@tinkerlandai/indiana-iam 0.3.0 → 0.5.0

package/README.md

@@ -47,6 +47,13 @@ not import merchant modules to execute them. Source enumeration and optional Git
 the package starts no external commands and works without a Git executable. Developers' explicitly configured
 framework callbacks remain part of their normal build.
 
+Build integrations retain local compiled CSS when a stylesheet contains an external `@import`: the import is omitted
+without making a network request and the manifest records the missing external styles. Inline SVG resources are
+omitted by default during framework builds, with a coverage gap, so an unsupported form icon does not discard the
+stylesheet. Set `omitSvgResources: false` to reject those resources and use the source-style fallback instead.
+Standalone generation keeps its explicit `--omit-svg-resources` option. Compiled previews preserve hidden source
+branches even when application CSS uses `display: flex` or `display: grid`.
+
 ## Vite, React Router and TanStack Router
 
 ```js
@@ -110,15 +117,56 @@ optional command for explicit source annotations. Next and Vite do not need that
 Supported source: Next.js App Router and Pages Router, React Router / single-root React apps built with Vite,
 and statically generated TanStack file-route trees registered with `createRouter({ routeTree })`.
 React Router supports imported static path constants, inline `Component` functions and source-proven lazy import forwarding.
+Data-router `route.lazy` objects support a static module's named `Component`, or a source-proven mapper that captures
+the component export. Mapper factories, imports and business loaders are never executed. Unknown overrides remain gaps.
+Markdown/MDX pages, layouts and local imports retain original routes and source coordinates.
+The pinned Markdown/MDX parsers project headings, lists, GFM tables/tasks, code, links, images and bounded source JSX.
+Merchant MDX compilers/plugins, ESM side effects, arbitrary expressions and active HTML are never executed.
+Generated Markdown markup stays preview-only; custom MDX component mappings and plugin transforms remain gaps.
+CSS Modules retain source-literal default imports, deterministic local preview class names,
+scoped selectors and static declarations, including standard media/supports/container rules.
+Global selectors, resource loads, composition, nested preprocessing and animation definitions stay explicit gaps;
+merchant PostCSS plugins and configuration are never executed. Compiled CSS remains a separate build input.
+Mantine core forms, headings, containers, tables, images and controlled Modal/Drawer visibility have an inert
+semantic HTML profile. Source labels, ordinary form constraints and safe default values are retained;
+password values stay redacted. Theme resolution, responsive object props, portal positioning, focus handling
+and library callbacks remain unobserved. Boolean `useDisclosure` without lifecycle callbacks, controlled Tabs,
+Drawer/Modal close controls and native Accordion folding have bounded local previews. This profile does not
+import Mantine or run its hooks.
+Async source helpers and TanStack queries can expose source-declared literal fixtures, including a source-proven
+timer-only delay. IAM interprets their AST without executing functions, awaiting timers or invoking query callbacks.
+Safe-integer locale formatting uses deterministic English grouping in the source preview.
+Declared `initialData` retains its source initial state; loading/error/network outcomes otherwise stay unknown.
+Only the known frontend `services/api` source path is included; framework API routes, server trees and credentials
+stay outside the scan. Remote data, mutations, impure helpers and ambiguous bindings remain unobserved.
 TanStack reads the registered generated tree, including pathless layouts, index routes and simple `$param` paths;
 custom history/basepath and complex parameter patterns require separate adapters. Loaders, guards, retry/reload behavior
 and runtime data remain unobserved. Unsupported optional React paths are isolated as gaps.
-The complete validated IAM must fit within 8 MiB; oversized projections fail without emitting a truncated artifact.
+React Hook Form Controller callbacks retain their source JSX, including first-party wrappers; field values, validation
+and submissions are not executed. Source-proven Radix overlays and React Transition Group visibility retain their
+initial state. Supported Radix triggers and close controls simulate local state only; unknown controlled states stay
+closed and unobserved. These adapters do not implement portal positioning, focus management or business callbacks.
+Chart.js canvas wrappers and Recharts line/bar/area/pie declarations project bounded literal series as inert SVG.
+Chart modules, effects, formatters and callbacks are not executed. Random/remote/oversized series show an explicit
+unobserved-data placeholder; animation, library layout and tooltips remain outside this source projection.
+Build hooks package only raster images referenced by projected JSX: relative source imports and public build URLs.
+They never crawl unrelated assets or fetch URLs. Files must remain inside the root without symlinks; referenced
+source image bytes participate in release identity. The existing 1 MiB/file, 6 MiB input and 128-asset bounds apply. Referenced rasters over 64 KiB use the bundled sharp 0.35.5 preview profile: auto-orient, fit inside 800×800, WebP quality 90, metadata stripped. Source bytes stay independently hashed; this lossy preview is explicitly reported.
+Standalone generation keeps images unpackaged unless explicit public inputs are supplied.
+Source-proven `useSyncExternalStore` matchMedia getters retain both typed viewport branches and follow the preview
+viewport. Subscriptions are not run. UI preference cookies with an explicit source SSR guard use an empty-cookie
+preview; auth/session cookies and arbitrary stores stay unobserved. Pure lazy local-state initializers are interpreted
+under the same bounded rules; merchant callbacks and browser storage are never executed or read.
+IAM has no configured page, node or total artifact byte limit. The exporter retains every supported route.
 Large artifacts store sizeable HTML/preorder-map pairs as `domPayload` (`gzip-json-v1`), while keeping `html: ""`
 and `nodes: []` in that document's wire record. This lossless storage encoding preserves all source IDs, DOM values,
-HTML/DOM hashes and targets. The document hash pins its encoded storage body; decoding is local and bounded to
-8 MiB per payload and 32 MiB in aggregate. The final IAM file limit stays 8 MiB. Exported page HTML is expanded.
-Use the matching 0.3 generator, validator and viewer together. Indiana ingestion/viewer sources must be updated
+HTML/DOM hashes and targets. Route navigation stores the exact interaction-array index instead of repeating its ID; validation checks node, route, destination and parameters. Source files retain their full hashes; component/element records cover reachable route compositions and shared fragments. Text node IDs that follow the original parent/index identity formula are derived locally instead of repeated; explicit exceptions remain stored, and every resolved source-map hash is checked. The document hash pins its encoded storage body; decoding is local and checks the exact declared size and hashes. Exported page HTML is expanded.
+The standalone viewer embeds only its route directory and hash-pinned document references. It reads and expands
+the selected document on demand, cancels superseded reads and retains one expanded page. Derived page files
+come from the complete validated IAM; the complete JSON remains the source of release identity.
+Serve the output directory over loopback HTTP to open `index.html`; browser `file://` restrictions prevent
+on-demand reads of its document files. Serving the exported files does not run the App or its backend.
+Use the matching 0.4 generator, validator and viewer together. Indiana ingestion/viewer sources must be updated
 before uploading compressed artifacts; publishing this npm package alone does not deploy Indiana. The offline
 viewer uses the browser's built-in `DecompressionStream` and never fetches a decoder or merchant content.
 The scanner reads source files only; it never runs your build, imports your code or reads env files. Only the upload
@@ -151,7 +199,35 @@ The Console App map groups pages into areas, shows recorded navigation, and open
 opening a page editor. Thumbnails are static source projections. They do not execute authentication, data loaders,
 form submissions or application code.
 
-Optional static attributes preserve product intent that cannot be established from a URL alone:
+The optional `routeTree.ui` index records source UI alternatives, controlled Base UI Tabs (including first-party
+wrappers and context), and conditional redirect/return recipes. A recipe follows the actual React Router location
+through a URL query writer to a matching query-consuming `Navigate`; a password input at the destination identifies
+the login UI. The index never infers authentication from a route name or certifies a successful login. Dynamic
+callbacks, unresolved registries and external data remain coverage gaps. Finite first-party component registries
+retain their source labels and scope qualifiers in `ui.regions`; selecting an alternative is a preview assumption.
+Local JSX aliases and invoked JSX render props can preserve page content without executing their modules or callbacks.
+
+Unknown branches stay hidden in the admitted document. The shared `previewIamUiDocument` helper can select inert
+source alternatives and typed local state for thumbnail inspection. It returns the selected conditions and source
+locations. Controlled overlays with unknown `open` values stay closed until explicitly selected for inspection.
+These preview choices never change render discriminators, editable targets, the manifest or runtime permissions.
+`iamTabUiScenes` dispatches the recorded scalar Tab transitions to derive before/after preview states and directed
+edges. It includes content controlled outside the Tab root within the same source component or overlay. Every edge
+retains the transition, state writes and source locations. Missing collections remain gaps rather than sample rows.
+Finite Tab-dependent literal collections use shared `ui.fragments` and concrete `ui.collections` mounts. Their
+source element references, item counts, Tab cases and required local values remain pinned; derived rows are inert
+and never become SDK edit targets. The Lucide adapter reads geometry from pinned `lucide-static` 1.34.0 JSON,
+without loading merchant packages. Unknown filter combinations remain unobserved rather than reusing stale rows.
+Finite source-derived Tab classes, search placeholders and accessible labels share `ui.attributeSets`; concrete
+mounts in `ui.attributes` apply only the recorded presentation properties. Fragment class and element dictionaries
+preserve their exact authored values. Repeated graph source locations and instance scope names use lossless
+`sourcePool` / `scopePool` references; source hashes, state identities and per-instance state remain unchanged.
+Unexecuted query status/result branches and unresolved scalar alternatives display explicit unobserved annotations;
+preview does not select a loading, failed or empty result automatically. Literal empty source catalogs remain valid.
+Static thumbnail crops can focus on the page body or a source node using a bounded viewport; they retain authored
+descendants and never introduce scripts, frames or remote resources.
+
+Optional static attributes preserve product intent that cannot be established from source dataflow alone:
 
 | Attribute                                          | Location                                 | Meaning                                                                                                           |
 | -------------------------------------------------- | ---------------------------------------- | ----------------------------------------------------------------------------------------------------------------- |

package/assets/document-controller.js

@@ -7,9 +7,18 @@
     const model = document.querySelector('[data-iam-adapter="' + name + '"]');
     if (model) root.className = model.getAttribute("class") || "";
   }
-  let machine = null;
+  let machine = null, activeTabs = [],sourceUi=null,sourceRenderKey=null;
   const patches = new Map();
   const node = id => [...document.querySelectorAll("[data-iam-node]")].find(e => e.dataset.iamNode === id);
+  function viewportValues(graph,routeKey,renderKey){
+    const values={};for(const variable of graph.variables??[]){
+      if(variable.routeKey!==routeKey||variable.renderKey!==(renderKey??graph.routes.find(r=>r.routeKey===routeKey)?.initialRenderKey)||variable.valueType!=='boolean')continue;
+      const match=/^@media (\((?:max|min)-width: [1-9]\d{1,3}px\))$/.exec(variable.label);
+      if(match)values[variable.variableKey]=matchMedia(match[1]).matches;
+    }return values;
+  }
+  let viewportGraph=null,viewportRoute=null,viewportRender=null;
+  addEventListener('resize',()=>{if(machine&&viewportGraph){machine.preview(viewportValues(viewportGraph,viewportRoute,viewportRender));renderState();}});
   function renderState() {
     if (!machine) return;
     for (const binding of machine.bindings()) {
@@ -19,6 +28,11 @@
       else if (binding.property === "text") el.textContent = String(binding.value);
       else el[binding.property] = binding.value;
     }
+    const values=machine.snapshot();
+    for(const tab of activeTabs){const selected=tab.variableKey?values[tab.variableKey]:tab.initialValue;for(const item of tab.items)node(item.nodeId)?.setAttribute('aria-selected',String(item.value===selected));}
+    applySourceAttributes(document,sourceUi,sourceRenderKey,values);
+    applySourceCollections(document,sourceUi,sourceRenderKey,values,true);
+    markUnobservedData(document,sourceUi,true);
     for (const patch of patches.values()) applyPatch(patch);
   }
   function applyPatch(data) {
@@ -78,7 +92,10 @@
       channel = data.nonce;
       if (data.graph && typeof data.routeKey === "string") {
         machine = createStateMachine(data.graph, data.routeKey, data.renderKey);
+        viewportGraph=data.graph;viewportRoute=data.routeKey;viewportRender=data.renderKey;machine.preview(viewportValues(data.graph,data.routeKey,data.renderKey));
         const renderKey = data.renderKey ?? data.graph.routes.find(route => route.routeKey === data.routeKey)?.initialRenderKey;
+        sourceUi=data.graph.ui;sourceRenderKey=renderKey;
+        activeTabs = (data.graph.ui?.tabs??[]).filter(t=>t.routeKey===data.routeKey&&t.renderKey===renderKey);
         activeTransitions = data.graph.transitions.filter(t => t.routeKey === data.routeKey && t.renderKey === renderKey);
         renderState();
       }

package/assets/document-runtime.js

@@ -76,6 +76,177 @@ function createStateMachine(graph, routeKey, renderKey) {
   };
 }
 
+function checkedCollectionFragment(doc, fragment) {
+  if (
+    typeof fragment?.html !== "string" ||
+    fragment.html.length > 262144 ||
+    !Array.isArray(fragment.elementKeys) ||
+    !Array.isArray(fragment.sourceElements) ||
+    !Array.isArray(fragment.classNames) ||
+    fragment.sourceElements.length > 2000 ||
+    fragment.classNames.length > 128 ||
+    fragment.classNames.some((s) => typeof s !== "string" || s.length > 4000) ||
+    fragment.elementKeys.some(
+      (i) =>
+        !Number.isInteger(i) || i < 0 || i >= fragment.sourceElements.length,
+    ) ||
+    fragment.elementKeys.length > 2000
+  )
+    throw Error("Invalid shared source fragment");
+  const template = doc.createElement("template");
+  template.innerHTML = fragment.html;
+  const nodes = [...template.content.querySelectorAll("*")],
+    allowed = new Set(
+      "div span p button input svg path circle rect line polyline polygon ellipse g title".split(
+        " ",
+      ),
+    );
+  if (nodes.length !== fragment.elementKeys.length)
+    throw Error("Shared source fragment mapping mismatch");
+  for (const node of nodes) {
+    if (node.hasAttribute("data-iam-fragment-class")) {
+      const raw = node.getAttribute("data-iam-fragment-class"),
+        index = Number(raw);
+      if (
+        String(index) !== raw ||
+        !Number.isInteger(index) ||
+        index < 0 ||
+        index >= fragment.classNames.length
+      )
+        throw Error("Invalid source fragment class");
+      node.setAttribute("class", fragment.classNames[index]);
+      node.removeAttribute("data-iam-fragment-class");
+    }
+    if (!allowed.has(node.tagName.toLowerCase()))
+      throw Error("Active shared source fragment element");
+    for (const attr of node.attributes)
+      if (
+        !/^(?:class|title|type|value|placeholder|disabled|hidden|checked|tabindex|width|height|viewBox|viewbox|xmlns|d|fill|stroke|stroke-width|stroke-linecap|stroke-linejoin|cx|cy|r|rx|ry|x|y|x1|x2|y1|y2|points|aria-[a-z-]+|data-(?:slot|state|active|disabled|pressed))$/.test(
+          attr.name,
+        )
+      )
+        throw Error("Active shared source fragment attribute: " + attr.name);
+    for (const key of ["fill", "stroke"])
+      if (
+        node.hasAttribute(key) &&
+        !/^(?:none|currentColor|transparent|#[a-f\d]{3,8})$/i.test(
+          node.getAttribute(key),
+        )
+      )
+        throw Error("External source fragment paint");
+    if (
+      node.hasAttribute("xmlns") &&
+      node.getAttribute("xmlns") !== "http://www.w3.org/2000/svg"
+    )
+      throw Error("Invalid source fragment namespace");
+  }
+  return { content: template.content, nodes };
+}
+function applySourceAttributes(doc, ui, renderKey, values) {
+  const sets = new Map((ui?.attributeSets ?? []).map((s) => [s.setKey, s])),
+    nodes = new Map(
+      [...doc.querySelectorAll("[data-iam-node]")].map((n) => [
+        n.getAttribute("data-iam-node"),
+        n,
+      ]),
+    );
+  for (const row of ui?.attributes ?? []) {
+    if (row.renderKey !== renderKey) continue;
+    const set = sets.get(row.setKey),
+      node = nodes.get(row.nodeId),
+      chosen = set?.cases.find((c) => c.value === values[row.variableKey]);
+    if (!node || !chosen) continue;
+    if (
+      !["class", "placeholder", "aria-label"].includes(set.property) ||
+      typeof chosen.text !== "string" ||
+      chosen.text.length > 4000
+    )
+      throw Error("Invalid source presentation attribute");
+    node.setAttribute(set.property, chosen.text);
+  }
+}
+function applySourceCollections(doc, ui, renderKey, values, enabled) {
+  const choices = [],
+    fragments = new Map((ui?.fragments ?? []).map((f) => [f.fragmentKey, f]));
+  for (const row of ui?.collections ?? []) {
+    if (row.renderKey !== renderKey) continue;
+    const root = [...doc.querySelectorAll("[data-iam-node]")].find(
+      (n) => n.getAttribute("data-iam-node") === row.nodeId,
+    );
+    if (!root) continue;
+    root.replaceChildren();
+    if (!enabled) continue;
+    if (root.parentElement?.closest("[hidden]")) continue;
+    const selected = row.cases.find((c) => c.value === values[row.variableKey]),
+      satisfied = row.requires.every((r) => values[r.variableKey] === r.value);
+    root.hidden = false;
+    root.setAttribute("inert", "");
+    if (!selected || !satisfied) {
+      root.textContent = "未观测 · 此筛选组合未重建";
+      root.setAttribute("data-iam-observation", "unobserved-collection");
+      continue;
+    }
+    const fragment = fragments.get(selected.fragmentKey);
+    if (!fragment) throw Error("Missing source collection fragment");
+    const parsed = checkedCollectionFragment(doc, fragment);
+    root.replaceChildren(parsed.content);
+    parsed.nodes.forEach((n, index) => {
+      n.setAttribute("data-iam-preview-only", "true");
+      n.setAttribute(
+        "data-iam-source-element",
+        fragment.sourceElements[fragment.elementKeys[index]],
+      );
+    });
+    choices.push({
+      collectionKey: row.collectionKey,
+      value: selected.value,
+      itemCount: fragment.itemCount,
+      source: row.source,
+    });
+  }
+  return choices;
+}
+function markUnobservedData(doc, ui, enabled, selections = new Map()) {
+  doc.querySelectorAll("[data-iam-preview-note]").forEach((n) => n.remove());
+  const unobserved = [];
+  if (!enabled) return unobserved;
+  const source = new Map(
+    (ui?.conditions ?? []).map((c) => [c.conditionKey, c]),
+  );
+  for (const root of doc.querySelectorAll(
+    '[data-iam-condition][data-iam-alternative="true"]',
+  )) {
+    const condition = source.get(root.getAttribute("data-iam-condition")),
+      id = root.getAttribute("data-iam-node");
+    if (!condition?.observation || selections.has(id)) continue;
+    const note = doc.createElement("div");
+    note.setAttribute("data-iam-preview-note", "unobserved");
+    note.className = "iam-observation-note";
+    note.setAttribute("role", "status");
+    note.textContent =
+      condition.observation === "remote" ? "远程数据未观测" : "数据未观测";
+    note.title = condition.expression;
+    root.before(note);
+    if (!note.closest("[hidden]"))
+      unobserved.push({
+        groupKey: id,
+        expression: condition.expression,
+        source: condition.source,
+      });
+  }
+  for (const root of doc.querySelectorAll(
+    '[data-iam-observation="remote"],[data-iam-observation="unobserved"]',
+  )) {
+    root.hidden = false;
+    root.textContent = "未观测";
+    root.classList.add("iam-unobserved-value");
+  }
+  for (const field of doc.querySelectorAll("[data-iam-input-unobserved]")) {
+    field.setAttribute("placeholder", "未观测");
+    field.setAttribute("title", "此字段的数据未观测");
+  }
+  return unobserved;
+}
 /* Indiana UI simulation runtime 0.2.0. No merchant code, requests, authentication or purchases. */
 (() => {
   "use strict";
@@ -85,9 +256,18 @@ function createStateMachine(graph, routeKey, renderKey) {
     const model = document.querySelector('[data-iam-adapter="' + name + '"]');
     if (model) root.className = model.getAttribute("class") || "";
   }
-  let machine = null;
+  let machine = null, activeTabs = [],sourceUi=null,sourceRenderKey=null;
   const patches = new Map();
   const node = id => [...document.querySelectorAll("[data-iam-node]")].find(e => e.dataset.iamNode === id);
+  function viewportValues(graph,routeKey,renderKey){
+    const values={};for(const variable of graph.variables??[]){
+      if(variable.routeKey!==routeKey||variable.renderKey!==(renderKey??graph.routes.find(r=>r.routeKey===routeKey)?.initialRenderKey)||variable.valueType!=='boolean')continue;
+      const match=/^@media (\((?:max|min)-width: [1-9]\d{1,3}px\))$/.exec(variable.label);
+      if(match)values[variable.variableKey]=matchMedia(match[1]).matches;
+    }return values;
+  }
+  let viewportGraph=null,viewportRoute=null,viewportRender=null;
+  addEventListener('resize',()=>{if(machine&&viewportGraph){machine.preview(viewportValues(viewportGraph,viewportRoute,viewportRender));renderState();}});
   function renderState() {
     if (!machine) return;
     for (const binding of machine.bindings()) {
@@ -97,6 +277,11 @@ function createStateMachine(graph, routeKey, renderKey) {
       else if (binding.property === "text") el.textContent = String(binding.value);
       else el[binding.property] = binding.value;
     }
+    const values=machine.snapshot();
+    for(const tab of activeTabs){const selected=tab.variableKey?values[tab.variableKey]:tab.initialValue;for(const item of tab.items)node(item.nodeId)?.setAttribute('aria-selected',String(item.value===selected));}
+    applySourceAttributes(document,sourceUi,sourceRenderKey,values);
+    applySourceCollections(document,sourceUi,sourceRenderKey,values,true);
+    markUnobservedData(document,sourceUi,true);
     for (const patch of patches.values()) applyPatch(patch);
   }
   function applyPatch(data) {
@@ -156,7 +341,10 @@ function createStateMachine(graph, routeKey, renderKey) {
       channel = data.nonce;
       if (data.graph && typeof data.routeKey === "string") {
         machine = createStateMachine(data.graph, data.routeKey, data.renderKey);
+        viewportGraph=data.graph;viewportRoute=data.routeKey;viewportRender=data.renderKey;machine.preview(viewportValues(data.graph,data.routeKey,data.renderKey));
         const renderKey = data.renderKey ?? data.graph.routes.find(route => route.routeKey === data.routeKey)?.initialRenderKey;
+        sourceUi=data.graph.ui;sourceRenderKey=renderKey;
+        activeTabs = (data.graph.ui?.tabs??[]).filter(t=>t.routeKey===data.routeKey&&t.renderKey===renderKey);
         activeTransitions = data.graph.transitions.filter(t => t.routeKey === data.routeKey && t.renderKey === renderKey);
         renderState();
       }

package/assets/viewer.js

@@ -119,6 +119,11 @@ async function mountIamViewer(m, consoleContext) {
   }
   document.body.dataset.panel = "canvas";
   $("viewport").value = String(viewport);
+  const inlineDocuments=new Map(m.documents.map(document=>[document.documentKey,document]));
+  const localDocumentFiles=new Map((m.documentFiles??[]).map(file=>[file.documentKey,file]));
+  const directoryInteractions=m.interactions;
+  const expandedDocuments=new WeakSet();
+  let localRead=null;
   const changes = new Map(), baseline = new Map(), originalValues = new Map(), localValues = new Map(), savedViews = new Map(), seededViews = new Set();
   let baselineLoaded = false;
   let pendingDocument=null,projectionReadOnly=false,retryOpen=null;
@@ -208,7 +213,7 @@ async function mountIamViewer(m, consoleContext) {
   $("commit").textContent = "";
   $("page-count").textContent = m.pages.length;
   $("summary").textContent =
-    `${m.pages.length} ${tr("页面")} · ${m.components.length} ${tr("组件")} · ${consoleContext?.catalog?.nodeCount??m.documents.reduce((n, d) => n + d.nodes.length, 0)} ${tr("DOM 节点")}`;
+    `${m.pages.length} ${tr("页面")} · ${m.summary?.components??m.components.length} ${tr("组件")} · ${consoleContext?.catalog?.nodeCount??m.summary?.nodes??m.documents.reduce((n, d) => n + d.nodes.length, 0)} ${tr("DOM 节点")}`;
   $("gap-count").textContent = `${consoleContext?.catalog?.gapCount??m.coverage.gaps.length} ${iamEnglish ? "coverage gaps" : "项缺口已记录"}`;
   $("coverage-description").textContent =
     tr("这是从 App 源码生成的 HTML/CSS/JS 投影。未运行原应用；动态数据、鉴权状态、字体与第三方组件可能不完整。只有明确提取的界面状态可模拟。");
@@ -299,13 +304,49 @@ async function mountIamViewer(m, consoleContext) {
       "<\/script>" + (keyboard ? "<script>" + keyboard.js.replaceAll("</script", "<\\/script") + "<\/script>" : "") + "</body></html>"
     );
   }
-  function openPage(next, targetUrl = next.route, renderKey, historyMove=null) {
+  async function openPage(next, targetUrl = next.route, renderKey, historyMove=null) {
     if (consoleContext) targetUrl = viewUrl(targetUrl);
     retryOpen={pageKey:next.pageKey,targetUrl,renderKey,historyMove};
     if(consoleContext)consoleContext.documentReady=false;
     const nextRender=m.routeTree.renders.find(render=>render.routeKey===next.pageKey&&render.renderKey===(renderKey??m.routeTree.routes.find(route=>route.routeKey===next.pageKey).initialRenderKey));
     if (!nextRender) throw Error("Unknown preview render");
-    const nextDocument=byId(m.documents,"documentKey",nextRender.documentKey);
+    let nextDocument=byId(m.documents,"documentKey",nextRender.documentKey);
+    if(!consoleContext || consoleContext.mode!=="documents"){
+      localRead?.abort();localRead=null;pendingDocument=null;
+      if(!nextDocument||!expandedDocuments.has(nextDocument)){
+        const request={pageKey:next.pageKey,renderKey:nextRender.renderKey};
+        const controller=new AbortController();localRead=controller;pendingDocument=request;
+        $("document-status").textContent=tr("正在打开页面资料…");$("export").disabled=true;
+        try{
+          const file=localDocumentFiles.get(nextRender.documentKey);
+          if(file){
+            if(!/^document_[a-f0-9]{64}$/.test(file.documentKey)||!/^[a-f0-9]{64}$/.test(file.sha256)||!Number.isSafeInteger(file.bytes)||file.bytes<1)throw Error("Invalid local document reference");
+            const response=await fetch(new URL('documents/'+file.documentKey+'/material.json',location.href),{signal:controller.signal});
+            if(!response.ok)throw Error("Local document unavailable");
+            const bytes=await response.arrayBuffer();
+            if(bytes.byteLength!==file.bytes)throw Error("Local document size mismatch");
+            const actual=[...new Uint8Array(await crypto.subtle.digest('SHA-256',bytes))].map(b=>b.toString(16).padStart(2,'0')).join('');
+            if(actual!==file.sha256)throw Error("Local document digest mismatch");
+            const material=JSON.parse(new TextDecoder('utf-8',{fatal:true}).decode(bytes));
+            const stored=material.document;
+            if(stored.documentKey!==nextRender.documentKey||stored.pageKey!==next.pageKey||stored.hashes.document!==nextRender.documentHash)throw Error("Local document scope mismatch");
+            const expanded=await expandNodeHashes(stored,request);
+            if(pendingDocument!==request)return;
+            for(const key of ['elements','styles','assets','scripts','components','interactions'])m[key]=material[key];
+            activeGraph=material.routeTree;m.routeTree={...activeGraph,routes:m.routeTree.routes,renders:m.routeTree.renders};expandedDocuments.add(expanded);m.documents=[expanded];
+          }else{
+            const stored=inlineDocuments.get(nextRender.documentKey);if(!stored)throw Error("Missing local document");
+            const expanded=await expandNodeHashes(stored,request);
+            if(pendingDocument!==request)return;
+            expandedDocuments.add(expanded);m.documents=[expanded];
+          }
+          pendingDocument=null;localRead=null;nextDocument=m.documents[0];
+        }catch(error){
+          if(pendingDocument===request){pendingDocument=null;localRead=null;$("document-status").textContent=tr("页面资料校验失败，请重新打开此版本。");toast(tr("页面资料校验失败，请重新打开此版本。"));}
+          return;
+        }
+      }
+    }
     if(!nextDocument&&consoleContext?.mode==="documents"){
       pendingDocument={requestId:crypto.randomUUID(),pageKey:next.pageKey,renderKey:nextRender.renderKey,targetUrl,historyMove,documentKey:nextRender.documentKey,documentHash:nextRender.documentHash};
       $("document-status").textContent=tr("正在打开页面资料…");$("export").disabled=true;
@@ -493,12 +534,12 @@ async function mountIamViewer(m, consoleContext) {
 function checkedDomPayload(document) {
   const payload = document.domPayload;
   if (!payload) return null;
-  if (document.html !== "" || !Array.isArray(document.nodes) || document.nodes.length || Object.keys(payload).sort().join(",") !== "bytes,data,encoding" || payload.encoding !== "gzip-json-v1" || !Number.isSafeInteger(payload.bytes) || payload.bytes < 1 || payload.bytes > 8_388_608 || typeof payload.data !== "string" || !payload.data.length || payload.data.length > 11_184_812 || payload.data.length % 4 !== 0 || !/^[A-Za-z0-9+/]*={0,2}$/.test(payload.data)) throw Error("Invalid compressed DOM payload");
+  if (document.html !== "" || !Array.isArray(document.nodes) || document.nodes.length || Object.keys(payload).sort().join(",") !== "bytes,data,encoding" || payload.encoding !== "gzip-json-v1" || !Number.isSafeInteger(payload.bytes) || payload.bytes < 1 || typeof payload.data !== "string" || !payload.data.length || payload.data.length % 4 !== 0 || !/^[A-Za-z0-9+/]*={0,2}$/.test(payload.data)) throw Error("Invalid compressed DOM payload");
   return payload;
 }
 function parsedDomPayload(text) {
   const value = JSON.parse(text);
-  if (!value || Object.keys(value).sort().join(",") !== "html,nodes" || typeof value.html !== "string" || value.html.length > 2_000_000 || !value.html.isWellFormed() || !Array.isArray(value.nodes) || value.nodes.length > 12000 || JSON.stringify(value) !== text) throw Error("Invalid expanded DOM payload");
+  if (!value || Object.keys(value).sort().join(",") !== "html,nodes" || typeof value.html !== "string" || !value.html.isWellFormed() || !Array.isArray(value.nodes) || JSON.stringify(value) !== text) throw Error("Invalid expanded DOM payload");
   return value;
 }
 async function documentDomBrowser(document) {
@@ -528,17 +569,17 @@ async function documentDomBrowser(document) {
 }
   /* END COMPRESSED DOM */
   /* BEGIN HTML DOM DERIVATION */
-function expandDomNodes(document, body) {
-  if(document.nodeEncoding!=='html-preorder-v1'||document.nodeHashMode!=='derived-v1'||!document.sourceMappingsHash||document.nodes.length>12000)throw Error('Invalid HTML-derived DOM mode');
+function expandDomNodes(document, body, deriveTextId) {
+  if(document.nodeEncoding!=='html-preorder-v1'||document.nodeHashMode!=='derived-v1'||!document.sourceMappingsHash)throw Error('Invalid HTML-derived DOM mode');
   let index=0;const result=[];
-  function visit(node,parentId,depth){
+  function visit(node,parentId,depth,childIndex=0){
     if(depth>128||![1,3].includes(node.nodeType))throw Error('Invalid HTML-derived DOM structure');
     const ref=document.nodes[index++];
     if(!ref||Object.keys(ref).some(key=>!['nodeId','elementKey','source','synthetic'].includes(key)))throw Error('Mixed HTML-derived DOM values');
-    const element=node.nodeType===1,nodeId=element?node.getAttribute('data-iam-node'):ref.nodeId;
+    const element=node.nodeType===1,nodeId=element?node.getAttribute('data-iam-node'):ref.nodeId??deriveTextId?.(document.pageKey,parentId,childIndex);
     if(!/^node_[a-f0-9]{64}$/.test(nodeId??'')||element&&Object.hasOwn(ref,'nodeId')||Object.hasOwn(ref,'synthetic')&&ref.synthetic!==true)throw Error('HTML-derived DOM identity differs');
     const full={...ref,nodeId,synthetic:ref.synthetic??false,parentId,kind:element?'element':'text',tag:element?node.tagName.toLowerCase():null,text:element?null:node.data,attributes:element?Object.fromEntries([...node.attributes].filter(a=>!a.name.startsWith('data-iam-')).map(a=>[a.name,a.value])):{},children:[]};
-    result.push(full);for(const child of node.childNodes)full.children.push(visit(child,nodeId,depth+1));return nodeId;
+    result.push(full);for(const [i,child]of [...node.childNodes].entries())full.children.push(visit(child,nodeId,depth+1,i));return nodeId;
   }
   if(body.childNodes.length!==1||visit(body.firstChild,null,0)!==document.rootNodeId||index!==document.nodes.length)throw Error('HTML-derived DOM coverage differs');
   return result;
@@ -553,8 +594,22 @@ function expandDomNodes(document, body) {
       const {domPayload, ...plain} = document;
       document = {...plain, ...decoded};
     }
-    if(!Array.isArray(document.nodes)||document.nodes.length>12000)throw Error('Node hash budget');
-    const nodes=expandDomNodes(document,new DOMParser().parseFromString('<!doctype html><html><body>'+document.html+'</body></html>','text/html').body),byId=new Map(nodes.map(node=>[node.nodeId,node]));
+    if(!Array.isArray(document.nodes))throw Error('Node hash budget');
+    const body=new DOMParser().parseFromString('<!doctype html><html><body>'+document.html+'</body></html>','text/html').body,textIds=new Map(),pendingText=[];
+    let preorder=0;
+    const collectText=(node,parentId,childIndex=0,depth=0)=>{
+      if(!node||depth>128)throw Error('DOM derivation budget');
+      const ref=document.nodes[preorder++];if(!ref)throw Error('Missing source node');
+      const id=node.nodeType===1?node.getAttribute('data-iam-node'):ref.nodeId;
+      if(node.nodeType===3&&!id)pendingText.push({parentId,index:childIndex,key:parentId+':'+childIndex});
+      for(const [i,child]of [...node.childNodes].entries())collectText(child,id,i,depth+1);
+    };
+    collectText(body.firstChild,null);if(preorder!==document.nodes.length)throw Error('Source node count differs');
+    for(let offset=0;offset<pendingText.length;offset+=64){
+      if(pendingDocument!==request)throw Error('Superseded document');
+      await Promise.all(pendingText.slice(offset,offset+64).map(async row=>textIds.set(row.key,'node_'+await hash('iam/identity/node/v1\0'+canonical({page:document.pageKey,parentId:row.parentId,index:row.index,kind:3})))));
+    }
+    const nodes=expandDomNodes(document,body,(_page,parentId,index)=>textIds.get(parentId+':'+index)),byId=new Map(nodes.map(node=>[node.nodeId,node]));
     if(byId.size!==nodes.length)throw Error('Duplicate node');
     for(let offset=0;offset<nodes.length;offset+=64){
       if(pendingDocument!==request)throw Error('Superseded document');
@@ -581,12 +636,12 @@ function expandDomNodes(document, body) {
       const request=pendingDocument;
       try{
         const projection=data.projection;
-        if(projection?.format!=="indiana-document-projection"||projection.schemaVersion!==2||projection.versionId!==consoleContext.versionId||projection.manifestDigest!==consoleContext.manifestDigest||projection.pageKey!==request.pageKey||projection.renderKey!==(request.renderKey??null)||projection.documentKey!==request.documentKey||projection.documentHash!==request.documentHash||typeof projection.payload!=="string"||projection.payload.length>8388608)throw Error("Projection scope mismatch");
+        if(projection?.format!=="indiana-document-projection"||projection.schemaVersion!==2||projection.versionId!==consoleContext.versionId||projection.manifestDigest!==consoleContext.manifestDigest||projection.pageKey!==request.pageKey||projection.renderKey!==(request.renderKey??null)||projection.documentKey!==request.documentKey||projection.documentHash!==request.documentHash||typeof projection.payload!=="string")throw Error("Projection scope mismatch");
         const material=JSON.parse(projection.payload),document=material.document;
         const {hashes,...body}=document;
         if(document.documentKey!==request.documentKey||document.pageKey!==request.pageKey||hashes.document!==request.documentHash||await hash("iam/document/v1\0"+canonical(body))!==request.documentHash)throw Error("Projection document hash mismatch");
         const provided = new Map();
-        if (!Array.isArray(material.resourceRefs) || material.resourceRefs.length > 2048) throw Error("Invalid preview resources");
+        if (!Array.isArray(material.resourceRefs)) throw Error("Invalid preview resources");
         for (const kind of ["styles","assets","scripts"]) {
           if (!Array.isArray(material[kind])) throw Error("Invalid preview resource kind");
           for (const value of material[kind]) {
@@ -602,7 +657,6 @@ function expandDomNodes(document, body) {
           if(!entry||entry.kind!==ref.kind)throw Error("Missing preview resource");
           resolved.set(ref.hash,entry);
         }
-        if([...resolved.values()].reduce((bytes,entry)=>bytes+entry.bytes,0)>8_388_608)throw Error("Preview resource byte budget");
         for (const kind of ["styles","assets","scripts"]) material[kind]=[...resolved.values()].filter(entry=>entry.kind===kind).map(entry=>entry.value);
         const script=document.scriptKey?material.scripts.find(script=>script.scriptKey===document.scriptKey):{js:document.js,sha256:hashes.js};
         if(!script||!consoleContext.reviewedRuntimeHashes.includes(script.sha256)||await hash(script.js)!==script.sha256||document.scriptKey&&document.scriptKey!=="script_"+script.sha256)throw Error("Unreviewed preview runtime");
@@ -615,7 +669,7 @@ function expandDomNodes(document, body) {
         if(consoleContext.catalog)m.routeTree={...material.routeTree,routes:consoleContext.catalog.routes,renders:consoleContext.catalog.renders};
         const expanded=await expandNodeHashes(document,request);
         if(pendingDocument!==request)return;
-        m.documents=[expanded];projectionReadOnly=projection.readOnly;pendingDocument=null;
+        expandedDocuments.add(expanded);m.documents=[expanded];projectionReadOnly=projection.readOnly;pendingDocument=null;
         openPage(m.pages.find(page=>page.pageKey===request.pageKey),request.targetUrl,request.renderKey,request.historyMove);
       }catch{if(pendingDocument===request){pendingDocument=null;projectionReadOnly=true;renderSaveCount();parent.postMessage({channel:"indiana-iam-console-v1",nonce:consoleContext.nonce,versionId:consoleContext.versionId,type:"error"},"*");}}
       return;
@@ -790,9 +844,9 @@ function expandDomNodes(document, body) {
         text("strong", p.route),
         text(
           "small",
-          p.componentKeys.length +
+          (p.componentCount??p.componentKeys.length) +
             tr(" 组件 · ") +
-            p.stateKeys.length +
+            (p.stateCount??p.stateKeys.length) +
             tr(" 状态候选"),
         ),
       );
@@ -800,7 +854,7 @@ function expandDomNodes(document, body) {
       const links = text("div", "", "map-targets"),
         ids = [
           ...new Set(
-            m.interactions
+            directoryInteractions
               .filter((i) => i.pageKey === p.pageKey && i.targetPageKey)
               .map((i) => i.targetPageKey),
           ),
@@ -825,9 +879,9 @@ function expandDomNodes(document, body) {
       format: "indiana-local-preview-changes",
       schemaVersion: 1,
       sourceGraphDigest: m.release.sourceGraphDigest,
-      manifestDocumentHashes: m.documents.map((d) => ({
-        documentKey: d.documentKey,
-        hash: d.hashes.document,
+      manifestDocumentHashes: m.routeTree.renders.map((row) => ({
+        documentKey: row.documentKey,
+        hash: row.documentHash,
       })),
       changes: [...changes.values()],
       scope: "local_preview_only",
@@ -845,19 +899,7 @@ function expandDomNodes(document, body) {
     toast(tr("导出本地 JSON；未保存到服务器或应用到商户。"));
   });
   renderNav();
-  if (m.documents.length) {
-    const initialRequest = {};
-    pendingDocument = initialRequest;
-    const expandedBytes = m.documents.reduce((total, document) => total + (document.domPayload?.bytes ?? new TextEncoder().encode(JSON.stringify({html:document.html,nodes:document.nodes})).byteLength), 0);
-    if (!Number.isSafeInteger(expandedBytes) || expandedBytes > 33_554_432) throw Error("Expanded DOM aggregate byte budget exceeded");
-    // Sequential decoding bounds peak memory for a multi-route artifact.
-    const expandedDocuments = [];
-    for (const document of m.documents) expandedDocuments.push(await expandNodeHashes(document, initialRequest));
-    m.documents = expandedDocuments;
-    pendingDocument = null;
-    renderNav();
-  }
-  openPage(page,consoleContext?.initialPage?.url??page.route,consoleContext?.initialPage?.renderKey??consoleContext?.catalog?.graph.variables.find(variable=>variable.id===consoleContext.initialPage?.variableKey)?.renderKey);
+  await openPage(page,consoleContext?.initialPage?.url??page.route,consoleContext?.initialPage?.renderKey??consoleContext?.catalog?.graph.variables.find(variable=>variable.id===consoleContext.initialPage?.variableKey)?.renderKey);
 }
 (async () => {
   const data = JSON.parse(document.getElementById("iam-data").textContent);
@@ -894,7 +936,7 @@ function expandDomNodes(document, body) {
         const model={format:"indiana-preview-material",schemaVersion:1,app:{name:catalog.appName},release:{sourceGraphDigest:catalog.sourceGraphDigest},pages:catalog.routes.map(route=>({pageKey:route.routeKey,route:route.path,title:route.path,documentKeys:[route.documentKey],stateKeys:[],componentKeys:[]})),documents:[],elements:[],components:[],interactions:[],styles:[],scripts:[],assets:[],coverage:{gaps:[]},routeTree:{schemaVersion:catalog.renderIndexVersion,routes:catalog.routes,renders:catalog.renders,variables:catalog.graph.variables.map(variable=>({variableKey:variable.id,routeKey:variable.routeId,renderKey:variable.renderKey})),states:[],transitions:[],bindings:[],targets:[],navigation:[]}};
         await mountIamViewer(model,context);loading.hidden=true;document.querySelector(".workspace").hidden=false;return;
       }
-      if (!(message.bytes instanceof Uint8Array) || message.bytes.byteLength !== context.bytes || message.bytes.byteLength > 8388608) throw new Error("Invalid IAM bytes");
+      if (!(message.bytes instanceof Uint8Array) || message.bytes.byteLength !== context.bytes) throw new Error("Invalid IAM bytes");
       const digest = [...new Uint8Array(await crypto.subtle.digest("SHA-256", message.bytes))].map(b => b.toString(16).padStart(2,"0")).join("");
       if (digest !== context.manifestDigest) throw new Error("IAM digest mismatch");
       const manifest = JSON.parse(new TextDecoder("utf-8",{fatal:true}).decode(message.bytes));