@futdevpro/nts-dynamo 1.15.115 → 1.15.117

package/src/_modules/ai/_modules/ai-mock/_services/aim-mock.service.ts

@@ -81,15 +81,28 @@ export class DyNTS_AIMock_Service {
     };
   }
 
-  /** A közös replay/reject-mag. */
+  /**
+   * A közös replay/reject-mag.
+   *
+   * **Sorrend: FIXTURE ELŐSZÖR, validátor csak fallbackként.** Ha van beégetett fixture erre a pontos
+   * kérésre, az a FÖLDIGAZSÁG — valódi providertől rögzített, byte-hű válasz vagy hiba —, ezért mindig
+   * az nyer a szintetizált validátor-hibával szemben.
+   *
+   * (Korábban fordítva volt, „ahogy a szerver is validál a generálás előtt". Csakhogy emiatt a
+   * byte-pontosan rögzített provider-hibák SOSEM jutottak érvényre: pl. `gpt-4o-mini` + `temperature: 3`
+   * esetén a sablonom „out of range" szövege jött a valódi „decimal above maximum value. Expected a
+   * value <= 2, but got 3 instead." helyett. A capture értelme épp az, hogy a valódit adjuk vissza.)
+   *
+   * Fixture hiányában a `settingsSchema`-alapú validáció fut — így a NEM rögzített szabálysértések is
+   * provider-hű hibát kapnak, nem pusztán „nincs ilyen fixture"-t.
+   */
   private replay(request: DyNTS_AIMock_Request): unknown {
-    // FR-048: a config-validáció a modell `settingsSchema.unsupported`-ja alapján — MÉG a fixture-lookup
-    // ELŐTT, ahogy a valódi providernél is a szerver utasítja el a rossz paramétert.
-    this.validateConfig(request);
-
     const fixture: DyNTS_AIMock_Fixture | undefined = this.store.resolve(request);
 
     if (!fixture) {
+      // nincs rogzitett valasz → a schema-alapu validacio meg adhat provider-hu hibat
+      this.validateConfig(request);
+
       throw this.rejectOnUnknown(request);
     }
 

package/src/_modules/ai/_modules/ai-mock/fixtures/aim-text.fixtures.ts

@@ -1,12 +1,253 @@
 import { DyNTS_AIMock_Fixture } from '../_models/interfaces/aim-fixture.interface';
 
 /**
- * Valodi AI-generalasbol beegetve (live capture 2026-07-21/22). Kezzel NE szerkeszd.
+ * Valodi AI-hivasokbol beegetve (live capture 2026-07-21/22). Kezzel NE szerkeszd.
  *
  * Determinisztikus sorrend (match-kulcs szerint) + rendezett objektum-kulcsok, hogy az ujra-generalas
  * ne okozzon zajos diff-et. Forras: `DyNTS_AIMock_FixtureSerializer_Util`.
  */
 export const DyNTS_AIMock_TextFixtures: DyNTS_AIMock_Fixture[] = [
+  {
+    "capturedAt": "2026-07-22T14:43:14.877Z",
+    "config": {},
+    "error": {
+      "httpStatus": 404,
+      "providerErrorBody": {
+        "error": {
+          "message": "model: claude-does-not-exist-xyz",
+          "type": "not_found_error"
+        },
+        "request_id": "req_011CdHGoEQRATWS7pGsctzvi",
+        "type": "error"
+      },
+      "reason": "aai-unknown-model"
+    },
+    "input": "hi",
+    "inputHash": "8f434346648f6b96df89dda901c5176b10a6d83961dd3c1ac88b59b2dc327aa4",
+    "modality": "text",
+    "model": "claude-does-not-exist-xyz",
+    "provider": "anthropic",
+    "sourceModel": "claude-does-not-exist-xyz"
+  },
+  {
+    "capturedAt": "2026-07-22T14:44:01.069Z",
+    "config": {
+      "maxTokens": 32
+    },
+    "input": "Reply with exactly: PONG",
+    "inputHash": "0fb5aed1b51b28b04409b7963b2453fe1597d198c3b8396fc8ebd072104511de",
+    "modality": "text",
+    "model": "claude-haiku-4-5",
+    "output": {
+      "content": "PONG",
+      "model": "claude-haiku-4-5-20251001",
+      "stop_reason": "end_turn",
+      "usage": {
+        "cache_creation": {
+          "ephemeral_1h_input_tokens": 0,
+          "ephemeral_5m_input_tokens": 0
+        },
+        "cache_creation_input_tokens": 0,
+        "cache_read_input_tokens": 0,
+        "inference_geo": "not_available",
+        "input_tokens": 14,
+        "output_tokens": 6,
+        "service_tier": "standard"
+      }
+    },
+    "provider": "anthropic",
+    "sourceModel": "claude-haiku-4-5"
+  },
+  {
+    "capturedAt": "2026-07-22T14:44:01.756Z",
+    "config": {
+      "maxTokens": 32
+    },
+    "input": "What is the capital of Hungary? One word.",
+    "inputHash": "85c5b3ea12c8e34d97a18cb75ae55936aeb2ef0af90eb2f395a44ace6ce997e8",
+    "modality": "text",
+    "model": "claude-haiku-4-5",
+    "output": {
+      "content": "Budapest",
+      "model": "claude-haiku-4-5-20251001",
+      "stop_reason": "end_turn",
+      "usage": {
+        "cache_creation": {
+          "ephemeral_1h_input_tokens": 0,
+          "ephemeral_5m_input_tokens": 0
+        },
+        "cache_creation_input_tokens": 0,
+        "cache_read_input_tokens": 0,
+        "inference_geo": "not_available",
+        "input_tokens": 17,
+        "output_tokens": 4,
+        "service_tier": "standard"
+      }
+    },
+    "provider": "anthropic",
+    "sourceModel": "claude-haiku-4-5"
+  },
+  {
+    "capturedAt": "2026-07-22T14:43:13.881Z",
+    "config": {
+      "temperature": 0.5
+    },
+    "error": {
+      "httpStatus": 400,
+      "providerErrorBody": {
+        "error": {
+          "message": "`temperature` is deprecated for this model.",
+          "type": "invalid_request_error"
+        },
+        "request_id": "req_011CdHGo9kdD2NVBTFPkMgXs",
+        "type": "error"
+      },
+      "reason": "aai-opus-temperature"
+    },
+    "input": "hi",
+    "inputHash": "8f434346648f6b96df89dda901c5176b10a6d83961dd3c1ac88b59b2dc327aa4",
+    "modality": "text",
+    "model": "claude-opus-4-8",
+    "provider": "anthropic",
+    "sourceModel": "claude-opus-4-8"
+  },
+  {
+    "capturedAt": "2026-07-22T14:43:13.493Z",
+    "config": {
+      "temperature": 1.5
+    },
+    "error": {
+      "httpStatus": 400,
+      "providerErrorBody": {
+        "error": {
+          "message": "temperature: range: 0..1",
+          "type": "invalid_request_error"
+        },
+        "request_id": "req_011CdHGo7aeyfawRbTxee9oA",
+        "type": "error"
+      },
+      "reason": "aai-sonnet-temperature-1.5"
+    },
+    "input": "hi",
+    "inputHash": "8f434346648f6b96df89dda901c5176b10a6d83961dd3c1ac88b59b2dc327aa4",
+    "modality": "text",
+    "model": "claude-sonnet-4-6",
+    "provider": "anthropic",
+    "sourceModel": "claude-sonnet-4-6"
+  },
+  {
+    "capturedAt": "2026-07-22T14:43:15.035Z",
+    "config": {
+      "temperature": 5
+    },
+    "error": {
+      "httpStatus": 400,
+      "providerErrorBody": {
+        "error": {
+          "code": 400,
+          "message": "* GenerateContentRequest.generation_config.temperature: temperature must be in the range [0.0, 2.0].\n",
+          "status": "INVALID_ARGUMENT"
+        }
+      },
+      "reason": "gai-range-temperature"
+    },
+    "input": "hi",
+    "inputHash": "8f434346648f6b96df89dda901c5176b10a6d83961dd3c1ac88b59b2dc327aa4",
+    "modality": "text",
+    "model": "gemini-3.5-flash",
+    "provider": "google",
+    "sourceModel": "gemini-3.5-flash"
+  },
+  {
+    "capturedAt": "2026-07-22T14:43:15.224Z",
+    "config": {
+      "topP": 1.5
+    },
+    "error": {
+      "httpStatus": 400,
+      "providerErrorBody": {
+        "error": {
+          "code": 400,
+          "message": "* GenerateContentRequest.generation_config.top_p: top_p must be in the range [0.0, 1.0].\n",
+          "status": "INVALID_ARGUMENT"
+        }
+      },
+      "reason": "gai-range-topP"
+    },
+    "input": "hi",
+    "inputHash": "8f434346648f6b96df89dda901c5176b10a6d83961dd3c1ac88b59b2dc327aa4",
+    "modality": "text",
+    "model": "gemini-3.5-flash",
+    "provider": "google",
+    "sourceModel": "gemini-3.5-flash"
+  },
+  {
+    "capturedAt": "2026-07-22T14:43:15.333Z",
+    "config": {
+      "topK": -1
+    },
+    "error": {
+      "httpStatus": 400,
+      "providerErrorBody": {
+        "error": {
+          "code": 400,
+          "message": "* GenerateContentRequest.generation_config.top_k: top_k must be nonnegative.\n",
+          "status": "INVALID_ARGUMENT"
+        }
+      },
+      "reason": "gai-range-topK"
+    },
+    "input": "hi",
+    "inputHash": "8f434346648f6b96df89dda901c5176b10a6d83961dd3c1ac88b59b2dc327aa4",
+    "modality": "text",
+    "model": "gemini-3.5-flash",
+    "provider": "google",
+    "sourceModel": "gemini-3.5-flash"
+  },
+  {
+    "capturedAt": "2026-07-22T14:43:15.528Z",
+    "config": {
+      "candidateCount": 99
+    },
+    "error": {
+      "httpStatus": 400,
+      "providerErrorBody": {
+        "error": {
+          "code": 400,
+          "message": "* GenerateContentRequest.generation_config.candidate_count: candidate_count must be in the range [1, 8].\n",
+          "status": "INVALID_ARGUMENT"
+        }
+      },
+      "reason": "gai-range-candidateCount"
+    },
+    "input": "hi",
+    "inputHash": "8f434346648f6b96df89dda901c5176b10a6d83961dd3c1ac88b59b2dc327aa4",
+    "modality": "text",
+    "model": "gemini-3.5-flash",
+    "provider": "google",
+    "sourceModel": "gemini-3.5-flash"
+  },
+  {
+    "capturedAt": "2026-07-22T14:43:15.636Z",
+    "config": {},
+    "error": {
+      "httpStatus": 404,
+      "providerErrorBody": {
+        "error": {
+          "code": 404,
+          "message": "models/gemini-does-not-exist-xyz is not found for API version v1beta, or is not supported for generateContent. Call ModelService.ListModels to see the list of available models and their supported methods.",
+          "status": "NOT_FOUND"
+        }
+      },
+      "reason": "gai-unknown-model"
+    },
+    "input": "hi",
+    "inputHash": "8f434346648f6b96df89dda901c5176b10a6d83961dd3c1ac88b59b2dc327aa4",
+    "modality": "text",
+    "model": "gemini-does-not-exist-xyz",
+    "provider": "google",
+    "sourceModel": "gemini-does-not-exist-xyz"
+  },
   {
     "capturedAt": "2026-07-22T00:58:38.792Z",
     "config": {
@@ -38,6 +279,174 @@ export const DyNTS_AIMock_TextFixtures: DyNTS_AIMock_Fixture[] = [
     "provider": "open-ai",
     "sourceModel": "gpt-4o-mini"
   },
+  {
+    "capturedAt": "2026-07-22T14:43:10.345Z",
+    "config": {
+      "temperature": 3
+    },
+    "error": {
+      "httpStatus": 400,
+      "providerErrorBody": {
+        "error": {
+          "code": "decimal_above_max_value",
+          "message": "Invalid 'temperature': decimal above maximum value. Expected a value <= 2, but got 3 instead.",
+          "param": "temperature",
+          "type": "invalid_request_error"
+        }
+      },
+      "reason": "oai-range-temperature-3"
+    },
+    "input": "hi",
+    "inputHash": "8f434346648f6b96df89dda901c5176b10a6d83961dd3c1ac88b59b2dc327aa4",
+    "modality": "text",
+    "model": "gpt-4o-mini",
+    "provider": "open-ai",
+    "sourceModel": "gpt-4o-mini"
+  },
+  {
+    "capturedAt": "2026-07-22T14:43:10.778Z",
+    "config": {
+      "topP": 1.5
+    },
+    "error": {
+      "httpStatus": 400,
+      "providerErrorBody": {
+        "error": {
+          "code": "decimal_above_max_value",
+          "message": "Invalid 'top_p': decimal above maximum value. Expected a value <= 1, but got 1.5 instead.",
+          "param": "top_p",
+          "type": "invalid_request_error"
+        }
+      },
+      "reason": "oai-range-top_p-1.5"
+    },
+    "input": "hi",
+    "inputHash": "8f434346648f6b96df89dda901c5176b10a6d83961dd3c1ac88b59b2dc327aa4",
+    "modality": "text",
+    "model": "gpt-4o-mini",
+    "provider": "open-ai",
+    "sourceModel": "gpt-4o-mini"
+  },
+  {
+    "capturedAt": "2026-07-22T14:43:11.056Z",
+    "config": {
+      "frequencyPenalty": 5
+    },
+    "error": {
+      "httpStatus": 400,
+      "providerErrorBody": {
+        "error": {
+          "code": "decimal_above_max_value",
+          "message": "Invalid 'frequency_penalty': decimal above maximum value. Expected a value <= 2, but got 5 instead.",
+          "param": "frequency_penalty",
+          "type": "invalid_request_error"
+        }
+      },
+      "reason": "oai-range-frequency_penalty-5"
+    },
+    "input": "hi",
+    "inputHash": "8f434346648f6b96df89dda901c5176b10a6d83961dd3c1ac88b59b2dc327aa4",
+    "modality": "text",
+    "model": "gpt-4o-mini",
+    "provider": "open-ai",
+    "sourceModel": "gpt-4o-mini"
+  },
+  {
+    "capturedAt": "2026-07-22T14:43:07.580Z",
+    "config": {
+      "temperature": 0.5
+    },
+    "error": {
+      "httpStatus": 400,
+      "providerErrorBody": {
+        "error": {
+          "code": null,
+          "message": "Could not finish the message because max_tokens or model output limit was reached. Please try again with higher max_tokens.",
+          "param": null,
+          "type": "invalid_request_error"
+        }
+      },
+      "reason": "oai-reasoning-temperature"
+    },
+    "input": "hi",
+    "inputHash": "8f434346648f6b96df89dda901c5176b10a6d83961dd3c1ac88b59b2dc327aa4",
+    "modality": "text",
+    "model": "gpt-5.4-mini",
+    "provider": "open-ai",
+    "sourceModel": "gpt-5.4-mini"
+  },
+  {
+    "capturedAt": "2026-07-22T14:43:08.623Z",
+    "config": {
+      "top_p": 0.5
+    },
+    "error": {
+      "httpStatus": 400,
+      "providerErrorBody": {
+        "error": {
+          "code": null,
+          "message": "Could not finish the message because max_tokens or model output limit was reached. Please try again with higher max_tokens.",
+          "param": null,
+          "type": "invalid_request_error"
+        }
+      },
+      "reason": "oai-reasoning-top_p"
+    },
+    "input": "hi",
+    "inputHash": "8f434346648f6b96df89dda901c5176b10a6d83961dd3c1ac88b59b2dc327aa4",
+    "modality": "text",
+    "model": "gpt-5.4-mini",
+    "provider": "open-ai",
+    "sourceModel": "gpt-5.4-mini"
+  },
+  {
+    "capturedAt": "2026-07-22T14:43:09.268Z",
+    "config": {
+      "frequency_penalty": 0.5
+    },
+    "error": {
+      "httpStatus": 400,
+      "providerErrorBody": {
+        "error": {
+          "code": null,
+          "message": "Could not finish the message because max_tokens or model output limit was reached. Please try again with higher max_tokens.",
+          "param": null,
+          "type": "invalid_request_error"
+        }
+      },
+      "reason": "oai-reasoning-frequency_penalty"
+    },
+    "input": "hi",
+    "inputHash": "8f434346648f6b96df89dda901c5176b10a6d83961dd3c1ac88b59b2dc327aa4",
+    "modality": "text",
+    "model": "gpt-5.4-mini",
+    "provider": "open-ai",
+    "sourceModel": "gpt-5.4-mini"
+  },
+  {
+    "capturedAt": "2026-07-22T14:43:09.908Z",
+    "config": {
+      "presence_penalty": 0.5
+    },
+    "error": {
+      "httpStatus": 400,
+      "providerErrorBody": {
+        "error": {
+          "code": null,
+          "message": "Could not finish the message because max_tokens or model output limit was reached. Please try again with higher max_tokens.",
+          "param": null,
+          "type": "invalid_request_error"
+        }
+      },
+      "reason": "oai-reasoning-presence_penalty"
+    },
+    "input": "hi",
+    "inputHash": "8f434346648f6b96df89dda901c5176b10a6d83961dd3c1ac88b59b2dc327aa4",
+    "modality": "text",
+    "model": "gpt-5.4-mini",
+    "provider": "open-ai",
+    "sourceModel": "gpt-5.4-mini"
+  },
   {
     "capturedAt": "2026-07-22T00:58:37.828Z",
     "config": {
@@ -100,6 +509,28 @@ export const DyNTS_AIMock_TextFixtures: DyNTS_AIMock_Fixture[] = [
     "provider": "open-ai",
     "sourceModel": "gpt-5.4-nano"
   },
+  {
+    "capturedAt": "2026-07-22T14:43:11.254Z",
+    "config": {},
+    "error": {
+      "httpStatus": 404,
+      "providerErrorBody": {
+        "error": {
+          "code": "model_not_found",
+          "message": "The model `gpt-does-not-exist-xyz` does not exist or you do not have access to it.",
+          "param": null,
+          "type": "invalid_request_error"
+        }
+      },
+      "reason": "oai-unknown-model"
+    },
+    "input": "hi",
+    "inputHash": "8f434346648f6b96df89dda901c5176b10a6d83961dd3c1ac88b59b2dc327aa4",
+    "modality": "text",
+    "model": "gpt-does-not-exist-xyz",
+    "provider": "open-ai",
+    "sourceModel": "gpt-does-not-exist-xyz"
+  },
   {
     "capturedAt": "2026-07-22T13:50:16.666Z",
     "config": {
@@ -162,6 +593,30 @@ export const DyNTS_AIMock_TextFixtures: DyNTS_AIMock_Fixture[] = [
     "provider": "open-ai",
     "sourceModel": "text-embedding-3-small"
   },
+  {
+    "capturedAt": "2026-07-22T14:43:12.230Z",
+    "config": {
+      "dimensions": 5000
+    },
+    "error": {
+      "httpStatus": 400,
+      "providerErrorBody": {
+        "error": {
+          "code": null,
+          "message": "Invalid value for 'dimensions' = 5000. Must be less than or equal to 1536.",
+          "param": null,
+          "type": "invalid_request_error"
+        }
+      },
+      "reason": "oai-emb-dimensions-5000"
+    },
+    "input": "hi",
+    "inputHash": "8f434346648f6b96df89dda901c5176b10a6d83961dd3c1ac88b59b2dc327aa4",
+    "modality": "embedding",
+    "model": "text-embedding-3-small",
+    "provider": "open-ai",
+    "sourceModel": "text-embedding-3-small"
+  },
   {
     "capturedAt": "2026-07-22T00:58:39.020Z",
     "config": {},

package/src/_modules/server/server-status/server-status.controller.spec.ts

@@ -237,6 +237,27 @@ describe('| DyNTS_ServerStatus_Controller', () => {
       expect(guardCalls).withContext('guard runs despite configure() AFTER setupEndpoints').toBe(1);
     });
 
+    // 2026-07-22 — a `/diag` EGYIK listaban sem szerepelt (sem publikus-proba, sem default-vedett),
+    // ezert MINDEN FDP-szolgaltatason NYITOTT volt: elesben 200 + event-loop lag-history, aktiv
+    // handle-ok, memoria-nyomas, uptime. Nem szandek volt, hanem kimaradas. Ez a teszt rogziti, hogy
+    // explicit lista NELKUL a diag VEDETT — es hogy a publikus probak ettol valtozatlanul nyitva vannak.
+    it('| getServerDiag is protected BY DEFAULT, while the public probes stay open', async (): Promise<void> => {
+      const c: any = new (TestServerStatusController as any)(); // ccap-review-disable-line no-any-type
+      c.setupEndpoints();
+      DyNTS_ServerStatus_Controller.configure({ authPreProcess: spyAuth }); // NINCS explicit lista → default
+
+      await runGuard(c, 'getServerDiag');
+      expect(guardCalls).withContext('a /diag guard-olt a default listaval').toBe(1);
+
+      guardCalls = 0;
+      await runGuard(c, 'getServerHealth');
+      expect(guardCalls).withContext('a publikus proba NEM gate-elt').toBe(0);
+
+      guardCalls = 0;
+      await runGuard(c, 'getServerReadiness');
+      expect(guardCalls).withContext('a readiness-proba NEM gate-elt').toBe(0);
+    });
+
     it('| getAuthConfig() returns the active config', (): void => {
       const fakeAuth = async (): Promise<void> => { /* noop */ };
       DyNTS_ServerStatus_Controller.configure({ authPreProcess: fakeAuth, protectedEndpoints: [ 'getErrorStatistics' ] });

package/src/_modules/server/server-status/server-status.controller.ts

@@ -57,11 +57,27 @@ const PUBLIC_PROBE_ENDPOINTS: string[] = [
 ];
 
 /**
- * Default vedett vegpontok (ha a host nem ad `protectedEndpoints`-t): csak a valodi
- * admin-adat vegpont (`getErrorStatistics`). A status-vegpontok publikusak (lasd fent).
+ * Default vedett vegpontok (ha a host nem ad `protectedEndpoints`-t): a valodi admin-adat
+ * vegpontok. A status-probak publikusak (lasd `PUBLIC_PROBE_ENDPOINTS` fent).
+ *
+ * `getServerDiag` (2026-07-22): a `/diag` **EGYIK listaban sem szerepelt** — sem a publikus
+ * probak kozott, sem itt —, ezert **minden FDP-szolgaltatason NYITOTT volt**: elesben 200-at adott
+ * event-loop lag-history-val, aktiv handle-szammal, memoria-nyomassal es uptime-mal. Ez nem szandek
+ * volt, hanem kimaradas: az endpoint a BFR-OVERSEER-007-tel keszult, es a ket lista egyiket sem
+ * frissitettek hozza. A sajat doc-blockja "belso jel"-nek nevezi (amit a kivulrol-nezo health NEM lat),
+ * es `lazyPreProcessesFor`-ral kotott — vagyis SZANDEKOSAN gate-elheto, ellentetben a hard-publikus
+ * probakkal. Ezert a biztonsagos default: VEDETT.
+ *
+ * Kockazat: az operativ telemetria (mikor van a szolgaltatas nyomas alatt) tamado szamara
+ * idozites-informacio. Merve: a flottaban SEMMI nem fogyasztja (`fdp` CLI, webhook, compose-healthcheck,
+ * e2e-suite-ok — mind ures), tehat a gate-eles nem tor el semmit.
+ *
+ * ⚠️ A host `protectedEndpoints`-ja FELULIRJA ezt a listat — az explicit listat hasznalo appokban
+ * kulon fel kell venni a nevet (l. a projekt-szintu kovetes).
  */
 const DEFAULT_PROTECTED_ENDPOINTS: string[] = [
   'getErrorStatistics',
+  'getServerDiag',
 ];
 
 /**