Web USD serving on the Space, dark (VIEWER_FORMAT unset = glb): indexing #72 v2 (84d79af5) runtime files

supervisord files from #72 @84d79af5 (the '' case arm removed; supervisor 4.2.5 parser tests + real supervisord -n on noble/1.24 and bookworm/1.22: nginx RUNNING for unset/glb/usd/auto). nginx.conf.template = #72's hunks on prod's rail lists (#59's rail names ship with Artem's deploy). library_media.py unchanged (#72). Revert: restore 0fa97f4a's three docker files.

docker/hf-space/nginx.conf.template

@@ -43,6 +43,13 @@ map $arg_v $slim_library_cache {
     ""      "no-cache";
     default "public, max-age=31536000, immutable";
 }
+# Web USD (/library_media/<id>/usd/*.usdc, below): a client whose Accept-Encoding names br gets the precompressed
+# <file>.br sibling the media builder ships; `br;q=0` refuses it (RFC 9110 12.5.3). First match wins.
+map $http_accept_encoding $slim_accepts_br {
+    default                                               0;
+    "~*(^|,)\s*br\s*;\s*q\s*=\s*0(\.0{0,3})?\s*(,|$)"      0;
+    "~*(^|,)\s*br\s*(;|,|$)"                               1;
+}
 # <<< simready-central slim explorer (http) <<<
 server {
     listen __PORT__;
@@ -199,10 +206,28 @@ server {
     # category.qcode_property central:category: the Category tree (only the tree) reads the property the pipeline's
     # `categories` stage writes (pipeline/categories.py): the asset's Q-code, or oem:<HF owner> for a partner package,
     # so OEM > vendor scopes to that vendor and no asset is left Uncategorized. Search and parsing keep the Q-code.
+    # viewerFormat (Web USD's runtime switch, 2026-10-14): __VIEWER_FORMAT__ is rendered by the same sed from the
+    # Space variable VIEWER_FORMAT — glb (the default, also for anything but glb|usd|auto), usd or auto. The Explorer
+    # reads it over its baked REACT_APP_VIEWER_FORMAT, so web USD goes off with a variable and a restart, no rebuild;
+    # pipeline/library_media.py fetches the USD archives only when it is usd or auto.
     location = /config.js {
         default_type application/javascript;
         add_header Cache-Control "no-cache, must-revalidate" always;
-        return 200 '(function(){var c="__CORPUS_NAME__";if(!c||c.indexOf("__")===0){c="usdsearch-dev";}window.__SERVER_MAPPING__={"usdsearch-dev":{"name":c+" (Hugging Face)","apiUrl":"","embedding_config":{"field_name":"siglip2-embedding.embedding","dimension":1536},"category":{"qcode_property":"central:category"},"features":{"download":__DOWNLOAD_ENABLED__,"s3UrlRemap":false,"seedDefaultScope":false,"railFilters":["profiles","simready_metadata_asset_license","category"],"railDefaults":["profiles","simready_metadata_asset_license","category"],"propertyAliases":{"wikidata_qcode":"simready_metadata_qcode"},"propertyFilterCombine":"and","submitContentUrl":"__SUBMIT_CONTENT_URL__"}}};window.__DEFAULT_SERVER__="usdsearch-dev";})();';
+        return 200 '(function(){var c="__CORPUS_NAME__";if(!c||c.indexOf("__")===0){c="usdsearch-dev";}window.__SERVER_MAPPING__={"usdsearch-dev":{"name":c+" (Hugging Face)","apiUrl":"","embedding_config":{"field_name":"siglip2-embedding.embedding","dimension":1536},"category":{"qcode_property":"central:category"},"features":{"download":__DOWNLOAD_ENABLED__,"s3UrlRemap":false,"seedDefaultScope":false,"railFilters":["profiles","simready_metadata_asset_license","category"],"railDefaults":["profiles","simready_metadata_asset_license","category"],"propertyAliases":{"wikidata_qcode":"simready_metadata_qcode"},"propertyFilterCombine":"and","submitContentUrl":"__SUBMIT_CONTENT_URL__","viewerFormat":"__VIEWER_FORMAT__"}}};window.__DEFAULT_SERVER__="usdsearch-dev";})();';
+    }
+    # The Web USD reader (SimReady Central's explorer/scripts/copy-usd-reader.js: /static/usd-reader/<revision>/, a
+    # module worker's few small .js files and its ~2.3 MB WebAssembly). The stock gzip_types (and the server's line
+    # above) name no application/wasm, so without this the .wasm goes out raw: a .gz sibling the dist ships is sent as
+    # is (gzip_static), else it is gzipped here. Same files and folder as the /static/ alias above; longer prefix wins.
+    location /static/usd-reader/ {
+        alias /usr/share/nginx/explorer/static/usd-reader/;
+        types { application/wasm wasm; application/javascript js; }
+        default_type application/octet-stream;
+        gzip_static on;
+        gzip on;
+        gzip_comp_level 6;
+        gzip_vary on;
+        gzip_types application/wasm application/javascript;
     }
     # index.html must always revalidate (covers the try_files fallback too): a swap or rollback
     # must not leave a browser holding an index.html that names deleted chunks.
@@ -296,7 +321,7 @@ server {
     location /library_media/ {
         root /app/hf-space-pipeline/.build;   # .build/library_media/: outside .build/restore/, which the index restore empties
         try_files $uri @slim_not_found;
-        types { application/json json; model/gltf-binary glb; video/mp4 mp4; image/jpeg jpg; image/webp webp; }
+        types { application/json json; model/gltf-binary glb; video/mp4 mp4; image/jpeg jpg; image/webp webp; image/ktx2 ktx2; image/png png; }
         default_type application/octet-stream;
         gzip_types application/json model/gltf-binary;   # meshopt GLBs still shrink under gzip
         add_header Cache-Control $slim_library_cache always;
@@ -305,6 +330,47 @@ server {
         add_header Access-Control-Allow-Methods "GET, POST, OPTIONS" always;
         add_header Access-Control-Allow-Headers "Content-Type, Authorization" always;
     }
+    # Web USD (manifest entry `usd`, SimReady Central's simready-web-usd/1): <id>/usd/{asset,hd,colliders}.usdc beside
+    # its KTX2 textures (<id>/usd/tex/*.ktx2, served by the location above: image/ktx2, Range, never gzipped — Basis
+    # is compressed already). A .usdc whose client accepts br is answered with the builder's precompressed
+    # <file>.usdc.br (Content-Encoding: br; whole, never a Range: a byte range of an encoded body is not one of the
+    # file), else, or without a .br sibling, with the file itself (Range as usual). Both vary on Accept-Encoding. No
+    # gzip_static: the builder writes no .gz, and the dynamic gzip never takes application/octet-stream.
+    location ~ ^/library_media/.+\.usdc$ {
+        root /app/hf-space-pipeline/.build;
+        error_page 418 = @slim_usdc_identity;
+        if ($slim_accepts_br = 0) { return 418; }
+        try_files $uri.br @slim_usdc_identity;
+        types { }
+        default_type application/octet-stream;
+        gzip off;
+        max_ranges 0;
+        add_header Content-Encoding br;
+        add_header Vary Accept-Encoding always;
+        add_header Cache-Control $slim_library_cache always;
+        add_header X-Content-Type-Options nosniff always;
+        add_header Access-Control-Allow-Origin "*" always;
+        add_header Access-Control-Allow-Methods "GET, POST, OPTIONS" always;
+        add_header Access-Control-Allow-Headers "Content-Type, Authorization" always;
+    }
+    location @slim_usdc_identity {
+        root /app/hf-space-pipeline/.build;
+        try_files $uri @slim_not_found;
+        types { }
+        default_type application/octet-stream;
+        gzip off;
+        add_header Vary Accept-Encoding always;
+        add_header Cache-Control $slim_library_cache always;
+        add_header X-Content-Type-Options nosniff always;
+        add_header Access-Control-Allow-Origin "*" always;
+        add_header Access-Control-Allow-Methods "GET, POST, OPTIONS" always;
+        add_header Access-Control-Allow-Headers "Content-Type, Authorization" always;
+    }
+    # A .br sibling is an encoding of its file, never a URL of its own.
+    location ~ ^/library_media/.+\.br$ {
+        default_type application/json;
+        return 404 '{"detail":"Not Found"}';
+    }
     # Central's per-user surface is absent in this build: hard 404s, never the SPA's index.html.
     location ~ ^/(auth|packs|prefs|chats|created_assets|concept_images|meshy_quota|info|process|folder_hierarchy\.json|category_hierarchy\.json|api/create-chat|api/cad2simready)(/|$) {
         default_type application/json;

docker/hf-space/supervisord-gpu.conf

@@ -171,7 +171,10 @@ stderr_logfile=/dev/stderr
 stderr_logfile_maxbytes=0
 
 [program:nginx]
-command=/bin/sh -c "until curl -sf http://localhost:8000/health >/dev/null 2>&1 && curl -sf http://localhost:8010/docs >/dev/null 2>&1; do sleep 2; done; dl=false; case '%(ENV_DOWNLOAD_ENABLED)s' in [Tt]rue|1) if [ -f /app/hf-space-pipeline/.build/restore/hf-storage-api-catalog.yaml ]; then dl=true; else echo 'nginx: no hf-storage-api catalog, rendering download:false' >&2; fi;; esac; sed -e 's/__PORT__/%(ENV_PORT)s/' -e 's|__CORPUS_NAME__|%(ENV_CORPUS_NAME)s|g' -e 's/__DOWNLOAD_ENABLED__/'$dl'/' -e 's|__SUBMIT_CONTENT_URL__|%(ENV_SUBMIT_CONTENT_URL)s|g' /etc/nginx/hf-space.conf.template > /etc/nginx/conf.d/hf-space.conf && exec nginx -g 'daemon off;'"
+; See docker/hf-space/supervisord.conf's own copy (identical command). Never put
+; a space before a ";" or "#" in a command: supervisord reads it as an inline
+; comment and cuts the command there (2026-10-15: nginx FATAL on prod).
+command=/bin/sh -c "until curl -sf http://localhost:8000/health >/dev/null 2>&1 && curl -sf http://localhost:8010/docs >/dev/null 2>&1; do sleep 2; done; dl=false; case '%(ENV_DOWNLOAD_ENABLED)s' in [Tt]rue|1) if [ -f /app/hf-space-pipeline/.build/restore/hf-storage-api-catalog.yaml ]; then dl=true; else echo 'nginx: no hf-storage-api catalog, rendering download:false' >&2; fi;; esac; vf=glb; case $VIEWER_FORMAT in glb|usd|auto) vf=$VIEWER_FORMAT;; *) [ -z \"$VIEWER_FORMAT\" ] || echo 'nginx: VIEWER_FORMAT is not glb, usd or auto: rendering viewerFormat glb' >&2;; esac; sed -e 's/__PORT__/%(ENV_PORT)s/' -e 's|__CORPUS_NAME__|%(ENV_CORPUS_NAME)s|g' -e 's/__DOWNLOAD_ENABLED__/'$dl'/' -e 's|__SUBMIT_CONTENT_URL__|%(ENV_SUBMIT_CONTENT_URL)s|g' -e 's/__VIEWER_FORMAT__/'$vf'/' /etc/nginx/hf-space.conf.template > /etc/nginx/conf.d/hf-space.conf && exec nginx -g 'daemon off;'"
 user=root
 autorestart=true
 startsecs=3

docker/hf-space/supervisord.conf

@@ -210,7 +210,12 @@ stderr_logfile_maxbytes=0
 ; deepsearch-api used to follow directly before nginx sat in front of it.
 ; %(ENV_PORT)s is substituted by supervisord itself, so no extra templating
 ; tool (envsubst etc.) is needed in the image.
-command=/bin/sh -c "until curl -sf http://localhost:8000/health >/dev/null 2>&1 && curl -sf http://localhost:8010/docs >/dev/null 2>&1; do sleep 2; done; dl=false; case '%(ENV_DOWNLOAD_ENABLED)s' in [Tt]rue|1) if [ -f /app/hf-space-pipeline/.build/restore/hf-storage-api-catalog.yaml ]; then dl=true; else echo 'nginx: no hf-storage-api catalog, rendering download:false' >&2; fi;; esac; sed -e 's/__PORT__/%(ENV_PORT)s/' -e 's|__CORPUS_NAME__|%(ENV_CORPUS_NAME)s|g' -e 's/__DOWNLOAD_ENABLED__/'$dl'/' -e 's|__SUBMIT_CONTENT_URL__|%(ENV_SUBMIT_CONTENT_URL)s|g' /etc/nginx/hf-space.conf.template > /etc/nginx/conf.d/hf-space.conf && exec nginx -g 'daemon off;'"
+;
+; Never put a space before a ";" or "#" in a command: supervisord's parser
+; reads " ;" and " #" as the start of an inline comment and cuts the command
+; there (2026-10-15: a " ;;" case arm left nginx FATAL, "No closing
+; quotation"). tests/test_hf_space_runtime.py parses with supervisor itself.
+command=/bin/sh -c "until curl -sf http://localhost:8000/health >/dev/null 2>&1 && curl -sf http://localhost:8010/docs >/dev/null 2>&1; do sleep 2; done; dl=false; case '%(ENV_DOWNLOAD_ENABLED)s' in [Tt]rue|1) if [ -f /app/hf-space-pipeline/.build/restore/hf-storage-api-catalog.yaml ]; then dl=true; else echo 'nginx: no hf-storage-api catalog, rendering download:false' >&2; fi;; esac; vf=glb; case $VIEWER_FORMAT in glb|usd|auto) vf=$VIEWER_FORMAT;; *) [ -z \"$VIEWER_FORMAT\" ] || echo 'nginx: VIEWER_FORMAT is not glb, usd or auto: rendering viewerFormat glb' >&2;; esac; sed -e 's/__PORT__/%(ENV_PORT)s/' -e 's|__CORPUS_NAME__|%(ENV_CORPUS_NAME)s|g' -e 's/__DOWNLOAD_ENABLED__/'$dl'/' -e 's|__SUBMIT_CONTENT_URL__|%(ENV_SUBMIT_CONTENT_URL)s|g' -e 's/__VIEWER_FORMAT__/'$vf'/' /etc/nginx/hf-space.conf.template > /etc/nginx/conf.d/hf-space.conf && exec nginx -g 'daemon off;'"
 user=root
 autorestart=true
 startsecs=3