emilsoftware-utilities 2.0.0-dev.23 → 2.0.0-dev.24

package/dist/accessi-module/Console/index.html

@@ -13,45 +13,113 @@
   <link rel="stylesheet" href="/api/accessi/console/assets/console.css">
 </head>
 <body>
-  <div id="loading-overlay" hidden aria-live="polite" aria-busy="true">
+  <div id="loading-overlay" aria-live="polite" aria-busy="true">
     <div class="loading-panel" role="status">
       <span class="loading-spinner" aria-hidden="true"></span>
-      <span><strong>Operazione in corso</strong><small>Attendere il completamento della richiesta.</small></span>
+      <span><strong>Caricamento</strong><small>Verifica della sessione in corso.</small></span>
     </div>
   </div>
   <main id="app">
-    <section id="login" class="card" aria-labelledby="login-title">
+    <section id="login" class="card" aria-labelledby="login-title" hidden>
       <h1 id="login-title">Accessi Console</h1>
-      <p>Gestione centralizzata di utenti, ruoli, grant e identità SSO.</p>
+      <p>Gestione di utenti, ruoli, grant e accessi.</p>
       <form id="login-form" method="post" action="" novalidate>
-        <label>Email o utente<input name="email" required autocomplete="username"></label>
-        <label id="password-field" hidden>Password<input name="password" type="password" autocomplete="current-password" disabled></label>
+        <label>Email o utente <button type="button" class="help-dot" data-help="login-email" aria-label="Aiuto: Email o utente">i</button><input name="email" required autocomplete="username"></label>
+        <label id="password-field" hidden>Password <button type="button" class="help-dot" data-help="login-password" aria-label="Aiuto: Password">i</button><input name="password" type="password" autocomplete="current-password" disabled></label>
         <button id="login-submit" type="submit">Continua</button>
       </form>
       <form id="two-factor-form" hidden>
-        <p>Inserisci il codice ricevuto via email per completare l'accesso.</p>
+        <p class="form-help">Inserisci il codice ricevuto via email.</p>
         <label>Codice di accesso<input name="code" inputmode="numeric" autocomplete="one-time-code" pattern="[0-9]{6}" minlength="6" maxlength="6" required></label>
         <p id="two-factor-status" class="form-help" role="status"></p>
         <button type="submit">Verifica e accedi</button>
         <button id="resend-code" type="button" class="secondary">Invia un nuovo codice</button>
       </form>
-      <button id="restart-login" type="button" class="secondary" hidden>Ricomincia l'accesso</button>
+      <button id="restart-login" type="button" class="secondary" hidden>Ricomincia</button>
       <p id="login-error" class="error" role="alert"></p>
     </section>
+
     <section id="console" hidden>
-      <header>
-        <div><strong>Accessi Console</strong><small id="who"></small></div>
-        <button id="logout" class="secondary" type="button">Esci</button>
-      </header>
-      <nav id="nav" aria-label="Sezioni console">
-        <a data-view="users" href="./utenti">Utenti</a>
-        <a data-view="roles" href="./ruoli-e-grant">Ruoli e grant</a>
-        <a data-view="menus" href="./menu-e-gruppi">Menu e gruppi</a>
-        <a data-view="filters" href="./filtri">Filtri</a>
-        <a id="sso-navigation" data-view="sso" href="./sso" hidden>SSO</a>
-      </nav>
-      <div id="notice" role="status" aria-live="polite"></div>
-      <section id="view" aria-live="polite"></section>
+      <aside class="sidebar">
+        <div class="brand">
+          <span class="brand-mark" aria-hidden="true">A</span>
+          <span class="brand-text"><strong>Accessi</strong><small id="who"></small></span>
+        </div>
+        <nav id="nav" aria-label="Sezioni console">
+          <ul class="nav-tree">
+            <li>
+              <a data-view="users" href="./utenti">
+                <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.7" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M17 21v-2a4 4 0 0 0-4-4H5a4 4 0 0 0-4 4v2"/><circle cx="9" cy="7" r="4"/><path d="M23 21v-2a4 4 0 0 0-3-3.87"/><path d="M16 3.13a4 4 0 0 1 0 7.75"/></svg>
+                <span>Utenti</span>
+              </a>
+            </li>
+            <li>
+              <a data-view="roles" href="./ruoli-e-grant">
+                <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.7" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M12 22s8-4 8-10V5l-8-3-8 3v7c0 6 8 10 8 10z"/><path d="M9 12l2 2 4-4"/></svg>
+                <span>Ruoli e grant</span>
+              </a>
+            </li>
+            <li>
+              <details data-nav-group="menus" open>
+                <summary>
+                  <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.7" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><polygon points="12 2 2 7 12 12 22 7 12 2"/><polyline points="2 17 12 22 22 17"/><polyline points="2 12 12 17 22 12"/></svg>
+                  <span>Menu e gruppi</span>
+                  <svg class="nav-chevron" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.9" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><polyline points="9 6 15 12 9 18"/></svg>
+                </summary>
+                <ul>
+                  <li><a data-view="menuGroups" href="./menu-e-gruppi/gruppi">Gruppi</a></li>
+                  <li><a data-view="menuItems" href="./menu-e-gruppi/menu">Menu</a></li>
+                  <li><a data-view="menuTypes" href="./menu-e-gruppi/tipi-menu">Tipi menu</a></li>
+                </ul>
+              </details>
+            </li>
+            <li>
+              <details data-nav-group="filters" open>
+                <summary>
+                  <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.7" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><polygon points="22 3 2 3 10 12.46 10 19 14 21 14 12.46 22 3"/></svg>
+                  <span>Filtri</span>
+                  <svg class="nav-chevron" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.9" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><polyline points="9 6 15 12 9 18"/></svg>
+                </summary>
+                <ul>
+                  <li><a data-view="filterUser" href="./filtri/utente">Filtri utente</a></li>
+                  <li><a data-view="filterTypes" href="./filtri/tipi">Tipi filtro</a></li>
+                </ul>
+              </details>
+            </li>
+            <li>
+              <a data-view="tokens" href="./token-di-servizio">
+                <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.7" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M21 2l-2 2m-7.61 7.61a5.5 5.5 0 1 1-7.778 7.778 5.5 5.5 0 0 1 7.777-7.777zm0 0L15.5 7.5m0 0l3 3L22 7l-3-3m-3.5 3.5L19 4"/></svg>
+                <span>Token di servizio</span>
+              </a>
+            </li>
+            <li>
+              <details id="sso-navigation" data-nav-group="sso" open hidden>
+                <summary>
+                  <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.7" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M10 13a5 5 0 0 0 7.07 0l3-3a5 5 0 0 0-7.07-7.07l-1.5 1.5"/><path d="M14 11a5 5 0 0 0-7.07 0l-3 3a5 5 0 0 0 7.07 7.07l1.5-1.5"/></svg>
+                  <span>SSO</span>
+                  <svg class="nav-chevron" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.9" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><polyline points="9 6 15 12 9 18"/></svg>
+                </summary>
+                <ul>
+                  <li><a data-view="ssoProviders" href="./sso/provider">Provider</a></li>
+                  <li><a data-view="ssoUsers" href="./sso/utenti">Utenti e identità</a></li>
+                </ul>
+              </details>
+            </li>
+            <li>
+              <a data-view="wiki" href="./wiki">
+                <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.7" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M4 19.5A2.5 2.5 0 0 1 6.5 17H20"/><path d="M6.5 2H20v20H6.5A2.5 2.5 0 0 1 4 19.5v-15A2.5 2.5 0 0 1 6.5 2z"/></svg>
+                <span>Wiki</span>
+              </a>
+            </li>
+          </ul>
+        </nav>
+        <button id="logout" class="secondary sidebar-logout" type="button">Esci</button>
+      </aside>
+
+      <div class="content">
+        <div id="notice" role="status" aria-live="polite"></div>
+        <section id="view" aria-live="polite"></section>
+      </div>
     </section>
   </main>
   <script type="module" src="/api/accessi/console/assets/console.js"></script>

package/dist/accessi-module/Console/openApiClient.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Client leggero della console amministrativa.
+ *
+ * Non contiene endpoint duplicati: al primo utilizzo legge la specifica OpenAPI
+ * esposta dalla stessa istanza Accessi e risolve ogni chiamata dal relativo
+ * operationId. Quando le API cambiano, Swagger resta quindi l'unica fonte di
+ * verita per metodo HTTP, URL e parametri.
+ */
+export type AccessiConsoleOperation = 'login' | 'getUserByToken' | 'getUsers' | 'createManagedUser' | 'updateUtente' | 'deleteUser' | 'getRoles' | 'createRole' | 'updateRole' | 'assignRolesToUser' | 'assignPermissionsToUser' | 'getMenus' | 'getGroupsWithMenus' | 'getUserRolesAndGrants' | 'setMenuEnabled' | 'setGroupEnabled' | 'getTipiFiltro' | 'getFiltriUtente' | 'saveFiltriUtente' | 'getFederatedIdentities' | 'linkFederatedIdentity' | 'createFederatedUser' | 'updateFederatedIdentity' | 'disableFederatedIdentity' | 'setPasswordLoginPolicy';
+export type AccessiConsoleRequest = {
+    path?: Record<string, string | number>;
+    query?: Record<string, string | number | boolean | undefined>;
+    body?: unknown;
+};
+/** Gestisce le chiamate HTTP della console secondo la specifica Swagger attiva. */
+export declare class AccessiOpenApiClient {
+    private readonly apiBasePath;
+    private readonly swaggerPath;
+    private readonly getToken;
+    private readonly operations;
+    private documentPromise?;
+    constructor(apiBasePath: string, swaggerPath: string, getToken: () => string | null);
+    /** Carica la specifica una sola volta e indicizza le operationId disponibili. */
+    initialize(): Promise<void>;
+    /** Esegue un'operazione Swagger e restituisce direttamente il campo Result storico. */
+    request<T = unknown>(operationId: AccessiConsoleOperation, request?: AccessiConsoleRequest): Promise<T>;
+    private loadDocument;
+    /**
+     * Ponte di compatibilita per le viste preesistenti della console.
+     * La rotta passata non e usata per costruire la richiesta: viene soltanto
+     * confrontata con Swagger per individuare la operationId e i path parameter.
+     */
+    requestByLegacyUrl<T = unknown>(url: string, method?: string, body?: unknown): Promise<T>;
+}

package/dist/accessi-module/Console/openApiClient.js

@@ -0,0 +1,111 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AccessiOpenApiClient = void 0;
+/** Gestisce le chiamate HTTP della console secondo la specifica Swagger attiva. */
+class AccessiOpenApiClient {
+    constructor(apiBasePath = '/api/accessi', swaggerPath = '/api/accessi/swagger.json', getToken) {
+        this.apiBasePath = apiBasePath;
+        this.swaggerPath = swaggerPath;
+        this.getToken = getToken;
+        this.operations = new Map();
+    }
+    /** Carica la specifica una sola volta e indicizza le operationId disponibili. */
+    initialize() {
+        return __awaiter(this, void 0, void 0, function* () {
+            if (!this.documentPromise)
+                this.documentPromise = this.loadDocument();
+            return this.documentPromise;
+        });
+    }
+    /** Esegue un'operazione Swagger e restituisce direttamente il campo Result storico. */
+    request(operationId_1) {
+        return __awaiter(this, arguments, void 0, function* (operationId, request = {}) {
+            var _a, _b;
+            yield this.initialize();
+            const operation = this.operations.get(operationId);
+            if (!operation)
+                throw new Error(`L'operazione Swagger ${operationId} non e disponibile in questa istanza di Accessi.`);
+            const path = operation.path.replace(/\{([^}]+)\}/g, (_, name) => {
+                var _a;
+                const value = (_a = request.path) === null || _a === void 0 ? void 0 : _a[name];
+                if (value === undefined || value === null)
+                    throw new Error(`Manca il parametro di percorso ${name} per ${operationId}.`);
+                return encodeURIComponent(String(value));
+            });
+            const query = new URLSearchParams();
+            for (const [name, value] of Object.entries((_a = request.query) !== null && _a !== void 0 ? _a : {})) {
+                if (value !== undefined && value !== null)
+                    query.set(name, String(value));
+            }
+            const response = yield fetch(`${this.apiBasePath}${path}${query.size ? `?${query}` : ''}`, {
+                method: operation.method,
+                headers: Object.assign(Object.assign({}, (this.getToken() ? { Authorization: `Bearer ${this.getToken()}` } : {})), (request.body === undefined ? {} : { 'Content-Type': 'application/json' })),
+                body: request.body === undefined ? undefined : JSON.stringify(request.body),
+            });
+            const payload = yield response.json().catch(() => ({}));
+            if (!response.ok)
+                throw new Error(payload.message || payload.error || `Errore HTTP ${response.status}`);
+            return ((_b = payload.Result) !== null && _b !== void 0 ? _b : payload);
+        });
+    }
+    loadDocument() {
+        return __awaiter(this, void 0, void 0, function* () {
+            var _a;
+            const response = yield fetch(this.swaggerPath, { headers: { Accept: 'application/json' } });
+            if (!response.ok)
+                throw new Error('Impossibile caricare la specifica Swagger di Accessi.');
+            const document = (yield response.json());
+            for (const [path, pathItem] of Object.entries((_a = document.paths) !== null && _a !== void 0 ? _a : {})) {
+                for (const [method, definition] of Object.entries(pathItem)) {
+                    if (definition === null || definition === void 0 ? void 0 : definition.operationId) {
+                        this.operations.set(definition.operationId, {
+                            operationId: definition.operationId,
+                            method: method.toUpperCase(),
+                            path,
+                        });
+                    }
+                }
+            }
+        });
+    }
+    /**
+     * Ponte di compatibilita per le viste preesistenti della console.
+     * La rotta passata non e usata per costruire la richiesta: viene soltanto
+     * confrontata con Swagger per individuare la operationId e i path parameter.
+     */
+    requestByLegacyUrl(url_1) {
+        return __awaiter(this, arguments, void 0, function* (url, method = 'GET', body) {
+            yield this.initialize();
+            const parsed = new URL(url, window.location.origin);
+            const relativePath = parsed.pathname.replace(this.apiBasePath, '');
+            const operation = [...this.operations.values()].find((candidate) => {
+                const expression = `^${candidate.path.replace(/\{[^}]+\}/g, '[^/]+')}$`;
+                return candidate.method === method.toUpperCase() && new RegExp(expression).test(relativePath);
+            });
+            if (!operation)
+                throw new Error(`Nessuna operation Swagger corrisponde a ${method} ${relativePath}.`);
+            const path = {};
+            const names = [...operation.path.matchAll(/\{([^}]+)\}/g)].map((match) => match[1]);
+            const values = relativePath.split('/').filter(Boolean);
+            const templates = operation.path.split('/').filter(Boolean);
+            templates.forEach((part, index) => {
+                const name = names.find((item) => part === `{${item}}`);
+                if (name)
+                    path[name] = values[index];
+            });
+            const query = Object.fromEntries(parsed.searchParams.entries());
+            return this.request(operation.operationId, { path, query, body });
+        });
+    }
+}
+exports.AccessiOpenApiClient = AccessiOpenApiClient;
+//# sourceMappingURL=openApiClient.js.map

package/dist/accessi-module/Console/openApiClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"openApiClient.js","sourceRoot":"","sources":["../../../src/accessi-module/Console/openApiClient.ts"],"names":[],"mappings":";;;;;;;;;;;;AA4CA,mFAAmF;AACnF,MAAa,oBAAoB;IAI/B,YACmB,cAAc,cAAc,EAC5B,cAAc,2BAA2B,EACzC,QAA6B;QAF7B,gBAAW,GAAX,WAAW,CAAiB;QAC5B,gBAAW,GAAX,WAAW,CAA8B;QACzC,aAAQ,GAAR,QAAQ,CAAqB;QAN/B,eAAU,GAAG,IAAI,GAAG,EAA4B,CAAC;IAO/D,CAAC;IAEJ,iFAAiF;IAC3E,UAAU;;YACd,IAAI,CAAC,IAAI,CAAC,eAAe;gBAAE,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;YACtE,OAAO,IAAI,CAAC,eAAe,CAAC;QAC9B,CAAC;KAAA;IAED,uFAAuF;IACjF,OAAO;6DAAc,WAAoC,EAAE,UAAiC,EAAE;;YAClG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;YACxB,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACnD,IAAI,CAAC,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,WAAW,kDAAkD,CAAC,CAAC;YAEvH,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,EAAE,IAAY,EAAE,EAAE;;gBACtE,MAAM,KAAK,GAAG,MAAA,OAAO,CAAC,IAAI,0CAAG,IAAI,CAAC,CAAC;gBACnC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;oBAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,IAAI,QAAQ,WAAW,GAAG,CAAC,CAAC;gBACzH,OAAO,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAC3C,CAAC,CAAC,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;YACpC,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAA,OAAO,CAAC,KAAK,mCAAI,EAAE,CAAC,EAAE,CAAC;gBAChE,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;oBAAE,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAC5E,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,WAAW,GAAG,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE;gBACzF,MAAM,EAAE,SAAS,CAAC,MAAM;gBACxB,OAAO,kCACF,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,GACvE,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAC9E;gBACD,IAAI,EAAE,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC;aAC5E,CAAC,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACxD,IAAI,CAAC,QAAQ,CAAC,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,KAAK,IAAI,eAAe,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;YACxG,OAAO,CAAC,MAAA,OAAO,CAAC,MAAM,mCAAI,OAAO,CAAM,CAAC;QAC1C,CAAC;KAAA;IAEa,YAAY;;;YACxB,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,EAAE,CAAC,CAAC;YAC5F,IAAI,CAAC,QAAQ,CAAC,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;YAC3F,MAAM,QAAQ,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAoB,CAAC;YAC5D,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAA,QAAQ,CAAC,KAAK,mCAAI,EAAE,CAAC,EAAE,CAAC;gBACpE,KAAK,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC5D,IAAI,UAAU,aAAV,UAAU,uBAAV,UAAU,CAAE,WAAW,EAAE,CAAC;wBAC5B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,EAAE;4BAC1C,WAAW,EAAE,UAAU,CAAC,WAAsC;4BAC9D,MAAM,EAAE,MAAM,CAAC,WAAW,EAAE;4BAC5B,IAAI;yBACL,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;KAAA;IAED;;;;OAIG;IACG,kBAAkB;6DAAc,GAAW,EAAE,MAAM,GAAG,KAAK,EAAE,IAAc;YAC/E,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;YACxB,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACpD,MAAM,YAAY,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;YACnE,MAAM,SAAS,GAAG,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE;gBACjE,MAAM,UAAU,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC;gBACxE,OAAO,SAAS,CAAC,MAAM,KAAK,MAAM,CAAC,WAAW,EAAE,IAAI,IAAI,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAChG,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,MAAM,IAAI,YAAY,GAAG,CAAC,CAAC;YAEtG,MAAM,IAAI,GAA2B,EAAE,CAAC;YACxC,MAAM,KAAK,GAAG,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YACpF,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACvD,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAC5D,SAAS,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;gBAChC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC;gBACxD,IAAI,IAAI;oBAAE,IAAI,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YACvC,CAAC,CAAC,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC;YAChE,OAAO,IAAI,CAAC,OAAO,CAAI,SAAS,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACvE,CAAC;KAAA;CACF;AAxFD,oDAwFC","sourcesContent":["/**\n * Client leggero della console amministrativa.\n *\n * Non contiene endpoint duplicati: al primo utilizzo legge la specifica OpenAPI\n * esposta dalla stessa istanza Accessi e risolve ogni chiamata dal relativo\n * operationId. Quando le API cambiano, Swagger resta quindi l'unica fonte di\n * verita per metodo HTTP, URL e parametri.\n */\nexport type AccessiConsoleOperation =\n  | 'login'\n  | 'getUserByToken'\n  | 'getUsers'\n  | 'createManagedUser'\n  | 'updateUtente'\n  | 'deleteUser'\n  | 'getRoles'\n  | 'createRole'\n  | 'updateRole'\n  | 'assignRolesToUser'\n  | 'assignPermissionsToUser'\n  | 'getMenus'\n  | 'getGroupsWithMenus'\n  | 'getUserRolesAndGrants'\n  | 'setMenuEnabled'\n  | 'setGroupEnabled'\n  | 'getTipiFiltro'\n  | 'getFiltriUtente'\n  | 'saveFiltriUtente'\n  | 'getFederatedIdentities'\n  | 'linkFederatedIdentity'\n  | 'createFederatedUser'\n  | 'updateFederatedIdentity'\n  | 'disableFederatedIdentity'\n  | 'setPasswordLoginPolicy';\n\nexport type AccessiConsoleRequest = {\n  path?: Record<string, string | number>;\n  query?: Record<string, string | number | boolean | undefined>;\n  body?: unknown;\n};\n\ntype OpenApiOperation = { operationId: AccessiConsoleOperation; method: string; path: string };\ntype OpenApiDocument = { paths?: Record<string, Record<string, { operationId?: string }>> };\n\n/** Gestisce le chiamate HTTP della console secondo la specifica Swagger attiva. */\nexport class AccessiOpenApiClient {\n  private readonly operations = new Map<string, OpenApiOperation>();\n  private documentPromise?: Promise<void>;\n\n  constructor(\n    private readonly apiBasePath = '/api/accessi',\n    private readonly swaggerPath = '/api/accessi/swagger.json',\n    private readonly getToken: () => string | null,\n  ) {}\n\n  /** Carica la specifica una sola volta e indicizza le operationId disponibili. */\n  async initialize(): Promise<void> {\n    if (!this.documentPromise) this.documentPromise = this.loadDocument();\n    return this.documentPromise;\n  }\n\n  /** Esegue un'operazione Swagger e restituisce direttamente il campo Result storico. */\n  async request<T = unknown>(operationId: AccessiConsoleOperation, request: AccessiConsoleRequest = {}): Promise<T> {\n    await this.initialize();\n    const operation = this.operations.get(operationId);\n    if (!operation) throw new Error(`L'operazione Swagger ${operationId} non e disponibile in questa istanza di Accessi.`);\n\n    const path = operation.path.replace(/\\{([^}]+)\\}/g, (_, name: string) => {\n      const value = request.path?.[name];\n      if (value === undefined || value === null) throw new Error(`Manca il parametro di percorso ${name} per ${operationId}.`);\n      return encodeURIComponent(String(value));\n    });\n    const query = new URLSearchParams();\n    for (const [name, value] of Object.entries(request.query ?? {})) {\n      if (value !== undefined && value !== null) query.set(name, String(value));\n    }\n\n    const response = await fetch(`${this.apiBasePath}${path}${query.size ? `?${query}` : ''}`, {\n      method: operation.method,\n      headers: {\n        ...(this.getToken() ? { Authorization: `Bearer ${this.getToken()}` } : {}),\n        ...(request.body === undefined ? {} : { 'Content-Type': 'application/json' }),\n      },\n      body: request.body === undefined ? undefined : JSON.stringify(request.body),\n    });\n    const payload = await response.json().catch(() => ({}));\n    if (!response.ok) throw new Error(payload.message || payload.error || `Errore HTTP ${response.status}`);\n    return (payload.Result ?? payload) as T;\n  }\n\n  private async loadDocument(): Promise<void> {\n    const response = await fetch(this.swaggerPath, { headers: { Accept: 'application/json' } });\n    if (!response.ok) throw new Error('Impossibile caricare la specifica Swagger di Accessi.');\n    const document = (await response.json()) as OpenApiDocument;\n    for (const [path, pathItem] of Object.entries(document.paths ?? {})) {\n      for (const [method, definition] of Object.entries(pathItem)) {\n        if (definition?.operationId) {\n          this.operations.set(definition.operationId, {\n            operationId: definition.operationId as AccessiConsoleOperation,\n            method: method.toUpperCase(),\n            path,\n          });\n        }\n      }\n    }\n  }\n\n  /**\n   * Ponte di compatibilita per le viste preesistenti della console.\n   * La rotta passata non e usata per costruire la richiesta: viene soltanto\n   * confrontata con Swagger per individuare la operationId e i path parameter.\n   */\n  async requestByLegacyUrl<T = unknown>(url: string, method = 'GET', body?: unknown): Promise<T> {\n    await this.initialize();\n    const parsed = new URL(url, window.location.origin);\n    const relativePath = parsed.pathname.replace(this.apiBasePath, '');\n    const operation = [...this.operations.values()].find((candidate) => {\n      const expression = `^${candidate.path.replace(/\\{[^}]+\\}/g, '[^/]+')}$`;\n      return candidate.method === method.toUpperCase() && new RegExp(expression).test(relativePath);\n    });\n    if (!operation) throw new Error(`Nessuna operation Swagger corrisponde a ${method} ${relativePath}.`);\n\n    const path: Record<string, string> = {};\n    const names = [...operation.path.matchAll(/\\{([^}]+)\\}/g)].map((match) => match[1]);\n    const values = relativePath.split('/').filter(Boolean);\n    const templates = operation.path.split('/').filter(Boolean);\n    templates.forEach((part, index) => {\n      const name = names.find((item) => part === `{${item}}`);\n      if (name) path[name] = values[index];\n    });\n    const query = Object.fromEntries(parsed.searchParams.entries());\n    return this.request<T>(operation.operationId, { path, query, body });\n  }\n}\n"]}

package/dist/accessi-module/Console/wiki.d.ts

@@ -0,0 +1,52 @@
+/**
+ * Contenuto della Wiki della console Accessi.
+ *
+ * I contenuti sono dati strutturati (non HTML) così da poter essere resi in modo
+ * coerente dalla console e convertiti in un digest compatto per l'IA. Nessun
+ * segreto o dato specifico di un ambiente deve finire qui.
+ */
+export type WikiTone = 'info' | 'ok' | 'warn' | 'danger';
+export type WikiBlock = {
+    kind: 'p';
+    text: string;
+} | {
+    kind: 'h';
+    text: string;
+} | {
+    kind: 'list';
+    items: string[];
+    ordered?: boolean;
+} | {
+    kind: 'code';
+    language: string;
+    title?: string;
+    code: string;
+    variant?: 'good' | 'bad';
+} | {
+    kind: 'callout';
+    tone: WikiTone;
+    title?: string;
+    text: string;
+} | {
+    kind: 'table';
+    head: string[];
+    rows: string[][];
+};
+export interface WikiSection {
+    id: string;
+    group: string;
+    title: string;
+    summary: string;
+    blocks: WikiBlock[];
+}
+export declare const WIKI_SECTIONS: WikiSection[];
+/** Elenco ordinato dei gruppi per l'indice. */
+export declare function wikiGroups(): Array<{
+    group: string;
+    sections: WikiSection[];
+}>;
+/**
+ * Digest compatto in Markdown per l'IA che costruisce il backend integratore.
+ * Deriva dagli stessi dati della wiki, quindi resta sincronizzato.
+ */
+export declare function buildAiDigest(): string;