npm - @futdevpro/nts-dynamo - Versions diffs - 1.15.242 → 1.15.245 - Mend

@futdevpro/nts-dynamo 1.15.242 → 1.15.245

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (28) hide show

package/build/_modules/privacy-lifecycle/privacy-rights-execution.mongo-store.js ADDED Viewed

@@ -0,0 +1,306 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DyNTS_PrivacyRightsExecution_MongoStore = void 0;
+const node_crypto_1 = require("node:crypto");
+const node_util_1 = require("node:util");
+const mongoose_1 = require("mongoose");
+const privacy_rights_decision_type_enum_1 = require("./_enums/privacy-rights-decision.type-enum");
+const privacy_request_type_enum_1 = require("./_enums/privacy-request.type-enum");
+/**
+ * Applies confidential rights input exactly once and journals only bounded content-free decisions.
+ * Call ensureReady during bootstrap. The caller owns one snapshot/majority transaction covering this store,
+ * custody, every domain mutation and every postcondition verification. Product callbacks are trusted composition.
+ */
+class DyNTS_PrivacyRightsExecution_MongoStore {
+    settings;
+    ownedErrors = new WeakSet();
+    isReady = false;
+    /** Validates all dependencies without accepting defaults for legal or retention policy. */
+    constructor(settings) {
+        try {
+            if (!settings?.connection || typeof settings.connection.startSession !== 'function'
+                || !settings.custody || typeof settings.custody.withExecutionInput !== 'function'
+                || !this.positive(settings.maxOperationTimeMs, 2_147_483_647)
+                || !this.positive(settings.maxExceptionTimeMs, 31_536_000_000)
+                || typeof settings.rectify !== 'function' || typeof settings.verifyRectification !== 'function'
+                || typeof settings.decidePurpose !== 'function' || typeof settings.verifyPurpose !== 'function') {
+                throw new Error();
+            }
+            this.settings = Object.freeze({ ...settings });
+        }
+        catch {
+            throw this.error('SETTINGS_INVALID');
+        }
+    }
+    /** Creates and verifies the strict content-free execution journal before requests are admitted. */
+    async ensureReady() {
+        if (this.isReady) {
+            return;
+        }
+        try {
+            try {
+                await this.settings.connection.db.createCollection('dynts_privacy_rights_executions', {
+                    validator: this.validator(), validationLevel: 'strict', validationAction: 'error',
+                    maxTimeMS: this.settings.maxOperationTimeMs,
+                });
+            }
+            catch (error) {
+                if (!(error instanceof mongoose_1.mongo.MongoServerError) || error.code !== 48) {
+                    throw error;
+                }
+            }
+            const information = await this.settings.connection.db.listCollections({ name: 'dynts_privacy_rights_executions' }, { nameOnly: false, maxTimeMS: this.settings.maxOperationTimeMs }).next();
+            if (!(0, node_util_1.isDeepStrictEqual)(information?.options?.validator, this.validator())
+                || information?.options?.validationLevel !== 'strict'
+                || information?.options?.validationAction !== 'error') {
+                throw this.error('SCHEMA_MIGRATION_REQUIRED');
+            }
+            await this.collection().createIndex({ requestId: 1, subjectId: 1, organizationId: 1 }, { unique: true, name: 'uq_dynts_rights_execution_authority', maxTimeMS: this.settings.maxOperationTimeMs });
+            this.isReady = true;
+        }
+        catch (error) {
+            if (error instanceof Error && this.ownedErrors.has(error)) {
+                throw error;
+            }
+            throw this.error('NOT_READY');
+        }
+    }
+    /** Executes once or returns the immutable prior receipt without reapplying any domain mutation. */
+    async execute(authorityValue, session) {
+        return this.inTransaction(session, async () => {
+            const authority = this.authority(authorityValue);
+            let receipt;
+            await this.settings.custody.withExecutionInput({
+                authority: authority,
+                task: async (input, custodySession) => {
+                    if (custodySession !== session) {
+                        throw this.error('TRANSACTION_MISMATCH');
+                    }
+                    const existing = await this.collection().findOne({ _id: this.key(authority) }, this.options(session));
+                    if (existing) {
+                        this.assertRecord(existing, authority, input);
+                        receipt = this.receipt(existing, false);
+                        return;
+                    }
+                    const completedAt = (await this.databaseTime()).toISOString();
+                    const record = input.type ===
+                        privacy_request_type_enum_1.DyNTS_PrivacyRequest_Type.rectification
+                        ? await this.rectificationRecord(authority, input, { completedAt: completedAt, session: session })
+                        : await this.purposeRecord(authority, input, { completedAt: completedAt, session: session });
+                    await this.collection().insertOne(record, this.options(session));
+                    receipt = this.receipt(record, true);
+                },
+            }, session);
+            if (!receipt) {
+                throw this.error('EXECUTION_RESULT_MISSING');
+            }
+            return receipt;
+        });
+    }
+    async rectificationRecord(authority, input, set) {
+        const decisions = [];
+        for (const replacement of input.replacements) {
+            const decision = await this.settings.rectify({
+                authority: authority, replacement: replacement, session: set.session,
+            });
+            this.assertRectificationDecision(decision, replacement);
+            if (!await this.settings.verifyRectification({
+                authority: authority, replacement: replacement, decision: decision, session: set.session,
+            })) {
+                throw this.error('RECTIFICATION_NOT_VERIFIED');
+            }
+            decisions.push(Object.freeze({ ...decision }));
+        }
+        return Object.freeze({
+            _id: this.key(authority), contractVersion: 'dynts-privacy-rights-execution-receipt/1', ...authority,
+            requestType: input.type, policyVersion: input.policyVersion,
+            expectedRequestRevision: input.expectedRequestRevision,
+            rectifications: Object.freeze(decisions), purposes: Object.freeze([]), completedAt: set.completedAt,
+        });
+    }
+    async purposeRecord(authority, input, set) {
+        const decisions = [];
+        const now = Date.parse(set.completedAt);
+        for (const purposeCode of input.purposeCodes) {
+            const decision = await this.settings.decidePurpose({
+                authority: authority, requestType: input.type, purposeCode: purposeCode, session: set.session,
+            });
+            this.assertPurposeDecision(decision, purposeCode, now);
+            if (!await this.settings.verifyPurpose({
+                authority: authority, requestType: input.type, purposeCode: purposeCode,
+                decision: decision, session: set.session,
+            })) {
+                throw this.error('PURPOSE_DECISION_NOT_VERIFIED');
+            }
+            decisions.push(Object.freeze({ ...decision }));
+        }
+        return Object.freeze({
+            _id: this.key(authority), contractVersion: 'dynts-privacy-rights-execution-receipt/1', ...authority,
+            requestType: input.type, policyVersion: input.policyVersion,
+            expectedRequestRevision: input.expectedRequestRevision,
+            rectifications: Object.freeze([]), purposes: Object.freeze(decisions), completedAt: set.completedAt,
+        });
+    }
+    assertRectificationDecision(decision, replacement) {
+        const updated = decision?.decision === privacy_rights_decision_type_enum_1.DyNTS_PrivacyRightsRectificationDecision_Type.updated;
+        const declined = decision?.decision === privacy_rights_decision_type_enum_1.DyNTS_PrivacyRightsRectificationDecision_Type.correctionRequired
+            || decision?.decision === privacy_rights_decision_type_enum_1.DyNTS_PrivacyRightsRectificationDecision_Type.refused;
+        if (!this.exactRecord(decision, [
+            'fieldCode', 'decision', 'expectedRevision', 'resultingRevision', 'reasonCode',
+        ]) || decision.fieldCode !== replacement.fieldCode
+            || decision.expectedRevision !== replacement.expectedRevision
+            || !Number.isSafeInteger(decision.resultingRevision) || decision.resultingRevision < 0
+            || (!updated && !declined)
+            || (updated && (decision.resultingRevision <= replacement.expectedRevision || decision.reasonCode !== ''))
+            || (declined && !this.code(decision.reasonCode))) {
+            throw this.error('RECTIFICATION_DECISION_INVALID');
+        }
+    }
+    assertPurposeDecision(decision, purposeCode, now) {
+        const retained = decision?.decision === privacy_rights_decision_type_enum_1.DyNTS_PrivacyRightsPurposeDecision_Type.retainedWithException;
+        const stopped = decision?.decision === privacy_rights_decision_type_enum_1.DyNTS_PrivacyRightsPurposeDecision_Type.stopped;
+        const rejected = decision?.decision === privacy_rights_decision_type_enum_1.DyNTS_PrivacyRightsPurposeDecision_Type.rejected;
+        const exceptionTime = Date.parse(decision?.exceptionExpiresAt);
+        if (!this.exactRecord(decision, [
+            'purposeCode', 'decision', 'reasonCode', 'exceptionExpiresAt',
+        ]) || decision.purposeCode !== purposeCode || (!retained && !stopped && !rejected)
+            || (stopped && (decision.reasonCode !== '' || decision.exceptionExpiresAt !== ''))
+            || (rejected && (!this.code(decision.reasonCode) || decision.exceptionExpiresAt !== ''))
+            || (retained && (!this.code(decision.reasonCode) || !Number.isFinite(exceptionTime)
+                || exceptionTime <= now || exceptionTime > now + this.settings.maxExceptionTimeMs))) {
+            throw this.error('PURPOSE_DECISION_INVALID');
+        }
+    }
+    assertRecord(record, authority, input) {
+        const expectedRectifications = input.type === privacy_request_type_enum_1.DyNTS_PrivacyRequest_Type.rectification
+            ? input.replacements.length : 0;
+        const expectedPurposes = input.type === privacy_request_type_enum_1.DyNTS_PrivacyRequest_Type.rectification
+            ? 0 : input.purposeCodes.length;
+        if (record._id !== this.key(authority) || record.contractVersion !== 'dynts-privacy-rights-execution-receipt/1'
+            || record.requestId !== authority.requestId || record.subjectId !== authority.subjectId
+            || record.organizationId !== authority.organizationId || record.requestType !== input.type
+            || record.policyVersion !== input.policyVersion
+            || record.expectedRequestRevision !== input.expectedRequestRevision
+            || record.rectifications.length !== expectedRectifications || record.purposes.length !== expectedPurposes
+            || (input.type === privacy_request_type_enum_1.DyNTS_PrivacyRequest_Type.rectification
+                && record.rectifications.some((decision, index) => (decision.fieldCode !== input.replacements[index].fieldCode
+                    || decision.expectedRevision !== input.replacements[index].expectedRevision)))
+            || (input.type !== privacy_request_type_enum_1.DyNTS_PrivacyRequest_Type.rectification
+                && record.purposes.some((decision, index) => (decision.purposeCode !== input.purposeCodes[index])))) {
+            throw this.error('REPLAY_CONFLICT');
+        }
+    }
+    receipt(record, created) {
+        return Object.freeze({
+            contractVersion: record.contractVersion, requestId: record.requestId, subjectId: record.subjectId,
+            organizationId: record.organizationId, requestType: record.requestType, policyVersion: record.policyVersion,
+            expectedRequestRevision: record.expectedRequestRevision,
+            rectifications: Object.freeze(record.rectifications.map((entry) => Object.freeze({ ...entry }))),
+            purposes: Object.freeze(record.purposes.map((entry) => Object.freeze({ ...entry }))),
+            completedAt: record.completedAt, created: created,
+        });
+    }
+    async inTransaction(session, task) {
+        const concern = session?.transaction?.options?.readConcern;
+        if (!this.isReady || !session?.inTransaction() || session.transaction.options.writeConcern?.w !== 'majority'
+            || (typeof concern === 'string' ? concern : concern?.level) !== 'snapshot') {
+            throw this.error('OWNING_TRANSACTION_REQUIRED');
+        }
+        try {
+            await this.collection().findOne({ _id: '' }, this.options(session));
+            return await task();
+        }
+        catch (error) {
+            if (error instanceof mongoose_1.mongo.MongoError && error.hasErrorLabel('TransientTransactionError')) {
+                const retryable = new mongoose_1.mongo.MongoError('DyNTS|PRIVACY_RIGHTS_EXECUTION|TRANSACTION_FAILED');
+                retryable.addErrorLabel('TransientTransactionError');
+                throw retryable;
+            }
+            if (error instanceof Error && this.ownedErrors.has(error)) {
+                throw error;
+            }
+            throw this.error('EXECUTION_FAILED');
+        }
+    }
+    authority(value) {
+        const descriptors = Object.getOwnPropertyDescriptors(value);
+        const requestId = descriptors.requestId?.value;
+        const subjectId = descriptors.subjectId?.value;
+        const organizationId = descriptors.organizationId?.value;
+        if (Reflect.ownKeys(value).length !== 3 || !this.code(requestId)
+            || !this.code(subjectId) || !this.code(organizationId)) {
+            throw this.error('AUTHORITY_INVALID');
+        }
+        return Object.freeze({ requestId: requestId, subjectId: subjectId, organizationId: organizationId });
+    }
+    async databaseTime() {
+        const result = await this.settings.connection.db.command({ hello: 1, maxTimeMS: this.settings.maxOperationTimeMs }, { timeoutMS: this.settings.maxOperationTimeMs });
+        const now = result.localTime;
+        if (!(now instanceof Date) || !Number.isFinite(now.getTime())) {
+            throw this.error('CLOCK_UNAVAILABLE');
+        }
+        return now;
+    }
+    key(authority) {
+        return (0, node_crypto_1.createHash)('sha256').update(JSON.stringify([
+            'dynts-privacy-rights-execution-receipt/1', authority.requestId, authority.subjectId, authority.organizationId,
+        ])).digest('hex');
+    }
+    positive(value, maximum) {
+        return Number.isSafeInteger(value) && Number(value) > 0 && Number(value) <= maximum;
+    }
+    code(value) {
+        return typeof value === 'string' && /^[a-zA-Z0-9][a-zA-Z0-9._:-]{0,127}$/u.test(value);
+    }
+    exactRecord(value, expectedKeys) {
+        if (typeof value !== 'object' || value === null) {
+            return false;
+        }
+        const keys = Reflect.ownKeys(value);
+        return keys.length === expectedKeys.length && expectedKeys.every((key) => {
+            const descriptor = Object.getOwnPropertyDescriptor(value, key);
+            return !!descriptor && 'value' in descriptor;
+        });
+    }
+    options(session) {
+        return { session: session, maxTimeMS: this.settings.maxOperationTimeMs };
+    }
+    collection() {
+        return this.settings.connection.db.collection('dynts_privacy_rights_executions');
+    }
+    error(code) {
+        const error = new Error(`DyNTS|PRIVACY_RIGHTS_EXECUTION|${code}`);
+        this.ownedErrors.add(error);
+        return error;
+    }
+    validator() {
+        const code = { bsonType: 'string', pattern: '^[a-zA-Z0-9][a-zA-Z0-9._:-]{0,127}$' };
+        const rectification = { bsonType: 'object', additionalProperties: false,
+            required: ['fieldCode', 'decision', 'expectedRevision', 'resultingRevision', 'reasonCode'],
+            properties: { fieldCode: code, decision: { enum: Object.values(privacy_rights_decision_type_enum_1.DyNTS_PrivacyRightsRectificationDecision_Type) },
+                expectedRevision: { bsonType: ['int', 'long', 'double'], minimum: 0, maximum: Number.MAX_SAFE_INTEGER },
+                resultingRevision: { bsonType: ['int', 'long', 'double'], minimum: 0, maximum: Number.MAX_SAFE_INTEGER },
+                reasonCode: { bsonType: 'string', maxLength: 128 } } };
+        const purpose = { bsonType: 'object', additionalProperties: false,
+            required: ['purposeCode', 'decision', 'reasonCode', 'exceptionExpiresAt'],
+            properties: { purposeCode: code, decision: { enum: Object.values(privacy_rights_decision_type_enum_1.DyNTS_PrivacyRightsPurposeDecision_Type) },
+                reasonCode: { bsonType: 'string', maxLength: 128 },
+                exceptionExpiresAt: { bsonType: 'string', maxLength: 24 } } };
+        const properties = {
+            _id: { bsonType: 'string', pattern: '^[a-f0-9]{64}$' },
+            contractVersion: { enum: ['dynts-privacy-rights-execution-receipt/1'] },
+            requestId: code, subjectId: code, organizationId: code,
+            requestType: { enum: ['rectification', 'restriction', 'objection'] }, policyVersion: code,
+            expectedRequestRevision: {
+                bsonType: ['int', 'long', 'double'], minimum: 0, maximum: Number.MAX_SAFE_INTEGER,
+            },
+            rectifications: { bsonType: 'array', maxItems: 64, uniqueItems: true, items: rectification },
+            purposes: { bsonType: 'array', maxItems: 64, uniqueItems: true, items: purpose },
+            completedAt: { bsonType: 'string', maxLength: 24 },
+        };
+        return { $jsonSchema: { bsonType: 'object', additionalProperties: false,
+                required: Object.keys(properties), properties: properties } };
+    }
+}
+exports.DyNTS_PrivacyRightsExecution_MongoStore = DyNTS_PrivacyRightsExecution_MongoStore;
+//# sourceMappingURL=privacy-rights-execution.mongo-store.js.map

package/build/_modules/privacy-lifecycle/privacy-rights-execution.mongo-store.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"privacy-rights-execution.mongo-store.js","sourceRoot":"","sources":["../../../src/_modules/privacy-lifecycle/privacy-rights-execution.mongo-store.ts"],"names":[],"mappings":";;;AAAA,6CAAyC;AACzC,yCAA8C;AAE9C,uCAAgD;AAEhD,kGAGoD;AACpD,kFAA+E;AAgB/E;;;;GAIG;AACH,MAAa,uCAAuC;IACjC,QAAQ,CAAiD;IACzD,WAAW,GAAmB,IAAI,OAAO,EAAE,CAAC;IACrD,OAAO,GAAY,KAAK,CAAC;IAEjC,2FAA2F;IAC3F,YAAY,QAAwD;QAClE,IAAI,CAAC;YACH,IAAI,CAAC,QAAQ,EAAE,UAAU,IAAI,OAAO,QAAQ,CAAC,UAAU,CAAC,YAAY,KAAK,UAAU;mBAC9E,CAAC,QAAQ,CAAC,OAAO,IAAI,OAAO,QAAQ,CAAC,OAAO,CAAC,kBAAkB,KAAK,UAAU;mBAC9E,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,kBAAkB,EAAE,aAAa,CAAC;mBAC1D,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,kBAAkB,EAAE,cAAc,CAAC;mBAC3D,OAAO,QAAQ,CAAC,OAAO,KAAK,UAAU,IAAI,OAAO,QAAQ,CAAC,mBAAmB,KAAK,UAAU;mBAC5F,OAAO,QAAQ,CAAC,aAAa,KAAK,UAAU,IAAI,OAAO,QAAQ,CAAC,aAAa,KAAK,UAAU,EAAE,CAAC;gBAClG,MAAM,IAAI,KAAK,EAAE,CAAC;YACpB,CAAC;YACD,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,QAAQ,EAAE,CAAC,CAAC;QACjD,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IAED,mGAAmG;IAC5F,KAAK,CAAC,WAAW;QACtB,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,gBAAgB,CAAC,iCAAiC,EAAE;oBACpF,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,EAAE,eAAe,EAAE,QAAQ,EAAE,gBAAgB,EAAE,OAAO;oBACjF,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,kBAAkB;iBAC5C,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAc,EAAE,CAAC;gBACxB,IAAI,CAAC,CAAC,KAAK,YAAY,gBAAK,CAAC,gBAAgB,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,EAAE,EAAE,CAAC;oBACpE,MAAM,KAAK,CAAC;gBACd,CAAC;YACH,CAAC;YACD,MAAM,WAAW,GAAgC,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,eAAe,CAChG,EAAE,IAAI,EAAE,iCAAiC,EAAE,EAC3C,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,kBAAkB,EAAE,CACjE,CAAC,IAAI,EAAE,CAAC;YAET,IAAI,CAAC,IAAA,6BAAiB,EAAC,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;mBACpE,WAAW,EAAE,OAAO,EAAE,eAAe,KAAK,QAAQ;mBAClD,WAAW,EAAE,OAAO,EAAE,gBAAgB,KAAK,OAAO,EAAE,CAAC;gBACxD,MAAM,IAAI,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;YAChD,CAAC;YACD,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC,WAAW,CACjC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE,EACjD,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,qCAAqC,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,kBAAkB,EAAE,CAC3G,CAAC;YACF,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACtB,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,IAAI,KAAK,YAAY,KAAK,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC1D,MAAM,KAAK,CAAC;YACd,CAAC;YAED,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IAED,mGAAmG;IAC5F,KAAK,CAAC,OAAO,CAClB,cAAsD,EACtD,OAAsB;QAEtB,OAAO,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,KAAK,IAA4D,EAAE;YACpG,MAAM,SAAS,GAA2C,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;YACzF,IAAI,OAAkE,CAAC;YAEvE,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,kBAAkB,CAAC;gBAC7C,SAAS,EAAE,SAAS;gBACpB,IAAI,EAAE,KAAK,EAAE,KAAoC,EAAE,cAA6B,EAAiB,EAAE;oBACjG,IAAI,cAAc,KAAK,OAAO,EAAE,CAAC;wBAC/B,MAAM,IAAI,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;oBAC3C,CAAC;oBACD,MAAM,QAAQ,GAAwD,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC,OAAO,CACnG,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CACpD,CAAC;oBAEF,IAAI,QAAQ,EAAE,CAAC;wBACb,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;wBAC9C,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;wBAExC,OAAO;oBACT,CAAC;oBAED,MAAM,WAAW,GAAW,CAAC,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;oBACtE,MAAM,MAAM,GAAiD,KAAK,CAAC,IAAI;wBACrE,qDAAyB,CAAC,aAAa;wBACvC,CAAC,CAAC,MAAM,IAAI,CAAC,mBAAmB,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;wBAClG,CAAC,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;oBAE/F,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;oBACjE,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;gBACvC,CAAC;aACF,EAAE,OAAO,CAAC,CAAC;YAEZ,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,IAAI,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;YAC/C,CAAC;YAED,OAAO,OAAO,CAAC;QACjB,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAC/B,SAAiD,EACjD,KAAsD,EACtD,GAAoD;QAEpD,MAAM,SAAS,GAAyD,EAAE,CAAC;QAE3E,KAAK,MAAM,WAAW,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;YAC7C,MAAM,QAAQ,GAAuD,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAC/F,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO;aACrE,CAAC,CAAC;YAEH,IAAI,CAAC,2BAA2B,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;YAExD,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC;gBAC3C,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO;aACzF,CAAC,EAAE,CAAC;gBACH,MAAM,IAAI,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;YACjD,CAAC;YACD,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,QAAQ,EAAE,CAAC,CAAC,CAAC;QACjD,CAAC;QAED,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,eAAe,EAAE,0CAA0C,EAAE,GAAG,SAAS;YACnG,WAAW,EAAE,KAAK,CAAC,IAAI,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa;YAC3D,uBAAuB,EAAE,KAAK,CAAC,uBAAuB;YACtD,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW;SACpG,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,aAAa,CACzB,SAAiD,EACjD,KAAgD,EAChD,GAAoD;QAEpD,MAAM,SAAS,GAAmD,EAAE,CAAC;QACrE,MAAM,GAAG,GAAW,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAEhD,KAAK,MAAM,WAAW,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;YAC7C,MAAM,QAAQ,GAAiD,MAAM,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC;gBAC/F,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,KAAK,CAAC,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO;aAC9F,CAAC,CAAC;YAEH,IAAI,CAAC,qBAAqB,CAAC,QAAQ,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC;YAEvD,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC;gBACrC,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,KAAK,CAAC,IAAI,EAAE,WAAW,EAAE,WAAW;gBACvE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO;aACzC,CAAC,EAAE,CAAC;gBACH,MAAM,IAAI,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;YACpD,CAAC;YACD,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,QAAQ,EAAE,CAAC,CAAC,CAAC;QACjD,CAAC;QAED,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,eAAe,EAAE,0CAA0C,EAAE,GAAG,SAAS;YACnG,WAAW,EAAE,KAAK,CAAC,IAAI,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa;YAC3D,uBAAuB,EAAE,KAAK,CAAC,uBAAuB;YACtD,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW;SACpG,CAAC,CAAC;IACL,CAAC;IAEO,2BAA2B,CACjC,QAA4D,EAC5D,WAAqD;QAErD,MAAM,OAAO,GAAY,QAAQ,EAAE,QAAQ,KAAK,iFAA6C,CAAC,OAAO,CAAC;QACtG,MAAM,QAAQ,GAAY,QAAQ,EAAE,QAAQ,KAAK,iFAA6C,CAAC,kBAAkB;eAC5G,QAAQ,EAAE,QAAQ,KAAK,iFAA6C,CAAC,OAAO,CAAC;QAElF,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE;YAC9B,WAAW,EAAE,UAAU,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,YAAY;SAC/E,CAAC,IAAI,QAAQ,CAAC,SAAS,KAAK,WAAW,CAAC,SAAS;eAC7C,QAAQ,CAAC,gBAAgB,KAAK,WAAW,CAAC,gBAAgB;eAC1D,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,iBAAiB,CAAC,IAAI,QAAQ,CAAC,iBAAiB,GAAG,CAAC;eACnF,CAAC,CAAC,OAAO,IAAI,CAAC,QAAQ,CAAC;eACvB,CAAC,OAAO,IAAI,CAAC,QAAQ,CAAC,iBAAiB,IAAI,WAAW,CAAC,gBAAgB,IAAI,QAAQ,CAAC,UAAU,KAAK,EAAE,CAAC,CAAC;eACvG,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;YACnD,MAAM,IAAI,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IAEO,qBAAqB,CAC3B,QAAsD,EACtD,WAAmB,EACnB,GAAW;QAEX,MAAM,QAAQ,GAAY,QAAQ,EAAE,QAAQ,KAAK,2EAAuC,CAAC,qBAAqB,CAAC;QAC/G,MAAM,OAAO,GAAY,QAAQ,EAAE,QAAQ,KAAK,2EAAuC,CAAC,OAAO,CAAC;QAChG,MAAM,QAAQ,GAAY,QAAQ,EAAE,QAAQ,KAAK,2EAAuC,CAAC,QAAQ,CAAC;QAClG,MAAM,aAAa,GAAW,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC;QAEvE,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE;YAC9B,aAAa,EAAE,UAAU,EAAE,YAAY,EAAE,oBAAoB;SAC9D,CAAC,IAAI,QAAQ,CAAC,WAAW,KAAK,WAAW,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,OAAO,IAAI,CAAC,QAAQ,CAAC;eAC7E,CAAC,OAAO,IAAI,CAAC,QAAQ,CAAC,UAAU,KAAK,EAAE,IAAI,QAAQ,CAAC,kBAAkB,KAAK,EAAE,CAAC,CAAC;eAC/E,CAAC,QAAQ,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,QAAQ,CAAC,kBAAkB,KAAK,EAAE,CAAC,CAAC;eACrF,CAAC,QAAQ,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC;mBAC9E,aAAa,IAAI,GAAG,IAAI,aAAa,GAAG,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC,EAAE,CAAC;YACxF,MAAM,IAAI,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;IAEO,YAAY,CAClB,MAAoD,EACpD,SAAiD,EACjD,KAAoC;QAEpC,MAAM,sBAAsB,GAAW,KAAK,CAAC,IAAI,KAAK,qDAAyB,CAAC,aAAa;YAC3F,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAClC,MAAM,gBAAgB,GAAW,KAAK,CAAC,IAAI,KAAK,qDAAyB,CAAC,aAAa;YACrF,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC;QAElC,IAAI,MAAM,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,eAAe,KAAK,0CAA0C;eAC1G,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,SAAS,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,SAAS;eACpF,MAAM,CAAC,cAAc,KAAK,SAAS,CAAC,cAAc,IAAI,MAAM,CAAC,WAAW,KAAK,KAAK,CAAC,IAAI;eACvF,MAAM,CAAC,aAAa,KAAK,KAAK,CAAC,aAAa;eAC5C,MAAM,CAAC,uBAAuB,KAAK,KAAK,CAAC,uBAAuB;eAChE,MAAM,CAAC,cAAc,CAAC,MAAM,KAAK,sBAAsB,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,gBAAgB;eACtG,CAAC,KAAK,CAAC,IAAI,KAAK,qDAAyB,CAAC,aAAa;mBACrD,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,CAC5B,QAA4D,EAC5D,KAAa,EACJ,EAAE,CAAC,CACZ,QAAQ,CAAC,SAAS,KAAK,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,SAAS;uBACvD,QAAQ,CAAC,gBAAgB,KAAK,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,gBAAgB,CAC5E,CAAC,CAAC;eACF,CAAC,KAAK,CAAC,IAAI,KAAK,qDAAyB,CAAC,aAAa;mBACrD,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CACtB,QAAsD,EACtD,KAAa,EACJ,EAAE,CAAC,CACZ,QAAQ,CAAC,WAAW,KAAK,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,CACnD,CAAC,CAAC,EAAE,CAAC;YACR,MAAM,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IAEO,OAAO,CACb,MAAoD,EACpD,OAAgB;QAEhB,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,eAAe,EAAE,MAAM,CAAC,eAAe,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS;YACjG,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa;YAC3G,uBAAuB,EAAE,MAAM,CAAC,uBAAuB;YACvD,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,CACtD,KAAyD,EACL,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC;YACtF,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAC1C,KAAmD,EACL,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC;YAChF,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,OAAO,EAAE,OAAO;SAClD,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,aAAa,CAAI,OAAsB,EAAE,IAAsB;QAC3E,MAAM,OAAO,GAAsC,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,WAAW,CAAC;QAE9F,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,EAAE,aAAa,EAAE,IAAI,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC,KAAK,UAAU;eACvG,CAAC,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,UAAU,EAAE,CAAC;YAC7E,MAAM,IAAI,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;QAClD,CAAC;QACD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;YAEpE,OAAO,MAAM,IAAI,EAAE,CAAC;QACtB,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,IAAI,KAAK,YAAY,gBAAK,CAAC,UAAU,IAAI,KAAK,CAAC,aAAa,CAAC,2BAA2B,CAAC,EAAE,CAAC;gBAC1F,MAAM,SAAS,GAAqB,IAAI,gBAAK,CAAC,UAAU,CACtD,mDAAmD,CACpD,CAAC;gBAEF,SAAS,CAAC,aAAa,CAAC,2BAA2B,CAAC,CAAC;gBAErD,MAAM,SAAS,CAAC;YAClB,CAAC;YAED,IAAI,KAAK,YAAY,KAAK,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC1D,MAAM,KAAK,CAAC;YACd,CAAC;YAED,MAAM,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IAEO,SAAS,CAAC,KAA6C;QAC7D,MAAM,WAAW,GAA0B,MAAM,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC;QACnF,MAAM,SAAS,GAAY,WAAW,CAAC,SAAS,EAAE,KAAK,CAAC;QACxD,MAAM,SAAS,GAAY,WAAW,CAAC,SAAS,EAAE,KAAK,CAAC;QACxD,MAAM,cAAc,GAAY,WAAW,CAAC,cAAc,EAAE,KAAK,CAAC;QAElE,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;eAC3D,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;YACzD,MAAM,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACxC,CAAC;QAED,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,cAAc,EAAE,cAAc,EAAE,CAAC,CAAC;IACvG,CAAC;IAEO,KAAK,CAAC,YAAY;QACxB,MAAM,MAAM,GAAmB,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,OAAO,CACtE,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,kBAAkB,EAAE,EACzD,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,kBAAkB,EAAE,CAChD,CAAC;QACF,MAAM,GAAG,GAAY,MAAM,CAAC,SAAS,CAAC;QAEtC,IAAI,CAAC,CAAC,GAAG,YAAY,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;YAC9D,MAAM,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACxC,CAAC;QAED,OAAO,GAAG,CAAC;IACb,CAAC;IAEO,GAAG,CAAC,SAAiD;QAC3D,OAAO,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;YAChD,0CAA0C,EAAE,SAAS,CAAC,SAAS,EAAE,SAAS,CAAC,SAAS,EAAE,SAAS,CAAC,cAAc;SAC/G,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACpB,CAAC;IAEO,QAAQ,CAAC,KAAc,EAAE,OAAe;QAC9C,OAAO,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC;IACtF,CAAC;IAEO,IAAI,CAAC,KAAc;QACzB,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,sCAAsC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzF,CAAC;IAEO,WAAW,CAAC,KAAc,EAAE,YAA+B;QACjE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YAChD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,IAAI,GAAkB,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAEnD,OAAO,IAAI,CAAC,MAAM,KAAK,YAAY,CAAC,MAAM,IAAI,YAAY,CAAC,KAAK,CAAC,CAAC,GAAW,EAAW,EAAE;YACxF,MAAM,UAAU,GAAmC,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAE/F,OAAO,CAAC,CAAC,UAAU,IAAI,OAAO,IAAI,UAAU,CAAC;QAC/C,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,OAAO,CAAC,OAAsB;QACpC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,kBAAkB,EAAE,CAAC;IAC3E,CAAC;IAEO,UAAU;QAChB,OAAO,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,UAAU,CAC3C,iCAAiC,CAClC,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,IAAY;QACxB,MAAM,KAAK,GAAU,IAAI,KAAK,CAAC,kCAAkC,IAAI,EAAE,CAAC,CAAC;QAEzE,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAE5B,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,SAAS;QACf,MAAM,IAAI,GAAmB,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,qCAAqC,EAAE,CAAC;QACpG,MAAM,aAAa,GAAmB,EAAE,QAAQ,EAAE,QAAQ,EAAE,oBAAoB,EAAE,KAAK;YACrF,QAAQ,EAAE,CAAE,WAAW,EAAE,UAAU,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,YAAY,CAAE;YAC5F,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,iFAA6C,CAAC,EAAE;gBAC7G,gBAAgB,EAAE,EAAE,QAAQ,EAAE,CAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAE,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,gBAAgB,EAAE;gBACzG,iBAAiB,EAAE,EAAE,QAAQ,EAAE,CAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAE,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,gBAAgB,EAAE;gBAC1G,UAAU,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC;QAC3D,MAAM,OAAO,GAAmB,EAAE,QAAQ,EAAE,QAAQ,EAAE,oBAAoB,EAAE,KAAK;YAC/E,QAAQ,EAAE,CAAE,aAAa,EAAE,UAAU,EAAE,YAAY,EAAE,oBAAoB,CAAE;YAC3E,UAAU,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,2EAAuC,CAAC,EAAE;gBACzG,UAAU,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,EAAE;gBAClD,kBAAkB,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC;QAClE,MAAM,UAAU,GAAmB;YACjC,GAAG,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,gBAAgB,EAAE;YACtD,eAAe,EAAE,EAAE,IAAI,EAAE,CAAE,0CAA0C,CAAE,EAAE;YACzE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI;YACtD,WAAW,EAAE,EAAE,IAAI,EAAE,CAAE,eAAe,EAAE,aAAa,EAAE,WAAW,CAAE,EAAE,EAAE,aAAa,EAAE,IAAI;YAC3F,uBAAuB,EAAE;gBACvB,QAAQ,EAAE,CAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAE,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,gBAAgB;aACpF;YACD,cAAc,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,KAAK,EAAE,aAAa,EAAE;YAC5F,QAAQ,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE;YAChF,WAAW,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,EAAE;SACnD,CAAC;QAEF,OAAO,EAAE,WAAW,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,oBAAoB,EAAE,KAAK;gBACrE,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,UAAU,EAAE,UAAU,EAAE,EAAE,CAAC;IAClE,CAAC;CACF;AA3YD,0FA2YC"}

package/build/_services/core/memory-guard.service.d.ts CHANGED Viewed

@@ -39,10 +39,21 @@ export interface DyNTS_MemoryGuard_Event {
     rssMb: number;
     /** External (C++ / Buffer) memória MB-ban. */
     externalMb: number;
+    /**
+     * RSS a FIZIKAI RAM (`os.totalmem()`) százalékában (egészre kerekítve) — BFR-AM-016.
+     * Akkor is kitöltjük, ha az RSS-küszöb ki van kapcsolva: a `heapPct` mellett ez mutatja meg, hogy a
+     * folyamat memóriája a JS-heapen KÍVÜL (TypedArray/Buffer) mekkora — enélkül egy Float32-poolos app
+     * 1 %-os heapet mutat 6 GB-os lábnyom mellett.
+     */
+    rssPct: number;
     /** A közelmúlt GC-hányada (GC-ben töltött idő / poll-ablak; 0..1) — a mark-compact-thrash / OOM-precursor jelzője. */
     gcFraction: number;
-    /** Mi váltotta ki az esemény-szintet: a heap-% küszöb, a GC-thrash, vagy mindkettő. */
-    trigger: 'heap' | 'gc' | 'heap+gc' | 'recovery';
+    /**
+     * Mi váltotta ki az esemény-szintet. A jelek FIX sorrendben fűződnek össze (`heap` → `gc` → `rss`), így a
+     * korábbi `'heap'` / `'gc'` / `'heap+gc'` értékek bájtra VÁLTOZATLANOK maradnak; az `rss`-es kombinációk
+     * a BFR-AM-016-tal jöttek be (a heap-% vak a TypedArray-poolra).
+     */
+    trigger: 'heap' | 'gc' | 'rss' | 'heap+gc' | 'heap+rss' | 'gc+rss' | 'heap+gc+rss' | 'recovery';
     /** Esemény időbélyege (ISO). */
     at: string;
 }
@@ -58,6 +69,10 @@ export interface DyNTS_MemoryGuard_Config {
     recoveryMargin?: number;
     /** Megőrzött események max száma (ring-buffer). Default: 100. */
     maxHistoryCount?: number;
+    /** RSS warning-küszöb a fizikai RAM %-ában (BFR-AM-016). `0` = kikapcsolva. Default: a global-settings értéke. */
+    rssWarningThresholdPct?: number;
+    /** RSS critical-küszöb a fizikai RAM %-ában (BFR-AM-016). `0` = kikapcsolva. Default: a global-settings értéke. */
+    rssCriticalThresholdPct?: number;
     /** GC-hányad-küszöb a `warning`-hoz (0..1). Default: 0.40. */
     gcWarningFraction?: number;
     /** GC-hányad-küszöb a `critical`-hoz (0..1). Default: 0.60. */
@@ -98,6 +113,9 @@ export declare class DyNTS_MemoryGuard extends DyNTS_SingletonServiceBase {
     private readonly history;
     private peakHeapPct;
     private peakRssMb;
+    /** RSS-küszöbök a fizikai RAM %-ában (BFR-AM-016). `0` = az ág nem szól bele a döntésbe. */
+    private rssWarnPct;
+    private rssCritPct;
     private gcObserver;
     private gcEvents;
     private criticalStreak;
@@ -130,7 +148,28 @@ export declare class DyNTS_MemoryGuard extends DyNTS_SingletonServiceBase {
         heapPct: number;
         rssMb: number;
         gcFraction: number;
+        /** RSS a fizikai RAM %-ában (BFR-AM-016) — mindig kitöltve, akkor is, ha az RSS-küszöb kikapcsolt. */
+        rssPct: number;
+        /**
+         * External (ArrayBuffer/Buffer) memória MB-ban (BFR-AM-016). **Eddig csak az ESEMÉNYBEN volt benne, a
+         * `pressure()`-ben nem** — így a fogyasztó (pl. egy health-endpoint) kénytelen volt újra mérni a saját
+         * `process.memoryUsage()`-ével. TypedArray-nehéz appnál ez a mező mondja meg, hol van valójában a memória.
+         */
+        externalMb: number;
     };
+    /**
+     * RSS a fizikai RAM (`os.totalmem()`) százalékában, egészre kerekítve (BFR-AM-016).
+     * Értelmezhetetlen `totalmem`/`rss` → **0**: a hívó küszöb-logikája a 0-val NEM riaszt, ami a helyes
+     * default — egy hibás mérés SOHA ne váltson ki graceful-exitet.
+     */
+    private static rssPctOfPhysical;
+    /**
+     * A fizikai RAM byte-ban. **Külön metódus a spec-mockoláshoz** — ugyanaz a seam-minta, mint a
+     * `getHeapLimitBytes()`-nál. (Az `os.totalmem` újabb Node-okon nem írható/spy-olható közvetlenül.)
+     */
+    private static getPhysicalMemoryBytes;
+    /** Küszöb-normalizálás: nem-szám / negatív / 100 feletti → `0` (= az ág kikapcsolva). */
+    private static normalizePct;
     /** `true`, ha a NEHÉZ műveleteket le kell shed-elni (critical nyomás) — a fogyasztó load-shed gate-jének. */
     shouldShedLoad(): boolean;
     /** A GC-hányad az utolsó `pollIntervalMs` ablakban (GC-ms / ablak-ms; clamp [0..1]). Nincs GC-observer → 0. */

package/build/_services/core/memory-guard.service.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"memory-guard.service.d.ts","sourceRoot":"","sources":["../../../src/_services/core/memory-guard.service.ts"],"names":[],"mappings":"~~AAMA~~,OAAO,EAAE,0BAA0B,EAAE,MAAM,gCAAgC,CAAC;AAG5E;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,iEAAiE;AACjE,MAAM,WAAW,uBAAuB;IACtC,kFAAkF;IAClF,KAAK,EAAE,SAAS,GAAG,UAAU,GAAG,WAAW,CAAC;IAC5C,gEAAgE;IAChE,UAAU,EAAE,MAAM,CAAC;IACnB,gGAAgG;IAChG,WAAW,EAAE,MAAM,CAAC;IACpB,yDAAyD;IACzD,OAAO,EAAE,MAAM,CAAC;IAChB,0EAA0E;IAC1E,KAAK,EAAE,MAAM,CAAC;IACd,8CAA8C;IAC9C,UAAU,EAAE,MAAM,CAAC;IACnB,sHAAsH;IACtH,UAAU,EAAE,MAAM,CAAC;IACnB~~,uFAAuF~~;~~IACvF~~,OAAO,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,UAAU,CAAC;~~IAChD~~,gCAAgC;IAChC,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,wFAAwF;AACxF,MAAM,WAAW,wBAAwB;IACvC,+CAA+C;IAC/C,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,wDAAwD;IACxD,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,yDAAyD;IACzD,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,wFAAwF;IACxF,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,iEAAiE;IACjE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,8DAA8D;IAC9D,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,+DAA+D;IAC/D,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,+GAA+G;IAC/G,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,2EAA2E;IAC3E,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAClC,iEAAiE;IACjE,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,2CAA2C;IAC3C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,sHAAsH;IACtH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,8EAA8E;IAC9E,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,uBAAuB,KAAK,IAAI,CAAC;CACvD;AAED,KAAK,uBAAuB,GAAG,QAAQ,GAAG,SAAS,GAAG,UAAU,CAAC;AAIjE,qBAAa,iBAAkB,SAAQ,0BAA0B;IAE/D,MAAM,CAAC,WAAW,IAAI,iBAAiB;IAIvC,OAAO,CAAC,KAAK,CAA+C;IAC5D,OAAO,CAAC,oBAAoB,CAAkB;IAC9C,OAAO,CAAC,KAAK,CAAqC;IAGlD,OAAO,CAAC,cAAc,CAAiB;IACvC,OAAO,CAAC,OAAO,CAAc;IAC7B,OAAO,CAAC,OAAO,CAAc;IAC7B,OAAO,CAAC,cAAc,CAAc;IACpC,OAAO,CAAC,eAAe,CAAe;IACtC,OAAO,CAAC,cAAc,CAAgB;IACtC,OAAO,CAAC,cAAc,CAAgB;IACtC,OAAO,CAAC,qBAAqB,CAAkB;IAC/C,OAAO,CAAC,sBAAsB,CAAa;IAC3C,OAAO,CAAC,QAAQ,CAAe;IAC/B,OAAO,CAAC,WAAW,CAAiB;IACpC,sFAAsF;IACtF,OAAO,CAAC,WAAW,CAAa;IAChC,OAAO,CAAC,UAAU,CAAC,CAA2C;IAE9D,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAiC;IACzD,OAAO,CAAC,WAAW,CAAa;IAChC,OAAO,CAAC,SAAS,CAAa;~~IAG9B~~,OAAO,CAAC,UAAU,CAAoC;IACtD,OAAO,CAAC,QAAQ,CAAoC;IACpD,OAAO,CAAC,cAAc,CAAa;IAEnC,OAAO,CAAC,YAAY,CAAyC;IAE7D,SAAS;IAIT;;;;;OAKG;IACH,OAAO,CAAC,MAAM,CAAC,EAAE,wBAAwB,GAAG,IAAI;~~IAsDhD~~,yFAAyF;IACzF,OAAO,CAAC,iBAAiB;IAIzB;;;OAGG;IACH,OAAO,CAAC,IAAI;~~IAsFZ~~,iFAAiF;IACjF,OAAO,CAAC,WAAW;~~IAkDnB~~;;;OAGG;IACH,QAAQ,IAAI;QACV,KAAK,EAAE,IAAI,GAAG,SAAS,GAAG,UAAU,CAAC;QACrC,UAAU,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;~~KAC3F~~;~~IAmBH~~,6GAA6G;IAC7G,cAAc,IAAI,OAAO;IAIzB,+GAA+G;IAC/G,OAAO,CAAC,gBAAgB;IAUxB,mHAAmH;IACnH,OAAO,CAAC,iBAAiB;IAgBzB;;;;OAIG;IACH,OAAO,CAAC,oBAAoB;IAiC5B,oHAAoH;IACpH,OAAO,CAAC,YAAY;~~IAwBpB~~,qEAAqE;IACrE,UAAU,IAAI,uBAAuB,EAAE;IAIvC,+EAA+E;IAC/E,SAAS,IAAI;QACX,SAAS,EAAE,OAAO,CAAC;QACnB,KAAK,EAAE,uBAAuB,CAAC;QAC/B,WAAW,EAAE,MAAM,CAAC;QACpB,SAAS,EAAE,MAAM,CAAC;QAClB,UAAU,EAAE,MAAM,CAAC;KAClB;IAUH,kCAAkC;IAClC,WAAW,IAAI,OAAO;IAItB;;;OAGG;IACH,mBAAmB,IAAI,IAAI;CA6B5B"}
1	+ {"version":3,"file":"memory-guard.service.d.ts","sourceRoot":"","sources":["../../../src/_services/core/memory-guard.service.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,0BAA0B,EAAE,MAAM,gCAAgC,CAAC;AAG5E;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,iEAAiE;AACjE,MAAM,WAAW,uBAAuB;IACtC,kFAAkF;IAClF,KAAK,EAAE,SAAS,GAAG,UAAU,GAAG,WAAW,CAAC;IAC5C,gEAAgE;IAChE,UAAU,EAAE,MAAM,CAAC;IACnB,gGAAgG;IAChG,WAAW,EAAE,MAAM,CAAC;IACpB,yDAAyD;IACzD,OAAO,EAAE,MAAM,CAAC;IAChB,0EAA0E;IAC1E,KAAK,EAAE,MAAM,CAAC;IACd,8CAA8C;IAC9C,UAAU,EAAE,MAAM,CAAC;IACnB;;;;;OAKG;IACH,MAAM,EAAE,MAAM,CAAC;IACf,sHAAsH;IACtH,UAAU,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,OAAO,EAAE,MAAM,GAAG,IAAI,GAAG,KAAK,GAAG,SAAS,GAAG,UAAU,GAAG,QAAQ,GAAG,aAAa,GAAG,UAAU,CAAC;IAChG,gCAAgC;IAChC,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,wFAAwF;AACxF,MAAM,WAAW,wBAAwB;IACvC,+CAA+C;IAC/C,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,wDAAwD;IACxD,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,yDAAyD;IACzD,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,wFAAwF;IACxF,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,iEAAiE;IACjE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,kHAAkH;IAClH,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,mHAAmH;IACnH,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,8DAA8D;IAC9D,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,+DAA+D;IAC/D,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,+GAA+G;IAC/G,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,2EAA2E;IAC3E,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAClC,iEAAiE;IACjE,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,2CAA2C;IAC3C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,sHAAsH;IACtH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,8EAA8E;IAC9E,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,uBAAuB,KAAK,IAAI,CAAC;CACvD;AAED,KAAK,uBAAuB,GAAG,QAAQ,GAAG,SAAS,GAAG,UAAU,CAAC;AAIjE,qBAAa,iBAAkB,SAAQ,0BAA0B;IAE/D,MAAM,CAAC,WAAW,IAAI,iBAAiB;IAIvC,OAAO,CAAC,KAAK,CAA+C;IAC5D,OAAO,CAAC,oBAAoB,CAAkB;IAC9C,OAAO,CAAC,KAAK,CAAqC;IAGlD,OAAO,CAAC,cAAc,CAAiB;IACvC,OAAO,CAAC,OAAO,CAAc;IAC7B,OAAO,CAAC,OAAO,CAAc;IAC7B,OAAO,CAAC,cAAc,CAAc;IACpC,OAAO,CAAC,eAAe,CAAe;IACtC,OAAO,CAAC,cAAc,CAAgB;IACtC,OAAO,CAAC,cAAc,CAAgB;IACtC,OAAO,CAAC,qBAAqB,CAAkB;IAC/C,OAAO,CAAC,sBAAsB,CAAa;IAC3C,OAAO,CAAC,QAAQ,CAAe;IAC/B,OAAO,CAAC,WAAW,CAAiB;IACpC,sFAAsF;IACtF,OAAO,CAAC,WAAW,CAAa;IAChC,OAAO,CAAC,UAAU,CAAC,CAA2C;IAE9D,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAiC;IACzD,OAAO,CAAC,WAAW,CAAa;IAChC,OAAO,CAAC,SAAS,CAAa;IAC9B,4FAA4F;IAC5F,OAAO,CAAC,UAAU,CAAa;IAC/B,OAAO,CAAC,UAAU,CAAa;IAG/B,OAAO,CAAC,UAAU,CAAoC;IACtD,OAAO,CAAC,QAAQ,CAAoC;IACpD,OAAO,CAAC,cAAc,CAAa;IAEnC,OAAO,CAAC,YAAY,CAAyC;IAE7D,SAAS;IAIT;;;;;OAKG;IACH,OAAO,CAAC,MAAM,CAAC,EAAE,wBAAwB,GAAG,IAAI;IA6DhD,yFAAyF;IACzF,OAAO,CAAC,iBAAiB;IAIzB;;;OAGG;IACH,OAAO,CAAC,IAAI;IAuGZ,iFAAiF;IACjF,OAAO,CAAC,WAAW;IAqDnB;;;OAGG;IACH,QAAQ,IAAI;QACV,KAAK,EAAE,IAAI,GAAG,SAAS,GAAG,UAAU,CAAC;QACrC,UAAU,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAC5F,sGAAsG;QACtG,MAAM,EAAE,MAAM,CAAC;QACf;;;;WAIG;QACH,UAAU,EAAE,MAAM,CAAC;KAClB;IA0BH;;;;OAIG;IACH,OAAO,CAAC,MAAM,CAAC,gBAAgB;IAS/B;;;OAGG;IACH,OAAO,CAAC,MAAM,CAAC,sBAAsB;IAIrC,yFAAyF;IACzF,OAAO,CAAC,MAAM,CAAC,YAAY;IAQ3B,6GAA6G;IAC7G,cAAc,IAAI,OAAO;IAIzB,+GAA+G;IAC/G,OAAO,CAAC,gBAAgB;IAUxB,mHAAmH;IACnH,OAAO,CAAC,iBAAiB;IAgBzB;;;;OAIG;IACH,OAAO,CAAC,oBAAoB;IAiC5B,oHAAoH;IACpH,OAAO,CAAC,YAAY;IA+BpB,qEAAqE;IACrE,UAAU,IAAI,uBAAuB,EAAE;IAIvC,+EAA+E;IAC/E,SAAS,IAAI;QACX,SAAS,EAAE,OAAO,CAAC;QACnB,KAAK,EAAE,uBAAuB,CAAC;QAC/B,WAAW,EAAE,MAAM,CAAC;QACpB,SAAS,EAAE,MAAM,CAAC;QAClB,UAAU,EAAE,MAAM,CAAC;KAClB;IAUH,kCAAkC;IAClC,WAAW,IAAI,OAAO;IAItB;;;OAGG;IACH,mBAAmB,IAAI,IAAI;CA6B5B"}

package/build/_services/core/memory-guard.service.js CHANGED Viewed

@@ -2,6 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.DyNTS_MemoryGuard = void 0;
 const tslib_1 = require("tslib");
+const os = tslib_1.__importStar(require("os"));
 const v8 = tslib_1.__importStar(require("v8"));
 const perf_hooks_1 = require("perf_hooks");
 const fsm_dynamo_1 = require("@futdevpro/fsm-dynamo");
@@ -34,6 +35,9 @@ class DyNTS_MemoryGuard extends singleton_service_base_1.DyNTS_SingletonServiceB
     history = [];
     peakHeapPct = 0;
     peakRssMb = 0;
+    /** RSS-küszöbök a fizikai RAM %-ában (BFR-AM-016). `0` = az ág nem szól bele a döntésbe. */
+    rssWarnPct = 0;
+    rssCritPct = 0;
     // GC-thrash követés (perf_hooks 'gc') — a GC-ben töltött ms gördülő ablaka + a critical-streak számláló.
     gcObserver = null;
     gcEvents = [];
@@ -62,6 +66,10 @@ class DyNTS_MemoryGuard extends singleton_service_base_1.DyNTS_SingletonServiceB
             this.maxHistoryCount = config?.maxHistoryCount ?? g.maxHistoryCount ?? 100;
             this.gcWarnFraction = config?.gcWarningFraction ?? g.gcWarningFraction ?? 0.40;
             this.gcCritFraction = config?.gcCriticalFraction ?? g.gcCriticalFraction ?? 0.60;
+            // BFR-AM-016 — RSS-ág. Default 0 (kikapcsolva): gép-függő küszöb, és a meglévő appok viselkedése
+            // maradjon bitre változatlan. A negatív/nem-szám érték is 0-ra esik (= kikapcsolva).
+            this.rssWarnPct = DyNTS_MemoryGuard.normalizePct(config?.rssWarningThresholdPct ?? g.rssWarningThresholdPct);
+            this.rssCritPct = DyNTS_MemoryGuard.normalizePct(config?.rssCriticalThresholdPct ?? g.rssCriticalThresholdPct);
             this.isCriticalExitEnabled = config?.exitOnSustainedCritical ?? g.exitOnSustainedCritical ?? false;
             this.sustainedCriticalPolls = config?.sustainedCriticalPolls ?? g.sustainedCriticalPolls ?? 3;
             this.exitCode = config?.exitCode ?? g.exitCode ?? 137;
@@ -86,6 +94,9 @@ class DyNTS_MemoryGuard extends singleton_service_base_1.DyNTS_SingletonServiceB
                 `warn ${this.warnPct}%/${Math.round(this.gcWarnFraction * 100)}%GC, ` +
                 `crit ${this.critPct}%/${Math.round(this.gcCritFraction * 100)}%GC (heap limit ` +
                 `${Math.round(this.getHeapLimitBytes() / BYTES_PER_MB)}MB)` +
+                (this.rssWarnPct > 0 || this.rssCritPct > 0
+                    ? `, RSS warn ${this.rssWarnPct}%/crit ${this.rssCritPct}% of ${Math.round(os.totalmem() / BYTES_PER_MB)}MB physical`
+                    : '') +
                 (this.isCriticalExitEnabled ? `, graceful-exit@${this.sustainedCriticalPolls} critical polls (boot-grace ${this.bootGraceMs}ms)` : ''));
         }
         catch (err) {
@@ -118,21 +129,30 @@ class DyNTS_MemoryGuard extends singleton_service_base_1.DyNTS_SingletonServiceB
             if (rssMb > this.peakRssMb) {
                 this.peakRssMb = rssMb;
             }
-            // A szintet a heap-% ÉS a GC-hányad közül a ROSSZABB dönti el (a GC-thrash a %-küszöb ALATT is OOM-ot jelez).
+            // A szintet a heap-% ÉS a GC-hányad ÉS az RSS-% közül a ROSSZABB dönti el (a GC-thrash a %-küszöb ALATT
+            // is OOM-ot jelez; az RSS-ág pedig a heapen KÍVÜLI memóriát fogja meg — BFR-AM-016).
+            const rssPct = DyNTS_MemoryGuard.rssPctOfPhysical(mu.rss);
             const heapCrit = pct >= this.critPct;
             const gcCrit = gcFraction >= this.gcCritFraction;
+            // A KIKAPCSOLT (0) küszöb sosem riaszt — enélkül minden app azonnal `critical`-be esne (0 >= 0).
+            const rssCrit = this.rssCritPct > 0 && rssPct >= this.rssCritPct;
             const heapWarn = pct >= this.warnPct;
             const gcWarn = gcFraction >= this.gcWarnFraction;
+            const rssWarn = this.rssWarnPct > 0 && rssPct >= this.rssWarnPct;
             // Hiszterézis-állapotgép — esemény CSAK állapot-váltáskor.
             const prev = this.state;
             let next = prev;
-            if (heapCrit || gcCrit) {
+            if (heapCrit || gcCrit || rssCrit) {
                 next = 'critical';
             }
-            else if ((heapWarn || gcWarn) && prev === 'normal') {
+            else if ((heapWarn || gcWarn || rssWarn) && prev === 'normal') {
                 next = 'warning';
             }
-            else if (pct <= this.warnPct - this.recoveryMargin && gcFraction < this.gcWarnFraction) {
+            else if (pct <= this.warnPct - this.recoveryMargin
+                && gcFraction < this.gcWarnFraction
+                // A helyreállás MINDHÁROM ágon teljesüljön — különben egy tartósan magas RSS mellett a guard
+                // `recovered`-et jelentene, és a következő valódi nyomás ismét `warning`-ot emitálna (esemény-pingpong).
+                && (this.rssWarnPct <= 0 || rssPct <= this.rssWarnPct - this.recoveryMargin)) {
                 next = 'normal';
             }
             // Egyébként marad a jelenlegi állapot (hiszterézis-sáv) — nincs re-emit.
@@ -154,9 +174,22 @@ class DyNTS_MemoryGuard extends singleton_service_base_1.DyNTS_SingletonServiceB
                 return;
             }
             this.state = next;
-            const trigger = next === 'normal' ? 'recovery'
-                : (heapCrit || heapWarn) && (gcCrit || gcWarn) ? 'heap+gc'
-                    : (gcCrit || gcWarn) ? 'gc' : 'heap';
+            // A kiváltó jelek FIX sorrendben (`heap` → `gc` → `rss`). A korábbi 'heap' / 'gc' / 'heap+gc' értékek
+            // így bájtra változatlanok maradnak; üres halmaz (elvileg nem fordulhat elő nem-normal ágon) → 'heap',
+            // hogy a mező sose legyen üres string (`core-error-debuggable`).
+            const signals = [];
+            if (heapCrit || heapWarn) {
+                signals.push('heap');
+            }
+            if (gcCrit || gcWarn) {
+                signals.push('gc');
+            }
+            if (rssCrit || rssWarn) {
+                signals.push('rss');
+            }
+            const trigger = next === 'normal'
+                ? 'recovery'
+                : (signals.join('+') || 'heap');
             const event = {
                 level: next === 'normal' ? 'recovered' : next,
                 heapUsedMb: Math.round(mu.heapUsed / BYTES_PER_MB),
@@ -164,6 +197,7 @@ class DyNTS_MemoryGuard extends singleton_service_base_1.DyNTS_SingletonServiceB
                 heapPct: Math.round(pct),
                 rssMb: Math.round(rssMb),
                 externalMb: Math.round((mu.external ?? 0) / BYTES_PER_MB),
+                rssPct: rssPct,
                 gcFraction: Math.round(gcFraction * 100) / 100,
                 trigger: trigger,
                 at: new Date().toISOString(),
@@ -181,7 +215,10 @@ class DyNTS_MemoryGuard extends singleton_service_base_1.DyNTS_SingletonServiceB
         while (this.history.length > this.maxHistoryCount) {
             this.history.shift();
         }
-        const summary = `heap ${event.heapPct}% (${event.heapUsedMb}/${event.heapLimitMb}MB), rss ${event.rssMb}MB, ` +
+        // Az RSS-% CSAK akkor kerül a szövegbe, ha az ág aktív — különben a meglévő appok log-sorai
+        // bájtra változatlanok maradnak (a log-illesztő monitorok ne törjenek el egy opt-in feature-től).
+        const rssSuffix = (this.rssWarnPct > 0 || this.rssCritPct > 0) ? ` (${event.rssPct}% of physical)` : '';
+        const summary = `heap ${event.heapPct}% (${event.heapUsedMb}/${event.heapLimitMb}MB), rss ${event.rssMb}MB${rssSuffix}, ` +
             `GC ${Math.round(event.gcFraction * 100)}% [${event.trigger}]`;
         if (event.level === 'recovered') {
             fsm_dynamo_1.DyFM_Log.success(`[DyNTS_MemoryGuard] RECOVERED — ${summary}`);
@@ -225,17 +262,50 @@ class DyNTS_MemoryGuard extends singleton_service_base_1.DyNTS_SingletonServiceB
         const mu = process.memoryUsage();
         const pct = limitBytes > 0 ? (mu.heapUsed / limitBytes) * 100 : 0;
         const gcFraction = this.recentGcFraction();
-        const level = (pct >= this.critPct || gcFraction >= this.gcCritFraction) ? 'critical'
-            : (pct >= this.warnPct || gcFraction >= this.gcWarnFraction) ? 'warning' : 'ok';
+        const rssPct = DyNTS_MemoryGuard.rssPctOfPhysical(mu.rss);
+        // Ugyanaz a „rosszabb ág dönt" szabály, mint a `poll()`-ban — a kettő NEM térhet el, különben a
+        // load-shed (`shouldShedLoad`) mást gondolna a nyomásról, mint a riasztás.
+        const level = (pct >= this.critPct || gcFraction >= this.gcCritFraction || (this.rssCritPct > 0 && rssPct >= this.rssCritPct))
+            ? 'critical'
+            : (pct >= this.warnPct || gcFraction >= this.gcWarnFraction || (this.rssWarnPct > 0 && rssPct >= this.rssWarnPct))
+                ? 'warning' : 'ok';
         return {
             level: level,
             heapUsedMb: Math.round(mu.heapUsed / BYTES_PER_MB),
             heapLimitMb: Math.round(limitBytes / BYTES_PER_MB),
             heapPct: Math.round(pct),
             rssMb: Math.round(mu.rss / BYTES_PER_MB),
+            rssPct: rssPct,
+            externalMb: Math.round((mu.external ?? 0) / BYTES_PER_MB),
             gcFraction: Math.round(gcFraction * 100) / 100,
         };
     }
+    /**
+     * RSS a fizikai RAM (`os.totalmem()`) százalékában, egészre kerekítve (BFR-AM-016).
+     * Értelmezhetetlen `totalmem`/`rss` → **0**: a hívó küszöb-logikája a 0-val NEM riaszt, ami a helyes
+     * default — egy hibás mérés SOHA ne váltson ki graceful-exitet.
+     */
+    static rssPctOfPhysical(rssBytes) {
+        const total = DyNTS_MemoryGuard.getPhysicalMemoryBytes();
+        if (!Number.isFinite(total) || total <= 0 || !Number.isFinite(rssBytes) || rssBytes <= 0) {
+            return 0;
+        }
+        return Math.round((rssBytes / total) * 100);
+    }
+    /**
+     * A fizikai RAM byte-ban. **Külön metódus a spec-mockoláshoz** — ugyanaz a seam-minta, mint a
+     * `getHeapLimitBytes()`-nál. (Az `os.totalmem` újabb Node-okon nem írható/spy-olható közvetlenül.)
+     */
+    static getPhysicalMemoryBytes() {
+        return os.totalmem();
+    }
+    /** Küszöb-normalizálás: nem-szám / negatív / 100 feletti → `0` (= az ág kikapcsolva). */
+    static normalizePct(value) {
+        if (typeof value !== 'number' || !Number.isFinite(value) || value <= 0 || value > 100) {
+            return 0;
+        }
+        return Math.floor(value);
+    }
     /** `true`, ha a NEHÉZ műveleteket le kell shed-elni (critical nyomás) — a fogyasztó load-shed gate-jének. */
     shouldShedLoad() {
         return this.isInstallationActive && this.pressure().level === 'critical';
@@ -301,8 +371,15 @@ class DyNTS_MemoryGuard extends singleton_service_base_1.DyNTS_SingletonServiceB
     }
     /** Tartós-critical graceful-exit: végső error-entry + tiszta exit (a wrapper újraindít a kriptikus 134 helyett). */
     gracefulExit(set) {
+        // BFR-AM-016: ha az RSS-ág aktív, a kilépés OKA lehet a heapen KÍVÜLI memória — ilyenkor egy heap-only
+        // üzenet („graceful exit, heap 1%") értelmezhetetlen lenne az üzemeltetőnek. A memória-tényt tehát MINDIG
+        // odaírjuk, amikor az ág be van kapcsolva (`core-error-debuggable`).
+        const rssPct = DyNTS_MemoryGuard.rssPctOfPhysical(set.mu.rss);
+        const rssPart = (this.rssWarnPct > 0 || this.rssCritPct > 0)
+            ? `, rss ${Math.round(set.mu.rss / BYTES_PER_MB)}MB (${rssPct}% of physical, crit ${this.rssCritPct}%)`
+            : '';
         const summary = `heap ${Math.round(set.pct)}% (${Math.round(set.mu.heapUsed / BYTES_PER_MB)}/` +
-            `${Math.round(set.limitBytes / BYTES_PER_MB)}MB), GC ${Math.round(set.gcFraction * 100)}%`;
+            `${Math.round(set.limitBytes / BYTES_PER_MB)}MB)${rssPart}, GC ${Math.round(set.gcFraction * 100)}%`;
         fsm_dynamo_1.DyFM_Log.H_error(`[DyNTS_MemoryGuard] SUSTAINED CRITICAL — ${summary} — graceful exit(${this.exitCode}) a kriptikus OOM (exit 134) helyett.`);
         try {
             global_service_1.DyNTS_GlobalService.globalErrorHandler?.(new fsm_dynamo_1.DyFM_Error({