@underpostnet/cyberia 3.3.76 → 3.4.0

package/src/client/public/cyberia-docs/OFF-CHAIN-ECONOMY.md

@@ -13,50 +13,48 @@
 Cyberia Online uses the **Fountain & Sink** economy — the industry standard for sustainable in-game economies, pioneered by _Ultima Online_ and refined in _EVE Online_ and _World of Warcraft_.
 
 ```
-                ┌─────────────────────────────┐
-                │         FOUNTAINS           │
-                │  (inject coins into economy) │
-                │                             │
-                │  botSpawnCoins  ──► Bot      │
-                │  playerSpawnCoins ► Player   │
-                └──────────────┬──────────────┘
-                               │ new coins
+                    ┌──────────────────────┐
+                    │      FOUNTAINS       │
+                    │   Supply Creation ↑  │
+                    │                      │
+                    │ • botSpawnCoins      │
+                    │ • playerSpawnCoins   │
+                    └──────────┬───────────┘
+                               │
                                ▼
-                ┌──────────────────────────────┐
-                │      CIRCULATING SUPPLY      │
-                │   (player & bot wallets)     │
-                └──────┬───────────────────────┘
-                       │
-          ┌────────────┴────────────┐
-          │   KILL LOOT             │  zero-sum drop race
-          │   victim stake → grid drop    │
-          │   contributors race to collect│
-          │   (players + bots, any victim)│
-          │                         │
-          │  PvE: coinKillPercentVsBot    │
-          │  PvP: coinKillPercentVsPlayer │
-          │  floor: coinKillMinAmount     │
-          └────────────┬────────────┘
-                       │
-                ┌──────▼──────────────────────┐
-                │           SINKS             │
-                │   (destroy coins — alpha=0) │
-                │                             │
-                │  respawnCostPercent         │
-                │  portalFee                  │
-                │  craftingFeePercent         │
-                └─────────────────────────────┘
+                    ┌──────────────────────┐
+                    │  CIRCULATING SUPPLY  │
+                    │  Active Coin Supply  │
+                    └──────────┬───────────┘
+                               │
+                  ┌────────────┴────────────┐
+                  │                         │
+                  ▼                         ▼
+       ┌─────────────────────┐   ┌─────────────────────┐
+       │  TRANSFERS & LOOT   │   │        SINKS        │
+       │                     │   │                     │
+       │   Supply moves ↔    │   │   Supply destroyed ↓│
+       │                     │   │                     │
+       │ • PvP / PvE loot    │   │ • respawn cost      │
+       │ • kill rewards      │   │ • portal fee        │
+       │ • minimum loot      │   │ • crafting fee      │
+       └─────────────────────┘   └─────────────────────┘
+                  │                         │
+                  │                         ▼
+                  │                Circulating Supply ↓
+                  │
+                  └──────────────► Wallet Redistribution
 ```
 
 ### Core Rules
 
-| Rule                          | Description                                                                                     |
-| ----------------------------- | ----------------------------------------------------------------------------------------------- |
-| **Bots are infinite mint**    | Every bot respawn resets wallet to `botSpawnCoins`. Supply bounded by player kill rate.         |
-| **Players are zero-sum**      | A player kill scatters the victim's coins as a grid drop but creates no new ones — redistribution only. A player who dies to bots still drops coins (per `coinKillPercentVsPlayer`); the contributing bots may reclaim them. |
-| **Loot is a contributor race**| Every kill scatters the victim's configured `dropItemIds` (plus coins where the entity carries them); only damage contributors may collect, and the first eligible collider wins. Damage amount is irrelevant — only contribution counts. The contributor set is tracked uniformly for **any** victim (player, bot, resource) and includes both players and the bots that dealt damage: a contributing player collects on collision, a contributing bot has the loot transferred to it on collision. A death with no contributor drops nothing. |
-| **Kill floor**                | `coinKillMinAmount` guarantees every successful kill pays out even against a near-empty wallet. |
-| **Sinks scale with activity** | Fees burn a fraction — more activity = more burn, preventing indefinite inflation.              |
+| Rule                           | Description                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     |
+| ------------------------------ | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| **Bots are infinite mint**     | Every bot respawn resets wallet to `botSpawnCoins`. Supply bounded by player kill rate.                                                                                                                                                                                                                                                                                                                                                                                                                                                         |
+| **Players are zero-sum**       | A player kill scatters the victim's coins as a grid drop but creates no new ones — redistribution only. A player who dies to bots still drops coins (per `coinKillPercentVsPlayer`); the contributing bots may reclaim them.                                                                                                                                                                                                                                                                                                                    |
+| **Loot is a contributor race** | Every kill scatters the victim's configured `dropItemIds` (plus coins where the entity carries them); only damage contributors may collect, and the first eligible collider wins. Damage amount is irrelevant — only contribution counts. The contributor set is tracked uniformly for **any** victim (player, bot, resource) and includes both players and the bots that dealt damage: a contributing player collects on collision, a contributing bot has the loot transferred to it on collision. A death with no contributor drops nothing. |
+| **Kill floor**                 | `coinKillMinAmount` guarantees every successful kill pays out even against a near-empty wallet.                                                                                                                                                                                                                                                                                                                                                                                                                                                 |
+| **Sinks scale with activity**  | Fees burn a fraction — more activity = more burn, preventing indefinite inflation.                                                                                                                                                                                                                                                                                                                                                                                                                                                              |
 
 ---
 
@@ -123,15 +121,15 @@ All economy logic is encapsulated in a single file enforcing the single-source p
 
 ### Method Reference
 
-| Method                                | Caller                             | Description                                          |
-| ------------------------------------- | ---------------------------------- | ---------------------------------------------------- |
-| `FountainInitPlayer(player)`          | `handlers.go` on WebSocket connect | Credits `playerSpawnCoins` to new player             |
-| `FountainInitBot(bot)`                | `collision.go` on bot respawn      | Resets bot wallet to `botSpawnCoins` (infinite mint) |
-| `botCoinDropAmount(bot)`              | `collision.go handleBotDeath`      | Coin stake a dead bot scatters as a grid drop        |
-| `pvpCoinDropAmount(player)`           | `collision.go handlePlayerDeath`   | Coin stake a dead player scatters as a grid drop     |
-| `SinkRespawnCost(player)`             | `collision.go handlePlayerDeath`   | Burns `respawnCostPercent`% of player coins          |
-| `SinkPortalFee(player)`               | Portal handler                     | Burns flat `portalFee` coins on portal use           |
-| `SinkCraftingFee(player, item)`       | Craft handler                      | Burns `craftingFeePercent`% on crafting              |
+| Method                          | Caller                             | Description                                          |
+| ------------------------------- | ---------------------------------- | ---------------------------------------------------- |
+| `FountainInitPlayer(player)`    | `handlers.go` on WebSocket connect | Credits `playerSpawnCoins` to new player             |
+| `FountainInitBot(bot)`          | `collision.go` on bot respawn      | Resets bot wallet to `botSpawnCoins` (infinite mint) |
+| `botCoinDropAmount(bot)`        | `collision.go handleBotDeath`      | Coin stake a dead bot scatters as a grid drop        |
+| `pvpCoinDropAmount(player)`     | `collision.go handlePlayerDeath`   | Coin stake a dead player scatters as a grid drop     |
+| `SinkRespawnCost(player)`       | `collision.go handlePlayerDeath`   | Burns `respawnCostPercent`% of player coins          |
+| `SinkPortalFee(player)`         | Portal handler                     | Burns flat `portalFee` coins on portal use           |
+| `SinkCraftingFee(player, item)` | Craft handler                      | Burns `craftingFeePercent`% on crafting              |
 
 ### Kill Loot Logic
 
@@ -222,14 +220,14 @@ Offset  Size  Field
  15      str  itemId bytes
 ```
 
-| `fct_type` | Constant            | Color  | Display        | Status |
-| ---------- | ------------------- | ------ | -------------- | ------ |
-| `0x00`     | `FCTTypeDamage`     | Red    | `-N` HP lost   | active |
-| `0x01`     | `FCTTypeRegen`      | Green  | `+N` HP gained | active |
-| `0x02`     | `FCTTypeCoinGain`   | Yellow | `+N` coins     | retired |
-| `0x03`     | `FCTTypeCoinLoss`   | Yellow | `-N` coins     | retired |
-| `0x04`     | `FCTTypeItemGain`   | Cyan   | `+N ItemID`    | retired |
-| `0x05`     | `FCTTypeItemLoss`   | Purple | `-N ItemID`    | retired |
+| `fct_type` | Constant          | Color  | Display        | Status  |
+| ---------- | ----------------- | ------ | -------------- | ------- |
+| `0x00`     | `FCTTypeDamage`   | Red    | `-N` HP lost   | active  |
+| `0x01`     | `FCTTypeRegen`    | Green  | `+N` HP gained | active  |
+| `0x02`     | `FCTTypeCoinGain` | Yellow | `+N` coins     | retired |
+| `0x03`     | `FCTTypeCoinLoss` | Yellow | `-N` coins     | retired |
+| `0x04`     | `FCTTypeItemGain` | Cyan   | `+N ItemID`    | retired |
+| `0x05`     | `FCTTypeItemLoss` | Purple | `-N ItemID`    | retired |
 
 One uniform visibility rule: **every combat FCT (damage and regen, on any
 entity — player, bot, or resource) is broadcast with its exact amount to every

package/src/client/public/cyberia-docs/ROADMAP.md

@@ -1,6 +1,6 @@
 # Cyberia Online — Development Roadmap
 
-**Current version:** 3.3.76 | **Target milestone:** Open Alpha
+**Current version:** 3.4.0 | **Target milestone:** Open Alpha
 
 ---
 

package/src/client/public/cyberia-docs/UNDERPOST-PLATFORM.md

@@ -23,35 +23,36 @@ The platform is the operational backbone. It should stay the source of truth for
 
 `underpost` is the shared control surface for platform operations. Top-level commands (`underpost <cmd> --help` for options):
 
-| Group              | Command     | Purpose                                                       |
-| ------------------ | ----------- | ------------------------------------------------------------- |
-| **Project / repo** | `new`       | Initialize a new project, service, or configuration           |
-|                    | `clone`     | Clone a GitHub repository into the current directory          |
-|                    | `pull`      | Pull latest changes from a repository                         |
-|                    | `cmt`       | Manage commits (commit types and options)                     |
-|                    | `push`      | Push committed changes to a remote repository                 |
-|                    | `install`   | Import Underpost npm dependencies by copying                  |
-|                    | `root`      | Print the npm installation root path                          |
-| **Build / config** | `client`    | Build client assets / single replicas; sync environment ports |
-|                    | `static`    | Static build of pages, bundles, and documentation             |
-|                    | `env`       | Set env vars and config for a deploy ID                       |
-|                    | `config`    | Manage Underpost configuration via operators                  |
-|                    | `metadata`  | Import/export cluster metadata                                |
-| **Deploy / infra** | `cluster`   | Manage Kubernetes clusters (defaults to Kind init)            |
-|                    | `deploy`    | Manage deployments (defaults to development pods)             |
-|                    | `image`     | Build, save, and load Docker images into clusters             |
-|                    | `secret`    | Manage secrets across platforms                               |
-|                    | `lxd`       | Manage LXD VMs as K3s nodes (control plane / workers)         |
-|                    | `baremetal` | Bare-metal provisioning workflows                             |
-|                    | `ip`        | Show current public machine IP addresses                      |
-| **Data / ops**     | `db`        | Database backup / restore and related operations              |
-|                    | `cron`      | Run cron jobs or generate/apply K8s CronJob manifests         |
-|                    | `fs`        | File storage (defaults to upload)                             |
-|                    | `monitor`   | Health-server monitoring for deployments                      |
-|                    | `ssh`       | Manage SSH credentials and sessions for cluster nodes         |
-|                    | `run`       | Run scripts via named runners                                 |
-|                    | `test`      | Run the test suites                                           |
-|                    | `release`   | Release orchestrator for building and shipping CLI versions   |
+| Group              | Command          | Purpose                                                       |
+| ------------------ | ---------------- | ------------------------------------------------------------- |
+| **Project / repo** | `new`            | Initialize a new project, service, or configuration           |
+|                    | `clone`          | Clone a GitHub repository into the current directory          |
+|                    | `pull`           | Pull latest changes from a repository                         |
+|                    | `cmt`            | Manage commits (commit types and options)                     |
+|                    | `push`           | Push committed changes to a remote repository                 |
+|                    | `install`        | Import Underpost npm dependencies by copying                  |
+|                    | `root`           | Print the npm installation root path                          |
+| **Build / config** | `client`         | Build client assets / single replicas; sync environment ports |
+|                    | `static`         | Static build of pages, bundles, and documentation             |
+|                    | `env`            | Set env vars and config for a deploy ID                       |
+|                    | `config`         | Manage Underpost configuration via operators                  |
+|                    | `metadata`       | Import/export cluster metadata                                |
+| **Deploy / infra** | `cluster`        | Manage Kubernetes clusters (defaults to Kind init)            |
+|                    | `deploy`         | Manage deployments (defaults to development pods)             |
+|                    | `image`          | Build, save, and load Docker images into clusters             |
+|                    | `secret`         | Manage secrets across platforms                               |
+|                    | `lxd`            | Manage LXD VMs as K3s nodes (control plane / workers)         |
+|                    | `baremetal`      | Bare-metal provisioning workflows                             |
+|                    | `ip`             | Show current public machine IP addresses                      |
+| **Data / ops**     | `db`             | Database backup / restore and related operations              |
+|                    | `cron`           | Run cron jobs or generate/apply K8s CronJob manifests         |
+|                    | `fs`             | File storage (defaults to upload)                             |
+|                    | `monitor`        | Health-server monitoring for deployments                      |
+|                    | `ssh`            | Manage SSH credentials and sessions for cluster nodes         |
+|                    | `run`            | Run scripts via named runners                                 |
+|                    | `test`           | Run the test suites                                           |
+|                    | `socketsecurity` | Dependency and source code security audit, Socket patches     |
+|                    | `release`        | Release orchestrator for building and shipping CLI versions   |
 
 Cyberia-specific operations belong in `cyberia`, not in parallel platform commands. Use the base CLI for infrastructure and delivery, then layer Cyberia workflows on top.
 

package/src/client/public/cyberia-docs/WHITE-PAPER.md

@@ -18,7 +18,7 @@ _Stackable Rendering Layers as a Unified Tokenized Reality_
 
 ---
 
-**Version:** 3.3.76 | **Status:** Draft | **Authors:** Underpost Engineering
+**Version:** 3.4.0 | **Status:** Draft | **Authors:** Underpost Engineering
 
 ---
 

package/src/client/ssr/body/UnderpostDefaultSplashScreen.js

@@ -1,3 +1,6 @@
+// Skeleton of the Underpost app shell as it first paints: `barMode: 'top-bottom-bar'` with a left
+// `slide-menu` (closed). Keep the boxes on the 50px grid the live bars use so nothing jumps when
+// the shell replaces this.
 SSRComponent = ({ backgroundImage }) => html`
   ${backgroundImage
     ? html`<style>
@@ -7,38 +10,56 @@ SSRComponent = ({ backgroundImage }) => html`
       </style>`
     : ''}
   <style>
-    .ssr-top-bar {
+    body {
+      background: #222121;
+    }
+    .ssr-top-bar,
+    .ssr-bottom-bar {
       background: #121212;
-      height: 100px;
+      width: 100%;
+      height: 50px;
+      left: 0px;
+    }
+    .ssr-top-bar {
+      top: 0px;
+    }
+    .ssr-bottom-bar {
+      bottom: 0px;
     }
     .ssr-btn {
+      top: 5px;
       height: 40px;
       width: 40px;
     }
-    .ssr-btn-0 {
-      top: 55px;
+    /* Top bar: app icon, then the search box beside it, profile on the right. */
+    .ssr-btn-app-icon {
+      left: 5px;
+    }
+    .ssr-btn-profile {
+      right: 5px;
+      border-radius: 50%;
+    }
+    .ssr-top-bar .ssr-search-box {
+      left: 55px;
+    }
+    /* Bottom bar: the menu hamburger on the left; left/right/home/theme/lang on the right. */
+    .ssr-btn-menu {
+      left: 5px;
+    }
+    .ssr-btn-nav-0 {
       right: 5px;
     }
-    .ssr-btn-1 {
-      top: 55px;
+    .ssr-btn-nav-1 {
       right: 55px;
     }
-    .ssr-btn-2 {
-      top: 55px;
+    .ssr-btn-nav-2 {
       right: 105px;
     }
-    .ssr-btn-3 {
-      top: 55px;
-      left: 5px;
-    }
-    .ssr-btn-4 {
-      top: 5px;
-      left: 5px;
+    .ssr-btn-nav-3 {
+      right: 155px;
     }
-    .ssr-btn-5 {
-      top: 5px;
-      right: 5px;
-      border-radius: 50%;
+    .ssr-btn-nav-4 {
+      right: 205px;
     }
     .ssr-loader {
       width: auto;
@@ -72,19 +93,27 @@ SSRComponent = ({ backgroundImage }) => html`
   </style>
   <div class="ssr-background-image"></div>
   <div class="ssr-abs ssr-background" style="opacity: 1">
-    <div class="ssr-in ssr-top-bar">
-      ${new Array(6)
-        .fill()
+    <div class="ssr-abs ssr-top-bar">
+      ${['app-icon', 'profile']
         .map(
-          (v, i) =>
-            html`<div class="ssr-abs ssr-btn ssr-btn-${i}">
+          (id) =>
+            html`<div class="ssr-abs ssr-btn ssr-btn-${id}">
               <div class="ssr-shimmer-dark"></div>
             </div>`,
         )
         .join('')}
-
       <div class="ssr-abs ssr-search-box"><div class="ssr-shimmer-dark-search-box"></div></div>
     </div>
+    <div class="ssr-abs ssr-bottom-bar">
+      ${['menu', 'nav-0', 'nav-1', 'nav-2', 'nav-3', 'nav-4']
+        .map(
+          (id) =>
+            html`<div class="ssr-abs ssr-btn ssr-btn-${id}">
+              <div class="ssr-shimmer-dark"></div>
+            </div>`,
+        )
+        .join('')}
+    </div>
     <div class="ssr-abs ssr-center ssr-loader"><div class="loader"></div></div>
   </div>
 `;

package/src/client/ssr/head/Css.js

@@ -146,15 +146,17 @@ SSRComponent = () => html`
         background-position: 80px 0;
       }
     }
+    /* Dark bars (#121212): a translucent white band reads as a moving highlight on them, where
+       near-black stops only darkened the bar and hid the animation. */
     .ssr-shimmer-dark {
       height: 100%;
       background-image: linear-gradient(
         to right,
-        rgb(5, 5, 5, 0.5) 0%,
-        rgba(10, 10, 10, 0.5) 30%,
-        rgba(15, 15, 15, 0.5) 40%,
-        rgba(10, 10, 10, 0.5) 70%,
-        rgba(5, 5, 5, 0.5) 100%
+        rgba(255, 255, 255, 0.03) 0%,
+        rgba(255, 255, 255, 0.07) 30%,
+        rgba(255, 255, 255, 0.16) 45%,
+        rgba(255, 255, 255, 0.07) 60%,
+        rgba(255, 255, 255, 0.03) 100%
       );
       animation: ssr-shimmer-dark 3s linear infinite;
     }
@@ -170,11 +172,11 @@ SSRComponent = () => html`
       height: 100%;
       background-image: linear-gradient(
         to right,
-        rgb(5, 5, 5, 0.5) 0%,
-        rgba(10, 10, 10, 0.5) 30%,
-        rgba(15, 15, 15, 0.5) 40%,
-        rgba(10, 10, 10, 0.5) 70%,
-        rgba(5, 5, 5, 0.5) 100%
+        rgba(255, 255, 255, 0.03) 0%,
+        rgba(255, 255, 255, 0.07) 30%,
+        rgba(255, 255, 255, 0.16) 45%,
+        rgba(255, 255, 255, 0.07) 60%,
+        rgba(255, 255, 255, 0.03) 100%
       );
       animation: ssr-shimmer-dark-search-box 3s linear infinite;
     }

package/src/client/ssr/views/Cyberia404.js

@@ -9,12 +9,16 @@
 //   /TEST/<bad>   → the TEST 404   (return → /TEST/)
 //   /<bad>        → the default 404 (return → /)
 //
+// The page never touches the URL. The gateway delivers it by intercepting the
+// workload's 404, so the address bar must keep the URI the client requested —
+// rewriting it to `<base>/404` would present the status page as a destination.
+//
 // Base path resolution (first hit wins):
 //   1. window.CYBERIA_BASE_PATH — injected by the serving layer from the
 //      deployment's CYBERIA_BASE_PATH env ("/FOREST", "/TEST", "" for default).
 //      Authoritative: only the runtime knows its own instance prefix, since the
 //      reverse proxy strips it before the backend sees the request.
-//   2. Fallback: the first URL path segment, minus a trailing "/404".
+//   2. Fallback: the first URL path segment (none for a bare "/404").
 //
 // Visual contract: cyberpunk-MMORPG pixel art — Press Start 2P / VT323, neon
 // cyan/magenta on near-black, hard edges, scanlines, RGB-split glitch. Fully
@@ -25,8 +29,7 @@ const s = (el) => document.querySelector(el);
 const append = (el, htmlStr) => s(el).insertAdjacentHTML('beforeend', htmlStr);
 
 // The instance sub-path this 404 belongs to ("/FOREST", "/TEST", or "" default).
-// Prefer the injected value; fall back to the first URL segment (dropping a
-// trailing "/404" so the page is idempotent once already normalised).
+// Prefer the injected value; fall back to the first URL segment.
 const basePath = () => {
   const injected = window.CYBERIA_BASE_PATH;
   if (typeof injected === 'string') return injected === '/' ? '' : injected.replace(/\/$/, '');
@@ -35,7 +38,6 @@ const basePath = () => {
 };
 
 const homeHref = () => `${basePath()}/`;
-const notFoundHref = () => `${basePath()}/404`;
 
 // Instance label shown on the badge — the code the sub-path maps to, or MAIN.
 const instanceLabel = () => {
@@ -44,11 +46,6 @@ const instanceLabel = () => {
 };
 
 const main = () => {
-  // Normalise the URL to <base>/404 so a bad path reads as the instance's 404
-  // (e.g. /FOREST/nope → /FOREST/404) without a server round-trip or a loop.
-  const target = notFoundHref();
-  if (window.location.pathname !== target) window.history.replaceState(null, '', target + window.location.search);
-
   append(
     'body',
     html`
@@ -155,7 +152,7 @@ const main = () => {
           text-align: center;
           padding: 24px;
         }
-        .badge {
+        .status-badge {
           display: inline-flex;
           align-items: center;
           gap: 8px;
@@ -168,7 +165,7 @@ const main = () => {
           margin-bottom: 26px;
           box-shadow: 0 0 12px rgba(34, 211, 238, 0.35);
         }
-        .badge .dot {
+        .status-badge .dot {
           width: 8px;
           height: 8px;
           background: var(--green);
@@ -296,7 +293,7 @@ const main = () => {
       </style>
       <div class="grid"></div>
       <main class="wrap">
-        <span class="badge"><span class="dot"></span> INSTANCE ${instanceLabel()}</span>
+        <span class="status-badge"><span class="dot"></span> INSTANCE ${instanceLabel()}</span>
         <div class="code" data-text="404">404</div>
         <div class="headline">SIGNAL LOST</div>
         <p class="sub">
@@ -322,7 +319,6 @@ SSRComponent = () =>
       const append = ${append};
       const basePath = ${basePath};
       const homeHref = ${homeHref};
-      const notFoundHref = ${notFoundHref};
       const instanceLabel = ${instanceLabel};
       const main = ${main};
       window.onload = main;

package/src/client/ssr/views/NotFound.js

@@ -0,0 +1,75 @@
+// NotFound.js — the default 404 status page for PWA clients.
+//
+// Built under `status-pages/404/` and served by the gateway, which intercepts the
+// runtime's bare 404 and answers with this document. The request URI is left
+// exactly as the client sent it: the page renders in place and never navigates.
+
+const s = (el) => document.querySelector(el);
+
+const append = (el, html) => s(el).insertAdjacentHTML('beforeend', html);
+
+const getLang = () =>
+  (localStorage.getItem('lang') || navigator.language || navigator.userLanguage || s('html').lang)
+    .slice(0, 2)
+    .toLowerCase();
+
+const main = () => {
+  const Translate = {
+    Data: {
+      ['page-not-found']: {
+        en: 'Page not found',
+        es: 'Página no encontrada',
+      },
+      ['back']: {
+        en: 'Back to <br>  homepage',
+        es: 'Volver a  <br> la pagina principal',
+      },
+    },
+    instance: function (id) {
+      return this.Data[id][getLang()] ? this.Data[id][getLang()] : this.Data[id]['en'];
+    },
+  };
+  const icon = html`<svg xmlns="http://www.w3.org/2000/svg" width="80" height="80" viewBox="0 0 24 24">
+    <path
+      fill="currentColor"
+      d="M15.097 5.904A6.5 6.5 0 0 0 4 10.504l.001 1h-2v-1a8.5 8.5 0 1 1 15.176 5.258l5.344 5.345l-1.414 1.414l-5.344-5.345A8.48 8.48 0 0 1 10.5 19h-1v-2h1a6.5 6.5 0 0 0 4.596-11.096M1.672 13.257L4.5 16.086l2.829-2.829l1.414 1.415L5.915 17.5l2.828 2.828l-1.414 1.415L4.5 18.914l-2.828 2.829l-1.414-1.415L3.086 17.5L.258 14.672z"
+    />
+  </svg>`;
+
+  append(
+    'body',
+    html` <style>
+        body {
+          font-family: arial;
+          font-size: 20px;
+          background-color: #d8d8d8;
+          color: #333;
+        }
+        a {
+          color: black;
+        }
+      </style>
+
+      <div class="abs center" style="top: 45%">
+        ${icon}
+        <br />
+        <br />
+        <span class="bold">404</span>
+        <br />
+        <br />${Translate.instance('page-not-found')} <br />
+        <br />
+        <a target="_top" href="${location.origin}">${Translate.instance('back')}</a>
+      </div>`,
+  );
+};
+
+SSRComponent = () =>
+  html`<script>
+    {
+      const s = ${s};
+      const append = ${append};
+      const getLang = ${getLang};
+      const main = ${main};
+      window.onload = main;
+    }
+  </script>`;

package/src/client-builder/client-bundle.js

@@ -320,8 +320,8 @@ const pullClientBundle = async ({ deployId, hosts = [], dev = false }) => {
 
     // The previous deployment's document root can be owned by the web server user, so the
     // replace goes through sudo; the extracted tree this process just wrote does not.
-    shellExec(`sudo rm -rf ${publicPath}`);
-    if (routePath !== '/') shellExec(`sudo mkdir -p public/${host}`);
+    shellExec(`sudo rm -rf ${shellArgumentFactory(publicPath)}`);
+    if (routePath !== '/') shellExec(`sudo mkdir -p ${shellArgumentFactory(`public/${host}`)}`);
     fs.copySync(outputPath, publicPath);
 
     logger.info('pulled bundle', { host, routePath, publicPath });

package/src/index.js

@@ -25,6 +25,7 @@ import UnderpostPackage from './cli/package.js';
 import UnderpostRepository from './cli/repository.js';
 import UnderpostRun from './cli/run.js';
 import UnderpostSecret from './cli/secrets.js';
+import UnderpostSocketSecurity from './cli/socketsecurity.js';
 import UnderpostSSH from './cli/ssh.js';
 import UnderpostState from './cli/state.js';
 import UnderpostStatic from './cli/static.js';
@@ -52,7 +53,7 @@ class Underpost {
    * @type {String}
    * @memberof Underpost
    */
-  static version = 'v3.3.76';
+  static version = 'v3.4.0';
 
   /**
    * Required Node.js major version
@@ -384,6 +385,16 @@ class Underpost {
   static get package() {
     return UnderpostPackage.API;
   }
+
+  /**
+   * Socket supply-chain security cli API
+   * @static
+   * @type {UnderpostSocketSecurity.API}
+   * @memberof Underpost
+   */
+  static get socketSecurity() {
+    return UnderpostSocketSecurity.API;
+  }
 }
 
 if (!process.version || !process.version.startsWith(`${Underpost.majorNodejsVersion}.`))
@@ -422,6 +433,7 @@ export {
   UnderpostRepository,
   UnderpostRun,
   UnderpostSecret,
+  UnderpostSocketSecurity,
   UnderpostSSH,
   UnderpostState,
   UnderpostDns,

package/src/runtime/engine-cyberia/Dockerfile

@@ -6,7 +6,7 @@
 # Stage 1 — builder: clone the private deploy, build it, then scrub secrets.
 # ---------------------------------------------------------------------------
 FROM rockylinux/rockylinux:9 AS builder
-ARG UNDERPOST_VERSION=3.3.76
+ARG UNDERPOST_VERSION=3.4.0
 # Pin Node to an exact patch: dnf's nodejs:24 module lags (24.14.1) while
 # underpost's dependencies require >=24.15.0, so install the official binary.
 ARG NODE_VERSION=24.15.0

package/src/runtime/engine-cyberia/Dockerfile.dev

@@ -6,7 +6,7 @@
 # Stage 1 — builder: clone the private deploy, build it, then scrub secrets.
 # ---------------------------------------------------------------------------
 FROM rockylinux/rockylinux:9 AS builder
-ARG UNDERPOST_VERSION=3.3.76
+ARG UNDERPOST_VERSION=3.4.0
 # Pin Node to an exact patch: dnf's nodejs:24 module lags (24.14.1) while
 # underpost's dependencies require >=24.15.0, so install the official binary.
 ARG NODE_VERSION=24.15.0

package/src/runtime/engine-cyberia/Dockerfile.test

@@ -6,7 +6,7 @@
 # Stage 1 — builder: clone the private deploy, build it, then scrub secrets.
 # ---------------------------------------------------------------------------
 FROM rockylinux/rockylinux:9 AS builder
-ARG UNDERPOST_VERSION=3.3.76
+ARG UNDERPOST_VERSION=3.4.0
 # Pin Node to an exact patch: dnf's nodejs:24 module lags (24.14.1) while
 # underpost's dependencies require >=24.15.0, so install the official binary.
 ARG NODE_VERSION=24.15.0

package/src/runtime/engine-cyberia/compose.env

@@ -24,6 +24,7 @@ IPFS_CLUSTER_IMAGE=ipfs/ipfs-cluster:latest
 # The engine-cyberia image ships only the underpost CLI; at start it runs the
 # `underpost start --build` bootstrap, which clones ${GITHUB_USERNAME}/engine-cyberia.
 GITHUB_USERNAME=underpostnet
+GITHUB_ORG_NAME=underpost
 GITHUB_TOKEN=change_me_private_repo_token
 
 # --- MongoDB (translation of Secret mongodb-secret) --------------------------