@tinkerlandai/indiana-iam 0.4.0 → 0.5.0

package/README.md

@@ -119,7 +119,26 @@ and statically generated TanStack file-route trees registered with `createRouter
 React Router supports imported static path constants, inline `Component` functions and source-proven lazy import forwarding.
 Data-router `route.lazy` objects support a static module's named `Component`, or a source-proven mapper that captures
 the component export. Mapper factories, imports and business loaders are never executed. Unknown overrides remain gaps.
-MDX pages/layouts need a separate adapter and explicitly report incomplete route coverage.
+Markdown/MDX pages, layouts and local imports retain original routes and source coordinates.
+The pinned Markdown/MDX parsers project headings, lists, GFM tables/tasks, code, links, images and bounded source JSX.
+Merchant MDX compilers/plugins, ESM side effects, arbitrary expressions and active HTML are never executed.
+Generated Markdown markup stays preview-only; custom MDX component mappings and plugin transforms remain gaps.
+CSS Modules retain source-literal default imports, deterministic local preview class names,
+scoped selectors and static declarations, including standard media/supports/container rules.
+Global selectors, resource loads, composition, nested preprocessing and animation definitions stay explicit gaps;
+merchant PostCSS plugins and configuration are never executed. Compiled CSS remains a separate build input.
+Mantine core forms, headings, containers, tables, images and controlled Modal/Drawer visibility have an inert
+semantic HTML profile. Source labels, ordinary form constraints and safe default values are retained;
+password values stay redacted. Theme resolution, responsive object props, portal positioning, focus handling
+and library callbacks remain unobserved. Boolean `useDisclosure` without lifecycle callbacks, controlled Tabs,
+Drawer/Modal close controls and native Accordion folding have bounded local previews. This profile does not
+import Mantine or run its hooks.
+Async source helpers and TanStack queries can expose source-declared literal fixtures, including a source-proven
+timer-only delay. IAM interprets their AST without executing functions, awaiting timers or invoking query callbacks.
+Safe-integer locale formatting uses deterministic English grouping in the source preview.
+Declared `initialData` retains its source initial state; loading/error/network outcomes otherwise stay unknown.
+Only the known frontend `services/api` source path is included; framework API routes, server trees and credentials
+stay outside the scan. Remote data, mutations, impure helpers and ambiguous bindings remain unobserved.
 TanStack reads the registered generated tree, including pathless layouts, index routes and simple `$param` paths;
 custom history/basepath and complex parameter patterns require separate adapters. Loaders, guards, retry/reload behavior
 and runtime data remain unobserved. Unsupported optional React paths are isolated as gaps.
@@ -138,11 +157,15 @@ Source-proven `useSyncExternalStore` matchMedia getters retain both typed viewpo
 viewport. Subscriptions are not run. UI preference cookies with an explicit source SSR guard use an empty-cookie
 preview; auth/session cookies and arbitrary stores stay unobserved. Pure lazy local-state initializers are interpreted
 under the same bounded rules; merchant callbacks and browser storage are never executed or read.
-The complete validated IAM must fit within 8 MiB; oversized projections fail without emitting a truncated artifact.
+IAM has no configured page, node or total artifact byte limit. The exporter retains every supported route.
 Large artifacts store sizeable HTML/preorder-map pairs as `domPayload` (`gzip-json-v1`), while keeping `html: ""`
 and `nodes: []` in that document's wire record. This lossless storage encoding preserves all source IDs, DOM values,
-HTML/DOM hashes and targets. Route navigation stores the exact interaction-array index instead of repeating its ID; validation checks node, route, destination and parameters. Source files retain their full hashes; component/element records cover reachable route compositions and shared fragments. Text node IDs that follow the original parent/index identity formula are derived locally instead of repeated; explicit exceptions remain stored, and every resolved source-map hash is checked. The document hash pins its encoded storage body; decoding is local and bounded to
-8 MiB per payload and 32 MiB in aggregate. The final IAM file limit stays 8 MiB. Exported page HTML is expanded.
+HTML/DOM hashes and targets. Route navigation stores the exact interaction-array index instead of repeating its ID; validation checks node, route, destination and parameters. Source files retain their full hashes; component/element records cover reachable route compositions and shared fragments. Text node IDs that follow the original parent/index identity formula are derived locally instead of repeated; explicit exceptions remain stored, and every resolved source-map hash is checked. The document hash pins its encoded storage body; decoding is local and checks the exact declared size and hashes. Exported page HTML is expanded.
+The standalone viewer embeds only its route directory and hash-pinned document references. It reads and expands
+the selected document on demand, cancels superseded reads and retains one expanded page. Derived page files
+come from the complete validated IAM; the complete JSON remains the source of release identity.
+Serve the output directory over loopback HTTP to open `index.html`; browser `file://` restrictions prevent
+on-demand reads of its document files. Serving the exported files does not run the App or its backend.
 Use the matching 0.4 generator, validator and viewer together. Indiana ingestion/viewer sources must be updated
 before uploading compressed artifacts; publishing this npm package alone does not deploy Indiana. The offline
 viewer uses the browser's built-in `DecompressionStream` and never fetches a decoder or merchant content.

package/assets/viewer.js

@@ -119,6 +119,11 @@ async function mountIamViewer(m, consoleContext) {
   }
   document.body.dataset.panel = "canvas";
   $("viewport").value = String(viewport);
+  const inlineDocuments=new Map(m.documents.map(document=>[document.documentKey,document]));
+  const localDocumentFiles=new Map((m.documentFiles??[]).map(file=>[file.documentKey,file]));
+  const directoryInteractions=m.interactions;
+  const expandedDocuments=new WeakSet();
+  let localRead=null;
   const changes = new Map(), baseline = new Map(), originalValues = new Map(), localValues = new Map(), savedViews = new Map(), seededViews = new Set();
   let baselineLoaded = false;
   let pendingDocument=null,projectionReadOnly=false,retryOpen=null;
@@ -208,7 +213,7 @@ async function mountIamViewer(m, consoleContext) {
   $("commit").textContent = "";
   $("page-count").textContent = m.pages.length;
   $("summary").textContent =
-    `${m.pages.length} ${tr("页面")} · ${m.components.length} ${tr("组件")} · ${consoleContext?.catalog?.nodeCount??m.documents.reduce((n, d) => n + d.nodes.length, 0)} ${tr("DOM 节点")}`;
+    `${m.pages.length} ${tr("页面")} · ${m.summary?.components??m.components.length} ${tr("组件")} · ${consoleContext?.catalog?.nodeCount??m.summary?.nodes??m.documents.reduce((n, d) => n + d.nodes.length, 0)} ${tr("DOM 节点")}`;
   $("gap-count").textContent = `${consoleContext?.catalog?.gapCount??m.coverage.gaps.length} ${iamEnglish ? "coverage gaps" : "项缺口已记录"}`;
   $("coverage-description").textContent =
     tr("这是从 App 源码生成的 HTML/CSS/JS 投影。未运行原应用；动态数据、鉴权状态、字体与第三方组件可能不完整。只有明确提取的界面状态可模拟。");
@@ -299,13 +304,49 @@ async function mountIamViewer(m, consoleContext) {
       "<\/script>" + (keyboard ? "<script>" + keyboard.js.replaceAll("</script", "<\\/script") + "<\/script>" : "") + "</body></html>"
     );
   }
-  function openPage(next, targetUrl = next.route, renderKey, historyMove=null) {
+  async function openPage(next, targetUrl = next.route, renderKey, historyMove=null) {
     if (consoleContext) targetUrl = viewUrl(targetUrl);
     retryOpen={pageKey:next.pageKey,targetUrl,renderKey,historyMove};
     if(consoleContext)consoleContext.documentReady=false;
     const nextRender=m.routeTree.renders.find(render=>render.routeKey===next.pageKey&&render.renderKey===(renderKey??m.routeTree.routes.find(route=>route.routeKey===next.pageKey).initialRenderKey));
     if (!nextRender) throw Error("Unknown preview render");
-    const nextDocument=byId(m.documents,"documentKey",nextRender.documentKey);
+    let nextDocument=byId(m.documents,"documentKey",nextRender.documentKey);
+    if(!consoleContext || consoleContext.mode!=="documents"){
+      localRead?.abort();localRead=null;pendingDocument=null;
+      if(!nextDocument||!expandedDocuments.has(nextDocument)){
+        const request={pageKey:next.pageKey,renderKey:nextRender.renderKey};
+        const controller=new AbortController();localRead=controller;pendingDocument=request;
+        $("document-status").textContent=tr("正在打开页面资料…");$("export").disabled=true;
+        try{
+          const file=localDocumentFiles.get(nextRender.documentKey);
+          if(file){
+            if(!/^document_[a-f0-9]{64}$/.test(file.documentKey)||!/^[a-f0-9]{64}$/.test(file.sha256)||!Number.isSafeInteger(file.bytes)||file.bytes<1)throw Error("Invalid local document reference");
+            const response=await fetch(new URL('documents/'+file.documentKey+'/material.json',location.href),{signal:controller.signal});
+            if(!response.ok)throw Error("Local document unavailable");
+            const bytes=await response.arrayBuffer();
+            if(bytes.byteLength!==file.bytes)throw Error("Local document size mismatch");
+            const actual=[...new Uint8Array(await crypto.subtle.digest('SHA-256',bytes))].map(b=>b.toString(16).padStart(2,'0')).join('');
+            if(actual!==file.sha256)throw Error("Local document digest mismatch");
+            const material=JSON.parse(new TextDecoder('utf-8',{fatal:true}).decode(bytes));
+            const stored=material.document;
+            if(stored.documentKey!==nextRender.documentKey||stored.pageKey!==next.pageKey||stored.hashes.document!==nextRender.documentHash)throw Error("Local document scope mismatch");
+            const expanded=await expandNodeHashes(stored,request);
+            if(pendingDocument!==request)return;
+            for(const key of ['elements','styles','assets','scripts','components','interactions'])m[key]=material[key];
+            activeGraph=material.routeTree;m.routeTree={...activeGraph,routes:m.routeTree.routes,renders:m.routeTree.renders};expandedDocuments.add(expanded);m.documents=[expanded];
+          }else{
+            const stored=inlineDocuments.get(nextRender.documentKey);if(!stored)throw Error("Missing local document");
+            const expanded=await expandNodeHashes(stored,request);
+            if(pendingDocument!==request)return;
+            expandedDocuments.add(expanded);m.documents=[expanded];
+          }
+          pendingDocument=null;localRead=null;nextDocument=m.documents[0];
+        }catch(error){
+          if(pendingDocument===request){pendingDocument=null;localRead=null;$("document-status").textContent=tr("页面资料校验失败，请重新打开此版本。");toast(tr("页面资料校验失败，请重新打开此版本。"));}
+          return;
+        }
+      }
+    }
     if(!nextDocument&&consoleContext?.mode==="documents"){
       pendingDocument={requestId:crypto.randomUUID(),pageKey:next.pageKey,renderKey:nextRender.renderKey,targetUrl,historyMove,documentKey:nextRender.documentKey,documentHash:nextRender.documentHash};
       $("document-status").textContent=tr("正在打开页面资料…");$("export").disabled=true;
@@ -493,12 +534,12 @@ async function mountIamViewer(m, consoleContext) {
 function checkedDomPayload(document) {
   const payload = document.domPayload;
   if (!payload) return null;
-  if (document.html !== "" || !Array.isArray(document.nodes) || document.nodes.length || Object.keys(payload).sort().join(",") !== "bytes,data,encoding" || payload.encoding !== "gzip-json-v1" || !Number.isSafeInteger(payload.bytes) || payload.bytes < 1 || payload.bytes > 8_388_608 || typeof payload.data !== "string" || !payload.data.length || payload.data.length > 11_184_812 || payload.data.length % 4 !== 0 || !/^[A-Za-z0-9+/]*={0,2}$/.test(payload.data)) throw Error("Invalid compressed DOM payload");
+  if (document.html !== "" || !Array.isArray(document.nodes) || document.nodes.length || Object.keys(payload).sort().join(",") !== "bytes,data,encoding" || payload.encoding !== "gzip-json-v1" || !Number.isSafeInteger(payload.bytes) || payload.bytes < 1 || typeof payload.data !== "string" || !payload.data.length || payload.data.length % 4 !== 0 || !/^[A-Za-z0-9+/]*={0,2}$/.test(payload.data)) throw Error("Invalid compressed DOM payload");
   return payload;
 }
 function parsedDomPayload(text) {
   const value = JSON.parse(text);
-  if (!value || Object.keys(value).sort().join(",") !== "html,nodes" || typeof value.html !== "string" || value.html.length > 2_000_000 || !value.html.isWellFormed() || !Array.isArray(value.nodes) || value.nodes.length > 12000 || JSON.stringify(value) !== text) throw Error("Invalid expanded DOM payload");
+  if (!value || Object.keys(value).sort().join(",") !== "html,nodes" || typeof value.html !== "string" || !value.html.isWellFormed() || !Array.isArray(value.nodes) || JSON.stringify(value) !== text) throw Error("Invalid expanded DOM payload");
   return value;
 }
 async function documentDomBrowser(document) {
@@ -529,7 +570,7 @@ async function documentDomBrowser(document) {
   /* END COMPRESSED DOM */
   /* BEGIN HTML DOM DERIVATION */
 function expandDomNodes(document, body, deriveTextId) {
-  if(document.nodeEncoding!=='html-preorder-v1'||document.nodeHashMode!=='derived-v1'||!document.sourceMappingsHash||document.nodes.length>12000)throw Error('Invalid HTML-derived DOM mode');
+  if(document.nodeEncoding!=='html-preorder-v1'||document.nodeHashMode!=='derived-v1'||!document.sourceMappingsHash)throw Error('Invalid HTML-derived DOM mode');
   let index=0;const result=[];
   function visit(node,parentId,depth,childIndex=0){
     if(depth>128||![1,3].includes(node.nodeType))throw Error('Invalid HTML-derived DOM structure');
@@ -553,11 +594,11 @@ function expandDomNodes(document, body, deriveTextId) {
       const {domPayload, ...plain} = document;
       document = {...plain, ...decoded};
     }
-    if(!Array.isArray(document.nodes)||document.nodes.length>12000)throw Error('Node hash budget');
+    if(!Array.isArray(document.nodes))throw Error('Node hash budget');
     const body=new DOMParser().parseFromString('<!doctype html><html><body>'+document.html+'</body></html>','text/html').body,textIds=new Map(),pendingText=[];
     let preorder=0;
     const collectText=(node,parentId,childIndex=0,depth=0)=>{
-      if(!node||depth>128||preorder>=12000)throw Error('DOM derivation budget');
+      if(!node||depth>128)throw Error('DOM derivation budget');
       const ref=document.nodes[preorder++];if(!ref)throw Error('Missing source node');
       const id=node.nodeType===1?node.getAttribute('data-iam-node'):ref.nodeId;
       if(node.nodeType===3&&!id)pendingText.push({parentId,index:childIndex,key:parentId+':'+childIndex});
@@ -595,12 +636,12 @@ function expandDomNodes(document, body, deriveTextId) {
       const request=pendingDocument;
       try{
         const projection=data.projection;
-        if(projection?.format!=="indiana-document-projection"||projection.schemaVersion!==2||projection.versionId!==consoleContext.versionId||projection.manifestDigest!==consoleContext.manifestDigest||projection.pageKey!==request.pageKey||projection.renderKey!==(request.renderKey??null)||projection.documentKey!==request.documentKey||projection.documentHash!==request.documentHash||typeof projection.payload!=="string"||projection.payload.length>8388608)throw Error("Projection scope mismatch");
+        if(projection?.format!=="indiana-document-projection"||projection.schemaVersion!==2||projection.versionId!==consoleContext.versionId||projection.manifestDigest!==consoleContext.manifestDigest||projection.pageKey!==request.pageKey||projection.renderKey!==(request.renderKey??null)||projection.documentKey!==request.documentKey||projection.documentHash!==request.documentHash||typeof projection.payload!=="string")throw Error("Projection scope mismatch");
         const material=JSON.parse(projection.payload),document=material.document;
         const {hashes,...body}=document;
         if(document.documentKey!==request.documentKey||document.pageKey!==request.pageKey||hashes.document!==request.documentHash||await hash("iam/document/v1\0"+canonical(body))!==request.documentHash)throw Error("Projection document hash mismatch");
         const provided = new Map();
-        if (!Array.isArray(material.resourceRefs) || material.resourceRefs.length > 2048) throw Error("Invalid preview resources");
+        if (!Array.isArray(material.resourceRefs)) throw Error("Invalid preview resources");
         for (const kind of ["styles","assets","scripts"]) {
           if (!Array.isArray(material[kind])) throw Error("Invalid preview resource kind");
           for (const value of material[kind]) {
@@ -616,7 +657,6 @@ function expandDomNodes(document, body, deriveTextId) {
           if(!entry||entry.kind!==ref.kind)throw Error("Missing preview resource");
           resolved.set(ref.hash,entry);
         }
-        if([...resolved.values()].reduce((bytes,entry)=>bytes+entry.bytes,0)>8_388_608)throw Error("Preview resource byte budget");
         for (const kind of ["styles","assets","scripts"]) material[kind]=[...resolved.values()].filter(entry=>entry.kind===kind).map(entry=>entry.value);
         const script=document.scriptKey?material.scripts.find(script=>script.scriptKey===document.scriptKey):{js:document.js,sha256:hashes.js};
         if(!script||!consoleContext.reviewedRuntimeHashes.includes(script.sha256)||await hash(script.js)!==script.sha256||document.scriptKey&&document.scriptKey!=="script_"+script.sha256)throw Error("Unreviewed preview runtime");
@@ -629,7 +669,7 @@ function expandDomNodes(document, body, deriveTextId) {
         if(consoleContext.catalog)m.routeTree={...material.routeTree,routes:consoleContext.catalog.routes,renders:consoleContext.catalog.renders};
         const expanded=await expandNodeHashes(document,request);
         if(pendingDocument!==request)return;
-        m.documents=[expanded];projectionReadOnly=projection.readOnly;pendingDocument=null;
+        expandedDocuments.add(expanded);m.documents=[expanded];projectionReadOnly=projection.readOnly;pendingDocument=null;
         openPage(m.pages.find(page=>page.pageKey===request.pageKey),request.targetUrl,request.renderKey,request.historyMove);
       }catch{if(pendingDocument===request){pendingDocument=null;projectionReadOnly=true;renderSaveCount();parent.postMessage({channel:"indiana-iam-console-v1",nonce:consoleContext.nonce,versionId:consoleContext.versionId,type:"error"},"*");}}
       return;
@@ -804,9 +844,9 @@ function expandDomNodes(document, body, deriveTextId) {
         text("strong", p.route),
         text(
           "small",
-          p.componentKeys.length +
+          (p.componentCount??p.componentKeys.length) +
             tr(" 组件 · ") +
-            p.stateKeys.length +
+            (p.stateCount??p.stateKeys.length) +
             tr(" 状态候选"),
         ),
       );
@@ -814,7 +854,7 @@ function expandDomNodes(document, body, deriveTextId) {
       const links = text("div", "", "map-targets"),
         ids = [
           ...new Set(
-            m.interactions
+            directoryInteractions
               .filter((i) => i.pageKey === p.pageKey && i.targetPageKey)
               .map((i) => i.targetPageKey),
           ),
@@ -839,9 +879,9 @@ function expandDomNodes(document, body, deriveTextId) {
       format: "indiana-local-preview-changes",
       schemaVersion: 1,
       sourceGraphDigest: m.release.sourceGraphDigest,
-      manifestDocumentHashes: m.documents.map((d) => ({
-        documentKey: d.documentKey,
-        hash: d.hashes.document,
+      manifestDocumentHashes: m.routeTree.renders.map((row) => ({
+        documentKey: row.documentKey,
+        hash: row.documentHash,
       })),
       changes: [...changes.values()],
       scope: "local_preview_only",
@@ -859,19 +899,7 @@ function expandDomNodes(document, body, deriveTextId) {
     toast(tr("导出本地 JSON；未保存到服务器或应用到商户。"));
   });
   renderNav();
-  if (m.documents.length) {
-    const initialRequest = {};
-    pendingDocument = initialRequest;
-    const expandedBytes = m.documents.reduce((total, document) => total + (document.domPayload?.bytes ?? new TextEncoder().encode(JSON.stringify({html:document.html,nodes:document.nodes})).byteLength), 0);
-    if (!Number.isSafeInteger(expandedBytes) || expandedBytes > 33_554_432) throw Error("Expanded DOM aggregate byte budget exceeded");
-    // Sequential decoding bounds peak memory for a multi-route artifact.
-    const expandedDocuments = [];
-    for (const document of m.documents) expandedDocuments.push(await expandNodeHashes(document, initialRequest));
-    m.documents = expandedDocuments;
-    pendingDocument = null;
-    renderNav();
-  }
-  openPage(page,consoleContext?.initialPage?.url??page.route,consoleContext?.initialPage?.renderKey??consoleContext?.catalog?.graph.variables.find(variable=>variable.id===consoleContext.initialPage?.variableKey)?.renderKey);
+  await openPage(page,consoleContext?.initialPage?.url??page.route,consoleContext?.initialPage?.renderKey??consoleContext?.catalog?.graph.variables.find(variable=>variable.id===consoleContext.initialPage?.variableKey)?.renderKey);
 }
 (async () => {
   const data = JSON.parse(document.getElementById("iam-data").textContent);
@@ -908,7 +936,7 @@ function expandDomNodes(document, body, deriveTextId) {
         const model={format:"indiana-preview-material",schemaVersion:1,app:{name:catalog.appName},release:{sourceGraphDigest:catalog.sourceGraphDigest},pages:catalog.routes.map(route=>({pageKey:route.routeKey,route:route.path,title:route.path,documentKeys:[route.documentKey],stateKeys:[],componentKeys:[]})),documents:[],elements:[],components:[],interactions:[],styles:[],scripts:[],assets:[],coverage:{gaps:[]},routeTree:{schemaVersion:catalog.renderIndexVersion,routes:catalog.routes,renders:catalog.renders,variables:catalog.graph.variables.map(variable=>({variableKey:variable.id,routeKey:variable.routeId,renderKey:variable.renderKey})),states:[],transitions:[],bindings:[],targets:[],navigation:[]}};
         await mountIamViewer(model,context);loading.hidden=true;document.querySelector(".workspace").hidden=false;return;
       }
-      if (!(message.bytes instanceof Uint8Array) || message.bytes.byteLength !== context.bytes || message.bytes.byteLength > 8388608) throw new Error("Invalid IAM bytes");
+      if (!(message.bytes instanceof Uint8Array) || message.bytes.byteLength !== context.bytes) throw new Error("Invalid IAM bytes");
       const digest = [...new Uint8Array(await crypto.subtle.digest("SHA-256", message.bytes))].map(b => b.toString(16).padStart(2,"0")).join("");
       if (digest !== context.manifestDigest) throw new Error("IAM digest mismatch");
       const manifest = JSON.parse(new TextDecoder("utf-8",{fatal:true}).decode(message.bytes));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tinkerlandai/indiana-iam",
-  "version": "0.4.0",
+  "version": "0.5.0",
   "description": "Build-time Indiana App Manifest (IAM) generator for Next.js and Vite apps: scans source after the production build and writes the IAM and its release descriptor.",
   "license": "UNLICENSED",
   "repository": {
@@ -49,10 +49,16 @@
     "jsdom": "26.1.0",
     "lucide-static": "1.34.0",
     "magic-string": "0.30.21",
+    "mdast-util-from-markdown": "2.1.0",
+    "mdast-util-gfm": "3.1.0",
+    "mdast-util-mdx": "3.0.0",
+    "micromark-extension-gfm": "3.0.0",
+    "micromark-extension-mdxjs": "3.0.0",
     "pako": "3.0.2",
     "sharp": "0.35.5",
     "tailwind-merge": "3.7.0",
     "tailwindcss": "4.3.3",
-    "typescript": "5.9.3"
+    "typescript": "5.9.3",
+    "yaml": "2.9.1"
   }
 }