@futdevpro/nts-dynamo 1.15.68 → 1.15.71

package/build/_services/server/app.server.js

@@ -1,1324 +1,1324 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.DyNTS_App = void 0;
-const tslib_1 = require("tslib");
-const Mongoose = require("mongoose");
-const Express = require("express");
-/* import Mongoose from 'mongoose';
-import Express from 'express'; */
-const BodyParser = tslib_1.__importStar(require("body-parser"));
-const FileSystem = tslib_1.__importStar(require("fs"));
-const Https = tslib_1.__importStar(require("https"));
-const Path = tslib_1.__importStar(require("path"));
-/* import { version } from '../../../package.json'; */
-const fsm_dynamo_1 = require("@futdevpro/fsm-dynamo");
-const default_fallback_cache_max_age_const_1 = require("../../_collections/default-fallback-cache-max-age.const");
-const default_not_found_page_const_1 = require("../../_collections/default-not-found-page.const");
-const global_settings_const_1 = require("../../_collections/global-settings.const");
-const mongo_reconnect_guard_util_1 = require("../../_collections/mongo-reconnect-guard.util");
-const route_security_enum_1 = require("../../_enums/route-security.enum");
-const app_system_controls_control_model_1 = require("../../_models/control-models/app-system-controls.control-model");
-const http_settings_control_model_1 = require("../../_models/control-models/http-settings.control-model");
-const singleton_service_1 = require("../base/singleton.service");
-const global_service_1 = require("../core/global.service");
-const memory_guard_service_1 = require("../core/memory-guard.service");
-/**
- *
-  * function MyDecorator(config: any) {
-      return function (target: Function) {
-        // attach metadata or modify target
-        target.prototype.myMeta = config;
-      };
-    }
-
-    @MyDecorator({ role: 'admin' })
-    class User {
-      printRole() {
-        console.log((this as any).myMeta.role); // → "admin"
-      }
-    }
-
- */
-/**
- * This will be the MAIN service of our server project,
- * follow the types and type instructions while setting up your project
- *
- * In this service, there are abstract functions that you will need to implement,
- * where you need to set up the main params for your application.
- *
- * (after the example, you can find the list of services you can/should setup)
- *
- * @example
- * export class App extends DyNTS_AppExtended {
- *
- *   ...
- *
- *   // Setting up App params, and preparing project global settings
- *   setupAppParams(): void {
- *     this.params = new DyNTS_AppParams({
- *       name: 'Warbots Server',
- *       title: warbotsTitleLog,
- *       version: version,
- *       dbName: 'warbots',
- *     });
- *
- *     // dynamoNTS_GlobalSettings.logRequestsContent = false;
- *   }
- *
- *   ...
- *
- *   // Setting up DBServices
- *   setGlobalServiceCollection(): void {
- *     DyNTS_GlobalService.setServices({
- *       authService: AuthService.getInstance(),
- *       emailServiceCollection: EmailServiceCollectionService.getInstance(),
- *       dbModels: [
- *         userModelParams,
- *         userDataModelParams,
- *         userOptionsModelParams,
- *         userStatisticsModelParams,
- *         userAchievementsModelParams,
- *         userNotificationsModelParams,
- *
- *         matchStatisticsModelParams,
- *         matchDataModelParams,
-
- *         DyFM_usageSession_dataParams,
- *         DyFM_customData_dataParams,
- *       ]
- *     });
- *   }
- *
- *   ...
- *
- *   // Setting up Routes
- *   setupRoutingModules(): void {
- *     this.httpPort = env.port;
-
- *     this.routingModules = [
- *       new DyNTS_RoutingModule({
- *         route: '/user',
- *         controllers: [
- *           UserController.getInstance(),
- *           UserDataController.getInstance(),
- *           UserOptionsController.getInstance(),
- *           UserStatisticsController.getInstance(),
- *           UserAchievementsController.getInstance(),
- *           UserNotificationsController.getInstance()
- *         ]
- *       }),
- *       new DyNTS_RoutingModule({
- *         route: '/match',
- *         controllers: [
- *           MatchController.getInstance(),
- *           MatchDistributionController.getInstance(),
- *           MatchStatisticsController.getInstance(),
- *         ]
- *       }),
- *       new DyNTS_RoutingModule({
- *         route: '/server',
- *         controllers: [
- *           ServerController.getInstance(),
- *         ]
- *       }),
-
- *       getTestRoutingModule(),
- *       getUsageRoutingModule()
- *     ];
- *   }
- * }
- *
- * //
- * // The Services available
- * //
- * // Authentication Service
- * // A commonly used basic service,
- * // which is necessary fur certain functions (such as registering call issuers)
- * //
- * // This will handle Authentication Token checking/refreshing,
- * // checking issuer's identifier and routeParams,
- * // handling JWT Token, or maybe with OAuth2 or other commonly used security procedures
- * //
- * // You can create one with this Dynamo Object:
- * //
- *
- * @example
- * // follow the instructions on the abstract class (DyNTS_AuthService)
- * export class AuthService extends DyNTS_AuthService {}
- *
- *
- *
- * //
- */
-/**
- * This will be the MAIN service of our server project,
- * follow the types and type instructions while setting up your project
- *
- * In this service, there are abstract functions that you will need to implement,
- * where you need to set up the main params for your application.
- *
- * (after the example, you can find the list of services you can/should setup)
- *
- * You need to setup the following functions:
- * ```ts
- * // this is where you set up the main params for your application
- * getAppParams(): DyNTS_AppParams
- *
- * // this is where you connect your main services
- * getGlobalServiceSettings(): DyNTS_GlobalService_Settings
- *
- * // this is where you set up your ports
- * getPorts(): DyNTS_PortSettings
- *
- * // this is where you set up your routes
- * getRoutingModules(): DyNTS_RoutingModule[]
- *
- *
- *
- * ```
- * optionally you can setup the following functions:
- * ```ts
- * // this is where you set up your certifications
- * getCertificationSettings(): DyNTS_CertificationSettings
- *
- * // this is where you set up additional root services
- * getRootServices(): DyNTS_SingletonService[]
- *
- * // this is where you set up your initial db entries
- * createEntries(): void
- *
- * // this is where you can define post setup processes
- * postProcess(): void
- *
- *
- *
- * ```
- *
- */
-class DyNTS_App extends singleton_service_1.DyNTS_SingletonService {
-    systemControls = new app_system_controls_control_model_1.DyNTS_AppSystemControls();
-    get started() {
-        return this.systemControls.app.started;
-    }
-    get superStarted() {
-        return this.systemControls.app.started;
-    }
-    constructErrors = [];
-    /* removed since cant use version from package.json
-    private readonly _ntsVersion: string = 'v01.07.18';
-    protected get ntsVersion(): string {
-      return this._ntsVersion;
-    } */
-    get serverName() {
-        return this.params.name;
-    }
-    _params;
-    get params() {
-        return this._params;
-    }
-    mongoose = Mongoose;
-    _security;
-    get security() {
-        return this._security;
-    }
-    _portSettings = new http_settings_control_model_1.DyNTS_Http_Settings();
-    get portSettings() {
-        return this._portSettings;
-    }
-    _cert;
-    get cert() {
-        return this._cert;
-    }
-    openExpress;
-    secureExpress;
-    httpsServer;
-    httpServer;
-    globalService;
-    _rootServices = [];
-    _routingModules = [];
-    defaultReadyTimeout = 30 * fsm_dynamo_1.second;
-    defaultErrorUserMsg = `We encountered an unhandled Server Error, ` +
-        `\nplease contact the responsible development team.` +
-        `\n(Internal Server error)`;
-    get logSetup() {
-        return global_settings_const_1.DyNTS_global_settings.log_settings.setup;
-    }
-    get deepLog() {
-        return global_settings_const_1.DyNTS_global_settings.log_settings.deep;
-    }
-    get fnLogs() {
-        return global_settings_const_1.DyNTS_global_settings.log_settings.functions;
-    }
-    debugLog = global_settings_const_1.DyNTS_global_settings.log_settings.server_debug;
-    constructor( /* extended?: boolean */) {
-        super();
-        /* dotenv.config() */
-        process.on('unhandledRejection', (reason_theError, p_passWhatIsThis_maybeThePromise) => {
-            if (reason_theError instanceof fsm_dynamo_1.DyFM_Error) {
-                reason_theError.logSimple('Unhandled Rejection');
-            }
-            else {
-                fsm_dynamo_1.DyFM_Log.H_error('Unhandled Rejection:', p_passWhatIsThis_maybeThePromise?.toString(), '\n    Rejection reason:', reason_theError?.stack?.split('at')?.[0], 
-                /* '\n    ErrorCode:', (reason as any)?.code, */
-                '\n\n    Stack:', reason_theError?.stack?.replaceAll?.('\n    at', '\n      at'));
-            }
-            try {
-                global_service_1.DyNTS_GlobalService.globalErrorHandler?.(new fsm_dynamo_1.DyFM_Error({
-                    errorCode: `${global_settings_const_1.DyNTS_global_settings.systemShortCodeName}|DyNTS-AS0-BASE-UR`,
-                    message: `Unhandled Rejection!: "${reason_theError?.stack?.split('at')?.[0]}"`,
-                    userMessage: this.defaultErrorUserMsg,
-                    addECToUserMsg: true,
-                    error: reason_theError,
-                    additionalContent: {
-                        reason: reason_theError,
-                        rejectedPromise: p_passWhatIsThis_maybeThePromise,
-                    },
-                    systemVersion: global_settings_const_1.DyNTS_global_settings.systemVersion,
-                    level: fsm_dynamo_1.DyFM_ErrorLevel.critical,
-                }));
-            }
-            catch (error) {
-                fsm_dynamo_1.DyFM_Log.error('globalErrorHandler (MULTILEVEL) ERROR:', error);
-            }
-        });
-        this.asyncConstruct( /* extended */).catch((error) => {
-            if (error instanceof fsm_dynamo_1.DyFM_Error) {
-                if (error.additionalContent?.constructErrors?.length) {
-                    error.additionalContent.constructErrors.forEach((errorItem) => {
-                        fsm_dynamo_1.DyFM_Error.logSimple('(constructor asyncConstruct.catch) error:', errorItem);
-                        /* if (errorItem instanceof DyFM_Error) {
-                          errorItem.logSimple(`(constructor asyncConstruct.catch) error:\n`);
-                        } else {
-                          DyFM_Log.H_warn(
-                            '(constructor asyncConstruct.catch) additional error content:\n',
-                            errorItem
-                          );
-                        } */
-                    });
-                }
-                else {
-                    fsm_dynamo_1.DyFM_Log.H_warn('(constructor asyncConstruct.catch) additional error content:\n', error?.additionalContent);
-                }
-            }
-            fsm_dynamo_1.DyFM_Error.logSimple('(constructor asyncConstruct.catch) error:', error);
-            /* if (
-              !DyNTS_global_settings.log_settings.highDetailedLogs &&
-              (error instanceof DyFM_Error)
-            ) {
-              error.logSimple(
-                `Application: "${this.params?.name}" start failed. (constructor asyncConstruct.catch)` +
-                '\n      all error messages (from this stack):\n\n"' +
-                error._messages.join('"\n\n"') + '"\n\n'
-              );
-            } else if (error instanceof DyFM_Error) {
-              DyFM_Log.H_error(
-                `Application: "${this.params?.name}" start failed. (constructor asyncConstruct.catch)`,
-                `\n    ERROR:`, error
-              );
-            } */
-            const message = error?.additionalContent?.constructErrors?.flatMap((errorItem) => {
-                return errorItem?._messages ?? [];
-            })?.join?.('\n') ??
-                error?.errors?.flatMap((errorItem) => errorItem?._messages ?? [errorItem?.message])?.join?.('\n') ??
-                error?.message ??
-                'UNKNOWN';
-            fsm_dynamo_1.DyFM_Log.testError('Application start failed:\n', message);
-            process.exit(1);
-        });
-    }
-    async asyncConstruct(extended) {
-        if (this.fnLogs && this.deepLog)
-            fsm_dynamo_1.DyFM_Log.log('\nfn:. asyncConstruct');
-        try {
-            this.systemControls.app.init = true;
-            this._params = this.getAppParams();
-            fsm_dynamo_1.DyFM_Log.log(`\n\n\n\n\n\n\n\n\n\n` +
-                `Starting ${this._params?.name}... ` +
-                /* `v${version}` + */
-                `\n\n\n\n\n\n\n\n\n\n`);
-            if (!this._params) {
-                throw new Error('getAppParams() must return a DyNTS_AppParams object!');
-            }
-            if (this.params.systemShortCodeName) {
-                global_settings_const_1.DyNTS_global_settings.systemShortCodeName = this.params.systemShortCodeName;
-            }
-            if (this.params.systemName) {
-                global_settings_const_1.DyNTS_global_settings.systemName = this.params.systemName;
-                fsm_dynamo_1.DyFM_error_defaults.issuerSystem = this.params.systemName;
-            }
-            if (this.params.version) {
-                global_settings_const_1.DyNTS_global_settings.systemVersion = this.params.version;
-                fsm_dynamo_1.DyFM_error_defaults.systemVersion = this.params.version;
-            }
-            process.stdout.write(String.fromCharCode(27) + ']0;' +
-                this._params?.name +
-                String.fromCharCode(7));
-            fsm_dynamo_1.DyFM_error_defaults.issuerSystem = this._params.systemName;
-            this.overrideDynamoNTSGlobalSettings?.();
-            if (global_settings_const_1.DyNTS_global_settings.log_settings.setup) {
-                fsm_dynamo_1.DyFM_Log.S_info(`env settings;\n`, {
-                    systemName: global_settings_const_1.DyNTS_global_settings.systemName,
-                    systemShortCodeName: global_settings_const_1.DyNTS_global_settings.systemShortCodeName,
-                    systemVersion: global_settings_const_1.DyNTS_global_settings.systemVersion,
-                    environment: global_settings_const_1.DyNTS_global_settings.env_settings.environment,
-                    /* log_settings: DyNTS_global_settings.log_settings,
-                    env_settings: DyNTS_global_settings.env_settings, */
-                });
-            }
-            this.globalService = global_service_1.DyNTS_GlobalService.getInstance();
-            await global_service_1.DyNTS_GlobalService.setServices(this.getGlobalServiceCollection());
-            global_service_1.DyNTS_GlobalService.setParams(this.params);
-            if (this.getPortSettings) {
-                this._portSettings = this.getPortSettings();
-            }
-            if (this.getCertificationSettings) {
-                this._cert = this.getCertificationSettings();
-            }
-            if (this.getApiBasePath) {
-                global_settings_const_1.DyNTS_global_settings.baseUrl = this.getApiBasePath();
-            }
-            if (this.getRoutingModules) {
-                this._routingModules = this.getRoutingModules();
-                // ezt egyelőre csak tesztelem, nem kerül be
-                /* if (
-                  !DyNTS_global_settings.dontCreateDefaultRoute &&
-                  !this._routingModules.some((routingModule: DyNTS_RoutingModule): boolean => routingModule.route === '/*')
-                ) {
-                  this._routingModules.push(
-                    DyNTS_getStarRoute()
-                  );
-                } */
-            }
-            if (this._params.dbUri) {
-                await this.startDB();
-                // createEntries csak akkor fut, ha a DB tényleg fel-jött.
-                // Ha a startDB jelezte a hibát, de továbbment, akkor a started flag false marad,
-                // és nem próbálunk meg írni egy nem létező kapcsolatra.
-                if (this.createEntries && this.systemControls.mongoose.started) {
-                    await this.createEntries();
-                }
-            }
-            else {
-                fsm_dynamo_1.DyFM_Log.log(`\nNo database connection created.`);
-            }
-            if (this._routingModules?.length) {
-                if (this.logSetup)
-                    fsm_dynamo_1.DyFM_Log.log('\nsetting up express routes...');
-                this.setSecurity();
-                await this.initExpresses();
-                await this.startExpresses();
-                if (this._security !== route_security_enum_1.DyNTS_RouteSecurity.secure) {
-                    await this.mountOpenRoutes();
-                }
-                if (this._security !== route_security_enum_1.DyNTS_RouteSecurity.open && this._cert) {
-                    await this.mountSecureRoutes();
-                }
-                // Generikus, auth-agnosztikus extension-point: custom middleware az API
-                // route-ok UTÁN, de a SPA static catch-all (mountStaticClient) ELŐTT.
-                await this.mountCustomMiddleware();
-                await this.mountStaticClient();
-                if (this.logSetup) {
-                    fsm_dynamo_1.DyFM_Log.log(`\nRoutes mounted.... server using security: ${this._security}`);
-                }
-            }
-            else {
-                fsm_dynamo_1.DyFM_Log.warn(`\nNo routes mounted!`);
-            }
-            if (this.getRootServices) {
-                this._rootServices = await this.getRootServices();
-            }
-            if (this.postProcess) {
-                await this.postProcess().catch((error) => {
-                    fsm_dynamo_1.DyFM_Error.logSimple(`"${this._params.name}" postProcess failed:`, error);
-                    global_service_1.DyNTS_GlobalService.globalErrorHandler?.(error);
-                });
-            }
-            // FR-193 — bedrock OOM korai-figyelmeztetés: feltelepítjük a heap-watchdogot, ha
-            // engedélyezve (DyNTS_global_settings.memoryGuard.enabled, default true). Biztonságos:
-            // a guard egy könnyű setInterval, ami SOHA nem dob; csak near-OOM küszöböknél hagy
-            // tartós nyomot az error-sinkbe, mielőtt a fatal heap-OOM megölné a process-t.
-            try {
-                if (global_settings_const_1.DyNTS_global_settings.memoryGuard?.enabled) {
-                    memory_guard_service_1.DyNTS_MemoryGuard.getInstance().install();
-                }
-            }
-            catch (memoryGuardError) {
-                fsm_dynamo_1.DyFM_Log.warn('[DyNTS_MemoryGuard] auto-install skipped (non-fatal):', memoryGuardError);
-            }
-            if (!extended) {
-                await this.ready();
-                if (this.params.title) {
-                    fsm_dynamo_1.DyFM_Log.success(this.params.title);
-                }
-                fsm_dynamo_1.DyFM_Log.info(`Version: ${this.params.version}`);
-                /* DyFM_Log.info(`NTS Version: ${this.ntsVersion}`); */
-                fsm_dynamo_1.DyFM_Log.H_success(`${this.params.name} started successfully.`);
-            }
-        }
-        catch (error) {
-            this.constructErrors.push(error);
-            if (this.deepLog) {
-                if (global_settings_const_1.DyNTS_global_settings.log_settings.highDetailedLogs) {
-                    fsm_dynamo_1.DyFM_Log.H_error(`"${this._params.name}" start failed (in asyncConstruct (highDetailedLog)). `, `\n\n    construct ERRORS:`, this.constructErrors, '\n\nlast error:', error);
-                }
-                else {
-                    fsm_dynamo_1.DyFM_Log.H_error(`"${this._params.name}" start failed (in asyncConstruct). `, `\n\n    construct ERRORS:`, this.getSimplifiedConstructErrors(), '\n\nlast error:', error instanceof fsm_dynamo_1.DyFM_Error ? error.getErrorSimplified() : error);
-                }
-            }
-            throw new fsm_dynamo_1.DyFM_Error({
-                ...this._getDefaultErrorSettings('asyncConstruct', error),
-                errorCode: `${global_settings_const_1.DyNTS_global_settings.systemShortCodeName}|DyNTS-AS0-001`,
-                additionalContent: {
-                    constructErrors: this.constructErrors,
-                    systemControls: this.systemControls,
-                    systemReadies: {
-                        app: this.systemControls.app.getIsReady(),
-                        mongoose: this.systemControls.mongoose.getIsReady(),
-                        httpServer: this.systemControls.httpServer.getIsReady(),
-                        httpsServer: this.systemControls.httpsServer.getIsReady(),
-                    },
-                },
-            });
-        }
-    }
-    async ready(timeout = this.defaultReadyTimeout) {
-        try {
-            if (this.fnLogs)
-                fsm_dynamo_1.DyFM_Log.log('\nfn:. ready');
-            await fsm_dynamo_1.DyFM_Async.delay(100);
-            let ready = false;
-            const start = +new Date();
-            if (this.constructErrors.length) {
-                if (this.deepLog) {
-                    if (global_settings_const_1.DyNTS_global_settings.log_settings.highDetailedLogs) {
-                        fsm_dynamo_1.DyFM_Log.H_error(`"${this._params.name}" start failed. (ready; constructErrors check 1)`, `\n    construct ERRORS:`, this.constructErrors);
-                    }
-                    else {
-                        fsm_dynamo_1.DyFM_Log.H_error(`"${this._params.name}" start failed. (ready; constructErrors check 1)`, `\n    construct ERRORS:`, this.getSimplifiedConstructErrors());
-                    }
-                }
-                throw new fsm_dynamo_1.DyFM_Error({
-                    ...this._getDefaultErrorSettings('ready', new Error(`"${this._params.name}" start failed.`)),
-                    errorCode: `${global_settings_const_1.DyNTS_global_settings.systemShortCodeName}|DyNTS-AS0-R01`,
-                    additionalContent: this.constructErrors.length === 1 ?
-                        { error: this.constructErrors[0] } :
-                        { errors: this.constructErrors },
-                });
-            }
-            while (!ready && +new Date() - start < timeout) {
-                if (this.systemControls.app.init) {
-                    ready = (this.systemControls.mongoose.getIsReady() &&
-                        this.systemControls.httpServer.getIsReady() &&
-                        this.systemControls.httpsServer.getIsReady());
-                }
-                else {
-                    fsm_dynamo_1.DyFM_Log.error(`"${this._params.name}" APP NOT INITIALIZED while trying to get ready.`);
-                }
-                if (!ready) {
-                    await fsm_dynamo_1.DyFM_Async.wait(100);
-                }
-            }
-            if (timeout < +new Date() - start) {
-                if (this.deepLog) {
-                    if (global_settings_const_1.DyNTS_global_settings.log_settings.highDetailedLogs) {
-                        fsm_dynamo_1.DyFM_Log.H_error(`"${this._params.name}" start failed. (ready; TIMEOUT check)`, `\n    construct ERRORS:`, this.constructErrors);
-                    }
-                    else {
-                        fsm_dynamo_1.DyFM_Log.H_error(`"${this._params.name}" start failed. (ready; TIMEOUT check)`, `\n    construct ERRORS:`, this.getSimplifiedConstructErrors());
-                    }
-                }
-                throw new fsm_dynamo_1.DyFM_Error({
-                    ...this._getDefaultErrorSettings('ready', new Error(`"${this._params.name}" start failed. TIMEOUT`)),
-                    errorCode: `${global_settings_const_1.DyNTS_global_settings.systemShortCodeName}|DyNTS-AS0-R02`,
-                    additionalContent: {
-                        constructErrors: this.constructErrors,
-                        systemControls: this.systemControls,
-                        systemReadies: {
-                            mongoose: this.systemControls.mongoose.getIsReady(),
-                            httpServer: this.systemControls.httpServer.getIsReady(),
-                            httpsServer: this.systemControls.httpsServer.getIsReady(),
-                        },
-                    },
-                });
-            }
-            if (this.constructErrors.length) {
-                if (this.deepLog) {
-                    if (global_settings_const_1.DyNTS_global_settings.log_settings.highDetailedLogs) {
-                        fsm_dynamo_1.DyFM_Log.H_error(`"${this._params.name}" start failed. (ready; constructErrors check 2)`, `\n    construct ERRORS:`, this.constructErrors);
-                    }
-                    else {
-                        fsm_dynamo_1.DyFM_Log.H_error(`"${this._params.name}" start failed. (ready; constructErrors check 2)`, `\n    construct ERRORS:`, this.getSimplifiedConstructErrors());
-                    }
-                }
-                throw new fsm_dynamo_1.DyFM_Error({
-                    ...this._getDefaultErrorSettings('ready', new Error(`"${this._params.name}" start failed.`)),
-                    errorCode: `${global_settings_const_1.DyNTS_global_settings.systemShortCodeName}|DyNTS-AS0-R03`,
-                    additionalContent: this.constructErrors,
-                });
-            }
-            if (ready) {
-                this.systemControls.app.started = true;
-                if (this.fnLogs && this.deepLog)
-                    fsm_dynamo_1.DyFM_Log.log('\nfn:. ready: return');
-                return;
-            }
-            this.systemControls.app.started = false;
-            let msg = `"${this._params.name}" start failed. UNKNOWN`;
-            if (this.systemControls.mongoose.init && !this.systemControls.mongoose.started) {
-                msg += `\nMongoose start failed.`;
-            }
-            if (this.systemControls.httpServer.init && !this.systemControls.httpServer.started) {
-                msg += `\nHTTP Server start failed.`;
-            }
-            if (this.systemControls.httpsServer.init && !this.systemControls.httpsServer.started) {
-                msg += `\nHTTPS Server start failed.`;
-            }
-            fsm_dynamo_1.DyFM_Log.error(msg, this.constructErrors);
-            throw new fsm_dynamo_1.DyFM_Error({
-                ...this._getDefaultErrorSettings('ready', new Error(msg)),
-                errorCode: `${global_settings_const_1.DyNTS_global_settings.systemShortCodeName}|DyNTS-AS0-R04`,
-                additionalContent: {
-                    constructErrors: this.constructErrors,
-                    systemControls: this.systemControls,
-                    systemReadies: {
-                        app: this.systemControls.app.getIsReady(),
-                        mongoose: this.systemControls.mongoose.getIsReady(),
-                        httpServer: this.systemControls.httpServer.getIsReady(),
-                        httpsServer: this.systemControls.httpsServer.getIsReady(),
-                    },
-                },
-                error: this.constructErrors?.[0] ?? new Error(),
-            });
-        }
-        catch (error) {
-            throw new fsm_dynamo_1.DyFM_Error({
-                ...this._getDefaultErrorSettings('ready', error),
-                errorCode: `${global_settings_const_1.DyNTS_global_settings.systemShortCodeName}|DyNTS-AS0-READY0`,
-            });
-        }
-    }
-    getSimplifiedConstructErrors() {
-        return this.constructErrors.map((error) => {
-            if (error instanceof fsm_dynamo_1.DyFM_Error) {
-                return error.getErrorSimplified();
-            }
-            else {
-                return error;
-            }
-        });
-    }
-    async stop(dontLog) {
-        try {
-            fsm_dynamo_1.DyFM_Log.info('\nstopping server...\n');
-            await this.ready();
-            if (this.started) {
-                if (this.systemControls.mongoose.init) {
-                    fsm_dynamo_1.DyFM_Log.info(`\nstopping Mongoose....`);
-                    let tryCount = 0;
-                    while (!this.systemControls.mongoose.started &&
-                        !this.constructErrors.length &&
-                        tryCount++ < 10) {
-                        fsm_dynamo_1.DyFM_Log.warn(`Mongoose not even started yet....`);
-                        await fsm_dynamo_1.DyFM_Async.wait(fsm_dynamo_1.second);
-                    }
-                    this.systemControls.mongoose.started = false;
-                    if (this.mongoose) {
-                        await fsm_dynamo_1.DyFM_Array.asyncForEach(Object.keys(this.mongoose.models), async (modelName) => {
-                            this.mongoose.deleteModel(modelName);
-                        });
-                        const disconnect = new Promise((resolve) => {
-                            this.mongoose.connection.on('disconnecting', () => {
-                                resolve();
-                            });
-                        });
-                        await this.mongoose.disconnect();
-                        await this.mongoose.connection.close();
-                        await disconnect;
-                        this.mongoose.connection.removeAllListeners();
-                        while (this.mongoose.connection.readyState !== 0 &&
-                            !this.constructErrors.length) {
-                            fsm_dynamo_1.DyFM_Log.warn(`\nMongoose still not disconnected....`);
-                            await fsm_dynamo_1.DyFM_Async.wait(fsm_dynamo_1.second);
-                        }
-                    }
-                    else {
-                        fsm_dynamo_1.DyFM_Log.error(`\nMongoose not found.`);
-                    }
-                    this.systemControls.mongoose.init = false;
-                }
-                if (this.systemControls.httpServer.init) {
-                    this.systemControls.httpServer.started = false;
-                    if (this.httpServer) {
-                        await new Promise((resolve) => {
-                            this.httpServer.close(resolve);
-                        });
-                    }
-                    else {
-                        fsm_dynamo_1.DyFM_Log.error(`\nHTTP Server not found.`);
-                    }
-                    this.systemControls.httpServer.init = false;
-                }
-                if (this.systemControls.httpsServer.init) {
-                    this.systemControls.httpsServer.started = false;
-                    if (this.httpsServer) {
-                        await new Promise((resolve) => {
-                            this.httpsServer.close(resolve);
-                        });
-                    }
-                    else {
-                        fsm_dynamo_1.DyFM_Log.error(`\nHTTPS Server not found.`);
-                    }
-                    this.systemControls.httpsServer.init = false;
-                }
-                await fsm_dynamo_1.DyFM_Async.wait(fsm_dynamo_1.second);
-                if (!dontLog) {
-                    fsm_dynamo_1.DyFM_Log.H_log(`"${this._params.name}" stopped successfully.`);
-                }
-            }
-        }
-        catch (error) {
-            throw new fsm_dynamo_1.DyFM_Error({
-                ...this._getDefaultErrorSettings('stop', error),
-                errorCode: `${global_settings_const_1.DyNTS_global_settings.systemShortCodeName}|DyNTS-AS0-STOP0`,
-            });
-        }
-    }
-    /**
-     *
-     */
-    async startDB() {
-        if (this.fnLogs && this.deepLog)
-            fsm_dynamo_1.DyFM_Log.log('\nfn:. startDB');
-        else if (this.logSetup)
-            fsm_dynamo_1.DyFM_Log.log('\nstarting DB connection...');
-        if (!this._params.dbUri) {
-            throw new fsm_dynamo_1.DyFM_Error({
-                ...this._getDefaultErrorSettings('startDB', new Error('DB URI is not set.')),
-                errorCode: `${global_settings_const_1.DyNTS_global_settings.systemShortCodeName}|DyNTS-AS0-SDB0`,
-            });
-        }
-        if (!this._params.dbOptions) {
-            throw new fsm_dynamo_1.DyFM_Error({
-                ...this._getDefaultErrorSettings('startDB', new Error('DB OPTIONS are not set.')),
-                errorCode: `${global_settings_const_1.DyNTS_global_settings.systemShortCodeName}|DyNTS-AS0-SDB0`,
-            });
-        }
-        if (this.systemControls.mongoose.init || this.systemControls.mongoose.started) {
-            throw new fsm_dynamo_1.DyFM_Error({
-                ...this._getDefaultErrorSettings('startDB', new Error('Mongoose is already initialized.')),
-                errorCode: `${global_settings_const_1.DyNTS_global_settings.systemShortCodeName}|DyNTS-AS0-SDB0`,
-            });
-        }
-        try {
-            await new Promise((resolve, reject) => {
-                this.systemControls.mongoose.init = true;
-                this.mongoose.connection
-                    .once('open', () => {
-                    this.systemControls.mongoose.started = true;
-                    fsm_dynamo_1.DyFM_Log.success(`\nConnected to MongoDB (${this._params.dbUri})\n`);
-                    resolve();
-                })
-                    .on('error', (error) => {
-                    if (!this.systemControls.mongoose.started) {
-                        // Initial DB-csatlakozás sikertelen:
-                        // jelezzük a hibát (log + globalErrorHandler), de NEM szakítjuk meg az
-                        // App startup-ot (nincs constructErrors push, nincs reject).
-                        // A mongoose.init-et resetteljük, hogy a ready() ne várjon a DB-re.
-                        // Ha a mongoose később mégis tudna csatlakozni, az 'open' event
-                        // beállítja a started flag-et, így a runtime DB-műveletek elindulnak.
-                        this.systemControls.mongoose.init = false;
-                        const d_error = new fsm_dynamo_1.DyFM_Error({
-                            ...this._getDefaultErrorSettings('startDB', error),
-                            errorCode: `${global_settings_const_1.DyNTS_global_settings.systemShortCodeName}|DyNTS-AS0-SDB1`,
-                            message: `Unable to connect to MongoDB server (${this._params.dbUri}), ` +
-                                `ERROR: ${error}`,
-                            level: fsm_dynamo_1.DyFM_ErrorLevel.serious,
-                        });
-                        fsm_dynamo_1.DyFM_Log.H_error(`\nUnable to connect to MongoDB server (${this._params.dbUri}).` +
-                            `\nServer will continue WITHOUT DB connection.` +
-                            `\nDB-using endpoints will fail at runtime until connection recovers.`);
-                        if (this.debugLog)
-                            fsm_dynamo_1.DyFM_Log.S_error(`\nMongoDB connect ERROR: `, error);
-                        global_service_1.DyNTS_GlobalService.globalErrorHandler?.(d_error);
-                        resolve();
-                    }
-                    else {
-                        if (this.debugLog)
-                            fsm_dynamo_1.DyFM_Log.error('\nMongoDB ERROR: ', error);
-                        const d_error = new fsm_dynamo_1.DyFM_Error({
-                            ...this._getDefaultErrorSettings('mongoose.connection.on(error)', error),
-                            errorCode: `${global_settings_const_1.DyNTS_global_settings.systemShortCodeName}|DyNTS-AS0-SDB2`,
-                            message: `MongoDB ERROR: ${error}`,
-                            level: fsm_dynamo_1.DyFM_ErrorLevel.critical,
-                        });
-                        global_service_1.DyNTS_GlobalService.globalErrorHandler?.(d_error);
-                    }
-                });
-                try {
-                    this.mongoose.connect(this._params.dbUri, this._params.dbOptions
-                    /* {
-                      directConnection: true,
-                    } */
-                    );
-                }
-                catch (error) {
-                    throw new fsm_dynamo_1.DyFM_Error({
-                        ...this._getDefaultErrorSettings('startDB', error),
-                        errorCode: `${global_settings_const_1.DyNTS_global_settings.systemShortCodeName}|DyNTS-AS0-SDB3`,
-                    });
-                }
-            });
-        }
-        catch (error) {
-            throw new fsm_dynamo_1.DyFM_Error({
-                ...this._getDefaultErrorSettings('startDB', error),
-                errorCode: `${global_settings_const_1.DyNTS_global_settings.systemShortCodeName}|DyNTS-AS0-SDB0`,
-            });
-        }
-        // 2026-06-20 — Mongo reconnect-guard. A MongoDB-driver a hostnevet connect-kor EGYSZER
-        // resolválja + cache-eli az IP-t; ha a Mongo-konténert recreate-elik (új docker-network IP),
-        // a driver a HALOTT IP-n ragad → ECONNREFUSED + buffering-timeout, és a service magától SOHA
-        // nem áll vissza. A guard sustained-disconnect (readyState !== 1) esetén — a driver saját
-        // grace-e UTÁN — TELJES disconnect()+connect()-et csinál → ÚJ MongoClient → ÚJ DNS-resolve →
-        // új IP → reconnect. Best-effort, always-on, healthy connection-t (===1) SOHA nem bánt; csak
-        // konténer-IP-frissítés, nem ír adatot. Lásd: mongo-reconnect-guard.util.ts.
-        try {
-            (0, mongo_reconnect_guard_util_1.startMongoReconnectGuard)({
-                getReadyState: () => this.mongoose.connection.readyState,
-                reconnect: async () => {
-                    await this.mongoose.disconnect().catch(() => undefined);
-                    await this.mongoose.connect(this._params.dbUri, this._params.dbOptions);
-                },
-                log: (msg) => fsm_dynamo_1.DyFM_Log.warn(msg),
-            });
-        }
-        catch (guardErr) {
-            fsm_dynamo_1.DyFM_Log.warn(`[mongo-reconnect-guard] failed to start (non-fatal): ${guardErr instanceof Error ? guardErr.message : String(guardErr)}`);
-        }
-    }
-    /**
-     *
-     */
-    async initExpresses() {
-        if (this.fnLogs && this.deepLog)
-            fsm_dynamo_1.DyFM_Log.log('\nfn:. initExpresses');
-        try {
-            if (this._security && this._security !== route_security_enum_1.DyNTS_RouteSecurity.secure) {
-                if (this._portSettings.httpPort === undefined || this._portSettings.httpPort === null) {
-                    let errorMsg = `\nYou have open routes, but httpPort is not set!` +
-                        `\nThere are ${this._routingModules.filter(m => m.security != route_security_enum_1.DyNTS_RouteSecurity.secure).length} open/both routes` +
-                        `\nroot security: ${this._security}` +
-                        `\nset httpPort in DynamoBEServer - setupRoutingModules() to enable secure routes.`;
-                    errorMsg += '\n\nThe routes setted to use open server:';
-                    this._routingModules.forEach((module) => {
-                        if (module.security != route_security_enum_1.DyNTS_RouteSecurity.secure) {
-                            errorMsg += `\n  ${module.route} (security: ${module.security})`;
-                            errorMsg += `\n  subroutes using open sever:`;
-                            module.endpoints.forEach((endpoint) => {
-                                if (endpoint.security != route_security_enum_1.DyNTS_RouteSecurity.secure) {
-                                    errorMsg += `\n    ${endpoint.endpoint} (security: ${endpoint.security})`;
-                                }
-                            });
-                        }
-                    });
-                    const error = new Error(`Open routes cannot be established!\n${errorMsg}`);
-                    const errorStack = error.stack.split('\n');
-                    errorStack.splice(1, 2);
-                    error.stack = errorStack.join('\n');
-                    fsm_dynamo_1.DyFM_Log.error(errorMsg);
-                    throw error;
-                }
-                await this.initOpenExpress();
-            }
-            if (this._security && this._security !== route_security_enum_1.DyNTS_RouteSecurity.open) {
-                if (!this._cert || !this._portSettings.httpsPort) {
-                    let errorMsg = `\nYou have secure routes, but the certification paths or httpsPort are not set!` +
-                        `\nThere are ${this._routingModules.filter(m => m.security && m.security !== route_security_enum_1.DyNTS_RouteSecurity.open).length} secure routes` +
-                        `\nroot security: ${this._security}` +
-                        `\nset...` +
-                        `\n(missing exact howto...)` +
-                        /* `\n  httpsPort and` +
-                        `\n  cert: {` +
-                        `\n    keyPath: FileSystem.PathLike,` +
-                        `\n    certPath: FileSystem.PathLike,` +
-                        `\n  }` + */
-                        `\nin DynamoBEServer - getRoutingModules() to enable secure routes.`;
-                    errorMsg += '\n\nThe routes setted to use secure server:';
-                    this._routingModules.forEach((module) => {
-                        if (module.security && module.security !== route_security_enum_1.DyNTS_RouteSecurity.open) {
-                            errorMsg += `\n  ${module.route} (security: ${module.security})`;
-                            errorMsg += `\n    location: ${module.stackLocation}`;
-                            errorMsg += `\n    subroutes using secure sever:`;
-                            module.endpoints.forEach((endpoint) => {
-                                if (endpoint.security && endpoint.security !== route_security_enum_1.DyNTS_RouteSecurity.open) {
-                                    errorMsg += `\n      ${endpoint.endpoint} (security: ${endpoint.security})`;
-                                    errorMsg += `\n        location: ${endpoint.stackLocation}`;
-                                }
-                            });
-                        }
-                    });
-                    const error = new Error(`Secure routes cannot be established!\n${errorMsg}`);
-                    const errorStack = error.stack.split('\n');
-                    errorStack.splice(1, 2);
-                    error.stack = errorStack.join('\n');
-                    fsm_dynamo_1.DyFM_Log.error(errorMsg);
-                    throw error;
-                }
-                await this.initSecureExpress();
-            }
-        }
-        catch (error) {
-            throw new fsm_dynamo_1.DyFM_Error({
-                ...this._getDefaultErrorSettings('initExpresses', error),
-                errorCode: `${global_settings_const_1.DyNTS_global_settings.systemShortCodeName}|DyNTS-AS0-IE0`,
-            });
-        }
-    }
-    /**
-     *
-     */
-    async initOpenExpress() {
-        if (this.fnLogs)
-            fsm_dynamo_1.DyFM_Log.log('\nfn:. initOpenExpress');
-        this.openExpress = Express();
-        this.openExpress.set('maxHeaderSize', 10 * fsm_dynamo_1.megabyte); // 1024 * 1024 * 10, // 10MB
-        this.openExpress.use(BodyParser.urlencoded(this._portSettings.httpUrlencoded));
-        this.openExpress.use(BodyParser.json(this._portSettings.httpJson));
-        // FR-041 — CORS allowlist enforcement. No-op if getCorsSettings() is not overridden.
-        this.mountCors(this.openExpress);
-    }
-    /**
-     *
-     */
-    async initSecureExpress() {
-        if (this.fnLogs)
-            fsm_dynamo_1.DyFM_Log.log('\nfn:. initSecureExpress');
-        this.secureExpress = Express();
-        this.secureExpress.use(BodyParser.urlencoded(this._portSettings.httpsUrlencoded));
-        this.secureExpress.use(BodyParser.json(this._portSettings.httpsJson));
-        // FR-041 — CORS allowlist enforcement (same as open express).
-        this.mountCors(this.secureExpress);
-        const options = {
-            key: FileSystem.readFileSync(this._cert.keyPath),
-            cert: FileSystem.readFileSync(this._cert.certPath),
-            maxHeaderSize: 10 * fsm_dynamo_1.megabyte, // 1024 * 1024 * 10, // 10MB
-        };
-        this.httpsServer = Https.createServer(options, this.secureExpress);
-    }
-    /**
-     *
-     */
-    async startExpresses() {
-        if (this.fnLogs && this.deepLog)
-            fsm_dynamo_1.DyFM_Log.log('\nfn:. startExpresses');
-        try {
-            if (this._security && this._security !== route_security_enum_1.DyNTS_RouteSecurity.open) {
-                await new Promise((resolve, reject) => {
-                    this.systemControls.httpsServer.init = true;
-                    this.httpsServer
-                        .listen(this._portSettings.httpsPort, this.params.secureHost, this.params.expressBacklog, () => {
-                        this.systemControls.httpsServer.started = true;
-                        fsm_dynamo_1.DyFM_Log.success(`\nHTTPS (secure) server is listening on port: ` +
-                            `${this.params.secureHost}:${this._portSettings.httpsPort}`);
-                        resolve();
-                    })
-                        .on('error', (error) => {
-                        if (this.debugLog)
-                            fsm_dynamo_1.DyFM_Log.error(`\nHTTPS (secure) server ERROR`, error);
-                        if (!this.systemControls.httpsServer.started) {
-                            const d_error = new fsm_dynamo_1.DyFM_Error({
-                                ...this._getDefaultErrorSettings('startExpresses', error),
-                                errorCode: `${global_settings_const_1.DyNTS_global_settings.systemShortCodeName}|DyNTS-AS0-SE1`,
-                                message: `HTTPS (secure) start server ERROR`,
-                            });
-                            this.constructErrors.push(d_error);
-                            global_service_1.DyNTS_GlobalService.globalErrorHandler?.(d_error);
-                            reject(d_error);
-                        }
-                        else {
-                            const d_error = new fsm_dynamo_1.DyFM_Error({
-                                ...this._getDefaultErrorSettings('httpsServer.on(error)', error),
-                                errorCode: `${global_settings_const_1.DyNTS_global_settings.systemShortCodeName}|DyNTS-AS0-SE2`,
-                                message: `HTTPS (secure) server ERROR`,
-                                level: fsm_dynamo_1.DyFM_ErrorLevel.serious,
-                            });
-                            global_service_1.DyNTS_GlobalService.globalErrorHandler?.(d_error);
-                        }
-                    })
-                        .on('uncaughtException', (exception) => {
-                        const d_error = new fsm_dynamo_1.DyFM_Error({
-                            ...this._getDefaultErrorSettings('httpsServer.on(uncaughtException)', exception),
-                            errorCode: `${global_settings_const_1.DyNTS_global_settings.systemShortCodeName}|DyNTS-AS0-SE3`,
-                            message: `HTTPS (secure) server uncaughtException`,
-                            level: fsm_dynamo_1.DyFM_ErrorLevel.critical,
-                        });
-                        if (this.debugLog)
-                            fsm_dynamo_1.DyFM_Log.warn(`\nHTTPS (secure) server uncaughtException`, d_error);
-                        global_service_1.DyNTS_GlobalService.globalErrorHandler?.(d_error);
-                    });
-                });
-            }
-            if (this._security && this._security !== route_security_enum_1.DyNTS_RouteSecurity.secure) {
-                this.systemControls.httpServer.init = true;
-                await new Promise((resolve, reject) => {
-                    this.httpServer = this.openExpress
-                        .listen(this._portSettings.httpPort, this.params.openHost, this.params.expressBacklog, () => {
-                        this.systemControls.httpServer.started = true;
-                        const resolvedPort = this.httpServer?.address?.()?.['port'] ?? this._portSettings.httpPort;
-                        if (this._portSettings.httpPort === 0) {
-                            fsm_dynamo_1.DyFM_Log.H_warn(`\nHTTP (open) server is using a randomly selected port by the OS: ${resolvedPort}` +
-                                `\n  (httpPort was set to 0 — this is intended for testing only)`);
-                        }
-                        fsm_dynamo_1.DyFM_Log.success(`\nHTTP (open) server is listening on port: ` +
-                            `${this.params.openHost}:${resolvedPort}`);
-                        resolve();
-                    })
-                        .on('error', (error) => {
-                        if (this.debugLog)
-                            fsm_dynamo_1.DyFM_Log.error(`\nHTTP (open) server ERROR`, error);
-                        if (!this.systemControls.httpServer.started) {
-                            const d_error = new fsm_dynamo_1.DyFM_Error({
-                                ...this._getDefaultErrorSettings('startExpresses', error),
-                                errorCode: `${global_settings_const_1.DyNTS_global_settings.systemShortCodeName}|DyNTS-AS0-SE3`,
-                                message: `HTTP (open) start server ERROR`,
-                            });
-                            this.constructErrors.push(d_error);
-                            global_service_1.DyNTS_GlobalService.globalErrorHandler?.(d_error);
-                            reject(d_error);
-                        }
-                        else {
-                            const d_error = new fsm_dynamo_1.DyFM_Error({
-                                ...this._getDefaultErrorSettings('httpServer.on(error)', error),
-                                errorCode: `${global_settings_const_1.DyNTS_global_settings.systemShortCodeName}|DyNTS-AS0-SE4`,
-                                message: `HTTP (open) server ERROR`,
-                                level: fsm_dynamo_1.DyFM_ErrorLevel.serious,
-                            });
-                            global_service_1.DyNTS_GlobalService.globalErrorHandler?.(d_error);
-                        }
-                    })
-                        .on('uncaughtException', (exception) => {
-                        const d_error = new fsm_dynamo_1.DyFM_Error({
-                            ...this._getDefaultErrorSettings('httpServer.on(uncaughtException)', exception),
-                            errorCode: `${global_settings_const_1.DyNTS_global_settings.systemShortCodeName}|DyNTS-AS0-SE5`,
-                            message: `HTTP (open) server uncaughtException`,
-                            level: fsm_dynamo_1.DyFM_ErrorLevel.critical,
-                        });
-                        if (this.debugLog) {
-                            fsm_dynamo_1.DyFM_Log.warn(`\nHTTP (open) server uncaughtException`, d_error);
-                        }
-                        global_service_1.DyNTS_GlobalService.globalErrorHandler?.(d_error);
-                    });
-                });
-            }
-        }
-        catch (error) {
-            throw new fsm_dynamo_1.DyFM_Error({
-                ...this._getDefaultErrorSettings('startExpresses', error),
-                errorCode: `${global_settings_const_1.DyNTS_global_settings.systemShortCodeName}|DyNTS-AS0-SE0`,
-            });
-        }
-    }
-    /**
-     *
-     */
-    async expressErrorHandling(error, req, res, next) {
-        try {
-            if (error) {
-                const d_error = new fsm_dynamo_1.DyFM_Error({
-                    ...this._getDefaultErrorSettings('expressErrorHandling', error),
-                    errorCode: `${global_settings_const_1.DyNTS_global_settings.systemShortCodeName}|DyNTS-AS0-EEH1`,
-                    message: `Express ERROR`,
-                    additionalContent: {
-                        req,
-                        res,
-                    },
-                    level: fsm_dynamo_1.DyFM_ErrorLevel.error,
-                });
-                await global_service_1.DyNTS_GlobalService.globalErrorHandler?.(d_error, req, res);
-                res.send(error);
-            }
-            else {
-                fsm_dynamo_1.DyFM_Log.H_error('WTF??? express error; without error?...' +
-                    '\nerr:', error, '\nreq:', req, '\nres:', res);
-            }
-        }
-        catch (error) {
-            fsm_dynamo_1.DyFM_Log.H_error('MULTILEVEL ERROR (expressErrorHandling)....' +
-                '\n', error);
-        }
-    }
-    /**
-     *
-     */
-    async mountSecureRoutes() {
-        try {
-            if (this.fnLogs && this.deepLog)
-                fsm_dynamo_1.DyFM_Log.log('\nfn:. mountSecureRoutes');
-            if (!this.secureExpress) {
-                throw new Error('secureExpress was not initialized. ' +
-                    'Secure routes require getCertificationSettings and httpsPort, and cert files must exist.' +
-                    '\n\nYou need to set security to secure or both in any route and set httpsPort in getPortSettings.' +
-                    '\n\nYou need to set cert files in getCertificationSettings.');
-            }
-            this.secureExpress.use((error, req, res, next) => this.expressErrorHandling(error, req, res, next));
-            await fsm_dynamo_1.DyFM_Array.asyncForEach(this._routingModules, async (module) => {
-                if (module.security !== route_security_enum_1.DyNTS_RouteSecurity.open) {
-                    if (this.logSetup) {
-                        fsm_dynamo_1.DyFM_Log.log(`route mount (secure): ${module.route}`);
-                    }
-                    const existingRoutes = this._routingModules.filter((mod) => mod.route === module.route);
-                    if (1 < existingRoutes.length) {
-                        const error = new Error(`ROUTE DUPLICATION: ${module.route}`);
-                        /* const errorStack: string[] = error.stack.split('\n');
-          
-                        errorStack.splice(1, 4);
-                        error.stack = errorStack.join('\n'); */
-                        error.stack = module.stackLocation;
-                        fsm_dynamo_1.DyFM_Log.S_error(`ROUTE DUPLICATION: ${module.route}`, error);
-                        throw new fsm_dynamo_1.DyFM_Error({
-                            ...this._getDefaultErrorSettings('mountSecureRoutes', error),
-                            errorCode: `${global_settings_const_1.DyNTS_global_settings.systemShortCodeName}|DyNTS-AS0-MSR1`,
-                            message: `ROUTE DUPLICATION: ${module.route}`,
-                        });
-                    }
-                    this.secureExpress.use(module.route, module.secureRouter);
-                }
-            });
-        }
-        catch (error) {
-            throw new fsm_dynamo_1.DyFM_Error({
-                ...this._getDefaultErrorSettings('mountSecureRoutes', error),
-                errorCode: `${global_settings_const_1.DyNTS_global_settings.systemShortCodeName}|DyNTS-AS0-MSR0`,
-            });
-        }
-    }
-    /**
-     *
-     */
-    async mountOpenRoutes() {
-        try {
-            if (this.fnLogs && this.deepLog)
-                fsm_dynamo_1.DyFM_Log.log('\nfn:. mountOpenRoutes');
-            if (!this.openExpress) {
-                throw new Error('openExpress was not initialized. Open routes require getOpenExpress and httpPort.' +
-                    '\n\nYou need to set security to open or both in any route and set httpPort in getPortSettings.');
-            }
-            this.openExpress.use((error, req, res, next) => this.expressErrorHandling(error, req, res, next));
-            await fsm_dynamo_1.DyFM_Array.asyncForEach(this._routingModules, async (module) => {
-                if (module.security !== route_security_enum_1.DyNTS_RouteSecurity.secure) {
-                    if (this.logSetup) {
-                        fsm_dynamo_1.DyFM_Log.log(`route mount (open): ${module.route}`);
-                    }
-                    const existingRoutes = this._routingModules.filter((mod) => mod.route === module.route);
-                    if (1 < existingRoutes.length) {
-                        const error = new Error(`ROUTE DUPLICATION: ${module.route}`);
-                        /* const errorStack: string[] = error.stack.split('\n');
-            
-                        errorStack.splice(1, 4);
-                        error.stack = errorStack.join('\n'); */
-                        error.stack = module.stackLocation;
-                        fsm_dynamo_1.DyFM_Log.S_error(`ROUTE DUPLICATION: ${module.route}`, error);
-                        throw new fsm_dynamo_1.DyFM_Error({
-                            ...this._getDefaultErrorSettings('mountOpenRoutes', error),
-                            errorCode: `${global_settings_const_1.DyNTS_global_settings.systemShortCodeName}|DyNTS-AS0-MOR1`,
-                            message: `ROUTE DUPLICATION: ${module.route}`,
-                        });
-                    }
-                    this.openExpress.use(module.route, module.openRouter);
-                }
-            });
-        }
-        catch (error) {
-            throw new fsm_dynamo_1.DyFM_Error({
-                ...this._getDefaultErrorSettings('mountOpenRoutes', error),
-                errorCode: `${global_settings_const_1.DyNTS_global_settings.systemShortCodeName}|DyNTS-AS0-MOR0`,
-            });
-        }
-    }
-    /**
-     * FR-041 — CORS middleware. Echoes a matching `Access-Control-Allow-Origin`
-     * for any request whose Origin header is in `getCorsSettings().allowedOrigins`,
-     * adds the canonical `Access-Control-*` companion headers, and short-circuits
-     * the OPTIONS preflight with a 204.
-     *
-     * No-op when the subclass does NOT override `getCorsSettings()` — preserves
-     * back-compat for apps that have always been same-origin and never needed
-     * CORS (the typical pre-FR-041 case).
-     *
-     * Why hand-rolled instead of the `cors` npm package:
-     *  - ~30 lines, zero new dependency.
-     *  - Full control over Vary/credentials/preflight semantics.
-     *  - Aligns with FDP "no unnecessary deps" philosophy.
-     */
-    mountCors(express) {
-        const settings = this.getCorsSettings?.();
-        if (!settings) {
-            return;
-        }
-        const allowCreds = settings.allowCredentials !== false;
-        const methods = settings.allowedMethods ?? [
-            'GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'OPTIONS',
-        ];
-        const headers = settings.allowedHeaders ?? [
-            'Authorization', 'Content-Type', 'X-Admin-Key', 'X-Requested-With',
-        ];
-        const exposed = settings.exposedHeaders ?? [
-            'Content-Length', 'Content-Type',
-        ];
-        const maxAge = settings.maxAgeSeconds ?? 86400;
-        const isAllowed = (origin) => {
-            if (settings.allowedOrigins === '*')
-                return true;
-            if (typeof settings.allowedOrigins === 'function') {
-                return settings.allowedOrigins(origin);
-            }
-            return settings.allowedOrigins.includes(origin);
-        };
-        express.use((req, res, next) => {
-            const origin = req.headers.origin;
-            if (origin && isAllowed(origin)) {
-                // Echo the matching origin (NOT wildcard) because credentials require it.
-                res.setHeader('Access-Control-Allow-Origin', origin);
-                if (allowCreds) {
-                    res.setHeader('Access-Control-Allow-Credentials', 'true');
-                }
-                res.setHeader('Access-Control-Allow-Methods', methods.join(', '));
-                res.setHeader('Access-Control-Allow-Headers', headers.join(', '));
-                res.setHeader('Access-Control-Expose-Headers', exposed.join(', '));
-                res.setHeader('Access-Control-Max-Age', String(maxAge));
-                res.setHeader('Vary', 'Origin');
-            }
-            if (req.method === 'OPTIONS') {
-                res.status(204).end();
-                return;
-            }
-            next();
-        });
-    }
-    /**
-     * Generikus, auth-agnosztikus extension-point orchestrator. A `registerCustomMiddleware`
-     * hookot hívja (ha a subclass override-olja) minden AKTÍV Express instance-ra
-     * (open + secure), az API route-ok UTÁN, de a SPA static catch-all (`app.get('*')`)
-     * ELŐTT — ez az EGYETLEN korrekt pont egy sub-path middleware-hez (pl. reverse-proxy),
-     * mert a catch-all minden utána mountolt route-ot elnyel. No-op ha nincs override (back-compat).
-     */
-    async mountCustomMiddleware() {
-        if (!this.registerCustomMiddleware) {
-            return;
-        }
-        if (this.openExpress) {
-            await this.registerCustomMiddleware(this.openExpress, route_security_enum_1.DyNTS_RouteSecurity.open);
-        }
-        if (this.secureExpress) {
-            await this.registerCustomMiddleware(this.secureExpress, route_security_enum_1.DyNTS_RouteSecurity.secure);
-        }
-        if (this.logSetup) {
-            fsm_dynamo_1.DyFM_Log.log('\nCustom middleware registered (pre-static).');
-        }
-    }
-    /**
-     * Ha getStaticClientSettings() visszaad beállításokat, a client static fájlok a '/' alatt
-     * lesznek kiszolgálva (API route-ok után). SPA fallback opcionális (fallbackPath).
-     * Asset cache (assetCacheMaxAge, assetCacheImmutable) és fallback cache (fallbackCacheMaxAge)
-     * opcionálisak; ha nincs megadva fallbackCacheMaxAge, DyNTS_defaultFallbackCacheMaxAge (0) marad.
-     */
-    async mountStaticClient() {
-        const settings = this.getStaticClientSettings?.();
-        if (!settings) {
-            return;
-        }
-        const absoluteRoot = Path.isAbsolute(settings.root)
-            ? settings.root
-            : Path.resolve(process.cwd(), settings.root);
-        const hasAssetCache = settings.assetCacheMaxAge !== undefined || settings.assetCacheImmutable === true;
-        const staticOptions = hasAssetCache && settings.assetCacheMaxAge !== undefined
-            ? {
-                setHeaders: (res) => {
-                    const maxAge = settings.assetCacheMaxAge;
-                    const immutable = settings.assetCacheImmutable === true ? ', immutable' : '';
-                    res.setHeader('Cache-Control', `max-age=${maxAge}${immutable}`);
-                },
-            }
-            : undefined;
-        const staticMiddleware = staticOptions
-            ? Express.static(absoluteRoot, staticOptions)
-            : Express.static(absoluteRoot);
-        const fallbackMaxAge = settings.fallbackCacheMaxAge ?? default_fallback_cache_max_age_const_1.DyNTS_defaultFallbackCacheMaxAge;
-        if (this.openExpress) {
-            this.openExpress.use('/', staticMiddleware);
-            if (settings.fallbackPath) {
-                this.openExpress.get('*', (req, res) => {
-                    res.setHeader('Cache-Control', `max-age=${fallbackMaxAge}`);
-                    res.sendFile(settings.fallbackPath, { root: absoluteRoot });
-                });
-            }
-            else {
-                this.openExpress.get('*', (req, res) => {
-                    res.status(404).type('html').send(default_not_found_page_const_1.DyNTS_defaultNotFoundPageHtml);
-                });
-            }
-        }
-        if (this.secureExpress) {
-            this.secureExpress.use('/', staticMiddleware);
-            if (settings.fallbackPath) {
-                this.secureExpress.get('*', (req, res) => {
-                    res.setHeader('Cache-Control', `max-age=${fallbackMaxAge}`);
-                    res.sendFile(settings.fallbackPath, { root: absoluteRoot });
-                });
-            }
-            else {
-                this.secureExpress.get('*', (req, res) => {
-                    res.status(404).type('html').send(default_not_found_page_const_1.DyNTS_defaultNotFoundPageHtml);
-                });
-            }
-        }
-        if (this.logSetup) {
-            fsm_dynamo_1.DyFM_Log.log(`\nStatic client mounted at / (root: ${absoluteRoot})`);
-        }
-    }
-    /**
-     *
-     */
-    setSecurity() {
-        if (this.fnLogs && this.deepLog)
-            fsm_dynamo_1.DyFM_Log.log('\nfn:. setSecurity');
-        this._routingModules.forEach((module) => {
-            if (!module.security) {
-                fsm_dynamo_1.DyFM_Log.warn(`RoutingModule security is not set for ${module.route}\n`);
-            }
-            else if (!this._security) {
-                this._security = module.security;
-            }
-            else if (this._security !== module.security) {
-                this._security = route_security_enum_1.DyNTS_RouteSecurity.both;
-            }
-        });
-        if (!this._security) {
-            let msg = `Could not set security for the server! (${this.security})`;
-            msg += '\n  RoutingModules:';
-            this._routingModules.forEach((module) => {
-                msg += `\n    ${module.route} (security: ${module.security})`;
-            });
-            if (this._routingModules.length === 0) {
-                msg += '\n    - no RoutingModule found -\n';
-            }
-            fsm_dynamo_1.DyFM_Log.warn(msg);
-        }
-    }
-    _getDefaultErrorSettings(fnName, error) {
-        return {
-            status: error?.___status ?? 500,
-            message: error?.message ??
-                error?._message ??
-                `${fnName} was UNSUCCESSFUL (NTS)`,
-            userMessage: error?.__userMessage ?? this.defaultErrorUserMsg,
-            addECToUserMsg: !error?.__userMessage,
-            issuerService: `${this?.constructor?.name}-DyNTS_App`,
-            level: fsm_dynamo_1.DyFM_ErrorLevel.fatal,
-            error: error,
-            systemVersion: global_settings_const_1.DyNTS_global_settings.systemVersion,
-        };
-    }
-}
-exports.DyNTS_App = DyNTS_App;
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DyNTS_App = void 0;
+const tslib_1 = require("tslib");
+const Mongoose = require("mongoose");
+const Express = require("express");
+/* import Mongoose from 'mongoose';
+import Express from 'express'; */
+const BodyParser = tslib_1.__importStar(require("body-parser"));
+const FileSystem = tslib_1.__importStar(require("fs"));
+const Https = tslib_1.__importStar(require("https"));
+const Path = tslib_1.__importStar(require("path"));
+/* import { version } from '../../../package.json'; */
+const fsm_dynamo_1 = require("@futdevpro/fsm-dynamo");
+const default_fallback_cache_max_age_const_1 = require("../../_collections/default-fallback-cache-max-age.const");
+const default_not_found_page_const_1 = require("../../_collections/default-not-found-page.const");
+const global_settings_const_1 = require("../../_collections/global-settings.const");
+const mongo_reconnect_guard_util_1 = require("../../_collections/mongo-reconnect-guard.util");
+const route_security_enum_1 = require("../../_enums/route-security.enum");
+const app_system_controls_control_model_1 = require("../../_models/control-models/app-system-controls.control-model");
+const http_settings_control_model_1 = require("../../_models/control-models/http-settings.control-model");
+const singleton_service_1 = require("../base/singleton.service");
+const global_service_1 = require("../core/global.service");
+const memory_guard_service_1 = require("../core/memory-guard.service");
+/**
+ *
+  * function MyDecorator(config: any) {
+      return function (target: Function) {
+        // attach metadata or modify target
+        target.prototype.myMeta = config;
+      };
+    }
+
+    @MyDecorator({ role: 'admin' })
+    class User {
+      printRole() {
+        console.log((this as any).myMeta.role); // → "admin"
+      }
+    }
+
+ */
+/**
+ * This will be the MAIN service of our server project,
+ * follow the types and type instructions while setting up your project
+ *
+ * In this service, there are abstract functions that you will need to implement,
+ * where you need to set up the main params for your application.
+ *
+ * (after the example, you can find the list of services you can/should setup)
+ *
+ * @example
+ * export class App extends DyNTS_AppExtended {
+ *
+ *   ...
+ *
+ *   // Setting up App params, and preparing project global settings
+ *   setupAppParams(): void {
+ *     this.params = new DyNTS_AppParams({
+ *       name: 'Warbots Server',
+ *       title: warbotsTitleLog,
+ *       version: version,
+ *       dbName: 'warbots',
+ *     });
+ *
+ *     // dynamoNTS_GlobalSettings.logRequestsContent = false;
+ *   }
+ *
+ *   ...
+ *
+ *   // Setting up DBServices
+ *   setGlobalServiceCollection(): void {
+ *     DyNTS_GlobalService.setServices({
+ *       authService: AuthService.getInstance(),
+ *       emailServiceCollection: EmailServiceCollectionService.getInstance(),
+ *       dbModels: [
+ *         userModelParams,
+ *         userDataModelParams,
+ *         userOptionsModelParams,
+ *         userStatisticsModelParams,
+ *         userAchievementsModelParams,
+ *         userNotificationsModelParams,
+ *
+ *         matchStatisticsModelParams,
+ *         matchDataModelParams,
+
+ *         DyFM_usageSession_dataParams,
+ *         DyFM_customData_dataParams,
+ *       ]
+ *     });
+ *   }
+ *
+ *   ...
+ *
+ *   // Setting up Routes
+ *   setupRoutingModules(): void {
+ *     this.httpPort = env.port;
+
+ *     this.routingModules = [
+ *       new DyNTS_RoutingModule({
+ *         route: '/user',
+ *         controllers: [
+ *           UserController.getInstance(),
+ *           UserDataController.getInstance(),
+ *           UserOptionsController.getInstance(),
+ *           UserStatisticsController.getInstance(),
+ *           UserAchievementsController.getInstance(),
+ *           UserNotificationsController.getInstance()
+ *         ]
+ *       }),
+ *       new DyNTS_RoutingModule({
+ *         route: '/match',
+ *         controllers: [
+ *           MatchController.getInstance(),
+ *           MatchDistributionController.getInstance(),
+ *           MatchStatisticsController.getInstance(),
+ *         ]
+ *       }),
+ *       new DyNTS_RoutingModule({
+ *         route: '/server',
+ *         controllers: [
+ *           ServerController.getInstance(),
+ *         ]
+ *       }),
+
+ *       getTestRoutingModule(),
+ *       getUsageRoutingModule()
+ *     ];
+ *   }
+ * }
+ *
+ * //
+ * // The Services available
+ * //
+ * // Authentication Service
+ * // A commonly used basic service,
+ * // which is necessary fur certain functions (such as registering call issuers)
+ * //
+ * // This will handle Authentication Token checking/refreshing,
+ * // checking issuer's identifier and routeParams,
+ * // handling JWT Token, or maybe with OAuth2 or other commonly used security procedures
+ * //
+ * // You can create one with this Dynamo Object:
+ * //
+ *
+ * @example
+ * // follow the instructions on the abstract class (DyNTS_AuthService)
+ * export class AuthService extends DyNTS_AuthService {}
+ *
+ *
+ *
+ * //
+ */
+/**
+ * This will be the MAIN service of our server project,
+ * follow the types and type instructions while setting up your project
+ *
+ * In this service, there are abstract functions that you will need to implement,
+ * where you need to set up the main params for your application.
+ *
+ * (after the example, you can find the list of services you can/should setup)
+ *
+ * You need to setup the following functions:
+ * ```ts
+ * // this is where you set up the main params for your application
+ * getAppParams(): DyNTS_AppParams
+ *
+ * // this is where you connect your main services
+ * getGlobalServiceSettings(): DyNTS_GlobalService_Settings
+ *
+ * // this is where you set up your ports
+ * getPorts(): DyNTS_PortSettings
+ *
+ * // this is where you set up your routes
+ * getRoutingModules(): DyNTS_RoutingModule[]
+ *
+ *
+ *
+ * ```
+ * optionally you can setup the following functions:
+ * ```ts
+ * // this is where you set up your certifications
+ * getCertificationSettings(): DyNTS_CertificationSettings
+ *
+ * // this is where you set up additional root services
+ * getRootServices(): DyNTS_SingletonService[]
+ *
+ * // this is where you set up your initial db entries
+ * createEntries(): void
+ *
+ * // this is where you can define post setup processes
+ * postProcess(): void
+ *
+ *
+ *
+ * ```
+ *
+ */
+class DyNTS_App extends singleton_service_1.DyNTS_SingletonService {
+    systemControls = new app_system_controls_control_model_1.DyNTS_AppSystemControls();
+    get started() {
+        return this.systemControls.app.started;
+    }
+    get superStarted() {
+        return this.systemControls.app.started;
+    }
+    constructErrors = [];
+    /* removed since cant use version from package.json
+    private readonly _ntsVersion: string = 'v01.07.18';
+    protected get ntsVersion(): string {
+      return this._ntsVersion;
+    } */
+    get serverName() {
+        return this.params.name;
+    }
+    _params;
+    get params() {
+        return this._params;
+    }
+    mongoose = Mongoose;
+    _security;
+    get security() {
+        return this._security;
+    }
+    _portSettings = new http_settings_control_model_1.DyNTS_Http_Settings();
+    get portSettings() {
+        return this._portSettings;
+    }
+    _cert;
+    get cert() {
+        return this._cert;
+    }
+    openExpress;
+    secureExpress;
+    httpsServer;
+    httpServer;
+    globalService;
+    _rootServices = [];
+    _routingModules = [];
+    defaultReadyTimeout = 30 * fsm_dynamo_1.second;
+    defaultErrorUserMsg = `We encountered an unhandled Server Error, ` +
+        `\nplease contact the responsible development team.` +
+        `\n(Internal Server error)`;
+    get logSetup() {
+        return global_settings_const_1.DyNTS_global_settings.log_settings.setup;
+    }
+    get deepLog() {
+        return global_settings_const_1.DyNTS_global_settings.log_settings.deep;
+    }
+    get fnLogs() {
+        return global_settings_const_1.DyNTS_global_settings.log_settings.functions;
+    }
+    debugLog = global_settings_const_1.DyNTS_global_settings.log_settings.server_debug;
+    constructor( /* extended?: boolean */) {
+        super();
+        /* dotenv.config() */
+        process.on('unhandledRejection', (reason_theError, p_passWhatIsThis_maybeThePromise) => {
+            if (reason_theError instanceof fsm_dynamo_1.DyFM_Error) {
+                reason_theError.logSimple('Unhandled Rejection');
+            }
+            else {
+                fsm_dynamo_1.DyFM_Log.H_error('Unhandled Rejection:', p_passWhatIsThis_maybeThePromise?.toString(), '\n    Rejection reason:', reason_theError?.stack?.split('at')?.[0], 
+                /* '\n    ErrorCode:', (reason as any)?.code, */
+                '\n\n    Stack:', reason_theError?.stack?.replaceAll?.('\n    at', '\n      at'));
+            }
+            try {
+                global_service_1.DyNTS_GlobalService.globalErrorHandler?.(new fsm_dynamo_1.DyFM_Error({
+                    errorCode: `${global_settings_const_1.DyNTS_global_settings.systemShortCodeName}|DyNTS-AS0-BASE-UR`,
+                    message: `Unhandled Rejection!: "${reason_theError?.stack?.split('at')?.[0]}"`,
+                    userMessage: this.defaultErrorUserMsg,
+                    addECToUserMsg: true,
+                    error: reason_theError,
+                    additionalContent: {
+                        reason: reason_theError,
+                        rejectedPromise: p_passWhatIsThis_maybeThePromise,
+                    },
+                    systemVersion: global_settings_const_1.DyNTS_global_settings.systemVersion,
+                    level: fsm_dynamo_1.DyFM_ErrorLevel.critical,
+                }));
+            }
+            catch (error) {
+                fsm_dynamo_1.DyFM_Log.error('globalErrorHandler (MULTILEVEL) ERROR:', error);
+            }
+        });
+        this.asyncConstruct( /* extended */).catch((error) => {
+            if (error instanceof fsm_dynamo_1.DyFM_Error) {
+                if (error.additionalContent?.constructErrors?.length) {
+                    error.additionalContent.constructErrors.forEach((errorItem) => {
+                        fsm_dynamo_1.DyFM_Error.logSimple('(constructor asyncConstruct.catch) error:', errorItem);
+                        /* if (errorItem instanceof DyFM_Error) {
+                          errorItem.logSimple(`(constructor asyncConstruct.catch) error:\n`);
+                        } else {
+                          DyFM_Log.H_warn(
+                            '(constructor asyncConstruct.catch) additional error content:\n',
+                            errorItem
+                          );
+                        } */
+                    });
+                }
+                else {
+                    fsm_dynamo_1.DyFM_Log.H_warn('(constructor asyncConstruct.catch) additional error content:\n', error?.additionalContent);
+                }
+            }
+            fsm_dynamo_1.DyFM_Error.logSimple('(constructor asyncConstruct.catch) error:', error);
+            /* if (
+              !DyNTS_global_settings.log_settings.highDetailedLogs &&
+              (error instanceof DyFM_Error)
+            ) {
+              error.logSimple(
+                `Application: "${this.params?.name}" start failed. (constructor asyncConstruct.catch)` +
+                '\n      all error messages (from this stack):\n\n"' +
+                error._messages.join('"\n\n"') + '"\n\n'
+              );
+            } else if (error instanceof DyFM_Error) {
+              DyFM_Log.H_error(
+                `Application: "${this.params?.name}" start failed. (constructor asyncConstruct.catch)`,
+                `\n    ERROR:`, error
+              );
+            } */
+            const message = error?.additionalContent?.constructErrors?.flatMap((errorItem) => {
+                return errorItem?._messages ?? [];
+            })?.join?.('\n') ??
+                error?.errors?.flatMap((errorItem) => errorItem?._messages ?? [errorItem?.message])?.join?.('\n') ??
+                error?.message ??
+                'UNKNOWN';
+            fsm_dynamo_1.DyFM_Log.testError('Application start failed:\n', message);
+            process.exit(1);
+        });
+    }
+    async asyncConstruct(extended) {
+        if (this.fnLogs && this.deepLog)
+            fsm_dynamo_1.DyFM_Log.log('\nfn:. asyncConstruct');
+        try {
+            this.systemControls.app.init = true;
+            this._params = this.getAppParams();
+            fsm_dynamo_1.DyFM_Log.log(`\n\n\n\n\n\n\n\n\n\n` +
+                `Starting ${this._params?.name}... ` +
+                /* `v${version}` + */
+                `\n\n\n\n\n\n\n\n\n\n`);
+            if (!this._params) {
+                throw new Error('getAppParams() must return a DyNTS_AppParams object!');
+            }
+            if (this.params.systemShortCodeName) {
+                global_settings_const_1.DyNTS_global_settings.systemShortCodeName = this.params.systemShortCodeName;
+            }
+            if (this.params.systemName) {
+                global_settings_const_1.DyNTS_global_settings.systemName = this.params.systemName;
+                fsm_dynamo_1.DyFM_error_defaults.issuerSystem = this.params.systemName;
+            }
+            if (this.params.version) {
+                global_settings_const_1.DyNTS_global_settings.systemVersion = this.params.version;
+                fsm_dynamo_1.DyFM_error_defaults.systemVersion = this.params.version;
+            }
+            process.stdout.write(String.fromCharCode(27) + ']0;' +
+                this._params?.name +
+                String.fromCharCode(7));
+            fsm_dynamo_1.DyFM_error_defaults.issuerSystem = this._params.systemName;
+            this.overrideDynamoNTSGlobalSettings?.();
+            if (global_settings_const_1.DyNTS_global_settings.log_settings.setup) {
+                fsm_dynamo_1.DyFM_Log.S_info(`env settings;\n`, {
+                    systemName: global_settings_const_1.DyNTS_global_settings.systemName,
+                    systemShortCodeName: global_settings_const_1.DyNTS_global_settings.systemShortCodeName,
+                    systemVersion: global_settings_const_1.DyNTS_global_settings.systemVersion,
+                    environment: global_settings_const_1.DyNTS_global_settings.env_settings.environment,
+                    /* log_settings: DyNTS_global_settings.log_settings,
+                    env_settings: DyNTS_global_settings.env_settings, */
+                });
+            }
+            this.globalService = global_service_1.DyNTS_GlobalService.getInstance();
+            await global_service_1.DyNTS_GlobalService.setServices(this.getGlobalServiceCollection());
+            global_service_1.DyNTS_GlobalService.setParams(this.params);
+            if (this.getPortSettings) {
+                this._portSettings = this.getPortSettings();
+            }
+            if (this.getCertificationSettings) {
+                this._cert = this.getCertificationSettings();
+            }
+            if (this.getApiBasePath) {
+                global_settings_const_1.DyNTS_global_settings.baseUrl = this.getApiBasePath();
+            }
+            if (this.getRoutingModules) {
+                this._routingModules = this.getRoutingModules();
+                // ezt egyelőre csak tesztelem, nem kerül be
+                /* if (
+                  !DyNTS_global_settings.dontCreateDefaultRoute &&
+                  !this._routingModules.some((routingModule: DyNTS_RoutingModule): boolean => routingModule.route === '/*')
+                ) {
+                  this._routingModules.push(
+                    DyNTS_getStarRoute()
+                  );
+                } */
+            }
+            if (this._params.dbUri) {
+                await this.startDB();
+                // createEntries csak akkor fut, ha a DB tényleg fel-jött.
+                // Ha a startDB jelezte a hibát, de továbbment, akkor a started flag false marad,
+                // és nem próbálunk meg írni egy nem létező kapcsolatra.
+                if (this.createEntries && this.systemControls.mongoose.started) {
+                    await this.createEntries();
+                }
+            }
+            else {
+                fsm_dynamo_1.DyFM_Log.log(`\nNo database connection created.`);
+            }
+            if (this._routingModules?.length) {
+                if (this.logSetup)
+                    fsm_dynamo_1.DyFM_Log.log('\nsetting up express routes...');
+                this.setSecurity();
+                await this.initExpresses();
+                await this.startExpresses();
+                if (this._security !== route_security_enum_1.DyNTS_RouteSecurity.secure) {
+                    await this.mountOpenRoutes();
+                }
+                if (this._security !== route_security_enum_1.DyNTS_RouteSecurity.open && this._cert) {
+                    await this.mountSecureRoutes();
+                }
+                // Generikus, auth-agnosztikus extension-point: custom middleware az API
+                // route-ok UTÁN, de a SPA static catch-all (mountStaticClient) ELŐTT.
+                await this.mountCustomMiddleware();
+                await this.mountStaticClient();
+                if (this.logSetup) {
+                    fsm_dynamo_1.DyFM_Log.log(`\nRoutes mounted.... server using security: ${this._security}`);
+                }
+            }
+            else {
+                fsm_dynamo_1.DyFM_Log.warn(`\nNo routes mounted!`);
+            }
+            if (this.getRootServices) {
+                this._rootServices = await this.getRootServices();
+            }
+            if (this.postProcess) {
+                await this.postProcess().catch((error) => {
+                    fsm_dynamo_1.DyFM_Error.logSimple(`"${this._params.name}" postProcess failed:`, error);
+                    global_service_1.DyNTS_GlobalService.globalErrorHandler?.(error);
+                });
+            }
+            // FR-193 — bedrock OOM korai-figyelmeztetés: feltelepítjük a heap-watchdogot, ha
+            // engedélyezve (DyNTS_global_settings.memoryGuard.enabled, default true). Biztonságos:
+            // a guard egy könnyű setInterval, ami SOHA nem dob; csak near-OOM küszöböknél hagy
+            // tartós nyomot az error-sinkbe, mielőtt a fatal heap-OOM megölné a process-t.
+            try {
+                if (global_settings_const_1.DyNTS_global_settings.memoryGuard?.enabled) {
+                    memory_guard_service_1.DyNTS_MemoryGuard.getInstance().install();
+                }
+            }
+            catch (memoryGuardError) {
+                fsm_dynamo_1.DyFM_Log.warn('[DyNTS_MemoryGuard] auto-install skipped (non-fatal):', memoryGuardError);
+            }
+            if (!extended) {
+                await this.ready();
+                if (this.params.title) {
+                    fsm_dynamo_1.DyFM_Log.success(this.params.title);
+                }
+                fsm_dynamo_1.DyFM_Log.info(`Version: ${this.params.version}`);
+                /* DyFM_Log.info(`NTS Version: ${this.ntsVersion}`); */
+                fsm_dynamo_1.DyFM_Log.H_success(`${this.params.name} started successfully.`);
+            }
+        }
+        catch (error) {
+            this.constructErrors.push(error);
+            if (this.deepLog) {
+                if (global_settings_const_1.DyNTS_global_settings.log_settings.highDetailedLogs) {
+                    fsm_dynamo_1.DyFM_Log.H_error(`"${this._params.name}" start failed (in asyncConstruct (highDetailedLog)). `, `\n\n    construct ERRORS:`, this.constructErrors, '\n\nlast error:', error);
+                }
+                else {
+                    fsm_dynamo_1.DyFM_Log.H_error(`"${this._params.name}" start failed (in asyncConstruct). `, `\n\n    construct ERRORS:`, this.getSimplifiedConstructErrors(), '\n\nlast error:', error instanceof fsm_dynamo_1.DyFM_Error ? error.getErrorSimplified() : error);
+                }
+            }
+            throw new fsm_dynamo_1.DyFM_Error({
+                ...this._getDefaultErrorSettings('asyncConstruct', error),
+                errorCode: `${global_settings_const_1.DyNTS_global_settings.systemShortCodeName}|DyNTS-AS0-001`,
+                additionalContent: {
+                    constructErrors: this.constructErrors,
+                    systemControls: this.systemControls,
+                    systemReadies: {
+                        app: this.systemControls.app.getIsReady(),
+                        mongoose: this.systemControls.mongoose.getIsReady(),
+                        httpServer: this.systemControls.httpServer.getIsReady(),
+                        httpsServer: this.systemControls.httpsServer.getIsReady(),
+                    },
+                },
+            });
+        }
+    }
+    async ready(timeout = this.defaultReadyTimeout) {
+        try {
+            if (this.fnLogs)
+                fsm_dynamo_1.DyFM_Log.log('\nfn:. ready');
+            await fsm_dynamo_1.DyFM_Async.delay(100);
+            let ready = false;
+            const start = +new Date();
+            if (this.constructErrors.length) {
+                if (this.deepLog) {
+                    if (global_settings_const_1.DyNTS_global_settings.log_settings.highDetailedLogs) {
+                        fsm_dynamo_1.DyFM_Log.H_error(`"${this._params.name}" start failed. (ready; constructErrors check 1)`, `\n    construct ERRORS:`, this.constructErrors);
+                    }
+                    else {
+                        fsm_dynamo_1.DyFM_Log.H_error(`"${this._params.name}" start failed. (ready; constructErrors check 1)`, `\n    construct ERRORS:`, this.getSimplifiedConstructErrors());
+                    }
+                }
+                throw new fsm_dynamo_1.DyFM_Error({
+                    ...this._getDefaultErrorSettings('ready', new Error(`"${this._params.name}" start failed.`)),
+                    errorCode: `${global_settings_const_1.DyNTS_global_settings.systemShortCodeName}|DyNTS-AS0-R01`,
+                    additionalContent: this.constructErrors.length === 1 ?
+                        { error: this.constructErrors[0] } :
+                        { errors: this.constructErrors },
+                });
+            }
+            while (!ready && +new Date() - start < timeout) {
+                if (this.systemControls.app.init) {
+                    ready = (this.systemControls.mongoose.getIsReady() &&
+                        this.systemControls.httpServer.getIsReady() &&
+                        this.systemControls.httpsServer.getIsReady());
+                }
+                else {
+                    fsm_dynamo_1.DyFM_Log.error(`"${this._params.name}" APP NOT INITIALIZED while trying to get ready.`);
+                }
+                if (!ready) {
+                    await fsm_dynamo_1.DyFM_Async.wait(100);
+                }
+            }
+            if (timeout < +new Date() - start) {
+                if (this.deepLog) {
+                    if (global_settings_const_1.DyNTS_global_settings.log_settings.highDetailedLogs) {
+                        fsm_dynamo_1.DyFM_Log.H_error(`"${this._params.name}" start failed. (ready; TIMEOUT check)`, `\n    construct ERRORS:`, this.constructErrors);
+                    }
+                    else {
+                        fsm_dynamo_1.DyFM_Log.H_error(`"${this._params.name}" start failed. (ready; TIMEOUT check)`, `\n    construct ERRORS:`, this.getSimplifiedConstructErrors());
+                    }
+                }
+                throw new fsm_dynamo_1.DyFM_Error({
+                    ...this._getDefaultErrorSettings('ready', new Error(`"${this._params.name}" start failed. TIMEOUT`)),
+                    errorCode: `${global_settings_const_1.DyNTS_global_settings.systemShortCodeName}|DyNTS-AS0-R02`,
+                    additionalContent: {
+                        constructErrors: this.constructErrors,
+                        systemControls: this.systemControls,
+                        systemReadies: {
+                            mongoose: this.systemControls.mongoose.getIsReady(),
+                            httpServer: this.systemControls.httpServer.getIsReady(),
+                            httpsServer: this.systemControls.httpsServer.getIsReady(),
+                        },
+                    },
+                });
+            }
+            if (this.constructErrors.length) {
+                if (this.deepLog) {
+                    if (global_settings_const_1.DyNTS_global_settings.log_settings.highDetailedLogs) {
+                        fsm_dynamo_1.DyFM_Log.H_error(`"${this._params.name}" start failed. (ready; constructErrors check 2)`, `\n    construct ERRORS:`, this.constructErrors);
+                    }
+                    else {
+                        fsm_dynamo_1.DyFM_Log.H_error(`"${this._params.name}" start failed. (ready; constructErrors check 2)`, `\n    construct ERRORS:`, this.getSimplifiedConstructErrors());
+                    }
+                }
+                throw new fsm_dynamo_1.DyFM_Error({
+                    ...this._getDefaultErrorSettings('ready', new Error(`"${this._params.name}" start failed.`)),
+                    errorCode: `${global_settings_const_1.DyNTS_global_settings.systemShortCodeName}|DyNTS-AS0-R03`,
+                    additionalContent: this.constructErrors,
+                });
+            }
+            if (ready) {
+                this.systemControls.app.started = true;
+                if (this.fnLogs && this.deepLog)
+                    fsm_dynamo_1.DyFM_Log.log('\nfn:. ready: return');
+                return;
+            }
+            this.systemControls.app.started = false;
+            let msg = `"${this._params.name}" start failed. UNKNOWN`;
+            if (this.systemControls.mongoose.init && !this.systemControls.mongoose.started) {
+                msg += `\nMongoose start failed.`;
+            }
+            if (this.systemControls.httpServer.init && !this.systemControls.httpServer.started) {
+                msg += `\nHTTP Server start failed.`;
+            }
+            if (this.systemControls.httpsServer.init && !this.systemControls.httpsServer.started) {
+                msg += `\nHTTPS Server start failed.`;
+            }
+            fsm_dynamo_1.DyFM_Log.error(msg, this.constructErrors);
+            throw new fsm_dynamo_1.DyFM_Error({
+                ...this._getDefaultErrorSettings('ready', new Error(msg)),
+                errorCode: `${global_settings_const_1.DyNTS_global_settings.systemShortCodeName}|DyNTS-AS0-R04`,
+                additionalContent: {
+                    constructErrors: this.constructErrors,
+                    systemControls: this.systemControls,
+                    systemReadies: {
+                        app: this.systemControls.app.getIsReady(),
+                        mongoose: this.systemControls.mongoose.getIsReady(),
+                        httpServer: this.systemControls.httpServer.getIsReady(),
+                        httpsServer: this.systemControls.httpsServer.getIsReady(),
+                    },
+                },
+                error: this.constructErrors?.[0] ?? new Error(),
+            });
+        }
+        catch (error) {
+            throw new fsm_dynamo_1.DyFM_Error({
+                ...this._getDefaultErrorSettings('ready', error),
+                errorCode: `${global_settings_const_1.DyNTS_global_settings.systemShortCodeName}|DyNTS-AS0-READY0`,
+            });
+        }
+    }
+    getSimplifiedConstructErrors() {
+        return this.constructErrors.map((error) => {
+            if (error instanceof fsm_dynamo_1.DyFM_Error) {
+                return error.getErrorSimplified();
+            }
+            else {
+                return error;
+            }
+        });
+    }
+    async stop(dontLog) {
+        try {
+            fsm_dynamo_1.DyFM_Log.info('\nstopping server...\n');
+            await this.ready();
+            if (this.started) {
+                if (this.systemControls.mongoose.init) {
+                    fsm_dynamo_1.DyFM_Log.info(`\nstopping Mongoose....`);
+                    let tryCount = 0;
+                    while (!this.systemControls.mongoose.started &&
+                        !this.constructErrors.length &&
+                        tryCount++ < 10) {
+                        fsm_dynamo_1.DyFM_Log.warn(`Mongoose not even started yet....`);
+                        await fsm_dynamo_1.DyFM_Async.wait(fsm_dynamo_1.second);
+                    }
+                    this.systemControls.mongoose.started = false;
+                    if (this.mongoose) {
+                        await fsm_dynamo_1.DyFM_Array.asyncForEach(Object.keys(this.mongoose.models), async (modelName) => {
+                            this.mongoose.deleteModel(modelName);
+                        });
+                        const disconnect = new Promise((resolve) => {
+                            this.mongoose.connection.on('disconnecting', () => {
+                                resolve();
+                            });
+                        });
+                        await this.mongoose.disconnect();
+                        await this.mongoose.connection.close();
+                        await disconnect;
+                        this.mongoose.connection.removeAllListeners();
+                        while (this.mongoose.connection.readyState !== 0 &&
+                            !this.constructErrors.length) {
+                            fsm_dynamo_1.DyFM_Log.warn(`\nMongoose still not disconnected....`);
+                            await fsm_dynamo_1.DyFM_Async.wait(fsm_dynamo_1.second);
+                        }
+                    }
+                    else {
+                        fsm_dynamo_1.DyFM_Log.error(`\nMongoose not found.`);
+                    }
+                    this.systemControls.mongoose.init = false;
+                }
+                if (this.systemControls.httpServer.init) {
+                    this.systemControls.httpServer.started = false;
+                    if (this.httpServer) {
+                        await new Promise((resolve) => {
+                            this.httpServer.close(resolve);
+                        });
+                    }
+                    else {
+                        fsm_dynamo_1.DyFM_Log.error(`\nHTTP Server not found.`);
+                    }
+                    this.systemControls.httpServer.init = false;
+                }
+                if (this.systemControls.httpsServer.init) {
+                    this.systemControls.httpsServer.started = false;
+                    if (this.httpsServer) {
+                        await new Promise((resolve) => {
+                            this.httpsServer.close(resolve);
+                        });
+                    }
+                    else {
+                        fsm_dynamo_1.DyFM_Log.error(`\nHTTPS Server not found.`);
+                    }
+                    this.systemControls.httpsServer.init = false;
+                }
+                await fsm_dynamo_1.DyFM_Async.wait(fsm_dynamo_1.second);
+                if (!dontLog) {
+                    fsm_dynamo_1.DyFM_Log.H_log(`"${this._params.name}" stopped successfully.`);
+                }
+            }
+        }
+        catch (error) {
+            throw new fsm_dynamo_1.DyFM_Error({
+                ...this._getDefaultErrorSettings('stop', error),
+                errorCode: `${global_settings_const_1.DyNTS_global_settings.systemShortCodeName}|DyNTS-AS0-STOP0`,
+            });
+        }
+    }
+    /**
+     *
+     */
+    async startDB() {
+        if (this.fnLogs && this.deepLog)
+            fsm_dynamo_1.DyFM_Log.log('\nfn:. startDB');
+        else if (this.logSetup)
+            fsm_dynamo_1.DyFM_Log.log('\nstarting DB connection...');
+        if (!this._params.dbUri) {
+            throw new fsm_dynamo_1.DyFM_Error({
+                ...this._getDefaultErrorSettings('startDB', new Error('DB URI is not set.')),
+                errorCode: `${global_settings_const_1.DyNTS_global_settings.systemShortCodeName}|DyNTS-AS0-SDB0`,
+            });
+        }
+        if (!this._params.dbOptions) {
+            throw new fsm_dynamo_1.DyFM_Error({
+                ...this._getDefaultErrorSettings('startDB', new Error('DB OPTIONS are not set.')),
+                errorCode: `${global_settings_const_1.DyNTS_global_settings.systemShortCodeName}|DyNTS-AS0-SDB0`,
+            });
+        }
+        if (this.systemControls.mongoose.init || this.systemControls.mongoose.started) {
+            throw new fsm_dynamo_1.DyFM_Error({
+                ...this._getDefaultErrorSettings('startDB', new Error('Mongoose is already initialized.')),
+                errorCode: `${global_settings_const_1.DyNTS_global_settings.systemShortCodeName}|DyNTS-AS0-SDB0`,
+            });
+        }
+        try {
+            await new Promise((resolve, reject) => {
+                this.systemControls.mongoose.init = true;
+                this.mongoose.connection
+                    .once('open', () => {
+                    this.systemControls.mongoose.started = true;
+                    fsm_dynamo_1.DyFM_Log.success(`\nConnected to MongoDB (${this._params.dbUri})\n`);
+                    resolve();
+                })
+                    .on('error', (error) => {
+                    if (!this.systemControls.mongoose.started) {
+                        // Initial DB-csatlakozás sikertelen:
+                        // jelezzük a hibát (log + globalErrorHandler), de NEM szakítjuk meg az
+                        // App startup-ot (nincs constructErrors push, nincs reject).
+                        // A mongoose.init-et resetteljük, hogy a ready() ne várjon a DB-re.
+                        // Ha a mongoose később mégis tudna csatlakozni, az 'open' event
+                        // beállítja a started flag-et, így a runtime DB-műveletek elindulnak.
+                        this.systemControls.mongoose.init = false;
+                        const d_error = new fsm_dynamo_1.DyFM_Error({
+                            ...this._getDefaultErrorSettings('startDB', error),
+                            errorCode: `${global_settings_const_1.DyNTS_global_settings.systemShortCodeName}|DyNTS-AS0-SDB1`,
+                            message: `Unable to connect to MongoDB server (${this._params.dbUri}), ` +
+                                `ERROR: ${error}`,
+                            level: fsm_dynamo_1.DyFM_ErrorLevel.serious,
+                        });
+                        fsm_dynamo_1.DyFM_Log.H_error(`\nUnable to connect to MongoDB server (${this._params.dbUri}).` +
+                            `\nServer will continue WITHOUT DB connection.` +
+                            `\nDB-using endpoints will fail at runtime until connection recovers.`);
+                        if (this.debugLog)
+                            fsm_dynamo_1.DyFM_Log.S_error(`\nMongoDB connect ERROR: `, error);
+                        global_service_1.DyNTS_GlobalService.globalErrorHandler?.(d_error);
+                        resolve();
+                    }
+                    else {
+                        if (this.debugLog)
+                            fsm_dynamo_1.DyFM_Log.error('\nMongoDB ERROR: ', error);
+                        const d_error = new fsm_dynamo_1.DyFM_Error({
+                            ...this._getDefaultErrorSettings('mongoose.connection.on(error)', error),
+                            errorCode: `${global_settings_const_1.DyNTS_global_settings.systemShortCodeName}|DyNTS-AS0-SDB2`,
+                            message: `MongoDB ERROR: ${error}`,
+                            level: fsm_dynamo_1.DyFM_ErrorLevel.critical,
+                        });
+                        global_service_1.DyNTS_GlobalService.globalErrorHandler?.(d_error);
+                    }
+                });
+                try {
+                    this.mongoose.connect(this._params.dbUri, this._params.dbOptions
+                    /* {
+                      directConnection: true,
+                    } */
+                    );
+                }
+                catch (error) {
+                    throw new fsm_dynamo_1.DyFM_Error({
+                        ...this._getDefaultErrorSettings('startDB', error),
+                        errorCode: `${global_settings_const_1.DyNTS_global_settings.systemShortCodeName}|DyNTS-AS0-SDB3`,
+                    });
+                }
+            });
+        }
+        catch (error) {
+            throw new fsm_dynamo_1.DyFM_Error({
+                ...this._getDefaultErrorSettings('startDB', error),
+                errorCode: `${global_settings_const_1.DyNTS_global_settings.systemShortCodeName}|DyNTS-AS0-SDB0`,
+            });
+        }
+        // 2026-06-20 — Mongo reconnect-guard. A MongoDB-driver a hostnevet connect-kor EGYSZER
+        // resolválja + cache-eli az IP-t; ha a Mongo-konténert recreate-elik (új docker-network IP),
+        // a driver a HALOTT IP-n ragad → ECONNREFUSED + buffering-timeout, és a service magától SOHA
+        // nem áll vissza. A guard sustained-disconnect (readyState !== 1) esetén — a driver saját
+        // grace-e UTÁN — TELJES disconnect()+connect()-et csinál → ÚJ MongoClient → ÚJ DNS-resolve →
+        // új IP → reconnect. Best-effort, always-on, healthy connection-t (===1) SOHA nem bánt; csak
+        // konténer-IP-frissítés, nem ír adatot. Lásd: mongo-reconnect-guard.util.ts.
+        try {
+            (0, mongo_reconnect_guard_util_1.startMongoReconnectGuard)({
+                getReadyState: () => this.mongoose.connection.readyState,
+                reconnect: async () => {
+                    await this.mongoose.disconnect().catch(() => undefined);
+                    await this.mongoose.connect(this._params.dbUri, this._params.dbOptions);
+                },
+                log: (msg) => fsm_dynamo_1.DyFM_Log.warn(msg),
+            });
+        }
+        catch (guardErr) {
+            fsm_dynamo_1.DyFM_Log.warn(`[mongo-reconnect-guard] failed to start (non-fatal): ${guardErr instanceof Error ? guardErr.message : String(guardErr)}`);
+        }
+    }
+    /**
+     *
+     */
+    async initExpresses() {
+        if (this.fnLogs && this.deepLog)
+            fsm_dynamo_1.DyFM_Log.log('\nfn:. initExpresses');
+        try {
+            if (this._security && this._security !== route_security_enum_1.DyNTS_RouteSecurity.secure) {
+                if (this._portSettings.httpPort === undefined || this._portSettings.httpPort === null) {
+                    let errorMsg = `\nYou have open routes, but httpPort is not set!` +
+                        `\nThere are ${this._routingModules.filter(m => m.security != route_security_enum_1.DyNTS_RouteSecurity.secure).length} open/both routes` +
+                        `\nroot security: ${this._security}` +
+                        `\nset httpPort in DynamoBEServer - setupRoutingModules() to enable secure routes.`;
+                    errorMsg += '\n\nThe routes setted to use open server:';
+                    this._routingModules.forEach((module) => {
+                        if (module.security != route_security_enum_1.DyNTS_RouteSecurity.secure) {
+                            errorMsg += `\n  ${module.route} (security: ${module.security})`;
+                            errorMsg += `\n  subroutes using open sever:`;
+                            module.endpoints.forEach((endpoint) => {
+                                if (endpoint.security != route_security_enum_1.DyNTS_RouteSecurity.secure) {
+                                    errorMsg += `\n    ${endpoint.endpoint} (security: ${endpoint.security})`;
+                                }
+                            });
+                        }
+                    });
+                    const error = new Error(`Open routes cannot be established!\n${errorMsg}`);
+                    const errorStack = error.stack.split('\n');
+                    errorStack.splice(1, 2);
+                    error.stack = errorStack.join('\n');
+                    fsm_dynamo_1.DyFM_Log.error(errorMsg);
+                    throw error;
+                }
+                await this.initOpenExpress();
+            }
+            if (this._security && this._security !== route_security_enum_1.DyNTS_RouteSecurity.open) {
+                if (!this._cert || !this._portSettings.httpsPort) {
+                    let errorMsg = `\nYou have secure routes, but the certification paths or httpsPort are not set!` +
+                        `\nThere are ${this._routingModules.filter(m => m.security && m.security !== route_security_enum_1.DyNTS_RouteSecurity.open).length} secure routes` +
+                        `\nroot security: ${this._security}` +
+                        `\nset...` +
+                        `\n(missing exact howto...)` +
+                        /* `\n  httpsPort and` +
+                        `\n  cert: {` +
+                        `\n    keyPath: FileSystem.PathLike,` +
+                        `\n    certPath: FileSystem.PathLike,` +
+                        `\n  }` + */
+                        `\nin DynamoBEServer - getRoutingModules() to enable secure routes.`;
+                    errorMsg += '\n\nThe routes setted to use secure server:';
+                    this._routingModules.forEach((module) => {
+                        if (module.security && module.security !== route_security_enum_1.DyNTS_RouteSecurity.open) {
+                            errorMsg += `\n  ${module.route} (security: ${module.security})`;
+                            errorMsg += `\n    location: ${module.stackLocation}`;
+                            errorMsg += `\n    subroutes using secure sever:`;
+                            module.endpoints.forEach((endpoint) => {
+                                if (endpoint.security && endpoint.security !== route_security_enum_1.DyNTS_RouteSecurity.open) {
+                                    errorMsg += `\n      ${endpoint.endpoint} (security: ${endpoint.security})`;
+                                    errorMsg += `\n        location: ${endpoint.stackLocation}`;
+                                }
+                            });
+                        }
+                    });
+                    const error = new Error(`Secure routes cannot be established!\n${errorMsg}`);
+                    const errorStack = error.stack.split('\n');
+                    errorStack.splice(1, 2);
+                    error.stack = errorStack.join('\n');
+                    fsm_dynamo_1.DyFM_Log.error(errorMsg);
+                    throw error;
+                }
+                await this.initSecureExpress();
+            }
+        }
+        catch (error) {
+            throw new fsm_dynamo_1.DyFM_Error({
+                ...this._getDefaultErrorSettings('initExpresses', error),
+                errorCode: `${global_settings_const_1.DyNTS_global_settings.systemShortCodeName}|DyNTS-AS0-IE0`,
+            });
+        }
+    }
+    /**
+     *
+     */
+    async initOpenExpress() {
+        if (this.fnLogs)
+            fsm_dynamo_1.DyFM_Log.log('\nfn:. initOpenExpress');
+        this.openExpress = Express();
+        this.openExpress.set('maxHeaderSize', 10 * fsm_dynamo_1.megabyte); // 1024 * 1024 * 10, // 10MB
+        this.openExpress.use(BodyParser.urlencoded(this._portSettings.httpUrlencoded));
+        this.openExpress.use(BodyParser.json(this._portSettings.httpJson));
+        // FR-041 — CORS allowlist enforcement. No-op if getCorsSettings() is not overridden.
+        this.mountCors(this.openExpress);
+    }
+    /**
+     *
+     */
+    async initSecureExpress() {
+        if (this.fnLogs)
+            fsm_dynamo_1.DyFM_Log.log('\nfn:. initSecureExpress');
+        this.secureExpress = Express();
+        this.secureExpress.use(BodyParser.urlencoded(this._portSettings.httpsUrlencoded));
+        this.secureExpress.use(BodyParser.json(this._portSettings.httpsJson));
+        // FR-041 — CORS allowlist enforcement (same as open express).
+        this.mountCors(this.secureExpress);
+        const options = {
+            key: FileSystem.readFileSync(this._cert.keyPath),
+            cert: FileSystem.readFileSync(this._cert.certPath),
+            maxHeaderSize: 10 * fsm_dynamo_1.megabyte, // 1024 * 1024 * 10, // 10MB
+        };
+        this.httpsServer = Https.createServer(options, this.secureExpress);
+    }
+    /**
+     *
+     */
+    async startExpresses() {
+        if (this.fnLogs && this.deepLog)
+            fsm_dynamo_1.DyFM_Log.log('\nfn:. startExpresses');
+        try {
+            if (this._security && this._security !== route_security_enum_1.DyNTS_RouteSecurity.open) {
+                await new Promise((resolve, reject) => {
+                    this.systemControls.httpsServer.init = true;
+                    this.httpsServer
+                        .listen(this._portSettings.httpsPort, this.params.secureHost, this.params.expressBacklog, () => {
+                        this.systemControls.httpsServer.started = true;
+                        fsm_dynamo_1.DyFM_Log.success(`\nHTTPS (secure) server is listening on port: ` +
+                            `${this.params.secureHost}:${this._portSettings.httpsPort}`);
+                        resolve();
+                    })
+                        .on('error', (error) => {
+                        if (this.debugLog)
+                            fsm_dynamo_1.DyFM_Log.error(`\nHTTPS (secure) server ERROR`, error);
+                        if (!this.systemControls.httpsServer.started) {
+                            const d_error = new fsm_dynamo_1.DyFM_Error({
+                                ...this._getDefaultErrorSettings('startExpresses', error),
+                                errorCode: `${global_settings_const_1.DyNTS_global_settings.systemShortCodeName}|DyNTS-AS0-SE1`,
+                                message: `HTTPS (secure) start server ERROR`,
+                            });
+                            this.constructErrors.push(d_error);
+                            global_service_1.DyNTS_GlobalService.globalErrorHandler?.(d_error);
+                            reject(d_error);
+                        }
+                        else {
+                            const d_error = new fsm_dynamo_1.DyFM_Error({
+                                ...this._getDefaultErrorSettings('httpsServer.on(error)', error),
+                                errorCode: `${global_settings_const_1.DyNTS_global_settings.systemShortCodeName}|DyNTS-AS0-SE2`,
+                                message: `HTTPS (secure) server ERROR`,
+                                level: fsm_dynamo_1.DyFM_ErrorLevel.serious,
+                            });
+                            global_service_1.DyNTS_GlobalService.globalErrorHandler?.(d_error);
+                        }
+                    })
+                        .on('uncaughtException', (exception) => {
+                        const d_error = new fsm_dynamo_1.DyFM_Error({
+                            ...this._getDefaultErrorSettings('httpsServer.on(uncaughtException)', exception),
+                            errorCode: `${global_settings_const_1.DyNTS_global_settings.systemShortCodeName}|DyNTS-AS0-SE3`,
+                            message: `HTTPS (secure) server uncaughtException`,
+                            level: fsm_dynamo_1.DyFM_ErrorLevel.critical,
+                        });
+                        if (this.debugLog)
+                            fsm_dynamo_1.DyFM_Log.warn(`\nHTTPS (secure) server uncaughtException`, d_error);
+                        global_service_1.DyNTS_GlobalService.globalErrorHandler?.(d_error);
+                    });
+                });
+            }
+            if (this._security && this._security !== route_security_enum_1.DyNTS_RouteSecurity.secure) {
+                this.systemControls.httpServer.init = true;
+                await new Promise((resolve, reject) => {
+                    this.httpServer = this.openExpress
+                        .listen(this._portSettings.httpPort, this.params.openHost, this.params.expressBacklog, () => {
+                        this.systemControls.httpServer.started = true;
+                        const resolvedPort = this.httpServer?.address?.()?.['port'] ?? this._portSettings.httpPort;
+                        if (this._portSettings.httpPort === 0) {
+                            fsm_dynamo_1.DyFM_Log.H_warn(`\nHTTP (open) server is using a randomly selected port by the OS: ${resolvedPort}` +
+                                `\n  (httpPort was set to 0 — this is intended for testing only)`);
+                        }
+                        fsm_dynamo_1.DyFM_Log.success(`\nHTTP (open) server is listening on port: ` +
+                            `${this.params.openHost}:${resolvedPort}`);
+                        resolve();
+                    })
+                        .on('error', (error) => {
+                        if (this.debugLog)
+                            fsm_dynamo_1.DyFM_Log.error(`\nHTTP (open) server ERROR`, error);
+                        if (!this.systemControls.httpServer.started) {
+                            const d_error = new fsm_dynamo_1.DyFM_Error({
+                                ...this._getDefaultErrorSettings('startExpresses', error),
+                                errorCode: `${global_settings_const_1.DyNTS_global_settings.systemShortCodeName}|DyNTS-AS0-SE3`,
+                                message: `HTTP (open) start server ERROR`,
+                            });
+                            this.constructErrors.push(d_error);
+                            global_service_1.DyNTS_GlobalService.globalErrorHandler?.(d_error);
+                            reject(d_error);
+                        }
+                        else {
+                            const d_error = new fsm_dynamo_1.DyFM_Error({
+                                ...this._getDefaultErrorSettings('httpServer.on(error)', error),
+                                errorCode: `${global_settings_const_1.DyNTS_global_settings.systemShortCodeName}|DyNTS-AS0-SE4`,
+                                message: `HTTP (open) server ERROR`,
+                                level: fsm_dynamo_1.DyFM_ErrorLevel.serious,
+                            });
+                            global_service_1.DyNTS_GlobalService.globalErrorHandler?.(d_error);
+                        }
+                    })
+                        .on('uncaughtException', (exception) => {
+                        const d_error = new fsm_dynamo_1.DyFM_Error({
+                            ...this._getDefaultErrorSettings('httpServer.on(uncaughtException)', exception),
+                            errorCode: `${global_settings_const_1.DyNTS_global_settings.systemShortCodeName}|DyNTS-AS0-SE5`,
+                            message: `HTTP (open) server uncaughtException`,
+                            level: fsm_dynamo_1.DyFM_ErrorLevel.critical,
+                        });
+                        if (this.debugLog) {
+                            fsm_dynamo_1.DyFM_Log.warn(`\nHTTP (open) server uncaughtException`, d_error);
+                        }
+                        global_service_1.DyNTS_GlobalService.globalErrorHandler?.(d_error);
+                    });
+                });
+            }
+        }
+        catch (error) {
+            throw new fsm_dynamo_1.DyFM_Error({
+                ...this._getDefaultErrorSettings('startExpresses', error),
+                errorCode: `${global_settings_const_1.DyNTS_global_settings.systemShortCodeName}|DyNTS-AS0-SE0`,
+            });
+        }
+    }
+    /**
+     *
+     */
+    async expressErrorHandling(error, req, res, next) {
+        try {
+            if (error) {
+                const d_error = new fsm_dynamo_1.DyFM_Error({
+                    ...this._getDefaultErrorSettings('expressErrorHandling', error),
+                    errorCode: `${global_settings_const_1.DyNTS_global_settings.systemShortCodeName}|DyNTS-AS0-EEH1`,
+                    message: `Express ERROR`,
+                    additionalContent: {
+                        req,
+                        res,
+                    },
+                    level: fsm_dynamo_1.DyFM_ErrorLevel.error,
+                });
+                await global_service_1.DyNTS_GlobalService.globalErrorHandler?.(d_error, req, res);
+                res.send(error);
+            }
+            else {
+                fsm_dynamo_1.DyFM_Log.H_error('WTF??? express error; without error?...' +
+                    '\nerr:', error, '\nreq:', req, '\nres:', res);
+            }
+        }
+        catch (error) {
+            fsm_dynamo_1.DyFM_Log.H_error('MULTILEVEL ERROR (expressErrorHandling)....' +
+                '\n', error);
+        }
+    }
+    /**
+     *
+     */
+    async mountSecureRoutes() {
+        try {
+            if (this.fnLogs && this.deepLog)
+                fsm_dynamo_1.DyFM_Log.log('\nfn:. mountSecureRoutes');
+            if (!this.secureExpress) {
+                throw new Error('secureExpress was not initialized. ' +
+                    'Secure routes require getCertificationSettings and httpsPort, and cert files must exist.' +
+                    '\n\nYou need to set security to secure or both in any route and set httpsPort in getPortSettings.' +
+                    '\n\nYou need to set cert files in getCertificationSettings.');
+            }
+            this.secureExpress.use((error, req, res, next) => this.expressErrorHandling(error, req, res, next));
+            await fsm_dynamo_1.DyFM_Array.asyncForEach(this._routingModules, async (module) => {
+                if (module.security !== route_security_enum_1.DyNTS_RouteSecurity.open) {
+                    if (this.logSetup) {
+                        fsm_dynamo_1.DyFM_Log.log(`route mount (secure): ${module.route}`);
+                    }
+                    const existingRoutes = this._routingModules.filter((mod) => mod.route === module.route);
+                    if (1 < existingRoutes.length) {
+                        const error = new Error(`ROUTE DUPLICATION: ${module.route}`);
+                        /* const errorStack: string[] = error.stack.split('\n');
+          
+                        errorStack.splice(1, 4);
+                        error.stack = errorStack.join('\n'); */
+                        error.stack = module.stackLocation;
+                        fsm_dynamo_1.DyFM_Log.S_error(`ROUTE DUPLICATION: ${module.route}`, error);
+                        throw new fsm_dynamo_1.DyFM_Error({
+                            ...this._getDefaultErrorSettings('mountSecureRoutes', error),
+                            errorCode: `${global_settings_const_1.DyNTS_global_settings.systemShortCodeName}|DyNTS-AS0-MSR1`,
+                            message: `ROUTE DUPLICATION: ${module.route}`,
+                        });
+                    }
+                    this.secureExpress.use(module.route, module.secureRouter);
+                }
+            });
+        }
+        catch (error) {
+            throw new fsm_dynamo_1.DyFM_Error({
+                ...this._getDefaultErrorSettings('mountSecureRoutes', error),
+                errorCode: `${global_settings_const_1.DyNTS_global_settings.systemShortCodeName}|DyNTS-AS0-MSR0`,
+            });
+        }
+    }
+    /**
+     *
+     */
+    async mountOpenRoutes() {
+        try {
+            if (this.fnLogs && this.deepLog)
+                fsm_dynamo_1.DyFM_Log.log('\nfn:. mountOpenRoutes');
+            if (!this.openExpress) {
+                throw new Error('openExpress was not initialized. Open routes require getOpenExpress and httpPort.' +
+                    '\n\nYou need to set security to open or both in any route and set httpPort in getPortSettings.');
+            }
+            this.openExpress.use((error, req, res, next) => this.expressErrorHandling(error, req, res, next));
+            await fsm_dynamo_1.DyFM_Array.asyncForEach(this._routingModules, async (module) => {
+                if (module.security !== route_security_enum_1.DyNTS_RouteSecurity.secure) {
+                    if (this.logSetup) {
+                        fsm_dynamo_1.DyFM_Log.log(`route mount (open): ${module.route}`);
+                    }
+                    const existingRoutes = this._routingModules.filter((mod) => mod.route === module.route);
+                    if (1 < existingRoutes.length) {
+                        const error = new Error(`ROUTE DUPLICATION: ${module.route}`);
+                        /* const errorStack: string[] = error.stack.split('\n');
+            
+                        errorStack.splice(1, 4);
+                        error.stack = errorStack.join('\n'); */
+                        error.stack = module.stackLocation;
+                        fsm_dynamo_1.DyFM_Log.S_error(`ROUTE DUPLICATION: ${module.route}`, error);
+                        throw new fsm_dynamo_1.DyFM_Error({
+                            ...this._getDefaultErrorSettings('mountOpenRoutes', error),
+                            errorCode: `${global_settings_const_1.DyNTS_global_settings.systemShortCodeName}|DyNTS-AS0-MOR1`,
+                            message: `ROUTE DUPLICATION: ${module.route}`,
+                        });
+                    }
+                    this.openExpress.use(module.route, module.openRouter);
+                }
+            });
+        }
+        catch (error) {
+            throw new fsm_dynamo_1.DyFM_Error({
+                ...this._getDefaultErrorSettings('mountOpenRoutes', error),
+                errorCode: `${global_settings_const_1.DyNTS_global_settings.systemShortCodeName}|DyNTS-AS0-MOR0`,
+            });
+        }
+    }
+    /**
+     * FR-041 — CORS middleware. Echoes a matching `Access-Control-Allow-Origin`
+     * for any request whose Origin header is in `getCorsSettings().allowedOrigins`,
+     * adds the canonical `Access-Control-*` companion headers, and short-circuits
+     * the OPTIONS preflight with a 204.
+     *
+     * No-op when the subclass does NOT override `getCorsSettings()` — preserves
+     * back-compat for apps that have always been same-origin and never needed
+     * CORS (the typical pre-FR-041 case).
+     *
+     * Why hand-rolled instead of the `cors` npm package:
+     *  - ~30 lines, zero new dependency.
+     *  - Full control over Vary/credentials/preflight semantics.
+     *  - Aligns with FDP "no unnecessary deps" philosophy.
+     */
+    mountCors(express) {
+        const settings = this.getCorsSettings?.();
+        if (!settings) {
+            return;
+        }
+        const allowCreds = settings.allowCredentials !== false;
+        const methods = settings.allowedMethods ?? [
+            'GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'OPTIONS',
+        ];
+        const headers = settings.allowedHeaders ?? [
+            'Authorization', 'Content-Type', 'X-Admin-Key', 'X-Requested-With',
+        ];
+        const exposed = settings.exposedHeaders ?? [
+            'Content-Length', 'Content-Type',
+        ];
+        const maxAge = settings.maxAgeSeconds ?? 86400;
+        const isAllowed = (origin) => {
+            if (settings.allowedOrigins === '*')
+                return true;
+            if (typeof settings.allowedOrigins === 'function') {
+                return settings.allowedOrigins(origin);
+            }
+            return settings.allowedOrigins.includes(origin);
+        };
+        express.use((req, res, next) => {
+            const origin = req.headers.origin;
+            if (origin && isAllowed(origin)) {
+                // Echo the matching origin (NOT wildcard) because credentials require it.
+                res.setHeader('Access-Control-Allow-Origin', origin);
+                if (allowCreds) {
+                    res.setHeader('Access-Control-Allow-Credentials', 'true');
+                }
+                res.setHeader('Access-Control-Allow-Methods', methods.join(', '));
+                res.setHeader('Access-Control-Allow-Headers', headers.join(', '));
+                res.setHeader('Access-Control-Expose-Headers', exposed.join(', '));
+                res.setHeader('Access-Control-Max-Age', String(maxAge));
+                res.setHeader('Vary', 'Origin');
+            }
+            if (req.method === 'OPTIONS') {
+                res.status(204).end();
+                return;
+            }
+            next();
+        });
+    }
+    /**
+     * Generikus, auth-agnosztikus extension-point orchestrator. A `registerCustomMiddleware`
+     * hookot hívja (ha a subclass override-olja) minden AKTÍV Express instance-ra
+     * (open + secure), az API route-ok UTÁN, de a SPA static catch-all (`app.get('*')`)
+     * ELŐTT — ez az EGYETLEN korrekt pont egy sub-path middleware-hez (pl. reverse-proxy),
+     * mert a catch-all minden utána mountolt route-ot elnyel. No-op ha nincs override (back-compat).
+     */
+    async mountCustomMiddleware() {
+        if (!this.registerCustomMiddleware) {
+            return;
+        }
+        if (this.openExpress) {
+            await this.registerCustomMiddleware(this.openExpress, route_security_enum_1.DyNTS_RouteSecurity.open);
+        }
+        if (this.secureExpress) {
+            await this.registerCustomMiddleware(this.secureExpress, route_security_enum_1.DyNTS_RouteSecurity.secure);
+        }
+        if (this.logSetup) {
+            fsm_dynamo_1.DyFM_Log.log('\nCustom middleware registered (pre-static).');
+        }
+    }
+    /**
+     * Ha getStaticClientSettings() visszaad beállításokat, a client static fájlok a '/' alatt
+     * lesznek kiszolgálva (API route-ok után). SPA fallback opcionális (fallbackPath).
+     * Asset cache (assetCacheMaxAge, assetCacheImmutable) és fallback cache (fallbackCacheMaxAge)
+     * opcionálisak; ha nincs megadva fallbackCacheMaxAge, DyNTS_defaultFallbackCacheMaxAge (0) marad.
+     */
+    async mountStaticClient() {
+        const settings = this.getStaticClientSettings?.();
+        if (!settings) {
+            return;
+        }
+        const absoluteRoot = Path.isAbsolute(settings.root)
+            ? settings.root
+            : Path.resolve(process.cwd(), settings.root);
+        const hasAssetCache = settings.assetCacheMaxAge !== undefined || settings.assetCacheImmutable === true;
+        const staticOptions = hasAssetCache && settings.assetCacheMaxAge !== undefined
+            ? {
+                setHeaders: (res) => {
+                    const maxAge = settings.assetCacheMaxAge;
+                    const immutable = settings.assetCacheImmutable === true ? ', immutable' : '';
+                    res.setHeader('Cache-Control', `max-age=${maxAge}${immutable}`);
+                },
+            }
+            : undefined;
+        const staticMiddleware = staticOptions
+            ? Express.static(absoluteRoot, staticOptions)
+            : Express.static(absoluteRoot);
+        const fallbackMaxAge = settings.fallbackCacheMaxAge ?? default_fallback_cache_max_age_const_1.DyNTS_defaultFallbackCacheMaxAge;
+        if (this.openExpress) {
+            this.openExpress.use('/', staticMiddleware);
+            if (settings.fallbackPath) {
+                this.openExpress.get('*', (req, res) => {
+                    res.setHeader('Cache-Control', `max-age=${fallbackMaxAge}`);
+                    res.sendFile(settings.fallbackPath, { root: absoluteRoot });
+                });
+            }
+            else {
+                this.openExpress.get('*', (req, res) => {
+                    res.status(404).type('html').send(default_not_found_page_const_1.DyNTS_defaultNotFoundPageHtml);
+                });
+            }
+        }
+        if (this.secureExpress) {
+            this.secureExpress.use('/', staticMiddleware);
+            if (settings.fallbackPath) {
+                this.secureExpress.get('*', (req, res) => {
+                    res.setHeader('Cache-Control', `max-age=${fallbackMaxAge}`);
+                    res.sendFile(settings.fallbackPath, { root: absoluteRoot });
+                });
+            }
+            else {
+                this.secureExpress.get('*', (req, res) => {
+                    res.status(404).type('html').send(default_not_found_page_const_1.DyNTS_defaultNotFoundPageHtml);
+                });
+            }
+        }
+        if (this.logSetup) {
+            fsm_dynamo_1.DyFM_Log.log(`\nStatic client mounted at / (root: ${absoluteRoot})`);
+        }
+    }
+    /**
+     *
+     */
+    setSecurity() {
+        if (this.fnLogs && this.deepLog)
+            fsm_dynamo_1.DyFM_Log.log('\nfn:. setSecurity');
+        this._routingModules.forEach((module) => {
+            if (!module.security) {
+                fsm_dynamo_1.DyFM_Log.warn(`RoutingModule security is not set for ${module.route}\n`);
+            }
+            else if (!this._security) {
+                this._security = module.security;
+            }
+            else if (this._security !== module.security) {
+                this._security = route_security_enum_1.DyNTS_RouteSecurity.both;
+            }
+        });
+        if (!this._security) {
+            let msg = `Could not set security for the server! (${this.security})`;
+            msg += '\n  RoutingModules:';
+            this._routingModules.forEach((module) => {
+                msg += `\n    ${module.route} (security: ${module.security})`;
+            });
+            if (this._routingModules.length === 0) {
+                msg += '\n    - no RoutingModule found -\n';
+            }
+            fsm_dynamo_1.DyFM_Log.warn(msg);
+        }
+    }
+    _getDefaultErrorSettings(fnName, error) {
+        return {
+            status: error?.___status ?? 500,
+            message: error?.message ??
+                error?._message ??
+                `${fnName} was UNSUCCESSFUL (NTS)`,
+            userMessage: error?.__userMessage ?? this.defaultErrorUserMsg,
+            addECToUserMsg: !error?.__userMessage,
+            issuerService: `${this?.constructor?.name}-DyNTS_App`,
+            level: fsm_dynamo_1.DyFM_ErrorLevel.fatal,
+            error: error,
+            systemVersion: global_settings_const_1.DyNTS_global_settings.systemVersion,
+        };
+    }
+}
+exports.DyNTS_App = DyNTS_App;
 //# sourceMappingURL=app.server.js.map