cyberia 3.0.3 → 3.2.5

package/src/cli/secrets.js

@@ -4,12 +4,14 @@
  * @namespace UnderpostSecret
  */
 
-import dotenv from 'dotenv';
 import { shellExec } from '../server/process.js';
 import fs from 'fs-extra';
+import dotenv from 'dotenv';
 import Underpost from '../index.js';
+import { loadConf } from '../server/conf.js';
+import { loggerFactory } from '../server/logger.js';
 
-dotenv.config();
+const logger = loggerFactory(import.meta);
 
 /**
  * @class UnderpostSecret
@@ -25,11 +27,80 @@ class UnderpostSecret {
      */
     underpost: {
       createFromEnvFile(envPath) {
+        Underpost.env.clean();
         const envObj = dotenv.parse(fs.readFileSync(envPath, 'utf8'));
         for (const key of Object.keys(envObj)) {
           Underpost.env.set(key, envObj[key]);
         }
       },
+      /** Reads application secrets from process.env (injected via envFrom: secretRef)
+       *  and writes them to the underpost .env file, filtering out known system and
+       *  Kubernetes-injected environment variables. Replaces the fragile shell-based
+       *  `printenv | grep -vE` pattern with a maintainable Node.js blocklist.
+       */
+      createFromContainerEnv() {
+        Underpost.env.clean();
+        const systemKeys = new Set([
+          'HOME',
+          'HOSTNAME',
+          'PATH',
+          'TERM',
+          'SHLVL',
+          'PWD',
+          '_',
+          'LANG',
+          'LANGUAGE',
+          'LC_ALL',
+          'container',
+          'SHELL',
+          'USER',
+          'LOGNAME',
+          'MAIL',
+          'OLDPWD',
+          'LESSOPEN',
+          'LESSCLOSE',
+          'LS_COLORS',
+          'DISPLAY',
+          'COLORTERM',
+          'EDITOR',
+          'VISUAL',
+          'TERM_PROGRAM',
+          'TERM_PROGRAM_VERSION',
+          'SSH_AUTH_SOCK',
+          'SSH_CLIENT',
+          'SSH_CONNECTION',
+          'SSH_TTY',
+          'XDG_SESSION_ID',
+          'XDG_RUNTIME_DIR',
+          'XDG_DATA_DIRS',
+          'XDG_CONFIG_DIRS',
+          'DBUS_SESSION_BUS_ADDRESS',
+          'GPG_AGENT_INFO',
+          'WINDOWID',
+          'DESKTOP_SESSION',
+          'SESSION_MANAGER',
+          'XAUTHORITY',
+          'WAYLAND_DISPLAY',
+          'which_declare',
+        ]);
+        const systemKeyPrefixes = ['KUBERNETES_', 'npm_', 'NODE_'];
+        for (const [key, value] of Object.entries(process.env)) {
+          if (systemKeys.has(key)) continue;
+          if (systemKeyPrefixes.some((prefix) => key.startsWith(prefix))) continue;
+          Underpost.env.set(key, value);
+        }
+      },
+    },
+
+    /**
+     * Removes all filesystem traces of secrets after deployment startup.
+     * Centralizes the defense-in-depth cleanup performed
+     * @memberof UnderpostSecret
+     */
+    globalSecretClean() {
+      loadConf('clean');
+      Underpost.repo.cleanupPrivateEngineRepo();
+      Underpost.env.clean();
     },
   };
 }

package/src/cli/ssh.js

@@ -497,7 +497,7 @@ EOF`);
     },
 
     /**
-     * Generic SSH remote command runner that centralizes SSH execution logic.
+     * Generic SSH remote command runner that SSH execution logic.
      * Executes arbitrary shell commands on a remote server via SSH with proper credential handling.
      * @async
      * @function sshRemoteRunner

package/src/cli/test.js

@@ -81,7 +81,7 @@ class UnderpostTest {
         return await Underpost.test.statusMonitor(options.podName, options.podStatus, options.kindType);
 
       if (options.sh === true || options.logs === true) {
-        const [pod] = Underpost.deploy.get(deployList);
+        const [pod] = Underpost.kubectl.get(deployList);
         if (pod) {
           if (options.sh) return pbcopy(`sudo kubectl exec -it ${pod.NAME} -- sh`);
           if (options.logs) return shellExec(`sudo kubectl logs -f ${pod.NAME}`);
@@ -115,7 +115,7 @@ class UnderpostTest {
                 break;
             }
           else {
-            const pods = Underpost.deploy.get(deployId);
+            const pods = Underpost.kubectl.get(deployId);
             if (pods.length > 0)
               for (const deployData of pods) {
                 const { NAME } = deployData;
@@ -145,7 +145,7 @@ class UnderpostTest {
         logger.info(`Loading instance`, { podName, status, kindType, deltaMs, maxAttempts });
         const _monitor = async () => {
           await timer(deltaMs);
-          const pods = Underpost.deploy.get(podName, kindType);
+          const pods = Underpost.kubectl.get(podName, kindType);
           let result = pods.find((p) => p.STATUS === status || (status === 'Running' && p.STATUS === 'Completed'));
           logger.info(
             `Testing pod ${podName}... ${result ? 1 : 0}/1 - elapsed time ${deltaMs * (index + 1)}s - attempt ${

package/src/client/Cryptokoyn.index.js

@@ -10,10 +10,9 @@ import { MenuCryptokoyn } from './components/cryptokoyn/MenuCryptokoyn.js';
 import { RouterCryptokoyn } from './components/cryptokoyn/RoutesCryptokoyn.js';
 import { Worker } from './components/core/Worker.js';
 import { Keyboard } from './components/core/Keyboard.js';
-import { CryptokoynParams } from './components/cryptokoyn/CommonCryptokoyn.js';
 import { SocketIo } from './components/core/SocketIo.js';
 import { SocketIoCryptokoyn } from './components/cryptokoyn/SocketIoCryptokoyn.js';
-import { ElementsCryptokoyn } from './components/cryptokoyn/ElementsCryptokoyn.js';
+import { AppStoreCryptokoyn } from './components/cryptokoyn/AppStoreCryptokoyn.js';
 import { CssCryptokoynDark, CssCryptokoynLight } from './components/cryptokoyn/CssCryptokoyn.js';
 
 window.onload = () =>
@@ -24,11 +23,11 @@ window.onload = () =>
       await TranslateCore.Init();
       await Responsive.Init();
       await MenuCryptokoyn.Render();
-      await SocketIo.Init({ channels: ElementsCryptokoyn.Data });
+      await SocketIo.Init({ channels: AppStoreCryptokoyn.Data });
       await SocketIoCryptokoyn.Init();
       await LogInCryptokoyn();
       await LogOutCryptokoyn();
       await SignUpCryptokoyn();
-      await Keyboard.Init({ callBackTime: CryptokoynParams.EVENT_CALLBACK_TIME });
+      await Keyboard.Init();
     },
   });

package/src/client/CyberiaPortal.index.js

@@ -13,9 +13,8 @@ import { Worker } from './components/core/Worker.js';
 import { CssCyberiaDark, CssCyberiaLight } from './components/cyberia-portal/CssCyberiaPortal.js';
 import { SocketIoCyberiaPortal } from './components/cyberia-portal/SocketIoCyberiaPortal.js';
 import { SocketIo } from './components/core/SocketIo.js';
-import { ElementsCyberiaPortal } from './components/cyberia-portal/ElementsCyberiaPortal.js';
+import { AppStoreCyberiaPortal } from './components/cyberia-portal/AppStoreCyberiaPortal.js';
 import { Keyboard } from './components/core/Keyboard.js';
-import { CyberiaPortalParams } from './components/cyberia-portal/CommonCyberiaPortal.js';
 
 window.onload = () =>
   Worker.instance({
@@ -26,11 +25,11 @@ window.onload = () =>
       await TranslateCyberiaPortal.Init();
       await Responsive.Init();
       await MenuCyberiaPortal.Render();
-      await SocketIo.Init({ channels: ElementsCyberiaPortal.Data });
+      await SocketIo.Init({ channels: AppStoreCyberiaPortal.Data });
       await SocketIoCyberiaPortal.Init();
       await LogInCyberiaPortal();
       await LogOutCyberiaPortal();
       await SignUpCyberiaPortal();
-      await Keyboard.Init({ callBackTime: CyberiaPortalParams.EVENT_CALLBACK_TIME });
+      await Keyboard.Init();
     },
   });

package/src/client/Default.index.js

@@ -11,10 +11,9 @@ import { RouterDefault } from './components/default/RoutesDefault.js';
 import { TranslateDefault } from './components/default/TranslateDefault.js';
 import { Worker } from './components/core/Worker.js';
 import { Keyboard } from './components/core/Keyboard.js';
-import { DefaultParams } from './components/default/CommonDefault.js';
 import { SocketIo } from './components/core/SocketIo.js';
 import { SocketIoDefault } from './components/default/SocketIoDefault.js';
-import { ElementsDefault } from './components/default/ElementsDefault.js';
+import { AppStoreDefault } from './components/default/AppStoreDefault.js';
 import { CssDefaultDark, CssDefaultLight } from './components/default/CssDefault.js';
 import { EventsUI } from './components/core/EventsUI.js';
 import { Modal } from './components/core/Modal.js';
@@ -71,14 +70,14 @@ window.onload = () =>
       await Responsive.Init();
       await MenuDefault.Render({ htmlMainBody });
       await SocketIo.Init({
-        channels: ElementsDefault.Data,
+        channels: AppStoreDefault.Data,
         path: `/`,
       });
       await SocketIoDefault.Init();
       await LogInDefault();
       await LogOutDefault();
       await SignUpDefault();
-      await Keyboard.Init({ callBackTime: DefaultParams.EVENT_CALLBACK_TIME });
+      await Keyboard.Init();
       await Modal.RenderSeoSanitizer();
     },
   });