lecodes-sdk 2.4.10 → 2.5.1

package/src/runtime/fetch.ts

@@ -62,6 +62,24 @@ export const fetch = (url: string, options: FetchOptions = {}): Promise<FetchRes
 export const fetchLocal = (path: string): FetchResponse =>
   new FetchResponseImpl({ id: _creatorFetch.local(path) }, 200)   // the host's buffer: not owned
 
+// A local `asset()` compiles to `__localAsset("id:" + _creatorFetch.local(<name>), <name>)` (sdk/src/compile/
+// compileProject.ts): the "id:" url is the host's buffer id, assigned in the order the bundle asks, so it names the
+// asset for THIS run only; the staged NAME is what stays the same across compiles. The pair is kept so a cache
+// written by one run (gl/Statics.ts) can name an asset to the next.
+const localAssetNames = new Map<string, string>()
+const localAssetUrls = new Map<string, string>()
+/** @internal */
+export const __localAsset = (url: string, name: string): string => {
+  localAssetNames.set(url, name)
+  localAssetUrls.set(name, url)
+  return url
+}
+/** @internal The stable name of an asset url: its staged name for a local asset, the url itself otherwise (a server
+ *  build's urls are paths, stable on their own). */
+export const assetNameOf = (url: string): string => localAssetNames.get(url) ?? url
+/** @internal The url of a stable asset name in this run (the inverse of `assetNameOf`). */
+export const assetUrlOf = (name: string): string => localAssetUrls.get(name) ?? name
+
 /** A handle to a picked / fetched file (see openFilePicker). */
 export class File {
   /** @internal The host buffer (not owned — see the header). Same key `FetchResponse` carries, so

package/src/scene/defineScene.ts

@@ -49,10 +49,11 @@ import { CAMERA_DEFAULTS } from "../gl/Camera"
 import { CameraPlace } from "../gl/CameraPlace"
 import { Node } from "../gl/Node"
 import { Mesh } from "../gl/Mesh"
-import { Model } from "../gl/Model"
+import { Model, foliageKindOf, type FoliageKind } from "../gl/Model"
 import { Physics } from "../gl/physics/Physics"
 import { CharacterController } from "../gl/physics/CharacterController"
-import { Lightmap, type LightmapDef } from "../gl/Lightmap"
+import { Lightmap, type LightmapDef, type LightmapPrepared } from "../gl/Lightmap"
+import { coveredRoots, defsDigest, bakeDigest, findNode, open as staticsOpen, build as staticsBuild, snapshot as staticsSnapshot, staticsConfig, toolRun, type CoveredRoot, type OpenedCache } from "../gl/Statics"
 import { Foliage, type FoliageOptions } from "../gl/Foliage"
 import { NavMesh } from "../gl/nav/NavMesh"
 import { Terrain, type TerrainLayer, type TerrainRegion, type TerrainOptions } from "../gl/terrain/Terrain"
@@ -191,19 +192,23 @@ export type SceneNodeDef = {
    *  the GLB instance, so `castShadows: false` on a first-person viewmodel covers the whole gun. */
   castShadows?: boolean
   receiveShadows?: boolean
-  /** Baked lighting (a scene with `env.lightmap`): is this model/mesh node a lightmap STATIC — a
-   *  receiver and an occluder in the bake, real-time shadow casting off once the bake applies?
-   *  Default: static unless a `Physics` aspect moves the node (`dynamic` — Physics' default — or
-   *  `kinematic`). Set it only to override that rule; prefab subtrees inherit the verdict.
-   *  `'cube'` = a static whose every mesh bakes as AMBIENT CUBES instead of atlas texels — an occluder (its shadow and
+  /** Is this node STATIC — part of the level that never moves once loaded? A static is what the bake sees (a
+   *  receiver and an occluder, real-time shadow casting off once the bake applies) and what the level cache
+   *  snapshots after the first load. Default: static unless a `Physics` aspect moves the node (`dynamic` —
+   *  Physics' default — or `kinematic`). `false` = built live, lit in real time, never cached. Set it only to
+   *  override that rule; prefab subtrees inherit the verdict. */
+  static?: boolean
+  /** `'cube'` = a static whose every mesh bakes as AMBIENT CUBES instead of atlas texels — an occluder (its shadow and
    *  bounce stay in the bake) lit where it stands, the way the bake treats small and thin props on its own: a pipe run, a
    *  fence, a prop whose lightmap seams show. A prefab marked `'cube'` bakes its statics that way too. By name for a whole
    *  kit: the `cube` option of `env.lightmap`'s `bake()`. */
-  lightmap?: boolean | "cube"
+  lightmap?: "cube"
   /** `model` nodes: vegetation — load through the FOLIAGE tier (wind, touch bending, per-copy tint; see
-   *  `Foliage`). `{ fade: [start, end] }` also thins the cards out over that distance range (m) and drops the
-   *  copy past `end` — for ground cover. The fade is per ASSET: every node of the same GLB shares it. */
-  foliage?: boolean | { fade?: [number, number] }
+   *  `Foliage`). `'tree'` (= `true`): a crown, lit by the sky and the real-time sun; `'grass'`: ground cover, lit by
+   *  the terrain's baked light under it (`Model.load`'s `foliage`). The object form names the kind and may add
+   *  `fade: [start, end]`: the cards thin out over that distance range (m) and the copy drops past `end` — for
+   *  ground cover. The fade is per ASSET: every node of the same GLB shares it. */
+  foliage?: boolean | "tree" | "grass" | { kind?: "tree" | "grass", fade?: [number, number] }
   /** Navigation (a scene with `env.navmesh`, see navmesh.md): every STATIC body is walkable by
    *  default. `false` leaves this one out of the bake; `'unwalkable'` cuts its footprint out
    *  (nobody stands on or crosses it). */
@@ -417,9 +422,9 @@ const movesByPhysics = (def: SceneNodeDef): boolean =>
     ((e.ctor as unknown) === Physics && ((e.props as { motion?: string } | undefined)?.motion ?? "dynamic") !== "static")
     || (e.ctor as unknown) === CharacterController)
 
-/** The static verdict for one node def (the editor's "Baked lighting" switch shows the same rule).
- *  Children of a mover are movers too — buildNodes carries that down, this is the node's own verdict. */
-export const isLightmapStatic = (def: SceneNodeDef): boolean => def.lightmap !== undefined ? def.lightmap !== false : !movesByPhysics(def)
+/** The static verdict for one node def (the editor's "Static" switch shows the same rule). Children of a
+ *  mover are movers too — buildNodes carries that down, this is the node's own verdict. */
+export const isStatic = (def: SceneNodeDef): boolean => def.static !== undefined ? def.static : !movesByPhysics(def)
 
 /** A terrain node: from its file or a fresh flat grid; textures load before the node appears (like a
  *  mesh's material). Stamps and holes apply later in buildNodes, once every target node exists. */
@@ -443,23 +448,39 @@ const createTerrain = async (def: TerrainNodeDef, lightmap: boolean): Promise<No
 // cannot leak into the next node that leaves the flag alone.
 const modelTemplates = new Map<string, Promise<Model>>()
 
-const loadModel = (source: string, lightmap: boolean, foliage: boolean): Promise<Model> => {
-  const key = `${lightmap}\u0000${foliage ? "foliage" : ""}\u0000${source}`
+/** What one `load()` spent where — the `[load]` line instantiate prints (always on, like the host's
+ *  `[startup]`): a slow open names its stage. `glb` is the wall from the first template's fetch to the last
+ *  one's resolve (they overlap); `clone` / `aspects` are sums of synchronous work. */
+const loadStats = { glb: 0, glbFirst: 0, glbLast: 0, clones: 0, cloneMs: 0, aspectsMs: 0 }
+const resetLoadStats = (): void => { loadStats.glb = 0; loadStats.glbFirst = 0; loadStats.glbLast = 0; loadStats.clones = 0; loadStats.cloneMs = 0; loadStats.aspectsMs = 0 }
+
+const templateModel = (source: string, lightmap: boolean, foliage: FoliageKind): Promise<Model> => {
+  const key = `${lightmap}\u0000${foliage || ""}\u0000${source}`
   let template = modelTemplates.get(key)
   if (template === undefined) {
-    template = Model.load(source, { lightmap, foliage })
+    if (loadStats.glb++ === 0) loadStats.glbFirst = Date.now()
+    template = Model.load(source, { lightmap, foliage }).then((m) => { loadStats.glbLast = Date.now(); return m })
     modelTemplates.set(key, template)
     // a failed load must not poison the cache — the next node retries
     void template.catch(() => modelTemplates.delete(key))
   }
-  return template.then((t) => t.clone())
+  return template
 }
 
+const loadModel = (source: string, lightmap: boolean, foliage: FoliageKind): Promise<Model> =>
+  templateModel(source, lightmap, foliage).then((t) => {
+    const t0 = Date.now()
+    const c = t.clone()
+    loadStats.clones++
+    loadStats.cloneMs += Date.now() - t0
+    return c
+  })
+
 /** @internal */
 export const createSource = (path: string, def: SceneNodeDef, lightmap: boolean): Node | Promise<Node> => {
   const sources = [ def.mesh, def.model, def.light, def.make, def.prefab, def.camera, def.terrain ].filter((s) => s !== undefined).length
   if (sources > 1) throw new Error(`Scene node "${path}" declares more than one source (mesh/model/light/make/prefab/camera/terrain)`)
-  if (def.model !== undefined) return loadModel(def.model, lightmap, !!def.foliage)
+  if (def.model !== undefined) return loadModel(def.model, lightmap, foliageKindOf(def.foliage))
   if (def.mesh !== undefined) return createMesh(def.mesh, def.material)
   if (def.terrain !== undefined) return createTerrain(def.terrain, lightmap)
   if (def.light !== undefined) return createLight(path, def.light)
@@ -848,7 +869,7 @@ const prefabPartRows = (defs: Record<string, SceneNodeDef>, local: Record<string
 }
 
 /** @internal */
-export const attachPrefab = async (wrapper: Node, path: string, def: SceneNodeDef, scene: Scene, stack: Set<SceneDef>, lm: LightmapCtx | null): Promise<void> => {
+export const attachPrefab = async (wrapper: Node, path: string, def: SceneNodeDef, scene: Scene, stack: Set<SceneDef>, lm: LightmapCtx | null, covered?: Map<string, CoveredRoot & { node?: Node }>): Promise<void> => {
   const pdef = (def.prefab as { def?: SceneDef } | undefined)?.def
   if (!pdef || typeof pdef !== "object") {
     console.error(`[scene] "${path}".prefab is not a scene handle (import the .scene file's default export)`)
@@ -862,7 +883,7 @@ export const attachPrefab = async (wrapper: Node, path: string, def: SceneNodeDe
   }
   const local: Record<string, Node> = {}
   const localRuns: EditorRun[] = []   // discarded: instance internals render, but aren't editor-tracked
-  await buildNodes(pdef.nodes ?? {}, wrapper, scene, local, localRuns, new Set(stack).add(pdef), lm)
+  await buildNodes(pdef.nodes ?? {}, wrapper, scene, local, localRuns, new Set(stack).add(pdef), lm, covered, `${path}/`)
   const rows = prefabPartRows(pdef.nodes ?? {}, local, "", 0)
   ;(wrapper as { _prefabParts?: ModelPartRow[] })._prefabParts = rows
   if (def.overrides) applyOverridesToRows(rows, def.overrides)
@@ -874,13 +895,13 @@ export const attachPrefab = async (wrapper: Node, path: string, def: SceneNodeDe
 const buildNodes = async (
   defs: Record<string, SceneNodeDef>, parent: Node | null, scene: Scene,
   nodes: Record<string, Node>, editorRuns: EditorRun[], stack: Set<SceneDef>,
-  lm: LightmapCtx | null = null,
+  lm: LightmapCtx | null = null, covered: Map<string, CoveredRoot & { node?: Node }> = new Map(), coveredPrefix = "",
 ): Promise<void> => {
   const pending: { path: string, node: Node, def: SceneNodeDef }[] = []
   const moverRoots: Node[] = []
 
   // `parentMoves`: a child of a mover moves with it (the body under the hero's capsule) — it never
-  // bakes, whatever its own def says short of an explicit `lightmap: true`
+  // bakes, whatever its own def says short of an explicit `static: true`
   const build = async (name: string, nd: SceneNodeDef, parentNode: Node | null, parentPath: string, parentMoves = false): Promise<void> => {
     // names are path segments — '/' would fork the path, ':' would ambiguate editor card keys
     if (name === "" || name.includes("/") || name.includes(":")) {
@@ -889,7 +910,19 @@ const buildNodes = async (
     // the path is derived from def keys BEFORE any await, so it is deterministic even though
     // Promise.all makes build completion (and record insertion) order nondeterministic
     const path = parentPath === "" ? name : `${parentPath}/${name}`
-    const lmStatic = lm !== null && (nd.lightmap !== undefined ? nd.lightmap !== false : !parentMoves && isLightmapStatic(nd))
+    // a subtree the static level cache rebuilds natively (gl/Statics.ts): one plain JS node, the clones under it
+    // (`coveredPrefix`: this build's full-path prefix — a prefab's internals are keyed from the level's root)
+    const cov = covered.size > 0 ? covered.get(coveredPrefix + path) : undefined
+    if (cov) {
+      const node = new Node()
+      if (parentNode) attachHost(parentNode, nd, path).add(node)
+      scene.add(node)
+      applyNode(node, name, nd)
+      cov.node = node
+      nodes[path] = node
+      return
+    }
+    const lmStatic = lm !== null && (nd.static !== undefined ? nd.static : !parentMoves && isStatic(nd))
     const lmCube = lmStatic && (nd.lightmap === "cube" || lm!.cube === true)
     // a mover in a level with a light volume reads the volume (models: the engine binds it; meshes: registered below)
     const node = await createSource(path, nd, lmStatic)
@@ -905,7 +938,7 @@ const buildNodes = async (
     if (lm !== null && !lmStatic && !parentMoves) moverRoots.push(node)
     if (EDITOR && isEditMode()) addEditorMarker(node, nd)
     // a prefab under a static wrapper bakes; under a mover its internals stay movers (volume-lit)
-    if (nd.prefab !== undefined) await attachPrefab(node, path, nd, scene, stack, lmStatic ? { prefix: `${lm!.prefix}${path}/`, cube: lmCube } : null)
+    if (nd.prefab !== undefined) await attachPrefab(node, path, nd, scene, stack, lmStatic ? { prefix: `${lm!.prefix}${path}/`, cube: lmCube } : null, covered.size > 0 ? covered : undefined)
     pending.push({ path, node, def: nd })
     nodes[path] = node
     await Promise.all(Object.entries(nd.children ?? {}).map(([ childName, child ]) => build(childName, child, node, path, parentMoves || (lm !== null && !lmStatic))))
@@ -913,12 +946,14 @@ const buildNodes = async (
 
   await Promise.all(Object.entries(defs).map(([ name, nd ]) => build(name, nd, parent, "")))
   const makeWaits: Promise<void>[] = []
+  const tAspects = Date.now()
   for (const p of pending) {
     const aspectWait = attachAspects(p.node, p.path, p.def, nodes, scene, editorRuns)
     if (aspectWait) makeWaits.push(aspectWait)
     const wait = attachMake(p.node, p.path, p.def, nodes, scene, editorRuns)
     if (wait) makeWaits.push(wait)
   }
+  loadStats.aspectsMs += Date.now() - tAspects
   if (makeWaits.length > 0) await Promise.all(makeWaits)
 
   // terrain stamps + holes: every node of the file exists now (make() subtrees included), and a
@@ -973,7 +1008,29 @@ const instantiate = async (def: SceneDef, editorRuns: EditorRun[]): Promise<{ sc
   // baked lighting is a play-mode concern; the level owns the registry (a rebuild starts clean)
   const lm: LightmapCtx | null = lightmap && !(EDITOR && isEditMode()) ? { prefix: "" } : null
   if (lm) Lightmap.clear()
-  await buildNodes(def.nodes ?? {}, null, scene, nodes, editorRuns, new Set([ def ]), lm)
+  resetLoadStats()
+  const tLoad = Date.now()
+  // THE STATIC LEVEL CACHE (gl/Statics.ts): with a fresh `<level>.static` beside the bake the covered subtree is
+  // rebuilt natively and the JS builds the rest. Under a tool run (a bake, the snapshot itself) and in the editor
+  // the level always builds the slow, complete way.
+  const staticsCfg = staticsConfig()
+  const roots = lm && lightmap && (staticsCfg || !toolRun()) ? coveredRoots(def.nodes, def) : []
+  let prepared: LightmapPrepared | null = null
+  let opened: OpenedCache | null = null
+  if (roots.length > 0 && lightmap?.statics && lm && !staticsCfg && !toolRun()) {
+    prepared = await Lightmap.prepare(scene, lightmap)   // the pages first: the engine binds the records as it clones
+    opened = await staticsOpen(lightmap.statics, defsDigest(roots, def), bakeDigest(prepared?.data ?? null))
+    if (opened && opened.roots !== roots.length) { console.warn(`[static] the cache covers ${opened.roots} subtree(s), the scene has ${roots.length} — building the level the slow way`); opened = null }
+  }
+  const covered = new Map<string, CoveredRoot & { node?: Node }>()
+  if (opened) for (const r of roots) covered.set(r.path, r)
+  await buildNodes(def.nodes ?? {}, null, scene, nodes, editorRuns, new Set([ def ]), lm, covered)
+  let cachedMade = 0
+  if (opened) {
+    const pages = prepared ? Lightmap.pageIds(prepared) : new Uint32Array(0)
+    cachedMade = await staticsBuild(opened, scene, roots.map((r) => covered.get(r.path)!.node!), pages, templateModel)
+  }
+  const nodesMs = Date.now() - tLoad
   if (navmesh && !(EDITOR && isEditMode())) registerNavOverrides(def.nodes, nodes)
 
   // a camera NODE wins over the top-level `camera:` block; in play mode it keeps driving the view
@@ -1004,12 +1061,35 @@ const instantiate = async (def: SceneDef, editorRuns: EditorRun[]): Promise<{ sc
   }
 
   // the level is complete: apply the bake — or, under `lecodes lightmap bake`, run it
-  if (lm && lightmap) await Lightmap.load(scene, lightmap)
+  const tLm = Date.now()
+  if (lm && lightmap) { if (prepared) await Lightmap.apply(prepared); else await Lightmap.load(scene, lightmap) }
+  const lightmapMs = Date.now() - tLm
   // navigation: load the baked mesh — or, under `lecodes navmesh bake`, dump the level's collision
   // geometry for it (the static bodies exist by now; edit mode never loads it — v1)
+  const tNav = Date.now()
   if (navmesh && !(EDITOR && isEditMode())) {
     await NavMesh.load(scene, { data: navmesh.data, agent: navmesh.agent, areas: navmesh.areas })
   }
+  const navMs = Date.now() - tNav
+  const glbMs = loadStats.glb > 0 ? Math.max(0, loadStats.glbLast - loadStats.glbFirst) : 0
+  console.log(`[load] ${Date.now() - tLoad} ms: nodes ${nodesMs} (${Object.keys(nodes).length} top, glb ${loadStats.glb} in ${glbMs}, clones ${loadStats.clones} in ${loadStats.cloneMs}, aspects ${loadStats.aspectsMs}${cachedMade ? `, ${cachedMade} static placement(s) from the cache` : ""}), lightmap ${lightmapMs}, navmesh ${navMs}`)
+
+  // `lecodes static`: the level is complete and bound — snapshot the covered subtree beside the bake
+  if (staticsCfg && lightmap) {
+    const out = `${staticsCfg.root}/${lightmap.path.replace(/\.bake$/, ".static")}`
+    const live = roots.map((r) => ({ root: r, node: findNode(nodes, r.path) }))
+    const lost = live.filter((r) => !r.node)
+    if (roots.length === 0) console.error("[static] error: nothing to cache — the level has no static subtree (models and their colliders under plain nodes)")
+    else if (lost.length > 0) console.error(`[static] error: no live node for ${lost.map((r) => r.root.path).join(", ")}`)
+    else if (!_creator.staticsWrite) console.error("[static] error: this host cannot write the cache (build the desktop host)")
+    else {
+      const bake = Lightmap._bakeData()
+      const snap = staticsSnapshot(live as { root: CoveredRoot, node: Node }[], def, bake, defsDigest(roots, def))
+      if (_creator.staticsWrite(out, snap.bytes)) console.log(`[static] wrote ${out}: ${snap.placements} placement(s) of ${snap.kinds} kind(s), ${snap.records} bake record(s), ${(snap.bytes.length / 1024).toFixed(0)} KB${bake ? "" : " (no bake bound)"}`)
+      else console.error(`[static] error: could not write ${out}`)
+    }
+    console.log("[static] done")
+  }
 
   return { scene, nodes }
 }

package/src/server/certs/russian-trusted-ca.pem

@@ -0,0 +1,81 @@
+Russian Trusted CA (the Ministry of Digital Development, Минцифры): what a server's fetch needs to reach
+Russian services behind it — GigaChat (ngw.devices.sberbank.ru, gigachat.devices.sberbank.ru), Gosuslugi, Sber.
+Source: https://gu-st.ru/content/Other/doc/russian_trusted_root_ca.cer + russian_trusted_sub_ca.cer (2026-11-03).
+Root: CN=Russian Trusted Root CA, until 2032-02-27, sha256 D2:6D:2D:02:31:B7:C3:9F:92:CC:73:85:12:BA:54:10:35:19:E4:40:5D:68:B5:BD:70:3E:97:88:CA:8E:CF:31
+Sub:  CN=Russian Trusted Sub CA,  until 2027-03-06, sha256 BB:BD:E2:10:3E:79:0B:99:9E:C6:2B:D0:3C:F6:25:A5:A2:E7:C3:16:E1:0A:FE:6A:49:0E:ED:EA:D8:B3:FD:9B
+Loaded through NODE_EXTRA_CA_CERTS (src/server/trustedCa.ts): added to the defaults, never replacing them.
+
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----
+MIIHQjCCBSqgAwIBAgICEAIwDQYJKoZIhvcNAQELBQAwcDELMAkGA1UEBhMCUlUx
+PzA9BgNVBAoMNlRoZSBNaW5pc3RyeSBvZiBEaWdpdGFsIERldmVsb3BtZW50IGFu
+ZCBDb21tdW5pY2F0aW9uczEgMB4GA1UEAwwXUnVzc2lhbiBUcnVzdGVkIFJvb3Qg
+Q0EwHhcNMjIwMzAyMTEyNTE5WhcNMjcwMzA2MTEyNTE5WjBvMQswCQYDVQQGEwJS
+VTE/MD0GA1UECgw2VGhlIE1pbmlzdHJ5IG9mIERpZ2l0YWwgRGV2ZWxvcG1lbnQg
+YW5kIENvbW11bmljYXRpb25zMR8wHQYDVQQDDBZSdXNzaWFuIFRydXN0ZWQgU3Vi
+IENBMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA9YPqBKOk19NFymrE
+wehzrhBEgT2atLezpduB24mQ7CiOa/HVpFCDRZzdxqlh8drku408/tTmWzlNH/br
+HuQhZ/miWKOf35lpKzjyBd6TPM23uAfJvEOQ2/dnKGGJbsUo1/udKSvxQwVHpVv3
+S80OlluKfhWPDEXQpgyFqIzPoxIQTLZ0deirZwMVHarZ5u8HqHetRuAtmO2ZDGQn
+vVOJYAjls+Hiueq7Lj7Oce7CQsTwVZeP+XQx28PAaEZ3y6sQEt6rL06ddpSdoTMp
+BnCqTbxW+eWMyjkIn6t9GBtUV45yB1EkHNnj2Ex4GwCiN9T84QQjKSr+8f0psGrZ
+vPbCbQAwNFJjisLixnjlGPLKa5vOmNwIh/LAyUW5DjpkCx004LPDuqPpFsKXNKpa
+L2Dm6uc0x4Jo5m+gUTVORB6hOSzWnWDj2GWfomLzzyjG81DRGFBpco/O93zecsIN
+3SL2Ysjpq1zdoS01CMYxie//9zWvYwzI25/OZigtnpCIrcd2j1Y6dMUFQAzAtHE+
+qsXflSL8HIS+IJEFIQobLlYhHkoE3avgNx5jlu+OLYe0dF0Ykx1PGNjbwqvTX37R
+Cn32NMjlotW2QcGEZhDKj+3urZizp5xdTPZitA+aEjZM/Ni71VOdiOP0igbw6asZ
+2fxdozZ1TnSSYNYvNATwthNmZysCAwEAAaOCAeUwggHhMBIGA1UdEwEB/wQIMAYB
+Af8CAQAwDgYDVR0PAQH/BAQDAgGGMB0GA1UdDgQWBBTR4XENCy2BTm6KSo9MI7NM
+XqtpCzAfBgNVHSMEGDAWgBTh0YHlzlpfBKrS6badZrHF+qwshzCBxwYIKwYBBQUH
+AQEEgbowgbcwOwYIKwYBBQUHMAKGL2h0dHA6Ly9yb3N0ZWxlY29tLnJ1L2NkcC9y
+b290Y2Ffc3NsX3JzYTIwMjIuY3J0MDsGCCsGAQUFBzAChi9odHRwOi8vY29tcGFu
+eS5ydC5ydS9jZHAvcm9vdGNhX3NzbF9yc2EyMDIyLmNydDA7BggrBgEFBQcwAoYv
+aHR0cDovL3JlZXN0ci1wa2kucnUvY2RwL3Jvb3RjYV9zc2xfcnNhMjAyMi5jcnQw
+gbAGA1UdHwSBqDCBpTA1oDOgMYYvaHR0cDovL3Jvc3RlbGVjb20ucnUvY2RwL3Jv
+b3RjYV9zc2xfcnNhMjAyMi5jcmwwNaAzoDGGL2h0dHA6Ly9jb21wYW55LnJ0LnJ1
+L2NkcC9yb290Y2Ffc3NsX3JzYTIwMjIuY3JsMDWgM6Axhi9odHRwOi8vcmVlc3Ry
+LXBraS5ydS9jZHAvcm9vdGNhX3NzbF9yc2EyMDIyLmNybDANBgkqhkiG9w0BAQsF
+AAOCAgEARBVzZls79AdiSCpar15dA5Hr/rrT4WbrOfzlpI+xrLeRPrUG6eUWIW4v
+Sui1yx3iqGLCjPcKb+HOTwoRMbI6ytP/ndp3TlYua2advYBEhSvjs+4vDZNwXr/D
+anbwIWdurZmViQRBDFebpkvnIvru/RpWud/5r624Wp8voZMRtj/cm6aI9LtvBfT9
+cfzhOaexI/99c14dyiuk1+6QhdwKaCRTc1mdfNQmnfWNRbfWhWBlK3h4GGE9JK33
+Gk8ZS8DMrkdAh0xby4xAQ/mSWAfWrBmfzlOqGyoB1U47WTOeqNbWkkoAP2ys94+s
+Jg4NTkiDVtXRF6nr6fYi0bSOvOFg0IQrMXO2Y8gyg9ARdPJwKtvWX8VPADCYMiWH
+h4n8bZokIrImVKLDQKHY4jCsND2HHdJfnrdL2YJw1qFskNO4cSNmZydw0Wkgjv9k
+F+KxqrDKlB8MZu2Hclph6v/CZ0fQ9YuE8/lsHZ0Qc2HyiSMnvjgK5fDc3TD4fa8F
+E8gMNurM+kV8PT8LNIM+4Zs+LKEV8nqRWBaxkIVJGekkVKO8xDBOG/aN62AZKHOe
+GcyIdu7yNMMRihGVZCYr8rYiJoKiOzDqOkPkLOPdhtVlgnhowzHDxMHND/E2WA5p
+ZHuNM/m0TXt2wTTPL7JH2YC0gPz/BvvSzjksgzU5rLbRyUKQkgU=
+-----END CERTIFICATE-----

package/src/server/env.ts

@@ -0,0 +1,25 @@
+/**
+ * `env` on the SERVER — every key of the project (src/core/env.ts says what `env` is). The values
+ * (Settings → Keys on le.codes, the project's `.env` on this machine) are handed to the bundle by the
+ * host that runs it (`setEnv`) through the `globalThis.__lecodesEnv` seam — a global on purpose,
+ * like `__lecodesRequest`: the bundle carries its own SDK copy, so the host can't pass a value by
+ * import. The compile lists the names the server code reads (serverSplit.ts `scanEnvReads`) so a
+ * deploy can warn before any call does.
+ */
+
+import { makeEnv, type Env } from "../core/env"
+export { ENV_NAME, PUBLIC_ENV_PREFIX, isPublicEnvName, EnvError, type Env } from "../core/env"
+
+const seam = globalThis as unknown as { __lecodesEnv?: Record<string, string> }
+
+/** Host hook (runner / local backend / tests): the values the bundle reads. `null` = none set. */
+export const setEnv = (values: Record<string, string> | null) => {
+  if (values) seam.__lecodesEnv = { ...values }
+  else delete seam.__lecodesEnv
+}
+
+/** @internal */
+export const currentEnv = (): Record<string, string> => seam.__lecodesEnv ?? {}
+
+/** The project's keys. A missing key throws `EnvError` on read. */
+export const env: Env = makeEnv(currentEnv)

package/src/server/host.ts

@@ -10,6 +10,9 @@ export {
 } from "./runtime"
 export type { LoadedServer, InvokeResult, InvokerOptions, ServerRegistration, SeedOutcome } from "./runtime"
 export type { RequestContext } from "./context"
+export { setEnv, EnvError, ENV_NAME, PUBLIC_ENV_PREFIX, isPublicEnvName } from "./env"
+export { TRUSTED_CA_FILE, trustedCaEnv } from "./trustedCa"
+export type { Env } from "./env"
 export { createChannelHub } from "./channelHub"
 export type { ChannelHub, ChannelHubOptions, HubConnection, HubFanout } from "./channelHub"
 export type { ChannelGroup, ClientFrame, ServerFrame } from "../runtime/wire"
@@ -61,6 +64,9 @@ export type ServerDescription = {
   auth: { model: string | null }
   /** `app.json` name (when the compile embedded one). */
   appName?: string
+  /** The keys the server code reads (`env.NAME`, serverSplit.ts `scanEnvReads`): what a deploy checks
+   *  against the keys that are set, so a missing one is a warning before it is a failed call. */
+  env: string[]
 }
 
 const describeField = (f: Field<any, any>): FieldDescription => {
@@ -107,5 +113,6 @@ export const describeServer = (server: LoadedServer): ServerDescription => {
     pushChannels: [...server.pushChannels.keys()],
     auth: { model: db?.$auth?.model ?? null },
     appName: server.manifest.app?.name,
+    env: [...(server.manifest.env ?? [])],
   }
 }

package/src/server/inject.ts

@@ -3,12 +3,13 @@
  * chisel injects these into the server bundle exactly like ./inject.ts does for the client bundle;
  * nothing here may reach the client bundle. Keep this the ONLY file that exports server globals.
  *
- * Globals: t, model, defineDb, ref (schema + queries), ApiError, channel, pushChannel, request. Sign-in is
+ * Globals: t, model, defineDb, ref (schema + queries), ApiError, channel, pushChannel, request, env. Sign-in is
  * not a global: it is `db.auth` of a db made with `defineDb({...}).withAuth({ model })`.
  */
 
 export { t, model, defineDb, ref } from "./db"
 export { ApiError } from "./errors"
+export { env, type Env } from "./env"
 export { channel } from "./channel"
 export { pushChannel, type PushChannel, type PushMessage, type PushNotification, type PushTarget } from "./pushChannel"
 export { request } from "./context"

package/src/server/trustedCa.ts

@@ -0,0 +1,23 @@
+/**
+ * The certificate authorities a project's server code can reach beyond the defaults: the Russian
+ * Trusted CA (the Ministry of Digital Development, Минцифры) — what GigaChat, Sber's and Gosuslugi's
+ * endpoints present (certs/russian-trusted-ca.pem, the root and the sub CA; their dates and
+ * fingerprints are in the file's header).
+ *
+ * Bun reads `NODE_EXTRA_CA_CERTS` once, at process start, and ADDS the file to its defaults (`tls.ca`
+ * on a fetch would replace them) — so the host that runs bundles sets the variable on the process
+ * before it starts: the runner's image (tools/runner/Dockerfile), the CLI's local backend (its child
+ * process, tools/cli/src/dev/localBackend.ts), Focus's check. Setting it from inside the process is
+ * too late. A variable already set is the operator's and stays: the variable names one file.
+ */
+
+import { dirname, join } from "node:path"
+import { fileURLToPath } from "node:url"
+
+/** The PEM of the Russian Trusted CA, by its absolute path in this SDK. */
+export const TRUSTED_CA_FILE = join(dirname(fileURLToPath(import.meta.url)), "certs", "russian-trusted-ca.pem")
+
+/** The environment a bundle-running process is started with so its fetch trusts the Russian Trusted CA
+ *  too: `NODE_EXTRA_CA_CERTS` — unless `env` already names a file. */
+export const trustedCaEnv = (env: Record<string, string | undefined> = process.env): Record<string, string> =>
+  env.NODE_EXTRA_CA_CERTS ? {} : { NODE_EXTRA_CA_CERTS: TRUSTED_CA_FILE }

package/src/ui/fonts.ts

@@ -11,3 +11,49 @@ export async function registerFont (fontFamily: string, url: string, options: Fo
     _creatorTree.registerFont(fontFamily, url, options.weight ?? 400, options.style === "italic" ? 2 : 0, res, rej)
   })
 }
+
+// ---- the font() macro's faces --------------------------------------------------------------------
+// The `font("inter")` compile macro (compile/fontMacro.ts) emits one `__registerFont(...)` per face
+// into a generated `.__fonts.ts` module. That registers the face with the UI tree (in the host's
+// preferred container — woff2 on browsers) AND records its TTF URL here, so a `Font2D.load("Inter")`
+// (whose native parser reads TTF/OTF only, never woff2) takes the same identifier UI text takes.
+// The map is created on first use — no top-level side effect for chisel to drop.
+
+type FaceRecord = { family: string, weight: number, italic: boolean, url: string }
+
+let registeredFaces: Map<string, FaceRecord[]> | undefined   // lower-cased family → its faces
+const facesMap = (): Map<string, FaceRecord[]> => (registeredFaces ??= new Map())
+
+/** The macro's registration call (a bundle global, like `__rpc`). `url` is either a full URL (a
+ *  project / vendored entry) or a cdn base ending in "." — the format is appended here: the host's
+ *  for the UI tree, always ttf for 2D text. */
+export function __registerFont (family: string, url: string, weight: number, italic: boolean): void {
+  const base = url.endsWith(".")
+  const ttfUrl = base ? url + "ttf" : url
+  const key = family.toLowerCase()
+  const faces = facesMap().get(key) ?? []
+  const same = faces.find((f) => f.weight === weight && f.italic === italic)
+  if (same) same.url = ttfUrl
+  else faces.push({ family, weight, italic, url: ttfUrl })
+  facesMap().set(key, faces)
+  _creatorTree.registerFont(family, base ? url + (_creatorTree.fontFormat ?? "ttf") : url, weight, italic ? 2 : 0, () => {}, () => {})
+}
+
+/** @internal The TTF URL of a `font()`-registered face: the exact (weight, italic) face first, else
+ *  the nearest registered weight of that family in that style (a tie goes to the heavier), else
+ *  undefined. Family names match case-insensitively. */
+export function _fontUrlOf (family: string, weight = 400, italic = false): string | undefined {
+  const faces = registeredFaces?.get(family.toLowerCase())?.filter((f) => f.italic === italic)
+  if (!faces || faces.length === 0) return undefined
+  let best = faces[0]!
+  for (const f of faces) {
+    const d = Math.abs(f.weight - weight), bd = Math.abs(best.weight - weight)
+    if (d < bd || (d === bd && f.weight > best.weight)) best = f
+  }
+  return best.url
+}
+
+/** @internal The registered families (their declared spelling) — for "unknown family" errors. */
+export function _registeredFontFamilies (): string[] {
+  return registeredFaces ? [ ...registeredFaces.values() ].map((faces) => faces[0]!.family) : []
+}

package/src/version.ts

@@ -4,7 +4,7 @@
 // same manifest). Its MAJOR is the bundle ↔ runtime contract: a bundle's `// sdk:` header line
 // and a host's embedded version must agree on the major for the host to run the bundle; minor
 // and patch never gate anything (features are detected, never versioned).
-export const SDK_VERSION = "2.4.10"
+export const SDK_VERSION = "2.5.1"
 
 /** The major of a semver string, or null when it is not one. */
 export const sdkMajor = (version: string | null | undefined): number | null => {