@forgeax/engine-app 0.1.2

package/src/types.ts

@@ -0,0 +1,505 @@
+// @forgeax/engine-app -- shared types for createApp double-SSOT entry.
+//
+// AI users: see packages/app/src/index.ts for the public surface and
+// packages/app/src/create-app.ts for the runtime implementation.
+//
+// M1 (this milestone) ships the skeleton: interfaces are final-shape, but
+// start / stop / pause / resume / onError on the returned App are stubs
+// that return Result.ok(undefined) and a no-op unsubscribe. The rAF main
+// loop, dt clamp, error fan-out, and input attach internals land in
+// later milestones (M2..M5 per plan-strategy section 7).
+
+import type { AssetRegistry, CatalogSource } from '@forgeax/engine-assets-runtime';
+import type { AudioBackend } from '@forgeax/engine-audio';
+import type { DebugDraw } from '@forgeax/engine-debug-draw';
+import type { TimePolicy, World } from '@forgeax/engine-ecs';
+import type {
+  ActionConfig,
+  InputBackend,
+  PointerLockProvider,
+  VirtualJoystickConfig,
+} from '@forgeax/engine-input';
+import type { PhysicsWorld, PhysicsWorld2D } from '@forgeax/engine-physics';
+import type { Context, Plugin } from '@forgeax/engine-plugin';
+import type { Profiler } from '@forgeax/engine-profiler';
+import type {
+  MembershipTimingOptions,
+  Renderer,
+  RendererError,
+  RenderFeature,
+} from '@forgeax/engine-render';
+import type { RhiBackendInstrumentation } from '@forgeax/engine-render/internal';
+import type { RhiError, RhiInstance } from '@forgeax/engine-rhi';
+import type { CaptureFrameOptions, RhiDebugError } from '@forgeax/engine-rhi-debug';
+import type { EngineEnvironmentError } from '@forgeax/engine-runtime';
+import type { AssetDecoderContributionRef, ImportTransport, Result } from '@forgeax/engine-types';
+import type { AssetRuntimeAssemblyError } from './assets-runtime-assembly';
+import type { AppError, AppErrorCode } from './errors';
+import type { ExecutionControl, ExecutionOptions } from './execution';
+import type { RhiCapture } from './internal/rhi-capture';
+
+// Re-export AppError + AppErrorCode (the canonical SSOT lives in
+// `./errors`). Pre-M5 (M1..M4) referenced these as type-only declarations
+// inside this file; M5 collapses to the single SSOT in `./errors.ts` per
+// plan-strategy section 7 + research section 2.7.
+export type { AppError, AppErrorCode };
+
+/**
+ * Structured error union surfaced through the App `onError` fan-out + the
+ * assemble-form construction Result. Derived from the `Renderer.onError`
+ * channel contract `RendererError` (feat-20260704-runtime-tier1-decomposition
+ * M2 / w14 / D-4) so a runtime-layer error fanned out by the renderer (e.g.
+ * `'equirect-projection-failed'`) reaches host App listeners verbatim, plus the
+ * App-layer `AppError`. `RendererError` = `RhiError | RenderError |
+ * AssetRuntimeError | SkinError | PostProcessError`, so this equals the
+ * pre-decomposition `AppError | RhiError | RuntimeError | PostProcessError`
+ * exactly (RuntimeError was RenderError | AssetRuntimeError | SkinError). AI
+ * users `switch (err.code)` over the union: the disjoint `AppErrorCode` /
+ * `RhiErrorCode` / per-cluster `*ErrorCode` / `PostProcessErrorCode` literal
+ * sets let TS narrow each arm to the concrete class.
+ */
+export type AppDispatchError = AppError | RendererError;
+
+/**
+ * Per-frame draw description pulled from the host each frame
+ * (feat-20260709-editor-world-partition-editorworld-super-composite / M2 / D-3).
+ *
+ *   - `worlds`       — the exact world list to render this frame, in draw order.
+ *   - `cameraOwner`  — index into `worlds` whose cameras drive the frame.
+ *   - `resourceOwner`— index into `worlds` whose singleton render resources
+ *                      (skylight / skybox / postProcessParams) drive the frame.
+ *
+ * The two owners are independent (M1 owner-split): an editor can render a scene
+ * world's geometry through an editor world's camera while sourcing lighting from
+ * a third. `cameraOwner === resourceOwner` is the single-owner degenerate case.
+ *
+ * @see {@link DrawSource}
+ */
+export interface DrawSourceResult {
+  readonly worlds: readonly World[];
+  readonly cameraOwner: number;
+  readonly resourceOwner: number;
+}
+
+/**
+ * Stable frame-loop phase vocabulary for opt-in performance diagnostics.
+ *
+ * Local and Worker execution record these phases through the same optional
+ * Profiler capability. When omitted, the frame loop keeps its normal path and
+ * does not allocate capture records.
+ */
+export const APP_PHASE_CATALOG = [
+  'frame-total',
+  'draw-source',
+  'world-update-primary',
+  'world-update-injected',
+  'renderer-draw',
+  'host-frame',
+  'engine-update',
+  'kernel-wait',
+  'host-audio',
+] as const;
+
+/**
+ * Optional per-frame draw-source injection seam
+ * (feat-20260709-editor-world-partition-editorworld-super-composite / M2 / D-3).
+ *
+ * The frame-loop invokes this callback once per frame (a "pull"). It lets a host
+ * (e.g. the editor) decide, each frame, WHICH worlds to render and which owner
+ * indices to use — without the engine knowing anything about editor world
+ * partitioning.
+ *
+ *   - Returns `undefined` → the frame-loop degrades to the single-world path,
+ *     byte-identical to `renderer.draw([world], { cameraOwner: 0, resourceOwner: 0 })` where `world` is
+ *     the App's own world (the single-world AI-user default). A host that wires
+ *     the seam but has nothing multi-world to inject this frame returns
+ *     `undefined`.
+ *   - Returns a {@link DrawSourceResult} → the frame-loop runs `world.update(1 / 60).unwrap()`
+ *     on EVERY returned world (so transform propagation writes each world's
+ *     derived `Transform.world` mat4 before extract reads it — no stale matrix),
+ *     then calls `renderer.draw(worlds, { cameraOwner, resourceOwner })`.
+ *
+ * When omitted entirely, the App never consults a seam and always renders its
+ * own single world (legacy behaviour unchanged).
+ */
+export type DrawSource = () => DrawSourceResult | undefined;
+
+/**
+ * Options for the assemble-form entry createApp({ renderer, world, ... }).
+ *
+ * Field semantics (final shape -- runtime use lands in M2..M5):
+ *   - renderer: caller-owned Renderer (host already invoked createRenderer).
+ *   - world:    caller-owned World (host already invoked new World()).
+ *   - input:    InputBackend handle the host-side attached. When omitted the
+ *               assemble entry skips input attach (caller manages input).
+ *   - silenceUnhandledErrors: when true, suppresses the console.error
+ *               fallback inside the error fan-out (M4).
+ */
+export interface AppAssembleArgs {
+  readonly renderer: Renderer;
+  readonly world: World;
+  /** One immutable Catalog scope for this App realm. */
+  readonly assetCatalog?: CatalogSource;
+  /** Explicit owner contributions installed into this realm's Registry. */
+  readonly assetDecoders?: readonly AssetDecoderContributionRef[];
+  /** Unified plugin list (M1 feat-20260623-plugin-system-unify-build-world-protocol). */
+  readonly plugins?: readonly Plugin[];
+  readonly silenceUnhandledErrors?: boolean;
+  /**
+   * Per-frame draw-source injection seam (M2 / D-3). When supplied, the
+   * frame-loop pulls it each frame to decide which worlds to render + which
+   * owner indices to use; when omitted the App renders its own single world
+   * (legacy behaviour). See {@link DrawSource}.
+   */
+  readonly drawSource?: DrawSource;
+  /** Explicit profiler capability shared by the host and renderer. */
+  readonly profiler?: Profiler;
+  /** Explicit opt-in for Render-owned HDRP membership timing evidence. */
+  readonly membershipTiming?: MembershipTimingOptions;
+}
+
+/** Effective physical canvas size transported to an Engine Worker frame. */
+export interface CanvasDrawingBufferSize {
+  readonly width: number;
+  readonly height: number;
+}
+
+/**
+ * Options for the canvas-form thin wrapper createApp(canvas, opts?, bundler?).
+ *
+ * feat-20260608-create-app-param-surface-trim / M2 / D-3: self-describing
+ * surface -- no longer `extends RendererOptions`. The 7 app-only fields
+ * (input / audio / physics / silenceUnhandledErrors) plus the 2 RHI escape-hatch
+ * fields (rhi / rawDeviceForContextConfigure) are
+ * listed inline, so IDE autocomplete shows AI users a clean surface
+ * without inheriting now-disallowed slots like clearColor (M1, on Camera)
+ * and shaderManifestUrl (M2, on BundlerOptions / 3rd arg). The escape
+ * hatches stay discoverable for the RHI debugging path (charter P1 -- not
+ * default noise, but reachable when the AI user scrolls the type).
+ */
+export interface CreateAppOptions {
+  /**
+   * Optional positive Host-owned upper bound for the canvas device pixel ratio.
+   * Values below 1 intentionally downsample GPU-bound surfaces. The default is
+   * the current devicePixelRatio; the Engine never reads URL or game-specific
+   * settings to derive this value.
+   */
+  readonly maxCanvasPixelRatio?: number | undefined;
+  /** One immutable Catalog scope for this App realm. */
+  readonly assetCatalog?: CatalogSource;
+  /** Explicit owner contributions installed into this realm's Registry. */
+  readonly assetDecoders?: readonly AssetDecoderContributionRef[];
+  /** Opt into realm-local engine execution. Omission preserves the existing local assembly path. */
+  readonly execution?: ExecutionOptions;
+  /** Host-owned UI root whose events do not enter gameplay input. */
+  readonly uiRoot?: Node;
+  /** Producer-owned render features forwarded to the renderer unchanged. */
+  readonly features?: readonly RenderFeature<unknown>[];
+  /** Unified plugin list (M1 feat-20260623-plugin-system-unify-build-world-protocol). */
+  readonly plugins?: readonly Plugin[];
+  /**
+   * A host-owned input backend for this canvas. When supplied, createApp inserts
+   * it into the World instead of attaching a second browser listener set. The
+   * host retains its lifecycle; this app only consumes snapshots from the view.
+   */
+  readonly input?: InputBackend;
+  /**
+   * World-owned time policy supplied to the canvas-form World constructor.
+   * Assemble-form callers retain their pre-existing World policy.
+   */
+  readonly time?: TimePolicy;
+  /**
+   * When true, suppresses the console.error fallback inside the error
+   * fan-out for hosts that prefer total silence (M4 default: false).
+   */
+  readonly silenceUnhandledErrors?: boolean;
+  /**
+   * RHI escape hatch -- forwarded verbatim to createRenderer. Same semantics
+   * as `RendererOptions.rhi` (the createRenderer third-party-RHI-instance
+   * injection point). Use only for testing / pinning a specific backend /
+   * advanced AI users that ship their own RhiInstance shim.
+   */
+  readonly rhi?: RhiInstance | undefined;
+  /** @internal Runtime-owned instrumentation seam for a recorder attachment. */
+  readonly rhiInstrumentation?: RhiBackendInstrumentation;
+  /**
+   * D-S1 raw GPUDevice escape hatch -- forwarded verbatim to createRenderer.
+   * Same semantics as `RendererOptions.rawDeviceForContextConfigure`. Used
+   * by the apps/hello/triangle bootstrap, where the host configures the
+   * canvas's GPUCanvasContext outside the RHI surface.
+   */
+  readonly rawDeviceForContextConfigure?: unknown | (() => unknown | undefined);
+  /**
+   * Neutral PointerLock gate forwarded verbatim to the canvas-form input
+   * attach (attachInputAuto → attachBrowserInputBackend). When it returns
+   * false, a canvas click does NOT capture the cursor. Absent => always-lock
+   * (standalone game behaviour). The engine never learns WHY locking is
+   * (dis)allowed — the host owns that decision (e.g. an editor viewport that
+   * only allows lock in its play·game quadrant). Ignored by the assemble form
+   * (host-managed input owns its own lock policy).
+   */
+  readonly pointerLockAllowed?: () => boolean;
+  /**
+   * Virtual joystick configs forwarded verbatim to the canvas-form input
+   * attach (attachInputAuto -> attachBrowserInputBackend). Each config derives
+   * a normalized 2D axis readable via `snap.virtualAxis(name)`. Absent => no
+   * virtual joysticks. Ignored by the assemble form (host-managed input wires
+   * its own backend). Mirrors `pointerLockAllowed`: the canvas-form entry must
+   * expose every backend option the standard recipe needs, or the config path
+   * dead-ends before reaching the backend that already supports it.
+   */
+  readonly virtualJoysticks?: readonly VirtualJoystickConfig[];
+  /**
+   * Action mapping configuration (M1: action semantic abstraction layer).
+   *
+   * Declares named actions (e.g. 'jump', 'moveRight') bound to raw input sources
+   * (key, mouseButton, gamepadButton, gamepadAxis). The engine derives per-frame
+   * action states via `deriveActionStates()` and exposes them via
+   * `snap.action(name).isPressed()`. Duplicate action names follow last-wins
+   * semantics (D-8).
+   *
+   * This is canvas-form only. Assemble-form hosts insert the
+   * `INPUT_MAP_KEY` Resource directly.
+   */
+  readonly inputMap?: readonly ActionConfig[] | undefined;
+  /**
+   * M2: pointer-lock provider injected by the host (e.g. editor play-runtime).
+   * Forwarded verbatim through InputAttachOptions to BrowserInputBackendOptions.
+   * When absent, the backend falls back to the W3C requestPointerLock() path.
+   * Type SSOT is @forgeax/engine-input's PointerLockProvider.
+   * Ignored by the assemble form (host-managed input owns its own lock policy).
+   */
+  readonly lockProvider?: PointerLockProvider;
+  /**
+   * Per-frame draw-source injection seam (M2 / D-3). When supplied, the
+   * frame-loop pulls it each frame to decide which worlds to render + which
+   * owner indices to use; when omitted the canvas-form App renders its own
+   * single world (legacy behaviour unchanged). See {@link DrawSource}.
+   */
+  readonly drawSource?: DrawSource;
+  /** Explicit profiler capability shared by the host and renderer. */
+  readonly profiler?: Profiler;
+  /** Explicit opt-in for Render-owned HDRP membership timing evidence. */
+  readonly membershipTiming?: MembershipTimingOptions;
+}
+
+/**
+ * Bundler-layer injection for the canvas-form createApp(canvas, opts, bundler?)
+ * and createRenderer(canvas, opts, bundler?).
+ *
+ * feat-20260608-create-app-param-surface-trim / M2 / D-3: this is the SSOT
+ * for build-tool emit knowledge that the engine consumes at runtime.
+ * Aggregates two host-injected channels:
+ *
+ *   - importTransport: dev-only ImportTransport that the engine threads to
+ *     the AssetRegistry third ctor slot so a DDC miss can lazy-import.
+ *     Absent => shipped form (DDC miss fails fast with `asset-not-imported`).
+ *
+ *   - shaderManifestUrl: the path the host's vite-plugin-shader emit step
+ *     wrote `manifest.json` to. Absent (or `BundlerOptions` itself omitted)
+ *     => createRenderer falls back to '/shaders/manifest.json'
+ *     (createRenderer.ts D-2 q5-A) so the LO 1.1 zero-config takeoff path
+ *     keeps working without any explicit injection.
+ *
+ * Both fields are optional so `BundlerOptions = {}` is a valid call shape.
+ * M3 collapses the typical demo callsite to `forgeaxBundlerAdapter()` (a
+ * factory exported by `virtual:forgeax/bundler`), which returns an object
+ * with this same structural shape -- type compatibility is enforced by
+ * TypeScript structural typing (D-4: vite-plugin-shader does NOT import
+ * `@forgeax/engine-app`, so this interface is the consumer-side SSOT).
+ */
+export interface BundlerOptions {
+  /**
+   * Dev-only ImportTransport forwarded verbatim to createRenderer (and thence
+   * to the AssetRegistry third ctor slot). Absent => shipped form (a DDC miss
+   * fails fast with `asset-not-imported`).
+   *
+   * The `| undefined` widening is necessary because exactOptionalPropertyTypes
+   * is enabled at the workspace level (tsconfig.base.json); it lets tests
+   * (and demos that gate on a build-mode flag) write `{ importTransport:
+   * undefined }` without a TS2379 error.
+   */
+  readonly importTransport?: ImportTransport | undefined;
+  /**
+   * vite-plugin-shader emit URL (the path the build wrote `manifest.json`
+   * to). Absent => createRenderer falls back to '/shaders/manifest.json'.
+   * Tests can inject via a `data:application/json,...` URL to bypass fetch.
+   *
+   * The `| undefined` widening lets tests opt into the zero-entry mode by
+   * writing `{ shaderManifestUrl: undefined }` (the createRenderer body
+   * checks `'shaderManifestUrl' in bundler` to distinguish "absent" from
+   * "explicitly undefined"; see D-2 q5-A in plan-strategy).
+   */
+  readonly shaderManifestUrl?: string | undefined;
+}
+
+/**
+ * App handle returned by createApp(...). Host owns the lifecycle and
+ * interacts with the rAF loop through start / stop / pause / resume +
+ * the structured error fan-out via onError.
+ *
+ * M1 skeleton: start / stop / pause / resume return Result.ok(undefined)
+ * synchronously and onError returns a no-op unsubscribe. The 4-state
+ * machine + idempotent transitions land in M2 (plan-strategy section 7).
+ */
+export interface App {
+  /** Caller-owned Renderer (reference equality with the assemble input). */
+  readonly renderer: Renderer;
+  /** App-owned single-scope runtime Registry; disposed with the Cordis realm. */
+  readonly assets: AssetRegistry;
+  /** Caller-owned World (reference equality with the assemble input). */
+  readonly world: World;
+  /** Host-side lifecycle and immutable diagnostics for the selected execution tier. */
+  readonly execution: ExecutionControl;
+  /**
+   * Pause frame submission and relinquish the renderer presentation surface
+   * without replacing World, Renderer, AssetRegistry, plugins, or history.
+   */
+  releaseSurfacePreserveWorld(): Promise<Result<void, RhiError>>;
+  /** Restore the same surface and resume only when release paused a running App. */
+  restoreSurface(): Promise<Result<void, RhiError>>;
+  /** Native Cordis realm that owns this App's capability fibers and effects. */
+  readonly pluginContext: Context;
+  /** InputBackend handle when input attach is enabled; undefined otherwise. */
+  readonly input?: InputBackend;
+  /** AudioBackend handle when audio attach is enabled; undefined otherwise. */
+  readonly audio?: AudioBackend;
+  /**
+   * PhysicsWorld handle when physicsPlugin is loaded; undefined
+   * otherwise. physicsPlugin.build awaits the WASM import -- createApp
+   * resolves ONLY after the WASM module is loaded, so this field is
+   * populated immediately when createApp returns (AC-06: no timing gap).
+   */
+  readonly physics?: PhysicsWorld | PhysicsWorld2D | undefined;
+  /**
+   * Immediate-mode debug-draw overlay instance (feat-20260615 debug-draw M5).
+   *
+   * Created automatically during createApp (canvas form). AI users call
+   * `app.debugDraw.line(a, b, RED)` in any system and the overlay renders
+   * at frame-end via the render-graph's debug-overlay pass. Shape calls are
+   * immediate-mode — vertices accumulate per-frame and are flushed at the
+   * tonemap suffix; stale data from frame N-1 is never visible in frame N.
+   *
+   * Undefined when debug-draw is not wired (assemble-form createApp with
+   * no explicit debugDraw creation — the auto-attach is canvas-form only).
+   */
+  readonly debugDraw?: DebugDraw | undefined;
+  /**
+   * Begin rAF scheduling. Idempotent guard lands in M2:
+   *   - first call: Result.ok(undefined)
+   *   - second call (already running): Result.err({ code: 'app-already-running' })
+   * M1 stub returns Result.ok(undefined) unconditionally.
+   */
+  start(): Result<void, AppError>;
+  /**
+   * Stop rAF scheduling. State-machine semantics land in M2:
+   *   - 'idle' / 'stopped' state: Result.err({ code: 'app-not-started' })
+   *   - 'running' / 'paused' state: Result.ok(undefined)
+   * M1 stub returns Result.ok(undefined) unconditionally.
+   */
+  stop(): Result<void, AppError>;
+  /** Tear down plugins, host resources, and renderer ownership. */
+  dispose(): Promise<Result<void, AppError>>;
+  /**
+   * Pause rAF scheduling. Idempotent in 'paused' state. M1 stub returns
+   * Result.ok(undefined) unconditionally; full state machine in M2.
+   */
+  pause(): Result<void, AppError>;
+  /**
+   * Resume rAF scheduling from paused state. M1 stub returns
+   * Result.ok(undefined) unconditionally; full state machine in M2.
+   */
+  resume(): Result<void, AppError>;
+  /**
+   * Advance one complete update/draw frame through the App-owned frame authority.
+   * The App must be paused; deterministic tools supply the explicit delta.
+   */
+  stepFrame(deltaSeconds: number): Result<void, AppDispatchError>;
+  /**
+   * Subscribe to structured errors fan-out from the rAF loop. Returns an
+   * unsubscribe handle. The callback signature deliberately excludes raw
+   * Error (charter P3 -- AI users walk .code, not message strings).
+   *
+   * M1 stub: registers nothing and returns a no-op unsubscribe; full
+   * fan-out registry lands in M4 (plan-strategy section 7).
+   */
+  onError(cb: (err: AppDispatchError) => void): () => void;
+  /**
+   * Replace the per-frame world routing pull. `undefined` restores the
+   * single-world path; an injected result updates every returned secondary
+   * World before drawing it with the declared owners. This changes routing,
+   * not scheduling or time ownership.
+   */
+  setDrawSource(drawSource: DrawSource | undefined): void;
+  /**
+   * Most recent device-loss error retained for host self-inspection without
+   * requiring an onError listener up front.
+   */
+  readonly lastError?: AppDispatchError | undefined;
+  /**
+   * Optional single-frame RHI capture capability.
+   *
+   * A successful capture returns one `{ kind: 'rhi-tape', digest, bytes }`
+   * artifact. Pass that same artifact to DevKit summary and inspect
+   * operations; the selection key is `FrameModel.works[].workIndex`.
+   */
+  readonly rhiCapture?: RhiCapture | undefined;
+  /**
+   * Handle for the remote eval server started by createApp (dev mode).
+   *
+   * `undefined` in production builds and headless/dawn-node without explicit
+   * opt-in. When present, the host can read `app.remote.port` for WS connection
+   * details or call `await app.remote.close()` to tear down the server
+   * (feat-20260629-inspector-two-layer-model M4 / w20).
+   *
+   * Typed as {@link RemoteHandle} from `@forgeax/engine-types` — a neutral
+   * package with no dependency on `@forgeax/engine-remote`.
+   */
+  readonly remote?: import('@forgeax/engine-types').RemoteHandle | undefined;
+}
+
+/** Host control returned by the unified execution path. Engine-owned objects remain realm-local. */
+export type ExecutionApp = Pick<
+  App,
+  | 'execution'
+  | 'input'
+  | 'audio'
+  | 'rhiCapture'
+  | 'start'
+  | 'stop'
+  | 'pause'
+  | 'resume'
+  | 'onError'
+  | 'lastError'
+>;
+
+/** Artifact returned by the browser RHI-debug capture capability. */
+export interface RhiCaptureArtifact {
+  readonly kind: 'rhi-tape';
+  readonly digest: string;
+  readonly bytes: Uint8Array;
+}
+
+/** Same-origin browser hook shared by main-serial and Worker execution. */
+export interface RhiCaptureHook {
+  captureFrame(options?: CaptureFrameOptions): Promise<Result<RhiCaptureArtifact, RhiDebugError>>;
+}
+
+/**
+ * Error union returned by the assemble-form entry. The canvas-form thin
+ * wrapper widens this with EngineEnvironmentError (createRenderer
+ * construction-time failure path -- plan-strategy D-5 / requirements AC-01).
+ *
+ * Cordis activation failures are projected into AppError at this boundary.
+ */
+export type AssembleAppError = AppError | RhiError | AssetRuntimeAssemblyError;
+
+/**
+ * Error union returned by the canvas-form thin wrapper. Extends
+ * AssembleAppError with EngineEnvironmentError to surface
+ * createRenderer construction-time failures unchanged (preserves
+ * .detail.webgpuError per requirements section 6.1).
+ *
+ * The canvas form adds renderer construction failures.
+ */
+export type CanvasAppError = AssembleAppError | EngineEnvironmentError;

package/src/vite-env.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Vite replaces this one import-meta key in browser hosts. The app package
+ * also ships to Dawn/Node, where the property is simply absent at runtime.
+ */
+interface ImportMeta {
+  readonly env?: {
+    readonly DEV?: boolean;
+    readonly FORGEAX_ENGINE_RHI_DEBUG?: string;
+    /** Explicit opt-in for bounded producer-owned semantic observations. */
+    readonly VITE_FORGEAX_ENGINE_RHI_SEMANTIC?: string;
+  };
+}