@tinkerlandai/indiana-iam 0.2.0 → 0.4.0

package/README.md

@@ -47,7 +47,14 @@ not import merchant modules to execute them. Source enumeration and optional Git
 the package starts no external commands and works without a Git executable. Developers' explicitly configured
 framework callbacks remain part of their normal build.
 
-## Vite and React Router
+Build integrations retain local compiled CSS when a stylesheet contains an external `@import`: the import is omitted
+without making a network request and the manifest records the missing external styles. Inline SVG resources are
+omitted by default during framework builds, with a coverage gap, so an unsupported form icon does not discard the
+stylesheet. Set `omitSvgResources: false` to reject those resources and use the source-style fallback instead.
+Standalone generation keeps its explicit `--omit-svg-resources` option. Compiled previews preserve hidden source
+branches even when application CSS uses `display: flex` or `display: grid`.
+
+## Vite, React Router and TanStack Router
 
 ```js
 // vite.config.mjs
@@ -56,12 +63,20 @@ import { indianaIam } from "@tinkerlandai/indiana-iam/vite";
 export default { plugins: [indianaIam()] };
 ```
 
+Use an ESM Vite config (`vite.config.mjs` or `vite.config.mts`, or a project with `"type": "module"`).
+CommonJS configs cannot `require` this ESM package.
+
 Client builds expose `import.meta.env.INDIANA_IAM_RELEASE_URL` and write the descriptor into the build output folder.
 Server builds are skipped.
 
+Browser apps use the single local module script in `index.html` to select reachable router and React root declarations.
+For multiple entry points, set `indianaIam({ entry: "src/main.tsx" })`, or pass `--entry src/main.tsx` to standalone generation.
+The path must stay inside the scanned root. Next.js uses its App/Pages root instead.
+
 ## Options
 
-Both integrations accept `{ enabled, name, automaticAnchors, strict, rootFont, omitSvgResources, logger, apiKey, baseUrl, upload }`;
+Both integrations accept `{ enabled, name, automaticAnchors, strict, rootFont, omitSvgResources, logger, apiKey, baseUrl, upload, client }`;
+browser applications additionally accept `entry`;
 `withIndianaIam` also takes `root`. By default a source the scanner cannot read prints a warning and the build continues without an IAM;
 `strict: true` fails the build instead. The same source always produces the same release ID and IAM bytes.
 If source changes during compilation, generation fails instead of publishing a descriptor for different code.
@@ -99,7 +114,38 @@ optional command for explicit source annotations. Next and Vite do not need that
 
 ## Scope
 
-Supported source: Next.js App Router and Pages Router, and React Router / single-root React apps built with Vite.
+Supported source: Next.js App Router and Pages Router, React Router / single-root React apps built with Vite,
+and statically generated TanStack file-route trees registered with `createRouter({ routeTree })`.
+React Router supports imported static path constants, inline `Component` functions and source-proven lazy import forwarding.
+Data-router `route.lazy` objects support a static module's named `Component`, or a source-proven mapper that captures
+the component export. Mapper factories, imports and business loaders are never executed. Unknown overrides remain gaps.
+MDX pages/layouts need a separate adapter and explicitly report incomplete route coverage.
+TanStack reads the registered generated tree, including pathless layouts, index routes and simple `$param` paths;
+custom history/basepath and complex parameter patterns require separate adapters. Loaders, guards, retry/reload behavior
+and runtime data remain unobserved. Unsupported optional React paths are isolated as gaps.
+React Hook Form Controller callbacks retain their source JSX, including first-party wrappers; field values, validation
+and submissions are not executed. Source-proven Radix overlays and React Transition Group visibility retain their
+initial state. Supported Radix triggers and close controls simulate local state only; unknown controlled states stay
+closed and unobserved. These adapters do not implement portal positioning, focus management or business callbacks.
+Chart.js canvas wrappers and Recharts line/bar/area/pie declarations project bounded literal series as inert SVG.
+Chart modules, effects, formatters and callbacks are not executed. Random/remote/oversized series show an explicit
+unobserved-data placeholder; animation, library layout and tooltips remain outside this source projection.
+Build hooks package only raster images referenced by projected JSX: relative source imports and public build URLs.
+They never crawl unrelated assets or fetch URLs. Files must remain inside the root without symlinks; referenced
+source image bytes participate in release identity. The existing 1 MiB/file, 6 MiB input and 128-asset bounds apply. Referenced rasters over 64 KiB use the bundled sharp 0.35.5 preview profile: auto-orient, fit inside 800×800, WebP quality 90, metadata stripped. Source bytes stay independently hashed; this lossy preview is explicitly reported.
+Standalone generation keeps images unpackaged unless explicit public inputs are supplied.
+Source-proven `useSyncExternalStore` matchMedia getters retain both typed viewport branches and follow the preview
+viewport. Subscriptions are not run. UI preference cookies with an explicit source SSR guard use an empty-cookie
+preview; auth/session cookies and arbitrary stores stay unobserved. Pure lazy local-state initializers are interpreted
+under the same bounded rules; merchant callbacks and browser storage are never executed or read.
+The complete validated IAM must fit within 8 MiB; oversized projections fail without emitting a truncated artifact.
+Large artifacts store sizeable HTML/preorder-map pairs as `domPayload` (`gzip-json-v1`), while keeping `html: ""`
+and `nodes: []` in that document's wire record. This lossless storage encoding preserves all source IDs, DOM values,
+HTML/DOM hashes and targets. Route navigation stores the exact interaction-array index instead of repeating its ID; validation checks node, route, destination and parameters. Source files retain their full hashes; component/element records cover reachable route compositions and shared fragments. Text node IDs that follow the original parent/index identity formula are derived locally instead of repeated; explicit exceptions remain stored, and every resolved source-map hash is checked. The document hash pins its encoded storage body; decoding is local and bounded to
+8 MiB per payload and 32 MiB in aggregate. The final IAM file limit stays 8 MiB. Exported page HTML is expanded.
+Use the matching 0.4 generator, validator and viewer together. Indiana ingestion/viewer sources must be updated
+before uploading compressed artifacts; publishing this npm package alone does not deploy Indiana. The offline
+viewer uses the browser's built-in `DecompressionStream` and never fetches a decoder or merchant content.
 The scanner reads source files only; it never runs your build, imports your code or reads env files. Only the upload
 step calls Indiana, and only when a key is set.
 Values that look like credentials, tokens, emails or private URLs are removed, but review what your pages contain.
@@ -108,13 +154,89 @@ Values that look like credentials, tokens, emails or private URLs are removed, b
 
 Create a Key with only the `app-manifests:write` permission (Console → developer settings) and set it as
 `INDIANA_IAM_KEY` in your build environment. Each production build then registers the IAM, stores it through a
-server-signed URL and asks Indiana to validate it; the validated version becomes the environment's current version.
+server-signed URL and asks Indiana to validate it; the validated version becomes its client's current version.
 Rebuilding unchanged source only makes the existing version current again.
 
+An App environment can hold several clients, each a named build with its own current version: for example `web` and
+`web-dashboard`, or later `ios` and `android` apps. Set the `client` option (or `INDIANA_IAM_CLIENT`) to 1-40 lowercase
+letters, digits or hyphens starting with a letter; the default is `web`. A client keeps the platform of its first
+upload, and the same IAM bytes cannot be uploaded for two clients.
+
 - Uploads go to `https://tinker.cash`; set `INDIANA_IAM_BASE_URL` (or the `baseUrl` option) for another Indiana
   environment.
 - On Vercel only production deployments upload by default; `upload: "always"` uploads every build and
   `upload: false` never uploads.
 - A failed upload prints a warning and the build continues, unless `strict: true`.
 - The App's Owner or Admin must turn on the App page map first.
-- `INDIANA_IAM_KEY=<key> indiana-iam upload --file <manifest>` uploads a file generated elsewhere.
+- `INDIANA_IAM_KEY=<key> indiana-iam upload --file <manifest> [--client <key>]` uploads a file generated elsewhere.
+
+## App map annotations
+
+The Console App map groups pages into areas, shows recorded navigation, and opens a main-path workbench before
+opening a page editor. Thumbnails are static source projections. They do not execute authentication, data loaders,
+form submissions or application code.
+
+The optional `routeTree.ui` index records source UI alternatives, controlled Base UI Tabs (including first-party
+wrappers and context), and conditional redirect/return recipes. A recipe follows the actual React Router location
+through a URL query writer to a matching query-consuming `Navigate`; a password input at the destination identifies
+the login UI. The index never infers authentication from a route name or certifies a successful login. Dynamic
+callbacks, unresolved registries and external data remain coverage gaps. Finite first-party component registries
+retain their source labels and scope qualifiers in `ui.regions`; selecting an alternative is a preview assumption.
+Local JSX aliases and invoked JSX render props can preserve page content without executing their modules or callbacks.
+
+Unknown branches stay hidden in the admitted document. The shared `previewIamUiDocument` helper can select inert
+source alternatives and typed local state for thumbnail inspection. It returns the selected conditions and source
+locations. Controlled overlays with unknown `open` values stay closed until explicitly selected for inspection.
+These preview choices never change render discriminators, editable targets, the manifest or runtime permissions.
+`iamTabUiScenes` dispatches the recorded scalar Tab transitions to derive before/after preview states and directed
+edges. It includes content controlled outside the Tab root within the same source component or overlay. Every edge
+retains the transition, state writes and source locations. Missing collections remain gaps rather than sample rows.
+Finite Tab-dependent literal collections use shared `ui.fragments` and concrete `ui.collections` mounts. Their
+source element references, item counts, Tab cases and required local values remain pinned; derived rows are inert
+and never become SDK edit targets. The Lucide adapter reads geometry from pinned `lucide-static` 1.34.0 JSON,
+without loading merchant packages. Unknown filter combinations remain unobserved rather than reusing stale rows.
+Finite source-derived Tab classes, search placeholders and accessible labels share `ui.attributeSets`; concrete
+mounts in `ui.attributes` apply only the recorded presentation properties. Fragment class and element dictionaries
+preserve their exact authored values. Repeated graph source locations and instance scope names use lossless
+`sourcePool` / `scopePool` references; source hashes, state identities and per-instance state remain unchanged.
+Unexecuted query status/result branches and unresolved scalar alternatives display explicit unobserved annotations;
+preview does not select a loading, failed or empty result automatically. Literal empty source catalogs remain valid.
+Static thumbnail crops can focus on the page body or a source node using a bounded viewport; they retain authored
+descendants and never introduce scripts, frames or remote resources.
+
+Optional static attributes preserve product intent that cannot be established from source dataflow alone:
+
+| Attribute                                          | Location                                 | Meaning                                                                                                           |
+| -------------------------------------------------- | ---------------------------------------- | ----------------------------------------------------------------------------------------------------------------- |
+| `data-indiana-map-area`                            | Page root                                | Functional area label; otherwise the first URL segment groups the directory.                                      |
+| `data-indiana-map-flow`                            | Page root                                | Display name for the process containing this page.                                                                |
+| `data-indiana-map-kind="login"`                    | Page root                                | Declares an authentication page.                                                                                  |
+| `data-indiana-map-auth="public\|required"`         | Page root                                | Declares the page's access requirement. Omission remains unknown.                                                 |
+| `data-indiana-map-edge="step\|tab\|login\|return"` | An existing link or supported UI control | Classifies an existing recorded action. It never invents a destination or makes an unsupported action executable. |
+
+Use one consistent declaration on the outer page element. Native `role="tab"` also classifies a Tab control.
+A link Tab retains its exact destination URL, including query and fragment; a supported state-writing Tab remains
+an in-page action. Login and return links remain separate from ordinary steps. Unsupported actions appear as
+unknown outcomes. Authentication requirements are display declarations, not proof of a session or runtime access.
+
+```tsx
+<main
+  data-indiana-map-area="Workspace"
+  data-indiana-map-flow="Create project"
+  data-indiana-map-auth="required"
+>
+  <a href="/login?next=%2Fprojects" data-indiana-map-edge="login">
+    Sign in
+  </a>
+  <a href="/projects/configure" data-indiana-map-edge="step">
+    Continue
+  </a>
+  <a href="/projects?tab=activity" role="tab">
+    Activity
+  </a>
+</main>
+```
+
+An unambiguous source path can continue automatically until a branch or cycle. Explicit step links take precedence
+over ordinary navigation; login/return links and Tabs are inspected separately. A new IAM build is needed to add
+these annotations to an already uploaded version. Existing immutable versions are never rewritten.

package/assets/document-controller.js

@@ -7,9 +7,18 @@
     const model = document.querySelector('[data-iam-adapter="' + name + '"]');
     if (model) root.className = model.getAttribute("class") || "";
   }
-  let machine = null;
+  let machine = null, activeTabs = [],sourceUi=null,sourceRenderKey=null;
   const patches = new Map();
   const node = id => [...document.querySelectorAll("[data-iam-node]")].find(e => e.dataset.iamNode === id);
+  function viewportValues(graph,routeKey,renderKey){
+    const values={};for(const variable of graph.variables??[]){
+      if(variable.routeKey!==routeKey||variable.renderKey!==(renderKey??graph.routes.find(r=>r.routeKey===routeKey)?.initialRenderKey)||variable.valueType!=='boolean')continue;
+      const match=/^@media (\((?:max|min)-width: [1-9]\d{1,3}px\))$/.exec(variable.label);
+      if(match)values[variable.variableKey]=matchMedia(match[1]).matches;
+    }return values;
+  }
+  let viewportGraph=null,viewportRoute=null,viewportRender=null;
+  addEventListener('resize',()=>{if(machine&&viewportGraph){machine.preview(viewportValues(viewportGraph,viewportRoute,viewportRender));renderState();}});
   function renderState() {
     if (!machine) return;
     for (const binding of machine.bindings()) {
@@ -19,6 +28,11 @@
       else if (binding.property === "text") el.textContent = String(binding.value);
       else el[binding.property] = binding.value;
     }
+    const values=machine.snapshot();
+    for(const tab of activeTabs){const selected=tab.variableKey?values[tab.variableKey]:tab.initialValue;for(const item of tab.items)node(item.nodeId)?.setAttribute('aria-selected',String(item.value===selected));}
+    applySourceAttributes(document,sourceUi,sourceRenderKey,values);
+    applySourceCollections(document,sourceUi,sourceRenderKey,values,true);
+    markUnobservedData(document,sourceUi,true);
     for (const patch of patches.values()) applyPatch(patch);
   }
   function applyPatch(data) {
@@ -78,7 +92,10 @@
       channel = data.nonce;
       if (data.graph && typeof data.routeKey === "string") {
         machine = createStateMachine(data.graph, data.routeKey, data.renderKey);
+        viewportGraph=data.graph;viewportRoute=data.routeKey;viewportRender=data.renderKey;machine.preview(viewportValues(data.graph,data.routeKey,data.renderKey));
         const renderKey = data.renderKey ?? data.graph.routes.find(route => route.routeKey === data.routeKey)?.initialRenderKey;
+        sourceUi=data.graph.ui;sourceRenderKey=renderKey;
+        activeTabs = (data.graph.ui?.tabs??[]).filter(t=>t.routeKey===data.routeKey&&t.renderKey===renderKey);
         activeTransitions = data.graph.transitions.filter(t => t.routeKey === data.routeKey && t.renderKey === renderKey);
         renderState();
       }

package/assets/document-runtime.js

@@ -76,6 +76,177 @@ function createStateMachine(graph, routeKey, renderKey) {
   };
 }
 
+function checkedCollectionFragment(doc, fragment) {
+  if (
+    typeof fragment?.html !== "string" ||
+    fragment.html.length > 262144 ||
+    !Array.isArray(fragment.elementKeys) ||
+    !Array.isArray(fragment.sourceElements) ||
+    !Array.isArray(fragment.classNames) ||
+    fragment.sourceElements.length > 2000 ||
+    fragment.classNames.length > 128 ||
+    fragment.classNames.some((s) => typeof s !== "string" || s.length > 4000) ||
+    fragment.elementKeys.some(
+      (i) =>
+        !Number.isInteger(i) || i < 0 || i >= fragment.sourceElements.length,
+    ) ||
+    fragment.elementKeys.length > 2000
+  )
+    throw Error("Invalid shared source fragment");
+  const template = doc.createElement("template");
+  template.innerHTML = fragment.html;
+  const nodes = [...template.content.querySelectorAll("*")],
+    allowed = new Set(
+      "div span p button input svg path circle rect line polyline polygon ellipse g title".split(
+        " ",
+      ),
+    );
+  if (nodes.length !== fragment.elementKeys.length)
+    throw Error("Shared source fragment mapping mismatch");
+  for (const node of nodes) {
+    if (node.hasAttribute("data-iam-fragment-class")) {
+      const raw = node.getAttribute("data-iam-fragment-class"),
+        index = Number(raw);
+      if (
+        String(index) !== raw ||
+        !Number.isInteger(index) ||
+        index < 0 ||
+        index >= fragment.classNames.length
+      )
+        throw Error("Invalid source fragment class");
+      node.setAttribute("class", fragment.classNames[index]);
+      node.removeAttribute("data-iam-fragment-class");
+    }
+    if (!allowed.has(node.tagName.toLowerCase()))
+      throw Error("Active shared source fragment element");
+    for (const attr of node.attributes)
+      if (
+        !/^(?:class|title|type|value|placeholder|disabled|hidden|checked|tabindex|width|height|viewBox|viewbox|xmlns|d|fill|stroke|stroke-width|stroke-linecap|stroke-linejoin|cx|cy|r|rx|ry|x|y|x1|x2|y1|y2|points|aria-[a-z-]+|data-(?:slot|state|active|disabled|pressed))$/.test(
+          attr.name,
+        )
+      )
+        throw Error("Active shared source fragment attribute: " + attr.name);
+    for (const key of ["fill", "stroke"])
+      if (
+        node.hasAttribute(key) &&
+        !/^(?:none|currentColor|transparent|#[a-f\d]{3,8})$/i.test(
+          node.getAttribute(key),
+        )
+      )
+        throw Error("External source fragment paint");
+    if (
+      node.hasAttribute("xmlns") &&
+      node.getAttribute("xmlns") !== "http://www.w3.org/2000/svg"
+    )
+      throw Error("Invalid source fragment namespace");
+  }
+  return { content: template.content, nodes };
+}
+function applySourceAttributes(doc, ui, renderKey, values) {
+  const sets = new Map((ui?.attributeSets ?? []).map((s) => [s.setKey, s])),
+    nodes = new Map(
+      [...doc.querySelectorAll("[data-iam-node]")].map((n) => [
+        n.getAttribute("data-iam-node"),
+        n,
+      ]),
+    );
+  for (const row of ui?.attributes ?? []) {
+    if (row.renderKey !== renderKey) continue;
+    const set = sets.get(row.setKey),
+      node = nodes.get(row.nodeId),
+      chosen = set?.cases.find((c) => c.value === values[row.variableKey]);
+    if (!node || !chosen) continue;
+    if (
+      !["class", "placeholder", "aria-label"].includes(set.property) ||
+      typeof chosen.text !== "string" ||
+      chosen.text.length > 4000
+    )
+      throw Error("Invalid source presentation attribute");
+    node.setAttribute(set.property, chosen.text);
+  }
+}
+function applySourceCollections(doc, ui, renderKey, values, enabled) {
+  const choices = [],
+    fragments = new Map((ui?.fragments ?? []).map((f) => [f.fragmentKey, f]));
+  for (const row of ui?.collections ?? []) {
+    if (row.renderKey !== renderKey) continue;
+    const root = [...doc.querySelectorAll("[data-iam-node]")].find(
+      (n) => n.getAttribute("data-iam-node") === row.nodeId,
+    );
+    if (!root) continue;
+    root.replaceChildren();
+    if (!enabled) continue;
+    if (root.parentElement?.closest("[hidden]")) continue;
+    const selected = row.cases.find((c) => c.value === values[row.variableKey]),
+      satisfied = row.requires.every((r) => values[r.variableKey] === r.value);
+    root.hidden = false;
+    root.setAttribute("inert", "");
+    if (!selected || !satisfied) {
+      root.textContent = "未观测 · 此筛选组合未重建";
+      root.setAttribute("data-iam-observation", "unobserved-collection");
+      continue;
+    }
+    const fragment = fragments.get(selected.fragmentKey);
+    if (!fragment) throw Error("Missing source collection fragment");
+    const parsed = checkedCollectionFragment(doc, fragment);
+    root.replaceChildren(parsed.content);
+    parsed.nodes.forEach((n, index) => {
+      n.setAttribute("data-iam-preview-only", "true");
+      n.setAttribute(
+        "data-iam-source-element",
+        fragment.sourceElements[fragment.elementKeys[index]],
+      );
+    });
+    choices.push({
+      collectionKey: row.collectionKey,
+      value: selected.value,
+      itemCount: fragment.itemCount,
+      source: row.source,
+    });
+  }
+  return choices;
+}
+function markUnobservedData(doc, ui, enabled, selections = new Map()) {
+  doc.querySelectorAll("[data-iam-preview-note]").forEach((n) => n.remove());
+  const unobserved = [];
+  if (!enabled) return unobserved;
+  const source = new Map(
+    (ui?.conditions ?? []).map((c) => [c.conditionKey, c]),
+  );
+  for (const root of doc.querySelectorAll(
+    '[data-iam-condition][data-iam-alternative="true"]',
+  )) {
+    const condition = source.get(root.getAttribute("data-iam-condition")),
+      id = root.getAttribute("data-iam-node");
+    if (!condition?.observation || selections.has(id)) continue;
+    const note = doc.createElement("div");
+    note.setAttribute("data-iam-preview-note", "unobserved");
+    note.className = "iam-observation-note";
+    note.setAttribute("role", "status");
+    note.textContent =
+      condition.observation === "remote" ? "远程数据未观测" : "数据未观测";
+    note.title = condition.expression;
+    root.before(note);
+    if (!note.closest("[hidden]"))
+      unobserved.push({
+        groupKey: id,
+        expression: condition.expression,
+        source: condition.source,
+      });
+  }
+  for (const root of doc.querySelectorAll(
+    '[data-iam-observation="remote"],[data-iam-observation="unobserved"]',
+  )) {
+    root.hidden = false;
+    root.textContent = "未观测";
+    root.classList.add("iam-unobserved-value");
+  }
+  for (const field of doc.querySelectorAll("[data-iam-input-unobserved]")) {
+    field.setAttribute("placeholder", "未观测");
+    field.setAttribute("title", "此字段的数据未观测");
+  }
+  return unobserved;
+}
 /* Indiana UI simulation runtime 0.2.0. No merchant code, requests, authentication or purchases. */
 (() => {
   "use strict";
@@ -85,9 +256,18 @@ function createStateMachine(graph, routeKey, renderKey) {
     const model = document.querySelector('[data-iam-adapter="' + name + '"]');
     if (model) root.className = model.getAttribute("class") || "";
   }
-  let machine = null;
+  let machine = null, activeTabs = [],sourceUi=null,sourceRenderKey=null;
   const patches = new Map();
   const node = id => [...document.querySelectorAll("[data-iam-node]")].find(e => e.dataset.iamNode === id);
+  function viewportValues(graph,routeKey,renderKey){
+    const values={};for(const variable of graph.variables??[]){
+      if(variable.routeKey!==routeKey||variable.renderKey!==(renderKey??graph.routes.find(r=>r.routeKey===routeKey)?.initialRenderKey)||variable.valueType!=='boolean')continue;
+      const match=/^@media (\((?:max|min)-width: [1-9]\d{1,3}px\))$/.exec(variable.label);
+      if(match)values[variable.variableKey]=matchMedia(match[1]).matches;
+    }return values;
+  }
+  let viewportGraph=null,viewportRoute=null,viewportRender=null;
+  addEventListener('resize',()=>{if(machine&&viewportGraph){machine.preview(viewportValues(viewportGraph,viewportRoute,viewportRender));renderState();}});
   function renderState() {
     if (!machine) return;
     for (const binding of machine.bindings()) {
@@ -97,6 +277,11 @@ function createStateMachine(graph, routeKey, renderKey) {
       else if (binding.property === "text") el.textContent = String(binding.value);
       else el[binding.property] = binding.value;
     }
+    const values=machine.snapshot();
+    for(const tab of activeTabs){const selected=tab.variableKey?values[tab.variableKey]:tab.initialValue;for(const item of tab.items)node(item.nodeId)?.setAttribute('aria-selected',String(item.value===selected));}
+    applySourceAttributes(document,sourceUi,sourceRenderKey,values);
+    applySourceCollections(document,sourceUi,sourceRenderKey,values,true);
+    markUnobservedData(document,sourceUi,true);
     for (const patch of patches.values()) applyPatch(patch);
   }
   function applyPatch(data) {
@@ -156,7 +341,10 @@ function createStateMachine(graph, routeKey, renderKey) {
       channel = data.nonce;
       if (data.graph && typeof data.routeKey === "string") {
         machine = createStateMachine(data.graph, data.routeKey, data.renderKey);
+        viewportGraph=data.graph;viewportRoute=data.routeKey;viewportRender=data.renderKey;machine.preview(viewportValues(data.graph,data.routeKey,data.renderKey));
         const renderKey = data.renderKey ?? data.graph.routes.find(route => route.routeKey === data.routeKey)?.initialRenderKey;
+        sourceUi=data.graph.ui;sourceRenderKey=renderKey;
+        activeTabs = (data.graph.ui?.tabs??[]).filter(t=>t.routeKey===data.routeKey&&t.renderKey===renderKey);
         activeTransitions = data.graph.transitions.filter(t => t.routeKey === data.routeKey && t.renderKey === renderKey);
         renderState();
       }

package/assets/viewer.js

@@ -489,26 +489,86 @@ async function mountIamViewer(m, consoleContext) {
   }
   // Verify the compact source document first, then derive its exact v1 hashes.
   // Work is page-local and cancellable; hashes never become another saved authority.
+  /* BEGIN COMPRESSED DOM */
+function checkedDomPayload(document) {
+  const payload = document.domPayload;
+  if (!payload) return null;
+  if (document.html !== "" || !Array.isArray(document.nodes) || document.nodes.length || Object.keys(payload).sort().join(",") !== "bytes,data,encoding" || payload.encoding !== "gzip-json-v1" || !Number.isSafeInteger(payload.bytes) || payload.bytes < 1 || payload.bytes > 8_388_608 || typeof payload.data !== "string" || !payload.data.length || payload.data.length > 11_184_812 || payload.data.length % 4 !== 0 || !/^[A-Za-z0-9+/]*={0,2}$/.test(payload.data)) throw Error("Invalid compressed DOM payload");
+  return payload;
+}
+function parsedDomPayload(text) {
+  const value = JSON.parse(text);
+  if (!value || Object.keys(value).sort().join(",") !== "html,nodes" || typeof value.html !== "string" || value.html.length > 2_000_000 || !value.html.isWellFormed() || !Array.isArray(value.nodes) || value.nodes.length > 12000 || JSON.stringify(value) !== text) throw Error("Invalid expanded DOM payload");
+  return value;
+}
+async function documentDomBrowser(document) {
+  const payload = checkedDomPayload(document);
+  if (!payload) return { html: document.html, nodes: document.nodes };
+  if (typeof DecompressionStream !== "function") throw Error("Compressed IAM requires DecompressionStream support");
+  const binary = atob(payload.data);
+  if (btoa(binary) !== payload.data) throw Error("Noncanonical compressed DOM base64");
+  const compressed = Uint8Array.from(binary, character => character.charCodeAt(0));
+  const stream = new ReadableStream({ start(controller) { controller.enqueue(compressed); controller.close(); } }).pipeThrough(new DecompressionStream("gzip"));
+  const reader = stream.getReader(), chunks = [];
+  let total = 0;
+  try {
+    for (;;) {
+      const next = await reader.read();
+      if (next.done) break;
+      total += next.value.byteLength;
+      if (total > payload.bytes) throw Error("Expanded DOM byte budget exceeded");
+      chunks.push(next.value);
+    }
+  } finally { await reader.cancel().catch(() => {}); reader.releaseLock(); }
+  if (total !== payload.bytes) throw Error("Expanded DOM byte length mismatch");
+  const decoded = new Uint8Array(total);
+  let offset = 0;
+  for (const chunk of chunks) { decoded.set(chunk, offset); offset += chunk.byteLength; }
+  return parsedDomPayload(new TextDecoder("utf-8", { fatal: true }).decode(decoded));
+}
+  /* END COMPRESSED DOM */
   /* BEGIN HTML DOM DERIVATION */
-function expandDomNodes(document, body) {
+function expandDomNodes(document, body, deriveTextId) {
   if(document.nodeEncoding!=='html-preorder-v1'||document.nodeHashMode!=='derived-v1'||!document.sourceMappingsHash||document.nodes.length>12000)throw Error('Invalid HTML-derived DOM mode');
   let index=0;const result=[];
-  function visit(node,parentId,depth){
+  function visit(node,parentId,depth,childIndex=0){
     if(depth>128||![1,3].includes(node.nodeType))throw Error('Invalid HTML-derived DOM structure');
     const ref=document.nodes[index++];
     if(!ref||Object.keys(ref).some(key=>!['nodeId','elementKey','source','synthetic'].includes(key)))throw Error('Mixed HTML-derived DOM values');
-    const element=node.nodeType===1,nodeId=element?node.getAttribute('data-iam-node'):ref.nodeId;
+    const element=node.nodeType===1,nodeId=element?node.getAttribute('data-iam-node'):ref.nodeId??deriveTextId?.(document.pageKey,parentId,childIndex);
     if(!/^node_[a-f0-9]{64}$/.test(nodeId??'')||element&&Object.hasOwn(ref,'nodeId')||Object.hasOwn(ref,'synthetic')&&ref.synthetic!==true)throw Error('HTML-derived DOM identity differs');
     const full={...ref,nodeId,synthetic:ref.synthetic??false,parentId,kind:element?'element':'text',tag:element?node.tagName.toLowerCase():null,text:element?null:node.data,attributes:element?Object.fromEntries([...node.attributes].filter(a=>!a.name.startsWith('data-iam-')).map(a=>[a.name,a.value])):{},children:[]};
-    result.push(full);for(const child of node.childNodes)full.children.push(visit(child,nodeId,depth+1));return nodeId;
+    result.push(full);for(const [i,child]of [...node.childNodes].entries())full.children.push(visit(child,nodeId,depth+1,i));return nodeId;
   }
   if(body.childNodes.length!==1||visit(body.firstChild,null,0)!==document.rootNodeId||index!==document.nodes.length)throw Error('HTML-derived DOM coverage differs');
   return result;
 }
   /* END HTML DOM DERIVATION */
   async function expandNodeHashes(document,request) {
+    if (document.domPayload) {
+      const {hashes, ...body} = document;
+      if (await hash("iam/document/v1\0" + canonical(body)) !== hashes.document) throw Error("Compressed document hash mismatch");
+      const decoded = await documentDomBrowser(document);
+      if (await hash(decoded.html) !== hashes.html || await hash("iam/dom-map/v1\0" + canonical({rootNodeId: document.rootNodeId, nodes: decoded.nodes, sourceMappingsHash: document.sourceMappingsHash})) !== hashes.dom) throw Error("Expanded DOM hash mismatch");
+      const {domPayload, ...plain} = document;
+      document = {...plain, ...decoded};
+    }
     if(!Array.isArray(document.nodes)||document.nodes.length>12000)throw Error('Node hash budget');
-    const nodes=expandDomNodes(document,new DOMParser().parseFromString('<!doctype html><html><body>'+document.html+'</body></html>','text/html').body),byId=new Map(nodes.map(node=>[node.nodeId,node]));
+    const body=new DOMParser().parseFromString('<!doctype html><html><body>'+document.html+'</body></html>','text/html').body,textIds=new Map(),pendingText=[];
+    let preorder=0;
+    const collectText=(node,parentId,childIndex=0,depth=0)=>{
+      if(!node||depth>128||preorder>=12000)throw Error('DOM derivation budget');
+      const ref=document.nodes[preorder++];if(!ref)throw Error('Missing source node');
+      const id=node.nodeType===1?node.getAttribute('data-iam-node'):ref.nodeId;
+      if(node.nodeType===3&&!id)pendingText.push({parentId,index:childIndex,key:parentId+':'+childIndex});
+      for(const [i,child]of [...node.childNodes].entries())collectText(child,id,i,depth+1);
+    };
+    collectText(body.firstChild,null);if(preorder!==document.nodes.length)throw Error('Source node count differs');
+    for(let offset=0;offset<pendingText.length;offset+=64){
+      if(pendingDocument!==request)throw Error('Superseded document');
+      await Promise.all(pendingText.slice(offset,offset+64).map(async row=>textIds.set(row.key,'node_'+await hash('iam/identity/node/v1\0'+canonical({page:document.pageKey,parentId:row.parentId,index:row.index,kind:3})))));
+    }
+    const nodes=expandDomNodes(document,body,(_page,parentId,index)=>textIds.get(parentId+':'+index)),byId=new Map(nodes.map(node=>[node.nodeId,node]));
     if(byId.size!==nodes.length)throw Error('Duplicate node');
     for(let offset=0;offset<nodes.length;offset+=64){
       if(pendingDocument!==request)throw Error('Superseded document');
@@ -601,7 +661,8 @@ function expandDomNodes(document, body) {
     if (data.type === "open-page" && typeof data.routeKey === "string") {
       const next = m.pages.find(p => p.pageKey === data.routeKey);
       if (!next) return;
-      const variableRender=m.routeTree.variables.find(variable=>variable.variableKey===data.variableKey)?.renderKey??consoleContext?.catalog?.graph.variables.find(variable=>variable.id===data.variableKey)?.renderKey;
+      if(typeof data.renderKey==="string"&&!m.routeTree.renders.some(r=>r.routeKey===next.pageKey&&r.renderKey===data.renderKey))return;
+      const variableRender=typeof data.renderKey==="string"?data.renderKey:m.routeTree.variables.find(variable=>variable.variableKey===data.variableKey)?.renderKey??consoleContext?.catalog?.graph.variables.find(variable=>variable.id===data.variableKey)?.renderKey;
       const targetUrl=typeof data.url==="string"?data.url:(next.pageKey===page.pageKey?currentUrl:next.route);
       if (!doc || next.pageKey !== page.pageKey || variableRender && variableRender!==render?.renderKey || targetUrl!==currentUrl) openPage(next,targetUrl,variableRender);
       else consoleContext?.resume?.();
@@ -801,8 +862,14 @@ function expandDomNodes(document, body) {
   if (m.documents.length) {
     const initialRequest = {};
     pendingDocument = initialRequest;
-    m.documents = await Promise.all(m.documents.map(document => expandNodeHashes(document, initialRequest)));
+    const expandedBytes = m.documents.reduce((total, document) => total + (document.domPayload?.bytes ?? new TextEncoder().encode(JSON.stringify({html:document.html,nodes:document.nodes})).byteLength), 0);
+    if (!Number.isSafeInteger(expandedBytes) || expandedBytes > 33_554_432) throw Error("Expanded DOM aggregate byte budget exceeded");
+    // Sequential decoding bounds peak memory for a multi-route artifact.
+    const expandedDocuments = [];
+    for (const document of m.documents) expandedDocuments.push(await expandNodeHashes(document, initialRequest));
+    m.documents = expandedDocuments;
     pendingDocument = null;
+    renderNav();
   }
   openPage(page,consoleContext?.initialPage?.url??page.route,consoleContext?.initialPage?.renderKey??consoleContext?.catalog?.graph.variables.find(variable=>variable.id===consoleContext.initialPage?.variableKey)?.renderKey);
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tinkerlandai/indiana-iam",
-  "version": "0.2.0",
+  "version": "0.4.0",
   "description": "Build-time Indiana App Manifest (IAM) generator for Next.js and Vite apps: scans source after the production build and writes the IAM and its release descriptor.",
   "license": "UNLICENSED",
   "repository": {
@@ -32,7 +32,8 @@
     },
     "./next": {
       "types": "./src/next.d.ts",
-      "import": "./src/next.mjs"
+      "import": "./src/next.mjs",
+      "require": "./src/next.cjs"
     },
     "./vite": {
       "types": "./src/vite.d.ts",
@@ -46,20 +47,12 @@
     "ajv": "6.15.0",
     "css-tree": "3.2.1",
     "jsdom": "26.1.0",
+    "lucide-static": "1.34.0",
     "magic-string": "0.30.21",
+    "pako": "3.0.2",
+    "sharp": "0.35.5",
     "tailwind-merge": "3.7.0",
     "tailwindcss": "4.3.3",
     "typescript": "5.9.3"
-  },
-  "peerDependencies": {
-    "sharp": "0.35.5"
-  },
-  "peerDependenciesMeta": {
-    "sharp": {
-      "optional": true
-    }
-  },
-  "devDependencies": {
-    "sharp": "0.35.5"
   }
 }