@tinkerlandai/indiana-iam 0.3.0 → 0.4.0

package/README.md

@@ -47,6 +47,13 @@ not import merchant modules to execute them. Source enumeration and optional Git
 the package starts no external commands and works without a Git executable. Developers' explicitly configured
 framework callbacks remain part of their normal build.
 
+Build integrations retain local compiled CSS when a stylesheet contains an external `@import`: the import is omitted
+without making a network request and the manifest records the missing external styles. Inline SVG resources are
+omitted by default during framework builds, with a coverage gap, so an unsupported form icon does not discard the
+stylesheet. Set `omitSvgResources: false` to reject those resources and use the source-style fallback instead.
+Standalone generation keeps its explicit `--omit-svg-resources` option. Compiled previews preserve hidden source
+branches even when application CSS uses `display: flex` or `display: grid`.
+
 ## Vite, React Router and TanStack Router
 
 ```js
@@ -110,15 +117,33 @@ optional command for explicit source annotations. Next and Vite do not need that
 Supported source: Next.js App Router and Pages Router, React Router / single-root React apps built with Vite,
 and statically generated TanStack file-route trees registered with `createRouter({ routeTree })`.
 React Router supports imported static path constants, inline `Component` functions and source-proven lazy import forwarding.
+Data-router `route.lazy` objects support a static module's named `Component`, or a source-proven mapper that captures
+the component export. Mapper factories, imports and business loaders are never executed. Unknown overrides remain gaps.
+MDX pages/layouts need a separate adapter and explicitly report incomplete route coverage.
 TanStack reads the registered generated tree, including pathless layouts, index routes and simple `$param` paths;
 custom history/basepath and complex parameter patterns require separate adapters. Loaders, guards, retry/reload behavior
 and runtime data remain unobserved. Unsupported optional React paths are isolated as gaps.
+React Hook Form Controller callbacks retain their source JSX, including first-party wrappers; field values, validation
+and submissions are not executed. Source-proven Radix overlays and React Transition Group visibility retain their
+initial state. Supported Radix triggers and close controls simulate local state only; unknown controlled states stay
+closed and unobserved. These adapters do not implement portal positioning, focus management or business callbacks.
+Chart.js canvas wrappers and Recharts line/bar/area/pie declarations project bounded literal series as inert SVG.
+Chart modules, effects, formatters and callbacks are not executed. Random/remote/oversized series show an explicit
+unobserved-data placeholder; animation, library layout and tooltips remain outside this source projection.
+Build hooks package only raster images referenced by projected JSX: relative source imports and public build URLs.
+They never crawl unrelated assets or fetch URLs. Files must remain inside the root without symlinks; referenced
+source image bytes participate in release identity. The existing 1 MiB/file, 6 MiB input and 128-asset bounds apply. Referenced rasters over 64 KiB use the bundled sharp 0.35.5 preview profile: auto-orient, fit inside 800×800, WebP quality 90, metadata stripped. Source bytes stay independently hashed; this lossy preview is explicitly reported.
+Standalone generation keeps images unpackaged unless explicit public inputs are supplied.
+Source-proven `useSyncExternalStore` matchMedia getters retain both typed viewport branches and follow the preview
+viewport. Subscriptions are not run. UI preference cookies with an explicit source SSR guard use an empty-cookie
+preview; auth/session cookies and arbitrary stores stay unobserved. Pure lazy local-state initializers are interpreted
+under the same bounded rules; merchant callbacks and browser storage are never executed or read.
 The complete validated IAM must fit within 8 MiB; oversized projections fail without emitting a truncated artifact.
 Large artifacts store sizeable HTML/preorder-map pairs as `domPayload` (`gzip-json-v1`), while keeping `html: ""`
 and `nodes: []` in that document's wire record. This lossless storage encoding preserves all source IDs, DOM values,
-HTML/DOM hashes and targets. The document hash pins its encoded storage body; decoding is local and bounded to
+HTML/DOM hashes and targets. Route navigation stores the exact interaction-array index instead of repeating its ID; validation checks node, route, destination and parameters. Source files retain their full hashes; component/element records cover reachable route compositions and shared fragments. Text node IDs that follow the original parent/index identity formula are derived locally instead of repeated; explicit exceptions remain stored, and every resolved source-map hash is checked. The document hash pins its encoded storage body; decoding is local and bounded to
 8 MiB per payload and 32 MiB in aggregate. The final IAM file limit stays 8 MiB. Exported page HTML is expanded.
-Use the matching 0.3 generator, validator and viewer together. Indiana ingestion/viewer sources must be updated
+Use the matching 0.4 generator, validator and viewer together. Indiana ingestion/viewer sources must be updated
 before uploading compressed artifacts; publishing this npm package alone does not deploy Indiana. The offline
 viewer uses the browser's built-in `DecompressionStream` and never fetches a decoder or merchant content.
 The scanner reads source files only; it never runs your build, imports your code or reads env files. Only the upload
@@ -151,7 +176,35 @@ The Console App map groups pages into areas, shows recorded navigation, and open
 opening a page editor. Thumbnails are static source projections. They do not execute authentication, data loaders,
 form submissions or application code.
 
-Optional static attributes preserve product intent that cannot be established from a URL alone:
+The optional `routeTree.ui` index records source UI alternatives, controlled Base UI Tabs (including first-party
+wrappers and context), and conditional redirect/return recipes. A recipe follows the actual React Router location
+through a URL query writer to a matching query-consuming `Navigate`; a password input at the destination identifies
+the login UI. The index never infers authentication from a route name or certifies a successful login. Dynamic
+callbacks, unresolved registries and external data remain coverage gaps. Finite first-party component registries
+retain their source labels and scope qualifiers in `ui.regions`; selecting an alternative is a preview assumption.
+Local JSX aliases and invoked JSX render props can preserve page content without executing their modules or callbacks.
+
+Unknown branches stay hidden in the admitted document. The shared `previewIamUiDocument` helper can select inert
+source alternatives and typed local state for thumbnail inspection. It returns the selected conditions and source
+locations. Controlled overlays with unknown `open` values stay closed until explicitly selected for inspection.
+These preview choices never change render discriminators, editable targets, the manifest or runtime permissions.
+`iamTabUiScenes` dispatches the recorded scalar Tab transitions to derive before/after preview states and directed
+edges. It includes content controlled outside the Tab root within the same source component or overlay. Every edge
+retains the transition, state writes and source locations. Missing collections remain gaps rather than sample rows.
+Finite Tab-dependent literal collections use shared `ui.fragments` and concrete `ui.collections` mounts. Their
+source element references, item counts, Tab cases and required local values remain pinned; derived rows are inert
+and never become SDK edit targets. The Lucide adapter reads geometry from pinned `lucide-static` 1.34.0 JSON,
+without loading merchant packages. Unknown filter combinations remain unobserved rather than reusing stale rows.
+Finite source-derived Tab classes, search placeholders and accessible labels share `ui.attributeSets`; concrete
+mounts in `ui.attributes` apply only the recorded presentation properties. Fragment class and element dictionaries
+preserve their exact authored values. Repeated graph source locations and instance scope names use lossless
+`sourcePool` / `scopePool` references; source hashes, state identities and per-instance state remain unchanged.
+Unexecuted query status/result branches and unresolved scalar alternatives display explicit unobserved annotations;
+preview does not select a loading, failed or empty result automatically. Literal empty source catalogs remain valid.
+Static thumbnail crops can focus on the page body or a source node using a bounded viewport; they retain authored
+descendants and never introduce scripts, frames or remote resources.
+
+Optional static attributes preserve product intent that cannot be established from source dataflow alone:
 
 | Attribute                                          | Location                                 | Meaning                                                                                                           |
 | -------------------------------------------------- | ---------------------------------------- | ----------------------------------------------------------------------------------------------------------------- |

package/assets/document-controller.js

@@ -7,9 +7,18 @@
     const model = document.querySelector('[data-iam-adapter="' + name + '"]');
     if (model) root.className = model.getAttribute("class") || "";
   }
-  let machine = null;
+  let machine = null, activeTabs = [],sourceUi=null,sourceRenderKey=null;
   const patches = new Map();
   const node = id => [...document.querySelectorAll("[data-iam-node]")].find(e => e.dataset.iamNode === id);
+  function viewportValues(graph,routeKey,renderKey){
+    const values={};for(const variable of graph.variables??[]){
+      if(variable.routeKey!==routeKey||variable.renderKey!==(renderKey??graph.routes.find(r=>r.routeKey===routeKey)?.initialRenderKey)||variable.valueType!=='boolean')continue;
+      const match=/^@media (\((?:max|min)-width: [1-9]\d{1,3}px\))$/.exec(variable.label);
+      if(match)values[variable.variableKey]=matchMedia(match[1]).matches;
+    }return values;
+  }
+  let viewportGraph=null,viewportRoute=null,viewportRender=null;
+  addEventListener('resize',()=>{if(machine&&viewportGraph){machine.preview(viewportValues(viewportGraph,viewportRoute,viewportRender));renderState();}});
   function renderState() {
     if (!machine) return;
     for (const binding of machine.bindings()) {
@@ -19,6 +28,11 @@
       else if (binding.property === "text") el.textContent = String(binding.value);
       else el[binding.property] = binding.value;
     }
+    const values=machine.snapshot();
+    for(const tab of activeTabs){const selected=tab.variableKey?values[tab.variableKey]:tab.initialValue;for(const item of tab.items)node(item.nodeId)?.setAttribute('aria-selected',String(item.value===selected));}
+    applySourceAttributes(document,sourceUi,sourceRenderKey,values);
+    applySourceCollections(document,sourceUi,sourceRenderKey,values,true);
+    markUnobservedData(document,sourceUi,true);
     for (const patch of patches.values()) applyPatch(patch);
   }
   function applyPatch(data) {
@@ -78,7 +92,10 @@
       channel = data.nonce;
       if (data.graph && typeof data.routeKey === "string") {
         machine = createStateMachine(data.graph, data.routeKey, data.renderKey);
+        viewportGraph=data.graph;viewportRoute=data.routeKey;viewportRender=data.renderKey;machine.preview(viewportValues(data.graph,data.routeKey,data.renderKey));
         const renderKey = data.renderKey ?? data.graph.routes.find(route => route.routeKey === data.routeKey)?.initialRenderKey;
+        sourceUi=data.graph.ui;sourceRenderKey=renderKey;
+        activeTabs = (data.graph.ui?.tabs??[]).filter(t=>t.routeKey===data.routeKey&&t.renderKey===renderKey);
         activeTransitions = data.graph.transitions.filter(t => t.routeKey === data.routeKey && t.renderKey === renderKey);
         renderState();
       }

package/assets/document-runtime.js

@@ -76,6 +76,177 @@ function createStateMachine(graph, routeKey, renderKey) {
   };
 }
 
+function checkedCollectionFragment(doc, fragment) {
+  if (
+    typeof fragment?.html !== "string" ||
+    fragment.html.length > 262144 ||
+    !Array.isArray(fragment.elementKeys) ||
+    !Array.isArray(fragment.sourceElements) ||
+    !Array.isArray(fragment.classNames) ||
+    fragment.sourceElements.length > 2000 ||
+    fragment.classNames.length > 128 ||
+    fragment.classNames.some((s) => typeof s !== "string" || s.length > 4000) ||
+    fragment.elementKeys.some(
+      (i) =>
+        !Number.isInteger(i) || i < 0 || i >= fragment.sourceElements.length,
+    ) ||
+    fragment.elementKeys.length > 2000
+  )
+    throw Error("Invalid shared source fragment");
+  const template = doc.createElement("template");
+  template.innerHTML = fragment.html;
+  const nodes = [...template.content.querySelectorAll("*")],
+    allowed = new Set(
+      "div span p button input svg path circle rect line polyline polygon ellipse g title".split(
+        " ",
+      ),
+    );
+  if (nodes.length !== fragment.elementKeys.length)
+    throw Error("Shared source fragment mapping mismatch");
+  for (const node of nodes) {
+    if (node.hasAttribute("data-iam-fragment-class")) {
+      const raw = node.getAttribute("data-iam-fragment-class"),
+        index = Number(raw);
+      if (
+        String(index) !== raw ||
+        !Number.isInteger(index) ||
+        index < 0 ||
+        index >= fragment.classNames.length
+      )
+        throw Error("Invalid source fragment class");
+      node.setAttribute("class", fragment.classNames[index]);
+      node.removeAttribute("data-iam-fragment-class");
+    }
+    if (!allowed.has(node.tagName.toLowerCase()))
+      throw Error("Active shared source fragment element");
+    for (const attr of node.attributes)
+      if (
+        !/^(?:class|title|type|value|placeholder|disabled|hidden|checked|tabindex|width|height|viewBox|viewbox|xmlns|d|fill|stroke|stroke-width|stroke-linecap|stroke-linejoin|cx|cy|r|rx|ry|x|y|x1|x2|y1|y2|points|aria-[a-z-]+|data-(?:slot|state|active|disabled|pressed))$/.test(
+          attr.name,
+        )
+      )
+        throw Error("Active shared source fragment attribute: " + attr.name);
+    for (const key of ["fill", "stroke"])
+      if (
+        node.hasAttribute(key) &&
+        !/^(?:none|currentColor|transparent|#[a-f\d]{3,8})$/i.test(
+          node.getAttribute(key),
+        )
+      )
+        throw Error("External source fragment paint");
+    if (
+      node.hasAttribute("xmlns") &&
+      node.getAttribute("xmlns") !== "http://www.w3.org/2000/svg"
+    )
+      throw Error("Invalid source fragment namespace");
+  }
+  return { content: template.content, nodes };
+}
+function applySourceAttributes(doc, ui, renderKey, values) {
+  const sets = new Map((ui?.attributeSets ?? []).map((s) => [s.setKey, s])),
+    nodes = new Map(
+      [...doc.querySelectorAll("[data-iam-node]")].map((n) => [
+        n.getAttribute("data-iam-node"),
+        n,
+      ]),
+    );
+  for (const row of ui?.attributes ?? []) {
+    if (row.renderKey !== renderKey) continue;
+    const set = sets.get(row.setKey),
+      node = nodes.get(row.nodeId),
+      chosen = set?.cases.find((c) => c.value === values[row.variableKey]);
+    if (!node || !chosen) continue;
+    if (
+      !["class", "placeholder", "aria-label"].includes(set.property) ||
+      typeof chosen.text !== "string" ||
+      chosen.text.length > 4000
+    )
+      throw Error("Invalid source presentation attribute");
+    node.setAttribute(set.property, chosen.text);
+  }
+}
+function applySourceCollections(doc, ui, renderKey, values, enabled) {
+  const choices = [],
+    fragments = new Map((ui?.fragments ?? []).map((f) => [f.fragmentKey, f]));
+  for (const row of ui?.collections ?? []) {
+    if (row.renderKey !== renderKey) continue;
+    const root = [...doc.querySelectorAll("[data-iam-node]")].find(
+      (n) => n.getAttribute("data-iam-node") === row.nodeId,
+    );
+    if (!root) continue;
+    root.replaceChildren();
+    if (!enabled) continue;
+    if (root.parentElement?.closest("[hidden]")) continue;
+    const selected = row.cases.find((c) => c.value === values[row.variableKey]),
+      satisfied = row.requires.every((r) => values[r.variableKey] === r.value);
+    root.hidden = false;
+    root.setAttribute("inert", "");
+    if (!selected || !satisfied) {
+      root.textContent = "未观测 · 此筛选组合未重建";
+      root.setAttribute("data-iam-observation", "unobserved-collection");
+      continue;
+    }
+    const fragment = fragments.get(selected.fragmentKey);
+    if (!fragment) throw Error("Missing source collection fragment");
+    const parsed = checkedCollectionFragment(doc, fragment);
+    root.replaceChildren(parsed.content);
+    parsed.nodes.forEach((n, index) => {
+      n.setAttribute("data-iam-preview-only", "true");
+      n.setAttribute(
+        "data-iam-source-element",
+        fragment.sourceElements[fragment.elementKeys[index]],
+      );
+    });
+    choices.push({
+      collectionKey: row.collectionKey,
+      value: selected.value,
+      itemCount: fragment.itemCount,
+      source: row.source,
+    });
+  }
+  return choices;
+}
+function markUnobservedData(doc, ui, enabled, selections = new Map()) {
+  doc.querySelectorAll("[data-iam-preview-note]").forEach((n) => n.remove());
+  const unobserved = [];
+  if (!enabled) return unobserved;
+  const source = new Map(
+    (ui?.conditions ?? []).map((c) => [c.conditionKey, c]),
+  );
+  for (const root of doc.querySelectorAll(
+    '[data-iam-condition][data-iam-alternative="true"]',
+  )) {
+    const condition = source.get(root.getAttribute("data-iam-condition")),
+      id = root.getAttribute("data-iam-node");
+    if (!condition?.observation || selections.has(id)) continue;
+    const note = doc.createElement("div");
+    note.setAttribute("data-iam-preview-note", "unobserved");
+    note.className = "iam-observation-note";
+    note.setAttribute("role", "status");
+    note.textContent =
+      condition.observation === "remote" ? "远程数据未观测" : "数据未观测";
+    note.title = condition.expression;
+    root.before(note);
+    if (!note.closest("[hidden]"))
+      unobserved.push({
+        groupKey: id,
+        expression: condition.expression,
+        source: condition.source,
+      });
+  }
+  for (const root of doc.querySelectorAll(
+    '[data-iam-observation="remote"],[data-iam-observation="unobserved"]',
+  )) {
+    root.hidden = false;
+    root.textContent = "未观测";
+    root.classList.add("iam-unobserved-value");
+  }
+  for (const field of doc.querySelectorAll("[data-iam-input-unobserved]")) {
+    field.setAttribute("placeholder", "未观测");
+    field.setAttribute("title", "此字段的数据未观测");
+  }
+  return unobserved;
+}
 /* Indiana UI simulation runtime 0.2.0. No merchant code, requests, authentication or purchases. */
 (() => {
   "use strict";
@@ -85,9 +256,18 @@ function createStateMachine(graph, routeKey, renderKey) {
     const model = document.querySelector('[data-iam-adapter="' + name + '"]');
     if (model) root.className = model.getAttribute("class") || "";
   }
-  let machine = null;
+  let machine = null, activeTabs = [],sourceUi=null,sourceRenderKey=null;
   const patches = new Map();
   const node = id => [...document.querySelectorAll("[data-iam-node]")].find(e => e.dataset.iamNode === id);
+  function viewportValues(graph,routeKey,renderKey){
+    const values={};for(const variable of graph.variables??[]){
+      if(variable.routeKey!==routeKey||variable.renderKey!==(renderKey??graph.routes.find(r=>r.routeKey===routeKey)?.initialRenderKey)||variable.valueType!=='boolean')continue;
+      const match=/^@media (\((?:max|min)-width: [1-9]\d{1,3}px\))$/.exec(variable.label);
+      if(match)values[variable.variableKey]=matchMedia(match[1]).matches;
+    }return values;
+  }
+  let viewportGraph=null,viewportRoute=null,viewportRender=null;
+  addEventListener('resize',()=>{if(machine&&viewportGraph){machine.preview(viewportValues(viewportGraph,viewportRoute,viewportRender));renderState();}});
   function renderState() {
     if (!machine) return;
     for (const binding of machine.bindings()) {
@@ -97,6 +277,11 @@ function createStateMachine(graph, routeKey, renderKey) {
       else if (binding.property === "text") el.textContent = String(binding.value);
       else el[binding.property] = binding.value;
     }
+    const values=machine.snapshot();
+    for(const tab of activeTabs){const selected=tab.variableKey?values[tab.variableKey]:tab.initialValue;for(const item of tab.items)node(item.nodeId)?.setAttribute('aria-selected',String(item.value===selected));}
+    applySourceAttributes(document,sourceUi,sourceRenderKey,values);
+    applySourceCollections(document,sourceUi,sourceRenderKey,values,true);
+    markUnobservedData(document,sourceUi,true);
     for (const patch of patches.values()) applyPatch(patch);
   }
   function applyPatch(data) {
@@ -156,7 +341,10 @@ function createStateMachine(graph, routeKey, renderKey) {
       channel = data.nonce;
       if (data.graph && typeof data.routeKey === "string") {
         machine = createStateMachine(data.graph, data.routeKey, data.renderKey);
+        viewportGraph=data.graph;viewportRoute=data.routeKey;viewportRender=data.renderKey;machine.preview(viewportValues(data.graph,data.routeKey,data.renderKey));
         const renderKey = data.renderKey ?? data.graph.routes.find(route => route.routeKey === data.routeKey)?.initialRenderKey;
+        sourceUi=data.graph.ui;sourceRenderKey=renderKey;
+        activeTabs = (data.graph.ui?.tabs??[]).filter(t=>t.routeKey===data.routeKey&&t.renderKey===renderKey);
         activeTransitions = data.graph.transitions.filter(t => t.routeKey === data.routeKey && t.renderKey === renderKey);
         renderState();
       }

package/assets/viewer.js

@@ -528,17 +528,17 @@ async function documentDomBrowser(document) {
 }
   /* END COMPRESSED DOM */
   /* BEGIN HTML DOM DERIVATION */
-function expandDomNodes(document, body) {
+function expandDomNodes(document, body, deriveTextId) {
   if(document.nodeEncoding!=='html-preorder-v1'||document.nodeHashMode!=='derived-v1'||!document.sourceMappingsHash||document.nodes.length>12000)throw Error('Invalid HTML-derived DOM mode');
   let index=0;const result=[];
-  function visit(node,parentId,depth){
+  function visit(node,parentId,depth,childIndex=0){
     if(depth>128||![1,3].includes(node.nodeType))throw Error('Invalid HTML-derived DOM structure');
     const ref=document.nodes[index++];
     if(!ref||Object.keys(ref).some(key=>!['nodeId','elementKey','source','synthetic'].includes(key)))throw Error('Mixed HTML-derived DOM values');
-    const element=node.nodeType===1,nodeId=element?node.getAttribute('data-iam-node'):ref.nodeId;
+    const element=node.nodeType===1,nodeId=element?node.getAttribute('data-iam-node'):ref.nodeId??deriveTextId?.(document.pageKey,parentId,childIndex);
     if(!/^node_[a-f0-9]{64}$/.test(nodeId??'')||element&&Object.hasOwn(ref,'nodeId')||Object.hasOwn(ref,'synthetic')&&ref.synthetic!==true)throw Error('HTML-derived DOM identity differs');
     const full={...ref,nodeId,synthetic:ref.synthetic??false,parentId,kind:element?'element':'text',tag:element?node.tagName.toLowerCase():null,text:element?null:node.data,attributes:element?Object.fromEntries([...node.attributes].filter(a=>!a.name.startsWith('data-iam-')).map(a=>[a.name,a.value])):{},children:[]};
-    result.push(full);for(const child of node.childNodes)full.children.push(visit(child,nodeId,depth+1));return nodeId;
+    result.push(full);for(const [i,child]of [...node.childNodes].entries())full.children.push(visit(child,nodeId,depth+1,i));return nodeId;
   }
   if(body.childNodes.length!==1||visit(body.firstChild,null,0)!==document.rootNodeId||index!==document.nodes.length)throw Error('HTML-derived DOM coverage differs');
   return result;
@@ -554,7 +554,21 @@ function expandDomNodes(document, body) {
       document = {...plain, ...decoded};
     }
     if(!Array.isArray(document.nodes)||document.nodes.length>12000)throw Error('Node hash budget');
-    const nodes=expandDomNodes(document,new DOMParser().parseFromString('<!doctype html><html><body>'+document.html+'</body></html>','text/html').body),byId=new Map(nodes.map(node=>[node.nodeId,node]));
+    const body=new DOMParser().parseFromString('<!doctype html><html><body>'+document.html+'</body></html>','text/html').body,textIds=new Map(),pendingText=[];
+    let preorder=0;
+    const collectText=(node,parentId,childIndex=0,depth=0)=>{
+      if(!node||depth>128||preorder>=12000)throw Error('DOM derivation budget');
+      const ref=document.nodes[preorder++];if(!ref)throw Error('Missing source node');
+      const id=node.nodeType===1?node.getAttribute('data-iam-node'):ref.nodeId;
+      if(node.nodeType===3&&!id)pendingText.push({parentId,index:childIndex,key:parentId+':'+childIndex});
+      for(const [i,child]of [...node.childNodes].entries())collectText(child,id,i,depth+1);
+    };
+    collectText(body.firstChild,null);if(preorder!==document.nodes.length)throw Error('Source node count differs');
+    for(let offset=0;offset<pendingText.length;offset+=64){
+      if(pendingDocument!==request)throw Error('Superseded document');
+      await Promise.all(pendingText.slice(offset,offset+64).map(async row=>textIds.set(row.key,'node_'+await hash('iam/identity/node/v1\0'+canonical({page:document.pageKey,parentId:row.parentId,index:row.index,kind:3})))));
+    }
+    const nodes=expandDomNodes(document,body,(_page,parentId,index)=>textIds.get(parentId+':'+index)),byId=new Map(nodes.map(node=>[node.nodeId,node]));
     if(byId.size!==nodes.length)throw Error('Duplicate node');
     for(let offset=0;offset<nodes.length;offset+=64){
       if(pendingDocument!==request)throw Error('Superseded document');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tinkerlandai/indiana-iam",
-  "version": "0.3.0",
+  "version": "0.4.0",
   "description": "Build-time Indiana App Manifest (IAM) generator for Next.js and Vite apps: scans source after the production build and writes the IAM and its release descriptor.",
   "license": "UNLICENSED",
   "repository": {
@@ -32,7 +32,8 @@
     },
     "./next": {
       "types": "./src/next.d.ts",
-      "import": "./src/next.mjs"
+      "import": "./src/next.mjs",
+      "require": "./src/next.cjs"
     },
     "./vite": {
       "types": "./src/vite.d.ts",
@@ -46,21 +47,12 @@
     "ajv": "6.15.0",
     "css-tree": "3.2.1",
     "jsdom": "26.1.0",
+    "lucide-static": "1.34.0",
     "magic-string": "0.30.21",
     "pako": "3.0.2",
+    "sharp": "0.35.5",
     "tailwind-merge": "3.7.0",
     "tailwindcss": "4.3.3",
     "typescript": "5.9.3"
-  },
-  "peerDependencies": {
-    "sharp": "0.35.5"
-  },
-  "peerDependenciesMeta": {
-    "sharp": {
-      "optional": true
-    }
-  },
-  "devDependencies": {
-    "sharp": "0.35.5"
   }
 }