@futdevpro/ccap 1.1.2704 → 1.1.2740

package/server/build/src/_modules/external-sessions/_modules/claude-code/_routes/cc-account/cc-account-route.control-service.js

@@ -0,0 +1,137 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CC_AccountRoute_ControlService = void 0;
+const fsm_dynamo_1 = require("@futdevpro/fsm-dynamo");
+const nts_dynamo_1 = require("@futdevpro/nts-dynamo");
+const cc_account_pool_control_service_1 = require("../../_services/core/account/cc-account-pool.control-service");
+/**
+ * REST handler delegáció a CC Account endpoint-okhoz
+ * (REQ-CC-USAGE-DASHBOARD-001 Slice 1).
+ *
+ * REQ-SYS-CONTROLLER-THIN: a controller csak endpoint-regisztráció és
+ * delegáció — a logika itt él (input parsing + pool control-service hívás).
+ *
+ * Validation review-fixek (cycle 836):
+ *   - 3.4 security: `accountKey` URL-param 12-hex regex (DoS-vector + Mongo-filter clean).
+ *   - M3: `displayName` max-length cap (200 char).
+   *   - 6.1 security: `displayName` kontroll-karakter szuro (range U+0000..U+001F + U+007F).
+ */
+class CC_AccountRoute_ControlService extends nts_dynamo_1.DyNTS_SingletonService {
+    /** Stable account-key 12-hex char (a `CC_AccountDiscovery_Util.computeAccountKey` output-ja). */
+    static ACCOUNT_KEY_PATTERN = /^[a-f0-9]{12}$/;
+    /** displayName max hossz — limit a `/list` response méretére (Dashboard pollolható). */
+    static DISPLAY_NAME_MAX_LENGTH = 200;
+    /** Kontroll-karakter regex — sose engedjük be DB-be (későbbi UI-render zavart okozna). */
+    static CONTROL_CHAR_PATTERN = /[\u0000-\u001F\u007F]/;
+    static getInstance() {
+        return CC_AccountRoute_ControlService.getSingletonInstance();
+    }
+    accountPool_CS = cc_account_pool_control_service_1.CC_AccountPool_ControlService.getInstance();
+    /** GET /cc-account/list — cross-instance account-lista. */
+    async handleListAccounts() {
+        const items = await this.accountPool_CS.listAccounts();
+        return { items: items };
+    }
+    /**
+     * POST /cc-account/refresh — a hívó CCAP instance-en újrafelfedezi a
+     * lokálisan elérhető credential-fájlokat.
+     */
+    async handleRefreshLocalAccounts() {
+        return await this.accountPool_CS.refreshLocalAccounts();
+    }
+    /** GET /cc-account/:accountKey — egy account részletek. */
+    async handleGetAccount(params) {
+        this.validateAccountKeyFormat(params.accountKey);
+        const account = await this.accountPool_CS.getAccountByKey(params.accountKey);
+        if (account == null) {
+            throw new fsm_dynamo_1.DyFM_Error({
+                message: `CC Account not found by key: ${params.accountKey}`,
+                errorCode: 'CCAP-CC-ACCOUNT-NOT-FOUND',
+                status: 404,
+                error: new Error(`CC Account not found by key: ${params.accountKey}`),
+                additionalContent: { accountKey: params.accountKey },
+            });
+        }
+        return account;
+    }
+    /** PATCH /cc-account/:accountKey — user-readable display-name átírása. */
+    async handleRenameAccount(params) {
+        this.validateAccountKeyFormat(params.accountKey);
+        const displayNameRaw = params.body?.displayName;
+        if (typeof displayNameRaw !== 'string') {
+            throw new fsm_dynamo_1.DyFM_Error({
+                message: 'CC Account rename: displayName is required and must be a string.',
+                errorCode: 'CCAP-CC-ACCOUNT-RENAME-INVALID',
+                status: 400,
+                error: new Error('Invalid displayName: not a string'),
+                additionalContent: { accountKey: params.accountKey, providedDisplayNameType: typeof displayNameRaw },
+            });
+        }
+        const trimmed = displayNameRaw.trim();
+        if (trimmed === '') {
+            throw new fsm_dynamo_1.DyFM_Error({
+                message: 'CC Account rename: displayName must be non-empty after trim.',
+                errorCode: 'CCAP-CC-ACCOUNT-RENAME-INVALID',
+                status: 400,
+                error: new Error('Invalid displayName: empty'),
+                additionalContent: { accountKey: params.accountKey, rawLength: displayNameRaw.length },
+            });
+        }
+        if (trimmed.length > CC_AccountRoute_ControlService.DISPLAY_NAME_MAX_LENGTH) {
+            throw new fsm_dynamo_1.DyFM_Error({
+                message: `CC Account rename: displayName exceeds max length`
+                    + ` (${CC_AccountRoute_ControlService.DISPLAY_NAME_MAX_LENGTH} chars).`,
+                errorCode: 'CCAP-CC-ACCOUNT-RENAME-INVALID',
+                status: 400,
+                error: new Error(`Invalid displayName: too long (${trimmed.length} chars)`),
+                additionalContent: {
+                    accountKey: params.accountKey,
+                    providedLength: trimmed.length,
+                    maxLength: CC_AccountRoute_ControlService.DISPLAY_NAME_MAX_LENGTH,
+                },
+            });
+        }
+        if (CC_AccountRoute_ControlService.CONTROL_CHAR_PATTERN.test(trimmed)) {
+            throw new fsm_dynamo_1.DyFM_Error({
+                message: 'CC Account rename: displayName must not contain control characters.',
+                errorCode: 'CCAP-CC-ACCOUNT-RENAME-INVALID',
+                status: 400,
+                error: new Error('Invalid displayName: contains control characters'),
+                additionalContent: { accountKey: params.accountKey },
+            });
+        }
+        const updated = await this.accountPool_CS.renameAccount(params.accountKey, trimmed);
+        if (updated == null) {
+            throw new fsm_dynamo_1.DyFM_Error({
+                message: `CC Account not found for rename: ${params.accountKey}`,
+                errorCode: 'CCAP-CC-ACCOUNT-NOT-FOUND',
+                status: 404,
+                error: new Error(`CC Account not found for rename: ${params.accountKey}`),
+                additionalContent: { accountKey: params.accountKey },
+            });
+        }
+        return updated;
+    }
+    /**
+     * `accountKey` URL-param formátum-validáció (3.4 security review-fix):
+     * - 12 hex char a `computeAccountKey` output-ja.
+     * - Bármi más → 400 (DoS / Mongo-filter clean / félrevezetett kérés-elutasítás).
+     */
+    validateAccountKeyFormat(accountKey) {
+        if (!CC_AccountRoute_ControlService.ACCOUNT_KEY_PATTERN.test(accountKey)) {
+            throw new fsm_dynamo_1.DyFM_Error({
+                message: `CC Account key has invalid format`
+                    + ` (expected 12-hex, got ${accountKey.length} chars).`,
+                errorCode: 'CCAP-CC-ACCOUNT-KEY-INVALID',
+                status: 400,
+                error: new Error(`Invalid accountKey format: ${accountKey.length} chars`),
+                additionalContent: {
+                    providedLength: accountKey.length,
+                    expectedPattern: '^[a-f0-9]{12}$',
+                },
+            });
+        }
+    }
+}
+exports.CC_AccountRoute_ControlService = CC_AccountRoute_ControlService;
+//# sourceMappingURL=cc-account-route.control-service.js.map

package/server/build/src/_modules/external-sessions/_modules/claude-code/_routes/cc-account/cc-account-route.control-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cc-account-route.control-service.js","sourceRoot":"","sources":["../../../../../../../../src/_modules/external-sessions/_modules/claude-code/_routes/cc-account/cc-account-route.control-service.ts"],"names":[],"mappings":";;;AAAA,sDAAmD;AACnD,sDAA+D;AAG/D,kHAA6G;AAE7G;;;;;;;;;;;GAWG;AACH,MAAa,8BAA+B,SAAQ,mCAAsB;IAExE,iGAAiG;IACjG,MAAM,CAAU,mBAAmB,GAAW,gBAAgB,CAAC;IAE/D,wFAAwF;IACxF,MAAM,CAAU,uBAAuB,GAAW,GAAG,CAAC;IAEtD,0FAA0F;IAC1F,MAAM,CAAU,oBAAoB,GAAW,uBAAuB,CAAC;IAEvE,MAAM,CAAC,WAAW;QAChB,OAAO,8BAA8B,CAAC,oBAAoB,EAAoC,CAAC;IACjG,CAAC;IAEgB,cAAc,GAC7B,+DAA6B,CAAC,WAAW,EAAE,CAAC;IAE9C,2DAA2D;IAC3D,KAAK,CAAC,kBAAkB;QACtB,MAAM,KAAK,GAAiB,MAAM,IAAI,CAAC,cAAc,CAAC,YAAY,EAAE,CAAC;QACrE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IAC1B,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,0BAA0B;QAC9B,OAAO,MAAM,IAAI,CAAC,cAAc,CAAC,oBAAoB,EAAE,CAAC;IAC1D,CAAC;IAED,2DAA2D;IAC3D,KAAK,CAAC,gBAAgB,CAAC,MAA8B;QACnD,IAAI,CAAC,wBAAwB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACjD,MAAM,OAAO,GAAsB,MAAM,IAAI,CAAC,cAAc,CAAC,eAAe,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAChG,IAAI,OAAO,IAAI,IAAI,EAAE,CAAC;YACpB,MAAM,IAAI,uBAAU,CAAC;gBACnB,OAAO,EAAE,gCAAgC,MAAM,CAAC,UAAU,EAAE;gBAC5D,SAAS,EAAE,2BAA2B;gBACtC,MAAM,EAAE,GAAG;gBACX,KAAK,EAAE,IAAI,KAAK,CAAC,gCAAgC,MAAM,CAAC,UAAU,EAAE,CAAC;gBACrE,iBAAiB,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE;aACrD,CAAC,CAAC;QACL,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,0EAA0E;IAC1E,KAAK,CAAC,mBAAmB,CAAC,MAGzB;QACC,IAAI,CAAC,wBAAwB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAEjD,MAAM,cAAc,GAAY,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC;QACzD,IAAI,OAAO,cAAc,KAAK,QAAQ,EAAE,CAAC;YACvC,MAAM,IAAI,uBAAU,CAAC;gBACnB,OAAO,EAAE,kEAAkE;gBAC3E,SAAS,EAAE,gCAAgC;gBAC3C,MAAM,EAAE,GAAG;gBACX,KAAK,EAAE,IAAI,KAAK,CAAC,mCAAmC,CAAC;gBACrD,iBAAiB,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,uBAAuB,EAAE,OAAO,cAAc,EAAE;aACrG,CAAC,CAAC;QACL,CAAC;QAED,MAAM,OAAO,GAAW,cAAc,CAAC,IAAI,EAAE,CAAC;QAC9C,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;YACnB,MAAM,IAAI,uBAAU,CAAC;gBACnB,OAAO,EAAE,8DAA8D;gBACvE,SAAS,EAAE,gCAAgC;gBAC3C,MAAM,EAAE,GAAG;gBACX,KAAK,EAAE,IAAI,KAAK,CAAC,4BAA4B,CAAC;gBAC9C,iBAAiB,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,SAAS,EAAE,cAAc,CAAC,MAAM,EAAE;aACvF,CAAC,CAAC;QACL,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,GAAG,8BAA8B,CAAC,uBAAuB,EAAE,CAAC;YAC5E,MAAM,IAAI,uBAAU,CAAC;gBACnB,OAAO,EACL,mDAAmD;sBACjD,KAAK,8BAA8B,CAAC,uBAAuB,UAAU;gBACzE,SAAS,EAAE,gCAAgC;gBAC3C,MAAM,EAAE,GAAG;gBACX,KAAK,EAAE,IAAI,KAAK,CAAC,kCAAkC,OAAO,CAAC,MAAM,SAAS,CAAC;gBAC3E,iBAAiB,EAAE;oBACjB,UAAU,EAAE,MAAM,CAAC,UAAU;oBAC7B,cAAc,EAAE,OAAO,CAAC,MAAM;oBAC9B,SAAS,EAAE,8BAA8B,CAAC,uBAAuB;iBAClE;aACF,CAAC,CAAC;QACL,CAAC;QACD,IAAI,8BAA8B,CAAC,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACtE,MAAM,IAAI,uBAAU,CAAC;gBACnB,OAAO,EAAE,qEAAqE;gBAC9E,SAAS,EAAE,gCAAgC;gBAC3C,MAAM,EAAE,GAAG;gBACX,KAAK,EAAE,IAAI,KAAK,CAAC,kDAAkD,CAAC;gBACpE,iBAAiB,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE;aACrD,CAAC,CAAC;QACL,CAAC;QAED,MAAM,OAAO,GAAsB,MAAM,IAAI,CAAC,cAAc,CAAC,aAAa,CACxE,MAAM,CAAC,UAAU,EACjB,OAAO,CACR,CAAC;QACF,IAAI,OAAO,IAAI,IAAI,EAAE,CAAC;YACpB,MAAM,IAAI,uBAAU,CAAC;gBACnB,OAAO,EAAE,oCAAoC,MAAM,CAAC,UAAU,EAAE;gBAChE,SAAS,EAAE,2BAA2B;gBACtC,MAAM,EAAE,GAAG;gBACX,KAAK,EAAE,IAAI,KAAK,CAAC,oCAAoC,MAAM,CAAC,UAAU,EAAE,CAAC;gBACzE,iBAAiB,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE;aACrD,CAAC,CAAC;QACL,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;;;OAIG;IACK,wBAAwB,CAAC,UAAkB;QACjD,IAAI,CAAC,8BAA8B,CAAC,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YACzE,MAAM,IAAI,uBAAU,CAAC;gBACnB,OAAO,EACL,mCAAmC;sBACjC,0BAA0B,UAAU,CAAC,MAAM,UAAU;gBACzD,SAAS,EAAE,6BAA6B;gBACxC,MAAM,EAAE,GAAG;gBACX,KAAK,EAAE,IAAI,KAAK,CAAC,8BAA8B,UAAU,CAAC,MAAM,QAAQ,CAAC;gBACzE,iBAAiB,EAAE;oBACjB,cAAc,EAAE,UAAU,CAAC,MAAM;oBACjC,eAAe,EAAE,gBAAgB;iBAClC;aACF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;;AAzIH,wEA0IC"}

package/server/build/src/_modules/external-sessions/_modules/claude-code/_routes/cc-account/cc-account-route.control-service.spec.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=cc-account-route.control-service.spec.d.ts.map

package/server/build/src/_modules/external-sessions/_modules/claude-code/_routes/cc-account/cc-account-route.control-service.spec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cc-account-route.control-service.spec.d.ts","sourceRoot":"","sources":["../../../../../../../../src/_modules/external-sessions/_modules/claude-code/_routes/cc-account/cc-account-route.control-service.spec.ts"],"names":[],"mappings":""}

package/server/build/src/_modules/external-sessions/_modules/claude-code/_routes/cc-account/cc-account-route.control-service.spec.js

@@ -0,0 +1,192 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const fsm_dynamo_1 = require("@futdevpro/fsm-dynamo");
+const cc_account_data_model_1 = require("../../_models/data-models/cc-account.data-model");
+const cc_account_route_control_service_1 = require("./cc-account-route.control-service");
+/**
+ * CC_AccountRoute_ControlService spec — REQ-CC-USAGE-DASHBOARD-001 Slice 1
+ * (cycle 836 — review-fix: hiányzó coverage).
+ *
+ * Object.create + property-stub workaround a singleton wiring kihagyásához.
+ * A 4 handler happy-path + validation-fail / not-found ágait fedjük le.
+ */
+describe('CC_AccountRoute_ControlService', () => {
+    const VALID_KEY = 'a1b2c3d4e5f6';
+    const INVALID_KEY = 'too-short';
+    function buildStub() {
+        const rcs = Object.create(cc_account_route_control_service_1.CC_AccountRoute_ControlService.prototype);
+        const listSpy = jasmine.createSpy('listAccounts')
+            .and.returnValue(Promise.resolve([]));
+        const refreshSpy = jasmine.createSpy('refreshLocalAccounts')
+            .and.returnValue(Promise.resolve({ refreshedKeys: [], scannedPaths: 0 }));
+        const getSpy = jasmine.createSpy('getAccountByKey')
+            .and.returnValue(Promise.resolve(null));
+        const renameSpy = jasmine.createSpy('renameAccount')
+            .and.returnValue(Promise.resolve(null));
+        const fakePool = {
+            listAccounts: listSpy,
+            refreshLocalAccounts: refreshSpy,
+            getAccountByKey: getSpy,
+            renameAccount: renameSpy,
+        };
+        rcs.accountPool_CS = fakePool;
+        return { rcs: rcs, listSpy: listSpy, refreshSpy: refreshSpy, getSpy: getSpy, renameSpy: renameSpy };
+    }
+    describe('handleListAccounts', () => {
+        it('happy path → { items: CC_Account[] }', async () => {
+            const a = Object.assign(new cc_account_data_model_1.CC_Account(), { accountKey: VALID_KEY });
+            const { rcs, listSpy } = buildStub();
+            listSpy.and.returnValue(Promise.resolve([a]));
+            const result = await rcs.handleListAccounts();
+            expect(result.items.length).toBe(1);
+            expect(result.items[0].accountKey).toBe(VALID_KEY);
+            expect(listSpy).toHaveBeenCalledTimes(1);
+        });
+    });
+    describe('handleRefreshLocalAccounts', () => {
+        it('delegál a pool-CS-re', async () => {
+            const { rcs, refreshSpy } = buildStub();
+            refreshSpy.and.returnValue(Promise.resolve({ refreshedKeys: [VALID_KEY], scannedPaths: 1 }));
+            const result = await rcs.handleRefreshLocalAccounts();
+            expect(result.refreshedKeys).toEqual([VALID_KEY]);
+            expect(result.scannedPaths).toBe(1);
+        });
+    });
+    describe('handleGetAccount', () => {
+        it('happy path → CC_Account', async () => {
+            const acc = Object.assign(new cc_account_data_model_1.CC_Account(), { accountKey: VALID_KEY });
+            const { rcs, getSpy } = buildStub();
+            getSpy.and.returnValue(Promise.resolve(acc));
+            const result = await rcs.handleGetAccount({ accountKey: VALID_KEY });
+            expect(result.accountKey).toBe(VALID_KEY);
+        });
+        it('400 ha az accountKey rossz formátum (3.4 review-fix)', async () => {
+            const { rcs, getSpy } = buildStub();
+            let caught = null;
+            try {
+                await rcs.handleGetAccount({ accountKey: INVALID_KEY });
+            }
+            catch (err) {
+                caught = err;
+            }
+            expect(caught).not.toBeNull();
+            expect(fsm_dynamo_1.DyFM_Error.getErrorCode(caught)).toBe('CCAP-CC-ACCOUNT-KEY-INVALID');
+            expect(getSpy).not.toHaveBeenCalled();
+        });
+        it('404 ha az accountKey valid de nincs ilyen rekord', async () => {
+            const { rcs } = buildStub();
+            let caught = null;
+            try {
+                await rcs.handleGetAccount({ accountKey: VALID_KEY });
+            }
+            catch (err) {
+                caught = err;
+            }
+            expect(fsm_dynamo_1.DyFM_Error.getErrorCode(caught)).toBe('CCAP-CC-ACCOUNT-NOT-FOUND');
+        });
+    });
+    describe('handleRenameAccount', () => {
+        it('happy path → updated CC_Account', async () => {
+            const updated = Object.assign(new cc_account_data_model_1.CC_Account(), {
+                accountKey: VALID_KEY,
+                displayName: 'NewName',
+            });
+            const { rcs, renameSpy } = buildStub();
+            renameSpy.and.returnValue(Promise.resolve(updated));
+            const result = await rcs.handleRenameAccount({
+                accountKey: VALID_KEY,
+                body: { displayName: '  NewName  ' }, // trim test
+            });
+            expect(result.displayName).toBe('NewName');
+            expect(renameSpy).toHaveBeenCalledWith(VALID_KEY, 'NewName');
+        });
+        it('400 ha az accountKey rossz formátum', async () => {
+            const { rcs, renameSpy } = buildStub();
+            let caught = null;
+            try {
+                await rcs.handleRenameAccount({ accountKey: INVALID_KEY, body: { displayName: 'x' } });
+            }
+            catch (err) {
+                caught = err;
+            }
+            expect(fsm_dynamo_1.DyFM_Error.getErrorCode(caught)).toBe('CCAP-CC-ACCOUNT-KEY-INVALID');
+            expect(renameSpy).not.toHaveBeenCalled();
+        });
+        it('400 ha displayName nem string', async () => {
+            const { rcs, renameSpy } = buildStub();
+            let caught = null;
+            try {
+                await rcs.handleRenameAccount({ accountKey: VALID_KEY, body: { displayName: 42 } });
+            }
+            catch (err) {
+                caught = err;
+            }
+            expect(fsm_dynamo_1.DyFM_Error.getErrorCode(caught)).toBe('CCAP-CC-ACCOUNT-RENAME-INVALID');
+            expect(renameSpy).not.toHaveBeenCalled();
+        });
+        it('400 ha displayName üres trim után', async () => {
+            const { rcs } = buildStub();
+            let caught = null;
+            try {
+                await rcs.handleRenameAccount({ accountKey: VALID_KEY, body: { displayName: '   ' } });
+            }
+            catch (err) {
+                caught = err;
+            }
+            expect(fsm_dynamo_1.DyFM_Error.getErrorCode(caught)).toBe('CCAP-CC-ACCOUNT-RENAME-INVALID');
+        });
+        it('400 ha displayName meghaladja a max-length-et (M3 review-fix)', async () => {
+            const { rcs } = buildStub();
+            const longName = 'A'.repeat(cc_account_route_control_service_1.CC_AccountRoute_ControlService.DISPLAY_NAME_MAX_LENGTH + 1);
+            let caught = null;
+            try {
+                await rcs.handleRenameAccount({ accountKey: VALID_KEY, body: { displayName: longName } });
+            }
+            catch (err) {
+                caught = err;
+            }
+            expect(fsm_dynamo_1.DyFM_Error.getErrorCode(caught)).toBe('CCAP-CC-ACCOUNT-RENAME-INVALID');
+        });
+        it('400 ha displayName kontroll-karaktert tartalmaz (6.1 review-fix)', async () => {
+            const { rcs } = buildStub();
+            const evilName = `Bad\u0000Name`;
+            let caught = null;
+            try {
+                await rcs.handleRenameAccount({ accountKey: VALID_KEY, body: { displayName: evilName } });
+            }
+            catch (err) {
+                caught = err;
+            }
+            expect(fsm_dynamo_1.DyFM_Error.getErrorCode(caught)).toBe('CCAP-CC-ACCOUNT-RENAME-INVALID');
+        });
+        it('404 ha rename happy validáció után, de az account nem létezik', async () => {
+            const { rcs } = buildStub();
+            let caught = null;
+            try {
+                await rcs.handleRenameAccount({
+                    accountKey: VALID_KEY,
+                    body: { displayName: 'OK' },
+                });
+            }
+            catch (err) {
+                caught = err;
+            }
+            expect(fsm_dynamo_1.DyFM_Error.getErrorCode(caught)).toBe('CCAP-CC-ACCOUNT-NOT-FOUND');
+        });
+    });
+    describe('static patterns', () => {
+        it('ACCOUNT_KEY_PATTERN egyeztet 12-hex-et, elutasít másmilyent', () => {
+            expect(cc_account_route_control_service_1.CC_AccountRoute_ControlService.ACCOUNT_KEY_PATTERN.test('abcdef012345')).toBe(true);
+            expect(cc_account_route_control_service_1.CC_AccountRoute_ControlService.ACCOUNT_KEY_PATTERN.test('ABCDEF012345')).toBe(false); // uppercase nem
+            expect(cc_account_route_control_service_1.CC_AccountRoute_ControlService.ACCOUNT_KEY_PATTERN.test('short')).toBe(false);
+            expect(cc_account_route_control_service_1.CC_AccountRoute_ControlService.ACCOUNT_KEY_PATTERN.test('a'.repeat(13))).toBe(false);
+        });
+        it('CONTROL_CHAR_PATTERN illeszkedik U+0000-U+001F és U+007F-re', () => {
+            expect(cc_account_route_control_service_1.CC_AccountRoute_ControlService.CONTROL_CHAR_PATTERN.test('hello')).toBe(false);
+            expect(cc_account_route_control_service_1.CC_AccountRoute_ControlService.CONTROL_CHAR_PATTERN.test('he\u0000llo')).toBe(true);
+            expect(cc_account_route_control_service_1.CC_AccountRoute_ControlService.CONTROL_CHAR_PATTERN.test('he\u001Fllo')).toBe(true);
+            expect(cc_account_route_control_service_1.CC_AccountRoute_ControlService.CONTROL_CHAR_PATTERN.test('he\u007Fllo')).toBe(true);
+        });
+    });
+});
+//# sourceMappingURL=cc-account-route.control-service.spec.js.map

package/server/build/src/_modules/external-sessions/_modules/claude-code/_routes/cc-account/cc-account-route.control-service.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cc-account-route.control-service.spec.js","sourceRoot":"","sources":["../../../../../../../../src/_modules/external-sessions/_modules/claude-code/_routes/cc-account/cc-account-route.control-service.spec.ts"],"names":[],"mappings":";;AAAA,sDAAmD;AAEnD,2FAA6E;AAE7E,yFAAoF;AAEpF;;;;;;GAMG;AACH,QAAQ,CAAC,gCAAgC,EAAE,GAAS,EAAE;IAEpD,MAAM,SAAS,GAAW,cAAc,CAAC;IACzC,MAAM,WAAW,GAAW,WAAW,CAAC;IAOxC,SAAS,SAAS;QAOhB,MAAM,GAAG,GAAmC,MAAM,CAAC,MAAM,CACvD,iEAA8B,CAAC,SAAS,CACP,CAAC;QAEpC,MAAM,OAAO,GAA8B,OAAO,CAAC,SAAS,CAAC,cAAc,CAAC;aACzE,GAAG,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAA8B,CAAC;QACrE,MAAM,UAAU,GAA8B,OAAO,CAAC,SAAS,CAAC,sBAAsB,CAAC;aACpF,GAAG,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,aAAa,EAAE,EAAE,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC,CAA8B,CAAC;QACzG,MAAM,MAAM,GAA0B,OAAO,CAAC,SAAS,CAAC,iBAAiB,CAAC;aACvE,GAAG,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAA0B,CAAC;QACnE,MAAM,SAAS,GAA6B,OAAO,CAAC,SAAS,CAAC,eAAe,CAAC;aAC3E,GAAG,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAA6B,CAAC;QAEtE,MAAM,QAAQ,GAA2C;YACvD,YAAY,EAAE,OAAO;YACrB,oBAAoB,EAAE,UAAU;YAChC,eAAe,EAAE,MAAM;YACvB,aAAa,EAAE,SAAS;SACzB,CAAC;QACD,GAA0C,CAAC,cAAc,GAAG,QAAQ,CAAC;QACtE,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;IACtG,CAAC;IAED,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;QAElC,EAAE,CAAC,sCAAsC,EAAE,KAAK,IAAmB,EAAE;YACnE,MAAM,CAAC,GAAe,MAAM,CAAC,MAAM,CAAC,IAAI,kCAAU,EAAE,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC;YACjF,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,SAAS,EAAE,CAAC;YACrC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAE9C,MAAM,MAAM,GAA4B,MAAM,GAAG,CAAC,kBAAkB,EAAE,CAAC;YACvE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACpC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACnD,MAAM,CAAC,OAAO,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAC3C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,4BAA4B,EAAE,GAAG,EAAE;QAE1C,EAAE,CAAC,sBAAsB,EAAE,KAAK,IAAmB,EAAE;YACnD,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,SAAS,EAAE,CAAC;YACxC,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,aAAa,EAAE,CAAC,SAAS,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;YAE7F,MAAM,MAAM,GAAsD,MAAM,GAAG,CAAC,0BAA0B,EAAE,CAAC;YACzG,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;YAClD,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;QAEhC,EAAE,CAAC,yBAAyB,EAAE,KAAK,IAAmB,EAAE;YACtD,MAAM,GAAG,GAAe,MAAM,CAAC,MAAM,CAAC,IAAI,kCAAU,EAAE,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC;YACnF,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC;YACpC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;YAE7C,MAAM,MAAM,GAAe,MAAM,GAAG,CAAC,gBAAgB,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC;YACjF,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC5C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAmB,EAAE;YACnF,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC;YACpC,IAAI,MAAM,GAAsB,IAAI,CAAC;YACrC,IAAI,CAAC;gBACH,MAAM,GAAG,CAAC,gBAAgB,CAAC,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC,CAAC;YAC1D,CAAC;YAAC,OAAO,GAAY,EAAE,CAAC;gBACtB,MAAM,GAAG,GAAiB,CAAC;YAC7B,CAAC;YACD,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;YAC9B,MAAM,CAAC,uBAAU,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;YAC5E,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACxC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAmB,EAAE;YAC/E,MAAM,EAAE,GAAG,EAAE,GAAG,SAAS,EAAE,CAAC;YAC5B,IAAI,MAAM,GAAsB,IAAI,CAAC;YACrC,IAAI,CAAC;gBACH,MAAM,GAAG,CAAC,gBAAgB,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC;YACxD,CAAC;YAAC,OAAO,GAAY,EAAE,CAAC;gBACtB,MAAM,GAAG,GAAiB,CAAC;YAC7B,CAAC;YACD,MAAM,CAAC,uBAAU,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QAC5E,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;QAEnC,EAAE,CAAC,iCAAiC,EAAE,KAAK,IAAmB,EAAE;YAC9D,MAAM,OAAO,GAAe,MAAM,CAAC,MAAM,CAAC,IAAI,kCAAU,EAAE,EAAE;gBAC1D,UAAU,EAAE,SAAS;gBACrB,WAAW,EAAE,SAAS;aACvB,CAAC,CAAC;YACH,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,SAAS,EAAE,CAAC;YACvC,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;YAEpD,MAAM,MAAM,GAAe,MAAM,GAAG,CAAC,mBAAmB,CAAC;gBACvD,UAAU,EAAE,SAAS;gBACrB,IAAI,EAAE,EAAE,WAAW,EAAE,aAAa,EAAE,EAAE,YAAY;aACnD,CAAC,CAAC;YACH,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC3C,MAAM,CAAC,SAAS,CAAC,CAAC,oBAAoB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAC/D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAmB,EAAE;YAClE,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,SAAS,EAAE,CAAC;YACvC,IAAI,MAAM,GAAsB,IAAI,CAAC;YACrC,IAAI,CAAC;gBACH,MAAM,GAAG,CAAC,mBAAmB,CAAC,EAAE,UAAU,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;YACzF,CAAC;YAAC,OAAO,GAAY,EAAE,CAAC;gBACtB,MAAM,GAAG,GAAiB,CAAC;YAC7B,CAAC;YACD,MAAM,CAAC,uBAAU,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;YAC5E,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAC3C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,+BAA+B,EAAE,KAAK,IAAmB,EAAE;YAC5D,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,SAAS,EAAE,CAAC;YACvC,IAAI,MAAM,GAAsB,IAAI,CAAC;YACrC,IAAI,CAAC;gBACH,MAAM,GAAG,CAAC,mBAAmB,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;YACtF,CAAC;YAAC,OAAO,GAAY,EAAE,CAAC;gBACtB,MAAM,GAAG,GAAiB,CAAC;YAC7B,CAAC;YACD,MAAM,CAAC,uBAAU,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;YAC/E,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAC3C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAmB,EAAE;YAChE,MAAM,EAAE,GAAG,EAAE,GAAG,SAAS,EAAE,CAAC;YAC5B,IAAI,MAAM,GAAsB,IAAI,CAAC;YACrC,IAAI,CAAC;gBACH,MAAM,GAAG,CAAC,mBAAmB,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;YACzF,CAAC;YAAC,OAAO,GAAY,EAAE,CAAC;gBACtB,MAAM,GAAG,GAAiB,CAAC;YAC7B,CAAC;YACD,MAAM,CAAC,uBAAU,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;QACjF,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAmB,EAAE;YAC5F,MAAM,EAAE,GAAG,EAAE,GAAG,SAAS,EAAE,CAAC;YAC5B,MAAM,QAAQ,GAAW,GAAG,CAAC,MAAM,CAAC,iEAA8B,CAAC,uBAAuB,GAAG,CAAC,CAAC,CAAC;YAChG,IAAI,MAAM,GAAsB,IAAI,CAAC;YACrC,IAAI,CAAC;gBACH,MAAM,GAAG,CAAC,mBAAmB,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;YAC5F,CAAC;YAAC,OAAO,GAAY,EAAE,CAAC;gBACtB,MAAM,GAAG,GAAiB,CAAC;YAC7B,CAAC;YACD,MAAM,CAAC,uBAAU,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;QACjF,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,kEAAkE,EAAE,KAAK,IAAmB,EAAE;YAC/F,MAAM,EAAE,GAAG,EAAE,GAAG,SAAS,EAAE,CAAC;YAC5B,MAAM,QAAQ,GAAW,eAAe,CAAC;YACzC,IAAI,MAAM,GAAsB,IAAI,CAAC;YACrC,IAAI,CAAC;gBACH,MAAM,GAAG,CAAC,mBAAmB,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;YAC5F,CAAC;YAAC,OAAO,GAAY,EAAE,CAAC;gBACtB,MAAM,GAAG,GAAiB,CAAC;YAC7B,CAAC;YACD,MAAM,CAAC,uBAAU,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;QACjF,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAmB,EAAE;YAC5F,MAAM,EAAE,GAAG,EAAE,GAAG,SAAS,EAAE,CAAC;YAC5B,IAAI,MAAM,GAAsB,IAAI,CAAC;YACrC,IAAI,CAAC;gBACH,MAAM,GAAG,CAAC,mBAAmB,CAAC;oBAC5B,UAAU,EAAE,SAAS;oBACrB,IAAI,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE;iBAC5B,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAY,EAAE,CAAC;gBACtB,MAAM,GAAG,GAAiB,CAAC;YAC7B,CAAC;YACD,MAAM,CAAC,uBAAU,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QAC5E,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;QAE/B,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;YACrE,MAAM,CAAC,iEAA8B,CAAC,mBAAmB,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC3F,MAAM,CAAC,iEAA8B,CAAC,mBAAmB,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,gBAAgB;YAC7G,MAAM,CAAC,iEAA8B,CAAC,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrF,MAAM,CAAC,iEAA8B,CAAC,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9F,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;YACrE,MAAM,CAAC,iEAA8B,CAAC,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACtF,MAAM,CAAC,iEAA8B,CAAC,oBAAoB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC3F,MAAM,CAAC,iEAA8B,CAAC,oBAAoB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC3F,MAAM,CAAC,iEAA8B,CAAC,oBAAoB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7F,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/server/build/src/_modules/external-sessions/_modules/claude-code/_routes/cc-account/cc-account.controller.d.ts

@@ -0,0 +1,19 @@
+import { DyNTS_Controller } from '@futdevpro/nts-dynamo';
+/**
+ * CC Account REST controller (REQ-CC-USAGE-DASHBOARD-001 Slice 1).
+ *
+ * Endpointok (`/cc-account` route alatt):
+ * - GET    /list                — Cross-instance account-lista
+ * - POST   /refresh             — Lokális credential-discovery újrafuttatása
+ * - GET    /:accountKey         — Egy account részletek
+ * - PATCH  /:accountKey         — User-readable display-name átírása
+ *
+ * **REQ-SYS-CONTROLLER-THIN (CRITICAL):** Route controller = delegálás;
+ * tilos logika és input validáció itt — minden a route-control-service-ben.
+ */
+export declare class CC_Account_Controller extends DyNTS_Controller {
+    static getInstance(): CC_Account_Controller;
+    private readonly accountRoute_CS;
+    setupEndpoints(): void;
+}
+//# sourceMappingURL=cc-account.controller.d.ts.map

package/server/build/src/_modules/external-sessions/_modules/claude-code/_routes/cc-account/cc-account.controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cc-account.controller.d.ts","sourceRoot":"","sources":["../../../../../../../../src/_modules/external-sessions/_modules/claude-code/_routes/cc-account/cc-account.controller.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,gBAAgB,EAAyB,MAAM,uBAAuB,CAAC;AAKhF;;;;;;;;;;;GAWG;AACH,qBAAa,qBAAsB,SAAQ,gBAAgB;IAEzD,MAAM,CAAC,WAAW,IAAI,qBAAqB;IAI3C,OAAO,CAAC,QAAQ,CAAC,eAAe,CACe;IAE/C,cAAc,IAAI,IAAI;CA+DvB"}

package/server/build/src/_modules/external-sessions/_modules/claude-code/_routes/cc-account/cc-account.controller.js

@@ -0,0 +1,83 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CC_Account_Controller = void 0;
+const fsm_dynamo_1 = require("@futdevpro/fsm-dynamo");
+const nts_dynamo_1 = require("@futdevpro/nts-dynamo");
+const cc_account_route_control_service_1 = require("./cc-account-route.control-service");
+/**
+ * CC Account REST controller (REQ-CC-USAGE-DASHBOARD-001 Slice 1).
+ *
+ * Endpointok (`/cc-account` route alatt):
+ * - GET    /list                — Cross-instance account-lista
+ * - POST   /refresh             — Lokális credential-discovery újrafuttatása
+ * - GET    /:accountKey         — Egy account részletek
+ * - PATCH  /:accountKey         — User-readable display-name átírása
+ *
+ * **REQ-SYS-CONTROLLER-THIN (CRITICAL):** Route controller = delegálás;
+ * tilos logika és input validáció itt — minden a route-control-service-ben.
+ */
+class CC_Account_Controller extends nts_dynamo_1.DyNTS_Controller {
+    static getInstance() {
+        return CC_Account_Controller.getSingletonInstance();
+    }
+    accountRoute_CS = cc_account_route_control_service_1.CC_AccountRoute_ControlService.getInstance();
+    setupEndpoints() {
+        this.endpoints = [
+            // GET /list — Cross-instance account-lista
+            new nts_dynamo_1.DyNTS_Endpoint_Params({
+                name: 'listCcAccounts',
+                type: fsm_dynamo_1.DyFM_HttpCallType.get,
+                endpoint: '/list',
+                tasks: [
+                    async (_req, res) => {
+                        const result = await this.accountRoute_CS.handleListAccounts();
+                        res.send(result);
+                    },
+                ],
+            }),
+            // POST /refresh — Lokális credential-discovery újrafuttatása
+            new nts_dynamo_1.DyNTS_Endpoint_Params({
+                name: 'refreshCcAccounts',
+                type: fsm_dynamo_1.DyFM_HttpCallType.post,
+                endpoint: '/refresh',
+                tasks: [
+                    async (_req, res) => {
+                        const result = await this.accountRoute_CS.handleRefreshLocalAccounts();
+                        res.send(result);
+                    },
+                ],
+            }),
+            // GET /:accountKey — Egy account részletek
+            new nts_dynamo_1.DyNTS_Endpoint_Params({
+                name: 'getCcAccount',
+                type: fsm_dynamo_1.DyFM_HttpCallType.get,
+                endpoint: '/:accountKey',
+                tasks: [
+                    async (req, res) => {
+                        const result = await this.accountRoute_CS.handleGetAccount({
+                            accountKey: req.params.accountKey,
+                        });
+                        res.send(result);
+                    },
+                ],
+            }),
+            // PATCH /:accountKey — Display-name átírása
+            new nts_dynamo_1.DyNTS_Endpoint_Params({
+                name: 'renameCcAccount',
+                type: fsm_dynamo_1.DyFM_HttpCallType.patch,
+                endpoint: '/:accountKey',
+                tasks: [
+                    async (req, res) => {
+                        const result = await this.accountRoute_CS.handleRenameAccount({
+                            accountKey: req.params.accountKey,
+                            body: req.body,
+                        });
+                        res.send(result);
+                    },
+                ],
+            }),
+        ];
+    }
+}
+exports.CC_Account_Controller = CC_Account_Controller;
+//# sourceMappingURL=cc-account.controller.js.map

package/server/build/src/_modules/external-sessions/_modules/claude-code/_routes/cc-account/cc-account.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cc-account.controller.js","sourceRoot":"","sources":["../../../../../../../../src/_modules/external-sessions/_modules/claude-code/_routes/cc-account/cc-account.controller.ts"],"names":[],"mappings":";;;AAEA,sDAA0D;AAC1D,sDAAgF;AAGhF,yFAAoF;AAEpF;;;;;;;;;;;GAWG;AACH,MAAa,qBAAsB,SAAQ,6BAAgB;IAEzD,MAAM,CAAC,WAAW;QAChB,OAAO,qBAAqB,CAAC,oBAAoB,EAAE,CAAC;IACtD,CAAC;IAEgB,eAAe,GAC9B,iEAA8B,CAAC,WAAW,EAAE,CAAC;IAE/C,cAAc;QACZ,IAAI,CAAC,SAAS,GAAG;YAEf,2CAA2C;YAC3C,IAAI,kCAAqB,CAAC;gBACxB,IAAI,EAAE,gBAAgB;gBACtB,IAAI,EAAE,8BAAiB,CAAC,GAAG;gBAC3B,QAAQ,EAAE,OAAO;gBACjB,KAAK,EAAE;oBACL,KAAK,EAAE,IAAa,EAAE,GAAa,EAAiB,EAAE;wBACpD,MAAM,MAAM,GACV,MAAM,IAAI,CAAC,eAAe,CAAC,kBAAkB,EAAE,CAAC;wBAClD,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;oBACnB,CAAC;iBACF;aACF,CAAC;YAEF,6DAA6D;YAC7D,IAAI,kCAAqB,CAAC;gBACxB,IAAI,EAAE,mBAAmB;gBACzB,IAAI,EAAE,8BAAiB,CAAC,IAAI;gBAC5B,QAAQ,EAAE,UAAU;gBACpB,KAAK,EAAE;oBACL,KAAK,EAAE,IAAa,EAAE,GAAa,EAAiB,EAAE;wBACpD,MAAM,MAAM,GACV,MAAM,IAAI,CAAC,eAAe,CAAC,0BAA0B,EAAE,CAAC;wBAC1D,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;oBACnB,CAAC;iBACF;aACF,CAAC;YAEF,2CAA2C;YAC3C,IAAI,kCAAqB,CAAC;gBACxB,IAAI,EAAE,cAAc;gBACpB,IAAI,EAAE,8BAAiB,CAAC,GAAG;gBAC3B,QAAQ,EAAE,cAAc;gBACxB,KAAK,EAAE;oBACL,KAAK,EAAE,GAAY,EAAE,GAAa,EAAiB,EAAE;wBACnD,MAAM,MAAM,GAAe,MAAM,IAAI,CAAC,eAAe,CAAC,gBAAgB,CAAC;4BACrE,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,UAAU;yBAClC,CAAC,CAAC;wBACH,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;oBACnB,CAAC;iBACF;aACF,CAAC;YAEF,4CAA4C;YAC5C,IAAI,kCAAqB,CAAC;gBACxB,IAAI,EAAE,iBAAiB;gBACvB,IAAI,EAAE,8BAAiB,CAAC,KAAK;gBAC7B,QAAQ,EAAE,cAAc;gBACxB,KAAK,EAAE;oBACL,KAAK,EAAE,GAAY,EAAE,GAAa,EAAiB,EAAE;wBACnD,MAAM,MAAM,GAAe,MAAM,IAAI,CAAC,eAAe,CAAC,mBAAmB,CAAC;4BACxE,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,UAAU;4BACjC,IAAI,EAAE,GAAG,CAAC,IAAI;yBACf,CAAC,CAAC;wBACH,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;oBACnB,CAAC;iBACF;aACF,CAAC;SACH,CAAC;IACJ,CAAC;CACF;AAxED,sDAwEC"}

package/server/build/src/_modules/external-sessions/_modules/claude-code/_services/core/account/cc-account-pool.control-service.d.ts

@@ -0,0 +1,35 @@
+import { DyNTS_SingletonService } from '@futdevpro/nts-dynamo';
+import { CC_Account } from '../../../_models/data-models/cc-account.data-model';
+/**
+ * CC Account Pool control-service (REQ-CC-USAGE-DASHBOARD-001 Slice 1).
+ *
+ * A CCAP instance gépén ismert credential-fájlok felfedezésének és a
+ * `ccap_cc_account` DBNT-be írásának koordinációja. Read-only fájl-ops:
+ * sose írjuk a credential-fájlt; a user maga futtatja a `claude /login`-t.
+ *
+ * **Cross-instance:** a `listAccounts` DB SSOT-ből olvas, így minden CCAP
+ * instance ugyanazt látja (PEI relay nem kell). A `refreshLocalAccounts`
+ * csak a hívó instance-en hat — a többi instance a saját ütemén refresh-el.
+ */
+export declare class CC_AccountPool_ControlService extends DyNTS_SingletonService {
+    static getInstance(): CC_AccountPool_ControlService;
+    private readonly accountDataService;
+    /**
+     * Lokális gépen ismert credential-fájlok felfedezése + DB upsert minden
+     * sikerre. A discovery best-effort: nem talált / olvashatatlan fájl egy
+     * warn-loggal csendesedik el (no-silent-failure: warn-log van).
+     *
+     * @returns a felfedezett és sikeresen perzisztált accountKey-ek listája.
+     */
+    refreshLocalAccounts(): Promise<{
+        refreshedKeys: string[];
+        scannedPaths: number;
+    }>;
+    /** Cross-instance account-lista (DB SSOT-ből). */
+    listAccounts(): Promise<CC_Account[]>;
+    /** Egy account lekérdezése a stable kulcs alapján. */
+    getAccountByKey(accountKey: string): Promise<CC_Account | null>;
+    /** Egy account user-readable nevének átírása. */
+    renameAccount(accountKey: string, displayName: string): Promise<CC_Account | null>;
+}
+//# sourceMappingURL=cc-account-pool.control-service.d.ts.map

package/server/build/src/_modules/external-sessions/_modules/claude-code/_services/core/account/cc-account-pool.control-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cc-account-pool.control-service.d.ts","sourceRoot":"","sources":["../../../../../../../../../src/_modules/external-sessions/_modules/claude-code/_services/core/account/cc-account-pool.control-service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAG/D,OAAO,EAAE,UAAU,EAAE,MAAM,oDAAoD,CAAC;AAIhF;;;;;;;;;;GAUG;AACH,qBAAa,6BAA8B,SAAQ,sBAAsB;IAEvE,MAAM,CAAC,WAAW,IAAI,6BAA6B;IAInD,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAC4B;IAE/D;;;;;;OAMG;IACG,oBAAoB,IAAI,OAAO,CAAC;QAAE,aAAa,EAAE,MAAM,EAAE,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC;IA+DxF,kDAAkD;IAC5C,YAAY,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;IAI3C,sDAAsD;IAChD,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAIrE,iDAAiD;IAC3C,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;CAGzF"}

package/server/build/src/_modules/external-sessions/_modules/claude-code/_services/core/account/cc-account-pool.control-service.js

@@ -0,0 +1,94 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CC_AccountPool_ControlService = void 0;
+const fsm_dynamo_1 = require("@futdevpro/fsm-dynamo");
+const nts_dynamo_1 = require("@futdevpro/nts-dynamo");
+const cc_account_discovery_util_1 = require("../../../_collections/utils/account/cc-account-discovery.util");
+const cc_account_data_service_1 = require("./cc-account.data-service");
+const instance_id_service_1 = require("../../../../../_services/instance-id.service");
+/**
+ * CC Account Pool control-service (REQ-CC-USAGE-DASHBOARD-001 Slice 1).
+ *
+ * A CCAP instance gépén ismert credential-fájlok felfedezésének és a
+ * `ccap_cc_account` DBNT-be írásának koordinációja. Read-only fájl-ops:
+ * sose írjuk a credential-fájlt; a user maga futtatja a `claude /login`-t.
+ *
+ * **Cross-instance:** a `listAccounts` DB SSOT-ből olvas, így minden CCAP
+ * instance ugyanazt látja (PEI relay nem kell). A `refreshLocalAccounts`
+ * csak a hívó instance-en hat — a többi instance a saját ütemén refresh-el.
+ */
+class CC_AccountPool_ControlService extends nts_dynamo_1.DyNTS_SingletonService {
+    static getInstance() {
+        return CC_AccountPool_ControlService.getSingletonInstance();
+    }
+    accountDataService = new cc_account_data_service_1.CC_Account_DataService({ issuer: 'cc-account-pool-cs' });
+    /**
+     * Lokális gépen ismert credential-fájlok felfedezése + DB upsert minden
+     * sikerre. A discovery best-effort: nem talált / olvashatatlan fájl egy
+     * warn-loggal csendesedik el (no-silent-failure: warn-log van).
+     *
+     * @returns a felfedezett és sikeresen perzisztált accountKey-ek listája.
+     */
+    async refreshLocalAccounts() {
+        const ccapId = instance_id_service_1.ExS_InstanceId_Service.getInstance().getInstanceId();
+        const paths = cc_account_discovery_util_1.CC_AccountDiscovery_Util.getDefaultCredentialPaths();
+        const refreshedKeys = [];
+        for (const path of paths) {
+            const result = cc_account_discovery_util_1.CC_AccountDiscovery_Util.readCredentialFile(path);
+            if (result.kind !== 'ok' || result.payload == null) {
+                // Diszkrim­inált logging severity (M1 review-fix):
+                // - `missing`: nem-hiba (a user nem futtatott `claude /login`-t) → debug-szintű, csendes.
+                // - `invalid-shape` / `invalid-empty`: payload létezik, de nem credential — warn (a user-nek hibás formátum).
+                // - `invalid-json`: parse-error a fájltartalomban — warn parse-error message-szel.
+                if (result.kind === 'invalid-json') {
+                    fsm_dynamo_1.DyFM_Log.warn(`CC_AccountPool_CS | refreshLocalAccounts: invalid JSON in credential file`
+                        + ` | path: ${path}`
+                        + ` | parseError: ${result.parseError ?? 'unknown'}`);
+                }
+                else if (result.kind === 'invalid-shape' || result.kind === 'invalid-empty') {
+                    fsm_dynamo_1.DyFM_Log.warn(`CC_AccountPool_CS | refreshLocalAccounts: credential file shape invalid`
+                        + ` | path: ${path}`
+                        + ` | kind: ${result.kind}`
+                        + ` | hint: a fájl olvasható, de nem credential-payload (claudeAiOauth sub-object hiányzik vagy a top-level nem object)`);
+                }
+                // `missing` → csendben skip (nem zajos a default-fájl-pillanat).
+                continue;
+            }
+            const payload = result.payload;
+            const accountKey = cc_account_discovery_util_1.CC_AccountDiscovery_Util.computeAccountKey(payload);
+            const tokenStatus = cc_account_discovery_util_1.CC_AccountDiscovery_Util.classifyTokenStatus(payload);
+            const meta = cc_account_discovery_util_1.CC_AccountDiscovery_Util.extractAccountMetadata(payload);
+            const upserted = await this.accountDataService.upsertByKey({
+                accountKey: accountKey,
+                discoveredOnCcapId: ccapId,
+                credentialPath: path,
+                accountType: meta.accountType,
+                scopes: meta.scopes,
+                tokenStatus: tokenStatus,
+            });
+            if (upserted != null) {
+                refreshedKeys.push(accountKey);
+            }
+        }
+        // H2 review-fix: happy-path complete-üzenet info-szinten (nem warn).
+        fsm_dynamo_1.DyFM_Log.info(`CC_AccountPool_CS | refreshLocalAccounts done`
+            + ` | ccapId: ${ccapId}`
+            + ` | paths-scanned: ${paths.length}`
+            + ` | accounts-refreshed: ${refreshedKeys.length}`);
+        return { refreshedKeys: refreshedKeys, scannedPaths: paths.length };
+    }
+    /** Cross-instance account-lista (DB SSOT-ből). */
+    async listAccounts() {
+        return await this.accountDataService.listAll();
+    }
+    /** Egy account lekérdezése a stable kulcs alapján. */
+    async getAccountByKey(accountKey) {
+        return await this.accountDataService.getByKey(accountKey);
+    }
+    /** Egy account user-readable nevének átírása. */
+    async renameAccount(accountKey, displayName) {
+        return await this.accountDataService.renameAccount(accountKey, displayName);
+    }
+}
+exports.CC_AccountPool_ControlService = CC_AccountPool_ControlService;
+//# sourceMappingURL=cc-account-pool.control-service.js.map

package/server/build/src/_modules/external-sessions/_modules/claude-code/_services/core/account/cc-account-pool.control-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cc-account-pool.control-service.js","sourceRoot":"","sources":["../../../../../../../../../src/_modules/external-sessions/_modules/claude-code/_services/core/account/cc-account-pool.control-service.ts"],"names":[],"mappings":";;;AAAA,sDAAiD;AACjD,sDAA+D;AAE/D,6GAAyG;AAEzG,uEAAmE;AACnE,sFAAsF;AAEtF;;;;;;;;;;GAUG;AACH,MAAa,6BAA8B,SAAQ,mCAAsB;IAEvE,MAAM,CAAC,WAAW;QAChB,OAAO,6BAA6B,CAAC,oBAAoB,EAAmC,CAAC;IAC/F,CAAC;IAEgB,kBAAkB,GACjC,IAAI,gDAAsB,CAAC,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC,CAAC;IAE/D;;;;;;OAMG;IACH,KAAK,CAAC,oBAAoB;QACxB,MAAM,MAAM,GAAW,4CAAsB,CAAC,WAAW,EAAE,CAAC,aAAa,EAAE,CAAC;QAC5E,MAAM,KAAK,GAAa,oDAAwB,CAAC,yBAAyB,EAAE,CAAC;QAC7E,MAAM,aAAa,GAAa,EAAE,CAAC;QAEnC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,MAAM,GACV,oDAAwB,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;YAEpD,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,IAAI,MAAM,CAAC,OAAO,IAAI,IAAI,EAAE,CAAC;gBACnD,mDAAmD;gBACnD,0FAA0F;gBAC1F,8GAA8G;gBAC9G,mFAAmF;gBACnF,IAAI,MAAM,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;oBACnC,qBAAQ,CAAC,IAAI,CACX,2EAA2E;0BACzE,YAAY,IAAI,EAAE;0BAClB,kBAAkB,MAAM,CAAC,UAAU,IAAI,SAAS,EAAE,CACrD,CAAC;gBACJ,CAAC;qBAAM,IAAI,MAAM,CAAC,IAAI,KAAK,eAAe,IAAI,MAAM,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;oBAC9E,qBAAQ,CAAC,IAAI,CACX,yEAAyE;0BACvE,YAAY,IAAI,EAAE;0BAClB,YAAY,MAAM,CAAC,IAAI,EAAE;0BACzB,sHAAsH,CACzH,CAAC;gBACJ,CAAC;gBACD,iEAAiE;gBACjE,SAAS;YACX,CAAC;YAED,MAAM,OAAO,GAA4B,MAAM,CAAC,OAAO,CAAC;YACxD,MAAM,UAAU,GAAW,oDAAwB,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;YAC/E,MAAM,WAAW,GAAW,oDAAwB,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;YAClF,MAAM,IAAI,GACR,oDAAwB,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC;YAE3D,MAAM,QAAQ,GAAsB,MAAM,IAAI,CAAC,kBAAkB,CAAC,WAAW,CAAC;gBAC5E,UAAU,EAAE,UAAU;gBACtB,kBAAkB,EAAE,MAAM;gBAC1B,cAAc,EAAE,IAAI;gBACpB,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,WAAW,EAAE,WAAW;aACzB,CAAC,CAAC;YAEH,IAAI,QAAQ,IAAI,IAAI,EAAE,CAAC;gBACrB,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACjC,CAAC;QACH,CAAC;QAED,qEAAqE;QACrE,qBAAQ,CAAC,IAAI,CACX,+CAA+C;cAC7C,cAAc,MAAM,EAAE;cACtB,qBAAqB,KAAK,CAAC,MAAM,EAAE;cACnC,0BAA0B,aAAa,CAAC,MAAM,EAAE,CACnD,CAAC;QAEF,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,YAAY,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;IACtE,CAAC;IAED,kDAAkD;IAClD,KAAK,CAAC,YAAY;QAChB,OAAO,MAAM,IAAI,CAAC,kBAAkB,CAAC,OAAO,EAAE,CAAC;IACjD,CAAC;IAED,sDAAsD;IACtD,KAAK,CAAC,eAAe,CAAC,UAAkB;QACtC,OAAO,MAAM,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IAC5D,CAAC;IAED,iDAAiD;IACjD,KAAK,CAAC,aAAa,CAAC,UAAkB,EAAE,WAAmB;QACzD,OAAO,MAAM,IAAI,CAAC,kBAAkB,CAAC,aAAa,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;IAC9E,CAAC;CACF;AA7FD,sEA6FC"}

package/server/build/src/_modules/external-sessions/_modules/claude-code/_services/core/account/cc-account-pool.control-service.spec.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=cc-account-pool.control-service.spec.d.ts.map

package/server/build/src/_modules/external-sessions/_modules/claude-code/_services/core/account/cc-account-pool.control-service.spec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cc-account-pool.control-service.spec.d.ts","sourceRoot":"","sources":["../../../../../../../../../src/_modules/external-sessions/_modules/claude-code/_services/core/account/cc-account-pool.control-service.spec.ts"],"names":[],"mappings":""}