@underpostnet/cyberia 3.2.80 → 3.3.0

package/deployment.yaml

@@ -20,7 +20,7 @@ spec:
     spec:
       containers:
         - name: dd-cyberia-development-blue
-          image: underpost/underpost-engine:v3.2.80
+          image: underpost/underpost-engine:v3.3.0
           imagePullPolicy: IfNotPresent
           envFrom:
             - secretRef:
@@ -207,212 +207,3 @@ spec:
       port: 4016
       targetPort: 4016
   type: LoadBalancer
----
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: dd-cyberia-development-green
-  namespace: default
-  labels:
-    app: dd-cyberia-development-green
-    deploy-id: dd-cyberia-development
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app: dd-cyberia-development-green
-  template:
-    metadata:
-      labels:
-        app: dd-cyberia-development-green
-        deploy-id: dd-cyberia-development
-    spec:
-      containers:
-        - name: dd-cyberia-development-green
-          image: underpost/underpost-engine:v3.2.80
-          imagePullPolicy: IfNotPresent
-          envFrom:
-            - secretRef:
-                name: underpost-config
-          env:
-            - name: UNDERPOST_INTERNAL_PORT
-              value: "4004"
-
-          command:
-            - /bin/sh
-            - -c
-            - >
-              underpost secret underpost --create-from-env &&
-              underpost start --build --run dd-cyberia development
-          readinessProbe:
-            {
-              "httpGet": {
-                "path": "/_internal/ready",
-                "port": 4004
-              },
-              "initialDelaySeconds": 5,
-              "periodSeconds": 5,
-              "timeoutSeconds": 3,
-              "failureThreshold": 3
-            }
-          livenessProbe:
-            {
-              "httpGet": {
-                "path": "/_internal/health",
-                "port": 4004
-              },
-              "initialDelaySeconds": 30,
-              "periodSeconds": 15,
-              "timeoutSeconds": 3,
-              "failureThreshold": 3
-            }
-          startupProbe:
-            {
-              "httpGet": {
-                "path": "/_internal/ready",
-                "port": 4004
-              },
-              "initialDelaySeconds": 10,
-              "periodSeconds": 10,
-              "timeoutSeconds": 3,
-              "failureThreshold": 180
-            }
-
-
-    
-          volumeMounts:
-            - name: vol-public-dd-cyberia-dd-cyberia-development-green
-              mountPath: /home/dd/engine/src/client/public/cyberia
-    
-            - name: vol-public-dd-cyberia-underpost-dd-cyberia-development-green
-              mountPath: /home/dd/engine/src/client/public/underpost
-    
-      volumes:
-        - name: vol-public-dd-cyberia-dd-cyberia-development-green
-          persistentVolumeClaim:
-            claimName: pvc-public-dd-cyberia-dd-cyberia-development-green
-    
-      
-        - name: vol-public-dd-cyberia-underpost-dd-cyberia-development-green
-          persistentVolumeClaim:
-            claimName: pvc-public-dd-cyberia-underpost-dd-cyberia-development-green
-    
-      
----
-apiVersion: v1
-kind: Service
-metadata:
-  name: dd-cyberia-development-green-service
-  namespace: default
-spec:
-  selector:
-    app: dd-cyberia-development-green
-  ports:
-    - name: 'tcp-4005'
-      protocol: TCP
-      port: 4005
-      targetPort: 4005
-    - name: 'udp-4005'
-      protocol: UDP
-      port: 4005
-      targetPort: 4005
-
-    - name: 'tcp-4006'
-      protocol: TCP
-      port: 4006
-      targetPort: 4006
-    - name: 'udp-4006'
-      protocol: UDP
-      port: 4006
-      targetPort: 4006
-
-    - name: 'tcp-4007'
-      protocol: TCP
-      port: 4007
-      targetPort: 4007
-    - name: 'udp-4007'
-      protocol: UDP
-      port: 4007
-      targetPort: 4007
-
-    - name: 'tcp-4008'
-      protocol: TCP
-      port: 4008
-      targetPort: 4008
-    - name: 'udp-4008'
-      protocol: UDP
-      port: 4008
-      targetPort: 4008
-
-    - name: 'tcp-4009'
-      protocol: TCP
-      port: 4009
-      targetPort: 4009
-    - name: 'udp-4009'
-      protocol: UDP
-      port: 4009
-      targetPort: 4009
-
-    - name: 'tcp-4010'
-      protocol: TCP
-      port: 4010
-      targetPort: 4010
-    - name: 'udp-4010'
-      protocol: UDP
-      port: 4010
-      targetPort: 4010
-
-    - name: 'tcp-4011'
-      protocol: TCP
-      port: 4011
-      targetPort: 4011
-    - name: 'udp-4011'
-      protocol: UDP
-      port: 4011
-      targetPort: 4011
-
-    - name: 'tcp-4012'
-      protocol: TCP
-      port: 4012
-      targetPort: 4012
-    - name: 'udp-4012'
-      protocol: UDP
-      port: 4012
-      targetPort: 4012
-
-    - name: 'tcp-4013'
-      protocol: TCP
-      port: 4013
-      targetPort: 4013
-    - name: 'udp-4013'
-      protocol: UDP
-      port: 4013
-      targetPort: 4013
-
-    - name: 'tcp-4014'
-      protocol: TCP
-      port: 4014
-      targetPort: 4014
-    - name: 'udp-4014'
-      protocol: UDP
-      port: 4014
-      targetPort: 4014
-
-    - name: 'tcp-4015'
-      protocol: TCP
-      port: 4015
-      targetPort: 4015
-    - name: 'udp-4015'
-      protocol: UDP
-      port: 4015
-      targetPort: 4015
-
-    - name: 'tcp-4016'
-      protocol: TCP
-      port: 4016
-      targetPort: 4016
-    - name: 'udp-4016'
-      protocol: UDP
-      port: 4016
-      targetPort: 4016
-  type: LoadBalancer

package/docker-compose.yml

@@ -4,36 +4,6 @@
 # (MongoDB + Valkey + IPFS), then the Cyberia content-authority engine and its
 # per-instance server/client tiers, fronted by an nginx reverse proxy.
 #
-# Canonical location (custom docker-compose workflow):
-#   engine-private/conf/dd-cyberia/docker-compose/cyberia/
-#     ├── docker-compose.yml     (this file — the ENTIRE stack, single source)
-#     ├── compose.env            (working env-file, used as-is — not generated)
-#     ├── nginx.conf             (GENERATED: per-variant sub-path routing)
-#     └── mongodb/entrypoint.sh  (GENERATED infra: replica-set bootstrap)
-# All bind mounts below are relative to this directory: the CLI runs compose with
-# `--project-directory` pinned here (see src/cli/docker-compose.js).
-#
-# Multi-instance: one engine-cyberia (content + asset authority) feeds three
-# cyberia-server + three cyberia-client tiers, one per conf.instances.json
-# multiInstance variant (amethyst-strata-expansion "/", FOREST "/FOREST",
-# TEST "/TEST"). nginx.conf routes each host sub-path to its tier and is
-# generated from that same topology; keep the services below in sync with it.
-#
-# Startup is a strict health-gated chain — each tier waits for the previous to
-# be healthy:
-#   mongodb + valkey  ->  engine-cyberia  ->  3x cyberia-server  ->  3x cyberia-client  ->  proxy
-#
-# Architecture boundaries (see CLAUDE.md "Cyberia architecture boundaries"):
-#   engine-cyberia  — content, validation, persistence, gRPC(:50051)+REST(:4005)
-#                     data services, asset metadata. The authority layer.
-#   cyberia-server  — authoritative real-time simulation / tick processing (Go).
-#   cyberia-client  — rendering, input, prediction, presentation (WASM bundle).
-#
-# Usage:
-#   underpost docker-compose --up --deploy-id dd-cyberia --docker-compose-id cyberia
-#   (or the docker:cyberia:* npm scripts). The engine-cyberia image bakes the
-#   dd-cyberia build at image-build time, so no private-repo credentials are
-#   required at container start.
 
 name: dd-cyberia
 
@@ -42,8 +12,8 @@ services:
 
   # --- MongoDB -------------------------------------------------------------
   # replSet rs0, keyFile cluster auth, replica-set + root-user init over the
-  # loopback localhost exception. Uses ./mongodb/entrypoint.sh, generated into
-  # this dir by `underpost docker-compose --generate --docker-compose-id cyberia`.
+  # loopback localhost exception. This custom workflow owns the mounted
+  # ./mongodb/entrypoint.sh bootstrap script.
   mongodb:
     image: ${MONGO_IMAGE:-mongo:latest}
     container_name: dd-cyberia-mongodb
@@ -164,8 +134,8 @@ services:
   # variant that has local content (amethyst + FOREST; TEST has none yet, so its
   # server starts but rejects connections until seeded). Serves REST/WS on 4005
   # and the engine gRPC data service on 50051.
-  engine-cyberia:
-    image: ${ENGINE_CYBERIA_IMAGE:-underpost/engine-cyberia-dev}:${ENGINE_CYBERIA_TAG:-v3.2.80}
+  engine-cyberia-runtime:
+    image: ${ENGINE_CYBERIA_IMAGE:-underpost/engine-cyberia-dev}:${ENGINE_CYBERIA_TAG:-v3.3.0}
     container_name: dd-cyberia-engine
     command:
       - /bin/sh
@@ -213,147 +183,172 @@ services:
     restart: unless-stopped
 
   # === Tier 3: authoritative simulation, one per variant ===================
-  # All three share engine-cyberia (content + gRPC) and differ only by
-  # INSTANCE_CODE — the world each loads. Each waits for engine-cyberia healthy.
-  # The default variant publishes host port 8081; the rest are internal-only
-  # (reached through nginx sub-path routing).
+  # All three share engine-cyberia (content + gRPC) and differ by INSTANCE_CODE
+  # and CYBERIA_BASE_PATH. Each server owns its public path and waits for the
+  # stable gateway, which itself waits for the engine runtime to be healthy.
+  # All variants are internal-only. The proxy publishes a dedicated server
+  # gateway on host port 8081, so one port can route every instance path.
 
-  cyberia-server:
-    image: ${CYBERIA_SERVER_IMAGE:-underpost/cyberia-server-dev}:${CYBERIA_SERVER_TAG:-v3.2.80}
+  cyberia-server-runtime:
+    image: ${CYBERIA_SERVER_IMAGE:-underpost/cyberia-server-dev}:${CYBERIA_SERVER_TAG:-v3.3.0}
     container_name: dd-cyberia-server
     environment:
       INSTANCE_CODE: amethyst-strata-expansion
-      ENGINE_API_BASE_URL: ${ENGINE_API_BASE_URL:-http://engine-cyberia:4005}
+      CYBERIA_BASE_PATH: /
+      ENGINE_API_BASE_URL: ${ENGINE_API_BASE_URL:-http://engine-cyberia}
       ENGINE_PUBLIC_URL: ${ENGINE_PUBLIC_URL:-http://localhost:4005}
-      ENGINE_GRPC_ADDRESS: ${ENGINE_GRPC_ADDRESS:-engine-cyberia:50051}
+      ENGINE_GRPC_ADDRESS: ${ENGINE_GRPC_ADDRESS:-engine-cyberia-runtime:50051}
       ENGINE_GRPC_RELOAD_INTERVAL_SEC: ${ENGINE_GRPC_RELOAD_INTERVAL_SEC:-300}
       STATIC_DIR: ${CYBERIA_SERVER_STATIC_DIR:-/home/dd/engine/cyberia-server/public}
       APP_ENV: ${CYBERIA_SERVER_APP_ENV:-development}
       LOG_LEVEL: ${CYBERIA_SERVER_LOG_LEVEL:-}
+      CYBERIA_DISABLE_CONNECTION_LIMITS: ${CYBERIA_DISABLE_CONNECTION_LIMITS:-}
+      CYBERIA_MAX_CONNECTIONS: ${CYBERIA_MAX_CONNECTIONS:-}
+      CYBERIA_MAX_CONNECTIONS_PER_IP: ${CYBERIA_MAX_CONNECTIONS_PER_IP:-}
+      CYBERIA_CONNECT_RATE_PER_IP: ${CYBERIA_CONNECT_RATE_PER_IP:-}
+      CYBERIA_CONNECT_BURST_PER_IP: ${CYBERIA_CONNECT_BURST_PER_IP:-}
+      CYBERIA_MESSAGE_RATE: ${CYBERIA_MESSAGE_RATE:-}
+      CYBERIA_MESSAGE_BURST: ${CYBERIA_MESSAGE_BURST:-}
+      CYBERIA_MAX_STRIKES: ${CYBERIA_MAX_STRIKES:-}
     networks:
       - dd-cyberia-internal
     expose:
       - '8081'
-    ports:
-      - '${CYBERIA_SERVER_PORT:-8081}:8081'
     healthcheck:
-      test: ['CMD-SHELL', "timeout 2 bash -c '</dev/tcp/127.0.0.1/8081' || exit 1"]
+      test: ['CMD-SHELL', 'curl -fsS http://127.0.0.1:8081/api/v1/health/ready >/dev/null || exit 1']
       interval: 15s
       timeout: 5s
       retries: 5
       start_period: 30s
     depends_on:
-      engine-cyberia:
+      proxy:
         condition: service_healthy
     restart: unless-stopped
 
   cyberia-server-forest:
-    image: ${CYBERIA_SERVER_IMAGE:-underpost/cyberia-server-dev}:${CYBERIA_SERVER_TAG:-v3.2.80}
+    image: ${CYBERIA_SERVER_IMAGE:-underpost/cyberia-server-dev}:${CYBERIA_SERVER_TAG:-v3.3.0}
     container_name: dd-cyberia-server-forest
     environment:
       INSTANCE_CODE: FOREST
-      ENGINE_API_BASE_URL: ${ENGINE_API_BASE_URL:-http://engine-cyberia:4005}
+      CYBERIA_BASE_PATH: /FOREST
+      ENGINE_API_BASE_URL: ${ENGINE_API_BASE_URL:-http://engine-cyberia}
       ENGINE_PUBLIC_URL: ${ENGINE_PUBLIC_URL:-http://localhost:4005}
-      ENGINE_GRPC_ADDRESS: ${ENGINE_GRPC_ADDRESS:-engine-cyberia:50051}
+      ENGINE_GRPC_ADDRESS: ${ENGINE_GRPC_ADDRESS:-engine-cyberia-runtime:50051}
       ENGINE_GRPC_RELOAD_INTERVAL_SEC: ${ENGINE_GRPC_RELOAD_INTERVAL_SEC:-300}
       STATIC_DIR: ${CYBERIA_SERVER_STATIC_DIR:-/home/dd/engine/cyberia-server/public}
       APP_ENV: ${CYBERIA_SERVER_APP_ENV:-development}
       LOG_LEVEL: ${CYBERIA_SERVER_LOG_LEVEL:-}
+      CYBERIA_DISABLE_CONNECTION_LIMITS: ${CYBERIA_DISABLE_CONNECTION_LIMITS:-}
+      CYBERIA_MAX_CONNECTIONS: ${CYBERIA_MAX_CONNECTIONS:-}
+      CYBERIA_MAX_CONNECTIONS_PER_IP: ${CYBERIA_MAX_CONNECTIONS_PER_IP:-}
+      CYBERIA_CONNECT_RATE_PER_IP: ${CYBERIA_CONNECT_RATE_PER_IP:-}
+      CYBERIA_CONNECT_BURST_PER_IP: ${CYBERIA_CONNECT_BURST_PER_IP:-}
+      CYBERIA_MESSAGE_RATE: ${CYBERIA_MESSAGE_RATE:-}
+      CYBERIA_MESSAGE_BURST: ${CYBERIA_MESSAGE_BURST:-}
+      CYBERIA_MAX_STRIKES: ${CYBERIA_MAX_STRIKES:-}
     networks:
       - dd-cyberia-internal
     expose:
       - '8081'
     healthcheck:
-      test: ['CMD-SHELL', "timeout 2 bash -c '</dev/tcp/127.0.0.1/8081' || exit 1"]
+      test: ['CMD-SHELL', 'curl -fsS http://127.0.0.1:8081/FOREST/api/v1/health/ready >/dev/null || exit 1']
       interval: 15s
       timeout: 5s
       retries: 5
       start_period: 30s
     depends_on:
-      engine-cyberia:
+      proxy:
         condition: service_healthy
     restart: unless-stopped
 
   cyberia-server-test:
-    image: ${CYBERIA_SERVER_IMAGE:-underpost/cyberia-server-dev}:${CYBERIA_SERVER_TAG:-v3.2.80}
+    image: ${CYBERIA_SERVER_IMAGE:-underpost/cyberia-server-dev}:${CYBERIA_SERVER_TAG:-v3.3.0}
     container_name: dd-cyberia-server-test
     environment:
       INSTANCE_CODE: TEST
-      ENGINE_API_BASE_URL: ${ENGINE_API_BASE_URL:-http://engine-cyberia:4005}
+      CYBERIA_BASE_PATH: /TEST
+      ENGINE_API_BASE_URL: ${ENGINE_API_BASE_URL:-http://engine-cyberia}
       ENGINE_PUBLIC_URL: ${ENGINE_PUBLIC_URL:-http://localhost:4005}
-      ENGINE_GRPC_ADDRESS: ${ENGINE_GRPC_ADDRESS:-engine-cyberia:50051}
+      ENGINE_GRPC_ADDRESS: ${ENGINE_GRPC_ADDRESS:-engine-cyberia-runtime:50051}
       ENGINE_GRPC_RELOAD_INTERVAL_SEC: ${ENGINE_GRPC_RELOAD_INTERVAL_SEC:-300}
       STATIC_DIR: ${CYBERIA_SERVER_STATIC_DIR:-/home/dd/engine/cyberia-server/public}
       APP_ENV: ${CYBERIA_SERVER_APP_ENV:-development}
       LOG_LEVEL: ${CYBERIA_SERVER_LOG_LEVEL:-}
+      CYBERIA_DISABLE_CONNECTION_LIMITS: ${CYBERIA_DISABLE_CONNECTION_LIMITS:-}
+      CYBERIA_MAX_CONNECTIONS: ${CYBERIA_MAX_CONNECTIONS:-}
+      CYBERIA_MAX_CONNECTIONS_PER_IP: ${CYBERIA_MAX_CONNECTIONS_PER_IP:-}
+      CYBERIA_CONNECT_RATE_PER_IP: ${CYBERIA_CONNECT_RATE_PER_IP:-}
+      CYBERIA_CONNECT_BURST_PER_IP: ${CYBERIA_CONNECT_BURST_PER_IP:-}
+      CYBERIA_MESSAGE_RATE: ${CYBERIA_MESSAGE_RATE:-}
+      CYBERIA_MESSAGE_BURST: ${CYBERIA_MESSAGE_BURST:-}
+      CYBERIA_MAX_STRIKES: ${CYBERIA_MAX_STRIKES:-}
     networks:
       - dd-cyberia-internal
     expose:
       - '8081'
     healthcheck:
-      test: ['CMD-SHELL', "timeout 2 bash -c '</dev/tcp/127.0.0.1/8081' || exit 1"]
+      test: ['CMD-SHELL', 'curl -fsS http://127.0.0.1:8081/TEST/api/v1/health/ready >/dev/null || exit 1']
       interval: 15s
       timeout: 5s
       retries: 5
       start_period: 30s
     depends_on:
-      engine-cyberia:
+      proxy:
         condition: service_healthy
     restart: unless-stopped
 
   # === Tier 4: presentation, one per variant ===============================
   # One WASM bundle serves every variant; the instance is resolved from the URL
-  # sub-path (docker-driver injects CYBERIA_WS_ORIGIN / _ENGINE_API_ORIGIN /
-  # _DEFAULT_INSTANCE). Each client waits ONLY for its own server, so the three
+  # sub-path (docker-driver injects CYBERIA_BASE_PATH / _WS_ORIGIN /
+  # _ENGINE_API_ORIGIN / _DEFAULT_INSTANCE). Each client waits ONLY for its own
+  # server, so the three
   # server->client pipelines advance independently (in parallel) once the shared
   # engine-cyberia is healthy:
   #   cyberia-server        -> cyberia-client
   #   cyberia-server-forest -> cyberia-client-forest
   #   cyberia-server-test   -> cyberia-client-test
 
-  cyberia-client:
-    image: ${CYBERIA_CLIENT_IMAGE:-underpost/cyberia-client-dev}:${CYBERIA_CLIENT_TAG:-v3.2.80}
+  cyberia-client-runtime:
+    image: ${CYBERIA_CLIENT_IMAGE:-underpost/cyberia-client-dev}:${CYBERIA_CLIENT_TAG:-v3.3.0}
     container_name: dd-cyberia-client
     environment:
       CYBERIA_PORT: '8081'
       CYBERIA_INSTANCE_CODE: amethyst-strata-expansion
       CYBERIA_BASE_PATH: /
       CYBERIA_DEFAULT_INSTANCE: ${CYBERIA_DEFAULT_INSTANCE:-amethyst-strata-expansion}
-      CYBERIA_WS_ORIGIN: ${CYBERIA_WS_ORIGIN:-ws://server.cyberiaonline.com}
-      CYBERIA_ENGINE_API_ORIGIN: ${CYBERIA_ENGINE_API_ORIGIN:-http://www.cyberiaonline.com}
+      CYBERIA_WS_ORIGIN: ${CYBERIA_WS_ORIGIN:-ws://localhost:8081}
+      CYBERIA_ENGINE_API_ORIGIN: ${CYBERIA_ENGINE_API_ORIGIN:-http://localhost}
     networks:
       - dd-cyberia-internal
     expose:
       - '8081'
-    ports:
-      - '${CYBERIA_CLIENT_PORT:-8082}:8081'
     healthcheck:
-      test: ['CMD-SHELL', "timeout 2 bash -c '</dev/tcp/127.0.0.1/8081' || exit 1"]
+      test: ['CMD-SHELL', 'curl -fsS http://127.0.0.1:8081/ >/dev/null || exit 1']
       interval: 15s
       timeout: 5s
       retries: 5
       start_period: 20s
     depends_on:
-      cyberia-server:
+      cyberia-server-runtime:
         condition: service_healthy
     restart: unless-stopped
 
   cyberia-client-forest:
-    image: ${CYBERIA_CLIENT_IMAGE:-underpost/cyberia-client-dev}:${CYBERIA_CLIENT_TAG:-v3.2.80}
+    image: ${CYBERIA_CLIENT_IMAGE:-underpost/cyberia-client-dev}:${CYBERIA_CLIENT_TAG:-v3.3.0}
     container_name: dd-cyberia-client-forest
     environment:
       CYBERIA_PORT: '8081'
       CYBERIA_INSTANCE_CODE: FOREST
       CYBERIA_BASE_PATH: /FOREST
       CYBERIA_DEFAULT_INSTANCE: ${CYBERIA_DEFAULT_INSTANCE:-amethyst-strata-expansion}
-      CYBERIA_WS_ORIGIN: ${CYBERIA_WS_ORIGIN:-ws://server.cyberiaonline.com}
-      CYBERIA_ENGINE_API_ORIGIN: ${CYBERIA_ENGINE_API_ORIGIN:-http://www.cyberiaonline.com}
+      CYBERIA_WS_ORIGIN: ${CYBERIA_WS_ORIGIN:-ws://localhost:8081}
+      CYBERIA_ENGINE_API_ORIGIN: ${CYBERIA_ENGINE_API_ORIGIN:-http://localhost}
     networks:
       - dd-cyberia-internal
     expose:
       - '8081'
     healthcheck:
-      test: ['CMD-SHELL', "timeout 2 bash -c '</dev/tcp/127.0.0.1/8081' || exit 1"]
+      test: ['CMD-SHELL', 'curl -fsS http://127.0.0.1:8081/FOREST/ >/dev/null || exit 1']
       interval: 15s
       timeout: 5s
       retries: 5
@@ -364,21 +359,21 @@ services:
     restart: unless-stopped
 
   cyberia-client-test:
-    image: ${CYBERIA_CLIENT_IMAGE:-underpost/cyberia-client-dev}:${CYBERIA_CLIENT_TAG:-v3.2.80}
+    image: ${CYBERIA_CLIENT_IMAGE:-underpost/cyberia-client-dev}:${CYBERIA_CLIENT_TAG:-v3.3.0}
     container_name: dd-cyberia-client-test
     environment:
       CYBERIA_PORT: '8081'
       CYBERIA_INSTANCE_CODE: TEST
       CYBERIA_BASE_PATH: /TEST
       CYBERIA_DEFAULT_INSTANCE: ${CYBERIA_DEFAULT_INSTANCE:-amethyst-strata-expansion}
-      CYBERIA_WS_ORIGIN: ${CYBERIA_WS_ORIGIN:-ws://server.cyberiaonline.com}
-      CYBERIA_ENGINE_API_ORIGIN: ${CYBERIA_ENGINE_API_ORIGIN:-http://www.cyberiaonline.com}
+      CYBERIA_WS_ORIGIN: ${CYBERIA_WS_ORIGIN:-ws://localhost:8081}
+      CYBERIA_ENGINE_API_ORIGIN: ${CYBERIA_ENGINE_API_ORIGIN:-http://localhost}
     networks:
       - dd-cyberia-internal
     expose:
       - '8081'
     healthcheck:
-      test: ['CMD-SHELL', "timeout 2 bash -c '</dev/tcp/127.0.0.1/8081' || exit 1"]
+      test: ['CMD-SHELL', 'curl -fsS http://127.0.0.1:8081/TEST/ >/dev/null || exit 1']
       interval: 15s
       timeout: 5s
       retries: 5
@@ -388,31 +383,41 @@ services:
         condition: service_healthy
     restart: unless-stopped
 
-  # === Tier 5: reverse proxy (waits for all clients) =======================
-  # Routes the three cyberiaonline.com hosts to their per-variant upstreams with
-  # websocket upgrade. Config source of truth: ./nginx.conf (generated from the
-  # multiInstance topology). Fronts the stack only once every tier is healthy.
+  # === Stable HTTP gateway =================================================
+  # Routes stable Docker DNS names and localhost paths to their per-variant
+  # upstreams with websocket upgrade. Config source of truth: ./nginx.conf,
+  # maintained by this custom workflow. Ports 80 and 8082 serve the multi-path
+  # client gateway; port 8081 is the multi-path server gateway. It starts as
+  # soon as the engine is healthy so server startup can safely use the stable
+  # engine-cyberia HTTP alias. Client/server upstreams resolve lazily as their
+  # independently health-gated pipelines become available.
   proxy:
     image: ${PROXY_IMAGE:-nginx:stable-alpine}
     container_name: dd-cyberia-proxy
     volumes:
       - ./nginx.conf:/etc/nginx/conf.d/default.conf:ro
     networks:
-      - dd-cyberia-internal
+      dd-cyberia-internal:
+        aliases:
+          - cyberia-client
+          - cyberia-server
+          - engine-cyberia
     ports:
       - '${PROXY_HTTP_PORT:-80}:80'
+      - '${CYBERIA_SERVER_PORT:-8081}:8081'
+      - '${CYBERIA_CLIENT_PORT:-8082}:80'
     healthcheck:
-      test: ['CMD', 'wget', '-q', '-O', '-', 'http://127.0.0.1/healthz']
+      test:
+        - CMD-SHELL
+        - >-
+          wget -q -O /dev/null http://127.0.0.1/healthz &&
+          wget -q -O /dev/null http://127.0.0.1:8081/healthz
       interval: 15s
       timeout: 5s
       retries: 5
       start_period: 10s
     depends_on:
-      cyberia-client:
-        condition: service_healthy
-      cyberia-client-forest:
-        condition: service_healthy
-      cyberia-client-test:
+      engine-cyberia-runtime:
         condition: service_healthy
     restart: unless-stopped