emilsoftware-utilities 2.0.0-dev.41 → 2.0.0-dev.43

package/dist/accessi-module/Controllers/UserController.js

@@ -34,23 +34,43 @@ const PublicRegisterRequest_1 = require("../Dtos/PublicRegisterRequest");
 const RegisterResponse_1 = require("../Dtos/RegisterResponse");
 const RegisterRequest_1 = require("../Dtos/RegisterRequest");
 const SetStatoRegistrazione_1 = require("../Dtos/SetStatoRegistrazione");
+const SetUserPasswordRequest_1 = require("../Dtos/SetUserPasswordRequest");
 const UserDto_1 = require("../Dtos/UserDto");
+const AuthService_1 = require("../Services/AuthService/AuthService");
 const EmailService_1 = require("../Services/EmailService/EmailService");
 const UserService_1 = require("../Services/UserService/UserService");
 const jwt_strategy_1 = require("../jwt/jwt.strategy");
 const publicAuthRateLimit_1 = require("../security/publicAuthRateLimit");
 const accessControl_1 = require("../security/accessControl");
+const emailConfiguration_1 = require("../security/emailConfiguration");
+const StatoRegistrazione_1 = require("../Dtos/StatoRegistrazione");
 let UserController = UserController_1 = class UserController {
-    constructor(accessiOptions, userService, emailService) {
+    constructor(accessiOptions, userService, emailService, authService) {
         this.accessiOptions = accessiOptions;
         this.userService = userService;
         this.emailService = emailService;
+        this.authService = authService;
         this.logger = new Logger_1.Logger(UserController_1.name);
     }
     sendControllerError(res, error) {
         // Lo status viene derivato centralmente da RestUtilities (HttpException o 500).
         return Utilities_1.RestUtilities.sendErrorMessage(res, error, UserController_1.name);
     }
+    /**
+     * Verifica che il target esista e che l'attore possa gestirlo (rango attore >=
+     * rango target: ADMIN > SUPER > utente). Restituisce lo snapshot corrente del
+     * target, così i chiamanti possono controllare se e' admin.
+     */
+    ensureManageableTarget(actor, codiceUtente) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const target = yield this.userService.getAuthenticatedUserSnapshot(codiceUtente);
+            if (!target) {
+                throw new common_1.NotFoundException(`Nessun utente con codice ${codiceUtente}.`);
+            }
+            (0, accessControl_1.ensureCanManageTargetUser)(actor, target);
+            return target;
+        });
+    }
     serveResetPasswordPage(res, _token) {
         return __awaiter(this, void 0, void 0, function* () {
             return res.sendFile((0, path_1.join)(__dirname, '..', 'Views', 'reset-password.html'));
@@ -79,7 +99,12 @@ let UserController = UserController_1 = class UserController {
     deleteUser(request, codiceUtente, res) {
         return __awaiter(this, void 0, void 0, function* () {
             try {
-                (0, accessControl_1.ensureUserManagement)((0, accessControl_1.getAuthenticatedAccessiUser)(request), 'Solo gli amministratori possono eliminare utenti.');
+                const authenticatedUser = (0, accessControl_1.getAuthenticatedAccessiUser)(request);
+                (0, accessControl_1.ensureUserManagement)(authenticatedUser, 'Solo gli amministratori possono eliminare utenti.');
+                const target = yield this.ensureManageableTarget(authenticatedUser, codiceUtente);
+                if (target.flagAdmin) {
+                    yield this.userService.assertNotLastActiveAdmin(codiceUtente);
+                }
                 yield this.userService.deleteUser(codiceUtente);
                 return Utilities_1.RestUtilities.sendOKMessage(res, "L'utente e' stato eliminato con successo.");
             }
@@ -88,10 +113,32 @@ let UserController = UserController_1 = class UserController {
             }
         });
     }
+    deleteUserPermanently(request, codiceUtente, res) {
+        return __awaiter(this, void 0, void 0, function* () {
+            try {
+                const authenticatedUser = (0, accessControl_1.getAuthenticatedAccessiUser)(request);
+                (0, accessControl_1.ensureAdmin)(authenticatedUser, 'Solo gli admin possono eliminare definitivamente un utente.');
+                if (authenticatedUser.codiceUtente === codiceUtente) {
+                    throw new common_1.BadRequestException('Non puoi eliminare definitivamente il tuo stesso utente.');
+                }
+                const target = yield this.ensureManageableTarget(authenticatedUser, codiceUtente);
+                if (target.flagAdmin) {
+                    yield this.userService.assertNotLastActiveAdmin(codiceUtente);
+                }
+                yield this.userService.deleteUserPermanently(codiceUtente);
+                return Utilities_1.RestUtilities.sendOKMessage(res, "L'utente e' stato eliminato definitivamente.");
+            }
+            catch (error) {
+                return this.sendControllerError(res, error);
+            }
+        });
+    }
     forcePasswordReset(request, codiceUtente, res) {
         return __awaiter(this, void 0, void 0, function* () {
             try {
-                (0, accessControl_1.ensureUserManagement)((0, accessControl_1.getAuthenticatedAccessiUser)(request), 'Solo gli amministratori possono forzare il reset password.');
+                const authenticatedUser = (0, accessControl_1.getAuthenticatedAccessiUser)(request);
+                (0, accessControl_1.ensureUserManagement)(authenticatedUser, 'Solo gli amministratori possono forzare il reset password.');
+                yield this.ensureManageableTarget(authenticatedUser, codiceUtente);
                 yield this.userService.forcePasswordReset(codiceUtente);
                 return Utilities_1.RestUtilities.sendOKMessage(res, `Email di reset inviata all utente ${codiceUtente}.`);
             }
@@ -112,16 +159,37 @@ let UserController = UserController_1 = class UserController {
             }
         });
     }
+    setUserPassword(request, codiceUtente, body, res) {
+        return __awaiter(this, void 0, void 0, function* () {
+            try {
+                const authenticatedUser = (0, accessControl_1.getAuthenticatedAccessiUser)(request);
+                (0, accessControl_1.ensureUserManagement)(authenticatedUser, 'Solo gli amministratori possono impostare la password di un utente.');
+                yield this.ensureManageableTarget(authenticatedUser, codiceUtente);
+                yield this.authService.setPassword(codiceUtente, body.newPassword);
+                return Utilities_1.RestUtilities.sendOKMessage(res, `Password dell utente ${codiceUtente} aggiornata.`);
+            }
+            catch (error) {
+                return this.sendControllerError(res, error);
+            }
+        });
+    }
     setStatoRegistrazione(request, body, res) {
         return __awaiter(this, void 0, void 0, function* () {
             try {
-                (0, accessControl_1.ensureUserManagement)((0, accessControl_1.getAuthenticatedAccessiUser)(request), 'Solo gli amministratori possono modificare lo stato di registrazione.');
+                const authenticatedUser = (0, accessControl_1.getAuthenticatedAccessiUser)(request);
+                (0, accessControl_1.ensureUserManagement)(authenticatedUser, 'Solo gli amministratori possono modificare lo stato di registrazione.');
                 const { codiceUtente, statoRegistrazione } = body;
                 if (!codiceUtente)
                     throw new common_1.BadRequestException('Il codice utente e\' obbligatorio.');
                 if (statoRegistrazione === undefined) {
                     throw new common_1.BadRequestException('Lo stato registrazione e\' obbligatorio.');
                 }
+                const target = yield this.ensureManageableTarget(authenticatedUser, codiceUtente);
+                const disabling = statoRegistrazione === StatoRegistrazione_1.StatoRegistrazione.DELETE
+                    || statoRegistrazione === StatoRegistrazione_1.StatoRegistrazione.BLOCC;
+                if (target.flagAdmin && disabling) {
+                    yield this.userService.assertNotLastActiveAdmin(codiceUtente);
+                }
                 yield this.userService.setStato(codiceUtente, statoRegistrazione);
                 return Utilities_1.RestUtilities.sendOKMessage(res, `Lo stato dell'utente ${codiceUtente} e' stato aggiornato a ${statoRegistrazione}.`);
             }
@@ -141,10 +209,25 @@ let UserController = UserController_1 = class UserController {
                 if (!rateLimitDecision.allowed) {
                     return (0, publicAuthRateLimit_1.sendPublicAuthRateLimitExceeded)(res, rateLimitDecision.retryAfterSeconds);
                 }
+                (0, emailConfiguration_1.assertEmailConfigured)(this.accessiOptions);
                 const codiceUtente = yield this.userService.register(registrationData, {
                     allowPrivilegedFields: false,
                 });
-                yield this.emailService.sendPasswordResetEmail(registrationData.email);
+                try {
+                    yield this.emailService.sendPasswordResetEmail(registrationData.email);
+                }
+                catch (emailError) {
+                    try {
+                        yield this.userService.deleteUserPermanently(codiceUtente);
+                    }
+                    catch (rollbackError) {
+                        this.logger.error(`Rollback registrazione utente ${codiceUtente} non riuscita: ${rollbackError instanceof Error ? rollbackError.message : String(rollbackError)}`);
+                    }
+                    throw new common_1.BadRequestException({
+                        code: 'ACCESSI_USER_INVITE_EMAIL_FAILED',
+                        message: `Registrazione non completata: invio email non riuscito (${emailError instanceof Error ? emailError.message : String(emailError)}). Riprova piu tardi.`,
+                    });
+                }
                 return Utilities_1.RestUtilities.sendBaseResponse(res, codiceUtente, common_1.HttpStatus.CREATED);
             }
             catch (error) {
@@ -156,9 +239,29 @@ let UserController = UserController_1 = class UserController {
     createManagedUser(request, registrationData, res) {
         return __awaiter(this, void 0, void 0, function* () {
             try {
-                (0, accessControl_1.ensureUserManagement)((0, accessControl_1.getAuthenticatedAccessiUser)(request), 'Solo gli amministratori possono creare utenti.');
+                const authenticatedUser = (0, accessControl_1.getAuthenticatedAccessiUser)(request);
+                (0, accessControl_1.ensureUserManagement)(authenticatedUser, 'Solo gli amministratori possono creare utenti.');
+                (0, accessControl_1.ensurePrivilegeFlagChanges)(authenticatedUser, registrationData);
+                // Fail-fast prima di scrivere: senza SMTP non si crea un utente orfano.
+                (0, emailConfiguration_1.assertEmailConfigured)(this.accessiOptions);
                 const codiceUtente = yield this.userService.register(registrationData, { allowPrivilegedFields: true });
-                yield this.emailService.sendPasswordResetEmail(registrationData.email, registrationData.htmlMail);
+                try {
+                    yield this.emailService.sendPasswordResetEmail(registrationData.email, registrationData.htmlMail);
+                }
+                catch (emailError) {
+                    // L'invio e' esterno: se fallisce annulliamo la creazione per non lasciare un utente
+                    // senza password e senza email di invito (rollback best-effort).
+                    try {
+                        yield this.userService.deleteUserPermanently(codiceUtente);
+                    }
+                    catch (rollbackError) {
+                        this.logger.error(`Rollback creazione utente ${codiceUtente} non riuscita: ${rollbackError instanceof Error ? rollbackError.message : String(rollbackError)}`);
+                    }
+                    throw new common_1.BadRequestException({
+                        code: 'ACCESSI_USER_INVITE_EMAIL_FAILED',
+                        message: `Utente non creato: invio email di invito non riuscito (${emailError instanceof Error ? emailError.message : String(emailError)}). Riprova oppure crea l utente e imposta la password manualmente.`,
+                    });
+                }
                 return Utilities_1.RestUtilities.sendBaseResponse(res, codiceUtente, common_1.HttpStatus.CREATED);
             }
             catch (error) {
@@ -171,8 +274,17 @@ let UserController = UserController_1 = class UserController {
             try {
                 const authenticatedUser = (0, accessControl_1.getAuthenticatedAccessiUser)(request);
                 const isPrivilegedUpdate = (0, accessControl_1.hasPrivilegedUserChanges)(user);
+                const isSelf = authenticatedUser.codiceUtente === codiceUtente;
+                // ADMIN > SUPER: un superutente non puo' toccare un admin. Self sempre consentito.
+                if (!isSelf) {
+                    yield this.ensureManageableTarget(authenticatedUser, codiceUtente);
+                }
                 if (isPrivilegedUpdate) {
                     (0, accessControl_1.ensureUserManagement)(authenticatedUser, 'Solo gli amministratori possono modificare ruoli, permessi o flag privilegiati.');
+                    (0, accessControl_1.ensurePrivilegeFlagChanges)(authenticatedUser, user);
+                    if (user.flagAdmin === false) {
+                        yield this.userService.assertNotLastActiveAdmin(codiceUtente);
+                    }
                 }
                 else {
                     (0, accessControl_1.ensureSelfOrSuperUser)(authenticatedUser, codiceUtente, 'Puoi modificare solo il tuo profilo.');
@@ -193,7 +305,11 @@ let UserController = UserController_1 = class UserController {
     setGdpr(request, codiceUtente, res) {
         return __awaiter(this, void 0, void 0, function* () {
             try {
-                (0, accessControl_1.ensureSelfOrSuperUser)((0, accessControl_1.getAuthenticatedAccessiUser)(request), codiceUtente, 'Puoi impostare il GDPR solo sul tuo utente.');
+                const authenticatedUser = (0, accessControl_1.getAuthenticatedAccessiUser)(request);
+                (0, accessControl_1.ensureSelfOrSuperUser)(authenticatedUser, codiceUtente, 'Puoi impostare il GDPR solo sul tuo utente.');
+                if (authenticatedUser.codiceUtente !== codiceUtente) {
+                    yield this.ensureManageableTarget(authenticatedUser, codiceUtente);
+                }
                 yield this.userService.setGdpr(codiceUtente);
                 return Utilities_1.RestUtilities.sendOKMessage(res, `L'utente ${codiceUtente} ha accettato il GDPR.`);
             }
@@ -314,6 +430,33 @@ __decorate([
     __metadata("design:paramtypes", [Object, Number, Object]),
     __metadata("design:returntype", Promise)
 ], UserController.prototype, "deleteUser", null);
+__decorate([
+    (0, swagger_1.ApiOperation)({
+        summary: 'Elimina definitivamente un utente',
+        operationId: 'deleteUserPermanently',
+        description: 'Rimuove l utente e tutti i record collegati. Operazione distruttiva riservata agli admin.',
+    }),
+    (0, swagger_1.ApiParam)({
+        name: 'codiceUtente',
+        description: "Codice identificativo dell'utente da eliminare definitivamente",
+        required: true,
+        example: 123,
+    }),
+    (0, swagger_1.ApiResponse)({ status: 200, description: 'Utente eliminato definitivamente', type: BaseResponse_1.ActionResponse }),
+    (0, swagger_1.ApiResponse)({ status: 400, description: 'Errore nei parametri della richiesta', type: BaseResponse_1.ErrorResponse }),
+    (0, swagger_1.ApiResponse)({ status: 403, description: 'Operazione non autorizzata', type: BaseResponse_1.ErrorResponse }),
+    (0, swagger_1.ApiResponse)({ status: 404, description: 'Utente non trovato', type: BaseResponse_1.ErrorResponse }),
+    (0, swagger_1.ApiResponse)({ status: 500, description: 'Errore interno del server', type: BaseResponse_1.ErrorResponse }),
+    (0, swagger_1.ApiBearerAuth)(),
+    (0, common_1.UseGuards)(jwt_strategy_1.JwtSimpleGuard),
+    (0, common_1.Delete)('delete-user-permanent/:codiceUtente'),
+    __param(0, (0, common_1.Req)()),
+    __param(1, (0, common_1.Param)('codiceUtente', common_1.ParseIntPipe)),
+    __param(2, (0, common_1.Res)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Number, Object]),
+    __metadata("design:returntype", Promise)
+], UserController.prototype, "deleteUserPermanently", null);
 __decorate([
     (0, swagger_1.ApiOperation)({
         summary: 'Forza l invio dell email di reset password a un utente',
@@ -351,6 +494,28 @@ __decorate([
     __metadata("design:paramtypes", [Object, Object]),
     __metadata("design:returntype", Promise)
 ], UserController.prototype, "forcePasswordResetLegacy", null);
+__decorate([
+    (0, swagger_1.ApiOperation)({
+        summary: 'Imposta direttamente la password di un utente',
+        operationId: 'setUserPassword',
+        description: 'Riservato agli amministratori. Hasha la password, aggiorna la scadenza secondo la policy e non invia email.',
+    }),
+    (0, swagger_1.ApiParam)({ name: 'codiceUtente', description: 'Codice identificativo dell utente', required: true, example: 123, type: Number }),
+    (0, swagger_1.ApiBody)({ type: SetUserPasswordRequest_1.SetUserPasswordRequest }),
+    (0, swagger_1.ApiResponse)({ status: 200, description: 'Password aggiornata', type: BaseResponse_1.ActionResponse }),
+    (0, swagger_1.ApiResponse)({ status: 400, description: 'Password non valida', type: BaseResponse_1.ErrorResponse }),
+    (0, swagger_1.ApiResponse)({ status: 403, description: 'Operazione non autorizzata', type: BaseResponse_1.ErrorResponse }),
+    (0, swagger_1.ApiBearerAuth)(),
+    (0, common_1.UseGuards)(jwt_strategy_1.JwtSimpleGuard),
+    (0, common_1.Post)('set-password/:codiceUtente'),
+    __param(0, (0, common_1.Req)()),
+    __param(1, (0, common_1.Param)('codiceUtente', common_1.ParseIntPipe)),
+    __param(2, (0, common_1.Body)()),
+    __param(3, (0, common_1.Res)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Number, SetUserPasswordRequest_1.SetUserPasswordRequest, Object]),
+    __metadata("design:returntype", Promise)
+], UserController.prototype, "setUserPassword", null);
 __decorate([
     (0, swagger_1.ApiOperation)({
         summary: 'Imposta lo stato di registrazione di un utente',
@@ -500,6 +665,7 @@ exports.UserController = UserController = UserController_1 = __decorate([
     ,
     __param(0, (0, common_1.Inject)('ACCESSI_OPTIONS')),
     __metadata("design:paramtypes", [Object, UserService_1.UserService,
-        EmailService_1.EmailService])
+        EmailService_1.EmailService,
+        AuthService_1.AuthService])
 ], UserController);
 //# sourceMappingURL=UserController.js.map

package/dist/accessi-module/Controllers/UserController.js.map

@@ -1 +1 @@
-{"version":3,"file":"UserController.js","sourceRoot":"","sources":["../../../src/accessi-module/Controllers/UserController.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAAA,2CAmBwB;AAExB,6CASyB;AACzB,+BAA4B;AAC5B,yCAAsC;AACtC,+CAAgD;AAEhD,uDAAqE;AACrE,+DAA4D;AAC5D,yEAAsE;AACtE,+DAA4D;AAC5D,6DAA0D;AAC1D,yEAAyE;AACzE,6CAA0C;AAC1C,wEAAqE;AACrE,qEAAkE;AAClE,sDAAqD;AACrD,yEAGyC;AACzC,6DAKmC;AAQ5B,IAAM,cAAc,sBAApB,MAAM,cAAc;IAGzB,YAC6B,cAA+C,EACzD,WAAwB,EACxB,YAA0B;QAFC,mBAAc,GAAd,cAAc,CAAgB;QACzD,gBAAW,GAAX,WAAW,CAAa;QACxB,iBAAY,GAAZ,YAAY,CAAc;QAL5B,WAAM,GAAG,IAAI,eAAM,CAAC,gBAAc,CAAC,IAAI,CAAC,CAAC;IAMvD,CAAC;IAEI,mBAAmB,CAAC,GAAa,EAAE,KAAc;QACvD,gFAAgF;QAChF,OAAO,yBAAa,CAAC,gBAAgB,CAAC,GAAG,EAAE,KAAK,EAAE,gBAAc,CAAC,IAAI,CAAC,CAAC;IACzE,CAAC;IAYK,sBAAsB,CAAQ,GAAa,EAAkB,MAAc;;YAC/E,OAAO,GAAG,CAAC,QAAQ,CAAC,IAAA,WAAI,EAAC,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,qBAAqB,CAAC,CAAC,CAAC;QAC7E,CAAC;KAAA;IAqDK,QAAQ,CACL,OAAgB,EAChB,GAAa,EACJ,KAAc,EAC+B,YAAqB,EAElF,sBAAgC,EAEhC,aAAuB,EAC+B,KAAc,EACb,MAAe;;YAEtE,IAAI,CAAC;gBACH,IAAA,oCAAoB,EAClB,IAAA,2CAA2B,EAAC,OAAO,CAAC,EACpC,wDAAwD,CACzD,CAAC;gBAEF,MAAM,OAAO,GAAG,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;gBACvD,MAAM,OAAO,GAAG;oBACd,sBAAsB,EAAE,sBAAsB,aAAtB,sBAAsB,cAAtB,sBAAsB,GAAI,IAAI;oBACtD,aAAa,EAAE,aAAa,aAAb,aAAa,cAAb,aAAa,GAAI,IAAI;iBACrC,CAAC;gBAEF,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBAChE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;gBACzE,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;gBAC9C,OAAO,yBAAa,CAAC,gBAAgB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACpD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,2CAA2C,EAAE,KAAK,CAAC,CAAC;gBACtE,OAAO,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;KAAA;IAuBK,UAAU,CACP,OAAgB,EACc,YAAoB,EAClD,GAAa;;YAEpB,IAAI,CAAC;gBACH,IAAA,oCAAoB,EAClB,IAAA,2CAA2B,EAAC,OAAO,CAAC,EACpC,mDAAmD,CACpD,CAAC;gBAEF,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;gBAChD,OAAO,yBAAa,CAAC,aAAa,CAAC,GAAG,EAAE,2CAA2C,CAAC,CAAC;YACvF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;KAAA;IAcK,kBAAkB,CACf,OAAgB,EACc,YAAoB,EAClD,GAAa;;YAEpB,IAAI,CAAC;gBACH,IAAA,oCAAoB,EAClB,IAAA,2CAA2B,EAAC,OAAO,CAAC,EACpC,4DAA4D,CAC7D,CAAC;gBACF,MAAM,IAAI,CAAC,WAAW,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC;gBACxD,OAAO,yBAAa,CAAC,aAAa,CAAC,GAAG,EAAE,qCAAqC,YAAY,GAAG,CAAC,CAAC;YAChG,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;KAAA;IAYK,wBAAwB,CAAQ,OAAgB,EAAS,GAAa;;YAC1E,IAAI,CAAC;gBACH,IAAA,oCAAoB,EAClB,IAAA,2CAA2B,EAAC,OAAO,CAAC,EACpC,4DAA4D,CAC7D,CAAC;gBACF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,oCAAoC,EAAE,CAAC;gBAC3E,OAAO,yBAAa,CAAC,aAAa,CAAC,GAAG,EAAE,4BAA4B,IAAI,8BAA8B,CAAC,CAAC;YAC1G,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;KAAA;IAyBK,qBAAqB,CAClB,OAAgB,EACf,IAA8B,EAC/B,GAAa;;YAEpB,IAAI,CAAC;gBACH,IAAA,oCAAoB,EAClB,IAAA,2CAA2B,EAAC,OAAO,CAAC,EACpC,uEAAuE,CACxE,CAAC;gBAEF,MAAM,EAAE,YAAY,EAAE,kBAAkB,EAAE,GAAG,IAAI,CAAC;gBAClD,IAAI,CAAC,YAAY;oBAAE,MAAM,IAAI,4BAAmB,CAAC,oCAAoC,CAAC,CAAC;gBACvF,IAAI,kBAAkB,KAAK,SAAS,EAAE,CAAC;oBACrC,MAAM,IAAI,4BAAmB,CAAC,0CAA0C,CAAC,CAAC;gBAC5E,CAAC;gBAED,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,YAAY,EAAE,kBAAkB,CAAC,CAAC;gBAClE,OAAO,yBAAa,CAAC,aAAa,CAChC,GAAG,EACH,wBAAwB,YAAY,0BAA0B,kBAAkB,GAAG,CACpF,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;KAAA;IA2BK,QAAQ,CACL,OAAgB,EACf,gBAAuC,EACxC,GAAa;;;YAEpB,IAAI,CAAC;gBACH,IAAI,CAAA,MAAA,IAAI,CAAC,cAAc,CAAC,kBAAkB,0CAAE,OAAO,MAAK,IAAI,EAAE,CAAC;oBAC7D,MAAM,IAAI,sBAAa,CACrB,mFAAmF,EACnF,mBAAU,CAAC,SAAS,CACrB,CAAC;gBACJ,CAAC;gBAED,MAAM,iBAAiB,GAAG,IAAA,8CAAwB,EAChD,IAAI,CAAC,cAAc,EACnB,UAAU,EACV,OAAO,EACP,CAAC,gBAAgB,aAAhB,gBAAgB,uBAAhB,gBAAgB,CAAE,KAAK,CAAC,CAC1B,CAAC;gBACF,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,CAAC;oBAC/B,OAAO,IAAA,qDAA+B,EAAC,GAAG,EAAE,iBAAiB,CAAC,iBAAiB,CAAC,CAAC;gBACnF,CAAC;gBAED,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,gBAAgB,EAAE;oBACrE,qBAAqB,EAAE,KAAK;iBAC7B,CAAC,CAAC;gBAEH,MAAM,IAAI,CAAC,YAAY,CAAC,sBAAsB,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;gBACvE,OAAO,yBAAa,CAAC,gBAAgB,CAAC,GAAG,EAAE,YAAY,EAAE,mBAAU,CAAC,OAAO,CAAC,CAAC;YAC/E,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,MAAM,GACV,KAAK,YAAY,sBAAa,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,mBAAU,CAAC,WAAW,CAAC;gBAC9E,OAAO,yBAAa,CAAC,gBAAgB,CAAC,GAAG,EAAE,KAAK,EAAE,gBAAc,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACjF,CAAC;QACH,CAAC;KAAA;IAQK,iBAAiB,CAAQ,OAAgB,EAAU,gBAAiC,EAAS,GAAa;;YAC9G,IAAI,CAAC;gBACH,IAAA,oCAAoB,EAAC,IAAA,2CAA2B,EAAC,OAAO,CAAC,EAAE,gDAAgD,CAAC,CAAC;gBAC7G,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,gBAAgB,EAAE,EAAE,qBAAqB,EAAE,IAAI,EAAE,CAAC,CAAC;gBACxG,MAAM,IAAI,CAAC,YAAY,CAAC,sBAAsB,CAAC,gBAAgB,CAAC,KAAK,EAAE,gBAAgB,CAAC,QAAQ,CAAC,CAAC;gBAClG,OAAO,yBAAa,CAAC,gBAAgB,CAAC,GAAG,EAAE,YAAY,EAAE,mBAAU,CAAC,OAAO,CAAC,CAAC;YAC/E,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;KAAA;IA2BK,YAAY,CACT,OAAgB,EACc,YAAoB,EACjD,IAAa,EACd,GAAa;;YAEpB,IAAI,CAAC;gBACH,MAAM,iBAAiB,GAAG,IAAA,2CAA2B,EAAC,OAAO,CAAC,CAAC;gBAC/D,MAAM,kBAAkB,GAAG,IAAA,wCAAwB,EAAC,IAAI,CAAC,CAAC;gBAE1D,IAAI,kBAAkB,EAAE,CAAC;oBACvB,IAAA,oCAAoB,EAClB,iBAAiB,EACjB,iFAAiF,CAClF,CAAC;gBACJ,CAAC;qBAAM,CAAC;oBACN,IAAA,qCAAqB,EACnB,iBAAiB,EACjB,YAAY,EACZ,sCAAsC,CACvC,CAAC;gBACJ,CAAC;gBAED,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS,IAAI,IAAI,CAAC,YAAY,KAAK,YAAY,EAAE,CAAC;oBAC1E,MAAM,IAAI,4BAAmB,CAAC,6DAA6D,CAAC,CAAC;gBAC/F,CAAC;gBAED,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,YAAY,EAAE,IAAI,EAAE;oBACpD,sBAAsB,EAAE,iBAAiB,CAAC,SAAS,IAAI,iBAAiB,CAAC,SAAS;iBACnF,CAAC,CAAC;gBAEH,OAAO,yBAAa,CAAC,aAAa,CAChC,GAAG,EACH,YAAY,YAAY,oCAAoC,CAC7D,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;KAAA;IAsBK,OAAO,CACJ,OAAgB,EACc,YAAoB,EAClD,GAAa;;YAEpB,IAAI,CAAC;gBACH,IAAA,qCAAqB,EACnB,IAAA,2CAA2B,EAAC,OAAO,CAAC,EACpC,YAAY,EACZ,6CAA6C,CAC9C,CAAC;gBAEF,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;gBAC7C,OAAO,yBAAa,CAAC,aAAa,CAAC,GAAG,EAAE,YAAY,YAAY,wBAAwB,CAAC,CAAC;YAC5F,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;KAAA;CACF,CAAA;AAnbY,wCAAc;AAwBnB;IAVL,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,mCAAmC;QAC5C,WAAW,EAAE,4BAA4B;KAC1C,CAAC;IACD,IAAA,kBAAQ,EAAC;QACR,IAAI,EAAE,OAAO;QACb,WAAW,EAAE,mCAAmC;QAChD,QAAQ,EAAE,IAAI;KACf,CAAC;IACD,IAAA,YAAG,EAAC,uBAAuB,CAAC;IACC,WAAA,IAAA,YAAG,GAAE,CAAA;IAAiB,WAAA,IAAA,cAAK,EAAC,OAAO,CAAC,CAAA;;;;4DAEjE;AAqDK;IAnDL,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,gCAAgC;QACzC,WAAW,EAAE,UAAU;KACxB,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,sCAAsC;QACnD,IAAI,EAAE,mCAAgB;KACvB,CAAC;IACD,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,wBAAwB,EAAE,IAAI,EAAE,4BAAa,EAAE,CAAC;IACxF,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,4BAA4B,EAAE,IAAI,EAAE,4BAAa,EAAE,CAAC;IAC5F,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,2BAA2B,EAAE,IAAI,EAAE,4BAAa,EAAE,CAAC;IAC3F,IAAA,kBAAQ,EAAC;QACR,IAAI,EAAE,OAAO;QACb,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,8BAA8B;QAC3C,IAAI,EAAE,MAAM;KACb,CAAC;IACD,IAAA,kBAAQ,EAAC;QACR,IAAI,EAAE,cAAc;QACpB,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,+BAA+B;QAC5C,IAAI,EAAE,MAAM;KACb,CAAC;IACD,IAAA,kBAAQ,EAAC;QACR,IAAI,EAAE,wBAAwB;QAC9B,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,0BAA0B;QACvC,IAAI,EAAE,OAAO;KACd,CAAC;IACD,IAAA,kBAAQ,EAAC;QACR,IAAI,EAAE,eAAe;QACrB,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,kBAAkB;QAC/B,IAAI,EAAE,OAAO;KACd,CAAC;IACD,IAAA,kBAAQ,EAAC;QACR,IAAI,EAAE,OAAO;QACb,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,+DAA+D;QAC5E,IAAI,EAAE,MAAM;KACb,CAAC;IACD,IAAA,kBAAQ,EAAC;QACR,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,4CAA4C;QACzD,IAAI,EAAE,MAAM;KACb,CAAC;IACD,IAAA,uBAAa,GAAE;IACf,IAAA,kBAAS,EAAC,6BAAc,CAAC;IACzB,IAAA,YAAG,EAAC,WAAW,CAAC;IAEd,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,cAAK,EAAC,OAAO,CAAC,CAAA;IACd,WAAA,IAAA,cAAK,EAAC,cAAc,EAAE,IAAI,qBAAY,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;IAC3D,WAAA,IAAA,cAAK,EAAC,wBAAwB,EAAE,IAAI,sBAAa,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;IAEtE,WAAA,IAAA,cAAK,EAAC,eAAe,EAAE,IAAI,sBAAa,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;IAE7D,WAAA,IAAA,cAAK,EAAC,OAAO,EAAE,IAAI,qBAAY,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;IACpD,WAAA,IAAA,cAAK,EAAC,QAAQ,EAAE,IAAI,qBAAY,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;;;;8CAsBvD;AAuBK;IArBL,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,mBAAmB;QAC5B,WAAW,EAAE,YAAY;QACzB,WAAW,EAAE,qEAAqE;KACnF,CAAC;IACD,IAAA,kBAAQ,EAAC;QACR,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,gDAAgD;QAC7D,QAAQ,EAAE,IAAI;QACd,OAAO,EAAE,GAAG;KACb,CAAC;IACD,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,+BAA+B,EAAE,IAAI,EAAE,6BAAc,EAAE,CAAC;IAChG,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,sCAAsC;QACnD,IAAI,EAAE,4BAAa;KACpB,CAAC;IACD,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,2BAA2B,EAAE,IAAI,EAAE,4BAAa,EAAE,CAAC;IAC3F,IAAA,uBAAa,GAAE;IACf,IAAA,kBAAS,EAAC,6BAAc,CAAC;IACzB,IAAA,eAAM,EAAC,2BAA2B,CAAC;IAEjC,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,cAAK,EAAC,cAAc,EAAE,qBAAY,CAAC,CAAA;IACnC,WAAA,IAAA,YAAG,GAAE,CAAA;;;;gDAaP;AAcK;IAZL,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,wDAAwD;QACjE,WAAW,EAAE,oBAAoB;QACjC,WAAW,EAAE,yHAAyH;KACvI,CAAC;IACD,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,cAAc,EAAE,WAAW,EAAE,mCAAmC,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAChI,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,wBAAwB,EAAE,IAAI,EAAE,6BAAc,EAAE,CAAC;IACzF,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,gCAAgC,EAAE,IAAI,EAAE,4BAAa,EAAE,CAAC;IAChG,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,oBAAoB,EAAE,IAAI,EAAE,4BAAa,EAAE,CAAC;IACpF,IAAA,uBAAa,GAAE;IACf,IAAA,kBAAS,EAAC,6BAAc,CAAC;IACzB,IAAA,aAAI,EAAC,oCAAoC,CAAC;IAExC,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,cAAK,EAAC,cAAc,EAAE,qBAAY,CAAC,CAAA;IACnC,WAAA,IAAA,YAAG,GAAE,CAAA;;;;wDAYP;AAYK;IAVL,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,kEAAkE;QAC3E,WAAW,EAAE,0BAA0B;QACvC,WAAW,EAAE,+JAA+J;KAC7K,CAAC;IACD,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,wBAAwB,EAAE,IAAI,EAAE,6BAAc,EAAE,CAAC;IACzF,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,gCAAgC,EAAE,IAAI,EAAE,4BAAa,EAAE,CAAC;IAChG,IAAA,uBAAa,GAAE;IACf,IAAA,kBAAS,EAAC,6BAAc,CAAC;IACzB,IAAA,aAAI,EAAC,6BAA6B,CAAC;IACJ,WAAA,IAAA,YAAG,GAAE,CAAA;IAAoB,WAAA,IAAA,YAAG,GAAE,CAAA;;;;8DAW7D;AAyBK;IAvBL,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,gDAAgD;QACzD,WAAW,EAAE,uBAAuB;KACrC,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,6CAA6C;QAC1D,IAAI,EAAE,6BAAc;KACrB,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,sCAAsC;QACnD,IAAI,EAAE,4BAAa;KACpB,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,2BAA2B;QACxC,IAAI,EAAE,4BAAa;KACpB,CAAC;IACD,IAAA,iBAAO,EAAC,EAAE,IAAI,EAAE,gDAAwB,EAAE,CAAC;IAC3C,IAAA,uBAAa,GAAE;IACf,IAAA,kBAAS,EAAC,6BAAc,CAAC;IACzB,IAAA,aAAI,EAAC,WAAW,CAAC;IAEf,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,YAAG,GAAE,CAAA;;6CADQ,gDAAwB;;2DAuBvC;AA2BK;IAzBL,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,0BAA0B;QACnC,WAAW,EAAE,8IAA8I;QAC3J,WAAW,EAAE,UAAU;KACxB,CAAC;IACD,IAAA,iBAAO,EAAC;QACP,IAAI,EAAE,6CAAqB;QAC3B,WAAW,EAAE,iDAAiD;KAC/D,CAAC;IACD,IAAA,4BAAkB,EAAC;QAClB,WAAW,EACT,kGAAkG;QACpG,IAAI,EAAE,mCAAgB;KACvB,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,mBAAU,CAAC,WAAW;QAC9B,WAAW,EAAE,6BAA6B;QAC1C,IAAI,EAAE,4BAAa;KACpB,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,mBAAU,CAAC,qBAAqB;QACxC,WAAW,EAAE,sEAAsE;QACnF,IAAI,EAAE,4BAAa;KACpB,CAAC;IACD,IAAA,aAAI,EAAC,UAAU,CAAC;IAEd,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,YAAG,GAAE,CAAA;;6CADoB,6CAAqB;;8CAgChD;AAQK;IANL,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,0CAA0C,EAAE,WAAW,EAAE,mBAAmB,EAAE,WAAW,EAAE,sGAAsG,EAAE,CAAC;IAC5N,IAAA,iBAAO,EAAC,EAAE,IAAI,EAAE,iCAAe,EAAE,CAAC;IAClC,IAAA,4BAAkB,EAAC,EAAE,IAAI,EAAE,mCAAgB,EAAE,CAAC;IAC9C,IAAA,uBAAa,GAAE;IACf,IAAA,kBAAS,EAAC,6BAAc,CAAC;IACzB,IAAA,aAAI,EAAC,qBAAqB,CAAC;IACH,WAAA,IAAA,YAAG,GAAE,CAAA;IAAoB,WAAA,IAAA,aAAI,GAAE,CAAA;IAAqC,WAAA,IAAA,YAAG,GAAE,CAAA;;6CAAvB,iCAAe;;uDASzF;AA2BK;IAzBL,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,8BAA8B;QACvC,WAAW,EAAE,cAAc;KAC5B,CAAC;IACD,IAAA,kBAAQ,EAAC;QACR,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,iDAAiD;QAC9D,QAAQ,EAAE,IAAI;QACd,OAAO,EAAE,GAAG;KACb,CAAC;IACD,IAAA,iBAAO,EAAC;QACP,IAAI,EAAE,iBAAO;QACb,WAAW,EAAE,6BAA6B;KAC3C,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,mBAAU,CAAC,EAAE;QACrB,WAAW,EAAE,gCAAgC;QAC7C,IAAI,EAAE,6BAAc;KACrB,CAAC;IACD,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,2BAA2B,EAAE,IAAI,EAAE,4BAAa,EAAE,CAAC;IAC3F,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,4BAA4B,EAAE,IAAI,EAAE,4BAAa,EAAE,CAAC;IAC5F,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,2BAA2B,EAAE,IAAI,EAAE,4BAAa,EAAE,CAAC;IAC3F,IAAA,uBAAa,GAAE;IACf,IAAA,kBAAS,EAAC,6BAAc,CAAC;IACzB,IAAA,YAAG,EAAC,2BAA2B,CAAC;IAE9B,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,cAAK,EAAC,cAAc,EAAE,qBAAY,CAAC,CAAA;IACnC,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,YAAG,GAAE,CAAA;;qDADQ,iBAAO;;kDAmCtB;AAsBK;IApBL,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,wCAAwC;QACjD,WAAW,EAAE,SAAS;KACvB,CAAC;IACD,IAAA,kBAAQ,EAAC;QACR,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,uDAAuD;QACpE,QAAQ,EAAE,IAAI;QACd,OAAO,EAAE,GAAG;KACb,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,sCAAsC;QACnD,IAAI,EAAE,6BAAc;KACrB,CAAC;IACD,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,wBAAwB,EAAE,IAAI,EAAE,4BAAa,EAAE,CAAC;IACxF,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,4BAA4B,EAAE,IAAI,EAAE,4BAAa,EAAE,CAAC;IAC5F,IAAA,uBAAa,GAAE;IACf,IAAA,kBAAS,EAAC,6BAAc,CAAC;IACzB,IAAA,cAAK,EAAC,wBAAwB,CAAC;IAE7B,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,cAAK,EAAC,cAAc,EAAE,qBAAY,CAAC,CAAA;IACnC,WAAA,IAAA,YAAG,GAAE,CAAA;;;;6CAcP;yBAlbU,cAAc;IAN1B,IAAA,iBAAO,EAAC,MAAM,CAAC;IACf,IAAA,mBAAU,EAAC,cAAc,CAAC;IAC3B;;;OAGG;;IAKE,WAAA,IAAA,eAAM,EAAC,iBAAiB,CAAC,CAAA;6CACI,yBAAW;QACV,2BAAY;GANlC,cAAc,CAmb1B","sourcesContent":["import {\n  BadRequestException,\n  Body,\n  Controller,\n  Delete,\n  Get,\n  HttpException,\n  HttpStatus,\n  Param,\n  ParseBoolPipe,\n  ParseIntPipe,\n  Patch,\n  Post,\n  Put,\n  Query,\n  Inject,\n  Req,\n  Res,\n  UseGuards,\n} from '@nestjs/common';\nimport { Request, Response } from 'express';\nimport {\n  ApiBearerAuth,\n  ApiBody,\n  ApiCreatedResponse,\n  ApiOperation,\n  ApiParam,\n  ApiQuery,\n  ApiResponse,\n  ApiTags,\n} from '@nestjs/swagger';\nimport { join } from 'path';\nimport { Logger } from '../../Logger';\nimport { RestUtilities } from '../../Utilities';\nimport type { AccessiOptions } from '../AccessiModule';\nimport { ActionResponse, ErrorResponse } from '../Dtos/BaseResponse';\nimport { GetUsersResponse } from '../Dtos/GetUsersResponse';\nimport { PublicRegisterRequest } from '../Dtos/PublicRegisterRequest';\nimport { RegisterResponse } from '../Dtos/RegisterResponse';\nimport { RegisterRequest } from '../Dtos/RegisterRequest';\nimport { SetStatoRegistrazioneDto } from '../Dtos/SetStatoRegistrazione';\nimport { UserDto } from '../Dtos/UserDto';\nimport { EmailService } from '../Services/EmailService/EmailService';\nimport { UserService } from '../Services/UserService/UserService';\nimport { JwtSimpleGuard } from '../jwt/jwt.strategy';\nimport {\n  checkPublicAuthRateLimit,\n  sendPublicAuthRateLimitExceeded,\n} from '../security/publicAuthRateLimit';\nimport {\n  ensureSelfOrSuperUser,\n  ensureUserManagement,\n  getAuthenticatedAccessiUser,\n  hasPrivilegedUserChanges,\n} from '../security/accessControl';\n\n@ApiTags('User')\n@Controller('accessi/user')\n/**\n * Gestione utenti: la registrazione pubblica e opt-in, mentre creazione, stato e profili privilegiati\n * richiedono un superutente Accessi. Le API restituiscono sempre il wrapper `BaseResponse` storico.\n */\nexport class UserController {\n  private readonly logger = new Logger(UserController.name);\n\n  constructor(\n    @Inject('ACCESSI_OPTIONS') private readonly accessiOptions: AccessiOptions,\n    private readonly userService: UserService,\n    private readonly emailService: EmailService,\n  ) {}\n\n  private sendControllerError(res: Response, error: unknown) {\n    // Lo status viene derivato centralmente da RestUtilities (HttpException o 500).\n    return RestUtilities.sendErrorMessage(res, error, UserController.name);\n  }\n\n  @ApiOperation({\n    summary: 'Serve la pagina di reset password',\n    operationId: 'serveResetPasswordPageUser',\n  })\n  @ApiParam({\n    name: 'token',\n    description: 'Token per il reset della password',\n    required: true,\n  })\n  @Get('reset-password/:token')\n  async serveResetPasswordPage(@Res() res: Response, @Param('token') _token: string) {\n    return res.sendFile(join(__dirname, '..', 'Views', 'reset-password.html'));\n  }\n\n  @ApiOperation({\n    summary: 'Recupera la lista degli utenti',\n    operationId: 'getUsers',\n  })\n  @ApiResponse({\n    status: 200,\n    description: 'Lista utenti recuperata con successo',\n    type: GetUsersResponse,\n  })\n  @ApiResponse({ status: 401, description: 'Credenziali non valide', type: ErrorResponse })\n  @ApiResponse({ status: 403, description: 'Operazione non autorizzata', type: ErrorResponse })\n  @ApiResponse({ status: 500, description: 'Errore interno del server', type: ErrorResponse })\n  @ApiQuery({\n    name: 'email',\n    required: false,\n    description: \"Email dell'utente da cercare\",\n    type: String,\n  })\n  @ApiQuery({\n    name: 'codiceUtente',\n    required: false,\n    description: \"Codice dell'utente da cercare\",\n    type: Number,\n  })\n  @ApiQuery({\n    name: 'includeExtensionFields',\n    required: false,\n    description: 'Includi extension fields',\n    type: Boolean,\n  })\n  @ApiQuery({\n    name: 'includeGrants',\n    required: false,\n    description: 'Includi permessi',\n    type: Boolean,\n  })\n  @ApiQuery({\n    name: 'limit',\n    required: false,\n    description: 'Numero massimo di utenti restituiti (1-1000). Omesso = tutti.',\n    type: Number,\n  })\n  @ApiQuery({\n    name: 'offset',\n    required: false,\n    description: 'Numero di utenti da saltare (paginazione).',\n    type: Number,\n  })\n  @ApiBearerAuth()\n  @UseGuards(JwtSimpleGuard)\n  @Get('get-users')\n  async getUsers(\n    @Req() request: Request,\n    @Res() res: Response,\n    @Query('email') email?: string,\n    @Query('codiceUtente', new ParseIntPipe({ optional: true })) codiceUtente?: number,\n    @Query('includeExtensionFields', new ParseBoolPipe({ optional: true }))\n    includeExtensionFields?: boolean,\n    @Query('includeGrants', new ParseBoolPipe({ optional: true }))\n    includeGrants?: boolean,\n    @Query('limit', new ParseIntPipe({ optional: true })) limit?: number,\n    @Query('offset', new ParseIntPipe({ optional: true })) offset?: number,\n  ) {\n    try {\n      ensureUserManagement(\n        getAuthenticatedAccessiUser(request),\n        'Solo gli amministratori possono consultare gli utenti.',\n      );\n\n      const filters = { email, codiceUtente, limit, offset };\n      const options = {\n        includeExtensionFields: includeExtensionFields ?? true,\n        includeGrants: includeGrants ?? true,\n      };\n\n      const users = await this.userService.getUsers(filters, options);\n      const total = await this.userService.countUsers({ email, codiceUtente });\n      res.setHeader('X-Total-Count', String(total));\n      return RestUtilities.sendBaseResponse(res, users);\n    } catch (error) {\n      this.logger.error('Errore durante il recupero degli utenti: ', error);\n      return this.sendControllerError(res, error);\n    }\n  }\n\n  @ApiOperation({\n    summary: 'Elimina un utente',\n    operationId: 'deleteUser',\n    description: 'Imposta lo stato di un utente a eliminato senza rimuovere i record.',\n  })\n  @ApiParam({\n    name: 'codiceUtente',\n    description: \"Codice identificativo dell'utente da eliminare\",\n    required: true,\n    example: 123,\n  })\n  @ApiResponse({ status: 200, description: 'Utente eliminato con successo', type: ActionResponse })\n  @ApiResponse({\n    status: 400,\n    description: 'Errore nei parametri della richiesta',\n    type: ErrorResponse,\n  })\n  @ApiResponse({ status: 500, description: 'Errore interno del server', type: ErrorResponse })\n  @ApiBearerAuth()\n  @UseGuards(JwtSimpleGuard)\n  @Delete('delete-user/:codiceUtente')\n  async deleteUser(\n    @Req() request: Request,\n    @Param('codiceUtente', ParseIntPipe) codiceUtente: number,\n    @Res() res: Response,\n  ) {\n    try {\n      ensureUserManagement(\n        getAuthenticatedAccessiUser(request),\n        'Solo gli amministratori possono eliminare utenti.',\n      );\n\n      await this.userService.deleteUser(codiceUtente);\n      return RestUtilities.sendOKMessage(res, \"L'utente e' stato eliminato con successo.\");\n    } catch (error) {\n      return this.sendControllerError(res, error);\n    }\n  }\n\n  @ApiOperation({\n    summary: 'Forza l invio dell email di reset password a un utente',\n    operationId: 'forcePasswordReset',\n    description: 'Riservato al superutente. Richiede un servizio email configurato; altrimenti risponde con ACCESSI_EMAIL_NOT_CONFIGURED.',\n  })\n  @ApiParam({ name: 'codiceUtente', description: 'Codice identificativo dell utente', required: true, example: 123, type: Number })\n  @ApiResponse({ status: 200, description: 'Email di reset inviata', type: ActionResponse })\n  @ApiResponse({ status: 400, description: 'Servizio email non configurato', type: ErrorResponse })\n  @ApiResponse({ status: 404, description: 'Utente non trovato', type: ErrorResponse })\n  @ApiBearerAuth()\n  @UseGuards(JwtSimpleGuard)\n  @Post('force-password-reset/:codiceUtente')\n  async forcePasswordReset(\n    @Req() request: Request,\n    @Param('codiceUtente', ParseIntPipe) codiceUtente: number,\n    @Res() res: Response,\n  ) {\n    try {\n      ensureUserManagement(\n        getAuthenticatedAccessiUser(request),\n        'Solo gli amministratori possono forzare il reset password.',\n      );\n      await this.userService.forcePasswordReset(codiceUtente);\n      return RestUtilities.sendOKMessage(res, `Email di reset inviata all utente ${codiceUtente}.`);\n    } catch (error) {\n      return this.sendControllerError(res, error);\n    }\n  }\n\n  @ApiOperation({\n    summary: 'Forza il reset password per tutti gli utenti con password legacy',\n    operationId: 'forcePasswordResetLegacy',\n    description: 'Riservato al superutente. Invia l email di reset a tutti gli utenti la cui password non e ancora nel formato moderno. Richiede un servizio email configurato.',\n  })\n  @ApiResponse({ status: 200, description: 'Email di reset inviate', type: ActionResponse })\n  @ApiResponse({ status: 400, description: 'Servizio email non configurato', type: ErrorResponse })\n  @ApiBearerAuth()\n  @UseGuards(JwtSimpleGuard)\n  @Post('force-password-reset-legacy')\n  async forcePasswordResetLegacy(@Req() request: Request, @Res() res: Response) {\n    try {\n      ensureUserManagement(\n        getAuthenticatedAccessiUser(request),\n        'Solo gli amministratori possono forzare il reset password.',\n      );\n      const sent = await this.userService.forcePasswordResetForLegacyPasswords();\n      return RestUtilities.sendOKMessage(res, `Email di reset inviata a ${sent} utenti con password legacy.`);\n    } catch (error) {\n      return this.sendControllerError(res, error);\n    }\n  }\n\n  @ApiOperation({\n    summary: 'Imposta lo stato di registrazione di un utente',\n    operationId: 'setStatoRegistrazione',\n  })\n  @ApiResponse({\n    status: 200,\n    description: 'Stato registrazione aggiornato con successo',\n    type: ActionResponse,\n  })\n  @ApiResponse({\n    status: 400,\n    description: 'Errore nei parametri della richiesta',\n    type: ErrorResponse,\n  })\n  @ApiResponse({\n    status: 500,\n    description: 'Errore interno del server',\n    type: ErrorResponse,\n  })\n  @ApiBody({ type: SetStatoRegistrazioneDto })\n  @ApiBearerAuth()\n  @UseGuards(JwtSimpleGuard)\n  @Post('set-stato')\n  async setStatoRegistrazione(\n    @Req() request: Request,\n    @Body() body: SetStatoRegistrazioneDto,\n    @Res() res: Response,\n  ) {\n    try {\n      ensureUserManagement(\n        getAuthenticatedAccessiUser(request),\n        'Solo gli amministratori possono modificare lo stato di registrazione.',\n      );\n\n      const { codiceUtente, statoRegistrazione } = body;\n      if (!codiceUtente) throw new BadRequestException('Il codice utente e\\' obbligatorio.');\n      if (statoRegistrazione === undefined) {\n        throw new BadRequestException('Lo stato registrazione e\\' obbligatorio.');\n      }\n\n      await this.userService.setStato(codiceUtente, statoRegistrazione);\n      return RestUtilities.sendOKMessage(\n        res,\n        `Lo stato dell'utente ${codiceUtente} e' stato aggiornato a ${statoRegistrazione}.`,\n      );\n    } catch (error) {\n      return this.sendControllerError(res, error);\n    }\n  }\n\n  @ApiOperation({\n    summary: 'Registra un nuovo utente',\n    description: 'Disponibile soltanto quando publicRegistration.enabled e true. Per utenti SSO usare il provisioning master nel tag Federated authentication.',\n    operationId: 'register',\n  })\n  @ApiBody({\n    type: PublicRegisterRequest,\n    description: \"Dati necessari per la registrazione dell'utente\",\n  })\n  @ApiCreatedResponse({\n    description:\n      'Utente registrato con successo. Restituisce il codice utente e invia una mail di reset password.',\n    type: RegisterResponse,\n  })\n  @ApiResponse({\n    status: HttpStatus.BAD_REQUEST,\n    description: 'Errore nella registrazione.',\n    type: ErrorResponse,\n  })\n  @ApiResponse({\n    status: HttpStatus.INTERNAL_SERVER_ERROR,\n    description: 'Errore interno del server durante la registrazione o l\\'invio email.',\n    type: ErrorResponse,\n  })\n  @Post('register')\n  async register(\n    @Req() request: Request,\n    @Body() registrationData: PublicRegisterRequest,\n    @Res() res: Response,\n  ) {\n    try {\n      if (this.accessiOptions.publicRegistration?.enabled !== true) {\n        throw new HttpException(\n          'La registrazione pubblica e disabilitata. Un amministratore deve creare l utente.',\n          HttpStatus.FORBIDDEN,\n        );\n      }\n\n      const rateLimitDecision = checkPublicAuthRateLimit(\n        this.accessiOptions,\n        'register',\n        request,\n        [registrationData?.email],\n      );\n      if (!rateLimitDecision.allowed) {\n        return sendPublicAuthRateLimitExceeded(res, rateLimitDecision.retryAfterSeconds);\n      }\n\n      const codiceUtente = await this.userService.register(registrationData, {\n        allowPrivilegedFields: false,\n      });\n\n      await this.emailService.sendPasswordResetEmail(registrationData.email);\n      return RestUtilities.sendBaseResponse(res, codiceUtente, HttpStatus.CREATED);\n    } catch (error) {\n      const status =\n        error instanceof HttpException ? error.getStatus() : HttpStatus.BAD_REQUEST;\n      return RestUtilities.sendErrorMessage(res, error, UserController.name, status);\n    }\n  }\n\n  @ApiOperation({ summary: 'Crea un utente locale da amministrazione', operationId: 'createManagedUser', description: 'Riservato a superutente. Crea un utente in attesa di impostazione password e invia la mail di reset.' })\n  @ApiBody({ type: RegisterRequest })\n  @ApiCreatedResponse({ type: RegisterResponse })\n  @ApiBearerAuth()\n  @UseGuards(JwtSimpleGuard)\n  @Post('create-managed-user')\n  async createManagedUser(@Req() request: Request, @Body() registrationData: RegisterRequest, @Res() res: Response) {\n    try {\n      ensureUserManagement(getAuthenticatedAccessiUser(request), 'Solo gli amministratori possono creare utenti.');\n      const codiceUtente = await this.userService.register(registrationData, { allowPrivilegedFields: true });\n      await this.emailService.sendPasswordResetEmail(registrationData.email, registrationData.htmlMail);\n      return RestUtilities.sendBaseResponse(res, codiceUtente, HttpStatus.CREATED);\n    } catch (error) {\n      return this.sendControllerError(res, error);\n    }\n  }\n\n  @ApiOperation({\n    summary: 'Aggiorna un utente esistente',\n    operationId: 'updateUtente',\n  })\n  @ApiParam({\n    name: 'codiceUtente',\n    description: \"Codice identificativo dell'utente da aggiornare\",\n    required: true,\n    example: 123,\n  })\n  @ApiBody({\n    type: UserDto,\n    description: \"Dati aggiornati dell'utente\",\n  })\n  @ApiResponse({\n    status: HttpStatus.OK,\n    description: 'Utente aggiornato con successo',\n    type: ActionResponse,\n  })\n  @ApiResponse({ status: 400, description: \"Errore nell'aggiornamento\", type: ErrorResponse })\n  @ApiResponse({ status: 403, description: 'Operazione non autorizzata', type: ErrorResponse })\n  @ApiResponse({ status: 500, description: 'Errore interno del server', type: ErrorResponse })\n  @ApiBearerAuth()\n  @UseGuards(JwtSimpleGuard)\n  @Put('update-user/:codiceUtente')\n  async updateUtente(\n    @Req() request: Request,\n    @Param('codiceUtente', ParseIntPipe) codiceUtente: number,\n    @Body() user: UserDto,\n    @Res() res: Response,\n  ) {\n    try {\n      const authenticatedUser = getAuthenticatedAccessiUser(request);\n      const isPrivilegedUpdate = hasPrivilegedUserChanges(user);\n\n      if (isPrivilegedUpdate) {\n        ensureUserManagement(\n          authenticatedUser,\n          'Solo gli amministratori possono modificare ruoli, permessi o flag privilegiati.',\n        );\n      } else {\n        ensureSelfOrSuperUser(\n          authenticatedUser,\n          codiceUtente,\n          'Puoi modificare solo il tuo profilo.',\n        );\n      }\n\n      if (user.codiceUtente !== undefined && user.codiceUtente !== codiceUtente) {\n        throw new BadRequestException('Il codice utente nel body non coincide con quello del path.');\n      }\n\n      await this.userService.updateUser(codiceUtente, user, {\n        allowPrivilegedChanges: authenticatedUser.flagSuper || authenticatedUser.flagAdmin,\n      });\n\n      return RestUtilities.sendOKMessage(\n        res,\n        `L'utente ${codiceUtente} e' stato aggiornato con successo.`,\n      );\n    } catch (error) {\n      return this.sendControllerError(res, error);\n    }\n  }\n\n  @ApiOperation({\n    summary: 'Imposta il consenso GDPR per un utente',\n    operationId: 'setGdpr',\n  })\n  @ApiParam({\n    name: 'codiceUtente',\n    description: \"Codice identificativo dell'utente che accetta il GDPR\",\n    required: true,\n    example: 123,\n  })\n  @ApiResponse({\n    status: 200,\n    description: 'Consenso GDPR impostato con successo',\n    type: ActionResponse,\n  })\n  @ApiResponse({ status: 400, description: 'Errore nella richiesta', type: ErrorResponse })\n  @ApiResponse({ status: 403, description: 'Operazione non autorizzata', type: ErrorResponse })\n  @ApiBearerAuth()\n  @UseGuards(JwtSimpleGuard)\n  @Patch('set-gdpr/:codiceUtente')\n  async setGdpr(\n    @Req() request: Request,\n    @Param('codiceUtente', ParseIntPipe) codiceUtente: number,\n    @Res() res: Response,\n  ) {\n    try {\n      ensureSelfOrSuperUser(\n        getAuthenticatedAccessiUser(request),\n        codiceUtente,\n        'Puoi impostare il GDPR solo sul tuo utente.',\n      );\n\n      await this.userService.setGdpr(codiceUtente);\n      return RestUtilities.sendOKMessage(res, `L'utente ${codiceUtente} ha accettato il GDPR.`);\n    } catch (error) {\n      return this.sendControllerError(res, error);\n    }\n  }\n}\n"]}
+{"version":3,"file":"UserController.js","sourceRoot":"","sources":["../../../src/accessi-module/Controllers/UserController.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAAA,2CAoBwB;AAExB,6CASyB;AACzB,+BAA4B;AAC5B,yCAAsC;AACtC,+CAAgD;AAEhD,uDAAqE;AACrE,+DAA4D;AAC5D,yEAAsE;AACtE,+DAA4D;AAC5D,6DAA0D;AAC1D,yEAAyE;AACzE,2EAAwE;AACxE,6CAA0C;AAC1C,qEAAkE;AAClE,wEAAqE;AACrE,qEAAkE;AAClE,sDAAqD;AACrD,yEAGyC;AACzC,6DAQmC;AAEnC,uEAAuE;AACvE,mEAAgE;AAQzD,IAAM,cAAc,sBAApB,MAAM,cAAc;IAGzB,YAC6B,cAA+C,EACzD,WAAwB,EACxB,YAA0B,EAC1B,WAAwB;QAHG,mBAAc,GAAd,cAAc,CAAgB;QACzD,gBAAW,GAAX,WAAW,CAAa;QACxB,iBAAY,GAAZ,YAAY,CAAc;QAC1B,gBAAW,GAAX,WAAW,CAAa;QAN1B,WAAM,GAAG,IAAI,eAAM,CAAC,gBAAc,CAAC,IAAI,CAAC,CAAC;IAOvD,CAAC;IAEI,mBAAmB,CAAC,GAAa,EAAE,KAAc;QACvD,gFAAgF;QAChF,OAAO,yBAAa,CAAC,gBAAgB,CAAC,GAAG,EAAE,KAAK,EAAE,gBAAc,CAAC,IAAI,CAAC,CAAC;IACzE,CAAC;IAED;;;;OAIG;IACW,sBAAsB,CAClC,KAA+B,EAC/B,YAAoB;;YAEpB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,4BAA4B,CAAC,YAAY,CAAC,CAAC;YACjF,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,IAAI,0BAAiB,CAAC,4BAA4B,YAAY,GAAG,CAAC,CAAC;YAC3E,CAAC;YACD,IAAA,yCAAyB,EAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YACzC,OAAO,MAAM,CAAC;QAChB,CAAC;KAAA;IAYK,sBAAsB,CAAQ,GAAa,EAAkB,MAAc;;YAC/E,OAAO,GAAG,CAAC,QAAQ,CAAC,IAAA,WAAI,EAAC,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,qBAAqB,CAAC,CAAC,CAAC;QAC7E,CAAC;KAAA;IAqDK,QAAQ,CACL,OAAgB,EAChB,GAAa,EACJ,KAAc,EAC+B,YAAqB,EAElF,sBAAgC,EAEhC,aAAuB,EAC+B,KAAc,EACb,MAAe;;YAEtE,IAAI,CAAC;gBACH,IAAA,oCAAoB,EAClB,IAAA,2CAA2B,EAAC,OAAO,CAAC,EACpC,wDAAwD,CACzD,CAAC;gBAEF,MAAM,OAAO,GAAG,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;gBACvD,MAAM,OAAO,GAAG;oBACd,sBAAsB,EAAE,sBAAsB,aAAtB,sBAAsB,cAAtB,sBAAsB,GAAI,IAAI;oBACtD,aAAa,EAAE,aAAa,aAAb,aAAa,cAAb,aAAa,GAAI,IAAI;iBACrC,CAAC;gBAEF,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBAChE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;gBACzE,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;gBAC9C,OAAO,yBAAa,CAAC,gBAAgB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACpD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,2CAA2C,EAAE,KAAK,CAAC,CAAC;gBACtE,OAAO,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;KAAA;IAuBK,UAAU,CACP,OAAgB,EACc,YAAoB,EAClD,GAAa;;YAEpB,IAAI,CAAC;gBACH,MAAM,iBAAiB,GAAG,IAAA,2CAA2B,EAAC,OAAO,CAAC,CAAC;gBAC/D,IAAA,oCAAoB,EAClB,iBAAiB,EACjB,mDAAmD,CACpD,CAAC;gBAEF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,iBAAiB,EAAE,YAAY,CAAC,CAAC;gBAClF,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;oBACrB,MAAM,IAAI,CAAC,WAAW,CAAC,wBAAwB,CAAC,YAAY,CAAC,CAAC;gBAChE,CAAC;gBAED,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;gBAChD,OAAO,yBAAa,CAAC,aAAa,CAAC,GAAG,EAAE,2CAA2C,CAAC,CAAC;YACvF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;KAAA;IAqBK,qBAAqB,CAClB,OAAgB,EACc,YAAoB,EAClD,GAAa;;YAEpB,IAAI,CAAC;gBACH,MAAM,iBAAiB,GAAG,IAAA,2CAA2B,EAAC,OAAO,CAAC,CAAC;gBAC/D,IAAA,2BAAW,EACT,iBAAiB,EACjB,6DAA6D,CAC9D,CAAC;gBAEF,IAAI,iBAAiB,CAAC,YAAY,KAAK,YAAY,EAAE,CAAC;oBACpD,MAAM,IAAI,4BAAmB,CAAC,0DAA0D,CAAC,CAAC;gBAC5F,CAAC;gBAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,iBAAiB,EAAE,YAAY,CAAC,CAAC;gBAClF,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;oBACrB,MAAM,IAAI,CAAC,WAAW,CAAC,wBAAwB,CAAC,YAAY,CAAC,CAAC;gBAChE,CAAC;gBAED,MAAM,IAAI,CAAC,WAAW,CAAC,qBAAqB,CAAC,YAAY,CAAC,CAAC;gBAC3D,OAAO,yBAAa,CAAC,aAAa,CAAC,GAAG,EAAE,8CAA8C,CAAC,CAAC;YAC1F,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;KAAA;IAcK,kBAAkB,CACf,OAAgB,EACc,YAAoB,EAClD,GAAa;;YAEpB,IAAI,CAAC;gBACH,MAAM,iBAAiB,GAAG,IAAA,2CAA2B,EAAC,OAAO,CAAC,CAAC;gBAC/D,IAAA,oCAAoB,EAClB,iBAAiB,EACjB,4DAA4D,CAC7D,CAAC;gBACF,MAAM,IAAI,CAAC,sBAAsB,CAAC,iBAAiB,EAAE,YAAY,CAAC,CAAC;gBACnE,MAAM,IAAI,CAAC,WAAW,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC;gBACxD,OAAO,yBAAa,CAAC,aAAa,CAAC,GAAG,EAAE,qCAAqC,YAAY,GAAG,CAAC,CAAC;YAChG,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;KAAA;IAYK,wBAAwB,CAAQ,OAAgB,EAAS,GAAa;;YAC1E,IAAI,CAAC;gBACH,IAAA,oCAAoB,EAClB,IAAA,2CAA2B,EAAC,OAAO,CAAC,EACpC,4DAA4D,CAC7D,CAAC;gBACF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,oCAAoC,EAAE,CAAC;gBAC3E,OAAO,yBAAa,CAAC,aAAa,CAAC,GAAG,EAAE,4BAA4B,IAAI,8BAA8B,CAAC,CAAC;YAC1G,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;KAAA;IAeK,eAAe,CACZ,OAAgB,EACc,YAAoB,EACjD,IAA4B,EAC7B,GAAa;;YAEpB,IAAI,CAAC;gBACH,MAAM,iBAAiB,GAAG,IAAA,2CAA2B,EAAC,OAAO,CAAC,CAAC;gBAC/D,IAAA,oCAAoB,EAClB,iBAAiB,EACjB,qEAAqE,CACtE,CAAC;gBACF,MAAM,IAAI,CAAC,sBAAsB,CAAC,iBAAiB,EAAE,YAAY,CAAC,CAAC;gBAEnE,MAAM,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,YAAY,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;gBACnE,OAAO,yBAAa,CAAC,aAAa,CAAC,GAAG,EAAE,wBAAwB,YAAY,cAAc,CAAC,CAAC;YAC9F,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;KAAA;IAyBK,qBAAqB,CAClB,OAAgB,EACf,IAA8B,EAC/B,GAAa;;YAEpB,IAAI,CAAC;gBACH,MAAM,iBAAiB,GAAG,IAAA,2CAA2B,EAAC,OAAO,CAAC,CAAC;gBAC/D,IAAA,oCAAoB,EAClB,iBAAiB,EACjB,uEAAuE,CACxE,CAAC;gBAEF,MAAM,EAAE,YAAY,EAAE,kBAAkB,EAAE,GAAG,IAAI,CAAC;gBAClD,IAAI,CAAC,YAAY;oBAAE,MAAM,IAAI,4BAAmB,CAAC,oCAAoC,CAAC,CAAC;gBACvF,IAAI,kBAAkB,KAAK,SAAS,EAAE,CAAC;oBACrC,MAAM,IAAI,4BAAmB,CAAC,0CAA0C,CAAC,CAAC;gBAC5E,CAAC;gBAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,iBAAiB,EAAE,YAAY,CAAC,CAAC;gBAClF,MAAM,SAAS,GAAG,kBAAkB,KAAK,uCAAkB,CAAC,MAAM;uBAC7D,kBAAkB,KAAK,uCAAkB,CAAC,KAAK,CAAC;gBACrD,IAAI,MAAM,CAAC,SAAS,IAAI,SAAS,EAAE,CAAC;oBAClC,MAAM,IAAI,CAAC,WAAW,CAAC,wBAAwB,CAAC,YAAY,CAAC,CAAC;gBAChE,CAAC;gBAED,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,YAAY,EAAE,kBAAkB,CAAC,CAAC;gBAClE,OAAO,yBAAa,CAAC,aAAa,CAChC,GAAG,EACH,wBAAwB,YAAY,0BAA0B,kBAAkB,GAAG,CACpF,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;KAAA;IA2BK,QAAQ,CACL,OAAgB,EACf,gBAAuC,EACxC,GAAa;;;YAEpB,IAAI,CAAC;gBACH,IAAI,CAAA,MAAA,IAAI,CAAC,cAAc,CAAC,kBAAkB,0CAAE,OAAO,MAAK,IAAI,EAAE,CAAC;oBAC7D,MAAM,IAAI,sBAAa,CACrB,mFAAmF,EACnF,mBAAU,CAAC,SAAS,CACrB,CAAC;gBACJ,CAAC;gBAED,MAAM,iBAAiB,GAAG,IAAA,8CAAwB,EAChD,IAAI,CAAC,cAAc,EACnB,UAAU,EACV,OAAO,EACP,CAAC,gBAAgB,aAAhB,gBAAgB,uBAAhB,gBAAgB,CAAE,KAAK,CAAC,CAC1B,CAAC;gBACF,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,CAAC;oBAC/B,OAAO,IAAA,qDAA+B,EAAC,GAAG,EAAE,iBAAiB,CAAC,iBAAiB,CAAC,CAAC;gBACnF,CAAC;gBAED,IAAA,0CAAqB,EAAC,IAAI,CAAC,cAAc,CAAC,CAAC;gBAE3C,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,gBAAgB,EAAE;oBACrE,qBAAqB,EAAE,KAAK;iBAC7B,CAAC,CAAC;gBAEH,IAAI,CAAC;oBACH,MAAM,IAAI,CAAC,YAAY,CAAC,sBAAsB,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;gBACzE,CAAC;gBAAC,OAAO,UAAU,EAAE,CAAC;oBACpB,IAAI,CAAC;wBACH,MAAM,IAAI,CAAC,WAAW,CAAC,qBAAqB,CAAC,YAAY,CAAC,CAAC;oBAC7D,CAAC;oBAAC,OAAO,aAAa,EAAE,CAAC;wBACvB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iCAAiC,YAAY,kBAAkB,aAAa,YAAY,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;oBACrK,CAAC;oBACD,MAAM,IAAI,4BAAmB,CAAC;wBAC5B,IAAI,EAAE,kCAAkC;wBACxC,OAAO,EAAE,2DAA2D,UAAU,YAAY,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,uBAAuB;qBACjK,CAAC,CAAC;gBACL,CAAC;gBACD,OAAO,yBAAa,CAAC,gBAAgB,CAAC,GAAG,EAAE,YAAY,EAAE,mBAAU,CAAC,OAAO,CAAC,CAAC;YAC/E,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,MAAM,GACV,KAAK,YAAY,sBAAa,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,mBAAU,CAAC,WAAW,CAAC;gBAC9E,OAAO,yBAAa,CAAC,gBAAgB,CAAC,GAAG,EAAE,KAAK,EAAE,gBAAc,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACjF,CAAC;QACH,CAAC;KAAA;IAQK,iBAAiB,CAAQ,OAAgB,EAAU,gBAAiC,EAAS,GAAa;;YAC9G,IAAI,CAAC;gBACH,MAAM,iBAAiB,GAAG,IAAA,2CAA2B,EAAC,OAAO,CAAC,CAAC;gBAC/D,IAAA,oCAAoB,EAAC,iBAAiB,EAAE,gDAAgD,CAAC,CAAC;gBAC1F,IAAA,0CAA0B,EAAC,iBAAiB,EAAE,gBAAgB,CAAC,CAAC;gBAEhE,wEAAwE;gBACxE,IAAA,0CAAqB,EAAC,IAAI,CAAC,cAAc,CAAC,CAAC;gBAE3C,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,gBAAgB,EAAE,EAAE,qBAAqB,EAAE,IAAI,EAAE,CAAC,CAAC;gBACxG,IAAI,CAAC;oBACH,MAAM,IAAI,CAAC,YAAY,CAAC,sBAAsB,CAAC,gBAAgB,CAAC,KAAK,EAAE,gBAAgB,CAAC,QAAQ,CAAC,CAAC;gBACpG,CAAC;gBAAC,OAAO,UAAU,EAAE,CAAC;oBACpB,qFAAqF;oBACrF,iEAAiE;oBACjE,IAAI,CAAC;wBACH,MAAM,IAAI,CAAC,WAAW,CAAC,qBAAqB,CAAC,YAAY,CAAC,CAAC;oBAC7D,CAAC;oBAAC,OAAO,aAAa,EAAE,CAAC;wBACvB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,YAAY,kBAAkB,aAAa,YAAY,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;oBACjK,CAAC;oBACD,MAAM,IAAI,4BAAmB,CAAC;wBAC5B,IAAI,EAAE,kCAAkC;wBACxC,OAAO,EAAE,0DAA0D,UAAU,YAAY,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,oEAAoE;qBAC7M,CAAC,CAAC;gBACL,CAAC;gBACD,OAAO,yBAAa,CAAC,gBAAgB,CAAC,GAAG,EAAE,YAAY,EAAE,mBAAU,CAAC,OAAO,CAAC,CAAC;YAC/E,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;KAAA;IA2BK,YAAY,CACT,OAAgB,EACc,YAAoB,EACjD,IAAa,EACd,GAAa;;YAEpB,IAAI,CAAC;gBACH,MAAM,iBAAiB,GAAG,IAAA,2CAA2B,EAAC,OAAO,CAAC,CAAC;gBAC/D,MAAM,kBAAkB,GAAG,IAAA,wCAAwB,EAAC,IAAI,CAAC,CAAC;gBAC1D,MAAM,MAAM,GAAG,iBAAiB,CAAC,YAAY,KAAK,YAAY,CAAC;gBAE/D,mFAAmF;gBACnF,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,MAAM,IAAI,CAAC,sBAAsB,CAAC,iBAAiB,EAAE,YAAY,CAAC,CAAC;gBACrE,CAAC;gBAED,IAAI,kBAAkB,EAAE,CAAC;oBACvB,IAAA,oCAAoB,EAClB,iBAAiB,EACjB,iFAAiF,CAClF,CAAC;oBACF,IAAA,0CAA0B,EAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC;oBACpD,IAAI,IAAI,CAAC,SAAS,KAAK,KAAK,EAAE,CAAC;wBAC7B,MAAM,IAAI,CAAC,WAAW,CAAC,wBAAwB,CAAC,YAAY,CAAC,CAAC;oBAChE,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,IAAA,qCAAqB,EACnB,iBAAiB,EACjB,YAAY,EACZ,sCAAsC,CACvC,CAAC;gBACJ,CAAC;gBAED,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS,IAAI,IAAI,CAAC,YAAY,KAAK,YAAY,EAAE,CAAC;oBAC1E,MAAM,IAAI,4BAAmB,CAAC,6DAA6D,CAAC,CAAC;gBAC/F,CAAC;gBAED,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,YAAY,EAAE,IAAI,EAAE;oBACpD,sBAAsB,EAAE,iBAAiB,CAAC,SAAS,IAAI,iBAAiB,CAAC,SAAS;iBACnF,CAAC,CAAC;gBAEH,OAAO,yBAAa,CAAC,aAAa,CAChC,GAAG,EACH,YAAY,YAAY,oCAAoC,CAC7D,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;KAAA;IAsBK,OAAO,CACJ,OAAgB,EACc,YAAoB,EAClD,GAAa;;YAEpB,IAAI,CAAC;gBACH,MAAM,iBAAiB,GAAG,IAAA,2CAA2B,EAAC,OAAO,CAAC,CAAC;gBAC/D,IAAA,qCAAqB,EACnB,iBAAiB,EACjB,YAAY,EACZ,6CAA6C,CAC9C,CAAC;gBACF,IAAI,iBAAiB,CAAC,YAAY,KAAK,YAAY,EAAE,CAAC;oBACpD,MAAM,IAAI,CAAC,sBAAsB,CAAC,iBAAiB,EAAE,YAAY,CAAC,CAAC;gBACrE,CAAC;gBAED,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;gBAC7C,OAAO,yBAAa,CAAC,aAAa,CAAC,GAAG,EAAE,YAAY,YAAY,wBAAwB,CAAC,CAAC;YAC5F,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;KAAA;CACF,CAAA;AAtlBY,wCAAc;AA0CnB;IAVL,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,mCAAmC;QAC5C,WAAW,EAAE,4BAA4B;KAC1C,CAAC;IACD,IAAA,kBAAQ,EAAC;QACR,IAAI,EAAE,OAAO;QACb,WAAW,EAAE,mCAAmC;QAChD,QAAQ,EAAE,IAAI;KACf,CAAC;IACD,IAAA,YAAG,EAAC,uBAAuB,CAAC;IACC,WAAA,IAAA,YAAG,GAAE,CAAA;IAAiB,WAAA,IAAA,cAAK,EAAC,OAAO,CAAC,CAAA;;;;4DAEjE;AAqDK;IAnDL,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,gCAAgC;QACzC,WAAW,EAAE,UAAU;KACxB,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,sCAAsC;QACnD,IAAI,EAAE,mCAAgB;KACvB,CAAC;IACD,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,wBAAwB,EAAE,IAAI,EAAE,4BAAa,EAAE,CAAC;IACxF,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,4BAA4B,EAAE,IAAI,EAAE,4BAAa,EAAE,CAAC;IAC5F,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,2BAA2B,EAAE,IAAI,EAAE,4BAAa,EAAE,CAAC;IAC3F,IAAA,kBAAQ,EAAC;QACR,IAAI,EAAE,OAAO;QACb,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,8BAA8B;QAC3C,IAAI,EAAE,MAAM;KACb,CAAC;IACD,IAAA,kBAAQ,EAAC;QACR,IAAI,EAAE,cAAc;QACpB,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,+BAA+B;QAC5C,IAAI,EAAE,MAAM;KACb,CAAC;IACD,IAAA,kBAAQ,EAAC;QACR,IAAI,EAAE,wBAAwB;QAC9B,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,0BAA0B;QACvC,IAAI,EAAE,OAAO;KACd,CAAC;IACD,IAAA,kBAAQ,EAAC;QACR,IAAI,EAAE,eAAe;QACrB,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,kBAAkB;QAC/B,IAAI,EAAE,OAAO;KACd,CAAC;IACD,IAAA,kBAAQ,EAAC;QACR,IAAI,EAAE,OAAO;QACb,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,+DAA+D;QAC5E,IAAI,EAAE,MAAM;KACb,CAAC;IACD,IAAA,kBAAQ,EAAC;QACR,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,4CAA4C;QACzD,IAAI,EAAE,MAAM;KACb,CAAC;IACD,IAAA,uBAAa,GAAE;IACf,IAAA,kBAAS,EAAC,6BAAc,CAAC;IACzB,IAAA,YAAG,EAAC,WAAW,CAAC;IAEd,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,cAAK,EAAC,OAAO,CAAC,CAAA;IACd,WAAA,IAAA,cAAK,EAAC,cAAc,EAAE,IAAI,qBAAY,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;IAC3D,WAAA,IAAA,cAAK,EAAC,wBAAwB,EAAE,IAAI,sBAAa,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;IAEtE,WAAA,IAAA,cAAK,EAAC,eAAe,EAAE,IAAI,sBAAa,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;IAE7D,WAAA,IAAA,cAAK,EAAC,OAAO,EAAE,IAAI,qBAAY,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;IACpD,WAAA,IAAA,cAAK,EAAC,QAAQ,EAAE,IAAI,qBAAY,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;;;;8CAsBvD;AAuBK;IArBL,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,mBAAmB;QAC5B,WAAW,EAAE,YAAY;QACzB,WAAW,EAAE,qEAAqE;KACnF,CAAC;IACD,IAAA,kBAAQ,EAAC;QACR,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,gDAAgD;QAC7D,QAAQ,EAAE,IAAI;QACd,OAAO,EAAE,GAAG;KACb,CAAC;IACD,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,+BAA+B,EAAE,IAAI,EAAE,6BAAc,EAAE,CAAC;IAChG,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,sCAAsC;QACnD,IAAI,EAAE,4BAAa;KACpB,CAAC;IACD,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,2BAA2B,EAAE,IAAI,EAAE,4BAAa,EAAE,CAAC;IAC3F,IAAA,uBAAa,GAAE;IACf,IAAA,kBAAS,EAAC,6BAAc,CAAC;IACzB,IAAA,eAAM,EAAC,2BAA2B,CAAC;IAEjC,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,cAAK,EAAC,cAAc,EAAE,qBAAY,CAAC,CAAA;IACnC,WAAA,IAAA,YAAG,GAAE,CAAA;;;;gDAmBP;AAqBK;IAnBL,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,mCAAmC;QAC5C,WAAW,EAAE,uBAAuB;QACpC,WAAW,EAAE,2FAA2F;KACzG,CAAC;IACD,IAAA,kBAAQ,EAAC;QACR,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,gEAAgE;QAC7E,QAAQ,EAAE,IAAI;QACd,OAAO,EAAE,GAAG;KACb,CAAC;IACD,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,kCAAkC,EAAE,IAAI,EAAE,6BAAc,EAAE,CAAC;IACnG,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,sCAAsC,EAAE,IAAI,EAAE,4BAAa,EAAE,CAAC;IACtG,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,4BAA4B,EAAE,IAAI,EAAE,4BAAa,EAAE,CAAC;IAC5F,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,oBAAoB,EAAE,IAAI,EAAE,4BAAa,EAAE,CAAC;IACpF,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,2BAA2B,EAAE,IAAI,EAAE,4BAAa,EAAE,CAAC;IAC3F,IAAA,uBAAa,GAAE;IACf,IAAA,kBAAS,EAAC,6BAAc,CAAC;IACzB,IAAA,eAAM,EAAC,qCAAqC,CAAC;IAE3C,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,cAAK,EAAC,cAAc,EAAE,qBAAY,CAAC,CAAA;IACnC,WAAA,IAAA,YAAG,GAAE,CAAA;;;;2DAuBP;AAcK;IAZL,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,wDAAwD;QACjE,WAAW,EAAE,oBAAoB;QACjC,WAAW,EAAE,yHAAyH;KACvI,CAAC;IACD,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,cAAc,EAAE,WAAW,EAAE,mCAAmC,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAChI,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,wBAAwB,EAAE,IAAI,EAAE,6BAAc,EAAE,CAAC;IACzF,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,gCAAgC,EAAE,IAAI,EAAE,4BAAa,EAAE,CAAC;IAChG,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,oBAAoB,EAAE,IAAI,EAAE,4BAAa,EAAE,CAAC;IACpF,IAAA,uBAAa,GAAE;IACf,IAAA,kBAAS,EAAC,6BAAc,CAAC;IACzB,IAAA,aAAI,EAAC,oCAAoC,CAAC;IAExC,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,cAAK,EAAC,cAAc,EAAE,qBAAY,CAAC,CAAA;IACnC,WAAA,IAAA,YAAG,GAAE,CAAA;;;;wDAcP;AAYK;IAVL,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,kEAAkE;QAC3E,WAAW,EAAE,0BAA0B;QACvC,WAAW,EAAE,+JAA+J;KAC7K,CAAC;IACD,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,wBAAwB,EAAE,IAAI,EAAE,6BAAc,EAAE,CAAC;IACzF,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,gCAAgC,EAAE,IAAI,EAAE,4BAAa,EAAE,CAAC;IAChG,IAAA,uBAAa,GAAE;IACf,IAAA,kBAAS,EAAC,6BAAc,CAAC;IACzB,IAAA,aAAI,EAAC,6BAA6B,CAAC;IACJ,WAAA,IAAA,YAAG,GAAE,CAAA;IAAoB,WAAA,IAAA,YAAG,GAAE,CAAA;;;;8DAW7D;AAeK;IAbL,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,+CAA+C;QACxD,WAAW,EAAE,iBAAiB;QAC9B,WAAW,EAAE,6GAA6G;KAC3H,CAAC;IACD,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,cAAc,EAAE,WAAW,EAAE,mCAAmC,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAChI,IAAA,iBAAO,EAAC,EAAE,IAAI,EAAE,+CAAsB,EAAE,CAAC;IACzC,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,qBAAqB,EAAE,IAAI,EAAE,6BAAc,EAAE,CAAC;IACtF,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,qBAAqB,EAAE,IAAI,EAAE,4BAAa,EAAE,CAAC;IACrF,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,4BAA4B,EAAE,IAAI,EAAE,4BAAa,EAAE,CAAC;IAC5F,IAAA,uBAAa,GAAE;IACf,IAAA,kBAAS,EAAC,6BAAc,CAAC;IACzB,IAAA,aAAI,EAAC,4BAA4B,CAAC;IAEhC,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,cAAK,EAAC,cAAc,EAAE,qBAAY,CAAC,CAAA;IACnC,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,YAAG,GAAE,CAAA;;qDADQ,+CAAsB;;qDAgBrC;AAyBK;IAvBL,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,gDAAgD;QACzD,WAAW,EAAE,uBAAuB;KACrC,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,6CAA6C;QAC1D,IAAI,EAAE,6BAAc;KACrB,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,sCAAsC;QACnD,IAAI,EAAE,4BAAa;KACpB,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,2BAA2B;QACxC,IAAI,EAAE,4BAAa;KACpB,CAAC;IACD,IAAA,iBAAO,EAAC,EAAE,IAAI,EAAE,gDAAwB,EAAE,CAAC;IAC3C,IAAA,uBAAa,GAAE;IACf,IAAA,kBAAS,EAAC,6BAAc,CAAC;IACzB,IAAA,aAAI,EAAC,WAAW,CAAC;IAEf,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,YAAG,GAAE,CAAA;;6CADQ,gDAAwB;;2DA+BvC;AA2BK;IAzBL,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,0BAA0B;QACnC,WAAW,EAAE,8IAA8I;QAC3J,WAAW,EAAE,UAAU;KACxB,CAAC;IACD,IAAA,iBAAO,EAAC;QACP,IAAI,EAAE,6CAAqB;QAC3B,WAAW,EAAE,iDAAiD;KAC/D,CAAC;IACD,IAAA,4BAAkB,EAAC;QAClB,WAAW,EACT,kGAAkG;QACpG,IAAI,EAAE,mCAAgB;KACvB,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,mBAAU,CAAC,WAAW;QAC9B,WAAW,EAAE,6BAA6B;QAC1C,IAAI,EAAE,4BAAa;KACpB,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,mBAAU,CAAC,qBAAqB;QACxC,WAAW,EAAE,sEAAsE;QACnF,IAAI,EAAE,4BAAa;KACpB,CAAC;IACD,IAAA,aAAI,EAAC,UAAU,CAAC;IAEd,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,YAAG,GAAE,CAAA;;6CADoB,6CAAqB;;8CA8ChD;AAQK;IANL,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,0CAA0C,EAAE,WAAW,EAAE,mBAAmB,EAAE,WAAW,EAAE,sGAAsG,EAAE,CAAC;IAC5N,IAAA,iBAAO,EAAC,EAAE,IAAI,EAAE,iCAAe,EAAE,CAAC;IAClC,IAAA,4BAAkB,EAAC,EAAE,IAAI,EAAE,mCAAgB,EAAE,CAAC;IAC9C,IAAA,uBAAa,GAAE;IACf,IAAA,kBAAS,EAAC,6BAAc,CAAC;IACzB,IAAA,aAAI,EAAC,qBAAqB,CAAC;IACH,WAAA,IAAA,YAAG,GAAE,CAAA;IAAoB,WAAA,IAAA,aAAI,GAAE,CAAA;IAAqC,WAAA,IAAA,YAAG,GAAE,CAAA;;6CAAvB,iCAAe;;uDA6BzF;AA2BK;IAzBL,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,8BAA8B;QACvC,WAAW,EAAE,cAAc;KAC5B,CAAC;IACD,IAAA,kBAAQ,EAAC;QACR,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,iDAAiD;QAC9D,QAAQ,EAAE,IAAI;QACd,OAAO,EAAE,GAAG;KACb,CAAC;IACD,IAAA,iBAAO,EAAC;QACP,IAAI,EAAE,iBAAO;QACb,WAAW,EAAE,6BAA6B;KAC3C,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,mBAAU,CAAC,EAAE;QACrB,WAAW,EAAE,gCAAgC;QAC7C,IAAI,EAAE,6BAAc;KACrB,CAAC;IACD,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,2BAA2B,EAAE,IAAI,EAAE,4BAAa,EAAE,CAAC;IAC3F,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,4BAA4B,EAAE,IAAI,EAAE,4BAAa,EAAE,CAAC;IAC5F,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,2BAA2B,EAAE,IAAI,EAAE,4BAAa,EAAE,CAAC;IAC3F,IAAA,uBAAa,GAAE;IACf,IAAA,kBAAS,EAAC,6BAAc,CAAC;IACzB,IAAA,YAAG,EAAC,2BAA2B,CAAC;IAE9B,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,cAAK,EAAC,cAAc,EAAE,qBAAY,CAAC,CAAA;IACnC,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,YAAG,GAAE,CAAA;;qDADQ,iBAAO;;kDA6CtB;AAsBK;IApBL,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,wCAAwC;QACjD,WAAW,EAAE,SAAS;KACvB,CAAC;IACD,IAAA,kBAAQ,EAAC;QACR,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,uDAAuD;QACpE,QAAQ,EAAE,IAAI;QACd,OAAO,EAAE,GAAG;KACb,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,sCAAsC;QACnD,IAAI,EAAE,6BAAc;KACrB,CAAC;IACD,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,wBAAwB,EAAE,IAAI,EAAE,4BAAa,EAAE,CAAC;IACxF,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,4BAA4B,EAAE,IAAI,EAAE,4BAAa,EAAE,CAAC;IAC5F,IAAA,uBAAa,GAAE;IACf,IAAA,kBAAS,EAAC,6BAAc,CAAC;IACzB,IAAA,cAAK,EAAC,wBAAwB,CAAC;IAE7B,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,cAAK,EAAC,cAAc,EAAE,qBAAY,CAAC,CAAA;IACnC,WAAA,IAAA,YAAG,GAAE,CAAA;;;;6CAkBP;yBArlBU,cAAc;IAN1B,IAAA,iBAAO,EAAC,MAAM,CAAC;IACf,IAAA,mBAAU,EAAC,cAAc,CAAC;IAC3B;;;OAGG;;IAKE,WAAA,IAAA,eAAM,EAAC,iBAAiB,CAAC,CAAA;6CACI,yBAAW;QACV,2BAAY;QACb,yBAAW;GAPhC,cAAc,CAslB1B","sourcesContent":["import {\n  BadRequestException,\n  Body,\n  Controller,\n  Delete,\n  Get,\n  HttpException,\n  HttpStatus,\n  NotFoundException,\n  Param,\n  ParseBoolPipe,\n  ParseIntPipe,\n  Patch,\n  Post,\n  Put,\n  Query,\n  Inject,\n  Req,\n  Res,\n  UseGuards,\n} from '@nestjs/common';\nimport { Request, Response } from 'express';\nimport {\n  ApiBearerAuth,\n  ApiBody,\n  ApiCreatedResponse,\n  ApiOperation,\n  ApiParam,\n  ApiQuery,\n  ApiResponse,\n  ApiTags,\n} from '@nestjs/swagger';\nimport { join } from 'path';\nimport { Logger } from '../../Logger';\nimport { RestUtilities } from '../../Utilities';\nimport type { AccessiOptions } from '../AccessiModule';\nimport { ActionResponse, ErrorResponse } from '../Dtos/BaseResponse';\nimport { GetUsersResponse } from '../Dtos/GetUsersResponse';\nimport { PublicRegisterRequest } from '../Dtos/PublicRegisterRequest';\nimport { RegisterResponse } from '../Dtos/RegisterResponse';\nimport { RegisterRequest } from '../Dtos/RegisterRequest';\nimport { SetStatoRegistrazioneDto } from '../Dtos/SetStatoRegistrazione';\nimport { SetUserPasswordRequest } from '../Dtos/SetUserPasswordRequest';\nimport { UserDto } from '../Dtos/UserDto';\nimport { AuthService } from '../Services/AuthService/AuthService';\nimport { EmailService } from '../Services/EmailService/EmailService';\nimport { UserService } from '../Services/UserService/UserService';\nimport { JwtSimpleGuard } from '../jwt/jwt.strategy';\nimport {\n  checkPublicAuthRateLimit,\n  sendPublicAuthRateLimitExceeded,\n} from '../security/publicAuthRateLimit';\nimport {\n  ensureAdmin,\n  ensureCanManageTargetUser,\n  ensurePrivilegeFlagChanges,\n  ensureSelfOrSuperUser,\n  ensureUserManagement,\n  getAuthenticatedAccessiUser,\n  hasPrivilegedUserChanges,\n} from '../security/accessControl';\nimport type { AuthenticatedAccessiUser } from '../security/accessControl';\nimport { assertEmailConfigured } from '../security/emailConfiguration';\nimport { StatoRegistrazione } from '../Dtos/StatoRegistrazione';\n\n@ApiTags('User')\n@Controller('accessi/user')\n/**\n * Gestione utenti: la registrazione pubblica e opt-in, mentre creazione, stato e profili privilegiati\n * richiedono un superutente Accessi. Le API restituiscono sempre il wrapper `BaseResponse` storico.\n */\nexport class UserController {\n  private readonly logger = new Logger(UserController.name);\n\n  constructor(\n    @Inject('ACCESSI_OPTIONS') private readonly accessiOptions: AccessiOptions,\n    private readonly userService: UserService,\n    private readonly emailService: EmailService,\n    private readonly authService: AuthService,\n  ) {}\n\n  private sendControllerError(res: Response, error: unknown) {\n    // Lo status viene derivato centralmente da RestUtilities (HttpException o 500).\n    return RestUtilities.sendErrorMessage(res, error, UserController.name);\n  }\n\n  /**\n   * Verifica che il target esista e che l'attore possa gestirlo (rango attore >=\n   * rango target: ADMIN > SUPER > utente). Restituisce lo snapshot corrente del\n   * target, così i chiamanti possono controllare se e' admin.\n   */\n  private async ensureManageableTarget(\n    actor: AuthenticatedAccessiUser,\n    codiceUtente: number,\n  ) {\n    const target = await this.userService.getAuthenticatedUserSnapshot(codiceUtente);\n    if (!target) {\n      throw new NotFoundException(`Nessun utente con codice ${codiceUtente}.`);\n    }\n    ensureCanManageTargetUser(actor, target);\n    return target;\n  }\n\n  @ApiOperation({\n    summary: 'Serve la pagina di reset password',\n    operationId: 'serveResetPasswordPageUser',\n  })\n  @ApiParam({\n    name: 'token',\n    description: 'Token per il reset della password',\n    required: true,\n  })\n  @Get('reset-password/:token')\n  async serveResetPasswordPage(@Res() res: Response, @Param('token') _token: string) {\n    return res.sendFile(join(__dirname, '..', 'Views', 'reset-password.html'));\n  }\n\n  @ApiOperation({\n    summary: 'Recupera la lista degli utenti',\n    operationId: 'getUsers',\n  })\n  @ApiResponse({\n    status: 200,\n    description: 'Lista utenti recuperata con successo',\n    type: GetUsersResponse,\n  })\n  @ApiResponse({ status: 401, description: 'Credenziali non valide', type: ErrorResponse })\n  @ApiResponse({ status: 403, description: 'Operazione non autorizzata', type: ErrorResponse })\n  @ApiResponse({ status: 500, description: 'Errore interno del server', type: ErrorResponse })\n  @ApiQuery({\n    name: 'email',\n    required: false,\n    description: \"Email dell'utente da cercare\",\n    type: String,\n  })\n  @ApiQuery({\n    name: 'codiceUtente',\n    required: false,\n    description: \"Codice dell'utente da cercare\",\n    type: Number,\n  })\n  @ApiQuery({\n    name: 'includeExtensionFields',\n    required: false,\n    description: 'Includi extension fields',\n    type: Boolean,\n  })\n  @ApiQuery({\n    name: 'includeGrants',\n    required: false,\n    description: 'Includi permessi',\n    type: Boolean,\n  })\n  @ApiQuery({\n    name: 'limit',\n    required: false,\n    description: 'Numero massimo di utenti restituiti (1-1000). Omesso = tutti.',\n    type: Number,\n  })\n  @ApiQuery({\n    name: 'offset',\n    required: false,\n    description: 'Numero di utenti da saltare (paginazione).',\n    type: Number,\n  })\n  @ApiBearerAuth()\n  @UseGuards(JwtSimpleGuard)\n  @Get('get-users')\n  async getUsers(\n    @Req() request: Request,\n    @Res() res: Response,\n    @Query('email') email?: string,\n    @Query('codiceUtente', new ParseIntPipe({ optional: true })) codiceUtente?: number,\n    @Query('includeExtensionFields', new ParseBoolPipe({ optional: true }))\n    includeExtensionFields?: boolean,\n    @Query('includeGrants', new ParseBoolPipe({ optional: true }))\n    includeGrants?: boolean,\n    @Query('limit', new ParseIntPipe({ optional: true })) limit?: number,\n    @Query('offset', new ParseIntPipe({ optional: true })) offset?: number,\n  ) {\n    try {\n      ensureUserManagement(\n        getAuthenticatedAccessiUser(request),\n        'Solo gli amministratori possono consultare gli utenti.',\n      );\n\n      const filters = { email, codiceUtente, limit, offset };\n      const options = {\n        includeExtensionFields: includeExtensionFields ?? true,\n        includeGrants: includeGrants ?? true,\n      };\n\n      const users = await this.userService.getUsers(filters, options);\n      const total = await this.userService.countUsers({ email, codiceUtente });\n      res.setHeader('X-Total-Count', String(total));\n      return RestUtilities.sendBaseResponse(res, users);\n    } catch (error) {\n      this.logger.error('Errore durante il recupero degli utenti: ', error);\n      return this.sendControllerError(res, error);\n    }\n  }\n\n  @ApiOperation({\n    summary: 'Elimina un utente',\n    operationId: 'deleteUser',\n    description: 'Imposta lo stato di un utente a eliminato senza rimuovere i record.',\n  })\n  @ApiParam({\n    name: 'codiceUtente',\n    description: \"Codice identificativo dell'utente da eliminare\",\n    required: true,\n    example: 123,\n  })\n  @ApiResponse({ status: 200, description: 'Utente eliminato con successo', type: ActionResponse })\n  @ApiResponse({\n    status: 400,\n    description: 'Errore nei parametri della richiesta',\n    type: ErrorResponse,\n  })\n  @ApiResponse({ status: 500, description: 'Errore interno del server', type: ErrorResponse })\n  @ApiBearerAuth()\n  @UseGuards(JwtSimpleGuard)\n  @Delete('delete-user/:codiceUtente')\n  async deleteUser(\n    @Req() request: Request,\n    @Param('codiceUtente', ParseIntPipe) codiceUtente: number,\n    @Res() res: Response,\n  ) {\n    try {\n      const authenticatedUser = getAuthenticatedAccessiUser(request);\n      ensureUserManagement(\n        authenticatedUser,\n        'Solo gli amministratori possono eliminare utenti.',\n      );\n\n      const target = await this.ensureManageableTarget(authenticatedUser, codiceUtente);\n      if (target.flagAdmin) {\n        await this.userService.assertNotLastActiveAdmin(codiceUtente);\n      }\n\n      await this.userService.deleteUser(codiceUtente);\n      return RestUtilities.sendOKMessage(res, \"L'utente e' stato eliminato con successo.\");\n    } catch (error) {\n      return this.sendControllerError(res, error);\n    }\n  }\n\n  @ApiOperation({\n    summary: 'Elimina definitivamente un utente',\n    operationId: 'deleteUserPermanently',\n    description: 'Rimuove l utente e tutti i record collegati. Operazione distruttiva riservata agli admin.',\n  })\n  @ApiParam({\n    name: 'codiceUtente',\n    description: \"Codice identificativo dell'utente da eliminare definitivamente\",\n    required: true,\n    example: 123,\n  })\n  @ApiResponse({ status: 200, description: 'Utente eliminato definitivamente', type: ActionResponse })\n  @ApiResponse({ status: 400, description: 'Errore nei parametri della richiesta', type: ErrorResponse })\n  @ApiResponse({ status: 403, description: 'Operazione non autorizzata', type: ErrorResponse })\n  @ApiResponse({ status: 404, description: 'Utente non trovato', type: ErrorResponse })\n  @ApiResponse({ status: 500, description: 'Errore interno del server', type: ErrorResponse })\n  @ApiBearerAuth()\n  @UseGuards(JwtSimpleGuard)\n  @Delete('delete-user-permanent/:codiceUtente')\n  async deleteUserPermanently(\n    @Req() request: Request,\n    @Param('codiceUtente', ParseIntPipe) codiceUtente: number,\n    @Res() res: Response,\n  ) {\n    try {\n      const authenticatedUser = getAuthenticatedAccessiUser(request);\n      ensureAdmin(\n        authenticatedUser,\n        'Solo gli admin possono eliminare definitivamente un utente.',\n      );\n\n      if (authenticatedUser.codiceUtente === codiceUtente) {\n        throw new BadRequestException('Non puoi eliminare definitivamente il tuo stesso utente.');\n      }\n\n      const target = await this.ensureManageableTarget(authenticatedUser, codiceUtente);\n      if (target.flagAdmin) {\n        await this.userService.assertNotLastActiveAdmin(codiceUtente);\n      }\n\n      await this.userService.deleteUserPermanently(codiceUtente);\n      return RestUtilities.sendOKMessage(res, \"L'utente e' stato eliminato definitivamente.\");\n    } catch (error) {\n      return this.sendControllerError(res, error);\n    }\n  }\n\n  @ApiOperation({\n    summary: 'Forza l invio dell email di reset password a un utente',\n    operationId: 'forcePasswordReset',\n    description: 'Riservato al superutente. Richiede un servizio email configurato; altrimenti risponde con ACCESSI_EMAIL_NOT_CONFIGURED.',\n  })\n  @ApiParam({ name: 'codiceUtente', description: 'Codice identificativo dell utente', required: true, example: 123, type: Number })\n  @ApiResponse({ status: 200, description: 'Email di reset inviata', type: ActionResponse })\n  @ApiResponse({ status: 400, description: 'Servizio email non configurato', type: ErrorResponse })\n  @ApiResponse({ status: 404, description: 'Utente non trovato', type: ErrorResponse })\n  @ApiBearerAuth()\n  @UseGuards(JwtSimpleGuard)\n  @Post('force-password-reset/:codiceUtente')\n  async forcePasswordReset(\n    @Req() request: Request,\n    @Param('codiceUtente', ParseIntPipe) codiceUtente: number,\n    @Res() res: Response,\n  ) {\n    try {\n      const authenticatedUser = getAuthenticatedAccessiUser(request);\n      ensureUserManagement(\n        authenticatedUser,\n        'Solo gli amministratori possono forzare il reset password.',\n      );\n      await this.ensureManageableTarget(authenticatedUser, codiceUtente);\n      await this.userService.forcePasswordReset(codiceUtente);\n      return RestUtilities.sendOKMessage(res, `Email di reset inviata all utente ${codiceUtente}.`);\n    } catch (error) {\n      return this.sendControllerError(res, error);\n    }\n  }\n\n  @ApiOperation({\n    summary: 'Forza il reset password per tutti gli utenti con password legacy',\n    operationId: 'forcePasswordResetLegacy',\n    description: 'Riservato al superutente. Invia l email di reset a tutti gli utenti la cui password non e ancora nel formato moderno. Richiede un servizio email configurato.',\n  })\n  @ApiResponse({ status: 200, description: 'Email di reset inviate', type: ActionResponse })\n  @ApiResponse({ status: 400, description: 'Servizio email non configurato', type: ErrorResponse })\n  @ApiBearerAuth()\n  @UseGuards(JwtSimpleGuard)\n  @Post('force-password-reset-legacy')\n  async forcePasswordResetLegacy(@Req() request: Request, @Res() res: Response) {\n    try {\n      ensureUserManagement(\n        getAuthenticatedAccessiUser(request),\n        'Solo gli amministratori possono forzare il reset password.',\n      );\n      const sent = await this.userService.forcePasswordResetForLegacyPasswords();\n      return RestUtilities.sendOKMessage(res, `Email di reset inviata a ${sent} utenti con password legacy.`);\n    } catch (error) {\n      return this.sendControllerError(res, error);\n    }\n  }\n\n  @ApiOperation({\n    summary: 'Imposta direttamente la password di un utente',\n    operationId: 'setUserPassword',\n    description: 'Riservato agli amministratori. Hasha la password, aggiorna la scadenza secondo la policy e non invia email.',\n  })\n  @ApiParam({ name: 'codiceUtente', description: 'Codice identificativo dell utente', required: true, example: 123, type: Number })\n  @ApiBody({ type: SetUserPasswordRequest })\n  @ApiResponse({ status: 200, description: 'Password aggiornata', type: ActionResponse })\n  @ApiResponse({ status: 400, description: 'Password non valida', type: ErrorResponse })\n  @ApiResponse({ status: 403, description: 'Operazione non autorizzata', type: ErrorResponse })\n  @ApiBearerAuth()\n  @UseGuards(JwtSimpleGuard)\n  @Post('set-password/:codiceUtente')\n  async setUserPassword(\n    @Req() request: Request,\n    @Param('codiceUtente', ParseIntPipe) codiceUtente: number,\n    @Body() body: SetUserPasswordRequest,\n    @Res() res: Response,\n  ) {\n    try {\n      const authenticatedUser = getAuthenticatedAccessiUser(request);\n      ensureUserManagement(\n        authenticatedUser,\n        'Solo gli amministratori possono impostare la password di un utente.',\n      );\n      await this.ensureManageableTarget(authenticatedUser, codiceUtente);\n\n      await this.authService.setPassword(codiceUtente, body.newPassword);\n      return RestUtilities.sendOKMessage(res, `Password dell utente ${codiceUtente} aggiornata.`);\n    } catch (error) {\n      return this.sendControllerError(res, error);\n    }\n  }\n\n  @ApiOperation({\n    summary: 'Imposta lo stato di registrazione di un utente',\n    operationId: 'setStatoRegistrazione',\n  })\n  @ApiResponse({\n    status: 200,\n    description: 'Stato registrazione aggiornato con successo',\n    type: ActionResponse,\n  })\n  @ApiResponse({\n    status: 400,\n    description: 'Errore nei parametri della richiesta',\n    type: ErrorResponse,\n  })\n  @ApiResponse({\n    status: 500,\n    description: 'Errore interno del server',\n    type: ErrorResponse,\n  })\n  @ApiBody({ type: SetStatoRegistrazioneDto })\n  @ApiBearerAuth()\n  @UseGuards(JwtSimpleGuard)\n  @Post('set-stato')\n  async setStatoRegistrazione(\n    @Req() request: Request,\n    @Body() body: SetStatoRegistrazioneDto,\n    @Res() res: Response,\n  ) {\n    try {\n      const authenticatedUser = getAuthenticatedAccessiUser(request);\n      ensureUserManagement(\n        authenticatedUser,\n        'Solo gli amministratori possono modificare lo stato di registrazione.',\n      );\n\n      const { codiceUtente, statoRegistrazione } = body;\n      if (!codiceUtente) throw new BadRequestException('Il codice utente e\\' obbligatorio.');\n      if (statoRegistrazione === undefined) {\n        throw new BadRequestException('Lo stato registrazione e\\' obbligatorio.');\n      }\n\n      const target = await this.ensureManageableTarget(authenticatedUser, codiceUtente);\n      const disabling = statoRegistrazione === StatoRegistrazione.DELETE\n        || statoRegistrazione === StatoRegistrazione.BLOCC;\n      if (target.flagAdmin && disabling) {\n        await this.userService.assertNotLastActiveAdmin(codiceUtente);\n      }\n\n      await this.userService.setStato(codiceUtente, statoRegistrazione);\n      return RestUtilities.sendOKMessage(\n        res,\n        `Lo stato dell'utente ${codiceUtente} e' stato aggiornato a ${statoRegistrazione}.`,\n      );\n    } catch (error) {\n      return this.sendControllerError(res, error);\n    }\n  }\n\n  @ApiOperation({\n    summary: 'Registra un nuovo utente',\n    description: 'Disponibile soltanto quando publicRegistration.enabled e true. Per utenti SSO usare il provisioning master nel tag Federated authentication.',\n    operationId: 'register',\n  })\n  @ApiBody({\n    type: PublicRegisterRequest,\n    description: \"Dati necessari per la registrazione dell'utente\",\n  })\n  @ApiCreatedResponse({\n    description:\n      'Utente registrato con successo. Restituisce il codice utente e invia una mail di reset password.',\n    type: RegisterResponse,\n  })\n  @ApiResponse({\n    status: HttpStatus.BAD_REQUEST,\n    description: 'Errore nella registrazione.',\n    type: ErrorResponse,\n  })\n  @ApiResponse({\n    status: HttpStatus.INTERNAL_SERVER_ERROR,\n    description: 'Errore interno del server durante la registrazione o l\\'invio email.',\n    type: ErrorResponse,\n  })\n  @Post('register')\n  async register(\n    @Req() request: Request,\n    @Body() registrationData: PublicRegisterRequest,\n    @Res() res: Response,\n  ) {\n    try {\n      if (this.accessiOptions.publicRegistration?.enabled !== true) {\n        throw new HttpException(\n          'La registrazione pubblica e disabilitata. Un amministratore deve creare l utente.',\n          HttpStatus.FORBIDDEN,\n        );\n      }\n\n      const rateLimitDecision = checkPublicAuthRateLimit(\n        this.accessiOptions,\n        'register',\n        request,\n        [registrationData?.email],\n      );\n      if (!rateLimitDecision.allowed) {\n        return sendPublicAuthRateLimitExceeded(res, rateLimitDecision.retryAfterSeconds);\n      }\n\n      assertEmailConfigured(this.accessiOptions);\n\n      const codiceUtente = await this.userService.register(registrationData, {\n        allowPrivilegedFields: false,\n      });\n\n      try {\n        await this.emailService.sendPasswordResetEmail(registrationData.email);\n      } catch (emailError) {\n        try {\n          await this.userService.deleteUserPermanently(codiceUtente);\n        } catch (rollbackError) {\n          this.logger.error(`Rollback registrazione utente ${codiceUtente} non riuscita: ${rollbackError instanceof Error ? rollbackError.message : String(rollbackError)}`);\n        }\n        throw new BadRequestException({\n          code: 'ACCESSI_USER_INVITE_EMAIL_FAILED',\n          message: `Registrazione non completata: invio email non riuscito (${emailError instanceof Error ? emailError.message : String(emailError)}). Riprova piu tardi.`,\n        });\n      }\n      return RestUtilities.sendBaseResponse(res, codiceUtente, HttpStatus.CREATED);\n    } catch (error) {\n      const status =\n        error instanceof HttpException ? error.getStatus() : HttpStatus.BAD_REQUEST;\n      return RestUtilities.sendErrorMessage(res, error, UserController.name, status);\n    }\n  }\n\n  @ApiOperation({ summary: 'Crea un utente locale da amministrazione', operationId: 'createManagedUser', description: 'Riservato a superutente. Crea un utente in attesa di impostazione password e invia la mail di reset.' })\n  @ApiBody({ type: RegisterRequest })\n  @ApiCreatedResponse({ type: RegisterResponse })\n  @ApiBearerAuth()\n  @UseGuards(JwtSimpleGuard)\n  @Post('create-managed-user')\n  async createManagedUser(@Req() request: Request, @Body() registrationData: RegisterRequest, @Res() res: Response) {\n    try {\n      const authenticatedUser = getAuthenticatedAccessiUser(request);\n      ensureUserManagement(authenticatedUser, 'Solo gli amministratori possono creare utenti.');\n      ensurePrivilegeFlagChanges(authenticatedUser, registrationData);\n\n      // Fail-fast prima di scrivere: senza SMTP non si crea un utente orfano.\n      assertEmailConfigured(this.accessiOptions);\n\n      const codiceUtente = await this.userService.register(registrationData, { allowPrivilegedFields: true });\n      try {\n        await this.emailService.sendPasswordResetEmail(registrationData.email, registrationData.htmlMail);\n      } catch (emailError) {\n        // L'invio e' esterno: se fallisce annulliamo la creazione per non lasciare un utente\n        // senza password e senza email di invito (rollback best-effort).\n        try {\n          await this.userService.deleteUserPermanently(codiceUtente);\n        } catch (rollbackError) {\n          this.logger.error(`Rollback creazione utente ${codiceUtente} non riuscita: ${rollbackError instanceof Error ? rollbackError.message : String(rollbackError)}`);\n        }\n        throw new BadRequestException({\n          code: 'ACCESSI_USER_INVITE_EMAIL_FAILED',\n          message: `Utente non creato: invio email di invito non riuscito (${emailError instanceof Error ? emailError.message : String(emailError)}). Riprova oppure crea l utente e imposta la password manualmente.`,\n        });\n      }\n      return RestUtilities.sendBaseResponse(res, codiceUtente, HttpStatus.CREATED);\n    } catch (error) {\n      return this.sendControllerError(res, error);\n    }\n  }\n\n  @ApiOperation({\n    summary: 'Aggiorna un utente esistente',\n    operationId: 'updateUtente',\n  })\n  @ApiParam({\n    name: 'codiceUtente',\n    description: \"Codice identificativo dell'utente da aggiornare\",\n    required: true,\n    example: 123,\n  })\n  @ApiBody({\n    type: UserDto,\n    description: \"Dati aggiornati dell'utente\",\n  })\n  @ApiResponse({\n    status: HttpStatus.OK,\n    description: 'Utente aggiornato con successo',\n    type: ActionResponse,\n  })\n  @ApiResponse({ status: 400, description: \"Errore nell'aggiornamento\", type: ErrorResponse })\n  @ApiResponse({ status: 403, description: 'Operazione non autorizzata', type: ErrorResponse })\n  @ApiResponse({ status: 500, description: 'Errore interno del server', type: ErrorResponse })\n  @ApiBearerAuth()\n  @UseGuards(JwtSimpleGuard)\n  @Put('update-user/:codiceUtente')\n  async updateUtente(\n    @Req() request: Request,\n    @Param('codiceUtente', ParseIntPipe) codiceUtente: number,\n    @Body() user: UserDto,\n    @Res() res: Response,\n  ) {\n    try {\n      const authenticatedUser = getAuthenticatedAccessiUser(request);\n      const isPrivilegedUpdate = hasPrivilegedUserChanges(user);\n      const isSelf = authenticatedUser.codiceUtente === codiceUtente;\n\n      // ADMIN > SUPER: un superutente non puo' toccare un admin. Self sempre consentito.\n      if (!isSelf) {\n        await this.ensureManageableTarget(authenticatedUser, codiceUtente);\n      }\n\n      if (isPrivilegedUpdate) {\n        ensureUserManagement(\n          authenticatedUser,\n          'Solo gli amministratori possono modificare ruoli, permessi o flag privilegiati.',\n        );\n        ensurePrivilegeFlagChanges(authenticatedUser, user);\n        if (user.flagAdmin === false) {\n          await this.userService.assertNotLastActiveAdmin(codiceUtente);\n        }\n      } else {\n        ensureSelfOrSuperUser(\n          authenticatedUser,\n          codiceUtente,\n          'Puoi modificare solo il tuo profilo.',\n        );\n      }\n\n      if (user.codiceUtente !== undefined && user.codiceUtente !== codiceUtente) {\n        throw new BadRequestException('Il codice utente nel body non coincide con quello del path.');\n      }\n\n      await this.userService.updateUser(codiceUtente, user, {\n        allowPrivilegedChanges: authenticatedUser.flagSuper || authenticatedUser.flagAdmin,\n      });\n\n      return RestUtilities.sendOKMessage(\n        res,\n        `L'utente ${codiceUtente} e' stato aggiornato con successo.`,\n      );\n    } catch (error) {\n      return this.sendControllerError(res, error);\n    }\n  }\n\n  @ApiOperation({\n    summary: 'Imposta il consenso GDPR per un utente',\n    operationId: 'setGdpr',\n  })\n  @ApiParam({\n    name: 'codiceUtente',\n    description: \"Codice identificativo dell'utente che accetta il GDPR\",\n    required: true,\n    example: 123,\n  })\n  @ApiResponse({\n    status: 200,\n    description: 'Consenso GDPR impostato con successo',\n    type: ActionResponse,\n  })\n  @ApiResponse({ status: 400, description: 'Errore nella richiesta', type: ErrorResponse })\n  @ApiResponse({ status: 403, description: 'Operazione non autorizzata', type: ErrorResponse })\n  @ApiBearerAuth()\n  @UseGuards(JwtSimpleGuard)\n  @Patch('set-gdpr/:codiceUtente')\n  async setGdpr(\n    @Req() request: Request,\n    @Param('codiceUtente', ParseIntPipe) codiceUtente: number,\n    @Res() res: Response,\n  ) {\n    try {\n      const authenticatedUser = getAuthenticatedAccessiUser(request);\n      ensureSelfOrSuperUser(\n        authenticatedUser,\n        codiceUtente,\n        'Puoi impostare il GDPR solo sul tuo utente.',\n      );\n      if (authenticatedUser.codiceUtente !== codiceUtente) {\n        await this.ensureManageableTarget(authenticatedUser, codiceUtente);\n      }\n\n      await this.userService.setGdpr(codiceUtente);\n      return RestUtilities.sendOKMessage(res, `L'utente ${codiceUtente} ha accettato il GDPR.`);\n    } catch (error) {\n      return this.sendControllerError(res, error);\n    }\n  }\n}\n"]}

package/dist/accessi-module/Dtos/ConfirmResetPasswordRequest.js

@@ -17,7 +17,7 @@ class ConfirmResetPasswordRequest {
 exports.ConfirmResetPasswordRequest = ConfirmResetPasswordRequest;
 __decorate([
     (0, swagger_1.ApiProperty)({
-        description: 'Nuova password da impostare.',
+        description: 'Nuova password: almeno 8 caratteri con maiuscola, minuscola, cifra e carattere speciale, senza spazi e non comune. Se non conforme l API risponde 400 con codice ACCESSI_WEAK_PASSWORD.',
         minLength: 8,
         maxLength: 100,
         example: 'PasswordSicura123!',

package/dist/accessi-module/Dtos/ConfirmResetPasswordRequest.js.map

@@ -1 +1 @@
-{"version":3,"file":"ConfirmResetPasswordRequest.js","sourceRoot":"","sources":["../../../src/accessi-module/Dtos/ConfirmResetPasswordRequest.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,6CAA8C;AAC9C,qDAAmD;AAEnD,MAAa,2BAA2B;CAYvC;AAZD,kEAYC;AADC;IAVC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,8BAA8B;QAC3C,SAAS,EAAE,CAAC;QACZ,SAAS,EAAE,GAAG;QACd,OAAO,EAAE,oBAAoB;KAC9B,CAAC;IACD,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,4CAA4C,EAAE,CAAC;IACnE,IAAA,wBAAM,EAAC,CAAC,EAAE,GAAG,EAAE;QACd,OAAO,EAAE,+DAA+D;KACzE,CAAC;;gEACmB","sourcesContent":["import { ApiProperty } from '@nestjs/swagger';\nimport { IsString, Length } from 'class-validator';\n\nexport class ConfirmResetPasswordRequest {\n  @ApiProperty({\n    description: 'Nuova password da impostare.',\n    minLength: 8,\n    maxLength: 100,\n    example: 'PasswordSicura123!',\n  })\n  @IsString({ message: 'La nuova password deve essere una stringa.' })\n  @Length(8, 100, {\n    message: 'La nuova password deve essere compresa tra 8 e 100 caratteri.',\n  })\n  newPassword!: string;\n}\n"]}
+{"version":3,"file":"ConfirmResetPasswordRequest.js","sourceRoot":"","sources":["../../../src/accessi-module/Dtos/ConfirmResetPasswordRequest.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,6CAA8C;AAC9C,qDAAmD;AAEnD,MAAa,2BAA2B;CAYvC;AAZD,kEAYC;AADC;IAVC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,yLAAyL;QACtM,SAAS,EAAE,CAAC;QACZ,SAAS,EAAE,GAAG;QACd,OAAO,EAAE,oBAAoB;KAC9B,CAAC;IACD,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,4CAA4C,EAAE,CAAC;IACnE,IAAA,wBAAM,EAAC,CAAC,EAAE,GAAG,EAAE;QACd,OAAO,EAAE,+DAA+D;KACzE,CAAC;;gEACmB","sourcesContent":["import { ApiProperty } from '@nestjs/swagger';\nimport { IsString, Length } from 'class-validator';\n\nexport class ConfirmResetPasswordRequest {\n  @ApiProperty({\n    description: 'Nuova password: almeno 8 caratteri con maiuscola, minuscola, cifra e carattere speciale, senza spazi e non comune. Se non conforme l API risponde 400 con codice ACCESSI_WEAK_PASSWORD.',\n    minLength: 8,\n    maxLength: 100,\n    example: 'PasswordSicura123!',\n  })\n  @IsString({ message: 'La nuova password deve essere una stringa.' })\n  @Length(8, 100, {\n    message: 'La nuova password deve essere compresa tra 8 e 100 caratteri.',\n  })\n  newPassword!: string;\n}\n"]}

package/dist/accessi-module/Dtos/ConsoleEntryDtos.d.ts

@@ -0,0 +1,24 @@
+import { BaseResponse } from './BaseResponse';
+/** Esito dell'emissione di un ticket di ingresso alla console. */
+export declare class ConsoleEntryTicketResult {
+    ticket: string;
+    expiresInSeconds: number;
+}
+export declare class ConsoleEntryTicketResponse extends BaseResponse {
+    Result: ConsoleEntryTicketResult;
+}
+/** Body dello scambio del ticket. */
+export declare class ConsoleEntryExchangeRequest {
+    ticket: string;
+}
+/** Sessione Accessi restituita dallo scambio, da usare come Bearer nella console. */
+export declare class ConsoleEntryTokenResult {
+    value: string;
+    type: string;
+}
+export declare class ConsoleEntrySessionResult {
+    token: ConsoleEntryTokenResult;
+}
+export declare class ConsoleEntrySessionResponse extends BaseResponse {
+    Result: ConsoleEntrySessionResult;
+}

package/dist/accessi-module/Dtos/ConsoleEntryDtos.js

@@ -0,0 +1,77 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ConsoleEntrySessionResponse = exports.ConsoleEntrySessionResult = exports.ConsoleEntryTokenResult = exports.ConsoleEntryExchangeRequest = exports.ConsoleEntryTicketResponse = exports.ConsoleEntryTicketResult = void 0;
+const swagger_1 = require("@nestjs/swagger");
+const class_validator_1 = require("class-validator");
+const BaseResponse_1 = require("./BaseResponse");
+/** Esito dell'emissione di un ticket di ingresso alla console. */
+class ConsoleEntryTicketResult {
+}
+exports.ConsoleEntryTicketResult = ConsoleEntryTicketResult;
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'Ticket monouso da usare in /api/accessi/console#entry=<ticket>.',
+        example: 'f'.repeat(64),
+    }),
+    __metadata("design:type", String)
+], ConsoleEntryTicketResult.prototype, "ticket", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({ description: 'Validita del ticket in secondi.', example: 60 }),
+    __metadata("design:type", Number)
+], ConsoleEntryTicketResult.prototype, "expiresInSeconds", void 0);
+class ConsoleEntryTicketResponse extends BaseResponse_1.BaseResponse {
+}
+exports.ConsoleEntryTicketResponse = ConsoleEntryTicketResponse;
+__decorate([
+    (0, swagger_1.ApiProperty)({ type: ConsoleEntryTicketResult }),
+    __metadata("design:type", ConsoleEntryTicketResult)
+], ConsoleEntryTicketResponse.prototype, "Result", void 0);
+/** Body dello scambio del ticket. */
+class ConsoleEntryExchangeRequest {
+}
+exports.ConsoleEntryExchangeRequest = ConsoleEntryExchangeRequest;
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'Ticket monouso restituito da POST /api/accessi/console/entry.',
+        example: 'f'.repeat(64),
+    }),
+    (0, class_validator_1.IsString)({ message: 'Il ticket deve essere una stringa.' }),
+    (0, class_validator_1.Length)(64, 64, { message: 'Il ticket deve essere lungo 64 caratteri.' }),
+    __metadata("design:type", String)
+], ConsoleEntryExchangeRequest.prototype, "ticket", void 0);
+/** Sessione Accessi restituita dallo scambio, da usare come Bearer nella console. */
+class ConsoleEntryTokenResult {
+}
+exports.ConsoleEntryTokenResult = ConsoleEntryTokenResult;
+__decorate([
+    (0, swagger_1.ApiProperty)({ description: 'JWT Accessi.', example: 'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...' }),
+    __metadata("design:type", String)
+], ConsoleEntryTokenResult.prototype, "value", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({ description: 'Schema di autorizzazione.', example: 'Bearer' }),
+    __metadata("design:type", String)
+], ConsoleEntryTokenResult.prototype, "type", void 0);
+class ConsoleEntrySessionResult {
+}
+exports.ConsoleEntrySessionResult = ConsoleEntrySessionResult;
+__decorate([
+    (0, swagger_1.ApiProperty)({ type: ConsoleEntryTokenResult }),
+    __metadata("design:type", ConsoleEntryTokenResult)
+], ConsoleEntrySessionResult.prototype, "token", void 0);
+class ConsoleEntrySessionResponse extends BaseResponse_1.BaseResponse {
+}
+exports.ConsoleEntrySessionResponse = ConsoleEntrySessionResponse;
+__decorate([
+    (0, swagger_1.ApiProperty)({ type: ConsoleEntrySessionResult }),
+    __metadata("design:type", ConsoleEntrySessionResult)
+], ConsoleEntrySessionResponse.prototype, "Result", void 0);
+//# sourceMappingURL=ConsoleEntryDtos.js.map

package/dist/accessi-module/Dtos/ConsoleEntryDtos.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ConsoleEntryDtos.js","sourceRoot":"","sources":["../../../src/accessi-module/Dtos/ConsoleEntryDtos.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,6CAA8C;AAC9C,qDAAmD;AACnD,iDAA8C;AAE9C,kEAAkE;AAClE,MAAa,wBAAwB;CASpC;AATD,4DASC;AAJC;IAJC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,iEAAiE;QAC9E,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;KACxB,CAAC;;wDACc;AAGhB;IADC,IAAA,qBAAW,EAAC,EAAE,WAAW,EAAE,iCAAiC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;;kEACnD;AAG5B,MAAa,0BAA2B,SAAQ,2BAAY;CAG3D;AAHD,gEAGC;AADC;IADC,IAAA,qBAAW,EAAC,EAAE,IAAI,EAAE,wBAAwB,EAAE,CAAC;8BACvC,wBAAwB;0DAAC;AAGpC,qCAAqC;AACrC,MAAa,2BAA2B;CAQvC;AARD,kEAQC;AADC;IANC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,+DAA+D;QAC5E,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;KACxB,CAAC;IACD,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,oCAAoC,EAAE,CAAC;IAC3D,IAAA,wBAAM,EAAC,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,2CAA2C,EAAE,CAAC;;2DACzD;AAGlB,qFAAqF;AACrF,MAAa,uBAAuB;CAMnC;AAND,0DAMC;AAJC;IADC,IAAA,qBAAW,EAAC,EAAE,WAAW,EAAE,cAAc,EAAE,OAAO,EAAE,yCAAyC,EAAE,CAAC;;sDAClF;AAGf;IADC,IAAA,qBAAW,EAAC,EAAE,WAAW,EAAE,2BAA2B,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;;qDAC/D;AAGhB,MAAa,yBAAyB;CAGrC;AAHD,8DAGC;AADC;IADC,IAAA,qBAAW,EAAC,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC;8BACvC,uBAAuB;wDAAC;AAGlC,MAAa,2BAA4B,SAAQ,2BAAY;CAG5D;AAHD,kEAGC;AADC;IADC,IAAA,qBAAW,EAAC,EAAE,IAAI,EAAE,yBAAyB,EAAE,CAAC;8BACxC,yBAAyB;2DAAC","sourcesContent":["import { ApiProperty } from '@nestjs/swagger';\nimport { IsString, Length } from 'class-validator';\nimport { BaseResponse } from './BaseResponse';\n\n/** Esito dell'emissione di un ticket di ingresso alla console. */\nexport class ConsoleEntryTicketResult {\n  @ApiProperty({\n    description: 'Ticket monouso da usare in /api/accessi/console#entry=<ticket>.',\n    example: 'f'.repeat(64),\n  })\n  ticket!: string;\n\n  @ApiProperty({ description: 'Validita del ticket in secondi.', example: 60 })\n  expiresInSeconds!: number;\n}\n\nexport class ConsoleEntryTicketResponse extends BaseResponse {\n  @ApiProperty({ type: ConsoleEntryTicketResult })\n  Result!: ConsoleEntryTicketResult;\n}\n\n/** Body dello scambio del ticket. */\nexport class ConsoleEntryExchangeRequest {\n  @ApiProperty({\n    description: 'Ticket monouso restituito da POST /api/accessi/console/entry.',\n    example: 'f'.repeat(64),\n  })\n  @IsString({ message: 'Il ticket deve essere una stringa.' })\n  @Length(64, 64, { message: 'Il ticket deve essere lungo 64 caratteri.' })\n  ticket!: string;\n}\n\n/** Sessione Accessi restituita dallo scambio, da usare come Bearer nella console. */\nexport class ConsoleEntryTokenResult {\n  @ApiProperty({ description: 'JWT Accessi.', example: 'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...' })\n  value!: string;\n\n  @ApiProperty({ description: 'Schema di autorizzazione.', example: 'Bearer' })\n  type!: string;\n}\n\nexport class ConsoleEntrySessionResult {\n  @ApiProperty({ type: ConsoleEntryTokenResult })\n  token!: ConsoleEntryTokenResult;\n}\n\nexport class ConsoleEntrySessionResponse extends BaseResponse {\n  @ApiProperty({ type: ConsoleEntrySessionResult })\n  Result!: ConsoleEntrySessionResult;\n}\n"]}

package/dist/accessi-module/Dtos/SetUserPasswordRequest.d.ts

@@ -0,0 +1,4 @@
+/** Impostazione diretta della password di un utente da parte di un admin. */
+export declare class SetUserPasswordRequest {
+    newPassword: string;
+}