@futdevpro/nts-dynamo 1.15.155 → 1.15.156

package/build/_models/control-models/endpoint-params.control-model.js

@@ -1,485 +1,410 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.DyNTS_Endpoint_Params = void 0;
-const fsm_dynamo_1 = require("@futdevpro/fsm-dynamo");
-const global_settings_const_1 = require("../../_collections/global-settings.const");
-const client_safe_error_util_1 = require("../../_collections/client-safe-error.util");
-const global_service_1 = require("../../_services/core/global.service");
-const request_hunter_service_1 = require("../../_services/core/request-hunter.service");
-/**
- * High level endpoint for API
- * used for specific events such as saving or getting data,
- * triggering events, logging in or out, and much more
- *
- * (You'll need to add them to a {@link DyNTS_Controller} through the {@link DyNTS_Controller.addEndpoint} method)
- *
- * @example
- * ```typescript
- * // Example from note-book controller implementation
- * new DyNTS_Endpoint_Params({
- *   name: 'getMyNoteBooks',
- *   type: DyFM_HttpCallType.get,
- *   endpoint: '/:userId/get-my',
- *   preProcesses: [ authService.authenticate_tokenSelf ],
- *   tasks: [
- *     async (req: Request, res: Response, issuer: string): Promise<void> => {
- *       const notes_DS = new NoteBook_DataService({
- *         issuer: issuer,
- *       });
- *
- *       const notes = await notes_DS.getMyNoteBooks(req.params.userId);
- *       res.send(notes);
- *     },
- *   ],
- * })
- * ```
- */
-class DyNTS_Endpoint_Params extends fsm_dynamo_1.DyFM_Endpoint_SettingsBase {
-    /* name: string; */
-    security;
-    /* type: DyFM_HttpCallType;
-    endpoint: string; */
-    /* TODO: ENCRYPTION !!EZTET
-    useEncryptionKey?: string; */
-    pathParams;
-    preProcesses = [];
-    tasks;
-    logRequest;
-    logRequestsParams;
-    logRequestsContent;
-    logResponseContent;
-    stackLocation;
-    autoResolveCirculation;
-    constructor(set) {
-        try {
-            super(set);
-            this.name = set.name ?? set.endpoint;
-            this.security = set.security ?? global_settings_const_1.DyNTS_global_settings.defaultRouteSecurity;
-            this.type = set.type;
-            this.endpoint = set.endpoint;
-            this.logRequest = set.logRequest ?? global_settings_const_1.DyNTS_global_settings.log_settings.request;
-            this.logRequestsParams = set.logRequestsParams ??
-                global_settings_const_1.DyNTS_global_settings.log_settings.requestsParams;
-            this.logRequestsContent = set.logRequestsContent ??
-                global_settings_const_1.DyNTS_global_settings.log_settings.requestsContent;
-            this.logResponseContent = set.logResponseContent ??
-                global_settings_const_1.DyNTS_global_settings.log_settings.responseContent;
-            this.autoResolveCirculation = set.autoResolveCirculation ??
-                global_settings_const_1.DyNTS_global_settings.autoResolveEndpointCirculationErrors;
-            if (!this.endpoint) {
-                throw new fsm_dynamo_1.DyFM_Error({
-                    status: 406,
-                    errorCode: `${global_settings_const_1.DyNTS_global_settings.systemShortCodeName}|DyNTS-EP0-C00`,
-                    addECToUserMsg: true,
-                    message: 'trying to create DyNTS_Endpoint_Params without endpoint value',
-                    userMessage: 'We encountered an unhandled Server Error, ' +
-                        'please contact the responsible development team.',
-                    additionalContent: set,
-                });
-            }
-            let pathParts = this.endpoint.split('/');
-            pathParts = pathParts.filter((part) => part.startsWith(':'));
-            pathParts = pathParts.map((part) => part.replace(':', ''));
-            this.pathParams = pathParts;
-            this.preProcesses = set.preProcesses ?? [];
-            this.tasks = set.tasks ?? [];
-            this.stackLocation = (0, fsm_dynamo_1.DyFM_getConstructionStackLocation)();
-        }
-        catch (error) {
-            fsm_dynamo_1.DyFM_Log.error(`\nEndpoint params setup failed: name: '${set.name}' ` +
-                `(security: ${set.security}) endpoint: ${set.endpoint}` +
-                `\nERROR:` +
-                `\n`, error);
-            throw error;
-        }
-    }
-    /**
-     *
-     * @returns
-     */
-    async preLog(req, res, issuer) {
-        try {
-            if (this.logRequest) {
-                let msg = `\n===>>>      incoming '${this.name}' request... (issuer: ${issuer})`;
-                if (this.logRequestsParams) {
-                    const params = this.getPathParamsLogContent(req);
-                    msg += `\npathParams: ${params}`;
-                }
-                if (this.logRequestsContent &&
-                    req.body &&
-                    0 < Object.keys(req.body).length) {
-                    fsm_dynamo_1.DyFM_Log.info(msg + `\nbody:`, req.body);
-                }
-                else {
-                    fsm_dynamo_1.DyFM_Log.info(msg);
-                }
-            }
-        }
-        catch (error) {
-            this.error(req, res, error, issuer);
-        }
-    }
-    /**
-     *
-     * @returns
-     */
-    getFullExecution() {
-        let issuer;
-        return async (req, res) => {
-            // ISSUE-HUNTER (2026-08-05) — keres-szintu attribucio. Ez a KOZPONTI vegrehajtasi pont,
-            // minden endpoint ezen megy at, ezert itt (es CSAK itt) merunk. Koltseg: egy Map-beszuras
-            // + Date.now(). A `finally` garantalja, hogy hiba/early-return eseten se szivarogjon be-
-            // jegyzes. Reszletes indoklas: `DyNTS_RequestHunter`.
-            const hunterId = request_hunter_service_1.DyNTS_RequestHunter.getInstance().begin(this.name);
-            try {
-                let issuer;
-                try {
-                    issuer = global_service_1.DyNTS_GlobalService?.getAuthService()?.getIssuerFromRequest(req);
-                }
-                catch (error) {
-                    fsm_dynamo_1.DyFM_Log.warn(fsm_dynamo_1.DyFM_Error.getAnyMessage(error));
-                    issuer = 'unknown-issuer';
-                }
-                if (this.logRequest) {
-                    await this.preLog(req, res, issuer);
-                }
-                if (global_settings_const_1.DyNTS_global_settings.log_settings.requestStackLocation) {
-                    fsm_dynamo_1.DyFM_Log.info(`              endpoint location: "${this.stackLocation}"`);
-                }
-                if (!this.preProcesses) {
-                    throw new fsm_dynamo_1.DyFM_Error({
-                        status: 500,
-                        errorCode: `${global_settings_const_1.DyNTS_global_settings.systemShortCodeName}|DyNTS-EP1-C00`,
-                        addECToUserMsg: true,
-                        message: 'trying to execute DyNTS_Endpoint_Params without preProcesses value, ' +
-                            'make sure you are using DyNTS_Endpoint_Params constructor correctly',
-                        userMessage: 'We encountered an unhandled Server Error, ' +
-                            'please contact the responsible development team.',
-                    });
-                }
-                await fsm_dynamo_1.DyFM_Array.asyncForEach(this.preProcesses, async (preProcess) => {
-                    await preProcess(req, res);
-                });
-                // FR-263 defense-in-depth (security): ha egy preProcess (pl. egy auth-guard) MÁR választ küldött
-                // (`res.headersSent` — pl. egy 401-et vagy redirect-et), NE futtassuk a task-okat. Enélkül egy
-                // response-t küldő guard után is lefutna az endpoint-logika, és a task 200-as válasza felül-
-                // írhatná/megelőzhetné a guard elutasítását → info-disclosure (l. FR-263 auth error-endpoint leak).
-                // Standard Express-minta; a normál (nem-válaszoló preProcess-ű) endpointokra nincs hatással.
-                if (res.headersSent) {
-                    return;
-                }
-                // BFR-OVERSEER-010: a logResponseContent IMPLEMENTÁLVA (a korábbi "not implemented yet"
-                // warn-stub minden requestre spam-elt). A res.send-et wrap-eljük a küldött body
-                // elkapásához; a task-ok után csonkolt preview-t logolunk (log-flood ellen).
-                let capturedResponseBody;
-                if (this.logRequest && this.logResponseContent) {
-                    const originalSend = res.send.bind(res);
-                    res.send = (body) => {
-                        capturedResponseBody = body;
-                        return originalSend(body);
-                    };
-                }
-                await fsm_dynamo_1.DyFM_Array.asyncForEach(this.tasks, async (task) => {
-                    await task(req, res, issuer);
-                });
-                if (this.logRequest) {
-                    fsm_dynamo_1.DyFM_Log.success(`  <<<=====   '${this.name}' result sent.`);
-                    if (this.logResponseContent) {
-                        fsm_dynamo_1.DyFM_Log.info(`              response: ${DyNTS_Endpoint_Params.previewBody(capturedResponseBody)}`);
-                    }
-                }
-            }
-            catch (error) {
-                this.error(req, res, error, issuer);
-            }
-            finally {
-                request_hunter_service_1.DyNTS_RequestHunter.getInstance().end(hunterId);
-            }
-        };
-    }
-    /**
-     * BFR-OVERSEER-010: csonkolt, safe response-preview a logResponseContent-hez —
-     * nem-parseolható/circular body-ra nem dob, hosszú body-t levág (log-flood ellen).
-     */
-    static previewBody(body) {
-        const maxLength = 2000;
-        let text;
-        if (body === undefined) {
-            return '-no body captured-';
-        }
-        if (typeof body === 'string') {
-            text = body;
-        }
-        else {
-            try {
-                text = JSON.stringify(body);
-            }
-            catch {
-                text = String(body);
-            }
-        }
-        return text.length > maxLength ? `${text.slice(0, maxLength)}…(truncated ${text.length} chars)` : text;
-    }
-    /**
-     *
-     * @param res
-     * @param error
-     */
-    async error(req, res, error, issuer, autoSecondTry) {
-        try {
-            let msg = `Endpoint caught an error. '${this.name}' (${this.endpoint})`;
-            msg += this.getPathParamsLogContent(req);
-            if (error instanceof fsm_dynamo_1.DyFM_Error) {
-                msg += `\n  ErrorCode: ${error._errorCode}`;
-            }
-            msg += `\n  error: "${error?._message ?? error?.message}"`;
-            msg += '\n  at ' + this.stackLocation;
-            fsm_dynamo_1.DyFM_Log.testError(msg);
-            if (global_settings_const_1.DyNTS_global_settings.log_settings.highDetailedLogs ||
-                !(error instanceof fsm_dynamo_1.DyFM_Error)) {
-                fsm_dynamo_1.DyFM_Log.H_error(`Endpoint "${this.endpoint}" caught an error. (${this.name})`, '\n    ERROR:', error);
-            }
-            else if (global_settings_const_1.DyNTS_global_settings.log_settings.api_errors) {
-                error.logSimple(`Endpoint "${this.endpoint}" caught an error. (${this.name})`);
-            }
-            if (error?.flag?.includes('DYNAMO')) {
-                if (!error.additionalContent) {
-                    error.additionalContent = {};
-                }
-                error.additionalContent.endpointInfo = msg;
-            }
-            // FR-071 (2026-06-06) — rich debug-descriptive request-context.
-            // Per memory [[feedback_rich_error_handling]] minden errornak debug-level
-            // descriptive-nek kell lennie + persisted to errors table. Az endpoint-
-            // params catch-blokkjaban minden errorhoz csatoljuk a request snapshot-ot
-            // (URL, method, headers KULCSAI ertek nelkul, query, params, origin,
-            // user-agent), igy a TEST environment-en a kliens-oldali fejleszto a
-            // response-bol latja MI hianyzott a request-bol, NEM csak az error-code-ot.
-            // Header-VALUEK nem szivarognak ki — csak a kulcs-listat es az auth-header
-            // alakjat (length + first 7 chars hogy lassek "Bearer "-rel kezd-e).
-            try {
-                const headerKeys = Object.keys(req?.headers ?? {});
-                const authHeader = req?.headers?.['authorization'];
-                const authHeaderShape = typeof authHeader === 'string'
-                    ? `present (len=${authHeader.length}, startsWith="${authHeader.substring(0, 7)}")`
-                    : 'MISSING';
-                const requestSnapshot = {
-                    url: req?.originalUrl ?? req?.url,
-                    method: req?.method,
-                    origin: req?.headers?.origin ?? null,
-                    referer: req?.headers?.referer ?? null,
-                    userAgent: req?.headers?.['user-agent'] ?? null,
-                    hostHeader: req?.headers?.host ?? null,
-                    headerKeyCount: headerKeys.length,
-                    headerKeys: headerKeys.sort(),
-                    hasAuthorizationKey: headerKeys.includes('authorization'),
-                    authHeaderShape: authHeaderShape,
-                    hasSecretKeyKey: headerKeys.includes('secret-key'),
-                    hasAdminKeyKey: headerKeys.includes('x-admin-key'),
-                    hasContentTypeKey: headerKeys.includes('content-type'),
-                    params: req?.params,
-                    query: req?.query,
-                    remoteAddress: req?.ip ?? null,
-                };
-                if (error instanceof fsm_dynamo_1.DyFM_Error) {
-                    if (!error.additionalContent) {
-                        error.additionalContent = {};
-                    }
-                    error.additionalContent.requestDebug = requestSnapshot;
-                }
-                // Plusz: 1-soros debug log a server-side log-buffer-ben.
-                fsm_dynamo_1.DyFM_Log.warn(`[FR-071 req-debug] ${req?.method ?? '?'} ${req?.originalUrl ?? req?.url ?? '?'} ` +
-                    `(endpoint=${this.name}, origin=${req?.headers?.origin ?? 'none'}, ` +
-                    `auth=${headerKeys.includes('authorization') ? 'yes' : 'NO'}, ` +
-                    `secretKey=${headerKeys.includes('secret-key') ? 'yes' : 'no'}, ` +
-                    `adminKey=${headerKeys.includes('x-admin-key') ? 'yes' : 'no'}, ` +
-                    `errorCode=${error?._errorCode ?? '(raw)'})`);
-            }
-            catch /* (snapshotErr) */ {
-                // ha a snapshot kepzese maga is bukik, ne maszek bele az error-flow-ba.
-            }
-            await global_service_1.DyNTS_GlobalService.globalErrorHandler?.(error, req, res, issuer).catch((err) => {
-                fsm_dynamo_1.DyFM_Log.warn('DyNTS_GlobalService.globalErrorHandler failed to handle error: ', err);
-                fsm_dynamo_1.DyFM_Log.warn('It will proceed as normal.');
-            });
-            // FR-067 (2026-06-06): non-DyFM_Error wrap.
-            // Korabban a plain Error / axios HTTP error nyersen ment kifele
-            // -> kliens "[object Object]"-et latott, nem volt _errorCode, nem volt
-            // userMessage, a kliens-oldali DyFM_Error pipeline ures error-t kapott.
-            // Most MINDEN non-DyFM_Error errort egy DyFM_Error-ba csomagolunk
-            // az endpoint-nev-vel es a system short-code-jal egy felismerheto
-            // `_errorCode`-szal: `<SYSTEM>|DyNTS-EPP-<endpointName>`.
-            // Plusz a downstream HTTP-status-t (axios `status` / Express `statusCode`)
-            // betesszuk a DyFM_Error `___status` mezojebe, igy a kovetkezo blokk
-            // mar konzekvensen olvasni tudja.
-            if (!(error instanceof fsm_dynamo_1.DyFM_Error)) {
-                const errAny = error;
-                const downstreamRaw = errAny?.statusCode ?? errAny?.status;
-                const downstreamStatus = typeof downstreamRaw === 'number'
-                    ? downstreamRaw
-                    : (typeof downstreamRaw === 'string' && downstreamRaw !== '' && !isNaN(Number(downstreamRaw)))
-                        ? Number(downstreamRaw)
-                        : undefined;
-                const wrapStatus = (downstreamStatus !== undefined &&
-                    downstreamStatus >= 100 &&
-                    downstreamStatus <= 599) ? downstreamStatus : 500;
-                error = new fsm_dynamo_1.DyFM_Error({
-                    error: error,
-                    message: errAny?.message ?? `Unhandled error in endpoint "${this.name}"`,
-                    errorCode: `${global_settings_const_1.DyNTS_global_settings.systemShortCodeName}|DyNTS-EPP-${this.name ?? 'UNKNOWN'}`,
-                    userMessage: 'An internal error occurred.\nPlease contact the responsible development team.',
-                    status: wrapStatus,
-                });
-            }
-            if (error instanceof fsm_dynamo_1.DyFM_Error) {
-                if (global_settings_const_1.DyNTS_global_settings.compactErrorResponse) {
-                    error = error.getErrorsFlat();
-                    delete error.errors;
-                    /* delete (error as DyFM_Error).error; */
-                    delete error.stack;
-                }
-            }
-            if (error?.flag?.includes('DYNAMO') &&
-                error.confidentialContent) {
-                delete error.confidentialContent;
-            }
-            try {
-                JSON.stringify(error);
-            }
-            catch /* (stringifyError) */ {
-                if (this.autoResolveCirculation) {
-                    try {
-                        error = fsm_dynamo_1.DyFM_Object.resolveCirculation(error);
-                        JSON.stringify(error);
-                    }
-                    catch /* (resolveError) */ {
-                        fsm_dynamo_1.DyFM_Log.H_error('DyNTS_Endpoint_Params: error object is not serializable, and not resolvable!');
-                        error = new fsm_dynamo_1.DyFM_Error({
-                            error: new Error('UNRESOLVABLE UNSERIALIZABLE ERROR'),
-                        });
-                    }
-                }
-                else {
-                    fsm_dynamo_1.DyFM_Log.H_error('DyNTS_Endpoint_Params: error object is not serializable!');
-                    error = new fsm_dynamo_1.DyFM_Error({
-                        error: new Error('UNSERIALIZABLE ERROR'),
-                    });
-                }
-            }
-            // FR-066 (2026-06-05): a default-status fallback 501 helyett 500-ra
-            // valtott. A 501 ('Not Implemented') felrevezeto klienseknek (az endpoint
-            // LETEZIK, csak a handler ___status-nelkuli error-t dobott). A 500
-            // ('Internal Server Error') a standard fallback erre. Plusz:
-            // tovabbi konvenciókat is olvasunk a status-resolver-ben — DyFM_Error
-            // `___status`-en kívül a `statusCode` (Express convention) es `status`
-            // (axios / general HTTP) mezőket is. Igy a downstream HTTP-hivasok
-            // (pl. axios-bol jovo error) helyes HTTP-status-szal továbbítódnak.
-            const errorAny = error;
-            const resolvedStatusRaw = error?.___status
-                ?? errorAny?.statusCode
-                ?? errorAny?.status;
-            const resolvedStatus = typeof resolvedStatusRaw === 'number'
-                ? resolvedStatusRaw
-                : (typeof resolvedStatusRaw === 'string' && !isNaN(Number(resolvedStatusRaw)))
-                    ? Number(resolvedStatusRaw)
-                    : null;
-            if (resolvedStatus !== null && resolvedStatus >= 100 && resolvedStatus <= 599) {
-                res.status(resolvedStatus);
-            }
-            else {
-                res.status(500);
-            }
-            // Kliens-safe strip ENV-FÜGGETLENÜL (BFR-FDPAUTHSERVICE-002): a korábbi prod-only blokk a
-            // test/dev környezetben TELJES DyFM-leaket hagyott (__localStack + ___systemVersion + issuer).
-            // A szabályok (mindig-strip / prod-only additionalContent / kliens-mezők megtartása) SSOT-ja
-            // a DyNTS_ClientSafeError_Util.
-            // BFR-OVERSEER-010: a kiküldött client-safe error megőrzése a logResponseContent-hez.
-            const clientSafeError = client_safe_error_util_1.DyNTS_ClientSafeError_Util.toClientSafe(error);
-            res.send(clientSafeError);
-            if (this.logRequest) {
-                fsm_dynamo_1.DyFM_Log.error(`  <<<=====   '${this.name}' error sent: ${error?._message ?? ''}`);
-                if (this.logResponseContent) {
-                    fsm_dynamo_1.DyFM_Log.error(`              error response: ${DyNTS_Endpoint_Params.previewBody(clientSafeError)}`);
-                }
-            }
-            fsm_dynamo_1.DyFM_Log.error('');
-        }
-        catch (errorLvl2) {
-            this.multiLevelError(errorLvl2, {
-                req: req,
-                res: res,
-                error: error,
-                issuer: issuer,
-                autoSecondTry: autoSecondTry,
-            });
-        }
-    }
-    multiLevelError(errorLvl2, errorInputs) {
-        if (global_settings_const_1.DyNTS_global_settings.log_settings.highDetailedLogs) {
-            const msg = `\n\nDYNAMO MULTILEVEL ERROR:DyNTS_Endpoint_Params: error: ` +
-                `(${this.name}, ${this.endpoint})` +
-                `\n(DYNAMO MULTILEVEL ERROR means, that the ERROR HANDLING is ALSO FAILED, ` +
-                `and the error message was not sent.)` +
-                `\nthisEndpointStackLocation: ${this.stackLocation}`;
-            if (errorLvl2 instanceof fsm_dynamo_1.DyFM_Error) {
-                errorLvl2.logSimple(msg);
-            }
-            else {
-                fsm_dynamo_1.DyFM_Log.H_error(msg, '\nERROR:', errorLvl2, '\n');
-            }
-        }
-        else {
-            const msg = `\n\nDYNAMO MULTILEVEL ERROR:DyNTS_Endpoint_Params: error: ` +
-                `(${this.name}, ${this.endpoint})` +
-                `\nthisEndpointStackLocation: ${this.stackLocation}` +
-                `\n(DYNAMO MULTILEVEL ERROR means, that the ERROR HANDLING is ALSO FAILED, ` +
-                `and the error message was not sent.)`;
-            if (errorLvl2 instanceof fsm_dynamo_1.DyFM_Error) {
-                errorLvl2.logSimple(msg);
-            }
-            else {
-                fsm_dynamo_1.DyFM_Log.H_error(msg, '\nERROR:', errorLvl2, '\n');
-            }
-        }
-        try {
-            JSON.stringify(errorInputs.error);
-        }
-        catch /* (errorLvl2Replication) */ {
-            fsm_dynamo_1.DyFM_Log.error('  ...response object is not serializable!');
-            let resolvedError;
-            try {
-                resolvedError = fsm_dynamo_1.DyFM_Object.resolveCirculation(errorInputs.error);
-            }
-            catch (errorLvl3) {
-                fsm_dynamo_1.DyFM_Log.error('  ...response object is not resolvable!');
-                fsm_dynamo_1.DyFM_Log.error('  ...', errorLvl3);
-            }
-            if (resolvedError) {
-                if (this.autoResolveCirculation && !errorInputs.autoSecondTry) {
-                    this.error(errorInputs.req, errorInputs.res, resolvedError, errorInputs.issuer, true);
-                    fsm_dynamo_1.DyFM_Log.warn('  ...automatic circulation error resolution was successful!');
-                    return;
-                }
-                else {
-                    fsm_dynamo_1.DyFM_Log.error('  ...response object is resolvable! (use DyFM_Object.resolveCirculation)');
-                }
-            }
-        }
-        if (global_settings_const_1.DyNTS_global_settings.log_settings.highDetailedLogs ||
-            !(errorLvl2 instanceof fsm_dynamo_1.DyFM_Error)) {
-            fsm_dynamo_1.DyFM_Log.H_error(`Endpoint "${this.endpoint}" caught an error and FAILED TO RESOLVE. (${this.name})`, '\n    ERROR:', errorLvl2);
-        }
-        else {
-            errorLvl2.logSimple(`Endpoint "${this.endpoint}" caught an error and FAILED TO RESOLVE. (${this.name})`);
-        }
-    }
-    getPathParamsLogContent(req) {
-        let params = '';
-        this.pathParams.forEach((param) => {
-            params += `\n${param}: ${req.params[param]}`;
-        });
-        return params;
-    }
-}
-exports.DyNTS_Endpoint_Params = DyNTS_Endpoint_Params;
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DyNTS_Endpoint_Params = void 0;
+const fsm_dynamo_1 = require("@futdevpro/fsm-dynamo");
+const global_settings_const_1 = require("../../_collections/global-settings.const");
+const client_safe_error_util_1 = require("../../_collections/client-safe-error.util");
+const safe_diagnostic_control_service_1 = require("../../_modules/server/safe-diagnostic/safe-diagnostic.control-service");
+const safe_diagnostic_stage_type_enum_1 = require("../../_modules/server/safe-diagnostic/safe-diagnostic-stage.type-enum");
+const global_service_1 = require("../../_services/core/global.service");
+const request_hunter_service_1 = require("../../_services/core/request-hunter.service");
+/**
+ * High level endpoint for API
+ * used for specific events such as saving or getting data,
+ * triggering events, logging in or out, and much more
+ *
+ * (You'll need to add them to a {@link DyNTS_Controller} through the {@link DyNTS_Controller.addEndpoint} method)
+ *
+ * @example
+ * ```typescript
+ * // Example from note-book controller implementation
+ * new DyNTS_Endpoint_Params({
+ *   name: 'getMyNoteBooks',
+ *   type: DyFM_HttpCallType.get,
+ *   endpoint: '/:userId/get-my',
+ *   preProcesses: [ authService.authenticate_tokenSelf ],
+ *   tasks: [
+ *     async (req: Request, res: Response, issuer: string): Promise<void> => {
+ *       const notes_DS = new NoteBook_DataService({
+ *         issuer: issuer,
+ *       });
+ *
+ *       const notes = await notes_DS.getMyNoteBooks(req.params.userId);
+ *       res.send(notes);
+ *     },
+ *   ],
+ * })
+ * ```
+ */
+class DyNTS_Endpoint_Params extends fsm_dynamo_1.DyFM_Endpoint_SettingsBase {
+    /* name: string; */
+    security;
+    /* type: DyFM_HttpCallType;
+    endpoint: string; */
+    /* TODO: ENCRYPTION !!EZTET
+    useEncryptionKey?: string; */
+    pathParams;
+    preProcesses = [];
+    tasks;
+    logRequest;
+    logRequestsParams;
+    logRequestsContent;
+    logResponseContent;
+    stackLocation;
+    autoResolveCirculation;
+    constructor(set) {
+        try {
+            super(set);
+            this.name = set.name ?? set.endpoint;
+            this.security = set.security ?? global_settings_const_1.DyNTS_global_settings.defaultRouteSecurity;
+            this.type = set.type;
+            this.endpoint = set.endpoint;
+            this.logRequest = set.logRequest ?? global_settings_const_1.DyNTS_global_settings.log_settings.request;
+            this.logRequestsParams = set.logRequestsParams ??
+                global_settings_const_1.DyNTS_global_settings.log_settings.requestsParams;
+            this.logRequestsContent = set.logRequestsContent ??
+                global_settings_const_1.DyNTS_global_settings.log_settings.requestsContent;
+            this.logResponseContent = set.logResponseContent ??
+                global_settings_const_1.DyNTS_global_settings.log_settings.responseContent;
+            this.autoResolveCirculation = set.autoResolveCirculation ??
+                global_settings_const_1.DyNTS_global_settings.autoResolveEndpointCirculationErrors;
+            if (!this.endpoint) {
+                throw new fsm_dynamo_1.DyFM_Error({
+                    status: 406,
+                    errorCode: `${global_settings_const_1.DyNTS_global_settings.systemShortCodeName}|DyNTS-EP0-C00`,
+                    addECToUserMsg: true,
+                    message: 'trying to create DyNTS_Endpoint_Params without endpoint value',
+                    userMessage: 'We encountered an unhandled Server Error, ' +
+                        'please contact the responsible development team.',
+                    additionalContent: set,
+                });
+            }
+            let pathParts = this.endpoint.split('/');
+            pathParts = pathParts.filter((part) => part.startsWith(':'));
+            pathParts = pathParts.map((part) => part.replace(':', ''));
+            this.pathParams = pathParts;
+            this.preProcesses = set.preProcesses ?? [];
+            this.tasks = set.tasks ?? [];
+            this.stackLocation = (0, fsm_dynamo_1.DyFM_getConstructionStackLocation)();
+        }
+        catch (error) {
+            safe_diagnostic_control_service_1.DyNTS_SafeDiagnostic_ControlService.report({
+                code: 'DYNTS|ENDPOINT|CONSTRUCTION_FAILURE',
+                stage: safe_diagnostic_stage_type_enum_1.DyNTS_SafeDiagnosticStage_Type.endpoint,
+                error: error,
+            });
+            throw error;
+        }
+    }
+    /**
+     *
+     * @returns
+     */
+    async preLog(req, res, issuer) {
+        try {
+            if (this.logRequest) {
+                let msg = `\n===>>>      incoming '${this.name}' request... (issuer: ${issuer})`;
+                if (this.logRequestsParams) {
+                    const params = this.getPathParamsLogContent(req);
+                    msg += `\npathParams: ${params}`;
+                }
+                if (this.logRequestsContent &&
+                    req.body &&
+                    0 < Object.keys(req.body).length) {
+                    fsm_dynamo_1.DyFM_Log.info(msg + `\nbody:`, req.body);
+                }
+                else {
+                    fsm_dynamo_1.DyFM_Log.info(msg);
+                }
+            }
+        }
+        catch (error) {
+            this.error(req, res, error, issuer);
+        }
+    }
+    /**
+     *
+     * @returns
+     */
+    getFullExecution() {
+        let issuer;
+        return async (req, res) => {
+            // ISSUE-HUNTER (2026-08-05) — keres-szintu attribucio. Ez a KOZPONTI vegrehajtasi pont,
+            // minden endpoint ezen megy at, ezert itt (es CSAK itt) merunk. Koltseg: egy Map-beszuras
+            // + Date.now(). A `finally` garantalja, hogy hiba/early-return eseten se szivarogjon be-
+            // jegyzes. Reszletes indoklas: `DyNTS_RequestHunter`.
+            const hunterId = request_hunter_service_1.DyNTS_RequestHunter.getInstance().begin(this.name);
+            try {
+                try {
+                    issuer = global_service_1.DyNTS_GlobalService?.getAuthService()?.getIssuerFromRequest(req);
+                }
+                catch (error) {
+                    safe_diagnostic_control_service_1.DyNTS_SafeDiagnostic_ControlService.report({
+                        code: 'DYNTS|ENDPOINT|ISSUER_RESOLUTION_FAILURE',
+                        stage: safe_diagnostic_stage_type_enum_1.DyNTS_SafeDiagnosticStage_Type.endpoint,
+                        error: error,
+                    });
+                    issuer = 'unknown-issuer';
+                }
+                if (this.logRequest) {
+                    await this.preLog(req, res, issuer);
+                }
+                if (global_settings_const_1.DyNTS_global_settings.log_settings.requestStackLocation) {
+                    fsm_dynamo_1.DyFM_Log.info(`              endpoint location: "${this.stackLocation}"`);
+                }
+                if (!this.preProcesses) {
+                    throw new fsm_dynamo_1.DyFM_Error({
+                        status: 500,
+                        errorCode: `${global_settings_const_1.DyNTS_global_settings.systemShortCodeName}|DyNTS-EP1-C00`,
+                        addECToUserMsg: true,
+                        message: 'trying to execute DyNTS_Endpoint_Params without preProcesses value, ' +
+                            'make sure you are using DyNTS_Endpoint_Params constructor correctly',
+                        userMessage: 'We encountered an unhandled Server Error, ' +
+                            'please contact the responsible development team.',
+                    });
+                }
+                await fsm_dynamo_1.DyFM_Array.asyncForEach(this.preProcesses, async (preProcess) => {
+                    await preProcess(req, res);
+                });
+                // FR-263 defense-in-depth (security): ha egy preProcess (pl. egy auth-guard) MÁR választ küldött
+                // (`res.headersSent` — pl. egy 401-et vagy redirect-et), NE futtassuk a task-okat. Enélkül egy
+                // response-t küldő guard után is lefutna az endpoint-logika, és a task 200-as válasza felül-
+                // írhatná/megelőzhetné a guard elutasítását → info-disclosure (l. FR-263 auth error-endpoint leak).
+                // Standard Express-minta; a normál (nem-válaszoló preProcess-ű) endpointokra nincs hatással.
+                if (res.headersSent) {
+                    return;
+                }
+                // BFR-OVERSEER-010: a logResponseContent IMPLEMENTÁLVA (a korábbi "not implemented yet"
+                // warn-stub minden requestre spam-elt). A res.send-et wrap-eljük a küldött body
+                // elkapásához; a task-ok után csonkolt preview-t logolunk (log-flood ellen).
+                let capturedResponseBody;
+                if (this.logRequest && this.logResponseContent) {
+                    const originalSend = res.send.bind(res);
+                    res.send = (body) => {
+                        capturedResponseBody = body;
+                        return originalSend(body);
+                    };
+                }
+                await fsm_dynamo_1.DyFM_Array.asyncForEach(this.tasks, async (task) => {
+                    await task(req, res, issuer);
+                });
+                if (this.logRequest) {
+                    fsm_dynamo_1.DyFM_Log.success(`  <<<=====   '${this.name}' result sent.`);
+                    if (this.logResponseContent) {
+                        fsm_dynamo_1.DyFM_Log.info(`              response: ${DyNTS_Endpoint_Params.previewBody(capturedResponseBody)}`);
+                    }
+                }
+            }
+            catch (error) {
+                await this.error(req, res, error, issuer);
+            }
+            finally {
+                request_hunter_service_1.DyNTS_RequestHunter.getInstance().end(hunterId);
+            }
+        };
+    }
+    /**
+     * BFR-OVERSEER-010: csonkolt, safe response-preview a logResponseContent-hez —
+     * nem-parseolható/circular body-ra nem dob, hosszú body-t levág (log-flood ellen).
+     */
+    static previewBody(body) {
+        const maxLength = 2000;
+        let text;
+        if (body === undefined) {
+            return '-no body captured-';
+        }
+        if (typeof body === 'string') {
+            text = body;
+        }
+        else {
+            try {
+                text = JSON.stringify(body);
+            }
+            catch {
+                text = String(body);
+            }
+        }
+        return text.length > maxLength ? `${text.slice(0, maxLength)}…(truncated ${text.length} chars)` : text;
+    }
+    /**
+     *
+     * @param res
+     * @param error
+     */
+    async error(req, res, error, issuer, autoSecondTry) {
+        try {
+            const status = DyNTS_Endpoint_Params.resolveErrorStatus(error);
+            const diagnostic = safe_diagnostic_control_service_1.DyNTS_SafeDiagnostic_ControlService.report({
+                code: 'DYNTS|ENDPOINT|FAILURE',
+                stage: safe_diagnostic_stage_type_enum_1.DyNTS_SafeDiagnosticStage_Type.endpoint,
+                error: error,
+                status: status,
+            });
+            try {
+                await global_service_1.DyNTS_GlobalService.globalErrorHandler?.(error, req, res, issuer);
+            }
+            catch (handlerError) {
+                safe_diagnostic_control_service_1.DyNTS_SafeDiagnostic_ControlService.report({
+                    code: 'DYNTS|ENDPOINT|GLOBAL_HANDLER_FAILURE',
+                    stage: safe_diagnostic_stage_type_enum_1.DyNTS_SafeDiagnosticStage_Type.endpoint,
+                    error: handlerError,
+                });
+            }
+            // FR-067 (2026-06-06): non-DyFM_Error wrap.
+            // Korabban a plain Error / axios HTTP error nyersen ment kifele
+            // -> kliens "[object Object]"-et latott, nem volt _errorCode, nem volt
+            // userMessage, a kliens-oldali DyFM_Error pipeline ures error-t kapott.
+            // Most MINDEN non-DyFM_Error errort egy DyFM_Error-ba csomagolunk
+            // az endpoint-nev-vel es a system short-code-jal egy felismerheto
+            // `_errorCode`-szal: `<SYSTEM>|DyNTS-EPP-<endpointName>`.
+            // Plusz a downstream HTTP-status-t (axios `status` / Express `statusCode`)
+            // betesszuk a DyFM_Error `___status` mezojebe, igy a kovetkezo blokk
+            // mar konzekvensen olvasni tudja.
+            if (!(error instanceof fsm_dynamo_1.DyFM_Error)) {
+                error = new fsm_dynamo_1.DyFM_Error({
+                    message: 'Unhandled endpoint failure.',
+                    errorCode: this.getClientErrorCode(),
+                    userMessage: 'An internal error occurred.\nPlease contact the responsible development team.',
+                    additionalContent: { diagnostic: diagnostic },
+                    status: status,
+                });
+            }
+            if (error instanceof fsm_dynamo_1.DyFM_Error) {
+                if (global_settings_const_1.DyNTS_global_settings.compactErrorResponse) {
+                    error = error.getErrorsFlat();
+                    delete error.errors;
+                    /* delete (error as DyFM_Error).error; */
+                    delete error.stack;
+                }
+            }
+            if (error?.flag?.includes('DYNAMO') &&
+                error.confidentialContent) {
+                delete error.confidentialContent;
+            }
+            try {
+                JSON.stringify(error);
+            }
+            catch /* (stringifyError) */ {
+                if (this.autoResolveCirculation) {
+                    try {
+                        error = fsm_dynamo_1.DyFM_Object.resolveCirculation(error);
+                        JSON.stringify(error);
+                    }
+                    catch /* (resolveError) */ {
+                        fsm_dynamo_1.DyFM_Log.H_error('DyNTS_Endpoint_Params: error object is not serializable, and not resolvable!');
+                        error = new fsm_dynamo_1.DyFM_Error({
+                            error: new Error('UNRESOLVABLE UNSERIALIZABLE ERROR'),
+                        });
+                    }
+                }
+                else {
+                    fsm_dynamo_1.DyFM_Log.H_error('DyNTS_Endpoint_Params: error object is not serializable!');
+                    error = new fsm_dynamo_1.DyFM_Error({
+                        error: new Error('UNSERIALIZABLE ERROR'),
+                    });
+                }
+            }
+            // FR-066 (2026-06-05): a default-status fallback 501 helyett 500-ra
+            // valtott. A 501 ('Not Implemented') felrevezeto klienseknek (az endpoint
+            // LETEZIK, csak a handler ___status-nelkuli error-t dobott). A 500
+            // ('Internal Server Error') a standard fallback erre. Plusz:
+            // tovabbi konvenciókat is olvasunk a status-resolver-ben — DyFM_Error
+            // `___status`-en kívül a `statusCode` (Express convention) es `status`
+            // (axios / general HTTP) mezőket is. Igy a downstream HTTP-hivasok
+            // (pl. axios-bol jovo error) helyes HTTP-status-szal továbbítódnak.
+            res.status(DyNTS_Endpoint_Params.resolveErrorStatus(error));
+            // Kliens-safe strip ENV-FÜGGETLENÜL (BFR-FDPAUTHSERVICE-002): a korábbi prod-only blokk a
+            // test/dev környezetben TELJES DyFM-leaket hagyott (__localStack + ___systemVersion + issuer).
+            // A szabályok (mindig-strip / prod-only additionalContent / kliens-mezők megtartása) SSOT-ja
+            // a DyNTS_ClientSafeError_Util.
+            // BFR-OVERSEER-010: a kiküldött client-safe error megőrzése a logResponseContent-hez.
+            const clientSafeError = client_safe_error_util_1.DyNTS_ClientSafeError_Util.toClientSafe(error);
+            res.send(clientSafeError);
+            if (this.logRequest) {
+                fsm_dynamo_1.DyFM_Log.error('[DyNTS endpoint error response sent]', diagnostic);
+            }
+        }
+        catch (errorLvl2) {
+            this.multiLevelError(errorLvl2, {
+                req: req,
+                res: res,
+                error: error,
+                issuer: issuer,
+                autoSecondTry: autoSecondTry,
+            });
+        }
+    }
+    multiLevelError(errorLvl2, errorInputs) {
+        safe_diagnostic_control_service_1.DyNTS_SafeDiagnostic_ControlService.report({
+            code: 'DYNTS|ENDPOINT|ERROR_HANDLER_FAILURE',
+            stage: safe_diagnostic_stage_type_enum_1.DyNTS_SafeDiagnosticStage_Type.endpoint,
+            error: errorLvl2,
+        });
+        try {
+            JSON.stringify(errorInputs.error);
+        }
+        catch /* (errorLvl2Replication) */ {
+            fsm_dynamo_1.DyFM_Log.error('  ...response object is not serializable!');
+            let resolvedError;
+            try {
+                resolvedError = fsm_dynamo_1.DyFM_Object.resolveCirculation(errorInputs.error);
+            }
+            catch (errorLvl3) {
+                safe_diagnostic_control_service_1.DyNTS_SafeDiagnostic_ControlService.report({
+                    code: 'DYNTS|ENDPOINT|CIRCULATION_RESOLUTION_FAILURE',
+                    stage: safe_diagnostic_stage_type_enum_1.DyNTS_SafeDiagnosticStage_Type.endpoint,
+                    error: errorLvl3,
+                });
+            }
+            if (resolvedError) {
+                if (this.autoResolveCirculation && !errorInputs.autoSecondTry) {
+                    this.error(errorInputs.req, errorInputs.res, resolvedError, errorInputs.issuer, true);
+                    fsm_dynamo_1.DyFM_Log.warn('  ...automatic circulation error resolution was successful!');
+                    return;
+                }
+                else {
+                    fsm_dynamo_1.DyFM_Log.error('  ...response object is resolvable! (use DyFM_Object.resolveCirculation)');
+                }
+            }
+        }
+    }
+    /** Resolves conventional HTTP status fields without inspecting raw error content. */
+    static resolveErrorStatus(error) {
+        try {
+            if (error === null || (typeof error !== 'object' && typeof error !== 'function')) {
+                return 500;
+            }
+            const statusRaw = Reflect.get(error, '___status')
+                ?? Reflect.get(error, 'statusCode')
+                ?? Reflect.get(error, 'status');
+            const status = typeof statusRaw === 'number' ? statusRaw : Number(statusRaw);
+            return Number.isInteger(status) && status >= 100 && status <= 599 ? status : 500;
+        }
+        catch {
+            return 500;
+        }
+    }
+    /** Preserves the public error-code shape while excluding arbitrary endpoint-name characters. */
+    getClientErrorCode() {
+        const systemCode = DyNTS_Endpoint_Params.sanitizeCodePart(global_settings_const_1.DyNTS_global_settings.systemShortCodeName, 'DYNTS');
+        const endpointCode = DyNTS_Endpoint_Params.sanitizeCodePart(this.name, 'UNKNOWN');
+        return `${systemCode}|DyNTS-EPP-${endpointCode}`;
+    }
+    /** Bounds developer-owned identifiers to the established error-code alphabet. */
+    static sanitizeCodePart(value, fallback) {
+        if (typeof value !== 'string') {
+            return fallback;
+        }
+        const sanitized = value.replace(/[^A-Za-z0-9_-]/g, '_').slice(0, 64);
+        return sanitized || fallback;
+    }
+    getPathParamsLogContent(req) {
+        let params = '';
+        this.pathParams.forEach((param) => {
+            params += `\n${param}: ${req.params[param]}`;
+        });
+        return params;
+    }
+}
+exports.DyNTS_Endpoint_Params = DyNTS_Endpoint_Params;
 //# sourceMappingURL=endpoint-params.control-model.js.map