@tinkerlandai/indiana-iam 0.6.0 → 0.7.1

package/README.md

@@ -7,7 +7,7 @@ React Native / Expo integrations produce source previews; native visual-change e
 Install it as a development dependency (Node.js 22 or later):
 
 ```sh
-npm install --save-dev @tinkerlandai/indiana-iam
+npm install --save-dev --save-exact @tinkerlandai/indiana-iam@0.7.0
 ```
 
 ## Next.js (15.4.1 or later)
@@ -228,7 +228,7 @@ Source-proven `useSyncExternalStore` matchMedia getters retain both typed viewpo
 viewport. Subscriptions are not run. UI preference cookies with an explicit source SSR guard use an empty-cookie
 preview; auth/session cookies and arbitrary stores stay unobserved. Pure lazy local-state initializers are interpreted
 under the same bounded rules; merchant callbacks and browser storage are never executed or read.
-Local IAM generation has no configured page, node or total artifact byte limit. The exporter retains every supported route. Online ingestion separately limits each upload to 8 MiB (8,388,608 bytes); a large local artifact is not automatically uploadable. Signed GCS upload URLs expire within ten minutes.
+Local IAM generation has no configured page, node or total artifact byte limit. The exporter retains every supported route. Online admission uses the environment's 512 MiB source storage budget, 256-version limit and build-key upload rate limit; it has no separate 8 MiB file cap.
 Large artifacts store sizeable HTML/preorder-map pairs as `domPayload` (`gzip-json-v1`), while keeping `html: ""`
 and `nodes: []` in that document's wire record. This lossless storage encoding preserves all source IDs, DOM values,
 HTML/DOM hashes and targets. Route navigation stores the exact interaction-array index instead of repeating its ID; validation checks node, route, destination and parameters. Source files retain their full hashes; component/element records cover reachable route compositions and shared fragments. Text node IDs that follow the original parent/index identity formula are derived locally instead of repeated; explicit exceptions remain stored, and every resolved source-map hash is checked. The document hash pins its encoded storage body; decoding is local and checks the exact declared size and hashes. Exported page HTML is expanded.
@@ -246,11 +246,25 @@ Values that look like credentials, tokens, emails or private URLs are removed, b
 
 ## Upload
 
+IAM 0.7.0 uses the matching Indiana resumable ingestion protocol. Upgrade the build package together with the receiver.
+
 Create a Key with only the `app-manifests:write` permission (Console → developer settings) and set it as
 `INDIANA_IAM_KEY` in your build environment. Each production build then registers the IAM, stores it through a
-server-signed URL and asks Indiana to validate it; the validated version becomes its client's current version.
+private GCS resumable session and asks Indiana to validate it; the validated version becomes its client's current version.
 Rebuilding unchanged source only makes the existing version current again.
 
+Interrupted uploads resume when the same command or build runs again on the same machine. The uploader keeps the
+request ID, original label and private GCS session in `~/.cache/indiana/iam-uploads` (directory mode 0700, files 0600),
+scoped by Indiana origin, key fingerprint, client, platform and exact content. Set `INDIANA_IAM_CACHE_DIR` to a private
+directory to retain this state in a CI cache; CI workers with no shared cache start a new upload. Never publish this
+directory or place it in source/public build output. It contains bearer upload capabilities, but no API keys.
+On recovery, Indiana checks current key authority before the cached storage session is used. GCS's persisted offset
+selects the next byte; chunks are at most 8 MiB. Transient failures retry up to three times, while completed transfers
+retry validation without uploading again. Recovery retains the existing 15-minute SQL upload deadline; an expired
+intent starts a new version. A successful validation removes the local checkpoint. Storage sessions can remain valid
+longer than the SQL intent, but cannot make an expired or unauthorized version ready. The matching Indiana ingestion
+and build package must be deployed/published together for this transfer protocol.
+
 An App environment can hold several clients, each a named build with its own current version: for example `web` and
 `web-dashboard`, or later `ios` and `android` apps. Set the `client` option (or `INDIANA_IAM_CLIENT`) to 1-40 lowercase
 letters, digits or hyphens starting with a letter; the default is `web`. A client keeps the platform of its first

package/assets/document-controller.js

@@ -9,7 +9,14 @@
   }
   let machine = null, activeTabs = [],sourceUi=null,sourceRenderKey=null;
   const patches = new Map();
-  const node = id => [...document.querySelectorAll("[data-iam-node]")].find(e => e.dataset.iamNode === id);
+  const previewNodes = new Map([...document.querySelectorAll("[data-iam-node]")].map(el => [el.dataset.iamNode, el]));
+  const node = id => {
+    const cached = previewNodes.get(id);
+    if (cached?.isConnected) return cached;
+    const current = [...document.querySelectorAll("[data-iam-node]")].find(el => el.dataset.iamNode === id);
+    if (current) previewNodes.set(id, current);
+    return current;
+  };
   function viewportValues(graph,routeKey,renderKey){
     const values={};for(const variable of graph.variables??[]){
       if(variable.routeKey!==routeKey||variable.renderKey!==(renderKey??graph.routes.find(r=>r.routeKey===routeKey)?.initialRenderKey)||variable.valueType!=='boolean')continue;
@@ -34,6 +41,49 @@
     applySourceCollections(document,sourceUi,sourceRenderKey,values,true);
     markUnobservedData(document,sourceUi,true);
     for (const patch of patches.values()) applyPatch(patch);
+    reportProjection();
+  }
+  function reportProjection() {
+    const visibility = new WeakMap();
+    const visible = el => {
+      if (!el) return false;
+      if (visibility.has(el)) return visibility.get(el);
+      const style = getComputedStyle(el);
+      const result = !el.hidden && style.display !== "none" && style.visibility !== "hidden" &&
+        (!el.parentElement || visible(el.parentElement));
+      visibility.set(el, result);
+      return result;
+    };
+    const variables = new Set();
+    const reads = expression => {
+      if (!expression || typeof expression !== "object") return;
+      if (expression.op === "var") variables.add(expression.key);
+      for (const value of Object.values(expression)) {
+        if (Array.isArray(value)) value.forEach(reads);
+        else if (value && typeof value === "object") reads(value);
+      }
+    };
+    for (const binding of viewportGraph.bindings) {
+      if (binding.routeKey !== viewportRoute || binding.renderKey !== sourceRenderKey) continue;
+      const el = node(binding.nodeId);
+      if (el && visible(binding.property === "visible" ? el.parentElement : el)) reads(binding.value);
+    }
+    for (const transition of activeTransitions) if (visible(node(transition.trigger.nodeId))) {
+      transition.stateReads.forEach(key => variables.add(key));
+      transition.stateWrites.forEach(write => variables.add(write.variableKey));
+    }
+    const unobserved = [...document.querySelectorAll("[data-iam-preview-note]")].some(visible);
+    let content = false;
+    if (unobserved) {
+      const walker = document.createTreeWalker(document.body, NodeFilter.SHOW_TEXT);
+      let text;
+      while ((text = walker.nextNode())) if (text.textContent.trim() &&
+        !text.parentElement.closest("script,style,[data-iam-preview-note],[data-iam-observation]") && visible(text.parentElement)) {
+        content = true; break;
+      }
+      if (!content) content = [...document.querySelectorAll("img,svg,canvas,input,textarea,select,button")].some(visible);
+    }
+    send("projection", { visibleVariableKeys: [...variables], dataUnavailable: unobserved && !content });
   }
   function applyPatch(data) {
     const el = node(data.nodeId); if (!el) return;

package/assets/document-runtime.js

@@ -245,6 +245,9 @@ function markUnobservedData(doc, ui, enabled, selections = new Map()) {
     field.setAttribute("placeholder", "未观测");
     field.setAttribute("title", "此字段的数据未观测");
   }
+  for (const root of doc.querySelectorAll('[data-iam-source-template="unobserved"]')) {
+    const note=doc.createElement('div');note.setAttribute('data-iam-preview-note','unobserved');note.className='iam-observation-note';note.setAttribute('role','status');note.textContent='集合数据未观测 · 可检查源码组件结构';root.before(note);
+  }
   return unobserved;
 }
 /* Indiana UI simulation runtime 0.2.0. No merchant code, requests, authentication or purchases. */
@@ -258,7 +261,14 @@ function markUnobservedData(doc, ui, enabled, selections = new Map()) {
   }
   let machine = null, activeTabs = [],sourceUi=null,sourceRenderKey=null;
   const patches = new Map();
-  const node = id => [...document.querySelectorAll("[data-iam-node]")].find(e => e.dataset.iamNode === id);
+  const previewNodes = new Map([...document.querySelectorAll("[data-iam-node]")].map(el => [el.dataset.iamNode, el]));
+  const node = id => {
+    const cached = previewNodes.get(id);
+    if (cached?.isConnected) return cached;
+    const current = [...document.querySelectorAll("[data-iam-node]")].find(el => el.dataset.iamNode === id);
+    if (current) previewNodes.set(id, current);
+    return current;
+  };
   function viewportValues(graph,routeKey,renderKey){
     const values={};for(const variable of graph.variables??[]){
       if(variable.routeKey!==routeKey||variable.renderKey!==(renderKey??graph.routes.find(r=>r.routeKey===routeKey)?.initialRenderKey)||variable.valueType!=='boolean')continue;
@@ -283,6 +293,49 @@ function markUnobservedData(doc, ui, enabled, selections = new Map()) {
     applySourceCollections(document,sourceUi,sourceRenderKey,values,true);
     markUnobservedData(document,sourceUi,true);
     for (const patch of patches.values()) applyPatch(patch);
+    reportProjection();
+  }
+  function reportProjection() {
+    const visibility = new WeakMap();
+    const visible = el => {
+      if (!el) return false;
+      if (visibility.has(el)) return visibility.get(el);
+      const style = getComputedStyle(el);
+      const result = !el.hidden && style.display !== "none" && style.visibility !== "hidden" &&
+        (!el.parentElement || visible(el.parentElement));
+      visibility.set(el, result);
+      return result;
+    };
+    const variables = new Set();
+    const reads = expression => {
+      if (!expression || typeof expression !== "object") return;
+      if (expression.op === "var") variables.add(expression.key);
+      for (const value of Object.values(expression)) {
+        if (Array.isArray(value)) value.forEach(reads);
+        else if (value && typeof value === "object") reads(value);
+      }
+    };
+    for (const binding of viewportGraph.bindings) {
+      if (binding.routeKey !== viewportRoute || binding.renderKey !== sourceRenderKey) continue;
+      const el = node(binding.nodeId);
+      if (el && visible(binding.property === "visible" ? el.parentElement : el)) reads(binding.value);
+    }
+    for (const transition of activeTransitions) if (visible(node(transition.trigger.nodeId))) {
+      transition.stateReads.forEach(key => variables.add(key));
+      transition.stateWrites.forEach(write => variables.add(write.variableKey));
+    }
+    const unobserved = [...document.querySelectorAll("[data-iam-preview-note]")].some(visible);
+    let content = false;
+    if (unobserved) {
+      const walker = document.createTreeWalker(document.body, NodeFilter.SHOW_TEXT);
+      let text;
+      while ((text = walker.nextNode())) if (text.textContent.trim() &&
+        !text.parentElement.closest("script,style,[data-iam-preview-note],[data-iam-observation]") && visible(text.parentElement)) {
+        content = true; break;
+      }
+      if (!content) content = [...document.querySelectorAll("img,svg,canvas,input,textarea,select,button")].some(visible);
+    }
+    send("projection", { visibleVariableKeys: [...variables], dataUnavailable: unobserved && !content });
   }
   function applyPatch(data) {
     const el = node(data.nodeId); if (!el) return;

package/assets/viewer.css

@@ -706,6 +706,15 @@ button:disabled:hover { background: transparent; }
 .field input:disabled, .field textarea:disabled { color: var(--iam-ink-3); background: var(--iam-surface-sunk); }
 .state-control { display: grid; gap: 8px; margin-block: 12px; }
 .state-control select { width: 100%; min-height: 40px; border: 1px solid var(--iam-field-border); border-radius: 2px; background: var(--iam-surface); }
+.state-group { border: 0; padding: 0; margin: 16px 0; min-width: 0; }
+.state-group legend { color: var(--iam-ink); font-weight: 500; overflow-wrap: anywhere; }
+.state-group .field { margin: 8px 0; }
+.state-group[hidden], .state-group .field[hidden] { display: none; }
+.state-other { margin-block: 12px; }
+.state-other summary { cursor: pointer; color: var(--iam-ink-2); }
+.projection-note { padding: 12px 16px; border-bottom: 1px solid var(--iam-line); background: var(--iam-surface-sunk); color: var(--iam-ink-2); }
+.projection-note p { margin: 0 0 8px; max-width: 80ch; }
+.projection-note[hidden] { display: none; }
 #preview { color-scheme: normal; background: #ffffff; }
 .frame-wrap { background: #ffffff; }
 body.embedded #export { display: none; }

package/assets/viewer.html

@@ -63,6 +63,10 @@
         <div class="breadcrumb">
           <span id="route"></span><span id="document-status"></span>
         </div>
+        <div id="projection-note" class="projection-note" role="status" hidden>
+          <p>此页面依赖未观测的运行时数据，当前无法展示完整内容。可查看未覆盖项，或从页面地图查看源码分支。</p>
+          <button id="projection-gaps">查看未覆盖项</button>
+        </div>
         <div class="canvas" id="canvas">
           <div class="frame-wrap" id="frame-wrap">
             <iframe

package/assets/viewer.js

@@ -67,7 +67,9 @@ const iamTranslations = {
   "界面状态": "UI states",
   "分析范围与未覆盖项": "Coverage and gaps",
   "DOM 映射 / SHA-256 / 源码证据": "DOM mappings / SHA-256 / source evidence",
-  "正在打开页面资料…": "Opening page data…"
+  "正在打开页面资料…": "Opening page data…",
+  "此页面依赖未观测的运行时数据，当前无法展示完整内容。可查看未覆盖项，或从页面地图查看源码分支。": "This page depends on runtime data that has not been observed. Its full content is unavailable. Review coverage gaps or inspect source branches in the page map.",
+  "查看未覆盖项": "Review coverage gaps"
 };
 const tr = value => iamEnglish ? iamTranslations[value] ?? value : value;
 // Theme changes are scoped to the Console tool shell, never its merchant iframe.
@@ -107,6 +109,7 @@ async function mountIamViewer(m, consoleContext) {
     nonce = "",
     viewport = matchMedia("(max-width: 900px)").matches ? 390 : 1280,
     pendingAnchor = null;
+  let projection = null, stateSearch = "";
   function setMobilePanel(panel) {
     document.body.dataset.panel = panel;
     for (const button of document.querySelectorAll(".mobile-panels [data-panel]")) {
@@ -305,6 +308,8 @@ async function mountIamViewer(m, consoleContext) {
     );
   }
   async function openPage(next, targetUrl = next.route, renderKey, historyMove=null) {
+    projection = null; stateSearch = "";
+    $("projection-note").hidden = true;
     if (consoleContext) targetUrl = viewUrl(targetUrl);
     retryOpen={pageKey:next.pageKey,targetUrl,renderKey,historyMove};
     if(consoleContext)consoleContext.documentReady=false;
@@ -479,6 +484,11 @@ async function mountIamViewer(m, consoleContext) {
       }
     }
     if (data.type === "selected") showSelection(data.element);
+    if (data.type === "projection" && Array.isArray(data.visibleVariableKeys)) {
+      projection = data;
+      $("projection-note").hidden = data.dataUnavailable !== true;
+      renderStates(uiValues.get(viewKey()) ?? {});
+    }
     if (data.type === "stateChanged") {uiValues.set(viewKey(),data.values);renderStates(data.values);}
     if (data.type === "navigate") {
       const interaction = m.interactions.find(
@@ -507,23 +517,66 @@ async function mountIamViewer(m, consoleContext) {
     if (data.type === "simulated") toast(data.message);
   });
   function renderStates(values = {}) {
-    const target = $("state-list"), canPreviewValues = scriptFor(doc).js.includes('type === "previewValues"'); target.replaceChildren();
+    const target = $("state-list"), canPreviewValues = scriptFor(doc).js.includes('type === "previewValues"');
+    const focused = document.activeElement?.dataset.variableKey;
+    const otherOpen = target.querySelector(".state-other")?.open ?? false;
+    target.replaceChildren();
     const renders=m.routeTree.renders?.filter(row=>row.routeKey===page.pageKey)??[];
     if(renders.length>1){const label=text('label',iamEnglish?'Page state':'页面状态','state-control'),select=document.createElement('select');select.setAttribute('aria-label',iamEnglish?'Page state':'页面状态');for(const [index,row]of renders.entries()){const option=document.createElement('option');option.value=row.renderKey;option.textContent=row.entryMode==='hard'?(iamEnglish?'Direct load':'直接打开'):(iamEnglish?'Soft navigation ':'软导航 ')+index;option.selected=row.renderKey===render?.renderKey;select.append(option);}select.addEventListener('change',()=>openPage(page,currentUrl,select.value));label.append(select);target.append(label);}
     const variables = m.routeTree.variables.filter(v => v.routeKey === page.pageKey && (!render || v.renderKey===render.renderKey));
     const stateSection = target.closest("details"), hasControls = String(variables.length > 0 || renders.length > 1);
     if (consoleContext && stateSection.dataset.hasControls !== hasControls) { stateSection.open = hasControls === "true"; stateSection.dataset.hasControls = hasControls; }
+    const active = new Set(projection?.visibleVariableKeys ?? []);
+    const other = document.createElement("details"); other.className = "state-other"; other.open = otherOpen;
+    other.append(text("summary", (iamEnglish ? "Other source states" : "其他源码状态") + ` (${variables.filter(v => !active.has(v.variableKey)).length})`));
+    const search = document.createElement("input"); search.type = "search"; search.value = stateSearch;
+    search.placeholder = iamEnglish ? "Find states or components" : "查找状态或组件";
+    search.setAttribute("aria-label", search.placeholder);
+    const searchLabel = text("label", iamEnglish ? "Filter states" : "筛选状态", "field"); searchLabel.append(search);
+    if (variables.length > 8) target.append(searchLabel);
+    const groups = new Map();
+    const filter = () => {
+      stateSearch = search.value;
+      const query = stateSearch.trim().toLocaleLowerCase();
+      for (const group of groups.values()) {
+        let shown = false;
+        for (const field of group.querySelectorAll(".field")) {
+          field.hidden = !field.dataset.search.includes(query); shown ||= !field.hidden;
+        }
+        group.hidden = !shown;
+      }
+      if (query) other.open = true;
+    };
+    search.addEventListener("input", filter);
     for (const variable of variables) {
+      const source = typeof variable.source === "number" ? m.routeTree.sourcePool?.[variable.source] : variable.source;
+      const owner = source?.symbol || source?.file?.split("/").at(-1) || (iamEnglish ? "Page" : "页面");
+      const isActive = active.has(variable.variableKey), groupKey = `${isActive}:${source?.file}:${owner}`;
+      if (!groups.has(groupKey)) {
+        const group = document.createElement("fieldset"); group.className = "state-group";
+        group.append(text("legend", owner)); groups.set(groupKey, group);
+        (isActive ? target : other).append(group);
+      }
+      const group = groups.get(groupKey);
       const value = Object.hasOwn(values, variable.variableKey) ? values[variable.variableKey] : variable.initialValue;
-      if (!canPreviewValues) { target.append(text("p", variable.label + " = " + JSON.stringify(value))); continue; }
+      if (!canPreviewValues) {
+        const field = text("p", variable.label + " = " + JSON.stringify(value), "field");
+        field.dataset.search = `${variable.label} ${owner} ${source?.file ?? ""}`.toLocaleLowerCase();
+        group.append(field); continue;
+      }
       const label = text("label", variable.label, "field"), input = document.createElement("input");
+      label.dataset.search = `${variable.label} ${owner} ${source?.file ?? ""}`.toLocaleLowerCase();
+      if (source) label.title = `${source.file}:${source.line}`;
       input.dataset.variableKey = variable.variableKey;
       input.type = variable.valueType === "boolean" ? "checkbox" : variable.valueType === "number" ? "number" : "text";
       input.setAttribute("aria-label", variable.label); input.maxLength = 4000;
       if (variable.valueType === "boolean") input.checked = value; else input.value = String(value);
       input.addEventListener("change", () => message("previewValues", { values: { [variable.variableKey]: variable.valueType === "boolean" ? input.checked : variable.valueType === "number" ? Number(input.value) : input.value } }));
-      label.append(input); target.append(label);
+      label.append(input); group.append(label);
     }
+    if (variables.some(v => !active.has(v.variableKey))) target.append(other);
+    filter();
+    if (focused) [...target.querySelectorAll("input")].find(input => input.dataset.variableKey === focused)?.focus();
     if (variables.length && canPreviewValues) target.append(text("p", tr("仅模拟界面值，不执行业务操作，也不保存为线上修改。")));
     const transitions = m.routeTree.transitions.filter(t => t.routeKey === page.pageKey && (!render || t.renderKey===render.renderKey));
     target.append(text("p", transitions.length + tr(" 个可模拟变化；其他业务行为列于未覆盖项。")));
@@ -761,11 +814,17 @@ function expandDomNodes(document, body, deriveTextId) {
     toast(tr("字号须为 8–120，已恢复当前值。"));
   });
   $("color").addEventListener("input", () => patch("color", $("color").value));
+  $("pick").setAttribute("aria-pressed", String(selecting));
   $("pick").addEventListener("click", () => {
     selecting = !selecting;
     $("pick").classList.toggle("active", selecting);
+    $("pick").setAttribute("aria-pressed", String(selecting));
     message("mode", { selecting });
   });
+  $("projection-gaps").addEventListener("click", () => {
+    const section = $("gaps").closest("details"); section.open = true;
+    setMobilePanel("inspector"); section.querySelector("summary").focus();
+  });
   let fitRequest = 0;
   if (typeof ResizeObserver !== "undefined") new ResizeObserver(() => {
     cancelAnimationFrame(fitRequest);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tinkerlandai/indiana-iam",
-  "version": "0.6.0",
+  "version": "0.7.1",
   "description": "Build-time Indiana App Manifest (IAM) generator for Next.js, Vite and React Native / Expo source.",
   "license": "UNLICENSED",
   "repository": {
@@ -59,6 +59,7 @@
     "micromark-extension-gfm": "3.0.0",
     "micromark-extension-mdxjs": "3.0.0",
     "pako": "3.0.2",
+    "parse5": "7.3.0",
     "sharp": "0.35.5",
     "tailwind-merge": "3.7.0",
     "tailwindcss": "4.3.3",

package/src/build.mjs

@@ -111,6 +111,9 @@ export async function finishBuildRelease({
           apiKey: settings.apiKey,
           baseUrl: settings.baseUrl,
           fetch: upload.fetch,
+          onProgress: ({ phase, uploadedBytes, totalBytes }) => {
+            if (phase === "upload") report(logger, "log", `IAM upload ${Math.floor(uploadedBytes / totalBytes * 100)}% (${uploadedBytes}/${totalBytes} bytes)`);
+          },
         });
         report(
           logger,

package/src/cli.mjs

@@ -112,6 +112,9 @@ if (command === "generate") {
     client: settings.client,
     apiKey: settings.apiKey,
     baseUrl: settings.baseUrl,
+    onProgress: ({ phase, uploadedBytes, totalBytes }) => {
+      console.error(`[indiana-iam] ${phase}${phase === "upload" ? ` ${Math.floor(uploadedBytes / totalBytes * 100)}% (${uploadedBytes}/${totalBytes} bytes)` : ""}`);
+    },
   });
   console.log(
     JSON.stringify({ uploaded, version: { id: version.id, client: version.clientKey, state: version.state, isCurrent: version.isCurrent } }, null, 2),

package/src/document-material.mjs

@@ -1,4 +1,4 @@
-import { documentNodes } from "./node-hashes.mjs";
+import { documentStructure } from "./node-hashes.mjs";
 import { documentDom } from "./dom-payload.mjs";
 import { sha256, canonical } from "./integrity.mjs";
 const resourceHashes = new WeakMap();
@@ -36,7 +36,7 @@ export function documentMaterial(
     (document) => document.documentKey === render.documentKey,
   );
   if (!document) throw Error("Missing IAM preview document");
-  const concreteNodes = documentNodes(document);
+  const concreteNodes = documentStructure(document);
   const elementKeys = new Set(concreteNodes.map((node) => node.elementKey));
   const ui = manifest.routeTree.ui;
   const collections =

package/src/index.d.ts

@@ -144,6 +144,13 @@ export declare function uploadAppManifest(options: {
   apiKey: string;
   baseUrl?: string;
   fetch?: typeof globalThis.fetch;
+  /** Private local recovery cache; defaults to INDIANA_IAM_CACHE_DIR or ~/.cache/indiana/iam-uploads. */
+  cacheDirectory?: string;
+  onProgress?: (progress: {
+    phase: "registration" | "upload" | "validation";
+    uploadedBytes: number;
+    totalBytes: number;
+  }) => void;
 }): Promise<{
   version: { id: string; state: string; isCurrent: boolean } & Record<
     string,
@@ -159,7 +166,13 @@ export declare function uploadSettings(
     client?: string;
   },
   env?: Record<string, string | undefined>,
-): { enabled: boolean; apiKey: string; baseUrl: string; client: string; missingKey: boolean };
+): {
+  enabled: boolean;
+  apiKey: string;
+  baseUrl: string;
+  client: string;
+  missingKey: boolean;
+};
 export declare function buildLabel(
   root: string,
   env?: Record<string, string | undefined>,

package/src/library-entry.mjs

@@ -7,6 +7,7 @@ import {privateUrl}from'./privacy.mjs';
 import{renderGuardFor}from'./render-index.mjs';
 import { documentScript } from "./shared-scripts.mjs";
 import { documentNodes } from './node-hashes.mjs';
+export { documentStructure as iamDocumentStructure } from './node-hashes.mjs';
 export { documentNodes as iamDocumentNodes } from './node-hashes.mjs';
 export { documentDom as iamDocumentDom } from './dom-payload.mjs';
 export { rebindIamSource } from './rebind.mjs';

package/src/node-hashes.mjs

@@ -1,7 +1,7 @@
 import { documentDom } from "./dom-payload.mjs";
 import { canonical, identity, sealNodes, sealDocument } from './integrity.mjs';
-import { dependency } from './dependencies.mjs';
 import { sourceMappingsHash } from './compact-dom.mjs';
+import { parseFragment } from 'parse5';
 
 /** HTML already owns the DOM values and ordering. Store only the source map
  * in preorder, rather than repeating attributes, text and every tree edge. */
@@ -20,15 +20,32 @@ export function expandDomNodes(document, body, deriveTextId) {
   if(body.childNodes.length!==1||visit(body.firstChild,null,0)!==document.rootNodeId||index!==document.nodes.length)throw Error('HTML-derived DOM coverage differs');
   return result;
 }
-function domNodes(document){
-  const decoded = {...document, ...documentDom(document)};
-  const {JSDOM}=dependency('jsdom').value,dom=new JSDOM('<!doctype html><html><body>'+decoded.html+'</body></html>');
-  try{return expandDomNodes(decoded,dom.window.document.body,(page,parentId,index)=>identity('node',{page,parentId,index,kind:3}));}finally{dom.window.close();}
+
+/** Adapt the same HTML parser's inert tree to the existing source-map expansion.
+ * Maps need tree values, not a window, CSSOM, scripts or derived node hashes. */
+export function documentStructure(document) {
+  const decoded = { ...document, ...documentDom(document) };
+  const adapt = node => ({
+    nodeType: node.tagName ? 1 : node.nodeName === '#text' ? 3 : 8,
+    tagName: node.tagName,
+    data: node.value,
+    get attributes() {
+      return (node.attrs ?? []).map(attr => ({
+        name: attr.prefix ? attr.prefix + ':' + attr.name : attr.name,
+        value: attr.value,
+      }));
+    },
+    getAttribute(name) { return this.attributes.find(attr => attr.name === name)?.value ?? null; },
+    get childNodes() { return (node.childNodes ?? []).map(adapt); },
+    get firstChild() { return this.childNodes[0]; },
+  });
+  return expandDomNodes(decoded, adapt(parseFragment(decoded.html)),
+    (page, parentId, index) => identity('node', { page, parentId, index, kind: 3 }));
 }
 
 /** Node hashes are pure derived values. IDs, source mappings and algorithms never change. */
 export function documentNodes(document) {
-  const values=domNodes(document);
+  const values=documentStructure(document);
   sealNodes(values, document.rootNodeId);
   return values;
 }

package/src/tab-scenes.mjs

@@ -1,7 +1,6 @@
-import { JSDOM, VirtualConsole } from "jsdom";
 import { documentDom } from "./dom-payload.mjs";
 import { createStateMachine } from "./ui-state-machine.mjs";
-import { previewUiDocument } from "./ui-preview.mjs";
+import { inspectUiDocument, inertUiDocument } from "./ui-preview.mjs";
 import {graphSource} from './graph-sources.mjs';
 
 /** Build thumbnail states and edges by dispatching the IAM's actual scalar transitions. */
@@ -13,12 +12,9 @@ export function tabUiScenes(manifest, tabKey) {
     document = manifest.documents.find(
       (d) => d.documentKey === render.documentKey,
     );
-  const dom = new JSDOM(documentDom(document).html, {
-    virtualConsole: new VirtualConsole(),
-  });
+  const doc = inertUiDocument(documentDom(document).html);
   try {
-    const doc = dom.window.document,
-      nodes = new Map(
+    const nodes = new Map(
         [...doc.querySelectorAll("[data-iam-node]")].map((n) => [
           n.getAttribute("data-iam-node"),
           n,
@@ -118,32 +114,31 @@ export function tabUiScenes(manifest, tabKey) {
           ([key, value]) => initial[key] !== value || key === tab.variableKey,
         ),
       );
-      const options = { ...base, values: { ...values, ...changed } },
-        preview = previewUiDocument(manifest, document, options),
-        sceneDom = new JSDOM(preview.html, {
-          virtualConsole: new VirtualConsole(),
-        });
-      const focused = [
-        ...sceneDom.window.document.querySelectorAll("[data-iam-node]"),
-      ]
-        .find((n) => n.getAttribute("data-iam-node") === base.focusNodeId)
-        ?.cloneNode(true);
-      focused
-        ?.querySelectorAll("[hidden],[role=tablist]")
-        .forEach((n) => n.remove());
-      const headings = focused
-        ? [...focused.querySelectorAll("h1,h2,h3,h4,label,[role=columnheader]")]
-            .map((n) => n.textContent.replace(/\s+/g, " ").trim())
-            .filter(Boolean)
-        : [];
-      const content = focused?.textContent.replace(/\s+/g, " ").trim() ?? "";
-      const fields = focused
-        ? [...focused.querySelectorAll("input,textarea,select")].map((n) => ({
-            tag: n.tagName.toLowerCase(),
-            label: n.getAttribute("aria-label") ?? "",
-            placeholder: n.getAttribute("placeholder") ?? "",
-          }))
-        : [];
+      const options = { ...base, values: { ...values, ...changed } };
+      const { preview, headings, content, fields } = inspectUiDocument(
+        manifest, document, options, (doc, preview) => {
+          const focused = [...doc.querySelectorAll("[data-iam-node]")]
+            .find((n) => n.getAttribute("data-iam-node") === base.focusNodeId)
+            ?.cloneNode(true);
+          focused?.querySelectorAll("[hidden],[role=tablist]")
+            .forEach((n) => n.remove());
+          return {
+            preview,
+            headings: focused
+              ? [...focused.querySelectorAll("h1,h2,h3,h4,label,[role=columnheader]")]
+                  .map((n) => n.textContent.replace(/\s+/g, " ").trim()).filter(Boolean)
+              : [],
+            content: focused?.textContent.replace(/\s+/g, " ").trim() ?? "",
+            fields: focused
+              ? [...focused.querySelectorAll("input,textarea,select")].map((n) => ({
+                  tag: n.tagName.toLowerCase(),
+                  label: n.getAttribute("aria-label") ?? "",
+                  placeholder: n.getAttribute("placeholder") ?? "",
+                }))
+              : [],
+          };
+        },
+      );
       const allowedIds = new Set([
         ...ancestors.map((n) => n.getAttribute("data-iam-node")),
         ...(scope
@@ -177,7 +172,6 @@ export function tabUiScenes(manifest, tabKey) {
         transitionKey: result.transitionKey,
         changedNodeIds: tab.contentNodeIds ?? [],
       });
-      sceneDom.window.close();
     }
     const edges = [];
     for (const from of scenes)
@@ -209,6 +203,6 @@ export function tabUiScenes(manifest, tabKey) {
       }
     return { tabKey, scenes, edges };
   } finally {
-    dom.window.close();
+    doc.body.replaceChildren();
   }
 }

package/src/ui-preview.mjs

@@ -1,6 +1,6 @@
-import { JSDOM, VirtualConsole } from "jsdom";
+import { JSDOM } from "jsdom";
 import { documentDom } from "./dom-payload.mjs";
-import {documentNodes} from './node-hashes.mjs';
+import {documentStructure} from './node-hashes.mjs';
 import { createStateMachine } from "./ui-state-machine.mjs";
 import { applySourceAttributes } from "./source-attributes.mjs";
 import {
@@ -10,14 +10,27 @@ import {
 
 /** Inert source alternatives for UI inspection. This never changes the admitted render or SDK targets. */
 export function previewUiDocument(manifest, document, options = {}) {
+  return inspectUiDocument(manifest, document, options, (doc, preview) => ({
+    html: doc.documentElement.outerHTML,
+    ...preview,
+  }));
+}
+
+/** An isolated inert document needs no browsing context, CSSOM or per-scene window. */
+export function inertUiDocument(html) {
+  const fragment = JSDOM.fragment(html);
+  const doc = fragment.ownerDocument.implementation.createHTMLDocument();
+  doc.body.replaceChildren(fragment);
+  return doc;
+}
+
+/** Inspect an inert preview without serializing and reparsing it. */
+export function inspectUiDocument(manifest, document, options, inspect) {
   const graph = manifest.routeTree,
     render = graph.renders.find((r) => r.documentKey === document.documentKey);
   if (!render) throw Error("Unknown UI preview render");
-  const dom = new JSDOM(documentDom(document).html, {
-    virtualConsole: new VirtualConsole(),
-  });
+  const doc = inertUiDocument(documentDom(document).html);
   try {
-    const doc = dom.window.document;
     const nodes = new Map(
       [...doc.querySelectorAll("[data-iam-node]")].map((n) => [
         n.getAttribute("data-iam-node"),
@@ -194,17 +207,21 @@ export function previewUiDocument(manifest, document, options = {}) {
       options.strategy === "content",
       selections,
     );
+    let mapped;
+    const sourceNode = id => {
+      mapped ??= new Map(documentStructure(document).map(n => [n.nodeId, n]));
+      return mapped.get(id);
+    };
     if(options.strategy==='content') {
-      const mapped=new Map(documentNodes(document).map(n=>[n.nodeId,n]));
       const sources=new Map(manifest.elements.map(e=>[e.elementKey,e.source]));
       for(const field of doc.querySelectorAll('[data-iam-observation="remote"],[data-iam-observation="unobserved"],[data-iam-input-unobserved]')) {
         const hidden=field.closest('[hidden]');if(hidden&&(!focus||focus.contains(hidden)))continue;
-        const id=field.getAttribute('data-iam-node'),node=mapped.get(id),source=node&&(node.source??sources.get(node.elementKey));if(source&&!unobserved.some(u=>u.groupKey===id))unobserved.push({groupKey:id,expression:'Data unobserved',source});
+        const id=field.getAttribute('data-iam-node'),node=sourceNode(id),source=node&&(node.source??sources.get(node.elementKey));if(source&&!unobserved.some(u=>u.groupKey===id))unobserved.push({groupKey:id,expression:'Data unobserved',source});
       }
     }
     if (focus) {
       const template=focus.closest('[data-iam-source-template="unobserved"]');
-      if(template){const id=template.getAttribute('data-iam-node'),node=documentNodes(document).find(n=>n.nodeId===id),source=node&&(node.source??manifest.elements.find(e=>e.elementKey===node.elementKey)?.source);if(source)unobserved.push({groupKey:id,expression:'Source template · collection data unobserved',source});}
+      if(template){const id=template.getAttribute('data-iam-node'),node=sourceNode(id),source=node&&(node.source??manifest.elements.find(e=>e.elementKey===node.elementKey)?.source);if(source)unobserved.push({groupKey:id,expression:'Source template · collection data unobserved',source});}
     }
     const assumptions = [...groups].flatMap(([key, rows]) => {
       if (!selections.has(key)) return [];
@@ -225,15 +242,36 @@ export function previewUiDocument(manifest, document, options = {}) {
           ]
         : [];
     });
-    return {
-      html: doc.documentElement.outerHTML,
+    const regionParents = new Map(regions.flatMap(region => region.options.map(option => [
+      option.nodeId, { regionKey: region.regionKey, value: option.value },
+    ])));
+    const conditionChoices = [...groups].map(([groupKey, rows]) => {
+      const row = rows[0], requires = { conditions: [], regions: [] };
+      for (let parent = nodes.get(row.truthyNodeId)?.parentElement; parent; parent = parent.parentElement) {
+        const id = parent.getAttribute("data-iam-node"), region = regionParents.get(id);
+        if (region) requires.regions.unshift(region);
+        if (!parent.hasAttribute("data-iam-condition")) continue;
+        const truthy = parent.getAttribute("data-iam-alternative") === "true";
+        const root = truthy ? parent : parent.previousElementSibling;
+        const key = root?.getAttribute("data-iam-node");
+        if (groups.has(key) && root.getAttribute("data-iam-condition") === parent.getAttribute("data-iam-condition"))
+          requires.conditions.unshift({ groupKey: key, value: truthy });
+      }
+      return {
+        groupKey, expression: row.expression, source: row.source,
+        selected: selections.has(groupKey) ? selections.get(groupKey) : null,
+        requires,
+      };
+    });
+    return inspect(doc, {
       assumptions,
+      conditionChoices,
       values,
       componentChoices,
       collectionChoices,
       unobserved,
-    };
+    });
   } finally {
-    dom.window.close();
+    doc.body.replaceChildren();
   }
 }

package/src/upload-checkpoint.mjs

@@ -0,0 +1,59 @@
+import fs from "node:fs/promises";
+import { constants } from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import { createHash, randomUUID } from "node:crypto";
+
+const hash = value => createHash("sha256").update(value).digest("hex");
+const uuid = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/;
+
+/** Local recovery state is a private bearer capability, never a manifest or source artifact. */
+export async function uploadCheckpoint({ base, apiKey, client, platform, digest, bytes, label, directory }) {
+  directory ??= process.env.INDIANA_IAM_CACHE_DIR || path.join(os.homedir(), ".cache", "indiana", "iam-uploads");
+  directory = path.resolve(directory);
+  await fs.mkdir(directory, { recursive: true, mode: 0o700 });
+  const folder = await fs.lstat(directory);
+  if (!folder.isDirectory() || folder.isSymbolicLink() || (folder.mode & 0o077))
+    throw new Error("IAM upload cache must be a private directory (mode 0700)");
+  const fingerprint = hash(JSON.stringify([base.origin, hash(apiKey), client, platform, digest, bytes]));
+  const file = path.join(directory, fingerprint + ".json");
+  async function read() {
+    let handle;
+    try {
+      handle = await fs.open(file, constants.O_RDONLY | constants.O_NOFOLLOW);
+      const stat = await handle.stat();
+      if (!stat.isFile() || stat.size > 32_768 || (stat.mode & 0o077)) throw new Error();
+      const saved = JSON.parse(await handle.readFile("utf8"));
+      if (saved.format !== 1 || saved.fingerprint !== fingerprint || !uuid.test(saved.requestId) ||
+        typeof saved.label !== "string" || !saved.label.length || saved.label.length > 100 ||
+        !Number.isFinite(saved.createdAt) || saved.createdAt > Date.now() + 60_000 ||
+        (saved.version && (!uuid.test(saved.version.id) || !Number.isFinite(Date.parse(saved.version.expiresAt))))) throw new Error();
+      return saved;
+    } catch (error) {
+      if (error.code === "ENOENT") return null;
+      throw new Error("IAM upload checkpoint is invalid; inspect the private upload cache before retrying");
+    } finally { await handle?.close(); }
+  }
+  async function write(saved, first = false) {
+    const temporary = file + "." + randomUUID();
+    try {
+      await fs.writeFile(temporary, JSON.stringify(saved), { flag: "wx", mode: 0o600 });
+      if (first) {
+        // Linking a fully written file reserves the request ID atomically across processes.
+        try { await fs.link(temporary, file); }
+        catch (error) { if (error.code !== "EEXIST") throw error; return await read(); }
+      } else await fs.rename(temporary, file);
+      return saved;
+    } finally { await fs.rm(temporary, { force: true }); }
+  }
+  const fresh = () => ({ format: 1, fingerprint, requestId: randomUUID(), label, createdAt: Date.now() });
+  const saved = await read() ?? await write(fresh(), true);
+  return {
+    saved,
+    write,
+    reset: () => write(fresh()),
+    async clear(requestId) {
+      if ((await read())?.requestId === requestId) await fs.rm(file, { force: true });
+    },
+  };
+}

package/src/upload.mjs

@@ -1,11 +1,13 @@
 import { repositoryCommit } from "./git-metadata.mjs";
-import { randomUUID } from "node:crypto";
+import { createHash } from "node:crypto";
+import { setTimeout as delay } from "node:timers/promises";
+import { uploadCheckpoint } from "./upload-checkpoint.mjs";
 
 export const DEFAULT_BASE_URL = "https://tinker.cash";
 /** One App environment can hold several clients (named builds); each has its own current version. */
 export const DEFAULT_CLIENT = "web";
 const CLIENT_KEY = /^[a-z][a-z0-9-]{0,39}$/;
-const SIGNED_UPLOAD_ORIGIN = "https://storage.googleapis.com";
+const UPLOAD_ORIGIN = "https://storage.googleapis.com";
 
 /** The build's upload settings: the key, client and API origin come from options or the build environment. */
 export function uploadSettings({ apiKey, baseUrl, upload = "production", client } = {}, env = process.env) {
@@ -32,64 +34,181 @@ export function buildLabel(root, env = process.env) {
   return "build " + new Date().toISOString().slice(0, 16).replace("T", " ");
 }
 
+const CHUNK_BYTES = 8 * 1024 * 1024; // GCS requires non-final chunks to be multiples of 256 KiB.
+const retryable = status => status === 408 || status === 429 || status >= 500;
+class UploadError extends Error {
+  constructor(message, status = 0, retryAfter = 0) {
+    super(message);
+    this.status = status;
+    this.retryAfter = retryAfter;
+  }
+}
 async function failure(response, step) {
   let message = response.statusText;
-  try {
+  if (step !== "storage") try {
     const body = await response.json();
     if (typeof body?.error?.message === "string") message = body.error.message;
-  } catch { /* Keep the HTTP status text. */ }
-  return new Error(`IAM upload ${step} failed (${response.status}): ${message}`);
+  } catch { /* Keep the HTTP status text; never include a storage capability. */ }
+  return new UploadError(`IAM upload ${step} failed (${response.status}): ${message}`, response.status,
+    Math.min(5000, Math.max(0, Number(response.headers.get("retry-after")) || 0) * 1000));
+}
+const pause = (attempt, error) => delay(Math.max(error.retryAfter || 0, 250 * 2 ** attempt));
+
+/** API retries retain the identical body and request ID. Storage writes instead query the persisted offset. */
+async function request(fetch, url, init, step, retry = true) {
+  for (let attempt = 0; ; attempt++) {
+    try {
+      let response;
+      try { response = await fetch(url, { ...init, redirect: step === "storage" ? "manual" : "error", signal: AbortSignal.timeout(step === "validation" ? 150_000 : 60_000) }); }
+      catch { throw new UploadError(`IAM upload ${step} connection interrupted; rerun the same upload to resume`); }
+      if (response.ok || (step === "storage" && [308, 404, 410, 412].includes(response.status))) return response;
+      throw await failure(response, step);
+    } catch (error) {
+      if (!retry || attempt >= 2 || !(error instanceof UploadError) || (error.status && !retryable(error.status))) throw error;
+      await pause(attempt, error);
+    }
+  }
+}
+
+function checkedPlan(plan, version, size) {
+  try {
+    const url = new URL(plan.url), params = url.searchParams;
+    const allowed = ["uploadType", "upload_id", "name", "upload_protocol", "ifGenerationMatch"];
+    if (plan.kind !== "gcs-resumable" || plan.byteLength !== size ||
+      !["enterprise-internal-indiana-test", "tinkerland-indiana-prod"].includes(plan.bucket) ||
+      plan.objectKey !== `${version.projectId}/${version.environmentId}/${version.id}/manifest.json` ||
+      Date.parse(plan.expiresAt) !== Date.parse(version.expiresAt) || Date.parse(plan.expiresAt) <= Date.now() ||
+      url.origin !== UPLOAD_ORIGIN || url.username || url.password || url.hash ||
+      url.pathname !== `/upload/storage/v1/b/${plan.bucket}/o` ||
+      [...params.keys()].some(key => !allowed.includes(key) || params.getAll(key).length !== 1) ||
+      params.get("uploadType") !== "resumable" || !/^[A-Za-z0-9_-]{1,4096}$/.test(params.get("upload_id") ?? "") ||
+      (params.has("name") && params.get("name") !== `app-manifests/${plan.objectKey}`) ||
+      (params.has("upload_protocol") && params.get("upload_protocol") !== "resumable") ||
+      (params.has("ifGenerationMatch") && params.get("ifGenerationMatch") !== "0")) throw new Error();
+    return plan;
+  } catch { throw new Error("IAM upload received an unexpected storage address or upload capability"); }
+}
+function offset(response, size, minimum = 0, maximum = size) {
+  if (response.status === 200 || response.status === 201 || response.status === 412) return size;
+  if (response.status === 404 || response.status === 410) return null;
+  const range = response.headers.get("range");
+  const match = range?.match(/^bytes=0-(\d+)$/);
+  const next = range === null ? 0 : match ? Number(match[1]) + 1 : NaN;
+  if (response.status !== 308 || !Number.isSafeInteger(next) || next < minimum || next > maximum || next >= size)
+    throw new Error("IAM upload received an invalid storage offset");
+  return next;
+}
+async function transfer(fetch, plan, bytes, onProgress) {
+  const size = bytes.byteLength;
+  const probe = async () => offset(await request(fetch, plan.url, {
+    method: "PUT", headers: { "Content-Length": "0", "Content-Range": `bytes */${size}` }, body: Buffer.alloc(0),
+  }, "storage"), size);
+  let next = await probe();
+  if (next === null) return false;
+  onProgress?.({ phase: "upload", uploadedBytes: next, totalBytes: size });
+  let failures = 0;
+  while (next < size) {
+    if (Date.parse(plan.expiresAt) <= Date.now()) throw new Error("IAM upload expired; rerun the same build to start a new upload");
+    const end = Math.min(next + CHUNK_BYTES, size), start = next;
+    try {
+      const response = await request(fetch, plan.url, {
+        method: "PUT",
+        headers: { "Content-Type": "application/json", "Content-Length": String(end - start), "Content-Range": `bytes ${start}-${end - 1}/${size}` },
+        body: bytes.subarray(start, end),
+      }, "storage", false);
+      next = offset(response, size, start, end);
+      if (next === null) return false;
+      if (next === start) throw new UploadError("IAM upload storage made no progress");
+      if ((response.status === 200 || response.status === 201) && end !== size)
+        throw new Error("IAM upload storage completed before all bytes were sent");
+      failures = 0;
+    } catch (error) {
+      if (!(error instanceof UploadError) || (error.status && !retryable(error.status)) || failures >= 2) throw error;
+      await pause(failures++, error);
+      const received = await probe();
+      if (received === null) return false;
+      if (received < start || received > end) throw new Error("IAM upload received an invalid storage offset");
+      next = received;
+    }
+    onProgress?.({ phase: "upload", uploadedBytes: next, totalBytes: size });
+  }
+  return true;
 }
 
-/**
- * Uploads one generated IAM to Indiana: register, PUT the bytes to the server-signed URL,
- * then let the server verify them. The key needs only the app-manifests:write permission;
- * the uploaded (or redeployed) version becomes its client's current version.
- */
+/** Registers one immutable version, resumes GCS bytes and retries server validation independently. */
 export async function uploadAppManifest({
-  serialized,
-  digest,
-  label,
-  client = DEFAULT_CLIENT,
-  apiKey,
-  baseUrl = DEFAULT_BASE_URL,
-  fetch = globalThis.fetch,
+  serialized, digest, label, client = DEFAULT_CLIENT, apiKey, baseUrl = DEFAULT_BASE_URL,
+  fetch = globalThis.fetch, cacheDirectory, onProgress,
 }) {
   if (!apiKey) throw new Error("IAM upload needs a key with the app-manifests:write permission");
   const base = new URL(baseUrl);
-  if (base.protocol !== "https:" && !["localhost", "127.0.0.1", "[::1]"].includes(base.hostname))
-    throw new Error("IAM upload needs an https Indiana origin");
-  if (!CLIENT_KEY.test(client))
-    throw new Error("IAM client must be 1-40 lowercase letters, digits or hyphens, starting with a letter");
-  // The server checks the stored file declares this same platform before the version becomes current.
+  if (!(base.protocol === "https:" || (base.protocol === "http:" && ["localhost", "127.0.0.1", "[::1]"].includes(base.hostname))) || base.username || base.password)
+    throw new Error("IAM upload needs an https Indiana origin without credentials");
+  if (!CLIENT_KEY.test(client)) throw new Error("IAM client must be 1-40 lowercase letters, digits or hyphens, starting with a letter");
   const platforms = JSON.parse(serialized)?.app?.platforms;
-  if (!Array.isArray(platforms) || platforms.length !== 1) throw new Error("IAM upload needs a manifest for exactly one platform");
-  const bytes = Buffer.from(serialized);
+  if (!Array.isArray(platforms) || platforms.length !== 1 || !["web", "ios", "android"].includes(platforms[0]))
+    throw new Error("IAM upload needs a manifest for exactly one platform");
+  const bytes = Buffer.from(serialized), size = bytes.byteLength;
+  if (createHash("sha256").update(bytes).digest("hex") !== digest) throw new Error("IAM upload digest does not match its bytes");
+  if (typeof label !== "string" || label.length < 1 || label.length > 100) throw new Error("IAM upload needs a label of 1-100 characters");
+  const checkpoint = await uploadCheckpoint({ base, apiKey, client, platform: platforms[0], digest, bytes: size, label, directory: cacheDirectory });
+  let state = checkpoint.saved;
   const authorization = { Authorization: "Bearer " + apiKey };
-  const registered = await fetch(new URL("/api/iam/versions", base), {
-    method: "POST",
-    headers: { ...authorization, "Content-Type": "application/json" },
-    body: JSON.stringify({ requestId: randomUUID(), client, platform: platforms[0], label, sha256: digest, bytes: bytes.byteLength }),
-    signal: AbortSignal.timeout(60_000),
-  });
-  if (!registered.ok) throw await failure(registered, "registration");
+  const complete = async versionId => {
+    onProgress?.({ phase: "validation", uploadedBytes: size, totalBytes: size });
+    const response = await request(fetch, new URL(`/api/iam/versions/${encodeURIComponent(versionId)}/complete`, base), {
+      method: "POST", headers: authorization,
+    }, "validation");
+    const version = (await response.json()).version;
+    if (version?.id !== versionId || version.state !== "ready") throw new Error("IAM upload received an invalid completed version");
+    await checkpoint.clear(state.requestId);
+    return { version, uploaded: true };
+  };
+  // Reauthorize on Indiana before using a cached bearer session. A lost completion reply
+  // requires neither another registration nor another storage write.
+  if (state.version) {
+    try { return await complete(state.version.id); }
+    catch (error) {
+      if (!(error instanceof UploadError) || error.status !== 409) throw error;
+      if (Date.parse(state.version.expiresAt) <= Date.now()) state = await checkpoint.reset();
+    }
+  }
+  onProgress?.({ phase: "registration", uploadedBytes: 0, totalBytes: size });
+  const register = () => request(fetch, new URL("/api/iam/versions", base), {
+    method: "POST", headers: { ...authorization, "Content-Type": "application/json" },
+    body: JSON.stringify({ requestId: state.requestId, client, platform: platforms[0], label: state.label, sha256: digest, bytes: size }),
+  }, "registration");
+  let registered;
+  try { registered = await register(); }
+  catch (error) {
+    // A lost registration reply may also outlive its original 15-minute SQL intent.
+    if (!(error instanceof UploadError) || error.status !== 409 || Date.now() - state.createdAt < 900_000) throw error;
+    state = await checkpoint.reset();
+    registered = await register();
+  }
   const { version, upload } = await registered.json();
-  if (!upload) return { version, uploaded: false };
-  if (typeof upload.url !== "string" || !upload.url.startsWith(SIGNED_UPLOAD_ORIGIN + "/"))
-    throw new Error("IAM upload received an unexpected storage address");
-  const stored = await fetch(upload.url, {
-    method: "PUT",
-    headers: upload.headers,
-    body: bytes,
-    signal: AbortSignal.timeout(120_000),
-  });
-  // 412: an earlier attempt already stored this immutable object.
-  if (!stored.ok && stored.status !== 412) throw new Error(`IAM upload storage failed (${stored.status})`);
-  const completed = await fetch(new URL(`/api/iam/versions/${encodeURIComponent(version.id)}/complete`, base), {
-    method: "POST",
-    headers: authorization,
-    signal: AbortSignal.timeout(150_000),
-  });
-  if (!completed.ok) throw await failure(completed, "validation");
-  return { version: (await completed.json()).version, uploaded: true };
+  const uuid = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/;
+  if (!uuid.test(version?.id ?? "") || !["ready", "uploading"].includes(version.state) ||
+    (version.state === "uploading" && (!uuid.test(version.projectId) || !uuid.test(version.environmentId) || !Number.isFinite(Date.parse(version.expiresAt)))))
+    throw new Error("IAM upload received an invalid registered version");
+  if (version.state === "ready") {
+    await checkpoint.clear(state.requestId);
+    return { version, uploaded: false };
+  }
+  const previous = state.version?.id === version.id ? state.upload : null;
+  state = await checkpoint.write({ ...state, version });
+  if (upload) {
+    const fresh = checkedPlan(upload, version, size);
+    let plan = previous ? checkedPlan(previous, version, size) : fresh;
+    state = await checkpoint.write({ ...state, upload: plan });
+    if (!await transfer(fetch, plan, bytes, onProgress)) {
+      // The cached GCS session expired independently; the fresh, authorized session
+      // still belongs to this same SQL version and immutable object.
+      if (plan.url === fresh.url) throw new Error("IAM upload storage session expired; rerun the same upload to resume");
+      plan = fresh;
+      state = await checkpoint.write({ ...state, upload: plan });
+      if (!await transfer(fetch, plan, bytes, onProgress)) throw new Error("IAM upload storage session expired; rerun the same upload to resume");
+    }
+  }
+  return complete(version.id);
 }