@futdevpro/fsm-dynamo 1.16.39 → 1.20.2

package/build/_collections/utils/regex/password-regex.util.d.ts

@@ -1,15 +1,15 @@
-export declare const DyFM_passwordRegex: RegExp;
-/**
-  * returns an array of errors for a given password if it not match all the requirements
-  *
-  * @example
-  * ```ts
-  * const errors = DyFM_getPasswordErrors('Invalid1');
-  * console.log(errors); // ['Password must include at least one of the !@#$%^&* characters.']
-  *
-  * const errors = DyFM_getPasswordErrors('ValidPassword1!');
-  * console.log(errors); // []
-  * ```
-  */
-export declare function DyFM_getPasswordErrors(password: string): string[];
+export declare const DyFM_passwordRegex: RegExp;
+/**
+  * returns an array of errors for a given password if it not match all the requirements
+  *
+  * @example
+  * ```ts
+  * const errors = DyFM_getPasswordErrors('Invalid1');
+  * console.log(errors); // ['Password must include at least one of the !@#$%^&* characters.']
+  *
+  * const errors = DyFM_getPasswordErrors('ValidPassword1!');
+  * console.log(errors); // []
+  * ```
+  */
+export declare function DyFM_getPasswordErrors(password: string): string[];
 //# sourceMappingURL=password-regex.util.d.ts.map

package/build/_collections/utils/regex/password-regex.util.js

@@ -1,61 +1,61 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.DyFM_passwordRegex = void 0;
-exports.DyFM_getPasswordErrors = DyFM_getPasswordErrors;
-exports.DyFM_passwordRegex = new RegExp('^(?=.*[a-z])(?=.*[A-Z])(?=.*[0-9])(?=.*[!@#$%^&*]){6,}');
-/* export const DyFM_ALLPasswordRegexUserMessages: string =
-  'Password must include at least one lowercase letter. ' +
-  'Password must include at least one uppercase letter.' +
-  'Password must include at least one digit.' +
-  'Password must include at least one of the !@#$%^&* characters.' +
-  'Password must be at least 6 characters long.'; */
-/**
-  * returns an array of errors for a given password if it not match all the requirements
-  *
-  * @example
-  * ```ts
-  * const errors = DyFM_getPasswordErrors('Invalid1');
-  * console.log(errors); // ['Password must include at least one of the !@#$%^&* characters.']
-  *
-  * const errors = DyFM_getPasswordErrors('ValidPassword1!');
-  * console.log(errors); // []
-  * ```
-  */
-function DyFM_getPasswordErrors(password) {
-    const errors = [];
-    DyFM_passwordErrorsOneByOne.forEach((error) => {
-        if (!error.regex.test(password)) {
-            errors.push(error.message);
-        }
-    });
-    return errors;
-}
-const DyFM_passwordErrorsOneByOne = [
-    {
-        regex: new RegExp('^(?=.*[a-z])'),
-        code: 'pwErrorLowercase',
-        message: 'Password must include at least one lowercase letter.'
-    },
-    {
-        regex: new RegExp('^(?=.*[A-Z])'),
-        code: 'pwErrorUppercase',
-        message: 'Password must include at least one uppercase letter.'
-    },
-    {
-        regex: new RegExp('^(?=.*[0-9])'),
-        code: 'pwErrorDigit',
-        message: 'Password must include at least one digit.'
-    },
-    {
-        regex: new RegExp('^(?=.*[!@#$%^&*])'),
-        code: 'pwErrorSpecialChar',
-        message: 'Password must include at least one of the !@#$%^&* characters.'
-    },
-    {
-        regex: new RegExp('^(?=.{6,})'),
-        code: 'pwErrorLength',
-        message: 'Password must be at least 6 characters long.'
-    },
-];
-//'!@#$%^&*+-_<>?.,;:|~'
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DyFM_passwordRegex = void 0;
+exports.DyFM_getPasswordErrors = DyFM_getPasswordErrors;
+exports.DyFM_passwordRegex = new RegExp('^(?=.*[a-z])(?=.*[A-Z])(?=.*[0-9])(?=.*[!@#$%^&*]){6,}');
+/* export const DyFM_ALLPasswordRegexUserMessages: string =
+  'Password must include at least one lowercase letter. ' +
+  'Password must include at least one uppercase letter.' +
+  'Password must include at least one digit.' +
+  'Password must include at least one of the !@#$%^&* characters.' +
+  'Password must be at least 6 characters long.'; */
+/**
+  * returns an array of errors for a given password if it not match all the requirements
+  *
+  * @example
+  * ```ts
+  * const errors = DyFM_getPasswordErrors('Invalid1');
+  * console.log(errors); // ['Password must include at least one of the !@#$%^&* characters.']
+  *
+  * const errors = DyFM_getPasswordErrors('ValidPassword1!');
+  * console.log(errors); // []
+  * ```
+  */
+function DyFM_getPasswordErrors(password) {
+    const errors = [];
+    DyFM_passwordErrorsOneByOne.forEach((error) => {
+        if (!error.regex.test(password)) {
+            errors.push(error.message);
+        }
+    });
+    return errors;
+}
+const DyFM_passwordErrorsOneByOne = [
+    {
+        regex: new RegExp('^(?=.*[a-z])'),
+        code: 'pwErrorLowercase',
+        message: 'Password must include at least one lowercase letter.'
+    },
+    {
+        regex: new RegExp('^(?=.*[A-Z])'),
+        code: 'pwErrorUppercase',
+        message: 'Password must include at least one uppercase letter.'
+    },
+    {
+        regex: new RegExp('^(?=.*[0-9])'),
+        code: 'pwErrorDigit',
+        message: 'Password must include at least one digit.'
+    },
+    {
+        regex: new RegExp('^(?=.*[!@#$%^&*])'),
+        code: 'pwErrorSpecialChar',
+        message: 'Password must include at least one of the !@#$%^&* characters.'
+    },
+    {
+        regex: new RegExp('^(?=.{6,})'),
+        code: 'pwErrorLength',
+        message: 'Password must be at least 6 characters long.'
+    },
+];
+//'!@#$%^&*+-_<>?.,;:|~'
 //# sourceMappingURL=password-regex.util.js.map

package/build/_collections/utils/regex/regex.util.d.ts

@@ -1,2 +1,2 @@
-export declare const DyFM_emailRegex: RegExp;
+export declare const DyFM_emailRegex: RegExp;
 //# sourceMappingURL=regex.util.d.ts.map

package/build/_collections/utils/regex/regex.util.js

@@ -1,5 +1,5 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.DyFM_emailRegex = void 0;
-exports.DyFM_emailRegex = new RegExp('^[a-zA-Z0-9_.+-]+@[a-zA-Z0-9-]+.[a-zA-Z0-9-.]+$');
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DyFM_emailRegex = void 0;
+exports.DyFM_emailRegex = new RegExp('^[a-zA-Z0-9_.+-]+@[a-zA-Z0-9-]+.[a-zA-Z0-9-.]+$');
 //# sourceMappingURL=regex.util.js.map

package/build/_collections/utils/regex/username-regex.util.d.ts

@@ -1,2 +1,2 @@
-export declare const DyFM_usernameRegex: RegExp;
+export declare const DyFM_usernameRegex: RegExp;
 //# sourceMappingURL=username-regex.util.d.ts.map

package/build/_collections/utils/regex/username-regex.util.js

@@ -1,32 +1,32 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.DyFM_usernameRegex = void 0;
-exports.DyFM_usernameRegex = new RegExp('^[a-zA-Z0-9-_#$%&^|*]{6,}$');
-/* export const FDP_usernameRegexUserMessage: string =
-  'Username must be at least 6 characters long and can only contain letters, ' +
-  'numbers, and the following special characters: -_#$%&^|*'; */
-/* export function getUsernameErrors(username: string): string[] {
-  const errors: string[] = [];
-
-  usernameErrorsOneByOne.forEach((error) => {
-    if (!error.regex.test(username)) {
-      errors.push(error.message);
-    }
-  });
-
-  return errors;
-} */
-const DyFM_usernameErrorsOneByOne = [
-    {
-        regex: new RegExp('^(?=.{6,})'),
-        code: 'usernameErrorLength',
-        /* message: 'Username must be at least 6 characters long.' */
-    },
-    {
-        regex: new RegExp('^(?=.*[a-zA-Z0-9-_#$%&^|*])'),
-        code: 'usernameErrorSpecialChar',
-        /* message:
-          'Username can only contain letters, numbers, and the following special characters: -_#$%&^|*' */
-    },
-];
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DyFM_usernameRegex = void 0;
+exports.DyFM_usernameRegex = new RegExp('^[a-zA-Z0-9-_#$%&^|*]{6,}$');
+/* export const FDP_usernameRegexUserMessage: string =
+  'Username must be at least 6 characters long and can only contain letters, ' +
+  'numbers, and the following special characters: -_#$%&^|*'; */
+/* export function getUsernameErrors(username: string): string[] {
+  const errors: string[] = [];
+
+  usernameErrorsOneByOne.forEach((error) => {
+    if (!error.regex.test(username)) {
+      errors.push(error.message);
+    }
+  });
+
+  return errors;
+} */
+const DyFM_usernameErrorsOneByOne = [
+    {
+        regex: new RegExp('^(?=.{6,})'),
+        code: 'usernameErrorLength',
+        /* message: 'Username must be at least 6 characters long.' */
+    },
+    {
+        regex: new RegExp('^(?=.*[a-zA-Z0-9-_#$%&^|*])'),
+        code: 'usernameErrorSpecialChar',
+        /* message:
+          'Username can only contain letters, numbers, and the following special characters: -_#$%&^|*' */
+    },
+];
 //# sourceMappingURL=username-regex.util.js.map

package/build/_collections/utils/require-env.util.d.ts

@@ -1,86 +1,86 @@
-/**
- * Options for `DyFM_requireEnv`. See the helper's JSDoc for usage.
- */
-export interface DyFM_RequireEnv_Options {
-    /**
-     * Stable error code emitted on the DyFM_Error when the env-var is missing
-     * and no fallback is configured. Convention: `<PACKAGE>-ENV-MISSING-<KEY>`,
-     * e.g. `DyNM-ENV-MISSING-STORAGE-KEY`, `FDP-ENV-MISSING-CORE-FE-AUTH-KEY`.
-     */
-    errorCode: string;
-    /**
-     * Short-code name of the package responsible for the env-var. Used as the
-     * DyFM_Error `___issuerService` for downstream filtering / dashboards.
-     */
-    issuerService: string;
-    /**
-     * Transition fallback. When set, returned if BOTH `process.env[name]` AND
-     * `DyFM_global_settings.envOverrides[name]` are missing.
-     *
-     * Use only during the additive phase of an env-var migration to keep the
-     * package backward-compatible while every deploy target rolls the new
-     * env-var out. Remove the `fallback` argument once the rollout is verified
-     * everywhere — then a missing env-var fail-fast crashes the consumer at
-     * first access with a structured DyFM_Error.
-     */
-    fallback?: string;
-    /**
-     * Admin-actionable user-facing message attached to the DyFM_Error. Defaults
-     * to a generic config-missing string referencing the env-var name.
-     */
-    userMessage?: string;
-}
-/**
- * FR-015 Phase 2 — isomorphic env-var requirement helper.
- *
- * Universal source of truth for "read this configuration key from an env-var
- * across Node and browser". Replaces per-package `requireEnv` helpers (the
- * Phase 1 local implementation in fdp-templates-nts is being refactored to
- * delegate here).
- *
- * Lookup order:
- *   1. `process.env[envVarName]` — Node-side (server const files at module load).
- *   2. `DyFM_global_settings.envOverrides[envVarName]` — browser-side, populated
- *      by the consumer at app bootstrap from its `environment.ts`. See
- *      DyFM_Global_Settings.envOverrides docs for the pattern.
- *   3. `options.fallback` if provided — used during migration's additive phase.
- *   4. throw a structured DyFM_Error with the full deploy-target checklist.
- *
- * The throw shape is rich on purpose (per the rich-error rule):
- *   - `___status` = 500 (configuration error)
- *   - `_errorCode` = caller-supplied stable code
- *   - `_message` = debug-level description with the env-var name + deploy-target
- *     checklist (host .env, docker-compose env-block, Overseer secrets-store,
- *     client environment.ts → bootstrap envOverrides)
- *   - `__userMessage` = admin-actionable message
- *   - `___issuerService` = caller-supplied package short-code
- *
- * @example Node server const file (module load):
- * ```ts
- * import { DyFM_requireEnv } from '@futdevpro/fsm-dynamo';
- *
- * export const FDP_keysEnv_settingsBase = {
- *   authKey: DyFM_requireEnv('FDP_CORE_FE_AUTH_KEY', {
- *     errorCode: 'FDP-ENV-MISSING-CORE-FE-AUTH-KEY',
- *     issuerService: 'fdp-templates',
- *     fallback: '<inherit literal>',   // remove for Wave 3
- *   }),
- * };
- * ```
- *
- * @example Browser-side lazy getter (deferred to first access, after consumer
- * bootstrap has populated DyFM_global_settings.envOverrides):
- * ```ts
- * let _cached: string | undefined;
- * function _resolveKey(): string {
- *   if (_cached !== undefined) return _cached;
- *   _cached = DyFM_requireEnv('DyNM_STORAGE_ENCRYPTION_KEY', { ... });
- *   return _cached;
- * }
- * export const DyNM_global_settings = {
- *   get storageEncryptionKey(): string { return _resolveKey(); },
- * };
- * ```
- */
-export declare function DyFM_requireEnv(envVarName: string, options: DyFM_RequireEnv_Options): string;
+/**
+ * Options for `DyFM_requireEnv`. See the helper's JSDoc for usage.
+ */
+export interface DyFM_RequireEnv_Options {
+    /**
+     * Stable error code emitted on the DyFM_Error when the env-var is missing
+     * and no fallback is configured. Convention: `<PACKAGE>-ENV-MISSING-<KEY>`,
+     * e.g. `DyNM-ENV-MISSING-STORAGE-KEY`, `FDP-ENV-MISSING-CORE-FE-AUTH-KEY`.
+     */
+    errorCode: string;
+    /**
+     * Short-code name of the package responsible for the env-var. Used as the
+     * DyFM_Error `___issuerService` for downstream filtering / dashboards.
+     */
+    issuerService: string;
+    /**
+     * Transition fallback. When set, returned if BOTH `process.env[name]` AND
+     * `DyFM_global_settings.envOverrides[name]` are missing.
+     *
+     * Use only during the additive phase of an env-var migration to keep the
+     * package backward-compatible while every deploy target rolls the new
+     * env-var out. Remove the `fallback` argument once the rollout is verified
+     * everywhere — then a missing env-var fail-fast crashes the consumer at
+     * first access with a structured DyFM_Error.
+     */
+    fallback?: string;
+    /**
+     * Admin-actionable user-facing message attached to the DyFM_Error. Defaults
+     * to a generic config-missing string referencing the env-var name.
+     */
+    userMessage?: string;
+}
+/**
+ * FR-015 Phase 2 — isomorphic env-var requirement helper.
+ *
+ * Universal source of truth for "read this configuration key from an env-var
+ * across Node and browser". Replaces per-package `requireEnv` helpers (the
+ * Phase 1 local implementation in fdp-templates-nts is being refactored to
+ * delegate here).
+ *
+ * Lookup order:
+ *   1. `process.env[envVarName]` — Node-side (server const files at module load).
+ *   2. `DyFM_global_settings.envOverrides[envVarName]` — browser-side, populated
+ *      by the consumer at app bootstrap from its `environment.ts`. See
+ *      DyFM_Global_Settings.envOverrides docs for the pattern.
+ *   3. `options.fallback` if provided — used during migration's additive phase.
+ *   4. throw a structured DyFM_Error with the full deploy-target checklist.
+ *
+ * The throw shape is rich on purpose (per the rich-error rule):
+ *   - `___status` = 500 (configuration error)
+ *   - `_errorCode` = caller-supplied stable code
+ *   - `_message` = debug-level description with the env-var name + deploy-target
+ *     checklist (host .env, docker-compose env-block, Overseer secrets-store,
+ *     client environment.ts → bootstrap envOverrides)
+ *   - `__userMessage` = admin-actionable message
+ *   - `___issuerService` = caller-supplied package short-code
+ *
+ * @example Node server const file (module load):
+ * ```ts
+ * import { DyFM_requireEnv } from '@futdevpro/fsm-dynamo';
+ *
+ * export const FDP_keysEnv_settingsBase = {
+ *   authKey: DyFM_requireEnv('FDP_CORE_FE_AUTH_KEY', {
+ *     errorCode: 'FDP-ENV-MISSING-CORE-FE-AUTH-KEY',
+ *     issuerService: 'fdp-templates',
+ *     fallback: '<inherit literal>',   // remove for Wave 3
+ *   }),
+ * };
+ * ```
+ *
+ * @example Browser-side lazy getter (deferred to first access, after consumer
+ * bootstrap has populated DyFM_global_settings.envOverrides):
+ * ```ts
+ * let _cached: string | undefined;
+ * function _resolveKey(): string {
+ *   if (_cached !== undefined) return _cached;
+ *   _cached = DyFM_requireEnv('DyNM_STORAGE_ENCRYPTION_KEY', { ... });
+ *   return _cached;
+ * }
+ * export const DyNM_global_settings = {
+ *   get storageEncryptionKey(): string { return _resolveKey(); },
+ * };
+ * ```
+ */
+export declare function DyFM_requireEnv(envVarName: string, options: DyFM_RequireEnv_Options): string;
 //# sourceMappingURL=require-env.util.d.ts.map

package/build/_collections/utils/require-env.util.js

@@ -1,94 +1,94 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.DyFM_requireEnv = DyFM_requireEnv;
-const error_control_model_1 = require("../../_models/control-models/error.control-model");
-const global_settings_const_1 = require("../constants/global-settings.const");
-/**
- * FR-015 Phase 2 — isomorphic env-var requirement helper.
- *
- * Universal source of truth for "read this configuration key from an env-var
- * across Node and browser". Replaces per-package `requireEnv` helpers (the
- * Phase 1 local implementation in fdp-templates-nts is being refactored to
- * delegate here).
- *
- * Lookup order:
- *   1. `process.env[envVarName]` — Node-side (server const files at module load).
- *   2. `DyFM_global_settings.envOverrides[envVarName]` — browser-side, populated
- *      by the consumer at app bootstrap from its `environment.ts`. See
- *      DyFM_Global_Settings.envOverrides docs for the pattern.
- *   3. `options.fallback` if provided — used during migration's additive phase.
- *   4. throw a structured DyFM_Error with the full deploy-target checklist.
- *
- * The throw shape is rich on purpose (per the rich-error rule):
- *   - `___status` = 500 (configuration error)
- *   - `_errorCode` = caller-supplied stable code
- *   - `_message` = debug-level description with the env-var name + deploy-target
- *     checklist (host .env, docker-compose env-block, Overseer secrets-store,
- *     client environment.ts → bootstrap envOverrides)
- *   - `__userMessage` = admin-actionable message
- *   - `___issuerService` = caller-supplied package short-code
- *
- * @example Node server const file (module load):
- * ```ts
- * import { DyFM_requireEnv } from '@futdevpro/fsm-dynamo';
- *
- * export const FDP_keysEnv_settingsBase = {
- *   authKey: DyFM_requireEnv('FDP_CORE_FE_AUTH_KEY', {
- *     errorCode: 'FDP-ENV-MISSING-CORE-FE-AUTH-KEY',
- *     issuerService: 'fdp-templates',
- *     fallback: '<inherit literal>',   // remove for Wave 3
- *   }),
- * };
- * ```
- *
- * @example Browser-side lazy getter (deferred to first access, after consumer
- * bootstrap has populated DyFM_global_settings.envOverrides):
- * ```ts
- * let _cached: string | undefined;
- * function _resolveKey(): string {
- *   if (_cached !== undefined) return _cached;
- *   _cached = DyFM_requireEnv('DyNM_STORAGE_ENCRYPTION_KEY', { ... });
- *   return _cached;
- * }
- * export const DyNM_global_settings = {
- *   get storageEncryptionKey(): string { return _resolveKey(); },
- * };
- * ```
- */
-function DyFM_requireEnv(envVarName, options) {
-    // Node path: process.env at module-load time. Guarded for browser bundles
-    // where `process` may be undefined or shimmed without runtime values.
-    if (typeof process !== 'undefined' && process.env && process.env[envVarName]) {
-        return process.env[envVarName];
-    }
-    // Browser path: consumer-populated envOverrides map. Populated at app
-    // bootstrap from environment.ts — see DyFM_Global_Settings.envOverrides.
-    const override = global_settings_const_1.DyFM_global_settings.envOverrides?.[envVarName];
-    if (override) {
-        return override;
-    }
-    // Transition fallback (Wave 1 of an FR-015-style migration).
-    if (options.fallback !== undefined) {
-        return options.fallback;
-    }
-    // Missing — fail fast with a rich, debug-friendly DyFM_Error.
-    throw new error_control_model_1.DyFM_Error({
-        status: 500,
-        errorCode: options.errorCode,
-        message: `Environment variable '${envVarName}' is required but was not found. ` +
-            `Checked: process.env.${envVarName} (Node) and ` +
-            `DyFM_global_settings.envOverrides['${envVarName}'] (browser). ` +
-            `Both unset, and no transition fallback configured. ` +
-            `Set '${envVarName}' on every deploy target before deploying this ` +
-            `package version: (1) host .env on every host running a backend, ` +
-            `(2) docker-compose env-block on every consumer service, ` +
-            `(3) Overseer secrets-store entry for CI builds, ` +
-            `(4) client environment.ts plus app-bootstrap copy into ` +
-            `DyFM_global_settings.envOverrides for any browser consumer.`,
-        userMessage: options.userMessage
-            ?? `Configuration error — environment variable '${envVarName}' is missing. `
-                + `Contact the responsible operator to set it on this deploy target.`,
-        issuerService: options.issuerService,
-    });
-}
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DyFM_requireEnv = DyFM_requireEnv;
+const error_control_model_1 = require("../../_models/control-models/error.control-model");
+const global_settings_const_1 = require("../constants/global-settings.const");
+/**
+ * FR-015 Phase 2 — isomorphic env-var requirement helper.
+ *
+ * Universal source of truth for "read this configuration key from an env-var
+ * across Node and browser". Replaces per-package `requireEnv` helpers (the
+ * Phase 1 local implementation in fdp-templates-nts is being refactored to
+ * delegate here).
+ *
+ * Lookup order:
+ *   1. `process.env[envVarName]` — Node-side (server const files at module load).
+ *   2. `DyFM_global_settings.envOverrides[envVarName]` — browser-side, populated
+ *      by the consumer at app bootstrap from its `environment.ts`. See
+ *      DyFM_Global_Settings.envOverrides docs for the pattern.
+ *   3. `options.fallback` if provided — used during migration's additive phase.
+ *   4. throw a structured DyFM_Error with the full deploy-target checklist.
+ *
+ * The throw shape is rich on purpose (per the rich-error rule):
+ *   - `___status` = 500 (configuration error)
+ *   - `_errorCode` = caller-supplied stable code
+ *   - `_message` = debug-level description with the env-var name + deploy-target
+ *     checklist (host .env, docker-compose env-block, Overseer secrets-store,
+ *     client environment.ts → bootstrap envOverrides)
+ *   - `__userMessage` = admin-actionable message
+ *   - `___issuerService` = caller-supplied package short-code
+ *
+ * @example Node server const file (module load):
+ * ```ts
+ * import { DyFM_requireEnv } from '@futdevpro/fsm-dynamo';
+ *
+ * export const FDP_keysEnv_settingsBase = {
+ *   authKey: DyFM_requireEnv('FDP_CORE_FE_AUTH_KEY', {
+ *     errorCode: 'FDP-ENV-MISSING-CORE-FE-AUTH-KEY',
+ *     issuerService: 'fdp-templates',
+ *     fallback: '<inherit literal>',   // remove for Wave 3
+ *   }),
+ * };
+ * ```
+ *
+ * @example Browser-side lazy getter (deferred to first access, after consumer
+ * bootstrap has populated DyFM_global_settings.envOverrides):
+ * ```ts
+ * let _cached: string | undefined;
+ * function _resolveKey(): string {
+ *   if (_cached !== undefined) return _cached;
+ *   _cached = DyFM_requireEnv('DyNM_STORAGE_ENCRYPTION_KEY', { ... });
+ *   return _cached;
+ * }
+ * export const DyNM_global_settings = {
+ *   get storageEncryptionKey(): string { return _resolveKey(); },
+ * };
+ * ```
+ */
+function DyFM_requireEnv(envVarName, options) {
+    // Node path: process.env at module-load time. Guarded for browser bundles
+    // where `process` may be undefined or shimmed without runtime values.
+    if (typeof process !== 'undefined' && process.env && process.env[envVarName]) {
+        return process.env[envVarName];
+    }
+    // Browser path: consumer-populated envOverrides map. Populated at app
+    // bootstrap from environment.ts — see DyFM_Global_Settings.envOverrides.
+    const override = global_settings_const_1.DyFM_global_settings.envOverrides?.[envVarName];
+    if (override) {
+        return override;
+    }
+    // Transition fallback (Wave 1 of an FR-015-style migration).
+    if (options.fallback !== undefined) {
+        return options.fallback;
+    }
+    // Missing — fail fast with a rich, debug-friendly DyFM_Error.
+    throw new error_control_model_1.DyFM_Error({
+        status: 500,
+        errorCode: options.errorCode,
+        message: `Environment variable '${envVarName}' is required but was not found. ` +
+            `Checked: process.env.${envVarName} (Node) and ` +
+            `DyFM_global_settings.envOverrides['${envVarName}'] (browser). ` +
+            `Both unset, and no transition fallback configured. ` +
+            `Set '${envVarName}' on every deploy target before deploying this ` +
+            `package version: (1) host .env on every host running a backend, ` +
+            `(2) docker-compose env-block on every consumer service, ` +
+            `(3) Overseer secrets-store entry for CI builds, ` +
+            `(4) client environment.ts plus app-bootstrap copy into ` +
+            `DyFM_global_settings.envOverrides for any browser consumer.`,
+        userMessage: options.userMessage
+            ?? `Configuration error — environment variable '${envVarName}' is missing. `
+                + `Contact the responsible operator to set it on this deploy target.`,
+        issuerService: options.issuerService,
+    });
+}
 //# sourceMappingURL=require-env.util.js.map