@underpostnet/cyberia 3.2.80 → 3.2.90

package/manifests/deployment/dd-cyberia-development/traffic-service.yaml

@@ -0,0 +1,121 @@
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: dd-cyberia-development-traffic-service
+  namespace: default
+  labels:
+    underpost.net/traffic-service: "true"
+    underpost.net/deploy-id: dd-cyberia-development
+spec:
+  type: ClusterIP
+  selector:
+    app: dd-cyberia-development-blue
+  ports:
+    - name: 'tcp-4005'
+      protocol: TCP
+      port: 4005
+      targetPort: 4005
+    - name: 'udp-4005'
+      protocol: UDP
+      port: 4005
+      targetPort: 4005
+
+    - name: 'tcp-4006'
+      protocol: TCP
+      port: 4006
+      targetPort: 4006
+    - name: 'udp-4006'
+      protocol: UDP
+      port: 4006
+      targetPort: 4006
+
+    - name: 'tcp-4007'
+      protocol: TCP
+      port: 4007
+      targetPort: 4007
+    - name: 'udp-4007'
+      protocol: UDP
+      port: 4007
+      targetPort: 4007
+
+    - name: 'tcp-4008'
+      protocol: TCP
+      port: 4008
+      targetPort: 4008
+    - name: 'udp-4008'
+      protocol: UDP
+      port: 4008
+      targetPort: 4008
+
+    - name: 'tcp-4009'
+      protocol: TCP
+      port: 4009
+      targetPort: 4009
+    - name: 'udp-4009'
+      protocol: UDP
+      port: 4009
+      targetPort: 4009
+
+    - name: 'tcp-4010'
+      protocol: TCP
+      port: 4010
+      targetPort: 4010
+    - name: 'udp-4010'
+      protocol: UDP
+      port: 4010
+      targetPort: 4010
+
+    - name: 'tcp-4011'
+      protocol: TCP
+      port: 4011
+      targetPort: 4011
+    - name: 'udp-4011'
+      protocol: UDP
+      port: 4011
+      targetPort: 4011
+
+    - name: 'tcp-4012'
+      protocol: TCP
+      port: 4012
+      targetPort: 4012
+    - name: 'udp-4012'
+      protocol: UDP
+      port: 4012
+      targetPort: 4012
+
+    - name: 'tcp-4013'
+      protocol: TCP
+      port: 4013
+      targetPort: 4013
+    - name: 'udp-4013'
+      protocol: UDP
+      port: 4013
+      targetPort: 4013
+
+    - name: 'tcp-4014'
+      protocol: TCP
+      port: 4014
+      targetPort: 4014
+    - name: 'udp-4014'
+      protocol: UDP
+      port: 4014
+      targetPort: 4014
+
+    - name: 'tcp-4015'
+      protocol: TCP
+      port: 4015
+      targetPort: 4015
+    - name: 'udp-4015'
+      protocol: UDP
+      port: 4015
+      targetPort: 4015
+
+    - name: 'tcp-4016'
+      protocol: TCP
+      port: 4016
+      targetPort: 4016
+    - name: 'udp-4016'
+      protocol: UDP
+      port: 4016
+      targetPort: 4016

package/manifests/deployment/dd-default-development/deployment.yaml

@@ -17,7 +17,7 @@ spec:
     spec:
       containers:
         - name: dd-default-development-blue
-          image: underpost/underpost-engine:v3.2.80
+          image: underpost/underpost-engine:v3.2.90
           #          resources:
           #            requests:
           #              memory: "124Ki"
@@ -98,7 +98,7 @@ spec:
     spec:
       containers:
         - name: dd-default-development-green
-          image: underpost/underpost-engine:v3.2.80
+          image: underpost/underpost-engine:v3.2.90
           #          resources:
           #            requests:
           #              memory: "124Ki"

package/manifests/deployment/playwright/deployment.yaml

@@ -14,7 +14,7 @@ spec:
     spec:
       containers:
         - name: playwright
-          image: mcr.microsoft.com/playwright:v1.59.0-jammy
+          image: mcr.microsoft.com/playwright:v1.62.1-jammy
           command:
             - /bin/bash
             - -c

package/manifests/mongodb/kustomization.yaml

@@ -3,7 +3,10 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
-  - pv-pvc.yaml
+  # pv-pvc.yaml is intentionally absent: the PersistentVolume set is one-per-replica, so it is
+  # generated from the effective replica count by MongoBootstrap.applyReplicaVolumes() and applied
+  # just before this kustomization. A static file can only describe a fixed number of members, and
+  # any --replicas above it leaves the surplus claims unbindable.
   - headless-service.yaml
   - statefulset.yaml
   # - backup-pv-pvc.yaml

package/manifests/mongodb/statefulset.yaml

@@ -105,6 +105,10 @@ spec:
   volumeClaimTemplates:
     - metadata:
         name: mongodb-storage
+        # Without this label `kubectl delete pvc -l app=mongodb` matches nothing, leaving stale
+        # claims bound to retained PVs across redeploys.
+        labels:
+          app: mongodb
       spec:
         accessModes: ['ReadWriteOnce']
         storageClassName: mongodb-storage-class

package/manifests/mongodb/storage-class.yaml

@@ -3,7 +3,14 @@ kind: StorageClass
 metadata:
   name: mongodb-storage-class
   annotations:
-    storageclass.kubernetes.io/is-default-class: "false"
-provisioner: rancher.io/local-path
+    storageclass.kubernetes.io/is-default-class: 'false'
+# Static class: the replica volumes are hostPath PVs generated one per member by
+# MongoBootstrap.applyReplicaVolumes(), each pinned to one member via `claimRef`. It must NOT name a dynamic provisioner — with
+# `rancher.io/local-path` the local-path controller also provisions for these PVCs, racing the
+# static binder, so which volume a member ends up on is not deterministic. Two members landing
+# on one directory is fatal: mongod dies on `WiredTiger.lock: fcntl: Resource temporarily
+# unavailable`, since kind bind-mounts /data/mongodb from the host into every node.
+provisioner: kubernetes.io/no-provisioner
 reclaimPolicy: Retain
+# Static hostPath PVs carry no nodeAffinity, so binding can safely wait for the scheduler.
 volumeBindingMode: WaitForFirstConsumer

package/nginx.conf

@@ -1,8 +1,9 @@
-# Generated by 'underpost docker-compose --generate --deploy-id dd-cyberia --docker-compose-id cyberia' — do not hand-edit.
-# Source of truth: engine-private/conf/dd-cyberia/conf.instances.json (multiInstance).
-# Single localhost gateway (dev compose). Access http://localhost/ (default),
-# http://localhost/<PATH> per variant. Client origins point back here
-# (compose.env CYBERIA_WS_ORIGIN=ws://localhost, CYBERIA_ENGINE_API_ORIGIN=http://localhost).
+# Canonical routing for the dd-cyberia custom Compose workflow. This file is
+# maintained here and is used as-is by the generic Docker Compose CLI.
+# Docker DNS: http://cyberia-client, http://cyberia-server, http://engine-cyberia.
+# Host access: client on http://localhost[:8082]/<PATH>, server on
+# http://localhost:8081/<PATH>, and engine on http://localhost:4005.
+# Optional *.cyberia.localhost aliases remain available.
 
 map $http_upgrade $connection_upgrade {
     default upgrade;
@@ -17,7 +18,7 @@ proxy_http_version 1.1;
 
 server {
     listen 80 default_server;
-    server_name localhost 127.0.0.1 _;
+    server_name localhost 127.0.0.1 cyberia-client cyberia.localhost client.cyberia.localhost _;
 
         location = /healthz {
             access_log off;
@@ -27,7 +28,7 @@ server {
 
         # Shared content authority: REST API + engine-served assets (fonts, ui-icons).
         location /api/ {
-            set $up_engine engine-cyberia:4005;
+            set $up_engine engine-cyberia-runtime:4005;
             proxy_pass http://$up_engine;
             proxy_set_header Host $host;
             proxy_set_header X-Real-IP $remote_addr;
@@ -39,7 +40,7 @@ server {
         }
 
         location /assets/ {
-            set $up_engine engine-cyberia:4005;
+            set $up_engine engine-cyberia-runtime:4005;
             proxy_pass http://$up_engine;
             proxy_set_header Host $host;
             proxy_set_header X-Real-IP $remote_addr;
@@ -51,7 +52,7 @@ server {
         }
 
         location = /ws {
-            set $up_server_default cyberia-server:8081;
+            set $up_server_default cyberia-server-runtime:8081;
             proxy_pass http://$up_server_default;
             proxy_set_header Host $host;
             proxy_set_header X-Real-IP $remote_addr;
@@ -62,9 +63,8 @@ server {
             proxy_read_timeout 3600s;
         }
 
-        location /FOREST/ws {
+        location = /FOREST/ws {
             set $up_server_forest cyberia-server-forest:8081;
-            rewrite ^/FOREST/(.*)$ /$1 break;
             proxy_pass http://$up_server_forest;
             proxy_set_header Host $host;
             proxy_set_header X-Real-IP $remote_addr;
@@ -75,9 +75,8 @@ server {
             proxy_read_timeout 3600s;
         }
 
-        location /TEST/ws {
+        location = /TEST/ws {
             set $up_server_test cyberia-server-test:8081;
-            rewrite ^/TEST/(.*)$ /$1 break;
             proxy_pass http://$up_server_test;
             proxy_set_header Host $host;
             proxy_set_header X-Real-IP $remote_addr;
@@ -89,7 +88,7 @@ server {
         }
 
         location / {
-            set $up_client_default cyberia-client:8081;
+            set $up_client_default cyberia-client-runtime:8081;
             proxy_pass http://$up_client_default;
             proxy_set_header Host $host;
             proxy_set_header X-Real-IP $remote_addr;
@@ -101,7 +100,7 @@ server {
         }
 
         location = /FOREST { return 301 /FOREST/; }
-        location /FOREST {
+        location ^~ /FOREST/ {
             set $up_client_forest cyberia-client-forest:8081;
             proxy_pass http://$up_client_forest;
             proxy_set_header Host $host;
@@ -114,7 +113,7 @@ server {
         }
 
         location = /TEST { return 301 /TEST/; }
-        location /TEST {
+        location ^~ /TEST/ {
             set $up_client_test cyberia-client-test:8081;
             proxy_pass http://$up_client_test;
             proxy_set_header Host $host;
@@ -126,3 +125,74 @@ server {
             proxy_read_timeout 3600s;
         }
 }
+
+# Dedicated Cyberia server gateway. Port 8081 makes all instance paths available
+# from localhost; the stable Docker DNS alias exposes the same routes on :80.
+server {
+    listen 80;
+    listen 8081 default_server;
+    server_name cyberia-server server.cyberia.localhost;
+
+        location = /healthz {
+            access_log off;
+            return 200 "ok\n";
+            add_header Content-Type text/plain;
+        }
+
+        location = /FOREST { return 301 /FOREST/; }
+        location ^~ /FOREST/ {
+            set $up_http_server_forest cyberia-server-forest:8081;
+            proxy_pass http://$up_http_server_forest;
+            proxy_set_header Host $host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $scheme;
+            proxy_set_header Upgrade $http_upgrade;
+            proxy_set_header Connection $connection_upgrade;
+            proxy_read_timeout 3600s;
+        }
+
+        location = /TEST { return 301 /TEST/; }
+        location ^~ /TEST/ {
+            set $up_http_server_test cyberia-server-test:8081;
+            proxy_pass http://$up_http_server_test;
+            proxy_set_header Host $host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $scheme;
+            proxy_set_header Upgrade $http_upgrade;
+            proxy_set_header Connection $connection_upgrade;
+            proxy_read_timeout 3600s;
+        }
+
+        location / {
+            set $up_http_server_default cyberia-server-runtime:8081;
+            proxy_pass http://$up_http_server_default;
+            proxy_set_header Host $host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $scheme;
+            proxy_set_header Upgrade $http_upgrade;
+            proxy_set_header Connection $connection_upgrade;
+            proxy_read_timeout 3600s;
+        }
+}
+
+# The engine remains a single shared authority. Its direct :4005 publication is
+# canonical for debugging; this alias is convenient for browser parity.
+server {
+    listen 80;
+    server_name engine-cyberia engine.cyberia.localhost;
+
+        location / {
+            set $up_engine_authority engine-cyberia-runtime:4005;
+            proxy_pass http://$up_engine_authority;
+            proxy_set_header Host $host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $scheme;
+            proxy_set_header Upgrade $http_upgrade;
+            proxy_set_header Connection $connection_upgrade;
+            proxy_read_timeout 3600s;
+        }
+}

package/package.json

@@ -2,7 +2,7 @@
     "type": "module",
     "main": "src/index.js",
     "name": "@underpostnet/cyberia",
-    "version": "3.2.80",
+    "version": "3.2.90",
     "description": "Cyberia CLI — toolchain for the Cyberia MMO data layer, content pipeline, persistence, gRPC services, and ERC-1155 lifecycle on Hyperledger Besu.",
     "scripts": {
         "start": "node --max-old-space-size=8192 src/server",
@@ -72,7 +72,7 @@
     },
     "homepage": "https://github.com/underpostnet/engine-cyberia#readme",
     "dependencies": {
-        "underpost": "^3.2.80",
+        "underpost": "^3.2.90",
         "adm-zip": "^0.6.0",
         "maxrects-packer": "^2.7.3",
         "pngjs": "^7.0.0",

package/proxy.yaml

@@ -14,7 +14,7 @@ spec:
       
       enableWebsockets: true
       services:
-        - name: dd-cyberia-development-blue-service
+        - name: dd-cyberia-development-traffic-service
           port: 4005
           weight: 100
     
@@ -23,7 +23,7 @@ spec:
       
       enableWebsockets: true
       services:
-        - name: dd-cyberia-development-blue-service
+        - name: dd-cyberia-development-traffic-service
           port: 4006
           weight: 100
     
@@ -42,7 +42,7 @@ spec:
       
       enableWebsockets: true
       services:
-        - name: dd-cyberia-development-blue-service
+        - name: dd-cyberia-development-traffic-service
           port: 4007
           weight: 100
     
@@ -61,7 +61,7 @@ spec:
       
       enableWebsockets: true
       services:
-        - name: dd-cyberia-development-blue-service
+        - name: dd-cyberia-development-traffic-service
           port: 4008
           weight: 100
     
@@ -70,7 +70,7 @@ spec:
       
       enableWebsockets: true
       services:
-        - name: dd-cyberia-development-blue-service
+        - name: dd-cyberia-development-traffic-service
           port: 4009
           weight: 100
     
@@ -89,7 +89,7 @@ spec:
       
       enableWebsockets: true
       services:
-        - name: dd-cyberia-development-blue-service
+        - name: dd-cyberia-development-traffic-service
           port: 4010
           weight: 100
     
@@ -108,7 +108,7 @@ spec:
       
       enableWebsockets: true
       services:
-        - name: dd-cyberia-development-blue-service
+        - name: dd-cyberia-development-traffic-service
           port: 4011
           weight: 100
     
@@ -117,7 +117,7 @@ spec:
       
       enableWebsockets: true
       services:
-        - name: dd-cyberia-development-blue-service
+        - name: dd-cyberia-development-traffic-service
           port: 4012
           weight: 100
     
@@ -136,7 +136,7 @@ spec:
       
       enableWebsockets: true
       services:
-        - name: dd-cyberia-development-blue-service
+        - name: dd-cyberia-development-traffic-service
           port: 4013
           weight: 100
     
@@ -155,7 +155,7 @@ spec:
       
       enableWebsockets: true
       services:
-        - name: dd-cyberia-development-blue-service
+        - name: dd-cyberia-development-traffic-service
           port: 4014
           weight: 100
     
@@ -164,7 +164,7 @@ spec:
       
       enableWebsockets: true
       services:
-        - name: dd-cyberia-development-blue-service
+        - name: dd-cyberia-development-traffic-service
           port: 4015
           weight: 100
     
@@ -183,7 +183,7 @@ spec:
       
       enableWebsockets: true
       services:
-        - name: dd-cyberia-development-blue-service
+        - name: dd-cyberia-development-traffic-service
           port: 4016
           weight: 100
     

package/pv-pvc.yaml

@@ -80,85 +80,3 @@ spec:
   resources:
     requests:
       storage: 5Gi
----
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: pv-public-dd-cyberia-dd-cyberia-development-green
-spec:
-  capacity:
-    storage: 5Gi
-  accessModes:
-    - ReadWriteOnce
-  persistentVolumeReclaimPolicy: Retain
-  storageClassName: manual
-  nodeAffinity:
-    required:
-      nodeSelectorTerms:
-        - matchExpressions:
-            - key: kubernetes.io/hostname
-              operator: In
-              values:
-                - kind-worker
-  claimRef:
-    apiVersion: v1
-    kind: PersistentVolumeClaim
-    name: pvc-public-dd-cyberia-dd-cyberia-development-green
-    namespace: default
-  hostPath:
-    path: /home/dd/engine/volume/pv-public-dd-cyberia-dd-cyberia-development-green
-    type: DirectoryOrCreate
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: pvc-public-dd-cyberia-dd-cyberia-development-green
-spec:
-  accessModes:
-    - ReadWriteOnce
-  storageClassName: manual
-  volumeName: pv-public-dd-cyberia-dd-cyberia-development-green
-  resources:
-    requests:
-      storage: 5Gi
----
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: pv-public-dd-cyberia-underpost-dd-cyberia-development-green
-spec:
-  capacity:
-    storage: 5Gi
-  accessModes:
-    - ReadWriteOnce
-  persistentVolumeReclaimPolicy: Retain
-  storageClassName: manual
-  nodeAffinity:
-    required:
-      nodeSelectorTerms:
-        - matchExpressions:
-            - key: kubernetes.io/hostname
-              operator: In
-              values:
-                - kind-worker
-  claimRef:
-    apiVersion: v1
-    kind: PersistentVolumeClaim
-    name: pvc-public-dd-cyberia-underpost-dd-cyberia-development-green
-    namespace: default
-  hostPath:
-    path: /home/dd/engine/volume/pv-public-dd-cyberia-underpost-dd-cyberia-development-green
-    type: DirectoryOrCreate
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: pvc-public-dd-cyberia-underpost-dd-cyberia-development-green
-spec:
-  accessModes:
-    - ReadWriteOnce
-  storageClassName: manual
-  volumeName: pv-public-dd-cyberia-underpost-dd-cyberia-development-green
-  resources:
-    requests:
-      storage: 5Gi

package/scripts/nat-iptables.sh

@@ -32,6 +32,12 @@ sudo firewall-cmd --permanent --zone=public --add-service=ssh
 sudo firewall-cmd --permanent --zone=public --add-service=http
 sudo firewall-cmd --permanent --zone=public --add-service=https
 
+# QUIC / HTTP3. The `https` service above covers TCP 443 only, so without this
+# an HTTP/3 gateway advertises `Alt-Svc: h3=":443"` and every client that acts
+# on it silently fails over UDP while HTTP/2 keeps working.
+sudo firewall-cmd --permanent --zone=public --add-port=443/udp
+sudo firewall-cmd --permanent --zone=public --add-port=80/udp
+
 echo "[INFO] Opening Kubernetes control plane ports..."
 
 # Kubernetes API Server
@@ -98,10 +104,10 @@ sudo firewall-cmd --reload
 echo
 echo "[INFO] Sysctl status:"
 sudo sysctl \
-  net.ipv4.ip_forward \
-  net.ipv6.conf.all.forwarding \
-  net.bridge.bridge-nf-call-iptables \
-  net.bridge.bridge-nf-call-ip6tables
+net.ipv4.ip_forward \
+net.ipv6.conf.all.forwarding \
+net.bridge.bridge-nf-call-iptables \
+net.bridge.bridge-nf-call-ip6tables
 
 echo
 echo "[INFO] Firewall status:"

package/scripts/test-monitor.sh

@@ -24,7 +24,7 @@ MODE=runtime                                  # runtime | instance
 ENV=development                               # development | production
 DEPLOY_ID=dd-test                             # deploy id (instance mode: parent of conf.instances.json)
 INSTANCE_IDS=                                 # instance mode: csv of ids (default: all in conf.instances.json)
-IMAGE=underpost/wp:v3.2.80                    # runtime mode image (instance mode reads image from conf)
+IMAGE=underpost/wp:v3.2.90                    # runtime mode image (instance mode reads image from conf)
 VERSIONS=green                                # csv of blue/green versions
 REPLICAS=1                                    # replicas per deployment
 NAMESPACE=default                             # k8s namespace
@@ -202,7 +202,8 @@ run_runtime_mode() {
     setup_tls_secrets $(hosts_from "$SERVER_CONF")
     expose_flags="--tls"
   fi
-  [ "$DO_EXPOSE" = true ] && node bin deploy --expose --local-proxy "$DEPLOY_ID" "$ENV" $expose_flags
+  [ "$DO_EXPOSE" = true ] && node bin run expose "${DEPLOY_ID}-${ENV}-traffic-service" --namespace "$NAMESPACE" \
+    --local-proxy $DEV_FLAG $CLUSTER_FLAG $expose_flags
 }
 
 # ─────────────────────────── instance mode ───────────────────────────
@@ -234,7 +235,7 @@ run_instance_mode() {
     # Plain HTTP: port-forward each instance service port directly.
     for id in "${ids[@]}"; do
       [ -n "$id" ] || continue
-      node bin deploy --expose "${DEPLOY_ID}-${id}" "$ENV" --namespace "$NAMESPACE" || true
+      node bin run expose "${DEPLOY_ID}-${id}-${ENV}-traffic-service" --namespace "$NAMESPACE" $CLUSTER_FLAG || true
     done
   fi
 }

package/src/api/cyberia-action/cyberia-action.model.js

@@ -60,6 +60,7 @@ const CyberiaActionSchema = new Schema(
             qty: { type: Number, default: 1, min: 1 },
           },
         ],
+        craftTimeMs: { type: Number, default: 0, min: 0 },
       },
     ],