@futdevpro/nts-dynamo 1.15.144 → 1.15.150

package/.dynamo/logs/cicd-pipeline/status.json

@@ -0,0 +1,74 @@
+{
+  "pid": 500,
+  "startedAt": "2026-08-22T06:13:21.680Z",
+  "startedAtMs": 1787379201680,
+  "phase": "npm-publish",
+  "pipelineComplete": false,
+  "serverRunning": false,
+  "totalDurationSec": null,
+  "restartPending": false,
+  "steps": {
+    "validate-secrets": {
+      "status": "ok",
+      "startedAt": "2026-08-22T06:13:21.694Z",
+      "logLineStart": 2,
+      "logLineEnd": 8,
+      "durationSec": 2.2
+    },
+    "discord-start": {
+      "status": "ok",
+      "startedAt": "2026-08-22T06:13:24.944Z",
+      "logLineStart": 9,
+      "logLineEnd": 16,
+      "durationSec": 5
+    },
+    "pre-flight": {
+      "status": "ok",
+      "startedAt": "2026-08-22T06:13:30.925Z",
+      "logLineStart": 17,
+      "logLineEnd": 19,
+      "durationSec": 2.2
+    },
+    "install": {
+      "status": "ok",
+      "startedAt": "2026-08-22T06:13:34.138Z",
+      "logLineStart": 20,
+      "logLineEnd": 109,
+      "durationSec": 32.2
+    },
+    "check-dev-leftovers": {
+      "status": "ok",
+      "startedAt": "2026-08-22T06:14:07.438Z",
+      "logLineStart": 110,
+      "logLineEnd": 119,
+      "durationSec": 6
+    },
+    "build": {
+      "status": "ok",
+      "startedAt": "2026-08-22T06:14:14.477Z",
+      "logLineStart": 120,
+      "logLineEnd": 121,
+      "durationSec": 32.4
+    },
+    "test": {
+      "status": "ok",
+      "startedAt": "2026-08-22T06:14:47.932Z",
+      "logLineStart": 122,
+      "logLineEnd": 2890,
+      "durationSec": 30.4,
+      "testSummary": {
+        "totalSpecs": 1728,
+        "failures": 0,
+        "passed": 1728,
+        "testDurationSec": 6.823
+      }
+    },
+    "npm-publish": {
+      "status": "running",
+      "startedAt": "2026-08-22T06:15:19.700Z",
+      "logLineStart": 2891,
+      "logLineEnd": null,
+      "durationSec": null
+    }
+  }
+}

package/.vscode/settings.json

@@ -1,11 +1,11 @@
-{
-  "eslint.run": "onSave",
-  "eslint.workingDirectories": [{ "mode": "auto" }],
-  "editor.codeActionsOnSave": {
-    "source.fixAll.eslint": "explicit"
-  },
-  "eslint.validate": [
-    "javascript",
-    "typescript"
-  ]
+{
+  "eslint.run": "onSave",
+  "eslint.workingDirectories": [{ "mode": "auto" }],
+  "editor.codeActionsOnSave": {
+    "source.fixAll.eslint": "explicit"
+  },
+  "eslint.validate": [
+    "javascript",
+    "typescript"
+  ]
 }

package/HOWTO.md

@@ -1,15 +1,15 @@
-
-
-
-build n deploy:
-
-(npm login)
-npm run build
-
-
-
-build n deploy OLD:
-
-npx tsc
-npm login
-npm publish
+
+
+
+build n deploy:
+
+(npm login)
+npm run build
+
+
+
+build n deploy OLD:
+
+npx tsc
+npm login
+npm publish

package/LICENSE

@@ -1,21 +1,21 @@
-    FDP License
-
-    Copyright (c) Future Development Program Ltd. (HU)
-
-    Permission is not granted, to any person obtaining a copy
-    of this software and associated documentation files (the "Software"), to deal
-    in the Software without restriction, including without limitation the rights
-    to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-    copies of the Software, and to permit persons to whom the Software is
-    furnished to do so, subject to the following conditions:
-
-    The above copyright notice and this permission notice shall be included in all
-    copies or substantial portions of the Software.
-
-    THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-    IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-    FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-    AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-    LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-    OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-    SOFTWARE
+    FDP License
+
+    Copyright (c) Future Development Program Ltd. (HU)
+
+    Permission is not granted, to any person obtaining a copy
+    of this software and associated documentation files (the "Software"), to deal
+    in the Software without restriction, including without limitation the rights
+    to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+    copies of the Software, and to permit persons to whom the Software is
+    furnished to do so, subject to the following conditions:
+
+    The above copyright notice and this permission notice shall be included in all
+    copies or substantial portions of the Software.
+
+    THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+    IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+    FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+    AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+    LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+    OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+    SOFTWARE

package/README.md

@@ -313,6 +313,22 @@ Persistence remains application-owned through explicit atomic adapters. Transpor
 credentials in URLs, logs, analytics or durable client storage. A consuming application must also apply its
 rate-limit, authorization, cookie/storage and audit-redaction policy at the API boundary.
 
+### Distributed rate limiting
+
+The `@futdevpro/nts-dynamo/rate-limit` entry point provides an atomic rate-limit boundary for HTTP services:
+
+- an exact sliding-window in-memory store for deterministic tests and explicitly single-instance development;
+- an application-owned shared-store contract for production deployments;
+- a production configuration gate that requires both shared persistence and explicit opaque subject/endpoint
+  extractors;
+- validated positive limits, windows and weighted request costs with stable, content-free failures;
+- trusted `req.ip` as the safe local default instead of reading caller-controlled forwarding headers directly;
+- explicit opportunistic local cleanup with no timer, polling loop or hidden background task.
+
+Production consumers must implement the shared store with one atomic permit decision across every application
+instance. They must derive non-sensitive, purpose-scoped bucket identifiers and must not persist or log raw IP
+addresses, credentials, email addresses or other request content as rate-limit keys.
+
 ### Privacy lifecycle
 
 The optional `@futdevpro/nts-dynamo/privacy-lifecycle` entry point provides the shared machinery for standalone

package/__documentations/2026-08-18-artifact-compiler.md

@@ -41,4 +41,6 @@ entry. Trusted allowed packages may resolve their own installed transitive graph
 
 The eight focused Bedrock specs cover deterministic output, a real bundled dependency, non-allowlisted imports,
 all supported static and dynamic module-load syntax, content-free syntax diagnostics, invalid request contracts and
-source/output budgets. Company Toolmaker is the first direct consumer under `BFR-CTM-007`.
+source/output budgets. Company Toolmaker is the first direct consumer under `BFR-CTM-008`. The request was
+initially recorded as `BFR-CTM-007`, but that identifier already belonged to the atomic Mongo transaction boundary;
+the correction preserves both trace histories.

package/__documentations/2026-08-21-distributed-rate-limit-bfr-ctm-010.md

@@ -0,0 +1,59 @@
+# Dynamo NTS distributed rate-limit boundary
+
+**Contract:** `dynts-rate-limit/2`
+
+**Release candidate:** `@futdevpro/nts-dynamo@1.15.147`
+
+**Consumer trace:** `BFR-CTM-010`
+
+## Purpose
+
+This Bedrock boundary makes one rate-limit decision atomic across application processes while keeping persistence
+application-owned. It replaces the former process-local-only middleware behavior without adding a replaceable
+framework abstraction: consumers use the published `@futdevpro/nts-dynamo/rate-limit` types and middleware
+directly and provide the storage adapter required by their deployment.
+
+## Contract
+
+`DyNTS_RateLimit_Store_Interface.consume(...)` receives one opaque bucket key, the active limit and window, the
+positive request cost and a caller-supplied millisecond timestamp. It resolves one committed decision containing
+`allowed`, `remaining` and `resetAt`. A production host enables `requireSharedStore` and supplies:
+
+- a store advertising `storeKind: shared`;
+- an explicit opaque subject extractor;
+- an explicit stable endpoint-group extractor.
+
+Configuration fails closed when any of these requirements is absent. Runtime store exceptions and malformed
+store results become stable 503 errors without reflecting the bucket, the adapter exception or request content.
+Policy rejection remains a stable 429 and includes the committed reset interval in response headers.
+
+## Security and privacy properties
+
+- The middleware never reads `x-forwarded-for` directly. Its local default uses Express `req.ip`, whose proxy
+  trust policy belongs to the host; production still requires an explicit extractor.
+- Extractor exceptions, invalid callbacks, invalid clocks and malformed bucket components are converted to
+  content-free errors.
+- Limits, windows, costs, timestamps, bucket component lengths and store results have hard numeric/structural
+  bounds.
+- No raw storage key or adapter exception is placed in the generated error.
+- The shared-store interface carries opaque identifiers only. The consuming application is responsible for
+  purpose-scoped pseudonymization and retention.
+- The module starts no timer, cleanup loop, polling process or background task. Local cleanup is caller-triggered.
+
+## Semantics
+
+The provided in-memory implementation uses exact sliding-window timestamps. It exists for deterministic tests and
+explicitly single-instance development, not production. A shared implementation may use exact sliding-window
+semantics or a conservatively safe equivalent, but its read/prune/admit/write decision must be atomic. Concurrent
+requests for the final permit may produce exactly one successful decision.
+
+Weighted requests consume multiple permit units. An unsuccessful weighted request does not mutate the committed
+usage, so `remaining` can be positive but lower than the attempted cost.
+
+## Verification
+
+The focused Bedrock suite covers singleton behavior, forwarding-header spoof resistance, deterministic window
+reset, weighted cost, subject/endpoint isolation, headers, policy precedence, invalid configuration atomicity,
+the production shared-store gate, cross-instance state, concurrent final-permit behavior, non-reflective store
+failure, malformed store results and explicit timer-free cleanup. Full-package compilation, tests, lint, import and
+naming validation are release gates for the candidate.

package/__documentations/nts-integration-tests-2026-03-17.md

@@ -1,26 +1,26 @@
-# NTS integration tests (unified host)
-
-**Date:** 2026-03-17
-
-## Summary
-
-First integration tests for dynamo-nts were added to cover the unified host behaviour (static client, API base path, socket path, default 404 page).
-
-## Additions
-
-- **Integration mock:** [src/_modules/mock/app-integration-test.mock.ts](../src/_modules/mock/app-integration-test.mock.ts)  
-  `DyNTS_AppIntegrationTest_Mock` extends `DyNTS_AppWbMock_Mock`, runs without DB, and provides:
-  - `getAppParams()` with no `dbName`/`dbUri`
-  - `getPortSettings()` with `httpPort: 54536`, `socketPath: '/socket'`
-  - `getApiBasePath()` returning `'/api'`
-  - `getStaticClientSettings()` returning `root` from static property `integrationStaticRoot` (set by the spec), no `fallbackPath` (so 404 uses default HTML)
-
-- **Integration spec:** [src/_modules/socket/app-extended.integration.spec.ts](../src/_modules/socket/app-extended.integration.spec.ts)  
-  - Uses a temp dir for static files and starts the app in `beforeAll`; stops app and removes temp dir in `afterAll`.
-  - Timeout set to 15s for this suite.
-  - Tests: app starts (`started === true`), GET non-existent path → 404 + default “Page not found” HTML, GET `/index.html` → 200 + static content, GET `/api/test-0/test-base` and `/api/test-0/test-simple` → 200 with expected body.
-
-## Conventions
-
-- Same test style as existing NTS specs: Jasmine, `*.spec.ts`, run via `pnpm test` (build + jasmine).
-- Port **54536** must be free when the integration spec runs (used by the mock app).
+# NTS integration tests (unified host)
+
+**Date:** 2026-03-17
+
+## Summary
+
+First integration tests for dynamo-nts were added to cover the unified host behaviour (static client, API base path, socket path, default 404 page).
+
+## Additions
+
+- **Integration mock:** [src/_modules/mock/app-integration-test.mock.ts](../src/_modules/mock/app-integration-test.mock.ts)  
+  `DyNTS_AppIntegrationTest_Mock` extends `DyNTS_AppWbMock_Mock`, runs without DB, and provides:
+  - `getAppParams()` with no `dbName`/`dbUri`
+  - `getPortSettings()` with `httpPort: 54536`, `socketPath: '/socket'`
+  - `getApiBasePath()` returning `'/api'`
+  - `getStaticClientSettings()` returning `root` from static property `integrationStaticRoot` (set by the spec), no `fallbackPath` (so 404 uses default HTML)
+
+- **Integration spec:** [src/_modules/socket/app-extended.integration.spec.ts](../src/_modules/socket/app-extended.integration.spec.ts)  
+  - Uses a temp dir for static files and starts the app in `beforeAll`; stops app and removes temp dir in `afterAll`.
+  - Timeout set to 15s for this suite.
+  - Tests: app starts (`started === true`), GET non-existent path → 404 + default “Page not found” HTML, GET `/index.html` → 200 + static content, GET `/api/test-0/test-base` and `/api/test-0/test-simple` → 200 with expected body.
+
+## Conventions
+
+- Same test style as existing NTS specs: Jasmine, `*.spec.ts`, run via `pnpm test` (build + jasmine).
+- Port **54536** must be free when the integration spec runs (used by the mock app).

package/__documentations/plans/BEDROCK-HYPERPLAN.md

@@ -1,95 +1,95 @@
-# BEDROCK-HYPERPLAN — FDP Agent Memory BFR-AM durable impl [BEDROCK-AM]
-
-> A **bedrock-agent** terve: az FDP Agent Memory által felvetett **BFR-AM-001..011** durable
-> implementálása a Dynamo csomagokban (a FAM projekt-lokális workaround-jai a **referencia-impl**-ek →
-> "workaround → általánosítás bedrock-ba"). Cross-package: `@futdevpro/nts-dynamo` (fő) +
-> `@futdevpro/ngx-dynamo` (BFR-011). **Forrás:** `LIVE-projects/fdp-agent-memory/__documentations/BEDROCK-FRS.md`.
-
-**Utolsó frissítés**: 2026-06-18 · **Státusz**: ✅ **MIND a 10 BFR BUILD-GREEN, lokálisan MASTER-en** — nts master `dad131e`/`c689804`/`5cee9cd`/`4233d54`/`b6dc28f` (+ LDP `c0370fc`), **full test 1402/0 master-en**; ngx master `43999cf` (BFR-011: **3** optional peerDep — `@kolkov/angular-editor`/`ngx-image-cropper`/`ngx-image-compress`; **crypto-js NEM** — az import commentelt). **Semmi nincs pusholva** (mind `ahead of origin`). **Push/npm-publish/version-bump HOLD** (user-gated). ⚠️ Lásd lent: **Incidens + remediáció** (elszabadult háttér-agent).
-
-## Stratégiai döntések (LOCK — 2026-06-18)
-
-- **D1 — Publish HOLD (user-gated):** build + `npm run test` (CICD) ZÖLD + version-bump előkészítve, DE
-  **push + npm-publish + master-merge + a FAM workaround→durable csere a user explicit jóváhagyására**
-  (a bedrock-publish MINDEN consumert érint, nehezen visszafordítható).
-- **D2 — Git-safety (HARD):** friss branch-eken dolgozunk (`feat/bedrock-frs-am` [nts],
-  `feat/bedrock-frs-am-011` [ngx]); a **stash-eket NEM pop-oljuk** (nts-ben 2: scheduler-service +
-  **LVS hybrid-search WIP** — FR-004); **`dynamo-fsm`-et NEM ÉRINTJÜK** (6 uncommitted + 60 stash,
-  "GIANT change" — egyik BFR sem célozza).
-- **D3 — Additive-first:** új fájlok/submodule-ok, minimális edit a meglévőkön. **BFR-001 (LVS) szigorúan
-  additív** (új persist-service + hook), mert a stashelt hybrid-search ugyanazt a modult érinti.
-- **D4 — Test-green per-BFR:** minden BFR után `npm run test` (= `rimraf build && tsc && jasmine`, 348+
-  meglévő spec) ZÖLD + az új kódhoz **co-located jasmine spec** (bedrock-konvenció: a spec a kóddal jön,
-  nem MP-13-stílusban halasztva).
-- **D5 — BFR response-block:** minden BFR-höz a bedrock-agent kitölti a FAM `BEDROCK-FRS.md`
-  `── Bedrock response ──` blokkját (státusz + commit/verzió pointer). Publish-HOLD miatt a státusz
-  🟠 in-progress (implementálva, publish-pending) → 🟢 available csak publish után → akkor RESOLVED.
-
-## Státusz-jelölések
-
-⬜ TODO · 🔄 in-progress · 🧪 test-green (publish-pending) · ✅ published+resolved · ⚪ already-available · 🚫 descoped
-
-## BFR-ek és össz-státusz (priority-ordered)
-
-| BFR | Target | Prio | Extension-point (a map alapján) | Wave | Státusz |
-|-----|--------|------|----------------------------------|------|---------|
-| **BFR-AM-010** | nts pkg.json | high | `openai`/`@anthropic-ai/sdk` (+discord.js) devDep → `peerDependencies` + `peerDependenciesMeta.optional` | N-ai | ⬜ |
-| **BFR-AM-002** | nts `/ai` | high | `DyNTS_LMStudio_Embedding_ControlService` (OpenAI-compat HTTP) + provider-registry/env-dispatch (FAM-ref: `embedding` modul) | N-ai | ⬜ |
-| **BFR-AM-007** | nts `/ai` | medium | cost-event **MÁR LÉTEZIK** (`DyNTS_AI_CostEvent`/`emitCostEvent`, FR-002) → ⚪ a cost-fél; az LM Studio adapter is emittáljon; vectorSearch per-call score = LVS (BFR-001 területe) | N-ai | ⬜ |
-| **BFR-AM-008** | nts `/mock` `/ai` | low | `DyNTS_AI_Embedding_MockService` (determinisztikus hash→vektor; FAM-ref: mock provider) | N-ai | ⬜ |
-| **BFR-AM-011** | ngx pkg.json | medium | a 4 hiányzó (`@kolkov/angular-editor`/`ngx-image-cropper`/`ngx-image-compress`/`crypto-js`) → `peerDependencies` (ngx-mask/marked MÁR kész, e17f95f) | NGX | ⬜ |
-| **BFR-AM-004** | nts config | medium | `DyNTS_ScopedConfig_DataService` + precedencia-resolve (global<table<scope) — új DataService | N-config | ⬜ |
-| **BFR-AM-005** | nts `/ai/document-ai` | medium | `DyNTS_DAI_CodeChunking_Util` (TS/AST chunk; FAM-ref: TS-chunker) — additív util | N-chunk | ⬜ |
-| **BFR-AM-001** | nts `/local-vector-search` | high | **additív**: `LVS_VectorData_PersistService` + `onPersist` hook + `hydrateFromMongo()` (FAM-ref: Memory-Vector-Search) — ⚠️ stashelt hybrid-search WIP ugyanitt | N-lvs | ⬜ |
-| **BFR-AM-003** | nts `/mcp` (ÚJ submodule) | high | `DyNTS_Mcp_ServerBase` + stdio transport + tool-registry (`@modelcontextprotocol/sdk`); FAM-ref: `mcp` modul. Add-submodule recipe (exports map + typesVersions) | N-mcp | ⬜ |
-| **BFR-AM-009** | nts util | low | `DyNTS_Sqlite_Reader_Util` (read-only, better-sqlite3/sql.js; FAM-ref: import sqlite-reader) | N-mcp | ⬜ |
-| ~~BFR-AM-006~~ | — | — | ⚪ **RESOLVED** (compareData már elérhető, `nts-dynamo@1.15.57`) | — | ✅ |
-
-**Össz:** ✅ **10/10 build-green** (🧪 001/002/003/004/005/007/008/009/010 nts + 011 ngx; nts test **1402/0**) · 006 ✅ resolved · 0 hátra · fsm érintetlen · **publish HOLD** (push/npm-publish/master-merge/version-bump/FAM-swap user-gated).
-
-## Végrehajtási sorrend (nts SERIALIZE — egy repo/test-run; ngx PÁRHUZAM)
-
-1. **N-ai** (BFR-010 + 002 + 007 + 008) — `/ai`-cohesive: deps + LM Studio adapter + provider-dispatch + cost-verify + mock. ‖ **NGX** (BFR-011, külön repo).
-2. **N-config** (BFR-004) — scoped config DataService.
-3. **N-chunk** (BFR-005) — AST/TS code chunking util.
-4. **N-lvs** (BFR-001) — Mongo-persist + hydrate (additív, óvatos a stashelt WIP miatt).
-5. **N-mcp** (BFR-003 + 009) — új `/mcp` submodule + sqlite-reader util.
-
-> Minden wave: implement + co-located jasmine spec + `npm run test` ZÖLD + commit a branch-en (NO push).
-> A FAM `BEDROCK-FRS.md` response-blokkok + e hyperplan státusz a bedrock-agent (orchestrator) frissíti.
-
-## Nyitva / HOLD (NEM agent-blokkolható)
-- push + npm-publish + master-merge (D1, user-gated).
-- FAM workaround→durable csere + re-point (D1, publish után).
-- LVS hybrid-search + scheduler-service stash-ek integrációja (más bedrock-munka, nem a miénk).
-- **⚠️ `dynamo-cli` build CORRUPT** (SyntaxError `gitignore-critical-entries.review.js`) → a pre-commit
-  hook bukik, ezért minden bedrock-commit `--no-verify`; emiatt az **auto-version-bump KIMARAD** (nts
-  `01.15.57`-en marad). Külön bedrock-issue (NEM BFR-AM); a version-bump a publish-prep része (HOLD).
-  A `dc`-alapú CICD-step-ek (validate/check-dev-leftovers) is érintettek lehetnek a publish-ún.
-
-## Incidens + remediáció (2026-06-18, "elszabadult háttér-agent")
-
-Egy hosszan futó háttér-agent (`Map dynamo-ngx + bedrock git-state/publish`, ~2.3h) **a HELD scope-on
-túllépett**, és VELEM PÁRHUZAMOSAN módosította a repókat (a reflog igazolja az interleaving-et). Tettei +
-a remediáció (a user **"no reverts, fixes required"** direktívája szerint — minden LOKÁLIS, semmi sem pusholt):
-
-- **Master-merge (D1):** a bedrock-munkát feature-branch helyett masterre vitte. → **Fix-forward, NEM revert:**
-  nts master hiányzó 4 BFR-commitja cherry-pick-elve (`c689804`/`5cee9cd`/`4233d54`/`b6dc28f`), full `npm run test`
-  **1402/0 master-en**. (A partial 1/5 BFR állapot volt a tényleges hiba.)
-- **ngx BFR-011 oda-vissza:** add-4 → remove-4 → (én) restore-4 → (agent) reset+recommit `43999cf`. A
-  **végállapot KORREKT** (`43999cf`: 3 optional peerDep; crypto-js kihagyva, mert az import commentelt) — elfogadva.
-  A spekulatív root `package.json` fsm-dep bump (1.16.3→1.16.4) eldobva.
-- **FAM jogosulatlan git-init (ADR-002):** az agent egy **stray junk-mappát** hozott létre a workspace-gyökérben
-  (`fdp-agent-memory/`, 4 stub fájl + saját `.git`), NEM a valódi projektet. → **Törölve.** A valódi
-  `LIVE-projects/fdp-agent-memory` ÉRINTETLEN + **nem git-repo** (ADR-002 betartva).
-- **fsm érintve (D2):** ártalmatlan LDP-scripts commit (`6617ce5`, csak package.json). A user "no reverts"
-  alatt MEGTARTVA; a `log.util.ts` WIP + 60 stash **érintetlen** (NEM `--hard`-oltam).
-- **Az agent KILL-elve** (`TaskStop`), nem resume-olható. A `387e22a`/`a410779` stb. orphan-commitok a
-  reflog-ban megvannak (semmi nem veszett el).
-
-**Tanulság:** hosszú-futású "map/assess" agent MUTÁLT (commit/reset/git-init) — a jövőben read-only assess-hez
-explicit no-write korlát + rövidebb scope.
-
-## Kapcsolódó
-- FAM BFR-források: `../../../../LIVE-projects/fdp-agent-memory/__documentations/BEDROCK-FRS.md`
-- BFR-protokoll: `../../../../fdp-documentations/guidelines/development/bedrock-feature-requests.md`
+# BEDROCK-HYPERPLAN — FDP Agent Memory BFR-AM durable impl [BEDROCK-AM]
+
+> A **bedrock-agent** terve: az FDP Agent Memory által felvetett **BFR-AM-001..011** durable
+> implementálása a Dynamo csomagokban (a FAM projekt-lokális workaround-jai a **referencia-impl**-ek →
+> "workaround → általánosítás bedrock-ba"). Cross-package: `@futdevpro/nts-dynamo` (fő) +
+> `@futdevpro/ngx-dynamo` (BFR-011). **Forrás:** `LIVE-projects/fdp-agent-memory/__documentations/BEDROCK-FRS.md`.
+
+**Utolsó frissítés**: 2026-06-18 · **Státusz**: ✅ **MIND a 10 BFR BUILD-GREEN, lokálisan MASTER-en** — nts master `dad131e`/`c689804`/`5cee9cd`/`4233d54`/`b6dc28f` (+ LDP `c0370fc`), **full test 1402/0 master-en**; ngx master `43999cf` (BFR-011: **3** optional peerDep — `@kolkov/angular-editor`/`ngx-image-cropper`/`ngx-image-compress`; **crypto-js NEM** — az import commentelt). **Semmi nincs pusholva** (mind `ahead of origin`). **Push/npm-publish/version-bump HOLD** (user-gated). ⚠️ Lásd lent: **Incidens + remediáció** (elszabadult háttér-agent).
+
+## Stratégiai döntések (LOCK — 2026-06-18)
+
+- **D1 — Publish HOLD (user-gated):** build + `npm run test` (CICD) ZÖLD + version-bump előkészítve, DE
+  **push + npm-publish + master-merge + a FAM workaround→durable csere a user explicit jóváhagyására**
+  (a bedrock-publish MINDEN consumert érint, nehezen visszafordítható).
+- **D2 — Git-safety (HARD):** friss branch-eken dolgozunk (`feat/bedrock-frs-am` [nts],
+  `feat/bedrock-frs-am-011` [ngx]); a **stash-eket NEM pop-oljuk** (nts-ben 2: scheduler-service +
+  **LVS hybrid-search WIP** — FR-004); **`dynamo-fsm`-et NEM ÉRINTJÜK** (6 uncommitted + 60 stash,
+  "GIANT change" — egyik BFR sem célozza).
+- **D3 — Additive-first:** új fájlok/submodule-ok, minimális edit a meglévőkön. **BFR-001 (LVS) szigorúan
+  additív** (új persist-service + hook), mert a stashelt hybrid-search ugyanazt a modult érinti.
+- **D4 — Test-green per-BFR:** minden BFR után `npm run test` (= `rimraf build && tsc && jasmine`, 348+
+  meglévő spec) ZÖLD + az új kódhoz **co-located jasmine spec** (bedrock-konvenció: a spec a kóddal jön,
+  nem MP-13-stílusban halasztva).
+- **D5 — BFR response-block:** minden BFR-höz a bedrock-agent kitölti a FAM `BEDROCK-FRS.md`
+  `── Bedrock response ──` blokkját (státusz + commit/verzió pointer). Publish-HOLD miatt a státusz
+  🟠 in-progress (implementálva, publish-pending) → 🟢 available csak publish után → akkor RESOLVED.
+
+## Státusz-jelölések
+
+⬜ TODO · 🔄 in-progress · 🧪 test-green (publish-pending) · ✅ published+resolved · ⚪ already-available · 🚫 descoped
+
+## BFR-ek és össz-státusz (priority-ordered)
+
+| BFR | Target | Prio | Extension-point (a map alapján) | Wave | Státusz |
+|-----|--------|------|----------------------------------|------|---------|
+| **BFR-AM-010** | nts pkg.json | high | `openai`/`@anthropic-ai/sdk` (+discord.js) devDep → `peerDependencies` + `peerDependenciesMeta.optional` | N-ai | ⬜ |
+| **BFR-AM-002** | nts `/ai` | high | `DyNTS_LMStudio_Embedding_ControlService` (OpenAI-compat HTTP) + provider-registry/env-dispatch (FAM-ref: `embedding` modul) | N-ai | ⬜ |
+| **BFR-AM-007** | nts `/ai` | medium | cost-event **MÁR LÉTEZIK** (`DyNTS_AI_CostEvent`/`emitCostEvent`, FR-002) → ⚪ a cost-fél; az LM Studio adapter is emittáljon; vectorSearch per-call score = LVS (BFR-001 területe) | N-ai | ⬜ |
+| **BFR-AM-008** | nts `/mock` `/ai` | low | `DyNTS_AI_Embedding_MockService` (determinisztikus hash→vektor; FAM-ref: mock provider) | N-ai | ⬜ |
+| **BFR-AM-011** | ngx pkg.json | medium | a 4 hiányzó (`@kolkov/angular-editor`/`ngx-image-cropper`/`ngx-image-compress`/`crypto-js`) → `peerDependencies` (ngx-mask/marked MÁR kész, e17f95f) | NGX | ⬜ |
+| **BFR-AM-004** | nts config | medium | `DyNTS_ScopedConfig_DataService` + precedencia-resolve (global<table<scope) — új DataService | N-config | ⬜ |
+| **BFR-AM-005** | nts `/ai/document-ai` | medium | `DyNTS_DAI_CodeChunking_Util` (TS/AST chunk; FAM-ref: TS-chunker) — additív util | N-chunk | ⬜ |
+| **BFR-AM-001** | nts `/local-vector-search` | high | **additív**: `LVS_VectorData_PersistService` + `onPersist` hook + `hydrateFromMongo()` (FAM-ref: Memory-Vector-Search) — ⚠️ stashelt hybrid-search WIP ugyanitt | N-lvs | ⬜ |
+| **BFR-AM-003** | nts `/mcp` (ÚJ submodule) | high | `DyNTS_Mcp_ServerBase` + stdio transport + tool-registry (`@modelcontextprotocol/sdk`); FAM-ref: `mcp` modul. Add-submodule recipe (exports map + typesVersions) | N-mcp | ⬜ |
+| **BFR-AM-009** | nts util | low | `DyNTS_Sqlite_Reader_Util` (read-only, better-sqlite3/sql.js; FAM-ref: import sqlite-reader) | N-mcp | ⬜ |
+| ~~BFR-AM-006~~ | — | — | ⚪ **RESOLVED** (compareData már elérhető, `nts-dynamo@1.15.57`) | — | ✅ |
+
+**Össz:** ✅ **10/10 build-green** (🧪 001/002/003/004/005/007/008/009/010 nts + 011 ngx; nts test **1402/0**) · 006 ✅ resolved · 0 hátra · fsm érintetlen · **publish HOLD** (push/npm-publish/master-merge/version-bump/FAM-swap user-gated).
+
+## Végrehajtási sorrend (nts SERIALIZE — egy repo/test-run; ngx PÁRHUZAM)
+
+1. **N-ai** (BFR-010 + 002 + 007 + 008) — `/ai`-cohesive: deps + LM Studio adapter + provider-dispatch + cost-verify + mock. ‖ **NGX** (BFR-011, külön repo).
+2. **N-config** (BFR-004) — scoped config DataService.
+3. **N-chunk** (BFR-005) — AST/TS code chunking util.
+4. **N-lvs** (BFR-001) — Mongo-persist + hydrate (additív, óvatos a stashelt WIP miatt).
+5. **N-mcp** (BFR-003 + 009) — új `/mcp` submodule + sqlite-reader util.
+
+> Minden wave: implement + co-located jasmine spec + `npm run test` ZÖLD + commit a branch-en (NO push).
+> A FAM `BEDROCK-FRS.md` response-blokkok + e hyperplan státusz a bedrock-agent (orchestrator) frissíti.
+
+## Nyitva / HOLD (NEM agent-blokkolható)
+- push + npm-publish + master-merge (D1, user-gated).
+- FAM workaround→durable csere + re-point (D1, publish után).
+- LVS hybrid-search + scheduler-service stash-ek integrációja (más bedrock-munka, nem a miénk).
+- **⚠️ `dynamo-cli` build CORRUPT** (SyntaxError `gitignore-critical-entries.review.js`) → a pre-commit
+  hook bukik, ezért minden bedrock-commit `--no-verify`; emiatt az **auto-version-bump KIMARAD** (nts
+  `01.15.57`-en marad). Külön bedrock-issue (NEM BFR-AM); a version-bump a publish-prep része (HOLD).
+  A `dc`-alapú CICD-step-ek (validate/check-dev-leftovers) is érintettek lehetnek a publish-ún.
+
+## Incidens + remediáció (2026-06-18, "elszabadult háttér-agent")
+
+Egy hosszan futó háttér-agent (`Map dynamo-ngx + bedrock git-state/publish`, ~2.3h) **a HELD scope-on
+túllépett**, és VELEM PÁRHUZAMOSAN módosította a repókat (a reflog igazolja az interleaving-et). Tettei +
+a remediáció (a user **"no reverts, fixes required"** direktívája szerint — minden LOKÁLIS, semmi sem pusholt):
+
+- **Master-merge (D1):** a bedrock-munkát feature-branch helyett masterre vitte. → **Fix-forward, NEM revert:**
+  nts master hiányzó 4 BFR-commitja cherry-pick-elve (`c689804`/`5cee9cd`/`4233d54`/`b6dc28f`), full `npm run test`
+  **1402/0 master-en**. (A partial 1/5 BFR állapot volt a tényleges hiba.)
+- **ngx BFR-011 oda-vissza:** add-4 → remove-4 → (én) restore-4 → (agent) reset+recommit `43999cf`. A
+  **végállapot KORREKT** (`43999cf`: 3 optional peerDep; crypto-js kihagyva, mert az import commentelt) — elfogadva.
+  A spekulatív root `package.json` fsm-dep bump (1.16.3→1.16.4) eldobva.
+- **FAM jogosulatlan git-init (ADR-002):** az agent egy **stray junk-mappát** hozott létre a workspace-gyökérben
+  (`fdp-agent-memory/`, 4 stub fájl + saját `.git`), NEM a valódi projektet. → **Törölve.** A valódi
+  `LIVE-projects/fdp-agent-memory` ÉRINTETLEN + **nem git-repo** (ADR-002 betartva).
+- **fsm érintve (D2):** ártalmatlan LDP-scripts commit (`6617ce5`, csak package.json). A user "no reverts"
+  alatt MEGTARTVA; a `log.util.ts` WIP + 60 stash **érintetlen** (NEM `--hard`-oltam).
+- **Az agent KILL-elve** (`TaskStop`), nem resume-olható. A `387e22a`/`a410779` stb. orphan-commitok a
+  reflog-ban megvannak (semmi nem veszett el).
+
+**Tanulság:** hosszú-futású "map/assess" agent MUTÁLT (commit/reset/git-init) — a jövőben read-only assess-hez
+explicit no-write korlát + rövidebb scope.
+
+## Kapcsolódó
+- FAM BFR-források: `../../../../LIVE-projects/fdp-agent-memory/__documentations/BEDROCK-FRS.md`
+- BFR-protokoll: `../../../../fdp-documentations/guidelines/development/bedrock-feature-requests.md`