emilsoftware-utilities 2.0.0-dev.22 → 2.0.0-dev.24

package/dist/allegati-module/Dtos/UploadSingleFileRequest.js.map

@@ -1 +1 @@
-{"version":3,"file":"UploadSingleFileRequest.js","sourceRoot":"","sources":["../../../src/allegati-module/Dtos/UploadSingleFileRequest.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,6CAA8C;AAE9C,MAAa,uBAAuB;CAsDnC;AAtDD,0DAsDC;AAjDC;IAJC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,wFAAwF;QACrG,OAAO,EAAE,kBAAkB;KAC5B,CAAC;;uDACa;AAMf;IAJC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,iDAAiD;QAC9D,OAAO,EAAE,IAAI;KACd,CAAC;;2DACiB;AAMnB;IAJC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,8EAA8E;QAC3F,OAAO,EAAE,GAAG;KACb,CAAC;;uDACa;AAMf;IAJC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,oCAAoC;QACjD,OAAO,EAAE,8BAA8B;KACxC,CAAC;;oEAC0B;AAM5B;IAJC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,kCAAkC;QAC/C,OAAO,EAAE,wBAAwB;KAClC,CAAC;;yDACe;AAMjB;IAJC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,qDAAqD;QAClE,OAAO,EAAE,YAAY;KACtB,CAAC;;mEACyB;AAM3B;IAJC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,mDAAmD;QAChE,OAAO,EAAE,YAAY;KACtB,CAAC;;iEACuB;AAMzB;IAJC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,qDAAqD;QAClE,OAAO,EAAE,CAAC;KACX,CAAC;;+DACqB;AAMvB;IAJC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,yEAAyE;QACtF,OAAO,EAAE,gBAAgB;KAC1B,CAAC;;qEAC2B","sourcesContent":["import { ApiProperty } from '@nestjs/swagger';\n\nexport class UploadSingleFileRequest {\n  @ApiProperty({\n    description: 'Codice identificativo del soggetto o dell’entità (es. codice fiscale, matricola, ecc.)',\n    example: 'RSSMRA85M01H501Z',\n  })\n  codice: string;\n\n  @ApiProperty({\n    description: 'Tipo del codice fornito (es. CF, PI, MATRICOLA)',\n    example: 'CF',\n  })\n  tipoCodice: string;\n\n  @ApiProperty({\n    description: 'Numero o valore usato per ordinare o identificare la sequenza degli allegati',\n    example: '1',\n  })\n  ordine: string;\n\n  @ApiProperty({\n    description: 'Descrizione testuale dell’allegato',\n    example: 'Documento di identità fronte',\n  })\n  descrizioneAllegato: string;\n\n  @ApiProperty({\n    description: 'Nome del file originale caricato',\n    example: 'documento_identita.pdf',\n  })\n  nomeFile: string;\n\n  @ApiProperty({\n    description: 'Data di inizio validità del documento (formato ISO)',\n    example: '2024-01-01',\n  })\n  dataInizioValidita: string;\n\n  @ApiProperty({\n    description: 'Data di fine validità del documento (formato ISO)',\n    example: '2025-01-01',\n  })\n  dataFineValidita: string;\n\n  @ApiProperty({\n    description: 'ID del tipo di allegato secondo tabella master (FK)',\n    example: 3,\n  })\n  idTipoAllegato: number;\n\n  @ApiProperty({\n    description: 'Riferimento esterno o identificativo del documento (es. numero pratica)',\n    example: 'PRAT-2024-0001',\n  })\n  riferimentoDocumento: string;\n}\n"]}
+{"version":3,"file":"UploadSingleFileRequest.js","sourceRoot":"","sources":["../../../src/allegati-module/Dtos/UploadSingleFileRequest.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,6CAA8C;AAE9C,MAAa,uBAAuB;CAsDnC;AAtDD,0DAsDC;AAjDC;IAJC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,wFAAwF;QACrG,OAAO,EAAE,kBAAkB;KAC5B,CAAC;;uDACc;AAMhB;IAJC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,iDAAiD;QAC9D,OAAO,EAAE,IAAI;KACd,CAAC;;2DACkB;AAMpB;IAJC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,8EAA8E;QAC3F,OAAO,EAAE,GAAG;KACb,CAAC;;uDACc;AAMhB;IAJC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,oCAAoC;QACjD,OAAO,EAAE,8BAA8B;KACxC,CAAC;;oEAC2B;AAM7B;IAJC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,kCAAkC;QAC/C,OAAO,EAAE,wBAAwB;KAClC,CAAC;;yDACgB;AAMlB;IAJC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,qDAAqD;QAClE,OAAO,EAAE,YAAY;KACtB,CAAC;;mEAC0B;AAM5B;IAJC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,mDAAmD;QAChE,OAAO,EAAE,YAAY;KACtB,CAAC;;iEACwB;AAM1B;IAJC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,qDAAqD;QAClE,OAAO,EAAE,CAAC;KACX,CAAC;;+DACsB;AAMxB;IAJC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,yEAAyE;QACtF,OAAO,EAAE,gBAAgB;KAC1B,CAAC;;qEAC4B","sourcesContent":["import { ApiProperty } from '@nestjs/swagger';\r\n\r\nexport class UploadSingleFileRequest {\r\n  @ApiProperty({\r\n    description: 'Codice identificativo del soggetto o dell’entità (es. codice fiscale, matricola, ecc.)',\r\n    example: 'RSSMRA85M01H501Z',\r\n  })\r\n  codice!: string;\r\n\r\n  @ApiProperty({\r\n    description: 'Tipo del codice fornito (es. CF, PI, MATRICOLA)',\r\n    example: 'CF',\r\n  })\r\n  tipoCodice!: string;\r\n\r\n  @ApiProperty({\r\n    description: 'Numero o valore usato per ordinare o identificare la sequenza degli allegati',\r\n    example: '1',\r\n  })\r\n  ordine!: string;\r\n\r\n  @ApiProperty({\r\n    description: 'Descrizione testuale dell’allegato',\r\n    example: 'Documento di identità fronte',\r\n  })\r\n  descrizioneAllegato!: string;\r\n\r\n  @ApiProperty({\r\n    description: 'Nome del file originale caricato',\r\n    example: 'documento_identita.pdf',\r\n  })\r\n  nomeFile!: string;\r\n\r\n  @ApiProperty({\r\n    description: 'Data di inizio validità del documento (formato ISO)',\r\n    example: '2024-01-01',\r\n  })\r\n  dataInizioValidita!: string;\r\n\r\n  @ApiProperty({\r\n    description: 'Data di fine validità del documento (formato ISO)',\r\n    example: '2025-01-01',\r\n  })\r\n  dataFineValidita!: string;\r\n\r\n  @ApiProperty({\r\n    description: 'ID del tipo di allegato secondo tabella master (FK)',\r\n    example: 3,\r\n  })\r\n  idTipoAllegato!: number;\r\n\r\n  @ApiProperty({\r\n    description: 'Riferimento esterno o identificativo del documento (es. numero pratica)',\r\n    example: 'PRAT-2024-0001',\r\n  })\r\n  riferimentoDocumento!: string;\r\n}\r\n"]}

package/dist/allegati-module/Dtos/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/allegati-module/Dtos/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,gDAA8B;AAC9B,0EAAwD;AACxD,wEAAsD","sourcesContent":["export * from \"./AllegatoDto\";\nexport * from \"./responses/DownloadAllegatoResponseDto\";\nexport * from \"./responses/UploadAllegatoResponseDto\";\n\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/allegati-module/Dtos/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,gDAA8B;AAC9B,0EAAwD;AACxD,wEAAsD","sourcesContent":["export * from \"./AllegatoDto\";\r\nexport * from \"./responses/DownloadAllegatoResponseDto\";\r\nexport * from \"./responses/UploadAllegatoResponseDto\";\r\n\r\n"]}

package/dist/allegati-module/Dtos/responses/DownloadAllegatoResponseDto.js.map

@@ -1 +1 @@
-{"version":3,"file":"DownloadAllegatoResponseDto.js","sourceRoot":"","sources":["../../../../src/allegati-module/Dtos/responses/DownloadAllegatoResponseDto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,6CAA8C;AAC9C,qDAAmE;AAEnE,MAAa,2BAA2B;CAwBvC;AAxBD,kEAwBC;AAjBG;IANC,IAAA,qBAAW,EAAC;QACT,WAAW,EAAE,2BAA2B;QACxC,OAAO,EAAE,oDAAoD;KAChE,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,EAAC,EAAE,OAAO,EAAE,8BAA8B,EAAE,CAAC;;kEAClC;AAQtB;IANC,IAAA,qBAAW,EAAC;QACT,WAAW,EAAE,yBAAyB;QACtC,OAAO,EAAE,eAAe;KAC3B,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,EAAC,EAAE,OAAO,EAAE,8BAA8B,EAAE,CAAC;;6DACvC;AAQjB;IANC,IAAA,qBAAW,EAAC;QACT,WAAW,EAAE,oBAAoB;QACjC,OAAO,EAAE,iBAAiB;KAC7B,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;6DACK","sourcesContent":["import { ApiProperty } from \"@nestjs/swagger\";\nimport { IsString, IsNotEmpty, IsOptional } from \"class-validator\";\n\nexport class DownloadAllegatoResponseDto {\n    @ApiProperty({\n        description: 'Contenuto base64 del file',\n        example: 'JVBERi0xLjQKJcfsj6IKNSAwIG9iago8PAovVGl0bGUgKP7...',\n    })\n    @IsString()\n    @IsNotEmpty({ message: \"Il contenuto è obbligatorio.\" })\n    contentBase64: string;\n\n    @ApiProperty({\n        description: 'Nome originale del file',\n        example: 'documento.pdf',\n    })\n    @IsString()\n    @IsNotEmpty({ message: \"Il nome file è obbligatorio.\" })\n    filename: string;\n\n    @ApiProperty({\n        description: 'Tipo MIME del file',\n        example: 'application/pdf',\n    })\n    @IsString()\n    @IsOptional()\n    mimetype?: string;\n}"]}
+{"version":3,"file":"DownloadAllegatoResponseDto.js","sourceRoot":"","sources":["../../../../src/allegati-module/Dtos/responses/DownloadAllegatoResponseDto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,6CAA8C;AAC9C,qDAAmE;AAEnE,MAAa,2BAA2B;CAwBvC;AAxBD,kEAwBC;AAjBG;IANC,IAAA,qBAAW,EAAC;QACT,WAAW,EAAE,2BAA2B;QACxC,OAAO,EAAE,oDAAoD;KAChE,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,EAAC,EAAE,OAAO,EAAE,8BAA8B,EAAE,CAAC;;kEACjC;AAQvB;IANC,IAAA,qBAAW,EAAC;QACT,WAAW,EAAE,yBAAyB;QACtC,OAAO,EAAE,eAAe;KAC3B,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,EAAC,EAAE,OAAO,EAAE,8BAA8B,EAAE,CAAC;;6DACtC;AAQlB;IANC,IAAA,qBAAW,EAAC;QACT,WAAW,EAAE,oBAAoB;QACjC,OAAO,EAAE,iBAAiB;KAC7B,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;6DACK","sourcesContent":["import { ApiProperty } from \"@nestjs/swagger\";\r\nimport { IsString, IsNotEmpty, IsOptional } from \"class-validator\";\r\n\r\nexport class DownloadAllegatoResponseDto {\r\n    @ApiProperty({\r\n        description: 'Contenuto base64 del file',\r\n        example: 'JVBERi0xLjQKJcfsj6IKNSAwIG9iago8PAovVGl0bGUgKP7...',\r\n    })\r\n    @IsString()\r\n    @IsNotEmpty({ message: \"Il contenuto è obbligatorio.\" })\r\n    contentBase64!: string;\r\n\r\n    @ApiProperty({\r\n        description: 'Nome originale del file',\r\n        example: 'documento.pdf',\r\n    })\r\n    @IsString()\r\n    @IsNotEmpty({ message: \"Il nome file è obbligatorio.\" })\r\n    filename!: string;\r\n\r\n    @ApiProperty({\r\n        description: 'Tipo MIME del file',\r\n        example: 'application/pdf',\r\n    })\r\n    @IsString()\r\n    @IsOptional()\r\n    mimetype?: string;\r\n}"]}

package/dist/allegati-module/Dtos/responses/GetListResponse.js.map

@@ -1 +1 @@
-{"version":3,"file":"GetListResponse.js","sourceRoot":"","sources":["../../../../src/allegati-module/Dtos/responses/GetListResponse.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,6CAA8C;AAE9C,yDAAyC;AACzC,qDAAiD;AACjD,kDAA+C;AAC/C,gDAA6C;AAE7C,MAAa,eAAgB,SAAQ,2BAAY;CAKhD;AALD,0CAKC;AADC;IAHC,IAAA,qBAAW,EAAC,EAAE,IAAI,EAAE,CAAC,yBAAW,CAAC,EAAE,CAAC;IACpC,IAAA,gCAAc,EAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC9B,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,yBAAW,CAAC;;+CACF","sourcesContent":["import { ApiProperty } from '@nestjs/swagger';\n\nimport { Type } from 'class-transformer';\nimport { ValidateNested } from 'class-validator';\nimport { BaseResponse } from '../BaseResponse';\nimport { AllegatoDto } from '../AllegatoDto';\n\nexport class GetListResponse extends BaseResponse {\n  @ApiProperty({ type: [AllegatoDto] })\n  @ValidateNested({ each: true })\n  @Type(() => AllegatoDto)\n  Result: AllegatoDto[];\n}\n"]}
+{"version":3,"file":"GetListResponse.js","sourceRoot":"","sources":["../../../../src/allegati-module/Dtos/responses/GetListResponse.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,6CAA8C;AAE9C,yDAAyC;AACzC,qDAAiD;AACjD,kDAA+C;AAC/C,gDAA6C;AAE7C,MAAa,eAAgB,SAAQ,2BAAY;CAKhD;AALD,0CAKC;AADC;IAHC,IAAA,qBAAW,EAAC,EAAE,IAAI,EAAE,CAAC,yBAAW,CAAC,EAAE,CAAC;IACpC,IAAA,gCAAc,EAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC9B,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,yBAAW,CAAC;;+CACD","sourcesContent":["import { ApiProperty } from '@nestjs/swagger';\r\n\r\nimport { Type } from 'class-transformer';\r\nimport { ValidateNested } from 'class-validator';\r\nimport { BaseResponse } from '../BaseResponse';\r\nimport { AllegatoDto } from '../AllegatoDto';\r\n\r\nexport class GetListResponse extends BaseResponse {\r\n  @ApiProperty({ type: [AllegatoDto] })\r\n  @ValidateNested({ each: true })\r\n  @Type(() => AllegatoDto)\r\n  Result!: AllegatoDto[];\r\n}\r\n"]}

package/dist/allegati-module/Dtos/responses/UploadAllegatoResponseDto.js.map

@@ -1 +1 @@
-{"version":3,"file":"UploadAllegatoResponseDto.js","sourceRoot":"","sources":["../../../../src/allegati-module/Dtos/responses/UploadAllegatoResponseDto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,6CAA8C;AAC9C,qDAAiE;AAEjE,MAAa,yBAAyB;CAerC;AAfD,8DAeC;AATG;IALC,IAAA,qBAAW,EAAC;QACT,WAAW,EAAE,+BAA+B;QAC5C,OAAO,EAAE,EAAE;KACd,CAAC;IACD,IAAA,0BAAQ,GAAE;;qDACA;AAQX;IANC,IAAA,qBAAW,EAAC;QACT,WAAW,EAAE,mBAAmB;QAChC,OAAO,EAAE,gBAAgB;KAC5B,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,EAAC,EAAE,OAAO,EAAE,8BAA8B,EAAE,CAAC;;2DACvC","sourcesContent":["import { ApiProperty } from \"@nestjs/swagger\";\nimport { IsNumber, IsString, IsNotEmpty } from \"class-validator\";\n\nexport class UploadAllegatoResponseDto {\n    @ApiProperty({\n        description: 'ID assegnato al file caricato',\n        example: 42,\n    })\n    @IsNumber()\n    id: number;\n\n    @ApiProperty({\n        description: 'Nome file salvato',\n        example: 'preventivo.pdf',\n    })\n    @IsString()\n    @IsNotEmpty({ message: \"Il nome file è obbligatorio.\" })\n    filename: string;\n}"]}
+{"version":3,"file":"UploadAllegatoResponseDto.js","sourceRoot":"","sources":["../../../../src/allegati-module/Dtos/responses/UploadAllegatoResponseDto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,6CAA8C;AAC9C,qDAAiE;AAEjE,MAAa,yBAAyB;CAerC;AAfD,8DAeC;AATG;IALC,IAAA,qBAAW,EAAC;QACT,WAAW,EAAE,+BAA+B;QAC5C,OAAO,EAAE,EAAE;KACd,CAAC;IACD,IAAA,0BAAQ,GAAE;;qDACC;AAQZ;IANC,IAAA,qBAAW,EAAC;QACT,WAAW,EAAE,mBAAmB;QAChC,OAAO,EAAE,gBAAgB;KAC5B,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,EAAC,EAAE,OAAO,EAAE,8BAA8B,EAAE,CAAC;;2DACtC","sourcesContent":["import { ApiProperty } from \"@nestjs/swagger\";\r\nimport { IsNumber, IsString, IsNotEmpty } from \"class-validator\";\r\n\r\nexport class UploadAllegatoResponseDto {\r\n    @ApiProperty({\r\n        description: 'ID assegnato al file caricato',\r\n        example: 42,\r\n    })\r\n    @IsNumber()\r\n    id!: number;\r\n\r\n    @ApiProperty({\r\n        description: 'Nome file salvato',\r\n        example: 'preventivo.pdf',\r\n    })\r\n    @IsString()\r\n    @IsNotEmpty({ message: \"Il nome file è obbligatorio.\" })\r\n    filename!: string;\r\n}"]}

package/dist/allegati-module/Services/AllegatiService/AllegatiService.d.ts

@@ -1,3 +1,4 @@
+import { OnModuleInit } from "@nestjs/common";
 import { AllegatiOptions } from "../../AllegatiModule";
 import { UploadAllegatoResponseDto, DownloadAllegatoResponseDto, AllegatoDto } from "../../Dtos";
 import { UploadSingleFileRequest } from "../../Dtos/UploadSingleFileRequest";
@@ -6,13 +7,19 @@ export declare class AllegatiError extends Error {
     readonly statusCode: number;
     constructor(message: string, code: string, statusCode?: number);
 }
-export declare class AllegatiService {
+export declare class AllegatiService implements OnModuleInit {
     private readonly allegatiOptions;
+    private readonly logger;
     private readonly MAX_FILE_SIZE;
     private readonly ALLOWED_MIME_TYPES;
     constructor(allegatiOptions: AllegatiOptions);
+    /** Verifica la tabella ALLEGATI all'avvio (attesa da Nest, senza promise floating). */
+    onModuleInit(): Promise<void>;
+    private toAllegatoDto;
     private validateFile;
-    getAttachmentTypes(): Promise<any[]>;
+    private hasValidSignature;
+    private sanitizeFilename;
+    getAttachmentTypes(): Promise<Array<Record<string, unknown>>>;
     uploadFile(file: Express.Multer.File, uploadSingleFileRequest: UploadSingleFileRequest): Promise<UploadAllegatoResponseDto>;
     ensureTableExists(): Promise<void>;
     downloadFile(id: number): Promise<DownloadAllegatoResponseDto>;
@@ -25,7 +32,7 @@ export declare class AllegatiService {
         idxtipoall?: number;
     }): Promise<AllegatoDto[]>;
     /**
-     * Find allegati by any combination of tipcod, codice, docrif, idxtipoall
+     * Find allegati by a combination of tipcod, codice, docrif, idxtipoall
      */
     findByFields(fields: {
         tipcod?: string;

package/dist/allegati-module/Services/AllegatiService/AllegatiService.js

@@ -20,10 +20,12 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
         step((generator = generator.apply(thisArg, _arguments || [])).next());
     });
 };
+var AllegatiService_1;
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.AllegatiService = exports.AllegatiError = void 0;
 const common_1 = require("@nestjs/common");
 const autobind_1 = require("../../../autobind");
+const Logger_1 = require("../../../Logger");
 const Orm_1 = require("../../../Orm");
 class AllegatiError extends Error {
     constructor(message, code, statusCode = 500) {
@@ -34,9 +36,10 @@ class AllegatiError extends Error {
     }
 }
 exports.AllegatiError = AllegatiError;
-let AllegatiService = class AllegatiService {
+let AllegatiService = AllegatiService_1 = class AllegatiService {
     constructor(allegatiOptions) {
         this.allegatiOptions = allegatiOptions;
+        this.logger = new Logger_1.Logger(AllegatiService_1.name);
         this.MAX_FILE_SIZE = 90 * 1024 * 1024; // 90MB
         this.ALLOWED_MIME_TYPES = [
             'application/pdf',
@@ -47,11 +50,37 @@ let AllegatiService = class AllegatiService {
             'application/vnd.ms-excel',
             'application/vnd.openxmlformats-officedocument.spreadsheetml.sheet'
         ];
-        this.ensureTableExists().catch(error => {
-            console.error('[AllegatiService] Errore creazione tabella ALLEGATI:', error);
-            // throw new InternalServerErrorException('Errore durante l\'inizializzazione del servizio allegati');
+    }
+    /** Verifica la tabella ALLEGATI all'avvio (attesa da Nest, senza promise floating). */
+    onModuleInit() {
+        return __awaiter(this, void 0, void 0, function* () {
+            try {
+                yield this.ensureTableExists();
+            }
+            catch (error) {
+                this.logger.error('[AllegatiService] Errore verifica tabella ALLEGATI:', error);
+            }
         });
     }
+    toAllegatoDto(row) {
+        var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k, _l, _m, _o, _p, _q;
+        const optionalString = (value) => value === undefined || value === null ? undefined : String(value);
+        const optionalNumber = (value) => value === undefined || value === null ? undefined : Number(value);
+        return {
+            id: Number((_a = row.ID) !== null && _a !== void 0 ? _a : row.id),
+            filename: String((_c = (_b = row.FILENAME) !== null && _b !== void 0 ? _b : row.filename) !== null && _c !== void 0 ? _c : ''),
+            mimetype: String((_e = (_d = row.MIMETYPE) !== null && _d !== void 0 ? _d : row.mimetype) !== null && _e !== void 0 ? _e : ''),
+            uploadDate: String((_g = (_f = row.UPLOADDATE) !== null && _f !== void 0 ? _f : row.uploadDate) !== null && _g !== void 0 ? _g : ''),
+            codice: optionalString((_h = row.CODICE) !== null && _h !== void 0 ? _h : row.codice),
+            tipoCodice: optionalString((_j = row.TIPOCODICE) !== null && _j !== void 0 ? _j : row.tipoCodice),
+            ordine: optionalString((_k = row.ORDINE) !== null && _k !== void 0 ? _k : row.ordine),
+            descrizioneAllegato: optionalString((_l = row.DESCRIZIONEALLEGATO) !== null && _l !== void 0 ? _l : row.descrizioneAllegato),
+            dataInizioValidita: optionalString((_m = row.DATAINIZIOVALIDITA) !== null && _m !== void 0 ? _m : row.dataInizioValidita),
+            dataFineValidita: optionalString((_o = row.DATAFINEVALIDITA) !== null && _o !== void 0 ? _o : row.dataFineValidita),
+            idTipoAllegato: optionalNumber((_p = row.IDTIPOALLEGATO) !== null && _p !== void 0 ? _p : row.idTipoAllegato),
+            riferimentoDocumento: optionalString((_q = row.RIFERIMENTODOCUMENTO) !== null && _q !== void 0 ? _q : row.riferimentoDocumento),
+        };
+    }
     validateFile(file) {
         if (!file) {
             throw new common_1.BadRequestException('Nessun file fornito');
@@ -62,6 +91,43 @@ let AllegatiService = class AllegatiService {
         if (!this.ALLOWED_MIME_TYPES.includes(file.mimetype)) {
             throw new common_1.BadRequestException(`Tipo di file non consentito. Tipi consentiti: ${this.ALLOWED_MIME_TYPES.join(', ')}`);
         }
+        // Il mimetype dichiarato dal client e falsificabile: verifica i magic byte reali.
+        if (!this.hasValidSignature(file)) {
+            throw new common_1.BadRequestException('Il contenuto del file non corrisponde al tipo dichiarato.');
+        }
+    }
+    hasValidSignature(file) {
+        const buffer = file === null || file === void 0 ? void 0 : file.buffer;
+        if (!buffer || buffer.length < 4) {
+            return false;
+        }
+        const startsWith = (...bytes) => bytes.every((byte, index) => buffer[index] === byte);
+        switch (file.mimetype) {
+            case 'application/pdf':
+                return startsWith(0x25, 0x50, 0x44, 0x46);
+            case 'image/jpeg':
+                return startsWith(0xff, 0xd8, 0xff);
+            case 'image/png':
+                return startsWith(0x89, 0x50, 0x4e, 0x47, 0x0d, 0x0a, 0x1a, 0x0a);
+            case 'application/msword':
+            case 'application/vnd.ms-excel':
+                return startsWith(0xd0, 0xcf, 0x11, 0xe0);
+            case 'application/vnd.openxmlformats-officedocument.wordprocessingml.document':
+            case 'application/vnd.openxmlformats-officedocument.spreadsheetml.sheet':
+                // DOCX/XLSX sono archivi ZIP.
+                return startsWith(0x50, 0x4b, 0x03, 0x04)
+                    || startsWith(0x50, 0x4b, 0x05, 0x06)
+                    || startsWith(0x50, 0x4b, 0x07, 0x08);
+            default:
+                return false;
+        }
+    }
+    sanitizeFilename(name) {
+        var _a;
+        const raw = typeof name === 'string' ? name : '';
+        const base = (_a = raw.replace(/\\/g, '/').split('/').pop()) !== null && _a !== void 0 ? _a : '';
+        const cleaned = base.replace(/[\u0000-\u001f\u007f<>:"|?*]/g, '_').trim();
+        return cleaned.slice(0, 255) || 'allegato';
     }
     getAttachmentTypes() {
         return __awaiter(this, void 0, void 0, function* () {
@@ -74,7 +140,7 @@ let AllegatiService = class AllegatiService {
                 return results;
             }
             catch (error) {
-                console.error('[AllegatiService] getAttachmentTypes - Errore:', error);
+                this.logger.error('[AllegatiService] getAttachmentTypes - Errore:', error);
                 if (error instanceof common_1.InternalServerErrorException) {
                     throw error;
                 }
@@ -84,6 +150,7 @@ let AllegatiService = class AllegatiService {
     }
     uploadFile(file, uploadSingleFileRequest) {
         return __awaiter(this, void 0, void 0, function* () {
+            var _a;
             try {
                 this.validateFile(file);
                 // Convert buffer to base64 in chunks to avoid memory issues
@@ -93,19 +160,19 @@ let AllegatiService = class AllegatiService {
                     const chunk = file.buffer.slice(i, i + chunkSize);
                     base64Content += chunk.toString('base64');
                 }
-                const insertQuery = `
-                INSERT INTO ALLEGATI (
-                    CODICE, TIPCOD, ORDINE, DESALL, NOMEFILE,
-                    DADATAVAL, ADATAVAL, ALLEGATO, IDXTIPOALL, DATMODIF, DOCRIF
-                ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, CURRENT_TIMESTAMP, ?)
-                RETURNING IDXALL
+                const insertQuery = `
+                INSERT INTO ALLEGATI (
+                    CODICE, TIPCOD, ORDINE, DESALL, NOMEFILE,
+                    DADATAVAL, ADATAVAL, ALLEGATO, IDXTIPOALL, DATMODIF, DOCRIF
+                ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, CURRENT_TIMESTAMP, ?)
+                RETURNING IDXALL
             `;
                 const params = [
                     uploadSingleFileRequest.codice,
                     uploadSingleFileRequest.tipoCodice,
                     uploadSingleFileRequest.ordine,
                     uploadSingleFileRequest.descrizioneAllegato,
-                    file.originalname,
+                    this.sanitizeFilename(file.originalname),
                     uploadSingleFileRequest.dataInizioValidita,
                     uploadSingleFileRequest.dataFineValidita,
                     base64Content,
@@ -113,16 +180,20 @@ let AllegatiService = class AllegatiService {
                     uploadSingleFileRequest.riferimentoDocumento
                 ];
                 const result = yield Orm_1.Orm.query(this.allegatiOptions.databaseOptions, insertQuery, params);
-                if (!result || !result.IDXALL) {
+                // node-firebird restituisce le righe di INSERT ... RETURNING come array; il fallback
+                // copre le versioni/driver che restituiscono un singolo oggetto.
+                const inserted = (Array.isArray(result) ? result[0] : result);
+                const insertedId = (_a = inserted === null || inserted === void 0 ? void 0 : inserted.IDXALL) !== null && _a !== void 0 ? _a : inserted === null || inserted === void 0 ? void 0 : inserted.idxall;
+                if (insertedId === undefined || insertedId === null) {
                     throw new common_1.InternalServerErrorException('Errore durante il salvataggio del file');
                 }
                 return {
-                    id: result.IDXALL,
-                    filename: file.originalname,
+                    id: Number(insertedId),
+                    filename: this.sanitizeFilename(file.originalname),
                 };
             }
             catch (error) {
-                console.error('[AllegatiService] uploadFile - Errore:', error);
+                this.logger.error('[AllegatiService] uploadFile - Errore:', error);
                 if (error instanceof common_1.BadRequestException || error instanceof common_1.InternalServerErrorException) {
                     throw error;
                 }
@@ -133,10 +204,10 @@ let AllegatiService = class AllegatiService {
     ensureTableExists() {
         return __awaiter(this, void 0, void 0, function* () {
             try {
-                const query = `
-                SELECT RDB$RELATION_NAME 
-                FROM RDB$RELATIONS 
-                WHERE RDB$RELATION_NAME = 'ALLEGATI'
+                const query = `
+                SELECT RDB$RELATION_NAME 
+                FROM RDB$RELATIONS 
+                WHERE RDB$RELATION_NAME = 'ALLEGATI'
             `;
                 const result = yield Orm_1.Orm.query(this.allegatiOptions.databaseOptions, query);
                 if (!result || result.length === 0) {
@@ -144,45 +215,48 @@ let AllegatiService = class AllegatiService {
                 }
             }
             catch (error) {
-                console.error('[AllegatiService] Errore verifica tabella ALLEGATI:', error);
+                this.logger.error('[AllegatiService] Errore verifica tabella ALLEGATI:', error);
                 throw new common_1.InternalServerErrorException('Errore durante la verifica della tabella ALLEGATI');
             }
         });
     }
     downloadFile(id) {
         return __awaiter(this, void 0, void 0, function* () {
+            var _a, _b;
             try {
                 if (!id || id <= 0) {
                     throw new common_1.BadRequestException('ID allegato non valido');
                 }
-                const query = `
-                SELECT 
-                    ALLEGATO as content,
-                    NOMEFILE as filename,
-                    IDXTIPOALL as idTipoAllegato
-                FROM ALLEGATI 
-                WHERE IDXALL = ?
+                const query = `
+                SELECT 
+                    ALLEGATO as content,
+                    NOMEFILE as filename,
+                    IDXTIPOALL as idTipoAllegato
+                FROM ALLEGATI 
+                WHERE IDXALL = ?
             `;
                 const results = yield Orm_1.Orm.query(this.allegatiOptions.databaseOptions, query, [id]);
                 if (!results || results.length === 0) {
                     throw new common_1.NotFoundException(`Allegato con ID ${id} non trovato`);
                 }
                 const result = results[0];
-                if (!result.CONTENT) {
+                const content = (_a = result === null || result === void 0 ? void 0 : result.CONTENT) !== null && _a !== void 0 ? _a : result === null || result === void 0 ? void 0 : result.content;
+                const filename = (_b = result === null || result === void 0 ? void 0 : result.FILENAME) !== null && _b !== void 0 ? _b : result === null || result === void 0 ? void 0 : result.filename;
+                if (typeof content !== 'string' || content.length === 0) {
                     throw new common_1.InternalServerErrorException('Contenuto file non disponibile');
                 }
-                if (!result.FILENAME) {
+                if (typeof filename !== 'string' || filename.length === 0) {
                     throw new common_1.InternalServerErrorException('Nome file non disponibile');
                 }
-                const mimetype = this.detectMimeType(result.FILENAME);
+                const mimetype = this.detectMimeType(filename);
                 return {
-                    contentBase64: result.CONTENT,
-                    filename: result.FILENAME,
+                    contentBase64: content,
+                    filename,
                     mimetype
                 };
             }
             catch (error) {
-                console.error('[AllegatiService] downloadFile - Errore:', error);
+                this.logger.error('[AllegatiService] downloadFile - Errore:', error);
                 if (error instanceof common_1.BadRequestException ||
                     error instanceof common_1.NotFoundException ||
                     error instanceof common_1.InternalServerErrorException) {
@@ -222,7 +296,7 @@ let AllegatiService = class AllegatiService {
                 yield Orm_1.Orm.execute(this.allegatiOptions.databaseOptions, query, [id]);
             }
             catch (error) {
-                console.error('[AllegatiService] deleteFile - Errore:', error);
+                this.logger.error('[AllegatiService] deleteFile - Errore:', error);
                 if (error instanceof common_1.BadRequestException ||
                     error instanceof common_1.NotFoundException ||
                     error instanceof common_1.InternalServerErrorException) {
@@ -255,44 +329,31 @@ let AllegatiService = class AllegatiService {
                         params.push(filters.idxtipoall);
                     }
                 }
-                const query = `
-                SELECT 
-                    IDXALL as id,
-                    NOMEFILE as filename,
-                    'application/octet-stream' as mimetype,
-                    DATMODIF as uploadDate,
-                    CODICE as codice,
-                    TIPCOD as tipoCodice,
-                    ORDINE as ordine,
-                    DESALL as descrizioneAllegato,
-                    DADATAVAL as dataInizioValidita,
-                    ADATAVAL as dataFineValidita,
-                    IDXTIPOALL as idTipoAllegato,
-                    DOCRIF as riferimentoDocumento
-                FROM ALLEGATI
-                ${whereConditions.length > 0 ? `WHERE ${whereConditions.join(' AND ')}` : ''}
+                const query = `
+                SELECT 
+                    IDXALL as id,
+                    NOMEFILE as filename,
+                    'application/octet-stream' as mimetype,
+                    DATMODIF as uploadDate,
+                    CODICE as codice,
+                    TIPCOD as tipoCodice,
+                    ORDINE as ordine,
+                    DESALL as descrizioneAllegato,
+                    DADATAVAL as dataInizioValidita,
+                    ADATAVAL as dataFineValidita,
+                    IDXTIPOALL as idTipoAllegato,
+                    DOCRIF as riferimentoDocumento
+                FROM ALLEGATI
+                ${whereConditions.length > 0 ? `WHERE ${whereConditions.join(' AND ')}` : ''}
             `;
                 const results = yield Orm_1.Orm.query(this.allegatiOptions.databaseOptions, query, params);
                 if (!results) {
                     throw new common_1.InternalServerErrorException('Errore durante il recupero della lista dei file');
                 }
-                return results.map((r) => ({
-                    id: r.ID,
-                    filename: r.FILENAME,
-                    mimetype: r.MIMETYPE,
-                    uploadDate: r.UPLOADDATE,
-                    codice: r.CODICE,
-                    tipoCodice: r.TIPOCODICE,
-                    ordine: r.ORDINE,
-                    descrizioneAllegato: r.DESCRIZIONEALLEGATO,
-                    dataInizioValidita: r.DATAINIZIOVALIDITA,
-                    dataFineValidita: r.DATAFINEVALIDITA,
-                    idTipoAllegato: r.IDTIPOALLEGATO,
-                    riferimentoDocumento: r.RIFERIMENTODOCUMENTO
-                }));
+                return results.map((r) => this.toAllegatoDto(r));
             }
             catch (error) {
-                console.error('[AllegatiService] listFiles - Errore:', error);
+                this.logger.error('[AllegatiService] listFiles - Errore:', error);
                 if (error instanceof common_1.InternalServerErrorException) {
                     throw error;
                 }
@@ -301,7 +362,7 @@ let AllegatiService = class AllegatiService {
         });
     }
     /**
-     * Find allegati by any combination of tipcod, codice, docrif, idxtipoall
+     * Find allegati by a combination of tipcod, codice, docrif, idxtipoall
      */
     findByFields(fields) {
         return __awaiter(this, void 0, void 0, function* () {
@@ -324,44 +385,31 @@ let AllegatiService = class AllegatiService {
                     whereConditions.push('IDXTIPOALL = ?');
                     params.push(fields.idxtipoall);
                 }
-                const query = `
-                SELECT 
-                    IDXALL as id,
-                    NOMEFILE as filename,
-                    'application/octet-stream' as mimetype,
-                    DATMODIF as uploadDate,
-                    CODICE as codice,
-                    TIPCOD as tipoCodice,
-                    ORDINE as ordine,
-                    DESALL as descrizioneAllegato,
-                    DADATAVAL as dataInizioValidita,
-                    ADATAVAL as dataFineValidita,
-                    IDXTIPOALL as idTipoAllegato,
-                    DOCRIF as riferimentoDocumento
-                FROM ALLEGATI
-                ${whereConditions.length > 0 ? `WHERE ${whereConditions.join(' AND ')}` : ''}
+                const query = `
+                SELECT 
+                    IDXALL as id,
+                    NOMEFILE as filename,
+                    'application/octet-stream' as mimetype,
+                    DATMODIF as uploadDate,
+                    CODICE as codice,
+                    TIPCOD as tipoCodice,
+                    ORDINE as ordine,
+                    DESALL as descrizioneAllegato,
+                    DADATAVAL as dataInizioValidita,
+                    ADATAVAL as dataFineValidita,
+                    IDXTIPOALL as idTipoAllegato,
+                    DOCRIF as riferimentoDocumento
+                FROM ALLEGATI
+                ${whereConditions.length > 0 ? `WHERE ${whereConditions.join(' AND ')}` : ''}
             `;
                 const results = yield Orm_1.Orm.query(this.allegatiOptions.databaseOptions, query, params);
                 if (!results) {
                     throw new common_1.InternalServerErrorException('Errore durante la ricerca degli allegati');
                 }
-                return results.map((r) => ({
-                    id: r.ID,
-                    filename: r.FILENAME,
-                    mimetype: r.MIMETYPE,
-                    uploadDate: r.UPLOADDATE,
-                    codice: r.CODICE,
-                    tipoCodice: r.TIPOCODICE,
-                    ordine: r.ORDINE,
-                    descrizioneAllegato: r.DESCRIZIONEALLEGATO,
-                    dataInizioValidita: r.DATAINIZIOVALIDITA,
-                    dataFineValidita: r.DATAFINEVALIDITA,
-                    idTipoAllegato: r.IDTIPOALLEGATO,
-                    riferimentoDocumento: r.RIFERIMENTODOCUMENTO
-                }));
+                return results.map((r) => this.toAllegatoDto(r));
             }
             catch (error) {
-                console.error('[AllegatiService] findByFields - Errore:', error);
+                this.logger.error('[AllegatiService] findByFields - Errore:', error);
                 throw new common_1.InternalServerErrorException('Errore durante la ricerca degli allegati');
             }
         });
@@ -404,7 +452,7 @@ let AllegatiService = class AllegatiService {
                 }
             }
             catch (error) {
-                console.error('[AllegatiService] updateFieldsById - Errore:', error);
+                this.logger.error('[AllegatiService] updateFieldsById - Errore:', error);
                 throw error;
             }
         });
@@ -414,13 +462,14 @@ let AllegatiService = class AllegatiService {
      */
     getOneByFields(fields) {
         return __awaiter(this, void 0, void 0, function* () {
+            var _a;
             const results = yield this.findByFields(fields);
-            return results.length > 0 ? results[0] : null;
+            return results.length > 0 ? ((_a = results[0]) !== null && _a !== void 0 ? _a : null) : null;
         });
     }
 };
 exports.AllegatiService = AllegatiService;
-exports.AllegatiService = AllegatiService = __decorate([
+exports.AllegatiService = AllegatiService = AllegatiService_1 = __decorate([
     autobind_1.autobind,
     (0, common_1.Injectable)(),
     __param(0, (0, common_1.Inject)('ALLEGATI_OPTIONS')),