@oj-module/cli 0.2.66 → 0.2.68

package/templates/tests/lifecycle/market-api.spec.ts

@@ -108,10 +108,12 @@ const CATALOG = JSON.stringify({
 		{ name: "wiki", shards: [1] },
 	],
 });
+/** 最新版详细描述（C2-05；喂给 index 聚合断言，验证卡片能读到方案「提供什么」） */
+const LATEST_DESCRIPTION = "演示方案：提供示例 CRUD 与菜单路由，覆盖安装、升级、回滚与历史留痕全链路。";
 /** 分片正文（纯内容无 meta：版本条目即 Form B manifest——原 manifests.yaml 聚合清单并入分片） */
 const SHARD_1 = JSON.stringify({
 	solutions: [
-		{ name: "demo-solution", latest: "0.2.0", versions: [manifestFixture("0.2.0"), manifestFixture("0.1.0")] },
+		{ name: "demo-solution", latest: "0.2.0", versions: [{ ...manifestFixture("0.2.0"), description: LATEST_DESCRIPTION }, manifestFixture("0.1.0")] },
 		{ name: "wiki", latest: "1.3.0", versions: [{ name: "wiki", version: "1.3.0", archive: { file: "wiki-1.3.0.tgz", sha256: "x", size: 1 } }] },
 	],
 });
@@ -205,9 +207,15 @@ function bundleExec(): ExecFace {
 	};
 }
 
-const reloadStub: ReloadFace = {
-	reloadConfig: async () => ({ generation: 1, unchanged: false, applied: ["vars"], restart_pending: [], kept_listener: [] }),
-};
+// reload 桩：按被安装版本产出 applied 模块符号（+name@ver，v0.1.122 双符号契约），
+// 供 reloadAndAssert 终态校验（R18）。默认 0.1.0 覆盖绝大多数用例；跨片索引用例（REG-CS5）
+// 安装 1.0.2499 / 1.0.0，须按实装版本注入对应桩，否则符号不匹配 → reloading 段判 partial。
+function reloadStubFor(version: string): ReloadFace {
+	return {
+		reloadConfig: async () => ({ generation: 1, unchanged: false, applied: [`+demo-solution@${version}`], restart_pending: [], kept_listener: [] }),
+	};
+}
+const reloadStub: ReloadFace = reloadStubFor("0.1.0");
 
 function makeEnv(overrides: Partial<MarketEnv> = {}): MarketEnv {
 	return {
@@ -247,8 +255,8 @@ beforeEach(async () => {
 	modulesJsonPath = join(root, "dist", "modules.json");
 	dbPath = join(root, "db.sqlite");
 	await fsp.writeFile(dbPath, new TextEncoder().encode("sqlite-header\n"));
-	// 站点 config.yaml 夹具（reloading 段 vars.ojm_install_seq 自增消费面；模板 config.yaml 随发形态）
-	await fsp.writeFile(join(root, "config.yaml"), "mounts: []\nserver:\n  reload_api: true\nvars:\n  ojm_install_seq: 0\nauth:\n  anonymous_paths:\n    - /auth/login\n");
+	// 站点 config.yaml 夹具（reloading 段仅做 anonymous_paths 接线；模板 config.yaml 随发形态）
+	await fsp.writeFile(join(root, "config.yaml"), "mounts: []\nserver:\n  reload_api: true\nvars:\n  other: 1\nauth:\n  anonymous_paths:\n    - /auth/login\n");
 	g.fs = nodeFsFace();
 	dbo = installDb();
 	dbo.prepare("INSERT OR IGNORE INTO sys_user_role (user_id, role_name) VALUES (?, ?)").run(1, "superadmin");
@@ -819,7 +827,7 @@ describe("GET index（CDN catalog + shards 拉取 + 本地 state 对比）", ()
 		expect(String(last?.msg)).toContain("未配置市场地址");
 	});
 
-	it("聚合对比：CDN 最新版本 + 本地已装/enabled + upgradable + available/changelog/publisher/trust/key_id/operator（P2-11）；本地独有方案也列出；拉取不带 no-cache", async () => {
+	it("聚合对比：CDN 最新版本 + 本地已装/enabled + upgradable + available/changelog/publisher/publisher_key/license/summary/description/trust/key_id/operator（P2-11）；本地独有方案也列出；拉取不带 no-cache", async () => {
 		const env = makeEnv();
 		const state = await createStateStore(env.statePath);
 		await state.write({
@@ -835,9 +843,9 @@ describe("GET index（CDN catalog + shards 拉取 + 本地 state 对比）", ()
 		// REG-CS5④：读面不再发 cache-control: no-cache（服务端缓存头 + 条件请求承载新鲜度）
 		expect(fetchInits.every(i => (i as { headers?: Record<string, string> } | undefined)?.headers?.["cache-control"] === undefined)).toBe(true);
 		expect(last?.data).toEqual([
-			{ name: "demo-solution", latest: "0.2.0", installed: "0.1.0", enabled: true, upgradable: true, available: ["0.1.0", "0.2.0"], changelog: ["0.2.0 变更条目"], publisher: "oj-module", license: "MIT", trust_state: "trusted", key_id: "test.publisher", operator: null },
-			{ name: "wiki", latest: "1.3.0", installed: null, enabled: null, upgradable: false, available: ["1.3.0"], changelog: null, publisher: null, license: null, trust_state: null, key_id: null, operator: null },
-			{ name: "legacy", latest: null, installed: "9.9.9", enabled: false, upgradable: false, available: [], changelog: null, publisher: null, license: null, trust_state: null, key_id: null, operator: null },
+			{ name: "demo-solution", latest: "0.2.0", installed: "0.1.0", enabled: true, upgradable: true, available: ["0.1.0", "0.2.0"], changelog: ["0.2.0 变更条目"], publisher: "oj-module", publisher_key: "test.publisher", license: "MIT", summary: "演示方案", description: LATEST_DESCRIPTION, trust_state: "trusted", key_id: "test.publisher", operator: null },
+			{ name: "wiki", latest: "1.3.0", installed: null, enabled: null, upgradable: false, available: ["1.3.0"], changelog: null, publisher: null, publisher_key: null, license: null, summary: null, description: null, trust_state: null, key_id: null, operator: null },
+			{ name: "legacy", latest: null, installed: "9.9.9", enabled: false, upgradable: false, available: [], changelog: null, publisher: null, publisher_key: null, license: null, summary: null, description: null, trust_state: null, key_id: null, operator: null },
 		]);
 	});
 
@@ -1190,7 +1198,7 @@ describe("REG-CS5 三级索引（装箱分片 + 条件请求 + DIP 读取源 +
 	}
 
 	it("BDD① 装箱分片：2500 版本跨 3 片，latest 安装只拉最高片（≤ 1 catalog + 1 shard）→ done", async () => {
-		const api = createMarketApi(makeEnv({ fetch: bigIndexFetch() }));
+		const api = createMarketApi(makeEnv({ fetch: bigIndexFetch(), reload: reloadStubFor("1.0.2499") }));
 		fetchCalls.length = 0;
 		g.http = { user: { id: 1 }, body: { name: "demo-solution", version: null, source: "cdn" } };
 		await api.install.post();
@@ -1208,7 +1216,7 @@ describe("REG-CS5 三级索引（装箱分片 + 条件请求 + DIP 读取源 +
 	});
 
 	it("BDD① 回落低片：显式指定最低版本 → 先试最高片未中，逐片回落到 1 号片命中 → done", async () => {
-		const api = createMarketApi(makeEnv({ fetch: bigIndexFetch() }));
+		const api = createMarketApi(makeEnv({ fetch: bigIndexFetch(), reload: reloadStubFor("1.0.0") }));
 		fetchCalls.length = 0;
 		g.http = { user: { id: 1 }, body: { name: "demo-solution", version: "1.0.0", source: "cdn" } };
 		await api.install.post();
@@ -1554,3 +1562,147 @@ describe("P1-16 接线：marketEnv 生产口径 / exec opts 转发 / operator
 		}
 	});
 });
+
+// ── 发布历史（GET /market/releases）────────────────────────────────────────────
+// 数据源是签名索引本身：每次读先把索引里出现过的 product@version 幂等补进 market_release，
+// 再按发布时间倒序分页。索引读不到不阻断查询（返回已入库行 + syncError）。
+
+interface ReleasePageData {
+	list: Array<{ id: number, product: string, version: string, published_at: number, published_at_source: string, yanked: number }>
+	total: number
+	page: number
+	size: number
+	syncError: string | null
+}
+
+/** HEAD 可读 Last-Modified 的 CDN 面（其余请求复用 cdnFetch 的完整夹具） */
+function headAwareFetch(lastModified: string): FetchFace {
+	return (async (url: string, init?: { method?: string }) => {
+		if (init?.method === "HEAD") {
+			return {
+				ok: true,
+				status: 200,
+				arrayBuffer: async () => new ArrayBuffer(0),
+				headers: { get: (name: string) => name.toLowerCase() === "last-modified" ? lastModified : null },
+			};
+		}
+		return cdnFetch(url);
+	}) as FetchFace;
+}
+
+/** 换一版分片正文（并按其字节重签，seq 与 catalog 同代），用于构造「索引说已下线」） */
+function shardWithYanked(): { body: string, sig: string } {
+	const body = JSON.stringify({
+		solutions: [{
+			name: "demo-solution",
+			latest: "0.2.0",
+			versions: [
+				{ ...manifestFixture("0.2.0"), description: LATEST_DESCRIPTION },
+				{ ...manifestFixture("0.1.0"), yanked: true },
+			],
+		}],
+	});
+	return { body, sig: JSON.stringify(signIndex("shard", SEQ, body, TEST_KEY.privateKeyPem, "test.publisher")) };
+}
+
+describe("GET /market/releases（发布历史：索引对账落库 + 分页）", () => {
+	it("首读把索引里全部 product@version 补进历史：产品/版本/发布时间齐全，无 HEAD 头时回落索引 issued_at（source=index）", async () => {
+		const api = createMarketApi(makeEnv());
+		g.http = { user: { id: 1 } };
+		await api.releases.get();
+		expect(last?.status).toBe(200);
+		const page = last?.data as ReleasePageData;
+		expect(page.syncError).toBeNull();
+		expect(page.total).toBe(3);
+		expect(page.list.map(r => `${r.product}@${r.version}`)).toEqual(["wiki@1.3.0", "demo-solution@0.1.0", "demo-solution@0.2.0"]);
+		expect(page.list.every(r => r.published_at === ISSUED_AT && r.published_at_source === "index")).toBe(true);
+		// 每行先试 HEAD（拿真正的落 CDN 时刻），失败才回落——不是完全不问源
+		expect(fetchInits.some(i => (i as { method?: string } | undefined)?.method === "HEAD")).toBe(true);
+	});
+
+	it("HEAD 拿得到 Last-Modified → 用文件时间并标 source=file（索引时间只作兜底，不冒充精确）", async () => {
+		const api = createMarketApi(makeEnv({ fetch: headAwareFetch("Wed, 01 Oct 2025 00:00:00 GMT") }));
+		g.http = { user: { id: 1 } };
+		await api.releases.get();
+		expect(last?.status).toBe(200);
+		const page = last?.data as ReleasePageData;
+		const expected = Math.floor(Date.parse("Wed, 01 Oct 2025 00:00:00 GMT") / 1000);
+		expect(page.list.every(r => r.published_at === expected && r.published_at_source === "file")).toBe(true);
+	});
+
+	it("幂等 + append-only：二次读不重复插入，已入库的 published_at 不被索引时间改写", async () => {
+		// 预置一行「上次记录的历史」：发布时间是事实，哪怕与本次索引的时间不同也不该被刷新
+		dbo.prepare("INSERT INTO market_release (product, version, published_at, published_at_source, yanked, first_seen_at) VALUES (?, ?, ?, ?, ?, ?)")
+			.run("demo-solution", "0.2.0", 1_600_000_000, "file", 0, 1_600_000_000);
+		const api = createMarketApi(makeEnv());
+		g.http = { user: { id: 1 } };
+		await api.releases.get();
+		await api.releases.get();
+		expect(last?.status).toBe(200);
+		const page = last?.data as ReleasePageData;
+		expect(page.total).toBe(3);
+		const rows = dbo.prepare("SELECT product, version, published_at FROM market_release ORDER BY product, version").all() as Array<{ product: string, version: string, published_at: number }>;
+		expect(rows).toHaveLength(3);
+		expect(rows.find(r => r.product === "demo-solution" && r.version === "0.2.0")?.published_at).toBe(1_600_000_000);
+	});
+
+	it("yanked 跟随索引（0→1 与 1→0 双向）：下线是当前状态，不是历史事实的改写", async () => {
+		// 1→0：库里记着已下线，索引又回到在架
+		dbo.prepare("INSERT INTO market_release (product, version, published_at, published_at_source, yanked, first_seen_at) VALUES (?, ?, ?, ?, ?, ?)")
+			.run("demo-solution", "0.2.0", ISSUED_AT, "index", 1, ISSUED_AT);
+		const api = createMarketApi(makeEnv());
+		g.http = { user: { id: 1 } };
+		await api.releases.get();
+		expect(last?.status).toBe(200);
+		expect((dbo.prepare("SELECT yanked FROM market_release WHERE product = ? AND version = ?").get("demo-solution", "0.2.0") as { yanked: number }).yanked).toBe(0);
+
+		// 0→1：换一版已签名的分片，其中 0.1.0 标了 yanked
+		const yanked = shardWithYanked();
+		const fetchFn = (async (url: string) => {
+			if (String(url).endsWith("shards/1.yaml.sig"))
+				return { ok: true, status: 200, arrayBuffer: async () => new TextEncoder().encode(yanked.sig).buffer as ArrayBuffer };
+			if (String(url).endsWith("shards/1.yaml"))
+				return { ok: true, status: 200, arrayBuffer: async () => new TextEncoder().encode(yanked.body).buffer as ArrayBuffer };
+			return cdnFetch(url);
+		}) as FetchFace;
+		const api2 = createMarketApi(makeEnv({ fetch: fetchFn }));
+		g.http = { user: { id: 1 } };
+		await api2.releases.get();
+		expect(last?.status).toBe(200);
+		expect((dbo.prepare("SELECT yanked FROM market_release WHERE product = ? AND version = ?").get("demo-solution", "0.1.0") as { yanked: number }).yanked).toBe(1);
+	});
+
+	it("索引读不到（验签失败）→ 200 + 已入库历史 + syncError 人话（观测面不阻断页面）", async () => {
+		const api = createMarketApi(makeEnv());
+		g.http = { user: { id: 1 } };
+		await api.releases.get();
+		expect((last?.data as ReleasePageData).total).toBe(3);
+
+		const brokenFetch = (async (url: string) => {
+			if (String(url).endsWith("shards/1.yaml.sig"))
+				return { ok: false, status: 503, arrayBuffer: async () => new ArrayBuffer(0) };
+			return cdnFetch(url);
+		}) as FetchFace;
+		const api2 = createMarketApi(makeEnv({ fetch: brokenFetch }));
+		g.http = { user: { id: 1 } };
+		await api2.releases.get();
+		expect(last?.status).toBe(200);
+		const page = last?.data as ReleasePageData;
+		expect(page.total).toBe(3);
+		expect(page.syncError).toContain("index_sig_missing");
+	});
+
+	it("门与分页：匿名 401；page/limit 透传并按发布时间倒序取页", async () => {
+		const api = createMarketApi(makeEnv());
+		g.http = {};
+		await api.releases.get();
+		expect(last?.status).toBe(401);
+
+		g.http = { user: { id: 1 }, query: { page: "2", limit: "1" } };
+		await api.releases.get();
+		expect(last?.status).toBe(200);
+		const page = last?.data as ReleasePageData;
+		expect(page).toMatchObject({ page: 2, size: 1, total: 3 });
+		expect(page.list).toHaveLength(1);
+	});
+});

package/templates/tests/lifecycle/preflight.spec.ts

@@ -305,3 +305,71 @@ describe("preflight · C2 夹具（双端唯一真源）", () => {
 		}
 	});
 });
+
+describe("p0 §3.9 宿主能力门禁（写锁前失败，零痕迹）", () => {
+	it("老 oj（capabilities 不含所需）+ 新模板声明 requiresCapabilities → 写锁前 failed(host_capability)，retryable=false", async () => {
+		const m = structuredClone(VALID);
+		m.requiresCapabilities = ["reload.modules_in_key", "anon.per_generation"];
+		const r = await preflight(ctx({ manifest: m, capabilities: [] }));
+		expect(r.ok).toBe(false);
+		expect(r.code).toBe("host_capability");
+		expect(r.retryable).toBe(false);
+		expect(r.message).toContain("reload.modules_in_key");
+	});
+
+	it("宿主 capability 未上报（undefined）+ 模板声明 → fail-closed 同拒", async () => {
+		const m = structuredClone(VALID);
+		m.requiresCapabilities = ["reload.api"];
+		const r = await preflight(ctx({ manifest: m })); // 无 capabilities
+		expect(r.ok).toBe(false);
+		expect(r.code).toBe("host_capability");
+	});
+
+	it("宿主具备所需能力 → 放行", async () => {
+		const m = structuredClone(VALID);
+		m.requiresCapabilities = ["reload.api", "reload.modules_in_key"];
+		const r = await preflight(ctx({ manifest: m, capabilities: ["reload.api", "reload.modules_in_key", "anon.per_generation"] }));
+		expect(r.ok).toBe(true);
+	});
+
+	it("既有模板不声明 requiresCapabilities → 门禁恒放行（不依赖上游 US-1 即先落地）", async () => {
+		const r = await preflight(ctx({ capabilities: [] }));
+		expect(r.ok).toBe(true);
+	});
+});
+
+describe("p0 §3.2 质辩1 / E7·E8 匿名保留段与残留检测（写锁前拒装）", () => {
+	it("e7 方案声明保留段匿名条目 → 拒装（C2-26）", async () => {
+		const m = structuredClone(VALID);
+		m.api.anonymous = ["_platform/health"];
+		const r = await preflight(ctx({ manifest: m }));
+		expect(r.ok).toBe(false);
+		expect(r.message).toContain("C2-26");
+		expect(r.message).toContain("_platform");
+	});
+
+	it("e8 config 存在未被本 manifest 声明的同 prefix 匿名残留 → 拒装（anonymous_residual）", async () => {
+		const m = structuredClone(VALID);
+		m.api.anonymous = ["demo-solution/ping"];
+		const r = await preflight(ctx({ manifest: m, existingAnonymousPaths: ["/demo-solution/legacy"] }));
+		expect(r.ok).toBe(false);
+		expect(r.code).toBe("anonymous_residual");
+		expect(r.message).toContain("/demo-solution/legacy");
+	});
+
+	it("e8 config 残留条目恰为本 manifest 已声明 → 不误伤放行", async () => {
+		const m = structuredClone(VALID);
+		m.api.anonymous = ["demo-solution/ping"];
+		const r = await preflight(ctx({ manifest: m, existingAnonymousPaths: ["/demo-solution/ping"] }));
+		expect(r.ok).toBe(true);
+	});
+
+	it("e8 config 残留指向保留段 → 不误伤放行（保留段属宿主内建，方案无法注入，非方案残留）", async () => {
+		const m = structuredClone(VALID);
+		m.api.anonymous = ["demo-solution/ping"];
+		// /_platform/health 是宿主内建匿名端点（如 /auth/login），方案 C2-26 已挡住声明保留段匿名，
+		// 故 config 里的保留段条目绝不会是方案残留——纳入比对只会误伤宿主内建，须放行。
+		const r = await preflight(ctx({ manifest: m, existingAnonymousPaths: ["/_platform/health", "/auth/login"] }));
+		expect(r.ok).toBe(true);
+	});
+});

package/templates/tests/lifecycle/register.spec.ts

@@ -8,6 +8,7 @@
 /* eslint-disable test/prefer-lowercase-title -- 任务/AC 编号是验收锚点，保留大写（DB/P1-5） */
 import { afterEach, beforeAll, describe, expect, it, vi } from "vitest";
 
+import { declOf } from "../../src/app/api/_platform/_lifecycle/installer";
 import { checkOccupancy, queryAllRegistered, queryRegistered, registerSolution } from "../../src/app/api/_platform/_lifecycle/steps/register";
 import { installDb } from "../fixture";
 
@@ -192,3 +193,24 @@ describe("审计：auditOp 落 solution.register", () => {
 		expect(JSON.parse(String(r.detail))).toEqual({ routes: 2, settings: 2, deprecated: [] });
 	});
 });
+
+describe("C2 manifest → SolutionDecl 映射（declOf，installer 侧纯函数）", () => {
+	it("permissions[].title_key 透传为对象数组（R2 展示锚：C2-15 收藏的字段不得在数据面丢弃）", () => {
+		const decl = declOf({
+			name: "wiki",
+			version: "1.0.0",
+			manifest: {
+				permissions: [
+					{ code: "wiki.doc.read", title_key: "wiki:perm.doc_read" },
+					{ code: "wiki.doc.export", title_key: "wiki:perm.doc_export" },
+				],
+				roles: [{ name: "wiki.reader", title_key: "wiki:role.reader", permissions: ["wiki.doc.read"] }],
+			},
+		} as any);
+		expect(decl.permissions).toEqual([
+			{ code: "wiki.doc.read", title_key: "wiki:perm.doc_read" },
+			{ code: "wiki.doc.export", title_key: "wiki:perm.doc_export" },
+		]);
+		expect(decl.roles[0].title_key).toBe("wiki:role.reader");
+	});
+});

package/templates/tests/lifecycle/role-title-translate.spec.ts

@@ -1,20 +1,11 @@
 // BDD：solution 角色 title 落库时同步翻译（R1–R6，计划 docs/plans/20261103-0948-role-title-translate）。
 // title = 解析文本（站点默认语言）、title_key = 原文（UI 实时翻译锚）；解析失败回退裸 key，
-// 绝不失败安装（R1）；升级元数据覆盖 = 重解析（R3）；迁移 0018 对存量 solution 角色回填、
-// builtin 不动（R2/AC4）；sys_permission 不变（R5）；name/code/绑定不变（R6）。
+// 绝不失败安装（R1）；升级元数据覆盖 = 重解析（R3）；title_key 列由 0001 基线建表即带（R2/AC4）；sys_permission 不变（R5）；name/code/绑定不变（R6）。
 /* eslint-disable test/prefer-lowercase-title -- AC 编号是验收锚点，保留大写（register.spec 同约定） */
-import { createRequire } from "node:module";
-import { fileURLToPath } from "node:url";
 import { afterEach, beforeAll, describe, expect, it } from "vitest";
 import { registerSolution, resolveDeclTitles, siteLanguage } from "../../src/app/api/_platform/_lifecycle/steps/register";
 import { installDb } from "../fixture";
 
-const req = createRequire(import.meta.url);
-const { DatabaseSync } = req("node:sqlite");
-const { readFileSync } = req("node:fs");
-const { dirname, join } = req("node:path");
-
-const HERE = dirname(fileURLToPath(import.meta.url));
 const enc = new TextEncoder();
 
 let dbo: ReturnType<typeof installDb>;
@@ -60,8 +51,8 @@ function pmDecl(title: string) {
 	return {
 		module: "pm",
 		version: "1.0.0",
-		roles: [{ name: "pm.sales", title, title_key: title, permissions: ["pm.doc.create"] as string[] }],
-		permissions: ["pm.doc.create"],
+		roles: [{ name: "pm.sales", title, title_key: title, permissions: ["pm.doc.create"] }],
+		permissions: [{ code: "pm.doc.create" }],
 	};
 }
 
@@ -142,30 +133,9 @@ describe("R1–R3 落库（registerSolution 消费解析后的 decl）", () => {
 	});
 });
 
-describe("R2 迁移 0018（sys_role.title_key 回填）", () => {
+describe("R2 sys_role.title_key 列（基线建表即带）", () => {
 	it("AC4 夹具真实迁移后 sys_role 带 title_key 列（列进库 ↔ schema.yaml 一致守卫的库侧半边）", () => {
 		const cols = (dbo.prepare("PRAGMA table_info(sys_role)").all() as Array<{ name: string }>).map(c => c.name);
 		expect(cols).toContain("title_key");
 	});
-
-	it("AC4 存量 solution 角色按 key 形状回填，builtin 角色不动、title 原文不改", () => {
-		const raw = new DatabaseSync(":memory:");
-		raw.exec(`
-			CREATE TABLE sys_role (
-				name TEXT PRIMARY KEY, module TEXT NOT NULL, title TEXT, description TEXT,
-				builtin INTEGER NOT NULL DEFAULT 0, deprecated INTEGER NOT NULL DEFAULT 0
-			);
-			INSERT INTO sys_role (name, module, title, builtin) VALUES
-				('pm.sales', 'pm', 'pm:role.sales', 0),
-				('wiki.admin', 'wiki', 'wiki:role.admin', 0),
-				('admin', 'framework', '系统管理员', 1);
-		`);
-		raw.exec(readFileSync(join(HERE, "../../src/app/api/_platform/migrations/0018__sys_role_title_key.sql"), "utf8"));
-		const rows = raw.prepare("SELECT name, title, title_key FROM sys_role ORDER BY name").all() as Array<{ name: string, title: string, title_key: string | null }>;
-		expect(rows).toEqual([
-			{ name: "admin", title: "系统管理员", title_key: null },
-			{ name: "pm.sales", title: "pm:role.sales", title_key: "pm:role.sales" },
-			{ name: "wiki.admin", title: "wiki:role.admin", title_key: "wiki:role.admin" },
-		]);
-	});
 });

package/templates/tests/lifecycle/text-edit.spec.ts

@@ -5,7 +5,7 @@
 import * as fsp from "node:fs/promises";
 import { describe, expect, it } from "vitest";
 
-import { appendAnonymousPaths, bumpInstallSeq, ensureReloadApi, hasAnchor, insertAnchor } from "../../src/app/api/_platform/_lifecycle/text-edit";
+import { appendAnonymousPaths, ensureReloadApi, hasAnchor, insertAnchor, removeAnonymousPaths } from "../../src/app/api/_platform/_lifecycle/text-edit";
 
 describe("insertAnchor（R18）", () => {
 	it("带注释的 config.yaml 插入后注释/缩进/空行/键序逐字保留", () => {
@@ -105,32 +105,6 @@ describe("ensureReloadApi（P1-10，D3 一次性注入集收口：S1-1 定稿无
 	});
 });
 
-describe("bumpInstallSeq（B-11 reload 触发面：vars 安装序号自增，PRD E5 实测 vars 改动可热生效）", () => {
-	it("0 → 1 自增，其余行（注释/缩进/键序）逐字保留", () => {
-		const content = "mounts: []\nvars:\n  ojm_install_seq: 0\n# 尾注释保留";
-		const r = bumpInstallSeq(content);
-		expect(r.seq).toBe(1);
-		expect(r.content).toBe("mounts: []\nvars:\n  ojm_install_seq: 1\n# 尾注释保留");
-	});
-
-	it("多次调用累加（N → N+1），行内尾注释原样保留", () => {
-		const content = "vars:\n  ojm_install_seq: 41 # 安装序号";
-		const r1 = bumpInstallSeq(content);
-		expect(r1.seq).toBe(42);
-		expect(r1.content).toBe("vars:\n  ojm_install_seq: 42 # 安装序号");
-		const r2 = bumpInstallSeq(r1.content);
-		expect(r2.seq).toBe(43);
-	});
-
-	it("键缺失 → 可读报错（用户删行 = 显式退出热更触发，安装器不猜位置）", () => {
-		expect(() => bumpInstallSeq("vars:\n  other: 1")).toThrowError(/ojm_install_seq/);
-	});
-
-	it("值非数字（行存在但形状不符）→ 视同缺失，可读报错不猜", () => {
-		expect(() => bumpInstallSeq("vars:\n  ojm_install_seq: abc")).toThrowError(/ojm_install_seq/);
-	});
-});
-
 describe("模板 config.yaml 随发锚点（P1-16 接线②：ensureReloadApi 键缺失插入路径的闭环依据）", () => {
 	it("模板 config.yaml 带整行 # ojm:reload 锚点；键在 → ensureReloadApi no-op", async () => {
 		const cfg = await fsp.readFile(new URL("../../config.yaml", import.meta.url), "utf8");
@@ -175,3 +149,47 @@ describe("p2-15③ C2-26 anonymous 运行时接线（appendAnonymousPaths：conf
 		expect(() => appendAnonymousPaths("server:\n  reload_api: true\n", ["x/y"])).toThrow(/anonymous_paths/);
 	});
 });
+
+describe("removeAnonymousPaths（P0 §3.5 补偿清单：appendAnonymousPaths 逆操作）", () => {
+	const BASE = "auth:\n  anonymous_paths:\n    - /auth/login\n    # 行内注释保留\n    - /system/login-methods\n";
+
+	it("追加后移除 = 还原到追加前形态（注释/缩进/既有项逐字保留）", () => {
+		const added = appendAnonymousPaths(BASE, ["demo-solution/ping", "demo-solution/health"]);
+		const r = removeAnonymousPaths(added.content, ["demo-solution/ping", "demo-solution/health"]);
+		expect(r.removed).toEqual(["/demo-solution/ping", "/demo-solution/health"]);
+		expect(r.content).toBe(BASE);
+	});
+
+	it("只移除指定项，其余匿名条目不动", () => {
+		const added = appendAnonymousPaths(BASE, ["demo-solution/ping", "demo-solution/health"]);
+		const r = removeAnonymousPaths(added.content, ["demo-solution/ping"]);
+		expect(r.removed).toEqual(["/demo-solution/ping"]);
+		expect(r.content).toContain("- /demo-solution/health");
+		expect(r.content).toContain("- /auth/login");
+		expect(r.content).toContain("- /system/login-methods");
+	});
+
+	it("幂等：未含的路径不在列表内 → removed=[] 且内容不变", () => {
+		const added = appendAnonymousPaths(BASE, ["demo-solution/ping"]);
+		const r = removeAnonymousPaths(added.content, ["other/not-present"]);
+		expect(r.removed).toEqual([]);
+		expect(r.content).toBe(added.content);
+	});
+
+	it("连续两次移除同一批路径，第二次为 no-op（防重复副作用）", () => {
+		const added = appendAnonymousPaths(BASE, ["demo-solution/ping"]);
+		const once = removeAnonymousPaths(added.content, ["demo-solution/ping"]);
+		const twice = removeAnonymousPaths(once.content, ["demo-solution/ping"]);
+		expect(twice.removed).toEqual([]);
+		expect(twice.content).toBe(once.content);
+	});
+
+	it("键缺失 = 没东西可删，no-op（不报错）", () => {
+		const r = removeAnonymousPaths("server:\n  reload_api: true\n", ["x/y"]);
+		expect(r.removed).toEqual([]);
+	});
+
+	it("空路径列表 = no-op", () => {
+		expect(removeAnonymousPaths(BASE, []).removed).toEqual([]);
+	});
+});

package/templates/tests/lifecycle/uninstall.spec.ts

@@ -196,6 +196,42 @@ describe("POST uninstall 卸载编排（superadmin，R9）", () => {
 	});
 });
 
+describe("Phase 4：卸载 reload 失败回滚（P0 §3.4 第5步，依赖 US-1 manifests 摘要驱动的装配面，本仓先落编排）", () => {
+	it("卸载摘锁后 reload 失败 → 锁写回(模块仍挂载) + ok:false + 版本目录不删（fail-closed 一致回滚）", async () => {
+		await seedInstalled();
+		const api = createMarketApi(makeEnv({
+			reload: {
+				reloadConfig: async () => {
+					throw new Error("reload boom");
+				},
+			},
+		}));
+		g.http = { user: { id: 1 }, body: { name: "demo-solution" } };
+		await api.uninstall.post();
+		// 锁写回：模块仍挂载（other 保留 + demo-solution 恢复）
+		expect(await readLock(join(sharedRoot, "manifests.yaml"))).toEqual({ "demo-solution": "0.1.0", "other": "1.0.0" });
+		// 版本目录未删（先失可达性再失文件；reload 失败即停，不删文件）
+		await expect(fsp.readdir(join(sharedRoot, "demo-solution-0.1.0"))).resolves.toBeDefined();
+		// sidecar 未删（元数据一致回滚，非半卸）
+		const state = await createStateStore(statePath);
+		expect(state.read().solutions["demo-solution"]).toBeDefined();
+		expect(last?.status).toBe(200);
+		expect(last?.data).toMatchObject({ ok: false });
+		expect(String((last?.data as { message?: string } | undefined)?.message)).toContain("reload 失败");
+	});
+
+	it("卸载 reload 成功 → 版本目录正常移除、锁摘除（既有行为不破坏）", async () => {
+		await seedInstalled();
+		const api = createMarketApi(makeEnv({ reload: { reloadConfig: async () => ({ generation: 1, unchanged: false, applied: ["-demo-solution@0.1.0"], restart_pending: [] }) } }));
+		g.http = { user: { id: 1 }, body: { name: "demo-solution" } };
+		await api.uninstall.post();
+		expect(last?.status).toBe(200);
+		expect(last?.data).toMatchObject({ ok: true });
+		expect(await readLock(join(sharedRoot, "manifests.yaml"))).toEqual({ other: "1.0.0" });
+		await expect(fsp.readdir(join(sharedRoot, "demo-solution-0.1.0"))).rejects.toBeTruthy();
+	});
+});
+
 describe("P3-3 卸载级联单一事务（fail-closed：中段失败整段回滚、锁不摘、无半残）", () => {
 	it("权限级联中段失败 → 事务回滚（route/角色/权限零残）、锁/sidecar/modules/版本目录原样保留", async () => {
 		await seedInstalled();