underpost 3.2.9 → 3.2.11

package/.github/workflows/npmpkg.ci.yml

@@ -81,6 +81,7 @@ jobs:
       - name: Clone github package repository
         env:
           GITHUB_TOKEN: ${{ secrets.GIT_AUTH_TOKEN }}
+          GITHUB_USERNAME: ${{ github.repository_owner }}
         run: |
           cd .. && node engine/bin clone underpostnet/pwa-microservices-template
           cd engine

package/.github/workflows/pwa-microservices-template-test.ci.yml

@@ -30,4 +30,4 @@ jobs:
         run: npm install
 
       - name: Run test
-        run: node bin test
+        run: npm test

package/.github/workflows/release.cd.yml

@@ -34,6 +34,7 @@ jobs:
           # Commands to run on the remote VM
           script: |
             set -e
+            set -o pipefail
             echo "Starting remote release deploy"
             cd /home/dd/engine
             sudo -n -- /bin/bash -lc "node bin run pull"

package/.vscode/extensions.json

@@ -1,10 +1,10 @@
 {
-    "recommendations": [
-        "anseki.vscode-color",
-        "bashmish.es6-string-css",
-        "eamodio.gitlens",
-        "esbenp.prettier-vscode",
-        "github.copilot-chat",
-        "tobermory.es6-string-html"
-    ]
-}
+  "recommendations": [
+    "anseki.vscode-color",
+    "bashmish.es6-string-css",
+    "eamodio.gitlens",
+    "esbenp.prettier-vscode",
+    "shakram02.bash-beautify",
+    "tobermory.es6-string-html"
+  ]
+}

package/.vscode/settings.json

@@ -1,10 +1,26 @@
 {
-  "editor.defaultFormatter": "esbenp.prettier-vscode",
   "editor.formatOnSave": true,
-  "explorer.compactFolders": false,
-  "js/ts.preferences.importModuleSpecifierEnding": "js",
+  "files.autoSave": "onFocusChange",
   "[javascript]": {
     "editor.defaultFormatter": "esbenp.prettier-vscode"
   },
-  "editor.inlineSuggest.enabled": true
+  "[javascriptreact]": {
+    "editor.defaultFormatter": "esbenp.prettier-vscode"
+  },
+  "[typescript]": {
+    "editor.defaultFormatter": "esbenp.prettier-vscode"
+  },
+  "[typescriptreact]": {
+    "editor.defaultFormatter": "esbenp.prettier-vscode"
+  },
+  "[shellscript]": {
+    "editor.defaultFormatter": "shakram02.bash-beautify",
+    "editor.formatOnSave": true
+  },
+  "[json]": {
+    "editor.quickSuggestions": {
+      "strings": true
+    },
+    "editor.suggest.insertMode": "replace"
+  }
 }

package/CHANGELOG.md

@@ -1,6 +1,200 @@
 # Changelog
 
-## 2026-05-14
+## 2026-05-31
+
+### deploy
+
+- Fix deployment error handling: ensure global secret cleanup only occurs if container status is not 'error' ([83ef9d8cf](https://github.com/underpostnet/engine/commit/83ef9d8cf893c8fe8c07d445b324dd864d9ad842))
+- Add Underpost integration for container status error handling in database and Valkey services ([3bbcdcf49](https://github.com/underpostnet/engine/commit/3bbcdcf49ac6445c6ea5b37d84a5ebc69102a34e))
+
+### bin-build
+
+- Prevent OnError workflow break on empty commit ([494fc93ab](https://github.com/underpostnet/engine/commit/494fc93ab9980d972e66096af5371f5a11173fb4))
+
+### cli-run
+
+- Add k3s-template-env case logic: clean up existing dd-default config and update .env.example ([90a910630](https://github.com/underpostnet/engine/commit/90a910630072fbe3143d87a9aa5a3e479a3ba6e8))
+- Add 'remove' option for resource teardown and improve MongoDB handling ([11c09deb6](https://github.com/underpostnet/engine/commit/11c09deb605138e344cbd30dad3ba446ec950345))
+- Enhance clean method: execute shared-dir script in development mode ([317806d8f](https://github.com/underpostnet/engine/commit/317806d8f9681cb768bd7a1cad87f0c86781fd23))
+- Rename setup-shared-dir method to shared-dir and remove reload-shared-dir method for clarity and simplification ([7985353cb](https://github.com/underpostnet/engine/commit/7985353cb46e5e01e0657c9abb419ddcc6691697))
+- Add exit process on error instead of returning null ([567008c3d](https://github.com/underpostnet/engine/commit/567008c3df4d53ebdab442b44726b323801ec5d3))
+
+### client-core
+
+- Add modal event handling: introduce ModalEventType, ModalListenerChannels, and createModalEvents for improved modal interactions ([d31bf3b01](https://github.com/underpostnet/engine/commit/d31bf3b0171d94f3c0d2496b19bb7001192dc1ac))
+- Fix focus handling in Auth and Modal components: prevent focus on search box when skipFocus is true ([95a42637c](https://github.com/underpostnet/engine/commit/95a42637c6bf7d3f3dd4643663f487321097c218))
+
+### bin-deploy
+
+- Add vm-cluster-env case logic ([d55b6120d](https://github.com/underpostnet/engine/commit/d55b6120d18485865a22745083743091177806b6))
+
+### release
+
+- Refactor release build process: replace file.js with build.template.js, update package.json script, and enhance repository methods for GitHub directory fetching ([05c0e1d85](https://github.com/underpostnet/engine/commit/05c0e1d85bb777b4bc071d4312ed8e6ae6dece51))
+
+### baremetal
+
+- Refactor NFS configuration: update NFSv3 ports and streamline NFS root mount options ([217c736ea](https://github.com/underpostnet/engine/commit/217c736eac25cf68d11b4f9991fc79f0e28a2639))
+- Enhance iPXE build process: track embedded script changes to ensure rebuilds when necessary ([4d9d572bf](https://github.com/underpostnet/engine/commit/4d9d572bfcfff40d0977249e96b34a474cfe582c))
+- Refactor NFS configuration and enhance GRUB module installation for baremetal provisioning ([c94dd434b](https://github.com/underpostnet/engine/commit/c94dd434bbe8792d7694744b7eb57a88256a3415))
+
+### lxd
+
+- Enhance LXD management: add support for MAAS project handling and improve command execution consistency ([0910817c5](https://github.com/underpostnet/engine/commit/0910817c55a4971860d7b363455efd1d1c13d830))
+- Refactor: reorganize LXD Management documentation for clarity and safety ([5cc554cfe](https://github.com/underpostnet/engine/commit/5cc554cfe308f28ee94c7ee3cb141ec6dd156368))
+
+### cluster
+
+- Refactor deployment and monitoring to centralize /etc/hosts management ([a10ad7da6](https://github.com/underpostnet/engine/commit/a10ad7da651085a45c0301489ccb19c92abd2ee7))
+- Add MongoDB manifests including headless service, stateful set, and storage class ([8fd1d8172](https://github.com/underpostnet/engine/commit/8fd1d817250cbebbe2812be9f382d0fc526800ee))
+
+### repository
+
+- Enhance git command execution in file storage and repository modules for improved error handling and logging ([bb008852d](https://github.com/underpostnet/engine/commit/bb008852d9b6b3c9604815a2b0e1d43aba57cc16))
+
+### engine
+
+- Update VSCode configuration: add bash-beautify extension and enhance settings for shellscript and json ([e0e3c5249](https://github.com/underpostnet/engine/commit/e0e3c524923dfcc1c73da2063a4fe7a90ed805d7))
+
+### db
+
+- Refactor MongoDB data directory cleanup logic in Kind nodes to use docker exec for reliability ([87d66f223](https://github.com/underpostnet/engine/commit/87d66f223093695b92f51ce42186e09c06109a45))
+- Refactor MongoDB cleanup logic to avoid stale bind mounts and ensure proper directory structure ([c07098e8c](https://github.com/underpostnet/engine/commit/c07098e8ce9762e3116d8705c1b7206d7ec0df6c))
+
+### cli-secrets
+
+- Add secret management command to deployment workflows ([796fddb46](https://github.com/underpostnet/engine/commit/796fddb46c3c43399de4264ed940f453fd2056e3))
+
+### cli-deploy
+
+- Fix ready monitor method to wait container runtime complete setup ([c89231a06](https://github.com/underpostnet/engine/commit/c89231a06aa5e1ce6decd6550ea5a7f9cf90dd45))
+
+### github-actions
+
+- Prevent dependabot gitleaks run ([16c2a0c1d](https://github.com/underpostnet/engine/commit/16c2a0c1d60ec8d5389288464af60b4a0fcea72d))
+
+## New release v:3.2.10 (2026-05-26)
+
+### cli-run
+
+- Add group property and shared directory setup methods to UnderpostRun ([6cc121c4a](https://github.com/underpostnet/engine/commit/6cc121c4abe8a5fe07582a99a251ef8e1133ce00))
+
+### cli-release
+
+- Add bumpp configuration and integrate version bumping into release process ([e5eb50d70](https://github.com/underpostnet/engine/commit/e5eb50d70980fe625e4246b5807b2a3984f09e72))
+
+### engine-cyberia
+
+- Refactor CI workflows for cyberia-client and cyberia-server, removing outdated comments and improving clarity. Update Dockerfile to ensure clean builds by adding a clean step before compilation. ([e74918e81](https://github.com/underpostnet/engine/commit/e74918e8102a2c7361ff8abd89aa019aee6ef642))
+- Refactor CI workflows and Dockerfiles for cyberia-client and cyberia-server ([0dfda92fd](https://github.com/underpostnet/engine/commit/0dfda92fd0c01de7af755a2935fd68199d94d61f))
+- Refactor package.json metadata for Cyberia CLI and Underpost Platform, updating descriptions and keywords for improved clarity and relevance. ([893a371ac](https://github.com/underpostnet/engine/commit/893a371acef87351841d4ff703f35421e05725e4))
+- Enhance Dockerfiles and CLI: align underpost versioning, add dev configurations, and improve manifest build options ([4f9c96df6](https://github.com/underpostnet/engine/commit/4f9c96df6b672c25ef8d34d0ad440f66061f7789))
+- Refactor presentation handling: remove legacy fields, update documentation, and streamline client hints integration ([e79315e6e](https://github.com/underpostnet/engine/commit/e79315e6e3064140d6b2e634f31b153008a15db0))
+- Refactor Cyberia defaults management ([2454ad54c](https://github.com/underpostnet/engine/commit/2454ad54c9f9d3e9b2aa43a831184f6e87b4772f))
+- Add cyberia hints model and refactor docs ([14fc8a633](https://github.com/underpostnet/engine/commit/14fc8a633843a52f705594eba3927a8a7b1dc685))
+- Update build process to include README.md and update white paper version ([77099e88f](https://github.com/underpostnet/engine/commit/77099e88f50516a0e6e626f74059814585ca18d6))
+
+### client
+
+- Chore landing icons ([ed1bc3fee](https://github.com/underpostnet/engine/commit/ed1bc3fee671319b151e218ec58b9ca67200579e))
+
+### github-actions
+
+- Add condition to skip jobs for dependabot in Coverall CI workflow ([db35270a6](https://github.com/underpostnet/engine/commit/db35270a686edf5c975721a3ec60ae8fc0b893be))
+- Enhance underpost test execution and improve error handling ([d046dcee2](https://github.com/underpostnet/engine/commit/d046dcee2a78c2a80fd13ac74322a735aa3044c5))
+- Update CI workflows to specify repository paths for cyberia-client and cyberia-server; adjust Dockerfile to copy from the correct directory ([9bef93774](https://github.com/underpostnet/engine/commit/9bef93774841ec650b2574f2369b8e6b486c342d))
+
+### cli-deploy
+
+- Add imagePullPolicy option to deployment commands and documentation ([d1ebe5d71](https://github.com/underpostnet/engine/commit/d1ebe5d71a7840d7739be0f41d59dc0f5dfdd155))
+- Enhance deployment monitoring: improve pod readiness checks, add container-status validation, and refine logging for deployment progress ([3cb67b64b](https://github.com/underpostnet/engine/commit/3cb67b64b01af8055396ca78515011ffe4146b28))
+
+### gitub-actions
+
+- Enhance CI workflow and Dockerfiles to include SSR dashboard setup and dependencies ([6e8db980f](https://github.com/underpostnet/engine/commit/6e8db980f79b3ef9d48d2231f83ea62c28879f25))
+
+### client-core
+
+- Enhance file handling logic and improve UI interactions in PanelForm and Auth components ([f4e146195](https://github.com/underpostnet/engine/commit/f4e146195b94dc8df711bb3e1eec52feaae0489c))
+- Enhance offline and maintenance fallback handling: implement inline HTML responses, improve caching logic, and ensure user-friendly error pages ([1802b40ca](https://github.com/underpostnet/engine/commit/1802b40caab7c90b0c73a9ab70a042772a8fe77b))
+- Enhance service worker fallback handling: add inline HTML responses for offline and maintenance states, improve caching logic, and refine navigation fetch strategy ([bc2a1a0ca](https://github.com/underpostnet/engine/commit/bc2a1a0ca711e7448ee9be7629a8e0e3b598dfaf))
+- Add SSR views for server metrics, maintenance, and offline handling ([81ca21084](https://github.com/underpostnet/engine/commit/81ca21084a7246f2926ee6b6c6f96858714a232c))
+
+### dependencies
+
+- Update dependencies and improve branch deletion error handling ([bcbf1a5e3](https://github.com/underpostnet/engine/commit/bcbf1a5e3a801d4bc6fdfc1e0f17a5630b40b325))
+- Update dependencies: bump body-parser to 1.20.5, express to 4.22.2, and qs to 6.15.2 ([3d5da7d28](https://github.com/underpostnet/engine/commit/3d5da7d28bba137ea50b0c2260b5614bf42c2b69))
+
+### ssr-cyberia
+
+- Refactor ssr/views/CyberiaServerMetrics.js ([7184a738d](https://github.com/underpostnet/engine/commit/7184a738d17602fafe5cefd7722a7cd669b11693))
+
+### cli
+
+- Enhance error handling: silence errors during git commit and process termination ([7583c4f12](https://github.com/underpostnet/engine/commit/7583c4f1288713513c02b76e5c11649c41e427ca))
+
+### cluster
+
+- Add targeted reset option for MongoDB components without full cluster restart ([8c293e11d](https://github.com/underpostnet/engine/commit/8c293e11dfafb992ccf3b26ab139e95266c28169))
+- Enhance UnderpostCluster: add natSetup method for NAT and iptables configuration, improve cluster deletion logic, and update options parameter for config method ([b90d7dba7](https://github.com/underpostnet/engine/commit/b90d7dba7bcbdd1d433f763ab3f7394dabf912f2))
+
+### ipfs
+
+- Fix IPFS deployment: streamline UDP buffer sysctl application for Kind nodes ([2b08cbc6d](https://github.com/underpostnet/engine/commit/2b08cbc6dafcd4af7b55c96d99bc7b8e603b80f6))
+
+### db
+
+- Refactor MongoDB bootstrap logic: enhance admin authentication check and streamline initialization script execution ([866e56c63](https://github.com/underpostnet/engine/commit/866e56c6303e20b8269778e5a7adc6e618f4520a))
+- Refactor MongoDB primary pod detection and bootstrap logic ([609f5e89b](https://github.com/underpostnet/engine/commit/609f5e89b5807df797bd5c16839c87f2bd786ba2))
+- Refactor MongoDB manifests and initialization: update PersistentVolume configurations, enhance StatefulSet security, and improve MongoDB cluster bootstrap logic ([ed89c3850](https://github.com/underpostnet/engine/commit/ed89c3850ca3108664ca70f9737ac756f7936083))
+- Refactor DataBaseProviderService: change #instance to static and update instance getter for compatibility ([360d2c856](https://github.com/underpostnet/engine/commit/360d2c856a6409efa32dc2e1d602bd6e5b268223))
+- Refactor replace DataBaseProvider with DataBaseProviderService across services and routers ([614e47314](https://github.com/underpostnet/engine/commit/614e4731493b413346f05915a0be6c18aa0d81c2))
+- Enhance MongoDB configuration and management: update stateful set parameters, improve secret handling, and implement replica set initialization logic ([1fb895669](https://github.com/underpostnet/engine/commit/1fb895669cbd8ec1d42b779c810ae6a35555725e))
+
+### ws
+
+- Refactor WebSocket management context: replace wsManagementId with hostKeyContext across IoInterface and related channels ([b82c80fce](https://github.com/underpostnet/engine/commit/b82c80fce52cba2ef9443ea664df69e727e35ca0))
+
+### deploy
+
+- Enhance deployment error handling: update expected container status, throw errors for pod status issues, and manage container status in shell execution ([d170f36cc](https://github.com/underpostnet/engine/commit/d170f36cc77b759a4e86a7f0dcad015aa6fc74ef))
+
+### lxd
+
+- Enhance LXD management: add safe teardown for VMs, improve engine source replication, and update documentation ([e9b3a68c9](https://github.com/underpostnet/engine/commit/e9b3a68c961dd08722dc3febbca3a5bd9c42a9fe))
+
+### api
+
+- Enhance ObjectLayerService command execution with error context ([4253b2437](https://github.com/underpostnet/engine/commit/4253b2437b9cb8af42cbea0967baa6900880e0b5))
+
+### docs
+
+- Clean docs ([465507082](https://github.com/underpostnet/engine/commit/465507082493ec26b96658b8dd26c33ace8e6bf4))
+- Update README.md for clarity and improved documentation links ([4021b6fcb](https://github.com/underpostnet/engine/commit/4021b6fcb55c6bad4e3cf605583c5b748ebb4734))
+- Add jsdelivr badge ([d2a6f2931](https://github.com/underpostnet/engine/commit/d2a6f293127801b89e7de1794c77bce2c0522276))
+- Update file paths and command syntax in architecture and client/server documentation ([f51891d44](https://github.com/underpostnet/engine/commit/f51891d44552fd5cd386e7685f86434b2cf02eb9))
+
+### settings
+
+- Update default formatters for JSON and TypeScript files ([e2c20b6f8](https://github.com/underpostnet/engine/commit/e2c20b6f896ef65f55df71678cc6e6d9c116b8f6))
+
+### dependabot
+
+- Update dependency patterns in dependabot.yml for improved package management ([60e8605c3](https://github.com/underpostnet/engine/commit/60e8605c3361e1cb824ac072d593a6321d79399f))
+
+### cli-cyberia
+
+- Refactor CyberiaDialogue handling to use codes instead of itemIds for improved dialogue management ([273fed2e4](https://github.com/underpostnet/engine/commit/273fed2e4706311fbbde993ce9ea5d549376dd0b))
+
+### runtime-cyberia
+
+- Refactor Dockerfiles for cyberia-client and cyberia-server to streamline package installations and improve build processes ([0312126c7](https://github.com/underpostnet/engine/commit/0312126c7032c17e1b67fe0fef8e7c74975d9ac8))
+
+### bin-vs
+
+- Fix correct typo in clean case to remove vsConfigRootPath ([0251c45a3](https://github.com/underpostnet/engine/commit/0251c45a3580ec0e5a907667fcc1240307e2f27b))
+
+## New release v:3.2.9 (2026-05-13)
 
 ### client-core
 

package/CLI-HELP.md

@@ -1,4 +1,4 @@
-## underpost ci/cd cli v3.2.9
+## underpost ci/cd cli v3.2.11
 
 ### Usage: `underpost [options] [command]`
   ```
@@ -32,7 +32,7 @@ Commands:
   monitor [options] <deploy-id> [env]                        Manages health server monitoring for specified deployments.
   ssh [options]                                              Manages SSH credentials and sessions for remote access to cluster nodes or services.
   run [options] <runner-id> [path]                           Runs specified scripts using various runners.
-  lxd [options]                                              Manages LXD virtual machines as K3s nodes (control plane or workers).
+  lxd [options] [vm-id]                                      Manages LXD virtual machines as K3s nodes (control plane or workers).
   baremetal [options] [workflow-id]                          Manages baremetal server operations, including installation, database setup, commissioning, and user management.
   release [options] [version]                                Release orchestrator for building new versions and deploying releases of the Underpost CLI.
   help [command]                                             display help for command
@@ -412,13 +412,18 @@ Arguments:
 Options:
   --reset                              Deletes all clusters and prunes all
                                        related data and caches.
+  --reset-mongodb                      Performs a hard cleanup of only
+                                       MongoDB-related resources (StatefulSet,
+                                       PVCs/PVs, Secrets, ConfigMaps, caches)
+                                       without restarting the whole node.
   --mariadb                            Initializes the cluster with a MariaDB
                                        statefulset.
   --mysql                              Initializes the cluster with a MySQL
                                        statefulset.
   --mongodb                            Initializes the cluster with a MongoDB
                                        statefulset.
-  --mongo-db-host <host>               Set custom mongo db host
+  --service-host <host>                Set custom host/IP for exposed MongoDB
+                                       and Valkey clients.
   --postgresql                         Initializes the cluster with a PostgreSQL
                                        statefulset.
   --mongodb4                           Initializes the cluster with a MongoDB
@@ -429,6 +434,14 @@ Options:
                                        ipfs-cluster statefulset.
   --contour                            Initializes the cluster with Project
                                        Contour base HTTPProxy and Envoy.
+  --node-port                          Exposes enabled ready services (e.g.
+                                       MongoDB 4.4, Valkey) to the host/public
+                                       network via their NodePort Service
+                                       manifest.
+  --node-selector <k8s-node-name>      Pins the just-deployed StatefulSet
+                                       (MongoDB 4.4 / Valkey) to the given
+                                       Kubernetes node once it is ready (via a
+                                       kubernetes.io/hostname nodeSelector).
   --cert-manager                       Initializes the cluster with a Let's
                                        Encrypt production ClusterIssuer.
   --dedicated-gpu                      Initializes the cluster with dedicated
@@ -471,6 +484,10 @@ Options:
                                        hostnames or IP addresses.
   --remove-volume-host-paths           Removes specified volume host paths after
                                        execution.
+  --reset-mode <mode>                  Reset mode for --reset --k3s: "drain"
+                                       (stop services, keep K3s installed) or
+                                       "full" (uninstall + cleanup). Default:
+                                       "full".
   --namespace <namespace>              Kubernetes namespace for cluster
                                        operations (defaults to "default").
   --replicas <replicas>                Sets a custom number of replicas for
@@ -542,9 +559,6 @@ Options:
                                       operations.
   --git-clean                         Runs git clean on volume mount paths
                                       before copying.
-  --etc-hosts                         Enables the etc-hosts context for
-                                      deployment operations.
-  --restore-hosts                     Restores default `/etc/hosts` entries.
   --disable-update-underpost-config   Disables updates to Underpost
                                       configuration during deployment.
   --namespace <namespace>             Kubernetes namespace for deployment
@@ -565,6 +579,11 @@ Options:
                                       bundle from Cloudinary inside the
                                       container. Use together with
                                       --skip-full-build.
+  --image-pull-policy <policy>        Override container imagePullPolicy in the
+                                      generated deployment manifest (Always,
+                                      IfNotPresent, Never). Defaults to Never
+                                      for localhost/ images and IfNotPresent
+                                      otherwise.
   -h, --help                          display help for command
  
 ```
@@ -903,7 +922,7 @@ Options:
 Runs specified scripts using various runners.
 
 Arguments:
-  runner-id                                       The runner ID to run. Options: dev-cluster,ipfs-expose,metadata,svc-ls,svc-rm,ssh-deploy-info,dev-hosts-expose,dev-hosts-restore,cluster-build,template-deploy,template-deploy-local,docker-image,clean,pull,release-deploy,ssh-deploy,ide,crypto-policy,sync,stop,ssh-deploy-stop,ssh-deploy-db-rollback,ssh-deploy-db,ssh-deploy-db-status,tz,get-proxy,instance-promote,instance,instance-build-manifest,ls-deployments,host-update,install-crio,dd-container,ip-info,db-client,git-conf,promote,metrics,cluster,deploy,disk-clean,disk-devices,disk-usage,dev,service,etc-hosts,sh,log,ps,pid-info,background,ports,deploy-test,tf-vae-test,spark-template,pull-rocky-image,rmi,kill,generate-pass,secret,underpost-config,gpu-env,tf-gpu-test,deploy-job,push-bundle,pull-bundle.
+  runner-id                                       The runner ID to run. Options: dev-cluster,ipfs-expose,metadata,svc-ls,svc-rm,ssh-deploy-info,dev-hosts-expose,dev-hosts-restore,cluster-build,template-deploy,template-deploy-local,docker-image,clean,pull,release-deploy,ssh-deploy,ide,crypto-policy,sync,stop,ssh-deploy-stop,ssh-deploy-db-rollback,ssh-deploy-db,ssh-deploy-db-status,tz,get-proxy,instance-promote,instance,instance-build-manifest,ls-deployments,host-update,install-crio,dd-container,ip-info,db-client,git-conf,promote,metrics,cluster,deploy,disk-clean,disk-devices,disk-usage,dev,service,etc-hosts,sh,log,ps,pid-info,background,ports,deploy-test,tf-vae-test,spark-template,pull-rocky-image,rmi,kill,generate-pass,secret,underpost-config,gpu-env,tf-gpu-test,deploy-job,push-bundle,pull-bundle,monitor-ui,shared-dir.
   path                                            The input value, identifier, or path for the operation.
 
 Options:
@@ -973,6 +992,7 @@ Options:
   --copy                                          Copies the runner output to the clipboard (supported by: generate-pass, template-deploy-local).
   --skip-full-build                               Skip client bundle rebuild; triggers pull-bundle in container startup (supported by: sync, template-deploy).
   --pull-bundle                                   Explicitly download the pre-built client bundle from Cloudinary inside the container (supported by: sync, template-deploy). Use together with --skip-full-build.
+  --remove                                        Remove/teardown resources
   -h, --help                                      display help for command
  
 ```
@@ -980,14 +1000,36 @@ Options:
 
 ### `lxd` :
 ```
- Usage: underpost lxd [options]
+ Usage: underpost lxd [options] [vm-id]
 
 Manages LXD virtual machines as K3s nodes (control plane or workers).
 
+Arguments:
+  vm-id                            VM identifier shared by current-VM flags like
+                                   --vm-create, --vm-delete, --vm-init,
+                                   --vm-info, and --vm-test.
+
 Options:
   --init                           Initializes LXD on the current machine via
                                    preseed.
-  --reset                          Removes the LXD snap and purges all data.
+  --reset                          Host-safe reset: removes proxy devices,
+                                   stops/deletes VMs, drops admin-profile and
+                                   lxdbr0. Does NOT touch the LXD snap or
+                                   storage pools.
+  --purge                          DESTRUCTIVE: gracefully shuts down the LXD
+                                   daemon (60s timeout), then removes the LXD
+                                   snap. Combine with --reset to wipe per-VM
+                                   state first. Safe replacement for the prior
+                                   aggressive teardown.
+  --shutdown                       Pre-host-reboot procedure: gracefully stops
+                                   every VM and the LXD daemon. Run BEFORE any
+                                   reboot/poweroff to keep the host bootable.
+  --restore                        Symmetric to --shutdown: starts the LXD
+                                   daemon, waits for it to be responsive, then
+                                   starts every VM. VMs created via
+                                   admin-profile have boot.autostart=false, so
+                                   this is the explicit "bring the lab back up"
+                                   command.
   --install                        Installs the LXD snap.
   --dev                            Use local paths instead of the global npm
                                    installation.
@@ -999,30 +1041,54 @@ Options:
                                    plane node.
   --worker                         Initialize the target VM as a K3s worker
                                    node.
-  --create-vm <vm-name>            Copy the LXC launch command for a new K3s VM
-                                   to the clipboard.
-  --delete-vm <vm-name>            Stop and delete the specified VM.
-  --init-vm <vm-name>              Run k3s-node-setup.sh on the specified VM
-                                   (use with --control or --worker).
-  --info-vm <vm-name>              Display full configuration and status for the
-                                   specified VM.
-  --test <vm-name>                 Run connectivity and health checks on the
-                                   specified VM.
-  --root-size <gb-size>            Root disk size in GiB for --create-vm
+  --vm-create                      Copy the LXC launch command for the command
+                                   argument [vm-id] to the clipboard.
+  --vm-delete                      SAFELY stop and delete the command argument
+                                   [vm-id] (removes proxy devices first, then
+                                   stops, then deletes). Safe to re-run.
+  --vm-init                        Bring the command argument [vm-id] up as a
+                                   K3s node end-to-end: OS base setup, mirror
+                                   /home/dd/engine into the VM, then K3s role
+                                   install via the local engine (use with
+                                   --control or --worker).
+  --vm-info                        Display full configuration and status for the
+                                   command argument [vm-id].
+  --vm-test                        Run connectivity and health checks on the
+                                   command argument [vm-id].
+  --vm-sync-engine                 Re-copy the host engine source into the
+                                   command argument [vm-id], overriding whatever
+                                   is currently there (equivalent to the
+                                   engine-bootstrap step of --vm-init in
+                                   isolation).
+  --root-size <gb-size>            Root disk size in GiB for --vm-create
                                    (default: 32).
   --join-node <nodes>              Join a K3s worker to a control plane.
                                    Standalone format: "workerName,controlName".
-                                   When used with --init-vm --worker, provide
+                                   When used with --vm-init --worker, provide
                                    just the control node name for auto-join.
   --expose <vm-name:ports>         Proxy host ports to a VM (e.g.,
                                    "k3s-control:80,443").
+  --node-port <port>               Customizes the VM-side (connect) port for
+                                   --expose, so the host listens on the given
+                                   port but proxies to this NodePort inside the
+                                   VM (e.g. expose host 27017 -> VM NodePort
+                                   32017).
   --delete-expose <vm-name:ports>  Remove proxied ports from a VM (e.g.,
                                    "k3s-control:80,443").
-  --workflow-id <workflow-id>      Workflow ID to execute via runWorkflow.
-  --vm-id <vm-name>                Target VM name for workflow execution.
-  --deploy-id <deploy-id>          Deployment ID context for workflow execution.
+  --copy                           For two-phase flows that surface a command
+                                   for the user to execute (e.g.
+                                   --create-admin-profile phase 1), copy the
+                                   command to the clipboard instead of printing
+                                   it to the terminal.
   --namespace <namespace>          Kubernetes namespace context (defaults to
                                    "default").
+  --maas-project <project>         LXD project managed by MAAS (e.g.
+                                   "k3s-cluster"). When set, all lxc commands
+                                   target this project so MAAS enumerates the
+                                   VMs in its machines UI.
+  --move-to-project                Stop the [vm-id] VM in the default project,
+                                   move it to --maas-project, then start it so
+                                   MAAS picks it up. Requires --maas-project.
   -h, --help                       display help for command
  
 ```
@@ -1112,6 +1178,9 @@ Options:
   --pwa-build            Runs the pwa-microservices-template update flow: always
                          re-clones, syncs engine sources, installs, builds, and
                          pushes.
+  --dry-run              For --build: previews version-bump changes (per-file
+                         substitution counts) without writing files or running
+                         downstream commands.
   -h, --help             display help for command
  
 ```

package/README.md

@@ -16,17 +16,46 @@
 
 <div align="center">
 
-[![Node.js CI](https://github.com/underpostnet/engine/actions/workflows/docker-image.ci.yml/badge.svg?branch=master)](https://github.com/underpostnet/engine/actions/workflows/docker-image.ci.yml) [![Test](https://github.com/underpostnet/engine/actions/workflows/coverall.ci.yml/badge.svg?branch=master)](https://github.com/underpostnet/engine/actions/workflows/coverall.ci.yml) [![Downloads](https://img.shields.io/npm/dm/underpost.svg)](https://www.npmjs.com/package/underpost) [![Socket Badge](https://socket.dev/api/badge/npm/package/underpost/3.2.9)](https://socket.dev/npm/package/underpost/overview/3.2.9) [![Coverage Status](https://coveralls.io/repos/github/underpostnet/engine/badge.svg?branch=master)](https://coveralls.io/github/underpostnet/engine?branch=master) [![Version](https://img.shields.io/npm/v/underpost.svg)](https://www.npmjs.org/package/underpost) [![License](https://img.shields.io/npm/l/underpost.svg)](https://www.npmjs.com/package/underpost)
+[![Node.js CI](https://github.com/underpostnet/engine/actions/workflows/docker-image.ci.yml/badge.svg?branch=master)](https://github.com/underpostnet/engine/actions/workflows/docker-image.ci.yml) [![Test](https://github.com/underpostnet/engine/actions/workflows/coverall.ci.yml/badge.svg?branch=master)](https://github.com/underpostnet/engine/actions/workflows/coverall.ci.yml) [![Downloads](https://img.shields.io/npm/dm/underpost.svg)](https://www.npmjs.com/package/underpost) [![](https://data.jsdelivr.com/v1/package/npm/underpost/badge)](https://www.jsdelivr.com/package/npm/underpost) [![Socket Badge](https://socket.dev/api/badge/npm/package/underpost/3.2.11)](https://socket.dev/npm/package/underpost/overview/3.2.11) [![Coverage Status](https://coveralls.io/repos/github/underpostnet/engine/badge.svg?branch=master)](https://coveralls.io/github/underpostnet/engine?branch=master) [![Version](https://img.shields.io/npm/v/underpost.svg)](https://www.npmjs.org/package/underpost) [![License](https://img.shields.io/npm/l/underpost.svg)](https://www.npmjs.com/package/underpost)
 
 </div>
 
-<div align="center">
-
 #### Base template for pwa/api-rest projects.
 
-<div style="font-size: 20px;"><em>End2end</em> continuous integration and continuous deployment cloud applications toolchain. Develop, build, deploy, test, monitor, and manage multiple runtime applications on virtual machines or container instances.</div>
+## Underpost Platform
 
-</div>
+**Underpost** is an platform for application delivery, from infrastructure to runtime. The `underpost` npm package is its CLI toolchain surface.
+
+The project covers:
+
+- **Bare metal provisioning** on Rocky Linux 9.
+- **Kubernetes / K3s / kubeadm / LXD** workflows for production, edge, and isolated workloads.
+- **GitHub OSS repository flow** — clone, pull, push, commit, release, and CI integrations as first-class CLI subcommands.
+- **CI/CD orchestration** — GitHub Actions integrations, container builds, multi-environment deployments.
+- **Static build + PWA delivery** — every deploy ships as an installable Progressive Web App with Workbox-based offline support.
+- **Cloudinary-backed static asset flow** for image/asset delivery.
+- **ERP/CRM-style PWA base applications** as the default workload.
+- **Cyberia** — a dedicated MMO extension built on top of the platform, with its own content backend (`engine-cyberia`), authoritative simulation runtime (`cyberia-server`), and presentation runtime (`cyberia-client`).
+
+<a target="_top" href="Https://github.com/underpostnet/engine/blob/master/src/client/public/cyberia-docs/UNDERPOST-PLATFORM.md">See Detailed platform doc.</a>
+
+### Architectural roles (Cyberia stack)
+
+When the platform is hosting the Cyberia MMO extension, three runtime processes participate. Their boundaries are non-overlapping and their startup order is **strictly sequential** — not parallel.
+
+| Process                              | Role                                                                                                                                                                       |
+| ------------------------------------ | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| **engine-cyberia** (Node.js)         | Content authority: maps, object layers, atlas/asset metadata, world configuration, persistence, validation, gRPC + REST data services, editor backend, asset distribution. |
+| **cyberia-server** (Go)              | Authoritative simulation runtime: tick advancement, AOI replication, input command processing, snapshot generation.                                                        |
+| **cyberia-client** (C → WebAssembly) | Presentation runtime: rendering, UI, input capture, prediction, reconciliation, interpolation, client-side presentation defaults.                                          |
+
+**Startup order — sequential, in order:**
+
+1. **Persistent backend / sidecar data layer** — databases, content backend (engine-cyberia), static asset backend, config and data services.
+2. **cyberia-server** — authoritative Go simulation runtime; dials engine-cyberia gRPC at boot to load world configuration.
+3. **cyberia-client** — rendering, UI, prediction, interpolation, reconciliation; connects to cyberia-server via WebSocket.
+
+<a target="_top" href="https://github.com/underpostnet/engine-cyberia/blob/master/src/client/public/cyberia-docs/ARCHITECTURE.md">See Detailed architecture.</a>
 
 ## Create a new project
 
@@ -58,10 +87,10 @@ Run dev client server
 npm run dev
 ```
 
-<a target="_top" href="https://www.nexodev.org/docs?cid=src">See Docs here.</a>
+<a target="_top" href="https://www.nexodev.org/docs?cid=src">See Docs.</a>
 
 <!-- cli-index-start -->
-## underpost ci/cd cli v3.2.9
+## underpost ci/cd cli v3.2.11
 
 ### Usage: `underpost [options] [command]`
   ```
@@ -95,7 +124,7 @@ Commands:
   monitor [options] <deploy-id> [env]                        Manages health server monitoring for specified deployments.
   ssh [options]                                              Manages SSH credentials and sessions for remote access to cluster nodes or services.
   run [options] <runner-id> [path]                           Runs specified scripts using various runners.
-  lxd [options]                                              Manages LXD virtual machines as K3s nodes (control plane or workers).
+  lxd [options] [vm-id]                                      Manages LXD virtual machines as K3s nodes (control plane or workers).
   baremetal [options] [workflow-id]                          Manages baremetal server operations, including installation, database setup, commissioning, and user management.
   release [options] [version]                                Release orchestrator for building new versions and deploying releases of the Underpost CLI.
   help [command]                                             display help for command
@@ -103,4 +132,4 @@ Commands:
 ```
 <!-- cli-index-end -->
 
-<a target="_top" href="https://github.com/underpostnet/pwa-microservices-template/blob/master/CLI-HELP.md">See CLI Docs here.</a>
+<a target="_top" href="https://github.com/underpostnet/pwa-microservices-template/blob/master/CLI-HELP.md">See CLI Docs.</a>