@underpostnet/cyberia 3.2.80

package/.github/workflows/engine-cyberia.cd.yml

@@ -0,0 +1,157 @@
+name: CD | Engine cyberia | remote ssh
+on:
+  workflow_dispatch:
+    inputs:
+      job:
+        description: 'Job to run (deploy, sync-and-deploy, init)'
+        required: true
+        type: choice
+        options:
+          - deploy
+          - sync-and-deploy
+          - init
+permissions:
+  contents: write
+  packages: write
+  id-token: write
+
+jobs:
+  deploy:
+    if: github.event.inputs.job == 'deploy'
+    name: Remote SSH deployment
+    runs-on: ubuntu-latest
+    steps:
+      - name: Run remote deploy via SSH
+        uses: appleboy/ssh-action@v1.2.5
+        with:
+          # Remote host (secret)
+          host: ${{ secrets.SSH_HOST }}
+          # Remote user (secret)
+          username: ${{ secrets.SSH_USERNAME }}
+          # Private key (secret) — the PEM contents (not a path)
+          key: ${{ secrets.SSH_PRIV_KEY }}
+          # Remote port (optional)
+          port: ${{ secrets.SSH_PORT }}
+          # Optional: increase timeout for long-running commands
+          command_timeout: 60m
+          # Optional: if your private key has a passphrase, add:
+          # passphrase: ${{ secrets.SSH_KEY_PASSPHRASE }}
+          # Commands to run on the remote VM
+          script: |
+            set -e
+            set -o pipefail
+            echo "Starting remote deploy"
+            cd /home/dd/engine
+            sudo -n -- /bin/bash -lc "node bin run pull"
+            sudo -n -- /bin/bash -lc "npm install"
+            sudo -n -- /bin/bash -lc "node bin run secret"
+            sudo -n -- /bin/bash -lc "node bin run deploy dd-cyberia"
+  sync-and-deploy:
+    if: github.event.inputs.job == 'sync-and-deploy'
+    name: Remote SSH sync and deploy
+    runs-on: ubuntu-latest
+    steps:
+      - name: Run remote deploy via SSH
+        uses: appleboy/ssh-action@v1.2.5
+        with:
+          # Remote host (secret)
+          host: ${{ secrets.SSH_HOST }}
+          # Remote user (secret)
+          username: ${{ secrets.SSH_USERNAME }}
+          # Private key (secret) — the PEM contents (not a path)
+          key: ${{ secrets.SSH_PRIV_KEY }}
+          # Remote port (optional)
+          port: ${{ secrets.SSH_PORT }}
+          # Optional: increase timeout for long-running commands
+          command_timeout: 60m
+          # Optional: if your private key has a passphrase, add:
+          # passphrase: ${{ secrets.SSH_KEY_PASSPHRASE }}
+          # Commands to run on the remote VM
+          script: |
+            set -e
+            set -o pipefail
+            echo "Starting remote sync and deploy"
+            TARGET_NODE=localhost.localdomain
+            cd /home/dd/engine
+            sudo -n -- /bin/bash -lc "node bin run pull"
+            sudo -n -- /bin/bash -lc "npm install"
+            sudo -n -- /bin/bash -lc "node bin run secret"
+            sudo -n -- /bin/bash -lc "npm run test"
+            sudo -n -- /bin/bash -lc "node bin run clean src/client/public/cyberia"
+            sudo -n -- /bin/bash -lc "node bin run clean src/client/public/underpost"
+            sudo -n -- /bin/bash -lc "node bin cmt src/client/public/cyberia --init-repo"
+            sudo -n -- /bin/bash -lc "node bin cmt src/client/public/underpost --init-repo"
+            sudo -n -- /bin/bash -lc "node bin fs src/client/public/cyberia --pull --recursive --deploy-id dd-cyberia"
+            sudo -n -- /bin/bash -lc "node bin fs src/client/public/underpost --pull --recursive --deploy-id dd-cyberia --storage-file-path './engine-private/conf/dd-cyberia/storage.underpost.json'"
+            CHANGES_CYBERIA=$(sudo -n -- /bin/bash -lc "node bin cmt src/client/public/cyberia --has-changes" | tr -d '\n')
+            if [ "$CHANGES_CYBERIA" = "1" ]; then
+              sudo -n -- /bin/bash -lc "node bin cmt src/client/public/cyberia feat 'Update cyberia public assets'"
+            fi
+            CHANGES_UNDERPOST=$(sudo -n -- /bin/bash -lc "node bin cmt src/client/public/underpost --has-changes" | tr -d '\n')
+            if [ "$CHANGES_UNDERPOST" = "1" ]; then
+              sudo -n -- /bin/bash -lc "node bin cmt src/client/public/underpost feat 'Update underpost public assets'"
+            fi
+            sudo -n -- /bin/bash -lc "node bin run sync 'dd-cyberia,1,,underpost/engine-cyberia:latest' \
+              --kubeadm \
+              --deploy-id-cron-jobs none \
+              --timeout-response 300000ms \
+              --node-name ${TARGET_NODE} \
+              --ssh-key-path /home/dd/tmp/897as9dxhaskd9 \
+              --image-pull-policy Always \
+              --cmd 'cd /home/dd/engine, \
+                underpost clone underpostnet/engine-cyberia, \
+                mkdir -p /home/dd/engine/src/client/public/itemledger \
+                  /home/dd/engine/src/client/public/cryptokoyn \
+                  /home/dd/engine/src/client/components/cryptokoyn \
+                  /home/dd/engine/src/client/components/itemledger \
+                  /home/dd/engine/hardhat, \
+                cp -a ./engine-cyberia/src/client/public/itemledger/. /home/dd/engine/src/client/public/itemledger/, \
+                cp -a ./engine-cyberia/src/client/public/cryptokoyn/. /home/dd/engine/src/client/public/cryptokoyn/, \
+                cp -a ./engine-cyberia/src/client/components/cryptokoyn/. /home/dd/engine/src/client/components/cryptokoyn/, \
+                cp -a ./engine-cyberia/src/client/components/itemledger/. /home/dd/engine/src/client/components/itemledger/, \
+                cp -a ./engine-cyberia/src/client/Itemledger.index.js /home/dd/engine/src/client/Itemledger.index.js, \
+                cp -a ./engine-cyberia/src/client/Cryptokoyn.index.js /home/dd/engine/src/client/Cryptokoyn.index.js, \
+                rm -rf ./engine-cyberia, \
+                sudo rm -rf ./engine-private/, \
+                node bin clone underpostnet/engine-cyberia-private, \
+                sudo mv ./engine-cyberia-private ./engine-private, \
+                node bin env dd-cyberia production, \
+                node ./engine-private/itc-scripts/dd-cyberia-0.js, \
+                sudo chown -R dd:dd /home/dd/engine/src/client/public/cyberia, \
+                node bin/cyberia run-workflow import-default-items, \
+                node bin env dd-cyberia production, \
+                node bin client dd-cyberia, \
+                node bin start dd-cyberia production --run'"
+  init:
+    if: github.event.inputs.job == 'init'
+    name: Remote SSH init deployment
+    runs-on: ubuntu-latest
+    steps:
+      - name: Run remote deploy via SSH
+        uses: appleboy/ssh-action@v1.2.5
+        with:
+          # Remote host (secret)
+          host: ${{ secrets.SSH_HOST }}
+          # Remote user (secret)
+          username: ${{ secrets.SSH_USERNAME }}
+          # Private key (secret) — the PEM contents (not a path)
+          key: ${{ secrets.SSH_PRIV_KEY }}
+          # Remote port (optional)
+          port: ${{ secrets.SSH_PORT }}
+          # Optional: increase timeout for long-running commands
+          command_timeout: 60m
+          # Optional: if your private key has a passphrase, add:
+          # passphrase: ${{ secrets.SSH_KEY_PASSPHRASE }}
+          # Commands to run on the remote VM
+          script: |
+            set -e
+            set -o pipefail
+            echo "Starting init deploy"
+            cd /home/dd/engine
+            sudo -n -- /bin/bash -lc "node bin run pull"
+            sudo -n -- /bin/bash -lc "npm install"
+            sudo -n -- /bin/bash -lc "node bin run secret"
+            sudo -n -- /bin/bash -lc "node bin/build dd-cyberia --conf"
+            sudo -n -- /bin/bash -lc "node bin deploy dd-cyberia production --kubeadm --sync --build-manifest --timeout-response 300000ms --versions green --replicas 1"
+            sudo -n -- /bin/bash -lc "node bin deploy dd-cyberia production --kubeadm --disable-update-proxy --git-clean"
+            sudo -n -- /bin/bash -lc "node bin monitor dd-cyberia production --ready-deployment --promote --timeout-response 300000ms --versions green --replicas 1"

package/.github/workflows/engine-cyberia.ci.yml

@@ -0,0 +1,125 @@
+name: CI | Engine cyberia | github repository
+on:
+  workflow_dispatch:
+    inputs:
+      sync:
+        description: 'Trigger sync-and-deploy CD after build'
+        required: false
+        default: 'false'
+        type: choice
+        options:
+          - 'true'
+          - 'false'
+      message:
+        description: 'Commit message for the build'
+        required: false
+        default: ''
+      deploy_type:
+        description: 'CD job type to dispatch (sync-and-deploy or init)'
+        required: false
+        default: 'sync-and-deploy'
+        type: choice
+        options:
+          - sync-and-deploy
+          - init
+permissions:
+  contents: write
+  packages: write
+  id-token: write
+jobs:
+  pwa-microservices-template:
+    name: Update github repo package Jobs
+    runs-on: ubuntu-latest
+    container:
+      image: quay.io/rockylinux/rockylinux:9
+    permissions:
+      contents: write
+      packages: write
+      id-token: write
+    steps:
+      - uses: actions/checkout@v7
+
+      - name: Install required packages
+        run: |
+          dnf install -y sudo tar gzip bzip2 git
+          dnf install -y curl --allowerasing
+
+      - name: Install Node.js
+        run: |
+          curl -fsSL https://rpm.nodesource.com/setup_24.x | bash -
+          dnf install nodejs -y
+
+      - name: Install dependencies
+        run: npm install
+
+      - name: Set git global credentials
+        run: |
+          git config --global --add safe.directory '*'
+          git config --global user.name 'underpostnet'
+          git config --global user.email 'development@underpost.net'
+
+      - name: Build repository
+        env:
+          GITHUB_TOKEN: ${{ secrets.GIT_AUTH_TOKEN }}
+          GITHUB_USERNAME: ${{ github.repository_owner }}
+        run: |
+          cd .. && node engine/bin clone underpostnet/pwa-microservices-template
+          if [ -n "${{ github.event.inputs.message }}" ]; then
+            LAST_COMMIT_MESSAGE="${{ github.event.inputs.message }}"
+          else
+            LAST_COMMIT_MESSAGE=$(cd engine && node bin cmt --changelog-msg --from-n-commit 1 --changelog-no-hash 2>/dev/null || echo "")
+          fi
+          SHOULD_CD="${{ github.event.inputs.sync }}"
+          DEPLOY_TYPE="${{ github.event.inputs.deploy_type }}"
+          if [ -z "$LAST_COMMIT_MESSAGE" ]; then
+            LAST_COMMIT_MESSAGE="Update engine cyberia repository"
+          fi
+          echo "[INFO] Captured commit message: $LAST_COMMIT_MESSAGE"
+          echo "[INFO] Should CD: $SHOULD_CD, Deploy type: $DEPLOY_TYPE"
+          node engine/bin clone --bare underpostnet/engine-cyberia
+          cd engine
+          git clone --depth 1 --no-checkout https://$GITHUB_TOKEN@github.com/underpostnet/engine-private.git ./engine-private
+          cd ./engine-private && git sparse-checkout set conf/dd-cyberia && git checkout && cd ..
+          node bin/build dd-cyberia development
+          cd ../pwa-microservices-template
+          rm -rf ./.git
+          mv ../engine-cyberia.git ./.git
+          mv ../engine/engine-private ./engine-private
+          npm install
+          node bin new --default-conf --deploy-id dd-cyberia
+          mv ./conf.dd-cyberia.js ./conf.js
+          rm -rf ./engine-private
+          git init
+          git config user.name 'underpostnet'
+          git config user.email 'development@underpost.net'
+          git add .
+          if git diff --cached --quiet; then
+            echo "[INFO] No changes to publish; skipping commit and push."
+          else
+            git commit -m "$LAST_COMMIT_MESSAGE"
+            node ../engine/bin push . underpostnet/engine-cyberia
+            echo "[INFO] Dispatching canonical github package build engine-ghpkg-cyberia"
+            GHPKG_PAYLOAD=$(MSG="$LAST_COMMIT_MESSAGE" node -e '
+              const i = { conf_id: "cyberia" };
+              if (process.env.MSG) i.message = process.env.MSG;
+              process.stdout.write(JSON.stringify({ ref: "master", inputs: i }));
+            ')
+            curl -s -X POST \
+              -H "Accept: application/vnd.github.v3+json" \
+              -H "Authorization: token ${{ secrets.GIT_AUTH_TOKEN }}" \
+              "https://api.github.com/repos/underpostnet/engine/actions/workflows/ghpkg.ci.yml/dispatches" \
+              -d "$GHPKG_PAYLOAD"
+          fi
+          if [ "$SHOULD_CD" = "true" ]; then
+            if [ -z "$DEPLOY_TYPE" ]; then
+              DEPLOY_TYPE="sync-and-deploy"
+            fi
+            echo "[INFO] Dispatching engine-cyberia CD ${DEPLOY_TYPE}"
+            curl -s -X POST \
+              -H "Accept: application/vnd.github.v3+json" \
+              -H "Authorization: token ${{ secrets.GIT_AUTH_TOKEN }}" \
+              "https://api.github.com/repos/underpostnet/engine/actions/workflows/engine-cyberia.cd.yml/dispatches" \
+              -d "{\"ref\":\"master\",\"inputs\":{\"job\":\"${DEPLOY_TYPE}\"}}"
+          else
+            echo "[INFO] Deployment skipped"
+          fi

package/.github/workflows/ghpkg.ci.yml

@@ -0,0 +1,160 @@
+name: CI | Publish github repository package
+on:
+  push:
+    branches: ['master']
+  pull_request:
+    branches: ['master']
+  workflow_dispatch:
+    inputs:
+      conf_id:
+        description: 'Conf id of the canonical engine github package repo (engine-ghpkg-<conf_id>)'
+        required: false
+        default: 'cyberia'
+      message:
+        description: 'Commit message for the canonical package build'
+        required: false
+        default: ''
+permissions:
+  contents: write
+  packages: write
+  id-token: write
+jobs:
+  pwa-microservices-template-ghpk:
+    if: github.repository == 'underpostnet/pwa-microservices-template' && startsWith(github.event.head_commit.message, 'ci(package-pwa-microservices-template-ghpkg)')
+    name: Update github repo package Jobs
+    runs-on: ubuntu-latest
+    container:
+      image: quay.io/rockylinux/rockylinux:9
+    permissions:
+      contents: write
+      packages: write
+      id-token: write
+    steps:
+      - uses: actions/checkout@v7
+
+      - name: Install required packages
+        run: |
+          dnf install -y sudo tar gzip bzip2 git
+          dnf install -y curl --allowerasing
+
+      - name: Install Node.js
+        run: |
+          curl -fsSL https://rpm.nodesource.com/setup_24.x | bash -
+          dnf install nodejs -y
+
+      - name: Capture commit message
+        run: |
+          FULL_MSG="${{ github.event.head_commit.message }}"
+          LAST_COMMIT_MESSAGE="${FULL_MSG:-update package}"
+          echo "LAST_COMMIT_MESSAGE<<EOF" >> $GITHUB_ENV
+          echo "$LAST_COMMIT_MESSAGE" >> $GITHUB_ENV
+          echo "EOF" >> $GITHUB_ENV
+          echo "[INFO] Commit message: $LAST_COMMIT_MESSAGE"
+
+      - name: Install dependencies and set repo configuration
+        run: |
+          npm install
+          node ./bin/deploy rename-package @underpostnet/underpost
+          node ./bin/deploy set-repo underpostnet/pwa-microservices-template-ghpkg
+
+      - name: Set git global credentials
+        run: |
+          git config --global --add safe.directory '*'
+          git config --global credential.helper ""
+          git config --global user.name 'underpostnet'
+          git config --global user.email 'fcoverdugoa@underpost.net'
+
+      - name: Clone and Push to github package repository
+        env:
+          GITHUB_TOKEN: ${{ secrets.GIT_AUTH_TOKEN }}
+          GITHUB_USERNAME: ${{ github.repository_owner }}
+        run: |
+          node bin clone --bare underpostnet/pwa-microservices-template-ghpkg
+          rm -rf ./.git
+          mv ./pwa-microservices-template-ghpkg.git ./.git
+          pwd
+          git remote set-url origin git@github.com:underpostnet/pwa-microservices-template-ghpkg.git
+          git init
+          git config user.name 'underpostnet'
+          git config user.email 'fcoverdugoa@underpost.net'
+          git add .
+          git status
+          git commit -m "$LAST_COMMIT_MESSAGE"
+          node bin push . underpostnet/pwa-microservices-template-ghpkg
+
+  engine-ghpkg:
+    if: github.repository == 'underpostnet/engine' && github.event_name == 'workflow_dispatch'
+    name: Build engine ${{ github.event.inputs.conf_id || 'cyberia' }} ghpkg repository
+    runs-on: ubuntu-latest
+    container:
+      image: quay.io/rockylinux/rockylinux:9
+    permissions:
+      contents: write
+      packages: write
+      id-token: write
+    steps:
+      - uses: actions/checkout@v7
+
+      - name: Install required packages
+        run: |
+          dnf install -y sudo tar gzip bzip2 git
+          dnf install -y curl --allowerasing
+
+      - name: Install Node.js
+        run: |
+          curl -fsSL https://rpm.nodesource.com/setup_24.x | bash -
+          dnf install nodejs -y
+
+      - name: Install dependencies
+        run: npm install
+
+      - name: Resolve canonical github package repo
+        run: |
+          CONF_ID="${{ github.event.inputs.conf_id }}"
+          CONF_ID="${CONF_ID:-cyberia}"
+          echo "CONF_ID=$CONF_ID" >> $GITHUB_ENV
+          echo "GHPKG_REPO=engine-ghpkg-$CONF_ID" >> $GITHUB_ENV
+          echo "PACKAGE_NAME=@underpostnet/$CONF_ID" >> $GITHUB_ENV
+          echo "[INFO] Canonical github package repo: underpostnet/engine-ghpkg-$CONF_ID"
+
+      - name: Capture commit message
+        run: |
+          FULL_MSG="${{ github.event.inputs.message }}"
+          if [ -z "$FULL_MSG" ]; then
+            FULL_MSG=$(node bin cmt --changelog-msg --from-n-commit 1 --changelog-no-hash 2>/dev/null || echo "")
+          fi
+          LAST_COMMIT_MESSAGE="${FULL_MSG:-Update canonical github package repo}"
+          echo "LAST_COMMIT_MESSAGE<<EOF" >> $GITHUB_ENV
+          echo "$LAST_COMMIT_MESSAGE" >> $GITHUB_ENV
+          echo "EOF" >> $GITHUB_ENV
+          echo "[INFO] Commit message: $LAST_COMMIT_MESSAGE"
+
+      - name: Set git global credentials
+        run: |
+          git config --global --add safe.directory '*'
+          git config --global credential.helper ""
+          git config --global user.name 'underpostnet'
+          git config --global user.email 'development@underpost.net'
+
+      - name: Mirror engine-$CONF_ID and Push to canonical github package repository
+        env:
+          GITHUB_TOKEN: ${{ secrets.GIT_AUTH_TOKEN }}
+          GITHUB_USERNAME: ${{ github.repository_owner }}
+        run: |
+          cd .. && node engine/bin clone underpostnet/engine-$CONF_ID
+          node engine/bin clone --bare underpostnet/$GHPKG_REPO
+          cd engine-$CONF_ID
+          rm -rf ./.git
+          mv ../$GHPKG_REPO.git ./.git
+          node ../engine/bin/deploy rename-package "$PACKAGE_NAME"
+          node ../engine/bin/deploy set-repo underpostnet/$GHPKG_REPO
+          git init
+          git config user.name 'underpostnet'
+          git config user.email 'development@underpost.net'
+          git add .
+          if git diff --cached --quiet; then
+            echo "[INFO] No changes to publish; skipping commit and push."
+          else
+            git commit -m "$LAST_COMMIT_MESSAGE"
+            node ../engine/bin push . underpostnet/$GHPKG_REPO
+          fi

package/.github/workflows/gitlab.ci.yml

@@ -0,0 +1,20 @@
+name: CI | Publish gitlab repository package
+on: [push]
+jobs:
+  pwa-microservices-template:
+    if: github.repository == 'underpostnet/pwa-microservices-template' && startsWith(github.event.head_commit.message, 'ci(package-pwa-microservices-template-ghpkg)')
+    name: Update gitlab repo package Jobs
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v7
+        with:
+          fetch-depth: 0
+          lfs: true
+      - name: Push to GitLab
+        run: |
+          git remote add gitlab https://oauth2:${{ secrets.GITLAB_TOKEN }}@gitlab.com/underpostnet/pwa-microservices-template.git
+          git lfs install
+          git lfs fetch --all
+          git lfs push --all gitlab
+          git push gitlab HEAD:main --force
+          git push gitlab --force --tags

package/.github/workflows/hardhat.ci.yml

@@ -0,0 +1,82 @@
+# ─────────────────────────────────────────────────────────────────────────────
+# CI | Hardhat – Compile, Test, Audit
+# ─────────────────────────────────────────────────────────────────────────────
+name: CI | Hardhat
+
+on:
+  push:
+    paths:
+      - 'hardhat/**'
+      - '.github/workflows/hardhat.ci.yml'
+  pull_request:
+    paths:
+      - 'hardhat/**'
+      - '.github/workflows/hardhat.ci.yml'
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  build-and-test:
+    name: Compile, Test & Audit
+    runs-on: ubuntu-latest
+    defaults:
+      run:
+        working-directory: hardhat
+
+    strategy:
+      matrix:
+        node-version: ['24']
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v7
+
+      - name: Setup Node.js ${{ matrix.node-version }}
+        uses: actions/setup-node@v7
+        with:
+          node-version: ${{ matrix.node-version }}
+          cache: 'npm'
+          cache-dependency-path: hardhat/package-lock.json
+
+      # ── Install ──────────────────────────────────────────────────────────
+      # Use `npm ci` for reproducible installs from the lockfile.
+      # Never install packages globally in CI.
+      - name: Install dependencies (npm ci)
+        run: npm ci
+
+      # ── Security Audit ───────────────────────────────────────────────────
+      # Production deps are what ships on-chain – fail on any moderate+ vuln.
+      - name: npm audit – production deps (moderate+)
+        run: npm audit --audit-level=moderate --omit=dev
+
+      # Dev/toolchain deps (hardhat, solidity-coverage, etc.) carry known
+      # transitive vulnerabilities that upstream hasn't patched yet.
+      # Log them for visibility but don't block the pipeline.
+      - name: npm audit – dev deps (informational)
+        run: npm audit --audit-level=moderate || true
+
+      # ── Compile ──────────────────────────────────────────────────────────
+      - name: Compile Solidity contracts
+        run: npx hardhat compile
+
+      # ── Test ─────────────────────────────────────────────────────────────
+      - name: Run tests
+        run: npx hardhat test
+        env:
+          REPORT_GAS: 'true'
+
+      # ── Coverage (optional, only on primary Node version) ────────────────
+      - name: Solidity coverage
+        if: matrix.node-version == '20'
+        run: npx hardhat coverage
+
+      # ── Lockfile integrity check ─────────────────────────────────────────
+      # Fail if package-lock.json is out of sync with package.json
+      - name: Verify lockfile is up to date
+        run: |
+          git diff --exit-code package-lock.json || {
+            echo "::error::package-lock.json is out of sync with package.json. Run 'npm install' locally and commit the lockfile."
+            exit 1
+          }

package/.github/workflows/npmpkg.ci.yml

@@ -0,0 +1,126 @@
+name: CI | Publish npm repository package
+on:
+  push:
+    branches: ['master']
+  pull_request:
+    branches: ['master']
+  workflow_dispatch:
+    inputs:
+      message:
+        description: 'Changelog message for the build'
+        required: false
+        default: ''
+      deploy_conf_id:
+        description: 'Engine conf ID to dispatch after build'
+        required: false
+        default: ''
+      deploy_type:
+        description: 'Deployment type for the engine conf CD (sync-and-deploy or init)'
+        required: false
+        default: ''
+permissions:
+  contents: write
+  packages: write
+  id-token: write
+jobs:
+  pwa-microservices-template:
+    if: |
+      github.repository == 'underpostnet/engine'
+      && (
+        startsWith(github.event.head_commit.message, 'ci(package-pwa-microservices-template')
+        || github.event_name == 'workflow_dispatch'
+      )
+    name: Update npm repo package Jobs
+    runs-on: ubuntu-latest
+    container:
+      image: quay.io/rockylinux/rockylinux:9
+    permissions:
+      contents: write
+      packages: write
+      id-token: write
+    steps:
+      - uses: actions/checkout@v7
+
+      - name: Install required packages
+        run: |
+          dnf install -y sudo tar gzip bzip2 git
+          dnf install -y curl --allowerasing
+
+      - name: Install Node.js
+        run: |
+          curl -fsSL https://rpm.nodesource.com/setup_24.x | bash -
+          dnf install nodejs -y
+
+      - name: Capture commit message
+        run: |
+          if [ "${{ github.event_name }}" = "workflow_dispatch" ]; then
+            LAST_COMMIT_MESSAGE="${{ github.event.inputs.message }}"
+            if [ -z "$LAST_COMMIT_MESSAGE" ]; then
+              LAST_COMMIT_MESSAGE="Update repository"
+            fi
+          else
+            FULL_MSG="${{ github.event.head_commit.message }}"
+            REST="$(echo "$FULL_MSG" | tail -n +2 | awk 'NR==1{first=$0; has_first=1; next} NR==2{print first " " $0; has_first=0; next} {print} END{if(has_first) print first}')"
+            LAST_COMMIT_MESSAGE="${REST:-$FULL_MSG}"
+          fi
+          echo "LAST_COMMIT_MESSAGE<<EOF" >> $GITHUB_ENV
+          echo "$LAST_COMMIT_MESSAGE" >> $GITHUB_ENV
+          echo "EOF" >> $GITHUB_ENV
+          echo "[INFO] Extracted payload: $LAST_COMMIT_MESSAGE"
+
+      - name: Install dependencies
+        run: npm install
+
+      - name: Set git global credentials
+        run: |
+          git config --global --add safe.directory '*'
+          git config --global credential.helper ""
+          git config --global user.name 'underpostnet'
+          git config --global user.email 'fcoverdugoa@underpost.net'
+
+      - name: Clone github package repository
+        env:
+          GITHUB_TOKEN: ${{ secrets.GIT_AUTH_TOKEN }}
+          GITHUB_USERNAME: ${{ github.repository_owner }}
+        run: |
+          cd .. && node engine/bin clone underpostnet/pwa-microservices-template
+          cd engine
+          npm run build:template
+          cd ../pwa-microservices-template
+          git remote set-url origin git@github.com:underpostnet/pwa-microservices-template.git
+          git add .
+          git config user.name 'underpostnet'
+          git config user.email 'fcoverdugoa@underpost.net'
+          if git diff --cached --quiet; then
+            echo "[INFO] No template changes to publish; skipping commit and push."
+          else
+            node ../engine/bin cmt . ci package-pwa-microservices-template-ghpkg "$LAST_COMMIT_MESSAGE"
+            node ../engine/bin push . underpostnet/pwa-microservices-template
+          fi
+
+      - name: Dispatch all engine CIs
+        run: |
+          DEPLOY_CONF_ID="${{ github.event.inputs.deploy_conf_id }}"
+          DEPLOY_TYPE="${{ github.event.inputs.deploy_type }}"
+          for ENGINE in engine-core engine-prototype engine-cyberia engine-lampp engine-test; do
+            SYNC="false"
+            DT=""
+            if [ "$ENGINE" = "$DEPLOY_CONF_ID" ]; then
+              SYNC="true"
+              DT="$DEPLOY_TYPE"
+            fi
+            echo "[INFO] Dispatching ${ENGINE}.ci.yml (sync=$SYNC, deploy_type=$DT)"
+            # Build the payload with node so the propagated message (may contain quotes/newlines)
+            # is JSON-escaped safely, and forward it so every engine-* repo shares one message.
+            PAYLOAD=$(SYNC="$SYNC" DT="$DT" MSG="$LAST_COMMIT_MESSAGE" node -e '
+              const i = { sync: process.env.SYNC };
+              if (process.env.DT) i.deploy_type = process.env.DT;
+              if (process.env.MSG) i.message = process.env.MSG;
+              process.stdout.write(JSON.stringify({ ref: "master", inputs: i }));
+            ')
+            curl -s -X POST \
+              -H "Accept: application/vnd.github.v3+json" \
+              -H "Authorization: token ${{ secrets.GIT_AUTH_TOKEN }}" \
+              "https://api.github.com/repos/underpostnet/engine/actions/workflows/${ENGINE}.ci.yml/dispatches" \
+              -d "$PAYLOAD"
+          done