@futdevpro/nts-dynamo 1.15.117 → 1.15.119

package/.dynamo/logs/cicd-pipeline/status.json

@@ -1,7 +1,7 @@
 {
-  "pid": 12980,
-  "startedAt": "2026-07-22T16:27:24.871Z",
-  "startedAtMs": 1784737644871,
+  "pid": 15048,
+  "startedAt": "2026-07-26T21:11:37.191Z",
+  "startedAtMs": 1785100297191,
   "phase": "npm-publish",
   "pipelineComplete": false,
   "serverRunning": false,
@@ -10,77 +10,83 @@
   "steps": {
     "validate-secrets": {
       "status": "ok",
-      "startedAt": "2026-07-22T16:27:24.886Z",
+      "startedAt": "2026-07-26T21:11:37.214Z",
       "logLineStart": 2,
       "logLineEnd": 8,
-      "durationSec": 0.2
+      "durationSec": 0.3
     },
     "discord-start": {
       "status": "ok",
-      "startedAt": "2026-07-22T16:27:26.115Z",
+      "startedAt": "2026-07-26T21:11:38.480Z",
       "logLineStart": 9,
       "logLineEnd": 14,
       "durationSec": 3
     },
     "pre-flight": {
       "status": "ok",
-      "startedAt": "2026-07-22T16:27:30.142Z",
+      "startedAt": "2026-07-26T21:11:42.473Z",
       "logLineStart": 15,
       "logLineEnd": 17,
       "durationSec": 0.2
     },
     "install": {
       "status": "ok",
-      "startedAt": "2026-07-22T16:27:31.332Z",
+      "startedAt": "2026-07-26T21:11:43.675Z",
       "logLineStart": 18,
-      "logLineEnd": 99,
-      "durationSec": 20.2
+      "logLineEnd": 104,
+      "durationSec": 25.6
     },
     "check-dev-leftovers": {
       "status": "ok",
-      "startedAt": "2026-07-22T16:27:52.517Z",
-      "logLineStart": 100,
-      "logLineEnd": 107,
-      "durationSec": 4.2
+      "startedAt": "2026-07-26T21:12:10.230Z",
+      "logLineStart": 105,
+      "logLineEnd": 112,
+      "durationSec": 4.4
     },
     "build": {
       "status": "ok",
-      "startedAt": "2026-07-22T16:27:57.733Z",
-      "logLineStart": 108,
-      "logLineEnd": 109,
-      "durationSec": 23.7
+      "startedAt": "2026-07-26T21:12:15.627Z",
+      "logLineStart": 113,
+      "logLineEnd": 114,
+      "durationSec": 27.8
     },
     "test": {
       "status": "ok",
-      "startedAt": "2026-07-22T16:28:22.412Z",
-      "logLineStart": 110,
-      "logLineEnd": 2800,
-      "durationSec": 21.7,
+      "startedAt": "2026-07-26T21:12:44.425Z",
+      "logLineStart": 115,
+      "logLineEnd": 2839,
+      "durationSec": 20.3,
       "testSummary": {
-        "totalSpecs": 1576,
+        "totalSpecs": 1593,
         "failures": 0,
-        "passed": 1576,
-        "testDurationSec": 6.499
+        "passed": 1593,
+        "testDurationSec": 6.601
       },
       "errors": [
         {
-          "line": 1779,
-          "text": ".....(checkDbReadiness) diagnostics collection failed (non-fatal) Error: diag boom",
-          "details": ".....INVALID route type: invalid - undefined\n......DYNAMO-NTS ERROR: INVALID route type: invalid - undefined\n..*****..................ServerStatus snapshot created\nat Object.get host [as host] (/tmp/pipeline-runs/af24a796-61b4-449c-9323-2372640557e4/build/_modules/server/server-status/server-status.control-service.spec.js:487:36)\nat TestServerStatusControlService.checkDbReadiness (/tmp/pipeline-runs/af24a796-61b4-449c-9323-2372640557e4/build/_modules/server/server-status/server-status.control-service.js:177:29)\nat async UserContext.<anonymous> (/tmp/pipeline-runs/af24a796-61b4-449c-9323-2372640557e4/build/_modules/server/server-status/server-status.control-service.spec.js:490:28)",
-          "detailLineEnd": 1782
+          "line": 386,
+          "text": "......................................(checkDbReadiness) diagnostics collection failed (non-fatal) Error: diag boom",
+          "details": ".Authentication Service missing!\n.Authentication Service missing!\n.Authentication Service missing!\nat Object.get host [as host] (/tmp/pipeline-runs/a686f4ed-5884-4898-92e6-77674803c205/build/_modules/server/server-status/server-status.control-service.spec.js:487:36)\nat TestServerStatusControlService.checkDbReadiness (/tmp/pipeline-runs/a686f4ed-5884-4898-92e6-77674803c205/build/_modules/server/server-status/server-status.control-service.js:177:29)\nat processTicksAndRejections (node:internal/process/task_queues:95:5)\nat async UserContext.<anonymous> (/tmp/pipeline-runs/a686f4ed-5884-4898-92e6-77674803c205/build/_modules/server/server-status/server-status.control-service.spec.js:490:28)",
+          "detailLineEnd": 390
         },
         {
-          "line": 1799,
+          "line": 399,
           "text": "(checkDbReadiness) diagnostics collection failed (non-fatal) Error: boom",
-          "details": "at runNext (/tmp/pipeline-runs/af24a796-61b4-449c-9323-2372640557e4/node_modules/.pnpm/jasmine-core@5.10.0/node_modules/jasmine-core/lib/jasmine-core/jasmine.js:8355:16)\nat /tmp/pipeline-runs/af24a796-61b4-449c-9323-2372640557e4/node_modules/.pnpm/jasmine-core@5.10.0/node_modules/jasmine-core/lib/jasmine-core/jasmine.js:8361:11\nat /tmp/pipeline-runs/af24a796-61b4-449c-9323-2372640557e4/node_modules/.pnpm/jasmine-core@5.10.0/node_modules/jasmine-core/lib/jasmine-core/jasmine.js:8241:9\nat UserContext.<anonymous> (/tmp/pipeline-runs/af24a796-61b4-449c-9323-2372640557e4/build/_modules/server/server-status/server-status.control-service.spec.js:507:68)\nat QueueRunner.attempt (/tmp/pipeline-runs/af24a796-61b4-449c-9323-2372640557e4/node_modules/.pnpm/jasmine-core@5.10.0/node_modules/jasmine-core/lib/jasmine-core/jasmine.js:8414:40)\nat QueueRunner.run (/tmp/pipeline-runs/af24a796-61b4-449c-9323-2372640557e4/node_modules/.pnpm/jasmine-core@5.10.0/node_modules/jasmine-core/lib/jasmine-core/jasmine.js:8452:27)\nat runNext (/tmp/pipeline-runs/af24a796-61b4-449c-9323-2372640557e4/node_modules/.pnpm/jasmine-core@5.10.0/node_modules/jasmine-core/lib/jasmine-core/jasmine.js:8355:16)\nat /tmp/pipeline-runs/af24a796-61b4-449c-9323-2372640557e4/node_modules/.pnpm/jasmine-core@5.10.0/node_modules/jasmine-core/lib/jasmine-core/jasmine.js:8361:11\nat /tmp/pipeline-runs/af24a796-61b4-449c-9323-2372640557e4/node_modules/.pnpm/jasmine-core@5.10.0/node_modules/jasmine-core/lib/jasmine-core/jasmine.js:8241:9",
-          "detailLineEnd": 1805
+          "details": "at /tmp/pipeline-runs/a686f4ed-5884-4898-92e6-77674803c205/node_modules/.pnpm/jasmine-core@5.10.0/node_modules/jasmine-core/lib/jasmine-core/jasmine.js:8361:11\nat /tmp/pipeline-runs/a686f4ed-5884-4898-92e6-77674803c205/node_modules/.pnpm/jasmine-core@5.10.0/node_modules/jasmine-core/lib/jasmine-core/jasmine.js:8241:9\nat processTicksAndRejections (node:internal/process/task_queues:95:5)\nat UserContext.<anonymous> (/tmp/pipeline-runs/a686f4ed-5884-4898-92e6-77674803c205/build/_modules/server/server-status/server-status.control-service.spec.js:507:68)\nat QueueRunner.attempt (/tmp/pipeline-runs/a686f4ed-5884-4898-92e6-77674803c205/node_modules/.pnpm/jasmine-core@5.10.0/node_modules/jasmine-core/lib/jasmine-core/jasmine.js:8414:40)\nat QueueRunner.run (/tmp/pipeline-runs/a686f4ed-5884-4898-92e6-77674803c205/node_modules/.pnpm/jasmine-core@5.10.0/node_modules/jasmine-core/lib/jasmine-core/jasmine.js:8452:27)\nat runNext (/tmp/pipeline-runs/a686f4ed-5884-4898-92e6-77674803c205/node_modules/.pnpm/jasmine-core@5.10.0/node_modules/jasmine-core/lib/jasmine-core/jasmine.js:8355:16)\nat /tmp/pipeline-runs/a686f4ed-5884-4898-92e6-77674803c205/node_modules/.pnpm/jasmine-core@5.10.0/node_modules/jasmine-core/lib/jasmine-core/jasmine.js:8361:11\nat /tmp/pipeline-runs/a686f4ed-5884-4898-92e6-77674803c205/node_modules/.pnpm/jasmine-core@5.10.0/node_modules/jasmine-core/lib/jasmine-core/jasmine.js:8241:9\nat processTicksAndRejections (node:internal/process/task_queues:95:5)",
+          "detailLineEnd": 406
+        },
+        {
+          "line": 2056,
+          "text": "[dynts-migration] FAILED bad Error: boom",
+          "details": "at Object.run (/tmp/pipeline-runs/a686f4ed-5884-4898-92e6-77674803c205/build/_services/core/migration-runner.service.spec.js:67:50)\nat DyNTS_Migration_Runner.runPending (/tmp/pipeline-runs/a686f4ed-5884-4898-92e6-77674803c205/build/_services/core/migration-runner.service.js:52:49)\nat async UserContext.<anonymous> (/tmp/pipeline-runs/a686f4ed-5884-4898-92e6-77674803c205/build/_services/core/migration-runner.service.spec.js:70:25)",
+          "detailLineEnd": 2059
         }
       ]
     },
     "npm-publish": {
       "status": "running",
-      "startedAt": "2026-07-22T16:28:45.168Z",
-      "logLineStart": 2801,
+      "startedAt": "2026-07-26T21:13:05.802Z",
+      "logLineStart": 2840,
       "logLineEnd": null,
       "durationSec": null
     }

package/build/_collections/field-encryption.util.d.ts

@@ -0,0 +1,52 @@
+import { DyFM_DataProperties } from '@futdevpro/fsm-dynamo';
+/**
+ * AT-REST field-encryption transzform (Option B, bedrock). A DBService a közös írási úton
+ * (`createData` / `modifyData`) a persist ELŐTT titkosítja, a read-post-processor
+ * (`stringifyDataId`) a load UTÁN visszafejti az `encrypt:true` mezőket.
+ *
+ * **App-rétegben fut, NEM mongoose-hook** — a `modifyData` `findByIdAndUpdate`-je megkerüli a
+ * mongoose settereket/pre-save-hookokat, ezért a transzform explicit itt történik.
+ *
+ * **Opt-in, default-off:** ha egy modell egyetlen mezője sem `encrypt:true`, a transzform tiszta
+ * NO-OP (ugyanaz az objektum-referencia, nincs klónozás, nincs viselkedés-változás, kulcs sem kell).
+ *
+ * **Legacy-plaintext biztonságos:** a read-transzform CSAK a `DYENC1:` envelope-értékeket fejti vissza
+ * (`isEncryptedDbValue`); a régi, még nem migrált plaintext értékek változatlanul jönnek vissza.
+ *
+ * Kulcs: `FDP_CORE_DBCONTENT_CRYPT_KEY` (Keystore/CI-env). Verzió: `FDP_CORE_DBCONTENT_CRYPT_KEY_VERSION`
+ * (default 1) — a kulcs-rotációhoz (a verzió az envelope-ban utazik).
+ */
+export declare class DyNTS_FieldEncryption_Util {
+    static readonly ENV_KEY: string;
+    static readonly ENV_KEY_VERSION: string;
+    /** `hasEncryptedFields` cache per properties-objektum (referencia szerint). */
+    private static readonly _hasEncCache;
+    /** A titkosító kulcs env-ből (üres string, ha nincs beállítva). */
+    static getKey(): string;
+    /** Az aktuális kulcs-verzió (default 1). */
+    static getKeyVersion(): number;
+    /**
+     * True, ha a properties-fa (rekurzívan a `subObjectParams`-on át) tartalmaz `encrypt:true` mezőt.
+     * Cache-elt (a properties-objektum immutábilis a modell-élettartam alatt).
+     */
+    static hasEncryptedFields(properties?: DyFM_DataProperties<any>): boolean;
+    /**
+     * Titkosítja a doc `encrypt:true` mezőit persist előtt. **Klónt ad vissza** — az eredeti (hívó)
+     * objektumot NEM mutálja (különben a `this.data` ciphertextté válna). NO-OP, ha nincs enc-mező.
+     * @throws ha van enc-mező, de a kulcs env-var nincs beállítva (fail-loud misconfiguration).
+     */
+    static encryptDoc<T>(data: T, properties?: DyFM_DataProperties<any>): T;
+    /**
+     * Visszafejti a doc `encrypt:true` mezőit load után. CSAK a `DYENC1:` envelope-értékeket bántja
+     * (legacy plaintext változatlan). NO-OP, ha nincs enc-mező. Kulcs hiányában read-en NEM dob
+     * (a read ne törjön el) — az envelope-értékek visszafejtetlenül maradnak (a hívó látja + a hiba loggolt).
+     */
+    static decryptDoc<T>(data: T, properties?: DyFM_DataProperties<any>): T;
+    /**
+     * Rekurzív per-field walk: az `encrypt:true` mezőket titkosítja/visszafejti, a `subObjectParams`-os
+     * mezőkbe (objektum VAGY objektum-tömb) leszáll. Immutábilis: minden érintett konténert sekélyen
+     * klónoz (az eredetit nem mutálja); a nem-érintett ágakat referencia szerint megosztja (read-only).
+     */
+    private static _transform;
+}
+//# sourceMappingURL=field-encryption.util.d.ts.map

package/build/_collections/field-encryption.util.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"field-encryption.util.d.ts","sourceRoot":"","sources":["../../src/_collections/field-encryption.util.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,EAEpB,MAAM,uBAAuB,CAAC;AAG/B;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,0BAA0B;IACrC,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAkC;IACjE,MAAM,CAAC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAA0C;IAEjF,+EAA+E;IAC/E,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAA2C;IAE/E,mEAAmE;IACnE,MAAM,CAAC,MAAM,IAAI,MAAM;IAIvB,4CAA4C;IAC5C,MAAM,CAAC,aAAa,IAAI,MAAM;IAK9B;;;OAGG;IACH,MAAM,CAAC,kBAAkB,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC,GAAG,CAAC,GAAG,OAAO;IA8BzE;;;;OAIG;IACH,MAAM,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,UAAU,CAAC,EAAE,mBAAmB,CAAC,GAAG,CAAC,GAAG,CAAC;IAmBvE;;;;OAIG;IACH,MAAM,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,UAAU,CAAC,EAAE,mBAAmB,CAAC,GAAG,CAAC,GAAG,CAAC;IAavE;;;;OAIG;IACH,OAAO,CAAC,MAAM,CAAC,UAAU;CAkD1B"}

package/build/_collections/field-encryption.util.js

@@ -0,0 +1,148 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DyNTS_FieldEncryption_Util = void 0;
+const fsm_dynamo_1 = require("@futdevpro/fsm-dynamo");
+const crypto_1 = require("@futdevpro/fsm-dynamo/crypto");
+/**
+ * AT-REST field-encryption transzform (Option B, bedrock). A DBService a közös írási úton
+ * (`createData` / `modifyData`) a persist ELŐTT titkosítja, a read-post-processor
+ * (`stringifyDataId`) a load UTÁN visszafejti az `encrypt:true` mezőket.
+ *
+ * **App-rétegben fut, NEM mongoose-hook** — a `modifyData` `findByIdAndUpdate`-je megkerüli a
+ * mongoose settereket/pre-save-hookokat, ezért a transzform explicit itt történik.
+ *
+ * **Opt-in, default-off:** ha egy modell egyetlen mezője sem `encrypt:true`, a transzform tiszta
+ * NO-OP (ugyanaz az objektum-referencia, nincs klónozás, nincs viselkedés-változás, kulcs sem kell).
+ *
+ * **Legacy-plaintext biztonságos:** a read-transzform CSAK a `DYENC1:` envelope-értékeket fejti vissza
+ * (`isEncryptedDbValue`); a régi, még nem migrált plaintext értékek változatlanul jönnek vissza.
+ *
+ * Kulcs: `FDP_CORE_DBCONTENT_CRYPT_KEY` (Keystore/CI-env). Verzió: `FDP_CORE_DBCONTENT_CRYPT_KEY_VERSION`
+ * (default 1) — a kulcs-rotációhoz (a verzió az envelope-ban utazik).
+ */
+class DyNTS_FieldEncryption_Util {
+    static ENV_KEY = 'FDP_CORE_DBCONTENT_CRYPT_KEY';
+    static ENV_KEY_VERSION = 'FDP_CORE_DBCONTENT_CRYPT_KEY_VERSION';
+    /** `hasEncryptedFields` cache per properties-objektum (referencia szerint). */
+    static _hasEncCache = new WeakMap();
+    /** A titkosító kulcs env-ből (üres string, ha nincs beállítva). */
+    static getKey() {
+        return process.env[this.ENV_KEY] ?? '';
+    }
+    /** Az aktuális kulcs-verzió (default 1). */
+    static getKeyVersion() {
+        const parsed = Number(process.env[this.ENV_KEY_VERSION]);
+        return Number.isFinite(parsed) && parsed > 0 ? parsed : 1;
+    }
+    /**
+     * True, ha a properties-fa (rekurzívan a `subObjectParams`-on át) tartalmaz `encrypt:true` mezőt.
+     * Cache-elt (a properties-objektum immutábilis a modell-élettartam alatt).
+     */
+    static hasEncryptedFields(properties) {
+        if (!properties) {
+            return false;
+        }
+        const cached = this._hasEncCache.get(properties);
+        if (cached !== undefined) {
+            return cached;
+        }
+        let has = false;
+        for (const key in properties) {
+            const prop = properties[key]; // ccap-review-disable-line no-any-type
+            if (!prop) {
+                continue;
+            }
+            if (prop.encrypt === true) {
+                has = true;
+                break;
+            }
+            if (prop.subObjectParams && this.hasEncryptedFields(prop.subObjectParams)) {
+                has = true;
+                break;
+            }
+        }
+        this._hasEncCache.set(properties, has);
+        return has;
+    }
+    /**
+     * Titkosítja a doc `encrypt:true` mezőit persist előtt. **Klónt ad vissza** — az eredeti (hívó)
+     * objektumot NEM mutálja (különben a `this.data` ciphertextté válna). NO-OP, ha nincs enc-mező.
+     * @throws ha van enc-mező, de a kulcs env-var nincs beállítva (fail-loud misconfiguration).
+     */
+    static encryptDoc(data, properties) {
+        if (data == null || !this.hasEncryptedFields(properties)) {
+            return data;
+        }
+        const key = this.getKey();
+        if (!key) {
+            throw new fsm_dynamo_1.DyFM_Error({
+                status: 500,
+                errorCode: 'DyNTS-ENC-KEY-MISSING',
+                message: `At-rest encryption: "${this.ENV_KEY}" env-var is not set, but a model field is encrypt:true. ` +
+                    `Set the key in the Keystore/CI-env and redeploy.`,
+            });
+        }
+        return this._transform(data, properties, 'encrypt', key, this.getKeyVersion());
+    }
+    /**
+     * Visszafejti a doc `encrypt:true` mezőit load után. CSAK a `DYENC1:` envelope-értékeket bántja
+     * (legacy plaintext változatlan). NO-OP, ha nincs enc-mező. Kulcs hiányában read-en NEM dob
+     * (a read ne törjön el) — az envelope-értékek visszafejtetlenül maradnak (a hívó látja + a hiba loggolt).
+     */
+    static decryptDoc(data, properties) {
+        if (data == null || !this.hasEncryptedFields(properties)) {
+            return data;
+        }
+        const key = this.getKey();
+        if (!key) {
+            return data;
+        }
+        return this._transform(data, properties, 'decrypt', key, this.getKeyVersion());
+    }
+    /**
+     * Rekurzív per-field walk: az `encrypt:true` mezőket titkosítja/visszafejti, a `subObjectParams`-os
+     * mezőkbe (objektum VAGY objektum-tömb) leszáll. Immutábilis: minden érintett konténert sekélyen
+     * klónoz (az eredetit nem mutálja); a nem-érintett ágakat referencia szerint megosztja (read-only).
+     */
+    static _transform(value, properties, mode, key, keyVersion) {
+        if (value == null || typeof value !== 'object') {
+            return value;
+        }
+        const result = Array.isArray(value) ? [...value] : { ...value }; // ccap-review-disable-line no-any-type
+        for (const propKey in properties) {
+            const prop = properties[propKey]; // ccap-review-disable-line no-any-type
+            if (!prop) {
+                continue;
+            }
+            if (prop.encrypt === true) {
+                const current = result[propKey]; // ccap-review-disable-line no-any-type
+                if (mode === 'encrypt') {
+                    // Üres/undefined/null-t NEM titkosítunk (a DyFM_Crypto ezekre dob); már-envelope-ot sem (idempotens).
+                    if (current != null && current !== '' && !crypto_1.DyFM_Crypto.isEncryptedDbValue(current)) {
+                        result[propKey] = crypto_1.DyFM_Crypto.encryptDbValue(current, key, keyVersion);
+                    }
+                }
+                else {
+                    // CSAK envelope-ot fejtünk vissza (legacy plaintext változatlan).
+                    if (crypto_1.DyFM_Crypto.isEncryptedDbValue(current)) {
+                        result[propKey] = crypto_1.DyFM_Crypto.decryptDbValue(current, key);
+                    }
+                }
+            }
+            else if (prop.subObjectParams) {
+                const current = result[propKey]; // ccap-review-disable-line no-any-type
+                if (current != null && typeof current === 'object') {
+                    if (Array.isArray(current)) {
+                        result[propKey] = current.map((item) => this._transform(item, prop.subObjectParams, mode, key, keyVersion));
+                    }
+                    else {
+                        result[propKey] = this._transform(current, prop.subObjectParams, mode, key, keyVersion);
+                    }
+                }
+            }
+        }
+        return result;
+    }
+}
+exports.DyNTS_FieldEncryption_Util = DyNTS_FieldEncryption_Util;
+//# sourceMappingURL=field-encryption.util.js.map

package/build/_collections/field-encryption.util.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"field-encryption.util.js","sourceRoot":"","sources":["../../src/_collections/field-encryption.util.ts"],"names":[],"mappings":";;;AAAA,sDAG+B;AAC/B,yDAA2D;AAE3D;;;;;;;;;;;;;;;;GAgBG;AACH,MAAa,0BAA0B;IACrC,MAAM,CAAU,OAAO,GAAW,8BAA8B,CAAC;IACjE,MAAM,CAAU,eAAe,GAAW,sCAAsC,CAAC;IAEjF,+EAA+E;IACvE,MAAM,CAAU,YAAY,GAA6B,IAAI,OAAO,EAAE,CAAC;IAE/E,mEAAmE;IACnE,MAAM,CAAC,MAAM;QACX,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IACzC,CAAC;IAED,4CAA4C;IAC5C,MAAM,CAAC,aAAa;QAClB,MAAM,MAAM,GAAW,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC;QACjE,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5D,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,kBAAkB,CAAC,UAAqC;QAC7D,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,MAAM,GAAwB,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACtE,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,IAAI,GAAG,GAAY,KAAK,CAAC;QACzB,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;YAC7B,MAAM,IAAI,GAAQ,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,uCAAuC;YAC1E,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,SAAS;YACX,CAAC;YACD,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;gBAC1B,GAAG,GAAG,IAAI,CAAC;gBACX,MAAM;YACR,CAAC;YACD,IAAI,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC;gBAC1E,GAAG,GAAG,IAAI,CAAC;gBACX,MAAM;YACR,CAAC;QACH,CAAC;QAED,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;QACvC,OAAO,GAAG,CAAC;IACb,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,UAAU,CAAI,IAAO,EAAE,UAAqC;QACjE,IAAI,IAAI,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,UAAU,CAAC,EAAE,CAAC;YACzD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,GAAG,GAAW,IAAI,CAAC,MAAM,EAAE,CAAC;QAClC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,uBAAU,CAAC;gBACnB,MAAM,EAAE,GAAG;gBACX,SAAS,EAAE,uBAAuB;gBAClC,OAAO,EACL,wBAAwB,IAAI,CAAC,OAAO,2DAA2D;oBAC/F,kDAAkD;aACrD,CAAC,CAAC;QACL,CAAC;QAED,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,UAAsC,EAAE,SAAS,EAAE,GAAG,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC;IAC7G,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,UAAU,CAAI,IAAO,EAAE,UAAqC;QACjE,IAAI,IAAI,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,UAAU,CAAC,EAAE,CAAC;YACzD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,GAAG,GAAW,IAAI,CAAC,MAAM,EAAE,CAAC;QAClC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,UAAsC,EAAE,SAAS,EAAE,GAAG,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC;IAC7G,CAAC;IAED;;;;OAIG;IACK,MAAM,CAAC,UAAU,CACvB,KAAQ,EACR,UAAoC,EACpC,IAA2B,EAC3B,GAAW,EACX,UAAkB;QAElB,IAAI,KAAK,IAAI,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC/C,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,MAAM,GAAQ,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAE,GAAI,KAAe,CAAE,CAAC,CAAC,CAAC,EAAE,GAAI,KAAa,EAAE,CAAC,CAAC,uCAAuC;QAEnI,KAAK,MAAM,OAAO,IAAI,UAAU,EAAE,CAAC;YACjC,MAAM,IAAI,GAAQ,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,uCAAuC;YAC9E,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,SAAS;YACX,CAAC;YAED,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;gBAC1B,MAAM,OAAO,GAAQ,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,uCAAuC;gBAE7E,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;oBACvB,sGAAsG;oBACtG,IAAI,OAAO,IAAI,IAAI,IAAI,OAAO,KAAK,EAAE,IAAI,CAAC,oBAAW,CAAC,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC;wBAClF,MAAM,CAAC,OAAO,CAAC,GAAG,oBAAW,CAAC,cAAc,CAAC,OAAO,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC;oBACzE,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,kEAAkE;oBAClE,IAAI,oBAAW,CAAC,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC;wBAC5C,MAAM,CAAC,OAAO,CAAC,GAAG,oBAAW,CAAC,cAAc,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;oBAC7D,CAAC;gBACH,CAAC;YACH,CAAC;iBAAM,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;gBAChC,MAAM,OAAO,GAAQ,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,uCAAuC;gBAE7E,IAAI,OAAO,IAAI,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;oBACnD,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;wBAC3B,MAAM,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,GAAG,CAC3B,CAAC,IAAS,EAAO,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,eAAe,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,CAAC,CACvF,CAAC;oBACJ,CAAC;yBAAM,CAAC;wBACN,MAAM,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,eAAe,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC;oBAC1F,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,MAAW,CAAC;IACrB,CAAC;;AApJH,gEAqJC"}

package/build/_models/data-models/schema-migration.data-model.d.ts

@@ -0,0 +1,29 @@
+import { DyFM_DataModel_Params, DyFM_Metadata } from '@futdevpro/fsm-dynamo';
+/**
+ * **Migráció-nyilvántartó ("server info") LEDGER** — bedrock, újrahasználható az egész flottának.
+ * (A token-service app-lokál `SchemaMigration` mintájából emelve bedrock nts-be.)
+ *
+ * Egy-egy `migrationId` **PONTOSAN EGYSZER** fut le rendszerenként: a `DyNTS_Migration_Runner.runPending()`
+ * boot-on (az app `app.server.postProcess()`-éből) lekéri a már-alkalmazott ID-kat, a pending
+ * migrációkat lefuttatja, majd egy sort rögzít ide. A `migrationId` **unique index** → race-safe
+ * (két párhuzamos instance esetén az egyik `save`-je duplicate-key-re bukik → skip).
+ *
+ * A ledger a KÖTELEZŐ kanon-adatokat tartja: **mely migrációk futottak** (id + idő) + **mely app-verzió**
+ * alkalmazta (a `appliedVersion`-ökből a "mely verziók futottak" levezethető).
+ *
+ * Az app a saját DB-jében regisztrálja a `dyNTS_schemaMigration_dataParams`-t (`getGlobalServiceCollection
+ * ().dbModels`), így per-app saját `dynts_schema_migrations` collection-t kap.
+ */
+export declare class DyNTS_SchemaMigration extends DyFM_Metadata {
+    /** A migráció egyedi azonosítója (konvenció: `YYYY-MM-DD-NNN-descriptor`). */
+    migrationId?: string;
+    /** Alkalmazás időbélyege. */
+    appliedAt?: Date;
+    /** Az alkalmazó app-verzió (a `package.json` version-je — audit-trail + "mely verziók futottak"). */
+    appliedVersion?: string;
+    /** Diag — pl. `touched=<n>` vagy hiba-részletek. */
+    notes?: string;
+    constructor(set?: DyNTS_SchemaMigration);
+}
+export declare const dyNTS_schemaMigration_dataParams: DyFM_DataModel_Params<DyNTS_SchemaMigration>;
+//# sourceMappingURL=schema-migration.data-model.d.ts.map

package/build/_models/data-models/schema-migration.data-model.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema-migration.data-model.d.ts","sourceRoot":"","sources":["../../../src/_models/data-models/schema-migration.data-model.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAE7E;;;;;;;;;;;;;;GAcG;AACH,qBAAa,qBAAsB,SAAQ,aAAa;IAEtD,8EAA8E;IAC9E,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,6BAA6B;IAC7B,SAAS,CAAC,EAAE,IAAI,CAAC;IAEjB,qGAAqG;IACrG,cAAc,CAAC,EAAE,MAAM,CAAC;IAExB,oDAAoD;IACpD,KAAK,CAAC,EAAE,MAAM,CAAC;gBAEH,GAAG,CAAC,EAAE,qBAAqB;CAMxC;AAED,eAAO,MAAM,gCAAgC,EAAE,qBAAqB,CAAC,qBAAqB,CAUtF,CAAC"}

package/build/_models/data-models/schema-migration.data-model.js

@@ -0,0 +1,47 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.dyNTS_schemaMigration_dataParams = exports.DyNTS_SchemaMigration = void 0;
+const fsm_dynamo_1 = require("@futdevpro/fsm-dynamo");
+/**
+ * **Migráció-nyilvántartó ("server info") LEDGER** — bedrock, újrahasználható az egész flottának.
+ * (A token-service app-lokál `SchemaMigration` mintájából emelve bedrock nts-be.)
+ *
+ * Egy-egy `migrationId` **PONTOSAN EGYSZER** fut le rendszerenként: a `DyNTS_Migration_Runner.runPending()`
+ * boot-on (az app `app.server.postProcess()`-éből) lekéri a már-alkalmazott ID-kat, a pending
+ * migrációkat lefuttatja, majd egy sort rögzít ide. A `migrationId` **unique index** → race-safe
+ * (két párhuzamos instance esetén az egyik `save`-je duplicate-key-re bukik → skip).
+ *
+ * A ledger a KÖTELEZŐ kanon-adatokat tartja: **mely migrációk futottak** (id + idő) + **mely app-verzió**
+ * alkalmazta (a `appliedVersion`-ökből a "mely verziók futottak" levezethető).
+ *
+ * Az app a saját DB-jében regisztrálja a `dyNTS_schemaMigration_dataParams`-t (`getGlobalServiceCollection
+ * ().dbModels`), így per-app saját `dynts_schema_migrations` collection-t kap.
+ */
+class DyNTS_SchemaMigration extends fsm_dynamo_1.DyFM_Metadata {
+    /** A migráció egyedi azonosítója (konvenció: `YYYY-MM-DD-NNN-descriptor`). */
+    migrationId;
+    /** Alkalmazás időbélyege. */
+    appliedAt;
+    /** Az alkalmazó app-verzió (a `package.json` version-je — audit-trail + "mely verziók futottak"). */
+    appliedVersion;
+    /** Diag — pl. `touched=<n>` vagy hiba-részletek. */
+    notes;
+    constructor(set) {
+        super(set);
+        if (set) {
+            Object.assign(this, set);
+        }
+    }
+}
+exports.DyNTS_SchemaMigration = DyNTS_SchemaMigration;
+exports.dyNTS_schemaMigration_dataParams = new fsm_dynamo_1.DyFM_DataModel_Params({
+    dataName: 'dynts_schema_migrations',
+    addArchive: false,
+    properties: {
+        migrationId: { type: 'string', required: true, unique: true, index: true },
+        appliedAt: { type: 'date', required: true },
+        appliedVersion: { type: 'string' },
+        notes: { type: 'string' },
+    },
+});
+//# sourceMappingURL=schema-migration.data-model.js.map

package/build/_models/data-models/schema-migration.data-model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema-migration.data-model.js","sourceRoot":"","sources":["../../../src/_models/data-models/schema-migration.data-model.ts"],"names":[],"mappings":";;;AAAA,sDAA6E;AAE7E;;;;;;;;;;;;;;GAcG;AACH,MAAa,qBAAsB,SAAQ,0BAAa;IAEtD,8EAA8E;IAC9E,WAAW,CAAU;IAErB,6BAA6B;IAC7B,SAAS,CAAQ;IAEjB,qGAAqG;IACrG,cAAc,CAAU;IAExB,oDAAoD;IACpD,KAAK,CAAU;IAEf,YAAY,GAA2B;QACrC,KAAK,CAAC,GAAG,CAAC,CAAC;QACX,IAAI,GAAG,EAAE,CAAC;YACR,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;CACF;AApBD,sDAoBC;AAEY,QAAA,gCAAgC,GAC3C,IAAI,kCAAqB,CAAwB;IAC/C,QAAQ,EAAE,yBAAyB;IACnC,UAAU,EAAE,KAAK;IACjB,UAAU,EAAE;QACV,WAAW,EAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE;QAC7E,SAAS,EAAO,EAAE,IAAI,EAAE,MAAM,EAAI,QAAQ,EAAE,IAAI,EAAE;QAClD,cAAc,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QAClC,KAAK,EAAW,EAAE,IAAI,EAAE,QAAQ,EAAE;KACnC;CACF,CAAC,CAAC"}

package/build/_models/interfaces/migration-entry.interface.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Egy regisztrált deploy-integrált migráció leírója. Az app egy `DyNTS_MigrationEntry[]` registry-t
+ * ad át a `DyNTS_Migration_Runner.runPending(...)`-nek; a runner a pending (még nem alkalmazott)
+ * entry-ket **egyszer** futtatja le, sorrendben, majd a `DyNTS_SchemaMigration` ledgerbe rögzíti.
+ */
+export interface DyNTS_MigrationEntry {
+    /** Egyedi, monoton bővíthető ID (konvenció: `YYYY-MM-DD-NNN-descriptor`). A ledger ez alapján run-once-ol. */
+    id: string;
+    /** Rövid leíró (admin/debug/log). */
+    description: string;
+    /**
+     * A tényleges migráció-logika. Az app már-csatlakozott Mongo-kapcsolatát használja (a runner a
+     * `postProcess`-ből fut, ahol a DB már él). Hibára DOBHAT — a runner catch-eli, a `notes`-ba menti,
+     * és NEM állítja meg a boot-ot. Visszaad: `{ touched }` (a módosított dokumentumok száma — count/riport).
+     */
+    run: (issuer: string) => Promise<{
+        touched: number;
+    }>;
+}
+//# sourceMappingURL=migration-entry.interface.d.ts.map

package/build/_models/interfaces/migration-entry.interface.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"migration-entry.interface.d.ts","sourceRoot":"","sources":["../../../src/_models/interfaces/migration-entry.interface.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC,8GAA8G;IAC9G,EAAE,EAAE,MAAM,CAAC;IAEX,qCAAqC;IACrC,WAAW,EAAE,MAAM,CAAC;IAEpB;;;;OAIG;IACH,GAAG,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACvD"}

package/build/_models/interfaces/migration-entry.interface.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=migration-entry.interface.js.map

package/build/_models/interfaces/migration-entry.interface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"migration-entry.interface.js","sourceRoot":"","sources":["../../../src/_models/interfaces/migration-entry.interface.ts"],"names":[],"mappings":""}

package/build/_services/base/db.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"db.service.d.ts","sourceRoot":"","sources":["../../../src/_services/base/db.service.ts"],"names":[],"mappings":"AAIA,OAAO,EAGL,qBAAqB,EAGrB,aAAa,EAAuB,WAAW,EAI/C,aAAa,EAEd,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,qDAAqD,CAAC;AAG3F;;GAEG;AACH,qBAAa,eAAe,CAAC,CAAC,SAAS,aAAa;IAoBzC,UAAU,EAAE,qBAAqB,CAAC,CAAC,CAAC;IAlB7C,WAAW,EAAE,MAAM,CAAC;IAEpB,SAAS,MAA0B;IAGnC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAgB;IAExC,mBAAmB,SAEoC;IAEvD;;;;;OAKG;gBAEM,UAAU,EAAE,qBAAqB,CAAC,CAAC,CAAC;IA8C7C;;;;OAIG;IACG,UAAU,CAAC,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC;IAgDrD;;;;OAIG;IACG,UAAU,CAAC,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,kBAAkB,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC;IAgDnF;;;;OAIG;IACG,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC;IA4BzC;;;;;;OAMG;IACG,qBAAqB,CAAC,mBAAmB,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,CAAC,CAAC;IAiCjF,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,WAAW,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC;IA6B1E;;;;;;OAMG;IACG,yBAAyB,CAAC,mBAAmB,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,EAAE,WAAW,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC;IA6CpH;;;;;;OAMG;IACG,0BAA0B,CAAC,aAAa,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,EAAE,WAAW,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC;IAkErH;;;;;OAKG;IACG,MAAM,CAAC,WAAW,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC;IA4B3C,eAAe,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA4B1D,yBAAyB,CAAC,mBAAmB,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAyBxG,kBAAkB,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAsB7D,4BAA4B,CAChC,mBAAmB,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,EAC9C,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,IAAI,CAAC;IAuBV,kBAAkB,IAAI,OAAO,CAAC,CAAC,EAAE,CAAC;IAoBxC;;;OAGG;IACG,kBAAkB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAkBnD,QAAQ,CAAC,cAAc,OAlBM,MAAM,KAAG,OAAO,CAAC,IAAI,CAAC,CAkBD;IAGlD;;;OAGG;IACG,4BAA4B,CAAC,mBAAmB,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IA+BjG,QAAQ,CAAC,wBAAwB,wBA/BuB;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,KAAG,OAAO,CAAC,IAAI,CAAC,CA+B3B;IAGhE,iBAAiB,IAAI,OAAO,CAAC,IAAI,CAAC;IAexC,QAAQ,CAAC,aAAa,QAfK,OAAO,CAAC,IAAI,CAAC,CAeQ;IAGhD;;;;;;;OAOG;IACG,UAAU,CACd,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC,EAC1B,qBAAqB,CAAC,EAAE,MAAM,EAAE,EAChC,qBAAqB,CAAC,EAAE,MAAM,EAC9B,WAAW,CAAC,EAAE,OAAO,GACpB,OAAO,CAAC,CAAC,EAAE,CAAC;IAoHf;;;;;;;;;;;;;;;;;;;;;;;;;;;OA2BG;IACG,OAAO,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAkBrD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA6BG;IACG,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,oBAAoB,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC;IAqC9G;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAmCG;IACG,cAAc,CAClB,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC,EAC1B,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,IAAI,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC,GACpB,OAAO,CAAC,CAAC,EAAE,CAAC;IA6Bf;;;;;;;OAOG;IACG,iBAAiB,CACrB,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC,EACzB,MAAM,EAAE,MAAM,EACd,kBAAkB,CAAC,EAAE,OAAO,GAC3B,OAAO,CAAC,CAAC,CAAC;IA4Bb;;;;;;;;;;;;;OAaG;IACG,gBAAgB,CACpB,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC,EAC1B,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC,EACzB,MAAM,EAAE,MAAM,EACd,kBAAkB,CAAC,EAAE,OAAO,GAC3B,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC;IAiCpB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAqDG;IACG,SAAS,CACb,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC,EAC1B,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC,EACzB,MAAM,EAAE,MAAM,EACd,kBAAkB,CAAC,EAAE,OAAO,GAC3B,OAAO,CAAC,IAAI,CAAC;IAyBhB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAoDG;IACG,UAAU,CACd,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC,EAC1B,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC,EACzB,MAAM,EAAE,MAAM,EACd,kBAAkB,CAAC,EAAE,OAAO,GAC3B,OAAO,CAAC,IAAI,CAAC;IAyBhB;;;;;;;;;;;;OAYG;IACH;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACG,SAAS,CAAC,GAAG,EAAE,GAAG;IASxB,OAAO,CAAC,eAAe;IAmBvB,OAAO,CAAC,wBAAwB;IAqBhC;;;OAGG;IACH,OAAO,CAAC,SAAS;IAwBjB;;;;OAIG;IACH,OAAO,CAAC,2CAA2C;IAoFnD,OAAO,CAAC,SAAS;IA2EjB;;;;OAIG;IAaH;;;;OAIG;IACH,OAAO,CAAC,uBAAuB;IAuD/B,OAAO,CAAC,8BAA8B;IAsBtC;;OAEG;IACH,OAAO,CAAC,6BAA6B;YAcvB,iBAAiB;YASjB,iBAAiB;CAQhC"}
+{"version":3,"file":"db.service.d.ts","sourceRoot":"","sources":["../../../src/_services/base/db.service.ts"],"names":[],"mappings":"AAIA,OAAO,EAGL,qBAAqB,EAGrB,aAAa,EAAuB,WAAW,EAI/C,aAAa,EAEd,MAAM,uBAAuB,CAAC;AAG/B,OAAO,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,qDAAqD,CAAC;AAG3F;;GAEG;AACH,qBAAa,eAAe,CAAC,CAAC,SAAS,aAAa;IAoBzC,UAAU,EAAE,qBAAqB,CAAC,CAAC,CAAC;IAlB7C,WAAW,EAAE,MAAM,CAAC;IAEpB,SAAS,MAA0B;IAGnC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAgB;IAExC,mBAAmB,SAEoC;IAEvD;;;;;OAKG;gBAEM,UAAU,EAAE,qBAAqB,CAAC,CAAC,CAAC;IA8C7C;;;;OAIG;IACG,UAAU,CAAC,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC;IAoDrD;;;;OAIG;IACG,UAAU,CAAC,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,kBAAkB,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC;IAsDnF;;;;OAIG;IACG,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC;IA4BzC;;;;;;OAMG;IACG,qBAAqB,CAAC,mBAAmB,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,CAAC,CAAC;IAiCjF,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,WAAW,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC;IA6B1E;;;;;;OAMG;IACG,yBAAyB,CAAC,mBAAmB,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,EAAE,WAAW,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC;IA6CpH;;;;;;OAMG;IACG,0BAA0B,CAAC,aAAa,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,EAAE,WAAW,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC;IAkErH;;;;;OAKG;IACG,MAAM,CAAC,WAAW,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC;IA4B3C,eAAe,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA4B1D,yBAAyB,CAAC,mBAAmB,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAyBxG,kBAAkB,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAsB7D,4BAA4B,CAChC,mBAAmB,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,EAC9C,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,IAAI,CAAC;IAuBV,kBAAkB,IAAI,OAAO,CAAC,CAAC,EAAE,CAAC;IAoBxC;;;OAGG;IACG,kBAAkB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAkBnD,QAAQ,CAAC,cAAc,OAlBM,MAAM,KAAG,OAAO,CAAC,IAAI,CAAC,CAkBD;IAGlD;;;OAGG;IACG,4BAA4B,CAAC,mBAAmB,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IA+BjG,QAAQ,CAAC,wBAAwB,wBA/BuB;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,KAAG,OAAO,CAAC,IAAI,CAAC,CA+B3B;IAGhE,iBAAiB,IAAI,OAAO,CAAC,IAAI,CAAC;IAexC,QAAQ,CAAC,aAAa,QAfK,OAAO,CAAC,IAAI,CAAC,CAeQ;IAGhD;;;;;;;OAOG;IACG,UAAU,CACd,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC,EAC1B,qBAAqB,CAAC,EAAE,MAAM,EAAE,EAChC,qBAAqB,CAAC,EAAE,MAAM,EAC9B,WAAW,CAAC,EAAE,OAAO,GACpB,OAAO,CAAC,CAAC,EAAE,CAAC;IAoHf;;;;;;;;;;;;;;;;;;;;;;;;;;;OA2BG;IACG,OAAO,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAkBrD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA6BG;IACG,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,oBAAoB,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC;IAqC9G;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAmCG;IACG,cAAc,CAClB,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC,EAC1B,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,IAAI,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC,GACpB,OAAO,CAAC,CAAC,EAAE,CAAC;IA6Bf;;;;;;;OAOG;IACG,iBAAiB,CACrB,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC,EACzB,MAAM,EAAE,MAAM,EACd,kBAAkB,CAAC,EAAE,OAAO,GAC3B,OAAO,CAAC,CAAC,CAAC;IA4Bb;;;;;;;;;;;;;OAaG;IACG,gBAAgB,CACpB,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC,EAC1B,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC,EACzB,MAAM,EAAE,MAAM,EACd,kBAAkB,CAAC,EAAE,OAAO,GAC3B,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC;IAiCpB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAqDG;IACG,SAAS,CACb,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC,EAC1B,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC,EACzB,MAAM,EAAE,MAAM,EACd,kBAAkB,CAAC,EAAE,OAAO,GAC3B,OAAO,CAAC,IAAI,CAAC;IAyBhB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAoDG;IACG,UAAU,CACd,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC,EAC1B,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC,EACzB,MAAM,EAAE,MAAM,EACd,kBAAkB,CAAC,EAAE,OAAO,GAC3B,OAAO,CAAC,IAAI,CAAC;IAyBhB;;;;;;;;;;;;OAYG;IACH;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACG,SAAS,CAAC,GAAG,EAAE,GAAG;IASxB,OAAO,CAAC,eAAe;IAwBvB,OAAO,CAAC,wBAAwB;IAqBhC;;;OAGG;IACH,OAAO,CAAC,SAAS;IAwBjB;;;;OAIG;IACH,OAAO,CAAC,2CAA2C;IAoFnD,OAAO,CAAC,SAAS;IA2EjB;;;;OAIG;IAaH;;;;OAIG;IACH,OAAO,CAAC,uBAAuB;IAuD/B,OAAO,CAAC,8BAA8B;IAsBtC;;OAEG;IACH,OAAO,CAAC,6BAA6B;YAcvB,iBAAiB;YASjB,iBAAiB;CAQhC"}

package/build/_services/base/db.service.js

@@ -6,6 +6,7 @@ const mongoose = tslib_1.__importStar(require("mongoose"));
 const mongoose_1 = require("mongoose");
 const fsm_dynamo_1 = require("@futdevpro/fsm-dynamo");
 const archive_util_1 = require("../../_collections/archive.util");
+const field_encryption_util_1 = require("../../_collections/field-encryption.util");
 const global_settings_const_1 = require("../../_collections/global-settings.const");
 /**
  * DB Service for MongoDB
@@ -73,7 +74,10 @@ class DyNTS_DBService {
         data.__lastModified = new Date();
         data.__createdBy = issuer;
         data.__lastModifiedBy = issuer;
-        const dataModel = new this.dataModel(data);
+        // AT-REST field-encryption (opt-in): az encrypt:true mezőket a persist ELŐTT titkosítjuk, egy
+        // KLÓNON (a hívó `data`-ja plaintext marad). NO-OP, ha nincs encrypt:true mező.
+        const encData = field_encryption_util_1.DyNTS_FieldEncryption_Util.encryptDoc(data, this.dataParams.properties);
+        const dataModel = new this.dataModel(encData);
         const newData = await dataModel.save().then((res) => {
             if (res) {
                 return res?.toObject();
@@ -119,12 +123,17 @@ class DyNTS_DBService {
             data.__lastModified = new Date();
             data.__lastModifiedBy = issuer;
         }
+        // AT-REST field-encryption (opt-in): az encrypt:true mezőket a persist ELŐTT titkosítjuk, egy
+        // KLÓNON. KRITIKUS: a `findByIdAndUpdate` MEGKERÜLI a mongoose settereket/pre-save-hookokat, ezért
+        // a titkosítás itt, app-rétegben történik (nem mongoose-hookban). A hívó `data`-ja plaintext marad,
+        // így a `stringifyDataId(data)` alant no-op decrypttel a plaintextet adja vissza. NO-OP enc-mező nélkül.
+        const encData = field_encryption_util_1.DyNTS_FieldEncryption_Util.encryptDoc(data, this.dataParams.properties);
         /**
          * EZ A SZAR TELJESEN SZAR, nem friss, nem a db-be mentett adatokat ad vissza,
          * átír random value-kat össze vissza, WTF
          * */
         /* let newData: T = */
-        await this.dataModel.findByIdAndUpdate(data._id, data) /* .then((res) => {
+        await this.dataModel.findByIdAndUpdate(data._id, encData) /* .then((res) => {
           if (res) {
             //return res?.toObject() as T;
           } else {
@@ -1029,6 +1038,10 @@ class DyNTS_DBService {
     // ----------------------------------------------------------------------------------
     // PRIVATE FUNCTIONS
     stringifyDataId(data, fnName) {
+        // AT-REST field-decryption (opt-in): ez a KÖZÖS read+write post-processor (minden read + a
+        // create/modify EREDMÉNYE is átmegy rajta), ezért itt fejtjük vissza az encrypt:true envelope-
+        // mezőket load után. NO-OP, ha nincs encrypt:true mező (ugyanaz a referencia — nulla változás).
+        data = field_encryption_util_1.DyNTS_FieldEncryption_Util.decryptDoc(data, this.dataParams.properties);
         if (data?._id && (typeof data._id !== 'string' || typeof data._id === 'object')) {
             data._id = `${data._id}`;
             if (typeof data._id !== 'string' || typeof data._id === 'object') {