emilsoftware-utilities 2.0.0-dev.8 → 2.0.0-dev.80

package/dist/accessi/server/standalone.js

@@ -0,0 +1,191 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createAccessiService = createAccessiService;
+exports.startAccessiService = startAccessiService;
+const express_1 = __importDefault(require("express"));
+const Logger_1 = require("../../Logger");
+const Orm_1 = require("../../Orm");
+const accessi_module_1 = require("../../accessi-module");
+const accessiOptionsFromEnv_1 = require("../../accessi-module/database-updates/accessiOptionsFromEnv");
+const readiness_1 = require("../../accessi-module/health/readiness");
+const validateOptions_1 = require("../../accessi-module/security/validateOptions");
+const metrics_1 = require("../../accessi-module/observability/metrics");
+function normalizePath(value) {
+    return `/${value.replace(/^\/+|\/+$/g, '')}`;
+}
+function createMetrics() {
+    const startedAt = Date.now();
+    let requests = 0;
+    let inFlight = 0;
+    const statuses = new Map();
+    const middleware = (_req, res, next) => {
+        requests += 1;
+        inFlight += 1;
+        res.on('finish', () => {
+            var _a;
+            inFlight = Math.max(0, inFlight - 1);
+            const status = String(res.statusCode);
+            statuses.set(status, ((_a = statuses.get(status)) !== null && _a !== void 0 ? _a : 0) + 1);
+        });
+        next();
+    };
+    const render = () => {
+        const memory = process.memoryUsage();
+        const lines = [
+            '# HELP accessi_http_requests_total Richieste HTTP totali.',
+            '# TYPE accessi_http_requests_total counter',
+            ...[...statuses.entries()].map(([status, count]) => `accessi_http_requests_total{status="${status}"} ${count}`),
+            '# HELP accessi_http_in_flight Richieste HTTP in corso.',
+            '# TYPE accessi_http_in_flight gauge',
+            `accessi_http_in_flight ${inFlight}`,
+            '# HELP accessi_process_uptime_seconds Uptime del processo.',
+            '# TYPE accessi_process_uptime_seconds gauge',
+            `accessi_process_uptime_seconds ${Math.floor((Date.now() - startedAt) / 1000)}`,
+            '# HELP accessi_process_memory_bytes Memoria del processo.',
+            '# TYPE accessi_process_memory_bytes gauge',
+            `accessi_process_memory_bytes{type="rss"} ${memory.rss}`,
+            `accessi_process_memory_bytes{type="heapUsed"} ${memory.heapUsed}`,
+            `accessi_process_memory_bytes{type="heapTotal"} ${memory.heapTotal}`,
+            '# HELP accessi_http_requests_started_total Richieste HTTP avviate.',
+            '# TYPE accessi_http_requests_started_total counter',
+            `accessi_http_requests_started_total ${requests}`,
+        ];
+        return `${lines.join('\n')}\n`;
+    };
+    return { middleware, render };
+}
+/**
+ * Crea un servizio Accessi standalone con health, readiness, metriche e shutdown.
+ *
+ * Non apre la porta finche non viene chiamato `start()`.
+ */
+function createAccessiService() {
+    return __awaiter(this, arguments, void 0, function* (options = {}) {
+        var _a, _b, _c, _d;
+        const logger = new Logger_1.Logger('AccessiService');
+        const accessiOptions = (_a = options.accessiOptions) !== null && _a !== void 0 ? _a : (0, accessiOptionsFromEnv_1.createAccessiOptionsFromEnv)();
+        (0, validateOptions_1.assertValidAccessiOptions)(accessiOptions);
+        for (const warning of (0, validateOptions_1.validateAccessiOptions)(accessiOptions).warnings) {
+            logger.warning(`Configurazione Accessi: ${warning.code} - ${warning.message}`);
+        }
+        const app = (_b = options.app) !== null && _b !== void 0 ? _b : (0, express_1.default)();
+        const healthPath = normalizePath((_c = options.healthPath) !== null && _c !== void 0 ? _c : '/health');
+        const metrics = createMetrics();
+        const readinessChecks = (_d = options.readinessChecks) !== null && _d !== void 0 ? _d : [];
+        let initialized = false;
+        let nestApp;
+        let document;
+        let server;
+        let stopping = false;
+        app.use(metrics.middleware);
+        app.get(`${healthPath}/live`, (_req, res) => {
+            res.status(200).json((0, readiness_1.createAccessiLiveReport)());
+        });
+        app.get(`${healthPath}/ready`, (_req, res) => __awaiter(this, void 0, void 0, function* () {
+            if (!initialized || !nestApp) {
+                res.status(503).json({
+                    status: 'error',
+                    checks: { bootstrap: { ok: false, detail: 'bootstrap non completato' } },
+                });
+                return;
+            }
+            const report = yield (0, readiness_1.checkAccessiReadiness)(accessiOptions, readinessChecks);
+            res.status((0, readiness_1.readinessHttpStatus)(report)).json(report);
+        }));
+        if (options.metrics !== false) {
+            app.get(`${healthPath}/metrics`, (_req, res) => {
+                res.setHeader('Content-Type', 'text/plain; version=0.0.4');
+                res.status(200).send(`${metrics.render()}${(0, metrics_1.renderAccessiMetrics)()}`);
+            });
+        }
+        const result = yield (0, accessi_module_1.initializeAccessiModule)(app, accessiOptions);
+        nestApp = result.nestApp;
+        document = result.document;
+        initialized = true;
+        const stop = () => __awaiter(this, void 0, void 0, function* () {
+            var _a;
+            if (stopping)
+                return;
+            stopping = true;
+            const timeout = Math.max(1000, (_a = options.shutdownTimeoutMs) !== null && _a !== void 0 ? _a : 10000);
+            yield Promise.race([
+                new Promise((resolve) => {
+                    if (!server)
+                        return resolve();
+                    server.close(() => resolve());
+                }),
+                new Promise((resolve) => setTimeout(resolve, timeout)),
+            ]);
+            try {
+                yield (nestApp === null || nestApp === void 0 ? void 0 : nestApp.close());
+            }
+            finally {
+                yield Orm_1.Orm.closePools();
+            }
+        });
+        const start = () => __awaiter(this, void 0, void 0, function* () {
+            var _a, _b, _c;
+            if (server)
+                return server;
+            const port = (_a = options.port) !== null && _a !== void 0 ? _a : Number((_b = process.env.PORT) !== null && _b !== void 0 ? _b : 3000);
+            server = yield new Promise((resolve, reject) => {
+                const listener = options.host
+                    ? app.listen(port, options.host, () => resolve(listener))
+                    : app.listen(port, () => resolve(listener));
+                listener.once('error', reject);
+            });
+            const address = server.address();
+            const actualPort = typeof address === 'object' && address ? address.port : port;
+            logger.info(`Accessi Service in ascolto su http://${(_c = options.host) !== null && _c !== void 0 ? _c : '0.0.0.0'}:${actualPort}`);
+            return server;
+        });
+        return {
+            app,
+            get nestApp() {
+                if (!nestApp)
+                    throw new Error('Accessi Service non inizializzato.');
+                return nestApp;
+            },
+            get document() {
+                if (!document)
+                    throw new Error('Documento OpenAPI non disponibile.');
+                return document;
+            },
+            start,
+            stop,
+        };
+    });
+}
+/**
+ * Avvia Accessi Service e registra SIGTERM/SIGINT per lo shutdown graceful.
+ */
+function startAccessiService() {
+    return __awaiter(this, arguments, void 0, function* (options = {}) {
+        const service = yield createAccessiService(options);
+        yield service.start();
+        let shuttingDown = false;
+        const shutdown = (signal) => __awaiter(this, void 0, void 0, function* () {
+            if (shuttingDown)
+                return;
+            shuttingDown = true;
+            new Logger_1.Logger('AccessiService').info(`Ricevuto ${signal}: arresto in corso.`);
+            yield service.stop();
+        });
+        process.once('SIGTERM', () => { void shutdown('SIGTERM'); });
+        process.once('SIGINT', () => { void shutdown('SIGINT'); });
+        return service;
+    });
+}
+//# sourceMappingURL=standalone.js.map

package/dist/accessi/server/standalone.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"standalone.js","sourceRoot":"","sources":["../../../src/accessi/server/standalone.ts"],"names":[],"mappings":";;;;;;;;;;;;;;AAuGA,oDAiGC;AAKD,kDAeC;AA5ND,sDAA8B;AAG9B,yCAAsC;AACtC,mCAAgC;AAChC,yDAA+D;AAK/D,uGAA0G;AAC1G,qEAI+C;AAE/C,mFAAkH;AAClH,wEAAkF;AA8BlF,SAAS,aAAa,CAAC,KAAa;IAClC,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,EAAE,CAAC;AAC/C,CAAC;AAED,SAAS,aAAa;IACpB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IAE3C,MAAM,UAAU,GAAG,CAAC,IAAa,EAAE,GAAa,EAAE,IAAgB,EAAQ,EAAE;QAC1E,QAAQ,IAAI,CAAC,CAAC;QACd,QAAQ,IAAI,CAAC,CAAC;QACd,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;;YACpB,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,GAAG,CAAC,CAAC,CAAC;YACrC,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YACtC,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,MAAA,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,mCAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACxD,CAAC,CAAC,CAAC;QACH,IAAI,EAAE,CAAC;IACT,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,GAAW,EAAE;QAC1B,MAAM,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG;YACZ,2DAA2D;YAC3D,4CAA4C;YAC5C,GAAG,CAAC,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAC5B,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,uCAAuC,MAAM,MAAM,KAAK,EAAE,CAChF;YACD,wDAAwD;YACxD,qCAAqC;YACrC,0BAA0B,QAAQ,EAAE;YACpC,4DAA4D;YAC5D,6CAA6C;YAC7C,kCAAkC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,GAAG,IAAI,CAAC,EAAE;YAC/E,2DAA2D;YAC3D,2CAA2C;YAC3C,4CAA4C,MAAM,CAAC,GAAG,EAAE;YACxD,iDAAiD,MAAM,CAAC,QAAQ,EAAE;YAClE,kDAAkD,MAAM,CAAC,SAAS,EAAE;YACpE,oEAAoE;YACpE,oDAAoD;YACpD,uCAAuC,QAAQ,EAAE;SAClD,CAAC;QACF,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;IACjC,CAAC,CAAC;IAEF,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;AAChC,CAAC;AAED;;;;GAIG;AACH,SAAsB,oBAAoB;yDACxC,UAAiC,EAAE;;QAEnC,MAAM,MAAM,GAAG,IAAI,eAAM,CAAC,gBAAgB,CAAC,CAAC;QAC5C,MAAM,cAAc,GAAG,MAAA,OAAO,CAAC,cAAc,mCAAI,IAAA,mDAA2B,GAAE,CAAC;QAC/E,IAAA,2CAAyB,EAAC,cAAc,CAAC,CAAC;QAC1C,KAAK,MAAM,OAAO,IAAI,IAAA,wCAAsB,EAAC,cAAc,CAAC,CAAC,QAAQ,EAAE,CAAC;YACtE,MAAM,CAAC,OAAO,CAAC,2BAA2B,OAAO,CAAC,IAAI,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;QACjF,CAAC;QAED,MAAM,GAAG,GAAG,MAAA,OAAO,CAAC,GAAG,mCAAI,IAAA,iBAAO,GAAE,CAAC;QACrC,MAAM,UAAU,GAAG,aAAa,CAAC,MAAA,OAAO,CAAC,UAAU,mCAAI,SAAS,CAAC,CAAC;QAClE,MAAM,OAAO,GAAG,aAAa,EAAE,CAAC;QAChC,MAAM,eAAe,GAAG,MAAA,OAAO,CAAC,eAAe,mCAAI,EAAE,CAAC;QACtD,IAAI,WAAW,GAAG,KAAK,CAAC;QACxB,IAAI,OAAiE,CAAC;QACtE,IAAI,QAAmE,CAAC;QACxE,IAAI,MAA0B,CAAC;QAC/B,IAAI,QAAQ,GAAG,KAAK,CAAC;QAErB,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAE5B,GAAG,CAAC,GAAG,CAAC,GAAG,UAAU,OAAO,EAAE,CAAC,IAAa,EAAE,GAAa,EAAE,EAAE;YAC7D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAA,mCAAuB,GAAE,CAAC,CAAC;QAClD,CAAC,CAAC,CAAC;QAEH,GAAG,CAAC,GAAG,CAAC,GAAG,UAAU,QAAQ,EAAE,CAAO,IAAa,EAAE,GAAa,EAAE,EAAE;YACpE,IAAI,CAAC,WAAW,IAAI,CAAC,OAAO,EAAE,CAAC;gBAC7B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACnB,MAAM,EAAE,OAAO;oBACf,MAAM,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,0BAA0B,EAAE,EAAE;iBACzE,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,IAAA,iCAAqB,EAAC,cAAc,EAAE,eAAe,CAAC,CAAC;YAC5E,GAAG,CAAC,MAAM,CAAC,IAAA,+BAAmB,EAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvD,CAAC,CAAA,CAAC,CAAC;QAEH,IAAI,OAAO,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;YAC9B,GAAG,CAAC,GAAG,CAAC,GAAG,UAAU,UAAU,EAAE,CAAC,IAAa,EAAE,GAAa,EAAE,EAAE;gBAChE,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,2BAA2B,CAAC,CAAC;gBAC3D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,GAAG,IAAA,8BAAoB,GAAE,EAAE,CAAC,CAAC;YACvE,CAAC,CAAC,CAAC;QACL,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAA,wCAAuB,EAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QAClE,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QACzB,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QAC3B,WAAW,GAAG,IAAI,CAAC;QAEnB,MAAM,IAAI,GAAG,GAAwB,EAAE;;YACrC,IAAI,QAAQ;gBAAE,OAAO;YACrB,QAAQ,GAAG,IAAI,CAAC;YAChB,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,IAAK,EAAE,MAAA,OAAO,CAAC,iBAAiB,mCAAI,KAAM,CAAC,CAAC;YACrE,MAAM,OAAO,CAAC,IAAI,CAAC;gBACjB,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;oBAC5B,IAAI,CAAC,MAAM;wBAAE,OAAO,OAAO,EAAE,CAAC;oBAC9B,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;gBAChC,CAAC,CAAC;gBACF,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;aAC7D,CAAC,CAAC;YACH,IAAI,CAAC;gBACH,MAAM,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,KAAK,EAAE,CAAA,CAAC;YACzB,CAAC;oBAAS,CAAC;gBACT,MAAM,SAAG,CAAC,UAAU,EAAE,CAAC;YACzB,CAAC;QACH,CAAC,CAAA,CAAC;QAEF,MAAM,KAAK,GAAG,GAA0B,EAAE;;YACxC,IAAI,MAAM;gBAAE,OAAO,MAAM,CAAC;YAC1B,MAAM,IAAI,GAAG,MAAA,OAAO,CAAC,IAAI,mCAAI,MAAM,CAAC,MAAA,OAAO,CAAC,GAAG,CAAC,IAAI,mCAAI,IAAI,CAAC,CAAC;YAC9D,MAAM,GAAG,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBACrD,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI;oBAC3B,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;oBACzD,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAC9C,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACjC,CAAC,CAAC,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;YACjC,MAAM,UAAU,GAAG,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YAChF,MAAM,CAAC,IAAI,CAAC,wCAAwC,MAAA,OAAO,CAAC,IAAI,mCAAI,SAAS,IAAI,UAAU,EAAE,CAAC,CAAC;YAC/F,OAAO,MAAM,CAAC;QAChB,CAAC,CAAA,CAAC;QAEF,OAAO;YACL,GAAG;YACH,IAAI,OAAO;gBACT,IAAI,CAAC,OAAO;oBAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;gBACpE,OAAO,OAAO,CAAC;YACjB,CAAC;YACD,IAAI,QAAQ;gBACV,IAAI,CAAC,QAAQ;oBAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;gBACrE,OAAO,QAAQ,CAAC;YAClB,CAAC;YACD,KAAK;YACL,IAAI;SACL,CAAC;IACJ,CAAC;CAAA;AAED;;GAEG;AACH,SAAsB,mBAAmB;yDAAC,UAAiC,EAAE;QAC3E,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,OAAO,CAAC,CAAC;QACpD,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;QAEtB,IAAI,YAAY,GAAG,KAAK,CAAC;QACzB,MAAM,QAAQ,GAAG,CAAO,MAAc,EAAiB,EAAE;YACvD,IAAI,YAAY;gBAAE,OAAO;YACzB,YAAY,GAAG,IAAI,CAAC;YACpB,IAAI,eAAM,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,YAAY,MAAM,qBAAqB,CAAC,CAAC;YAC3E,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;QACvB,CAAC,CAAA,CAAC;QAEF,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,KAAK,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7D,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,GAAG,KAAK,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3D,OAAO,OAAO,CAAC;IACjB,CAAC;CAAA","sourcesContent":["import express from 'express';\nimport type { Application, Request, Response } from 'express';\nimport type { Server } from 'http';\nimport { Logger } from '../../Logger';\nimport { Orm } from '../../Orm';\nimport { initializeAccessiModule } from '../../accessi-module';\nimport type {\n  AccessiModuleInitializationResult,\n} from '../../accessi-module';\nimport type { AccessiOptions } from '../../accessi-module/AccessiModule';\nimport { createAccessiOptionsFromEnv } from '../../accessi-module/database-updates/accessiOptionsFromEnv';\nimport {\n  checkAccessiReadiness,\n  createAccessiLiveReport,\n  readinessHttpStatus,\n} from '../../accessi-module/health/readiness';\nimport type { AccessiReadinessCheck } from '../../accessi-module/health/readiness';\nimport { assertValidAccessiOptions, validateAccessiOptions } from '../../accessi-module/security/validateOptions';\nimport { renderAccessiMetrics } from '../../accessi-module/observability/metrics';\n\nexport type { AccessiReadinessCheck } from '../../accessi-module/health/readiness';\n\n\nexport interface AccessiServiceOptions {\n  /** Applicazione Express gia esistente. Default: nuova app. */\n  app?: Application;\n  /** Configurazione completa. Default: `createAccessiOptionsFromEnv()`. */\n  accessiOptions?: AccessiOptions;\n  port?: number;\n  host?: string;\n  /** Path base degli endpoint health. Default: `/health`. */\n  healthPath?: string;\n  /** Espone `/health/metrics` in formato Prometheus. Default: true. */\n  metrics?: boolean;\n  /** Check aggiuntivi per la readiness. */\n  readinessChecks?: AccessiReadinessCheck[];\n  /** Timeout chiusura server. Default: 10000 ms. */\n  shutdownTimeoutMs?: number;\n}\n\nexport interface AccessiService {\n  app: Application;\n  nestApp: AccessiModuleInitializationResult['nestApp'];\n  document: AccessiModuleInitializationResult['document'];\n  start(): Promise<Server>;\n  stop(): Promise<void>;\n}\n\nfunction normalizePath(value: string): string {\n  return `/${value.replace(/^\\/+|\\/+$/g, '')}`;\n}\n\nfunction createMetrics() {\n  const startedAt = Date.now();\n  let requests = 0;\n  let inFlight = 0;\n  const statuses = new Map<string, number>();\n\n  const middleware = (_req: Request, res: Response, next: () => void): void => {\n    requests += 1;\n    inFlight += 1;\n    res.on('finish', () => {\n      inFlight = Math.max(0, inFlight - 1);\n      const status = String(res.statusCode);\n      statuses.set(status, (statuses.get(status) ?? 0) + 1);\n    });\n    next();\n  };\n\n  const render = (): string => {\n    const memory = process.memoryUsage();\n    const lines = [\n      '# HELP accessi_http_requests_total Richieste HTTP totali.',\n      '# TYPE accessi_http_requests_total counter',\n      ...[...statuses.entries()].map(\n        ([status, count]) => `accessi_http_requests_total{status=\"${status}\"} ${count}`,\n      ),\n      '# HELP accessi_http_in_flight Richieste HTTP in corso.',\n      '# TYPE accessi_http_in_flight gauge',\n      `accessi_http_in_flight ${inFlight}`,\n      '# HELP accessi_process_uptime_seconds Uptime del processo.',\n      '# TYPE accessi_process_uptime_seconds gauge',\n      `accessi_process_uptime_seconds ${Math.floor((Date.now() - startedAt) / 1000)}`,\n      '# HELP accessi_process_memory_bytes Memoria del processo.',\n      '# TYPE accessi_process_memory_bytes gauge',\n      `accessi_process_memory_bytes{type=\"rss\"} ${memory.rss}`,\n      `accessi_process_memory_bytes{type=\"heapUsed\"} ${memory.heapUsed}`,\n      `accessi_process_memory_bytes{type=\"heapTotal\"} ${memory.heapTotal}`,\n      '# HELP accessi_http_requests_started_total Richieste HTTP avviate.',\n      '# TYPE accessi_http_requests_started_total counter',\n      `accessi_http_requests_started_total ${requests}`,\n    ];\n    return `${lines.join('\\n')}\\n`;\n  };\n\n  return { middleware, render };\n}\n\n/**\n * Crea un servizio Accessi standalone con health, readiness, metriche e shutdown.\n *\n * Non apre la porta finche non viene chiamato `start()`.\n */\nexport async function createAccessiService(\n  options: AccessiServiceOptions = {},\n): Promise<AccessiService> {\n  const logger = new Logger('AccessiService');\n  const accessiOptions = options.accessiOptions ?? createAccessiOptionsFromEnv();\n  assertValidAccessiOptions(accessiOptions);\n  for (const warning of validateAccessiOptions(accessiOptions).warnings) {\n    logger.warning(`Configurazione Accessi: ${warning.code} - ${warning.message}`);\n  }\n\n  const app = options.app ?? express();\n  const healthPath = normalizePath(options.healthPath ?? '/health');\n  const metrics = createMetrics();\n  const readinessChecks = options.readinessChecks ?? [];\n  let initialized = false;\n  let nestApp: AccessiModuleInitializationResult['nestApp'] | undefined;\n  let document: AccessiModuleInitializationResult['document'] | undefined;\n  let server: Server | undefined;\n  let stopping = false;\n\n  app.use(metrics.middleware);\n\n  app.get(`${healthPath}/live`, (_req: Request, res: Response) => {\n    res.status(200).json(createAccessiLiveReport());\n  });\n\n  app.get(`${healthPath}/ready`, async (_req: Request, res: Response) => {\n    if (!initialized || !nestApp) {\n      res.status(503).json({\n        status: 'error',\n        checks: { bootstrap: { ok: false, detail: 'bootstrap non completato' } },\n      });\n      return;\n    }\n\n    const report = await checkAccessiReadiness(accessiOptions, readinessChecks);\n    res.status(readinessHttpStatus(report)).json(report);\n  });\n\n  if (options.metrics !== false) {\n    app.get(`${healthPath}/metrics`, (_req: Request, res: Response) => {\n      res.setHeader('Content-Type', 'text/plain; version=0.0.4');\n      res.status(200).send(`${metrics.render()}${renderAccessiMetrics()}`);\n    });\n  }\n\n  const result = await initializeAccessiModule(app, accessiOptions);\n  nestApp = result.nestApp;\n  document = result.document;\n  initialized = true;\n\n  const stop = async (): Promise<void> => {\n    if (stopping) return;\n    stopping = true;\n    const timeout = Math.max(1_000, options.shutdownTimeoutMs ?? 10_000);\n    await Promise.race([\n      new Promise<void>((resolve) => {\n        if (!server) return resolve();\n        server.close(() => resolve());\n      }),\n      new Promise<void>((resolve) => setTimeout(resolve, timeout)),\n    ]);\n    try {\n      await nestApp?.close();\n    } finally {\n      await Orm.closePools();\n    }\n  };\n\n  const start = async (): Promise<Server> => {\n    if (server) return server;\n    const port = options.port ?? Number(process.env.PORT ?? 3000);\n    server = await new Promise<Server>((resolve, reject) => {\n      const listener = options.host\n        ? app.listen(port, options.host, () => resolve(listener))\n        : app.listen(port, () => resolve(listener));\n      listener.once('error', reject);\n    });\n    const address = server.address();\n    const actualPort = typeof address === 'object' && address ? address.port : port;\n    logger.info(`Accessi Service in ascolto su http://${options.host ?? '0.0.0.0'}:${actualPort}`);\n    return server;\n  };\n\n  return {\n    app,\n    get nestApp() {\n      if (!nestApp) throw new Error('Accessi Service non inizializzato.');\n      return nestApp;\n    },\n    get document() {\n      if (!document) throw new Error('Documento OpenAPI non disponibile.');\n      return document;\n    },\n    start,\n    stop,\n  };\n}\n\n/**\n * Avvia Accessi Service e registra SIGTERM/SIGINT per lo shutdown graceful.\n */\nexport async function startAccessiService(options: AccessiServiceOptions = {}): Promise<AccessiService> {\n  const service = await createAccessiService(options);\n  await service.start();\n\n  let shuttingDown = false;\n  const shutdown = async (signal: string): Promise<void> => {\n    if (shuttingDown) return;\n    shuttingDown = true;\n    new Logger('AccessiService').info(`Ricevuto ${signal}: arresto in corso.`);\n    await service.stop();\n  };\n\n  process.once('SIGTERM', () => { void shutdown('SIGTERM'); });\n  process.once('SIGINT', () => { void shutdown('SIGINT'); });\n  return service;\n}\n"]}

package/dist/accessi/server/tenants.d.ts

@@ -0,0 +1,97 @@
+import type { AccessiOptions } from '../../accessi-module/AccessiModule';
+/** Variabili usate dal manifest del tenant (oltre alle normali `ACCESSI_*`). */
+export interface AccessiTenantEnv extends NodeJS.ProcessEnv {
+    ACCESSI_TENANT_ID?: string;
+    /** Host separati da virgola; supporta `*.example.com`. */
+    ACCESSI_TENANT_HOSTS?: string;
+    /** Prefisso path, es. `/tenant-a`. */
+    ACCESSI_TENANT_PATH?: string;
+    ACCESSI_TENANT_ENABLED?: string;
+    /** Porta del servizio quando si usa `startAccessiTenants`. */
+    ACCESSI_TENANT_PORT?: string;
+    ACCESSI_TENANT_DESCRIPTION?: string;
+}
+export interface AccessiTenant {
+    id: string;
+    hosts: string[];
+    path?: string;
+    enabled: boolean;
+    description?: string;
+    port?: number;
+    /** Nome del file `.env` di origine (mai il contenuto). */
+    file: string;
+    /** Variabili risolte del tenant (base + file); non serializzarle nei log. */
+    env: NodeJS.ProcessEnv;
+    options: AccessiOptions;
+}
+export interface AccessiTenantSummary {
+    id: string;
+    hosts: string[];
+    path?: string;
+    enabled: boolean;
+    description?: string;
+    port?: number;
+    file: string;
+    database: {
+        host?: string;
+        port?: number;
+        database?: string;
+        user?: string;
+    };
+    issuer?: string;
+    audience?: string;
+    jwtAlgorithm: string;
+    refreshEnabled: boolean;
+}
+export interface AccessiTenantResolution {
+    tenant: AccessiTenant;
+    matchedBy: 'host' | 'path' | 'header';
+}
+export interface AccessiTenantRegistry {
+    directory: string;
+    tenants: AccessiTenant[];
+    warnings: string[];
+    allowHeader: boolean;
+    byId: ReadonlyMap<string, AccessiTenant>;
+    resolve(input: {
+        host?: string;
+        path?: string;
+        header?: string;
+    }, options?: {
+        allowHeader?: boolean;
+    }): AccessiTenantResolution | undefined;
+    summary(): AccessiTenantSummary[];
+}
+export interface LoadAccessiTenantsOptions {
+    /** Cartella con `<tenant>.env`. */
+    directory: string;
+    /** Variabili base (default `process.env`); il file tenant vince. */
+    env?: NodeJS.ProcessEnv;
+    /** Abilita la risoluzione via header `x-accessi-tenant`. Default: false. */
+    allowHeader?: boolean;
+    /** Consente issuer/audience uguali tra tenant (sconsigliato). Default: false. */
+    allowSharedIssuer?: boolean;
+}
+/** Errore aggregato di configurazione tenant. */
+export declare class AccessiTenantConfigurationError extends Error {
+    readonly issues: string[];
+    constructor(issues: string[]);
+}
+/**
+ * Parser minimale di un file `.env`.
+ *
+ * Supporta commenti, `export KEY=...`, valori tra apici singoli o doppi e le
+ * sequenze `\n`, `\r`, `\t`, `\"` e `\\` nei valori tra doppi apici. Non
+ * interpreta variabili annidate: la configurazione tenant deve restare esplicita.
+ */
+export declare function parseAccessiTenantEnvFile(content: string): Record<string, string>;
+/** Prefisso Redis consigliato per isolare gli store del tenant. */
+export declare function getAccessiTenantRedisPrefix(tenantId: string): string;
+/**
+ * Carica i tenant da una cartella di file `<id>.env`.
+ *
+ * Non modifica `process.env`: ogni tenant riceve una copia isolata delle
+ * variabili. Un errore in un file blocca l'intero caricamento, cosi non si
+ * avvia un tenant con configurazione parziale.
+ */
+export declare function loadAccessiTenants(options: LoadAccessiTenantsOptions): AccessiTenantRegistry;

package/dist/accessi/server/tenants.js

@@ -0,0 +1,275 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AccessiTenantConfigurationError = void 0;
+exports.parseAccessiTenantEnvFile = parseAccessiTenantEnvFile;
+exports.getAccessiTenantRedisPrefix = getAccessiTenantRedisPrefix;
+exports.loadAccessiTenants = loadAccessiTenants;
+const fs_1 = require("fs");
+const path_1 = require("path");
+const accessiOptionsFromEnv_1 = require("../../accessi-module/database-updates/accessiOptionsFromEnv");
+/** Errore aggregato di configurazione tenant. */
+class AccessiTenantConfigurationError extends Error {
+    constructor(issues) {
+        super(`Configurazione tenant non valida:\n${issues.map((issue) => `- ${issue}`).join('\n')}`);
+        this.name = 'AccessiTenantConfigurationError';
+        this.issues = issues;
+    }
+}
+exports.AccessiTenantConfigurationError = AccessiTenantConfigurationError;
+/**
+ * Parser minimale di un file `.env`.
+ *
+ * Supporta commenti, `export KEY=...`, valori tra apici singoli o doppi e le
+ * sequenze `\n`, `\r`, `\t`, `\"` e `\\` nei valori tra doppi apici. Non
+ * interpreta variabili annidate: la configurazione tenant deve restare esplicita.
+ */
+function parseAccessiTenantEnvFile(content) {
+    var _a, _b;
+    const env = {};
+    for (const rawLine of content.split(/\r?\n/)) {
+        const line = rawLine.trim();
+        if (line === '' || line.startsWith('#'))
+            continue;
+        const match = /^(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)\s*=\s*(.*)$/.exec(line);
+        if (!match)
+            throw new Error(`Riga .env non valida: "${rawLine}"`);
+        const key = (_a = match[1]) !== null && _a !== void 0 ? _a : '';
+        let value = (_b = match[2]) !== null && _b !== void 0 ? _b : '';
+        if (value.startsWith('"')) {
+            if (!value.endsWith('"') || value.length < 2)
+                throw new Error(`${key}: virgolette non chiuse.`);
+            value = value.slice(1, -1)
+                .replace(/\\n/g, '\n')
+                .replace(/\\r/g, '\r')
+                .replace(/\\t/g, '\t')
+                .replace(/\\"/g, '"')
+                .replace(/\\\\/g, '\\');
+        }
+        else if (value.startsWith("'")) {
+            if (!value.endsWith("'") || value.length < 2)
+                throw new Error(`${key}: virgolette non chiuse.`);
+            value = value.slice(1, -1);
+        }
+        else {
+            const comment = value.indexOf(' #');
+            if (comment >= 0)
+                value = value.slice(0, comment);
+            value = value.trim();
+        }
+        env[key] = value;
+    }
+    return env;
+}
+function splitList(value) {
+    return (value !== null && value !== void 0 ? value : '')
+        .split(',')
+        .map((entry) => entry.trim().toLowerCase())
+        .filter(Boolean);
+}
+function normalizeHost(host) {
+    return host.trim().toLowerCase().replace(/\.$/, '');
+}
+function normalizeTenantPath(path) {
+    if (path === undefined || path.trim() === '')
+        return undefined;
+    const normalized = `/${path.trim().replace(/^\/+|\/+$/g, '')}`;
+    return normalized === '/' ? '/' : normalized;
+}
+function matchesHost(tenant, host) {
+    return tenant.hosts.some((candidate) => {
+        if (candidate === host)
+            return true;
+        if (candidate.startsWith('*.')) {
+            const suffix = candidate.slice(1);
+            return host.endsWith(suffix) && host.length > suffix.length;
+        }
+        return false;
+    });
+}
+function matchesPath(tenant, path) {
+    if (!tenant.path)
+        return false;
+    if (tenant.path === '/')
+        return true;
+    return path === tenant.path || path.startsWith(`${tenant.path}/`);
+}
+/** Prefisso Redis consigliato per isolare gli store del tenant. */
+function getAccessiTenantRedisPrefix(tenantId) {
+    return `accessi:${tenantId}:`;
+}
+function tenantSummary(tenant) {
+    var _a;
+    const database = tenant.options.databaseOptions;
+    return Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign({ id: tenant.id, hosts: [...tenant.hosts] }, (tenant.path ? { path: tenant.path } : {})), { enabled: tenant.enabled }), (tenant.description ? { description: tenant.description } : {})), (tenant.port ? { port: tenant.port } : {})), { file: tenant.file, database: {
+            host: database.host,
+            port: database.port,
+            database: database.database,
+            user: database.user,
+        }, issuer: tenant.options.jwtOptions.issuer }), (tenant.options.jwtOptions.audience
+        ? { audience: typeof tenant.options.jwtOptions.audience === 'string' ? tenant.options.jwtOptions.audience : tenant.options.jwtOptions.audience.join(',') }
+        : {})), { jwtAlgorithm: (_a = tenant.options.jwtOptions.algorithm) !== null && _a !== void 0 ? _a : 'HS256', refreshEnabled: Boolean(tenant.options.jwtOptions.refreshExpiresIn) });
+}
+/**
+ * Carica i tenant da una cartella di file `<id>.env`.
+ *
+ * Non modifica `process.env`: ogni tenant riceve una copia isolata delle
+ * variabili. Un errore in un file blocca l'intero caricamento, cosi non si
+ * avvia un tenant con configurazione parziale.
+ */
+function loadAccessiTenants(options) {
+    var _a, _b, _c, _d, _e, _f, _g;
+    if (!(options === null || options === void 0 ? void 0 : options.directory))
+        throw new Error('loadAccessiTenants: directory obbligatoria.');
+    const directory = (0, path_1.resolve)(options.directory);
+    const baseEnv = (_a = options.env) !== null && _a !== void 0 ? _a : process.env;
+    const issues = [];
+    const warnings = [];
+    let files;
+    try {
+        files = (0, fs_1.readdirSync)(directory, { withFileTypes: true })
+            .filter((entry) => entry.isFile() && entry.name.endsWith('.env'))
+            .map((entry) => entry.name)
+            .sort();
+    }
+    catch (error) {
+        throw new AccessiTenantConfigurationError([
+            `Cartella tenant non leggibile (${directory}): ${error instanceof Error ? error.message : String(error)}`,
+        ]);
+    }
+    if (files.length === 0) {
+        throw new AccessiTenantConfigurationError([`Nessun file .env nella cartella ${directory}.`]);
+    }
+    const tenants = [];
+    for (const file of files) {
+        let fileEnv;
+        try {
+            fileEnv = parseAccessiTenantEnvFile((0, fs_1.readFileSync)((0, path_1.join)(directory, file), 'utf8'));
+        }
+        catch (error) {
+            issues.push(`${file}: ${error instanceof Error ? error.message : String(error)}`);
+            continue;
+        }
+        const env = Object.assign(Object.assign({}, baseEnv), fileEnv);
+        const id = ((_b = env.ACCESSI_TENANT_ID) !== null && _b !== void 0 ? _b : (0, path_1.basename)(file, '.env')).trim();
+        if (!/^[a-z0-9][a-z0-9_-]{0,62}$/.test(id)) {
+            issues.push(`${file}: ACCESSI_TENANT_ID "${id}" non valido (minuscole, numeri, - e _, max 63).`);
+            continue;
+        }
+        const hosts = splitList(env.ACCESSI_TENANT_HOSTS).map(normalizeHost);
+        const path = normalizeTenantPath(env.ACCESSI_TENANT_PATH);
+        if (hosts.length === 0 && !path) {
+            issues.push(`${file}: configurare ACCESSI_TENANT_HOSTS oppure ACCESSI_TENANT_PATH.`);
+            continue;
+        }
+        const portValue = env.ACCESSI_TENANT_PORT;
+        const port = portValue ? Number(portValue) : undefined;
+        if (port !== undefined && (!Number.isInteger(port) || port < 1 || port > 65535)) {
+            issues.push(`${file}: ACCESSI_TENANT_PORT non valida ("${portValue}").`);
+            continue;
+        }
+        try {
+            const accessiOptions = (0, accessiOptionsFromEnv_1.createAccessiOptionsFromEnv)(env);
+            tenants.push(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign({ id,
+                hosts }, (path ? { path } : {})), { enabled: env.ACCESSI_TENANT_ENABLED !== 'false' }), (env.ACCESSI_TENANT_DESCRIPTION ? { description: env.ACCESSI_TENANT_DESCRIPTION } : {})), (port ? { port } : {})), { file,
+                env, options: Object.assign(Object.assign({}, accessiOptions), { tenantId: id }) }));
+        }
+        catch (error) {
+            issues.push(`${file}: ${error instanceof Error ? error.message : String(error)}`);
+        }
+    }
+    const byId = new Map();
+    const hostsSeen = new Map();
+    const pathsSeen = new Map();
+    const jwtSecrets = new Map();
+    const issuerAudience = new Map();
+    for (const tenant of tenants) {
+        if (byId.has(tenant.id)) {
+            issues.push(`Tenant duplicato "${tenant.id}" (${tenant.file} e ${(_c = byId.get(tenant.id)) === null || _c === void 0 ? void 0 : _c.file}).`);
+        }
+        else {
+            byId.set(tenant.id, tenant);
+        }
+        for (const host of tenant.hosts) {
+            const existing = hostsSeen.get(host);
+            if (existing)
+                issues.push(`Host "${host}" assegnato a "${existing}" e "${tenant.id}".`);
+            else
+                hostsSeen.set(host, tenant.id);
+        }
+        if (tenant.path) {
+            const existing = pathsSeen.get(tenant.path);
+            if (existing)
+                issues.push(`Path "${tenant.path}" assegnato a "${existing}" e "${tenant.id}".`);
+            else
+                pathsSeen.set(tenant.path, tenant.id);
+        }
+        // Un segreto JWT condiviso rende un token valido su piu tenant.
+        const signingKey = (_d = tenant.options.jwtOptions.privateKey) !== null && _d !== void 0 ? _d : tenant.options.jwtOptions.secret;
+        const fingerprintKey = `${(_e = tenant.options.jwtOptions.algorithm) !== null && _e !== void 0 ? _e : 'HS256'}|${signingKey}`;
+        const existingKey = jwtSecrets.get(fingerprintKey);
+        if (existingKey) {
+            issues.push(`Chiave JWT condivisa tra "${existingKey}" e "${tenant.id}": usare segreti distinti.`);
+        }
+        else {
+            jwtSecrets.set(fingerprintKey, tenant.id);
+        }
+        const issuer = (_f = tenant.options.jwtOptions.issuer) !== null && _f !== void 0 ? _f : '(assente)';
+        const audience = Array.isArray(tenant.options.jwtOptions.audience)
+            ? tenant.options.jwtOptions.audience.join(',')
+            : ((_g = tenant.options.jwtOptions.audience) !== null && _g !== void 0 ? _g : '(assente)');
+        const issuerKey = `${issuer}|${audience}`;
+        const existingIssuer = issuerAudience.get(issuerKey);
+        if (existingIssuer && options.allowSharedIssuer !== true) {
+            warnings.push(`Issuer/audience "${issuerKey}" condivisi tra "${existingIssuer}" e "${tenant.id}".`);
+        }
+        else {
+            issuerAudience.set(issuerKey, tenant.id);
+        }
+    }
+    const enabled = tenants.filter((tenant) => tenant.enabled);
+    if (enabled.length > 1) {
+        const defaultTenant = enabled.find((tenant) => tenant.hosts.length === 0 && tenant.path === '/');
+        if (defaultTenant) {
+            issues.push(`Tenant "${defaultTenant.id}" intercetta tutte le richieste (path "/") insieme ad altri tenant.`);
+        }
+    }
+    if (issues.length > 0)
+        throw new AccessiTenantConfigurationError(issues);
+    const registry = {
+        directory,
+        tenants,
+        warnings,
+        allowHeader: options.allowHeader === true,
+        byId,
+        resolve(input, resolveOptions) {
+            var _a, _b, _c;
+            const allowHeader = (_a = resolveOptions === null || resolveOptions === void 0 ? void 0 : resolveOptions.allowHeader) !== null && _a !== void 0 ? _a : registry.allowHeader;
+            const host = input.host ? normalizeHost((_b = input.host.split(':')[0]) !== null && _b !== void 0 ? _b : input.host) : undefined;
+            if (host) {
+                const byHost = enabled.find((tenant) => matchesHost(tenant, host));
+                if (byHost)
+                    return { tenant: byHost, matchedBy: 'host' };
+            }
+            const requestPath = (_c = input.path) !== null && _c !== void 0 ? _c : '/';
+            const byPath = enabled
+                .filter((tenant) => matchesPath(tenant, requestPath))
+                .sort((left, right) => { var _a, _b, _c, _d; return ((_b = (_a = right.path) === null || _a === void 0 ? void 0 : _a.length) !== null && _b !== void 0 ? _b : 0) - ((_d = (_c = left.path) === null || _c === void 0 ? void 0 : _c.length) !== null && _d !== void 0 ? _d : 0); })[0];
+            if (byPath && byPath.path !== '/')
+                return { tenant: byPath, matchedBy: 'path' };
+            if (allowHeader && input.header) {
+                const headerId = input.header.trim().toLowerCase();
+                const tenant = byId.get(headerId);
+                if (tenant === null || tenant === void 0 ? void 0 : tenant.enabled)
+                    return { tenant, matchedBy: 'header' };
+            }
+            if (byPath)
+                return { tenant: byPath, matchedBy: 'path' };
+            return undefined;
+        },
+        summary() {
+            return tenants.map(tenantSummary);
+        },
+    };
+    return registry;
+}
+//# sourceMappingURL=tenants.js.map

package/dist/accessi/server/tenants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenants.js","sourceRoot":"","sources":["../../../src/accessi/server/tenants.ts"],"names":[],"mappings":";;;AAgGA,8DA4BC;AAqCD,kEAEC;AAuCD,gDA+JC;AAzWD,2BAA+C;AAC/C,+BAA+C;AAE/C,uGAA0G;AA2E1G,iDAAiD;AACjD,MAAa,+BAAgC,SAAQ,KAAK;IAGxD,YAAY,MAAgB;QAC1B,KAAK,CAAC,sCAAsC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC9F,IAAI,CAAC,IAAI,GAAG,iCAAiC,CAAC;QAC9C,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF;AARD,0EAQC;AAED;;;;;;GAMG;AACH,SAAgB,yBAAyB,CAAC,OAAe;;IACvD,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,IAAI,KAAK,EAAE,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAClD,MAAM,KAAK,GAAG,qDAAqD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/E,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,OAAO,GAAG,CAAC,CAAC;QAClE,MAAM,GAAG,GAAG,MAAA,KAAK,CAAC,CAAC,CAAC,mCAAI,EAAE,CAAC;QAC3B,IAAI,KAAK,GAAG,MAAA,KAAK,CAAC,CAAC,CAAC,mCAAI,EAAE,CAAC;QAC3B,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,GAAG,GAAG,0BAA0B,CAAC,CAAC;YAChG,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;iBACvB,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC;iBACrB,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC;iBACrB,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC;iBACrB,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;iBACpB,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC5B,CAAC;aAAM,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACjC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,GAAG,GAAG,0BAA0B,CAAC,CAAC;YAChG,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7B,CAAC;aAAM,CAAC;YACN,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACpC,IAAI,OAAO,IAAI,CAAC;gBAAE,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;YAClD,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;QACvB,CAAC;QACD,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACnB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,SAAS,CAAC,KAAyB;IAC1C,OAAO,CAAC,KAAK,aAAL,KAAK,cAAL,KAAK,GAAI,EAAE,CAAC;SACjB,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;SAC1C,MAAM,CAAC,OAAO,CAAC,CAAC;AACrB,CAAC;AAED,SAAS,aAAa,CAAC,IAAY;IACjC,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAwB;IACnD,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IAC/D,MAAM,UAAU,GAAG,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,EAAE,CAAC;IAC/D,OAAO,UAAU,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC;AAC/C,CAAC;AAED,SAAS,WAAW,CAAC,MAAqB,EAAE,IAAY;IACtD,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE;QACrC,IAAI,SAAS,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QACpC,IAAI,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/B,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAClC,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QAC9D,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,WAAW,CAAC,MAAqB,EAAE,IAAY;IACtD,IAAI,CAAC,MAAM,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IAC/B,IAAI,MAAM,CAAC,IAAI,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IACrC,OAAO,IAAI,KAAK,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC;AACpE,CAAC;AAED,mEAAmE;AACnE,SAAgB,2BAA2B,CAAC,QAAgB;IAC1D,OAAO,WAAW,QAAQ,GAAG,CAAC;AAChC,CAAC;AAED,SAAS,aAAa,CAAC,MAAqB;;IAC1C,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,eAK/B,CAAC;IACF,2GACE,EAAE,EAAE,MAAM,CAAC,EAAE,EACb,KAAK,EAAE,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,IACrB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,KAC7C,OAAO,EAAE,MAAM,CAAC,OAAO,KACpB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,GAC/D,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,KAC7C,IAAI,EAAE,MAAM,CAAC,IAAI,EACjB,QAAQ,EAAE;YACR,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,IAAI,EAAE,QAAQ,CAAC,IAAI;SACpB,EACD,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,KACrC,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,QAAQ;QACpC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;QAC1J,CAAC,CAAC,EAAE,CAAC,KACP,YAAY,EAAE,MAAA,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,mCAAI,OAAO,EAC5D,cAAc,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,gBAAgB,CAAC,IACnE;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,kBAAkB,CAAC,OAAkC;;IACnE,IAAI,CAAC,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,SAAS,CAAA;QAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACxF,MAAM,SAAS,GAAG,IAAA,cAAO,EAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC7C,MAAM,OAAO,GAAG,MAAA,OAAO,CAAC,GAAG,mCAAI,OAAO,CAAC,GAAG,CAAC;IAC3C,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,IAAI,KAAe,CAAC;IACpB,IAAI,CAAC;QACH,KAAK,GAAG,IAAA,gBAAW,EAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;aACpD,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;aAChE,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;aAC1B,IAAI,EAAE,CAAC;IACZ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,+BAA+B,CAAC;YACxC,kCAAkC,SAAS,MAAM,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;SAC1G,CAAC,CAAC;IACL,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,+BAA+B,CAAC,CAAC,mCAAmC,SAAS,GAAG,CAAC,CAAC,CAAC;IAC/F,CAAC;IAED,MAAM,OAAO,GAAoB,EAAE,CAAC;IACpC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,OAA+B,CAAC;QACpC,IAAI,CAAC;YACH,OAAO,GAAG,yBAAyB,CAAC,IAAA,iBAAY,EAAC,IAAA,WAAI,EAAC,SAAS,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;QACnF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAClF,SAAS;QACX,CAAC;QAED,MAAM,GAAG,mCAA2B,OAAO,GAAK,OAAO,CAAE,CAAC;QAC1D,MAAM,EAAE,GAAG,CAAC,MAAA,GAAG,CAAC,iBAAiB,mCAAI,IAAA,eAAQ,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACpE,IAAI,CAAC,4BAA4B,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;YAC3C,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,wBAAwB,EAAE,kDAAkD,CAAC,CAAC;YACjG,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QACrE,MAAM,IAAI,GAAG,mBAAmB,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;QAC1D,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YAChC,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,gEAAgE,CAAC,CAAC;YACrF,SAAS;QACX,CAAC;QACD,MAAM,SAAS,GAAG,GAAG,CAAC,mBAAmB,CAAC;QAC1C,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACvD,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,KAAK,CAAC,EAAE,CAAC;YAChF,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,sCAAsC,SAAS,KAAK,CAAC,CAAC;YACzE,SAAS;QACX,CAAC;QAED,IAAI,CAAC;YACH,MAAM,cAAc,GAAG,IAAA,mDAA2B,EAAC,GAAG,CAAC,CAAC;YACxD,OAAO,CAAC,IAAI,yEACV,EAAE;gBACF,KAAK,IACF,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,KACzB,OAAO,EAAE,GAAG,CAAC,sBAAsB,KAAK,OAAO,KAC5C,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,0BAA0B,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,GACvF,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,KACzB,IAAI;gBACJ,GAAG,EACH,OAAO,kCAAO,cAAc,KAAE,QAAQ,EAAE,EAAE,OAC1C,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACpF,CAAC;IACH,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,GAAG,EAAyB,CAAC;IAC9C,MAAM,SAAS,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC5C,MAAM,SAAS,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC5C,MAAM,UAAU,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC7C,MAAM,cAAc,GAAG,IAAI,GAAG,EAAkB,CAAC;IACjD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;YACxB,MAAM,CAAC,IAAI,CAAC,qBAAqB,MAAM,CAAC,EAAE,MAAM,MAAM,CAAC,IAAI,MAAM,MAAA,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,0CAAE,IAAI,IAAI,CAAC,CAAC;QAClG,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QAC9B,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YAChC,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACrC,IAAI,QAAQ;gBAAE,MAAM,CAAC,IAAI,CAAC,SAAS,IAAI,kBAAkB,QAAQ,QAAQ,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC;;gBACnF,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QACtC,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;YAChB,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC5C,IAAI,QAAQ;gBAAE,MAAM,CAAC,IAAI,CAAC,SAAS,MAAM,CAAC,IAAI,kBAAkB,QAAQ,QAAQ,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC;;gBAC1F,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QAC7C,CAAC;QAED,gEAAgE;QAChE,MAAM,UAAU,GAAG,MAAA,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,mCAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC;QAC5F,MAAM,cAAc,GAAG,GAAG,MAAA,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,mCAAI,OAAO,IAAI,UAAU,EAAE,CAAC;QACzF,MAAM,WAAW,GAAG,UAAU,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QACnD,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,CAAC,IAAI,CAAC,6BAA6B,WAAW,QAAQ,MAAM,CAAC,EAAE,4BAA4B,CAAC,CAAC;QACrG,CAAC;aAAM,CAAC;YACN,UAAU,CAAC,GAAG,CAAC,cAAc,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QAC5C,CAAC;QAED,MAAM,MAAM,GAAG,MAAA,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,mCAAI,WAAW,CAAC;QAC/D,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC;YAChE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC;YAC9C,CAAC,CAAC,CAAC,MAAA,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,QAAQ,mCAAI,WAAW,CAAC,CAAC;QACxD,MAAM,SAAS,GAAG,GAAG,MAAM,IAAI,QAAQ,EAAE,CAAC;QAC1C,MAAM,cAAc,GAAG,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACrD,IAAI,cAAc,IAAI,OAAO,CAAC,iBAAiB,KAAK,IAAI,EAAE,CAAC;YACzD,QAAQ,CAAC,IAAI,CAAC,oBAAoB,SAAS,oBAAoB,cAAc,QAAQ,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC;QACtG,CAAC;aAAM,CAAC;YACN,cAAc,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC3D,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC;QACjG,IAAI,aAAa,EAAE,CAAC;YAClB,MAAM,CAAC,IAAI,CAAC,WAAW,aAAa,CAAC,EAAE,qEAAqE,CAAC,CAAC;QAChH,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,+BAA+B,CAAC,MAAM,CAAC,CAAC;IAEzE,MAAM,QAAQ,GAA0B;QACtC,SAAS;QACT,OAAO;QACP,QAAQ;QACR,WAAW,EAAE,OAAO,CAAC,WAAW,KAAK,IAAI;QACzC,IAAI;QACJ,OAAO,CAAC,KAAK,EAAE,cAAc;;YAC3B,MAAM,WAAW,GAAG,MAAA,cAAc,aAAd,cAAc,uBAAd,cAAc,CAAE,WAAW,mCAAI,QAAQ,CAAC,WAAW,CAAC;YACxE,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,MAAA,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,mCAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5F,IAAI,IAAI,EAAE,CAAC;gBACT,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;gBACnE,IAAI,MAAM;oBAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;YAC3D,CAAC;YAED,MAAM,WAAW,GAAG,MAAA,KAAK,CAAC,IAAI,mCAAI,GAAG,CAAC;YACtC,MAAM,MAAM,GAAG,OAAO;iBACnB,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;iBACpD,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,uBAAC,OAAA,CAAC,MAAA,MAAA,KAAK,CAAC,IAAI,0CAAE,MAAM,mCAAI,CAAC,CAAC,GAAG,CAAC,MAAA,MAAA,IAAI,CAAC,IAAI,0CAAE,MAAM,mCAAI,CAAC,CAAC,CAAA,EAAA,CAAC,CAAC,CAAC,CAAC,CAAC;YAClF,IAAI,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,GAAG;gBAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;YAEhF,IAAI,WAAW,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;gBAChC,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;gBACnD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;gBAClC,IAAI,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,OAAO;oBAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;YAC9D,CAAC;YAED,IAAI,MAAM;gBAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;YACzD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO;YACL,OAAO,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QACpC,CAAC;KACF,CAAC;IAEF,OAAO,QAAQ,CAAC;AAClB,CAAC","sourcesContent":["import { readdirSync, readFileSync } from 'fs';\nimport { basename, join, resolve } from 'path';\nimport type { AccessiOptions } from '../../accessi-module/AccessiModule';\nimport { createAccessiOptionsFromEnv } from '../../accessi-module/database-updates/accessiOptionsFromEnv';\n\n/** Variabili usate dal manifest del tenant (oltre alle normali `ACCESSI_*`). */\nexport interface AccessiTenantEnv extends NodeJS.ProcessEnv {\n  ACCESSI_TENANT_ID?: string;\n  /** Host separati da virgola; supporta `*.example.com`. */\n  ACCESSI_TENANT_HOSTS?: string;\n  /** Prefisso path, es. `/tenant-a`. */\n  ACCESSI_TENANT_PATH?: string;\n  ACCESSI_TENANT_ENABLED?: string;\n  /** Porta del servizio quando si usa `startAccessiTenants`. */\n  ACCESSI_TENANT_PORT?: string;\n  ACCESSI_TENANT_DESCRIPTION?: string;\n}\n\nexport interface AccessiTenant {\n  id: string;\n  hosts: string[];\n  path?: string;\n  enabled: boolean;\n  description?: string;\n  port?: number;\n  /** Nome del file `.env` di origine (mai il contenuto). */\n  file: string;\n  /** Variabili risolte del tenant (base + file); non serializzarle nei log. */\n  env: NodeJS.ProcessEnv;\n  options: AccessiOptions;\n}\n\nexport interface AccessiTenantSummary {\n  id: string;\n  hosts: string[];\n  path?: string;\n  enabled: boolean;\n  description?: string;\n  port?: number;\n  file: string;\n  database: {\n    host?: string;\n    port?: number;\n    database?: string;\n    user?: string;\n  };\n  issuer?: string;\n  audience?: string;\n  jwtAlgorithm: string;\n  refreshEnabled: boolean;\n}\n\nexport interface AccessiTenantResolution {\n  tenant: AccessiTenant;\n  matchedBy: 'host' | 'path' | 'header';\n}\n\nexport interface AccessiTenantRegistry {\n  directory: string;\n  tenants: AccessiTenant[];\n  warnings: string[];\n  allowHeader: boolean;\n  byId: ReadonlyMap<string, AccessiTenant>;\n  resolve(input: { host?: string; path?: string; header?: string }, options?: { allowHeader?: boolean }): AccessiTenantResolution | undefined;\n  summary(): AccessiTenantSummary[];\n}\n\nexport interface LoadAccessiTenantsOptions {\n  /** Cartella con `<tenant>.env`. */\n  directory: string;\n  /** Variabili base (default `process.env`); il file tenant vince. */\n  env?: NodeJS.ProcessEnv;\n  /** Abilita la risoluzione via header `x-accessi-tenant`. Default: false. */\n  allowHeader?: boolean;\n  /** Consente issuer/audience uguali tra tenant (sconsigliato). Default: false. */\n  allowSharedIssuer?: boolean;\n}\n\n/** Errore aggregato di configurazione tenant. */\nexport class AccessiTenantConfigurationError extends Error {\n  readonly issues: string[];\n\n  constructor(issues: string[]) {\n    super(`Configurazione tenant non valida:\\n${issues.map((issue) => `- ${issue}`).join('\\n')}`);\n    this.name = 'AccessiTenantConfigurationError';\n    this.issues = issues;\n  }\n}\n\n/**\n * Parser minimale di un file `.env`.\n *\n * Supporta commenti, `export KEY=...`, valori tra apici singoli o doppi e le\n * sequenze `\\n`, `\\r`, `\\t`, `\\\"` e `\\\\` nei valori tra doppi apici. Non\n * interpreta variabili annidate: la configurazione tenant deve restare esplicita.\n */\nexport function parseAccessiTenantEnvFile(content: string): Record<string, string> {\n  const env: Record<string, string> = {};\n  for (const rawLine of content.split(/\\r?\\n/)) {\n    const line = rawLine.trim();\n    if (line === '' || line.startsWith('#')) continue;\n    const match = /^(?:export\\s+)?([A-Za-z_][A-Za-z0-9_]*)\\s*=\\s*(.*)$/.exec(line);\n    if (!match) throw new Error(`Riga .env non valida: \"${rawLine}\"`);\n    const key = match[1] ?? '';\n    let value = match[2] ?? '';\n    if (value.startsWith('\"')) {\n      if (!value.endsWith('\"') || value.length < 2) throw new Error(`${key}: virgolette non chiuse.`);\n      value = value.slice(1, -1)\n        .replace(/\\\\n/g, '\\n')\n        .replace(/\\\\r/g, '\\r')\n        .replace(/\\\\t/g, '\\t')\n        .replace(/\\\\\"/g, '\"')\n        .replace(/\\\\\\\\/g, '\\\\');\n    } else if (value.startsWith(\"'\")) {\n      if (!value.endsWith(\"'\") || value.length < 2) throw new Error(`${key}: virgolette non chiuse.`);\n      value = value.slice(1, -1);\n    } else {\n      const comment = value.indexOf(' #');\n      if (comment >= 0) value = value.slice(0, comment);\n      value = value.trim();\n    }\n    env[key] = value;\n  }\n  return env;\n}\n\nfunction splitList(value: string | undefined): string[] {\n  return (value ?? '')\n    .split(',')\n    .map((entry) => entry.trim().toLowerCase())\n    .filter(Boolean);\n}\n\nfunction normalizeHost(host: string): string {\n  return host.trim().toLowerCase().replace(/\\.$/, '');\n}\n\nfunction normalizeTenantPath(path: string | undefined): string | undefined {\n  if (path === undefined || path.trim() === '') return undefined;\n  const normalized = `/${path.trim().replace(/^\\/+|\\/+$/g, '')}`;\n  return normalized === '/' ? '/' : normalized;\n}\n\nfunction matchesHost(tenant: AccessiTenant, host: string): boolean {\n  return tenant.hosts.some((candidate) => {\n    if (candidate === host) return true;\n    if (candidate.startsWith('*.')) {\n      const suffix = candidate.slice(1);\n      return host.endsWith(suffix) && host.length > suffix.length;\n    }\n    return false;\n  });\n}\n\nfunction matchesPath(tenant: AccessiTenant, path: string): boolean {\n  if (!tenant.path) return false;\n  if (tenant.path === '/') return true;\n  return path === tenant.path || path.startsWith(`${tenant.path}/`);\n}\n\n/** Prefisso Redis consigliato per isolare gli store del tenant. */\nexport function getAccessiTenantRedisPrefix(tenantId: string): string {\n  return `accessi:${tenantId}:`;\n}\n\nfunction tenantSummary(tenant: AccessiTenant): AccessiTenantSummary {\n  const database = tenant.options.databaseOptions as {\n    host?: string;\n    port?: number;\n    database?: string;\n    user?: string;\n  };\n  return {\n    id: tenant.id,\n    hosts: [...tenant.hosts],\n    ...(tenant.path ? { path: tenant.path } : {}),\n    enabled: tenant.enabled,\n    ...(tenant.description ? { description: tenant.description } : {}),\n    ...(tenant.port ? { port: tenant.port } : {}),\n    file: tenant.file,\n    database: {\n      host: database.host,\n      port: database.port,\n      database: database.database,\n      user: database.user,\n    },\n    issuer: tenant.options.jwtOptions.issuer,\n    ...(tenant.options.jwtOptions.audience\n      ? { audience: typeof tenant.options.jwtOptions.audience === 'string' ? tenant.options.jwtOptions.audience : tenant.options.jwtOptions.audience.join(',') }\n      : {}),\n    jwtAlgorithm: tenant.options.jwtOptions.algorithm ?? 'HS256',\n    refreshEnabled: Boolean(tenant.options.jwtOptions.refreshExpiresIn),\n  };\n}\n\n/**\n * Carica i tenant da una cartella di file `<id>.env`.\n *\n * Non modifica `process.env`: ogni tenant riceve una copia isolata delle\n * variabili. Un errore in un file blocca l'intero caricamento, cosi non si\n * avvia un tenant con configurazione parziale.\n */\nexport function loadAccessiTenants(options: LoadAccessiTenantsOptions): AccessiTenantRegistry {\n  if (!options?.directory) throw new Error('loadAccessiTenants: directory obbligatoria.');\n  const directory = resolve(options.directory);\n  const baseEnv = options.env ?? process.env;\n  const issues: string[] = [];\n  const warnings: string[] = [];\n\n  let files: string[];\n  try {\n    files = readdirSync(directory, { withFileTypes: true })\n      .filter((entry) => entry.isFile() && entry.name.endsWith('.env'))\n      .map((entry) => entry.name)\n      .sort();\n  } catch (error) {\n    throw new AccessiTenantConfigurationError([\n      `Cartella tenant non leggibile (${directory}): ${error instanceof Error ? error.message : String(error)}`,\n    ]);\n  }\n  if (files.length === 0) {\n    throw new AccessiTenantConfigurationError([`Nessun file .env nella cartella ${directory}.`]);\n  }\n\n  const tenants: AccessiTenant[] = [];\n  for (const file of files) {\n    let fileEnv: Record<string, string>;\n    try {\n      fileEnv = parseAccessiTenantEnvFile(readFileSync(join(directory, file), 'utf8'));\n    } catch (error) {\n      issues.push(`${file}: ${error instanceof Error ? error.message : String(error)}`);\n      continue;\n    }\n\n    const env: NodeJS.ProcessEnv = { ...baseEnv, ...fileEnv };\n    const id = (env.ACCESSI_TENANT_ID ?? basename(file, '.env')).trim();\n    if (!/^[a-z0-9][a-z0-9_-]{0,62}$/.test(id)) {\n      issues.push(`${file}: ACCESSI_TENANT_ID \"${id}\" non valido (minuscole, numeri, - e _, max 63).`);\n      continue;\n    }\n    const hosts = splitList(env.ACCESSI_TENANT_HOSTS).map(normalizeHost);\n    const path = normalizeTenantPath(env.ACCESSI_TENANT_PATH);\n    if (hosts.length === 0 && !path) {\n      issues.push(`${file}: configurare ACCESSI_TENANT_HOSTS oppure ACCESSI_TENANT_PATH.`);\n      continue;\n    }\n    const portValue = env.ACCESSI_TENANT_PORT;\n    const port = portValue ? Number(portValue) : undefined;\n    if (port !== undefined && (!Number.isInteger(port) || port < 1 || port > 65535)) {\n      issues.push(`${file}: ACCESSI_TENANT_PORT non valida (\"${portValue}\").`);\n      continue;\n    }\n\n    try {\n      const accessiOptions = createAccessiOptionsFromEnv(env);\n      tenants.push({\n        id,\n        hosts,\n        ...(path ? { path } : {}),\n        enabled: env.ACCESSI_TENANT_ENABLED !== 'false',\n        ...(env.ACCESSI_TENANT_DESCRIPTION ? { description: env.ACCESSI_TENANT_DESCRIPTION } : {}),\n        ...(port ? { port } : {}),\n        file,\n        env,\n        options: { ...accessiOptions, tenantId: id },\n      });\n    } catch (error) {\n      issues.push(`${file}: ${error instanceof Error ? error.message : String(error)}`);\n    }\n  }\n\n  const byId = new Map<string, AccessiTenant>();\n  const hostsSeen = new Map<string, string>();\n  const pathsSeen = new Map<string, string>();\n  const jwtSecrets = new Map<string, string>();\n  const issuerAudience = new Map<string, string>();\n  for (const tenant of tenants) {\n    if (byId.has(tenant.id)) {\n      issues.push(`Tenant duplicato \"${tenant.id}\" (${tenant.file} e ${byId.get(tenant.id)?.file}).`);\n    } else {\n      byId.set(tenant.id, tenant);\n    }\n    for (const host of tenant.hosts) {\n      const existing = hostsSeen.get(host);\n      if (existing) issues.push(`Host \"${host}\" assegnato a \"${existing}\" e \"${tenant.id}\".`);\n      else hostsSeen.set(host, tenant.id);\n    }\n    if (tenant.path) {\n      const existing = pathsSeen.get(tenant.path);\n      if (existing) issues.push(`Path \"${tenant.path}\" assegnato a \"${existing}\" e \"${tenant.id}\".`);\n      else pathsSeen.set(tenant.path, tenant.id);\n    }\n\n    // Un segreto JWT condiviso rende un token valido su piu tenant.\n    const signingKey = tenant.options.jwtOptions.privateKey ?? tenant.options.jwtOptions.secret;\n    const fingerprintKey = `${tenant.options.jwtOptions.algorithm ?? 'HS256'}|${signingKey}`;\n    const existingKey = jwtSecrets.get(fingerprintKey);\n    if (existingKey) {\n      issues.push(`Chiave JWT condivisa tra \"${existingKey}\" e \"${tenant.id}\": usare segreti distinti.`);\n    } else {\n      jwtSecrets.set(fingerprintKey, tenant.id);\n    }\n\n    const issuer = tenant.options.jwtOptions.issuer ?? '(assente)';\n    const audience = Array.isArray(tenant.options.jwtOptions.audience)\n      ? tenant.options.jwtOptions.audience.join(',')\n      : (tenant.options.jwtOptions.audience ?? '(assente)');\n    const issuerKey = `${issuer}|${audience}`;\n    const existingIssuer = issuerAudience.get(issuerKey);\n    if (existingIssuer && options.allowSharedIssuer !== true) {\n      warnings.push(`Issuer/audience \"${issuerKey}\" condivisi tra \"${existingIssuer}\" e \"${tenant.id}\".`);\n    } else {\n      issuerAudience.set(issuerKey, tenant.id);\n    }\n  }\n\n  const enabled = tenants.filter((tenant) => tenant.enabled);\n  if (enabled.length > 1) {\n    const defaultTenant = enabled.find((tenant) => tenant.hosts.length === 0 && tenant.path === '/');\n    if (defaultTenant) {\n      issues.push(`Tenant \"${defaultTenant.id}\" intercetta tutte le richieste (path \"/\") insieme ad altri tenant.`);\n    }\n  }\n\n  if (issues.length > 0) throw new AccessiTenantConfigurationError(issues);\n\n  const registry: AccessiTenantRegistry = {\n    directory,\n    tenants,\n    warnings,\n    allowHeader: options.allowHeader === true,\n    byId,\n    resolve(input, resolveOptions) {\n      const allowHeader = resolveOptions?.allowHeader ?? registry.allowHeader;\n      const host = input.host ? normalizeHost(input.host.split(':')[0] ?? input.host) : undefined;\n      if (host) {\n        const byHost = enabled.find((tenant) => matchesHost(tenant, host));\n        if (byHost) return { tenant: byHost, matchedBy: 'host' };\n      }\n\n      const requestPath = input.path ?? '/';\n      const byPath = enabled\n        .filter((tenant) => matchesPath(tenant, requestPath))\n        .sort((left, right) => (right.path?.length ?? 0) - (left.path?.length ?? 0))[0];\n      if (byPath && byPath.path !== '/') return { tenant: byPath, matchedBy: 'path' };\n\n      if (allowHeader && input.header) {\n        const headerId = input.header.trim().toLowerCase();\n        const tenant = byId.get(headerId);\n        if (tenant?.enabled) return { tenant, matchedBy: 'header' };\n      }\n\n      if (byPath) return { tenant: byPath, matchedBy: 'path' };\n      return undefined;\n    },\n    summary() {\n      return tenants.map(tenantSummary);\n    },\n  };\n\n  return registry;\n}\n\n"]}