@underpostnet/cyberia 3.3.73 → 3.3.77

package/manifests/deployment/mongo-express/deployment.yaml

@@ -4,6 +4,7 @@ metadata:
   name: mongo-express
   labels:
     app: mongo-express
+    group: db
 spec:
   replicas: 1
   selector:
@@ -13,25 +14,27 @@ spec:
     metadata:
       labels:
         app: mongo-express
+        group: db
     spec:
       containers:
         - name: mongo-express
-          image: mongo-express
+          image: mongo-express:1.0.2
           ports:
             - containerPort: 8081
           env:
-            # - name: ME_CONFIG_MONGODB_ADMINUSERNAME
-            #   valueFrom:
-            #     secretKeyRef:
-            #       name: mongodb-secret
-            #       key: username
-            # - name: ME_CONFIG_MONGODB_ADMINPASSWORD
-            #   valueFrom:
-            #     secretKeyRef:
-            #       name: mongodb-secret
-            #       key: password
-            - name: ME_CONFIG_SITE_BASEURL
-              value: '/mongo/'
+            # Both credential pairs come from the one `mongodb-secret` the StatefulSet already
+            # consumes: the UI authenticates to mongod with the root credentials, and gates its
+            # own session behind the same pair rather than the image's admin/pass defaults.
+            - name: ME_CONFIG_MONGODB_ADMINUSERNAME
+              valueFrom:
+                secretKeyRef:
+                  name: mongodb-secret
+                  key: username
+            - name: ME_CONFIG_MONGODB_ADMINPASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: mongodb-secret
+                  key: password
             - name: ME_CONFIG_BASICAUTH_USERNAME
               valueFrom:
                 secretKeyRef:
@@ -42,21 +45,37 @@ spec:
                 secretKeyRef:
                   name: mongodb-secret
                   key: password
+            - name: ME_CONFIG_SITE_BASEURL
+              value: '/mongo/'
+            # In-cluster identity of the first replica, identical under Kind, Kubeadm and K3s.
+            # The driver reads the replica set config from it and reaches the remaining members
+            # through the same headless service.
             - name: ME_CONFIG_MONGODB_SERVER
               value: 'mongodb-0.mongodb-service'
-            # - name: ME_CONFIG_MONGODB_ENABLE_ADMIN
-            #   value: 'true'
             - name: ME_CONFIG_MONGODB_PORT
               value: '27017'
----
-apiVersion: v1
-kind: Service
-metadata:
-  name: mongo-express-service
-spec:
-  selector:
-    app: mongo-express
-  ports:
-    - protocol: TCP
-      port: 8081
-      targetPort: 8081
+            - name: ME_CONFIG_MONGODB_AUTH_DATABASE
+              value: 'admin'
+            # Without this the UI only lists the databases named in its config; the point of the
+            # deployment is browsing whatever collections the StatefulSet actually holds.
+            - name: ME_CONFIG_MONGODB_ENABLE_ADMIN
+              value: 'true'
+          readinessProbe:
+            tcpSocket:
+              port: 8081
+            initialDelaySeconds: 10
+            periodSeconds: 10
+            timeoutSeconds: 5
+          livenessProbe:
+            tcpSocket:
+              port: 8081
+            initialDelaySeconds: 30
+            periodSeconds: 20
+            timeoutSeconds: 5
+          resources:
+            requests:
+              cpu: '50m'
+              memory: '128Mi'
+            limits:
+              cpu: '500m'
+              memory: '256Mi'

package/manifests/deployment/mongo-express/kustomization.yaml

@@ -0,0 +1,9 @@
+---
+# kubectl apply -k manifests/deployment/mongo-express/.
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  # mongo-express-nodeport.yaml is intentionally absent: host/public exposure of an admin UI is
+  # opt-in, applied by `cluster --mongo-express --node-port` once the pod reports Ready.
+  - deployment.yaml
+  - service.yaml

package/manifests/deployment/mongo-express/mongo-express-nodeport.yaml

@@ -0,0 +1,18 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: mongo-express-nodeport
+  labels:
+    app: mongo-express
+    group: db
+spec:
+  type: NodePort
+  externalTrafficPolicy: Cluster
+  selector:
+    app: mongo-express
+  ports:
+    - name: mongo-express
+      protocol: TCP
+      port: 8081
+      targetPort: 8081
+      nodePort: 32081

package/manifests/deployment/mongo-express/service.yaml

@@ -0,0 +1,16 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: mongo-express-service
+  labels:
+    app: mongo-express
+    group: db
+spec:
+  type: ClusterIP
+  selector:
+    app: mongo-express
+  ports:
+    - name: mongo-express
+      protocol: TCP
+      port: 8081
+      targetPort: 8081

package/manifests/deployment/mongo-express-no-auth/disable-mongodb-auth.yaml

@@ -0,0 +1,16 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: mongo-express
+spec:
+  template:
+    spec:
+      containers:
+        - name: mongo-express
+          env:
+            - name: ME_CONFIG_MONGODB_ADMINUSERNAME
+              $patch: delete
+            - name: ME_CONFIG_MONGODB_ADMINPASSWORD
+              $patch: delete
+            - name: ME_CONFIG_MONGODB_AUTH_DATABASE
+              $patch: delete

package/manifests/deployment/mongo-express-no-auth/kustomization.yaml

@@ -0,0 +1,16 @@
+---
+# kubectl apply -k manifests/deployment/mongo-express-no-auth/.
+# Overlay of manifests/deployment/mongo-express for a mongod started without --auth
+# (manifests/mongodb-4.4). Credentials sent to a server that enforces none are not ignored: the
+# driver still runs SCRAM and the handshake fails, so the admin pair is dropped rather than left
+# resolving against a secret the server never checks. `cluster --mongo-express` selects between
+# this overlay and the base from the deployed StatefulSet's own mongod arguments.
+#
+# A sibling of the base rather than a child of it: kustomize rejects an overlay nested inside the
+# root it extends as a cycle.
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - ../mongo-express
+patches:
+  - path: disable-mongodb-auth.yaml

package/package.json

@@ -2,7 +2,7 @@
     "type": "module",
     "main": "src/index.js",
     "name": "@underpostnet/cyberia",
-    "version": "3.3.73",
+    "version": "3.3.77",
     "description": "Cyberia CLI — toolchain for the Cyberia MMO data layer, content pipeline, persistence, gRPC services, and ERC-1155 lifecycle on Hyperledger Besu.",
     "scripts": {
         "start": "node --max-old-space-size=8192 src/server",
@@ -72,12 +72,11 @@
     },
     "homepage": "https://github.com/underpostnet/engine-cyberia#readme",
     "dependencies": {
-        "underpost": "^3.3.73",
-        "adm-zip": "^0.6.0",
+        "underpost": "^3.3.77",
         "maxrects-packer": "^2.7.3",
         "pngjs": "^7.0.0",
         "jimp": "^1.6.0",
-        "sharp": "^0.35.3",
+        "sharp": "^0.35.4",
         "ethers": "~6.16.0"
     },
     "publishConfig": {
@@ -96,19 +95,21 @@
         "router": {
             "path-to-regexp": ">=8.4.0"
         },
-        "ws": "^8.20.2"
+        "ws": "^8.20.2",
+        "qs": ">=6.16.0",
+        "sharp": "^0.35.4"
     },
     "devDependencies": {
         "@fortawesome/fontawesome-free": "^7.3.1",
-        "@fullcalendar/rrule": "^7.0.2",
+        "@fullcalendar/rrule": "^7.1.0",
         "@grpc/grpc-js": "^1.14.4",
         "@grpc/proto-loader": "^0.8.1",
         "@neodrag/vanilla": "^2.3.1",
-        "@vitest/coverage-v8": "4.1.11",
+        "@vitest/coverage-v8": "5.0.0",
         "ag-grid-community": "^36.1.0",
-        "allure-vitest": "3.11.0",
+        "allure-vitest": "3.12.0",
         "axios": "^1.20.0",
-        "bumpp": "^12.2.2",
+        "bumpp": "^12.3.0",
         "chai": "^6.2.2",
         "clipboardy": "^5.3.2",
         "cloudinary": "^2.11.0",
@@ -125,25 +126,26 @@
         "escape-string-regexp": "^5.0.0",
         "express": "^5.2.1",
         "express-fileupload": "^1.4.3",
-        "express-rate-limit": "^8.6.2",
+        "express-rate-limit": "^8.7.0",
         "express-slow-down": "^3.1.1",
         "fast-json-stable-stringify": "^2.1.0",
         "favicons": "^7.3.1",
         "fs-extra": "^11.4.0",
-        "fullcalendar": "^7.0.2",
+        "fullcalendar": "^7.1.0",
         "helmet": "^8.3.0",
         "html-minifier-terser": "^7.2.0",
         "http-proxy-middleware": "^4.2.0",
         "ignore-walk": "^9.0.0",
         "iovalkey": "^0.4.0",
-        "json-colorizer": "^3.0.1",
         "js-yaml": "^5.4.1",
+        "json-colorizer": "^3.0.1",
         "jsonwebtoken": "^9.0.3",
-        "mariadb": "^3.5.3",
-        "mongoose": "^9.9.4",
-        "morgan": "^1.12.0",
+        "jszip": "^3.10.2",
+        "mariadb": "^3.5.4",
         "marked": "^18.0.11",
-        "nodemailer": "^9.0.6",
+        "mongoose": "^9.9.5",
+        "morgan": "^1.12.0",
+        "nodemailer": "^10.0.0",
         "nodemon": "^3.0.1",
         "peer": "^1.0.2",
         "peerjs": "^1.5.5",
@@ -161,7 +163,7 @@
         "typescript": "6.0.3",
         "validator": "^13.15.35",
         "vanilla-jsoneditor": "^3.13.0",
-        "vitest": "4.1.11",
+        "vitest": "5.0.0",
         "winston": "^3.19.0",
         "workbox-background-sync": "^7.4.1",
         "workbox-cacheable-response": "^7.4.1",

package/scripts/test-monitor.sh

@@ -24,12 +24,12 @@ MODE=runtime                                  # runtime | instance
 ENV=development                               # development | production
 DEPLOY_ID=dd-test                             # deploy id (instance mode: parent of conf.instances.json)
 INSTANCE_IDS=                                 # instance mode: csv of ids (default: all in conf.instances.json)
-IMAGE=underpost/wp:v3.3.73                    # runtime mode image (instance mode reads image from conf)
+IMAGE=underpost/wp:v3.3.77                    # runtime mode image (instance mode reads image from conf)
 VERSIONS=green                                # csv of blue/green versions
 REPLICAS=1                                    # replicas per deployment
 NAMESPACE=default                             # k8s namespace
 CLUSTER=kind                                  # kind | kubeadm | k3s | "" (auto/none)
-TIMEOUT_RESPONSE=300000ms                     # HTTPProxy per-route response timeout
+TIMEOUT_RESPONSE=10000ms                     # HTTPProxy per-route response timeout
 TEMPLATE_REPO=underpostnet/pwa-microservices-template-private  # runtime mode link repo
 ENVOY_NAMESPACE=projectcontour                # ingress namespace (instance TLS exposure)
 ENVOY_SERVICE=envoy                           # ingress service (instance TLS exposure)
@@ -59,7 +59,7 @@ Common (every default is overridable):
   --replicas <n>
   --namespace <ns>
   --cluster <kind|kubeadm|k3s|none>
-  --timeout-response <dur>      e.g. 300000ms
+  --timeout-response <dur>      e.g. 10000ms
   --template-repo <owner/repo>  runtime mode link repo
   --envoy-namespace <ns>        instance TLS exposure ingress namespace
   --envoy-service <name>        instance TLS exposure ingress service

package/src/api/atlas-sprite-sheet/atlas-sprite-sheet.controller.js

@@ -7,6 +7,18 @@ import {
 } from '../../server/network/middlewares.js';
 import { AtlasSpriteSheetService } from './atlas-sprite-sheet.service.js';
 
+/* Streams one render as a file. Headers go on before the lookup, so a cross-origin
+ * client can read a 404 too. */
+const blobHandler = (lookup) =>
+  controllerHandler(
+    async (req, res, options) => {
+      setCrossOriginHeaders(req, res);
+      const { buffer, mimetype, name } = await lookup(req, res, options);
+      return sendBlob(req, res, { buffer, mimetype, filename: name });
+    },
+    { errorStatus: 404 },
+  );
+
 const AtlasSpriteSheetController = buildCrudController(AtlasSpriteSheetService, {
   get: serviceHandler(AtlasSpriteSheetService.get, { crossOrigin: true, pagination: true }),
   getMetadata: serviceHandler(AtlasSpriteSheetService.getMetadata, {
@@ -16,15 +28,8 @@ const AtlasSpriteSheetController = buildCrudController(AtlasSpriteSheetService,
   }),
   generate: serviceHandler(AtlasSpriteSheetService.generate, { errorStatus: 500 }),
   deleteByObjectLayerId: serviceHandler(AtlasSpriteSheetService.deleteByObjectLayerId, { errorStatus: 500 }),
-  blob: controllerHandler(
-    async (req, res, options) => {
-      // Set before the service call so cross-origin clients can read 404s too.
-      setCrossOriginHeaders(req, res);
-      const { buffer, mimetype, name } = await AtlasSpriteSheetService.blob(req, res, options);
-      return sendBlob(req, res, { buffer, mimetype, filename: name });
-    },
-    { errorStatus: 404 },
-  ),
+  blob: blobHandler(AtlasSpriteSheetService.blob),
+  idlePreview: blobHandler(AtlasSpriteSheetService.idlePreview),
 });
 
 export { AtlasSpriteSheetController };

package/src/api/atlas-sprite-sheet/atlas-sprite-sheet.model.js

@@ -69,14 +69,27 @@ const DirectionFramesSchema = new Schema(
   { _id: false },
 );
 /**
+ * One atlas per item key, kept in two renders of one layout, plus the still that
+ * stands in for the item wherever a single picture is wanted.
+ *
+ * `fileId` is the human-resolution PNG, at `metadata.upscaleFactor` pixels per
+ * cell. `minifyFileId` is the PNG the client runtime downloads through
+ * `GET /atlas-sprite-sheet/blob/:itemKey`, at `metadata.cellPixelDim` pixels per
+ * cell. `metadata` describes the minified render, so blob and metadata agree.
+ * `idlePreviewFileId` is the first down-idle frame cut out of `fileId`, served by
+ * `GET /atlas-sprite-sheet/idle-preview/:itemKey` to every editor and overlay.
+ *
  * @typedef {Object} AtlasSpriteSheet
- * @property {Types.ObjectId} fileId - Reference to File document (consolidated PNG)
+ * @property {Types.ObjectId} fileId - Reference to the human-resolution PNG File document
+ * @property {Types.ObjectId} [minifyFileId] - Reference to the minified PNG File document
+ * @property {Types.ObjectId} [idlePreviewFileId] - Reference to the down-idle still File document
  * @property {string} [cid] - IPFS Content Identifier for the atlas PNG
  * @property {Object} metadata - Atlas sprite sheet metadata
  * @property {string} metadata.itemKey - Item identifier key for texture reference
- * @property {number} metadata.atlasWidth - Total atlas width in pixels
- * @property {number} metadata.atlasHeight - Total atlas height in pixels
- * @property {number} metadata.cellPixelDim - Pixel dimension of each cell
+ * @property {number} metadata.atlasWidth - Minified atlas width in pixels
+ * @property {number} metadata.atlasHeight - Minified atlas height in pixels
+ * @property {number} metadata.cellPixelDim - Pixels per cell of the minified render
+ * @property {number} metadata.upscaleFactor - Pixels per cell of the human-resolution render
  * @property {number} metadata.frame_duration - Duration of each frame in milliseconds
  * @property {DirectionFrames} metadata.frames - Frame positions in atlas by direction
  * @property {Date} createdAt - When the document was created
@@ -90,6 +103,18 @@ const AtlasSpriteSheetSchema = new Schema(
       ref: 'File',
       required: true,
     },
+    // Absent until `cyberia ol --minify` renders it for this item.
+    minifyFileId: {
+      type: Schema.Types.ObjectId,
+      ref: 'File',
+      default: null,
+    },
+    // The down-idle still every preview reads; absent until an atlas write fills it.
+    idlePreviewFileId: {
+      type: Schema.Types.ObjectId,
+      ref: 'File',
+      default: null,
+    },
     cid: {
       type: String,
       default: '',
@@ -99,7 +124,8 @@ const AtlasSpriteSheetSchema = new Schema(
       itemKey: { type: String, required: true, trim: true },
       atlasWidth: { type: Number, required: true, min: 1 },
       atlasHeight: { type: Number, required: true, min: 1 },
-      cellPixelDim: { type: Number, required: true, min: 1, default: 20 },
+      cellPixelDim: { type: Number, required: true, min: 1 },
+      upscaleFactor: { type: Number, required: false, min: 1 },
       frame_duration: { type: Number, min: 0, default: 100 },
       frames: { type: DirectionFramesSchema, required: true },
     },
@@ -113,6 +139,8 @@ const AtlasSpriteSheetSchema = new Schema(
 // Indexes for efficient querying
 AtlasSpriteSheetSchema.index({ 'metadata.itemKey': 1 }, { unique: true });
 AtlasSpriteSheetSchema.index({ fileId: 1 });
+AtlasSpriteSheetSchema.index({ minifyFileId: 1 });
+AtlasSpriteSheetSchema.index({ idlePreviewFileId: 1 });
 // Pre-save validation
 AtlasSpriteSheetSchema.pre('save', function () {
   if (!this.fileId || !this.metadata) {
@@ -127,6 +155,8 @@ class AtlasSpriteSheetDto {
       return {
         _id: 1,
         fileId: 1,
+        minifyFileId: 1,
+        idlePreviewFileId: 1,
         cid: 1,
         metadata: 1,
         createdAt: 1,
@@ -144,6 +174,7 @@ class AtlasSpriteSheetDto {
         'metadata.atlasWidth': 1,
         'metadata.atlasHeight': 1,
         'metadata.cellPixelDim': 1,
+        'metadata.upscaleFactor': 1,
         'metadata.frame_duration': 1,
         'metadata.frames': 1,
         createdAt: 1,

package/src/api/atlas-sprite-sheet/atlas-sprite-sheet.router.js

@@ -23,6 +23,11 @@ class AtlasSpriteSheetRouter {
       async (req, res) => await AtlasSpriteSheetController.deleteByObjectLayerId(req, res, options),
     );
     router.get(`/blob/:itemKey`, async (req, res) => await AtlasSpriteSheetController.blob(req, res, options));
+    // The down-idle still of an item, for every editor and overlay that shows one picture of it.
+    router.get(
+      `/idle-preview/:itemKey`,
+      async (req, res) => await AtlasSpriteSheetController.idlePreview(req, res, options),
+    );
     // Metadata endpoints: returns itemKey, atlasWidth, atlasHeight, cellPixelDim, frames (no fileId).
     // Client fetches /metadata/:itemKey once, caches it, then fetches /blob/:itemKey for the PNG.
     router.get(