feat(agent-bff): gate the OpenAPI HTTP route behind a env variable

[Tonours]

Stacked on #1811 (feature/prd-887-openapi-cli-export), itself stacked on #1810 and #1809. Base is #1811's branch, not main: parents merge first, in order. The diff below is only this branch's commit.

Adds BFF_OPENAPI_ENABLED. Defaults to true, so nothing changes unless you set it.

	true (default)	false
/agent/openapi.json, authenticated	200 + document	404 openapi_disabled
/agent/openapi.json, unauthenticated	401	401
forest-bff openapi	document on stdout	document on stdout

The flag gates the HTTP route only, whatever the method. The CLI never reads it, so codegen keeps working on an instance that does not expose the route.

Accepted values: true and false, case-insensitive, padding trimmed. Anything else fails fast at boot with an error that never echoes the value.

How to test

yarn workspace @forestadmin/agent-bff build
BFF_OPENAPI_ENABLED=false yarn workspace @forestadmin/agent-bff start
curl -i -H "Authorization: Bearer <session>" localhost:3450/agent/openapi.json   # 404 openapi_disabled
curl -i localhost:3450/agent/openapi.json                                        # 401, still gated
yarn workspace @forestadmin/agent-bff exec node dist/cli.js openapi | head -c 40  # document, flag ignored

Definition of Done

General

• Write an explicit title for the Pull Request, following Conventional Commits specification
• Test manually the implemented changes
• Validate the code quality (indentation, syntax, style, simplicity, readability)

Security

• Consider the security impact of the changes made

[qltysh]

Coverage Impact

This PR will not change total coverage.

Modified Files with Diff Coverage (3)

Rating	File	% Diff	Uncovered Line #s
	packages/agent-bff/src/config/env-config.ts	100.0%
	packages/agent-bff/src/openapi/openapi-routes.ts	100.0%
	packages/agent-bff/src/http/bff-local-errors.ts	100.0%
	Total	100.0%

🚦 See full report on Qlty Cloud »

🛟 Help

• Diff Coverage: Coverage for added or modified lines of code (excludes deleted files). Learn more.

• Total Coverage: Coverage for the whole repository, calculated as the sum of all File Coverage. Learn more.

• File Coverage: Covered Lines divided by Covered Lines plus Missed Lines. (Excludes non-executable lines including blank lines and comments.)

  • Indirect Changes: Changes to File Coverage for files that were not modified in this PR. Learn more.