@futdevpro/nts-dynamo 1.15.157 → 1.15.163

package/src/_services/core/auth.service.spec.ts

@@ -1,159 +0,0 @@
-
-import { DyNTS_AuthService } from './auth.service';
-import { Request } from 'express';
-import { DyFM_Error } from '@futdevpro/fsm-dynamo';
-import { DyNTS_global_settings } from '../../_collections/global-settings.const';
-
-class TestAuthService extends DyNTS_AuthService {
-  static getInstance(): TestAuthService {
-    return TestAuthService.getSingletonInstance();
-  }
-
-  authenticate_token = async (req: Request, res: any): Promise<void> => {
-    // Mock implementation
-  };
-
-  authenticate_tokenSelf = async (req: Request, res: any): Promise<void> => {
-    // Mock implementation
-  };
-
-  authenticate_tokenPerm_accUsageData = async (req: Request, res: any): Promise<void> => {
-    // Mock implementation
-  };
-
-  getIssuerFromRequest(req: Request): string {
-    return 'test-issuer';
-  }
-
-  getUsernameFromRequest(req: Request): string {
-    return 'test-user';
-  }
-}
-
-describe('| DyNTS_AuthService', () => {
-  let service: TestAuthService;
-
-  beforeEach(() => {
-    service = TestAuthService.getInstance();
-  });
-
-  it('| should be a singleton instance', () => {
-    const instance1 = TestAuthService.getInstance();
-    const instance2 = TestAuthService.getInstance();
-
-    expect(instance1).toBe(instance2);
-    expect(instance1).toBeInstanceOf(TestAuthService);
-  });
-
-  it('| should have default service name', () => {
-    expect(service.serviceName).toBe('AuthService');
-  });
-
-  it('| should have default error user message', () => {
-    expect(service.defaultErrorUserMsg).toBeDefined();
-    expect(service.defaultErrorUserMsg).toContain('Auth Error');
-  });
-
-  describe('| getTokenFromRequest', () => {
-    it('| should extract token from authorization header', () => {
-      const req = {
-        headers: {
-          authorization: 'Bearer test-token-123',
-        },
-      } as any as Request;
-
-      const result = service.getTokenFromRequest(req);
-
-      expect(result).toBe('test-token-123');
-    });
-
-    it('| should throw error when authorization header is missing', () => {
-      const req = {
-        headers: {},
-      } as any as Request;
-
-      expect(() => {
-        service.getTokenFromRequest(req);
-      }).toThrow();
-    });
-
-    it('| should throw error when authorization header is null', () => {
-      const req = {
-        headers: {
-          authorization: null,
-        },
-      } as any as Request;
-
-      expect(() => {
-        service.getTokenFromRequest(req);
-      }).toThrow();
-    });
-
-    it('| should throw error when token is missing from header', () => {
-      const req = {
-        headers: {
-          authorization: 'Bearer ',
-        },
-      } as any as Request;
-
-      expect(() => {
-        service.getTokenFromRequest(req);
-      }).toThrow();
-    });
-
-    it('| should throw error when authorization header does not contain Bearer', () => {
-      const req = {
-        headers: {
-          authorization: 'InvalidFormat token',
-        },
-      } as any as Request;
-
-      const result = service.getTokenFromRequest(req);
-
-      expect(result).toBe('token');
-    });
-
-    it('| should handle token with spaces correctly', () => {
-      const req = {
-        headers: {
-          authorization: 'Bearer token-with-spaces',
-        },
-      } as any as Request;
-
-      const result = service.getTokenFromRequest(req);
-
-      expect(result).toBe('token-with-spaces');
-    });
-
-    it('| should include error code in thrown error', () => {
-      const req = {
-        headers: {},
-      } as any as Request;
-
-      try {
-        service.getTokenFromRequest(req);
-        fail('Should have thrown an error');
-      } catch (error) {
-        expect(error).toBeInstanceOf(DyFM_Error);
-        expect((error as DyFM_Error)._errorCode).toContain('DyNTS-AS0-GT0');
-      }
-    });
-
-    it('| should include confidential content in error when header missing', () => {
-      const req = {
-        headers: {
-          'x-custom-header': 'value',
-        },
-      } as any as Request;
-
-      try {
-        service.getTokenFromRequest(req);
-        fail('Should have thrown an error');
-      } catch (error) {
-        expect(error).toBeInstanceOf(DyFM_Error);
-        expect((error as DyFM_Error).confidentialContent).toBeDefined();
-      }
-    });
-  });
-});
-

package/src/_services/core/auth.service.ts

@@ -1,174 +0,0 @@
-
-import { Request, Response } from 'express';
-
-import { DyFM_Error } from '@futdevpro/fsm-dynamo';
-
-import { DyNTS_SingletonService } from '../base/singleton.service';
-import { DyNTS_global_settings } from '../../_collections/global-settings.const';
-
-/**
- * Extend this class as an Auth Service implementation
- * 
- * You should use singleton instance getting function by implementing a
- * static getInstance() function
- * @example
- * export class AuthService extends DyNTS_AuthService {
- *
- *   static getInstance(): AuthService {
- *     return AuthService.getSingletonInstance();
- *   }
- *   ...
- */
-export abstract class DyNTS_AuthService extends DyNTS_SingletonService {
-
-  readonly serviceName: string = 'AuthService';
-
-  override readonly defaultErrorUserMsg = 
-    `We encountered an unhandled Auth Error, ` +
-    `\nplease contact the responsible development team.`;
-
-  /**
-   * this function returns the 'authorization' header from the Request,
-   * or throws error, if its missing
-   * 
-   * @param req
-   * @returns 
-   */
-  getTokenFromRequest(req: Request): string {
-    const authHeader = req?.headers?.['authorization'];
-
-    if (!authHeader) {
-      throw new DyFM_Error({ 
-        status: 401,
-        errorCode: `${DyNTS_global_settings.systemShortCodeName}|DyNTS-AS0-GT0`,
-        addECToUserMsg: true,
-        message: 'AuthHeader missing!',
-        userMessage: this.defaultErrorUserMsg, 
-        issuerService: this.serviceName,
-        confidentialContent: { headers: req?.headers },
-      });
-    }
-
-    const token = authHeader.split(' ')[1];
-    
-    if (!token) {
-      throw new DyFM_Error({ 
-        status: 401,
-        errorCode: `${DyNTS_global_settings.systemShortCodeName}|DyNTS-AS0-GT1`,
-        addECToUserMsg: true,
-        message: 'Token missing!', 
-        userMessage: this.defaultErrorUserMsg, 
-        issuerService: this.serviceName,
-        confidentialContent: { headers: req?.headers },
-      });
-    }
-
-    return token;
-  }
-  
-  /**
-   * You need to implement a token validation logic, 
-   * when if the token is invalid, or the authentication fails, it sends or throws an error
-   * 
-   * @example
-   * 
-   * async authenticateToken(req: Request, res: Response, next: NextFunction) {
-   *   try {
-   *     let token = AuthService.getTokenFromRequest(req);
-   *     token = await AuthService.verifyToken(token);
-   * 
-   *     DyFM_Log.success('token authenticated');
-   *     res.setHeader('authorization', `Bearer ${token}`);
-   *     next();
-   *   } catch (error) {
-   *     error = new DyFM_Error({ 
-   *       status: 401, 
-   *       message: `authenticateToken (WB-ERROR)`,
-   *       addECToUserMsg: true,
-   *       userMessage: `Authorization failed.`, 
-   *       error 
-   *     });
-   *     DyFM_Log.error(error?.message, error);
-   * 
-   *     res.status(error.status);
-   *     res.send(error);
-   *   }
-   * }
-   * */
-  abstract authenticate_token: (req: Request, res: Response) => Promise<void>;
-
-  /**
-   * You need to implement a token validation logic, 
-   * when if the token is invalid, or the authentication fails, it sends or throws an error
-   * 
-   * @param req 
-   * @param res 
-   * @param next 
-   * 
-   * @example 
-   * 
-   * async authenticate_tokenSelf(req: Request, res: Response, next: NextFunction): Promise<void> {
-   *   try {
-   *     let token = AuthService.getTokenFromRequest(req);
-   *     token = await AuthService.verifyTokenSelf(token, req?.params?.userId);
-   *     DyFM_Log.success('selftoken authenticated');
-   * 
-   *     res.setHeader('authorization', `Bearer ${token}`);
-   *     next();
-   *   } catch (error) {
-   *     error = new DyFM_Error({ 
-   *       status: 401, 
-   *       message: `authenticate_tokenSelf (WB-ERROR)`,
-   *       addECToUserMsg: true,
-   *       userMessage: `Authorization failed.`, 
-   *       error 
-   *     });
-   *     DyFM_Log.error(error?.message, error);
-   * 
-   *     res.status(error.status);
-   *     res.send(error);
-   *   }
-   * }
-   * 
-   */
-  abstract authenticate_tokenSelf: (req: Request, res: Response) => Promise<void>;
-  
-  /**
-   * Authenticate Token for Permission to Access UsageData
-   * @param req 
-   * @param res 
-   * @param next 
-   * 
-   * @example
-   * You need to implement a token validation logic, 
-   * when if the token is invalid, or the authentication fails, it sends or throws an error
-   * 
-   * async authTokenPermAccUsageData(req: Request, res: Response, next: NextFunction): Promise<void> {
-   *   AuthService.authTokenAndPerm(req, res, next, Permission.accessUsageData);
-   * }
-   */
-  abstract authenticate_tokenPerm_accUsageData: (req: Request, res: Response) => Promise<void>;
-
-  /**
-   * The DynamoNTS System is using this to get issuer, that will be set on DBServices
-   * Don't throw error in this function, since it will be used in every request
-   * @param req 
-   * 
-   * @example
-   * getAccountIdFromRequest(req: Request): string {
-   *   try {
-   *     const authHeader = req.headers['authorization'];
-   *     const token = authHeader.split(' ')[1];
-   *     return this.getAccountIdFromToken(token);
-   *   } catch {
-   *     return undefined;
-   *   }
-   * }
-   */
-  abstract getIssuerFromRequest(req: Request): string;
-  /**
-   * Basic Module: UsageModule uses this function
-   * @param req 
-   */
-  abstract getUsernameFromRequest(req: Request): string;
-}

package/src/_services/core/collection-growth-monitor.service.spec.ts

@@ -1,119 +0,0 @@
-import { DyNTS_CollectionGrowthAlert, DyNTS_CollectionGrowthMonitor } from './collection-growth-monitor.service';
-
-/**
- * FR-258 / SR-4 — unit tests for the pure growth-evaluation core
- * (`DyNTS_CollectionGrowthMonitor.evaluateGrowth`). No I/O, no timers — covers size-threshold,
- * growth-rate, both/neither, and the first-poll (no prior snapshot) edge cases.
- */
-describe('| DyNTS_CollectionGrowthMonitor.evaluateGrowth (FR-258 / SR-4)', () => {
-
-  const SIZE_THRESHOLD: number = 250000;
-  const GROWTH_PCT: number = 50;
-
-  function kinds(alerts: DyNTS_CollectionGrowthAlert[]): string[] {
-    return alerts.map((a: DyNTS_CollectionGrowthAlert): string => a.kind).sort();
-  }
-
-  it('| under threshold + no prior snapshot → no alerts', () => {
-    const alerts: DyNTS_CollectionGrowthAlert[] =
-      DyNTS_CollectionGrowthMonitor.evaluateGrowth('logs', 100, undefined, SIZE_THRESHOLD, GROWTH_PCT);
-    expect(alerts).toEqual([]);
-  });
-
-  it('| over size threshold → a "size" alert with the right detail', () => {
-    const alerts: DyNTS_CollectionGrowthAlert[] =
-      DyNTS_CollectionGrowthMonitor.evaluateGrowth('cdp_report_details_archiveds', 300000, undefined, SIZE_THRESHOLD, GROWTH_PCT);
-    expect(kinds(alerts)).toEqual(['size']);
-    expect(alerts[0].dataName).toBe('cdp_report_details_archiveds');
-    expect(alerts[0].detail).toEqual({ collection: 'cdp_report_details_archiveds', docCount: 300000, threshold: SIZE_THRESHOLD, retentionDays: null });
-  });
-
-  it('| exactly AT the threshold → no size alert (strictly greater)', () => {
-    const alerts: DyNTS_CollectionGrowthAlert[] =
-      DyNTS_CollectionGrowthMonitor.evaluateGrowth('logs', SIZE_THRESHOLD, undefined, SIZE_THRESHOLD, GROWTH_PCT);
-    expect(alerts).toEqual([]);
-  });
-
-  it('| grew more than the growth-rate % since last poll → a "growth" alert', () => {
-    const alerts: DyNTS_CollectionGrowthAlert[] =
-      DyNTS_CollectionGrowthMonitor.evaluateGrowth('pipeline_jobs', 200, { docCount: 100, atMs: 0 }, SIZE_THRESHOLD, GROWTH_PCT);
-    expect(kinds(alerts)).toEqual(['growth']);
-    expect(alerts[0].detail).toEqual({ collection: 'pipeline_jobs', oldCount: 100, newCount: 200, growthPct: 100 });
-  });
-
-  it('| grew LESS than the growth-rate % → no growth alert', () => {
-    const alerts: DyNTS_CollectionGrowthAlert[] =
-      DyNTS_CollectionGrowthMonitor.evaluateGrowth('logs', 110, { docCount: 100, atMs: 0 }, SIZE_THRESHOLD, GROWTH_PCT);
-    expect(alerts).toEqual([]);
-  });
-
-  it('| both over-threshold AND fast-growth → BOTH alerts', () => {
-    const alerts: DyNTS_CollectionGrowthAlert[] =
-      DyNTS_CollectionGrowthMonitor.evaluateGrowth('big', 400000, { docCount: 100000, atMs: 0 }, SIZE_THRESHOLD, GROWTH_PCT);
-    expect(kinds(alerts)).toEqual(['growth', 'size']);
-  });
-
-  it('| prior snapshot with zero docCount → no growth alert (avoid divide-by-zero)', () => {
-    const alerts: DyNTS_CollectionGrowthAlert[] =
-      DyNTS_CollectionGrowthMonitor.evaluateGrowth('fresh', 5000, { docCount: 0, atMs: 0 }, SIZE_THRESHOLD, GROWTH_PCT);
-    expect(alerts).toEqual([]);
-  });
-
-  it('| shrinking collection (negative growth) → no growth alert', () => {
-    const alerts: DyNTS_CollectionGrowthAlert[] =
-      DyNTS_CollectionGrowthMonitor.evaluateGrowth('pruned', 50, { docCount: 100, atMs: 0 }, SIZE_THRESHOLD, GROWTH_PCT);
-    expect(alerts).toEqual([]);
-  });
-});
-
-/**
- * FR-311 spec — a size-riasztas RETENTION-TUDATOS tanacsa.
- *
- * MIERT SZAMIT (elesbol jott, 2026-08-19): az overseer `ov_secret_audit` kollekcioja 253 617
- * dokumentumnal jart, es a monitor azt tanacsolta, hogy "Consider declaring `retention` on this
- * model" — HOLOTT a modell MAR deklaral `retention: { retentionDays: 365 }`-ot. Az operator tehat
- * orankent kapott egy olyan feladatot, ami mar KESZ volt, ráadásul az error-tarba is elmentve.
- *
- * A ket helyzet KULONBOZO teendot kiván:
- *   - nincs retention  -> deklaralj egyet,
- *   - VAN retention    -> az ablak tul hosszu, vagy a novekedes gyorsabb a TTL-nel.
- */
-describe('| FR-311 — retention-tudatos size-riasztas', () => {
-  const SIZE_T: number = 250000;
-  const GROWTH_P: number = 50;
-
-  it('| retention NELKUL a deklaralasra szolit fel (valtozatlan viselkedes)', () => {
-    const alerts = DyNTS_CollectionGrowthMonitor.evaluateGrowth('logs', 300000, undefined, SIZE_T, GROWTH_P);
-    expect(alerts.length).toBe(1);
-    expect(alerts[0].message).toContain('Consider declaring');
-    expect(alerts[0].detail.retentionDays).toBeNull();
-  });
-
-  /** A VALODI eset: 365 napos retention mellett is 253 617 dokumentum. */
-  it('| deklaralt retention mellett NEM a deklaralast ajanlja, hanem az ablak szukiteset', () => {
-    const alerts = DyNTS_CollectionGrowthMonitor.evaluateGrowth(
-      'ov_secret_audit', 253617, undefined, SIZE_T, GROWTH_P, 365 * 86400,
-    );
-    expect(alerts.length).toBe(1);
-    expect(alerts[0].message).not.toContain('Consider declaring');
-    expect(alerts[0].message).toContain('DESPITE');
-    expect(alerts[0].message).toContain('365 day(s)');
-    expect(alerts[0].detail.retentionDays).toBe(365);
-  });
-
-  it('| a napra kerekites ttlSeconds-bol is helyes', () => {
-    const alerts = DyNTS_CollectionGrowthMonitor.evaluateGrowth('x', 300000, undefined, SIZE_T, GROWTH_P, 14 * 86400);
-    expect(alerts[0].message).toContain('14 day(s)');
-    expect(alerts[0].detail.retentionDays).toBe(14);
-  });
-
-  /** A retention a GROWTH-riasztast nem erinti — az fuggetlen jelzes marad. */
-  it('| a growth-riasztas szoveget a retention NEM valtoztatja', () => {
-    const alerts = DyNTS_CollectionGrowthMonitor.evaluateGrowth(
-      'y', 400000, { docCount: 100000, atMs: 0 }, SIZE_T, GROWTH_P, 30 * 86400,
-    );
-    const growth = alerts.find((a) => a.kind === 'growth');
-    expect(growth).toBeDefined();
-    expect(growth!.message).toContain('fast unbounded growth');
-  });
-});

package/src/_services/core/collection-growth-monitor.service.ts

@@ -1,234 +0,0 @@
-import {
-  DyFM_Error, DyFM_ErrorLevel, DyFM_Log, DyFM_RetentionSettings, DyFM_resolveRetentionTtlSeconds,
-} from '@futdevpro/fsm-dynamo';
-
-import { DyNTS_global_settings } from '../../_collections/global-settings.const';
-import { DyNTS_SingletonServiceBase } from '../base/singleton.service-base';
-import { DyNTS_GlobalService } from './global.service';
-
-/**
- * FR-258 / SR-4 — Collection Growth Monitor (proactive companion to DyNTS_MemoryGuard).
- *
- * The MemoryGuard is REACTIVE: it fires when the heap is already near OOM. This monitor is
- * PROACTIVE: it periodically samples each registered collection's document count (via the cheap,
- * scan-free `estimatedDocumentCount()`) and raises a warning into the Errors-sink BEFORE a bloated
- * collection can be loaded into heap and GC-thrash the process (the 2026-06-23 overseer incident:
- * `cdp_report_details_archiveds` reached 3 GB / `pipeline_jobs` 2 GB, unbounded).
- *
- * It pairs with SR-1/SR-2 (declarative retention TTL): TTL keeps collections bounded; this monitor
- * surfaces the ones that AREN'T (no retention declared, or growing faster than retention prunes) so
- * an operator can add `retention` before it becomes an OOM. Pure observation — never deletes.
- *
- * Like the MemoryGuard it is a singleton, idempotent, fully non-fatal (a monitoring layer must never
- * crash a server), and its timer is `unref()`-ed so it can't keep the process alive on its own.
- */
-export interface DyNTS_CollectionGrowthMonitor_Config {
-  /** Master switch. Default: `DyNTS_global_settings.collectionGrowthMonitor.enabled` (true). */
-  enabled?: boolean;
-  /** Poll cadence in ms. Default: 300000 (5 min) — collection growth is slow, no need to poll often. */
-  pollIntervalMs?: number;
-  /** Warn when a collection's document count exceeds this. Default: 250000. */
-  sizeThresholdDocCount?: number;
-  /** Warn when a collection grew by more than this percent since the previous poll. Default: 50. */
-  growthRateThresholdPct?: number;
-  /** Re-alert cooldown per collection per alert-kind, in ms (anti-flood). Default: 3600000 (1 h). */
-  reAlertCooldownMs?: number;
-}
-
-/** One growth finding to surface to the Errors-sink. */
-export interface DyNTS_CollectionGrowthAlert {
-  kind: 'size' | 'growth';
-  dataName: string;
-  message: string;
-  detail: Record<string, unknown>;
-}
-
-interface CollectionSnapshot {
-  docCount: number;
-  atMs: number;
-}
-
-export class DyNTS_CollectionGrowthMonitor extends DyNTS_SingletonServiceBase {
-
-  static getInstance(): DyNTS_CollectionGrowthMonitor {
-    return DyNTS_CollectionGrowthMonitor.getSingletonInstance() as DyNTS_CollectionGrowthMonitor;
-  }
-
-  private timer: ReturnType<typeof setInterval> | null = null;
-  private installed: boolean = false;
-
-  // Resolved (effective) config — filled at install().
-  private pollIntervalMs: number = 300000;
-  private sizeThresholdDocCount: number = 250000;
-  private growthRateThresholdPct: number = 50;
-  private reAlertCooldownMs: number = 3600000;
-
-  private readonly lastSnapshotByCollection: Map<string, CollectionSnapshot> = new Map();
-  /** Last time we alerted, keyed by `${dataName}:${kind}` — for the anti-flood cooldown. */
-  private readonly lastAlertAtByKey: Map<string, number> = new Map();
-
-  protected constructor() {
-    super();
-  }
-
-  /**
-   * Start the monitor. Idempotent (a second call is a no-op). `config` overrides
-   * `DyNTS_global_settings.collectionGrowthMonitor`, which overrides the built-in defaults. NEVER
-   * throws — every error is try/catch-ed and descriptively logged.
-   */
-  install(config?: DyNTS_CollectionGrowthMonitor_Config): void {
-    if (this.installed) { return; }
-
-    try {
-      const g: NonNullable<typeof DyNTS_global_settings.collectionGrowthMonitor> =
-        DyNTS_global_settings.collectionGrowthMonitor ?? { enabled: true };
-
-      if (!(config?.enabled ?? g.enabled ?? true)) { return; }
-
-      this.pollIntervalMs = config?.pollIntervalMs ?? g.pollIntervalMs ?? 300000;
-      this.sizeThresholdDocCount = config?.sizeThresholdDocCount ?? g.sizeThresholdDocCount ?? 250000;
-      this.growthRateThresholdPct = config?.growthRateThresholdPct ?? g.growthRateThresholdPct ?? 50;
-      this.reAlertCooldownMs = config?.reAlertCooldownMs ?? g.reAlertCooldownMs ?? 3600000;
-
-      this.installed = true;
-      this.timer = setInterval((): void => { void this.poll(); }, this.pollIntervalMs);
-      if (typeof this.timer.unref === 'function') { this.timer.unref(); }
-
-      DyFM_Log.info(
-        `[DyNTS_CollectionGrowthMonitor] installed — poll ${Math.round(this.pollIntervalMs / 1000)}s, ` +
-        `size-threshold ${this.sizeThresholdDocCount} docs, growth-rate ${this.growthRateThresholdPct}%/poll`,
-      );
-    } catch (err: unknown) {
-      DyFM_Log.warn('[DyNTS_CollectionGrowthMonitor] install failed (non-fatal):', err);
-    }
-  }
-
-  /**
-   * Pure decision core (unit-tested): given a fresh count + the previous snapshot, return the alerts
-   * to raise. NEVER does I/O. A `size` alert fires when `count > sizeThreshold`; a `growth` alert
-   * fires when the collection grew by more than `growthRatePct` since the last snapshot (needs a
-   * non-zero previous count).
-   */
-  static evaluateGrowth(
-    dataName: string,
-    count: number,
-    last: CollectionSnapshot | undefined,
-    sizeThreshold: number,
-    growthRatePct: number,
-    retentionTtlSec?: number,
-  ): DyNTS_CollectionGrowthAlert[] {
-    const alerts: DyNTS_CollectionGrowthAlert[] = [];
-
-    if (count > sizeThreshold) {
-      // FR-311 — RETENTION-TUDATOS tanacs. A korabbi uzenet FELTETEL NELKUL azt ajanlotta, hogy
-      // "declare `retention`" — akkor is, ha a modell MAR deklaralt egyet. Elesben (2026-08-19,
-      // overseer `ov_secret_audit`, 253 617 dokumentum) ez oda vezetett, hogy az operator olyat
-      // kapott feladatul, ami mar KESZ volt, orankent ujra, az error-tarba is elmentve. A ket eset
-      // KULONBOZO teendot kiván, ezert kulon is kell mondani oket.
-      const retentionDays: number | null = retentionTtlSec === undefined
-        ? null
-        : Math.round(retentionTtlSec / 86400);
-      alerts.push({
-        kind: 'size',
-        dataName: dataName,
-        message: retentionDays === null
-          ? `Collection "${dataName}" has ${count} documents (> ${sizeThreshold} threshold) — ` +
-            `unbounded-growth risk. Consider declaring \`retention\` on this model (FR-258 / SR-1).`
-          : `Collection "${dataName}" has ${count} documents (> ${sizeThreshold} threshold) DESPITE a ` +
-            `declared retention of ~${retentionDays} day(s) — the window is too long, or growth outpaces ` +
-            `the TTL. Shorten \`retention\` or reduce the write-rate (FR-258 / SR-1).`,
-        detail: {
-          collection: dataName, docCount: count, threshold: sizeThreshold,
-          retentionDays: retentionDays,
-        },
-      });
-    }
-
-    if (last && last.docCount > 0) {
-      const growthPct: number = ((count - last.docCount) / last.docCount) * 100;
-      if (growthPct > growthRatePct) {
-        alerts.push({
-          kind: 'growth',
-          dataName: dataName,
-          message:
-            `Collection "${dataName}" grew ${Math.round(growthPct)}% since the last poll ` +
-            `(${last.docCount} → ${count} docs) — fast unbounded growth.`,
-          detail: { collection: dataName, oldCount: last.docCount, newCount: count, growthPct: Math.round(growthPct) },
-        });
-      }
-    }
-
-    return alerts;
-  }
-
-  /**
-   * One poll cycle: sample every registered collection's `estimatedDocumentCount()` (scan-free) and
-   * raise cooldown-gated warnings. Fully non-fatal — a failure on one collection never aborts the rest.
-   */
-  private async poll(): Promise<void> {
-    try {
-      const services: ReturnType<typeof DyNTS_GlobalService.getAllDBServices> = DyNTS_GlobalService.getAllDBServices();
-      const nowMs: number = Date.now();
-
-      for (const service of services) {
-        const dataName: string | undefined = service?.dataParams?.dataName;
-        const model: { estimatedDocumentCount?: () => Promise<number> } | undefined =
-          service?.dataModel as unknown as { estimatedDocumentCount?: () => Promise<number> };
-        if (!dataName || !model || typeof model.estimatedDocumentCount !== 'function') { continue; }
-
-        try {
-          const count: number = await model.estimatedDocumentCount();
-          const last: CollectionSnapshot | undefined = this.lastSnapshotByCollection.get(dataName);
-
-          // FR-311 — a modell SAJAT retention-deklaraciojat visszük be a dontesbe. A feloldas az
-          // fsm-dynamo SSOT-resolvereval megy (`ttlSeconds` > `retentionDays`, ervenytelen ertek
-          // elutasitva) — NEM ujraimplementalva, kulonben ketfele igazsag lenne rola.
-          const retentionTtlSec: number | undefined = DyFM_resolveRetentionTtlSeconds(
-            service?.dataParams?.retention as DyFM_RetentionSettings | undefined,
-          );
-          const alerts: DyNTS_CollectionGrowthAlert[] = DyNTS_CollectionGrowthMonitor.evaluateGrowth(
-            dataName, count, last, this.sizeThresholdDocCount, this.growthRateThresholdPct, retentionTtlSec,
-          );
-          for (const alert of alerts) {
-            this.emitAlert(alert, nowMs);
-          }
-
-          this.lastSnapshotByCollection.set(dataName, { docCount: count, atMs: nowMs });
-        } catch (collErr: unknown) {
-          DyFM_Log.warn(
-            `[DyNTS_CollectionGrowthMonitor] poll for "${dataName}" failed (non-fatal): ` +
-            `${collErr instanceof Error ? collErr.message : String(collErr)}`,
-          );
-        }
-      }
-    } catch (err: unknown) {
-      DyFM_Log.warn('[DyNTS_CollectionGrowthMonitor] poll failed (non-fatal):', err);
-    }
-  }
-
-  /** Raise one alert to the Errors-sink, gated by the per-(collection,kind) cooldown to avoid flooding. */
-  private emitAlert(alert: DyNTS_CollectionGrowthAlert, nowMs: number): void {
-    const key: string = `${alert.dataName}:${alert.kind}`;
-    const lastAt: number | undefined = this.lastAlertAtByKey.get(key);
-    if (lastAt !== undefined && nowMs - lastAt < this.reAlertCooldownMs) { return; }
-    this.lastAlertAtByKey.set(key, nowMs);
-
-    DyFM_Log.warn(`[DyNTS_CollectionGrowthMonitor] ${alert.message}`);
-    DyNTS_GlobalService.globalErrorHandler?.(
-      new DyFM_Error({
-        errorCode: `${DyNTS_global_settings.systemShortCodeName ?? 'DyNTS'}|DyNTS-CGM-${alert.kind === 'size' ? 'SIZE' : 'GROWTH'}`,
-        message: alert.message,
-        level: DyFM_ErrorLevel.warning,
-        additionalContent: alert.detail,
-      }),
-    );
-  }
-
-  /** Test-only teardown: stop the timer + clear state so specs don't leak between runs. */
-  _teardownForTesting(): void {
-    if (this.timer) { clearInterval(this.timer); this.timer = null; }
-    this.installed = false;
-    this.lastSnapshotByCollection.clear();
-    this.lastAlertAtByKey.clear();
-  }
-}