@proteus-vue/render-backend 0.1.0

package/README.md

@@ -0,0 +1,75 @@
+# @proteus-vue/render-backend
+
+> **G-27 可插拔渲染后端 SPI**（`docs/proteus-render-backend-1-plan/`）· M1.4 原型 + G-31 B5 conformance 基础设施
+
+## 一句话
+
+**后端只需实现 `ProteusRenderBackend` 接口即可接入任意渲染引擎**——nodeOps 刻意对齐 Vue（`createElement/insert/remove/patchProp/setText`），Vue Custom Renderer 即零成本后端。
+
+## 内容
+
+| 模块 | 说明 |
+|------|------|
+| `spi.ts` | `ProteusRenderBackend` 接口 + `BackendCapabilities` 能力声明 + IRNode/LayoutConstraints/NormalizedInputEvent 类型（唯一事实源，对齐 plan 02-backend-spi.md） |
+| `conformance.ts` | `runBackendConformance(backend)` 接口完整性自检（RND002：后端必须通过）——必选方法存在 / createElement 唯一句柄 / 能力枚举合法 / 可选方法类型 |
+| `conformance-component.ts` | **★G-31 B5 组件渲染快照基础设施**：`renderComponentSnapshot(backend, ir, readControl)` 驱动 nodeOps 渲染 C-IR → 归一化快照树 + `createControlReader` 内置后端控件 readback（对照参考表见 @proteus-vue/component-ir `conformance.ts`） |
+| `headless.ts` | **HeadlessBackend**：内存节点树（零依赖）——SSR / 测试断言 / AI Agent 无设备回归（B3 前置 + conformance 参考实现；★B5 消费 semantic） |
+| `vue-dom.ts` | **VueDomBackend**：DOM nodeOps（Web 端官方后端，B2）——事件归一化 onXxx → addEventListener；★B5 补全 18 语义 SEMANTIC_WEB_MAP |
+| `native.ts` | **NativeBackend**（B4）：nodeOps → 原生视图（iOS/Android/鸿蒙三平台语义映射 SEMANTIC_NATIVE_MAPS + 宿主适配器桥 + mock adapter） |
+| `flutter.ts` | **FlutterBackend**（B5 spike）：Proteus 语义 → Flutter widget 树（★B5 补 semantic 消费 SEMANTIC_FLUTTER_MAP） |
+| `hybrid.ts` | **★G-27 B6 混合渲染**：`createHybridRenderer`（多后端统一渲染面——区域级切后端 + 节点归属委托 + 纹理共享广播）· `textureRef`（跨后端纹理引用）· `runHybridConformance`（混合器自检）· DevTools 路由 trace（semantic → 后端 决策记录） |
+| `dispatcher.ts` | **★G-41 B1**：`createNodeOpsDispatcher`（方案 B 全局转发层——`currentBackend` 一次间接调用，热切换 = 赋值）+ `toIRNode`（原语表驱动）+ nodeOps trace（H-03 双引擎一致机器证据） |
+| `host-conformance.ts` | **★G-41 B2**：`runHostConformance`（H-01~H-08 共 32 项跨层组合 conformance——CMP058 上线门禁） |
+| `vue-bridge.ts` | **★G-41 B3**：真实 Vue3 `createRenderer` 接入——`createVueRendererOptions(dispatch)` / `createProteusRenderer`（标准 SFC/App 落到任意后端） |
+| `web-host.ts` | **★G-41 B4**：`createWebHostRuntime`（Web 宿主骨架——Main + Worker + EventLoop + bindPageVisibility） |
+| `hot-switch.ts` | **★G-41 B5**：`createBackendSwitcher`（热切换生产级三策略——rebuild 开发期 / rehydrate 保状态 / hybrid 复用 G-27 B6） |
+| `host-matrix.ts` | **★G-41 B6 组合矩阵**：6 宿主 × 6 引擎 = 36 组合 Tier 声明（HOST_ENGINE_MATRIX）+ `runComboConformance`（组合级 7 项：注册顺序/语义指纹/渲染完整性/控件映射/热切换等价 + 引擎级 conformance）+ `runHostEngineMatrix`（Tier 1 全部验证 failed===0）+ `formatMatrixReport` |
+| `container-spi.ts` | **★G-42 B1**：`ProteusHostContainer` 插头（页面生命周期状态机 + 五原子销毁 FIVE_ATOMIC_STEPS 校验 + 六容器画像 CONTAINER_PROFILES） |
+| `stack-container.ts` | **★G-42 B2 + G-43 B3**：`createStackContainer`（页面栈 + 五原子销毁 + 框架代管资源池 + LRU；`StackContainerOptions.ownership` 启用后每页伴随所有权上下文）· `createResourcePool` / `createQuotaManager` |
+| `container-conformance.ts` | **★G-42 B3**：`runContainerConformance`（C-01~C-08 38 项）+ `scanRepoForFork`（严禁 fork 机器指纹）+ `checkBizManifest` 安全网关 |
+| `superapp-container.ts` | **★G-42 B4**：`createSuperAppContainer`（业务沙箱 + 崩溃隔离 L1-L3 + 自动重启 + 签名/白名单网关——页面栈委托 Stack + ownership pass-through） |
+| `basic-containers.ts` | **★G-42 B6 其余 4 容器**：`createSinglePageContainer`（单页/卡片/IoT 单槽 replace）/ `createEmbeddedContainer`（宿主挂载点工厂——Tier 3）/ `createWindowContainer`（多窗口各持栈 + 聚焦代理）/ `createMiniProgramContainer`（navigateTo/redirectTo/reLaunch/switchTab tab 保活/navigateBack + 10 层治理 + L1 沙箱）——全部过 conformance（能力门控诚实 SKIP）+ G-43 B3 ownership 接入 |
+| `ownership.ts` | **★G-43 B1**：`Owned<T>`（Move 语义）/ `Borrow` / `Weak` / `Managed` + `OwnershipGraph`（孤儿/泄漏检测）+ Drop 五阶段协议 |
+| `borrow-checker.ts` | **★G-43 B2**：`analyzeOwnershipSource`（源码级借用检查 B-01~B-08 + PSS strict/loose/off——编译期拦截 use-after-move/double-move/借用逃逸） |
+| `page-ownership.ts` | **★G-43 B3**：`createPageOwnership`（页面所有权上下文——G-42 五原子第 3 步 releaseResources 委托 Drop 协议：forceDrop 强制回收 + Managed 自动释放 + 配额兜底归零；`container.ownershipOf(pageId)` 登记入口） |
+| `ownership-observability.ts` | **★G-43 B4 DevTools 所有权图数据层**：`OwnershipGraph.subscribe` mutation 事件流 → `createOwnershipHistory`（alloc/drop 时间线）/ `createOwnershipCounters`（生产采样 O(1)）/ `diagnoseOwnershipIssues`（V-02 泄漏路径·V-03 长期借用·V-04 跨页强引用（strong 边）·V-05 无主资源）/ `buildOwnershipTimeline`（V-06 alloc/drop 配对）/ `formatOwnershipDiagnosis`（面板/CLI 报告契约） |
+| `pss.ts` | **★G-43 B5 PSS 编译器支持**：`resolvePssMode`（文件头 pragma `@proteus-pss:` 三级声明）/ `analyzePss`（P1~P9 限制 + CMP071 ref(Owned) 拦截）/ `insertScopeDrops`（作用域自动 drop 插入——strict 不写 drop 也能正确释放）/ `runPss`（B 规则 + P 限制 + autoDrop 管线，strict 阻断构建） |
+
+## 用法
+
+```ts
+import { createHeadlessBackend, createVueDomBackend, runBackendConformance } from '@proteus-vue/render-backend'
+
+const backend = createHeadlessBackend()
+const result = runBackendConformance(backend) // { ok: true, checks: [...] } —— RND002 强制
+```
+
+## 组件 Conformance（G-31 B5）
+
+```ts
+import { createNativeBackend, renderComponentSnapshot, createControlReader } from '@proteus-vue/render-backend'
+import { checkComponentSnapshot } from '@proteus-vue/component-ir' // 参考表对照
+
+const backend = createNativeBackend(undefined, 'android')
+const snap = renderComponentSnapshot(backend, ir, createControlReader(backend.id))
+const result = checkComponentSnapshot(backend.id, snap) // 控件 readback == SEMANTIC_BACKEND_MAP？
+```
+
+## 能力协商（BackendCapabilities）
+
+框架按后端声明的能力自动降级（对齐 G-22 CapabilityRegistry），不按 if/else 判断平台：
+`layout`（yoga/native/none）· `glass`（L3/L2/L1/none）· `blur` · `animation` · `textureSharing`（混合渲染）· `remoteRendering`（TV/车机）· `ssr` · `input`（touch/cursor/remote/dial/voice）
+
+## 严格规则
+
+- **RND001**：禁止业务直调后端专有 API；走 `p-*` 或 Backend SPI
+- **RND002**：后端必须通过 conformance test
+- **RND003**：布局语义不得硬编码为某后端算法
+- **RND004**：混合后端须声明纹理/事件边界
+- **RND005**：后端不得在 IR 层外修改组件树
+
+## 路线
+
+B1 SPI+conformance ✅ → B2 VueDom ✅ → B3 Headless（Agent 回归）→ B4 Native（UIKit nodeOps）→ B5 Flutter（Embedder C ABI）+ **G-31 B5 conformance 快照基础设施 ✅** → B6 混合渲染 + DevTools
+
+**G-27 B1-B6 全落地（#293-#331）**；宿主层三 plan 亦已落地：**G-41**（dispatcher/conformance/vue-bridge/web-host/hot-switch/**host-matrix**，B1-B6，#342-#359）· **G-42**（container-spi/stack-container/conformance/superapp/repo CLI + **basic-containers 四容器**，B1-B6，#347-#358；余「真实 App 验证」需生产 App）· **G-43**（ownership/borrow-checker/page-ownership/ownership-observability/pss，B1-B5，#352-#357；余 B6 跨设备转移需真机）

package/dist/basic-containers.d.ts

@@ -0,0 +1,87 @@
+import type { PageConfig, PageHandle, ProteusHostContainer, BusinessSandbox } from './container-spi';
+import type { StackContainer } from './stack-container';
+import type { StackPolicy } from './container-spi';
+import type { PageOwnership } from './page-ownership';
+import type { OwnershipGraph } from './ownership';
+interface SingleSlotOptions {
+    /** 所有权图接入（G-43 B3——每页伴随所有权上下文） */
+    ownership?: {
+        graph: OwnershipGraph;
+        quotaBytes?: number;
+    };
+    /** ★Embedded：宿主挂载点工厂（config → 宿主提供的挂载元素；缺省 {} 占位） */
+    getHostMountPoint?: (config: PageConfig) => unknown;
+}
+export interface SinglePageContainer extends ProteusHostContainer {
+    readonly id: 'singlepage';
+    ownershipOf(pageId: string): PageOwnership | null;
+}
+/** ★G-42 B6：单页容器——同一时刻至多一个页面，push = 替换（销毁旧页 → 挂新页） */
+export declare function createSinglePageContainer(opts?: SingleSlotOptions): SinglePageContainer;
+export interface EmbeddedContainer extends ProteusHostContainer {
+    readonly id: 'embedded';
+    ownershipOf(pageId: string): PageOwnership | null;
+}
+/** ★G-42 B6：嵌入容器——单视图嵌入宿主页面（G-30 Tier 3），宿主经 getHostMountPoint 提供挂载点 */
+export declare function createEmbeddedContainer(opts?: SingleSlotOptions): EmbeddedContainer;
+export interface WindowContainerOptions {
+    policy?: StackPolicy;
+    quotaLimitBytes?: number;
+    ownership?: {
+        graph: OwnershipGraph;
+        quotaBytes?: number;
+    };
+}
+export interface WindowContainer extends ProteusHostContainer {
+    readonly id: 'window';
+    /** 创建窗口（返回该窗口的栈容器并聚焦） */
+    createWindow(windowId?: string): StackContainer;
+    /** 销毁窗口（窗口内全部页面五原子销毁） */
+    destroyWindow(windowId: string): Promise<void>;
+    /** 聚焦窗口（SPI 页面操作代理目标） */
+    focusWindow(windowId: string): void;
+    listWindows(): string[];
+    readonly focusedWindow: string | null;
+    ownershipOf(pageId: string): PageOwnership | null;
+    onWindow(event: 'window-created' | 'window-destroyed' | 'window-focused', cb: (payload: unknown) => void): void;
+}
+/** ★G-42 B6：多窗口容器——每窗口一个完整页面栈（委托 StackContainer），SPI 操作代理聚焦窗口 */
+export declare function createWindowContainer(opts?: WindowContainerOptions): WindowContainer;
+export interface MiniProgramContainerOptions {
+    policy?: Partial<StackPolicy>;
+    quotaLimitBytes?: number;
+    ownership?: {
+        graph: OwnershipGraph;
+        quotaBytes?: number;
+    };
+}
+export interface MiniProgramTabConfig {
+    readonly pageId: string;
+    readonly irId: string;
+}
+export interface MiniProgramSandbox extends BusinessSandbox {
+    scope: {
+        bizId: string;
+        values: Record<string, unknown>;
+    };
+}
+export interface MiniProgramContainer extends ProteusHostContainer {
+    readonly id: 'miniprogram';
+    /** 压栈导航（wx.navigateTo——10 层上限，超限显式拒绝） */
+    navigateTo(config: PageConfig): Promise<PageHandle>;
+    /** 替换栈顶（wx.redirectTo） */
+    redirectTo(config: PageConfig): Promise<PageHandle>;
+    /** 重启（wx.reLaunch——清栈后压新页） */
+    reLaunch(config: PageConfig): Promise<PageHandle>;
+    /** 切 tab（wx.switchTab——非 tab 页全销毁，tab 页 keep-alive 常驻） */
+    switchTab(pageId: string): Promise<PageHandle>;
+    /** 返回（wx.navigateBack） */
+    navigateBack(): Promise<PageHandle | null>;
+    /** 注册 tab 页（switchTab 前必须注册） */
+    registerTab(config: MiniProgramTabConfig): void;
+    listTabs(): string[];
+    ownershipOf(pageId: string): PageOwnership | null;
+}
+/** ★G-42 B6：小程序容器——页面栈导航语义（10 层上限）+ tab keep-alive + L1 沙箱（scope 隔离） */
+export declare function createMiniProgramContainer(opts?: MiniProgramContainerOptions): MiniProgramContainer;
+export {};

package/dist/borrow-checker.d.ts

@@ -0,0 +1,21 @@
+export type BorrowRule = 'B-01' | 'B-02' | 'B-03' | 'B-04' | 'B-05' | 'B-06' | 'B-07' | 'B-08';
+export type BorrowSeverity = 'error' | 'warning';
+export interface BorrowDiagnostic {
+    rule: BorrowRule;
+    severity: BorrowSeverity;
+    line: number;
+    message: string;
+}
+export interface BorrowAnalysisResult {
+    diagnostics: BorrowDiagnostic[];
+    /** strict + 有 error → 阻断构建 */
+    blocksBuild: boolean;
+    /** 参与分析的 Owned 变量名 */
+    ownedVars: string[];
+}
+export type PssMode = 'strict' | 'loose' | 'off';
+export interface BorrowCheckerOptions {
+    mode?: PssMode;
+}
+/** ★G-43 B2：源码级借用检查（PSS strict/loose/off——B-01~B-08） */
+export declare function analyzeOwnershipSource(source: string, opts?: BorrowCheckerOptions): BorrowAnalysisResult;

package/dist/conformance-component.d.ts

@@ -0,0 +1,32 @@
+import type { IRNode, NodeHandle, ProteusRenderBackend } from './spi';
+/** 归一化渲染节点快照（IR 级：与平台无关的「语义 → 控件」描述；golden diff / Agent 断言载体） */
+export interface RenderNodeSnapshot {
+    /** C-IR type（源码标签——p-grid/view/...） */
+    type: string;
+    /** 语义（无 semantic 时 = type，即 Layer 1 兼容层标签） */
+    semantic: string;
+    /** 后端实际渲染的控件类型（readback：tag.class / 原生视图类型 / widget 名 / headless 类型） */
+    control: string;
+    /** 透传约束属性（C-IR props） */
+    props: Record<string, unknown>;
+    text: string;
+    children: RenderNodeSnapshot[];
+}
+/** 从后端句柄读取控件类型（后端实现者可为自定义句柄注入自己的 reader） */
+export type ControlReader = (handle: NodeHandle) => string;
+/**
+ * 内置后端的默认控件 reader（句柄形状由 render-backend 拥有）
+ * - vue-dom：tagName + class（div.proteus-grid）——与 SEMANTIC_WEB_MAP 产出一致
+ * - native-*：NativeViewDescriptor.type（UICollectionView/GridLayoutManager/Grid）
+ * - flutter：FlutterWidgetDescriptor.widget（GridView/Text/...）
+ * - headless：HeadlessNode.type（box/grid/...）
+ * - 其他/未知：取句柄的 type 字段，缺省字符串化（外部后端可自行注入 reader）
+ */
+export declare function createControlReader(backendId: string): ControlReader;
+/**
+ * 驱动后端 nodeOps 渲染一棵 C-IR 树，归一化为快照树
+ * （createElement + patchProp + insert——与真实渲染路径一致；setText 由文本节点单独触发，此处不涉及）
+ * ★关键：渲染的是 IRNode.semantic（Layout 0 语义），不是 tag 字符串翻译——conformance 对比的是
+ *   后端对语义的控件映射结果（layout.grid → UICollectionView/GridLayoutManager/Grid/GridView/div.proteus-grid）
+ */
+export declare function renderComponentSnapshot(backend: ProteusRenderBackend, ir: IRNode, readControl: ControlReader): RenderNodeSnapshot;

package/dist/conformance.d.ts

@@ -0,0 +1,18 @@
+import type { ProteusRenderBackend } from './spi';
+export interface ConformanceCheck {
+    name: string;
+    pass: boolean;
+    detail?: string;
+}
+export interface ConformanceResult {
+    ok: boolean;
+    checks: ConformanceCheck[];
+}
+/**
+ * 后端接口完整性自检（RND002：后端必须通过 conformance test）
+ * - 必选方法缺失 → fail（detail 指明缺失方法）
+ * - createElement 两次调用须返回不同句柄（唯一性）
+ * - capabilities 枚举值非法 → fail
+ * - 可选方法存在时须为函数
+ */
+export declare function runBackendConformance(backend: ProteusRenderBackend): ConformanceResult;

package/dist/container-conformance.d.ts

@@ -0,0 +1,53 @@
+import type { ProteusHostContainer } from './container-spi';
+/** fork 指纹（宿主仓库复制/内嵌框架源码的特征——对齐参考实现 FORK_SIGNATURES） */
+export declare const FORK_SIGNATURES: readonly RegExp[];
+export interface ForkHit {
+    filename: string;
+    pattern: string;
+}
+/** ★G-42.6：扫描宿主仓库文件内容，检出 fork 框架源码的痕迹（合规返回空数组） */
+export declare function scanRepoForFork(fileContents: Record<string, string>): ForkHit[];
+/** 业务清单签名/能力白名单校验（C-08-01 无签名拒绝 / C-08-02 越权能力拒绝） */
+/** 合规清单放行 */
+export declare function checkBizManifest(input: {
+    bizId: string;
+    signature?: string;
+    capabilities?: readonly string[];
+}, opts: {
+    requireSignature: boolean;
+    whitelist: readonly string[];
+}): {
+    ok: true;
+} | {
+    ok: false;
+    code: 'G39_SIGN' | 'G39_CAP' | 'G39_LIMIT';
+    message: string;
+};
+/** ★G-42 B5 权限网关（G-28 协同）：敏感能力须宿主显式授权（白名单之外的敏感集） */
+export declare const SENSITIVE_CAPABILITIES: readonly string[];
+export declare function checkCapabilityAuthorization(capabilities: readonly string[], opts: {
+    granted: readonly string[];
+    sensitive?: readonly string[];
+}): {
+    ok: true;
+} | {
+    ok: false;
+    code: 'G39_AUTH';
+    denied: string[];
+};
+export interface ContainerConformanceResult {
+    id: string;
+    status: 'PASS' | 'FAIL' | 'SKIP';
+    reason?: string;
+}
+export interface ContainerConformanceSummary {
+    total: number;
+    pass: number;
+    fail: number;
+    skip: number;
+    results: ContainerConformanceResult[];
+}
+/** ★G-42 B3：跑容器 Conformance（38 项；未声明能力组 SKIP + reason——诚实原则） */
+export declare function runContainerConformance(container: ProteusHostContainer): Promise<ContainerConformanceSummary>;
+/** 文本报告（CLI / CI 打印） */
+export declare function formatContainerConformance(s: ContainerConformanceSummary): string;

package/dist/container-spi.d.ts

@@ -0,0 +1,169 @@
+export interface ContainerCapabilities {
+    readonly pageStack: boolean;
+    readonly multiBusiness: boolean;
+    readonly crashIsolation: 0 | 1 | 2 | 3;
+    readonly resourceQuota: boolean;
+    readonly keepAlive: boolean;
+    readonly windowManagement: boolean;
+    readonly embedded: boolean;
+}
+/** 六种预设容器的能力画像（唯一事实源——batches B6 / 主文档 §3） */
+export declare const CONTAINER_PROFILES: Record<string, ContainerCapabilities>;
+export type PageState = 'created' | 'mounted' | 'hidden' | 'destroyed' | 'crashed' | 'recycled';
+/**
+ * ★页面生命周期状态机合法转换表（page-lifecycle.md §5.1）：
+ *   created → mounted（hide/show 往返 mounted↔hidden）→ destroyed → recycled（对象池复用）
+ *   异常路径：mounted → crashed（崩溃隔离，不影响宿主）→ destroyed
+ *   任意前置态 → destroyed（页面随时可销毁——G-42.2 原子销毁的入口）
+ */
+export declare const PAGE_STATE_TRANSITIONS: Readonly<Record<PageState, readonly PageState[]>>;
+/** 状态机合法性判断（非法转换直接返回 false——B2 实现据此拒绝越界操作） */
+export declare function canTransitionPageState(from: PageState, to: PageState): boolean;
+export interface TimerHandle {
+    cancel(): void;
+}
+export type UnbindFn = () => void;
+export interface CancellablePromise<T> extends Promise<T> {
+    cancel(): void;
+}
+export interface ReleaseReport {
+    readonly timersCleared: number;
+    readonly listenersUnbound: number;
+    readonly requestsAborted: number;
+}
+/** 最小事件目标（避免强依赖 DOM EventTarget——容器层零 DOM 假设） */
+export interface EventTargetLike {
+    addEventListener(type: string, fn: (...args: unknown[]) => void): void;
+    removeEventListener(type: string, fn: (...args: unknown[]) => void): void;
+}
+export interface ResourcePool {
+    timer(fn: () => void, ms: number, opts?: {
+        once?: boolean;
+    }): TimerHandle;
+    interval(fn: () => void, ms: number): TimerHandle;
+    on(target: EventTargetLike, type: string, fn: (...args: unknown[]) => void): UnbindFn;
+    bus(topic: string, fn: (...args: unknown[]) => void): UnbindFn;
+    fetch(url: string, init?: Record<string, unknown>): CancellablePromise<unknown>;
+    subscribe(store: unknown, fn: (...args: unknown[]) => void): UnbindFn;
+    releaseAll(): ReleaseReport;
+}
+export type DestroyStep = 'unmount' | 'unbindEvents' | 'releaseResources' | 'destroyIR' | 'releaseQuota';
+/** 五原子销毁步序（唯一事实源——主文档 §5.2 / container-spi §5） */
+export declare const FIVE_ATOMIC_STEPS: readonly DestroyStep[];
+export interface LeakItem {
+    readonly kind: 'timer' | 'listener' | 'request' | 'subscription' | 'ir' | 'quota';
+    readonly detail: string;
+}
+export interface DestroyReport {
+    readonly pageId: string;
+    readonly steps: readonly DestroyStep[];
+    readonly leaked: readonly LeakItem[];
+    readonly reclaimedBytes: number;
+    readonly durationMs: number;
+}
+/** ★G-42.2 铁律：五原子销毁校验——steps 必须恰好五步（缺失/多余/顺序错都拒绝） */
+export declare function assertAtomicDestroy(report: DestroyReport): void;
+/** 空销毁报告骨架（B2 实现填充——先满足五步序） */
+export declare function createDestroyReport(pageId: string, reclaimedBytes?: number, durationMs?: number): DestroyReport;
+export type PressureLevel = 'normal' | 'warning' | 'critical';
+export interface QuotaHandle {
+    readonly bytes: number;
+    readonly scope: string;
+    release(): void;
+}
+export interface QuotaUsage {
+    readonly usedBytes: number;
+    readonly limitBytes: number;
+    readonly pageCount: number;
+    readonly sandboxCount: number;
+}
+export interface QuotaManager {
+    request(bytes: number): QuotaHandle | null;
+    release(handle: QuotaHandle): void;
+    readonly usage: QuotaUsage;
+    readonly pressure: PressureLevel;
+}
+export interface PageHandle {
+    readonly pageId: string;
+    readonly irId: string;
+    readonly state: PageState;
+    readonly mountPoint: unknown | null;
+    readonly resourcePool: ResourcePool;
+    readonly eventRegistry: EventRegistry;
+}
+export interface EventRegistry {
+    bind(type: string, fn: (...args: unknown[]) => void): UnbindFn;
+    unbindAll(): void;
+    readonly size: number;
+}
+export interface PageConfig {
+    readonly pageId?: string;
+    readonly irId: string;
+    readonly hideable?: boolean;
+    readonly keepAlive?: boolean;
+    readonly budgetBytes?: number;
+}
+export interface BizManifest {
+    readonly bizId: string;
+    readonly signature?: string;
+    readonly requiredCapabilities?: readonly string[];
+}
+export interface BusinessSandbox {
+    readonly bizId: string;
+    readonly isolatedScope: unknown;
+    readonly quotaHandle: QuotaHandle | null;
+    readonly state: 'running' | 'crashed' | 'destroyed';
+}
+export interface StackPolicy {
+    maxDepth: number;
+    overflowStrategy: 'destroy-oldest' | 'reject' | 'flatten';
+    keepAlive: {
+        maxCount: number;
+        memoryBudgetBytes: number;
+    };
+}
+export declare const DEFAULT_STACK_POLICY: StackPolicy;
+export interface SuperAppPolicy extends StackPolicy {
+    sandbox: {
+        defaultMemoryBytes: number;
+        maxSandboxes: number;
+    };
+    crash: {
+        isolationLevel: 1 | 2 | 3;
+        autoRestart: boolean;
+        maxRestartCount: number;
+    };
+    security: {
+        requireSignature: boolean;
+        capabilityWhitelist: readonly string[];
+    };
+}
+export interface ContainerContext {
+    readonly runtime: unknown;
+    readonly backends: unknown[];
+}
+export type ContainerEvent = 'page-created' | 'page-destroyed' | 'overflow' | 'crash' | 'pressure' | 'sandbox-crashed';
+/** ★G-42 核心接口：ProteusHostContainer（与 G-27/G-39/G-40 同形设计语言） */
+export interface ProteusHostContainer {
+    readonly id: string;
+    readonly version: string;
+    readonly capabilities: ContainerCapabilities;
+    initialize(ctx: ContainerContext): Promise<void>;
+    dispose(): void;
+    createPage(config: PageConfig): PageHandle;
+    mountPage(handle: PageHandle): Promise<void>;
+    unmountPage(handle: PageHandle): Promise<void>;
+    destroyPage(handle: PageHandle): Promise<DestroyReport>;
+    push(config: PageConfig): Promise<PageHandle>;
+    pop(): Promise<PageHandle | null>;
+    getCurrent(): PageHandle | null;
+    getStackDepth(): number;
+    createSandbox(bizId: string, manifest: BizManifest): Promise<BusinessSandbox>;
+    destroySandbox(bizId: string): Promise<DestroyReport>;
+    listSandboxes(): readonly BusinessSandbox[];
+    readonly quota: QuotaManager;
+    onMemoryPressure(cb: (level: PressureLevel) => void): void;
+    on(event: ContainerEvent, handler: (payload: unknown) => void): void;
+}
+/** B1 验收：容器能力画像与容器类型一致（CMP065 诚实声明前置） */
+export declare function profileOfContainer(id: string): ContainerCapabilities;

package/dist/dispatcher.d.ts

@@ -0,0 +1,98 @@
+import type { IRNode, NodeHandle, ProteusRenderBackend } from './spi';
+/** 未知标签（非 p-* / 未知 p-*）→ 编译期就该拦截，运行期硬拖底（G-41.2：禁止静默） */
+export declare class DispatcherError extends Error {
+    readonly code: 'unknown.primitive';
+    readonly detail: {
+        type: string;
+    };
+    constructor(code: 'unknown.primitive', detail: {
+        type: string;
+    });
+}
+/** nodeOps 调用日志条目（H-03-04 机器证据：渲染驱动与引擎无关） */
+export type NodeOpsCall = {
+    seq: number;
+    op: 'createElement';
+    type: string;
+    semantic: string;
+} | {
+    seq: number;
+    op: 'insert';
+    child: number;
+    parent: number | null;
+    anchor: number | null;
+} | {
+    seq: number;
+    op: 'remove';
+    child: number;
+} | {
+    seq: number;
+    op: 'patchProp';
+    el: number;
+    key: string;
+    next: unknown;
+} | {
+    seq: number;
+    op: 'setText';
+    el: number;
+    text: string;
+} | {
+    seq: number;
+    op: 'createText';
+    text: string;
+} | {
+    seq: number;
+    op: 'createComment';
+    text: string;
+} | {
+    seq: number;
+    op: 'parentNode';
+    node: number;
+    result: number | null;
+} | {
+    seq: number;
+    op: 'nextSibling';
+    node: number;
+    result: number | null;
+} | {
+    seq: number;
+    op: 'switchBackend';
+    from: string;
+    to: string;
+    strategy?: HotSwitchStrategy;
+};
+/** Vue createRenderer(nodeOps) 兼容子集（签名对齐 vue-binding-architecture §3.2：createElement(type, props)） */
+export interface DispatcherNodeOps {
+    createElement(type: string, props?: Record<string, unknown>): NodeHandle;
+    insert(child: NodeHandle, parent: NodeHandle, anchor?: NodeHandle): void;
+    remove(child: NodeHandle): void;
+    patchProp(el: NodeHandle, key: string, prev: unknown, next: unknown): void;
+    setText(el: NodeHandle, text: string): void;
+    createText(text: string): NodeHandle;
+    createComment(text: string): NodeHandle;
+    parentNode(node: NodeHandle): NodeHandle | null;
+    nextSibling(node: NodeHandle): NodeHandle | null;
+}
+/** ★G-41 B5：热切换策略（rebuild=销毁重建·开发期 / rehydrate=同一 IR 在新引擎重建·保状态 / hybrid=同页面多引擎·区域路由） */
+export type HotSwitchStrategy = 'rebuild' | 'rehydrate' | 'hybrid';
+/** ★G-41 方案 B 定型：全局转发层（currentBackend 一次间接调用，热切换 = 赋值） */
+export interface ProteusNodeOpsDispatcher {
+    readonly currentBackend: ProteusRenderBackend;
+    /** 热切换（G-41 B5）：换 currentBackend；strategy 决定已渲染节点处理 */
+    switchBackend(next: ProteusRenderBackend, opts?: {
+        strategy?: HotSwitchStrategy;
+    }): void;
+    readonly switchHistory: ProteusRenderBackend[];
+    /** 节点操作集（Vue createRenderer 消费；全部转发到 currentBackend） */
+    readonly nodeOps: DispatcherNodeOps;
+    /** 标签 → C-IR（G-32 原语表数据源；未知标签 throw——G-41.2 禁止静默） */
+    toIRNode(type: string, props?: Record<string, unknown>): IRNode;
+    /** 调用日志（机器证据：clear 后逐条比对两引擎一致性） */
+    readonly trace: NodeOpsCall[];
+    clearTrace(): void;
+}
+export declare function createNodeOpsDispatcher(initialBackend: ProteusRenderBackend): ProteusNodeOpsDispatcher;
+/** ★H-03 机器验证助手：把 IR 树用某后端渲染（递归 createElement + insert），返回根句柄 */
+export declare function renderIRTree(backend: ProteusRenderBackend, ir: IRNode, insertInto?: (child: NodeHandle, parent: NodeHandle) => void): NodeHandle;
+/** ★H-03-04：递归提取 IR 树的语义序列（引擎无关的输入指纹——两引擎消费同一 IR 的机器证据） */
+export declare function semanticSequence(ir: IRNode): string[];

package/dist/flutter.d.ts

@@ -0,0 +1,16 @@
+import type { ProteusRenderBackend } from './spi';
+/** Flutter widget 树节点（spike 层表示——宿主 Embedder 桥把本树投递给 FlutterEngineRun） */
+export interface FlutterWidgetDescriptor {
+    id: number;
+    /** Flutter widget 名（Container/Text/FilledButton/...） */
+    widget: string;
+    props: Record<string, unknown>;
+    children: FlutterWidgetDescriptor[];
+    parent: FlutterWidgetDescriptor | null;
+    text: string;
+}
+/** 语义标签 → Flutter widget（未映射标签保留原样——自定义 widget 透传） */
+export declare function mapWidgetType(type: string): string;
+/** 序列化为纯 widget 树（spike 断言 / Embedder 桥输入） */
+export declare function toWidgetTree(root: FlutterWidgetDescriptor): Record<string, unknown>;
+export declare function createFlutterBackend(): ProteusRenderBackend;

package/dist/headless.d.ts

@@ -0,0 +1,12 @@
+import type { ProteusRenderBackend } from './spi';
+export interface HeadlessNode {
+    id: number;
+    type: string;
+    props: Record<string, unknown>;
+    children: HeadlessNode[];
+    parent: HeadlessNode | null;
+    text: string;
+}
+/** 序列化为纯对象树（测试断言 / SSR 输出 / Agent 快照） */
+export declare function toPlainTree(root: HeadlessNode): Record<string, unknown>;
+export declare function createHeadlessBackend(): ProteusRenderBackend;

package/dist/host-conformance.d.ts

@@ -0,0 +1,71 @@
+import type { ProteusRenderBackend } from './spi';
+import { semanticSequence } from './dispatcher';
+export interface HostConformanceResult {
+    id: string;
+    status: 'PASS' | 'FAIL' | 'SKIP';
+    error?: string;
+}
+export interface HostConformanceSummary {
+    total: number;
+    pass: number;
+    fail: number;
+    skip: number;
+    results: HostConformanceResult[];
+}
+export interface HostConformanceOptions {
+    /** 宿主运行时（G-39 面；缺省 createHostRuntimeStub）——真实宿主注入自己的实现 */
+    host?: HostRuntimeLike;
+    /** 执行载体（G-40 面；缺省 JSI stub） */
+    carrier?: CarrierLike;
+    /** 引擎 A（缺省 HeadlessBackend） */
+    backendA?: ProteusRenderBackend;
+    /** 引擎 B（缺省 FlutterBackend）——H-03 双引擎一致验证需要 ≠ A */
+    backendB?: ProteusRenderBackend;
+    /** 只跑某组（如 'H-03'） */
+    only?: string;
+}
+export interface HostRuntimeLike {
+    id: string;
+    state: 'created' | 'running' | 'suspended' | 'destroyed';
+    threads: string[];
+    workers: Array<{
+        id: string;
+        thread: string;
+    }>;
+    queue: Array<{
+        task: () => unknown;
+        priority: number;
+    }>;
+    bootstrap(): this;
+    suspend(): void;
+    resume(): void;
+    destroy(): void;
+    createWorker(): {
+        id: string;
+        thread: string;
+    };
+    postMessage(): boolean;
+    enqueue(task: () => unknown, priority?: number): void;
+    nextTick(fn: () => unknown): void;
+    drain(): unknown[];
+}
+/** 参考宿主运行时 stub（对齐 G-39 ProteusHostRuntime 最小 subset；真实宿主注入自己的实现） */
+export declare function createHostRuntimeStub(): HostRuntimeLike;
+export interface CarrierLike {
+    id: string;
+    boundaries: number;
+    capabilities: {
+        threadAffinity: boolean;
+        trueConcurrency: boolean;
+        realtime: {
+            capable: boolean;
+        };
+    };
+    cross(): number;
+}
+export declare function createCarrierStub(kind: 'jsi' | 'aot'): CarrierLike;
+/** 跑全部 32 项（H-01~H-08）；可选注入真实宿主/载体/后端 */
+export declare function runHostConformance(opts?: HostConformanceOptions): HostConformanceSummary;
+/** 文本报告（CLI / CI 打印） */
+export declare function formatHostConformance(s: HostConformanceSummary): string;
+export { semanticSequence };