emilsoftware-utilities 2.0.0-dev.8 → 2.0.0-dev.81

package/dist/accessi-module/Dtos/ScopeDtos.js

@@ -0,0 +1,103 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GetMenuScopesResponse = exports.SetScopeMenusRequest = exports.SetMenuScopesRequest = exports.UpdateScopeRequest = exports.CreateScopeRequest = exports.GetScopesResponse = exports.ScopeEntity = void 0;
+const swagger_1 = require("@nestjs/swagger");
+const class_transformer_1 = require("class-transformer");
+const class_validator_1 = require("class-validator");
+const BaseResponse_1 = require("./BaseResponse");
+/**
+ * Scope applicativi: etichette che decidono in quali applicazioni un menu e
+ * visibile. Il codice e la chiave stabile usata dalle API (`?scope=STEX`).
+ */
+class ScopeEntity {
+}
+exports.ScopeEntity = ScopeEntity;
+__decorate([
+    (0, swagger_1.ApiProperty)({ description: 'Codice dello scope.', example: 'STEX' }),
+    __metadata("design:type", String)
+], ScopeEntity.prototype, "codice", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({ description: 'Nome leggibile dello scope.', example: 'SteX' }),
+    __metadata("design:type", String)
+], ScopeEntity.prototype, "nome", void 0);
+class GetScopesResponse extends BaseResponse_1.BaseResponse {
+}
+exports.GetScopesResponse = GetScopesResponse;
+__decorate([
+    (0, swagger_1.ApiProperty)({ type: [ScopeEntity] }),
+    (0, class_validator_1.ValidateNested)({ each: true }),
+    (0, class_transformer_1.Type)(() => ScopeEntity),
+    __metadata("design:type", Array)
+], GetScopesResponse.prototype, "Result", void 0);
+class CreateScopeRequest {
+}
+exports.CreateScopeRequest = CreateScopeRequest;
+__decorate([
+    (0, swagger_1.ApiProperty)({ description: 'Codice univoco dello scope.', example: 'STEX', maxLength: 20 }),
+    (0, class_validator_1.IsString)({ message: 'Il codice scope deve essere una stringa.' }),
+    (0, class_validator_1.IsNotEmpty)({ message: 'Il codice scope e obbligatorio.' }),
+    (0, class_validator_1.MaxLength)(20, { message: 'Il codice scope non puo superare 20 caratteri.' }),
+    __metadata("design:type", String)
+], CreateScopeRequest.prototype, "codice", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({ description: 'Nome leggibile dello scope.', example: 'SteX', maxLength: 100 }),
+    (0, class_validator_1.IsString)({ message: 'Il nome scope deve essere una stringa.' }),
+    (0, class_validator_1.IsNotEmpty)({ message: 'Il nome scope e obbligatorio.' }),
+    (0, class_validator_1.MaxLength)(100, { message: 'Il nome scope non puo superare 100 caratteri.' }),
+    __metadata("design:type", String)
+], CreateScopeRequest.prototype, "nome", void 0);
+class UpdateScopeRequest {
+}
+exports.UpdateScopeRequest = UpdateScopeRequest;
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({ description: 'Nome leggibile dello scope.', example: 'SteX', maxLength: 100 }),
+    (0, class_validator_1.IsString)({ message: 'Il nome scope deve essere una stringa.' }),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.MaxLength)(100, { message: 'Il nome scope non puo superare 100 caratteri.' }),
+    __metadata("design:type", String)
+], UpdateScopeRequest.prototype, "nome", void 0);
+class SetMenuScopesRequest {
+}
+exports.SetMenuScopesRequest = SetMenuScopesRequest;
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'Elenco completo degli scope associati al menu.',
+        example: ['STEX', 'TINTEMIX'],
+        type: [String],
+    }),
+    (0, class_validator_1.IsArray)({ message: 'Gli scope devono essere un array.' }),
+    (0, class_validator_1.ArrayUnique)({ message: 'Gli scope non devono contenere duplicati.' }),
+    (0, class_validator_1.IsString)({ each: true, message: 'Ogni scope deve essere una stringa.' }),
+    __metadata("design:type", Array)
+], SetMenuScopesRequest.prototype, "scopes", void 0);
+class SetScopeMenusRequest {
+}
+exports.SetScopeMenusRequest = SetScopeMenusRequest;
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'Elenco completo dei menu associati allo scope.',
+        example: ['MNUMAIN', 'MNUUTENTI'],
+        type: [String],
+    }),
+    (0, class_validator_1.IsArray)({ message: 'I menu devono essere un array.' }),
+    (0, class_validator_1.ArrayUnique)({ message: 'I menu non devono contenere duplicati.' }),
+    (0, class_validator_1.IsString)({ each: true, message: 'Ogni menu deve essere una stringa.' }),
+    __metadata("design:type", Array)
+], SetScopeMenusRequest.prototype, "menu", void 0);
+class GetMenuScopesResponse extends BaseResponse_1.BaseResponse {
+}
+exports.GetMenuScopesResponse = GetMenuScopesResponse;
+__decorate([
+    (0, swagger_1.ApiProperty)({ type: [String], description: 'Codici degli scope associati al menu.' }),
+    __metadata("design:type", Array)
+], GetMenuScopesResponse.prototype, "Result", void 0);
+//# sourceMappingURL=ScopeDtos.js.map

package/dist/accessi-module/Dtos/ScopeDtos.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ScopeDtos.js","sourceRoot":"","sources":["../../../src/accessi-module/Dtos/ScopeDtos.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,6CAAmE;AACnE,yDAAyC;AACzC,qDAQyB;AACzB,iDAA8C;AAE9C;;;GAGG;AACH,MAAa,WAAW;CAMvB;AAND,kCAMC;AAJC;IADC,IAAA,qBAAW,EAAC,EAAE,WAAW,EAAE,qBAAqB,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;;2CACrD;AAGhB;IADC,IAAA,qBAAW,EAAC,EAAE,WAAW,EAAE,6BAA6B,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;;yCAC/D;AAGhB,MAAa,iBAAkB,SAAQ,2BAAY;CAKlD;AALD,8CAKC;AADC;IAHC,IAAA,qBAAW,EAAC,EAAE,IAAI,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC;IACpC,IAAA,gCAAc,EAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC9B,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,WAAW,CAAC;;iDACD;AAGzB,MAAa,kBAAkB;CAY9B;AAZD,gDAYC;AAPC;IAJC,IAAA,qBAAW,EAAC,EAAE,WAAW,EAAE,6BAA6B,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IAC3F,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,0CAA0C,EAAE,CAAC;IACjE,IAAA,4BAAU,EAAC,EAAE,OAAO,EAAE,iCAAiC,EAAE,CAAC;IAC1D,IAAA,2BAAS,EAAC,EAAE,EAAE,EAAE,OAAO,EAAE,gDAAgD,EAAE,CAAC;;kDAC7D;AAMhB;IAJC,IAAA,qBAAW,EAAC,EAAE,WAAW,EAAE,6BAA6B,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;IAC5F,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,wCAAwC,EAAE,CAAC;IAC/D,IAAA,4BAAU,EAAC,EAAE,OAAO,EAAE,+BAA+B,EAAE,CAAC;IACxD,IAAA,2BAAS,EAAC,GAAG,EAAE,EAAE,OAAO,EAAE,+CAA+C,EAAE,CAAC;;gDAC/D;AAGhB,MAAa,kBAAkB;CAM9B;AAND,gDAMC;AADC;IAJC,IAAA,6BAAmB,EAAC,EAAE,WAAW,EAAE,6BAA6B,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;IACpG,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,wCAAwC,EAAE,CAAC;IAC/D,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,GAAG,EAAE,EAAE,OAAO,EAAE,+CAA+C,EAAE,CAAC;;gDAC/D;AAGhB,MAAa,oBAAoB;CAUhC;AAVD,oDAUC;AADC;IARC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,gDAAgD;QAC7D,OAAO,EAAE,CAAC,MAAM,EAAE,UAAU,CAAC;QAC7B,IAAI,EAAE,CAAC,MAAM,CAAC;KACf,CAAC;IACD,IAAA,yBAAO,EAAC,EAAE,OAAO,EAAE,mCAAmC,EAAE,CAAC;IACzD,IAAA,6BAAW,EAAC,EAAE,OAAO,EAAE,2CAA2C,EAAE,CAAC;IACrE,IAAA,0BAAQ,EAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,qCAAqC,EAAE,CAAC;;oDACvD;AAGpB,MAAa,oBAAoB;CAUhC;AAVD,oDAUC;AADC;IARC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,gDAAgD;QAC7D,OAAO,EAAE,CAAC,SAAS,EAAE,WAAW,CAAC;QACjC,IAAI,EAAE,CAAC,MAAM,CAAC;KACf,CAAC;IACD,IAAA,yBAAO,EAAC,EAAE,OAAO,EAAE,gCAAgC,EAAE,CAAC;IACtD,IAAA,6BAAW,EAAC,EAAE,OAAO,EAAE,wCAAwC,EAAE,CAAC;IAClE,IAAA,0BAAQ,EAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,oCAAoC,EAAE,CAAC;;kDACxD;AAGlB,MAAa,qBAAsB,SAAQ,2BAAY;CAGtD;AAHD,sDAGC;AADC;IADC,IAAA,qBAAW,EAAC,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,uCAAuC,EAAE,CAAC;;qDACpE","sourcesContent":["import { ApiProperty, ApiPropertyOptional } from '@nestjs/swagger';\nimport { Type } from 'class-transformer';\nimport {\n  ArrayUnique,\n  IsArray,\n  IsNotEmpty,\n  IsOptional,\n  IsString,\n  MaxLength,\n  ValidateNested,\n} from 'class-validator';\nimport { BaseResponse } from './BaseResponse';\n\n/**\n * Scope applicativi: etichette che decidono in quali applicazioni un menu e\n * visibile. Il codice e la chiave stabile usata dalle API (`?scope=STEX`).\n */\nexport class ScopeEntity {\n  @ApiProperty({ description: 'Codice dello scope.', example: 'STEX' })\n  codice!: string;\n\n  @ApiProperty({ description: 'Nome leggibile dello scope.', example: 'SteX' })\n  nome!: string;\n}\n\nexport class GetScopesResponse extends BaseResponse {\n  @ApiProperty({ type: [ScopeEntity] })\n  @ValidateNested({ each: true })\n  @Type(() => ScopeEntity)\n  Result!: ScopeEntity[];\n}\n\nexport class CreateScopeRequest {\n  @ApiProperty({ description: 'Codice univoco dello scope.', example: 'STEX', maxLength: 20 })\n  @IsString({ message: 'Il codice scope deve essere una stringa.' })\n  @IsNotEmpty({ message: 'Il codice scope e obbligatorio.' })\n  @MaxLength(20, { message: 'Il codice scope non puo superare 20 caratteri.' })\n  codice!: string;\n\n  @ApiProperty({ description: 'Nome leggibile dello scope.', example: 'SteX', maxLength: 100 })\n  @IsString({ message: 'Il nome scope deve essere una stringa.' })\n  @IsNotEmpty({ message: 'Il nome scope e obbligatorio.' })\n  @MaxLength(100, { message: 'Il nome scope non puo superare 100 caratteri.' })\n  nome!: string;\n}\n\nexport class UpdateScopeRequest {\n  @ApiPropertyOptional({ description: 'Nome leggibile dello scope.', example: 'SteX', maxLength: 100 })\n  @IsString({ message: 'Il nome scope deve essere una stringa.' })\n  @IsOptional()\n  @MaxLength(100, { message: 'Il nome scope non puo superare 100 caratteri.' })\n  nome?: string;\n}\n\nexport class SetMenuScopesRequest {\n  @ApiProperty({\n    description: 'Elenco completo degli scope associati al menu.',\n    example: ['STEX', 'TINTEMIX'],\n    type: [String],\n  })\n  @IsArray({ message: 'Gli scope devono essere un array.' })\n  @ArrayUnique({ message: 'Gli scope non devono contenere duplicati.' })\n  @IsString({ each: true, message: 'Ogni scope deve essere una stringa.' })\n  scopes!: string[];\n}\n\nexport class SetScopeMenusRequest {\n  @ApiProperty({\n    description: 'Elenco completo dei menu associati allo scope.',\n    example: ['MNUMAIN', 'MNUUTENTI'],\n    type: [String],\n  })\n  @IsArray({ message: 'I menu devono essere un array.' })\n  @ArrayUnique({ message: 'I menu non devono contenere duplicati.' })\n  @IsString({ each: true, message: 'Ogni menu deve essere una stringa.' })\n  menu!: string[];\n}\n\nexport class GetMenuScopesResponse extends BaseResponse {\n  @ApiProperty({ type: [String], description: 'Codici degli scope associati al menu.' })\n  Result!: string[];\n}\n"]}

package/dist/accessi-module/Dtos/SendResetPasswordEmailRequest.d.ts

@@ -0,0 +1,4 @@
+export declare class SendResetPasswordEmailRequest {
+    email: string;
+    htmlMail?: string;
+}

package/dist/accessi-module/Dtos/SendResetPasswordEmailRequest.js

@@ -0,0 +1,36 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SendResetPasswordEmailRequest = void 0;
+const swagger_1 = require("@nestjs/swagger");
+const class_validator_1 = require("class-validator");
+class SendResetPasswordEmailRequest {
+}
+exports.SendResetPasswordEmailRequest = SendResetPasswordEmailRequest;
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: "L'email dell'utente che richiede il reset.",
+        example: 'mario.rossi@dev.it',
+    }),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.Length)(3, 254),
+    __metadata("design:type", String)
+], SendResetPasswordEmailRequest.prototype, "email", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({
+        description: 'HTML personalizzato della mail di reset, se gestito dal chiamante.',
+        example: '<html><body>Reset password</body></html>',
+    }),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    __metadata("design:type", String)
+], SendResetPasswordEmailRequest.prototype, "htmlMail", void 0);
+//# sourceMappingURL=SendResetPasswordEmailRequest.js.map

package/dist/accessi-module/Dtos/SendResetPasswordEmailRequest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SendResetPasswordEmailRequest.js","sourceRoot":"","sources":["../../../src/accessi-module/Dtos/SendResetPasswordEmailRequest.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,6CAAmE;AACnE,qDAA+D;AAE/D,MAAa,6BAA6B;CAgBzC;AAhBD,sEAgBC;AATC;IANC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,4CAA4C;QACzD,OAAO,EAAE,oBAAoB;KAC9B,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,wBAAM,EAAC,CAAC,EAAE,GAAG,CAAC;;4DACA;AAQf;IANC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,oEAAoE;QACjF,OAAO,EAAE,0CAA0C;KACpD,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;+DACO","sourcesContent":["import { ApiProperty, ApiPropertyOptional } from '@nestjs/swagger';\nimport { IsOptional, IsString, Length } from 'class-validator';\n\nexport class SendResetPasswordEmailRequest {\n  @ApiProperty({\n    description: \"L'email dell'utente che richiede il reset.\",\n    example: 'mario.rossi@dev.it',\n  })\n  @IsString()\n  @Length(3, 254)\n  email!: string;\n\n  @ApiPropertyOptional({\n    description: 'HTML personalizzato della mail di reset, se gestito dal chiamante.',\n    example: '<html><body>Reset password</body></html>',\n  })\n  @IsOptional()\n  @IsString()\n  htmlMail?: string;\n}\n"]}

package/dist/accessi-module/Dtos/ServiceToken.d.ts

@@ -0,0 +1,34 @@
+import { BaseResponse } from './BaseResponse';
+/**
+ * Richiesta di emissione di un token di servizio (macchina-a-macchina).
+ * Il segreto viene generato dal server e restituito una sola volta.
+ */
+export declare class CreateServiceTokenRequest {
+    label: string;
+    scopes?: string[];
+    expiresAt?: string;
+    ttlDays?: number;
+}
+/** Metadati pubblici di un token di servizio; non contiene mai il segreto. */
+export declare class ServiceTokenDto {
+    tokenId: string;
+    label: string;
+    scopes: string[];
+    createdAt?: string;
+    expiresAt?: string;
+    lastUsedAt?: string;
+    lastUsedIp?: string;
+    revoked: boolean;
+    revokedAt?: string;
+    revokedBy?: number;
+}
+/** Risultato dell'emissione: include il segreto in chiaro, visibile solo in questa risposta. */
+export declare class IssuedServiceTokenDto extends ServiceTokenDto {
+    token: string;
+}
+export declare class CreateServiceTokenResponse extends BaseResponse {
+    Result: IssuedServiceTokenDto;
+}
+export declare class GetServiceTokensResponse extends BaseResponse {
+    Result: ServiceTokenDto[];
+}

package/dist/accessi-module/Dtos/ServiceToken.js

@@ -0,0 +1,128 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GetServiceTokensResponse = exports.CreateServiceTokenResponse = exports.IssuedServiceTokenDto = exports.ServiceTokenDto = exports.CreateServiceTokenRequest = void 0;
+const swagger_1 = require("@nestjs/swagger");
+const class_validator_1 = require("class-validator");
+const class_transformer_1 = require("class-transformer");
+const BaseResponse_1 = require("./BaseResponse");
+/**
+ * Richiesta di emissione di un token di servizio (macchina-a-macchina).
+ * Il segreto viene generato dal server e restituito una sola volta.
+ */
+class CreateServiceTokenRequest {
+}
+exports.CreateServiceTokenRequest = CreateServiceTokenRequest;
+__decorate([
+    (0, swagger_1.ApiProperty)({ description: 'Descrizione del token, mostrata agli amministratori.', example: 'Integrazione IA - produzione' }),
+    (0, class_validator_1.IsString)({ message: 'La descrizione deve essere una stringa.' }),
+    (0, class_validator_1.Length)(1, 100, { message: 'La descrizione deve essere compresa tra 1 e 100 caratteri.' }),
+    __metadata("design:type", String)
+], CreateServiceTokenRequest.prototype, "label", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({
+        description: "Scope autorizzati dal token. Uno scope vuoto non autorizza nulla; usare valori come 'ia', 'chat', 'tools'.",
+        type: [String],
+        example: ['ia', 'chat'],
+    }),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsArray)({ message: 'Gli scope devono essere un array.' }),
+    (0, class_validator_1.ArrayUnique)(),
+    (0, class_validator_1.IsString)({ each: true, message: 'Ogni scope deve essere una stringa.' }),
+    __metadata("design:type", Array)
+], CreateServiceTokenRequest.prototype, "scopes", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({ description: 'Scadenza esplicita in formato ISO 8601. Alternativa a ttlDays.', example: '2027-01-01T00:00:00.000Z' }),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)({ message: 'La scadenza deve essere una stringa ISO 8601.' }),
+    __metadata("design:type", String)
+], CreateServiceTokenRequest.prototype, "expiresAt", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({ description: 'Durata in giorni, usata solo se expiresAt non e valorizzata.', example: 365 }),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsInt)({ message: 'ttlDays deve essere un intero.' }),
+    (0, class_validator_1.Min)(1, { message: 'ttlDays deve essere maggiore di zero.' }),
+    __metadata("design:type", Number)
+], CreateServiceTokenRequest.prototype, "ttlDays", void 0);
+/** Metadati pubblici di un token di servizio; non contiene mai il segreto. */
+class ServiceTokenDto {
+}
+exports.ServiceTokenDto = ServiceTokenDto;
+__decorate([
+    (0, swagger_1.ApiProperty)({ description: 'Identificativo pubblico del token.', example: 'st_3f1a2b3c4d5e6f708192a3b4c5d6e7f8' }),
+    __metadata("design:type", String)
+], ServiceTokenDto.prototype, "tokenId", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({ description: 'Descrizione del token.', example: 'Integrazione IA - produzione' }),
+    __metadata("design:type", String)
+], ServiceTokenDto.prototype, "label", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({ description: 'Scope autorizzati.', type: [String], example: ['ia', 'chat'] }),
+    __metadata("design:type", Array)
+], ServiceTokenDto.prototype, "scopes", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({ description: 'Data di creazione (ISO 8601).' }),
+    __metadata("design:type", String)
+], ServiceTokenDto.prototype, "createdAt", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({ description: 'Data di scadenza (ISO 8601); assente se il token non scade.' }),
+    __metadata("design:type", String)
+], ServiceTokenDto.prototype, "expiresAt", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({ description: 'Ultimo utilizzo registrato (ISO 8601).' }),
+    __metadata("design:type", String)
+], ServiceTokenDto.prototype, "lastUsedAt", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({ description: 'IP dell ultimo utilizzo registrato (audit).' }),
+    __metadata("design:type", String)
+], ServiceTokenDto.prototype, "lastUsedIp", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({ description: 'Indica se il token e revocato.' }),
+    __metadata("design:type", Boolean)
+], ServiceTokenDto.prototype, "revoked", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({ description: 'Data di revoca (ISO 8601).' }),
+    __metadata("design:type", String)
+], ServiceTokenDto.prototype, "revokedAt", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({ description: 'Codice utente che ha revocato il token (audit).' }),
+    __metadata("design:type", Number)
+], ServiceTokenDto.prototype, "revokedBy", void 0);
+/** Risultato dell'emissione: include il segreto in chiaro, visibile solo in questa risposta. */
+class IssuedServiceTokenDto extends ServiceTokenDto {
+}
+exports.IssuedServiceTokenDto = IssuedServiceTokenDto;
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'Token completo da usare come `Authorization: Bearer <token>`. Mostrato una sola volta.',
+        example: 'st_3f1a2b3c4d5e6f708192a3b4c5d6e7f8.xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx',
+    }),
+    __metadata("design:type", String)
+], IssuedServiceTokenDto.prototype, "token", void 0);
+class CreateServiceTokenResponse extends BaseResponse_1.BaseResponse {
+}
+exports.CreateServiceTokenResponse = CreateServiceTokenResponse;
+__decorate([
+    (0, swagger_1.ApiProperty)({ type: IssuedServiceTokenDto }),
+    (0, class_validator_1.ValidateNested)(),
+    (0, class_transformer_1.Type)(() => IssuedServiceTokenDto),
+    __metadata("design:type", IssuedServiceTokenDto)
+], CreateServiceTokenResponse.prototype, "Result", void 0);
+class GetServiceTokensResponse extends BaseResponse_1.BaseResponse {
+}
+exports.GetServiceTokensResponse = GetServiceTokensResponse;
+__decorate([
+    (0, swagger_1.ApiProperty)({ type: [ServiceTokenDto] }),
+    (0, class_validator_1.ValidateNested)({ each: true }),
+    (0, class_transformer_1.Type)(() => ServiceTokenDto),
+    __metadata("design:type", Array)
+], GetServiceTokensResponse.prototype, "Result", void 0);
+//# sourceMappingURL=ServiceToken.js.map

package/dist/accessi-module/Dtos/ServiceToken.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ServiceToken.js","sourceRoot":"","sources":["../../../src/accessi-module/Dtos/ServiceToken.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,6CAAmE;AACnE,qDAAiH;AACjH,yDAAyC;AACzC,iDAA8C;AAE9C;;;GAGG;AACH,MAAa,yBAAyB;CA2BrC;AA3BD,8DA2BC;AAvBC;IAHC,IAAA,qBAAW,EAAC,EAAE,WAAW,EAAE,sDAAsD,EAAE,OAAO,EAAE,8BAA8B,EAAE,CAAC;IAC7H,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,yCAAyC,EAAE,CAAC;IAChE,IAAA,wBAAM,EAAC,CAAC,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,4DAA4D,EAAE,CAAC;;wDAC3E;AAWf;IATC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,4GAA4G;QACzH,IAAI,EAAE,CAAC,MAAM,CAAC;QACd,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC;KACxB,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,yBAAO,EAAC,EAAE,OAAO,EAAE,mCAAmC,EAAE,CAAC;IACzD,IAAA,6BAAW,GAAE;IACb,IAAA,0BAAQ,EAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,qCAAqC,EAAE,CAAC;;yDACvD;AAKlB;IAHC,IAAA,6BAAmB,EAAC,EAAE,WAAW,EAAE,gEAAgE,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC;IAC3I,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,+CAA+C,EAAE,CAAC;;4DACpD;AAMnB;IAJC,IAAA,6BAAmB,EAAC,EAAE,WAAW,EAAE,8DAA8D,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;IAClH,IAAA,4BAAU,GAAE;IACZ,IAAA,uBAAK,EAAC,EAAE,OAAO,EAAE,gCAAgC,EAAE,CAAC;IACpD,IAAA,qBAAG,EAAC,CAAC,EAAE,EAAE,OAAO,EAAE,uCAAuC,EAAE,CAAC;;0DAC5C;AAGnB,8EAA8E;AAC9E,MAAa,eAAe;CA8B3B;AA9BD,0CA8BC;AA5BC;IADC,IAAA,qBAAW,EAAC,EAAE,WAAW,EAAE,oCAAoC,EAAE,OAAO,EAAE,qCAAqC,EAAE,CAAC;;gDAClG;AAGjB;IADC,IAAA,qBAAW,EAAC,EAAE,WAAW,EAAE,wBAAwB,EAAE,OAAO,EAAE,8BAA8B,EAAE,CAAC;;8CACjF;AAGf;IADC,IAAA,qBAAW,EAAC,EAAE,WAAW,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC;;+CAC1E;AAGlB;IADC,IAAA,6BAAmB,EAAC,EAAE,WAAW,EAAE,+BAA+B,EAAE,CAAC;;kDACnD;AAGnB;IADC,IAAA,6BAAmB,EAAC,EAAE,WAAW,EAAE,6DAA6D,EAAE,CAAC;;kDACjF;AAGnB;IADC,IAAA,6BAAmB,EAAC,EAAE,WAAW,EAAE,wCAAwC,EAAE,CAAC;;mDAC3D;AAGpB;IADC,IAAA,6BAAmB,EAAC,EAAE,WAAW,EAAE,6CAA6C,EAAE,CAAC;;mDAChE;AAGpB;IADC,IAAA,qBAAW,EAAC,EAAE,WAAW,EAAE,gCAAgC,EAAE,CAAC;;gDAC7C;AAGlB;IADC,IAAA,6BAAmB,EAAC,EAAE,WAAW,EAAE,4BAA4B,EAAE,CAAC;;kDAChD;AAGnB;IADC,IAAA,6BAAmB,EAAC,EAAE,WAAW,EAAE,iDAAiD,EAAE,CAAC;;kDACrE;AAGrB,gGAAgG;AAChG,MAAa,qBAAsB,SAAQ,eAAe;CAMzD;AAND,sDAMC;AADC;IAJC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,wFAAwF;QACrG,OAAO,EAAE,iFAAiF;KAC3F,CAAC;;oDACa;AAGjB,MAAa,0BAA2B,SAAQ,2BAAY;CAK3D;AALD,gEAKC;AADC;IAHC,IAAA,qBAAW,EAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC;IAC5C,IAAA,gCAAc,GAAE;IAChB,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,qBAAqB,CAAC;8BACzB,qBAAqB;0DAAC;AAGjC,MAAa,wBAAyB,SAAQ,2BAAY;CAKzD;AALD,4DAKC;AADC;IAHC,IAAA,qBAAW,EAAC,EAAE,IAAI,EAAE,CAAC,eAAe,CAAC,EAAE,CAAC;IACxC,IAAA,gCAAc,EAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC9B,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,eAAe,CAAC;;wDACD","sourcesContent":["import { ApiProperty, ApiPropertyOptional } from '@nestjs/swagger';\nimport { ArrayUnique, IsArray, IsInt, IsOptional, IsString, Length, Min, ValidateNested } from 'class-validator';\nimport { Type } from 'class-transformer';\nimport { BaseResponse } from './BaseResponse';\n\n/**\n * Richiesta di emissione di un token di servizio (macchina-a-macchina).\n * Il segreto viene generato dal server e restituito una sola volta.\n */\nexport class CreateServiceTokenRequest {\n  @ApiProperty({ description: 'Descrizione del token, mostrata agli amministratori.', example: 'Integrazione IA - produzione' })\n  @IsString({ message: 'La descrizione deve essere una stringa.' })\n  @Length(1, 100, { message: 'La descrizione deve essere compresa tra 1 e 100 caratteri.' })\n  label!: string;\n\n  @ApiPropertyOptional({\n    description: \"Scope autorizzati dal token. Uno scope vuoto non autorizza nulla; usare valori come 'ia', 'chat', 'tools'.\",\n    type: [String],\n    example: ['ia', 'chat'],\n  })\n  @IsOptional()\n  @IsArray({ message: 'Gli scope devono essere un array.' })\n  @ArrayUnique()\n  @IsString({ each: true, message: 'Ogni scope deve essere una stringa.' })\n  scopes?: string[];\n\n  @ApiPropertyOptional({ description: 'Scadenza esplicita in formato ISO 8601. Alternativa a ttlDays.', example: '2027-01-01T00:00:00.000Z' })\n  @IsOptional()\n  @IsString({ message: 'La scadenza deve essere una stringa ISO 8601.' })\n  expiresAt?: string;\n\n  @ApiPropertyOptional({ description: 'Durata in giorni, usata solo se expiresAt non e valorizzata.', example: 365 })\n  @IsOptional()\n  @IsInt({ message: 'ttlDays deve essere un intero.' })\n  @Min(1, { message: 'ttlDays deve essere maggiore di zero.' })\n  ttlDays?: number;\n}\n\n/** Metadati pubblici di un token di servizio; non contiene mai il segreto. */\nexport class ServiceTokenDto {\n  @ApiProperty({ description: 'Identificativo pubblico del token.', example: 'st_3f1a2b3c4d5e6f708192a3b4c5d6e7f8' })\n  tokenId!: string;\n\n  @ApiProperty({ description: 'Descrizione del token.', example: 'Integrazione IA - produzione' })\n  label!: string;\n\n  @ApiProperty({ description: 'Scope autorizzati.', type: [String], example: ['ia', 'chat'] })\n  scopes!: string[];\n\n  @ApiPropertyOptional({ description: 'Data di creazione (ISO 8601).' })\n  createdAt?: string;\n\n  @ApiPropertyOptional({ description: 'Data di scadenza (ISO 8601); assente se il token non scade.' })\n  expiresAt?: string;\n\n  @ApiPropertyOptional({ description: 'Ultimo utilizzo registrato (ISO 8601).' })\n  lastUsedAt?: string;\n\n  @ApiPropertyOptional({ description: 'IP dell ultimo utilizzo registrato (audit).' })\n  lastUsedIp?: string;\n\n  @ApiProperty({ description: 'Indica se il token e revocato.' })\n  revoked!: boolean;\n\n  @ApiPropertyOptional({ description: 'Data di revoca (ISO 8601).' })\n  revokedAt?: string;\n\n  @ApiPropertyOptional({ description: 'Codice utente che ha revocato il token (audit).' })\n  revokedBy?: number;\n}\n\n/** Risultato dell'emissione: include il segreto in chiaro, visibile solo in questa risposta. */\nexport class IssuedServiceTokenDto extends ServiceTokenDto {\n  @ApiProperty({\n    description: 'Token completo da usare come `Authorization: Bearer <token>`. Mostrato una sola volta.',\n    example: 'st_3f1a2b3c4d5e6f708192a3b4c5d6e7f8.xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx',\n  })\n  token!: string;\n}\n\nexport class CreateServiceTokenResponse extends BaseResponse {\n  @ApiProperty({ type: IssuedServiceTokenDto })\n  @ValidateNested()\n  @Type(() => IssuedServiceTokenDto)\n  Result!: IssuedServiceTokenDto;\n}\n\nexport class GetServiceTokensResponse extends BaseResponse {\n  @ApiProperty({ type: [ServiceTokenDto] })\n  @ValidateNested({ each: true })\n  @Type(() => ServiceTokenDto)\n  Result!: ServiceTokenDto[];\n}\n"]}

package/dist/accessi-module/Dtos/SetStatoRegistrazione.js.map

@@ -1 +1 @@
-{"version":3,"file":"SetStatoRegistrazione.js","sourceRoot":"","sources":["../../../src/accessi-module/Dtos/SetStatoRegistrazione.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,6CAA8C;AAC9C,yDAAyC;AACzC,qDAAqD;AACrD,6DAA0D;AAE1D,MAAa,wBAAwB;CAiBpC;AAjBD,4DAiBC;AATC;IAPC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,mCAAmC;QAChD,OAAO,EAAE,GAAG;KACb,CAAC;IACD,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,MAAM,CAAC;IAClB,IAAA,uBAAK,EAAC,EAAE,OAAO,EAAE,yCAAyC,EAAE,CAAC;IAC7D,IAAA,qBAAG,EAAC,CAAC,EAAE,EAAE,OAAO,EAAE,gDAAgD,EAAE,CAAC;;8DACjD;AAQrB;IANC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,8BAA8B;QAC3C,IAAI,EAAE,uCAAkB;QACxB,OAAO,EAAE,uCAAkB,CAAC,MAAM;KACnC,CAAC;IACD,IAAA,wBAAM,EAAC,uCAAkB,EAAE,EAAE,OAAO,EAAE,yCAAyC,EAAE,CAAC;;oEAC5C","sourcesContent":["import { ApiProperty } from '@nestjs/swagger';\r\nimport { Type } from 'class-transformer';\r\nimport { IsEnum, IsInt, Min } from 'class-validator';\r\nimport { StatoRegistrazione } from './StatoRegistrazione';\r\n\r\nexport class SetStatoRegistrazioneDto {\r\n  @ApiProperty({\r\n    description: \"Codice identificativo dell'utente\",\r\n    example: 123,\r\n  })\r\n  @Type(() => Number)\r\n  @IsInt({ message: 'Il codice utente deve essere un intero.' })\r\n  @Min(1, { message: 'Il codice utente deve essere maggiore di zero.' })\r\n  codiceUtente: number;\r\n\r\n  @ApiProperty({\r\n    description: 'Nuovo stato di registrazione',\r\n    enum: StatoRegistrazione,\r\n    example: StatoRegistrazione.DELETE,\r\n  })\r\n  @IsEnum(StatoRegistrazione, { message: 'Lo stato di registrazione non e valido.' })\r\n  statoRegistrazione: StatoRegistrazione;\r\n}\r\n"]}
+{"version":3,"file":"SetStatoRegistrazione.js","sourceRoot":"","sources":["../../../src/accessi-module/Dtos/SetStatoRegistrazione.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,6CAA8C;AAC9C,yDAAyC;AACzC,qDAAqD;AACrD,6DAA0D;AAE1D,MAAa,wBAAwB;CAiBpC;AAjBD,4DAiBC;AATC;IAPC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,mCAAmC;QAChD,OAAO,EAAE,GAAG;KACb,CAAC;IACD,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,MAAM,CAAC;IAClB,IAAA,uBAAK,EAAC,EAAE,OAAO,EAAE,yCAAyC,EAAE,CAAC;IAC7D,IAAA,qBAAG,EAAC,CAAC,EAAE,EAAE,OAAO,EAAE,gDAAgD,EAAE,CAAC;;8DAChD;AAQtB;IANC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,8BAA8B;QAC3C,IAAI,EAAE,uCAAkB;QACxB,OAAO,EAAE,uCAAkB,CAAC,MAAM;KACnC,CAAC;IACD,IAAA,wBAAM,EAAC,uCAAkB,EAAE,EAAE,OAAO,EAAE,yCAAyC,EAAE,CAAC;;oEAC3C","sourcesContent":["import { ApiProperty } from '@nestjs/swagger';\nimport { Type } from 'class-transformer';\nimport { IsEnum, IsInt, Min } from 'class-validator';\nimport { StatoRegistrazione } from './StatoRegistrazione';\n\nexport class SetStatoRegistrazioneDto {\n  @ApiProperty({\n    description: \"Codice identificativo dell'utente\",\n    example: 123,\n  })\n  @Type(() => Number)\n  @IsInt({ message: 'Il codice utente deve essere un intero.' })\n  @Min(1, { message: 'Il codice utente deve essere maggiore di zero.' })\n  codiceUtente!: number;\n\n  @ApiProperty({\n    description: 'Nuovo stato di registrazione',\n    enum: StatoRegistrazione,\n    example: StatoRegistrazione.DELETE,\n  })\n  @IsEnum(StatoRegistrazione, { message: 'Lo stato di registrazione non e valido.' })\n  statoRegistrazione!: StatoRegistrazione;\n}\n"]}

package/dist/accessi-module/Dtos/SetUserPasswordRequest.d.ts

@@ -0,0 +1,4 @@
+/** Impostazione diretta della password di un utente da parte di un admin. */
+export declare class SetUserPasswordRequest {
+    newPassword: string;
+}

package/dist/accessi-module/Dtos/SetUserPasswordRequest.js

@@ -0,0 +1,32 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SetUserPasswordRequest = void 0;
+const swagger_1 = require("@nestjs/swagger");
+const class_validator_1 = require("class-validator");
+/** Impostazione diretta della password di un utente da parte di un admin. */
+class SetUserPasswordRequest {
+}
+exports.SetUserPasswordRequest = SetUserPasswordRequest;
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: "Nuova password in chiaro: almeno 8 caratteri con maiuscola, minuscola, cifra e carattere speciale, senza spazi e non comune. Viene hashata e non restituita; se non conforme l API risponde 400 con codice ACCESSI_WEAK_PASSWORD.",
+        minLength: 8,
+        maxLength: 100,
+        example: 'PasswordSicura123!',
+    }),
+    (0, class_validator_1.IsString)({ message: 'La nuova password deve essere una stringa.' }),
+    (0, class_validator_1.Length)(8, 100, {
+        message: 'La nuova password deve essere compresa tra 8 e 100 caratteri.',
+    }),
+    __metadata("design:type", String)
+], SetUserPasswordRequest.prototype, "newPassword", void 0);
+//# sourceMappingURL=SetUserPasswordRequest.js.map

package/dist/accessi-module/Dtos/SetUserPasswordRequest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SetUserPasswordRequest.js","sourceRoot":"","sources":["../../../src/accessi-module/Dtos/SetUserPasswordRequest.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,6CAA8C;AAC9C,qDAAmD;AAEnD,6EAA6E;AAC7E,MAAa,sBAAsB;CAYlC;AAZD,wDAYC;AADC;IAVC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,mOAAmO;QAChP,SAAS,EAAE,CAAC;QACZ,SAAS,EAAE,GAAG;QACd,OAAO,EAAE,oBAAoB;KAC9B,CAAC;IACD,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,4CAA4C,EAAE,CAAC;IACnE,IAAA,wBAAM,EAAC,CAAC,EAAE,GAAG,EAAE;QACd,OAAO,EAAE,+DAA+D;KACzE,CAAC;;2DACmB","sourcesContent":["import { ApiProperty } from '@nestjs/swagger';\nimport { IsString, Length } from 'class-validator';\n\n/** Impostazione diretta della password di un utente da parte di un admin. */\nexport class SetUserPasswordRequest {\n  @ApiProperty({\n    description: \"Nuova password in chiaro: almeno 8 caratteri con maiuscola, minuscola, cifra e carattere speciale, senza spazi e non comune. Viene hashata e non restituita; se non conforme l API risponde 400 con codice ACCESSI_WEAK_PASSWORD.\",\n    minLength: 8,\n    maxLength: 100,\n    example: 'PasswordSicura123!',\n  })\n  @IsString({ message: 'La nuova password deve essere una stringa.' })\n  @Length(8, 100, {\n    message: 'La nuova password deve essere compresa tra 8 e 100 caratteri.',\n  })\n  newPassword!: string;\n}\n"]}

package/dist/accessi-module/Dtos/StatoRegistrazione.js.map

@@ -1 +1 @@
-{"version":3,"file":"StatoRegistrazione.js","sourceRoot":"","sources":["../../../src/accessi-module/Dtos/StatoRegistrazione.ts"],"names":[],"mappings":";;;AAAA,IAAY,kBAOX;AAPD,WAAY,kBAAkB;IAC5B,2DAAQ,CAAA;IACR,+DAAU,CAAA;IACV,8DAAU,CAAA;IACV,4DAAS,CAAA;IACT,gEAAW,CAAA;IACX,8DAAU,CAAA;AACZ,CAAC,EAPW,kBAAkB,kCAAlB,kBAAkB,QAO7B;AAEY,QAAA,wBAAwB,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAU,CAAC","sourcesContent":["export enum StatoRegistrazione {\r\n  NULL = 0,\r\n  INSERT = 5,\r\n  INVIO = 10,\r\n  CONF = 20,\r\n  DELETE = 50,\r\n  BLOCC = 99,\r\n}\r\n\r\nexport const StatoRegistrazioneValues = [0, 5, 10, 20, 50, 99] as const;\r\n"]}
+{"version":3,"file":"StatoRegistrazione.js","sourceRoot":"","sources":["../../../src/accessi-module/Dtos/StatoRegistrazione.ts"],"names":[],"mappings":";;;AAAA,IAAY,kBAOX;AAPD,WAAY,kBAAkB;IAC5B,2DAAQ,CAAA;IACR,+DAAU,CAAA;IACV,8DAAU,CAAA;IACV,4DAAS,CAAA;IACT,gEAAW,CAAA;IACX,8DAAU,CAAA;AACZ,CAAC,EAPW,kBAAkB,kCAAlB,kBAAkB,QAO7B;AAEY,QAAA,wBAAwB,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAU,CAAC","sourcesContent":["export enum StatoRegistrazione {\n  NULL = 0,\n  INSERT = 5,\n  INVIO = 10,\n  CONF = 20,\n  DELETE = 50,\n  BLOCC = 99,\n}\n\nexport const StatoRegistrazioneValues = [0, 5, 10, 20, 50, 99] as const;\n"]}

package/dist/accessi-module/Dtos/TipoAbilitazione.d.ts

@@ -1,3 +1,7 @@
+/**
+ * Livelli ordinati dei grant: il middleware consente un requisito quando il livello assegnato e maggiore o uguale.
+ * Le nuove configurazioni dovrebbero usare 10 (lettura) e 20 (scrittura); 30 resta per compatibilita dei dati legacy.
+ */
 export declare enum TipoAbilitazione {
     NESSUNA = 0,
     LETTURA = 10,

package/dist/accessi-module/Dtos/TipoAbilitazione.js

@@ -1,6 +1,10 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.TipoAbilitazione = void 0;
+/**
+ * Livelli ordinati dei grant: il middleware consente un requisito quando il livello assegnato e maggiore o uguale.
+ * Le nuove configurazioni dovrebbero usare 10 (lettura) e 20 (scrittura); 30 resta per compatibilita dei dati legacy.
+ */
 var TipoAbilitazione;
 (function (TipoAbilitazione) {
     TipoAbilitazione[TipoAbilitazione["NESSUNA"] = 0] = "NESSUNA";

package/dist/accessi-module/Dtos/TipoAbilitazione.js.map

@@ -1 +1 @@
-{"version":3,"file":"TipoAbilitazione.js","sourceRoot":"","sources":["../../../src/accessi-module/Dtos/TipoAbilitazione.ts"],"names":[],"mappings":";;;AAAA,IAAY,gBAKX;AALD,WAAY,gBAAgB;IACxB,6DAAW,CAAA;IACX,8DAAY,CAAA;IACZ,kEAAc,CAAA;IACd,8DAAY,CAAA;AAChB,CAAC,EALW,gBAAgB,gCAAhB,gBAAgB,QAK3B","sourcesContent":["export enum TipoAbilitazione {\r\n    NESSUNA = 0,\r\n    LETTURA = 10,\r\n    SCRITTURA = 20,\r\n    SPECIAL = 30\r\n}"]}
+{"version":3,"file":"TipoAbilitazione.js","sourceRoot":"","sources":["../../../src/accessi-module/Dtos/TipoAbilitazione.ts"],"names":[],"mappings":";;;AAAA;;;GAGG;AACH,IAAY,gBAKX;AALD,WAAY,gBAAgB;IACxB,6DAAW,CAAA;IACX,8DAAY,CAAA;IACZ,kEAAc,CAAA;IACd,8DAAY,CAAA;AAChB,CAAC,EALW,gBAAgB,gCAAhB,gBAAgB,QAK3B","sourcesContent":["/**\n * Livelli ordinati dei grant: il middleware consente un requisito quando il livello assegnato e maggiore o uguale.\n * Le nuove configurazioni dovrebbero usare 10 (lettura) e 20 (scrittura); 30 resta per compatibilita dei dati legacy.\n */\nexport enum TipoAbilitazione {\n    NESSUNA = 0,\n    LETTURA = 10,\n    SCRITTURA = 20,\n    SPECIAL = 30\n}\n"]}

package/dist/accessi-module/Dtos/TipoFiltro.js.map

@@ -1 +1 @@
-{"version":3,"file":"TipoFiltro.js","sourceRoot":"","sources":["../../../src/accessi-module/Dtos/TipoFiltro.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,6CAAmE;AACnE,yDAAyC;AACzC,qDAA2G;AAC3G,iDAA8C;AAE9C,MAAa,UAAU;IAAvB;QAyCE,eAAU,GAAW,CAAC,CAAC;IACzB,CAAC;CAAA;AA1CD,gCA0CC;AAlCC;IAPC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,mCAAmC;QAChD,OAAO,EAAE,CAAC;QACV,IAAI,EAAE,MAAM;KACb,CAAC;IACD,IAAA,uBAAK,GAAE;IACP,IAAA,4BAAU,GAAE;;0CACE;AAWf;IATC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,wBAAwB;QACrC,OAAO,EAAE,iBAAiB;QAC1B,SAAS,EAAE,EAAE;QACb,QAAQ,EAAE,KAAK;KAChB,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,EAAE,CAAC;IACb,IAAA,4BAAU,GAAE;;0CACG;AAWhB;IATC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,2BAA2B;QACxC,OAAO,EAAE,aAAa;QACtB,SAAS,EAAE,EAAE;QACb,QAAQ,EAAE,KAAK;KAChB,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,EAAE,CAAC;IACb,IAAA,4BAAU,GAAE;;0CACG;AAWhB;IATC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,kBAAkB;QAC/B,OAAO,EAAE,CAAC;QACV,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;QACZ,QAAQ,EAAE,KAAK;QACf,OAAO,EAAE,CAAC;KACX,CAAC;IACD,IAAA,sBAAI,EAAC,CAAC,CAAC,EAAC,CAAC,CAAC,CAAC;IACX,IAAA,4BAAU,GAAE;;8CACU;AAGzB,MAAa,iBAAkB,SAAQ,2BAAY;CAKlD;AALD,8CAKC;AADG;IAHG,IAAA,qBAAW,EAAC,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAChD,IAAA,gCAAc,EAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC9B,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,UAAU,CAAC;;iDACJ;AAGzB,MAAa,gBAAgB;CAS5B;AATD,4CASC;AADG;IAPC,IAAA,6BAAmB,EAAC;QACjB,WAAW,EAAE,uBAAuB;QACpC,IAAI,EAAE,CAAC,CAAC,EAAC,CAAC,CAAC;KACd,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,sBAAI,EAAC,CAAC,CAAC,EAAC,CAAC,CAAC,CAAC;IACX,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,MAAM,CAAC;;oDACD","sourcesContent":["import { ApiProperty, ApiPropertyOptional } from '@nestjs/swagger';\r\nimport { Type } from 'class-transformer';\r\nimport { IsIn, IsInt, IsNotEmpty, IsOptional, IsString, MaxLength, ValidateNested } from 'class-validator';\r\nimport { BaseResponse } from './BaseResponse';\r\n\r\nexport class TipoFiltro {\r\n  @ApiProperty({\r\n    description: 'Identificativo del tipo di filtro',\r\n    example: 1,\r\n    type: Number,\r\n  })\r\n  @IsInt()\r\n  @IsNotEmpty()\r\n  tipFil: number;\r\n\r\n  @ApiProperty({\r\n    description: 'Descrizione del filtro',\r\n    example: 'Filtro standard',\r\n    maxLength: 20,\r\n    required: false,\r\n  })\r\n  @IsString()\r\n  @MaxLength(20)\r\n  @IsOptional()\r\n  desFil?: string;\r\n\r\n  @ApiProperty({\r\n    description: 'Campo associato al filtro',\r\n    example: 'campoValore',\r\n    maxLength: 20,\r\n    required: false,\r\n  })\r\n  @IsString()\r\n  @MaxLength(20)\r\n  @IsOptional()\r\n  fldFil?: string;\r\n\r\n  @ApiProperty({\r\n    description: 'Filtro abilitato',\r\n    example: 1,\r\n    enum: [0, 1],\r\n    required: false,\r\n    default: 1,\r\n  })\r\n  @IsIn([0,1])\r\n  @IsOptional()\r\n  flgEnabled?: 0 | 1 = 1;\r\n}\r\n\r\nexport class GetFiltriResponse extends BaseResponse {\r\n      @ApiProperty({ type: TipoFiltro, isArray: true })\r\n      @ValidateNested({ each: true })\r\n      @Type(() => TipoFiltro)\r\n    Result : TipoFiltro[]\r\n}\r\n\r\nexport class GetFiltriRequest {\r\n    @ApiPropertyOptional({\r\n        description: 'Mostra solo abilitati',\r\n        enum: [0,1]\r\n    })\r\n    @IsOptional()\r\n    @IsIn([0,1])\r\n    @Type(() => Number)\r\n    flgEnabled?: 0 | 1\r\n}\r\n\r\n\r\n"]}
+{"version":3,"file":"TipoFiltro.js","sourceRoot":"","sources":["../../../src/accessi-module/Dtos/TipoFiltro.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,6CAAmE;AACnE,yDAAyC;AACzC,qDAA2G;AAC3G,iDAA8C;AAE9C,MAAa,UAAU;IAAvB;QAyCE,eAAU,GAAW,CAAC,CAAC;IACzB,CAAC;CAAA;AA1CD,gCA0CC;AAlCC;IAPC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,mCAAmC;QAChD,OAAO,EAAE,CAAC;QACV,IAAI,EAAE,MAAM;KACb,CAAC;IACD,IAAA,uBAAK,GAAE;IACP,IAAA,4BAAU,GAAE;;0CACG;AAWhB;IATC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,wBAAwB;QACrC,OAAO,EAAE,iBAAiB;QAC1B,SAAS,EAAE,EAAE;QACb,QAAQ,EAAE,KAAK;KAChB,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,EAAE,CAAC;IACb,IAAA,4BAAU,GAAE;;0CACG;AAWhB;IATC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,2BAA2B;QACxC,OAAO,EAAE,aAAa;QACtB,SAAS,EAAE,EAAE;QACb,QAAQ,EAAE,KAAK;KAChB,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,EAAE,CAAC;IACb,IAAA,4BAAU,GAAE;;0CACG;AAWhB;IATC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,kBAAkB;QAC/B,OAAO,EAAE,CAAC;QACV,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;QACZ,QAAQ,EAAE,KAAK;QACf,OAAO,EAAE,CAAC;KACX,CAAC;IACD,IAAA,sBAAI,EAAC,CAAC,CAAC,EAAC,CAAC,CAAC,CAAC;IACX,IAAA,4BAAU,GAAE;;8CACU;AAGzB,MAAa,iBAAkB,SAAQ,2BAAY;CAKlD;AALD,8CAKC;AADG;IAHG,IAAA,qBAAW,EAAC,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAChD,IAAA,gCAAc,EAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC9B,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,UAAU,CAAC;;iDACH;AAG1B,MAAa,gBAAgB;CAS5B;AATD,4CASC;AADG;IAPC,IAAA,6BAAmB,EAAC;QACjB,WAAW,EAAE,uBAAuB;QACpC,IAAI,EAAE,CAAC,CAAC,EAAC,CAAC,CAAC;KACd,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,sBAAI,EAAC,CAAC,CAAC,EAAC,CAAC,CAAC,CAAC;IACX,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,MAAM,CAAC;;oDACD","sourcesContent":["import { ApiProperty, ApiPropertyOptional } from '@nestjs/swagger';\nimport { Type } from 'class-transformer';\nimport { IsIn, IsInt, IsNotEmpty, IsOptional, IsString, MaxLength, ValidateNested } from 'class-validator';\nimport { BaseResponse } from './BaseResponse';\n\nexport class TipoFiltro {\n  @ApiProperty({\n    description: 'Identificativo del tipo di filtro',\n    example: 1,\n    type: Number,\n  })\n  @IsInt()\n  @IsNotEmpty()\n  tipFil!: number;\n\n  @ApiProperty({\n    description: 'Descrizione del filtro',\n    example: 'Filtro standard',\n    maxLength: 20,\n    required: false,\n  })\n  @IsString()\n  @MaxLength(20)\n  @IsOptional()\n  desFil?: string;\n\n  @ApiProperty({\n    description: 'Campo associato al filtro',\n    example: 'campoValore',\n    maxLength: 20,\n    required: false,\n  })\n  @IsString()\n  @MaxLength(20)\n  @IsOptional()\n  fldFil?: string;\n\n  @ApiProperty({\n    description: 'Filtro abilitato',\n    example: 1,\n    enum: [0, 1],\n    required: false,\n    default: 1,\n  })\n  @IsIn([0,1])\n  @IsOptional()\n  flgEnabled?: 0 | 1 = 1;\n}\n\nexport class GetFiltriResponse extends BaseResponse {\n      @ApiProperty({ type: TipoFiltro, isArray: true })\n      @ValidateNested({ each: true })\n      @Type(() => TipoFiltro)\n    Result !: TipoFiltro[]\n}\n\nexport class GetFiltriRequest {\n    @ApiPropertyOptional({\n        description: 'Mostra solo abilitati',\n        enum: [0,1]\n    })\n    @IsOptional()\n    @IsIn([0,1])\n    @Type(() => Number)\n    flgEnabled?: 0 | 1\n}\n\n\n"]}

package/dist/accessi-module/Dtos/TokenResult.js.map

@@ -1 +1 @@
-{"version":3,"file":"TokenResult.js","sourceRoot":"","sources":["../../../src/accessi-module/Dtos/TokenResult.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,6CAA8C;AAE9C,MAAa,WAAW;CAmBvB;AAnBD,kCAmBC;AAdG;IAJC,IAAA,qBAAW,EAAC;QACT,WAAW,EAAE,wCAAwC;QACrD,OAAO,EAAE,MAAM;KAClB,CAAC;;8CACgB;AAMlB;IAJC,IAAA,qBAAW,EAAC;QACT,WAAW,EAAE,8BAA8B;QAC3C,OAAO,EAAE,yCAAyC;KACrD,CAAC;;0CACY;AAOd;IALC,IAAA,qBAAW,EAAC;QACT,WAAW,EAAE,iCAAiC;QAC9C,IAAI,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC;QACzB,OAAO,EAAE,QAAQ;KACpB,CAAC;;yCACuB","sourcesContent":["import { ApiProperty } from \"@nestjs/swagger\";\r\n\r\nexport class TokenResult {\r\n    @ApiProperty({\r\n        description: \"Tempo di scadenza del token in secondi\",\r\n        example: \"3600\"\r\n    })\r\n    expiresIn: string;\r\n\r\n    @ApiProperty({\r\n        description: \"Valore del token JWT o Basic\",\r\n        example: \"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...\"\r\n    })\r\n    value: string;\r\n\r\n    @ApiProperty({\r\n        description: \"Tipo di token di autenticazione\",\r\n        enum: [\"Bearer\", \"Basic\"],\r\n        example: \"Bearer\"\r\n    })\r\n    type: \"Bearer\" | \"Basic\";\r\n}\r\n"]}
+{"version":3,"file":"TokenResult.js","sourceRoot":"","sources":["../../../src/accessi-module/Dtos/TokenResult.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,6CAA8C;AAE9C,MAAa,WAAW;CAmBvB;AAnBD,kCAmBC;AAdG;IAJC,IAAA,qBAAW,EAAC;QACT,WAAW,EAAE,wCAAwC;QACrD,OAAO,EAAE,MAAM;KAClB,CAAC;;8CACiB;AAMnB;IAJC,IAAA,qBAAW,EAAC;QACT,WAAW,EAAE,8BAA8B;QAC3C,OAAO,EAAE,yCAAyC;KACrD,CAAC;;0CACa;AAOf;IALC,IAAA,qBAAW,EAAC;QACT,WAAW,EAAE,iCAAiC;QAC9C,IAAI,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC;QACzB,OAAO,EAAE,QAAQ;KACpB,CAAC;;yCACwB","sourcesContent":["import { ApiProperty } from \"@nestjs/swagger\";\n\nexport class TokenResult {\n    @ApiProperty({\n        description: \"Tempo di scadenza del token in secondi\",\n        example: \"3600\"\n    })\n    expiresIn!: string;\n\n    @ApiProperty({\n        description: \"Valore del token JWT o Basic\",\n        example: \"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...\"\n    })\n    value!: string;\n\n    @ApiProperty({\n        description: \"Tipo di token di autenticazione\",\n        enum: [\"Bearer\", \"Basic\"],\n        example: \"Bearer\"\n    })\n    type!: \"Bearer\" | \"Basic\";\n}\n"]}

package/dist/accessi-module/Dtos/TwoFactorDtos.d.ts

@@ -0,0 +1,14 @@
+export declare class TwoFactorChallengeDto {
+    twoFactorRequired: true;
+    challengeId: string;
+    expiresAt: string;
+    resendAfterSeconds: number;
+    method: 'email';
+}
+export declare class ResendTwoFactorRequest {
+    challengeId: string;
+}
+export declare class VerifyTwoFactorRequest extends ResendTwoFactorRequest {
+    code: string;
+    scope?: string;
+}

package/dist/accessi-module/Dtos/TwoFactorDtos.js

@@ -0,0 +1,71 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.VerifyTwoFactorRequest = exports.ResendTwoFactorRequest = exports.TwoFactorChallengeDto = void 0;
+const swagger_1 = require("@nestjs/swagger");
+const class_validator_1 = require("class-validator");
+class TwoFactorChallengeDto {
+    constructor() {
+        this.twoFactorRequired = true;
+        this.method = 'email';
+    }
+}
+exports.TwoFactorChallengeDto = TwoFactorChallengeDto;
+__decorate([
+    (0, swagger_1.ApiProperty)({ enum: [true], description: 'Il login non e completo: nessun JWT e stato emesso.' }),
+    __metadata("design:type", Boolean)
+], TwoFactorChallengeDto.prototype, "twoFactorRequired", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({ description: 'Identificativo opaco della verifica, non utilizzabile come Bearer token.' }),
+    __metadata("design:type", String)
+], TwoFactorChallengeDto.prototype, "challengeId", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({ format: 'date-time' }),
+    __metadata("design:type", String)
+], TwoFactorChallengeDto.prototype, "expiresAt", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({ example: 60, description: 'Secondi minimi prima del prossimo reinvio.' }),
+    __metadata("design:type", Number)
+], TwoFactorChallengeDto.prototype, "resendAfterSeconds", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({ enum: ['email'] }),
+    __metadata("design:type", String)
+], TwoFactorChallengeDto.prototype, "method", void 0);
+class ResendTwoFactorRequest {
+}
+exports.ResendTwoFactorRequest = ResendTwoFactorRequest;
+__decorate([
+    (0, swagger_1.ApiProperty)({ minLength: 64, maxLength: 64 }),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.Matches)(/^[a-f0-9]{64}$/),
+    __metadata("design:type", String)
+], ResendTwoFactorRequest.prototype, "challengeId", void 0);
+class VerifyTwoFactorRequest extends ResendTwoFactorRequest {
+}
+exports.VerifyTwoFactorRequest = VerifyTwoFactorRequest;
+__decorate([
+    (0, swagger_1.ApiProperty)({ description: 'Codice monouso ricevuto via email.', example: '012345', pattern: '^\\d{6}$' }),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.Matches)(/^\d{6}$/, { message: 'Il codice deve contenere 6 cifre.' }),
+    __metadata("design:type", String)
+], VerifyTwoFactorRequest.prototype, "code", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        required: false,
+        description: 'Scope applicativi (CSV) con cui filtrare i grant restituiti. Assente = tutti.',
+        example: 'STEX',
+    }),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.Matches)(/^[A-Za-z0-9_,]*$/, { message: 'Scope non valido: usare codici separati da virgola.' }),
+    __metadata("design:type", String)
+], VerifyTwoFactorRequest.prototype, "scope", void 0);
+//# sourceMappingURL=TwoFactorDtos.js.map

package/dist/accessi-module/Dtos/TwoFactorDtos.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"TwoFactorDtos.js","sourceRoot":"","sources":["../../../src/accessi-module/Dtos/TwoFactorDtos.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,6CAA8C;AAC9C,qDAAgE;AAEhE,MAAa,qBAAqB;IAAlC;QAEE,sBAAiB,GAAS,IAAI,CAAC;QAY/B,WAAM,GAAY,OAAO,CAAC;IAC5B,CAAC;CAAA;AAfD,sDAeC;AAbC;IADC,IAAA,qBAAW,EAAC,EAAE,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,qDAAqD,EAAE,CAAC;;gEACnE;AAG/B;IADC,IAAA,qBAAW,EAAC,EAAE,WAAW,EAAE,0EAA0E,EAAE,CAAC;;0DACpF;AAGrB;IADC,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;;wDAClB;AAGnB;IADC,IAAA,qBAAW,EAAC,EAAE,OAAO,EAAE,EAAE,EAAE,WAAW,EAAE,4CAA4C,EAAE,CAAC;;iEAC5D;AAG5B;IADC,IAAA,qBAAW,EAAC,EAAE,IAAI,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;;qDACP;AAG5B,MAAa,sBAAsB;CAKlC;AALD,wDAKC;AADC;IAHC,IAAA,qBAAW,EAAC,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IAC7C,IAAA,0BAAQ,GAAE;IACV,IAAA,yBAAO,EAAC,gBAAgB,CAAC;;2DACL;AAGvB,MAAa,sBAAuB,SAAQ,sBAAsB;CAejE;AAfD,wDAeC;AAXC;IAHC,IAAA,qBAAW,EAAC,EAAE,WAAW,EAAE,oCAAoC,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;IAC1G,IAAA,0BAAQ,GAAE;IACV,IAAA,yBAAO,EAAC,SAAS,EAAE,EAAE,OAAO,EAAE,mCAAmC,EAAE,CAAC;;oDACvD;AAUd;IARC,IAAA,qBAAW,EAAC;QACX,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,+EAA+E;QAC5F,OAAO,EAAE,MAAM;KAChB,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;IACV,IAAA,yBAAO,EAAC,kBAAkB,EAAE,EAAE,OAAO,EAAE,qDAAqD,EAAE,CAAC;;qDACjF","sourcesContent":["import { ApiProperty } from '@nestjs/swagger';\nimport { IsOptional, IsString, Matches } from 'class-validator';\n\nexport class TwoFactorChallengeDto {\n  @ApiProperty({ enum: [true], description: 'Il login non e completo: nessun JWT e stato emesso.' })\n  twoFactorRequired: true = true;\n\n  @ApiProperty({ description: 'Identificativo opaco della verifica, non utilizzabile come Bearer token.' })\n  challengeId!: string;\n\n  @ApiProperty({ format: 'date-time' })\n  expiresAt!: string;\n\n  @ApiProperty({ example: 60, description: 'Secondi minimi prima del prossimo reinvio.' })\n  resendAfterSeconds!: number;\n\n  @ApiProperty({ enum: ['email'] })\n  method: 'email' = 'email';\n}\n\nexport class ResendTwoFactorRequest {\n  @ApiProperty({ minLength: 64, maxLength: 64 })\n  @IsString()\n  @Matches(/^[a-f0-9]{64}$/)\n  challengeId!: string;\n}\n\nexport class VerifyTwoFactorRequest extends ResendTwoFactorRequest {\n  @ApiProperty({ description: 'Codice monouso ricevuto via email.', example: '012345', pattern: '^\\\\d{6}$' })\n  @IsString()\n  @Matches(/^\\d{6}$/, { message: 'Il codice deve contenere 6 cifre.' })\n  code!: string;\n\n  @ApiProperty({\n    required: false,\n    description: 'Scope applicativi (CSV) con cui filtrare i grant restituiti. Assente = tutti.',\n    example: 'STEX',\n  })\n  @IsOptional()\n  @IsString()\n  @Matches(/^[A-Za-z0-9_,]*$/, { message: 'Scope non valido: usare codici separati da virgola.' })\n  scope?: string;\n}\n"]}

package/dist/accessi-module/Dtos/UpdateEnabledStatusRequest.js.map

@@ -1 +1 @@
-{"version":3,"file":"UpdateEnabledStatusRequest.js","sourceRoot":"","sources":["../../../src/accessi-module/Dtos/UpdateEnabledStatusRequest.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,6CAA8C;AAC9C,qDAA4C;AAE5C,MAAa,0BAA0B;CAQtC;AARD,gEAQC;AADC;IANC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,6BAA6B;QAC1C,OAAO,EAAE,IAAI;QACb,IAAI,EAAE,OAAO;KACd,CAAC;IACD,IAAA,2BAAS,EAAC,EAAE,OAAO,EAAE,4CAA4C,EAAE,CAAC;;2DACpD","sourcesContent":["import { ApiProperty } from '@nestjs/swagger';\r\nimport { IsBoolean } from 'class-validator';\r\n\r\nexport class UpdateEnabledStatusRequest {\r\n  @ApiProperty({\r\n    description: 'Nuovo stato di abilitazione',\r\n    example: true,\r\n    type: Boolean,\r\n  })\r\n  @IsBoolean({ message: 'Il valore di enabled deve essere booleano.' })\r\n  enabled: boolean;\r\n}\r\n"]}
+{"version":3,"file":"UpdateEnabledStatusRequest.js","sourceRoot":"","sources":["../../../src/accessi-module/Dtos/UpdateEnabledStatusRequest.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,6CAA8C;AAC9C,qDAA4C;AAE5C,MAAa,0BAA0B;CAQtC;AARD,gEAQC;AADC;IANC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,6BAA6B;QAC1C,OAAO,EAAE,IAAI;QACb,IAAI,EAAE,OAAO;KACd,CAAC;IACD,IAAA,2BAAS,EAAC,EAAE,OAAO,EAAE,4CAA4C,EAAE,CAAC;;2DACnD","sourcesContent":["import { ApiProperty } from '@nestjs/swagger';\nimport { IsBoolean } from 'class-validator';\n\nexport class UpdateEnabledStatusRequest {\n  @ApiProperty({\n    description: 'Nuovo stato di abilitazione',\n    example: true,\n    type: Boolean,\n  })\n  @IsBoolean({ message: 'Il valore di enabled deve essere booleano.' })\n  enabled!: boolean;\n}\n"]}

package/dist/accessi-module/Dtos/UserDto.d.ts

@@ -2,6 +2,11 @@ import { StatoRegistrazione } from './StatoRegistrazione';
 import { Permission } from './Permission';
 import { FiltriUtente } from './FiltriUtente';
 declare const UserDto_base: import("@nestjs/common").Type<Omit<FiltriUtente, "codUte">>;
+/**
+ * Profilo Accessi con dati anagrafici, policy di accesso e filtri legacy.
+ * I campi amministrativi (`flagSuper`, `flagAdmin`, ruoli, grant e policy password) devono essere
+ * accettati soltanto da endpoint e flussi backend esplicitamente privilegiati.
+ */
 export declare class UserDto extends UserDto_base {
     codiceUtente: number;
     email: string;
@@ -16,14 +21,14 @@ export declare class UserDto extends UserDto_base {
     nome?: string;
     avatar?: string | null;
     flagDueFattori?: boolean;
+    passwordlessLoginEnabled?: boolean;
     codiceLingua?: string;
     cellulare?: string | null;
+    paginaDefault?: string | null;
     flagSuper?: boolean;
-    flagAdminConfigurator?: boolean;
-    paginaDefault?: string;
-    nummac?: number;
+    flagAdmin?: boolean;
+    passwordLoginEnabled?: boolean;
     jsonMetadata?: string;
-    ragSocCli?: string;
     roles?: number[];
     permissions?: Permission[];
 }