@vmz/vmz 0.3.13 → 0.3.14

package/bin/vmz.js

@@ -9,4 +9,8 @@ if (major < 24 || (major === 24 && minor < 12)) {
 }
 const { runCli } = await import('../dist/cli/cli.js');
 const code = await runCli(process.argv.slice(2));
+// POSIX pipes flush asynchronously, so `process.exit` can drop queued
+// diagnostics before CI captures them. Drain both streams first.
+await new Promise((resolve) => process.stderr.write('', resolve));
+await new Promise((resolve) => process.stdout.write('', resolve));
 process.exit(code ?? 0);

package/delivery-runtime-files.json

@@ -11,6 +11,7 @@
         { "src": "browser/direct-host-box.js", "out": "direct-host-box.js" },
         { "src": "browser/unknown-component.js", "out": "unknown-component.js" },
         { "src": "shared/dom-attr-normalize.js", "out": "dom-attr-normalize.js" },
+        { "src": "shared/html-digest.js", "out": "html-digest.js" },
         { "src": "faces/http.js", "out": "vmz-http.js" },
         { "src": "browser/client-nav.js", "out": "vmz-client-nav.js" }
     ],

package/dist/dev/dev-incremental.d.ts

@@ -36,14 +36,12 @@ export interface DevReloadPayload {
     islandHmr?: boolean;
     rerunLoaders?: string[];
     staticRevision?: string;
-    skipEntryRewrite?: boolean;
     outputRevision?: string;
 }
 export declare function parseHmrPlan(raw: string | object | null | undefined): HmrPlanWire | null;
 export declare function hmrRerunLoaders(plan: HmrPlanWire | null | undefined): string[];
 export declare function buildReloadPayload(report: BuildReportWire, hmrPlan: HmrPlanWire | null, opts?: {
     staticRevision?: string;
-    skipEntryRewrite?: boolean;
 }): DevReloadPayload;
 export declare function shouldSoftReload(report: BuildReportWire, lastOutputRevision: string | null, opts?: {
     force?: boolean;

package/dist/dev/dev-incremental.js

@@ -38,7 +38,6 @@ export function buildReloadPayload(report, hmrPlan, opts = {}) {
         islandHmr: islandHmr && !full,
         rerunLoaders,
         staticRevision: opts.staticRevision,
-        skipEntryRewrite: opts.skipEntryRewrite,
         outputRevision: report.outputRevision ?? report.output_revision,
     };
 }

package/dist/dev/dev-session.d.ts

@@ -11,6 +11,7 @@
  */
 import { createWorkspace } from '../workspace/public-api.js';
 import { type ConfigCycle } from './config-cycle.js';
+import { packFromDeploymentIr } from '../workspace/pack.js';
 interface DevSessionOptions {
     project: string;
     outDir: string;
@@ -28,7 +29,9 @@ interface DevSessionOptions {
         host: string;
         port: number;
     }) => import('node:child_process').ChildProcess;
-    softReloadFn?: (host: string, port: number, payload?: object) => Promise<void>;
+    softReloadFn?: (body: Record<string, unknown>) => Promise<Record<string, unknown>>;
+    /** Test seam for the browser pack stage (defaults to `packFromDeploymentIr`). */
+    packFn?: typeof packFromDeploymentIr;
     /** Override the detached config build process (tests). */
     configCycleFn?: (opts: {
         project: string;
@@ -38,6 +41,55 @@ interface DevSessionOptions {
     /** Built config cycle worker path (defaults to `dist/dev/config-cycle-worker.js`). */
     configCycleWorkerPath?: string;
 }
+export interface PackManifestView {
+    chunks?: Array<{
+        fileName?: string;
+        sourceMap?: string;
+        modules?: unknown[];
+    }>;
+    styles?: Array<{
+        fileName?: string;
+        sourcePaths?: unknown[];
+    }>;
+    assets?: Array<{
+        fileName?: string;
+    }>;
+    entryFiles?: Array<{
+        file?: string;
+    }>;
+    dynamicFiles?: Array<{
+        from?: string;
+        to?: string;
+    }>;
+    unitChunks?: Array<{
+        fileName?: string | null;
+    }>;
+}
+export interface PackInputSnapshot {
+    files: Array<{
+        path: string;
+        digest: string;
+    }>;
+    listings: Array<{
+        dir: string;
+        names: string[];
+    }>;
+    deploymentOrigins: string;
+    lockfile: {
+        path: string;
+        digest: string;
+    };
+    manifest: {
+        path: string;
+        digest: string;
+    };
+}
+/** 记下决定 pack 产物的全部输入；任何一项取不到就放弃快照（等同于永远重打包）。 */
+export declare function capturePackInputSnapshot(manifest: PackManifestView, outDir: string, project: string): PackInputSnapshot | null;
+/** 返回 null 表示全部输入字节全等；否则返回第一个变化原因。 */
+export declare function packInputsChangedReason(snapshot: PackInputSnapshot, outDir: string): string | null;
+/** 复用上次 manifest 前确认 entry/chunk/island 查表指向的文件仍在盘上；缺任何一个就退回真实 pack。 */
+export declare function missingPackOutput(manifest: PackManifestView, outDir: string): string | null;
 export declare function createDevSession(options: DevSessionOptions): {
     ws: any;
     rebuild: (changes?: Array<{

package/dist/dev/dev-session.js

@@ -10,7 +10,8 @@
  * 3. Soft reload failure → **auto-respawn** serve-host (fresh ESM graph), not "keep broken host".
  */
 import { spawn } from 'node:child_process';
-import { existsSync, readFileSync, unlinkSync, writeFileSync } from 'node:fs';
+import { createHash } from 'node:crypto';
+import { existsSync, readFileSync, readdirSync, unlinkSync, writeFileSync } from 'node:fs';
 import path from 'node:path';
 import { buildIntegratedDocuments, projectHasDocuments } from '../document/document-integrate.js';
 import { createWorkspace, resolveNativePath } from '../workspace/public-api.js';
@@ -22,6 +23,8 @@ import { coalesceRootBurst, collectDevWatchRoots, classifyWatchRoot, isDependenc
 import { createConfigCycle } from './config-cycle.js';
 import { buildReloadPayload, filterGenerationIgnore, parseHmrPlan, registerWrittenOutputsIgnore, shouldSoftReload, staticRevisionFromArtifact, } from './dev-incremental.js';
 import { diffFingerprints, fileFingerprintMap } from '../workspace/watch-diff.js';
+import { packFromDeploymentIr, deploymentUnitOrigins } from '../workspace/pack.js';
+import { loadDeploymentIr } from '../workspace/bundler-adapter.js';
 /** Track serve-host so a failed/killed launcher cannot leave an orphan port. */
 const DEV_HOST_PID = '.vmz-dev-host.pid';
 function cycleFailure(report) {
@@ -29,6 +32,218 @@ function cycleFailure(report) {
     const error = new Error(detail);
     return report.error ? Object.assign(error, { diagnostic: report.error }) : error;
 }
+/**
+ * Pack 输入快照：dev 只在「决定产物字节的全部输入」完全不变时才复用上次产物。
+ * 判据是文件内容哈希，不使用 mtime、文件数量或后缀推导；读不到或未知的输入一律按变更处理。
+ */
+const PACK_INPUT_IGNORED_DIRS = new Set(['_vmz', 'node_modules', '.cache', '.git']);
+const PACK_INPUT_IGNORED_NAMES = /^\.vmz-dev-host\.pid$/;
+/** Rust 侧的模块路径带 `//?/`（或 `\\?\`）verbatim 前缀，落盘读取前需要剥离。 */
+function packInputFsPath(filePath) {
+    return filePath.replace(/^(?:\\\\\?\\|\/\/\?\/)/, '').replace(/\\/g, '/');
+}
+function readFileDigest(filePath) {
+    try {
+        return createHash('sha256').update(readFileSync(filePath)).digest('hex');
+    }
+    catch {
+        return null;
+    }
+}
+function findLockfile(project) {
+    let dir = path.resolve(project);
+    while (true) {
+        const candidate = path.join(dir, 'pnpm-lock.yaml');
+        if (existsSync(candidate))
+            return candidate;
+        const parent = path.dirname(dir);
+        if (parent === dir)
+            return null;
+        dir = parent;
+    }
+}
+function listPackInputDir(dir) {
+    const names = [];
+    const walk = (current, prefix) => {
+        let entries;
+        try {
+            entries = readdirSync(current, { withFileTypes: true });
+        }
+        catch {
+            return false;
+        }
+        entries.sort((left, right) => (left.name < right.name ? -1 : left.name > right.name ? 1 : 0));
+        for (const entry of entries) {
+            if (PACK_INPUT_IGNORED_DIRS.has(entry.name) || PACK_INPUT_IGNORED_NAMES.test(entry.name))
+                continue;
+            const rel = prefix ? `${prefix}/${entry.name}` : entry.name;
+            if (entry.isDirectory()) {
+                if (!walk(path.join(current, entry.name), rel))
+                    return false;
+            }
+            else {
+                names.push(rel);
+            }
+        }
+        return true;
+    };
+    return walk(dir, '') ? names : null;
+}
+/** manifest 形状不认识时返回 null（而非空集合），避免把未知输入当成「没变化」。 */
+function packInputFiles(manifest) {
+    if (!Array.isArray(manifest.chunks) || manifest.chunks.length === 0)
+        return null;
+    const files = new Set();
+    for (const chunk of manifest.chunks) {
+        if (!Array.isArray(chunk.modules))
+            return null;
+        for (const module of chunk.modules) {
+            if (typeof module !== 'string' || !module)
+                return null;
+            files.add(packInputFsPath(module));
+        }
+    }
+    if (!Array.isArray(manifest.styles))
+        return null;
+    for (const style of manifest.styles) {
+        if (!Array.isArray(style.sourcePaths))
+            return null;
+        for (const source of style.sourcePaths) {
+            if (typeof source !== 'string' || !source)
+                return null;
+            files.add(packInputFsPath(source));
+        }
+    }
+    return [...files].sort();
+}
+/** pack 只经 `deploymentUnitOrigins` 读取 IR；对这份 origins 取规范摘要，避免把构建期 affected/seed 噪声算成输入变更。 */
+function deploymentOriginsDigest(outDir) {
+    try {
+        const origins = deploymentUnitOrigins(outDir, loadDeploymentIr(outDir));
+        const canonical = Object.keys(origins)
+            .sort()
+            .map((key) => `${key}\u0000${origins[key]}`);
+        return createHash('sha256').update(canonical.join('\u0001')).digest('hex');
+    }
+    catch {
+        return null;
+    }
+}
+/** 记下决定 pack 产物的全部输入；任何一项取不到就放弃快照（等同于永远重打包）。 */
+export function capturePackInputSnapshot(manifest, outDir, project) {
+    const inputs = packInputFiles(manifest);
+    if (!inputs)
+        return null;
+    const files = [];
+    for (const file of inputs) {
+        const digest = readFileDigest(file);
+        if (!digest)
+            return null;
+        files.push({ path: file, digest });
+    }
+    const listings = [];
+    for (const dir of [...new Set(files.map((file) => path.dirname(file.path)))].sort()) {
+        if (dir.split(/[\\/]/).includes('node_modules'))
+            continue;
+        const names = listPackInputDir(dir);
+        if (!names)
+            return null;
+        listings.push({ dir, names });
+    }
+    const deploymentOrigins = deploymentOriginsDigest(outDir);
+    if (!deploymentOrigins)
+        return null;
+    const lockfilePath = findLockfile(project);
+    if (!lockfilePath)
+        return null;
+    const lockfileDigest = readFileDigest(lockfilePath);
+    if (!lockfileDigest)
+        return null;
+    const manifestPath = path.join(outDir, '_vmz', 'pack-manifest.json');
+    const manifestDigest = readFileDigest(manifestPath);
+    if (!manifestDigest)
+        return null;
+    return {
+        files,
+        listings,
+        deploymentOrigins,
+        lockfile: { path: lockfilePath, digest: lockfileDigest },
+        manifest: { path: manifestPath, digest: manifestDigest },
+    };
+}
+/** 返回 null 表示全部输入字节全等；否则返回第一个变化原因。 */
+export function packInputsChangedReason(snapshot, outDir) {
+    const lockfileDigest = readFileDigest(snapshot.lockfile.path);
+    if (!lockfileDigest)
+        return `lockfile unreadable: ${snapshot.lockfile.path}`;
+    if (lockfileDigest !== snapshot.lockfile.digest)
+        return 'lockfile changed';
+    const manifestDigest = readFileDigest(snapshot.manifest.path);
+    if (!manifestDigest)
+        return `pack manifest unreadable: ${snapshot.manifest.path}`;
+    if (manifestDigest !== snapshot.manifest.digest)
+        return 'pack manifest changed';
+    const deploymentOrigins = deploymentOriginsDigest(outDir);
+    if (!deploymentOrigins)
+        return 'deployment IR unreadable';
+    if (deploymentOrigins !== snapshot.deploymentOrigins)
+        return 'deployment IR changed';
+    for (const file of snapshot.files) {
+        const digest = readFileDigest(file.path);
+        if (!digest)
+            return `input unreadable: ${file.path}`;
+        if (digest !== file.digest)
+            return `input changed: ${file.path}`;
+    }
+    for (const listing of snapshot.listings) {
+        const names = listPackInputDir(listing.dir);
+        if (!names)
+            return `input directory unreadable: ${listing.dir}`;
+        if (names.length !== listing.names.length)
+            return `input directory changed: ${listing.dir}`;
+        for (let i = 0; i < names.length; i += 1) {
+            if (names[i] !== listing.names[i])
+                return `input directory changed: ${listing.dir}`;
+        }
+    }
+    return null;
+}
+/** 复用上次 manifest 前确认 entry/chunk/island 查表指向的文件仍在盘上；缺任何一个就退回真实 pack。 */
+export function missingPackOutput(manifest, outDir) {
+    const packDir = path.join(outDir, '_vmz', 'pack');
+    if (!existsSync(path.join(outDir, '_vmz', 'pack-manifest.json')))
+        return '_vmz/pack-manifest.json';
+    const names = new Set();
+    for (const entry of manifest.entryFiles ?? [])
+        if (typeof entry.file === 'string' && entry.file)
+            names.add(entry.file);
+    for (const dynamic of manifest.dynamicFiles ?? []) {
+        if (typeof dynamic.from === 'string' && dynamic.from)
+            names.add(dynamic.from);
+        if (typeof dynamic.to === 'string' && dynamic.to)
+            names.add(dynamic.to);
+    }
+    for (const chunk of manifest.chunks ?? []) {
+        if (typeof chunk.fileName === 'string' && chunk.fileName)
+            names.add(chunk.fileName);
+        if (typeof chunk.sourceMap === 'string' && chunk.sourceMap)
+            names.add(chunk.sourceMap);
+    }
+    for (const style of manifest.styles ?? [])
+        if (typeof style.fileName === 'string' && style.fileName)
+            names.add(style.fileName);
+    for (const asset of manifest.assets ?? [])
+        if (typeof asset.fileName === 'string' && asset.fileName)
+            names.add(asset.fileName);
+    for (const unit of manifest.unitChunks ?? [])
+        if (typeof unit.fileName === 'string' && unit.fileName)
+            names.add(unit.fileName);
+    for (const name of names) {
+        if (!existsSync(path.join(packDir, ...name.split('/'))))
+            return name;
+    }
+    return null;
+}
 export function createDevSession(options) {
     const project = options.project;
     const outDir = options.outDir;
@@ -39,7 +254,8 @@ export function createDevSession(options) {
     let delivery = options.delivery ?? null;
     const createWs = options.createWorkspaceFn ?? createWorkspace;
     const spawnHost = options.spawnHostFn ?? defaultSpawnHost;
-    const softReload = options.softReloadFn ?? defaultSoftReload;
+    const softReload = options.softReloadFn ?? ((body) => defaultReloadRequest(host, port, body));
+    const packBrowser = options.packFn ?? packFromDeploymentIr;
     const makeConfigCycle = options.configCycleFn ?? createConfigCycle;
     const configCandidates = configCandidatePaths(project);
     let configCycle = null;
@@ -48,6 +264,9 @@ export function createDevSession(options) {
     let stopped = false;
     let lastOutputRevision = null;
     let lastStaticRevision = null;
+    let lastBuildMs = 0;
+    let lastPackManifest = null;
+    let lastPackInputs = null;
     const generationIgnore = new Set();
     function planAndRebuild(changes) {
         if (changes?.length)
@@ -61,7 +280,9 @@ export function createDevSession(options) {
         catch {
             hmrPlan = null;
         }
+        const startedAt = Date.now();
         const report = ws.build();
+        lastBuildMs = Date.now() - startedAt;
         return { report, hmrPlan };
     }
     function rebuild(changes) {
@@ -75,7 +296,6 @@ export function createDevSession(options) {
     }
     async function maybeReloadAfterBuild(report, hmrPlan, opts = {}) {
         const rev = report.outputRevision ?? report.output_revision ?? null;
-        const skipEntry = Boolean(rev && rev === lastOutputRevision);
         if (!opts.force && !opts.staticOnly && !shouldSoftReload(report, lastOutputRevision)) {
             log.info('rebuild ok — artifact unchanged, skip soft reload');
             if (rev)
@@ -85,14 +305,12 @@ export function createDevSession(options) {
         }
         const payload = buildReloadPayload(report, hmrPlan, {
             staticRevision: lastStaticRevision ?? undefined,
-            skipEntryRewrite: skipEntry && !opts.force,
         });
         if (opts.staticOnly) {
             payload.full = false;
             payload.islandHmr = false;
-            payload.skipEntryRewrite = true;
         }
-        const kind = await reloadAfterBuild(payload);
+        const kind = await reloadAfterBuild(payload, { staticOnly: Boolean(opts.staticOnly) });
         if (rev)
             lastOutputRevision = rev;
         registerWrittenOutputsIgnore(report.writtenOutputs ?? report.written_outputs, outDir, project, generationIgnore);
@@ -117,7 +335,7 @@ export function createDevSession(options) {
             return false;
         const mode = report.full ? 'full' : 'affected';
         const chunks = (report.affectedChunks || []).join(', ') || '(none)';
-        log.info(`${label} ok (${mode}; chunks=[${chunks}]; ${(report.emitted ?? []).length} emitted)`);
+        log.info(`${label} ok (${mode}; chunks=[${chunks}]; ${(report.emitted ?? []).length} emitted; ${lastBuildMs}ms build)`);
         return true;
     }
     /**
@@ -149,11 +367,11 @@ export function createDevSession(options) {
         log.info(`wechat pack ok → ${path.join(project, packRoot)} (WeChat DevTools compiles WXSS here)`);
         return true;
     }
-    async function waitHostReady(timeoutMs = 8000) {
+    async function waitHostUp(timeoutMs = 8000) {
         const start = Date.now();
         while (Date.now() - start < timeoutMs) {
             try {
-                const res = await fetch(`http://${host}:${port}/__vmz/ready`);
+                const res = await fetch(`http://${host}:${port}/__vmz/health`);
                 if (res.ok)
                     return;
             }
@@ -162,7 +380,7 @@ export function createDevSession(options) {
             }
             await sleep(50);
         }
-        throw new Error(`serve-host not ready on ${host}:${port}`);
+        throw new Error(`serve-host not up on ${host}:${port}`);
     }
     async function waitHostGone(timeoutMs = 3000) {
         const start = Date.now();
@@ -176,29 +394,93 @@ export function createDevSession(options) {
             }
         }
     }
-    async function respawnHost(reason) {
-        log.warn(`respawning serve-host (${reason})…`);
-        killChild(child);
-        child = null;
-        await waitHostGone();
-        child = spawnHost({ project, outDir, host, port });
-        await waitHostReady();
-        log.info('serve-host respawned — browser SSE will reconnect and reload');
-    }
     /**
-     * Soft reload first; on failure auto-respawn so authors never hand-restart.
-     * @param {object} payload
+     * 两阶段重建：host `prepare` 写入口 → CLI 侧 `vmz-pack` → host `commit` 发布。
+     * dev 的浏览器交付必须走 pack，否则逐文件模块保留裸包说明符。
+     * pack 失败显式 SSE error 且不回退到未打包入口。`staticOnly`（仅 public
+     * 资产）不改变客户端图，因此不重打包。
      */
-    async function reloadAfterBuild(payload) {
+    async function reloadWithPack(payload, opts = {}) {
         try {
-            await softReload(host, port, payload);
-            return 'soft';
+            await softReload({ phase: 'prepare', payload });
         }
         catch (err) {
+            if (opts.initial) {
+                log.warn(`initial serve-host load failed (${err}) — host stays up`);
+                return 'error';
+            }
             log.warn(`soft reload failed (${err}) — auto-respawning serve-host`);
             await respawnHost('soft-reload-failed');
             return 'respawn';
         }
+        if (!opts.staticOnly) {
+            const startedAt = Date.now();
+            const changedReason = lastPackInputs ? packInputsChangedReason(lastPackInputs, outDir) : 'no pack input snapshot';
+            const missing = changedReason === null && lastPackManifest ? missingPackOutput(lastPackManifest, outDir) : null;
+            if (changedReason === null && !missing && lastPackManifest) {
+                log.info(`dev pack skip (inputs unchanged, ${Date.now() - startedAt}ms)`);
+            }
+            else {
+                if (changedReason)
+                    log.info(`dev pack (inputs changed: ${changedReason})`);
+                if (missing)
+                    log.info(`dev pack (manifest reuse rejected: missing ${missing})`);
+                try {
+                    const { manifest } = packBrowser(outDir, { projectRoot: project });
+                    lastPackManifest = manifest;
+                    lastPackInputs = capturePackInputSnapshot(lastPackManifest, outDir, project);
+                    log.info(`dev pack ok (${manifest.chunkCount} chunks, ${Date.now() - startedAt}ms)`);
+                    if (!lastPackInputs)
+                        log.info('dev pack inputs: snapshot unavailable (unknown input) — next rebuild repacks');
+                }
+                catch (err) {
+                    lastPackManifest = null;
+                    lastPackInputs = null;
+                    const message = err instanceof Error ? err.message : String(err);
+                    log.error(`dev pack failed: ${message}`);
+                    try {
+                        await softReload({
+                            phase: 'abort',
+                            error: { message, stack: err instanceof Error ? err.stack : undefined },
+                        });
+                    }
+                    catch {
+                        /* host may be gone; keep the reported pack error */
+                    }
+                    return 'error';
+                }
+            }
+        }
+        try {
+            await softReload({ phase: 'commit' });
+            return 'soft';
+        }
+        catch (err) {
+            if (opts.initial) {
+                log.warn(`initial serve-host commit failed (${err}) — host stays up`);
+                return 'error';
+            }
+            log.warn(`reload commit failed (${err}) — auto-respawning serve-host`);
+            await respawnHost('commit-failed');
+            return 'respawn';
+        }
+    }
+    async function respawnHost(reason) {
+        log.warn(`respawning serve-host (${reason})…`);
+        killChild(child);
+        child = null;
+        await waitHostGone();
+        child = spawnHost({ project, outDir, host, port });
+        await waitHostUp();
+        const kind = await reloadWithPack({}, { initial: true });
+        if (kind === 'soft')
+            log.info('serve-host respawned — browser SSE will reconnect and reload');
+        else
+            log.warn('serve-host respawned but initial reload failed — fix the error and save');
+    }
+    /** @param {object} payload */
+    async function reloadAfterBuild(payload, opts = {}) {
+        return reloadWithPack(payload, opts);
     }
     let docEnginesPromise = null;
     /** `engines.code` / `engines.markdown` for the document layer (loaded once per session). */
@@ -215,6 +497,33 @@ export function createDevSession(options) {
         if (!existsSync(src)) {
             throw new Error(`vmz dev: missing src/ under ${project}`);
         }
+        // Snapshot watch roots and their fingerprints **before** the initial build.
+        // A save that lands while `vmz dev` boots must still be detected by the first
+        // poll. Taking the baseline after the initial reload absorbs that edit into the
+        // baseline, so the host serves the pre-edit bytes until the next save.
+        const docsRoot = path.join(project, 'documents');
+        const localesRoot = path.join(project, 'locales');
+        const designsRoot = path.join(project, 'designs');
+        const watched = collectDevWatchRoots({ project, outDir });
+        const publicRoot = watched.publicRoot;
+        /** Candidate config files plus their local reachable deps; refreshed after each cycle. */
+        const refreshConfigPaths = () => {
+            const deps = configCandidates
+                .filter((p) => existsSync(p))
+                .flatMap((p) => collectConfigDependencies(p, project));
+            return [...new Set([...configCandidates, ...deps])];
+        };
+        let configPaths = refreshConfigPaths();
+        /** @type {string[]} */
+        const watchRoots = [...watched.roots];
+        /** @type {string[]} */
+        let dependencyRoots = [...watched.dependencyRoots];
+        /** @type {Map<string, Map<string, string>>} */
+        const fingerprints = new Map();
+        for (const root of watchRoots) {
+            fingerprints.set(root, fileFingerprintMap(root));
+        }
+        let configFingerprints = configFingerprintMap(configPaths);
         // Config evaluation + plugin contributions run in a detached build process.
         // Functions/plugin objects never cross the boundary; only the data report does.
         if (configCandidates.some((p) => existsSync(p))) {
@@ -253,27 +562,16 @@ export function createDevSession(options) {
                 throw new Error(`vmz dev: missing ${hostJs}`);
             }
             child = spawnHost({ project, outDir, host, port });
-            await waitHostReady().catch((err) => {
+            await waitHostUp().catch((err) => {
                 log.warn(String(err));
             });
+            const initialKind = await reloadAfterBuild({}, { staticOnly: false }).catch((err) => {
+                log.warn(`initial reload failed: ${err}`);
+                return 'error';
+            });
+            if (initialKind !== 'soft')
+                log.warn('initial serve-host reload failed — fix the error and save');
         }
-        const docsRoot = path.join(project, 'documents');
-        const localesRoot = path.join(project, 'locales');
-        const designsRoot = path.join(project, 'designs');
-        const watched = collectDevWatchRoots({ project, outDir });
-        const publicRoot = watched.publicRoot;
-        /** Candidate config files plus their local reachable deps; refreshed after each cycle. */
-        const refreshConfigPaths = () => {
-            const deps = configCandidates
-                .filter((p) => existsSync(p))
-                .flatMap((p) => collectConfigDependencies(p, project));
-            return [...new Set([...configCandidates, ...deps])];
-        };
-        let configPaths = refreshConfigPaths();
-        /** @type {string[]} */
-        const watchRoots = [...watched.roots];
-        /** @type {string[]} */
-        let dependencyRoots = [...watched.dependencyRoots];
         if (wechatPreview) {
             log.info(`dev → WeChat DevTools (watching ${watchRoots.join(', ')}; keep dist/wechat open)`);
         }
@@ -283,12 +581,6 @@ export function createDevSession(options) {
         if (dependencyRoots.length) {
             log.info(`dev dependency watch roots (${dependencyRoots.length}): ${dependencyRoots.join(', ')}`);
         }
-        /** @type {Map<string, Map<string, string>>} */
-        const fingerprints = new Map();
-        for (const root of watchRoots) {
-            fingerprints.set(root, fileFingerprintMap(root));
-        }
-        let configFingerprints = configFingerprintMap(configPaths);
         const signal = options.signal;
         const onAbort = () => {
             void stop();
@@ -360,8 +652,7 @@ export function createDevSession(options) {
                     break;
                 if (!wechatPreview && child && child.exitCode != null) {
                     log.warn(`serve-host exited (${child.exitCode}) — respawning…`);
-                    child = spawnHost({ project, outDir, host, port });
-                    await waitHostReady().catch(() => { });
+                    await respawnHost('host-exited');
                     continue;
                 }
                 let batch;
@@ -459,7 +750,7 @@ export function createDevSession(options) {
                     commitFingerprints();
                     if (!wechatPreview) {
                         const kind = await maybeReloadAfterBuild({ reloadRequired: true }, null, { force: true, staticOnly: true });
-                        if (kind !== 'skip')
+                        if (kind === 'soft' || kind === 'respawn')
                             log.info('soft reload ok (public assets)');
                     }
                     continue;
@@ -555,7 +846,7 @@ export function createDevSession(options) {
                     }
                     const kind = await maybeReloadAfterBuild(report, hmrPlan, { force: true });
                     commitFingerprints();
-                    if (kind !== 'skip') {
+                    if (kind === 'soft' || kind === 'respawn') {
                         log.info(kind === 'respawn' ? 'reload ok (respawned; deps)' : 'soft reload ok (full page; deps)');
                     }
                     continue;
@@ -592,7 +883,7 @@ export function createDevSession(options) {
                         force: needFullReload,
                     });
                     commitFingerprints();
-                    if (kind !== 'skip') {
+                    if (kind === 'soft' || kind === 'respawn') {
                         log.info(kind === 'respawn'
                             ? 'reload ok (respawned serve-host)'
                             : needFullReload
@@ -627,7 +918,7 @@ export function createDevSession(options) {
                     }
                     const kind = await maybeReloadAfterBuild(report, hmrPlan, { force: true });
                     commitFingerprints();
-                    if (kind !== 'skip') {
+                    if (kind === 'soft' || kind === 'respawn') {
                         log.info(kind === 'respawn' ? 'reload ok (respawned; designs)' : 'soft reload ok (full page; designs)');
                     }
                     continue;
@@ -648,7 +939,7 @@ export function createDevSession(options) {
                     else {
                         const kind = await maybeReloadAfterBuild({ reloadRequired: true, full: true }, null, { force: true });
                         commitFingerprints();
-                        if (kind !== 'skip') {
+                        if (kind === 'soft' || kind === 'respawn') {
                             log.info(kind === 'respawn' ? 'reload ok (respawned; locales)' : 'soft reload ok (full page; locales)');
                         }
                         if (!batch.docsDirty)
@@ -670,7 +961,7 @@ export function createDevSession(options) {
                     else {
                         const kind = await maybeReloadAfterBuild({ reloadRequired: true, full: true }, null, { force: true });
                         commitFingerprints();
-                        if (kind !== 'skip') {
+                        if (kind === 'soft' || kind === 'respawn') {
                             log.info(kind === 'respawn' ? 'reload ok (respawned; docs)' : 'soft reload ok (full page; docs)');
                         }
                     }
@@ -740,23 +1031,24 @@ function defaultSpawnHost(opts) {
     return child;
 }
 /**
+ * Host reload request（两阶段协议：`prepare` / `commit` / `abort`）。
  * @param {string} host
  * @param {number} port
- * @param {object} [payload]
+ * @param {Record<string, unknown>} body
  */
-async function defaultSoftReload(host, port, payload = {}) {
+async function defaultReloadRequest(host, port, body) {
     const url = `http://${host}:${port}/__vmz/reload`;
-    const body = JSON.stringify(payload);
     const res = await fetch(url, {
         method: 'POST',
         headers: { 'content-type': 'application/json' },
-        body,
+        body: JSON.stringify(body),
     });
     if (!res.ok)
         throw new Error(`HTTP ${res.status}`);
     const json = await res.json().catch(() => ({}));
     if (!json?.ok)
         throw new Error(JSON.stringify(json));
+    return json;
 }
 function killChild(child) {
     if (!child || child.killed)

package/dist/document/document-base-css.d.ts

@@ -8,7 +8,7 @@
  * colors inside code blocks come from the Shiki theme and stay identical on
  * every site. Sites do not ship document stylesheets.
  *
- * House rules (规划设计/vmz 05): pure-white base with near-black blocks for
+ * House rules: pure-white base with near-black blocks for
  * rhythm, body text ≥ 16px, small text ≥ 12px at weight ≥ 400, no uppercase
  * letter-spaced micro labels, no 3D / volumetric surfaces.
  */

package/dist/document/document-base-css.js

@@ -8,7 +8,7 @@
  * colors inside code blocks come from the Shiki theme and stay identical on
  * every site. Sites do not ship document stylesheets.
  *
- * House rules (规划设计/vmz 05): pure-white base with near-black blocks for
+ * House rules: pure-white base with near-black blocks for
  * rhythm, body text ≥ 16px, small text ≥ 12px at weight ≥ 400, no uppercase
  * letter-spaced micro labels, no 3D / volumetric surfaces.
  */

package/dist/document/document-designs.js

@@ -2,7 +2,7 @@
  * Document — wire the compiled app stylesheet and the framework-owned document
  * base layer into static document assets.
  *
- * Layering (see 规划设计/vmz 04 文档层):
+ * Layering:
  * - `assets/vmz-designs.css`: the site's compiled design tokens (`vmz-designs.css`
  *   / `vmz.css` from the app build, or `designs/styles/index.css` standalone).
  * - `assets/vmz-document.css`: the framework document base (`DOCUMENT_BASE_CSS`),

package/dist/workspace/delivery-runtime-imports.js

@@ -21,6 +21,7 @@ function rewriteFlatDeliveryImports(text) {
         ['../browser/direct-host-box.js', './direct-host-box.js'],
         ['../browser/unknown-component.js', './unknown-component.js'],
         ['../shared/dom-attr-normalize.js', './dom-attr-normalize.js'],
+        ['../shared/html-digest.js', './html-digest.js'],
         ['../browser/client-nav.js', './vmz-client-nav.js'],
         ['../ssr/dom-ssr.js', './dom-ssr.js'],
         ['../faces/server.js', './vmz-runtime.js'],
@@ -34,6 +35,10 @@ function rewriteFlatDeliveryImports(text) {
 }
 function rewriteNestedSsrDelivery(text) {
     let out = text;
+    // `shared/` is flattened to the delivery root, so nested SSR files must
+    // reach the root copy one level up.
+    out = replaceImportPath(out, '../shared/dom-attr-normalize.js', '../dom-attr-normalize.js');
+    out = replaceImportPath(out, '../shared/html-digest.js', '../html-digest.js');
     for (const [from, to] of [
         ['../browser/dom-core.js', '../dom-core.js'],
         ['../browser/direct-host-box.js', '../direct-host-box.js'],
@@ -45,6 +50,7 @@ function rewriteNestedSsrDelivery(text) {
 }
 function rewriteNestedBrowserDelivery(text) {
     let out = replaceImportPath(text, '../../shared/dom-attr-normalize.js', '../../dom-attr-normalize.js');
+    out = replaceImportPath(out, '../../shared/html-digest.js', '../../html-digest.js');
     // `dom-ssr.js` 只交付在根（flat barrel），nested `ssr/` 下没有它：
     // island resume 的动态边必须指向根级产物。
     out = replaceImportPath(out, '../../ssr/dom-ssr.js', '../../dom-ssr.js');

package/dist/workspace/pack-native.d.ts

@@ -39,6 +39,12 @@ export interface PackRequest {
     entries: PackRequestEntry[];
     target: PackTarget;
     root: string;
+    /**
+     * Output tree root (absolute). Modules under it are labelled relative to it,
+     * so chunk ids stay identical when `--out-dir` moves or the project is built
+     * on another machine. Source-tree modules stay relative to `root`.
+     */
+    outRoot: string;
     uses: PackRequestUse[];
     publicBase: string;
     /**
@@ -89,6 +95,10 @@ export interface PackPlan {
     entryFiles: PackEntryFile[];
     dynamicFiles: PackDynamicFile[];
     manifestJson: string;
+    /** Content digest of this pack input (graph structure + source bytes + emit options). */
+    inputDigest: string;
+    /** Graph-structure digest; any change invalidates every cached chunk. */
+    graphDigest: string;
 }
 export interface PackDiagnostic {
     code: string;
@@ -126,6 +136,8 @@ export interface BuildPackRequestInput {
     entries: Record<string, string>;
     target: PackTarget;
     root: string;
+    /** Output tree root: chunk id label base for emitted modules. */
+    outRoot: string;
     uses: PackRequestUse[];
     publicBase: string;
     /** Emitted absolute path → source absolute path (projection provenance). */

package/dist/workspace/pack-native.js

@@ -122,7 +122,7 @@ function parseDynamicFile(value, where) {
 function parsePackPlan(value) {
     if (!isPlainObject(value))
         throw responseShape('response.plan must be an object');
-    rejectUnknownKeys(value, ['artifacts', 'styles', 'assets', 'entryFiles', 'dynamicFiles', 'manifestJson'], 'response.plan');
+    rejectUnknownKeys(value, ['artifacts', 'styles', 'assets', 'entryFiles', 'dynamicFiles', 'manifestJson', 'inputDigest', 'graphDigest'], 'response.plan');
     if (!Array.isArray(value.artifacts))
         throw responseShape('response.plan.artifacts must be an array');
     if (!Array.isArray(value.styles))
@@ -140,6 +140,8 @@ function parsePackPlan(value) {
         entryFiles: value.entryFiles.map((e, i) => parseEntryFile(e, `response.plan.entryFiles[${i}]`)),
         dynamicFiles: value.dynamicFiles.map((d, i) => parseDynamicFile(d, `response.plan.dynamicFiles[${i}]`)),
         manifestJson: requireString(value.manifestJson, 'response.plan.manifestJson'),
+        inputDigest: requireString(value.inputDigest, 'response.plan.inputDigest'),
+        graphDigest: requireString(value.graphDigest, 'response.plan.graphDigest'),
     };
 }
 /**
@@ -199,6 +201,11 @@ export function buildPackRequest(input) {
         throw requestInvalid('root must be a non-empty string');
     if (!path.isAbsolute(input.root))
         throw requestInvalid(`root must be an absolute path: ${input.root}`);
+    if (typeof input.outRoot !== 'string' || !input.outRoot) {
+        throw requestInvalid('outRoot must be a non-empty string');
+    }
+    if (!path.isAbsolute(input.outRoot))
+        throw requestInvalid(`outRoot must be an absolute path: ${input.outRoot}`);
     if (typeof input.publicBase !== 'string' || !input.publicBase) {
         throw requestInvalid('publicBase must be a non-empty string');
     }
@@ -249,7 +256,7 @@ export function buildPackRequest(input) {
         if (!Object.keys(origins).length)
             origins = undefined;
     }
-    const request = { entries, target: input.target, root: input.root, uses, publicBase: input.publicBase, ...(origins ? { origins } : {}) };
+    const request = { entries, target: input.target, root: input.root, outRoot: input.outRoot, uses, publicBase: input.publicBase, ...(origins ? { origins } : {}) };
     return JSON.stringify(request);
 }
 function resolveBinding(opts, fn) {

package/dist/workspace/pack.d.ts

@@ -10,11 +10,14 @@
  * `execution: 'full'` + `exports: { kind: 'all' }` (script-tag load,
  * whole-module execution).
  *
- * SSR/Node is a separate graph: every deployment unit's `clientEntry` is a
- * Node entry (logical = `chunkId`), packed under `_vmz/pack-node/` and indexed
- * by `_vmz/pack-node-manifest.json`. Node consumers never fall back to the
- * unpacked root `${chunkId}.client.js`; browser bootstrap modules are not Node
- * entries because they bind `dom.browser` / `document`.
+ * SSR/Node is a separate graph: Node entries are the deployment units
+ * reachable from the page / application roots through `dependsOn` (logical =
+ * `chunkId`), packed under `_vmz/pack-node/` and indexed by
+ * `_vmz/pack-node-manifest.json`. Components have no Node consumer unless a
+ * page or layout reaches them, so orphan units are not packed. Node consumers
+ * never fall back to the unpacked root `${chunkId}.client.js`; browser
+ * bootstrap modules are not Node entries because they bind `dom.browser` /
+ * `document`.
  *
  * No vendor materialization, no specifier lowering, and no second hashing
  * pass happen here: `packWrite` emits the final browser JS set under
@@ -37,6 +40,17 @@ export declare const PACK_PUBLIC_BASE = "/";
  * specifiers keep resolving against the emitted tree.
  */
 export declare function deploymentUnitOrigins(absOut: string, ir: DeploymentIr): Record<string, string>;
+/** 一个 deployment 逻辑 chunkId 在浏览器图里的落点（未进图时字段为 `null`）。 */
+export interface PackUnitChunk {
+    /** 运行时逻辑 chunk id（`vmz-deployment.json` 的 `units[].chunkId`）。 */
+    logical: string;
+    /** 该单元的产物客户端文件（输出树相对路径）。 */
+    clientEntry: string;
+    /** 承载该文件的 chunk id，未进客户端图时为 `null`。 */
+    chunkId: string | null;
+    /** 承载该文件的 chunk 文件名，未进客户端图时为 `null`。 */
+    fileName: string | null;
+}
 /**
  * Ensure dom split companions sit next to vmz-dom.js (barrel imports ./dom-core.js).
  * Always refresh from `@vmz/core` when present so SSR/runtime fixes are not sticky in outDir.
@@ -81,12 +95,15 @@ export declare function packFromDeploymentIr(outDir: string, opts?: PackFromDepl
         styles: unknown[];
         assets: unknown[];
         chunks: unknown[];
+        unitChunks: PackUnitChunk[];
         chunkCount: number;
         styleCount: number;
         entryCount: number;
         minify: string;
         treeShake: string;
         sourceMaps: string;
+        packInputDigest: string;
+        packGraphDigest: string;
         nativeManifest: unknown;
         packDigest?: string;
     };
@@ -104,11 +121,11 @@ interface PackSsrFromDeploymentIrOpts {
 }
 /**
  * Pack the SSR/Node graph via the Rust `vmz-pack` binding and write
- * `_vmz/pack-node-manifest.json` (v0). Entries are the deployment units'
- * compiled client modules (`clientEntry`, empty → mirrors `vmz-artifacts`
- * `component_entries`: `${chunkId}.client.js`). Node consumers only read
- * `default`, but the import itself is evaluated, hence `side-effects` +
- * named default rather than `all` / `full` / `unconsumed`.
+ * `_vmz/pack-node-manifest.json` (v0). Entries are the node-reachable
+ * deployment units' compiled client modules (`clientEntry`, empty → mirrors
+ * `vmz-artifacts` `component_entries`: `${chunkId}.client.js`). Node consumers
+ * only read `default`, but the import itself is evaluated, hence
+ * `side-effects` + named default rather than `all` / `full` / `unconsumed`.
  */
 export declare function packSsrFromDeploymentIr(outDir: string, opts?: PackSsrFromDeploymentIrOpts): {
     manifest: {
@@ -124,6 +141,8 @@ export declare function packSsrFromDeploymentIr(outDir: string, opts?: PackSsrFr
         chunks: unknown[];
         chunkCount: number;
         entryCount: number;
+        packInputDigest: string;
+        packGraphDigest: string;
         nativeManifest: unknown;
         packDigest?: string;
     };

package/dist/workspace/pack.js

@@ -10,11 +10,14 @@
  * `execution: 'full'` + `exports: { kind: 'all' }` (script-tag load,
  * whole-module execution).
  *
- * SSR/Node is a separate graph: every deployment unit's `clientEntry` is a
- * Node entry (logical = `chunkId`), packed under `_vmz/pack-node/` and indexed
- * by `_vmz/pack-node-manifest.json`. Node consumers never fall back to the
- * unpacked root `${chunkId}.client.js`; browser bootstrap modules are not Node
- * entries because they bind `dom.browser` / `document`.
+ * SSR/Node is a separate graph: Node entries are the deployment units
+ * reachable from the page / application roots through `dependsOn` (logical =
+ * `chunkId`), packed under `_vmz/pack-node/` and indexed by
+ * `_vmz/pack-node-manifest.json`. Components have no Node consumer unless a
+ * page or layout reaches them, so orphan units are not packed. Node consumers
+ * never fall back to the unpacked root `${chunkId}.client.js`; browser
+ * bootstrap modules are not Node entries because they bind `dom.browser` /
+ * `document`.
  *
  * No vendor materialization, no specifier lowering, and no second hashing
  * pass happen here: `packWrite` emits the final browser JS set under
@@ -22,7 +25,7 @@
  * entries through `packEntryHref()` against this manifest.
  */
 import crypto from 'node:crypto';
-import { existsSync, mkdirSync, readFileSync, realpathSync, rmSync, writeFileSync } from 'node:fs';
+import { existsSync, mkdirSync, readFileSync, realpathSync, writeFileSync } from 'node:fs';
 import path from 'node:path';
 import { loadDeploymentIr } from './bundler-adapter.js';
 import { buildPackRequest, runPackWrite } from './pack-native.js';
@@ -59,6 +62,43 @@ export function deploymentUnitOrigins(absOut, ir) {
 }
 /** Bootstrap modules that are browser pack entries when present in outDir. */
 const BOOTSTRAP_ENTRIES = ['entry-client.js', 'entry-event.js'];
+/**
+ * 模块路径比较键：去掉 Windows verbatim 前缀（Rust `canonicalize` 给 `//?/E:/…`，
+ * Node `realpathSync` 给 `E:/…`）并统一分隔符，避免同一文件因前缀差异查不到。
+ */
+function moduleKey(filePath) {
+    return filePath.replace(/^(?:\\\\\?\\|\/\/\?\/)/, '').replace(/\\/g, '/');
+}
+/**
+ * 逻辑 chunkId → 浏览器 chunk 的精确查表：按部署单元的产物客户端文件与
+ * chunk `modules` 的同路径匹配，不做后缀匹配、不猜命名规则。单元产物未进
+ * 客户端图（无消费者）时显式记 `null`，消费方可据此报错而不是静默取错 chunk。
+ */
+function resolveUnitChunks(absOut, deploymentUnits, artifacts) {
+    const chunkOfModule = new Map();
+    for (const artifact of artifacts) {
+        for (const module of artifact.modules) {
+            chunkOfModule.set(moduleKey(module), { chunkId: artifact.chunkId, fileName: artifact.fileName });
+        }
+    }
+    const out = [];
+    for (const unit of deploymentUnits) {
+        const logical = String(unit.chunkId || '').replace(/\\/g, '/');
+        if (!logical)
+            continue;
+        const clientEntry = (unit.clientEntry ? String(unit.clientEntry) : `${logical}.client.js`).replace(/\\/g, '/');
+        const abs = path.join(absOut, ...clientEntry.split('/'));
+        const hit = chunkOfModule.get(moduleKey(existsSync(abs) ? realpathSync(abs) : abs)) ?? null;
+        out.push({
+            logical,
+            clientEntry,
+            chunkId: hit ? hit.chunkId : null,
+            fileName: hit ? hit.fileName : null,
+        });
+    }
+    out.sort((a, b) => (a.logical < b.logical ? -1 : a.logical > b.logical ? 1 : 0));
+    return out;
+}
 /**
  * Ensure dom split companions sit next to vmz-dom.js (barrel imports ./dom-core.js).
  * Always refresh from `@vmz/core` when present so SSR/runtime fixes are not sticky in outDir.
@@ -107,11 +147,18 @@ export function packFromDeploymentIr(outDir, opts = {}) {
     // Browser graph entries are the bootstrap modules; page/island units join
     // through the bootstrap dynamic-import tables and need projection provenance.
     const origins = deploymentUnitOrigins(absOut, loadDeploymentIr(absOut));
-    const requestJson = buildPackRequest({ entries, target: 'browser', root, uses, publicBase: PACK_PUBLIC_BASE, origins });
+    const requestJson = buildPackRequest({
+        entries,
+        target: 'browser',
+        root,
+        outRoot: absOut,
+        uses,
+        publicBase: PACK_PUBLIC_BASE,
+        origins,
+    });
     const packOutDir = path.join(absOut, ...PACK_OUTPUT_DIR_REL.split('/'));
-    // 重建不得残留上一轮 pack 的过期 chunk：manifest/磁盘闭包是交付合同，
-    // 写盘前整体清空旧输出目录（`packWrite` 只增不删）。
-    rmSync(packOutDir, { recursive: true, force: true });
+    // 不再整体清空输出目录：`packWrite` 按内容摘要复用未变 chunk，并在写盘后
+    // 逐文件清理不再属于产物闭包的旧 chunk / map / css / assets（不留孤儿）。
     const { plan } = runPackWrite(requestJson, packOutDir, opts.binding ? { binding: opts.binding } : {});
     const ir = loadDeploymentIr(absOut);
     let nativeManifest;
@@ -151,18 +198,27 @@ export function packFromDeploymentIr(outDir, opts = {}) {
         styles: plan.styles,
         assets: plan.assets,
         chunks,
+        unitChunks: resolveUnitChunks(absOut, ir.units || [], plan.artifacts),
         chunkCount: chunks.length,
         styleCount: plan.styles.length,
         entryCount: plan.entryFiles.length,
-        // `vmz-pack` runs no compressor: chunk bytes are the linked output verbatim.
-        minify: 'none',
+        // Chunk text is token-minified inside `vmz-pack` while preserving string,
+        // template and regex bodies plus ASI-significant line breaks. Identifiers
+        // are not renamed and dead code is not eliminated.
+        minify: 'tokens',
         // `link` active fixed-point pruning really ran — bootstrap entries
         // declare full execution, internal modules are pruned to reachable exports.
         treeShake: 'vmz-pack-link-pruning',
-        // Chunk source maps are line-level v3: every assembled line maps back
-        // to its module line (`<packOut>/<fileName>.map`, `sourceMapFileName`
-        // on the wire); token-level mappings and `names` are not implemented.
-        sourceMaps: 'chunk-v3-line-mappings',
+        // Chunk source maps are v3 token-level: every minified token maps back
+        // through the assembled line to its module line (`<packOut>/<fileName>.map`,
+        // `sourceMapFileName` on the wire). Generated columns are token columns,
+        // source columns stay at the assembled slice start; `names` is unused.
+        sourceMaps: 'chunk-v3-token-mappings',
+        // `packInputDigest` 是本次 pack 输入（图结构 + 各模块源字节 + emit 选项）
+        // 的内容摘要；`packGraphDigest` 只看图结构，任一边界/模块/边变化即整体
+        // 失效，不允许部分 chunk 复用。两者都来自 Rust 侧，不使用 mtime/时间戳。
+        packInputDigest: plan.inputDigest,
+        packGraphDigest: plan.graphDigest,
         nativeManifest,
     };
     body.packDigest = sha256Hex(stableStringify({ ...body }));
@@ -177,18 +233,61 @@ export const PACK_NODE_MANIFEST_SCHEMA = 'vmz.pack.node-manifest.v0';
 export const PACK_NODE_OUTPUT_DIR_REL = '_vmz/pack-node';
 /** Node pack manifest (relative to outDir); `entryFiles` maps logical → chunk file. */
 export const PACK_NODE_MANIFEST_REL = '_vmz/pack-node-manifest.json';
+/**
+ * Node graph roots and their `dependsOn` closure — the only chunk ids a Node
+ * consumer can request. Pages and the application shell are roots; components
+ * enter through `dependsOn` (pages merge their `layoutChain` into it). Standalone
+ * layout units (`layouts/*`, emitted with kind `other`) are roots of their own
+ * because `loadCtor` asks for page / layout chunk ids directly and no page lists
+ * them in `dependsOn`. Units outside the closure have no Node consumer: the SSR
+ * registry imports a component entry only when some root reaches it.
+ */
+function nodeReachableChunkIds(ir) {
+    const dependsOn = new Map();
+    const roots = [];
+    for (const unit of ir.units || []) {
+        const chunkId = String(unit.chunkId || '').replace(/\\/g, '/');
+        if (!chunkId)
+            continue;
+        const deps = dependsOn.get(chunkId) ?? [];
+        for (const dep of unit.dependsOn || []) {
+            const id = String(dep).replace(/\\/g, '/');
+            if (id)
+                deps.push(id);
+        }
+        dependsOn.set(chunkId, deps);
+        if (unit.kind === 'page' || unit.kind === 'application' || unit.kind === 'other')
+            roots.push(chunkId);
+    }
+    const reachable = new Set();
+    const queue = roots.slice();
+    while (queue.length) {
+        const id = queue.pop();
+        if (reachable.has(id))
+            continue;
+        reachable.add(id);
+        for (const dep of dependsOn.get(id) ?? [])
+            if (!reachable.has(dep))
+                queue.push(dep);
+    }
+    return reachable;
+}
 /**
  * Pack the SSR/Node graph via the Rust `vmz-pack` binding and write
- * `_vmz/pack-node-manifest.json` (v0). Entries are the deployment units'
- * compiled client modules (`clientEntry`, empty → mirrors `vmz-artifacts`
- * `component_entries`: `${chunkId}.client.js`). Node consumers only read
- * `default`, but the import itself is evaluated, hence `side-effects` +
- * named default rather than `all` / `full` / `unconsumed`.
+ * `_vmz/pack-node-manifest.json` (v0). Entries are the node-reachable
+ * deployment units' compiled client modules (`clientEntry`, empty → mirrors
+ * `vmz-artifacts` `component_entries`: `${chunkId}.client.js`). Node consumers
+ * only read `default`, but the import itself is evaluated, hence
+ * `side-effects` + named default rather than `all` / `full` / `unconsumed`.
  */
 export function packSsrFromDeploymentIr(outDir, opts = {}) {
     const absOut = path.resolve(outDir);
     const root = opts.projectRoot ? path.resolve(opts.projectRoot) : path.dirname(absOut);
     const ir = loadDeploymentIr(absOut);
+    if (!(ir.units || []).length) {
+        throw new Error(`packSsrFromDeploymentIr: deployment IR has no units in ${absOut}`);
+    }
+    const nodeReachable = nodeReachableChunkIds(ir);
     const entries = {};
     const uses = [];
     // Deployment IR may list the same component unit more than once (one entry
@@ -200,6 +299,8 @@ export function packSsrFromDeploymentIr(outDir, opts = {}) {
         const chunkId = String(unit.chunkId || '').replace(/\\/g, '/');
         if (!chunkId)
             throw new Error(`packSsrFromDeploymentIr: deployment unit has an empty chunkId in ${absOut}`);
+        if (!nodeReachable.has(chunkId))
+            continue;
         // `vmz-artifacts` derives the component entry as `${chunkId}.client.js`
         // when `clientEntry` is empty. Decide it here so the pack request stays
         // explicit, then require the file — a missing entry is never skipped.
@@ -220,13 +321,20 @@ export function packSsrFromDeploymentIr(outDir, opts = {}) {
         uses.push({ logical: chunkId, execution: 'side-effects', exports: { kind: 'named', names: ['default'] } });
     }
     if (!Object.keys(entries).length) {
-        throw new Error(`packSsrFromDeploymentIr: deployment IR has no units in ${absOut}`);
+        throw new Error(`packSsrFromDeploymentIr: deployment IR has no node-reachable units in ${absOut}`);
     }
     const origins = deploymentUnitOrigins(absOut, ir);
-    const requestJson = buildPackRequest({ entries, target: 'node', root, uses, publicBase: PACK_PUBLIC_BASE, origins });
+    const requestJson = buildPackRequest({
+        entries,
+        target: 'node',
+        root,
+        outRoot: absOut,
+        uses,
+        publicBase: PACK_PUBLIC_BASE,
+        origins,
+    });
     const packOutDir = path.join(absOut, ...PACK_NODE_OUTPUT_DIR_REL.split('/'));
-    // 与浏览器 pack 同口径：写盘前清空旧 Node chunk 目录，闭包合同不接受残留。
-    rmSync(packOutDir, { recursive: true, force: true });
+    // 与浏览器 pack 同口径：不清空目录，由 `packWrite` 复用未变 chunk 并清理孤儿。
     const { plan } = runPackWrite(requestJson, packOutDir, opts.binding ? { binding: opts.binding } : {});
     let nativeManifest;
     try {
@@ -262,6 +370,9 @@ export function packSsrFromDeploymentIr(outDir, opts = {}) {
         chunks,
         chunkCount: chunks.length,
         entryCount: plan.entryFiles.length,
+        // 同浏览器 pack：输入/图结构摘要来自 Rust 侧内容摘要判定。
+        packInputDigest: plan.inputDigest,
+        packGraphDigest: plan.graphDigest,
         nativeManifest,
     };
     body.packDigest = sha256Hex(stableStringify({ ...body }));

package/locales/en-US/diag.json

@@ -10,6 +10,8 @@
     "vmz::template::illegal_directive": "Illegal or unsupported directive in `<template>`: {detail}",
     "vmz::template::parse_failed": "Failed to parse `<template>`: {detail}",
     "vmz::template::invalid_expr": "Invalid template expression: {detail}",
+    "vmz::template::v_model_invalid_target": "`v-model` target must be an assignable identifier or member expression: `{expr}`",
+    "vmz::template::v_model_on_file_input": "`v-model` cannot bind an `<input type=\"file\">`",
     "vmz::template::each_missing_key": "`v-for` on `<{tag}>` should declare a `:key`",
     "vmz::template::each_static_key": "`v-for` on `<{tag}>` must not use a static key `{key}`",
     "vmz::template::each_literal_key": "`v-for` on `<{tag}>` must not use a literal key `{key}`",

package/locales/zh-CN/diag.json

@@ -6,6 +6,8 @@
     "vmz::template::illegal_directive": "`<template>` 中存在非法或不支持的指令：{detail}",
     "vmz::template::parse_failed": "解析 `<template>` 失败：{detail}",
     "vmz::template::invalid_expr": "模板表达式无效：{detail}",
+    "vmz::template::v_model_invalid_target": "`v-model` 的目标必须是可赋值的标识符或成员表达式：`{expr}`",
+    "vmz::template::v_model_on_file_input": "`v-model` 不能绑定到 `<input type=\"file\">`",
     "vmz::template::each_missing_key": "`<{tag}>` 上的 `v-for` 应声明 `:key`",
     "vmz::template::each_static_key": "`<{tag}>` 上的 `v-for` 不得使用静态 key `{key}`",
     "vmz::template::each_literal_key": "`<{tag}>` 上的 `v-for` 不得使用字面量 key `{key}`",

package/package.json

@@ -3,23 +3,23 @@
     "vmz": "./bin/vmz.js"
   },
   "dependencies": {
-    "@vmz/commander": "0.3.13",
-    "@vmz/core": "0.3.13",
-    "@vmz/diagnostic": "0.3.13",
-    "@vmz/plugin": "0.3.13",
-    "@vmz/protocol": "0.3.13"
+    "@vmz/commander": "0.3.14",
+    "@vmz/core": "0.3.14",
+    "@vmz/diagnostic": "0.3.14",
+    "@vmz/plugin": "0.3.14",
+    "@vmz/protocol": "0.3.14"
   },
   "description": "VMZ Node toolchain — N-API workspace session + CLI (publish name @vmz/vmz)",
   "devDependencies": {
     "@types/node": "^22.15.0",
-    "@vmz/plugin": "0.3.13",
-    "@vmz/plugin-katex": "0.3.13",
-    "@vmz/plugin-markdown-it": "0.3.13",
-    "@vmz/plugin-shiki": "0.3.13",
-    "@vmz/test": "0.3.13",
+    "@vmz/plugin": "0.3.14",
+    "@vmz/plugin-katex": "0.3.14",
+    "@vmz/plugin-markdown-it": "0.3.14",
+    "@vmz/plugin-shiki": "0.3.14",
+    "@vmz/test": "0.3.14",
     "linkedom": "^0.18.13",
     "typescript": "^5.8.3",
-    "vmz-plugin-conformance": "0.3.13"
+    "vmz-plugin-conformance": "0.3.14"
   },
   "engines": {
     "node": ">=24.12.0"
@@ -80,16 +80,16 @@
   "main": "./dist/index.js",
   "name": "@vmz/vmz",
   "optionalDependencies": {
-    "@vmz/vmz-darwin-arm64": "0.3.13",
-    "@vmz/vmz-darwin-x64": "0.3.13",
-    "@vmz/vmz-linux-arm64": "0.3.13",
-    "@vmz/vmz-linux-x64": "0.3.13",
-    "@vmz/vmz-win32-arm64": "0.3.13",
-    "@vmz/vmz-win32-x64": "0.3.13"
+    "@vmz/vmz-darwin-arm64": "0.3.14",
+    "@vmz/vmz-darwin-x64": "0.3.14",
+    "@vmz/vmz-linux-arm64": "0.3.14",
+    "@vmz/vmz-linux-x64": "0.3.14",
+    "@vmz/vmz-win32-arm64": "0.3.14",
+    "@vmz/vmz-win32-x64": "0.3.14"
   },
   "peerDependencies": {
-    "@vmz/plugin-markdown-it": "0.3.13",
-    "@vmz/test": "0.3.13",
+    "@vmz/plugin-markdown-it": "0.3.14",
+    "@vmz/test": "0.3.14",
     "typescript": "^5.8.3"
   },
   "peerDependenciesMeta": {
@@ -122,5 +122,5 @@
   },
   "type": "module",
   "types": "./dist/index.d.ts",
-  "version": "0.3.13"
+  "version": "0.3.14"
 }