@underpostnet/cyberia 3.2.90 → 3.3.73

package/src/projects/cyberia/instance-data.js

@@ -16,7 +16,7 @@
 
 import crypto from 'crypto';
 import { DataBaseProviderService } from '../../db/DataBaseProvider.js';
-import { loggerFactory } from '../../server/logger.js';
+import { loggerFactory } from '../../server/ops/logger.js';
 import {
   CYBERIA_INSTANCE_CONF_DEFAULTS as FALLBACK_CONFIG_DEFAULTS,
   DEFAULT_DEAD_ITEM_ID,
@@ -29,6 +29,7 @@ import {
   DefaultCyberiaItems,
 } from '../../client/components/cyberia/SharedDefaultsCyberia.js';
 import { generateFallbackWorld } from '../../api/cyberia-instance/cyberia-fallback-world.js';
+import { getFallbackDefaultItems } from '../../api/cyberia-instance/cyberia-fallback-default-items.js';
 
 const logger = loggerFactory(import.meta);
 
@@ -421,6 +422,7 @@ function toInstanceConfig(gc) {
     botAggroRange: gc.botAggroRange ?? fb.botAggroRange,
     defaultPlayerWidth: gc.defaultPlayerWidth ?? fb.defaultPlayerWidth,
     defaultPlayerHeight: gc.defaultPlayerHeight ?? fb.defaultPlayerHeight,
+    playerBaseSpeed: gc.playerBaseSpeed ?? fb.playerBaseSpeed,
     playerBaseLifeRegenMin: gc.playerBaseLifeRegenMin ?? fb.playerBaseLifeRegenMin,
     playerBaseLifeRegenMax: gc.playerBaseLifeRegenMax ?? fb.playerBaseLifeRegenMax,
     sumStatsLimit: gc.sumStatsLimit ?? fb.sumStatsLimit,
@@ -553,7 +555,7 @@ async function fetchFullInstance(models, requestedInstanceCode) {
   // ── Fallback: instance not found → return a multi-map procedural world ──
   if (!inst) {
     logger.info(`Instance "${instanceCode}" not found — returning fallback world.`);
-    const world = generateFallbackWorld();
+    const world = generateFallbackWorld({ itemIds: getFallbackDefaultItems() });
     const fallbackConf = buildFallbackConfig();
 
     // Collect all objectLayerItemIds from the generated maps so the
@@ -599,6 +601,23 @@ async function fetchFullInstance(models, requestedInstanceCode) {
 
     const fallbackConfig = buildFallbackInstanceConfig(fallbackConf, world.instance.itemIds);
 
+    // Opaque version over everything mutable in this payload, mirroring the
+    // persisted path below. A constant here would make hot reload a silent
+    // no-op: WorldBuilder.ReloadWorld skips the rebuild — and therefore
+    // ApplyInstanceConfig — whenever the version is unchanged. The world
+    // geometry itself is deterministic (code defaults + seed), so the inputs
+    // that can actually differ are the staged default items and the
+    // ObjectLayer docs, which are the only things read from the DB here.
+    const fallbackVersionParts = ['fallback'];
+    for (const entry of world.instance.itemIds || []) {
+      fallbackVersionParts.push(`${entry.id}:${entry.defaultPlayerInventory ? 1 : 0}`);
+    }
+    for (const doc of fallbackOlDocs) fallbackVersionParts.push(String(doc.sha256 || doc._id));
+    const fallbackVersion = `fallback-${crypto
+      .createHash('sha256')
+      .update(fallbackVersionParts.join('|'))
+      .digest('hex')}`;
+
     return {
       instance: toInstanceMsg({ ...world.instance, _id: '', seed: instanceCode }),
       maps: world.maps.map((m) => ({
@@ -613,7 +632,7 @@ async function fetchFullInstance(models, requestedInstanceCode) {
       })),
       objectLayers: fallbackOlDocs.map(toObjectLayerMsg),
       config: fallbackConfig,
-      version: 'fallback',
+      version: fallbackVersion,
       // Mission content for the procedural fallback comes straight from
       // the canonical defaults — no DB, fully self-contained.
       actions: DefaultCyberiaActions.map(toActionMsg),

package/src/projects/cyberia/ipfs-client.js

@@ -11,7 +11,7 @@
  * @namespace IpfsClient
  */
 import stringify from 'fast-json-stable-stringify';
-import { loggerFactory } from '../../server/logger.js';
+import { loggerFactory } from '../../server/ops/logger.js';
 import Underpost from '../../index.js';
 const logger = loggerFactory(import.meta);
 const DEFAULT_IPFS_HTTP_TIMEOUT_MS = Number(process.env.IPFS_HTTP_TIMEOUT_MS || 10000);
@@ -48,21 +48,21 @@ const fetchWithTimeout = async (url, options = {}, { kind = 'kubo', label = url
  */
 const getIpfsApiUrl = () =>
   process.env.IPFS_API_URL ||
-  `http://${process.env.NODE_ENV === 'development' && !Underpost.env.isInsideContainer() ? 'localhost' : 'ipfs-cluster'}:5001`;
+  `http://${process.env.NODE_ENV === 'development' && !Underpost.state.isInsideContainer() ? 'localhost' : 'ipfs-cluster'}:5001`;
 /**
  * Base URL of the IPFS Cluster REST API (port 9094).
  * @returns {string}
  */
 const getClusterApiUrl = () =>
   process.env.IPFS_CLUSTER_API_URL ||
-  `http://${process.env.NODE_ENV === 'development' && !Underpost.env.isInsideContainer() ? 'localhost' : 'ipfs-cluster'}:9094`;
+  `http://${process.env.NODE_ENV === 'development' && !Underpost.state.isInsideContainer() ? 'localhost' : 'ipfs-cluster'}:9094`;
 /**
  * Base URL of the IPFS HTTP Gateway (port 8080).
  * @returns {string}
  */
 const getGatewayUrl = () =>
   process.env.IPFS_GATEWAY_URL ||
-  `http://${process.env.NODE_ENV === 'development' && !Underpost.env.isInsideContainer() ? 'localhost' : 'ipfs-cluster'}:8080`;
+  `http://${process.env.NODE_ENV === 'development' && !Underpost.state.isInsideContainer() ? 'localhost' : 'ipfs-cluster'}:8080`;
 // ─────────────────────────────────────────────────────────
 //  Core: add content
 // ─────────────────────────────────────────────────────────

package/src/projects/cyberia/map-preview-generator.js

@@ -21,7 +21,7 @@
 import crypto from 'crypto';
 import fs from 'fs-extra';
 import sharp from 'sharp';
-import { loggerFactory } from '../../server/logger.js';
+import { loggerFactory } from '../../server/ops/logger.js';
 import {
   ENTITY_TYPE_TO_ITEM_TYPES,
   getDefaultCyberiaItemById,

package/src/projects/cyberia/object-layer.js

@@ -10,16 +10,14 @@ import path from 'path';
 import { PNG } from 'pngjs';
 import sharp from 'sharp';
 import { Jimp, intToRGBA, rgbaToInt } from 'jimp';
-import crypto from 'crypto';
-import stringify from 'fast-json-stable-stringify';
-
+import { computeObjectLayerSha256 } from '../../api/object-layer/object-layer.model.js';
 import { range } from '../../client/components/core/CommonJs.js';
 import {
   generateRandomStats,
   getKeyframeDirectionsByCode,
   OBJECT_LAYER_DIRECTION_NAME_TO_CODE,
 } from '../../client/components/cyberia/SharedDefaultsCyberia.js';
-import { loggerFactory } from '../../server/logger.js';
+import { loggerFactory } from '../../server/ops/logger.js';
 
 const logger = loggerFactory(import.meta);
 
@@ -450,7 +448,7 @@ export class ObjectLayerEngine {
    * @memberof CyberiaObjectLayer
    */
   static computeSha256(data) {
-    return crypto.createHash('sha256').update(stringify(data)).digest('hex');
+    return computeObjectLayerSha256(data);
   }
 
   /**
@@ -642,23 +640,15 @@ export class ObjectLayerEngine {
     }
 
     // 4. Atomic create/upsert - ObjectLayer is fully populated with all CIDs
-    let objectLayer;
-    const existingByItemId = await ObjectLayer.findOne({ 'data.item.id': objectLayerData.data.item.id });
-    if (existingByItemId) {
-      const oldRenderFramesId = existingByItemId.objectLayerRenderFramesId;
-      logger.info(
-        `ObjectLayer for item "${objectLayerData.data.item.id}" exists (${existingByItemId._id}), replacing atomically...`,
-      );
-      objectLayer = await ObjectLayer.findByIdAndUpdate(existingByItemId._id, objectLayerData, {
-        returnDocument: 'after',
-      }).populate('objectLayerRenderFramesId');
-      if (oldRenderFramesId && !oldRenderFramesId.equals(objectLayerRenderFramesDoc._id)) {
-        await ObjectLayerRenderFrames.findByIdAndDelete(oldRenderFramesId);
-      }
-    } else {
-      objectLayer = await (await ObjectLayer.create(objectLayerData)).populate('objectLayerRenderFramesId');
-      logger.info(`ObjectLayer created successfully with id: ${objectLayer._id}`);
+    const existingByItemId = await ObjectLayer.findByItemId(objectLayerData.data.item.id);
+    const oldRenderFramesId = existingByItemId?.objectLayerRenderFramesId;
+
+    const objectLayer = await (await ObjectLayer.upsertByItemId(objectLayerData)).populate('objectLayerRenderFramesId');
+
+    if (oldRenderFramesId && !oldRenderFramesId.equals(objectLayerRenderFramesDoc._id)) {
+      await ObjectLayerRenderFrames.findByIdAndDelete(oldRenderFramesId);
     }
+    logger.info(`ObjectLayer for item "${objectLayerData.data.item.id}" persisted with id: ${objectLayer._id}`);
 
     return { objectLayer, objectLayerRenderFramesDoc };
   }
@@ -848,7 +838,7 @@ export class ObjectLayerEngine {
    * @memberof CyberiaObjectLayer
    */
   static async resolveCanonicalCid({ itemId, ObjectLayer, ipfsClient = null, options }) {
-    const objectLayer = await ObjectLayer.findOne({ 'data.item.id': itemId });
+    const objectLayer = await ObjectLayer.findByItemId(itemId);
     if (!objectLayer) {
       throw new Error(`ObjectLayer "${itemId}" not found in database`);
     }

package/src/projects/cyberia/semantic-layer-generator.js

@@ -19,7 +19,7 @@
 import crypto from 'crypto';
 
 import { createRng, seedToInt, createNoise2D, generateShape, listShapes } from './shape-generator.js';
-import { loggerFactory } from '../../server/logger.js';
+import { loggerFactory } from '../../server/ops/logger.js';
 
 import { registerFloorSemantics } from './semantic-layer-generator-floor.js';
 import { registerSkinSemantics } from './semantic-layer-generator-skin.js';

package/src/projects/underpost/catalog-underpost.js

@@ -18,13 +18,24 @@ const TEMPLATE_RESTORE_PATHS = [
   `./.github/workflows/gitlab.ci.yml`,
   `./.github/workflows/publish.ci.yml`,
   `./.github/workflows/release.cd.yml`,
-  `./src/client/services/user/guest.service.js`,
+  `./deploy/lib`,
+  './deploy/release',
+  './deploy/pwa-microservices-template',
+  './src/client/services/user/guest.service.js',
   './src/api/user/guest.service.js',
   './src/ws/IoInterface.js',
   './src/ws/IoServer.js',
   './manifests/deployment/dd-default-development',
 ];
 
+/**
+ * Template checkout entries a rebuild keeps. Everything else is reconstructed from
+ * the engine tree, so a file the engine no longer produces cannot survive a build.
+ * @constant {string[]}
+ * @memberof UnderpostCatalog
+ */
+const TEMPLATE_PRESERVED_ENTRIES = ['.git', 'node_modules'];
+
 /**
  * npm keywords for the standalone Underpost platform / template package.
  * @constant {string[]}
@@ -57,4 +68,4 @@ const TEMPLATE_KEYWORDS = [
 const TEMPLATE_DESCRIPTION =
   'Underpost Platform — end-to-end CI/CD and application-delivery toolchain CLI. Covers bare metal, Kubernetes, K3s, kubeadm, LXD, container/image orchestration, secrets, databases, cron jobs, monitoring, SSH, runners, PWA + Workbox delivery, and release orchestration. Extensible via downstream CLIs.';
 
-export { TEMPLATE_RESTORE_PATHS, TEMPLATE_KEYWORDS, TEMPLATE_DESCRIPTION };
+export { TEMPLATE_RESTORE_PATHS, TEMPLATE_PRESERVED_ENTRIES, TEMPLATE_KEYWORDS, TEMPLATE_DESCRIPTION };

package/src/proxy.js

@@ -1,12 +1,9 @@
 'use strict';
 
-// https://nodejs.org/api
-// https://expressjs.com/en/4x/api.html
-
-import { loggerFactory } from './server/logger.js';
-import { buildProxy } from './server/proxy.js';
-import { ProcessController } from './server/process.js';
-import { Config } from './server/conf.js';
+import { loggerFactory } from './server/ops/logger.js';
+import { buildProxy } from './server/network/proxy.js';
+import { ProcessController } from './server/runtime/process.js';
+import { Config } from './server/runtime/conf.js';
 
 await Config.build(process.argv[2], process.argv[3], process.argv[4]);
 

package/src/runtime/cyberia-client/Dockerfile

@@ -14,7 +14,6 @@ RUN make -f Web.mk clean all BUILD_MODE=${BUILD_MODE} OUTPUT_DIR=bin/
 
 # --- Runtime Image ---
 FROM rockylinux/rockylinux:9 AS runtime
-ARG UNDERPOST_VERSION=3.2.90
 ARG NODE_VERSION=24.15.0
 
 RUN set -eux; \
@@ -28,9 +27,15 @@ RUN set -eux; \
     curl -fsSL "https://nodejs.org/dist/v${NODE_VERSION}/node-v${NODE_VERSION}-linux-${node_arch}.tar.xz" \
       | tar -xJ -C /usr/local --strip-components=1; \
     node --version; npm --version; \
-    npm install -g underpost@${UNDERPOST_VERSION}; \
-    dnf clean all; rm -rf /var/cache/dnf; \
-    npm cache clean --force
+    dnf clean all; rm -rf /var/cache/dnf
+
+
+COPY underpost-cli.tgz /tmp/underpost-cli.tgz
+RUN set -eux; \
+    npm install -g /tmp/underpost-cli.tgz --omit=dev; \
+    rm -f /tmp/underpost-cli.tgz; \
+    npm cache clean --force; \
+    underpost --version
 
 # Path + server layout is the contract with conf.instances.json mmo-client cmd,
 # which execs `python3 /home/dd/engine/cyberia-client/docker-driver.py <port>

package/src/runtime/cyberia-client/Dockerfile.dev

@@ -43,7 +43,6 @@ RUN make -f Web.mk all BUILD_MODE=${BUILD_MODE} OUTPUT_DIR=bin/
 # --- Runtime Image ---
 FROM rockylinux/rockylinux:9 AS runtime
 
-ARG UNDERPOST_VERSION=3.2.90
 ARG NODE_VERSION=24.15.0
 RUN set -eux; \
     dnf -y update; \
@@ -60,9 +59,16 @@ RUN set -eux; \
     curl -fsSL "https://nodejs.org/dist/v${NODE_VERSION}/node-v${NODE_VERSION}-linux-${node_arch}.tar.xz" \
       | tar -xJ -C /usr/local --strip-components=1; \
     node --version; npm --version; \
-    npm install -g underpost@${UNDERPOST_VERSION}; \
     dnf clean all
 
+
+COPY underpost-cli.tgz /tmp/underpost-cli.tgz
+RUN set -eux; \
+    npm install -g /tmp/underpost-cli.tgz --omit=dev; \
+    rm -f /tmp/underpost-cli.tgz; \
+    npm cache clean --force; \
+    underpost --version
+
 WORKDIR /home/dd/engine/cyberia-client
 
 COPY --from=builder /cyberia-client/docker-driver.py ./docker-driver.py

package/src/runtime/cyberia-server/Dockerfile

@@ -11,7 +11,6 @@ RUN CGO_ENABLED=0 go build -trimpath -ldflags="-s -w" -o server ./cmd/cyberia-se
 
 # --- Runtime Image ---
 FROM rockylinux/rockylinux:9 AS runtime
-ARG UNDERPOST_VERSION=3.2.90
 ARG NODE_VERSION=24.15.0
 
 RUN set -eux; \
@@ -25,9 +24,15 @@ RUN set -eux; \
     curl -fsSL "https://nodejs.org/dist/v${NODE_VERSION}/node-v${NODE_VERSION}-linux-${node_arch}.tar.xz" \
       | tar -xJ -C /usr/local --strip-components=1; \
     node --version; npm --version; \
-    npm install -g underpost@${UNDERPOST_VERSION}; \
-    dnf clean all; rm -rf /var/cache/dnf; \
-    npm cache clean --force
+    dnf clean all; rm -rf /var/cache/dnf
+
+
+COPY underpost-cli.tgz /tmp/underpost-cli.tgz
+RUN set -eux; \
+    npm install -g /tmp/underpost-cli.tgz --omit=dev; \
+    rm -f /tmp/underpost-cli.tgz; \
+    npm cache clean --force; \
+    underpost --version
 
 # Path is the contract with conf.instances.json mmo-server cmd, which execs
 # /home/dd/engine/cyberia-server/server in both development and production.

package/src/runtime/cyberia-server/Dockerfile.dev

@@ -25,7 +25,6 @@ RUN CGO_ENABLED=0 GOOS=linux GOARCH=amd64 \
 # --- Runtime Image ---
 FROM rockylinux/rockylinux:9 AS runtime
 
-ARG UNDERPOST_VERSION=3.2.90
 ARG NODE_VERSION=24.15.0
 RUN set -eux; \
     dnf -y update; \
@@ -42,9 +41,16 @@ RUN set -eux; \
     curl -fsSL "https://nodejs.org/dist/v${NODE_VERSION}/node-v${NODE_VERSION}-linux-${node_arch}.tar.xz" \
       | tar -xJ -C /usr/local --strip-components=1; \
     node --version; npm --version; \
-    npm install -g underpost@${UNDERPOST_VERSION}; \
     dnf clean all
 
+
+COPY underpost-cli.tgz /tmp/underpost-cli.tgz
+RUN set -eux; \
+    npm install -g /tmp/underpost-cli.tgz --omit=dev; \
+    rm -f /tmp/underpost-cli.tgz; \
+    npm cache clean --force; \
+    underpost --version
+
 WORKDIR /home/dd/engine/cyberia-server
 
 COPY --from=builder /build/server ./server

package/src/runtime/engine-cyberia/Dockerfile

@@ -6,7 +6,7 @@
 # Stage 1 — builder: clone the private deploy, build it, then scrub secrets.
 # ---------------------------------------------------------------------------
 FROM rockylinux/rockylinux:9 AS builder
-ARG UNDERPOST_VERSION=3.2.90
+ARG UNDERPOST_VERSION=3.3.73
 # Pin Node to an exact patch: dnf's nodejs:24 module lags (24.14.1) while
 # underpost's dependencies require >=24.15.0, so install the official binary.
 ARG NODE_VERSION=24.15.0
@@ -14,7 +14,7 @@ ENV NODE_ENV=production
 
 RUN set -eux; \
     # `sudo` is required because underpost's build steps shell out to
-    # `sudo cp`/`sudo rm` (src/server/start.js); the build runs as root so sudo
+    # `sudo cp`/`sudo rm` (src/server/runtime/start.js); the build runs as root so sudo
     # is just a passthrough, but the binary must exist.
     dnf install -y git openssl tar xz sudo; \
     arch="$(uname -m)"; \
@@ -26,10 +26,22 @@ RUN set -eux; \
     curl -fsSL "https://nodejs.org/dist/v${NODE_VERSION}/node-v${NODE_VERSION}-linux-${node_arch}.tar.xz" \
       | tar -xJ -C /usr/local --strip-components=1; \
     node --version; npm --version; \
-    npm install -g underpost@${UNDERPOST_VERSION}; \
     dnf clean all; rm -rf /var/cache/dnf; \
     npm cache clean --force
 
+
+# The builder's own `underpost clone` calls below run on this same CLI, and the runtime stage
+# inherits it through `COPY --from=builder /usr/local/`.
+COPY underpost-cli.tgz /tmp/underpost-cli.tgz
+RUN set -eux; \
+    npm install -g /tmp/underpost-cli.tgz --omit=dev; \
+    rm -f /tmp/underpost-cli.tgz; \
+    npm cache clean --force; \
+    underpost --version; \
+    # The staged package must be the pinned release: a drift here would ship a CLI the
+    # deployment manifests were not built against.
+    underpost --version | grep -Fq "${UNDERPOST_VERSION}"
+
 WORKDIR /home/dd
 
 # Comma-separated instance codes to provision (backup dir + optional saga).
@@ -38,7 +50,7 @@ WORKDIR /home/dd
 # `--build-arg INSTANCE_CODES=...`. Declared as an ARG (not a marker-wrapped
 # shell string) so the value is clean — a `/** … */` literal in the shell would
 # glob-expand in the `for` loop below.
-ARG INSTANCE_CODES="amethyst-strata-expansion,FOREST"
+ARG INSTANCE_CODES="amethyst-strata-expansion,FOREST,TEST"
 
 RUN --mount=type=secret,id=github_username \
     # --mount=type=secret,id=github_token \
@@ -83,7 +95,7 @@ RUN --mount=type=secret,id=github_username \
     cd /home/dd/engine; \
     # --- install deps + env, then replay build-safe itc provisioning ----------
     npm install; \
-    node bin env dd-cyberia production; \
+    node bin app load --env production --args deploy-id=dd-cyberia; \
     ( cd /home/dd/engine/hardhat && npm install --include=dev ); \
     # --- build the client bundle (assets are now in place) --------------------
     cd /home/dd/engine; \
@@ -136,11 +148,15 @@ COPY --from=builder /usr/local/ /usr/local/
 RUN dnf install -y libstdc++ git sudo && dnf clean all && rm -rf /var/cache/dnf && \
     useradd --create-home --home-dir /home/dd --shell /usr/sbin/nologin dd && \
     # The runtime runs as `dd`, but `underpost start --build` shells out to `sudo cp`/`sudo rm`
-    # (src/server/start.js). Grant passwordless sudo so those succeed without a TTY/password.
+    # (src/server/runtime/start.js). Grant passwordless sudo so those succeed without a TTY/password.
     printf 'dd ALL=(ALL) NOPASSWD:ALL\n' > /etc/sudoers.d/dd && chmod 0440 /etc/sudoers.d/dd && \
-    # underpost persists its global env at $(npm root -g)/underpost/.env; the
-    # non-root runtime user must be able to write it (fixes EACCES on start).
-    chown -R dd:dd /usr/local/lib/node_modules/underpost
+    # underpost persists its global env and container state under
+    # `$(npm root -g)/underpost` (getUnderpostRootPath). That path is a STORE directory, not
+    # the CLI package tree: the staged package installs under its own package name, and
+    # `underpost start --build` re-links the bin at the pulled checkout without moving the
+    # store (src/server/runtime/start.js#linkRuntimeCli). Create it here — the non-root
+    # runtime user cannot mkdir inside /usr/local itself (EACCES on the first state write).
+    mkdir -p "$(npm root -g)/underpost" && chown -R dd:dd "$(npm root -g)/underpost"
 
 # Copy ONLY the scrubbed runtime tree — no .git, no token, no caches.
 COPY --from=builder --chown=dd:dd /home/dd/engine /home/dd/engine

package/src/runtime/engine-cyberia/Dockerfile.dev

@@ -6,7 +6,7 @@
 # Stage 1 — builder: clone the private deploy, build it, then scrub secrets.
 # ---------------------------------------------------------------------------
 FROM rockylinux/rockylinux:9 AS builder
-ARG UNDERPOST_VERSION=3.2.90
+ARG UNDERPOST_VERSION=3.3.73
 # Pin Node to an exact patch: dnf's nodejs:24 module lags (24.14.1) while
 # underpost's dependencies require >=24.15.0, so install the official binary.
 ARG NODE_VERSION=24.15.0
@@ -14,7 +14,7 @@ ENV NODE_ENV=development
 
 RUN set -eux; \
     # `sudo` is required because underpost's build steps shell out to
-    # `sudo cp`/`sudo rm` (src/server/start.js); the build runs as root so sudo
+    # `sudo cp`/`sudo rm` (src/server/runtime/start.js); the build runs as root so sudo
     # is just a passthrough, but the binary must exist.
     dnf install -y git openssl tar xz sudo; \
     arch="$(uname -m)"; \
@@ -26,10 +26,22 @@ RUN set -eux; \
     curl -fsSL "https://nodejs.org/dist/v${NODE_VERSION}/node-v${NODE_VERSION}-linux-${node_arch}.tar.xz" \
       | tar -xJ -C /usr/local --strip-components=1; \
     node --version; npm --version; \
-    npm install -g underpost@${UNDERPOST_VERSION}; \
     dnf clean all; rm -rf /var/cache/dnf; \
     npm cache clean --force
 
+
+# The builder's own `underpost clone` calls below run on this same CLI, and the runtime stage
+# inherits it through `COPY --from=builder /usr/local/`.
+COPY underpost-cli.tgz /tmp/underpost-cli.tgz
+RUN set -eux; \
+    npm install -g /tmp/underpost-cli.tgz --omit=dev; \
+    rm -f /tmp/underpost-cli.tgz; \
+    npm cache clean --force; \
+    underpost --version; \
+    # The staged package must be the pinned release: a drift here would ship a CLI the
+    # deployment manifests were not built against.
+    underpost --version | grep -Fq "${UNDERPOST_VERSION}"
+
 WORKDIR /home/dd
 
 # Comma-separated instance codes to provision (backup dir + optional saga).
@@ -38,7 +50,7 @@ WORKDIR /home/dd
 # `--build-arg INSTANCE_CODES=...`. Declared as an ARG (not a marker-wrapped
 # shell string) so the value is clean — a `/** … */` literal in the shell would
 # glob-expand in the `for` loop below.
-ARG INSTANCE_CODES="amethyst-strata-expansion,FOREST"
+ARG INSTANCE_CODES="amethyst-strata-expansion,FOREST,TEST"
 
 RUN --mount=type=secret,id=github_username \
     # --mount=type=secret,id=github_token \
@@ -83,7 +95,7 @@ RUN --mount=type=secret,id=github_username \
     cd /home/dd/engine; \
     # --- install deps + env, then replay build-safe itc provisioning ----------
     npm install; \
-    node bin env dd-cyberia development; \
+    node bin app load --env development --args deploy-id=dd-cyberia; \
     ( cd /home/dd/engine/hardhat && npm install --include=dev ); \
     # --- build the client bundle (assets are now in place) --------------------
     cd /home/dd/engine; \
@@ -136,11 +148,15 @@ COPY --from=builder /usr/local/ /usr/local/
 RUN dnf install -y libstdc++ git sudo && dnf clean all && rm -rf /var/cache/dnf && \
     useradd --create-home --home-dir /home/dd --shell /usr/sbin/nologin dd && \
     # The runtime runs as `dd`, but `underpost start --build` shells out to `sudo cp`/`sudo rm`
-    # (src/server/start.js). Grant passwordless sudo so those succeed without a TTY/password.
+    # (src/server/runtime/start.js). Grant passwordless sudo so those succeed without a TTY/password.
     printf 'dd ALL=(ALL) NOPASSWD:ALL\n' > /etc/sudoers.d/dd && chmod 0440 /etc/sudoers.d/dd && \
-    # underpost persists its global env at $(npm root -g)/underpost/.env; the
-    # non-root runtime user must be able to write it (fixes EACCES on start).
-    chown -R dd:dd /usr/local/lib/node_modules/underpost
+    # underpost persists its global env and container state under
+    # `$(npm root -g)/underpost` (getUnderpostRootPath). That path is a STORE directory, not
+    # the CLI package tree: the staged package installs under its own package name, and
+    # `underpost start --build` re-links the bin at the pulled checkout without moving the
+    # store (src/server/runtime/start.js#linkRuntimeCli). Create it here — the non-root
+    # runtime user cannot mkdir inside /usr/local itself (EACCES on the first state write).
+    mkdir -p "$(npm root -g)/underpost" && chown -R dd:dd "$(npm root -g)/underpost"
 
 # Copy ONLY the scrubbed runtime tree — no .git, no token, no caches.
 COPY --from=builder --chown=dd:dd /home/dd/engine /home/dd/engine

package/src/runtime/engine-cyberia/Dockerfile.test

@@ -6,7 +6,7 @@
 # Stage 1 — builder: clone the private deploy, build it, then scrub secrets.
 # ---------------------------------------------------------------------------
 FROM rockylinux/rockylinux:9 AS builder
-ARG UNDERPOST_VERSION=3.2.90
+ARG UNDERPOST_VERSION=3.3.73
 # Pin Node to an exact patch: dnf's nodejs:24 module lags (24.14.1) while
 # underpost's dependencies require >=24.15.0, so install the official binary.
 ARG NODE_VERSION=24.15.0
@@ -14,7 +14,7 @@ ENV NODE_ENV=development
 
 RUN set -eux; \
     # `sudo` is required because underpost's build steps shell out to
-    # `sudo cp`/`sudo rm` (src/server/start.js); the build runs as root so sudo
+    # `sudo cp`/`sudo rm` (src/server/runtime/start.js); the build runs as root so sudo
     # is just a passthrough, but the binary must exist.
     dnf install -y git openssl tar xz sudo; \
     arch="$(uname -m)"; \
@@ -71,7 +71,7 @@ RUN --mount=type=secret,id=github_token \
     \
     # --- install deps + env, then replay build-safe itc provisioning ----------
     npm install; \
-    node bin env dd-cyberia development; \
+    node bin app load --env development --args deploy-id=dd-cyberia; \
     node bin fs --pull --recursive --deploy-id dd-cyberia --storage-file-path './engine-private/conf/dd-cyberia/storage.engine-cyberia.json'; \
     ( cd /home/dd/engine/hardhat && npm install --include=dev ); \
     ( cd /home/dd/engine && underpost clone underpostnet/cyberia-server ); \
@@ -140,7 +140,7 @@ COPY --from=builder /usr/local/ /usr/local/
 RUN dnf install -y libstdc++ git sudo && dnf clean all && rm -rf /var/cache/dnf && \
     useradd --create-home --home-dir /home/dd --shell /usr/sbin/nologin dd && \
     # The runtime runs as `dd`, but `underpost start --build` shells out to `sudo cp`/`sudo rm`
-    # (src/server/start.js). Grant passwordless sudo so those succeed without a TTY/password.
+    # (src/server/runtime/start.js). Grant passwordless sudo so those succeed without a TTY/password.
     printf 'dd ALL=(ALL) NOPASSWD:ALL\n' > /etc/sudoers.d/dd && chmod 0440 /etc/sudoers.d/dd && \
     # underpost persists its global env at $(npm root -g)/underpost/.env; the
     # non-root runtime user must be able to write it (fixes EACCES on start).

package/src/runtime/engine-cyberia/compose.env

@@ -70,6 +70,22 @@ CYBERIA_DEFAULT_INSTANCE=amethyst-strata-expansion
 CYBERIA_SERVER_APP_ENV=development
 CYBERIA_SERVER_LOG_LEVEL=
 
+# --- cyberia-server WebSocket admission and rate limits ----------------------
+# Unset keeps the built-in default. An explicit 0 turns that one limit off.
+# The startup log prints the effective profile ("ws limits: ...").
+#
+# Set CYBERIA_DISABLE_CONNECTION_LIMITS=1 to turn every limit off. The load test
+# (test/cyberia-load.test.js) drives every simulated client from one address, so
+# it needs this. NEVER enable it on a public deploy.
+CYBERIA_DISABLE_CONNECTION_LIMITS=
+CYBERIA_MAX_CONNECTIONS=
+CYBERIA_MAX_CONNECTIONS_PER_IP=
+CYBERIA_CONNECT_RATE_PER_IP=
+CYBERIA_CONNECT_BURST_PER_IP=
+CYBERIA_MESSAGE_RATE=
+CYBERIA_MESSAGE_BURST=
+CYBERIA_MAX_STRIKES=
+
 # --- engine-cyberia runtime env (loaded into the container via env_file) -----
 # The dd-cyberia engine (engine-private/conf/dd-cyberia/conf.server.json) needs
 # these to boot: DB auth + per-site DB names, the base PORT (the cyberia host is