@futdevpro/nts-dynamo 1.15.157 → 1.15.163

package/src/_collections/field-encryption.util.ts

@@ -1,222 +0,0 @@
-import {
-  DyFM_DataProperties,
-  DyFM_Error,
-} from '@futdevpro/fsm-dynamo';
-import { DyFM_Crypto } from '@futdevpro/fsm-dynamo/crypto';
-
-/**
- * AT-REST field-encryption transzform (Option B, bedrock). A DBService a közös írási úton
- * (`createData` / `modifyData`) a persist ELŐTT titkosítja, a read-post-processor
- * (`stringifyDataId`) a load UTÁN visszafejti az `encrypt:true` mezőket.
- *
- * **App-rétegben fut, NEM mongoose-hook** — a `modifyData` `findByIdAndUpdate`-je megkerüli a
- * mongoose settereket/pre-save-hookokat, ezért a transzform explicit itt történik.
- *
- * **Opt-in, default-off:** ha egy modell egyetlen mezője sem `encrypt:true`, a transzform tiszta
- * NO-OP (ugyanaz az objektum-referencia, nincs klónozás, nincs viselkedés-változás, kulcs sem kell).
- *
- * **Legacy-plaintext biztonságos:** a read-transzform CSAK a `DYENC1:` envelope-értékeket fejti vissza
- * (`isEncryptedDbValue`); a régi, még nem migrált plaintext értékek változatlanul jönnek vissza.
- *
- * Kulcs: `FDP_CORE_DBCONTENT_CRYPT_KEY` (Keystore/CI-env). Verzió: `FDP_CORE_DBCONTENT_CRYPT_KEY_VERSION`
- * (default 1) — a kulcs-rotációhoz (a verzió az envelope-ban utazik).
- */
-export class DyNTS_FieldEncryption_Util {
-  static readonly ENV_KEY: string = 'FDP_CORE_DBCONTENT_CRYPT_KEY';
-  static readonly ENV_KEY_VERSION: string = 'FDP_CORE_DBCONTENT_CRYPT_KEY_VERSION';
-
-  /** `hasEncryptedFields` cache per properties-objektum (referencia szerint). */
-  private static readonly _hasEncCache: WeakMap<object, boolean> = new WeakMap();
-
-  /** A titkosító kulcs env-ből (üres string, ha nincs beállítva). */
-  static getKey(): string {
-    return process.env[this.ENV_KEY] ?? '';
-  }
-
-  /** Az aktuális kulcs-verzió (default 1). */
-  static getKeyVersion(): number {
-    const parsed: number = Number(process.env[this.ENV_KEY_VERSION]);
-    return Number.isFinite(parsed) && parsed > 0 ? parsed : 1;
-  }
-
-  /**
-   * True, ha a properties-fa (rekurzívan a `subObjectParams`-on át) tartalmaz `encrypt:true` mezőt.
-   * Cache-elt (a properties-objektum immutábilis a modell-élettartam alatt).
-   */
-  static hasEncryptedFields(properties?: DyFM_DataProperties<any>): boolean {
-    if (!properties) {
-      return false;
-    }
-
-    const cached: boolean | undefined = this._hasEncCache.get(properties);
-    if (cached !== undefined) {
-      return cached;
-    }
-
-    let has: boolean = false;
-    for (const key in properties) {
-      const prop: any = properties[key]; // ccap-review-disable-line no-any-type
-      if (!prop) {
-        continue;
-      }
-      if (prop.encrypt === true) {
-        has = true;
-        break;
-      }
-      if (prop.subObjectParams && this.hasEncryptedFields(prop.subObjectParams)) {
-        has = true;
-        break;
-      }
-    }
-
-    this._hasEncCache.set(properties, has);
-    return has;
-  }
-
-  /**
-   * Titkosítja a doc `encrypt:true` mezőit persist előtt. **Klónt ad vissza** — az eredeti (hívó)
-   * objektumot NEM mutálja (különben a `this.data` ciphertextté válna). NO-OP, ha nincs enc-mező.
-   * @throws ha van enc-mező, de a kulcs env-var nincs beállítva (fail-loud misconfiguration).
-   */
-  static encryptDoc<T>(data: T, properties?: DyFM_DataProperties<any>): T {
-    if (data == null || !this.hasEncryptedFields(properties)) {
-      return data;
-    }
-
-    const key: string = this.getKey();
-    if (!key) {
-      throw new DyFM_Error({
-        status: 500,
-        errorCode: 'DyNTS-ENC-KEY-MISSING',
-        message:
-          `At-rest encryption: "${this.ENV_KEY}" env-var is not set, but a model field is encrypt:true. ` +
-          `Set the key in the Keystore/CI-env and redeploy.`,
-      });
-    }
-
-    return this._transform(data, properties as DyFM_DataProperties<any>, 'encrypt', key, this.getKeyVersion());
-  }
-
-  /**
-   * Visszafejti a doc `encrypt:true` mezőit load után. CSAK a `DYENC1:` envelope-értékeket bántja
-   * (legacy plaintext változatlan). NO-OP, ha nincs enc-mező. Kulcs hiányában read-en NEM dob
-   * (a read ne törjön el) — az envelope-értékek visszafejtetlenül maradnak (a hívó látja + a hiba loggolt).
-   */
-  static decryptDoc<T>(data: T, properties?: DyFM_DataProperties<any>): T {
-    if (data == null || !this.hasEncryptedFields(properties)) {
-      return data;
-    }
-
-    const key: string = this.getKey();
-    if (!key) {
-      return data;
-    }
-
-    return this._transform(data, properties as DyFM_DataProperties<any>, 'decrypt', key, this.getKeyVersion());
-  }
-
-  /**
-   * Egy mongoose-**Document** sima objektummá alakítása (más érték változatlanul jön vissza).
-   *
-   * @description 🔴 **MIÉRT KELL** (BFR-MASTERPROMPTER-027, 2026-08-14): a `_transform` sekély spreaddel
-   *   klónoz. Egy mongoose-Documentnek viszont az adatok NEM saját mezői — azok a belső `_doc`-ban
-   *   ülnek —, ezért a `{ ...doc }` a **belső burkot** másolja (`$__`, `$isNew`, `_doc`), és az eredmény
-   *   **már nem Document**, tehát a `JSON.stringify` sem hívja a `toJSON()`-ját. A kliens így
-   *   `{"$__":…,"$isNew":…,"_doc":{…}}`-t kap `_id` nélkül.
-   *
-   *   **Élesben mérve** (`test.master-prompter.hu`, 2026-08-14): a `flow` lista-endpoint válaszának
-   *   első elemén a kulcsok `["$__","$isNew","_doc"]`, `_id: undefined` → a kliens-oldali linkek
-   *   `/editor/undefined`-ra mutattak, a törlés `missing pathParam: "flowId"`-vel állt meg. Az EGYEDI
-   *   get ugyanakkor ép volt — mert a `DyNTS_DBService` az egyedi olvasásoknál **már `toObject()`-et**
-   *   hív (`db.service.ts` getDataById / getDataByDependencyId / findByIdAndUpdate / findOneAndUpdate),
-   *   a **lista-metódusok (11 db) viszont NYERS Documentet adnak tovább**. Titkosítás nélküli
-   *   modelleknél ez ártalmatlan (a `res.send` a `toJSON()`-on át szerializál), `encrypt:true` mező
-   *   esetén viszont a spread elrontja.
-   *
-   *   **Miért ITT javítjuk, és nem a 11 DB-metódusban:** (1) ez az EGY pont mind a 11 utat rendezi;
-   *   (2) a 11 metódus visszatérési TÍPUSÁT megváltoztatni (Document → sima objektum) minden modell
-   *   minden fogyasztóját érintené — az itteni javítás viszont **csak az `encrypt:true` modelleket**
-   *   érinti, ahol a `_transform` amúgy is **már ma is** sima (csak ROSSZ) objektumot ad vissza.
-   *   Vagyis a változás nem tud elrontani olyat, ami ma működik.
-   *
-   *   `toJSON()`-t használunk (nem `toObject()`-et): a titkosítás bevezetése ELŐTT a nyers Document a
-   *   `res.send`-en át a `JSON.stringify` → `toJSON()` úton szerializálódott, tehát ez adja vissza
-   *   **bitre ugyanazt a kimeneti alakot** (schema-transzformok, virtuals, `__v`-kezelés együtt).
-   *
-   * @param value tetszőleges érték
-   * @returns a Document sima alakja, vagy az eredeti érték
-   */
-  private static _toPlainIfDocument(value: any): any { // ccap-review-disable-line no-any-type
-    // A `$__` a mongoose-Document SAJÁT mezője — pontosan ez szivárgott ki a hibás payloadba,
-    // ezért ez a legpontosabb (és mongoose-import nélküli) diszkriminátor.
-    if (
-      value != null
-      && typeof value === 'object'
-      && typeof value.toJSON === 'function'
-      && Object.prototype.hasOwnProperty.call(value, '$__')
-    ) {
-      return value.toJSON();
-    }
-
-    return value;
-  }
-
-  /**
-   * Rekurzív per-field walk: az `encrypt:true` mezőket titkosítja/visszafejti, a `subObjectParams`-os
-   * mezőkbe (objektum VAGY objektum-tömb) leszáll. Immutábilis: minden érintett konténert sekélyen
-   * klónoz (az eredetit nem mutálja); a nem-érintett ágakat referencia szerint megosztja (read-only).
-   *
-   * ⚠️ A klónozás ELŐTT a mongoose-Documentek sima objektummá alakulnak — lásd {@link _toPlainIfDocument}.
-   */
-  private static _transform<T>(
-    value: T,
-    properties: DyFM_DataProperties<any>,
-    mode: 'encrypt' | 'decrypt',
-    key: string,
-    keyVersion: number,
-  ): T {
-    if (value == null || typeof value !== 'object') {
-      return value;
-    }
-
-    const plain: any = this._toPlainIfDocument(value); // ccap-review-disable-line no-any-type
-    const result: any = Array.isArray(plain) ? [ ...(plain as any[]) ] : { ...(plain as any) }; // ccap-review-disable-line no-any-type
-
-    for (const propKey in properties) {
-      const prop: any = properties[propKey]; // ccap-review-disable-line no-any-type
-      if (!prop) {
-        continue;
-      }
-
-      if (prop.encrypt === true) {
-        const current: any = result[propKey]; // ccap-review-disable-line no-any-type
-
-        if (mode === 'encrypt') {
-          // Üres/undefined/null-t NEM titkosítunk (a DyFM_Crypto ezekre dob); már-envelope-ot sem (idempotens).
-          if (current != null && current !== '' && !DyFM_Crypto.isEncryptedDbValue(current)) {
-            result[propKey] = DyFM_Crypto.encryptDbValue(current, key, keyVersion);
-          }
-        } else {
-          // CSAK envelope-ot fejtünk vissza (legacy plaintext változatlan).
-          if (DyFM_Crypto.isEncryptedDbValue(current)) {
-            result[propKey] = DyFM_Crypto.decryptDbValue(current, key);
-          }
-        }
-      } else if (prop.subObjectParams) {
-        const current: any = result[propKey]; // ccap-review-disable-line no-any-type
-
-        if (current != null && typeof current === 'object') {
-          if (Array.isArray(current)) {
-            result[propKey] = current.map(
-              (item: any): any => this._transform(item, prop.subObjectParams, mode, key, keyVersion), // ccap-review-disable-line no-any-type
-            );
-          } else {
-            result[propKey] = this._transform(current, prop.subObjectParams, mode, key, keyVersion);
-          }
-        }
-      }
-    }
-
-    return result as T;
-  }
-}

package/src/_collections/get-environment-settings.util.spec.ts

@@ -1,210 +0,0 @@
-
-import { DyFM_EnvironmentFlag, DyFM_Log } from '@futdevpro/fsm-dynamo';
-import { DyNTS_getEnvironment_settings } from './get-environment-settings.util';
-
-describe('| DyNTS_getEnvironment_settings', () => {
-  let originalEnv: string | undefined;
-  let originalNodeEnv: string | undefined;
-  let originalEnvironment: string | undefined;
-
-  beforeEach(() => {
-    // Save original environment variables
-    originalEnv = process.env.ENV;
-    originalNodeEnv = process.env.NODE_ENV;
-    originalEnvironment = process.env.ENVIRONMENT;
-    
-    // Clear environment variables
-    delete process.env.ENV;
-    delete process.env.NODE_ENV;
-    delete process.env.ENVIRONMENT;
-    delete process.env.DISCORD_GUILD_ID;
-    delete process.env.DISCORD_BOT_TOKEN;
-    delete process.env.DISCORD_BOT_CLIENT_ID;
-    delete process.env.DISCORD_BOT_OAUTH2_URL;
-    delete process.env.MONGO_URL;
-    delete process.env.MONGO_URI;
-    delete process.env.OPENAI_API_KEY;
-    delete process.env.OPENAI_ORGANIZATION;
-    delete process.env.OPENAI_PROJECT;
-    delete process.env.OPENAI_TTS_API_KEY;
-  });
-
-  afterEach(() => {
-    // Restore original environment variables
-    if (originalEnv !== undefined) {
-      process.env.ENV = originalEnv;
-    } else {
-      delete process.env.ENV;
-    }
-    if (originalNodeEnv !== undefined) {
-      process.env.NODE_ENV = originalNodeEnv;
-    } else {
-      delete process.env.NODE_ENV;
-    }
-    if (originalEnvironment !== undefined) {
-      process.env.ENVIRONMENT = originalEnvironment;
-    } else {
-      delete process.env.ENVIRONMENT;
-    }
-  });
-
-  it('| should return local environment when no environment variables are set', () => {
-    const settings = DyNTS_getEnvironment_settings();
-
-    expect(settings.environment).toBe(DyFM_EnvironmentFlag.local);
-  });
-
-  it('| should use ENV variable when set', () => {
-    process.env.ENV = 'prod';
-
-    const settings = DyNTS_getEnvironment_settings();
-
-    expect(settings.environment).toBe(DyFM_EnvironmentFlag.prod);
-  });
-
-  it('| should use NODE_ENV when ENV is not set', () => {
-    process.env.NODE_ENV = 'dev';
-
-    const settings = DyNTS_getEnvironment_settings();
-
-    expect(settings.environment).toBe(DyFM_EnvironmentFlag.local);
-  });
-
-  it('| should use ENVIRONMENT when ENV and NODE_ENV are not set', () => {
-    process.env.ENVIRONMENT = 'test';
-
-    const settings = DyNTS_getEnvironment_settings();
-
-    expect(settings.environment).toBe(DyFM_EnvironmentFlag.local);
-  });
-
-  it('| should prioritize ENV over NODE_ENV and ENVIRONMENT', () => {
-    process.env.ENV = 'prod';
-    process.env.NODE_ENV = 'dev';
-    process.env.ENVIRONMENT = 'test';
-
-    const settings = DyNTS_getEnvironment_settings();
-
-    expect(settings.environment).toBe(DyFM_EnvironmentFlag.prod);
-  });
-
-  it('| should handle lowercase environment values', () => {
-    process.env.ENV = 'prod';
-
-    const settings = DyNTS_getEnvironment_settings();
-
-    expect(settings.environment).toBe(DyFM_EnvironmentFlag.prod);
-  });
-
-  it('| should log error and use local for unknown environment', () => {
-    const logSpy = spyOn(DyFM_Log, 'error');
-    process.env.ENV = 'unknown-env';
-
-    const settings = DyNTS_getEnvironment_settings();
-
-    expect(logSpy).toHaveBeenCalled();
-    expect(settings.environment).toBe(DyFM_EnvironmentFlag.local);
-  });
-
-  it('| should return discord settings from environment variables', () => {
-    process.env.DISCORD_GUILD_ID = 'guild123';
-    process.env.DISCORD_BOT_TOKEN = 'token123';
-    process.env.DISCORD_BOT_CLIENT_ID = 'client123';
-    process.env.DISCORD_BOT_OAUTH2_URL = 'https://discord.com/oauth2';
-
-    const settings = DyNTS_getEnvironment_settings();
-
-    expect(settings.discord.guildId).toBe('guild123');
-    expect(settings.discord.token).toBe('token123');
-    expect(settings.discord.clientId).toBe('client123');
-    expect(settings.discord.oauth2Url).toBe('https://discord.com/oauth2');
-  });
-
-  it('| should return undefined for discord settings when not set', () => {
-    const settings = DyNTS_getEnvironment_settings();
-
-    expect(settings.discord.guildId).toBeUndefined();
-    expect(settings.discord.token).toBeUndefined();
-    expect(settings.discord.clientId).toBeUndefined();
-    expect(settings.discord.oauth2Url).toBeUndefined();
-  });
-
-  it('| should return mongoUri from MONGO_URL', () => {
-    process.env.MONGO_URL = 'mongodb://localhost:27017';
-
-    const settings = DyNTS_getEnvironment_settings();
-
-    expect(settings.mongoUri).toBe('mongodb://localhost:27017');
-  });
-
-  it('| should return mongoUri from MONGO_URI when MONGO_URL is not set', () => {
-    process.env.MONGO_URI = 'mongodb://localhost:27017';
-
-    const settings = DyNTS_getEnvironment_settings();
-
-    expect(settings.mongoUri).toBe('mongodb://localhost:27017');
-  });
-
-  it('| should prioritize MONGO_URL over MONGO_URI', () => {
-    process.env.MONGO_URL = 'mongodb://localhost:27017';
-    process.env.MONGO_URI = 'mongodb://other:27017';
-
-    const settings = DyNTS_getEnvironment_settings();
-
-    expect(settings.mongoUri).toBe('mongodb://localhost:27017');
-  });
-
-  it('| should return undefined for mongoUri when not set', () => {
-    const settings = DyNTS_getEnvironment_settings();
-
-    expect(settings.mongoUri).toBeUndefined();
-  });
-
-  it('| should return openAi settings from environment variables', () => {
-    process.env.OPENAI_API_KEY = 'api-key-123';
-    process.env.OPENAI_ORGANIZATION = 'org-123';
-    process.env.OPENAI_PROJECT = 'project-123';
-    process.env.OPENAI_TTS_API_KEY = 'tts-key-123';
-
-    const settings = DyNTS_getEnvironment_settings();
-
-    expect(settings.openAi.apiKey).toBe('api-key-123');
-    expect(settings.openAi.organization).toBe('org-123');
-    expect(settings.openAi.project).toBe('project-123');
-    expect(settings.openAi.ttsApiKey).toBe('tts-key-123');
-  });
-
-  it('| should return undefined for openAi settings when not set', () => {
-    const settings = DyNTS_getEnvironment_settings();
-
-    expect(settings.openAi.apiKey).toBeUndefined();
-    expect(settings.openAi.organization).toBeUndefined();
-    expect(settings.openAi.project).toBeUndefined();
-    expect(settings.openAi.ttsApiKey).toBeUndefined();
-  });
-
-  it('| should handle dotenv.config() being called', () => {
-    // This test ensures that dotenv.config() is called without errors
-    const settings = DyNTS_getEnvironment_settings();
-    expect(settings).toBeDefined();
-    expect(settings.environment).toBeDefined();
-  });
-
-  it('| should return consistent results on multiple calls', () => {
-    const settings1 = DyNTS_getEnvironment_settings();
-    const settings2 = DyNTS_getEnvironment_settings();
-
-    expect(settings1.environment).toBe(settings2.environment);
-    expect(settings1.discord).toEqual(settings2.discord);
-    expect(settings1.mongoUri).toBe(settings2.mongoUri);
-    expect(settings1.openAi).toEqual(settings2.openAi);
-  });
-
-  it('| should handle mixed case environment variables', () => {
-    process.env.ENV = 'PROD';
-    const settings = DyNTS_getEnvironment_settings();
-    // The function should handle case conversion
-    expect(settings.environment).toBeDefined();
-  });
-});
-

package/src/_collections/get-environment-settings.util.ts

@@ -1,49 +0,0 @@
-import { DyFM_allEnvironmentFlags, DyFM_EnvironmentFlag, DyFM_Log } from '@futdevpro/fsm-dynamo';
-import { DyNTS_Environment_Settings } from '../_models/interfaces/environment-settings.interface';
-import * as dotenv from 'dotenv';
-
-export function DyNTS_getEnvironment_settings(): DyNTS_Environment_Settings {
-  dotenv.config()
-
-  let env = process.env.ENV ?? process.env.NODE_ENV ?? process.env.ENVIRONMENT ?? DyFM_EnvironmentFlag.local;
-  env = env.toLocaleLowerCase();
-
-  if (!DyFM_allEnvironmentFlags.includes(env as DyFM_EnvironmentFlag)) {
-    DyFM_Log.error(`Unknown environment: "${env}", it will be set to "local"`);
-    env = DyFM_EnvironmentFlag.local;
-  }
-
-  return {
-    environment: DyFM_allEnvironmentFlags.includes(process.env.ENV as DyFM_EnvironmentFlag) ? 
-      process.env.ENV as DyFM_EnvironmentFlag : 
-      DyFM_EnvironmentFlag.local,
-
-      
-    discord: {
-      guildId: process.env.DISCORD_GUILD_ID,
-      token: process.env.DISCORD_BOT_TOKEN,
-      clientId: process.env.DISCORD_BOT_CLIENT_ID,
-      oauth2Url: process.env.DISCORD_BOT_OAUTH2_URL,
-    },
-
-    mongoUri: process.env.MONGO_URL || process.env.MONGO_URI,
-
-    openAi: {
-      apiKey: process.env.OPENAI_API_KEY,
-      organization: process.env.OPENAI_ORGANIZATION,
-      project: process.env.OPENAI_PROJECT,
-      ttsApiKey: process.env.OPENAI_TTS_API_KEY,
-    },
-
-    /* elevenLabs: {
-      apiKey: process.env.ELEVENLABS_API_KEY,
-    },
-
-    clickup: {
-      apiKey: process.env.CLICKUP_API_KEY,
-      workspaceId: process.env.CLICKUP_WORKSPACE_ID,
-      spaceId: process.env.CLICKUP_SPACE_ID,
-      listId: process.env.CLICKUP_LIST_ID,
-    }, */
-  }
-}

package/src/_collections/global-settings.const.ts

@@ -1,126 +0,0 @@
-
-
-import { DyNTS_RouteSecurity } from '../_enums/route-security.enum';
-import { DyNTS_Global_Settings } from '../_models/interfaces/global-settings.interface';
-import { DyNTS_SocketSecurity } from '../_modules/socket/_enums/socket-security.enum';
-import { DyNTS_getEnvironment_settings } from './get-environment-settings.util';
-
-/**
- * Default configuration used across the NodeTS framework.
- * These values can be overridden when bootstrapping the server.
- */
-export const DyNTS_global_settings: DyNTS_Global_Settings = {
-  baseUrl: '/api',
-  systemVersion: 'unknown-version',
-  defaultRouteSecurity: DyNTS_RouteSecurity.open,
-  defaultSocketSecurity: DyNTS_SocketSecurity.open,
-  
-  defaultPageSize: 10,
-  archiveListAfter: 100,
-  env_settings: DyNTS_getEnvironment_settings(),
-  
-  autoResolveEndpointCirculationErrors: true,
-  compactErrorResponse: true,
-
-  log_settings: {
-    highDetailedLogs: false,
-    
-    setup: false,
-  
-    request: true,
-    requestsContent: false,
-    responseContent: false,
-    requestStackLocation: false,
-  
-    socket_allEvents: true,
-    socket_mainEvents: true,
-    socket_eventContent: false,
-  
-    api_events: true,
-    api_requestContents: false,
-    api_requestSettings: false,
-    api_responseContents: false,
-    api_errors: true,
-  
-    detailedErrors: false,
-
-    server_debug: false,
-
-    logs_endpoint: {
-      enabled: false,
-      maxEntries: 2000,
-    },
-  },
-
-  autoResearchIssues: true,
-
-  // Auth-service kötelező alapból (régi viselkedés). Public / no-auth szervereknél
-  // `auth_settings.optional = true` → getAuthService() undefined-ot ad dobás helyett,
-  // és a startup 'Authentication Service missing!' warn is elmarad.
-  auth_settings: {
-    optional: false,
-  },
-
-  bot_settings: null,
-
-  openAi_settings: null,
-
-  dias_settings: null,
-
-  assistant_settings: null,
-
-  docChunking: {
-    maxChunkSize: 1000,
-    maxChunkCount: 1000,
-  },
-
-  // BFR-MASTERPROMPTER-011 / SEC-R2-8 — security response-headerek default-ON (safe-by-default
-  // készlet: x-powered-by removal + SAMEORIGIN + nosniff + strict-origin-when-cross-origin;
-  // HSTS AUTO csak prod-on; CSP opt-in). Per-app tweak az overrideDynamoNTSGlobalSettings()-ben.
-  securityHeaders: {
-    enabled: true,
-    removePoweredBy: true,
-  },
-
-  // FR-193 — bedrock OOM korai-figyelmeztető heap-watchdog. Default-on: minden nts-szerver
-  // megkapja a heap-nyomás-figyelést a base App startup-ban (lásd DyNTS_MemoryGuard). Csak
-  // MEGFIGYELÉS + tartós rögzítés a near-OOM küszöböknél — nem változtat a viselkedésen.
-  memoryGuard: {
-    enabled: true,
-    pollIntervalMs: 10000,
-    heapWarningThreshold: 85,
-    heapCriticalThreshold: 95,
-    recoveryMargin: 10,
-    maxHistoryCount: 100,
-    // GC-thrash precursor (a %-küszöb által gyakran KÉSŐN/sosem fogott OOM) + crash-entry + opcionális graceful-exit.
-    gcWarningFraction: 0.40,
-    gcCriticalFraction: 0.60,
-    installCrashHandlers: true,
-    exitOnSustainedCritical: false,
-    sustainedCriticalPolls: 3,
-    exitCode: 137,
-    bootGraceMs: 60000,
-    // Auto-load-shed 503 (BFR-OVERSEER-009 maradék) — opt-in; esszenciális útvonalak kivételével.
-    loadShedEnabled: false,
-    loadShedExemptPathParts: ['/health', '/readiness', '/status', '/diag'],
-  },
-  // Event-loop-lag diag (BFR-OVERSEER-007) — olcsó natív mérés, default ON (opt-out lehetséges).
-  eventLoopDiag: {
-    enabled: true,
-    pollIntervalMs: 5000,
-    maxHistoryCount: 120,
-  },
-
-  // FR-258 / SR-4 — proactive collection-growth monitor (companion to memoryGuard). Periodically
-  // samples each collection's document count (scan-free estimatedDocumentCount) and warns into the
-  // Errors-sink BEFORE an unbounded collection can be loaded into heap and OOM. Observation only —
-  // never deletes (retention SR-1/SR-2 does the deleting). Slow cadence (5 min) — growth is slow.
-  collectionGrowthMonitor: {
-    enabled: true,
-    pollIntervalMs: 300000,
-    sizeThresholdDocCount: 250000,
-    growthRateThresholdPct: 50,
-    reAlertCooldownMs: 3600000,
-  },
-};
-

package/src/_collections/load-shed.util.spec.ts

@@ -1,62 +0,0 @@
-import * as Express from 'express';
-
-import { DyNTS_createLoadShedMiddleware } from './load-shed.util';
-import { DyNTS_MemoryGuard } from '../_services/core/memory-guard.service';
-
-// Az auto-load-shed middleware tesztjei (BFR-OVERSEER-009 maradék): critical-nyomásnál 503,
-// esszenciális útvonalon SOHA, ok-nyomásnál átenged.
-describe('| DyNTS_createLoadShedMiddleware', (): void => {
-
-  /** Minimál Express req/res/next hármas a middleware meghajtásához. */
-  function buildContext(path: string): {
-    req: Express.Request; res: Express.Response; next: jasmine.Spy;
-    sent: { status?: number; body?: unknown };
-  } {
-    const sent: { status?: number; body?: unknown } = {};
-    const res: Partial<Express.Response> = {
-      status: (code: number): Express.Response => { sent.status = code; return res as Express.Response; },
-      setHeader: (): Express.Response => res as Express.Response,
-      send: (body: unknown): Express.Response => { sent.body = body; return res as Express.Response; },
-    };
-
-    return {
-      req: { path: path } as Express.Request,
-      res: res as Express.Response,
-      next: jasmine.createSpy('next'),
-      sent: sent,
-    };
-  }
-
-  it('| critical nyomásnál 503-mal ejti a nem-esszenciális kérést', (): void => {
-    spyOn(DyNTS_MemoryGuard.getInstance(), 'shouldShedLoad').and.returnValue(true);
-    const middleware: Express.Handler = DyNTS_createLoadShedMiddleware();
-    const ctx = buildContext('/api/heavy-operation');
-
-    middleware(ctx.req, ctx.res, ctx.next);
-
-    expect(ctx.sent.status).toBe(503);
-    expect(ctx.next).not.toHaveBeenCalled();
-  });
-
-  it('| esszenciális útvonalon (health) critical alatt SEM shed-el', (): void => {
-    spyOn(DyNTS_MemoryGuard.getInstance(), 'shouldShedLoad').and.returnValue(true);
-    const middleware: Express.Handler = DyNTS_createLoadShedMiddleware();
-    const ctx = buildContext('/api/server/health');
-
-    middleware(ctx.req, ctx.res, ctx.next);
-
-    expect(ctx.next).toHaveBeenCalled();
-    expect(ctx.sent.status).toBeUndefined();
-  });
-
-  it('| ok-nyomásnál átengedi a kérést', (): void => {
-    spyOn(DyNTS_MemoryGuard.getInstance(), 'shouldShedLoad').and.returnValue(false);
-    const middleware: Express.Handler = DyNTS_createLoadShedMiddleware();
-    const ctx = buildContext('/api/anything');
-
-    middleware(ctx.req, ctx.res, ctx.next);
-
-    expect(ctx.next).toHaveBeenCalled();
-    expect(ctx.sent.status).toBeUndefined();
-  });
-});