@underpostnet/cyberia 3.3.77 → 3.4.0

package/deploy/cyberia-client/deploy.sh

@@ -8,6 +8,8 @@ source "$SCRIPT_DIR/../lib/host.sh"
 DEPLOY_ID=dd-cyberia
 INSTANCE_ID=mmo-client
 TARGET_NODE="${TARGET_NODE:-$WORKER_NODE}"
+ENGINE_SRC_REPO="${ENGINE_SRC_REPO:-underpostnet/engine-test-cyberia}"
+ENGINE_SRC_PRIVATE_REPO="${ENGINE_SRC_PRIVATE_REPO:-underpostnet/engine-private}"
 
 main() {
     deploy_start "Starting remote deploy"
@@ -15,24 +17,24 @@ main() {
     prepare_host "$ENGINE_ROOT"
 
     deploy_step "Build $DEPLOY_ID configuration" \
-        sudo -n -- /bin/bash -lc \
-        "cd $ENGINE_ROOT && node bin/build $DEPLOY_ID --conf"
+    sudo -n -- /bin/bash -lc \
+    "cd $ENGINE_ROOT && node bin/build $DEPLOY_ID --conf"
 
     deploy_step "Wait for target node readiness" \
-        sudo -n -- /bin/bash -lc \
-        "cd $ENGINE_ROOT && kubectl wait --for=condition=Ready node/${TARGET_NODE} --timeout=2m"
+    sudo -n -- /bin/bash -lc \
+    "cd $ENGINE_ROOT && kubectl wait --for=condition=Ready node/${TARGET_NODE} --timeout=2m"
 
     deploy_step "Wait for ingress rollout" \
-        sudo -n -- /bin/bash -lc \
-        "cd $ENGINE_ROOT && kubectl rollout status deployment/underpost-ingress -n default --timeout=5m"
+    sudo -n -- /bin/bash -lc \
+    "cd $ENGINE_ROOT && kubectl rollout status deployment/underpost-ingress -n default --timeout=5m"
 
     deploy_step "Wait for gateway rollout" \
-        sudo -n -- /bin/bash -lc \
-        "cd $ENGINE_ROOT && kubectl rollout status deployment/underpost-gateway -n default --timeout=5m"
+    sudo -n -- /bin/bash -lc \
+    "cd $ENGINE_ROOT && kubectl rollout status deployment/underpost-gateway -n default --timeout=5m"
 
     deploy_step "Deploy $DEPLOY_ID $INSTANCE_ID instance" \
-        sudo -n -- /bin/bash -lc \
-        "cd $ENGINE_ROOT && node bin run instance \
+    sudo -n -- /bin/bash -lc \
+    "cd $ENGINE_ROOT && node bin run instance \
           --kubeadm \
           ${TARGET_NODE:+--node-name ${TARGET_NODE}} \
           --gateway-api \
@@ -40,7 +42,7 @@ main() {
           --ingress-node ${INGRESS_NODE} \
           --ssh-key-path ${DEPLOY_SSH_KEY_PATH} \
           --deploy-id $DEPLOY_ID \
-          --instance-id $INSTANCE_ID"
+    --instance-id $INSTANCE_ID"
 }
 
 main "$@"

package/deploy/cyberia-server/deploy.sh

@@ -8,6 +8,8 @@ source "$SCRIPT_DIR/../lib/host.sh"
 DEPLOY_ID=dd-cyberia
 INSTANCE_ID=mmo-server
 TARGET_NODE="${TARGET_NODE:-$WORKER_NODE}"
+ENGINE_SRC_REPO="${ENGINE_SRC_REPO:-underpostnet/engine-test-cyberia}"
+ENGINE_SRC_PRIVATE_REPO="${ENGINE_SRC_PRIVATE_REPO:-underpostnet/engine-private}"
 
 main() {
     deploy_start "Starting remote deploy"
@@ -15,24 +17,24 @@ main() {
     prepare_host "$ENGINE_ROOT"
 
     deploy_step "Build $DEPLOY_ID configuration" \
-        sudo -n -- /bin/bash -lc \
-        "cd $ENGINE_ROOT && node bin/build $DEPLOY_ID --conf"
+    sudo -n -- /bin/bash -lc \
+    "cd $ENGINE_ROOT && node bin/build $DEPLOY_ID --conf"
 
     deploy_step "Wait for target node readiness" \
-        sudo -n -- /bin/bash -lc \
-        "cd $ENGINE_ROOT && kubectl wait --for=condition=Ready node/${TARGET_NODE} --timeout=2m"
+    sudo -n -- /bin/bash -lc \
+    "cd $ENGINE_ROOT && kubectl wait --for=condition=Ready node/${TARGET_NODE} --timeout=2m"
 
     deploy_step "Wait for ingress rollout" \
-        sudo -n -- /bin/bash -lc \
-        "cd $ENGINE_ROOT && kubectl rollout status deployment/underpost-ingress -n default --timeout=5m"
+    sudo -n -- /bin/bash -lc \
+    "cd $ENGINE_ROOT && kubectl rollout status deployment/underpost-ingress -n default --timeout=5m"
 
     deploy_step "Wait for gateway rollout" \
-        sudo -n -- /bin/bash -lc \
-        "cd $ENGINE_ROOT && kubectl rollout status deployment/underpost-gateway -n default --timeout=5m"
+    sudo -n -- /bin/bash -lc \
+    "cd $ENGINE_ROOT && kubectl rollout status deployment/underpost-gateway -n default --timeout=5m"
 
     deploy_step "Deploy $DEPLOY_ID $INSTANCE_ID instance" \
-        sudo -n -- /bin/bash -lc \
-        "cd $ENGINE_ROOT && node bin run instance \
+    sudo -n -- /bin/bash -lc \
+    "cd $ENGINE_ROOT && node bin run instance \
           --kubeadm \
           ${TARGET_NODE:+--node-name ${TARGET_NODE}} \
           --gateway-api \
@@ -40,7 +42,7 @@ main() {
           --ingress-node ${INGRESS_NODE} \
           --ssh-key-path ${DEPLOY_SSH_KEY_PATH} \
           --deploy-id $DEPLOY_ID \
-          --instance-id $INSTANCE_ID"
+    --instance-id $INSTANCE_ID"
 }
 
 main "$@"

package/deploy/dd-cyberia/sync-deploy.sh

@@ -23,13 +23,9 @@ UNDERPOST_ASSETS=src/client/public/underpost
 # from source, which is the behaviour this script had before bundle mode existed.
 BUNDLE_MODE="${BUNDLE_MODE:-1}"
 BUNDLE_SPLIT="${BUNDLE_SPLIT:-8}"
-# Where push-bundle records the uploaded keys, relative to a conf checkout root.
-BUNDLE_MANIFEST_PATH="conf/$DEPLOY_ID/storage.bundle.json"
 # `mv` into a directory that already exists nests the checkout inside it rather than replacing
 # it, and the pod would then load whatever conf the image carried.
 POD_SRC_PRIVATE_DIR="${POD_SRC_PRIVATE_REPO##*/}"
-# Sibling of the engine checkout, so the publish work tree is never part of it.
-POD_PRIVATE_CHECKOUT="../$POD_SRC_PRIVATE_DIR"
 
 main() {
     deploy_start "Starting remote sync and deploy"
@@ -102,38 +98,21 @@ main() {
 
     # Follows the manifest step: the client renders from the conf.ssr.json that build-manifest
     # writes, so a bundle pushed before it would ship the previous SSR views. The uploaded keys
-    # are recorded in engine-private/conf/$DEPLOY_ID/storage.bundle.json, which the pod reads
-    # back through its own conf repository.
+    # are recorded in engine-private/conf/$DEPLOY_ID/storage.bundle.json.
     if [ "$BUNDLE_MODE" = "1" ]; then
         deploy_step "Push $DEPLOY_ID client bundle" \
             sudo -n -- /bin/bash -lc \
             "cd $ENGINE_ROOT && node bin run push-bundle \
               --deploy-id $DEPLOY_ID \
               --split $BUNDLE_SPLIT"
-
-        # push-bundle records the keys in the host's own conf checkout, but the pod replaces
-        # ./engine-private with a clone of its conf repository — so the manifest is published
-        # there too, or the pod reads an empty one and restores nothing. Cloning from the engine
-        # root keeps `underpost clone` reading this checkout's credentials, and the work tree is
-        # then moved out so it is never part of the engine checkout.
-        deploy_step "Stage $DEPLOY_ID bundle manifest" \
-            sudo -n -- /bin/bash -lc \
-            "cd $ENGINE_ROOT && rm -rf $POD_PRIVATE_CHECKOUT \
-              && node bin clone $POD_SRC_PRIVATE_REPO \
-              && mv ./$POD_SRC_PRIVATE_DIR $POD_PRIVATE_CHECKOUT \
-              && mkdir -p $POD_PRIVATE_CHECKOUT/conf/$DEPLOY_ID \
-              && cp ./engine-private/$BUNDLE_MANIFEST_PATH $POD_PRIVATE_CHECKOUT/$BUNDLE_MANIFEST_PATH"
-
-        # A rerun that uploads the same keys leaves the manifest byte-identical, and committing
-        # nothing fails the step.
-        if [ "$(has_changes $POD_PRIVATE_CHECKOUT "$ENGINE_ROOT")" = "1" ]; then
-            deploy_step "Publish $DEPLOY_ID bundle manifest" \
-                sudo -n -- /bin/bash -lc \
-                "cd $ENGINE_ROOT && node bin cmt $POD_PRIVATE_CHECKOUT feat 'Update $DEPLOY_ID bundle manifest' \
-                  && node bin push $POD_PRIVATE_CHECKOUT $POD_SRC_PRIVATE_REPO"
-        fi
     fi
 
+    # The pod replaces ./engine-private with a clone of its conf repository, so this publishes
+    # the deploy's conf there — the bundle manifest included — before the pod starts.
+    deploy_step "Build $DEPLOY_ID configuration" \
+        sudo -n -- /bin/bash -lc \
+        "cd $ENGINE_ROOT && node bin/build $DEPLOY_ID --conf"
+
     # Two commands, one bootstrap: `pod_bootstrap_cmd` replaces the image's engine with this
     # deploy's source and repoints the global bin at it — without that, the first step needing
     # the current CLI answered `unknown command 'app'`. `start --build` then owns the rest

package/deploy/lib/config.sh

@@ -26,4 +26,4 @@ DEPLOY_SSH_KEY_PATH="${DEPLOY_SSH_KEY_PATH:-/home/dd/tmp/897as9dxhaskd9}"
 
 # The published image the WordPress deploys run. Pinned rather than derived from the checkout's
 # version: a tag is only deployable once the release workflow has published it.
-DEPLOY_WP_IMAGE="${DEPLOY_WP_IMAGE:-underpost/wp:v3.3.77}"
+DEPLOY_WP_IMAGE="${DEPLOY_WP_IMAGE:-underpost/wp:v3.4.0}"

package/deploy/lib/github-actions-logging.sh

@@ -537,8 +537,9 @@ run_quiet() {
 
     # stderr is duplicated: on its own for the native error and stack trace, and
     # into the merged stream so both the debug log and the filter see it in
-    # chronological order with stdout.
-    tee -a "$error_log" <"$fifo_dir/stderr" >"$fifo_dir/merged" &
+    # chronological order with stdout. tee opens the merged writer first: if a short command
+    # closes the stream before it, awk reads EOF and tee blocks until the drain kills it.
+    tee -a "$error_log" >"$fifo_dir/merged" <"$fifo_dir/stderr" &
     stderr_pid=$!
 
     "$@" >"$fifo_dir/merged" 2>"$fifo_dir/stderr" || status=$?

package/deploy/pwa-microservices-template/deploy.sh

@@ -11,6 +11,12 @@ REPO_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)"
 
 DEPLOY_ID=dd-github-pages
 
+# `bin new --default-conf --conf-workflow-id $DEPLOY_ID` (src/cli/repository.js) keys the
+# generated conf off this same variable, defaulting to underpostnet when unset — kept in step so
+# a checkout under any GitHub owner (underpost, underpostnet, ...) builds and uploads its own
+# `<owner>.github.io` pages instead of always the default owner's.
+GITHUB_PAGES_HOST="${GITHUB_USERNAME:-underpostnet}.github.io"
+
 main() {
     deploy_start "Starting github pages deploy"
 
@@ -41,7 +47,7 @@ main() {
         node bin app load --env production --args deploy-id=$DEPLOY_ID
 
     deploy_step "Build $DEPLOY_ID client" \
-        env NODE_ENV=production node bin client $DEPLOY_ID '' underpostnet.github.io /pwa-microservices-template-ghpkg
+        env NODE_ENV=production node bin client $DEPLOY_ID '' $GITHUB_PAGES_HOST /pwa-microservices-template-ghpkg
 }
 
 main "$@"

package/deployment.yaml

@@ -20,7 +20,7 @@ spec:
     spec:
       containers:
         - name: dd-cyberia-development-blue
-          image: underpost/underpost-engine:v3.3.77
+          image: underpost/underpost-engine:v3.4.0
           imagePullPolicy: IfNotPresent
           envFrom:
             - secretRef:

package/docker-compose.yml

@@ -135,7 +135,7 @@ services:
   # server starts but rejects connections until seeded). Serves REST/WS on 4005
   # and the engine gRPC data service on 50051.
   engine-cyberia-runtime:
-    image: ${ENGINE_CYBERIA_IMAGE:-underpost/engine-cyberia-dev}:${ENGINE_CYBERIA_TAG:-v3.3.77}
+    image: ${ENGINE_CYBERIA_IMAGE:-underpost/engine-cyberia-dev}:${ENGINE_CYBERIA_TAG:-v3.4.0}
     container_name: dd-cyberia-engine
     command:
       - /bin/sh
@@ -190,7 +190,7 @@ services:
   # gateway on host port 8081, so one port can route every instance path.
 
   cyberia-server-runtime:
-    image: ${CYBERIA_SERVER_IMAGE:-underpost/cyberia-server-dev}:${CYBERIA_SERVER_TAG:-v3.3.77}
+    image: ${CYBERIA_SERVER_IMAGE:-underpost/cyberia-server-dev}:${CYBERIA_SERVER_TAG:-v3.4.0}
     container_name: dd-cyberia-server
     environment:
       INSTANCE_CODE: amethyst-strata-expansion
@@ -228,7 +228,7 @@ services:
     restart: unless-stopped
 
   cyberia-server-forest:
-    image: ${CYBERIA_SERVER_IMAGE:-underpost/cyberia-server-dev}:${CYBERIA_SERVER_TAG:-v3.3.77}
+    image: ${CYBERIA_SERVER_IMAGE:-underpost/cyberia-server-dev}:${CYBERIA_SERVER_TAG:-v3.4.0}
     container_name: dd-cyberia-server-forest
     environment:
       INSTANCE_CODE: FOREST
@@ -266,7 +266,7 @@ services:
     restart: unless-stopped
 
   cyberia-server-test:
-    image: ${CYBERIA_SERVER_IMAGE:-underpost/cyberia-server-dev}:${CYBERIA_SERVER_TAG:-v3.3.77}
+    image: ${CYBERIA_SERVER_IMAGE:-underpost/cyberia-server-dev}:${CYBERIA_SERVER_TAG:-v3.4.0}
     container_name: dd-cyberia-server-test
     environment:
       INSTANCE_CODE: TEST
@@ -315,7 +315,7 @@ services:
   #   cyberia-server-test   -> cyberia-client-test
 
   cyberia-client-runtime:
-    image: ${CYBERIA_CLIENT_IMAGE:-underpost/cyberia-client-dev}:${CYBERIA_CLIENT_TAG:-v3.3.77}
+    image: ${CYBERIA_CLIENT_IMAGE:-underpost/cyberia-client-dev}:${CYBERIA_CLIENT_TAG:-v3.4.0}
     container_name: dd-cyberia-client
     environment:
       CYBERIA_PORT: '8081'
@@ -340,7 +340,7 @@ services:
     restart: unless-stopped
 
   cyberia-client-forest:
-    image: ${CYBERIA_CLIENT_IMAGE:-underpost/cyberia-client-dev}:${CYBERIA_CLIENT_TAG:-v3.3.77}
+    image: ${CYBERIA_CLIENT_IMAGE:-underpost/cyberia-client-dev}:${CYBERIA_CLIENT_TAG:-v3.4.0}
     container_name: dd-cyberia-client-forest
     environment:
       CYBERIA_PORT: '8081'
@@ -365,7 +365,7 @@ services:
     restart: unless-stopped
 
   cyberia-client-test:
-    image: ${CYBERIA_CLIENT_IMAGE:-underpost/cyberia-client-dev}:${CYBERIA_CLIENT_TAG:-v3.3.77}
+    image: ${CYBERIA_CLIENT_IMAGE:-underpost/cyberia-client-dev}:${CYBERIA_CLIENT_TAG:-v3.4.0}
     container_name: dd-cyberia-client-test
     environment:
       CYBERIA_PORT: '8081'

package/docs/coverage/cyberia/api/cyberia-instance/cyberia-fallback-capture.js.html

@@ -1576,7 +1576,7 @@ export {
             <div class='footer quiet pad2 space-top1 center small'>
                 Code coverage generated by
                 <a href="https://istanbul.js.org/" target="_blank" rel="noopener noreferrer">istanbul</a>
-                at 2026-09-13T20:21:13.226Z
+                at 2026-09-15T22:49:07.006Z
             </div>
         <script src="../../prettify.js"></script>
         <script>

package/docs/coverage/cyberia/api/cyberia-instance/index.html

@@ -101,7 +101,7 @@
             <div class='footer quiet pad2 space-top1 center small'>
                 Code coverage generated by
                 <a href="https://istanbul.js.org/" target="_blank" rel="noopener noreferrer">istanbul</a>
-                at 2026-09-13T20:21:13.226Z
+                at 2026-09-15T22:49:07.006Z
             </div>
         <script src="../../prettify.js"></script>
         <script>

package/docs/coverage/cyberia/api/cyberia-server-defaults/cyberia-server-defaults.js.html

@@ -4123,7 +4123,7 @@ export function fillInstanceConfDefaults(conf = {}) {
             <div class='footer quiet pad2 space-top1 center small'>
                 Code coverage generated by
                 <a href="https://istanbul.js.org/" target="_blank" rel="noopener noreferrer">istanbul</a>
-                at 2026-09-13T20:21:13.226Z
+                at 2026-09-15T22:49:07.006Z
             </div>
         <script src="../../prettify.js"></script>
         <script>

package/docs/coverage/cyberia/api/cyberia-server-defaults/index.html

@@ -101,7 +101,7 @@
             <div class='footer quiet pad2 space-top1 center small'>
                 Code coverage generated by
                 <a href="https://istanbul.js.org/" target="_blank" rel="noopener noreferrer">istanbul</a>
-                at 2026-09-13T20:21:13.226Z
+                at 2026-09-15T22:49:07.006Z
             </div>
         <script src="../../prettify.js"></script>
         <script>

package/docs/coverage/cyberia/api/object-layer/index.html

@@ -101,7 +101,7 @@
             <div class='footer quiet pad2 space-top1 center small'>
                 Code coverage generated by
                 <a href="https://istanbul.js.org/" target="_blank" rel="noopener noreferrer">istanbul</a>
-                at 2026-09-13T20:21:13.226Z
+                at 2026-09-15T22:49:07.006Z
             </div>
         <script src="../../prettify.js"></script>
         <script>

package/docs/coverage/cyberia/api/object-layer/object-layer.model.js.html

@@ -1378,7 +1378,7 @@ export {
             <div class='footer quiet pad2 space-top1 center small'>
                 Code coverage generated by
                 <a href="https://istanbul.js.org/" target="_blank" rel="noopener noreferrer">istanbul</a>
-                at 2026-09-13T20:21:13.226Z
+                at 2026-09-15T22:49:07.006Z
             </div>
         <script src="../../prettify.js"></script>
         <script>

package/docs/coverage/cyberia/index.html

@@ -146,7 +146,7 @@
             <div class='footer quiet pad2 space-top1 center small'>
                 Code coverage generated by
                 <a href="https://istanbul.js.org/" target="_blank" rel="noopener noreferrer">istanbul</a>
-                at 2026-09-13T20:21:13.226Z
+                at 2026-09-15T22:49:07.006Z
             </div>
         <script src="prettify.js"></script>
         <script>

package/docs/coverage/cyberia/projects/cyberia/atlas-sprite-sheet-generator.js.html

@@ -1300,7 +1300,7 @@ export class AtlasSpriteSheetGenerator {
             <div class='footer quiet pad2 space-top1 center small'>
                 Code coverage generated by
                 <a href="https://istanbul.js.org/" target="_blank" rel="noopener noreferrer">istanbul</a>
-                at 2026-09-13T20:21:13.226Z
+                at 2026-09-15T22:49:07.006Z
             </div>
         <script src="../../prettify.js"></script>
         <script>

package/docs/coverage/cyberia/projects/cyberia/index.html

@@ -161,7 +161,7 @@
             <div class='footer quiet pad2 space-top1 center small'>
                 Code coverage generated by
                 <a href="https://istanbul.js.org/" target="_blank" rel="noopener noreferrer">istanbul</a>
-                at 2026-09-13T20:21:13.226Z
+                at 2026-09-15T22:49:07.006Z
             </div>
         <script src="../../prettify.js"></script>
         <script>

package/docs/coverage/cyberia/projects/cyberia/instance-backup.js.html

@@ -700,7 +700,7 @@ export async function restoreObjectLayerBackup({ backupDir, itemId, options }) {
             <div class='footer quiet pad2 space-top1 center small'>
                 Code coverage generated by
                 <a href="https://istanbul.js.org/" target="_blank" rel="noopener noreferrer">istanbul</a>
-                at 2026-09-13T20:21:13.226Z
+                at 2026-09-15T22:49:07.006Z
             </div>
         <script src="../../prettify.js"></script>
         <script>

package/docs/coverage/cyberia/projects/cyberia/instance-data.js.html

@@ -2167,7 +2167,7 @@ export {
             <div class='footer quiet pad2 space-top1 center small'>
                 Code coverage generated by
                 <a href="https://istanbul.js.org/" target="_blank" rel="noopener noreferrer">istanbul</a>
-                at 2026-09-13T20:21:13.226Z
+                at 2026-09-15T22:49:07.006Z
             </div>
         <script src="../../prettify.js"></script>
         <script>

package/docs/coverage/cyberia/projects/cyberia/shape-generator.js.html

@@ -3250,7 +3250,7 @@ export function listShapes() {
             <div class='footer quiet pad2 space-top1 center small'>
                 Code coverage generated by
                 <a href="https://istanbul.js.org/" target="_blank" rel="noopener noreferrer">istanbul</a>
-                at 2026-09-13T20:21:13.226Z
+                at 2026-09-15T22:49:07.006Z
             </div>
         <script src="../../prettify.js"></script>
         <script>

package/docs/coverage/cyberia/projects/cyberia/stat-balance.js.html

@@ -313,7 +313,7 @@ export function balanceStats({ stats, itemType, policy = {}, random = Math.rando
             <div class='footer quiet pad2 space-top1 center small'>
                 Code coverage generated by
                 <a href="https://istanbul.js.org/" target="_blank" rel="noopener noreferrer">istanbul</a>
-                at 2026-09-13T20:21:13.226Z
+                at 2026-09-15T22:49:07.006Z
             </div>
         <script src="../../prettify.js"></script>
         <script>

package/hardhat/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "cyberia-hardhat",
-  "version": "3.3.77",
+  "version": "3.4.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "cyberia-hardhat",
-      "version": "3.3.77",
+      "version": "3.4.0",
       "dependencies": {
         "@openzeppelin/contracts": "~5.6.1",
         "dotenv": "~17.4.2",
@@ -15,7 +15,7 @@
       "devDependencies": {
         "@nomicfoundation/hardhat-toolbox-viem": "^5.0.7",
         "chai": "^6.2.2",
-        "hardhat": "~3.15.0"
+        "hardhat": "~3.16.0"
       },
       "engines": {
         "node": ">=22.0.0"
@@ -2065,9 +2065,9 @@
       "license": "ISC"
     },
     "node_modules/hardhat": {
-      "version": "3.15.0",
-      "resolved": "https://registry.npmjs.org/hardhat/-/hardhat-3.15.0.tgz",
-      "integrity": "sha512-41S+2ZCRRKfIcHLnfrpvGdBCaUf468U+YYqAeBSFZFivB7cY3qqDtOxOiLuLaJ7dw75yA/K3VHKZ2QF8nAd+iA==",
+      "version": "3.16.0",
+      "resolved": "https://registry.npmjs.org/hardhat/-/hardhat-3.16.0.tgz",
+      "integrity": "sha512-LWFFR3rYl8AIhwpYVjK2L5y0Z0CqdQFQ8AZWe8gqf1t7KGH+E/EguoIX7rcB4KfyKoWK6ooj+7Jgba4vlQ1feQ==",
       "dev": true,
       "license": "MIT",
       "dependencies": {

package/hardhat/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cyberia-hardhat",
-  "version": "3.3.77",
+  "version": "3.4.0",
   "type": "module",
   "description": "Hardhat project for Cyberia Online ObjectLayerToken (ERC-1155) on Hyperledger Besu",
   "private": true,
@@ -21,7 +21,7 @@
   "devDependencies": {
     "@nomicfoundation/hardhat-toolbox-viem": "^5.0.7",
     "chai": "^6.2.2",
-    "hardhat": "~3.15.0"
+    "hardhat": "~3.16.0"
   },
   "dependencies": {
     "@openzeppelin/contracts": "~5.6.1",

package/manifests/cronjobs/dd-cron/dd-cron-backup.yaml

@@ -27,7 +27,7 @@ spec:
         spec:
           containers:
             - name: dd-cron-backup
-              image: underpost/underpost-engine:v3.3.77
+              image: underpost/underpost-engine:v3.4.0
               command:
                 - /bin/sh
                 - -c

package/manifests/cronjobs/dd-cron/dd-cron-vultr.yaml

@@ -27,7 +27,7 @@ spec:
         spec:
           containers:
             - name: dd-cron-vultr
-              image: underpost/underpost-engine:v3.3.77
+              image: underpost/underpost-engine:v3.4.0
               command:
                 - /bin/sh
                 - -c

package/manifests/deployment/dd-cyberia-development/deployment.yaml

@@ -20,7 +20,7 @@ spec:
     spec:
       containers:
         - name: dd-cyberia-development-blue
-          image: underpost/underpost-engine:v3.3.77
+          image: underpost/underpost-engine:v3.4.0
           imagePullPolicy: IfNotPresent
           envFrom:
             - secretRef:

package/manifests/deployment/dd-default-development/deployment.yaml

@@ -17,7 +17,7 @@ spec:
     spec:
       containers:
         - name: dd-default-development-blue
-          image: underpost/underpost-engine:v3.3.77
+          image: underpost/underpost-engine:v3.4.0
           #          resources:
           #            requests:
           #              memory: "124Ki"
@@ -98,7 +98,7 @@ spec:
     spec:
       containers:
         - name: dd-default-development-green
-          image: underpost/underpost-engine:v3.3.77
+          image: underpost/underpost-engine:v3.4.0
           #          resources:
           #            requests:
           #              memory: "124Ki"

package/package.json

@@ -2,7 +2,7 @@
     "type": "module",
     "main": "src/index.js",
     "name": "@underpostnet/cyberia",
-    "version": "3.3.77",
+    "version": "3.4.0",
     "description": "Cyberia CLI — toolchain for the Cyberia MMO data layer, content pipeline, persistence, gRPC services, and ERC-1155 lifecycle on Hyperledger Besu.",
     "scripts": {
         "start": "node --max-old-space-size=8192 src/server",
@@ -18,14 +18,17 @@
         "docs": "typedoc --options typedoc.json",
         "install:global": "npm install -g prettier",
         "install:test": "npm install -g coveralls-next",
-        "install": "npm run install:global && npm run install:test",
+        "install:tools": "npm run install:global && npm run install:test",
+        "prepare": "node bin socketsecurity --patch-apply",
         "prettier": "prettier --write .",
         "fix": "npm audit fix --force && npm audit",
         "baremetal": "node bin baremetal --dev --commission --ls --create-machine",
         "security:secrets": "gitleaks detect --source . --config .gitleaks.toml --report-path ./gitleaks-report.json --report-format json --redact=0",
         "security:secrets:ci": "gitleaks detect --source . --config .gitleaks.toml --redact=1",
         "security:deps": "npm audit",
-        "security": "npm run security:secrets:ci && npm run security:deps",
+        "security:socket": "node bin socketsecurity --audit",
+        "security:socket:ci": "node bin socketsecurity --ci",
+        "security": "npm run security:secrets:ci && npm run security:deps && npm run security:socket",
         "docker:generate": "node bin docker-compose --generate --deploy-id dd-cyberia --docker-compose-id cyberia",
         "docker:up": "node bin docker-compose --up --deploy-id dd-cyberia --docker-compose-id cyberia",
         "docker:up:build": "node bin docker-compose --up --build --deploy-id dd-cyberia --docker-compose-id cyberia",
@@ -72,7 +75,7 @@
     },
     "homepage": "https://github.com/underpostnet/engine-cyberia#readme",
     "dependencies": {
-        "underpost": "^3.3.77",
+        "@underpostnet/underpost": "^3.4.0",
         "maxrects-packer": "^2.7.3",
         "pngjs": "^7.0.0",
         "jimp": "^1.6.0",
@@ -89,7 +92,7 @@
         "minimatch": "^10.2.2",
         "glob": "^11.0.0",
         "diff": ">=8.0.3",
-        "js-yaml": "$js-yaml",
+        "js-yaml": "^5.4.1",
         "debug": ">=4.3.6",
         "serialize-javascript": ">=7.0.5",
         "router": {
@@ -105,12 +108,8 @@
         "@grpc/grpc-js": "^1.14.4",
         "@grpc/proto-loader": "^0.8.1",
         "@neodrag/vanilla": "^2.3.1",
-        "@vitest/coverage-v8": "5.0.0",
         "ag-grid-community": "^36.1.0",
-        "allure-vitest": "3.12.0",
         "axios": "^1.20.0",
-        "bumpp": "^12.3.0",
-        "chai": "^6.2.2",
         "clipboardy": "^5.3.2",
         "cloudinary": "^2.11.0",
         "colors": "^1.4.0",
@@ -119,11 +118,10 @@
         "cookie-parser": "^1.4.7",
         "cors": "^2.8.6",
         "d3": "^7.9.0",
-        "dexie": "^4.4.5",
+        "dexie": "^4.4.6",
         "dotenv": "^17.4.2",
         "easymde": "^2.21.0",
         "esbuild": "^0.28.2",
-        "escape-string-regexp": "^5.0.0",
         "express": "^5.2.1",
         "express-fileupload": "^1.4.3",
         "express-rate-limit": "^8.7.0",
@@ -142,15 +140,14 @@
         "jsonwebtoken": "^9.0.3",
         "jszip": "^3.10.2",
         "mariadb": "^3.5.4",
-        "marked": "^18.0.11",
-        "mongoose": "^9.9.5",
+        "marked": "^18.0.12",
+        "mongoose": "^9.10.0",
         "morgan": "^1.12.0",
-        "nodemailer": "^10.0.0",
+        "nodemailer": "^10.0.3",
         "nodemon": "^3.0.1",
         "peer": "^1.0.2",
         "peerjs": "^1.5.5",
         "prom-client": "^15.1.2",
-        "read": "^6.0.0",
         "rrule": "^2.8.1",
         "shelljs": "^0.10.0",
         "sitemap": "^9.0.1",
@@ -163,7 +160,6 @@
         "typescript": "6.0.3",
         "validator": "^13.15.35",
         "vanilla-jsoneditor": "^3.13.0",
-        "vitest": "5.0.0",
         "winston": "^3.19.0",
         "workbox-background-sync": "^7.4.1",
         "workbox-cacheable-response": "^7.4.1",
@@ -171,6 +167,12 @@
         "workbox-expiration": "^7.4.1",
         "workbox-precaching": "^7.4.1",
         "workbox-routing": "^7.4.1",
-        "workbox-strategies": "^7.4.1"
+        "workbox-strategies": "^7.4.1",
+        "@socketsecurity/cli": "1.1.171",
+        "@vitest/coverage-v8": "5.0.0",
+        "allure-vitest": "3.12.1",
+        "bumpp": "^12.3.0",
+        "chai": "^6.2.2",
+        "vitest": "5.0.0"
     }
 }