);\n\n        // Merge user-specific and role-based permissions\n        const grantsMap = new Map<string, AbilitazioneMenu>();\n\n        // Add user-specific permissions\n        for (const abilitazione of abilitazioni) {\n            grantsMap.set(abilitazione.codiceMenu, abilitazione);\n        }\n\n        // Add role-based permissions if not already present\n        for (const ruolo of ruoli) {\n            for (const menu of ruolo.menu) {\n                if (!grantsMap.has(menu.codiceMenu)) {\n                    grantsMap.set(menu.codiceMenu, menu);\n                }\n            }\n        }\n\n        const grants = isSuperAdmin\n            ? await this.getAllActiveMenusAsGrants()\n            : Array.from(grantsMap.values());\n\n        return { abilitazioni, ruoli, grants };\n    }\n\n\n\n}\n\n\n"]}
+{"version":3,"file":"PermissionService.js","sourceRoot":"","sources":["../../../../src/accessi-module/Services/PermissionService/PermissionService.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AACA,sCAAmC;AACnC,kDAAmD;AAEnD,qCAA0D;AAc1D,2CAAyE;AAYlE,IAAM,iBAAiB,GAAvB,MAAM,iBAAiB;IAC1B,YACgD,cAA8B;QAA9B,mBAAc,GAAd,cAAc,CAAgB;IAC1E,CAAC;IAEG,kBAAkB,CAAC,MAA8C,EAAE,SAAS,GAAG,OAAO;;QAC1F,MAAM,QAAQ,GAAG,MAAA,MAAA,MAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAG,CAAC,CAAC,0CAAG,SAAS,CAAC,mCAClC,MAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAG,CAAC,CAAC,0CAAG,SAAS,CAAC,WAAW,EAAE,CAAC,mCACtC,MAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAG,CAAC,CAAC,0CAAE,KAAK,CAAC;QAC1B,OAAO,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,QAAQ,aAAR,QAAQ,cAAR,QAAQ,GAAI,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;IAC/F,CAAC;IAEO,oBAAoB,CAAC,MAA8C,EAAE,SAAiB;QAC1F,OAAO,IAAI,GAAG,CACV,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,WAAC,OAAA,MAAM,CAAC,MAAA,GAAG,CAAC,SAAS,CAAC,mCAAI,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC,CAAA,EAAA,CAAC,CAC9E,CAAC;IACN,CAAC;IAEa,yBAAyB;;YACnC,MAAM,KAAK,GAAG;;;;;;;;;;;;;;aAcT,CAAC;YAEN,OAAO,MAAM,SAAG,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,eAAe,EAAE,KAAK,EAAE,EAAE,CAAC;iBACjE,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAa,CAAC,sBAAsB,CAAC,CAAuB,CAAC;QAClG,CAAC;KAAA;IAEa,wBAAwB,CAAC,YAAoB;;YACvD,MAAM,iBAAiB,GAAG;;;;;;;;;;;;;;;aAerB,CAAC;YAEN,OAAO,MAAM,SAAG,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,eAAe,EAAE,iBAAiB,EAAE,CAAC,YAAY,CAAC,CAAC;iBACzF,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAa,CAAC,sBAAsB,CAAC,CAAuB,CAAC;QAClG,CAAC;KAAA;IAEa,YAAY,CAAC,YAAoB;;YAC3C,MAAM,UAAU,GAAG;;;;;;;;;;;;;;;;;aAiBd,CAAC;YACN,MAAM,WAAW,GAAG,CAAC,MAAM,SAAG,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,eAAe,EAAE,UAAU,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;iBACjG,GAAG,CAAC,yBAAa,CAAC,sBAAsB,CAAmC,CAAC;YAEjF,OAAO,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC;QAC3C,CAAC;KAAA;IAED,iGAAiG;IACzF,aAAa,CAAC,WAA2C;QAC7D,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAgB,CAAC;QACzC,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;YAC5B,MAAM,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YAC5C,MAAM,gBAAgB,GAAG,OAAO,GAAG,CAAC,gBAAgB,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrG,MAAM,UAAU,GAAG,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACnF,MAAM,eAAe,GAAG,OAAO,GAAG,CAAC,eAAe,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAClG,MAAM,gBAAgB,GAAG,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAqB,CAAC;YAE1E,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC7B,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE;oBACtB,WAAW;oBACX,gBAAgB;oBAChB,IAAI,EAAE,EAAE;iBACX,CAAC,CAAC;YACP,CAAC;YAED,IAAI,UAAU,IAAI,eAAe,EAAE,CAAC;gBAChC,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAE,CAAC,IAAI,CAAC,IAAI,CAAC;oBACjC,WAAW;oBACX,UAAU;oBACV,gBAAgB;iBACnB,CAAC,CAAC;YACP,CAAC;QACL,CAAC;QAED,OAAO,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACzC,CAAC;IAED,wGAAwG;IAChG,aAAa,CACjB,YAAgC,EAChC,KAAa,EACb,YAAqB,EACrB,cAAkC;QAElC,MAAM,SAAS,GAAG,IAAI,GAAG,EAA4B,CAAC;QAEtD,KAAK,MAAM,YAAY,IAAI,YAAY,EAAE,CAAC;YACtC,SAAS,CAAC,GAAG,CAAC,YAAY,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;QACzD,CAAC;QAED,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;QAC7E,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;YACxB,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;gBAC5B,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gBAChD,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC;oBACrC,CAAC,CAAC,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,EAAE,CAAC;oBACnF,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;gBACzC,CAAC;YACL,CAAC;QACL,CAAC;QAED,OAAO,YAAY,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;IAC1E,CAAC;IAGD;;;OAGG;IACU,eAAe,CAAC,YAAoB,EAAE,gBAAmC;;YAClF,MAAM,oBAAoB,GAAG,gBAAgB;iBACxC,OAAO,CAAC,OAAO,CAAC,EAAE,WAAC,OAAA,MAAA,OAAO,CAAC,IAAI,mCAAI,EAAE,CAAA,EAAA,CAAC;iBACtC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC;iBAC3B,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,YAAY,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC;YAEzE,MAAM,WAAW,GAAG,8EAA8E,CAAC;YAEnG,oFAAoF;YACpF,MAAM,SAAG,CAAC,eAAe,CAAC,IAAI,CAAC,cAAc,CAAC,eAAe,EAAE;gBAC3D,EAAE,KAAK,EAAE,2CAA2C,EAAE,MAAM,EAAE,CAAC,YAAY,CAAC,EAAE;gBAC9E,GAAG,oBAAoB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC;aAC1E,CAAC,CAAC;QACP,CAAC;KAAA;IAGD,qFAAqF;IACxE,iBAAiB,CAAC,YAAoB;;YAC/C,MAAM,KAAK,GAAG,2CAA2C,CAAC;YAC1D,MAAM,SAAG,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,eAAe,EAAE,KAAK,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;QAClF,CAAC;KAAA;IAED;;;OAGG;IACU,kBAAkB;6DAAC,IAAU,EAAE,cAA6B,IAAI;YACzE,6GAA6G;YAC7G,MAAM,SAAG,CAAC,eAAe,CAAC,IAAI,CAAC,cAAc,CAAC,eAAe,EAAE,CAAO,WAAW,EAAE,EAAE;;gBACjF,IAAI,mBAAmB,GAAG,WAAW,CAAC;gBAEtC,IAAI,mBAAmB,IAAI,IAAI,EAAE,CAAC;oBAC9B,MAAM,iBAAiB,GAAG,MAAM,SAAG,CAAC,gBAAgB,CAChD,WAAW,EACX,wDAAwD,EACxD,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAC1B,CAAC;oBACF,MAAM,WAAW,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAwC,CAAC;oBACzI,MAAM,cAAc,GAAG,MAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,MAAM,mCAAI,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,MAAM,CAAC;oBAClE,MAAM,iBAAiB,GAAG,OAAO,cAAc,KAAK,QAAQ;wBACxD,CAAC,CAAC,cAAc;wBAChB,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,cAAc,aAAd,cAAc,cAAd,cAAc,GAAI,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;oBACrD,IAAI,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,CAAC;wBAClC,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;oBACpF,CAAC;oBACD,mBAAmB,GAAG,iBAAiB,CAAC;gBAC5C,CAAC;qBAAM,CAAC;oBACJ,MAAM,SAAG,CAAC,gBAAgB,CACtB,WAAW,EACX,8CAA8C,EAC9C,CAAC,IAAI,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,CAC/C,CAAC;oBAEF,MAAM,SAAG,CAAC,gBAAgB,CACtB,WAAW,EACX,wCAAwC,EACxC,CAAC,mBAAmB,CAAC,CACxB,CAAC;gBACN,CAAC;gBAED,IAAI,mBAAmB,KAAK,IAAI,EAAE,CAAC;oBAC/B,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;gBACpF,CAAC;gBAED,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;oBAC3B,MAAM,SAAG,CAAC,gBAAgB,CACtB,WAAW,EACX,iEAAiE,EACjE,CAAC,mBAAmB,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAChE,CAAC;gBACN,CAAC;YACL,CAAC,CAAA,CAAC,CAAC;QACP,CAAC;KAAA;IAGD,oGAAoG;IACvF,iBAAiB;;YAC1B,MAAM,KAAK,GAAG;;;;;;;;;;;;aAYT,CAAC;YAEN,MAAM,MAAM,GAAG,CAAC,MAAM,SAAG,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,eAAe,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;iBAC3E,GAAG,CAAC,yBAAa,CAAC,sBAAsB,CAAmC,CAAC;YAEjF,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAgB,CAAC;YAEzC,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;gBACvB,MAAM,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;gBAC5C,MAAM,gBAAgB,GAAG,OAAO,GAAG,CAAC,gBAAgB,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrG,MAAM,UAAU,GAAG,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;gBACnF,MAAM,mBAAmB,GAAG,GAAG,CAAC,gBAAgB,CAAC;gBAEjD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;oBAC7B,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE;wBACtB,WAAW;wBACX,gBAAgB;wBAChB,IAAI,EAAE,EAAE;qBACX,CAAC,CAAC;gBACP,CAAC;gBAED,MAAM,gBAAgB,GAAG,OAAO,mBAAmB,KAAK,QAAQ;oBAC5D,CAAC,CAAC,mBAAmB;oBACrB,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,mBAAmB,aAAnB,mBAAmB,cAAnB,mBAAmB,GAAI,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;gBAE1D,IAAI,CAAC,UAAU,IAAI,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,IAAI,gBAAgB,IAAI,uBAAgB,CAAC,OAAO,EAAE,CAAC;oBAChG,SAAS;gBACb,CAAC;gBAED,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAE,CAAC,IAAI,CAAC,IAAI,CAAC;oBACjC,WAAW;oBACX,UAAU;oBACV,gBAAgB,EAAE,gBAAoC;iBACzD,CAAC,CAAC;YACP,CAAC;YAED,OAAO,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QACzC,CAAC;KAAA;IAGD;;;OAGG;IACU,iBAAiB,CAAC,YAAoB,EAAE,KAAe;;YAEhE,MAAM,eAAe,GAAG,8CAA8C,CAAC;YACvE,IAAI,MAAM,GAAG,MAAM,SAAG,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,eAAe,EAAE,eAAe,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;YAEnG,IAAI,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;gBACxC,MAAM,IAAI,KAAK,CAAC,uBAAuB,YAAY,cAAc,CAAC,CAAC;YACvE,CAAC;YAED,MAAM,eAAe,GAAG,KAAK,CAAC,IAAI,CAC9B,IAAI,GAAG,CACH,KAAK;iBACA,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,IAAI,aAAJ,IAAI,cAAJ,IAAI,GAAI,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;iBACnD,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,CAC5D,CACJ,CAAC;YAEF,MAAM,iBAAiB,GAAG;gBACtB,EAAE,KAAK,EAAE,2CAA2C,EAAE,MAAM,EAAE,CAAC,YAAY,CAAC,EAAE;gBAC9E,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;oBACrC,KAAK,EAAE,yDAAyD;oBAChE,MAAM,EAAE,CAAC,YAAY,EAAE,WAAW,CAAC;iBACtC,CAAC,CAAC;aACN,CAAC;YAEF,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC7B,4EAA4E;gBAC5E,MAAM,YAAY,GAAG,eAAe,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC/D,MAAM,mBAAmB,GAAG,MAAM,SAAG,CAAC,KAAK,CACvC,IAAI,CAAC,cAAc,CAAC,eAAe,EACnC,6CAA6C,YAAY,GAAG,EAC5D,eAAe,CAClB,CAAC;gBACF,MAAM,aAAa,GAAG,IAAI,CAAC,oBAAoB,CAAC,mBAAmB,EAAE,QAAQ,CAAC,CAAC;gBAC/E,MAAM,WAAW,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC;gBAC3F,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;oBAC5B,MAAM,IAAI,KAAK,CAAC,uBAAuB,WAAW,cAAc,CAAC,CAAC;gBACtE,CAAC;YACL,CAAC;YAED,MAAM,SAAG,CAAC,eAAe,CAAC,IAAI,CAAC,cAAc,CAAC,eAAe,EAAE,iBAAiB,CAAC,CAAC;YAElF,MAAM,mBAAmB,GAAG,MAAM,SAAG,CAAC,KAAK,CACvC,IAAI,CAAC,cAAc,CAAC,eAAe,EACnC,oDAAoD,EACpD,CAAC,YAAY,CAAC,CACjB,CAAC;YACF,MAAM,kBAAkB,GAAG,IAAI,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAC;YACxE,IAAI,kBAAkB,KAAK,eAAe,CAAC,MAAM,EAAE,CAAC;gBAChD,MAAM,IAAI,KAAK,CACX,6CAA6C,YAAY,YAAY,eAAe,CAAC,MAAM,aAAa,kBAAkB,GAAG,CAChI,CAAC;YACN,CAAC;QACL,CAAC;KAAA;IAGD;;;OAGG;IACU,uBAAuB,CAAC,YAAoB,EAAE,WAAyB;;YAEhF,MAAM,eAAe,GAAG,8CAA8C,CAAC;YACvE,IAAI,MAAM,GAAG,MAAM,SAAG,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,eAAe,EAAE,eAAe,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;YAEnG,IAAI,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;gBACxC,MAAM,IAAI,KAAK,CAAC,uBAAuB,YAAY,cAAc,CAAC,CAAC;YACvE,CAAC;YAED,MAAM,qBAAqB,GAAG,KAAK,CAAC,IAAI,CACpC,IAAI,GAAG,CACH,WAAW;iBACN,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE;;gBAAC,OAAA,CAAC;oBAClB,UAAU,EAAE,GAAG,MAAA,UAAU,aAAV,UAAU,uBAAV,UAAU,CAAE,UAAU,mCAAI,EAAE,EAAE,CAAC,IAAI,EAAE;oBACpD,gBAAgB,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAA,UAAU,aAAV,UAAU,uBAAV,UAAU,CAAE,gBAAgB,mCAAI,EAAE,EAAE,EAAE,EAAE,CAAC;iBACjF,CAAC,CAAA;aAAA,CAAC;iBACF,MAAM,CACH,CAAC,UAAU,EAAE,EAAE,CACX,UAAU,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,gBAAgB,CAAC,CACxF;iBACA,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,UAAU,EAAE,UAAU,CAAU,CAAC,CACzE,CAAC,MAAM,EAAE,CACb,CAAC;YAEF,MAAM,iBAAiB,GAAG;gBACtB,EAAE,KAAK,EAAE,2CAA2C,EAAE,MAAM,EAAE,CAAC,YAAY,CAAC,EAAE;gBAC9E,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;oBAC1C,KAAK,EAAE,oEAAoE;oBAC3E,MAAM,EAAE,CAAC,YAAY,EAAE,UAAU,CAAC,UAAU,EAAE,UAAU,CAAC,gBAAgB,CAAC;iBAC7E,CAAC,CAAC;aACN,CAAC;YAEF,IAAI,qBAAqB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACnC,4EAA4E;gBAC5E,MAAM,SAAS,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;gBACnF,MAAM,YAAY,GAAG,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACzD,MAAM,mBAAmB,GAAG,MAAM,SAAG,CAAC,KAAK,CACvC,IAAI,CAAC,cAAc,CAAC,eAAe,EACnC,4CAA4C,YAAY,GAAG,EAC3D,SAAS,CACZ,CAAC;gBACF,MAAM,aAAa,GAAG,IAAI,GAAG,CACzB,mBAAmB,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,eAAC,OAAA,MAAM,CAAC,MAAA,MAAC,GAA+B,CAAC,MAAM,mCAAK,GAA+B,CAAC,MAAM,mCAAI,EAAE,CAAC,CAAA,EAAA,CAAC,CACrI,CAAC;gBACF,MAAM,WAAW,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;gBACnF,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;oBAC5B,MAAM,IAAI,KAAK,CAAC,sBAAsB,WAAW,cAAc,CAAC,CAAC;gBACrE,CAAC;YACL,CAAC;YAED,MAAM,SAAG,CAAC,eAAe,CAAC,IAAI,CAAC,cAAc,CAAC,eAAe,EAAE,iBAAiB,CAAC,CAAC;YAElF,MAAM,yBAAyB,GAAG,MAAM,SAAG,CAAC,KAAK,CAC7C,IAAI,CAAC,cAAc,CAAC,eAAe,EACnC,oDAAoD,EACpD,CAAC,YAAY,CAAC,CACjB,CAAC;YACF,MAAM,wBAAwB,GAAG,IAAI,CAAC,kBAAkB,CAAC,yBAAyB,CAAC,CAAC;YACpF,IAAI,wBAAwB,KAAK,qBAAqB,CAAC,MAAM,EAAE,CAAC;gBAC5D,MAAM,IAAI,KAAK,CACX,oDAAoD,YAAY,YAAY,qBAAqB,CAAC,MAAM,aAAa,wBAAwB,GAAG,CACnJ,CAAC;YACN,CAAC;QACL,CAAC;KAAA;IAGD,mHAAmH;IACtG,UAAU,CAAC,WAAmB;;YAEvC,MAAM,WAAW,GAAG,6CAA6C,CAAC;YAClE,MAAM,MAAM,GAAG,MAAM,SAAG,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,eAAe,EAAE,WAAW,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;YAEhG,IAAI,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;gBACxC,MAAM,IAAI,KAAK,CAAC,uBAAuB,WAAW,cAAc,CAAC,CAAC;YACtE,CAAC;YAED,oEAAoE;YACpE,MAAM,SAAG,CAAC,eAAe,CAAC,IAAI,CAAC,cAAc,CAAC,eAAe,EAAE;gBAC3D,EAAE,KAAK,EAAE,wCAAwC,EAAE,MAAM,EAAE,CAAC,WAAW,CAAC,EAAE;gBAC1E,EAAE,KAAK,EAAE,2CAA2C,EAAE,MAAM,EAAE,CAAC,WAAW,CAAC,EAAE;gBAC7E,EAAE,KAAK,EAAE,oCAAoC,EAAE,MAAM,EAAE,CAAC,WAAW,CAAC,EAAE;aACzE,CAAC,CAAC;QAEP,CAAC;KAAA;IAGD,wGAAwG;IAC3F,QAAQ;;YACjB,MAAM,KAAK,GAAG;;;;;;;;;;;;;;aAcT,CAAC;YAEN,MAAM,MAAM,GAAG,MAAM,SAAG,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,eAAe,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;YAC/E,OAAO,MAAM,CAAC,GAAG,CAAC,yBAAa,CAAC,sBAAsB,CAA4B,CAAC;QACvF,CAAC;KAAA;IAGD;;;OAGG;IACU,kBAAkB;6DAAC,eAAe,GAAG,KAAK;YACnD,MAAM,aAAa,GAAG,eAAe;gBACjC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,uEAAuE,CAAC;YAE9E,MAAM,KAAK,GAAG;;;;;;;;;;;;;;;;kBAgBJ,aAAa;;aAElB,CAAC;YAEN,MAAM,MAAM,GAAG,MAAM,SAAG,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,eAAe,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;YAE/E,MAAM,QAAQ,GAAG,IAAI,GAAG,EAGrB,CAAC;YAEJ,MAAM,CAAC,OAAO,CAAC,CAAC,GAAY,EAAE,EAAE;;gBAC5B,MAAM,SAAS,GAAG,yBAAa,CAAC,sBAAsB,CAAC,GAAG,CAGzD,CAAC;gBAEF,MAAM,EAAE,WAAW,EAAE,YAAY,KAAkB,SAAS,EAAtB,QAAQ,UAAK,SAAS,EAAtD,+BAA0C,CAAY,CAAC;gBAC7D,MAAM,kBAAkB,GAAG,MAAA,QAAQ,CAAC,YAAY,mCAAI,eAAe,CAAC;gBACpE,MAAM,gBAAgB,GAClB,YAAY,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,YAAY,KAAK,IAAI,CAAC;gBACtF,MAAM,eAAe,GACjB,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,WAAW,KAAK,IAAI,CAAC;gBAEzF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,kBAAkB,CAAC,EAAE,CAAC;oBACpC,QAAQ,CAAC,GAAG,CAAC,kBAAkB,EAAE;wBAC7B,YAAY,EAAE,MAAA,QAAQ,CAAC,YAAY,mCAAI,kBAAkB;wBACzD,iBAAiB,EAAE,MAAA,QAAQ,CAAC,iBAAiB,mCAAI,EAAE;wBACnD,YAAY,EAAE,QAAQ,CAAC,YAAY;wBACnC,OAAO,EAAE,gBAAgB;wBACzB,KAAK,EAAE,EAAE;qBACZ,CAAC,CAAC;gBACP,CAAC;gBAED,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;oBACtB,QAAQ,CAAC,GAAG,CAAC,kBAAkB,CAAE,CAAC,KAAK,CAAC,IAAI,iCACrC,QAAQ,KACX,OAAO,EAAE,eAAe,IAC1B,CAAC;gBACP,CAAC;YACL,CAAC,CAAC,CAAC;YAEH,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;iBAC5C,GAAG,CAAC,KAAK,CAAC,EAAE;;gBAAC,OAAA,iCACP,KAAK,KACR,KAAK,EAAE,CAAC,MAAA,KAAK,CAAC,KAAK,mCAAI,EAAE,CAAC,CAAC,IAAI,CAC3B,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,eACL,OAAA,CAAC,MAAA,CAAC,CAAC,UAAU,mCAAI,MAAM,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAA,CAAC,CAAC,UAAU,mCAAI,MAAM,CAAC,gBAAgB,CAAC,CAAA,EAAA,CAC5F,IACH,CAAA;aAAA,CAAC;iBACF,IAAI,CACD,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,eACL,OAAA,CAAC,MAAA,CAAC,CAAC,YAAY,mCAAI,MAAM,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAA,CAAC,CAAC,YAAY,mCAAI,MAAM,CAAC,gBAAgB,CAAC,CAAA,EAAA,CAChG,CAAC;YAEN,OAAO,WAAW,CAAC;QACvB,CAAC;KAAA;IAED,0EAA0E;IAC1E,gEAAgE;IAChE,uEAAuE;IACvE,6EAA6E;IAC7E,0EAA0E;IAE5D,UAAU,CAAC,KAAa,EAAE,MAAc,EAAE,KAAc;;YAClE,MAAM,MAAM,GAAG,MAAM,SAAG,CAAC,KAAK,CAC1B,IAAI,CAAC,cAAc,CAAC,eAAe,EACnC,wBAAwB,KAAK,UAAU,MAAM,MAAM,EACnD,CAAC,KAAK,CAAC,CACV,CAAC;YACF,OAAO,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAC3C,CAAC;KAAA;IAEa,qBAAqB,CAAC,YAAoB;;YACpD,IAAI,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;gBACpE,MAAM,IAAI,4BAAmB,CAAC,kBAAkB,YAAY,cAAc,CAAC,CAAC;YAChF,CAAC;QACL,CAAC;KAAA;IAEa,oBAAoB,CAAC,UAAkB;;YACjD,IAAI,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;gBACnE,MAAM,IAAI,4BAAmB,CAAC,gBAAgB,UAAU,cAAc,CAAC,CAAC;YAC5E,CAAC;QACL,CAAC;KAAA;IAED,6EAA6E;IAChE,YAAY;;YACrB,MAAM,KAAK,GAAG,yFAAyF,CAAC;YACxG,MAAM,MAAM,GAAG,MAAM,SAAG,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,eAAe,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;YAC/E,OAAO,MAAM,CAAC,GAAG,CAAC,yBAAa,CAAC,sBAAsB,CAAgC,CAAC;QAC3F,CAAC;KAAA;IAEY,cAAc,CAAC,KAA4B;;;YACpD,IAAI,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,QAAQ,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;gBACvE,MAAM,IAAI,4BAAmB,CAAC,gBAAgB,KAAK,CAAC,UAAU,cAAc,CAAC,CAAC;YAClF,CAAC;YACD,MAAM,SAAG,CAAC,OAAO,CACb,IAAI,CAAC,cAAc,CAAC,eAAe,EACnC,sDAAsD,EACtD,CAAC,KAAK,CAAC,UAAU,EAAE,MAAA,KAAK,CAAC,eAAe,mCAAI,IAAI,CAAC,CACpD,CAAC;QACN,CAAC;KAAA;IAEY,cAAc,CAAC,UAAkB,EAAE,KAA4B;;YACxE,MAAM,IAAI,CAAC,oBAAoB,CAAC,UAAU,CAAC,CAAC;YAC5C,IAAI,KAAK,CAAC,eAAe,KAAK,SAAS;gBAAE,OAAO;YAChD,MAAM,SAAG,CAAC,OAAO,CACb,IAAI,CAAC,cAAc,CAAC,eAAe,EACnC,kDAAkD,EAClD,CAAC,KAAK,CAAC,eAAe,EAAE,UAAU,CAAC,CACtC,CAAC;QACN,CAAC;KAAA;IAED,4FAA4F;IAC/E,cAAc,CAAC,UAAkB;;YAC1C,MAAM,IAAI,CAAC,oBAAoB,CAAC,UAAU,CAAC,CAAC;YAC5C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;YACjE,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;gBACX,MAAM,IAAI,4BAAmB,CACzB,iCAAiC,UAAU,KAAK,IAAI,sBAAsB,CAC7E,CAAC;YACN,CAAC;YACD,MAAM,SAAG,CAAC,OAAO,CACb,IAAI,CAAC,cAAc,CAAC,eAAe,EACnC,wCAAwC,EACxC,CAAC,UAAU,CAAC,CACf,CAAC;QACN,CAAC;KAAA;IAEY,eAAe,CAAC,KAA6B;;;YACtD,IAAI,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,QAAQ,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;gBACxE,MAAM,IAAI,4BAAmB,CAAC,kBAAkB,KAAK,CAAC,YAAY,cAAc,CAAC,CAAC;YACtF,CAAC;YACD,MAAM,SAAG,CAAC,OAAO,CACb,IAAI,CAAC,cAAc,CAAC,eAAe,EACnC,6FAA6F,EAC7F;gBACI,KAAK,CAAC,YAAY;gBAClB,MAAA,KAAK,CAAC,iBAAiB,mCAAI,IAAI;gBAC/B,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC/B,MAAA,KAAK,CAAC,YAAY,mCAAI,CAAC;gBACvB,MAAA,KAAK,CAAC,SAAS,mCAAI,IAAI;aAC1B,CACJ,CAAC;QACN,CAAC;KAAA;IAEY,eAAe,CAAC,YAAoB,EAAE,KAA6B;;YAC5E,MAAM,IAAI,CAAC,qBAAqB,CAAC,YAAY,CAAC,CAAC;YAE/C,MAAM,IAAI,GAAa,EAAE,CAAC;YAC1B,MAAM,MAAM,GAAc,EAAE,CAAC;YAC7B,IAAI,KAAK,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;gBACxC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;gBACxB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;YACzC,CAAC;YACD,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;gBACnC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;gBACxB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YACpC,CAAC;YACD,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC9B,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;gBAC5B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACvC,CAAC;YACD,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBAChC,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;gBAC3B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YACjC,CAAC;YACD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO;YAE9B,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAC1B,MAAM,SAAG,CAAC,OAAO,CACb,IAAI,CAAC,cAAc,CAAC,eAAe,EACnC,uBAAuB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,mBAAmB,EACzD,MAAM,CACT,CAAC;QACN,CAAC;KAAA;IAED,iFAAiF;IACpE,eAAe,CAAC,YAAoB;;YAC7C,MAAM,IAAI,CAAC,qBAAqB,CAAC,YAAY,CAAC,CAAC;YAC/C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;YACnE,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;gBACX,MAAM,IAAI,4BAAmB,CACzB,mCAAmC,YAAY,cAAc,IAAI,QAAQ,CAC5E,CAAC;YACN,CAAC;YACD,MAAM,SAAG,CAAC,OAAO,CACb,IAAI,CAAC,cAAc,CAAC,eAAe,EACnC,uCAAuC,EACvC,CAAC,YAAY,CAAC,CACjB,CAAC;QACN,CAAC;KAAA;IAEY,UAAU,CAAC,KAAwB;;;YAC5C,IAAI,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;gBAClE,MAAM,IAAI,4BAAmB,CAAC,WAAW,KAAK,CAAC,UAAU,cAAc,CAAC,CAAC;YAC7E,CAAC;YACD,MAAM,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YACrD,IAAI,KAAK,CAAC,IAAI;gBAAE,MAAM,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAE5D,MAAM,SAAG,CAAC,OAAO,CACb,IAAI,CAAC,cAAc,CAAC,eAAe,EACnC;mDACuC,EACvC;gBACI,KAAK,CAAC,UAAU;gBAChB,MAAA,KAAK,CAAC,eAAe,mCAAI,IAAI;gBAC7B,KAAK,CAAC,YAAY;gBAClB,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC/B,MAAA,KAAK,CAAC,KAAK,mCAAI,IAAI;gBACnB,MAAA,KAAK,CAAC,UAAU,mCAAI,IAAI;gBACxB,MAAA,KAAK,CAAC,IAAI,mCAAI,IAAI;gBAClB,MAAA,KAAK,CAAC,MAAM,mCAAI,IAAI;gBACpB,MAAA,KAAK,CAAC,OAAO,mCAAI,IAAI;gBACrB,MAAA,KAAK,CAAC,IAAI,mCAAI,IAAI;aACrB,CACJ,CAAC;QACN,CAAC;KAAA;IAEY,UAAU,CAAC,UAAkB,EAAE,KAAwB;;YAChE,IAAI,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC9D,MAAM,IAAI,4BAAmB,CAAC,WAAW,UAAU,cAAc,CAAC,CAAC;YACvE,CAAC;YACD,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS;gBAAE,MAAM,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YAC3F,IAAI,KAAK,CAAC,IAAI;gBAAE,MAAM,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAE5D,MAAM,IAAI,GAAa,EAAE,CAAC;YAC1B,MAAM,MAAM,GAAc,EAAE,CAAC;YAC7B,IAAI,KAAK,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;gBACtC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;gBACxB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;YACvC,CAAC;YACD,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;gBACnC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;gBACxB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YACpC,CAAC;YACD,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC3B,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;gBACxB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC;YACpC,CAAC;YACD,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC5B,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gBACtB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC7B,CAAC;YACD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC7B,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;gBACxB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAC9B,CAAC;YACD,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;gBACjC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;gBACxB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YAClC,CAAC;YACD,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC9B,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;gBAC5B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACvC,CAAC;YACD,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC9B,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;gBACzB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC/B,CAAC;YACD,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC3B,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gBACtB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC5B,CAAC;YACD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO;YAE9B,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACxB,MAAM,SAAG,CAAC,OAAO,CACb,IAAI,CAAC,cAAc,CAAC,eAAe,EACnC,mBAAmB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,mBAAmB,EACrD,MAAM,CACT,CAAC;QACN,CAAC;KAAA;IAED,+EAA+E;IAClE,UAAU,CAAC,UAAkB;;YACtC,IAAI,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC9D,MAAM,IAAI,4BAAmB,CAAC,WAAW,UAAU,cAAc,CAAC,CAAC;YACvE,CAAC;YACD,MAAM,SAAG,CAAC,eAAe,CAAC,IAAI,CAAC,cAAc,CAAC,eAAe,EAAE;gBAC3D,EAAE,KAAK,EAAE,2CAA2C,EAAE,MAAM,EAAE,CAAC,UAAU,CAAC,EAAE;gBAC5E,EAAE,KAAK,EAAE,wCAAwC,EAAE,MAAM,EAAE,CAAC,UAAU,CAAC,EAAE;gBACzE,EAAE,KAAK,EAAE,mCAAmC,EAAE,MAAM,EAAE,CAAC,UAAU,CAAC,EAAE;aACvE,CAAC,CAAC;QACP,CAAC;KAAA;IAGD;;;OAGG;IACU,qBAAqB,CAAC,YAAoB;;;YAKnD,MAAM,iBAAiB,GAAG,mEAAmE,CAAC;YAC9F,MAAM,MAAM,GAAG,MAAM,SAAG,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,eAAe,EAAE,iBAAiB,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;YACvG,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,GAAG,YAAY,CAAC,CAAC;YAEjH,MAAM,YAAY,GAAG,IAAI,CAAC,WAAW,CACjC,MAAC,MAAM,CAAC,GAAG,CAAC,yBAAa,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAyC,0CAAE,SAAS,CAC1G,CAAC;YAEF,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC,YAAY,CAAC,CAAC;YACvE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;YACpD,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAC7B,YAAY,EACZ,KAAK,EACL,YAAY,EACZ,YAAY,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,yBAAyB,EAAE,CAAC,CAAC,CAAC,EAAE,CAC7D,CAAC;YAEF,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAC3C,CAAC;KAAA;IAEO,WAAW,CAAC,KAAc;QAC9B,OAAO,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,CAAC,IAAI,KAAK,KAAK,GAAG,CAAC;IAC1D,CAAC;IAED;;;;OAIG;IACU,sBAAsB,CAAC,YAAsB;;;YAKtD,MAAM,MAAM,GAAG,IAAI,GAAG,EAA2F,CAAC;YAClH,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7F,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACnB,OAAO,MAAM,CAAC;YAClB,CAAC;YAED,MAAM,YAAY,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAEnD,MAAM,SAAS,GAAG,CAAC,MAAM,SAAG,CAAC,KAAK,CAC9B,IAAI,CAAC,cAAc,CAAC,eAAe,EACnC,8FAA8F,YAAY,GAAG,EAC7G,GAAG,CACN,CAAC,CAAC,GAAG,CAAC,yBAAa,CAAC,sBAAsB,CAAmC,CAAC;YAC/E,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;YACrC,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;gBAC1B,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;oBAClC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC;gBAC7C,CAAC;YACL,CAAC;YAED,MAAM,cAAc,GAAG,CAAC,MAAM,SAAG,CAAC,KAAK,CACnC,IAAI,CAAC,cAAc,CAAC,eAAe,EACnC;;;;;;;;;;;;;;iCAcqB,YAAY,0DAA0D,EAC3F,GAAG,CACN,CAAC,CAAC,GAAG,CAAC,yBAAa,CAAC,sBAAsB,CAAmC,CAAC;YAE/E,MAAM,QAAQ,GAAG,CAAC,MAAM,SAAG,CAAC,KAAK,CAC7B,IAAI,CAAC,cAAc,CAAC,eAAe,EACnC;;;;;;;;;;;;;kCAasB,YAAY,GAAG,EACrC,GAAG,CACN,CAAC,CAAC,GAAG,CAAC,yBAAa,CAAC,sBAAsB,CAAmC,CAAC;YAE/E,MAAM,cAAc,GAAG,UAAU,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,yBAAyB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAEzF,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAA8B,CAAC;YAChE,KAAK,MAAM,GAAG,IAAI,cAAc,EAAE,CAAC;gBAC/B,MAAM,EAAE,YAAY,KAAe,GAAG,EAAb,KAAK,UAAK,GAAG,EAAhC,gBAA0B,CAAM,CAAC;gBACvC,MAAM,GAAG,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC;gBACjC,MAAM,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBAC1C,IAAI,MAAM,EAAE,CAAC;oBACT,MAAM,CAAC,IAAI,CAAC,KAAoC,CAAC,CAAC;gBACtD,CAAC;qBAAM,CAAC;oBACJ,iBAAiB,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,KAAoC,CAAC,CAAC,CAAC;gBACvE,CAAC;YACL,CAAC;YAED,MAAM,WAAW,GAAG,IAAI,GAAG,EAA0C,CAAC;YACtE,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;gBACzB,MAAM,EAAE,YAAY,KAAiB,GAAG,EAAf,OAAO,UAAK,GAAG,EAAlC,gBAA4B,CAAM,CAAC;gBACzC,MAAM,GAAG,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC;gBACjC,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACpC,IAAI,MAAM,EAAE,CAAC;oBACT,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACzB,CAAC;qBAAM,CAAC;oBACJ,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;gBACpC,CAAC;YACL,CAAC;YAED,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;gBACnB,MAAM,YAAY,GAAG,MAAA,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC,mCAAI,EAAE,CAAC;gBACrD,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,MAAA,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,mCAAI,EAAE,CAAC,CAAC;gBAC5D,MAAM,YAAY,GAAG,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACxC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE;oBACX,YAAY;oBACZ,KAAK;oBACL,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,YAAY,EAAE,KAAK,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;iBACpG,CAAC,CAAC;YACP,CAAC;YAED,OAAO,MAAM,CAAC;QAClB,CAAC;KAAA;CAIJ,CAAA;AA14BY,8CAAiB;4BAAjB,iBAAiB;IAD7B,IAAA,mBAAU,GAAE;IAGJ,WAAA,IAAA,eAAM,EAAC,iBAAiB,CAAC,CAAA;;GAFrB,iBAAiB,CA04B7B","sourcesContent":["\r\nimport { Orm } from \"../../../Orm\";\r\nimport { RestUtilities } from \"../../../Utilities\";\r\nimport type { AccessiOptions } from \"../../AccessiModule\";\r\nimport { Permission, TipoAbilitazione } from \"../../Dtos\";\r\nimport { AbilitazioneMenu } from \"../../Dtos/AbilitazioneMenu\";\r\nimport { GroupWithMenusEntity } from \"../../Dtos/GetGroupsWithMenusResponse\";\r\nimport { MenuEntity } from \"../../Dtos/GetMenusResponse\";\r\nimport { Role } from \"../../Dtos/Role\";\r\nimport {\r\n    CreateMenuGroupRequest,\r\n    CreateMenuRequest,\r\n    CreateMenuTypeRequest,\r\n    MenuTypeEntity,\r\n    UpdateMenuGroupRequest,\r\n    UpdateMenuRequest,\r\n    UpdateMenuTypeRequest,\r\n} from \"../../Dtos/CatalogDtos\";\r\nimport { BadRequestException, Inject, Injectable } from \"@nestjs/common\";\r\n\r\n/** Struttura storica menu/gruppi accettata dall'API legacy `addAbilitazioni`. */\r\ntype LegacyMenuGroup = {\r\n    menu?: Array<{\r\n        flgChk?: unknown;\r\n        codiceMenu?: unknown;\r\n        tipoAbilitazione?: unknown;\r\n    }>;\r\n};\r\n\r\n@Injectable()\r\nexport class PermissionService {\r\n    constructor(\r\n        @Inject('ACCESSI_OPTIONS') private readonly accessiOptions: AccessiOptions\r\n    ) { }\r\n\r\n    private getCountFromResult(result: ReadonlyArray<Record<string, unknown>>, fieldName = 'COUNT'): number {\r\n        const rawValue = result?.[0]?.[fieldName]\r\n            ?? result?.[0]?.[fieldName.toLowerCase()]\r\n            ?? result?.[0]?.count;\r\n        return typeof rawValue === 'number' ? rawValue : Number.parseInt(`${rawValue ?? '0'}`, 10);\r\n    }\r\n\r\n    private extractIntegerColumn(result: ReadonlyArray<Record<string, unknown>>, fieldName: string): Set<number> {\r\n        return new Set(\r\n            result.map((row) => Number(row[fieldName] ?? row[fieldName.toLowerCase()])),\r\n        );\r\n    }\r\n\r\n    private async getAllActiveMenusAsGrants(): Promise<AbilitazioneMenu[]> {\r\n        const query = `\r\n                SELECT\r\n                    M.CODMNU AS codice_menu,\r\n                    30 AS tipo_abilitazione,\r\n                    M.DESMNU AS descrizione_menu,\r\n                    G.DESGRP AS descrizione_gruppo,\r\n                    G.CODGRP AS codice_gruppo,\r\n                    M.ICON AS icona,\r\n                    M.CODTIP AS tipo,\r\n                    M.PAGINA AS pagina,\r\n                    M.NOTE AS note\r\n                FROM MENU M\r\n                LEFT JOIN MENU_GRP G ON G.CODGRP = M.CODGRP\r\n                WHERE M.FLGENABLED = 1 AND COALESCE(G.FLGENABLED, 1) = 1\r\n            `;\r\n\r\n        return await Orm.query(this.accessiOptions.databaseOptions, query, [])\r\n            .then(results => results.map(RestUtilities.convertKeysToCamelCase)) as AbilitazioneMenu[];\r\n    }\r\n\r\n    private async getUserDirectPermissions(codiceUtente: number): Promise<AbilitazioneMenu[]> {\r\n        const queryAbilitazioni = `\r\n                SELECT\r\n                    A.CODMNU AS codice_menu,\r\n                    A.TIPABI AS tipo_abilitazione,\r\n                    M.DESMNU AS descrizione_menu,\r\n                    G.DESGRP AS descrizione_gruppo,\r\n                    G.CODGRP AS codice_gruppo,\r\n                    M.ICON AS icona,\r\n                    M.CODTIP AS tipo,\r\n                    M.PAGINA AS pagina,\r\n                    M.NOTE AS note\r\n                FROM ABILITAZIONI A\r\n                INNER JOIN MENU M ON A.CODMNU = M.CODMNU\r\n                LEFT JOIN MENU_GRP G ON G.CODGRP = M.CODGRP\r\n                WHERE A.CODUTE = ? AND M.FLGENABLED = 1 AND COALESCE(G.FLGENABLED, 1) = 1\r\n            `;\r\n\r\n        return await Orm.query(this.accessiOptions.databaseOptions, queryAbilitazioni, [codiceUtente])\r\n            .then(results => results.map(RestUtilities.convertKeysToCamelCase)) as AbilitazioneMenu[];\r\n    }\r\n\r\n    private async getUserRoles(codiceUtente: number): Promise<Role[]> {\r\n        const queryRuoli = `\r\n                SELECT\r\n                    R.CODRUO AS codice_ruolo,\r\n                    R.DESRUO AS descrizione_ruolo,\r\n                    CASE WHEN COALESCE(G.FLGENABLED, 1) = 1 THEN M.CODMNU END AS codice_menu,\r\n                    RM.TIPABI AS tipo_abilitazione,\r\n                    M.DESMNU AS descrizione_menu,\r\n                    M.NOTE AS note\r\n                FROM UTENTI_RUOLI RU\r\n                INNER JOIN RUOLI R ON RU.CODRUO = R.CODRUO\r\n                LEFT JOIN RUOLI_MNU RM ON R.CODRUO = RM.CODRUO\r\n                LEFT JOIN MENU M\r\n                    ON RM.CODMNU = M.CODMNU\r\n                    AND M.FLGENABLED = 1\r\n                LEFT JOIN MENU_GRP G\r\n                    ON G.CODGRP = M.CODGRP\r\n                WHERE RU.CODUTE = ?\r\n            `;\r\n        const ruoliResult = (await Orm.query(this.accessiOptions.databaseOptions, queryRuoli, [codiceUtente]))\r\n            .map(RestUtilities.convertKeysToCamelCase) as Array<Record<string, unknown>>;\r\n\r\n        return this.assembleRoles(ruoliResult);\r\n    }\r\n\r\n    /** Costruisce l'albero ruoli/menu a partire dalle righe (riusato da lettura singola e batch). */\r\n    private assembleRoles(ruoliResult: Array<Record<string, unknown>>): Role[] {\r\n        const ruoliMap = new Map<number, Role>();\r\n        for (const row of ruoliResult) {\r\n            const codiceRuolo = Number(row.codiceRuolo);\r\n            const descrizioneRuolo = typeof row.descrizioneRuolo === 'string' ? row.descrizioneRuolo.trim() : '';\r\n            const codiceMenu = typeof row.codiceMenu === 'string' ? row.codiceMenu : undefined;\r\n            const descrizioneMenu = typeof row.descrizioneMenu === 'string' ? row.descrizioneMenu : undefined;\r\n            const tipoAbilitazione = Number(row.tipoAbilitazione) as TipoAbilitazione;\r\n\r\n            if (!ruoliMap.has(codiceRuolo)) {\r\n                ruoliMap.set(codiceRuolo, {\r\n                    codiceRuolo,\r\n                    descrizioneRuolo,\r\n                    menu: []\r\n                });\r\n            }\r\n\r\n            if (codiceMenu && descrizioneMenu) {\r\n                ruoliMap.get(codiceRuolo)!.menu.push({\r\n                    codiceRuolo,\r\n                    codiceMenu,\r\n                    tipoAbilitazione,\r\n                });\r\n            }\r\n        }\r\n\r\n        return Array.from(ruoliMap.values());\r\n    }\r\n\r\n    /** Regola di composizione storica: grant diretti prevalgono, i ruoli si sommano per livello massimo. */\r\n    private composeGrants(\r\n        abilitazioni: AbilitazioneMenu[],\r\n        ruoli: Role[],\r\n        isSuperAdmin: boolean,\r\n        allActiveMenus: AbilitazioneMenu[],\r\n    ): AbilitazioneMenu[] {\r\n        const grantsMap = new Map<string, AbilitazioneMenu>();\r\n\r\n        for (const abilitazione of abilitazioni) {\r\n            grantsMap.set(abilitazione.codiceMenu, abilitazione);\r\n        }\r\n\r\n        const directMenuCodes = new Set(abilitazioni.map(grant => grant.codiceMenu));\r\n        for (const ruolo of ruoli) {\r\n            for (const menu of ruolo.menu) {\r\n                const existing = grantsMap.get(menu.codiceMenu);\r\n                if (!directMenuCodes.has(menu.codiceMenu) &&\r\n                    (!existing || Number(menu.tipoAbilitazione) > Number(existing.tipoAbilitazione))) {\r\n                    grantsMap.set(menu.codiceMenu, menu);\r\n                }\r\n            }\r\n        }\r\n\r\n        return isSuperAdmin ? allActiveMenus : Array.from(grantsMap.values());\r\n    }\r\n\r\n\r\n    /**\r\n     * API legacy per salvare grant dalla struttura storica menu/gruppi.\r\n     * Sostituisce tutti i grant diretti dell'utente; per le nuove integrazioni preferire `assignPermissionsToUser`.\r\n     */\r\n    public async addAbilitazioni(codiceUtente: number, menuAbilitazioni: LegacyMenuGroup[]): Promise<void> {\r\n        const abilitazioniToInsert = menuAbilitazioni\r\n            .flatMap(menuGrp => menuGrp.menu ?? [])\r\n            .filter(menu => menu.flgChk)\r\n            .map(menu => [codiceUtente, menu.codiceMenu, menu.tipoAbilitazione]);\r\n\r\n        const insertQuery = `UPDATE OR INSERT INTO ABILITAZIONI (CODUTE, CODMNU, TIPABI) VALUES (?, ?, ?)`;\r\n\r\n        // Delete + insert atomici: un errore a metà non lascia l'utente senza abilitazioni.\r\n        await Orm.executeMultiple(this.accessiOptions.databaseOptions, [\r\n            { query: `DELETE FROM ABILITAZIONI WHERE CODUTE = ?`, params: [codiceUtente] },\r\n            ...abilitazioniToInsert.map(params => ({ query: insertQuery, params })),\r\n        ]);\r\n    }\r\n\r\n\r\n    /** Rimuove tutti i grant diretti, senza toccare ruoli o menu ereditati dai ruoli. */\r\n    public async resetAbilitazioni(codiceUtente: number): Promise<void> {\r\n        const query = \"DELETE FROM ABILITAZIONI WHERE CODUTE = ?\";\r\n        await Orm.execute(this.accessiOptions.databaseOptions, query, [codiceUtente]);\r\n    }\r\n\r\n    /**\r\n     * Crea o aggiorna un ruolo. In aggiornamento la lista `role.menu` sostituisce integralmente i menu del ruolo.\r\n     * Validare i codici menu nel chiamante quando si usano dati non provenienti dalla console o dalle API Accessi.\r\n     */\r\n    public async updateOrInsertRole(role: Role, codiceRuolo: number | null = null): Promise<void> {\r\n        // Ruolo, sostituzione menu e inserimenti in un'unica transazione: niente ruoli senza menu in caso di errore.\r\n        await Orm.withTransaction(this.accessiOptions.databaseOptions, async (transaction) => {\r\n            let resolvedCodiceRuolo = codiceRuolo;\r\n\r\n            if (resolvedCodiceRuolo == null) {\r\n                const createdRoleResult = await Orm.transactionQuery<unknown>(\r\n                    transaction,\r\n                    `INSERT INTO RUOLI (DESRUO) VALUES (?) RETURNING CODRUO`,\r\n                    [role.descrizioneRuolo],\r\n                );\r\n                const createdRole = (Array.isArray(createdRoleResult) ? createdRoleResult[0] : createdRoleResult) as Record<string, unknown> | undefined;\r\n                const rawCodiceRuolo = createdRole?.CODRUO ?? createdRole?.codruo;\r\n                const parsedCodiceRuolo = typeof rawCodiceRuolo === 'number'\r\n                    ? rawCodiceRuolo\r\n                    : Number.parseInt(`${rawCodiceRuolo ?? ''}`, 10);\r\n                if (Number.isNaN(parsedCodiceRuolo)) {\r\n                    throw new Error('Creazione ruolo non riuscita: impossibile recuperare CODRUO.');\r\n                }\r\n                resolvedCodiceRuolo = parsedCodiceRuolo;\r\n            } else {\r\n                await Orm.transactionQuery(\r\n                    transaction,\r\n                    `UPDATE RUOLI SET DESRUO = ? WHERE CODRUO = ?`,\r\n                    [role.descrizioneRuolo, resolvedCodiceRuolo],\r\n                );\r\n\r\n                await Orm.transactionQuery(\r\n                    transaction,\r\n                    `DELETE FROM RUOLI_MNU WHERE CODRUO = ?`,\r\n                    [resolvedCodiceRuolo],\r\n                );\r\n            }\r\n\r\n            if (resolvedCodiceRuolo === null) {\r\n                throw new Error('Operazione ruolo non riuscita: codice ruolo non valorizzato.');\r\n            }\r\n\r\n            for (const menu of role.menu) {\r\n                await Orm.transactionQuery(\r\n                    transaction,\r\n                    `INSERT INTO RUOLI_MNU (CODRUO, CODMNU, TIPABI) VALUES (?, ?, ?)`,\r\n                    [resolvedCodiceRuolo, menu.codiceMenu, menu.tipoAbilitazione],\r\n                );\r\n            }\r\n        });\r\n    }\r\n\r\n\r\n    /** Restituisce il catalogo ruoli con ogni associazione menu e livello, inclusi ruoli senza menu. */\r\n    public async getRolesWithMenus(): Promise<Role[]> {\r\n        const query = `\r\n                SELECT \r\n                    R.CODRUO AS codice_ruolo, \r\n                    R.DESRUO AS descrizione_ruolo, \r\n                    M.CODMNU AS codice_menu, \r\n                    M.DESMNU AS descrizione_menu,\r\n                    M.NOTE AS note,\r\n                    RM.TIPABI AS tipo_abilitazione\r\n                FROM RUOLI R\r\n                LEFT JOIN RUOLI_MNU RM ON R.CODRUO = RM.CODRUO\r\n                LEFT JOIN MENU M ON RM.CODMNU = M.CODMNU\r\n                ORDER BY R.CODRUO, M.CODMNU\r\n            `;\r\n\r\n        const result = (await Orm.query(this.accessiOptions.databaseOptions, query, []))\r\n            .map(RestUtilities.convertKeysToCamelCase) as Array<Record<string, unknown>>;\r\n\r\n        const ruoliMap = new Map<number, Role>();\r\n\r\n        for (const row of result) {\r\n            const codiceRuolo = Number(row.codiceRuolo);\r\n            const descrizioneRuolo = typeof row.descrizioneRuolo === 'string' ? row.descrizioneRuolo.trim() : '';\r\n            const codiceMenu = typeof row.codiceMenu === 'string' ? row.codiceMenu : undefined;\r\n            const rawTipoAbilitazione = row.tipoAbilitazione;\r\n\r\n            if (!ruoliMap.has(codiceRuolo)) {\r\n                ruoliMap.set(codiceRuolo, {\r\n                    codiceRuolo,\r\n                    descrizioneRuolo,\r\n                    menu: []\r\n                });\r\n            }\r\n\r\n            const abilitationValue = typeof rawTipoAbilitazione === 'number'\r\n                ? rawTipoAbilitazione\r\n                : Number.parseInt(`${rawTipoAbilitazione ?? ''}`, 10);\r\n\r\n            if (!codiceMenu || Number.isNaN(abilitationValue) || abilitationValue <= TipoAbilitazione.NESSUNA) {\r\n                continue;\r\n            }\r\n\r\n            ruoliMap.get(codiceRuolo)!.menu.push({\r\n                codiceRuolo,\r\n                codiceMenu,\r\n                tipoAbilitazione: abilitationValue as TipoAbilitazione,\r\n            });\r\n        }\r\n\r\n        return Array.from(ruoliMap.values());\r\n    }\r\n\r\n\r\n    /**\r\n     * Sostituisce l'intera lista di ruoli dell'utente con codici univoci e verificati.\r\n     * Non modifica i grant diretti: il calcolo effettivo li unisce in `getUserRolesAndGrants`.\r\n     */\r\n    public async assignRolesToUser(codiceUtente: number, roles: number[]): Promise<void> {\r\n\r\n        const userExistsQuery = `SELECT COUNT(*) FROM UTENTI WHERE CODUTE = ?`;\r\n        let result = await Orm.query(this.accessiOptions.databaseOptions, userExistsQuery, [codiceUtente]);\r\n\r\n        if (this.getCountFromResult(result) === 0) {\r\n            throw new Error(`L'utente con codice ${codiceUtente} non esiste.`);\r\n        }\r\n\r\n        const normalizedRoles = Array.from(\r\n            new Set(\r\n                roles\r\n                    .map((role) => Number.parseInt(`${role ?? ''}`, 10))\r\n                    .filter((role) => Number.isInteger(role) && role > 0),\r\n            ),\r\n        );\r\n\r\n        const queriesWithParams = [\r\n            { query: `DELETE FROM UTENTI_RUOLI WHERE CODUTE = ?`, params: [codiceUtente] },\r\n            ...normalizedRoles.map((codiceRuolo) => ({\r\n                query: `INSERT INTO UTENTI_RUOLI (CODUTE, CODRUO) VALUES (?, ?)`,\r\n                params: [codiceUtente, codiceRuolo],\r\n            })),\r\n        ];\r\n\r\n        if (normalizedRoles.length > 0) {\r\n            // Un'unica query IN invece di N count: stessa validazione, meno round-trip.\r\n            const placeholders = normalizedRoles.map(() => '?').join(', ');\r\n            const existingRolesResult = await Orm.query(\r\n                this.accessiOptions.databaseOptions,\r\n                `SELECT CODRUO FROM RUOLI WHERE CODRUO IN (${placeholders})`,\r\n                normalizedRoles,\r\n            );\r\n            const existingRoles = this.extractIntegerColumn(existingRolesResult, 'CODRUO');\r\n            const missingRole = normalizedRoles.find((codiceRuolo) => !existingRoles.has(codiceRuolo));\r\n            if (missingRole !== undefined) {\r\n                throw new Error(`Il ruolo con codice ${missingRole} non esiste.`);\r\n            }\r\n        }\r\n\r\n        await Orm.executeMultiple(this.accessiOptions.databaseOptions, queriesWithParams);\r\n\r\n        const assignedRolesResult = await Orm.query(\r\n            this.accessiOptions.databaseOptions,\r\n            `SELECT COUNT(*) FROM UTENTI_RUOLI WHERE CODUTE = ?`,\r\n            [codiceUtente],\r\n        );\r\n        const assignedRolesCount = this.getCountFromResult(assignedRolesResult);\r\n        if (assignedRolesCount !== normalizedRoles.length) {\r\n            throw new Error(\r\n                `Persistenza ruoli non coerente per utente ${codiceUtente}: attesi ${normalizedRoles.length}, trovati ${assignedRolesCount}.`,\r\n            );\r\n        }\r\n    }\r\n\r\n\r\n    /**\r\n     * Sostituisce tutti i grant diretti dell'utente. I ruoli rimangono invariati e i loro grant sono aggiunti\r\n     * solo nel risultato effettivo; un grant diretto dello stesso menu ha precedenza nella composizione.\r\n     */\r\n    public async assignPermissionsToUser(codiceUtente: number, permissions: Permission[]): Promise<void> {\r\n\r\n        const userExistsQuery = `SELECT COUNT(*) FROM UTENTI WHERE CODUTE = ?`;\r\n        let result = await Orm.query(this.accessiOptions.databaseOptions, userExistsQuery, [codiceUtente]);\r\n\r\n        if (this.getCountFromResult(result) === 0) {\r\n            throw new Error(`L'utente con codice ${codiceUtente} non esiste.`);\r\n        }\r\n\r\n        const normalizedPermissions = Array.from(\r\n            new Map(\r\n                permissions\r\n                    .map((permission) => ({\r\n                        codiceMenu: `${permission?.codiceMenu ?? ''}`.trim(),\r\n                        tipoAbilitazione: Number.parseInt(`${permission?.tipoAbilitazione ?? ''}`, 10),\r\n                    }))\r\n                    .filter(\r\n                        (permission) =>\r\n                            permission.codiceMenu.length > 0 && Number.isInteger(permission.tipoAbilitazione),\r\n                    )\r\n                    .map((permission) => [permission.codiceMenu, permission] as const),\r\n            ).values(),\r\n        );\r\n\r\n        const queriesWithParams = [\r\n            { query: `DELETE FROM ABILITAZIONI WHERE CODUTE = ?`, params: [codiceUtente] },\r\n            ...normalizedPermissions.map((permission) => ({\r\n                query: `INSERT INTO ABILITAZIONI (CODUTE, CODMNU, TIPABI) VALUES (?, ?, ?)`,\r\n                params: [codiceUtente, permission.codiceMenu, permission.tipoAbilitazione],\r\n            })),\r\n        ];\r\n\r\n        if (normalizedPermissions.length > 0) {\r\n            // Un'unica query IN invece di N count: stessa validazione, meno round-trip.\r\n            const menuCodes = normalizedPermissions.map((permission) => permission.codiceMenu);\r\n            const placeholders = menuCodes.map(() => '?').join(', ');\r\n            const existingMenusResult = await Orm.query(\r\n                this.accessiOptions.databaseOptions,\r\n                `SELECT CODMNU FROM MENU WHERE CODMNU IN (${placeholders})`,\r\n                menuCodes,\r\n            );\r\n            const existingMenus = new Set(\r\n                existingMenusResult.map((row) => String((row as Record<string, unknown>).CODMNU ?? (row as Record<string, unknown>).codmnu ?? '')),\r\n            );\r\n            const missingMenu = menuCodes.find((codiceMenu) => !existingMenus.has(codiceMenu));\r\n            if (missingMenu !== undefined) {\r\n                throw new Error(`Il menu con codice ${missingMenu} non esiste.`);\r\n            }\r\n        }\r\n\r\n        await Orm.executeMultiple(this.accessiOptions.databaseOptions, queriesWithParams);\r\n\r\n        const assignedPermissionsResult = await Orm.query(\r\n            this.accessiOptions.databaseOptions,\r\n            `SELECT COUNT(*) FROM ABILITAZIONI WHERE CODUTE = ?`,\r\n            [codiceUtente],\r\n        );\r\n        const assignedPermissionsCount = this.getCountFromResult(assignedPermissionsResult);\r\n        if (assignedPermissionsCount !== normalizedPermissions.length) {\r\n            throw new Error(\r\n                `Persistenza abilitazioni non coerente per utente ${codiceUtente}: attese ${normalizedPermissions.length}, trovate ${assignedPermissionsCount}.`,\r\n            );\r\n        }\r\n    }\r\n\r\n\r\n    /** Elimina fisicamente ruolo, associazioni menu e assegnazioni utente. Operazione amministrativa irreversibile. */\r\n    public async deleteRole(codiceRuolo: number): Promise<void> {\r\n\r\n        const existsQuery = `SELECT COUNT(*) FROM RUOLI WHERE CODRUO = ?`;\r\n        const result = await Orm.query(this.accessiOptions.databaseOptions, existsQuery, [codiceRuolo]);\r\n\r\n        if (this.getCountFromResult(result) === 0) {\r\n            throw new Error(`Il ruolo con codice ${codiceRuolo} non esiste.`);\r\n        }\r\n\r\n        // Le tre delete sono atomiche: nessun ruolo orfano se una fallisce.\r\n        await Orm.executeMultiple(this.accessiOptions.databaseOptions, [\r\n            { query: `DELETE FROM RUOLI_MNU WHERE CODRUO = ?`, params: [codiceRuolo] },\r\n            { query: `DELETE FROM UTENTI_RUOLI WHERE CODRUO = ?`, params: [codiceRuolo] },\r\n            { query: `DELETE FROM RUOLI WHERE CODRUO = ?`, params: [codiceRuolo] },\r\n        ]);\r\n\r\n    }\r\n\r\n\r\n    /** Restituisce solo menu abilitati; per il catalogo amministrativo usare `getGroupsWithMenus(true)`. */\r\n    public async getMenus(): Promise<MenuEntity[]> {\r\n        const query = `\r\n                SELECT \r\n                    M.CODMNU AS codiceMenu, \r\n                    M.DESMNU AS descrizioneMenu,\r\n                    M.CODGRP AS codiceGruppo,\r\n                    G.DESGRP AS descrizioneGruppo,\r\n                    M.ICON AS icona,\r\n                    M.CODTIP AS tipo,\r\n                    M.PAGINA AS pagina,\r\n                    M.NOTE AS note\r\n                FROM MENU M\r\n                LEFT JOIN MENU_GRP G ON M.CODGRP = G.CODGRP\r\n                WHERE M.FLGENABLED = 1 AND COALESCE(G.FLGENABLED, 1) = 1\r\n                ORDER BY G.CODGRP, M.CODMNU\r\n            `;\r\n\r\n        const result = await Orm.query(this.accessiOptions.databaseOptions, query, []);\r\n        return result.map(RestUtilities.convertKeysToCamelCase) as unknown as MenuEntity[];\r\n    }\r\n\r\n\r\n    /**\r\n     * Restituisce il catalogo ordinato per gruppo e menu. `includeDisabled` e riservato a console e amministrazione:\r\n     * i flussi applicativi di autorizzazione devono usare il comportamento predefinito, che nasconde voci disabilitate.\r\n     */\r\n    public async getGroupsWithMenus(includeDisabled = false): Promise<GroupWithMenusEntity[]> {\r\n        const filtersClause = includeDisabled\r\n            ? ''\r\n            : 'WHERE M.FLGENABLED = 1 AND (G.FLGENABLED IS NULL OR G.FLGENABLED = 1)';\r\n\r\n        const query = `\r\n                SELECT\r\n                    M.CODMNU AS codice_menu,\r\n                    M.DESMNU AS descrizione_menu,\r\n                    M.CODGRP AS codice_gruppo,\r\n                    G.DESGRP AS descrizione_gruppo,\r\n                    M.ICON AS icona,\r\n                    M.CODTIP AS tipo,\r\n                    M.PAGINA AS pagina,\r\n                    M.NOTE AS note,\r\n                    G.ORDINE AS ordine_gruppo,\r\n                    M.ORDINE as ordine_menu,\r\n                    M.FLGENABLED AS menu_enabled,\r\n                    G.FLGENABLED AS group_enabled\r\n                FROM MENU M\r\n                LEFT JOIN MENU_GRP G ON M.CODGRP = G.CODGRP\r\n                ${filtersClause}\r\n                ORDER BY G.CODGRP, M.CODMNU\r\n            `;\r\n\r\n        const result = await Orm.query(this.accessiOptions.databaseOptions, query, []);\r\n\r\n        const groupMap = new Map<\r\n            string,\r\n            GroupWithMenusEntity & { menus: (MenuEntity & { enabled?: boolean })[] }\r\n        >();\r\n\r\n        result.forEach((row: unknown) => {\r\n            const converted = RestUtilities.convertKeysToCamelCase(row) as MenuEntity & {\r\n                menuEnabled?: number | boolean;\r\n                groupEnabled?: number | boolean;\r\n            };\r\n\r\n            const { menuEnabled, groupEnabled, ...menuBase } = converted;\r\n            const normalizedGroupKey = menuBase.codiceGruppo ?? '__UNGROUPED__';\r\n            const groupEnabledFlag =\r\n                groupEnabled == null ? true : Number(groupEnabled) === 1 || groupEnabled === true;\r\n            const menuEnabledFlag =\r\n                menuEnabled === undefined ? true : Number(menuEnabled) === 1 || menuEnabled === true;\r\n\r\n            if (!groupMap.has(normalizedGroupKey)) {\r\n                groupMap.set(normalizedGroupKey, {\r\n                    codiceGruppo: menuBase.codiceGruppo ?? normalizedGroupKey,\r\n                    descrizioneGruppo: menuBase.descrizioneGruppo ?? '',\r\n                    ordineGruppo: menuBase.ordineGruppo,\r\n                    enabled: groupEnabledFlag,\r\n                    menus: [],\r\n                });\r\n            }\r\n\r\n            if (menuBase.codiceMenu) {\r\n                groupMap.get(normalizedGroupKey)!.menus.push({\r\n                    ...menuBase,\r\n                    enabled: menuEnabledFlag,\r\n                });\r\n            }\r\n        });\r\n\r\n        const groupsArray = Array.from(groupMap.values())\r\n            .map(group => ({\r\n                ...group,\r\n                menus: (group.menus ?? []).sort(\r\n                    (a, b) =>\r\n                        (a.ordineMenu ?? Number.MAX_SAFE_INTEGER) - (b.ordineMenu ?? Number.MAX_SAFE_INTEGER),\r\n                ),\r\n            }))\r\n            .sort(\r\n                (a, b) =>\r\n                    (a.ordineGruppo ?? Number.MAX_SAFE_INTEGER) - (b.ordineGruppo ?? Number.MAX_SAFE_INTEGER),\r\n            );\r\n\r\n        return groupsArray;\r\n    }\r\n\r\n    // -----------------------------------------------------------------------\r\n    // Cataloghi di configurazione: CRUD di menu, gruppi, tipi menu.\r\n    // `table` e `column` sono sempre costanti interne, mai input utente: i\r\n    // valori sono parametrizzati, quindi non esiste superficie di SQL injection.\r\n    // -----------------------------------------------------------------------\r\n\r\n    private async countWhere(table: string, column: string, value: unknown): Promise<number> {\r\n        const result = await Orm.query(\r\n            this.accessiOptions.databaseOptions,\r\n            `SELECT COUNT(*) FROM ${table} WHERE ${column} = ?`,\r\n            [value],\r\n        );\r\n        return this.getCountFromResult(result);\r\n    }\r\n\r\n    private async assertMenuGroupExists(codiceGruppo: string): Promise<void> {\r\n        if ((await this.countWhere('MENU_GRP', 'CODGRP', codiceGruppo)) === 0) {\r\n            throw new BadRequestException(`Il gruppo menu ${codiceGruppo} non esiste.`);\r\n        }\r\n    }\r\n\r\n    private async assertMenuTypeExists(codiceTipo: string): Promise<void> {\r\n        if ((await this.countWhere('MENU_TIPI', 'CODTIP', codiceTipo)) === 0) {\r\n            throw new BadRequestException(`Il tipo menu ${codiceTipo} non esiste.`);\r\n        }\r\n    }\r\n\r\n    /** Catalogo completo dei tipi menu, usato dagli editor di configurazione. */\r\n    public async getMenuTypes(): Promise<MenuTypeEntity[]> {\r\n        const query = `SELECT CODTIP AS codice_tipo, DESTIP AS descrizione_tipo FROM MENU_TIPI ORDER BY CODTIP`;\r\n        const result = await Orm.query(this.accessiOptions.databaseOptions, query, []);\r\n        return result.map(RestUtilities.convertKeysToCamelCase) as unknown as MenuTypeEntity[];\r\n    }\r\n\r\n    public async createMenuType(input: CreateMenuTypeRequest): Promise<void> {\r\n        if ((await this.countWhere('MENU_TIPI', 'CODTIP', input.codiceTipo)) > 0) {\r\n            throw new BadRequestException(`Il tipo menu ${input.codiceTipo} esiste gia.`);\r\n        }\r\n        await Orm.execute(\r\n            this.accessiOptions.databaseOptions,\r\n            `INSERT INTO MENU_TIPI (CODTIP, DESTIP) VALUES (?, ?)`,\r\n            [input.codiceTipo, input.descrizioneTipo ?? null],\r\n        );\r\n    }\r\n\r\n    public async updateMenuType(codiceTipo: string, input: UpdateMenuTypeRequest): Promise<void> {\r\n        await this.assertMenuTypeExists(codiceTipo);\r\n        if (input.descrizioneTipo === undefined) return;\r\n        await Orm.execute(\r\n            this.accessiOptions.databaseOptions,\r\n            `UPDATE MENU_TIPI SET DESTIP = ? WHERE CODTIP = ?`,\r\n            [input.descrizioneTipo, codiceTipo],\r\n        );\r\n    }\r\n\r\n    /** Elimina un tipo menu solo se nessun menu lo utilizza (la FK lo impedirebbe comunque). */\r\n    public async deleteMenuType(codiceTipo: string): Promise<void> {\r\n        await this.assertMenuTypeExists(codiceTipo);\r\n        const used = await this.countWhere('MENU', 'CODTIP', codiceTipo);\r\n        if (used > 0) {\r\n            throw new BadRequestException(\r\n                `Impossibile eliminare il tipo ${codiceTipo}: ${used} menu lo utilizzano.`,\r\n            );\r\n        }\r\n        await Orm.execute(\r\n            this.accessiOptions.databaseOptions,\r\n            `DELETE FROM MENU_TIPI WHERE CODTIP = ?`,\r\n            [codiceTipo],\r\n        );\r\n    }\r\n\r\n    public async createMenuGroup(input: CreateMenuGroupRequest): Promise<void> {\r\n        if ((await this.countWhere('MENU_GRP', 'CODGRP', input.codiceGruppo)) > 0) {\r\n            throw new BadRequestException(`Il gruppo menu ${input.codiceGruppo} esiste gia.`);\r\n        }\r\n        await Orm.execute(\r\n            this.accessiOptions.databaseOptions,\r\n            `INSERT INTO MENU_GRP (CODGRP, DESGRP, FLGENABLED, ORDINE, NOMECAMPO) VALUES (?, ?, ?, ?, ?)`,\r\n            [\r\n                input.codiceGruppo,\r\n                input.descrizioneGruppo ?? null,\r\n                input.enabled === false ? 0 : 1,\r\n                input.ordineGruppo ?? 0,\r\n                input.nomeCampo ?? null,\r\n            ],\r\n        );\r\n    }\r\n\r\n    public async updateMenuGroup(codiceGruppo: string, input: UpdateMenuGroupRequest): Promise<void> {\r\n        await this.assertMenuGroupExists(codiceGruppo);\r\n\r\n        const sets: string[] = [];\r\n        const params: unknown[] = [];\r\n        if (input.descrizioneGruppo !== undefined) {\r\n            sets.push('DESGRP = ?');\r\n            params.push(input.descrizioneGruppo);\r\n        }\r\n        if (input.ordineGruppo !== undefined) {\r\n            sets.push('ORDINE = ?');\r\n            params.push(input.ordineGruppo);\r\n        }\r\n        if (input.enabled !== undefined) {\r\n            sets.push('FLGENABLED = ?');\r\n            params.push(input.enabled ? 1 : 0);\r\n        }\r\n        if (input.nomeCampo !== undefined) {\r\n            sets.push('NOMECAMPO = ?');\r\n            params.push(input.nomeCampo);\r\n        }\r\n        if (sets.length === 0) return;\r\n\r\n        params.push(codiceGruppo);\r\n        await Orm.execute(\r\n            this.accessiOptions.databaseOptions,\r\n            `UPDATE MENU_GRP SET ${sets.join(', ')} WHERE CODGRP = ?`,\r\n            params,\r\n        );\r\n    }\r\n\r\n    /** Elimina un gruppo solo se non contiene menu, per non lasciare menu orfani. */\r\n    public async deleteMenuGroup(codiceGruppo: string): Promise<void> {\r\n        await this.assertMenuGroupExists(codiceGruppo);\r\n        const used = await this.countWhere('MENU', 'CODGRP', codiceGruppo);\r\n        if (used > 0) {\r\n            throw new BadRequestException(\r\n                `Impossibile eliminare il gruppo ${codiceGruppo}: contiene ${used} menu.`,\r\n            );\r\n        }\r\n        await Orm.execute(\r\n            this.accessiOptions.databaseOptions,\r\n            `DELETE FROM MENU_GRP WHERE CODGRP = ?`,\r\n            [codiceGruppo],\r\n        );\r\n    }\r\n\r\n    public async createMenu(input: CreateMenuRequest): Promise<void> {\r\n        if ((await this.countWhere('MENU', 'CODMNU', input.codiceMenu)) > 0) {\r\n            throw new BadRequestException(`Il menu ${input.codiceMenu} esiste gia.`);\r\n        }\r\n        await this.assertMenuGroupExists(input.codiceGruppo);\r\n        if (input.tipo) await this.assertMenuTypeExists(input.tipo);\r\n\r\n        await Orm.execute(\r\n            this.accessiOptions.databaseOptions,\r\n            `INSERT INTO MENU (CODMNU, DESMNU, CODGRP, FLGENABLED, ICON, ORDINE, CODTIP, PAGINA, RIFMENU, NOTE)\r\n             VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,\r\n            [\r\n                input.codiceMenu,\r\n                input.descrizioneMenu ?? null,\r\n                input.codiceGruppo,\r\n                input.enabled === false ? 0 : 1,\r\n                input.icona ?? null,\r\n                input.ordineMenu ?? null,\r\n                input.tipo ?? null,\r\n                input.pagina ?? null,\r\n                input.rifMenu ?? null,\r\n                input.note ?? null,\r\n            ],\r\n        );\r\n    }\r\n\r\n    public async updateMenu(codiceMenu: string, input: UpdateMenuRequest): Promise<void> {\r\n        if ((await this.countWhere('MENU', 'CODMNU', codiceMenu)) === 0) {\r\n            throw new BadRequestException(`Il menu ${codiceMenu} non esiste.`);\r\n        }\r\n        if (input.codiceGruppo !== undefined) await this.assertMenuGroupExists(input.codiceGruppo);\r\n        if (input.tipo) await this.assertMenuTypeExists(input.tipo);\r\n\r\n        const sets: string[] = [];\r\n        const params: unknown[] = [];\r\n        if (input.descrizioneMenu !== undefined) {\r\n            sets.push('DESMNU = ?');\r\n            params.push(input.descrizioneMenu);\r\n        }\r\n        if (input.codiceGruppo !== undefined) {\r\n            sets.push('CODGRP = ?');\r\n            params.push(input.codiceGruppo);\r\n        }\r\n        if (input.tipo !== undefined) {\r\n            sets.push('CODTIP = ?');\r\n            params.push(input.tipo || null);\r\n        }\r\n        if (input.icona !== undefined) {\r\n            sets.push('ICON = ?');\r\n            params.push(input.icona);\r\n        }\r\n        if (input.pagina !== undefined) {\r\n            sets.push('PAGINA = ?');\r\n            params.push(input.pagina);\r\n        }\r\n        if (input.ordineMenu !== undefined) {\r\n            sets.push('ORDINE = ?');\r\n            params.push(input.ordineMenu);\r\n        }\r\n        if (input.enabled !== undefined) {\r\n            sets.push('FLGENABLED = ?');\r\n            params.push(input.enabled ? 1 : 0);\r\n        }\r\n        if (input.rifMenu !== undefined) {\r\n            sets.push('RIFMENU = ?');\r\n            params.push(input.rifMenu);\r\n        }\r\n        if (input.note !== undefined) {\r\n            sets.push('NOTE = ?');\r\n            params.push(input.note);\r\n        }\r\n        if (sets.length === 0) return;\r\n\r\n        params.push(codiceMenu);\r\n        await Orm.execute(\r\n            this.accessiOptions.databaseOptions,\r\n            `UPDATE MENU SET ${sets.join(', ')} WHERE CODMNU = ?`,\r\n            params,\r\n        );\r\n    }\r\n\r\n    /** Elimina menu, grant utente e associazioni ruolo in un'unica transazione. */\r\n    public async deleteMenu(codiceMenu: string): Promise<void> {\r\n        if ((await this.countWhere('MENU', 'CODMNU', codiceMenu)) === 0) {\r\n            throw new BadRequestException(`Il menu ${codiceMenu} non esiste.`);\r\n        }\r\n        await Orm.executeMultiple(this.accessiOptions.databaseOptions, [\r\n            { query: `DELETE FROM ABILITAZIONI WHERE CODMNU = ?`, params: [codiceMenu] },\r\n            { query: `DELETE FROM RUOLI_MNU WHERE CODMNU = ?`, params: [codiceMenu] },\r\n            { query: `DELETE FROM MENU WHERE CODMNU = ?`, params: [codiceMenu] },\r\n        ]);\r\n    }\r\n\r\n\r\n    /**\r\n     * Calcola l'autorizzazione effettiva: grant diretti e grant dei ruoli sono uniti per codice menu.\r\n     * Per compatibilita storica un grant diretto prevale su quello del ruolo; i superutenti ricevono tutti i menu attivi.\r\n     */\r\n    public async getUserRolesAndGrants(codiceUtente: number): Promise<{\r\n        abilitazioni: AbilitazioneMenu[],\r\n        ruoli: Role[],\r\n        grants: AbilitazioneMenu[]\r\n    }> {\r\n        const codiceUtenteQuery = \"SELECT FLGSUPER as flag_super FROM UTENTI_CONFIG WHERE CODUTE = ?\";\r\n        const result = await Orm.query(this.accessiOptions.databaseOptions, codiceUtenteQuery, [codiceUtente]);\r\n        if (!result || result.length == 0) throw new Error(\"Nessun utente trovato con il codice utente \" + codiceUtente);\r\n\r\n        const isSuperAdmin = this.isSuperFlag(\r\n            (result.map(RestUtilities.convertKeysToCamelCase)[0] as { flagSuper?: unknown } | undefined)?.flagSuper,\r\n        );\r\n\r\n        const abilitazioni = await this.getUserDirectPermissions(codiceUtente);\r\n        const ruoli = await this.getUserRoles(codiceUtente);\r\n        const grants = this.composeGrants(\r\n            abilitazioni,\r\n            ruoli,\r\n            isSuperAdmin,\r\n            isSuperAdmin ? await this.getAllActiveMenusAsGrants() : [],\r\n        );\r\n\r\n        return { abilitazioni, ruoli, grants };\r\n    }\r\n\r\n    private isSuperFlag(value: unknown): boolean {\r\n        return value === true || value === 1 || value === '1';\r\n    }\r\n\r\n    /**\r\n     * Versione batch di `getUserRolesAndGrants`: esegue un numero costante di query per N utenti\r\n     * (invece di N set di query) e restituisce mappa per codice utente. Stessa composizione della\r\n     * lettura singola.\r\n     */\r\n    public async getUsersRolesAndGrants(codiciUtente: number[]): Promise<Map<number, {\r\n        abilitazioni: AbilitazioneMenu[],\r\n        ruoli: Role[],\r\n        grants: AbilitazioneMenu[]\r\n    }>> {\r\n        const result = new Map<number, { abilitazioni: AbilitazioneMenu[], ruoli: Role[], grants: AbilitazioneMenu[] }>();\r\n        const ids = Array.from(new Set(codiciUtente.filter((id) => Number.isInteger(id) && id > 0)));\r\n        if (ids.length === 0) {\r\n            return result;\r\n        }\r\n\r\n        const placeholders = ids.map(() => '?').join(', ');\r\n\r\n        const superRows = (await Orm.query(\r\n            this.accessiOptions.databaseOptions,\r\n            `SELECT CODUTE AS codice_utente, FLGSUPER AS flag_super FROM UTENTI_CONFIG WHERE CODUTE IN (${placeholders})`,\r\n            ids,\r\n        )).map(RestUtilities.convertKeysToCamelCase) as Array<Record<string, unknown>>;\r\n        const superUsers = new Set<number>();\r\n        for (const row of superRows) {\r\n            if (this.isSuperFlag(row.flagSuper)) {\r\n                superUsers.add(Number(row.codiceUtente));\r\n            }\r\n        }\r\n\r\n        const permissionRows = (await Orm.query(\r\n            this.accessiOptions.databaseOptions,\r\n            `SELECT\r\n                A.CODUTE AS codice_utente,\r\n                A.CODMNU AS codice_menu,\r\n                A.TIPABI AS tipo_abilitazione,\r\n                M.DESMNU AS descrizione_menu,\r\n                G.DESGRP AS descrizione_gruppo,\r\n                G.CODGRP AS codice_gruppo,\r\n                M.ICON AS icona,\r\n                M.CODTIP AS tipo,\r\n                M.PAGINA AS pagina,\r\n                M.NOTE AS note\r\n            FROM ABILITAZIONI A\r\n            INNER JOIN MENU M ON A.CODMNU = M.CODMNU\r\n            LEFT JOIN MENU_GRP G ON G.CODGRP = M.CODGRP\r\n            WHERE A.CODUTE IN (${placeholders}) AND M.FLGENABLED = 1 AND COALESCE(G.FLGENABLED, 1) = 1`,\r\n            ids,\r\n        )).map(RestUtilities.convertKeysToCamelCase) as Array<Record<string, unknown>>;\r\n\r\n        const roleRows = (await Orm.query(\r\n            this.accessiOptions.databaseOptions,\r\n            `SELECT\r\n                RU.CODUTE AS codice_utente,\r\n                R.CODRUO AS codice_ruolo,\r\n                R.DESRUO AS descrizione_ruolo,\r\n                CASE WHEN COALESCE(G.FLGENABLED, 1) = 1 THEN M.CODMNU END AS codice_menu,\r\n                RM.TIPABI AS tipo_abilitazione,\r\n                M.DESMNU AS descrizione_menu,\r\n                M.NOTE AS note\r\n            FROM UTENTI_RUOLI RU\r\n            INNER JOIN RUOLI R ON RU.CODRUO = R.CODRUO\r\n            LEFT JOIN RUOLI_MNU RM ON R.CODRUO = RM.CODRUO\r\n            LEFT JOIN MENU M ON RM.CODMNU = M.CODMNU AND M.FLGENABLED = 1\r\n            LEFT JOIN MENU_GRP G ON G.CODGRP = M.CODGRP\r\n            WHERE RU.CODUTE IN (${placeholders})`,\r\n            ids,\r\n        )).map(RestUtilities.convertKeysToCamelCase) as Array<Record<string, unknown>>;\r\n\r\n        const allActiveMenus = superUsers.size > 0 ? await this.getAllActiveMenusAsGrants() : [];\r\n\r\n        const permissionsByUser = new Map<number, AbilitazioneMenu[]>();\r\n        for (const row of permissionRows) {\r\n            const { codiceUtente, ...grant } = row;\r\n            const key = Number(codiceUtente);\r\n            const bucket = permissionsByUser.get(key);\r\n            if (bucket) {\r\n                bucket.push(grant as unknown as AbilitazioneMenu);\r\n            } else {\r\n                permissionsByUser.set(key, [grant as unknown as AbilitazioneMenu]);\r\n            }\r\n        }\r\n\r\n        const rolesByUser = new Map<number, Array<Record<string, unknown>>>();\r\n        for (const row of roleRows) {\r\n            const { codiceUtente, ...roleRow } = row;\r\n            const key = Number(codiceUtente);\r\n            const bucket = rolesByUser.get(key);\r\n            if (bucket) {\r\n                bucket.push(roleRow);\r\n            } else {\r\n                rolesByUser.set(key, [roleRow]);\r\n            }\r\n        }\r\n\r\n        for (const id of ids) {\r\n            const abilitazioni = permissionsByUser.get(id) ?? [];\r\n            const ruoli = this.assembleRoles(rolesByUser.get(id) ?? []);\r\n            const isSuperAdmin = superUsers.has(id);\r\n            result.set(id, {\r\n                abilitazioni,\r\n                ruoli,\r\n                grants: this.composeGrants(abilitazioni, ruoli, isSuperAdmin, isSuperAdmin ? allActiveMenus : []),\r\n            });\r\n        }\r\n\r\n        return result;\r\n    }\r\n\r\n\r\n\r\n}\r\n\r\n\r\n"]}

package/dist/accessi-module/Services/ServiceTokenService/ServiceTokenService.d.ts

@@ -0,0 +1,75 @@
+import type { AccessiOptions } from '../../AccessiModule';
+/** Prefisso riconoscibile dei token di servizio; il formato completo e `st_<id>.<segreto>`. */
+export declare const SERVICE_TOKEN_PREFIX = "st_";
+/** Metadati pubblici di un token (mai il segreto). */
+export interface ServiceTokenMetadata {
+    tokenId: string;
+    label: string;
+    scopes: string[];
+    createdAt?: string;
+    expiresAt?: string;
+    lastUsedAt?: string;
+    lastUsedIp?: string;
+    revoked: boolean;
+    revokedAt?: string;
+    revokedBy?: number;
+}
+/** Risultato dell'emissione: contiene il segreto in chiaro, mostrato una sola volta. */
+export interface IssuedServiceToken extends ServiceTokenMetadata {
+    token: string;
+}
+/** Risultato della verifica di un token presentato. */
+export interface VerifiedServiceToken {
+    tokenId: string;
+    label: string;
+    scopes: string[];
+}
+export interface IssueServiceTokenInput {
+    label: string;
+    scopes?: string[];
+    expiresAt?: Date | string | null;
+    /** Giorni di validita; ignorato se `expiresAt` e valorizzato. */
+    ttlDays?: number;
+}
+/** Genera un nuovo token di servizio: identificativo pubblico + segreto ad alta entropia. */
+export declare function generateServiceToken(): {
+    token: string;
+    tokenId: string;
+    secret: string;
+};
+/** Estrae identificativo e segreto; restituisce `null` se il formato non e valido. */
+export declare function parseServiceToken(token: unknown): {
+    tokenId: string;
+    secret: string;
+} | null;
+/** Hash del segreto per lo storage at-rest. Il segreto e ad alta entropia (256 bit), non una password. */
+export declare function hashServiceTokenSecret(secret: string): string;
+/** Normalizza e valida gli scope: trim, dedup e controllo del formato. */
+export declare function normalizeServiceTokenScopes(scopes: string[] | undefined): string[];
+/** True se l'insieme di scope soddisfa quello richiesto (uno scope vuoto non richiede nulla). */
+export declare function serviceTokenHasScope(scopes: string[], required: string | undefined): boolean;
+/** Gestisce il ciclo di vita dei token di servizio (emissione, elenco, revoca, rotazione, verifica). */
+export declare class ServiceTokenService {
+    private readonly accessiOptions;
+    constructor(accessiOptions: AccessiOptions);
+    private get databaseOptions();
+    private toMetadata;
+    private readRow;
+    /** Crea un nuovo token. Il segreto in chiaro e restituito una sola volta e non e recuperabile. */
+    issue(input: IssueServiceTokenInput, createdBy?: number): Promise<IssuedServiceToken>;
+    /** Elenca i token (metadati soltanto, mai il segreto). */
+    list(includeRevoked?: boolean): Promise<ServiceTokenMetadata[]>;
+    /** Revoca un token rendendolo immediatamente inutilizzabile. Idempotente su token gia revocati. */
+    revoke(tokenId: string, revokedBy?: number): Promise<void>;
+    /** Revoca il token indicato ed emette un sostituto con gli stessi metadati. */
+    rotate(tokenId: string, createdBy?: number): Promise<IssuedServiceToken>;
+    /**
+     * Verifica un token presentato: formato, esistenza, revoca, scadenza e hash a tempo costante.
+     * Aggiorna `LAST_USED_AT` (best-effort, al massimo una volta al minuto).
+     */
+    verify(token: string, context?: {
+        ip?: string;
+    }): Promise<VerifiedServiceToken | undefined>;
+    private safeHashEquals;
+    private touchLastUsed;
+}

package/dist/accessi-module/Services/ServiceTokenService/ServiceTokenService.js

@@ -0,0 +1,265 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ServiceTokenService = exports.SERVICE_TOKEN_PREFIX = void 0;
+exports.generateServiceToken = generateServiceToken;
+exports.parseServiceToken = parseServiceToken;
+exports.hashServiceTokenSecret = hashServiceTokenSecret;
+exports.normalizeServiceTokenScopes = normalizeServiceTokenScopes;
+exports.serviceTokenHasScope = serviceTokenHasScope;
+const common_1 = require("@nestjs/common");
+const crypto_1 = require("crypto");
+const autobind_1 = require("../../../autobind");
+const Orm_1 = require("../../../Orm");
+const Utilities_1 = require("../../../Utilities");
+/** Prefisso riconoscibile dei token di servizio; il formato completo e `st_<id>.<segreto>`. */
+exports.SERVICE_TOKEN_PREFIX = 'st_';
+const TOKEN_ID_PATTERN = /^st_[a-f0-9]{32}$/;
+const SCOPE_PATTERN = /^[a-z0-9:_-]{1,40}$/i;
+const LAST_USED_REFRESH_MS = 60000;
+/** Genera un nuovo token di servizio: identificativo pubblico + segreto ad alta entropia. */
+function generateServiceToken() {
+    const tokenId = `${exports.SERVICE_TOKEN_PREFIX}${(0, crypto_1.randomBytes)(16).toString('hex')}`;
+    const secret = (0, crypto_1.randomBytes)(32).toString('base64url');
+    return { token: `${tokenId}.${secret}`, tokenId, secret };
+}
+/** Estrae identificativo e segreto; restituisce `null` se il formato non e valido. */
+function parseServiceToken(token) {
+    if (typeof token !== 'string') {
+        return null;
+    }
+    const separator = token.indexOf('.');
+    if (separator <= 0) {
+        return null;
+    }
+    const tokenId = token.slice(0, separator);
+    const secret = token.slice(separator + 1);
+    if (!TOKEN_ID_PATTERN.test(tokenId) || secret.length < 16) {
+        return null;
+    }
+    return { tokenId, secret };
+}
+/** Hash del segreto per lo storage at-rest. Il segreto e ad alta entropia (256 bit), non una password. */
+function hashServiceTokenSecret(secret) {
+    return (0, crypto_1.createHash)('sha256').update(secret, 'utf8').digest('hex');
+}
+/** Normalizza e valida gli scope: trim, dedup e controllo del formato. */
+function normalizeServiceTokenScopes(scopes) {
+    if (scopes === undefined) {
+        return [];
+    }
+    if (!Array.isArray(scopes)) {
+        throw new common_1.BadRequestException('Gli scope devono essere un array di stringhe.');
+    }
+    const normalized = [];
+    for (const rawScope of scopes) {
+        if (typeof rawScope !== 'string' || !SCOPE_PATTERN.test(rawScope.trim())) {
+            throw new common_1.BadRequestException(`Scope non valido: ${String(rawScope)}. Usare lettere, numeri, ':', '_' o '-'.`);
+        }
+        const scope = rawScope.trim().toLowerCase();
+        if (!normalized.includes(scope)) {
+            normalized.push(scope);
+        }
+    }
+    return normalized;
+}
+/** True se l'insieme di scope soddisfa quello richiesto (uno scope vuoto non richiede nulla). */
+function serviceTokenHasScope(scopes, required) {
+    if (!required) {
+        return true;
+    }
+    return scopes.includes(required.toLowerCase());
+}
+function toIso(value) {
+    if (value === undefined || value === null) {
+        return undefined;
+    }
+    const date = value instanceof Date ? value : new Date(String(value));
+    return Number.isNaN(date.getTime()) ? undefined : date.toISOString();
+}
+function resolveExpiration(input, defaultTtlDays) {
+    var _a;
+    if (input.expiresAt !== undefined && input.expiresAt !== null && input.expiresAt !== '') {
+        const expiresAt = input.expiresAt instanceof Date ? input.expiresAt : new Date(String(input.expiresAt));
+        if (Number.isNaN(expiresAt.getTime())) {
+            throw new common_1.BadRequestException('Data di scadenza non valida.');
+        }
+        if (expiresAt.getTime() <= Date.now()) {
+            throw new common_1.BadRequestException('La data di scadenza deve essere nel futuro.');
+        }
+        return expiresAt;
+    }
+    const ttlDays = (_a = input.ttlDays) !== null && _a !== void 0 ? _a : defaultTtlDays;
+    if (typeof ttlDays === 'number' && Number.isFinite(ttlDays) && ttlDays > 0) {
+        return new Date(Date.now() + ttlDays * 24 * 60 * 60 * 1000);
+    }
+    return null;
+}
+/** Gestisce il ciclo di vita dei token di servizio (emissione, elenco, revoca, rotazione, verifica). */
+let ServiceTokenService = class ServiceTokenService {
+    constructor(accessiOptions) {
+        this.accessiOptions = accessiOptions;
+    }
+    get databaseOptions() {
+        return this.accessiOptions.databaseOptions;
+    }
+    toMetadata(row) {
+        var _a;
+        const scopesRaw = typeof row.scopes === 'string' ? row.scopes.trim() : '';
+        return {
+            tokenId: String((_a = row.tokenId) !== null && _a !== void 0 ? _a : ''),
+            label: typeof row.label === 'string' ? row.label : '',
+            scopes: scopesRaw === '' ? [] : scopesRaw.split(/\s+/),
+            createdAt: toIso(row.createdAt),
+            expiresAt: toIso(row.expiresAt),
+            lastUsedAt: toIso(row.lastUsedAt),
+            lastUsedIp: typeof row.lastUsedIp === 'string' && row.lastUsedIp !== '' ? row.lastUsedIp : undefined,
+            revoked: row.revokedAt !== undefined && row.revokedAt !== null,
+            revokedAt: toIso(row.revokedAt),
+            revokedBy: row.revokedBy == null ? undefined : Number(row.revokedBy),
+        };
+    }
+    readRow(tokenId) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const rows = yield Orm_1.Orm.query(this.databaseOptions, `SELECT TOKEN_ID, TOKEN_HASH, LABEL, SCOPES, CREATED_BY, CREATED_AT, EXPIRES_AT, LAST_USED_AT, LAST_USED_IP, REVOKED_AT, REVOKED_BY
+       FROM ACCESSI_SERVICE_TOKEN WHERE TOKEN_ID = ?`, [tokenId], false);
+            return rows.map(Utilities_1.RestUtilities.convertKeysToCamelCase)[0];
+        });
+    }
+    /** Crea un nuovo token. Il segreto in chiaro e restituito una sola volta e non e recuperabile. */
+    issue(input, createdBy) {
+        return __awaiter(this, void 0, void 0, function* () {
+            var _a;
+            const label = typeof (input === null || input === void 0 ? void 0 : input.label) === 'string' ? input.label.trim() : '';
+            if (label.length < 1 || label.length > 100) {
+                throw new common_1.BadRequestException('La descrizione del token deve essere compresa tra 1 e 100 caratteri.');
+            }
+            const scopes = normalizeServiceTokenScopes(input.scopes);
+            const expiresAt = resolveExpiration(input, (_a = this.accessiOptions.serviceTokens) === null || _a === void 0 ? void 0 : _a.defaultTtlDays);
+            const { token, tokenId, secret } = generateServiceToken();
+            yield Orm_1.Orm.execute(this.databaseOptions, `INSERT INTO ACCESSI_SERVICE_TOKEN (TOKEN_ID, TOKEN_HASH, LABEL, SCOPES, CREATED_BY, EXPIRES_AT)
+       VALUES (?, ?, ?, ?, ?, ?)`, [tokenId, hashServiceTokenSecret(secret), label, scopes.join(' '), createdBy !== null && createdBy !== void 0 ? createdBy : null, expiresAt]);
+            const row = yield this.readRow(tokenId);
+            return Object.assign(Object.assign({}, this.toMetadata(row !== null && row !== void 0 ? row : { tokenId, label, scopes: scopes.join(' ') })), { token });
+        });
+    }
+    /** Elenca i token (metadati soltanto, mai il segreto). */
+    list() {
+        return __awaiter(this, arguments, void 0, function* (includeRevoked = false) {
+            const rows = yield Orm_1.Orm.query(this.databaseOptions, `SELECT TOKEN_ID, LABEL, SCOPES, CREATED_BY, CREATED_AT, EXPIRES_AT, LAST_USED_AT, LAST_USED_IP, REVOKED_AT, REVOKED_BY
+       FROM ACCESSI_SERVICE_TOKEN ${includeRevoked ? '' : 'WHERE REVOKED_AT IS NULL'}
+       ORDER BY CREATED_AT DESC, TOKEN_ID DESC`, [], false);
+            return rows.map(Utilities_1.RestUtilities.convertKeysToCamelCase).map((row) => this.toMetadata(row));
+        });
+    }
+    /** Revoca un token rendendolo immediatamente inutilizzabile. Idempotente su token gia revocati. */
+    revoke(tokenId, revokedBy) {
+        return __awaiter(this, void 0, void 0, function* () {
+            var _a;
+            const parsed = parseServiceToken(tokenId);
+            const normalizedId = (_a = parsed === null || parsed === void 0 ? void 0 : parsed.tokenId) !== null && _a !== void 0 ? _a : tokenId;
+            const row = yield this.readRow(normalizedId);
+            if (!row) {
+                throw new common_1.NotFoundException(`Token di servizio ${normalizedId} non trovato.`);
+            }
+            if (row.revokedAt !== undefined && row.revokedAt !== null) {
+                return;
+            }
+            yield Orm_1.Orm.execute(this.databaseOptions, 'UPDATE ACCESSI_SERVICE_TOKEN SET REVOKED_AT = CURRENT_TIMESTAMP, REVOKED_BY = ? WHERE TOKEN_ID = ?', [revokedBy !== null && revokedBy !== void 0 ? revokedBy : null, normalizedId]);
+        });
+    }
+    /** Revoca il token indicato ed emette un sostituto con gli stessi metadati. */
+    rotate(tokenId, createdBy) {
+        return __awaiter(this, void 0, void 0, function* () {
+            var _a, _b;
+            const parsed = parseServiceToken(tokenId);
+            const normalizedId = (_a = parsed === null || parsed === void 0 ? void 0 : parsed.tokenId) !== null && _a !== void 0 ? _a : tokenId;
+            const row = yield this.readRow(normalizedId);
+            if (!row) {
+                throw new common_1.NotFoundException(`Token di servizio ${normalizedId} non trovato.`);
+            }
+            const metadata = this.toMetadata(row);
+            yield this.revoke(normalizedId, createdBy);
+            return this.issue({
+                label: metadata.label,
+                scopes: metadata.scopes,
+                expiresAt: (_b = metadata.expiresAt) !== null && _b !== void 0 ? _b : null,
+            }, createdBy);
+        });
+    }
+    /**
+     * Verifica un token presentato: formato, esistenza, revoca, scadenza e hash a tempo costante.
+     * Aggiorna `LAST_USED_AT` (best-effort, al massimo una volta al minuto).
+     */
+    verify(token, context) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const parsed = parseServiceToken(token);
+            if (!parsed) {
+                return undefined;
+            }
+            const row = yield this.readRow(parsed.tokenId);
+            if (!row) {
+                return undefined;
+            }
+            if (row.revokedAt !== undefined && row.revokedAt !== null) {
+                return undefined;
+            }
+            const expiresAt = toIso(row.expiresAt);
+            if (expiresAt && new Date(expiresAt).getTime() <= Date.now()) {
+                return undefined;
+            }
+            const storedHash = typeof row.tokenHash === 'string' ? row.tokenHash : '';
+            if (!storedHash || !this.safeHashEquals(hashServiceTokenSecret(parsed.secret), storedHash)) {
+                return undefined;
+            }
+            const metadata = this.toMetadata(row);
+            yield this.touchLastUsed(parsed.tokenId, row.lastUsedAt, context === null || context === void 0 ? void 0 : context.ip).catch(() => undefined);
+            return { tokenId: metadata.tokenId, label: metadata.label, scopes: metadata.scopes };
+        });
+    }
+    safeHashEquals(candidate, stored) {
+        const candidateBuffer = Buffer.from(candidate, 'hex');
+        const storedBuffer = Buffer.from(stored, 'hex');
+        if (candidateBuffer.length !== storedBuffer.length || candidateBuffer.length === 0) {
+            return false;
+        }
+        return (0, crypto_1.timingSafeEqual)(candidateBuffer, storedBuffer);
+    }
+    touchLastUsed(tokenId, lastUsedAt, ip) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const lastUsed = toIso(lastUsedAt);
+            if (lastUsed && Date.now() - new Date(lastUsed).getTime() < LAST_USED_REFRESH_MS) {
+                return;
+            }
+            yield Orm_1.Orm.execute(this.databaseOptions, 'UPDATE ACCESSI_SERVICE_TOKEN SET LAST_USED_AT = CURRENT_TIMESTAMP, LAST_USED_IP = ? WHERE TOKEN_ID = ?', [ip !== null && ip !== void 0 ? ip : null, tokenId], false);
+        });
+    }
+};
+exports.ServiceTokenService = ServiceTokenService;
+exports.ServiceTokenService = ServiceTokenService = __decorate([
+    autobind_1.autobind,
+    (0, common_1.Injectable)(),
+    __param(0, (0, common_1.Inject)('ACCESSI_OPTIONS')),
+    __metadata("design:paramtypes", [Object])
+], ServiceTokenService);
+//# sourceMappingURL=ServiceTokenService.js.map