@underpostnet/cyberia 3.2.90 → 3.3.0

package/deploy/dd-cyberia/sync-deploy.sh

@@ -0,0 +1,194 @@
+#!/bin/bash
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+source "$SCRIPT_DIR/../lib/logging.sh"
+
+ENGINE_ROOT=/home/dd/engine
+TARGET_NODE=localhost.localdomain
+INGRESS_NODE=localhost.localdomain
+
+# Asset repositories are committed only when they actually changed, so the
+# status query stays outside run_quiet: its stdout is the value we branch on.
+has_changes() {
+    local path="$1"
+
+    sudo -n -- /bin/bash -lc \
+        "cd $ENGINE_ROOT && node bin cmt $path --has-changes" | tr -d '\n'
+}
+
+main() {
+    echo "Starting remote sync and deploy"
+
+    run_quiet \
+        "Pull repository" \
+        "Target pod:" \
+        14 \
+        sudo -n -- /bin/bash -lc \
+        "cd $ENGINE_ROOT && node bin run pull"
+
+    run_quiet \
+        "Install dependencies" \
+        "Target pod:" \
+        14 \
+        sudo -n -- /bin/bash -lc \
+        "cd $ENGINE_ROOT && npm install"
+
+    run_quiet \
+        "Sync secrets" \
+        "Target pod:" \
+        14 \
+        sudo -n -- /bin/bash -lc \
+        "cd $ENGINE_ROOT && node bin run secret"
+
+    run_quiet \
+        "Run tests" \
+        "Target pod:" \
+        14 \
+        sudo -n -- /bin/bash -lc \
+        "cd $ENGINE_ROOT && npm run test"
+
+    run_quiet \
+        "Clean cyberia public assets" \
+        "Target pod:" \
+        14 \
+        sudo -n -- /bin/bash -lc \
+        "cd $ENGINE_ROOT && node bin run clean src/client/public/cyberia"
+
+    run_quiet \
+        "Clean underpost public assets" \
+        "Target pod:" \
+        14 \
+        sudo -n -- /bin/bash -lc \
+        "cd $ENGINE_ROOT && node bin run clean src/client/public/underpost"
+
+    run_quiet \
+        "Initialize cyberia assets repository" \
+        "Target pod:" \
+        14 \
+        sudo -n -- /bin/bash -lc \
+        "cd $ENGINE_ROOT && node bin cmt src/client/public/cyberia --init-repo"
+
+    run_quiet \
+        "Initialize underpost assets repository" \
+        "Target pod:" \
+        14 \
+        sudo -n -- /bin/bash -lc \
+        "cd $ENGINE_ROOT && node bin cmt src/client/public/underpost --init-repo"
+
+    run_quiet \
+        "Pull cyberia public assets" \
+        "Target pod:" \
+        14 \
+        sudo -n -- /bin/bash -lc \
+        "cd $ENGINE_ROOT && node bin fs src/client/public/cyberia --pull --recursive --deploy-id dd-cyberia"
+
+    run_quiet \
+        "Pull underpost public assets" \
+        "Target pod:" \
+        14 \
+        sudo -n -- /bin/bash -lc \
+        "cd $ENGINE_ROOT && node bin fs src/client/public/underpost --pull --recursive --deploy-id dd-cyberia --storage-file-path './engine-private/conf/dd-cyberia/storage.underpost.json'"
+
+    if [ "$(has_changes src/client/public/cyberia)" = "1" ]; then
+        run_quiet \
+            "Commit cyberia public assets" \
+            "Target pod:" \
+            14 \
+            sudo -n -- /bin/bash -lc \
+            "cd $ENGINE_ROOT && node bin cmt src/client/public/cyberia feat 'Update cyberia public assets'"
+    fi
+
+    if [ "$(has_changes src/client/public/underpost)" = "1" ]; then
+        run_quiet \
+            "Commit underpost public assets" \
+            "Target pod:" \
+            14 \
+            sudo -n -- /bin/bash -lc \
+            "cd $ENGINE_ROOT && node bin cmt src/client/public/underpost feat 'Update underpost public assets'"
+    fi
+
+    run_quiet \
+        "Apply format fixes" \
+        "Target pod:" \
+        14 \
+        sudo -n -- /bin/bash -lc \
+        "cd $ENGINE_ROOT && npm run fix"
+
+    run_quiet \
+        "Reinstall dependencies" \
+        "Target pod:" \
+        14 \
+        sudo -n -- /bin/bash -lc \
+        "cd $ENGINE_ROOT && npm install"
+
+    run_quiet \
+        "Build cyberia deployment bundle" \
+        "Target pod:" \
+        14 \
+        sudo -n -- /bin/bash -lc \
+        "cd $ENGINE_ROOT && node bin/deploy cyberia"
+
+    run_quiet \
+        "Clean build artifacts" \
+        "Target pod:" \
+        14 \
+        sudo -n -- /bin/bash -lc \
+        "cd $ENGINE_ROOT && underpost run clean"
+
+    run_quiet \
+        "Load dd-cyberia production environment" \
+        "Target pod:" \
+        14 \
+        sudo -n -- /bin/bash -lc \
+        "cd $ENGINE_ROOT && node bin env dd-cyberia production"
+
+    run_quiet \
+        "Build cyberia manifests" \
+        "Target pod:" \
+        14 \
+        sudo -n -- /bin/bash -lc \
+        "cd $ENGINE_ROOT && node bin/cyberia run-workflow build-manifest"
+
+    run_quiet \
+        "Sync dd-cyberia cluster" \
+        "Target pod:" \
+        14 \
+        sudo -n -- /bin/bash -lc \
+        "cd $ENGINE_ROOT && node bin run sync 'dd-cyberia,1,,underpost/engine-cyberia:latest' \
+          --kubeadm \
+          --deploy-id-cron-jobs none \
+          --timeout-response 300000ms \
+          --node-name ${TARGET_NODE} \
+          --gateway-api \
+          --ingress-node ${INGRESS_NODE} \
+          --ssh-key-path /home/dd/tmp/897as9dxhaskd9 \
+          --image-pull-policy Always \
+          --cmd 'cd /home/dd/engine, \
+            underpost clone underpostnet/engine-cyberia, \
+            mkdir -p /home/dd/engine/src/client/public/itemledger \
+              /home/dd/engine/src/client/public/cryptokoyn \
+              /home/dd/engine/src/client/components/cryptokoyn \
+              /home/dd/engine/src/client/components/itemledger \
+              /home/dd/engine/hardhat, \
+            cp -a ./engine-cyberia/src/client/public/itemledger/. /home/dd/engine/src/client/public/itemledger/, \
+            cp -a ./engine-cyberia/src/client/public/cryptokoyn/. /home/dd/engine/src/client/public/cryptokoyn/, \
+            cp -a ./engine-cyberia/src/client/components/cryptokoyn/. /home/dd/engine/src/client/components/cryptokoyn/, \
+            cp -a ./engine-cyberia/src/client/components/itemledger/. /home/dd/engine/src/client/components/itemledger/, \
+            cp -a ./engine-cyberia/src/client/Itemledger.index.js /home/dd/engine/src/client/Itemledger.index.js, \
+            cp -a ./engine-cyberia/src/client/Cryptokoyn.index.js /home/dd/engine/src/client/Cryptokoyn.index.js, \
+            rm -rf ./engine-cyberia, \
+            sudo rm -rf ./engine-private/, \
+            node bin clone underpostnet/engine-cyberia-private, \
+            sudo mv ./engine-cyberia-private ./engine-private, \
+            node bin env dd-cyberia production, \
+            node ./engine-private/itc-scripts/dd-cyberia-0.js, \
+            sudo chown -R dd:dd /home/dd/engine/src/client/public/cyberia, \
+            node bin/cyberia run-workflow import-default-items --clean, \
+            node bin/cyberia run-workflow import-default-items, \
+            node bin env dd-cyberia production, \
+            node bin client dd-cyberia, \
+            node bin start dd-cyberia production --run'"
+}
+
+main "$@"

package/deploy/lib/logging.sh

@@ -0,0 +1,96 @@
+# Shared logging helpers for deploy/<deploy-id>/*.sh. Sourced, never executed directly.
+#
+# Deploy script contract:
+# - one run_quiet call per remote command, with its own label
+# - the body lives in main(), invoked on the last line: the first remote command
+#   pulls this repository, rewriting the running script while bash reads it
+#
+# run_quiet hides normal output, prints only `patterns` matches plus the next
+# `lines_after` lines, and returns the command's exit status so `set -e` stops
+# the deployment. On failure it keeps two temp files and prints their paths in
+# red instead of their contents: the command's own stderr (native error message
+# and stack trace) and the full unfiltered log up to the error.
+
+RUN_QUIET_RED=$'\033[0;31m'
+RUN_QUIET_RESET=$'\033[0m'
+
+RUN_QUIET_NODE_NAME=$(hostname 2>/dev/null | tr '[:upper:]' '[:lower:]')
+RUN_QUIET_NODE_TAG=${RUN_QUIET_NODE_NAME:+ [$RUN_QUIET_NODE_NAME]}
+
+run_quiet() {
+    local label="$1"
+    local patterns="$2"
+    local lines_after="$3"
+    shift 3
+    
+    local debug_log
+    local error_log
+    local fifo_dir
+    local filter_pid
+    local stderr_pid
+    local status=0
+    
+    echo "$(date -Is) $RUN_QUIET_NODE_TAG ▶ $label"
+    
+    debug_log=$(mktemp --suffix=.debug.log)
+    error_log=$(mktemp --suffix=.error.log)
+    fifo_dir=$(mktemp -d)
+    mkfifo "$fifo_dir/merged" "$fifo_dir/stderr"
+    
+    # The filter reads the live stream rather than the finished log: a deployment
+    # monitor prints its matches for minutes before exiting, so a pass over the
+    # completed file would show nothing until then. fflush defeats awk's block
+    # buffering, which otherwise withholds matches whenever stdout is a pipe.
+    # awk writes the debug log itself rather than piping through tee, so the
+    # reader stays a single process that a kill can always release.
+    awk \
+    -v pattern="$patterns" \
+    -v lines_after="$lines_after" \
+    -v debug_log="$debug_log" '
+        {
+            print > debug_log
+        }
+        $0 ~ pattern {
+            remaining = lines_after + 1
+        }
+        remaining > 0 {
+            print
+            fflush()
+            remaining--
+        }
+    ' <"$fifo_dir/merged" &
+    filter_pid=$!
+    
+    # stderr is duplicated: on its own for the native error and stack trace, and
+    # into the merged stream so both the debug log and the filter see it in
+    # chronological order with stdout.
+    tee -a "$error_log" <"$fifo_dir/stderr" >"$fifo_dir/merged" &
+    stderr_pid=$!
+    
+    "$@" >"$fifo_dir/merged" 2>"$fifo_dir/stderr" || status=$?
+    
+    # Drain both readers before the paths are printed, or the trace can still be
+    # in flight. Bounded: a command that leaks a child holding a stream open must
+    # not hang the deployment, and by then everything read has been written.
+    run_quiet_drain "$stderr_pid"
+    run_quiet_drain "$filter_pid"
+    rm -rf "$fifo_dir"
+    
+    if [ "$status" -ne 0 ]; then
+        printf '%s✖ %s failed (exit %s)\n  error trace: %s\n  debug log:   %s%s\n' \
+        "$RUN_QUIET_RED" "$label" "$status" "$error_log" "$debug_log" "$RUN_QUIET_RESET" >&2
+        return "$status"
+    fi
+    
+    rm -f "$debug_log" "$error_log"
+    
+    return "$status"
+}
+
+run_quiet_drain() {
+    local pid="$1"
+    
+    timeout 10 tail --pid="$pid" -f /dev/null 2>/dev/null || true
+    kill "$pid" 2>/dev/null || true
+    wait "$pid" 2>/dev/null || true
+}

package/deploy/pwa-microservices-template/deploy.sh

@@ -0,0 +1,72 @@
+#!/bin/bash
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+source "$SCRIPT_DIR/../lib/logging.sh"
+
+# Runs in the workflow's rockylinux:9 container against the checked-out
+# workspace instead of over SSH, so the repository root is this script's
+# grandparent rather than a fixed remote path.
+REPO_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)"
+
+main() {
+    echo "Starting github pages deploy"
+
+    cd "$REPO_ROOT"
+
+    run_quiet \
+        "Install required packages" \
+        "Target pod:" \
+        14 \
+        dnf install -y sudo tar gzip bzip2 git
+
+    run_quiet \
+        "Install curl" \
+        "Target pod:" \
+        14 \
+        dnf install -y curl --allowerasing
+
+    run_quiet \
+        "Add Node.js repository" \
+        "Target pod:" \
+        14 \
+        bash -c "curl -fsSL https://rpm.nodesource.com/setup_24.x | bash -"
+
+    run_quiet \
+        "Install Node.js" \
+        "Target pod:" \
+        14 \
+        dnf install nodejs -y
+
+    run_quiet \
+        "Install dependencies" \
+        "Target pod:" \
+        14 \
+        npm install
+
+    run_quiet \
+        "Build dd-github-pages configuration" \
+        "Target pod:" \
+        14 \
+        node bin new --default-conf --conf-workflow-id dd-github-pages
+
+    run_quiet \
+        "Create dd-github-pages deployment" \
+        "Target pod:" \
+        14 \
+        node bin new --deploy-id dd-github-pages
+
+    run_quiet \
+        "Load dd-github-pages production environment" \
+        "Target pod:" \
+        14 \
+        node bin env dd-github-pages production
+
+    run_quiet \
+        "Build dd-github-pages client" \
+        "Target pod:" \
+        14 \
+        env NODE_ENV=production node bin client dd-github-pages '' underpostnet.github.io /pwa-microservices-template-ghpkg
+}
+
+main "$@"

package/deploy/release/deploy.sh

@@ -0,0 +1,62 @@
+#!/bin/bash
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+source "$SCRIPT_DIR/../lib/logging.sh"
+
+ENGINE_ROOT=/home/dd/engine
+
+main() {
+    echo "Starting remote release deploy"
+
+    run_quiet \
+        "Pull repository" \
+        "Target pod:" \
+        14 \
+        sudo -n -- /bin/bash -lc \
+        "cd $ENGINE_ROOT && node bin run pull"
+
+    run_quiet \
+        "Install dependencies" \
+        "Target pod:" \
+        14 \
+        sudo -n -- /bin/bash -lc \
+        "cd $ENGINE_ROOT && npm install"
+
+    run_quiet \
+        "Sync secrets" \
+        "Target pod:" \
+        14 \
+        sudo -n -- /bin/bash -lc \
+        "cd $ENGINE_ROOT && node bin run secret"
+
+    run_quiet \
+        "Install underpost CLI" \
+        "Target pod:" \
+        14 \
+        sudo -n -- /bin/bash -lc \
+        "cd $ENGINE_ROOT && npm install -g underpost"
+
+    run_quiet \
+        "Resync secrets" \
+        "Target pod:" \
+        14 \
+        sudo -n -- /bin/bash -lc \
+        "cd $ENGINE_ROOT && node bin run secret"
+
+    run_quiet \
+        "Configure git" \
+        "Target pod:" \
+        14 \
+        sudo -n -- /bin/bash -lc \
+        "cd $ENGINE_ROOT && node bin run --dev git-conf"
+
+    run_quiet \
+        "Build and publish docker images" \
+        "Target pod:" \
+        14 \
+        sudo -n -- /bin/bash -lc \
+        "cd $ENGINE_ROOT && node bin run docker-image"
+}
+
+main "$@"

package/deployment.yaml

@@ -20,7 +20,7 @@ spec:
     spec:
       containers:
         - name: dd-cyberia-development-blue
-          image: underpost/underpost-engine:v3.2.90
+          image: underpost/underpost-engine:v3.3.0
           imagePullPolicy: IfNotPresent
           envFrom:
             - secretRef:

package/docker-compose.yml

@@ -4,36 +4,6 @@
 # (MongoDB + Valkey + IPFS), then the Cyberia content-authority engine and its
 # per-instance server/client tiers, fronted by an nginx reverse proxy.
 #
-# Canonical location (custom docker-compose workflow):
-#   engine-private/conf/dd-cyberia/docker-compose/cyberia/
-#     ├── docker-compose.yml     (this file — the ENTIRE stack, single source)
-#     ├── compose.env            (working env-file, used as-is — not generated)
-#     ├── nginx.conf             (custom per-variant sub-path routing)
-#     └── mongodb/entrypoint.sh  (replica-set bootstrap)
-# All bind mounts below are relative to this directory: the CLI runs compose with
-# `--project-directory` pinned here (see src/cli/docker-compose.js).
-#
-# Multi-instance: one engine-cyberia (content + asset authority) feeds three
-# cyberia-server + three cyberia-client tiers, one per conf.instances.json
-# multiInstance variant (amethyst-strata-expansion "/", FOREST "/FOREST",
-# TEST "/TEST"). This custom workflow owns nginx.conf and the services below;
-# keep both in sync when its instance topology changes.
-#
-# Startup is a strict health-gated chain: the stable gateway starts after the
-# engine, then each server/client pipeline advances independently:
-#   mongodb + valkey -> engine runtime -> proxy -> 3x server -> 3x client
-#
-# Architecture boundaries (see CLAUDE.md "Cyberia architecture boundaries"):
-#   engine-cyberia  — content, validation, persistence, gRPC(:50051)+REST(:4005)
-#                     data services, asset metadata. The authority layer.
-#   cyberia-server  — authoritative real-time simulation / tick processing (Go).
-#   cyberia-client  — rendering, input, prediction, presentation (WASM bundle).
-#
-# Usage:
-#   underpost docker-compose --up --deploy-id dd-cyberia --docker-compose-id cyberia
-#   (or the docker:cyberia:* npm scripts). The engine-cyberia image bakes the
-#   dd-cyberia build at image-build time, so no private-repo credentials are
-#   required at container start.
 
 name: dd-cyberia
 
@@ -165,7 +135,7 @@ services:
   # server starts but rejects connections until seeded). Serves REST/WS on 4005
   # and the engine gRPC data service on 50051.
   engine-cyberia-runtime:
-    image: ${ENGINE_CYBERIA_IMAGE:-underpost/engine-cyberia-dev}:${ENGINE_CYBERIA_TAG:-v3.2.90}
+    image: ${ENGINE_CYBERIA_IMAGE:-underpost/engine-cyberia-dev}:${ENGINE_CYBERIA_TAG:-v3.3.0}
     container_name: dd-cyberia-engine
     command:
       - /bin/sh
@@ -220,7 +190,7 @@ services:
   # gateway on host port 8081, so one port can route every instance path.
 
   cyberia-server-runtime:
-    image: ${CYBERIA_SERVER_IMAGE:-underpost/cyberia-server-dev}:${CYBERIA_SERVER_TAG:-v3.2.90}
+    image: ${CYBERIA_SERVER_IMAGE:-underpost/cyberia-server-dev}:${CYBERIA_SERVER_TAG:-v3.3.0}
     container_name: dd-cyberia-server
     environment:
       INSTANCE_CODE: amethyst-strata-expansion
@@ -232,6 +202,14 @@ services:
       STATIC_DIR: ${CYBERIA_SERVER_STATIC_DIR:-/home/dd/engine/cyberia-server/public}
       APP_ENV: ${CYBERIA_SERVER_APP_ENV:-development}
       LOG_LEVEL: ${CYBERIA_SERVER_LOG_LEVEL:-}
+      CYBERIA_DISABLE_CONNECTION_LIMITS: ${CYBERIA_DISABLE_CONNECTION_LIMITS:-}
+      CYBERIA_MAX_CONNECTIONS: ${CYBERIA_MAX_CONNECTIONS:-}
+      CYBERIA_MAX_CONNECTIONS_PER_IP: ${CYBERIA_MAX_CONNECTIONS_PER_IP:-}
+      CYBERIA_CONNECT_RATE_PER_IP: ${CYBERIA_CONNECT_RATE_PER_IP:-}
+      CYBERIA_CONNECT_BURST_PER_IP: ${CYBERIA_CONNECT_BURST_PER_IP:-}
+      CYBERIA_MESSAGE_RATE: ${CYBERIA_MESSAGE_RATE:-}
+      CYBERIA_MESSAGE_BURST: ${CYBERIA_MESSAGE_BURST:-}
+      CYBERIA_MAX_STRIKES: ${CYBERIA_MAX_STRIKES:-}
     networks:
       - dd-cyberia-internal
     expose:
@@ -248,7 +226,7 @@ services:
     restart: unless-stopped
 
   cyberia-server-forest:
-    image: ${CYBERIA_SERVER_IMAGE:-underpost/cyberia-server-dev}:${CYBERIA_SERVER_TAG:-v3.2.90}
+    image: ${CYBERIA_SERVER_IMAGE:-underpost/cyberia-server-dev}:${CYBERIA_SERVER_TAG:-v3.3.0}
     container_name: dd-cyberia-server-forest
     environment:
       INSTANCE_CODE: FOREST
@@ -260,6 +238,14 @@ services:
       STATIC_DIR: ${CYBERIA_SERVER_STATIC_DIR:-/home/dd/engine/cyberia-server/public}
       APP_ENV: ${CYBERIA_SERVER_APP_ENV:-development}
       LOG_LEVEL: ${CYBERIA_SERVER_LOG_LEVEL:-}
+      CYBERIA_DISABLE_CONNECTION_LIMITS: ${CYBERIA_DISABLE_CONNECTION_LIMITS:-}
+      CYBERIA_MAX_CONNECTIONS: ${CYBERIA_MAX_CONNECTIONS:-}
+      CYBERIA_MAX_CONNECTIONS_PER_IP: ${CYBERIA_MAX_CONNECTIONS_PER_IP:-}
+      CYBERIA_CONNECT_RATE_PER_IP: ${CYBERIA_CONNECT_RATE_PER_IP:-}
+      CYBERIA_CONNECT_BURST_PER_IP: ${CYBERIA_CONNECT_BURST_PER_IP:-}
+      CYBERIA_MESSAGE_RATE: ${CYBERIA_MESSAGE_RATE:-}
+      CYBERIA_MESSAGE_BURST: ${CYBERIA_MESSAGE_BURST:-}
+      CYBERIA_MAX_STRIKES: ${CYBERIA_MAX_STRIKES:-}
     networks:
       - dd-cyberia-internal
     expose:
@@ -276,7 +262,7 @@ services:
     restart: unless-stopped
 
   cyberia-server-test:
-    image: ${CYBERIA_SERVER_IMAGE:-underpost/cyberia-server-dev}:${CYBERIA_SERVER_TAG:-v3.2.90}
+    image: ${CYBERIA_SERVER_IMAGE:-underpost/cyberia-server-dev}:${CYBERIA_SERVER_TAG:-v3.3.0}
     container_name: dd-cyberia-server-test
     environment:
       INSTANCE_CODE: TEST
@@ -288,6 +274,14 @@ services:
       STATIC_DIR: ${CYBERIA_SERVER_STATIC_DIR:-/home/dd/engine/cyberia-server/public}
       APP_ENV: ${CYBERIA_SERVER_APP_ENV:-development}
       LOG_LEVEL: ${CYBERIA_SERVER_LOG_LEVEL:-}
+      CYBERIA_DISABLE_CONNECTION_LIMITS: ${CYBERIA_DISABLE_CONNECTION_LIMITS:-}
+      CYBERIA_MAX_CONNECTIONS: ${CYBERIA_MAX_CONNECTIONS:-}
+      CYBERIA_MAX_CONNECTIONS_PER_IP: ${CYBERIA_MAX_CONNECTIONS_PER_IP:-}
+      CYBERIA_CONNECT_RATE_PER_IP: ${CYBERIA_CONNECT_RATE_PER_IP:-}
+      CYBERIA_CONNECT_BURST_PER_IP: ${CYBERIA_CONNECT_BURST_PER_IP:-}
+      CYBERIA_MESSAGE_RATE: ${CYBERIA_MESSAGE_RATE:-}
+      CYBERIA_MESSAGE_BURST: ${CYBERIA_MESSAGE_BURST:-}
+      CYBERIA_MAX_STRIKES: ${CYBERIA_MAX_STRIKES:-}
     networks:
       - dd-cyberia-internal
     expose:
@@ -315,7 +309,7 @@ services:
   #   cyberia-server-test   -> cyberia-client-test
 
   cyberia-client-runtime:
-    image: ${CYBERIA_CLIENT_IMAGE:-underpost/cyberia-client-dev}:${CYBERIA_CLIENT_TAG:-v3.2.90}
+    image: ${CYBERIA_CLIENT_IMAGE:-underpost/cyberia-client-dev}:${CYBERIA_CLIENT_TAG:-v3.3.0}
     container_name: dd-cyberia-client
     environment:
       CYBERIA_PORT: '8081'
@@ -340,7 +334,7 @@ services:
     restart: unless-stopped
 
   cyberia-client-forest:
-    image: ${CYBERIA_CLIENT_IMAGE:-underpost/cyberia-client-dev}:${CYBERIA_CLIENT_TAG:-v3.2.90}
+    image: ${CYBERIA_CLIENT_IMAGE:-underpost/cyberia-client-dev}:${CYBERIA_CLIENT_TAG:-v3.3.0}
     container_name: dd-cyberia-client-forest
     environment:
       CYBERIA_PORT: '8081'
@@ -365,7 +359,7 @@ services:
     restart: unless-stopped
 
   cyberia-client-test:
-    image: ${CYBERIA_CLIENT_IMAGE:-underpost/cyberia-client-dev}:${CYBERIA_CLIENT_TAG:-v3.2.90}
+    image: ${CYBERIA_CLIENT_IMAGE:-underpost/cyberia-client-dev}:${CYBERIA_CLIENT_TAG:-v3.3.0}
     container_name: dd-cyberia-client-test
     environment:
       CYBERIA_PORT: '8081'

package/hardhat/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "cyberia-hardhat",
-  "version": "1.0.0",
+  "version": "3.3.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "cyberia-hardhat",
-      "version": "1.0.0",
+      "version": "3.3.0",
       "dependencies": {
         "@openzeppelin/contracts": "~5.6.1",
         "dotenv": "~17.4.2",
@@ -15,7 +15,7 @@
       "devDependencies": {
         "@nomicfoundation/hardhat-toolbox-viem": "^5.0.7",
         "chai": "^6.2.2",
-        "hardhat": "~3.12.0"
+        "hardhat": "~3.13.0"
       },
       "engines": {
         "node": ">=22.0.0"
@@ -2004,9 +2004,9 @@
       "license": "ISC"
     },
     "node_modules/hardhat": {
-      "version": "3.12.0",
-      "resolved": "https://registry.npmjs.org/hardhat/-/hardhat-3.12.0.tgz",
-      "integrity": "sha512-HY1BPWJ+Pq/RvGDcK8M0gwawNiJqrjfF0LOdHM+pYa9EDybG8O9hX1RP7fWchNLrA49D7A1Ax8LlRkQglWozzg==",
+      "version": "3.13.0",
+      "resolved": "https://registry.npmjs.org/hardhat/-/hardhat-3.13.0.tgz",
+      "integrity": "sha512-ERVBunuWWBTT3BNfZlozqGB0cSG84xi/P380wGNUxt+pl5e309ZVmNvXiwrMxZn4Ua4LJYW93yC1RnAtf7fLNw==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
@@ -2704,9 +2704,9 @@
       }
     },
     "node_modules/undici": {
-      "version": "6.27.0",
-      "resolved": "https://registry.npmjs.org/undici/-/undici-6.27.0.tgz",
-      "integrity": "sha512-YmfV3YnEDzXRC5lZ2jWtWWHKGUm1zIt8AhesR1tens+HTNv+YZlN/dp6G727LOvMJ8xjP9Be7Y2Sdr96LDm+pg==",
+      "version": "6.28.0",
+      "resolved": "https://registry.npmjs.org/undici/-/undici-6.28.0.tgz",
+      "integrity": "sha512-LIY910g9TI13YS95lrMFrs8Rm/u/irgHeTWoKCoteeJ04CUJ92eEfj0rVn+7VKMPBpUPiUoBKfhNyLI23EE/KA==",
       "dev": true,
       "license": "MIT",
       "engines": {

package/hardhat/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cyberia-hardhat",
-  "version": "1.0.0",
+  "version": "3.3.0",
   "type": "module",
   "description": "Hardhat project for Cyberia Online ObjectLayerToken (ERC-1155) on Hyperledger Besu",
   "private": true,
@@ -21,7 +21,7 @@
   "devDependencies": {
     "@nomicfoundation/hardhat-toolbox-viem": "^5.0.7",
     "chai": "^6.2.2",
-    "hardhat": "~3.12.0"
+    "hardhat": "~3.13.0"
   },
   "dependencies": {
     "@openzeppelin/contracts": "~5.6.1",
@@ -38,6 +38,6 @@
     "elliptic": ">=6.6.1",
     "lodash-es": "4.18.1",
     "ws": ">=8.21.0",
-    "undici": "6.27.0"
+    "undici": "6.28.0"
   }
 }

package/manifests/cronjobs/dd-cron/dd-cron-backup.yaml

@@ -14,6 +14,10 @@ spec:
   failedJobsHistoryLimit: 1
   suspend: false
   jobTemplate:
+    metadata:
+      labels:
+        app: dd-cron-backup
+        managed-by: underpost
     spec:
       template:
         metadata:
@@ -23,7 +27,7 @@ spec:
         spec:
           containers:
             - name: dd-cron-backup
-              image: underpost/underpost-engine:v3.2.90
+              image: underpost/underpost-engine:v3.3.0
               command:
                 - /bin/sh
                 - -c

package/manifests/cronjobs/dd-cron/dd-cron-dns.yaml

@@ -23,7 +23,7 @@ spec:
         spec:
           containers:
             - name: dd-cron-dns
-              image: underpost/underpost-engine:v3.2.90
+              image: underpost/underpost-engine:v3.3.0
               command:
                 - /bin/sh
                 - -c