@underpostnet/cyberia 3.3.76 → 3.4.0

package/CHANGELOG.md

@@ -1,14 +1,121 @@
 # Changelog
 
-## 2026-09-13
+## 2026-09-15
+
+### github-actions
+
+- Remove Git LFS from GitLab mirror push pipeline ([8be008098](https://github.com/underpostnet/engine/commit/8be008098439082de109e4b702d3c9b8b786064d))
+- Drop the template Pages auto-enablement and owner build override ([c6e9dfd08](https://github.com/underpostnet/engine/commit/c6e9dfd08648d09ff2b21594467538339d2486f1))
+- Publish the template Pages under the triggering owner ([bbdbce2e4](https://github.com/underpostnet/engine/commit/bbdbce2e460e8f7b4a345b9580172dc65225fb9a))
+- Scope the template package publish to the underpostnet owner ([7bea0bdee](https://github.com/underpostnet/engine/commit/7bea0bdee5479d48dbae55edd251c41bd2e0f195))
+- Add new owner repository scope based on organization ([7d9fdde93](https://github.com/underpostnet/engine/commit/7d9fdde9345b6dc6681e7b27be3f536246bc03c9))
+- Dispatch the org mirror per pushed repository ([cdc80e951](https://github.com/underpostnet/engine/commit/cdc80e951b090832b6edc6ea103215e9f8bdd97a))
+- Reject staged node_modules in the template package publish ([2040f7717](https://github.com/underpostnet/engine/commit/2040f7717fc7a0a1ba02d80e5bd3ba57194848f9))
+- Mirror releases to the organization with owner-scoped packages ([34eaadaf8](https://github.com/underpostnet/engine/commit/34eaadaf8545f6878b9a76759a5510f14d8469e8))
+
+### engine-cyberia
+
+- Add the GitHub org name to the compose environment ([4331754f1](https://github.com/underpostnet/engine/commit/4331754f1003247610ac09f62e120e90139250f4))
+
+### cyberia-docs
+
+- Document the wasm-driver stream diagnostic flags ([9f4e122ef](https://github.com/underpostnet/engine/commit/9f4e122efd6f01305adbdb03ef9793c8b913e6fd))
+- Reflow the economy and platform architecture docs ([f7ce74cd2](https://github.com/underpostnet/engine/commit/f7ce74cd202cd9617698188b2e6265ff7c94c66e))
+
+### ssr-cyberia
+
+- Keep the Cyberia 404 page on the requested URI ([3449cf79d](https://github.com/underpostnet/engine/commit/3449cf79d3e60bb63a9f04a6a166cc4f463b787c))
+
+### client
+
+- Add a default NotFound status page for PWA clients ([6d646ded8](https://github.com/underpostnet/engine/commit/6d646ded8431dc8e44bd6be25267e5ce62f76cd2))
+- Mirror the Underpost 50px top and bottom bars in the SSR splash ([7cc74f207](https://github.com/underpostnet/engine/commit/7cc74f2071863836a48ae877d13dc70c7c318dc4))
+
+### deploy
+
+- Pin the per-deploy engine source repositories in the sync deploys ([e0d01e2c1](https://github.com/underpostnet/engine/commit/e0d01e2c16f224cf7766b8e4aafa0429dca9a02c))
+- Open the merged stream before the error stream in run_quiet ([ce2b9eba9](https://github.com/underpostnet/engine/commit/ce2b9eba997792f27ecfc621c551f15ad58896b6))
+
+### cli-release
+
+- Run security audit and clean deploy ID artifacts in release pipeline ([4163efe74](https://github.com/underpostnet/engine/commit/4163efe745025a70de1b64f1e30294bf1ec29db7))
+
+### package
+
+- Move nodemon to base dependencies ([7732e00ad](https://github.com/underpostnet/engine/commit/7732e00adbddc2a56f8d2f918accc1316cd687b1))
+
+### deploy-cyberia
+
+- Simplify sync-deploy script using build conf ([65b5d8c05](https://github.com/underpostnet/engine/commit/65b5d8c05d47f43d8e49fa6eb8a4644b85b57f2e))
+
+### engine
+
+- Keep non-literal dynamic imports out of the esbuild graph walk ([9b5634567](https://github.com/underpostnet/engine/commit/9b5634567f2d13e534b694ec733f0c420234d3b0))
+- Walk the runtime import graph with esbuild instead of regexes ([067c86467](https://github.com/underpostnet/engine/commit/067c8646715fbcf39b194c9b7a0c3c5b4b845313))
+- Generate the template .gitignore from the engine rules ([4f12f11e0](https://github.com/underpostnet/engine/commit/4f12f11e0070db426cec2f8fe8f4708278087029))
+- Log the copied clipboard length instead of its content ([6541792db](https://github.com/underpostnet/engine/commit/6541792dba3366b2fbb3db5cd229c99adb38cfc8))
+
+### client-core
+
+- Shell the Underpost menu around the sliding top and bottom bars ([a748e88b9](https://github.com/underpostnet/engine/commit/a748e88b987b4d36a8b5ff50bb4896c42c5b85b8))
+- Add updateBarCustomVisibility to home button toggle to restore top scroll ([451e5ce62](https://github.com/underpostnet/engine/commit/451e5ce62542c47ab574970c2446f3fd60ea0747))
+
+### cli
+
+- Redact the Maas token secret from the baremetal log ([4f8c55c76](https://github.com/underpostnet/engine/commit/4f8c55c76f278d059e730bfe95f5193fb1d41cee))
+- Quote host command arguments in repository writes and pod exec ([ce5b59260](https://github.com/underpostnet/engine/commit/ce5b5926087980664f09ab516dfcc5a5d130034a))
+- Add the Socket.dev supply-chain audit command ([8294fb557](https://github.com/underpostnet/engine/commit/8294fb557ac19e65627b6534509c1b31c7231f30))
+
+### api
+
+- Gate the full file listing behind the admin guard ([32872740a](https://github.com/underpostnet/engine/commit/32872740ab91e2c3986bef843c6a5b931e222af3))
+
+### cli-secrets
+
+- Rotate GitHub Actions secrets under user and org targets ([3676dcdf5](https://github.com/underpostnet/engine/commit/3676dcdf5f5b194ccaedfabb9fdeea32658e082c))
+
+## New release v:3.3.77 (2026-09-13)
+
+### test
+
+- Add cyberia instance data unit tests ([2517a5d21](https://github.com/underpostnet/engine/commit/2517a5d217eecaaca6a32663fc0876306db9a3c7))
+
+### client-core
+
+- Rework the collapsed menu badge, tooltip, and hamburger chrome ([0b4bca3f4](https://github.com/underpostnet/engine/commit/0b4bca3f4567081296078283712e22329fd8af2b))
+
+### engine
+
+- Build the deploy sources with coverage from release and CI ([b0fd53698](https://github.com/underpostnet/engine/commit/b0fd53698c5d522467a3d78046fa570162d86607))
+- Withdraw the host traces with force inside the container ([e09a23a9d](https://github.com/underpostnet/engine/commit/e09a23a9d44f7c9a0dc20fb24b25a0ad00d78cff))
+- Read the fallback document body through the gateway pod ([7d1151db5](https://github.com/underpostnet/engine/commit/7d1151db5c72a2fc7bb6db39ce077ea0ed09899a))
 
 ### test-unit
 
-- Skip cyberia product suites where the tree does not ship them ([93c4f0906](https://github.com/underpostnet/engine/commit/93c4f0906386427982318beb73b7ae5741010ae7))
+- Skip the catalog tier suites a sliced tree does not ship ([d8280cb4e](https://github.com/underpostnet/engine/commit/d8280cb4e97cd93318b007736da13a700800d01b))
+
+### deploy
+
+- Keep the applied manifest echo off the sync output ([ba3e915d8](https://github.com/underpostnet/engine/commit/ba3e915d8a31a3a5f9a4796e1368511418ceec1e))
+- Sweep the legacy per-host Gateway API objects ([a3f1890f5](https://github.com/underpostnet/engine/commit/a3f1890f5c014cbd1bcd728a1dde9529d65a4fe2))
+- Apply the Lets Encrypt issuer through the Gateway API solver ([fc42bec8e](https://github.com/underpostnet/engine/commit/fc42bec8e2ace5c770e1ce50c4a46c28471d6d75))
+- Pin the pod bootstrap source repos in the prototype sync ([1328bed08](https://github.com/underpostnet/engine/commit/1328bed089481770b15b30fcb70947d2552630f2))
+- Remove test variation in pod_bootstrap_cmd repository default ([33513cd0a](https://github.com/underpostnet/engine/commit/33513cd0a4ddee26d9b6b96f23b8c6f0adeb6e24))
+
+### cli
+
+- Mirror deploy id source paths back into their public repos ([9debaad02](https://github.com/underpostnet/engine/commit/9debaad0237cd259f03f9fce03ba5fa510321289))
+- Compare the gateway status probe answer by status code ([b7ce8de9c](https://github.com/underpostnet/engine/commit/b7ce8de9cf486b9d9d89b5dbf86782cdd96ee566))
+
+## New release v:3.3.76 (2026-09-12)
+
+### test-unit
+
+- Skip cyberia product suites where the tree does not ship them ([96d1de9e5](https://github.com/underpostnet/engine/commit/96d1de9e57c1f1e33b2df62bdbe2587a5f7ca309))
 
 ### client-core
 
-- Add top-left hamburger menu button while the top bar is collapsed ([43b00dcd1](https://github.com/underpostnet/engine/commit/43b00dcd1dd6da58cc9513e03ff7f0c88a2bd3a4))
+- Add top-left hamburger menu button while the top bar is collapsed ([b91f72210](https://github.com/underpostnet/engine/commit/b91f722100b01e08eae254dae908ed4ad3e4f2ae))
 
 ### Cyberia
 
@@ -685,262 +792,3 @@
 
 - Fix instance selection play URL for default instance code ([efec4a34e](https://github.com/underpostnet/engine/commit/efec4a34edbfb3aae780a42b02ad64d4d93791a1))
 
-## New release v:3.2.80 (2026-07-23)
-
-### engine-cyberia
-
-- Implement dynamically build cyberia instance package.json full reference ([4127836f0](https://github.com/underpostnet/engine/commit/4127836f0f2cf2d74f1762fb1379921b283c3429))
-- Fix missing add cyberia dependency in engine-cyberia docker image ([b3d6c4dec](https://github.com/underpostnet/engine/commit/b3d6c4decc23b72ede1958cd158a82a356f10b70))
-- Fix dynamic build instance codes logic ([cb380b335](https://github.com/underpostnet/engine/commit/cb380b3354eaa720ee225c66e17270737616f081))
-- Refactor INSTANCE_CODES Dynamic build inputs access docker image workflows ([bf1cb6c74](https://github.com/underpostnet/engine/commit/bf1cb6c7466415982b34176b70050622a6681acf))
-- Add map preview PNG rendering and preview route in instance map API ([82150a18a](https://github.com/underpostnet/engine/commit/82150a18ad627f29425cb60aaa08850762f18f69))
-- Add multi-instance code support in Dockerfiles with saga copying ([6b902ba86](https://github.com/underpostnet/engine/commit/6b902ba860b235d00b0b69244f9f25c6f589d128))
-- Add multi-instance topology and per-variant compose routing ([4336c024c](https://github.com/underpostnet/engine/commit/4336c024cb3f98e394cc06f5bab038a93d9b3e4b))
-- Add hot reload endpoint and map preview route ([3c7658911](https://github.com/underpostnet/engine/commit/3c76589115d907a74d42081c753fd7f3bf5be946))
-- Add map preview caching for fallback world nodes ([55052ec54](https://github.com/underpostnet/engine/commit/55052ec54119ccb06366dae712f23cd503de91f0))
-- Fix demo quests with actions quest related ([c41feae1a](https://github.com/underpostnet/engine/commit/c41feae1a408b7b9ec56abdd29978b0177c44dfa))
-- Add REST boot fallback endpoints for gRPC CyberiaDataService ([57b698836](https://github.com/underpostnet/engine/commit/57b6988369a0492c18c2df3155630af5a2e8fbb6))
-- Add portalSubtype field and refactor instance map with presence POI system ([fa551a11d](https://github.com/underpostnet/engine/commit/fa551a11dba7cedf18f1cca1bcdb0c11d7a1b57f))
-- Add map preview for Instance Map node backgrounds ([849095cf2](https://github.com/underpostnet/engine/commit/849095cf21fc52e7666be102054b7abfd3b7e738))
-- Add instance map REST endpoints (static graph + dynamic provider activity) ([dc83f8dc0](https://github.com/underpostnet/engine/commit/dc83f8dc03a1ed4aeea606bc3b2aed746cc09336))
-- Update cyberia base lore and introduce Fragmentation concept and refactor  weakness narrative of nova faction ([823d69cc9](https://github.com/underpostnet/engine/commit/823d69cc99fb410e5d4a7161baeff28b4f9f6684))
-- Add more demo quests to fallback world ([d0de569bd](https://github.com/underpostnet/engine/commit/d0de569bd2ab987ff7881263f80ab8953ef4f241))
-- Increase portalHoldTimeMs default value ([5d8028120](https://github.com/underpostnet/engine/commit/5d802812012c53942f699763dba24948865f4936))
-
-### cli-release
-
-- Add cyberia docker-compose bump version file match ([f3eeefeea](https://github.com/underpostnet/engine/commit/f3eeefeeabe377fe4c5db65e1d2d480841f9d2cd))
-
-### cyberia-client
-
-- Add instance selection view and portal navigation ([9f8ebc5d1](https://github.com/underpostnet/engine/commit/9f8ebc5d147225e0710923392f9b659e20725e60))
-- Improve cyberia portal landing ([57dbaed22](https://github.com/underpostnet/engine/commit/57dbaed228b2ae58202729b6ac9d751c0405a93f))
-- Add Instance sub-path dashboard prefix handle ([958f65929](https://github.com/underpostnet/engine/commit/958f65929a42084c0d4cf3876d3a4fef1fdc7236))
-- Add hot reload UI in instance editor ([ee90a2018](https://github.com/underpostnet/engine/commit/ee90a20180fa8c88f249f3efec0a7fb6258f9e5f))
-- Replace stat icons with PNG images in object layer engine ([7f03972ef](https://github.com/underpostnet/engine/commit/7f03972efcae0ce99493cf65ed96333a59616320))
-- Add center action button to menu modal ([f70ba2d3c](https://github.com/underpostnet/engine/commit/f70ba2d3cb8022f3f2873f0c36fe1cd792dd29d2))
-- Update default fontFamily in SharedDefaultsCyberia module ([868dffa9f](https://github.com/underpostnet/engine/commit/868dffa9f8effb15f694cb8e3f5dd135410243dc))
-
-### cyberia-api
-
-- Add fallback TEST world to instance selection list ([b93f30586](https://github.com/underpostnet/engine/commit/b93f3058694eafc384ac5b50d24093f4a30f6f00))
-
-### github-actions
-
-- Fix cyberia github package publish workflow ([fc1bac41d](https://github.com/underpostnet/engine/commit/fc1bac41daf1029962b71d45e73d32780c3b45a5))
-- Fix cyberia-client 404 page build ([a55bcb797](https://github.com/underpostnet/engine/commit/a55bcb797166ecb6d93ccb0ac6814b7b31c6138e))
-- Update engine-cyberia.cd.yml clean assets directory ([ce365cf77](https://github.com/underpostnet/engine/commit/ce365cf77c325a69df1d3614332f9f584c6cd0e3))
-- Update engine-cyberia CD workflow add pull storage assets ([0ee2404f1](https://github.com/underpostnet/engine/commit/0ee2404f1506ce8f4221602b3c73b4a704a1a44d))
-- Fix npm install command in engine-cyberia CD workflow ([7974ab422](https://github.com/underpostnet/engine/commit/7974ab422d64c482a53a745a834b58b3e623d85d))
-- Add image-pull-policy Always in cyberia-server and cyberia-client CD pipeline ([a134c5be2](https://github.com/underpostnet/engine/commit/a134c5be23b067e9fcc7ed8589243d341ca9607a))
-- Set default variant of underpost engine docker image in release workflow ([f3e47bdc6](https://github.com/underpostnet/engine/commit/f3e47bdc660d1074ab04a48a769e9cbf512eb4f8))
-
-### cli-cyberia
-
-- Add multi-instance sub-path support to hot reload trigger ([f0e0fda7a](https://github.com/underpostnet/engine/commit/f0e0fda7aa23e38466024c0258a17e94386fab9c))
-- Add build-cyberia-404 workflow and 404 page ([51d35594f](https://github.com/underpostnet/engine/commit/51d35594f76e15b4385084d3b7a1d696b0faaf8d))
-- Add Dynamically resolve instance codes in build-manifest runner ([97997df14](https://github.com/underpostnet/engine/commit/97997df14d16ff485fd30001a54f99cc9227b69b))
-- Refactor multi-instance conf structure and respective workflows ([0e607e4c5](https://github.com/underpostnet/engine/commit/0e607e4c5d269fb1048b0ab510e2a90174c4520b))
-- Add --reset option to dev-env runner ([77f17140c](https://github.com/underpostnet/engine/commit/77f17140c7399470d700126fd0d5ccd583fa8323))
-- Add revert option and multi-instance publish support with default-items asset copy ([0913117af](https://github.com/underpostnet/engine/commit/0913117af06d034387c5958bf73c0e652316e94e))
-- Add UNDERPOST_DEPLOY_NODE env for deterministic deploy node resolution ([41bb08ffb](https://github.com/underpostnet/engine/commit/41bb08ffb1e75721962ae2c69414e7adb5266c46))
-- Add in import-default-items runner import FOREST dev instance ([d3bf87a1f](https://github.com/underpostnet/engine/commit/d3bf87a1f72ee97b9cc67bc131a21e9169f7eb11))
-
-### client-cyberia
-
-- Redesign server metrics dashboard with pixel-art assets and theme toggle ([563783093](https://github.com/underpostnet/engine/commit/5637830934d1f684c04eddbed2eb01030f3ae28b))
-- Update location href of enter button in landing cyberia portal ([1c9efd550](https://github.com/underpostnet/engine/commit/1c9efd5505a161c2de83b77dac16f6a81065263a))
-- Improve cyberia portal landing with new hero section ([024d76b62](https://github.com/underpostnet/engine/commit/024d76b62faee3f04d70c4d303ac486697e40876))
-
-### cli-run
-
-- Fix instance promote handle multi variant paths ([c23e75021](https://github.com/underpostnet/engine/commit/c23e75021d4bbf6e24cdb45102b344743712b3a6))
-- Add flag 'branch' in default runner options ([4e7a63dfb](https://github.com/underpostnet/engine/commit/4e7a63dfbb8c492e31e53bafbb23586a46aa59ad))
-
-### cli-repository
-
-- Add init local repo in cmt cli ([0255eb053](https://github.com/underpostnet/engine/commit/0255eb05354edd33741721311f012b339351370b))
-
-### cli-deploy
-
-- Fix multi-instance blue/green deployment build manifests ([99a9b5265](https://github.com/underpostnet/engine/commit/99a9b5265257856a6df2ed2d9425ddaba834d8bf))
-
-### cli-fs
-
-- Remove redundant logs ([23761d607](https://github.com/underpostnet/engine/commit/23761d607bbc62a1d6a892faa66a448496ece8d7))
-
-### hardhat
-
-- Update supply-chain dependency: overrides adm-zip to version 0.6.0 ([fe5d98996](https://github.com/underpostnet/engine/commit/fe5d989964e768911d0c2eaa62d8d918f5421025))
-
-### cyberia-docs
-
-- Document OFF-CHAIN economy players + bots, any victim loot ([dbc4efa36](https://github.com/underpostnet/engine/commit/dbc4efa365c0e61b6dff32dd00ee5593aa064968))
-- Document path-based multi-instance deployments ([b028657f4](https://github.com/underpostnet/engine/commit/b028657f4c79280d53674e034e396e44e9d8eae4))
-- Document REST boot fallback and gRPC transport refactor ([a4b8006cc](https://github.com/underpostnet/engine/commit/a4b8006cc3240f65ff22fff8b089277032c21add))
-- Update docs to reflect presence POI architecture and instance map changes ([140568b80](https://github.com/underpostnet/engine/commit/140568b808f32a83037841cbe741c18af2b0b743))
-- Document instance map API, data flow and client overlay integration ([a8f7c8ea5](https://github.com/underpostnet/engine/commit/a8f7c8ea58848b92cbe9ce0febb3a8bcc9692524))
-- Update Off chain economy concepts from transfer to loot drop race ([e93cafc83](https://github.com/underpostnet/engine/commit/e93cafc836d58148d4439126a650a20e7ff5d5ce))
-
-### client
-
-- Fix slide menu title style in dark/light themes ([22c1224d5](https://github.com/underpostnet/engine/commit/22c1224d5b4d50ad466c2988bb2c5e6cd7c30860))
-- FIx center action button to menu modal ([94d6940ed](https://github.com/underpostnet/engine/commit/94d6940ed5d9e7eff72c039f6e22cc64e47d1a90))
-
-### cyberia-saga
-
-- Add persistInstance helper for saga instance persistence ([3f124c8b5](https://github.com/underpostnet/engine/commit/3f124c8b57f6a4f75051cfa9771c38cf9989aa75))
-
-### cyberia-cli
-
-- Migrate IPFS registry to mfsPath unique key ([e15cfda51](https://github.com/underpostnet/engine/commit/e15cfda511c674a4c0f8e77901f7df4d59a6e50d))
-- Add clean option in import default items in runner ([9cca28ab9](https://github.com/underpostnet/engine/commit/9cca28ab93178cf2ee06f4d5e7b199a612f9e360))
-- Improve import default items add base saga collection ingestion ([ffe822423](https://github.com/underpostnet/engine/commit/ffe822423c60ce3c103d533be00200ae9a406aa2))
-- Add publish cross repositories push operation workflow ([69e39292e](https://github.com/underpostnet/engine/commit/69e39292e614d577eae4ad8362e8ec80e1282b9a))
-- Fix build-manifest copy docker-compose related files ([b3e252fc7](https://github.com/underpostnet/engine/commit/b3e252fc7d61c2b91f65a199351a32dfb05d87ff))
-
-### ci
-
-- Add latest tag to Docker image build and push workflows ([36dc44fc3](https://github.com/underpostnet/engine/commit/36dc44fc304eafcd67ad4b2743c2c3254b72b9a0))
-
-### grpc-cyberia
-
-- Refactor gRPC server to delegate world-load to shared instance-data module ([740577994](https://github.com/underpostnet/engine/commit/7405779948cbd82383efb18efc928fc10ba0341e))
-- Fix itemsId load in fallback world to ensure based in Own-model collections (CyberiaSkill, CyberiaEntityTypeDefault) ([ca4ffbb95](https://github.com/underpostnet/engine/commit/ca4ffbb956cb1e6f19601e35c3ceee8ca71ab49b))
-
-### api
-
-- Centralize Express middleware and controller/router helpers for engine APIs in src/server/middlewares.js ([1dda3de9d](https://github.com/underpostnet/engine/commit/1dda3de9ddd016acbe5f33d239d0a547445cf6c6))
-
-### dependencies
-
-- Update typescript version for compatibility with typedocs ([433b68207](https://github.com/underpostnet/engine/commit/433b6820757cce0c8eadb4cca3b64425cdfa9c05))
-
-### docs
-
-- Update README.md Rocky badge to v9.8 ([f7f31a1aa](https://github.com/underpostnet/engine/commit/f7f31a1aa9257db338c02d2a57d718136216b5f1))
-
-### cluster
-
-- Fix Helm installation in node bin cluster init host workflow ([f7e141c71](https://github.com/underpostnet/engine/commit/f7e141c71d2c6284cb798a985c1f318e77b5293e))
-
-## New release v:3.2.70 (2026-07-06)
-
-### release
-
-- Enhance buildVersionBumpTargets patterns scope ([510abdd94](https://github.com/underpostnet/engine/commit/510abdd94faaa121b7f81a21450beba484de654b))
-
-### cli-repository
-
-- Add default branch resolution ([c5074d31c](https://github.com/underpostnet/engine/commit/c5074d31cac7046280d24d12e30a87ad2db86285))
-- FIx commit message propagation in CI engines workflows ([4b5458d83](https://github.com/underpostnet/engine/commit/4b5458d834efa88a1cf81ae32d517a71a4bb58f2))
-- Add runtimeRepo logic in  resolveInstanceRepo method ([1ef3ad279](https://github.com/underpostnet/engine/commit/1ef3ad27908989f3ab7f620500257b6e9ff76f4b))
-
-### github-actions
-
-- Clean comments ([785e9d55d](https://github.com/underpostnet/engine/commit/785e9d55d27351ad4d529e38f60d3962f9439fee))
-- Fix typo engine cyberia cd cmd command, and clean comments in cyberia-engine related dockerfiles ([d93dbf54a](https://github.com/underpostnet/engine/commit/d93dbf54a2ec44e1c1b4c01abd21e1baa0cf7fbc))
-- Fix add missing install dependencies in cyberia github package workflow ([8897dcdbb](https://github.com/underpostnet/engine/commit/8897dcdbbea619687165438f3ac64702480f4d23))
-- Add cyberia cli github package workflow ([6ae0ac5f7](https://github.com/underpostnet/engine/commit/6ae0ac5f76c08643171b4b3853c874ed26b423c1))
-- Add cyberia-server and cyberia-client CD workflows ([c92a6c278](https://github.com/underpostnet/engine/commit/c92a6c27810738c2c6a87962c6fefaf98060cb70))
-- Fix engine-cyberia CD  and engine-prototype CI manifests workflows ([3ca123dbf](https://github.com/underpostnet/engine/commit/3ca123dbf9d4d0cfbc1d504e6b0c847abd2f8757))
-- Add single source of truth for the underpost image version in ci dockerhub workflows ([97585e735](https://github.com/underpostnet/engine/commit/97585e735c1cd48c80e8c7af8601e14a79e233fd))
-- Update engine-cyberia default deployment node ([b181a5bd5](https://github.com/underpostnet/engine/commit/b181a5bd5254d2a692579c9c7d188161ae351e59))
-
-### engine-cyberia
-
-- Add sudo in engine-cyberia runtime dockerfiles ([3c3da0fcc](https://github.com/underpostnet/engine/commit/3c3da0fccc5b91c01722d3224146ae37ebcc6a27))
-- Update production engine-cyberia Dockerfile ([e1a9330e9](https://github.com/underpostnet/engine/commit/e1a9330e9c3325a8a1ee41318bbe48714deaf3a2))
-- Refactor Dockerfile and deployment configurations for production and development environments ([4901a3f92](https://github.com/underpostnet/engine/commit/4901a3f925ce038ede03b5e08c6b06eb03bc1617))
-- Refactor separate engine-cybera public engine URL from internal cyberia-server api engine base url endpoint ([48923d900](https://github.com/underpostnet/engine/commit/48923d90062dc934228c049a33f619dcdacd5cbc))
-- Add in runtime engine-cyberia module docker-compose env file related ([ae30329d4](https://github.com/underpostnet/engine/commit/ae30329d4e80d4911c3129ad042c623f74110462))
-- Add centralized node version arg and update to v24.15.0 id dockerfiles related ([64a649a1b](https://github.com/underpostnet/engine/commit/64a649a1b29a941b10d91879207e8a7ff76f48a2))
-- Update Dockerfile.dev use canonical repository ([12e439122](https://github.com/underpostnet/engine/commit/12e4391225ee207dd5e3edff93af4cfe667982dd))
-- Add ipfs cluster service in cyberia docker-compose deployment ([8ee19a3fa](https://github.com/underpostnet/engine/commit/8ee19a3fa5792ed800b03f45a0a677b0d6244450))
-- Move ffmpeg to runtime stage in docker-image build pipeline ([1fcca3783](https://github.com/underpostnet/engine/commit/1fcca3783add20e42c3c80a14dfdf9a9ff2b08a9))
-- Add engine-cyberia runtime module, docker-compose cyberia mmo ecosystem, and docker-image engine-cyberia dockerhub pipeline ([df2162b7d](https://github.com/underpostnet/engine/commit/df2162b7d755a814d36bd2da322c3e554496daa2))
-- Add behavior field, entity behavior vocabulary, and skill logic validation ([6ac9bcaf5](https://github.com/underpostnet/engine/commit/6ac9bcaf5eede564ae80ce74498c91eb9a4e4b20))
-- Refactor entity-type-default to subset matching resolution ([bf0aa9fe6](https://github.com/underpostnet/engine/commit/bf0aa9fe65523d0817d18b8796ce71b9be858955))
-- Add fontFamily+fontFactorSize;  in RENDER_DEFAULTS  and buildClientHints passthrough; client-hints model fields related logic ([34a1ee78b](https://github.com/underpostnet/engine/commit/34a1ee78bf8eba5ed1ffca5bad3c92f5eef5c4fd))
-- Add transport status definition for portal entities ([4cf015892](https://github.com/underpostnet/engine/commit/4cf015892eaafd58e6d65f19c7aeeaec3eccfb5e))
-- Implement cyberia-entity-type-default model and EntityEngineCyberia and related logic ([96c8c94ec](https://github.com/underpostnet/engine/commit/96c8c94ec4a0faf506232d3a1059e0c84f83edc6))
-- Add cyberia saga amethyst-strata-expansion custom resources ([6422570ab](https://github.com/underpostnet/engine/commit/6422570ab33b686016bed5f338cbbf8a0395f285))
-- Refactor questCodes field in cyberia-saga model and add actionCodes references ([93ffb7f0b](https://github.com/underpostnet/engine/commit/93ffb7f0bc8097769d3b9f3c4ffbf1c8359af18a))
-- Fix  idempotency consistency in atlasSpriteSheetId ref in export / import instance pipeline ([05e62ebbe](https://github.com/underpostnet/engine/commit/05e62ebbe0fc8284ee468b458818e19fc77298bb))
-- Add cyberia-saga documents in import / export cyberia instance pipelines ([e77583fc8](https://github.com/underpostnet/engine/commit/e77583fc8b129a875270ef8d7e1c40d61ecc7a18))
-- Update CLI and saga documentation for skills ([1655a5c87](https://github.com/underpostnet/engine/commit/1655a5c877c712210cbe83a35848896cdc5e4125))
-- CLI seed-skills, import/export, and server defaults skill config ([b2215cce2](https://github.com/underpostnet/engine/commit/b2215cce22c5499579a2df63db0ac301a0553feb))
-- Action engine skill editor with CyberiaSkill CRUD ([7a3f3b8d7](https://github.com/underpostnet/engine/commit/7a3f3b8d71272eee9a3c4fb9218d9152b2023776))
-- Saga generator skills stage and instance persistence ([669d991ca](https://github.com/underpostnet/engine/commit/669d991cac09dedf60b60c7261cb045cb7dd7f71))
-- Skill system - DefaultSkillConfig, gRPC server, CRUD API, and client service ([2e1997ebc](https://github.com/underpostnet/engine/commit/2e1997ebceb03723ea7ffd15ea61d950a3723414))
-- Instance model itemIds schema with defaultPlayerInventory flag ([342df03c3](https://github.com/underpostnet/engine/commit/342df03c3612cc82131b287e1f7545e3fcd7f9f8))
-- Add static entity type and shared direction/stat constants ([86ab2ffca](https://github.com/underpostnet/engine/commit/86ab2ffca38851ce870ee72c37221cbf260e5bd8))
-
-### cli-fs
-
-- Isolate Git tracking from JSON storage ([2f9145be9](https://github.com/underpostnet/engine/commit/2f9145be92456124118f9c7d74726bdff82dc5f3))
-
-### cli-run
-
-- Add typedef UnderpostRunDefaultOptions in cli runner module ([8a3580109](https://github.com/underpostnet/engine/commit/8a3580109d8f70a10c4ac2d216fbd35844e09541))
-- Add resolve runtimeRepo logic in  ssh-deploy runner ([1d4c26002](https://github.com/underpostnet/engine/commit/1d4c26002ac513fcde86c8839445e2b82fd55e50))
-- Add generate sibling manifests (pv-pvc, proxy, grpc-service) in instance-build-manifest runner ([36bf33b4b](https://github.com/underpostnet/engine/commit/36bf33b4b2ec34bac3925a4330b4eb5606cf8876))
-- Add dev mode in runner docker-image to trigger dev variant docker hub push ([bc1e23ac0](https://github.com/underpostnet/engine/commit/bc1e23ac0ce5c705e3d2f7b3e47546e1e3c583bb))
-- Fix custom instance artifact generator add custom --trafic flag inteast ([d6873f3c3](https://github.com/underpostnet/engine/commit/d6873f3c300d09f34cf5399f671b86ac5f4b8d55))
-- Add deploy key runner ([6164b0190](https://github.com/underpostnet/engine/commit/6164b0190e59510bdd51bb60d3064ba3a9c32a7b))
-- Add kubernetes-sigs metrics server runner setup ([4761c6351](https://github.com/underpostnet/engine/commit/4761c6351482fe27e84f47d4cf53946f8f04caa6))
-
-### cyberia-cli
-
-- Add missing deployment manifests copy to build cyberia-instance dir ([ee71573ee](https://github.com/underpostnet/engine/commit/ee71573eea0e979d883238744bee97714cf0b224))
-- Add publishing functionality for cyberia instances ([aaf8485bf](https://github.com/underpostnet/engine/commit/aaf8485bfd003a39dec59760c5dd2b2ffb051f3d))
-- Add method to fill empty fields  in Instance Conf Defaults export process ([6e1c268ae](https://github.com/underpostnet/engine/commit/6e1c268ae755b240abdfcd60ff0f26d2c35a9fe3))
-- Add docker-compose-dev-env-up runner workflow ([9e765185a](https://github.com/underpostnet/engine/commit/9e765185ad782f34cddddbc2862981416a830de4))
-- Add drop-db workflow to clear only cyberia collections ([5b741c22c](https://github.com/underpostnet/engine/commit/5b741c22cda0cf7c9ee531903769d466826cf133))
-- Add sync-src to engine runner logic ([a777e5ad6](https://github.com/underpostnet/engine/commit/a777e5ad69b1069eadb04846010a6d34508ce7c5))
-- Remove seed default dialogues in export instance logic ([1cbcb9e52](https://github.com/underpostnet/engine/commit/1cbcb9e52f1441ae10abb046bf356b49dd7fcfd2))
-- In cyberia instance export / import disabling overlaps queries for now because they can be very expensive and are not strictly necessary for a backup ([b7d7858d6](https://github.com/underpostnet/engine/commit/b7d7858d619edb9feac968c6fce2ac99d5978d24))
-
-### cyberia-api
-
-- Add moderator auth guard in cyberia api CRUD operations endpoints ([0373a052f](https://github.com/underpostnet/engine/commit/0373a052f257577b7afec887d18c982938b8de02))
-
-### client-cyberia
-
-- Add moderator guard for CRUD operations in cyberia components ([f746ea9ce](https://github.com/underpostnet/engine/commit/f746ea9ced0a0dac113129fb26f2d7f6df763f26))
-
-### cli-cyberia
-
-- Add cyberia run-workflow docker-image local tar builder runner ([a953dec8f](https://github.com/underpostnet/engine/commit/a953dec8f108a4d53d9fde07fae7149f5f0e2dd4))
-
-### cli-image
-
-- Add --import-tar flag option and logic ([5f00f64c9](https://github.com/underpostnet/engine/commit/5f00f64c9b9c41b6c6220c09c42345f378caee90))
-- Refactor and simplifi image build logic, and add support to load local tar in docker-compose ([f87523253](https://github.com/underpostnet/engine/commit/f8752325363bde9f8d18cefb0b348e570c00d9f9))
-
-### cluster
-
-- Enhance cluster and disk clean logic ([d9a079f7d](https://github.com/underpostnet/engine/commit/d9a079f7de4add9d7b30c0493d367f620c837d7b))
-
-### catalog
-
-- Add copies and moves options in catalog build logic ([b1940e067](https://github.com/underpostnet/engine/commit/b1940e067a9961581998e9adfd6ba39c62f35735))
-
-### engine-prototype
-
-- Remove ssr prototype components from base engine ([4f3e04f4b](https://github.com/underpostnet/engine/commit/4f3e04f4b5fcaca831139f4cdcd6ce871b50297d))
-
-### grpc-cyberia
-
-- Add behavior passthrough in entity defaults merge ([7998df262](https://github.com/underpostnet/engine/commit/7998df26276de1693054bbf3eb00a368edccfb67))
-- Fix merge entity defaults logic, preventing cross-instance entity defaults overlap ([0d64d6b8f](https://github.com/underpostnet/engine/commit/0d64d6b8ff40a1a889df9c767aa90052a08656f5))
-
-### cyberia-instance-engine
-
-- Implement handler for authoritative initial spawn for new players connections logic and aoi radius customization in intance engine component ([89d68aca0](https://github.com/underpostnet/engine/commit/89d68aca0152d1800d6632cddbd428409845a58a))
-
-### cyberia-map-engine
-
-- Add checkbox removeOnClick and enhance ui / ux ([5b557256f](https://github.com/underpostnet/engine/commit/5b557256fd17790913e9628440bd6e125d92ee0d))
-- Add in client component MapEngineCyberia.js renameFilteredObjectLayerItemId with random factor ([c6519a1c0](https://github.com/underpostnet/engine/commit/c6519a1c0b3dfab9ba7856e3dd03914bd14a846a))
-

package/CLI-HELP.md

@@ -1,6 +1,6 @@
 ## Underpost CLI
 
-> underpost ci/cd cli v3.3.76
+> underpost ci/cd cli v3.4.0
 
 **Usage:** `underpost [options] [command]`
 
@@ -50,6 +50,7 @@
 | [`lxd`](#underpost-lxd) | Manages LXD virtual machines as K3s nodes (control plane or workers). |
 | [`baremetal`](#underpost-baremetal) | Manages baremetal server operations, including installation, database setup, commissioning, and user management. |
 | [`package`](#underpost-package) | Generates the package manifests a deploy id owns, from the engine manifest and the deploy's product catalog, and installs the dependencies that catalog pins. |
+| [`socketsecurity`](#underpost-socketsecurity) | Security audit through Socket.dev: dependency security (advisories, supply chain alerts, reachability, security patches in .socket/manifest.json) and source code risk (alerts on this project's own code). |
 | [`release`](#underpost-release) | Release orchestrator for building new versions and deploying releases of the Underpost CLI. |
 
 ## Command reference
@@ -1173,7 +1174,7 @@ Runs the test tiers locally, inside deployment pods, or as a cluster Job with Al
 
 | Argument | Description |
 | --- | --- |
-| `suite` | A comma-separated list of suites or tiers to run. Suites: unit, infra, app, cyberia, contracts, all. Tiers: unit, infra:1-security, infra:2-network, infra:3-cluster, infra:4-ingress, infra:5-observability, app, cyberia, contracts. Defaults to every tier, in tier order. (default: "") |
+| `suite` | A comma-separated list of suites or tiers to run. Suites: unit, cyberia, infra, app, contracts, all. Tiers: unit, cyberia:unit, infra:1-security, infra:2-network, infra:3-cluster, infra:4-ingress, infra:5-observability, app, cyberia:app, contracts. Defaults to every tier, in tier order. (default: "") |
 
 #### Options
 
@@ -1385,6 +1386,32 @@ Generates the package manifests a deploy id owns, from the engine manifest and t
 
 ---
 
+### underpost socketsecurity
+
+Security audit through Socket.dev: dependency security (advisories, supply chain alerts, reachability, security patches in .socket/manifest.json) and source code risk (alerts on this project's own code).
+
+**Usage:** `underpost socketsecurity [options]`
+
+#### Options
+
+| Option | Description |
+| --- | --- |
+| `--audit` | Audits the checkout (default). Dependency security: segregation, npm audit, the Socket patch scan and, with SOCKET_CLI_API_TOKEN set, the Socket full scan of the dependency manifests. Source code risk: with SOCKET_CLI_API_TOKEN set, the alerts Socket's registry analysis raises on this project's own published package, as refactoring tasks. Writes the JSON and Markdown reports. |
+| `--reach` | Runs the full application reachability analysis over the local working tree with the Socket scan (tier 1 evidence); no pushed commit is needed. |
+| `--ci` | Audits, then exits non-zero when the Socket scan violates the organization policy or a finding remains at --fail-on. |
+| `--fail-on <severity>` | Severity --ci fails at. One of: critical, high, moderate, low, info. Defaults to high. |
+| `--fix` | Runs the remediation pass before the audit: npm audit fix, every available Socket patch, socket fix without major upgrades, socket patch apply. |
+| `--major` | With --fix: lets socket fix apply major upgrades. |
+| `--patch-scan` | Lists the Socket patches available for the installed packages. |
+| `--patch-get <identifier>` | Downloads one patch (UUID, CVE, GHSA or PURL) into .socket/manifest.json and applies it. |
+| `--patch-apply` | Applies the patch manifest; the prepare hook. A host without the Socket CLI skips it. |
+| `--patch-setup` | Installs the prepare hook in package.json. |
+| `--out <dir>` | Report directory (default: security-reports). |
+| `--dry-run` | Previews --patch-setup; verifies --patch-apply without writing. |
+| `-h, --help` | display help for command |
+
+---
+
 ### underpost release
 
 Release orchestrator for building new versions and deploying releases of the Underpost CLI.

package/Dockerfile

@@ -6,7 +6,7 @@
 # Stage 1 — builder: clone the private deploy, build it, then scrub secrets.
 # ---------------------------------------------------------------------------
 FROM rockylinux/rockylinux:9 AS builder
-ARG UNDERPOST_VERSION=3.3.76
+ARG UNDERPOST_VERSION=3.4.0
 # Pin Node to an exact patch: dnf's nodejs:24 module lags (24.14.1) while
 # underpost's dependencies require >=24.15.0, so install the official binary.
 ARG NODE_VERSION=24.15.0

package/Dockerfile.dev

@@ -6,7 +6,7 @@
 # Stage 1 — builder: clone the private deploy, build it, then scrub secrets.
 # ---------------------------------------------------------------------------
 FROM rockylinux/rockylinux:9 AS builder
-ARG UNDERPOST_VERSION=3.3.76
+ARG UNDERPOST_VERSION=3.4.0
 # Pin Node to an exact patch: dnf's nodejs:24 module lags (24.14.1) while
 # underpost's dependencies require >=24.15.0, so install the official binary.
 ARG NODE_VERSION=24.15.0

package/Dockerfile.test

@@ -6,7 +6,7 @@
 # Stage 1 — builder: clone the private deploy, build it, then scrub secrets.
 # ---------------------------------------------------------------------------
 FROM rockylinux/rockylinux:9 AS builder
-ARG UNDERPOST_VERSION=3.3.76
+ARG UNDERPOST_VERSION=3.4.0
 # Pin Node to an exact patch: dnf's nodejs:24 module lags (24.14.1) while
 # underpost's dependencies require >=24.15.0, so install the official binary.
 ARG NODE_VERSION=24.15.0

package/README.md

@@ -20,7 +20,7 @@ _Stackable Rendering Layers as a Unified Tokenized Reality_
 <!-- CI/CD and health -->
 <div align="center">
 
-[![Node.js CI](https://img.shields.io/github/actions/workflow/status/underpostnet/engine-cyberia/docker-image.engine-cyberia.ci.yml?branch=main&label=Node.js%20CI)](https://github.com/underpostnet/engine-cyberia/actions/workflows/docker-image.engine-cyberia.ci.yml) [![Test](https://img.shields.io/github/actions/workflow/status/underpostnet/engine-cyberia/coverall.cyberia.ci.yml?branch=main&label=Test)](https://github.com/underpostnet/engine-cyberia/actions/workflows/coverall.cyberia.ci.yml) [![Coverage Status](https://coveralls.io/repos/github/underpostnet/engine-cyberia/badge.svg?branch=main)](https://coveralls.io/github/underpostnet/engine-cyberia?branch=main) [![Socket Badge](https://socket.dev/api/badge/npm/package/cyberia/3.3.76)](https://socket.dev/npm/package/cyberia/overview/3.3.76)
+[![Node.js CI](https://img.shields.io/github/actions/workflow/status/underpostnet/engine-cyberia/docker-image.engine-cyberia.ci.yml?branch=main&label=Node.js%20CI)](https://github.com/underpostnet/engine-cyberia/actions/workflows/docker-image.engine-cyberia.ci.yml) [![Test](https://img.shields.io/github/actions/workflow/status/underpostnet/engine-cyberia/coverall.cyberia.ci.yml?branch=main&label=Test)](https://github.com/underpostnet/engine-cyberia/actions/workflows/coverall.cyberia.ci.yml) [![Coverage Status](https://coveralls.io/repos/github/underpostnet/engine-cyberia/badge.svg?branch=main)](https://coveralls.io/github/underpostnet/engine-cyberia?branch=main) [![Socket Badge](https://socket.dev/api/badge/npm/package/cyberia/3.4.0)](https://socket.dev/npm/package/cyberia/overview/3.4.0)
 
 </div>