emilsoftware-utilities 2.0.0-dev.8 → 2.0.0-dev.81

package/dist/accessi-module/Console/accessiFetch.js

@@ -0,0 +1,178 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AccessiRequestError = exports.ACCESSI_UNAUTHORIZED_EVENT = void 0;
+exports.setAccessiConsoleToken = setAccessiConsoleToken;
+exports.setAccessiFetchBaseUrl = setAccessiFetchBaseUrl;
+exports.setAccessiFetchTokenProvider = setAccessiFetchTokenProvider;
+exports.getAccessiClientConfig = getAccessiClientConfig;
+exports.runWithAccessiClient = runWithAccessiClient;
+exports.accessiFetch = accessiFetch;
+let accessToken = null;
+let baseUrl = null;
+let tokenProvider = null;
+let scopedConfig = null;
+const loadingEventName = 'accessi-console-network';
+/** Emesso quando una richiesta autenticata riceve 401: la console deve riportare al login. */
+exports.ACCESSI_UNAUTHORIZED_EVENT = 'accessi-console-unauthorized';
+/** Errore del client console: conserva status, codice stabile Accessi e dettagli di validazione. */
+class AccessiRequestError extends Error {
+    constructor(message, status, code, details) {
+        super(message);
+        this.status = status;
+        this.code = code;
+        this.details = details;
+        this.name = 'AccessiRequestError';
+    }
+}
+exports.AccessiRequestError = AccessiRequestError;
+/** Notifies the browser shell without coupling generated Orval calls to the UI implementation. */
+function notifyNetworkActivity(active) {
+    if (typeof window !== 'undefined') {
+        window.dispatchEvent(new CustomEvent(loadingEventName, { detail: { active } }));
+    }
+}
+/** Imposta il JWT usato da tutte le funzioni generate da Orval. */
+function setAccessiConsoleToken(token) {
+    accessToken = token;
+}
+/** Prefissa le chiamate relative del client generato (es. `https://accessi.example.com`). */
+function setAccessiFetchBaseUrl(url) {
+    baseUrl = url ? url.replace(/\/+$/, '') : null;
+}
+/** Token provider per client esterni alla console (server-to-server o frontend). */
+function setAccessiFetchTokenProvider(provider) {
+    tokenProvider = provider;
+}
+/** Configurazione isolata attiva in questo momento, se una chiamata e in corso. */
+function getAccessiClientConfig() {
+    return scopedConfig;
+}
+/**
+ * Esegue `callback` con una configurazione del client isolata.
+ *
+ * Le funzioni generate da Orval invocano il trasporto in modo sincrono, quindi
+ * la configurazione viene letta all'inizio della richiesta: due client diversi
+ * possono chiamare in concorrenza senza sovrascriversi a vicenda.
+ *
+ * Per un uso continuativo preferire `createAccessiClient`, che applica il
+ * contesto a ogni metodo.
+ */
+function runWithAccessiClient(config, callback) {
+    const previous = scopedConfig;
+    scopedConfig = config;
+    try {
+        return callback();
+    }
+    finally {
+        scopedConfig = previous;
+    }
+}
+/** Legge una stringa non vuota dal payload di errore Accessi, ignorando tipi inattesi. */
+function payloadString(payload, key) {
+    if (!payload || typeof payload !== 'object')
+        return undefined;
+    const value = payload[key];
+    return typeof value === 'string' && value.length > 0 ? value : undefined;
+}
+/** Legge un cookie non httpOnly (token CSRF double-submit). */
+function readBrowserCookie(name) {
+    if (typeof document === 'undefined' || !document.cookie)
+        return null;
+    for (const part of document.cookie.split(';')) {
+        const separator = part.indexOf('=');
+        if (separator < 0)
+            continue;
+        if (part.slice(0, separator).trim() !== name)
+            continue;
+        try {
+            return decodeURIComponent(part.slice(separator + 1).trim());
+        }
+        catch (_a) {
+            return part.slice(separator + 1).trim();
+        }
+    }
+    return null;
+}
+function isCookieAuthMode() {
+    return typeof window !== 'undefined' && window.__ACCESSI_AUTH_COOKIE__ === true;
+}
+const UNSAFE_METHODS = new Set(['POST', 'PUT', 'PATCH', 'DELETE']);
+/**
+ * Trasporto comune del client Orval: aggiunge il Bearer token e converte le
+ * risposte di errore Accessi in Error JavaScript leggibili dalla console.
+ *
+ * In modalita cookie non richiede un token in memoria: invia i cookie
+ * same-origin/cross-origin e l'header CSRF double-submit.
+ */
+function accessiFetch(url, options) {
+    return __awaiter(this, void 0, void 0, function* () {
+        var _a, _b, _c, _d, _e, _f, _g, _h;
+        // Il contesto va letto prima di ogni await: la funzione generata invoca il
+        // trasporto in modo sincrono, quindi la configurazione appartiene a questa call.
+        const config = scopedConfig;
+        const cookieMode = isCookieAuthMode();
+        const headers = new Headers(options.headers);
+        headers.set('Accept', 'application/json');
+        if (options.body !== undefined && !headers.has('Content-Type')) {
+            headers.set('Content-Type', 'application/json');
+        }
+        if (cookieMode) {
+            const method = ((_a = options.method) !== null && _a !== void 0 ? _a : 'GET').toUpperCase();
+            if (UNSAFE_METHODS.has(method)) {
+                const csrfCookie = (_b = window.__ACCESSI_CSRF_COOKIE_NAME__) !== null && _b !== void 0 ? _b : 'accessi_csrf';
+                const csrfHeader = (_c = window.__ACCESSI_CSRF_HEADER_NAME__) !== null && _c !== void 0 ? _c : 'x-csrf-token';
+                const csrfToken = readBrowserCookie(csrfCookie);
+                if (csrfToken)
+                    headers.set(csrfHeader, csrfToken);
+            }
+        }
+        const resolvedToken = config
+            ? (config.getToken ? yield config.getToken() : (_d = config.token) !== null && _d !== void 0 ? _d : null)
+            : tokenProvider
+                ? yield tokenProvider()
+                : accessToken;
+        const isAuthEntryRequest = /\/(?:auth\/(?:login|refresh|two-factor\/(?:verify|resend))|console\/entry\/exchange)\b/.test(url);
+        const authenticatedRequest = !isAuthEntryRequest && (cookieMode || (resolvedToken !== null && resolvedToken !== undefined));
+        if (resolvedToken)
+            headers.set('Authorization', `Bearer ${resolvedToken}`);
+        const runtimeBaseUrl = (config === null || config === void 0 ? void 0 : config.baseUrl) !== undefined
+            ? config.baseUrl
+            : baseUrl !== null && baseUrl !== void 0 ? baseUrl : (typeof window !== 'undefined' ? (_e = window.__ACCESSI_API_BASE_URL__) !== null && _e !== void 0 ? _e : null : null);
+        const requestUrl = runtimeBaseUrl && url.startsWith('/')
+            ? `${runtimeBaseUrl.replace(/\/+$/, '')}${url}`
+            : url;
+        notifyNetworkActivity(true);
+        try {
+            const response = yield fetch(requestUrl, Object.assign(Object.assign(Object.assign({}, options), { headers }), (cookieMode ? { credentials: 'include' } : {})));
+            const payload = yield response.json().catch(() => undefined);
+            if (!response.ok) {
+                const message = (_g = (_f = payloadString(payload, 'message')) !== null && _f !== void 0 ? _f : payloadString(payload, 'error')) !== null && _g !== void 0 ? _g : `Errore HTTP ${response.status}`;
+                const rawDetails = payload && typeof payload === 'object' ? payload.details : undefined;
+                const details = Array.isArray(rawDetails) ? rawDetails.map((item) => String(item)) : undefined;
+                // Un 401 su una richiesta autenticata significa sessione scaduta/revocata: il token non e piu valido.
+                if (response.status === 401 && authenticatedRequest && typeof window !== 'undefined') {
+                    window.dispatchEvent(new CustomEvent(exports.ACCESSI_UNAUTHORIZED_EVENT));
+                }
+                throw new AccessiRequestError(message, response.status, (_h = payloadString(payload, 'code')) !== null && _h !== void 0 ? _h : payloadString(payload, 'error'), details);
+            }
+            return {
+                data: payload,
+                status: response.status,
+                headers: response.headers,
+            };
+        }
+        finally {
+            notifyNetworkActivity(false);
+        }
+    });
+}
+//# sourceMappingURL=accessiFetch.js.map

package/dist/accessi-module/Console/accessiFetch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"accessiFetch.js","sourceRoot":"","sources":["../../../src/accessi-module/Console/accessiFetch.ts"],"names":[],"mappings":";;;;;;;;;;;;AAkDA,wDAEC;AAGD,wDAEC;AAGD,oEAIC;AAGD,wDAEC;AAYD,oDAQC;AAsCD,oCA4DC;AA3LD,IAAI,WAAW,GAAkB,IAAI,CAAC;AACtC,IAAI,OAAO,GAAkB,IAAI,CAAC;AAClC,IAAI,aAAa,GAA0D,IAAI,CAAC;AAChF,IAAI,YAAY,GAA+B,IAAI,CAAC;AA2BpD,MAAM,gBAAgB,GAAG,yBAAyB,CAAC;AACnD,8FAA8F;AACjF,QAAA,0BAA0B,GAAG,8BAA8B,CAAC;AAEzE,oGAAoG;AACpG,MAAa,mBAAoB,SAAQ,KAAK;IAC5C,YAAY,OAAe,EAAW,MAAc,EAAW,IAAa,EAAW,OAAkB;QACvG,KAAK,CAAC,OAAO,CAAC,CAAC;QADqB,WAAM,GAAN,MAAM,CAAQ;QAAW,SAAI,GAAJ,IAAI,CAAS;QAAW,YAAO,GAAP,OAAO,CAAW;QAEvG,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AALD,kDAKC;AAED,kGAAkG;AAClG,SAAS,qBAAqB,CAAC,MAAe;IAC5C,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;QAClC,MAAM,CAAC,aAAa,CAAC,IAAI,WAAW,CAAC,gBAAgB,EAAE,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;IAClF,CAAC;AACH,CAAC;AAED,mEAAmE;AACnE,SAAgB,sBAAsB,CAAC,KAAoB;IACzD,WAAW,GAAG,KAAK,CAAC;AACtB,CAAC;AAED,6FAA6F;AAC7F,SAAgB,sBAAsB,CAAC,GAAkB;IACvD,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACjD,CAAC;AAED,oFAAoF;AACpF,SAAgB,4BAA4B,CAC1C,QAA+D;IAE/D,aAAa,GAAG,QAAQ,CAAC;AAC3B,CAAC;AAED,mFAAmF;AACnF,SAAgB,sBAAsB;IACpC,OAAO,YAAY,CAAC;AACtB,CAAC;AAED;;;;;;;;;GASG;AACH,SAAgB,oBAAoB,CAAI,MAA2B,EAAE,QAAiB;IACpF,MAAM,QAAQ,GAAG,YAAY,CAAC;IAC9B,YAAY,GAAG,MAAM,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,QAAQ,EAAE,CAAC;IACpB,CAAC;YAAS,CAAC;QACT,YAAY,GAAG,QAAQ,CAAC;IAC1B,CAAC;AACH,CAAC;AAED,0FAA0F;AAC1F,SAAS,aAAa,CAAC,OAAgB,EAAE,GAAW;IAClD,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC9D,MAAM,KAAK,GAAI,OAAmC,CAAC,GAAG,CAAC,CAAC;IACxD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3E,CAAC;AAED,+DAA+D;AAC/D,SAAS,iBAAiB,CAAC,IAAY;IACrC,IAAI,OAAO,QAAQ,KAAK,WAAW,IAAI,CAAC,QAAQ,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACrE,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9C,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,SAAS,GAAG,CAAC;YAAE,SAAS;QAC5B,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,IAAI,EAAE,KAAK,IAAI;YAAE,SAAS;QACvD,IAAI,CAAC;YACH,OAAO,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC9D,CAAC;QAAC,WAAM,CAAC;YACP,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC1C,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,gBAAgB;IACvB,OAAO,OAAO,MAAM,KAAK,WAAW,IAAI,MAAM,CAAC,uBAAuB,KAAK,IAAI,CAAC;AAClF,CAAC;AAED,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;AAEnE;;;;;;GAMG;AACH,SAAsB,YAAY,CAAI,GAAW,EAAE,OAAoB;;;QACrE,2EAA2E;QAC3E,iFAAiF;QACjF,MAAM,MAAM,GAAG,YAAY,CAAC;QAC5B,MAAM,UAAU,GAAG,gBAAgB,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC7C,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC;QAC1C,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;YAC/D,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;QAClD,CAAC;QACD,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,MAAM,GAAG,CAAC,MAAA,OAAO,CAAC,MAAM,mCAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;YACvD,IAAI,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC/B,MAAM,UAAU,GAAG,MAAA,MAAM,CAAC,4BAA4B,mCAAI,cAAc,CAAC;gBACzE,MAAM,UAAU,GAAG,MAAA,MAAM,CAAC,4BAA4B,mCAAI,cAAc,CAAC;gBACzE,MAAM,SAAS,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;gBAChD,IAAI,SAAS;oBAAE,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;YACpD,CAAC;QACH,CAAC;QACD,MAAM,aAAa,GAAG,MAAM;YAC1B,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,MAAA,MAAM,CAAC,KAAK,mCAAI,IAAI,CAAC;YACpE,CAAC,CAAC,aAAa;gBACb,CAAC,CAAC,MAAM,aAAa,EAAE;gBACvB,CAAC,CAAC,WAAW,CAAC;QAClB,MAAM,kBAAkB,GAAG,wFAAwF,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9H,MAAM,oBAAoB,GAAG,CAAC,kBAAkB,IAAI,CAAC,UAAU,IAAI,CAAC,aAAa,KAAK,IAAI,IAAI,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC;QAC5H,IAAI,aAAa;YAAE,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,aAAa,EAAE,CAAC,CAAC;QAC3E,MAAM,cAAc,GAAG,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,OAAO,MAAK,SAAS;YAClD,CAAC,CAAC,MAAM,CAAC,OAAO;YAChB,CAAC,CAAC,OAAO,aAAP,OAAO,cAAP,OAAO,GAAI,CAAC,OAAO,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,MAAA,MAAM,CAAC,wBAAwB,mCAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAChG,MAAM,UAAU,GAAG,cAAc,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC;YACtD,CAAC,CAAC,GAAG,cAAc,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,GAAG,EAAE;YAC/C,CAAC,CAAC,GAAG,CAAC;QAER,qBAAqB,CAAC,IAAI,CAAC,CAAC;QAC5B,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,UAAU,gDAClC,OAAO,KACV,OAAO,KACJ,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,SAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAC1D,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC7D,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,OAAO,GAAG,MAAA,MAAA,aAAa,CAAC,OAAO,EAAE,SAAS,CAAC,mCAAI,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,mCAAI,eAAe,QAAQ,CAAC,MAAM,EAAE,CAAC;gBACzH,MAAM,UAAU,GAAG,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAE,OAAiC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;gBACnH,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;gBAC/F,sGAAsG;gBACtG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,oBAAoB,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;oBACrF,MAAM,CAAC,aAAa,CAAC,IAAI,WAAW,CAAC,kCAA0B,CAAC,CAAC,CAAC;gBACpE,CAAC;gBACD,MAAM,IAAI,mBAAmB,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,EAAE,MAAA,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,mCAAI,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC;YACtI,CAAC;YACD,OAAO;gBACL,IAAI,EAAE,OAAO;gBACb,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,OAAO,EAAE,QAAQ,CAAC,OAAO;aACrB,CAAC;QACT,CAAC;gBAAS,CAAC;YACT,qBAAqB,CAAC,KAAK,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;CAAA","sourcesContent":["let accessToken: string | null = null;\nlet baseUrl: string | null = null;\nlet tokenProvider: (() => string | null | Promise<string | null>) | null = null;\nlet scopedConfig: AccessiClientConfig | null = null;\n\n/**\n * Configurazione di un client Accessi.\n *\n * Usata sia dalla configurazione globale (`configureAccessiClient`) sia dalle\n * istanze isolate create con `createAccessiClient`.\n */\nexport interface AccessiClientConfig {\n  /** Base URL di Accessi Service, es. `https://accessi.example.com`. */\n  baseUrl?: string | null;\n  /** Token statico. Preferire `getToken` per token che cambiano nel tempo. */\n  token?: string | null;\n  /** Provider asincrono/sincrono del token corrente. */\n  getToken?: () => string | null | Promise<string | null>;\n}\n\ndeclare global {\n  interface Window {\n    __ACCESSI_API_BASE_URL__?: string;\n    /** La console e servita in modalita cookie httpOnly. */\n    __ACCESSI_AUTH_COOKIE__?: boolean;\n    __ACCESSI_CSRF_COOKIE_NAME__?: string;\n    __ACCESSI_CSRF_HEADER_NAME__?: string;\n  }\n}\n\nconst loadingEventName = 'accessi-console-network';\n/** Emesso quando una richiesta autenticata riceve 401: la console deve riportare al login. */\nexport const ACCESSI_UNAUTHORIZED_EVENT = 'accessi-console-unauthorized';\n\n/** Errore del client console: conserva status, codice stabile Accessi e dettagli di validazione. */\nexport class AccessiRequestError extends Error {\n  constructor(message: string, readonly status: number, readonly code?: string, readonly details?: string[]) {\n    super(message);\n    this.name = 'AccessiRequestError';\n  }\n}\n\n/** Notifies the browser shell without coupling generated Orval calls to the UI implementation. */\nfunction notifyNetworkActivity(active: boolean): void {\n  if (typeof window !== 'undefined') {\n    window.dispatchEvent(new CustomEvent(loadingEventName, { detail: { active } }));\n  }\n}\n\n/** Imposta il JWT usato da tutte le funzioni generate da Orval. */\nexport function setAccessiConsoleToken(token: string | null): void {\n  accessToken = token;\n}\n\n/** Prefissa le chiamate relative del client generato (es. `https://accessi.example.com`). */\nexport function setAccessiFetchBaseUrl(url: string | null): void {\n  baseUrl = url ? url.replace(/\\/+$/, '') : null;\n}\n\n/** Token provider per client esterni alla console (server-to-server o frontend). */\nexport function setAccessiFetchTokenProvider(\n  provider: (() => string | null | Promise<string | null>) | null,\n): void {\n  tokenProvider = provider;\n}\n\n/** Configurazione isolata attiva in questo momento, se una chiamata e in corso. */\nexport function getAccessiClientConfig(): AccessiClientConfig | null {\n  return scopedConfig;\n}\n\n/**\n * Esegue `callback` con una configurazione del client isolata.\n *\n * Le funzioni generate da Orval invocano il trasporto in modo sincrono, quindi\n * la configurazione viene letta all'inizio della richiesta: due client diversi\n * possono chiamare in concorrenza senza sovrascriversi a vicenda.\n *\n * Per un uso continuativo preferire `createAccessiClient`, che applica il\n * contesto a ogni metodo.\n */\nexport function runWithAccessiClient<T>(config: AccessiClientConfig, callback: () => T): T {\n  const previous = scopedConfig;\n  scopedConfig = config;\n  try {\n    return callback();\n  } finally {\n    scopedConfig = previous;\n  }\n}\n\n/** Legge una stringa non vuota dal payload di errore Accessi, ignorando tipi inattesi. */\nfunction payloadString(payload: unknown, key: string): string | undefined {\n  if (!payload || typeof payload !== 'object') return undefined;\n  const value = (payload as Record<string, unknown>)[key];\n  return typeof value === 'string' && value.length > 0 ? value : undefined;\n}\n\n/** Legge un cookie non httpOnly (token CSRF double-submit). */\nfunction readBrowserCookie(name: string): string | null {\n  if (typeof document === 'undefined' || !document.cookie) return null;\n  for (const part of document.cookie.split(';')) {\n    const separator = part.indexOf('=');\n    if (separator < 0) continue;\n    if (part.slice(0, separator).trim() !== name) continue;\n    try {\n      return decodeURIComponent(part.slice(separator + 1).trim());\n    } catch {\n      return part.slice(separator + 1).trim();\n    }\n  }\n  return null;\n}\n\nfunction isCookieAuthMode(): boolean {\n  return typeof window !== 'undefined' && window.__ACCESSI_AUTH_COOKIE__ === true;\n}\n\nconst UNSAFE_METHODS = new Set(['POST', 'PUT', 'PATCH', 'DELETE']);\n\n/**\n * Trasporto comune del client Orval: aggiunge il Bearer token e converte le\n * risposte di errore Accessi in Error JavaScript leggibili dalla console.\n *\n * In modalita cookie non richiede un token in memoria: invia i cookie\n * same-origin/cross-origin e l'header CSRF double-submit.\n */\nexport async function accessiFetch<T>(url: string, options: RequestInit): Promise<T> {\n  // Il contesto va letto prima di ogni await: la funzione generata invoca il\n  // trasporto in modo sincrono, quindi la configurazione appartiene a questa call.\n  const config = scopedConfig;\n  const cookieMode = isCookieAuthMode();\n  const headers = new Headers(options.headers);\n  headers.set('Accept', 'application/json');\n  if (options.body !== undefined && !headers.has('Content-Type')) {\n    headers.set('Content-Type', 'application/json');\n  }\n  if (cookieMode) {\n    const method = (options.method ?? 'GET').toUpperCase();\n    if (UNSAFE_METHODS.has(method)) {\n      const csrfCookie = window.__ACCESSI_CSRF_COOKIE_NAME__ ?? 'accessi_csrf';\n      const csrfHeader = window.__ACCESSI_CSRF_HEADER_NAME__ ?? 'x-csrf-token';\n      const csrfToken = readBrowserCookie(csrfCookie);\n      if (csrfToken) headers.set(csrfHeader, csrfToken);\n    }\n  }\n  const resolvedToken = config\n    ? (config.getToken ? await config.getToken() : config.token ?? null)\n    : tokenProvider\n      ? await tokenProvider()\n      : accessToken;\n  const isAuthEntryRequest = /\\/(?:auth\\/(?:login|refresh|two-factor\\/(?:verify|resend))|console\\/entry\\/exchange)\\b/.test(url);\n  const authenticatedRequest = !isAuthEntryRequest && (cookieMode || (resolvedToken !== null && resolvedToken !== undefined));\n  if (resolvedToken) headers.set('Authorization', `Bearer ${resolvedToken}`);\n  const runtimeBaseUrl = config?.baseUrl !== undefined\n    ? config.baseUrl\n    : baseUrl ?? (typeof window !== 'undefined' ? window.__ACCESSI_API_BASE_URL__ ?? null : null);\n  const requestUrl = runtimeBaseUrl && url.startsWith('/')\n    ? `${runtimeBaseUrl.replace(/\\/+$/, '')}${url}`\n    : url;\n\n  notifyNetworkActivity(true);\n  try {\n    const response = await fetch(requestUrl, {\n      ...options,\n      headers,\n      ...(cookieMode ? { credentials: 'include' as const } : {}),\n    });\n    const payload = await response.json().catch(() => undefined);\n    if (!response.ok) {\n      const message = payloadString(payload, 'message') ?? payloadString(payload, 'error') ?? `Errore HTTP ${response.status}`;\n      const rawDetails = payload && typeof payload === 'object' ? (payload as { details?: unknown }).details : undefined;\n      const details = Array.isArray(rawDetails) ? rawDetails.map((item) => String(item)) : undefined;\n      // Un 401 su una richiesta autenticata significa sessione scaduta/revocata: il token non e piu valido.\n      if (response.status === 401 && authenticatedRequest && typeof window !== 'undefined') {\n        window.dispatchEvent(new CustomEvent(ACCESSI_UNAUTHORIZED_EVENT));\n      }\n      throw new AccessiRequestError(message, response.status, payloadString(payload, 'code') ?? payloadString(payload, 'error'), details);\n    }\n    return {\n      data: payload,\n      status: response.status,\n      headers: response.headers,\n    } as T;\n  } finally {\n    notifyNetworkActivity(false);\n  }\n}\n"]}