cyberia 3.0.3 → 3.2.5

package/{.env.production → .env.example}

@@ -1,7 +1,7 @@
 DEPLOY_ID=dd-default
 NODE_ENV=production
 PORT=3000
-JWT_SECRET=test
+JWT_SECRET=changethis
 REFRESH_EXPIRE_MINUTES=5
 ACCESS_EXPIRE_MINUTES=1440
 NODE_OPTIONS=--max-old-space-size=8192
@@ -15,8 +15,25 @@ DEFAULT_DEPLOY_ID=dd-default
 DEFAULT_DEPLOY_HOST=default.net
 DEFAULT_DEPLOY_PATH=/
 MARIADB_HOST=changethis
+MARIADB_PORT=3306
 MARIADB_USER=changethis
 MARIADB_PASSWORD=changethis
+DB_PROVIDER=mongoose
+DB_HOST=mongodb://127.0.0.1:27017
+DB_NAME=default
+SMTP_HOST=changethis
+SMTP_PORT=465
+SMTP_SECURE=true
+SMTP_AUTH_USER=changethis
+SMTP_AUTH_PASS=changethis
+MAILER_SENDER_EMAIL=noreply@default.net
+MAILER_SENDER_NAME=Default
+DDNS_HOST=changethis
+DDNS_PROVIDER=dondominio
+DDNS_API_KEY=changethis
+DDNS_USER=changethis
+VALKEY_HOST=127.0.0.1
+VALKEY_PORT=6379
 WIFI_PASSWORD=changethis
 CLOUDINARY_CLOUD_NAME=changethis
 CLOUDINARY_API_KEY=changethis
@@ -51,6 +68,5 @@ POSTMAN_PASSWORD=changethis
 DEFAULT_SSH_PORT=22
 ENABLE_FILE_LOGS=false
 BASE_API=api
-CERTBOT_LIVE_PATH=changethis
-CERTBOT_LIVE_PATH_WINDOWS=changethis
-DEV_PROXY_PORT_OFFSET=200
+DEV_PROXY_PORT_OFFSET=200
+DOTENV_CONFIG_QUIET=true

package/.github/workflows/engine-cyberia.cd.yml

@@ -1,5 +1,16 @@
 name: CD | Engine cyberia | remote ssh
-on: [push]
+on:
+  push:
+  workflow_dispatch:
+    inputs:
+      job:
+        description: 'Job to run (deploy, sync-and-deploy, init)'
+        required: true
+        type: choice
+        options:
+          - deploy
+          - sync-and-deploy
+          - init
 permissions:
   contents: write
   packages: write
@@ -7,12 +18,17 @@ permissions:
 
 jobs:
   deploy:
-    if: github.repository == 'underpostnet/engine' && startsWith(github.event.head_commit.message, 'cd(ssh-engine-cyberia)')
+    if: >-
+      github.repository == 'underpostnet/engine'
+      && (
+        startsWith(github.event.head_commit.message, 'cd(ssh-engine-cyberia)')
+        || (github.event_name == 'workflow_dispatch' && github.event.inputs.job == 'deploy')
+      )
     name: Remote SSH deployment
     runs-on: ubuntu-latest
     steps:
       - name: Run remote deploy via SSH
-        uses: appleboy/ssh-action@v1.2.2
+        uses: appleboy/ssh-action@v1.2.5
         with:
           # Remote host (secret)
           host: ${{ secrets.SSH_HOST }}
@@ -32,14 +48,20 @@ jobs:
             echo "Starting remote deploy"
             cd /home/dd/engine
             sudo -n -- /bin/bash -lc "node bin run pull"
+            sudo -n -- /bin/bash -lc "npm install"
             sudo -n -- /bin/bash -lc "node bin run deploy dd-cyberia"
   sync-and-deploy:
-    if: github.repository == 'underpostnet/engine' && startsWith(github.event.head_commit.message, 'cd(ssh-sync-engine-cyberia)')
+    if: >-
+      github.repository == 'underpostnet/engine'
+      && (
+        startsWith(github.event.head_commit.message, 'cd(ssh-sync-engine-cyberia)')
+        || (github.event_name == 'workflow_dispatch' && github.event.inputs.job == 'sync-and-deploy')
+      )
     name: Remote SSH sync and deploy
     runs-on: ubuntu-latest
     steps:
       - name: Run remote deploy via SSH
-        uses: appleboy/ssh-action@v1.2.2
+        uses: appleboy/ssh-action@v1.2.5
         with:
           # Remote host (secret)
           host: ${{ secrets.SSH_HOST }}
@@ -59,15 +81,25 @@ jobs:
             echo "Starting remote sync and deploy"
             cd /home/dd/engine
             sudo -n -- /bin/bash -lc "node bin run pull"
+            sudo -n -- /bin/bash -lc "npm install"
+            sudo -n -- /bin/bash -lc "node bin run clean src/client/public/cyberia"
+            sudo -n -- /bin/bash -lc "node bin fs src/client/public/cyberia --git --pull --recursive --deploy-id dd-cyberia"
+            sudo -n -- /bin/bash -lc "node bin run clean src/client/public/underpost"
+            sudo -n -- /bin/bash -lc "node bin fs src/client/public/underpost --git --pull --recursive --deploy-id dd-cyberia --storage-file-path './engine-private/conf/dd-cyberia/storage.underpost.json'"
             sudo -n -- /bin/bash -lc "npm run test"
-            sudo -n -- /bin/bash -lc "node bin run sync --kubeadm --deploy-id-cron-jobs none --timeout-response 300000ms dd-cyberia,1,,localhost/rockylinux9-underpost:v2.98.3 --cmd 'npm install -g npm@11.2.0,npm install -g underpost,underpost secret underpost --create-from-file /etc/config/.env.production,underpost start --build --run dd-cyberia production'"
+            sudo -n -- /bin/bash -lc "node bin run sync --kubeadm --deploy-id-cron-jobs none --timeout-response 300000ms dd-cyberia,1,,localhost/rockylinux9-underpost:v2.98.3 --cmd 'npm install -g npm@11.2.0,npm install -g underpost,underpost secret underpost --create-from-env,underpost start --build --run dd-cyberia production'"
   init:
-    if: github.repository == 'underpostnet/engine' && startsWith(github.event.head_commit.message, 'cd(ssh-init-engine-cyberia)')
+    if: >-
+      github.repository == 'underpostnet/engine'
+      && (
+        startsWith(github.event.head_commit.message, 'cd(ssh-init-engine-cyberia)')
+        || (github.event_name == 'workflow_dispatch' && github.event.inputs.job == 'init')
+      )
     name: Remote SSH init deployment
     runs-on: ubuntu-latest
     steps:
       - name: Run remote deploy via SSH
-        uses: appleboy/ssh-action@v1.2.2
+        uses: appleboy/ssh-action@v1.2.5
         with:
           # Remote host (secret)
           host: ${{ secrets.SSH_HOST }}
@@ -87,6 +119,7 @@ jobs:
             echo "Starting init deploy"
             cd /home/dd/engine
             sudo -n -- /bin/bash -lc "node bin run pull"
-            sudo -n -- /bin/bash -lc "node bin deploy dd-cyberia production --kubeadm --sync --build-manifest --image 'localhost/rockylinux9-underpost:v2.98.3' --timeout-response 300000ms --versions green --replicas 1 --cmd 'npm install -g npm@11.2.0,npm install -g underpost,underpost secret underpost --create-from-file /etc/config/.env.production,underpost start --build --run dd-cyberia production'"
-            sudo -n -- /bin/bash -lc "node bin deploy dd-cyberia production --kubeadm --disable-update-proxy"
+            sudo -n -- /bin/bash -lc "npm install"
+            sudo -n -- /bin/bash -lc "node bin deploy dd-cyberia production --kubeadm --sync --build-manifest --image 'localhost/rockylinux9-underpost:v2.98.3' --timeout-response 300000ms --versions green --replicas 1 --cmd 'npm install -g npm@11.2.0,npm install -g underpost,underpost secret underpost --create-from-env,underpost start --build --run dd-cyberia production'"
+            sudo -n -- /bin/bash -lc "node bin deploy dd-cyberia production --kubeadm --disable-update-proxy --git-clean"
             sudo -n -- /bin/bash -lc "node bin monitor dd-cyberia production --ready-deployment --promote --timeout-response 300000ms --versions green --replicas 1"

package/.github/workflows/engine-cyberia.ci.yml

@@ -1,9 +1,27 @@
 name: CI | Engine cyberia | github repository
 on:
-  workflow_run:
-    workflows: ['CI | Publish npm repository package']
-    types:
-      - completed
+  workflow_dispatch:
+    inputs:
+      sync:
+        description: 'Trigger sync-and-deploy CD after build'
+        required: false
+        default: 'false'
+        type: choice
+        options:
+          - 'true'
+          - 'false'
+      message:
+        description: 'Commit message for the build'
+        required: false
+        default: ''
+      deploy_type:
+        description: 'CD job type to dispatch (sync-and-deploy or init)'
+        required: false
+        default: 'sync-and-deploy'
+        type: choice
+        options:
+          - sync-and-deploy
+          - init
 permissions:
   contents: write
   packages: write
@@ -11,8 +29,6 @@ permissions:
 jobs:
   pwa-microservices-template:
     name: Update github repo package Jobs
-    env:
-      SYNC: ${{ startsWith(github.event.workflow_run.head_commit.message, 'ci(package-pwa-microservices-template-sync-engine-cyberia)') }}
     runs-on: ubuntu-latest
     container:
       image: quay.io/rockylinux/rockylinux:9
@@ -21,7 +37,7 @@ jobs:
       packages: write
       id-token: write
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v6
 
       - name: Install required packages
         run: |
@@ -34,10 +50,7 @@ jobs:
           dnf install nodejs -y
 
       - name: Install dependencies
-        run: |
-          npm install -g underpost
-          npm install
-          underpost config set GITHUB_TOKEN ${{ secrets.GIT_AUTH_TOKEN }}
+        run: npm install
 
       - name: Set git global credentials
         run: |
@@ -46,15 +59,24 @@ jobs:
           git config --global user.email 'development@underpost.net'
 
       - name: Build repository
+        env:
+          GITHUB_TOKEN: ${{ secrets.GIT_AUTH_TOKEN }}
         run: |
-          cd .. && underpost clone underpostnet/pwa-microservices-template
-          FULL_MSG=$(cd pwa-microservices-template && git log -1 --pretty=%B 2>/dev/null || echo "")
-          LAST_COMMIT_MESSAGE=$(echo "$FULL_MSG" | sed '1d')
+          cd .. && node engine/bin clone underpostnet/pwa-microservices-template
+          if [ -n "${{ github.event.inputs.message }}" ]; then
+            LAST_COMMIT_MESSAGE="${{ github.event.inputs.message }}"
+          else
+            FULL_MSG=$(cd pwa-microservices-template && git log -1 --pretty=%B 2>/dev/null || echo "")
+            LAST_COMMIT_MESSAGE=$(echo "$FULL_MSG" | sed '1s/^[^:]*: [^ ]* //')
+          fi
+          SHOULD_CD="${{ github.event.inputs.sync }}"
+          DEPLOY_TYPE="${{ github.event.inputs.deploy_type }}"
           if [ -z "$LAST_COMMIT_MESSAGE" ]; then
             LAST_COMMIT_MESSAGE="Update engine cyberia repository"
           fi
           echo "[INFO] Captured commit message: $LAST_COMMIT_MESSAGE"
-          underpost clone --bare underpostnet/engine-cyberia
+          echo "[INFO] Should CD: $SHOULD_CD, Deploy type: $DEPLOY_TYPE"
+          node engine/bin clone --bare underpostnet/engine-cyberia
           cd engine
           node bin/build dd-cyberia development
           cd ../pwa-microservices-template
@@ -65,17 +87,17 @@ jobs:
           git config user.email 'development@underpost.net'
           git add .
           git commit -m "$LAST_COMMIT_MESSAGE"
-          underpost push . underpostnet/engine-cyberia
-          if [ "${SYNC}" = "true" ]; then
-            echo "[INFO] Init engine-cyberia deployment"
-            underpost config set GITHUB_USERNAME underpostnet
-            mkdir -p /home/dd
-            sudo rm -rf /home/dd/engine
-            cd /home/dd
-            underpost clone underpostnet/engine
-            cd engine
-            npm install
-            node bin run ssh-deploy sync-engine-cyberia
+          node ../engine/bin push . underpostnet/engine-cyberia
+          if [ "$SHOULD_CD" = "true" ]; then
+            if [ -z "$DEPLOY_TYPE" ]; then
+              DEPLOY_TYPE="sync-and-deploy"
+            fi
+            echo "[INFO] Dispatching engine-cyberia CD ${DEPLOY_TYPE}"
+            curl -s -X POST \
+              -H "Accept: application/vnd.github.v3+json" \
+              -H "Authorization: token ${{ secrets.GIT_AUTH_TOKEN }}" \
+              "https://api.github.com/repos/underpostnet/engine/actions/workflows/engine-cyberia.cd.yml/dispatches" \
+              -d "{\"ref\":\"master\",\"inputs\":{\"job\":\"${DEPLOY_TYPE}\"}}"
           else
             echo "[INFO] Deployment skipped"
           fi

package/.github/workflows/ghpkg.ci.yml

@@ -20,7 +20,7 @@ jobs:
       packages: write
       id-token: write
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v6
 
       - name: Install required packages
         run: |
@@ -43,8 +43,6 @@ jobs:
 
       - name: Install dependencies and set repo configuration
         run: |
-          npm install -g underpost
-          underpost config set GITHUB_TOKEN ${{ secrets.GIT_AUTH_TOKEN }}
           npm install
           node ./bin/deploy rename-package @underpostnet/underpost
           node ./bin/deploy set-repo underpostnet/pwa-microservices-template-ghpkg
@@ -57,8 +55,10 @@ jobs:
           git config --global user.email 'fcoverdugoa@underpost.net'
 
       - name: Clone and Push to github package repository
+        env:
+          GITHUB_TOKEN: ${{ secrets.GIT_AUTH_TOKEN }}
         run: |
-          underpost clone --bare underpostnet/pwa-microservices-template-ghpkg
+          node bin clone --bare underpostnet/pwa-microservices-template-ghpkg
           rm -rf ./.git
           mv ./pwa-microservices-template-ghpkg.git ./.git
           pwd
@@ -69,4 +69,4 @@ jobs:
           git add .
           git status
           git commit -m "$LAST_COMMIT_MESSAGE"
-          underpost push . underpostnet/pwa-microservices-template-ghpkg
+          node bin push . underpostnet/pwa-microservices-template-ghpkg

package/.github/workflows/gitlab.ci.yml

@@ -6,7 +6,7 @@ jobs:
     name: Update gitlab repo package Jobs
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           fetch-depth: 0
           lfs: true

package/.github/workflows/hardhat.ci.yml

@@ -0,0 +1,82 @@
+# ─────────────────────────────────────────────────────────────────────────────
+# CI | Hardhat – Compile, Test, Audit
+# ─────────────────────────────────────────────────────────────────────────────
+name: CI | Hardhat
+
+on:
+  push:
+    paths:
+      - 'hardhat/**'
+      - '.github/workflows/hardhat.ci.yml'
+  pull_request:
+    paths:
+      - 'hardhat/**'
+      - '.github/workflows/hardhat.ci.yml'
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  build-and-test:
+    name: Compile, Test & Audit
+    runs-on: ubuntu-latest
+    defaults:
+      run:
+        working-directory: hardhat
+
+    strategy:
+      matrix:
+        node-version: ['24']
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v6
+
+      - name: Setup Node.js ${{ matrix.node-version }}
+        uses: actions/setup-node@v6
+        with:
+          node-version: ${{ matrix.node-version }}
+          cache: 'npm'
+          cache-dependency-path: hardhat/package-lock.json
+
+      # ── Install ──────────────────────────────────────────────────────────
+      # Use `npm ci` for reproducible installs from the lockfile.
+      # Never install packages globally in CI.
+      - name: Install dependencies (npm ci)
+        run: npm ci
+
+      # ── Security Audit ───────────────────────────────────────────────────
+      # Production deps are what ships on-chain – fail on any moderate+ vuln.
+      - name: npm audit – production deps (moderate+)
+        run: npm audit --audit-level=moderate --omit=dev
+
+      # Dev/toolchain deps (hardhat, solidity-coverage, etc.) carry known
+      # transitive vulnerabilities that upstream hasn't patched yet.
+      # Log them for visibility but don't block the pipeline.
+      - name: npm audit – dev deps (informational)
+        run: npm audit --audit-level=moderate || true
+
+      # ── Compile ──────────────────────────────────────────────────────────
+      - name: Compile Solidity contracts
+        run: npx hardhat compile
+
+      # ── Test ─────────────────────────────────────────────────────────────
+      - name: Run tests
+        run: npx hardhat test
+        env:
+          REPORT_GAS: 'true'
+
+      # ── Coverage (optional, only on primary Node version) ────────────────
+      - name: Solidity coverage
+        if: matrix.node-version == '20'
+        run: npx hardhat coverage
+
+      # ── Lockfile integrity check ─────────────────────────────────────────
+      # Fail if package-lock.json is out of sync with package.json
+      - name: Verify lockfile is up to date
+        run: |
+          git diff --exit-code package-lock.json || {
+            echo "::error::package-lock.json is out of sync with package.json. Run 'npm install' locally and commit the lockfile."
+            exit 1
+          }

package/.github/workflows/npmpkg.ci.yml

@@ -4,6 +4,20 @@ on:
     branches: ['master']
   pull_request:
     branches: ['master']
+  workflow_dispatch:
+    inputs:
+      message:
+        description: 'Changelog message for the build'
+        required: false
+        default: ''
+      deploy_conf_id:
+        description: 'Engine conf ID to dispatch after build (e.g., engine-core, engine-cyberia)'
+        required: false
+        default: ''
+      deploy_type:
+        description: 'Deployment type for the engine conf CD (sync-and-deploy or init)'
+        required: false
+        default: ''
 permissions:
   contents: write
   packages: write
@@ -12,7 +26,10 @@ jobs:
   pwa-microservices-template:
     if: |
       github.repository == 'underpostnet/engine'
-      && startsWith(github.event.head_commit.message, 'ci(package-pwa-microservices-template')
+      && (
+        startsWith(github.event.head_commit.message, 'ci(package-pwa-microservices-template')
+        || github.event_name == 'workflow_dispatch'
+      )
     name: Update npm repo package Jobs
     runs-on: ubuntu-latest
     container:
@@ -22,7 +39,7 @@ jobs:
       packages: write
       id-token: write
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v6
 
       - name: Install required packages
         run: |
@@ -36,20 +53,23 @@ jobs:
 
       - name: Capture commit message
         run: |
-          FULL_MSG="${{ github.event.head_commit.message }}"
-          REST="$(echo "$FULL_MSG" | tail -n +2 | awk 'NR==1{first=$0; has_first=1; next} NR==2{print first " " $0; has_first=0; next} {print} END{if(has_first) print first}')"
-          LAST_COMMIT_MESSAGE="${REST:-$FULL_MSG}"
+          if [ "${{ github.event_name }}" = "workflow_dispatch" ]; then
+            LAST_COMMIT_MESSAGE="${{ github.event.inputs.message }}"
+            if [ -z "$LAST_COMMIT_MESSAGE" ]; then
+              LAST_COMMIT_MESSAGE="Update repository"
+            fi
+          else
+            FULL_MSG="${{ github.event.head_commit.message }}"
+            REST="$(echo "$FULL_MSG" | tail -n +2 | awk 'NR==1{first=$0; has_first=1; next} NR==2{print first " " $0; has_first=0; next} {print} END{if(has_first) print first}')"
+            LAST_COMMIT_MESSAGE="${REST:-$FULL_MSG}"
+          fi
           echo "LAST_COMMIT_MESSAGE<<EOF" >> $GITHUB_ENV
           echo "$LAST_COMMIT_MESSAGE" >> $GITHUB_ENV
           echo "EOF" >> $GITHUB_ENV
-          echo "[INFO] Full commit message: $FULL_MSG"
           echo "[INFO] Extracted payload: $LAST_COMMIT_MESSAGE"
 
       - name: Install dependencies
-        run: |
-          npm install -g underpost
-          underpost config set GITHUB_TOKEN ${{ secrets.GIT_AUTH_TOKEN }}
-          npm install
+        run: npm install
 
       - name: Set git global credentials
         run: |
@@ -59,14 +79,40 @@ jobs:
           git config --global user.email 'fcoverdugoa@underpost.net'
 
       - name: Clone github package repository
+        env:
+          GITHUB_TOKEN: ${{ secrets.GIT_AUTH_TOKEN }}
         run: |
-          cd .. && underpost clone underpostnet/pwa-microservices-template
+          cd .. && node engine/bin clone underpostnet/pwa-microservices-template
           cd engine
-          npm run update-template
+          npm run update:template
           cd ../pwa-microservices-template
           git remote set-url origin git@github.com:underpostnet/pwa-microservices-template.git
           git add .
           git config user.name 'underpostnet'
           git config user.email 'fcoverdugoa@underpost.net'
-          underpost cmt . ci package-pwa-microservices-template-ghpkg "$LAST_COMMIT_MESSAGE"
-          underpost push . underpostnet/pwa-microservices-template
+          node ../engine/bin cmt . ci package-pwa-microservices-template-ghpkg "$LAST_COMMIT_MESSAGE"
+          node ../engine/bin push . underpostnet/pwa-microservices-template
+
+      - name: Dispatch all engine CIs
+        run: |
+          DEPLOY_CONF_ID="${{ github.event.inputs.deploy_conf_id }}"
+          DEPLOY_TYPE="${{ github.event.inputs.deploy_type }}"
+          for ENGINE in engine-core engine-cyberia engine-lampp engine-test; do
+            SYNC="false"
+            DT=""
+            if [ "$ENGINE" = "$DEPLOY_CONF_ID" ]; then
+              SYNC="true"
+              DT="$DEPLOY_TYPE"
+            fi
+            echo "[INFO] Dispatching ${ENGINE}.ci.yml (sync=$SYNC, deploy_type=$DT)"
+            INPUTS="{\"sync\":\"${SYNC}\""
+            if [ -n "$DT" ]; then
+              INPUTS="${INPUTS},\"deploy_type\":\"${DT}\""
+            fi
+            INPUTS="${INPUTS}}"
+            curl -s -X POST \
+              -H "Accept: application/vnd.github.v3+json" \
+              -H "Authorization: token ${{ secrets.GIT_AUTH_TOKEN }}" \
+              "https://api.github.com/repos/underpostnet/engine/actions/workflows/${ENGINE}.ci.yml/dispatches" \
+              -d "{\"ref\":\"master\",\"inputs\":${INPUTS}}"
+          done

package/.github/workflows/publish.ci.yml

@@ -3,18 +3,28 @@ on:
   push:
     tags:
       - 'v*'
+permissions:
+  contents: write
+  packages: write
+  id-token: write
 jobs:
   build-and-publish:
     # prevents this action from running on forks
     if: github.repository == 'underpostnet/pwa-microservices-template'
     runs-on: ubuntu-latest
     permissions:
-      contents: read
+      contents: write
+      packages: write
       id-token: write
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
-      - uses: actions/setup-node@v4
+      - name: Install required packages
+        run: |
+          sudo apt-get update -y
+          sudo apt-get install -y sudo tar gzip bzip2 git curl
+
+      - uses: actions/setup-node@v6
         with:
           node-version: '24.x'
           registry-url: 'https://registry.npmjs.org'
@@ -27,17 +37,26 @@ jobs:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
         run: npm publish --provenance --access public
 
+      - name: Dispatch release CD
+        run: |
+          curl -s -f -X POST \
+            -H "Accept: application/vnd.github.v3+json" \
+            -H "Authorization: token ${{ secrets.GIT_AUTH_TOKEN }}" \
+            "https://api.github.com/repos/underpostnet/pwa-microservices-template/actions/workflows/release.cd.yml/dispatches" \
+            -d '{"ref":"master"}'
+
   build-and-publish-ghpkg:
     # prevents this action from running on forks
     if: github.repository == 'underpostnet/pwa-microservices-template-ghpkg'
     runs-on: ubuntu-latest
     permissions:
-      contents: read
+      contents: write
+      packages: write
       id-token: write
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v6
         with:
           node-version: '24.x'
           registry-url: 'https://registry.npmjs.org'
@@ -52,7 +71,7 @@ jobs:
         run: npm publish --provenance --access public
 
       - name: Setup node to publish to GitHub Packages
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: '24.x'
           registry-url: 'https://npm.pkg.github.com'

package/.github/workflows/publish.cyberia.ci.yml

@@ -12,9 +12,9 @@ jobs:
       contents: read
       id-token: write
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v6
         with:
           node-version: '24.x'
           registry-url: 'https://registry.npmjs.org'
@@ -35,9 +35,9 @@ jobs:
       contents: read
       id-token: write
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v6
         with:
           node-version: '24.x'
           registry-url: 'https://registry.npmjs.org'
@@ -52,7 +52,7 @@ jobs:
         run: npm publish --provenance --access public
 
       - name: Setup node to publish to GitHub Packages
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: '24.x'
           registry-url: 'https://npm.pkg.github.com'

package/.github/workflows/pwa-microservices-template-page.cd.yml

@@ -33,7 +33,7 @@ jobs:
       image: quay.io/rockylinux/rockylinux:9
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         # with:
         #   lfs: true
       # - name: Checkout LFS objects
@@ -51,23 +51,22 @@ jobs:
 
       - name: Build the site
         run: |
-          npm install -g underpost
           npm install
           node bin new --default-conf --conf-workflow-id dd-github-pages
           node bin new --deploy-id dd-github-pages
-          underpost env dd-github-pages production
-          env-cmd -f .env.production node bin/deploy build-full-client dd-github-pages underpostnet.github.io /pwa-microservices-template-ghpkg
+          node bin env dd-github-pages production
+          NODE_ENV=production node bin client dd-github-pages '' underpostnet.github.io /pwa-microservices-template-ghpkg
       # git lfs install
       # git lfs track
       # git lfs ls-files
       # git lfs pull
       - name: Setup Pages
-        uses: actions/configure-pages@v5
+        uses: actions/configure-pages@v6
       - name: Upload artifact
-        uses: actions/upload-pages-artifact@v3
+        uses: actions/upload-pages-artifact@v5
         with:
           # Upload entire repository
           path: './public/underpostnet.github.io/pwa-microservices-template-ghpkg/'
       - name: Deploy to GitHub Pages
         id: deployment
-        uses: actions/deploy-pages@v4
+        uses: actions/deploy-pages@v5

package/.github/workflows/pwa-microservices-template-test.ci.yml

@@ -11,7 +11,7 @@ jobs:
       options: --entrypoint /bin/bash
     steps:
       - name: Clone repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@v6
 
       - name: Install required packages
         run: |
@@ -26,8 +26,8 @@ jobs:
       - name: Get npm root
         run: npm root -g
 
-      - name: Install underpost CLI
-        run: npm install -g underpost
+      - name: Install dependencies
+        run: npm install
 
       - name: Run test
-        run: underpost test
+        run: node bin test