cyberia 3.2.22 → 3.2.70

package/ipfs/configure-ipfs.sh

@@ -0,0 +1,13 @@
+#!/bin/sh
+# Kubo /container-init.d hook — runs after `ipfs init`, before the daemon starts.
+# Compose equivalent of the Addresses/Datastore config in manifests/ipfs
+# configmap.yaml (configure-ipfs.sh). Binds the RPC API (5001) and gateway
+# (8080) to all interfaces so the engine and ipfs-cluster containers can reach
+# the daemon at http://ipfs:5001 (ipfs-client.js IPFS_API_URL).
+set -e
+
+ipfs config Addresses.API /ip4/0.0.0.0/tcp/5001
+ipfs config Addresses.Gateway /ip4/0.0.0.0/tcp/8080
+ipfs config --json Swarm.ConnMgr.HighWater 2000
+ipfs config --json Datastore.BloomFilterSize 1048576
+ipfs config Datastore.StorageMax 100GB

package/manifests/cronjobs/dd-cron/dd-cron-backup.yaml

@@ -23,7 +23,7 @@ spec:
         spec:
           containers:
             - name: dd-cron-backup
-              image: underpost/underpost-engine:v3.2.22
+              image: underpost/underpost-engine:v3.2.70
               command:
                 - /bin/sh
                 - -c

package/manifests/cronjobs/dd-cron/dd-cron-dns.yaml

@@ -23,7 +23,7 @@ spec:
         spec:
           containers:
             - name: dd-cron-dns
-              image: underpost/underpost-engine:v3.2.22
+              image: underpost/underpost-engine:v3.2.70
               command:
                 - /bin/sh
                 - -c

package/manifests/deployment/dd-cyberia-development/deployment.yaml

@@ -20,7 +20,7 @@ spec:
     spec:
       containers:
         - name: dd-cyberia-development-blue
-          image: underpost/underpost-engine:v3.2.22
+          image: underpost/underpost-engine:v3.2.70
           imagePullPolicy: IfNotPresent
           envFrom:
             - secretRef:
@@ -229,7 +229,7 @@ spec:
     spec:
       containers:
         - name: dd-cyberia-development-green
-          image: underpost/underpost-engine:v3.2.22
+          image: underpost/underpost-engine:v3.2.70
           imagePullPolicy: IfNotPresent
           envFrom:
             - secretRef:

package/manifests/deployment/dd-cyberia-development/grpc-service.yaml

@@ -0,0 +1,17 @@
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: dd-cyberia-grpc-service-development-blue
+  namespace: default
+  labels:
+    app: dd-cyberia-grpc-service-development-blue
+spec:
+  type: ClusterIP
+  selector:
+    app: dd-cyberia-development-blue
+  ports:
+    - name: grpc-50051
+      protocol: TCP
+      port: 50051
+      targetPort: 50051

package/manifests/deployment/dd-cyberia-development/pv-pvc.yaml

@@ -10,6 +10,14 @@ spec:
     - ReadWriteOnce
   persistentVolumeReclaimPolicy: Retain
   storageClassName: manual
+  nodeAffinity:
+    required:
+      nodeSelectorTerms:
+        - matchExpressions:
+            - key: kubernetes.io/hostname
+              operator: In
+              values:
+                - kind-worker
   claimRef:
     apiVersion: v1
     kind: PersistentVolumeClaim
@@ -43,6 +51,14 @@ spec:
     - ReadWriteOnce
   persistentVolumeReclaimPolicy: Retain
   storageClassName: manual
+  nodeAffinity:
+    required:
+      nodeSelectorTerms:
+        - matchExpressions:
+            - key: kubernetes.io/hostname
+              operator: In
+              values:
+                - kind-worker
   claimRef:
     apiVersion: v1
     kind: PersistentVolumeClaim
@@ -76,6 +92,14 @@ spec:
     - ReadWriteOnce
   persistentVolumeReclaimPolicy: Retain
   storageClassName: manual
+  nodeAffinity:
+    required:
+      nodeSelectorTerms:
+        - matchExpressions:
+            - key: kubernetes.io/hostname
+              operator: In
+              values:
+                - kind-worker
   claimRef:
     apiVersion: v1
     kind: PersistentVolumeClaim
@@ -109,6 +133,14 @@ spec:
     - ReadWriteOnce
   persistentVolumeReclaimPolicy: Retain
   storageClassName: manual
+  nodeAffinity:
+    required:
+      nodeSelectorTerms:
+        - matchExpressions:
+            - key: kubernetes.io/hostname
+              operator: In
+              values:
+                - kind-worker
   claimRef:
     apiVersion: v1
     kind: PersistentVolumeClaim

package/manifests/deployment/dd-default-development/deployment.yaml

@@ -17,7 +17,7 @@ spec:
     spec:
       containers:
         - name: dd-default-development-blue
-          image: underpost/underpost-engine:v3.2.22
+          image: underpost/underpost-engine:v3.2.70
           #          resources:
           #            requests:
           #              memory: "124Ki"
@@ -98,7 +98,7 @@ spec:
     spec:
       containers:
         - name: dd-default-development-green
-          image: underpost/underpost-engine:v3.2.22
+          image: underpost/underpost-engine:v3.2.70
           #          resources:
           #            requests:
           #              memory: "124Ki"

package/mongodb/entrypoint.sh

@@ -0,0 +1,76 @@
+#!/usr/bin/env bash
+# Generated by 'underpost docker-compose --generate' — do not hand-edit.
+set -e
+
+KEYFILE=/opt/keyfile/mongodb-keyfile
+RS="${DB_REPLICA_SET:-rs0}"
+MEMBER_HOST="mongodb:27017"
+
+if [ ! -s "$KEYFILE" ]; then
+  openssl rand -base64 756 > "$KEYFILE"
+fi
+chmod 400 "$KEYFILE"
+chown 999:999 "$KEYFILE"
+mkdir -p /data/db
+chown -R 999:999 /data/db
+
+# One-time replica-set + root-user bootstrap via the localhost exception,
+# performed in the background once mongod accepts loopback connections.
+(
+  for i in $(seq 1 60); do
+    if mongosh --quiet --host 127.0.0.1 --eval 'db.adminCommand({ ping: 1 })' >/dev/null 2>&1; then
+      break
+    fi
+    sleep 1
+  done
+
+  cat > /tmp/mongo-bootstrap.js <<JS
+var RS = "$RS";
+var HOST = "$MEMBER_HOST";
+var U = "$MONGO_INITDB_ROOT_USERNAME";
+var P = "$MONGO_INITDB_ROOT_PASSWORD";
+function waitPrimary() {
+  for (var i = 0; i < 60; i++) {
+    var h = db.hello();
+    if (h.isWritablePrimary) return true;
+    sleep(1000);
+  }
+  return false;
+}
+var initialized = false;
+try {
+  var s = rs.status();
+  if (s && s.ok === 1) initialized = true;
+} catch (e) {
+  var m = String(e);
+  if (m.indexOf("requires authentication") >= 0 || m.indexOf("not authorized") >= 0 || m.indexOf("Unauthorized") >= 0) {
+    initialized = true;
+  } else if (m.indexOf("NotYetInitialized") < 0 && m.indexOf("no replset config") < 0) {
+    throw e;
+  }
+}
+if (!initialized) {
+  rs.initiate({ _id: RS, members: [{ _id: 0, host: HOST }] });
+  waitPrimary();
+  var admin = db.getSiblingDB("admin");
+  try {
+    admin.createUser({ user: U, pwd: P, roles: [{ role: "root", db: "admin" }] });
+    print("BOOTSTRAP_USER_CREATED");
+  } catch (e) {
+    var s2 = String(e);
+    if (s2.indexOf("already exists") < 0 && s2.indexOf("not authorized") < 0 && s2.indexOf("requires authentication") < 0) {
+      throw e;
+    }
+    print("BOOTSTRAP_USER_SKIP");
+  }
+  print("BOOTSTRAP_DONE");
+} else {
+  print("BOOTSTRAP_ALREADY_INITIALIZED");
+}
+JS
+
+  mongosh --quiet --host 127.0.0.1 /tmp/mongo-bootstrap.js > /tmp/mongo-bootstrap.log 2>&1 || true
+) &
+
+exec gosu mongodb mongod \
+  --replSet "$RS" --auth --clusterAuthMode keyFile --keyFile "$KEYFILE" --bind_ip_all

package/nginx.conf

@@ -0,0 +1,87 @@
+# Reverse proxy for the Cyberia ecosystem compose stack (custom workflow:
+# --deploy-id dd-cyberia --docker-compose-id cyberia). Hand-authored source of
+# truth for this stack — used as-is (not generated). Mirrors the render format
+# of src/runtime/nginx/Nginx.js (websocket upgrade map, named upstreams,
+# proxy_http_version 1.1, per-host servers).
+#
+# Host -> upstream mapping (matches engine-private/conf/dd-cyberia hosts):
+#   www.cyberiaonline.com    -> engine-cyberia:4005  (portal + REST + WS authority)
+#   server.cyberiaonline.com -> cyberia-server:8081  (Go MMO simulation / websocket)
+#   client.cyberiaonline.com -> cyberia-client:8081  (WASM presentation bundle)
+
+map $http_upgrade $connection_upgrade {
+    default upgrade;
+    ''      close;
+}
+
+upstream up_engine_cyberia { server engine-cyberia:4005; }
+upstream up_cyberia_server { server cyberia-server:8081; }
+upstream up_cyberia_client { server cyberia-client:8081; }
+
+proxy_http_version 1.1;
+
+server {
+    listen 80 default_server;
+    server_name _ cyberiaonline.com www.cyberiaonline.com;
+
+    location = /healthz {
+        access_log off;
+        return 200 "ok\n";
+        add_header Content-Type text/plain;
+    }
+
+    location / {
+        proxy_pass http://up_engine_cyberia;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection $connection_upgrade;
+        proxy_read_timeout 3600s;
+    }
+}
+
+server {
+    listen 80;
+    server_name server.cyberiaonline.com;
+
+    location = /healthz {
+        access_log off;
+        return 200 "ok\n";
+        add_header Content-Type text/plain;
+    }
+
+    location / {
+        proxy_pass http://up_cyberia_server;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection $connection_upgrade;
+        proxy_read_timeout 3600s;
+    }
+}
+
+server {
+    listen 80;
+    server_name client.cyberiaonline.com;
+
+    location = /healthz {
+        access_log off;
+        return 200 "ok\n";
+        add_header Content-Type text/plain;
+    }
+
+    location / {
+        proxy_pass http://up_cyberia_client;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection $connection_upgrade;
+        proxy_read_timeout 3600s;
+    }
+}

package/package.json

@@ -2,7 +2,7 @@
     "type": "module",
     "main": "src/index.js",
     "name": "cyberia",
-    "version": "3.2.22",
+    "version": "3.2.70",
     "description": "Cyberia CLI — toolchain for the Cyberia MMO data layer, content pipeline, persistence, gRPC services, and ERC-1155 lifecycle on Hyperledger Besu.",
     "scripts": {
         "start": "node --max-old-space-size=8192 src/server",
@@ -26,7 +26,18 @@
         "security:secrets:ci": "gitleaks detect --source . --config .gitleaks.toml --redact=1",
         "security:deps": "npm audit",
         "security": "npm run security:secrets:ci && npm run security:deps",
-        "clean": "node bin env clean && node bin run clean"
+        "clean": "node bin env clean && node bin run clean",
+        "docker:generate": "node bin docker-compose --generate",
+        "docker:up": "node bin docker-compose --up",
+        "docker:up:build": "node bin docker-compose --up --build",
+        "docker:down": "node bin docker-compose --down",
+        "docker:down:volumes": "node bin docker-compose --down --volumes",
+        "docker:restart": "node bin docker-compose --restart",
+        "docker:build": "node bin docker-compose --build",
+        "docker:pull": "node bin docker-compose --pull",
+        "docker:logs": "node bin docker-compose --logs",
+        "docker:status": "node bin docker-compose --status",
+        "docker:shell": "node bin docker-compose --shell"
     },
     "bin": {
         "cyberia": "bin/index.js"
@@ -60,14 +71,14 @@
     },
     "homepage": "https://github.com/underpostnet/engine-cyberia#readme",
     "dependencies": {
-        "@fortawesome/fontawesome-free": "^7.2.0",
-        "@fullcalendar/rrule": "^6.1.20",
+        "@fortawesome/fontawesome-free": "^7.3.0",
+        "@fullcalendar/rrule": "^6.1.21",
         "@grpc/grpc-js": "^1.14.4",
         "@grpc/proto-loader": "^0.8.1",
         "@neodrag/vanilla": "^2.3.1",
-        "adm-zip": "^0.5.17",
-        "ag-grid-community": "^35.3.0",
-        "axios": "^1.16.1",
+        "adm-zip": "^0.5.18",
+        "ag-grid-community": "^36.0.0",
+        "axios": "^1.18.1",
         "bumpp": "^11.1.0",
         "chai": "^6.2.2",
         "clipboardy": "^5.3.1",
@@ -78,10 +89,10 @@
         "cookie-parser": "^1.4.7",
         "cors": "^2.8.6",
         "d3": "^7.9.0",
-        "dexie": "^4.4.3",
+        "dexie": "^4.4.4",
         "dotenv": "^17.4.2",
         "easymde": "^2.21.0",
-        "esbuild": "^0.28.0",
+        "esbuild": "^0.28.1",
         "escape-string-regexp": "^5.0.0",
         "express": "^5.2.1",
         "express-fileupload": "^1.4.3",
@@ -89,21 +100,21 @@
         "express-slow-down": "^3.1.0",
         "fast-json-stable-stringify": "^2.1.0",
         "favicons": "^7.3.0",
-        "fs-extra": "^11.3.5",
-        "fullcalendar": "^6.1.15",
+        "fs-extra": "^11.3.6",
+        "fullcalendar": "^6.1.21",
         "helmet": "^8.2.0",
         "html-minifier-terser": "^7.2.0",
-        "http-proxy-middleware": "^4.0.0",
+        "http-proxy-middleware": "^4.2.0",
         "ignore-walk": "^9.0.0",
         "iovalkey": "^0.3.3",
         "json-colorizer": "^3.0.1",
         "jsonwebtoken": "^9.0.3",
-        "mariadb": "^3.2.2",
+        "mariadb": "^3.5.3",
+        "marked": "^18.0.5",
         "mocha": "^11.7.6",
-        "marked": "^18.0.4",
-        "mongoose": "^9.6.3",
-        "morgan": "^1.10.0",
-        "nodemailer": "^8.0.10",
+        "mongoose": "^9.7.3",
+        "morgan": "^1.11.0",
+        "nodemailer": "^9.0.3",
         "nodemon": "^3.0.1",
         "peer": "^1.0.2",
         "peerjs": "^1.5.5",
@@ -117,7 +128,7 @@
         "split-file": "^2.3.0",
         "swagger-autogen": "^2.23.7",
         "swagger-ui-express": "^5.0.0",
-        "typedoc": "^0.28.19",
+        "typedoc": "^0.28.20",
         "typescript": "^6.0.3",
         "validator": "^13.15.35",
         "vanilla-jsoneditor": "^3.12.0",
@@ -150,6 +161,7 @@
         "serialize-javascript": ">=7.0.5",
         "router": {
             "path-to-regexp": ">=8.4.0"
-        }
+        },
+        "ws": "^8.20.2"
     }
 }

package/pv-pvc.yaml

@@ -10,6 +10,14 @@ spec:
     - ReadWriteOnce
   persistentVolumeReclaimPolicy: Retain
   storageClassName: manual
+  nodeAffinity:
+    required:
+      nodeSelectorTerms:
+        - matchExpressions:
+            - key: kubernetes.io/hostname
+              operator: In
+              values:
+                - kind-worker
   claimRef:
     apiVersion: v1
     kind: PersistentVolumeClaim
@@ -43,6 +51,14 @@ spec:
     - ReadWriteOnce
   persistentVolumeReclaimPolicy: Retain
   storageClassName: manual
+  nodeAffinity:
+    required:
+      nodeSelectorTerms:
+        - matchExpressions:
+            - key: kubernetes.io/hostname
+              operator: In
+              values:
+                - kind-worker
   claimRef:
     apiVersion: v1
     kind: PersistentVolumeClaim
@@ -76,6 +92,14 @@ spec:
     - ReadWriteOnce
   persistentVolumeReclaimPolicy: Retain
   storageClassName: manual
+  nodeAffinity:
+    required:
+      nodeSelectorTerms:
+        - matchExpressions:
+            - key: kubernetes.io/hostname
+              operator: In
+              values:
+                - kind-worker
   claimRef:
     apiVersion: v1
     kind: PersistentVolumeClaim
@@ -109,6 +133,14 @@ spec:
     - ReadWriteOnce
   persistentVolumeReclaimPolicy: Retain
   storageClassName: manual
+  nodeAffinity:
+    required:
+      nodeSelectorTerms:
+        - matchExpressions:
+            - key: kubernetes.io/hostname
+              operator: In
+              values:
+                - kind-worker
   claimRef:
     apiVersion: v1
     kind: PersistentVolumeClaim