emilsoftware-utilities 2.0.0-dev.40 → 2.0.0-dev.41

package/dist/accessi-module/Console/accessiFetch.d.ts

@@ -1,3 +1,12 @@
+/** Emesso quando una richiesta autenticata riceve 401: la console deve riportare al login. */
+export declare const ACCESSI_UNAUTHORIZED_EVENT = "accessi-console-unauthorized";
+/** Errore del client console: conserva status, codice stabile Accessi e dettagli di validazione. */
+export declare class AccessiRequestError extends Error {
+    readonly status: number;
+    readonly code?: string | undefined;
+    readonly details?: string[] | undefined;
+    constructor(message: string, status: number, code?: string | undefined, details?: string[] | undefined);
+}
 /** Imposta il JWT usato da tutte le funzioni generate da Orval. */
 export declare function setAccessiConsoleToken(token: string | null): void;
 /**

package/dist/accessi-module/Console/accessiFetch.js

@@ -9,10 +9,24 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
     });
 };
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.AccessiRequestError = exports.ACCESSI_UNAUTHORIZED_EVENT = void 0;
 exports.setAccessiConsoleToken = setAccessiConsoleToken;
 exports.accessiFetch = accessiFetch;
 let accessToken = null;
 const loadingEventName = 'accessi-console-network';
+/** Emesso quando una richiesta autenticata riceve 401: la console deve riportare al login. */
+exports.ACCESSI_UNAUTHORIZED_EVENT = 'accessi-console-unauthorized';
+/** Errore del client console: conserva status, codice stabile Accessi e dettagli di validazione. */
+class AccessiRequestError extends Error {
+    constructor(message, status, code, details) {
+        super(message);
+        this.status = status;
+        this.code = code;
+        this.details = details;
+        this.name = 'AccessiRequestError';
+    }
+}
+exports.AccessiRequestError = AccessiRequestError;
 /** Notifies the browser shell without coupling generated Orval calls to the UI implementation. */
 function notifyNetworkActivity(active) {
     if (typeof window !== 'undefined') {
@@ -23,18 +37,26 @@ function notifyNetworkActivity(active) {
 function setAccessiConsoleToken(token) {
     accessToken = token;
 }
+/** Legge una stringa non vuota dal payload di errore Accessi, ignorando tipi inattesi. */
+function payloadString(payload, key) {
+    if (!payload || typeof payload !== 'object')
+        return undefined;
+    const value = payload[key];
+    return typeof value === 'string' && value.length > 0 ? value : undefined;
+}
 /**
  * Trasporto comune del client Orval: aggiunge il Bearer token e converte le
  * risposte di errore Accessi in Error JavaScript leggibili dalla console.
  */
 function accessiFetch(url, options) {
     return __awaiter(this, void 0, void 0, function* () {
-        var _a, _b;
+        var _a, _b, _c;
         const headers = new Headers(options.headers);
         headers.set('Accept', 'application/json');
         if (options.body !== undefined && !headers.has('Content-Type')) {
             headers.set('Content-Type', 'application/json');
         }
+        const authenticatedRequest = accessToken !== null;
         if (accessToken)
             headers.set('Authorization', `Bearer ${accessToken}`);
         notifyNetworkActivity(true);
@@ -42,8 +64,14 @@ function accessiFetch(url, options) {
             const response = yield fetch(url, Object.assign(Object.assign({}, options), { headers }));
             const payload = yield response.json().catch(() => undefined);
             if (!response.ok) {
-                const message = (_b = (_a = payload === null || payload === void 0 ? void 0 : payload.message) !== null && _a !== void 0 ? _a : payload === null || payload === void 0 ? void 0 : payload.error) !== null && _b !== void 0 ? _b : `Errore HTTP ${response.status}`;
-                throw new Error(message);
+                const message = (_b = (_a = payloadString(payload, 'message')) !== null && _a !== void 0 ? _a : payloadString(payload, 'error')) !== null && _b !== void 0 ? _b : `Errore HTTP ${response.status}`;
+                const rawDetails = payload && typeof payload === 'object' ? payload.details : undefined;
+                const details = Array.isArray(rawDetails) ? rawDetails.map((item) => String(item)) : undefined;
+                // Un 401 su una richiesta autenticata significa sessione scaduta/revocata: il token non e piu valido.
+                if (response.status === 401 && authenticatedRequest && typeof window !== 'undefined') {
+                    window.dispatchEvent(new CustomEvent(exports.ACCESSI_UNAUTHORIZED_EVENT));
+                }
+                throw new AccessiRequestError(message, response.status, (_c = payloadString(payload, 'code')) !== null && _c !== void 0 ? _c : payloadString(payload, 'error'), details);
             }
             return {
                 data: payload,

package/dist/accessi-module/Console/accessiFetch.js.map

@@ -1 +1 @@
-{"version":3,"file":"accessiFetch.js","sourceRoot":"","sources":["../../../src/accessi-module/Console/accessiFetch.ts"],"names":[],"mappings":";;;;;;;;;;;AAYA,wDAEC;AAMD,oCAwBC;AA5CD,IAAI,WAAW,GAAkB,IAAI,CAAC;AAEtC,MAAM,gBAAgB,GAAG,yBAAyB,CAAC;AAEnD,kGAAkG;AAClG,SAAS,qBAAqB,CAAC,MAAe;IAC5C,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;QAClC,MAAM,CAAC,aAAa,CAAC,IAAI,WAAW,CAAC,gBAAgB,EAAE,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;IAClF,CAAC;AACH,CAAC;AAED,mEAAmE;AACnE,SAAgB,sBAAsB,CAAC,KAAoB;IACzD,WAAW,GAAG,KAAK,CAAC;AACtB,CAAC;AAED;;;GAGG;AACH,SAAsB,YAAY,CAAI,GAAW,EAAE,OAAoB;;;QACrE,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC7C,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC;QAC1C,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;YAC/D,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;QAClD,CAAC;QACD,IAAI,WAAW;YAAE,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,WAAW,EAAE,CAAC,CAAC;QAEvE,qBAAqB,CAAC,IAAI,CAAC,CAAC;QAC5B,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,kCAAO,OAAO,KAAE,OAAO,IAAG,CAAC;YAC3D,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC7D,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,OAAO,GAAG,MAAA,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,OAAO,mCAAI,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,KAAK,mCAAI,eAAe,QAAQ,CAAC,MAAM,EAAE,CAAC;gBACvF,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;YAC3B,CAAC;YACD,OAAO;gBACL,IAAI,EAAE,OAAO;gBACb,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,OAAO,EAAE,QAAQ,CAAC,OAAO;aACrB,CAAC;QACT,CAAC;gBAAS,CAAC;YACT,qBAAqB,CAAC,KAAK,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;CAAA","sourcesContent":["let accessToken: string | null = null;\n\nconst loadingEventName = 'accessi-console-network';\n\n/** Notifies the browser shell without coupling generated Orval calls to the UI implementation. */\nfunction notifyNetworkActivity(active: boolean): void {\n  if (typeof window !== 'undefined') {\n    window.dispatchEvent(new CustomEvent(loadingEventName, { detail: { active } }));\n  }\n}\n\n/** Imposta il JWT usato da tutte le funzioni generate da Orval. */\nexport function setAccessiConsoleToken(token: string | null): void {\n  accessToken = token;\n}\n\n/**\n * Trasporto comune del client Orval: aggiunge il Bearer token e converte le\n * risposte di errore Accessi in Error JavaScript leggibili dalla console.\n */\nexport async function accessiFetch<T>(url: string, options: RequestInit): Promise<T> {\n  const headers = new Headers(options.headers);\n  headers.set('Accept', 'application/json');\n  if (options.body !== undefined && !headers.has('Content-Type')) {\n    headers.set('Content-Type', 'application/json');\n  }\n  if (accessToken) headers.set('Authorization', `Bearer ${accessToken}`);\n\n  notifyNetworkActivity(true);\n  try {\n    const response = await fetch(url, { ...options, headers });\n    const payload = await response.json().catch(() => undefined);\n    if (!response.ok) {\n      const message = payload?.message ?? payload?.error ?? `Errore HTTP ${response.status}`;\n      throw new Error(message);\n    }\n    return {\n      data: payload,\n      status: response.status,\n      headers: response.headers,\n    } as T;\n  } finally {\n    notifyNetworkActivity(false);\n  }\n}\n"]}
+{"version":3,"file":"accessiFetch.js","sourceRoot":"","sources":["../../../src/accessi-module/Console/accessiFetch.ts"],"names":[],"mappings":";;;;;;;;;;;;AAsBA,wDAEC;AAaD,oCA+BC;AApED,IAAI,WAAW,GAAkB,IAAI,CAAC;AAEtC,MAAM,gBAAgB,GAAG,yBAAyB,CAAC;AACnD,8FAA8F;AACjF,QAAA,0BAA0B,GAAG,8BAA8B,CAAC;AAEzE,oGAAoG;AACpG,MAAa,mBAAoB,SAAQ,KAAK;IAC5C,YAAY,OAAe,EAAW,MAAc,EAAW,IAAa,EAAW,OAAkB;QACvG,KAAK,CAAC,OAAO,CAAC,CAAC;QADqB,WAAM,GAAN,MAAM,CAAQ;QAAW,SAAI,GAAJ,IAAI,CAAS;QAAW,YAAO,GAAP,OAAO,CAAW;QAEvG,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AALD,kDAKC;AAED,kGAAkG;AAClG,SAAS,qBAAqB,CAAC,MAAe;IAC5C,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;QAClC,MAAM,CAAC,aAAa,CAAC,IAAI,WAAW,CAAC,gBAAgB,EAAE,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;IAClF,CAAC;AACH,CAAC;AAED,mEAAmE;AACnE,SAAgB,sBAAsB,CAAC,KAAoB;IACzD,WAAW,GAAG,KAAK,CAAC;AACtB,CAAC;AAED,0FAA0F;AAC1F,SAAS,aAAa,CAAC,OAAgB,EAAE,GAAW;IAClD,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC9D,MAAM,KAAK,GAAI,OAAmC,CAAC,GAAG,CAAC,CAAC;IACxD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3E,CAAC;AAED;;;GAGG;AACH,SAAsB,YAAY,CAAI,GAAW,EAAE,OAAoB;;;QACrE,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC7C,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC;QAC1C,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;YAC/D,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;QAClD,CAAC;QACD,MAAM,oBAAoB,GAAG,WAAW,KAAK,IAAI,CAAC;QAClD,IAAI,WAAW;YAAE,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,WAAW,EAAE,CAAC,CAAC;QAEvE,qBAAqB,CAAC,IAAI,CAAC,CAAC;QAC5B,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,kCAAO,OAAO,KAAE,OAAO,IAAG,CAAC;YAC3D,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC7D,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,OAAO,GAAG,MAAA,MAAA,aAAa,CAAC,OAAO,EAAE,SAAS,CAAC,mCAAI,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,mCAAI,eAAe,QAAQ,CAAC,MAAM,EAAE,CAAC;gBACzH,MAAM,UAAU,GAAG,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAE,OAAiC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;gBACnH,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;gBAC/F,sGAAsG;gBACtG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,oBAAoB,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;oBACrF,MAAM,CAAC,aAAa,CAAC,IAAI,WAAW,CAAC,kCAA0B,CAAC,CAAC,CAAC;gBACpE,CAAC;gBACD,MAAM,IAAI,mBAAmB,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,EAAE,MAAA,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,mCAAI,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC;YACtI,CAAC;YACD,OAAO;gBACL,IAAI,EAAE,OAAO;gBACb,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,OAAO,EAAE,QAAQ,CAAC,OAAO;aACrB,CAAC;QACT,CAAC;gBAAS,CAAC;YACT,qBAAqB,CAAC,KAAK,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;CAAA","sourcesContent":["let accessToken: string | null = null;\n\nconst loadingEventName = 'accessi-console-network';\n/** Emesso quando una richiesta autenticata riceve 401: la console deve riportare al login. */\nexport const ACCESSI_UNAUTHORIZED_EVENT = 'accessi-console-unauthorized';\n\n/** Errore del client console: conserva status, codice stabile Accessi e dettagli di validazione. */\nexport class AccessiRequestError extends Error {\n  constructor(message: string, readonly status: number, readonly code?: string, readonly details?: string[]) {\n    super(message);\n    this.name = 'AccessiRequestError';\n  }\n}\n\n/** Notifies the browser shell without coupling generated Orval calls to the UI implementation. */\nfunction notifyNetworkActivity(active: boolean): void {\n  if (typeof window !== 'undefined') {\n    window.dispatchEvent(new CustomEvent(loadingEventName, { detail: { active } }));\n  }\n}\n\n/** Imposta il JWT usato da tutte le funzioni generate da Orval. */\nexport function setAccessiConsoleToken(token: string | null): void {\n  accessToken = token;\n}\n\n/** Legge una stringa non vuota dal payload di errore Accessi, ignorando tipi inattesi. */\nfunction payloadString(payload: unknown, key: string): string | undefined {\n  if (!payload || typeof payload !== 'object') return undefined;\n  const value = (payload as Record<string, unknown>)[key];\n  return typeof value === 'string' && value.length > 0 ? value : undefined;\n}\n\n/**\n * Trasporto comune del client Orval: aggiunge il Bearer token e converte le\n * risposte di errore Accessi in Error JavaScript leggibili dalla console.\n */\nexport async function accessiFetch<T>(url: string, options: RequestInit): Promise<T> {\n  const headers = new Headers(options.headers);\n  headers.set('Accept', 'application/json');\n  if (options.body !== undefined && !headers.has('Content-Type')) {\n    headers.set('Content-Type', 'application/json');\n  }\n  const authenticatedRequest = accessToken !== null;\n  if (accessToken) headers.set('Authorization', `Bearer ${accessToken}`);\n\n  notifyNetworkActivity(true);\n  try {\n    const response = await fetch(url, { ...options, headers });\n    const payload = await response.json().catch(() => undefined);\n    if (!response.ok) {\n      const message = payloadString(payload, 'message') ?? payloadString(payload, 'error') ?? `Errore HTTP ${response.status}`;\n      const rawDetails = payload && typeof payload === 'object' ? (payload as { details?: unknown }).details : undefined;\n      const details = Array.isArray(rawDetails) ? rawDetails.map((item) => String(item)) : undefined;\n      // Un 401 su una richiesta autenticata significa sessione scaduta/revocata: il token non e piu valido.\n      if (response.status === 401 && authenticatedRequest && typeof window !== 'undefined') {\n        window.dispatchEvent(new CustomEvent(ACCESSI_UNAUTHORIZED_EVENT));\n      }\n      throw new AccessiRequestError(message, response.status, payloadString(payload, 'code') ?? payloadString(payload, 'error'), details);\n    }\n    return {\n      data: payload,\n      status: response.status,\n      headers: response.headers,\n    } as T;\n  } finally {\n    notifyNetworkActivity(false);\n  }\n}\n"]}

package/dist/accessi-module/Console/console.css

@@ -263,9 +263,14 @@ legend { padding: 0 var(--s2); color: var(--ink-2); font-weight: 650; font-size:
 .error { color: var(--danger); }
 
 #notice { min-height: 0; }
-#notice:not(:empty) { margin: 0; padding: var(--s3) var(--s4); border: 1px solid var(--brand-line); border-radius: var(--r-md); color: var(--brand-strong); background: var(--brand-soft); }
-#notice .error { color: var(--danger); }
-#notice:has(.error) { border-color: var(--danger-line); color: var(--danger); background: var(--danger-soft); }
+#notice:not(:empty) { margin: 0 0 var(--s4); }
+.notice { display: flex; align-items: flex-start; gap: var(--s3); padding: var(--s3) var(--s4); border: 1px solid var(--brand-line); border-radius: var(--r-md); color: var(--brand-strong); background: var(--brand-soft); }
+.notice-error { border-color: var(--danger-line); color: var(--danger); background: var(--danger-soft); }
+.notice-icon { flex: 0 0 auto; display: inline-flex; align-items: center; justify-content: center; width: 1.3rem; height: 1.3rem; border-radius: 50%; color: #fff; background: var(--brand-strong); font-weight: 700; font-size: .82rem; }
+.notice-error .notice-icon { background: var(--danger); }
+.notice-text { flex: 1 1 auto; min-width: 0; overflow-wrap: anywhere; }
+.notice-close { flex: 0 0 auto; padding: 0 .2rem; border: 0; background: none; color: inherit; font-size: 1.15rem; line-height: 1; cursor: pointer; opacity: .7; }
+.notice-close:hover, .notice-close:focus-visible { opacity: 1; }
 
 .page-header { display: flex; align-items: end; justify-content: space-between; gap: var(--s4); margin: 0 0 var(--s5); padding-bottom: var(--s4); border-bottom: 1px solid var(--line); }
 .page-header h2 { margin: 0; }

package/dist/accessi-module/Console/console.js

@@ -1,6 +1,16 @@
 // src/accessi-module/Console/accessiFetch.ts
 var accessToken = null;
 var loadingEventName = "accessi-console-network";
+var ACCESSI_UNAUTHORIZED_EVENT = "accessi-console-unauthorized";
+var AccessiRequestError = class extends Error {
+  constructor(message, status, code3, details) {
+    super(message);
+    this.status = status;
+    this.code = code3;
+    this.details = details;
+    this.name = "AccessiRequestError";
+  }
+};
 function notifyNetworkActivity(active) {
   if (typeof window !== "undefined") {
     window.dispatchEvent(new CustomEvent(loadingEventName, { detail: { active } }));
@@ -9,20 +19,31 @@ function notifyNetworkActivity(active) {
 function setAccessiConsoleToken(token2) {
   accessToken = token2;
 }
+function payloadString(payload, key) {
+  if (!payload || typeof payload !== "object") return void 0;
+  const value = payload[key];
+  return typeof value === "string" && value.length > 0 ? value : void 0;
+}
 async function accessiFetch(url, options) {
   const headers = new Headers(options.headers);
   headers.set("Accept", "application/json");
   if (options.body !== void 0 && !headers.has("Content-Type")) {
     headers.set("Content-Type", "application/json");
   }
+  const authenticatedRequest = accessToken !== null;
   if (accessToken) headers.set("Authorization", `Bearer ${accessToken}`);
   notifyNetworkActivity(true);
   try {
     const response = await fetch(url, { ...options, headers });
     const payload = await response.json().catch(() => void 0);
     if (!response.ok) {
-      const message = payload?.message ?? payload?.error ?? `Errore HTTP ${response.status}`;
-      throw new Error(message);
+      const message = payloadString(payload, "message") ?? payloadString(payload, "error") ?? `Errore HTTP ${response.status}`;
+      const rawDetails = payload && typeof payload === "object" ? payload.details : void 0;
+      const details = Array.isArray(rawDetails) ? rawDetails.map((item) => String(item)) : void 0;
+      if (response.status === 401 && authenticatedRequest && typeof window !== "undefined") {
+        window.dispatchEvent(new CustomEvent(ACCESSI_UNAUTHORIZED_EVENT));
+      }
+      throw new AccessiRequestError(message, response.status, payloadString(payload, "code") ?? payloadString(payload, "error"), details);
     }
     return {
       data: payload,
@@ -959,7 +980,8 @@ var WIKI_SECTIONS = [
       ]),
       code("bash", `npm run db:update:accessi   # riconcilia lo schema
 npm run db:check:accessi    # verifica senza modificare`, "CLI schema"),
-      note("warn", `Versioni`, `La libreria richiede uno schema compatibile con la versione corrente (ACCESSI_SCHEMA_VERSION). Se la verifica fallisce, leggi il codice errore ACCESSI_DATABASE_SCHEMA_OUTDATED ed esegui db:update:accessi.`)
+      note("warn", `Versioni`, `La libreria richiede uno schema compatibile con la versione corrente (ACCESSI_SCHEMA_VERSION). Se la verifica fallisce, leggi il codice errore ACCESSI_DATABASE_SCHEMA_OUTDATED ed esegui db:update:accessi.`),
+      note("info", `Schema esatto`, `La riconciliazione allinea le tabelle Accessi a "niente in piu, niente in meno": le colonne non previste vengono segnalate come incompatibili e rimosse automaticamente (dopo rename e copie dei dati legacy). Gli indici, i trigger e i CHECK extra non previsti non vengono tolti, ma un indice non previsto su una tabella Accessi viene riportato come avviso senza bloccare l'avvio.`)
     ]
   },
   // -------------------------------------------------------------------------
@@ -1950,8 +1972,24 @@ function result(response) {
   if (body.Result === void 0) throw new Error(body.message ?? "Risposta Accessi priva di dati.");
   return body.Result;
 }
+var noticeTimer;
 function showNotice(message, isError = false) {
-  byId("notice").innerHTML = message ? `<span class="${isError ? "error" : ""}">${escapeHtml(message)}</span>` : "";
+  const container = byId("notice");
+  if (noticeTimer !== void 0) {
+    window.clearTimeout(noticeTimer);
+    noticeTimer = void 0;
+  }
+  if (!message) {
+    container.innerHTML = "";
+    return;
+  }
+  const kind = isError ? "error" : "success";
+  const icon = isError ? "!" : "\u2713";
+  container.innerHTML = `<div class="notice notice-${kind}${isError ? " error" : ""}" role="alert"><span class="notice-icon" aria-hidden="true">${icon}</span><span class="notice-text">${escapeHtml(message)}</span><button type="button" class="notice-close" aria-label="Chiudi il messaggio">&times;</button></div>`;
+  container.querySelector(".notice-close")?.addEventListener("click", () => showNotice(""));
+  if (!isError) {
+    noticeTimer = window.setTimeout(() => showNotice(""), 6e3);
+  }
 }
 function menuMetadata(menu) {
   const details = [
@@ -2074,7 +2112,13 @@ function finishBoot(view) {
   byId("console").hidden = view !== "console";
 }
 function errorMessage(error) {
-  return error instanceof Error ? error.message : "Operazione non riuscita.";
+  if (!(error instanceof Error)) return "Operazione non riuscita.";
+  const extra = error;
+  const code3 = typeof extra.code === "string" ? extra.code : void 0;
+  const details = Array.isArray(extra.details) ? extra.details.map((item) => String(item)) : [];
+  const detailSuffix = details.length ? ` (${details.join("; ")})` : "";
+  const message = code3 && !error.message.startsWith(`${code3}:`) ? `${code3}: ${error.message}` : error.message;
+  return `${message}${detailSuffix}`;
 }
 function handleAction(action) {
   void action().catch((error) => showNotice(errorMessage(error), true));
@@ -2612,12 +2656,14 @@ async function showUser(rawCode) {
       handleAction(async () => {
         const values = formValues(eventForm(event));
         await linkFederatedIdentity(codiceUtente, { provider: values.provider ?? "", subject: values.subject ?? "", note: values.note || void 0 });
+        showNotice("Collegamento SSO registrato.");
         await showUser(String(codiceUtente));
       });
     };
     document.querySelectorAll("[data-identity-toggle]").forEach((button) => {
       button.onclick = () => handleAction(async () => {
         await updateFederatedIdentity(button.dataset.identityToggle ?? "", { active: button.dataset.active === "true" });
+        showNotice("Collegamento SSO aggiornato.");
         await showUser(String(codiceUtente));
       });
     });
@@ -2659,14 +2705,17 @@ async function showRoles() {
       };
     });
     const roleFormElement = document.getElementById("role-form");
-    if (roleFormElement) roleFormElement.onsubmit = async (event) => {
+    if (roleFormElement) roleFormElement.onsubmit = (event) => {
       event.preventDefault();
-      const form = eventForm(event);
-      const data = new FormData(form);
-      const request = { descrizioneRuolo: formValues(form).descrizione ?? "", menu: Array.from(data.getAll("menu"), (codiceMenu) => ({ codiceMenu: String(codiceMenu), tipoAbilitazione: Number(data.get(`menu-level:${codiceMenu}`) ?? 10) })) };
-      if (role?.codiceRuolo) await updateRole(role.codiceRuolo, request);
-      else await createRole(request);
-      await show("roles");
+      handleAction(async () => {
+        const form = eventForm(event);
+        const data = new FormData(form);
+        const request = { descrizioneRuolo: formValues(form).descrizione ?? "", menu: Array.from(data.getAll("menu"), (codiceMenu) => ({ codiceMenu: String(codiceMenu), tipoAbilitazione: Number(data.get(`menu-level:${codiceMenu}`) ?? 10) })) };
+        if (role?.codiceRuolo) await updateRole(role.codiceRuolo, request);
+        else await createRole(request);
+        showNotice(role?.codiceRuolo ? "Ruolo aggiornato." : "Ruolo creato.");
+        await show("roles");
+      });
     };
   };
   byId("new-role").onclick = () => roleForm();
@@ -2879,19 +2928,22 @@ async function showFilters() {
   const users = await loadUsers();
   render(`<h2>Filtri utente</h2><p class="form-help">Filtri applicativi salvati per singolo utente.</p><form id="filters"><label>Utente ${helpDot("filters-user")}<select name="codUte">${users.map(({ utente }) => `<option value="${utente.codiceUtente}">${escapeHtml(utente.email)}</option>`).join("")}</select><span class="form-help">Salvati per l'utente selezionato.</span></label><label>Filtro JSON ${helpDot("filters-json")}<textarea name="json" rows="12">{}</textarea><span class="form-help">Usa Carica per partire dalla struttura esistente.</span></label><button name="action" value="load">Carica</button><button name="action" value="save">Salva</button></form>`);
   const filtersForm = document.getElementById("filters");
-  if (filtersForm) filtersForm.onsubmit = async (event) => {
+  if (filtersForm) filtersForm.onsubmit = (event) => {
     event.preventDefault();
     const form = eventForm(event);
     const action = event.submitter?.value;
     const code3 = Number(formValues(form).codUte);
-    if (action === "load") {
-      const filters = result(await getFiltriUtente({ codUte: code3 }));
-      form.elements.namedItem("json").value = JSON.stringify(filters[0] ?? { codUte: code3 }, null, 2);
-    } else {
-      const parsed = JSON.parse(formValues(form).json ?? "{}");
-      await saveFiltriUtente({ ...parsed, codUte: code3 });
-      showNotice("Filtri salvati.");
-    }
+    handleAction(async () => {
+      if (action === "load") {
+        const filters = result(await getFiltriUtente({ codUte: code3 }));
+        form.elements.namedItem("json").value = JSON.stringify(filters[0] ?? { codUte: code3 }, null, 2);
+        showNotice("Filtri caricati.");
+      } else {
+        const parsed = JSON.parse(formValues(form).json ?? "{}");
+        await saveFiltriUtente({ ...parsed, codUte: code3 });
+        showNotice("Filtri salvati.");
+      }
+    });
   };
 }
 async function showFilterTypes() {
@@ -2972,6 +3024,7 @@ async function showServiceTokens(includeRevoked = false) {
   document.querySelectorAll("[data-rotate]").forEach((button) => {
     button.onclick = () => handleAction(async () => {
       const issued = result(await rotateServiceToken(button.dataset.rotate ?? ""));
+      showNotice("Token di servizio ruotato.");
       showIssuedServiceToken(issued);
     });
   });
@@ -2991,6 +3044,7 @@ function showServiceTokenForm() {
         scopes: scopes.length ? scopes : void 0,
         ttlDays: Number.isFinite(ttlDays) ? ttlDays : void 0
       }));
+      showNotice("Token di servizio creato.");
       showIssuedServiceToken(issued);
     });
   };
@@ -3219,7 +3273,6 @@ async function showSql() {
 }
 async function show(view) {
   try {
-    showNotice("");
     const views = {
       users: showUsers,
       roles: showRoles,
@@ -3310,6 +3363,16 @@ byId("nav").onclick = (event) => {
 window.addEventListener("popstate", () => {
   if (token && currentUser) handleAction(() => show(viewFromLocation()));
 });
+window.addEventListener(ACCESSI_UNAUTHORIZED_EVENT, () => {
+  if (!token) return;
+  token = null;
+  currentUser = null;
+  setAccessiConsoleToken(null);
+  sessionStorage.removeItem("accessi-console-token");
+  finishBoot("login");
+  resetLogin();
+  byId("login-error").textContent = "Sessione scaduta o non piu valida. Accedi di nuovo.";
+});
 window.addEventListener("accessi-console-network", (event) => {
   updateLoadingState(event.detail.active);
 });