@futdevpro/nts-dynamo 1.15.150 → 1.15.153

package/src/_models/control-models/http-settings.control-model.spec.ts

@@ -1,77 +1,77 @@
-
-import { DyNTS_Http_Settings } from './http-settings.control-model';
-import * as BodyParser from 'body-parser';
-
-describe('| DyNTS_Http_Settings', () => {
-  it('| should create an instance with default settings', () => {
-    const settings = new DyNTS_Http_Settings();
-
-    expect(settings.httpPort).toBeUndefined();
-    expect(settings.httpsPort).toBeUndefined();
-    expect(settings.socketPath).toBeUndefined();
-    expect(settings.httpUrlencoded).toEqual({
-      limit: '50mb',
-      extended: true,
-    } as BodyParser.OptionsUrlencoded);
-    expect(settings.httpJson).toEqual({
-      limit: '50mb',
-    } as BodyParser.OptionsJson);
-    expect(settings.httpsUrlencoded).toEqual({
-      limit: '50mb',
-      extended: true,
-    } as BodyParser.OptionsUrlencoded);
-    expect(settings.httpsJson).toEqual({
-      limit: '50mb',
-    } as BodyParser.OptionsJson);
-  });
-
-  it('| should create an instance with provided settings', () => {
-    const customSettings: DyNTS_Http_Settings = {
-      httpPort: 8080,
-      httpsPort: 8443,
-      httpUrlencoded: {
-        limit: '100mb',
-        extended: false,
-      },
-      httpJson: {
-        limit: '100mb',
-      },
-      httpsUrlencoded: {
-        limit: '100mb',
-        extended: false,
-      },
-      httpsJson: {
-        limit: '100mb',
-      },
-    };
-
-    const settings = new DyNTS_Http_Settings(customSettings);
-
-    expect(settings.httpPort).toBe(8080);
-    expect(settings.httpsPort).toBe(8443);
-    expect(settings.httpUrlencoded).toEqual({
-      limit: '100mb',
-      extended: false,
-    } as BodyParser.OptionsUrlencoded);
-    expect(settings.httpJson).toEqual({
-      limit: '100mb',
-    } as BodyParser.OptionsJson);
-    expect(settings.httpsUrlencoded).toEqual({
-      limit: '100mb',
-      extended: false,
-    } as BodyParser.OptionsUrlencoded);
-    expect(settings.httpsJson).toEqual({
-      limit: '100mb',
-    } as BodyParser.OptionsJson);
-  });
-
-  it('| should have socketPath undefined when not provided', () => {
-    const settings = new DyNTS_Http_Settings();
-    expect(settings.socketPath).toBeUndefined();
-  });
-
-  it('| should set socketPath when provided in constructor', () => {
-    const settings = new DyNTS_Http_Settings({ socketPath: '/ws' });
-    expect(settings.socketPath).toBe('/ws');
-  });
-});
+
+import { DyNTS_Http_Settings } from './http-settings.control-model';
+import * as BodyParser from 'body-parser';
+
+describe('| DyNTS_Http_Settings', () => {
+  it('| should create an instance with default settings', () => {
+    const settings = new DyNTS_Http_Settings();
+
+    expect(settings.httpPort).toBeUndefined();
+    expect(settings.httpsPort).toBeUndefined();
+    expect(settings.socketPath).toBeUndefined();
+    expect(settings.httpUrlencoded).toEqual({
+      limit: '50mb',
+      extended: true,
+    } as BodyParser.OptionsUrlencoded);
+    expect(settings.httpJson).toEqual({
+      limit: '50mb',
+    } as BodyParser.OptionsJson);
+    expect(settings.httpsUrlencoded).toEqual({
+      limit: '50mb',
+      extended: true,
+    } as BodyParser.OptionsUrlencoded);
+    expect(settings.httpsJson).toEqual({
+      limit: '50mb',
+    } as BodyParser.OptionsJson);
+  });
+
+  it('| should create an instance with provided settings', () => {
+    const customSettings: DyNTS_Http_Settings = {
+      httpPort: 8080,
+      httpsPort: 8443,
+      httpUrlencoded: {
+        limit: '100mb',
+        extended: false,
+      },
+      httpJson: {
+        limit: '100mb',
+      },
+      httpsUrlencoded: {
+        limit: '100mb',
+        extended: false,
+      },
+      httpsJson: {
+        limit: '100mb',
+      },
+    };
+
+    const settings = new DyNTS_Http_Settings(customSettings);
+
+    expect(settings.httpPort).toBe(8080);
+    expect(settings.httpsPort).toBe(8443);
+    expect(settings.httpUrlencoded).toEqual({
+      limit: '100mb',
+      extended: false,
+    } as BodyParser.OptionsUrlencoded);
+    expect(settings.httpJson).toEqual({
+      limit: '100mb',
+    } as BodyParser.OptionsJson);
+    expect(settings.httpsUrlencoded).toEqual({
+      limit: '100mb',
+      extended: false,
+    } as BodyParser.OptionsUrlencoded);
+    expect(settings.httpsJson).toEqual({
+      limit: '100mb',
+    } as BodyParser.OptionsJson);
+  });
+
+  it('| should have socketPath undefined when not provided', () => {
+    const settings = new DyNTS_Http_Settings();
+    expect(settings.socketPath).toBeUndefined();
+  });
+
+  it('| should set socketPath when provided in constructor', () => {
+    const settings = new DyNTS_Http_Settings({ socketPath: '/ws' });
+    expect(settings.socketPath).toBe('/ws');
+  });
+});

package/src/_models/control-models/http-settings.control-model.ts

@@ -1,37 +1,37 @@
-
-import * as BodyParser from 'body-parser';
-
-/**
- * HTTP/HTTPS és Socket.IO port és body parser beállítások.
- * socketPath: ha nincs megadva, DyNTS_defaultSocketPath marad;
- * a kliensnek ugyanazt a path-ot kell használnia.
- */
-export class DyNTS_Http_Settings {
-  httpPort?: number;
-  httpsPort?: number;
-  /** Socket.IO path (pl. '/ws'); ha üres, default: DyNTS_defaultSocketPath. */
-  socketPath?: string;
-
-  httpUrlencoded?: BodyParser.OptionsUrlencoded = {
-    limit: '50mb', 
-    extended: true,
-  };
-  httpJson?: BodyParser.OptionsJson = {
-    limit: '50mb',
-  };
-  httpsUrlencoded?: BodyParser.OptionsUrlencoded = {
-    limit: '50mb',
-    extended: true,
-  };
-  httpsJson?: BodyParser.OptionsJson = {
-    limit: '50mb',
-  };
-
-  constructor(
-    set?: DyNTS_Http_Settings
-  ) {
-    if (set) {
-      Object.assign(this, set);
-    }
-  }
-}
+
+import * as BodyParser from 'body-parser';
+
+/**
+ * HTTP/HTTPS és Socket.IO port és body parser beállítások.
+ * socketPath: ha nincs megadva, DyNTS_defaultSocketPath marad;
+ * a kliensnek ugyanazt a path-ot kell használnia.
+ */
+export class DyNTS_Http_Settings {
+  httpPort?: number;
+  httpsPort?: number;
+  /** Socket.IO path (pl. '/ws'); ha üres, default: DyNTS_defaultSocketPath. */
+  socketPath?: string;
+
+  httpUrlencoded?: BodyParser.OptionsUrlencoded = {
+    limit: '50mb', 
+    extended: true,
+  };
+  httpJson?: BodyParser.OptionsJson = {
+    limit: '50mb',
+  };
+  httpsUrlencoded?: BodyParser.OptionsUrlencoded = {
+    limit: '50mb',
+    extended: true,
+  };
+  httpsJson?: BodyParser.OptionsJson = {
+    limit: '50mb',
+  };
+
+  constructor(
+    set?: DyNTS_Http_Settings
+  ) {
+    if (set) {
+      Object.assign(this, set);
+    }
+  }
+}

package/src/_models/control-models/system-control.control-model.spec.ts

@@ -1,27 +1,27 @@
-
-import { DyNTS_SystemControl } from './system-control.control-model';
-
-describe('| DyNTS_SystemControl', () => {
-  let systemControl: DyNTS_SystemControl;
-
-  beforeEach(() => {
-    systemControl = new DyNTS_SystemControl();
-  });
-
-  it('| should return true when init is false', () => {
-    systemControl.init = false;
-    expect(systemControl.getIsReady()).toBeTrue();
-  });
-
-  it('| should return true when init is true and started is true', () => {
-    systemControl.init = true;
-    systemControl.started = true;
-    expect(systemControl.getIsReady()).toBeTrue();
-  });
-
-  it('| should return false when init is true and started is false', () => {
-    systemControl.init = true;
-    systemControl.started = false;
-    expect(systemControl.getIsReady()).toBeFalse();
-  });
-});
+
+import { DyNTS_SystemControl } from './system-control.control-model';
+
+describe('| DyNTS_SystemControl', () => {
+  let systemControl: DyNTS_SystemControl;
+
+  beforeEach(() => {
+    systemControl = new DyNTS_SystemControl();
+  });
+
+  it('| should return true when init is false', () => {
+    systemControl.init = false;
+    expect(systemControl.getIsReady()).toBeTrue();
+  });
+
+  it('| should return true when init is true and started is true', () => {
+    systemControl.init = true;
+    systemControl.started = true;
+    expect(systemControl.getIsReady()).toBeTrue();
+  });
+
+  it('| should return false when init is true and started is false', () => {
+    systemControl.init = true;
+    systemControl.started = false;
+    expect(systemControl.getIsReady()).toBeFalse();
+  });
+});

package/src/_models/control-models/system-control.control-model.ts

@@ -1,12 +1,12 @@
-
-
-
-export class DyNTS_SystemControl {
-  init: boolean = false;
-  started: boolean = false;
-
-  getIsReady(): boolean {
-    return this.init ? this.started : true;
-  }
-}
-
+
+
+
+export class DyNTS_SystemControl {
+  init: boolean = false;
+  started: boolean = false;
+
+  getIsReady(): boolean {
+    return this.init ? this.started : true;
+  }
+}
+

package/src/_models/data-models/schema-migration.data-model.ts

@@ -1,50 +1,50 @@
-import { DyFM_DataModel_Params, DyFM_Metadata } from '@futdevpro/fsm-dynamo';
-
-/**
- * **Migráció-nyilvántartó ("server info") LEDGER** — bedrock, újrahasználható az egész flottának.
- * (A token-service app-lokál `SchemaMigration` mintájából emelve bedrock nts-be.)
- *
- * Egy-egy `migrationId` **PONTOSAN EGYSZER** fut le rendszerenként: a `DyNTS_Migration_Runner.runPending()`
- * boot-on (az app `app.server.postProcess()`-éből) lekéri a már-alkalmazott ID-kat, a pending
- * migrációkat lefuttatja, majd egy sort rögzít ide. A `migrationId` **unique index** → race-safe
- * (két párhuzamos instance esetén az egyik `save`-je duplicate-key-re bukik → skip).
- *
- * A ledger a KÖTELEZŐ kanon-adatokat tartja: **mely migrációk futottak** (id + idő) + **mely app-verzió**
- * alkalmazta (a `appliedVersion`-ökből a "mely verziók futottak" levezethető).
- *
- * Az app a saját DB-jében regisztrálja a `dyNTS_schemaMigration_dataParams`-t (`getGlobalServiceCollection
- * ().dbModels`), így per-app saját `dynts_schema_migrations` collection-t kap.
- */
-export class DyNTS_SchemaMigration extends DyFM_Metadata {
-
-  /** A migráció egyedi azonosítója (konvenció: `YYYY-MM-DD-NNN-descriptor`). */
-  migrationId?: string;
-
-  /** Alkalmazás időbélyege. */
-  appliedAt?: Date;
-
-  /** Az alkalmazó app-verzió (a `package.json` version-je — audit-trail + "mely verziók futottak"). */
-  appliedVersion?: string;
-
-  /** Diag — pl. `touched=<n>` vagy hiba-részletek. */
-  notes?: string;
-
-  constructor(set?: DyNTS_SchemaMigration) {
-    super(set);
-    if (set) {
-      Object.assign(this, set);
-    }
-  }
-}
-
-export const dyNTS_schemaMigration_dataParams: DyFM_DataModel_Params<DyNTS_SchemaMigration> =
-  new DyFM_DataModel_Params<DyNTS_SchemaMigration>({
-    dataName: 'dynts_schema_migrations',
-    addArchive: false,
-    properties: {
-      migrationId:    { type: 'string', required: true, unique: true, index: true },
-      appliedAt:      { type: 'date',   required: true },
-      appliedVersion: { type: 'string' },
-      notes:          { type: 'string' },
-    },
-  });
+import { DyFM_DataModel_Params, DyFM_Metadata } from '@futdevpro/fsm-dynamo';
+
+/**
+ * **Migráció-nyilvántartó ("server info") LEDGER** — bedrock, újrahasználható az egész flottának.
+ * (A token-service app-lokál `SchemaMigration` mintájából emelve bedrock nts-be.)
+ *
+ * Egy-egy `migrationId` **PONTOSAN EGYSZER** fut le rendszerenként: a `DyNTS_Migration_Runner.runPending()`
+ * boot-on (az app `app.server.postProcess()`-éből) lekéri a már-alkalmazott ID-kat, a pending
+ * migrációkat lefuttatja, majd egy sort rögzít ide. A `migrationId` **unique index** → race-safe
+ * (két párhuzamos instance esetén az egyik `save`-je duplicate-key-re bukik → skip).
+ *
+ * A ledger a KÖTELEZŐ kanon-adatokat tartja: **mely migrációk futottak** (id + idő) + **mely app-verzió**
+ * alkalmazta (a `appliedVersion`-ökből a "mely verziók futottak" levezethető).
+ *
+ * Az app a saját DB-jében regisztrálja a `dyNTS_schemaMigration_dataParams`-t (`getGlobalServiceCollection
+ * ().dbModels`), így per-app saját `dynts_schema_migrations` collection-t kap.
+ */
+export class DyNTS_SchemaMigration extends DyFM_Metadata {
+
+  /** A migráció egyedi azonosítója (konvenció: `YYYY-MM-DD-NNN-descriptor`). */
+  migrationId?: string;
+
+  /** Alkalmazás időbélyege. */
+  appliedAt?: Date;
+
+  /** Az alkalmazó app-verzió (a `package.json` version-je — audit-trail + "mely verziók futottak"). */
+  appliedVersion?: string;
+
+  /** Diag — pl. `touched=<n>` vagy hiba-részletek. */
+  notes?: string;
+
+  constructor(set?: DyNTS_SchemaMigration) {
+    super(set);
+    if (set) {
+      Object.assign(this, set);
+    }
+  }
+}
+
+export const dyNTS_schemaMigration_dataParams: DyFM_DataModel_Params<DyNTS_SchemaMigration> =
+  new DyFM_DataModel_Params<DyNTS_SchemaMigration>({
+    dataName: 'dynts_schema_migrations',
+    addArchive: false,
+    properties: {
+      migrationId:    { type: 'string', required: true, unique: true, index: true },
+      appliedAt:      { type: 'date',   required: true },
+      appliedVersion: { type: 'string' },
+      notes:          { type: 'string' },
+    },
+  });

package/src/_models/interfaces/app-version-header-settings.interface.ts

@@ -1,17 +1,17 @@
-/**
- * FR-292 (2026-08-08) — a deployolt app-verziót hordozó response-header beállításai.
- *
- * A szerver minden válaszra ráteszi a saját app-verzióját, a kliens (ngx oldalon a
- * `DyNX_AppVersion_Interceptor`) pedig ebből veszi észre, hogy a betöltött bundle elavult.
- * Nulla extra kérés: a jelzés a már meglévő API-forgalmon utazik.
- */
-export interface DyNTS_AppVersionHeader_Settings {
-  /**
-   * Ki-/bekapcsolja a header-middleware-t. **Default: `true`** — informatív header, se PII,
-   * se belső részlet nincs benne, viszont nélküle minden app külön építené ugyanezt.
-   */
-  enabled?: boolean;
-
-  /** Felülírható header-név. Default: `X-App-Version`. */
-  headerName?: string;
-}
+/**
+ * FR-292 (2026-08-08) — a deployolt app-verziót hordozó response-header beállításai.
+ *
+ * A szerver minden válaszra ráteszi a saját app-verzióját, a kliens (ngx oldalon a
+ * `DyNX_AppVersion_Interceptor`) pedig ebből veszi észre, hogy a betöltött bundle elavult.
+ * Nulla extra kérés: a jelzés a már meglévő API-forgalmon utazik.
+ */
+export interface DyNTS_AppVersionHeader_Settings {
+  /**
+   * Ki-/bekapcsolja a header-middleware-t. **Default: `true`** — informatív header, se PII,
+   * se belső részlet nincs benne, viszont nélküle minden app külön építené ugyanezt.
+   */
+  enabled?: boolean;
+
+  /** Felülírható header-név. Default: `X-App-Version`. */
+  headerName?: string;
+}

package/src/_models/interfaces/certification-settings.interface.ts

@@ -1,7 +1,7 @@
-
-import * as FileSystem from 'fs';
-
-export interface DyNTS_Certification_Settings {
-  keyPath: FileSystem.PathLike,
-  certPath: FileSystem.PathLike,
-}
+
+import * as FileSystem from 'fs';
+
+export interface DyNTS_Certification_Settings {
+  keyPath: FileSystem.PathLike,
+  certPath: FileSystem.PathLike,
+}

package/src/_models/interfaces/compare-data-options.interface.ts

@@ -1,27 +1,27 @@
-/**
- * Options a `DyNTS_DataService<T>.compareData()` method-hoz.
- *
- * - Ha `fields` is undefined, a method auto-discover-elt fielden iter
- *   (mindket objektum kulcs-unioja minus a `DyFM_Metadata` skip-list).
- * - Ha `fields` adott, KIZAROLAG a felsorolt fielden iter (a skip-list
- *   IGNORALODIK — explicit fields override).
- * - `customComparators` per-field override a default deep-equal-en kivul.
- */
-export interface DyNTS_CompareData_Options<T> {
-  /**
-   * Specifikus fields-szubset osszehasonlitasra.
-   *
-   * Megadasaval az auto-discovery is ki van iktatva (a metadata skip-list
-   * NEM ervenyes — ha kifejezetten `_id`-t kerunk, azt is osszehasonlitja).
-   */
-  fields?: (keyof T)[];
-
-  /**
-   * Per-field custom comparator. Ha a field nincs jelen a map-ben, a default
-   * deep-equal hasznalt. A custom function `true`-val signal-ozza az equality-t.
-   *
-   * Hasznos pl. set-equality array-ekre (`arraySetEqual`), case-insensitive
-   * string compare-re, vagy normalizalt date-compare-re.
-   */
-  customComparators?: Partial<Record<keyof T, (a: any, b: any) => boolean>>;
-}
+/**
+ * Options a `DyNTS_DataService<T>.compareData()` method-hoz.
+ *
+ * - Ha `fields` is undefined, a method auto-discover-elt fielden iter
+ *   (mindket objektum kulcs-unioja minus a `DyFM_Metadata` skip-list).
+ * - Ha `fields` adott, KIZAROLAG a felsorolt fielden iter (a skip-list
+ *   IGNORALODIK — explicit fields override).
+ * - `customComparators` per-field override a default deep-equal-en kivul.
+ */
+export interface DyNTS_CompareData_Options<T> {
+  /**
+   * Specifikus fields-szubset osszehasonlitasra.
+   *
+   * Megadasaval az auto-discovery is ki van iktatva (a metadata skip-list
+   * NEM ervenyes — ha kifejezetten `_id`-t kerunk, azt is osszehasonlitja).
+   */
+  fields?: (keyof T)[];
+
+  /**
+   * Per-field custom comparator. Ha a field nincs jelen a map-ben, a default
+   * deep-equal hasznalt. A custom function `true`-val signal-ozza az equality-t.
+   *
+   * Hasznos pl. set-equality array-ekre (`arraySetEqual`), case-insensitive
+   * string compare-re, vagy normalizalt date-compare-re.
+   */
+  customComparators?: Partial<Record<keyof T, (a: any, b: any) => boolean>>;
+}

package/src/_models/interfaces/compare-data-result.interface.ts

@@ -1,12 +1,12 @@
-/**
- * `DyNTS_DataService<T>.compareData()` return-objektum.
- *
- * - `result: 'equal'` ha minden vizsgalt field egyezik
- * - `result: 'modified'` ha legalabb egy field eltert
- * - `changedFields` CSAK modified eseten populated (ures array nem fordulhat elo)
- */
-export interface DyNTS_CompareData_Result<T> {
-  result: 'equal' | 'modified';
-  /** Csak `result: 'modified'` eseten van — a teljes mismatch-lista a vizsgalt fields koreben. */
-  changedFields?: (keyof T)[];
-}
+/**
+ * `DyNTS_DataService<T>.compareData()` return-objektum.
+ *
+ * - `result: 'equal'` ha minden vizsgalt field egyezik
+ * - `result: 'modified'` ha legalabb egy field eltert
+ * - `changedFields` CSAK modified eseten populated (ures array nem fordulhat elo)
+ */
+export interface DyNTS_CompareData_Result<T> {
+  result: 'equal' | 'modified';
+  /** Csak `result: 'modified'` eseten van — a teljes mismatch-lista a vizsgalt fields koreben. */
+  changedFields?: (keyof T)[];
+}

package/src/_models/interfaces/cors-settings.interface.spec.ts

@@ -1,52 +1,52 @@
-import { DyNTS_Cors_Settings } from './cors-settings.interface';
-
-describe('| DyNTS_Cors_Settings', () => {
-
-  it('| accepts an explicit array allowlist', () => {
-    const s: DyNTS_Cors_Settings = {
-      allowedOrigins: ['https://organizer.futdevpro.hu', 'https://test.organizer.futdevpro.hu'],
-    };
-    expect(Array.isArray(s.allowedOrigins)).toBe(true);
-    expect((s.allowedOrigins as string[]).length).toBe(2);
-  });
-
-  it('| accepts a predicate function', () => {
-    const s: DyNTS_Cors_Settings = {
-      allowedOrigins: (origin: string): boolean => /\.futdevpro\.hu$/.test(origin),
-    };
-    const fn: (o: string) => boolean = s.allowedOrigins as (o: string) => boolean;
-    expect(fn('https://organizer.futdevpro.hu')).toBe(true);
-    expect(fn('https://attacker.com')).toBe(false);
-  });
-
-  it('| accepts wildcard with allowCredentials=false', () => {
-    const s: DyNTS_Cors_Settings = {
-      allowedOrigins: '*',
-      allowCredentials: false,
-    };
-    expect(s.allowedOrigins).toBe('*');
-    expect(s.allowCredentials).toBe(false);
-  });
-
-  it('| defaults to allowCredentials=true when omitted', () => {
-    // Type-level: omitted is allowed; runtime middleware reads `!== false` and treats as true.
-    const s: DyNTS_Cors_Settings = {
-      allowedOrigins: ['https://example.com'],
-    };
-    expect(s.allowCredentials).toBeUndefined();
-  });
-
-  it('| supports custom methods + headers + exposed + maxAge', () => {
-    const s: DyNTS_Cors_Settings = {
-      allowedOrigins: ['https://example.com'],
-      allowedMethods: ['GET', 'POST'],
-      allowedHeaders: ['Authorization', 'X-Trace-Id'],
-      exposedHeaders: ['X-Total-Count'],
-      maxAgeSeconds: 3600,
-    };
-    expect(s.allowedMethods).toEqual(['GET', 'POST']);
-    expect(s.allowedHeaders).toContain('X-Trace-Id');
-    expect(s.exposedHeaders).toEqual(['X-Total-Count']);
-    expect(s.maxAgeSeconds).toBe(3600);
-  });
-});
+import { DyNTS_Cors_Settings } from './cors-settings.interface';
+
+describe('| DyNTS_Cors_Settings', () => {
+
+  it('| accepts an explicit array allowlist', () => {
+    const s: DyNTS_Cors_Settings = {
+      allowedOrigins: ['https://organizer.futdevpro.hu', 'https://test.organizer.futdevpro.hu'],
+    };
+    expect(Array.isArray(s.allowedOrigins)).toBe(true);
+    expect((s.allowedOrigins as string[]).length).toBe(2);
+  });
+
+  it('| accepts a predicate function', () => {
+    const s: DyNTS_Cors_Settings = {
+      allowedOrigins: (origin: string): boolean => /\.futdevpro\.hu$/.test(origin),
+    };
+    const fn: (o: string) => boolean = s.allowedOrigins as (o: string) => boolean;
+    expect(fn('https://organizer.futdevpro.hu')).toBe(true);
+    expect(fn('https://attacker.com')).toBe(false);
+  });
+
+  it('| accepts wildcard with allowCredentials=false', () => {
+    const s: DyNTS_Cors_Settings = {
+      allowedOrigins: '*',
+      allowCredentials: false,
+    };
+    expect(s.allowedOrigins).toBe('*');
+    expect(s.allowCredentials).toBe(false);
+  });
+
+  it('| defaults to allowCredentials=true when omitted', () => {
+    // Type-level: omitted is allowed; runtime middleware reads `!== false` and treats as true.
+    const s: DyNTS_Cors_Settings = {
+      allowedOrigins: ['https://example.com'],
+    };
+    expect(s.allowCredentials).toBeUndefined();
+  });
+
+  it('| supports custom methods + headers + exposed + maxAge', () => {
+    const s: DyNTS_Cors_Settings = {
+      allowedOrigins: ['https://example.com'],
+      allowedMethods: ['GET', 'POST'],
+      allowedHeaders: ['Authorization', 'X-Trace-Id'],
+      exposedHeaders: ['X-Total-Count'],
+      maxAgeSeconds: 3600,
+    };
+    expect(s.allowedMethods).toEqual(['GET', 'POST']);
+    expect(s.allowedHeaders).toContain('X-Trace-Id');
+    expect(s.exposedHeaders).toEqual(['X-Total-Count']);
+    expect(s.maxAgeSeconds).toBe(3600);
+  });
+});