cyberia 3.1.3 → 3.2.5

package/src/grpc/cyberia/grpc-server.js

@@ -0,0 +1,530 @@
+/**
+ * gRPC server for the Cyberia Engine data pipeline.
+ *
+ * Runs alongside Express on a separate port (default 50051).
+ * Provides read-only RPCs for the Go game server to fetch
+ * ObjectLayers, Instances, and Maps from MongoDB.
+ *
+ * @module src/grpc/cyberia/grpc-server.js
+ */
+
+import * as grpc from '@grpc/grpc-js';
+import * as protoLoader from '@grpc/proto-loader';
+import path from 'path';
+import { fileURLToPath } from 'url';
+import { DataBaseProvider } from '../../db/DataBaseProvider.js';
+import { loggerFactory } from '../../server/logger.js';
+import {
+  CYBERIA_INSTANCE_CONF_DEFAULTS as FALLBACK_CONFIG_DEFAULTS,
+  ENTITY_TYPE_DEFAULTS,
+  STATUS_ICONS,
+} from '../../api/cyberia-instance-conf/cyberia-instance-conf.defaults.js';
+import { generateFallbackWorld } from '../../api/cyberia-instance/cyberia-fallback-world.js';
+
+const logger = loggerFactory(import.meta);
+
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = path.dirname(__filename);
+
+const PROTO_PATH = path.resolve(__dirname, '../../../cyberia-server/proto/cyberia.proto');
+
+const packageDefinition = protoLoader.loadSync(PROTO_PATH, {
+  keepCase: false,
+  longs: Number,
+  enums: String,
+  defaults: true,
+  oneofs: true,
+});
+
+const proto = grpc.loadPackageDefinition(packageDefinition).cyberia;
+
+// ═══════════════════════════════════════════════════════════════════
+// Helpers
+// ═══════════════════════════════════════════════════════════════════
+
+function getModels(dbKey) {
+  const bucket = DataBaseProvider.instance[dbKey];
+  if (!bucket || !bucket.mongoose || !bucket.mongoose.models) {
+    throw new Error(`DataBaseProvider not loaded for key "${dbKey}"`);
+  }
+  return bucket.mongoose.models;
+}
+
+// ── Mongoose doc → protobuf message converters ───────────────────
+
+function toObjectLayerMsg(doc) {
+  const d = doc.data || {};
+  const item = d.item || {};
+  const stats = d.stats || {};
+  const ledger = d.ledger || {};
+  const render = d.render || {};
+  const rf = doc.objectLayerRenderFramesId;
+  let frameDuration = 250;
+  let isStateless = false;
+  if (rf && typeof rf === 'object') {
+    if (rf.frame_duration != null) frameDuration = rf.frame_duration;
+    if (rf.is_stateless != null) isStateless = rf.is_stateless;
+  }
+  return {
+    mongoId: String(doc._id),
+    stats: {
+      effect: stats.effect || 0,
+      resistance: stats.resistance || 0,
+      agility: stats.agility || 0,
+      range: stats.range || 0,
+      intelligence: stats.intelligence || 0,
+      utility: stats.utility || 0,
+    },
+    item: {
+      id: item.id || '',
+      type: item.type || '',
+      description: item.description || '',
+      activable: !!item.activable,
+    },
+    ledger: {
+      type: ledger.type || 'OFF_CHAIN',
+      address: ledger.address || '',
+      tokenId: ledger.tokenId || '',
+    },
+    render: {
+      cid: render.cid || '',
+      metadataCid: render.metadataCid || '',
+    },
+    sha256: doc.sha256 || '',
+    cid: doc.cid || '',
+    frameDuration,
+    isStateless,
+  };
+}
+
+function toEntityMsg(ent) {
+  return {
+    entityType: ent.entityType || 'floor',
+    initCellX: ent.initCellX || 0,
+    initCellY: ent.initCellY || 0,
+    dimX: ent.dimX || 1,
+    dimY: ent.dimY || 1,
+    color: ent.color || '',
+    objectLayerItemIds: ent.objectLayerItemIds || [],
+    spawnRadius: ent.spawnRadius || 0,
+    aggroRange: ent.aggroRange || 0,
+    maxLife: ent.maxLife || 0,
+    lifeRegen: ent.lifeRegen || 0,
+    portalSubtype: ent.portalSubtype || '',
+  };
+}
+
+function toMapMsg(doc) {
+  return {
+    mongoId: String(doc._id),
+    code: doc.code || '',
+    name: doc.name || '',
+    gridX: doc.gridX || 16,
+    gridY: doc.gridY || 16,
+    cellWidth: doc.cellWidth || 32,
+    cellHeight: doc.cellHeight || 32,
+    entities: (doc.entities || []).map(toEntityMsg),
+  };
+}
+
+function toInstanceMsg(doc) {
+  return {
+    mongoId: String(doc._id),
+    code: doc.code || '',
+    name: doc.name || '',
+    description: doc.description || '',
+    tags: doc.tags || [],
+    mapCodes: doc.cyberiaMapCodes || [],
+    portals: (doc.portals || []).map((p) => ({
+      sourceMapCode: p.sourceMapCode || '',
+      sourceCellX: p.sourceCellX || 0,
+      sourceCellY: p.sourceCellY || 0,
+      targetMapCode: p.targetMapCode || '',
+      targetCellX: p.targetCellX || 0,
+      targetCellY: p.targetCellY || 0,
+      portalMode: p.portalMode || 'inter-portal',
+    })),
+    topologyMode: doc.topologyMode || 'hybrid',
+    seed: doc.seed || '',
+  };
+}
+
+/**
+ * Converts a CyberiaInstanceConf Mongoose document (or plain object) into
+ * a complete InstanceConfig proto message.
+ * Any field that is null/undefined in `gc` falls back to FALLBACK_CONFIG_DEFAULTS,
+ * so partial DB documents always produce a fully playable config.
+ */
+function toInstanceConfig(gc) {
+  const fb = FALLBACK_CONFIG_DEFAULTS;
+  if (!gc) return buildFallbackConfig();
+
+  const colors =
+    gc.colors && gc.colors.length > 0
+      ? gc.colors.map((c) => ({
+          key: c.key || '',
+          r: c.r ?? 0,
+          g: c.g ?? 0,
+          b: c.b ?? 0,
+          a: c.a ?? 255,
+        }))
+      : fb.colors.map((c) => ({ ...c }));
+
+  // Merge entity defaults: use canonical ENTITY_TYPE_DEFAULTS as base, overlay with
+  // any instance-specific overrides stored in gc.entityDefaults.
+  const gcDefaults = gc.entityDefaults && gc.entityDefaults.length > 0 ? gc.entityDefaults : [];
+  const gcDefaultsMap = Object.fromEntries(gcDefaults.map((d) => [d.entityType, d]));
+  const entityDefaults = ENTITY_TYPE_DEFAULTS.map((canonical) => {
+    const override = gcDefaultsMap[canonical.entityType] ?? {};
+    const dols = override.defaultObjectLayers ?? canonical.defaultObjectLayers ?? [];
+    return {
+      entityType: canonical.entityType,
+      liveItemIds: override.liveItemIds ?? canonical.liveItemIds,
+      deadItemIds: override.deadItemIds ?? canonical.deadItemIds,
+      colorKey: override.colorKey ?? canonical.colorKey,
+      defaultObjectLayers: dols.map((ol) => ({
+        itemId: ol.itemId || '',
+        active: !!ol.active,
+        quantity: ol.quantity || 0,
+      })),
+    };
+  });
+
+  return {
+    cellSize: gc.cellSize ?? fb.cellSize,
+    fps: gc.fps ?? fb.fps,
+    interpolationMs: gc.interpolationMs ?? fb.interpolationMs,
+    defaultObjWidth: gc.defaultObjWidth ?? fb.defaultObjWidth,
+    defaultObjHeight: gc.defaultObjHeight ?? fb.defaultObjHeight,
+    cameraSmoothing: gc.cameraSmoothing ?? fb.cameraSmoothing,
+    cameraZoom: gc.cameraZoom ?? fb.cameraZoom,
+    defaultWidthScreenFactor: gc.defaultWidthScreenFactor ?? fb.defaultWidthScreenFactor,
+    defaultHeightScreenFactor: gc.defaultHeightScreenFactor ?? fb.defaultHeightScreenFactor,
+    devUi: gc.devUi ?? fb.devUi,
+    colors,
+    aoiRadius: gc.aoiRadius ?? fb.aoiRadius,
+    portalHoldTimeMs: gc.portalHoldTimeMs ?? fb.portalHoldTimeMs,
+    portalSpawnRadius: gc.portalSpawnRadius ?? fb.portalSpawnRadius,
+    entityBaseSpeed: gc.entityBaseSpeed ?? fb.entityBaseSpeed,
+    entityBaseMaxLife: gc.entityBaseMaxLife ?? fb.entityBaseMaxLife,
+    entityBaseActionCooldownMs: gc.entityBaseActionCooldownMs ?? fb.entityBaseActionCooldownMs,
+    entityBaseMinActionCooldownMs: gc.entityBaseMinActionCooldownMs ?? fb.entityBaseMinActionCooldownMs,
+    botAggroRange: gc.botAggroRange ?? fb.botAggroRange,
+    defaultPlayerWidth: gc.defaultPlayerWidth ?? fb.defaultPlayerWidth,
+    defaultPlayerHeight: gc.defaultPlayerHeight ?? fb.defaultPlayerHeight,
+    playerBaseLifeRegenMin: gc.playerBaseLifeRegenMin ?? fb.playerBaseLifeRegenMin,
+    playerBaseLifeRegenMax: gc.playerBaseLifeRegenMax ?? fb.playerBaseLifeRegenMax,
+    sumStatsLimit: gc.sumStatsLimit ?? fb.sumStatsLimit,
+    maxActiveLayers: gc.maxActiveLayers ?? fb.maxActiveLayers,
+    initialLifeFraction: gc.initialLifeFraction ?? fb.initialLifeFraction,
+    respawnDurationMs: gc.respawnDurationMs ?? fb.respawnDurationMs,
+    collisionLifeLoss: gc.collisionLifeLoss ?? fb.collisionLifeLoss,
+    // Economy — Fountain & Sink (nested, mirrors EconomyRules proto message).
+    economyRules: {
+      botSpawnCoins: gc.economyRules?.botSpawnCoins ?? fb.economyRules.botSpawnCoins,
+      playerSpawnCoins: gc.economyRules?.playerSpawnCoins ?? fb.economyRules.playerSpawnCoins,
+      coinKillPercentVsBot: gc.economyRules?.coinKillPercentVsBot ?? fb.economyRules.coinKillPercentVsBot,
+      coinKillPercentVsPlayer: gc.economyRules?.coinKillPercentVsPlayer ?? fb.economyRules.coinKillPercentVsPlayer,
+      coinKillMinAmount: gc.economyRules?.coinKillMinAmount ?? fb.economyRules.coinKillMinAmount,
+      respawnCostPercent: gc.economyRules?.respawnCostPercent ?? fb.economyRules.respawnCostPercent,
+      portalFee: gc.economyRules?.portalFee ?? fb.economyRules.portalFee,
+      craftingFeePercent: gc.economyRules?.craftingFeePercent ?? fb.economyRules.craftingFeePercent,
+    },
+    lifeRegenChance: gc.lifeRegenChance ?? fb.lifeRegenChance,
+    maxChance: gc.maxChance ?? fb.maxChance,
+    entityDefaults,
+    skillConfig: (gc.skillConfig || []).map((sc) => ({
+      triggerItemId: sc.triggerItemId || '',
+      logicEventIds: sc.logicEventIds || [],
+    })),
+    skillRules: {
+      projectileSpawnChance: gc.skillRules?.projectileSpawnChance ?? fb.skillRules.projectileSpawnChance,
+      projectileLifetimeMs: gc.skillRules?.projectileLifetimeMs ?? fb.skillRules.projectileLifetimeMs,
+      projectileWidth: gc.skillRules?.projectileWidth ?? fb.skillRules.projectileWidth,
+      projectileHeight: gc.skillRules?.projectileHeight ?? fb.skillRules.projectileHeight,
+      projectileSpeedMultiplier: gc.skillRules?.projectileSpeedMultiplier ?? fb.skillRules.projectileSpeedMultiplier,
+      doppelgangerSpawnChance: gc.skillRules?.doppelgangerSpawnChance ?? fb.skillRules.doppelgangerSpawnChance,
+      doppelgangerLifetimeMs: gc.skillRules?.doppelgangerLifetimeMs ?? fb.skillRules.doppelgangerLifetimeMs,
+      doppelgangerSpawnRadius: gc.skillRules?.doppelgangerSpawnRadius ?? fb.skillRules.doppelgangerSpawnRadius,
+      doppelgangerInitialLifeFraction:
+        gc.skillRules?.doppelgangerInitialLifeFraction ?? fb.skillRules.doppelgangerInitialLifeFraction,
+    },
+    // Equipment rules — governs activation constraints (nested, mirrors EquipmentRules proto message).
+    equipmentRules: {
+      activeItemTypes: gc.equipmentRules?.activeItemTypes ?? fb.equipmentRules.activeItemTypes,
+      onePerType: gc.equipmentRules?.onePerType ?? fb.equipmentRules.onePerType,
+      requireSkin: gc.equipmentRules?.requireSkin ?? fb.equipmentRules.requireSkin,
+    },
+    // Status icon mapping — u8 ID → icon filename stem + border colour.
+    // Border colours come from the frozen STATUS_ICONS constant (canonical
+    // source of truth).  DB entries may override iconId but borderColor is
+    // always canonical — the DB schema defaults are generic grey, not the
+    // actual per-status colours.
+    statusIcons: STATUS_ICONS.map((canon) => {
+      const dbEntry = (gc.statusIcons || []).find((s) => s.id === canon.id);
+      const bc = canon.borderColor || {};
+      return {
+        id: canon.id,
+        iconId: (dbEntry && dbEntry.iconId) || canon.iconId || '',
+        borderColorR: bc.r ?? 100,
+        borderColorG: bc.g ?? 100,
+        borderColorB: bc.b ?? 100,
+        borderColorA: bc.a ?? 200,
+      };
+    }),
+  };
+}
+
+/**
+ * Builds a minimal InstanceConfig with playable defaults.
+ * Derived from CYBERIA_INSTANCE_CONF_DEFAULTS (shared with the Mongoose model).
+ * Used when the requested instance does not exist in the database.
+ */
+function buildFallbackConfig() {
+  return JSON.parse(JSON.stringify(FALLBACK_CONFIG_DEFAULTS));
+}
+
+// ═══════════════════════════════════════════════════════════════════
+// RPC handler factory
+// ═══════════════════════════════════════════════════════════════════
+
+function buildHandlers(dbKey) {
+  return {
+    async ping(_call, callback) {
+      callback(null, { serverTimeMs: Date.now() });
+    },
+
+    // Server-streaming: streams all ObjectLayers
+    async getObjectLayerBatch(call) {
+      try {
+        const models = getModels(dbKey);
+        const filter = {};
+        if (call.request.itemTypeFilter) {
+          filter['data.item.type'] = call.request.itemTypeFilter;
+        }
+        const cursor = models.ObjectLayer.find(filter)
+          .populate('objectLayerRenderFramesId', { _id: 1, frame_duration: 1, is_stateless: 1 })
+          .lean()
+          .cursor();
+        for await (const doc of cursor) {
+          call.write(toObjectLayerMsg(doc));
+        }
+        call.end();
+      } catch (err) {
+        logger.error('getObjectLayerBatch:', err);
+        call.destroy(new Error(err.message));
+      }
+    },
+
+    async getObjectLayer(call, callback) {
+      try {
+        const models = getModels(dbKey);
+        const doc = await models.ObjectLayer.findOne({ 'data.item.id': call.request.itemId })
+          .populate('objectLayerRenderFramesId', { _id: 1, frame_duration: 1, is_stateless: 1 })
+          .lean();
+        if (!doc)
+          return callback({ code: grpc.status.NOT_FOUND, message: `ObjectLayer "${call.request.itemId}" not found` });
+        callback(null, toObjectLayerMsg(doc));
+      } catch (err) {
+        logger.error('getObjectLayer:', err);
+        callback({ code: grpc.status.INTERNAL, message: err.message });
+      }
+    },
+
+    async getMapData(call, callback) {
+      try {
+        const models = getModels(dbKey);
+        const { mapCode, instanceCode } = call.request;
+        const doc = await models.CyberiaMap.findOne({ code: mapCode }).lean();
+        if (!doc) return callback({ code: grpc.status.NOT_FOUND, message: `Map "${mapCode}" not found` });
+
+        // Track which instance is serving each mapCode in real time.
+        // instanceCode is provided by the Go server in every GetMapData request.
+        if (instanceCode) {
+          models.GlobalMapCodeRegistry.findOneAndUpdate(
+            { mapCode },
+            { instanceCode, status: 'active' },
+            { upsert: true, new: true, timestamps: true },
+          ).catch((err) => logger.warn('getMapData registry update failed:', err.message));
+        }
+
+        callback(null, { map: toMapMsg(doc) });
+      } catch (err) {
+        logger.error('getMapData:', err);
+        callback({ code: grpc.status.INTERNAL, message: err.message });
+      }
+    },
+
+    async getFullInstance(call, callback) {
+      try {
+        const models = getModels(dbKey);
+        // Normalise empty instanceCode to the canonical fallback name.
+        const instanceCode = call.request.instanceCode || 'default';
+        const inst = await models.CyberiaInstance.findOne({ code: instanceCode }).populate('conf').lean();
+
+        // ── Fallback: instance not found → return a multi-map procedural world ──
+        if (!inst) {
+          logger.info(`Instance "${instanceCode}" not found — returning fallback world.`);
+          const world = generateFallbackWorld();
+          const fallbackConf = buildFallbackConfig();
+
+          // Collect all objectLayerItemIds from the generated maps so the
+          // Go server can resolve atlases at startup.
+          const fallbackItemIds = new Set();
+          for (const m of world.maps) {
+            for (const e of m.entities || []) {
+              for (const id of e.objectLayerItemIds || []) fallbackItemIds.add(id);
+            }
+          }
+          // Also include system OL items from entity defaults.
+          for (const d of fallbackConf.entityDefaults || []) {
+            for (const id of d.liveItemIds || []) fallbackItemIds.add(id);
+            for (const id of d.deadItemIds || []) fallbackItemIds.add(id);
+            for (const ol of d.defaultObjectLayers || []) {
+              if (ol.itemId) fallbackItemIds.add(ol.itemId);
+            }
+          }
+
+          const fallbackOlDocs = fallbackItemIds.size
+            ? await models.ObjectLayer.find({ 'data.item.id': { $in: [...fallbackItemIds] } })
+                .populate('objectLayerRenderFramesId', { _id: 1, frame_duration: 1, is_stateless: 1 })
+                .lean()
+            : [];
+
+          callback(null, {
+            instance: toInstanceMsg({
+              _id: '',
+              code: 'fallback',
+              name: 'Fallback Instance',
+              description: 'Auto-generated procedural world (not persisted)',
+              tags: ['fallback', 'procedural'],
+              cyberiaMapCodes: world.instance.cyberiaMapCodes,
+              portals: world.portals,
+              topologyMode: 'procedural',
+              seed: instanceCode,
+            }),
+            maps: world.maps.map((m) => ({
+              mongoId: '',
+              code: m.code,
+              name: m.name,
+              gridX: m.gridX,
+              gridY: m.gridY,
+              cellWidth: m.cellWidth,
+              cellHeight: m.cellHeight,
+              entities: (m.entities || []).map(toEntityMsg),
+            })),
+            objectLayers: fallbackOlDocs.map(toObjectLayerMsg),
+            config: toInstanceConfig(fallbackConf),
+          });
+          return;
+        }
+
+        // ── Instance found — load maps + entity OLs + config default OLs ──────
+        const conf = inst.conf || {};
+        const mapCodes = inst.cyberiaMapCodes || [];
+        const mapDocs = mapCodes.length ? await models.CyberiaMap.find({ code: { $in: mapCodes } }).lean() : [];
+
+        // Collect all item IDs referenced by map entities.
+        const itemIds = new Set();
+        for (const m of mapDocs) {
+          for (const e of m.entities || []) {
+            for (const id of e.objectLayerItemIds || []) itemIds.add(id);
+          }
+        }
+
+        // Also include "system" item IDs from the instance config so the
+        // Go server has their OL data cached without extra round trips:
+        // Include OL item IDs from entityDefaults so the Go server has all
+        // default atlas data cached at startup without needing extra round trips.
+        for (const d of conf.entityDefaults || []) {
+          for (const id of d.liveItemIds || []) itemIds.add(id);
+          for (const id of d.deadItemIds || []) itemIds.add(id);
+          for (const ol of d.defaultObjectLayers || []) {
+            if (ol.itemId) itemIds.add(ol.itemId);
+          }
+        }
+
+        const olDocs = itemIds.size
+          ? await models.ObjectLayer.find({ 'data.item.id': { $in: [...itemIds] } })
+              .populate('objectLayerRenderFramesId', { _id: 1, frame_duration: 1, is_stateless: 1 })
+              .lean()
+          : [];
+
+        callback(null, {
+          instance: toInstanceMsg(inst),
+          maps: mapDocs.map(toMapMsg),
+          objectLayers: olDocs.map(toObjectLayerMsg),
+          config: toInstanceConfig(conf),
+        });
+      } catch (err) {
+        logger.error('getFullInstance:', err);
+        callback({ code: grpc.status.INTERNAL, message: err.message });
+      }
+    },
+
+    async getObjectLayerManifest(_call, callback) {
+      try {
+        const models = getModels(dbKey);
+        const docs = await models.ObjectLayer.find({}, { 'data.item.id': 1, sha256: 1 }).lean();
+        callback(null, {
+          entries: docs.map((d) => ({ itemId: d.data?.item?.id || '', sha256: d.sha256 || '' })),
+        });
+      } catch (err) {
+        logger.error('getObjectLayerManifest:', err);
+        callback({ code: grpc.status.INTERNAL, message: err.message });
+      }
+    },
+  };
+}
+
+// ═══════════════════════════════════════════════════════════════════
+// Server lifecycle
+// ═══════════════════════════════════════════════════════════════════
+
+const GrpcServer = {
+  _server: null,
+
+  /**
+   * @param {Object} opts
+   * @param {string} opts.host  - DataBaseProvider host key
+   * @param {string} opts.path  - DataBaseProvider path key
+   * @param {number} [opts.port=50051]
+   */
+  async start({ host, path: dbPath, port = 50051 } = {}) {
+    const dbKey = `${host}${dbPath}`;
+    const server = new grpc.Server({
+      'grpc.max_send_message_length': 64 * 1024 * 1024,
+      'grpc.max_receive_message_length': 16 * 1024 * 1024,
+    });
+
+    server.addService(proto.CyberiaDataService.service, buildHandlers(dbKey));
+
+    // gRPC runs over Kubernetes internal network (ClusterIP) — always insecure
+    const creds = grpc.ServerCredentials.createInsecure();
+
+    return new Promise((resolve, reject) => {
+      server.bindAsync(`0.0.0.0:${port}`, creds, (err) => {
+        if (err) {
+          logger.error('gRPC bind failed:', err);
+          return reject(err);
+        }
+        GrpcServer._server = server;
+        logger.info(`gRPC server listening on 0.0.0.0:${port}`);
+        resolve(server);
+      });
+    });
+  },
+
+  async stop() {
+    if (!GrpcServer._server) return;
+    return new Promise((resolve) => {
+      GrpcServer._server.tryShutdown(() => {
+        GrpcServer._server = null;
+        logger.info('gRPC server stopped');
+        resolve();
+      });
+    });
+  },
+};
+
+export { GrpcServer };

package/src/index.js

@@ -10,6 +10,7 @@ import UnderpostKickStart from './cli/kickstart.js';
 import UnderpostCluster from './cli/cluster.js';
 import UnderpostDB from './cli/db.js';
 import UnderpostDeploy from './cli/deploy.js';
+import UnderpostKubectl from './cli/kubectl.js';
 import UnderpostRootEnv from './cli/env.js';
 import UnderpostFileStorage from './cli/fs.js';
 import UnderpostIPFS from './cli/ipfs.js';
@@ -22,6 +23,7 @@ import UnderpostSecret from './cli/secrets.js';
 import UnderpostSSH from './cli/ssh.js';
 import UnderpostStatic from './cli/static.js';
 import UnderpostTest from './cli/test.js';
+import UnderpostRelease from './cli/release.js';
 import UnderpostSystemProvisionig from './cli/system.js';
 
 import UnderpostDns from './server/dns.js';
@@ -42,7 +44,7 @@ class Underpost {
    * @type {String}
    * @memberof Underpost
    */
-  static version = 'v3.1.3';
+  static version = 'v3.2.5';
 
   /**
    * Required Node.js major version
@@ -126,6 +128,15 @@ class Underpost {
   static get db() {
     return UnderpostDB.API;
   }
+  /**
+   * Kubectl cli API
+   * @static
+   * @type {UnderpostKubectl.API}
+   * @memberof Underpost
+   */
+  static get kubectl() {
+    return UnderpostKubectl.API;
+  }
   /**
    * Deployment cli API
    * @static
@@ -280,6 +291,16 @@ class Underpost {
   static get tls() {
     return UnderpostTLS.API;
   }
+
+  /**
+   * Release orchestrator cli API
+   * @static
+   * @type {UnderpostRelease.API}
+   * @memberof Underpost
+   */
+  static get release() {
+    return UnderpostRelease.API;
+  }
 }
 
 if (!process.version || !process.version.startsWith(`${Underpost.majorNodejsVersion}.`))
@@ -300,6 +321,7 @@ export {
   UnderpostCluster,
   UnderpostDB,
   UnderpostDeploy,
+  UnderpostKubectl,
   UnderpostRootEnv,
   UnderpostFileStorage,
   UnderpostImage,
@@ -317,6 +339,7 @@ export {
   UnderpostBackup,
   UnderpostCron,
   UnderpostStartUp,
+  UnderpostRelease,
   UnderpostTLS,
 };
 

package/src/runtime/express/Dockerfile

@@ -30,6 +30,10 @@ RUN dnf clean all
 RUN node --version
 RUN npm --version
 
+# Create non-root user for secure container execution (cron jobs, init containers)
+# Deployment containers override to root via securityContext when npm install -g is needed
+RUN useradd -m -u 1000 -s /bin/bash dd
+
 # Set working directory
 WORKDIR /home/dd
 

package/src/runtime/express/Express.js

@@ -79,6 +79,7 @@ class ExpressService {
     peer,
     valkey,
     apiBaseHost,
+    grpc,
     redirectTarget,
     rootHostPath,
     confSSR,
@@ -135,7 +136,17 @@ class ExpressService {
     });
 
     // Static file serving
-    app.use('/', express.static(directory ? directory : `.${rootHostPath}`));
+    app.use(
+      '/',
+      express.static(directory ? directory : `.${rootHostPath}`, {
+        setHeaders: (res, filePath) => {
+          if (filePath.includes('/assets/')) {
+            res.set('Access-Control-Allow-Origin', '*');
+            res.set('Cross-Origin-Resource-Policy', 'cross-origin');
+          }
+        },
+      }),
+    );
 
     // Handle redirection-only instances
     if (redirect) {
@@ -198,6 +209,12 @@ class ExpressService {
         });
       }
 
+      // gRPC server
+      if (path === '/' && grpc && grpc.module) {
+        const { GrpcServer } = await import(`../../grpc/${grpc.module}/grpc-server.js`);
+        await GrpcServer.start({ host, path, port: grpc.port || 50051 });
+      }
+
       // API router loading
       if (apis && apis.length > 0) {
         const authMiddleware = authMiddlewareFactory({ host, path });

package/src/runtime/lampp/Dockerfile

@@ -20,8 +20,8 @@ RUN dnf -y update && \
     perl && \
     dnf clean all
 
-# --- Download and install XAMPP
-RUN curl -L -o /tmp/xampp-linux-installer.run "https://sourceforge.net/projects/xampp/files/XAMPP%20Linux/7.4.33/xampp-linux-x64-7.4.33-0-installer.run" && \
+# --- Download and install XAMPP (PHP 8.2)
+RUN curl -L -o /tmp/xampp-linux-installer.run "https://sourceforge.net/projects/xampp/files/XAMPP%20Linux/8.2.12/xampp-linux-x64-8.2.12-0-installer.run" && \
     chmod +x /tmp/xampp-linux-installer.run && \
     bash -c "/tmp/xampp-linux-installer.run --mode unattended" && \
     ln -sf /opt/lampp/lampp /usr/bin/lampp
@@ -31,6 +31,13 @@ RUN mkdir -p /opt/lampp/htdocs && \
     chown -R root:root /opt/lampp/htdocs && \
     chmod -R a+rX /opt/lampp/htdocs
 
+# Add XAMPP binaries and /usr/local/bin to PATH for all shells
+ENV PATH="/opt/lampp/bin:/usr/local/bin:${PATH}"
+RUN echo 'export PATH="/opt/lampp/bin:/usr/local/bin:${PATH}"' > /etc/profile.d/lampp.sh
+
+# Provide a no-op sendmail so PHP plugins don't error on mail calls
+RUN printf '#!/bin/sh\ncat > /dev/null\n' > /usr/sbin/sendmail && chmod +x /usr/sbin/sendmail
+
 # Install Node.js
 RUN curl -fsSL https://rpm.nodesource.com/setup_24.x | bash -
 RUN dnf install nodejs -y
@@ -40,6 +47,10 @@ RUN dnf clean all
 RUN node --version
 RUN npm --version
 
+# Create non-root user for secure container execution (cron jobs, init containers)
+# Deployment containers override to root via securityContext when npm install -g is needed
+RUN useradd -m -u 1000 -s /bin/bash dd
+
 # Set working directory
 WORKDIR /home/dd