@futdevpro/nts-dynamo 1.15.156 → 1.15.157

package/build/index.js

@@ -1,102 +1,105 @@
-"use strict";
-/* try {
-  require('@futdevpro/fsm-dynamo');
-} catch (error) {
-  console.log(
-    '❌ FSM-Dynamo package not found, please install it with: pnpm add @futdevpro/fsm-dynamo'
-  );
-}
-
-try {
-  require('express');
-} catch (error) {
-  console.log(
-    '❌ Express package not found, please install it with: pnpm add express'
-  );
-}
-
-try {
-  require('axios');
-} catch (error) {
-  console.log(
-    '❌ Axios package not found, please install it with: pnpm add axios'
-  );
-} */
-Object.defineProperty(exports, "__esModule", { value: true });
-const tslib_1 = require("tslib");
-// COLLECTIONS
-tslib_1.__exportStar(require("./_collections/archive.util"), exports);
-tslib_1.__exportStar(require("./_collections/npm-token-check.util"), exports);
-tslib_1.__exportStar(require("./_collections/atlas-default-db-options.const"), exports);
-tslib_1.__exportStar(require("./_collections/default-fallback-cache-max-age.const"), exports);
-tslib_1.__exportStar(require("./_collections/default-not-found-page.const"), exports);
-tslib_1.__exportStar(require("./_collections/default-socket-path.const"), exports);
-tslib_1.__exportStar(require("./_collections/get-environment-settings.util"), exports);
-tslib_1.__exportStar(require("./_collections/global-settings.const"), exports);
-// ENUMS
-tslib_1.__exportStar(require("./_enums/data-model-type.enum"), exports);
-tslib_1.__exportStar(require("./_enums/data-service-function.enum"), exports);
-tslib_1.__exportStar(require("./_enums/predefined-data-types.enum"), exports);
-tslib_1.__exportStar(require("./_enums/route-security.enum"), exports);
-// MODELS (CONTROL-MODELS, INTERFACES, TYPES)
-/** Interfaces describing global configuration and certificates. */
-tslib_1.__exportStar(require("./_models/interfaces/certification-settings.interface"), exports);
-tslib_1.__exportStar(require("./_models/interfaces/environment-settings.interface"), exports);
-tslib_1.__exportStar(require("./_models/interfaces/global-service-settings.interface"), exports);
-tslib_1.__exportStar(require("./_models/interfaces/global-settings.interface"), exports);
-tslib_1.__exportStar(require("./_models/interfaces/routing-module-settings.interface"), exports);
-tslib_1.__exportStar(require("./_models/interfaces/signed-url-verify-result.interface"), exports);
-tslib_1.__exportStar(require("./_models/interfaces/static-client-settings.interface"), exports);
-tslib_1.__exportStar(require("./_models/interfaces/cors-settings.interface"), exports);
-tslib_1.__exportStar(require("./_models/interfaces/security-headers-settings.interface"), exports);
-tslib_1.__exportStar(require("./_models/interfaces/app-version-header-settings.interface"), exports);
-tslib_1.__exportStar(require("./_models/interfaces/db-query-options.interface"), exports);
-tslib_1.__exportStar(require("./_models/interfaces/migration-entry.interface"), exports);
-tslib_1.__exportStar(require("./_models/interfaces/mongo-transaction-settings.interface"), exports);
-tslib_1.__exportStar(require("./_collections/security-headers.util"), exports);
-tslib_1.__exportStar(require("./_collections/app-version-header.util"), exports);
-tslib_1.__exportStar(require("./_collections/signed-url.util"), exports);
-tslib_1.__exportStar(require("./_collections/client-safe-error.util"), exports);
-tslib_1.__exportStar(require("./_collections/load-shed.util"), exports);
-tslib_1.__exportStar(require("./_services/core/event-loop-diag.service"), exports);
-tslib_1.__exportStar(require("./_services/core/request-hunter.service"), exports);
-tslib_1.__exportStar(require("./_services/core/db-stats.service"), exports);
-tslib_1.__exportStar(require("./_services/core/diagnostics.service"), exports);
-// models/CONTROL MODELS
-tslib_1.__exportStar(require("./_models/control-models/api-call-params.control-model"), exports);
-tslib_1.__exportStar(require("./_models/control-models/app-ext-system-controls.control-model"), exports);
-tslib_1.__exportStar(require("./_models/control-models/app-params.control-model"), exports);
-tslib_1.__exportStar(require("./_models/control-models/app-system-controls.control-model"), exports);
-tslib_1.__exportStar(require("./_models/control-models/endpoint-params.control-model"), exports);
-tslib_1.__exportStar(require("./_models/control-models/http-settings.control-model"), exports);
-tslib_1.__exportStar(require("./_models/control-models/system-control.control-model"), exports);
-// models/TYPES
-tslib_1.__exportStar(require("./_models/types/db-update.type"), exports);
-// models/DATA-MODELS
-tslib_1.__exportStar(require("./_models/data-models/schema-migration.data-model"), exports);
-// SERVICES
-// services/CORE
-tslib_1.__exportStar(require("./_services/core/api.service"), exports);
-tslib_1.__exportStar(require("./_services/core/auth.service"), exports);
-tslib_1.__exportStar(require("./_services/core/email.service"), exports);
-tslib_1.__exportStar(require("./_services/core/collection-growth-monitor.service"), exports);
-tslib_1.__exportStar(require("./_services/core/global.service"), exports);
-tslib_1.__exportStar(require("./_services/core/memory-guard.service"), exports);
-tslib_1.__exportStar(require("./_services/core/service-collection.service"), exports);
-tslib_1.__exportStar(require("./_services/core/migration-runner.service"), exports);
-tslib_1.__exportStar(require("./_services/core/mongo-transaction.control-service"), exports);
-// services/BASE
-tslib_1.__exportStar(require("./_services/base/api.service-base"), exports);
-tslib_1.__exportStar(require("./_services/base/archive-data.service"), exports);
-tslib_1.__exportStar(require("./_services/base/data.service"), exports);
-tslib_1.__exportStar(require("./_services/base/db.service"), exports);
-tslib_1.__exportStar(require("./_services/base/singleton.service-base"), exports);
-tslib_1.__exportStar(require("./_services/base/singleton.service"), exports);
-// services/SERVER
-tslib_1.__exportStar(require("./_services/server/app.server"), exports);
-// services/ROUTE
-tslib_1.__exportStar(require("./_services/route/controller.service"), exports);
-tslib_1.__exportStar(require("./_services/route/routing-module.service"), exports);
-// services/SHARED
-tslib_1.__exportStar(require("./_services/shared.static-service"), exports);
+"use strict";
+/* try {
+  require('@futdevpro/fsm-dynamo');
+} catch (error) {
+  console.log(
+    '❌ FSM-Dynamo package not found, please install it with: pnpm add @futdevpro/fsm-dynamo'
+  );
+}
+
+try {
+  require('express');
+} catch (error) {
+  console.log(
+    '❌ Express package not found, please install it with: pnpm add express'
+  );
+}
+
+try {
+  require('axios');
+} catch (error) {
+  console.log(
+    '❌ Axios package not found, please install it with: pnpm add axios'
+  );
+} */
+Object.defineProperty(exports, "__esModule", { value: true });
+const tslib_1 = require("tslib");
+// COLLECTIONS
+tslib_1.__exportStar(require("./_collections/archive.util"), exports);
+tslib_1.__exportStar(require("./_collections/npm-token-check.util"), exports);
+tslib_1.__exportStar(require("./_collections/atlas-default-db-options.const"), exports);
+tslib_1.__exportStar(require("./_collections/default-fallback-cache-max-age.const"), exports);
+tslib_1.__exportStar(require("./_collections/default-not-found-page.const"), exports);
+tslib_1.__exportStar(require("./_collections/default-socket-path.const"), exports);
+tslib_1.__exportStar(require("./_collections/get-environment-settings.util"), exports);
+tslib_1.__exportStar(require("./_collections/global-settings.const"), exports);
+// ENUMS
+tslib_1.__exportStar(require("./_enums/data-model-type.enum"), exports);
+tslib_1.__exportStar(require("./_enums/data-service-function.enum"), exports);
+tslib_1.__exportStar(require("./_enums/predefined-data-types.enum"), exports);
+tslib_1.__exportStar(require("./_enums/route-security.enum"), exports);
+// MODELS (CONTROL-MODELS, INTERFACES, TYPES)
+/** Interfaces describing global configuration and certificates. */
+tslib_1.__exportStar(require("./_models/interfaces/certification-settings.interface"), exports);
+tslib_1.__exportStar(require("./_models/interfaces/environment-settings.interface"), exports);
+tslib_1.__exportStar(require("./_models/interfaces/global-service-settings.interface"), exports);
+tslib_1.__exportStar(require("./_models/interfaces/global-settings.interface"), exports);
+tslib_1.__exportStar(require("./_models/interfaces/routing-module-settings.interface"), exports);
+tslib_1.__exportStar(require("./_models/interfaces/signed-url-verify-result.interface"), exports);
+tslib_1.__exportStar(require("./_models/interfaces/static-client-settings.interface"), exports);
+tslib_1.__exportStar(require("./_models/interfaces/cors-settings.interface"), exports);
+tslib_1.__exportStar(require("./_models/interfaces/security-headers-settings.interface"), exports);
+tslib_1.__exportStar(require("./_models/interfaces/app-version-header-settings.interface"), exports);
+tslib_1.__exportStar(require("./_models/interfaces/request-telemetry-settings.interface"), exports);
+tslib_1.__exportStar(require("./_models/interfaces/request-telemetry-snapshot.interface"), exports);
+tslib_1.__exportStar(require("./_models/interfaces/db-query-options.interface"), exports);
+tslib_1.__exportStar(require("./_models/interfaces/migration-entry.interface"), exports);
+tslib_1.__exportStar(require("./_models/interfaces/mongo-transaction-settings.interface"), exports);
+tslib_1.__exportStar(require("./_collections/security-headers.util"), exports);
+tslib_1.__exportStar(require("./_collections/app-version-header.util"), exports);
+tslib_1.__exportStar(require("./_collections/signed-url.util"), exports);
+tslib_1.__exportStar(require("./_collections/client-safe-error.util"), exports);
+tslib_1.__exportStar(require("./_collections/load-shed.util"), exports);
+tslib_1.__exportStar(require("./_services/core/event-loop-diag.service"), exports);
+tslib_1.__exportStar(require("./_services/core/request-hunter.service"), exports);
+tslib_1.__exportStar(require("./_services/core/db-stats.service"), exports);
+tslib_1.__exportStar(require("./_services/core/diagnostics.service"), exports);
+// models/CONTROL MODELS
+tslib_1.__exportStar(require("./_models/control-models/api-call-params.control-model"), exports);
+tslib_1.__exportStar(require("./_models/control-models/app-ext-system-controls.control-model"), exports);
+tslib_1.__exportStar(require("./_models/control-models/app-params.control-model"), exports);
+tslib_1.__exportStar(require("./_models/control-models/app-system-controls.control-model"), exports);
+tslib_1.__exportStar(require("./_models/control-models/endpoint-params.control-model"), exports);
+tslib_1.__exportStar(require("./_models/control-models/http-settings.control-model"), exports);
+tslib_1.__exportStar(require("./_models/control-models/system-control.control-model"), exports);
+// models/TYPES
+tslib_1.__exportStar(require("./_models/types/db-update.type"), exports);
+// models/DATA-MODELS
+tslib_1.__exportStar(require("./_models/data-models/schema-migration.data-model"), exports);
+// SERVICES
+// services/CORE
+tslib_1.__exportStar(require("./_services/core/api.service"), exports);
+tslib_1.__exportStar(require("./_services/core/auth.service"), exports);
+tslib_1.__exportStar(require("./_services/core/email.service"), exports);
+tslib_1.__exportStar(require("./_services/core/collection-growth-monitor.service"), exports);
+tslib_1.__exportStar(require("./_services/core/global.service"), exports);
+tslib_1.__exportStar(require("./_services/core/memory-guard.service"), exports);
+tslib_1.__exportStar(require("./_services/core/request-telemetry.control-service"), exports);
+tslib_1.__exportStar(require("./_services/core/service-collection.service"), exports);
+tslib_1.__exportStar(require("./_services/core/migration-runner.service"), exports);
+tslib_1.__exportStar(require("./_services/core/mongo-transaction.control-service"), exports);
+// services/BASE
+tslib_1.__exportStar(require("./_services/base/api.service-base"), exports);
+tslib_1.__exportStar(require("./_services/base/archive-data.service"), exports);
+tslib_1.__exportStar(require("./_services/base/data.service"), exports);
+tslib_1.__exportStar(require("./_services/base/db.service"), exports);
+tslib_1.__exportStar(require("./_services/base/singleton.service-base"), exports);
+tslib_1.__exportStar(require("./_services/base/singleton.service"), exports);
+// services/SERVER
+tslib_1.__exportStar(require("./_services/server/app.server"), exports);
+// services/ROUTE
+tslib_1.__exportStar(require("./_services/route/controller.service"), exports);
+tslib_1.__exportStar(require("./_services/route/routing-module.service"), exports);
+// services/SHARED
+tslib_1.__exportStar(require("./_services/shared.static-service"), exports);
 //# sourceMappingURL=index.js.map

package/build/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAEA;;;;;;;;;;;;;;;;;;;;;;IAsBI;;;AAEJ,cAAc;AACd,sEAA4C;AAC5C,8EAAoD;AACpD,wFAA8D;AAC9D,8FAAoE;AACpE,sFAA4D;AAC5D,mFAAyD;AACzD,uFAA6D;AAC7D,+EAAqD;AAGrD,QAAQ;AACR,wEAA8C;AAC9C,8EAAoD;AACpD,8EAAoD;AACpD,uEAA6C;AAG7C,6CAA6C;AAE7C,mEAAmE;AACnE,gGAAsE;AACtE,8FAAoE;AACpE,iGAAuE;AACvE,yFAA+D;AAC/D,iGAAuE;AACvE,kGAAwE;AACxE,gGAAsE;AACtE,uFAA6D;AAC7D,mGAAyE;AACzE,qGAA2E;AAC3E,0FAAgE;AAChE,yFAA+D;AAC/D,oGAA0E;AAC1E,+EAAqD;AACrD,iFAAuD;AACvD,yEAA+C;AAC/C,gFAAsD;AACtD,wEAA8C;AAC9C,mFAAyD;AACzD,kFAAwD;AACxD,4EAAkD;AAClD,+EAAqD;AAErD,wBAAwB;AACxB,iGAAuE;AACvE,yGAA8E;AAC9E,4FAAkE;AAClE,qGAA2E;AAC3E,iGAAuE;AACvE,+FAAqE;AACrE,gGAAsE;AAEtE,eAAe;AACf,yEAA+C;AAE/C,qBAAqB;AACrB,4FAAkE;AAGlE,WAAW;AACX,gBAAgB;AAChB,uEAA6C;AAC7C,wEAA8C;AAE9C,yEAA+C;AAC/C,6FAAmE;AACnE,0EAAgD;AAChD,gFAAsD;AAEtD,sFAA4D;AAC5D,oFAA0D;AAC1D,6FAAmE;AAEnE,gBAAgB;AAChB,4EAAkD;AAClD,gFAAsD;AACtD,wEAA8C;AAC9C,sEAA4C;AAC5C,kFAAwD;AACxD,6EAAmD;AAEnD,kBAAkB;AAClB,wEAA8C;AAE9C,iBAAiB;AACjB,+EAAqD;AACrD,mFAAyD;AAEzD,kBAAkB;AAClB,4EAAkD"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAEA;;;;;;;;;;;;;;;;;;;;;;IAsBI;;;AAEJ,cAAc;AACd,sEAA4C;AAC5C,8EAAoD;AACpD,wFAA8D;AAC9D,8FAAoE;AACpE,sFAA4D;AAC5D,mFAAyD;AACzD,uFAA6D;AAC7D,+EAAqD;AAGrD,QAAQ;AACR,wEAA8C;AAC9C,8EAAoD;AACpD,8EAAoD;AACpD,uEAA6C;AAG7C,6CAA6C;AAE7C,mEAAmE;AACnE,gGAAsE;AACtE,8FAAoE;AACpE,iGAAuE;AACvE,yFAA+D;AAC/D,iGAAuE;AACvE,kGAAwE;AACxE,gGAAsE;AACtE,uFAA6D;AAC7D,mGAAyE;AACzE,qGAA2E;AAC3E,oGAA0E;AAC1E,oGAA0E;AAC1E,0FAAgE;AAChE,yFAA+D;AAC/D,oGAA0E;AAC1E,+EAAqD;AACrD,iFAAuD;AACvD,yEAA+C;AAC/C,gFAAsD;AACtD,wEAA8C;AAC9C,mFAAyD;AACzD,kFAAwD;AACxD,4EAAkD;AAClD,+EAAqD;AAErD,wBAAwB;AACxB,iGAAuE;AACvE,yGAA8E;AAC9E,4FAAkE;AAClE,qGAA2E;AAC3E,iGAAuE;AACvE,+FAAqE;AACrE,gGAAsE;AAEtE,eAAe;AACf,yEAA+C;AAE/C,qBAAqB;AACrB,4FAAkE;AAGlE,WAAW;AACX,gBAAgB;AAChB,uEAA6C;AAC7C,wEAA8C;AAE9C,yEAA+C;AAC/C,6FAAmE;AACnE,0EAAgD;AAChD,gFAAsD;AACtD,6FAAmE;AAEnE,sFAA4D;AAC5D,oFAA0D;AAC1D,6FAAmE;AAEnE,gBAAgB;AAChB,4EAAkD;AAClD,gFAAsD;AACtD,wEAA8C;AAC9C,sEAA4C;AAC5C,kFAAwD;AACxD,6EAAmD;AAEnD,kBAAkB;AAClB,wEAA8C;AAE9C,iBAAiB;AACjB,+EAAqD;AACrD,mFAAyD;AAEzD,kBAAkB;AAClB,4EAAkD"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@futdevpro/nts-dynamo",
-  "version": "01.15.156",
+  "version": "01.15.157",
   "description": "Dynamic NodeTS (NodeJS-Typescript), MongoDB Backend System Framework by Future Development Program Ltd.",
   "DyBu_settings": {
     "packageType": "server-package",

package/src/_models/control-models/endpoint-params.control-model.spec.ts

@@ -438,14 +438,14 @@ describe('| DyNTS_Endpoint_Params', () => {
       expect(logInfoSpy).toHaveBeenCalled();
     });
 
-    it('| should handle issuer retrieval error', async () => {
-      (DyNTS_GlobalService.getAuthService as jasmine.Spy).and.returnValue({
-        getIssuerFromRequest: () => { throw new Error('Auth error'); },
-      } as any);
-      const logErrorSpy: jasmine.Spy = spyOn(DyFM_Log, 'error');
-      const taskSpy = jasmine.createSpy('task').and.callFake(async (req: Request, res: Response, issuer: string) => {
-        res.send({ success: true });
-      });
+    it('| should handle issuer retrieval error', async () => {
+      (DyNTS_GlobalService.getAuthService as jasmine.Spy).and.returnValue({
+        getIssuerFromRequest: () => { throw new Error('Auth error'); },
+      } as any);
+      const logErrorSpy: jasmine.Spy = spyOn(DyFM_Log, 'error');
+      const taskSpy = jasmine.createSpy('task').and.callFake(async (req: Request, res: Response, issuer: string) => {
+        res.send({ success: true });
+      });
       const params = new DyNTS_Endpoint_Params({
         name: 'testEndpoint',
         type: DyFM_HttpCallType.get,
@@ -454,15 +454,15 @@ describe('| DyNTS_Endpoint_Params', () => {
         logRequest: false,
       });
 
-      const execution = params.getFullExecution();
-      await execution(mockRequest as Request, mockResponse as Response);
-
-      expect(logErrorSpy).toHaveBeenCalledWith(
-        '[DyNTS safe diagnostic]',
-        jasmine.objectContaining({ code: 'DYNTS|ENDPOINT|ISSUER_RESOLUTION_FAILURE' })
-      );
-      expect(taskSpy).toHaveBeenCalledWith(mockRequest, mockResponse, 'unknown-issuer');
-    });
+      const execution = params.getFullExecution();
+      await execution(mockRequest as Request, mockResponse as Response);
+
+      expect(logErrorSpy).toHaveBeenCalledWith(
+        '[DyNTS safe diagnostic]',
+        jasmine.objectContaining({ code: 'DYNTS|ENDPOINT|ISSUER_RESOLUTION_FAILURE' })
+      );
+      expect(taskSpy).toHaveBeenCalledWith(mockRequest, mockResponse, 'unknown-issuer');
+    });
 
     it('| should handle DyFM_Error with status code', async () => {
       const error = new DyFM_Error({
@@ -544,7 +544,7 @@ describe('| DyNTS_Endpoint_Params', () => {
     });
 
     // FR-067: axios-style HTTP errors (with `status` field) — wrap-status onorzes.
-    it('| FR-067: should preserve downstream HTTP status when wrapping axios-style error', async () => {
+    it('| FR-067: should preserve downstream HTTP status when wrapping axios-style error', async () => {
       const error = Object.assign(new Error('Upstream 502'), { status: 502 });
       const taskSpy = jasmine.createSpy('task').and.returnValue(Promise.reject(error));
       const params = new DyNTS_Endpoint_Params({
@@ -560,90 +560,90 @@ describe('| DyNTS_Endpoint_Params', () => {
       await execution(mockRequest as Request, mockResponse as Response);
       await new Promise(resolve => setTimeout(resolve, 50));
 
-      expect(statusSpy).toHaveBeenCalledWith(502);
-    });
-
-    it(
-      '| BFR-CTM-018: projects endpoint and handler failures without logging or responding raw content',
-      async (): Promise<void> => {
-        const errorCanary: string = 'raw-message secret workbook-cell@example.test';
-        const handlerCanary: string = 'handler-stack bearer-private-token';
-        const requestCanary: string = 'private-sheet-name';
-        const originalHighDetailedLogs: boolean = DyNTS_global_settings.log_settings.highDetailedLogs;
-        const originalGlobalErrorHandler: typeof DyNTS_GlobalService.globalErrorHandler =
-          DyNTS_GlobalService.globalErrorHandler;
-        const logErrorSpy: jasmine.Spy = spyOn(DyFM_Log, 'error');
-        const logSpies: jasmine.Spy[] = [
-          logErrorSpy,
-          spyOn(DyFM_Log, 'H_error'),
-          spyOn(DyFM_Log, 'info'),
-          spyOn(DyFM_Log, 'testError'),
-          spyOn(DyFM_Log, 'warn'),
-        ];
-        const endpointError: Error & { status: number } = Object.assign(new Error(errorCanary), { status: 503 });
-        const taskSpy: jasmine.Spy = jasmine.createSpy('task').and.rejectWith(endpointError);
-        const globalErrorHandlerSpy: jasmine.Spy = jasmine.createSpy('globalErrorHandler').and.rejectWith(
-          new Error(handlerCanary)
-        );
-        const params: DyNTS_Endpoint_Params = new DyNTS_Endpoint_Params({
-          name: 'privacyEndpoint',
-          type: DyFM_HttpCallType.post,
-          endpoint: '/private/:sheetId',
-          tasks: [taskSpy],
-          logRequest: true,
-          logRequestsParams: false,
-          logRequestsContent: false,
-          logResponseContent: true,
-        });
-        mockRequest = {
-          body: { workbookValue: requestCanary },
-          headers: { authorization: `Bearer ${requestCanary}` },
-          originalUrl: `/private/${requestCanary}?token=${requestCanary}`,
-          params: { sheetId: requestCanary },
-          query: { token: requestCanary },
-        };
-        DyNTS_GlobalService.globalErrorHandler = globalErrorHandlerSpy;
-        DyNTS_global_settings.log_settings.highDetailedLogs = true;
-
-        try {
-          await params.getFullExecution()(mockRequest as Request, mockResponse as Response);
-        } finally {
-          DyNTS_GlobalService.globalErrorHandler = originalGlobalErrorHandler;
-          DyNTS_global_settings.log_settings.highDetailedLogs = originalHighDetailedLogs;
-        }
-
-        const serializedLogs: string = JSON.stringify(
-          logSpies.flatMap((logSpy: jasmine.Spy): readonly unknown[][] => logSpy.calls.allArgs())
-        );
-        const serializedResponse: string = JSON.stringify(sendSpy.calls.mostRecent().args[0]);
-
-        expect(globalErrorHandlerSpy).toHaveBeenCalledWith(
-          endpointError,
-          mockRequest as Request,
-          mockResponse as Response,
-          'test-issuer'
-        );
-        expect(logErrorSpy).toHaveBeenCalledWith(
-          '[DyNTS safe diagnostic]',
-          jasmine.objectContaining({
-            code: 'DYNTS|ENDPOINT|FAILURE',
-            stage: 'endpoint',
-            status: 503,
-          })
-        );
-        expect(logErrorSpy).toHaveBeenCalledWith(
-          '[DyNTS safe diagnostic]',
-          jasmine.objectContaining({ code: 'DYNTS|ENDPOINT|GLOBAL_HANDLER_FAILURE' })
-        );
-        expect(statusSpy).toHaveBeenCalledWith(503);
-        expect(serializedLogs).not.toContain(errorCanary);
-        expect(serializedLogs).not.toContain(handlerCanary);
-        expect(serializedLogs).not.toContain(requestCanary);
-        expect(serializedResponse).not.toContain(errorCanary);
-        expect(serializedResponse).not.toContain(handlerCanary);
-        expect(serializedResponse).not.toContain(requestCanary);
-      }
-    );
+      expect(statusSpy).toHaveBeenCalledWith(502);
+    });
+
+    it(
+      '| BFR-CTM-018: projects endpoint and handler failures without logging or responding raw content',
+      async (): Promise<void> => {
+        const errorCanary: string = 'raw-message secret workbook-cell@example.test';
+        const handlerCanary: string = 'handler-stack bearer-private-token';
+        const requestCanary: string = 'private-sheet-name';
+        const originalHighDetailedLogs: boolean = DyNTS_global_settings.log_settings.highDetailedLogs;
+        const originalGlobalErrorHandler: typeof DyNTS_GlobalService.globalErrorHandler =
+          DyNTS_GlobalService.globalErrorHandler;
+        const logErrorSpy: jasmine.Spy = spyOn(DyFM_Log, 'error');
+        const logSpies: jasmine.Spy[] = [
+          logErrorSpy,
+          spyOn(DyFM_Log, 'H_error'),
+          spyOn(DyFM_Log, 'info'),
+          spyOn(DyFM_Log, 'testError'),
+          spyOn(DyFM_Log, 'warn'),
+        ];
+        const endpointError: Error & { status: number } = Object.assign(new Error(errorCanary), { status: 503 });
+        const taskSpy: jasmine.Spy = jasmine.createSpy('task').and.rejectWith(endpointError);
+        const globalErrorHandlerSpy: jasmine.Spy = jasmine.createSpy('globalErrorHandler').and.rejectWith(
+          new Error(handlerCanary)
+        );
+        const params: DyNTS_Endpoint_Params = new DyNTS_Endpoint_Params({
+          name: 'privacyEndpoint',
+          type: DyFM_HttpCallType.post,
+          endpoint: '/private/:sheetId',
+          tasks: [taskSpy],
+          logRequest: true,
+          logRequestsParams: false,
+          logRequestsContent: false,
+          logResponseContent: true,
+        });
+        mockRequest = {
+          body: { workbookValue: requestCanary },
+          headers: { authorization: `Bearer ${requestCanary}` },
+          originalUrl: `/private/${requestCanary}?token=${requestCanary}`,
+          params: { sheetId: requestCanary },
+          query: { token: requestCanary },
+        };
+        DyNTS_GlobalService.globalErrorHandler = globalErrorHandlerSpy;
+        DyNTS_global_settings.log_settings.highDetailedLogs = true;
+
+        try {
+          await params.getFullExecution()(mockRequest as Request, mockResponse as Response);
+        } finally {
+          DyNTS_GlobalService.globalErrorHandler = originalGlobalErrorHandler;
+          DyNTS_global_settings.log_settings.highDetailedLogs = originalHighDetailedLogs;
+        }
+
+        const serializedLogs: string = JSON.stringify(
+          logSpies.flatMap((logSpy: jasmine.Spy): readonly unknown[][] => logSpy.calls.allArgs())
+        );
+        const serializedResponse: string = JSON.stringify(sendSpy.calls.mostRecent().args[0]);
+
+        expect(globalErrorHandlerSpy).toHaveBeenCalledWith(
+          endpointError,
+          mockRequest as Request,
+          mockResponse as Response,
+          'test-issuer'
+        );
+        expect(logErrorSpy).toHaveBeenCalledWith(
+          '[DyNTS safe diagnostic]',
+          jasmine.objectContaining({
+            code: 'DYNTS|ENDPOINT|FAILURE',
+            stage: 'endpoint',
+            status: 503,
+          })
+        );
+        expect(logErrorSpy).toHaveBeenCalledWith(
+          '[DyNTS safe diagnostic]',
+          jasmine.objectContaining({ code: 'DYNTS|ENDPOINT|GLOBAL_HANDLER_FAILURE' })
+        );
+        expect(statusSpy).toHaveBeenCalledWith(503);
+        expect(serializedLogs).not.toContain(errorCanary);
+        expect(serializedLogs).not.toContain(handlerCanary);
+        expect(serializedLogs).not.toContain(requestCanary);
+        expect(serializedResponse).not.toContain(errorCanary);
+        expect(serializedResponse).not.toContain(handlerCanary);
+        expect(serializedResponse).not.toContain(requestCanary);
+      }
+    );
 
     it('| should handle production environment error response', async () => {
       const originalEnv = DyNTS_global_settings.env_settings.environment;