@oj-module/cli 0.2.69 → 0.2.71

package/templates/tests/lifecycle/market-api.spec.ts

@@ -1,9 +1,9 @@
 // BDD：编排端点 + 市场索引（P1-12，R9/ISP）。
-// 四端点同挂 _platform/market 组（oj v0.1.64 嵌套 handler 组，notification/api.ts 同形态）：
-//   POST /api/_platform/market/install   superadmin——runInstall 编排（端点不重复编排，P1-10 状态机负责推进）
-//   GET  /api/_platform/market/task?id=  superadmin——任务轮询消费面（§10.2；内容写侧已脱敏，读侧无秘密可泄）
-//   GET  /api/_platform/market/meta      登录即可——{apiVersion}（peerPlatform 预检）
-//   GET  /api/_platform/market/index     superadmin——CDN 三级索引（catalog.yaml + shards/<n>.yaml，ETag/If-None-Match 条件请求）+ 本地 state 对比
+// 四端点同挂 oj-market 模块 api 根（v4 起自 _platform/market 迁入，manifest deps 声明 _platform）：
+//   POST /api/oj-market/install   superadmin——runInstall 编排（端点不重复编排，P1-10 状态机负责推进）
+//   GET  /api/oj-market/task?id=  superadmin——任务轮询消费面（§10.2；内容写侧已脱敏，读侧无秘密可泄）
+//   GET  /api/oj-market/meta      登录即可——{apiVersion}（peerPlatform 预检）
+//   GET  /api/oj-market/index     superadmin——DB 目录分页（market_release 聚合）+ 本地 state 对比（v4 §四，索引机制退役）
 // 简报 `task/:id` 段参数形态在模板 http 面无先例（contacts/detail?id= 同款 query 惯例），备案于任务报告。
 // 步骤面全 stub 注入（DIP）：fetch/exec/reload 不真跑；register/smoke/audit 走真实内存库夹具。
 /* eslint-disable test/prefer-lowercase-title -- 端点动词/路径是验收锚点，保留大写（installer.spec 同约定） */
@@ -11,7 +11,7 @@ import type { FsFace } from "../../src/app/api/_platform/_lifecycle/atomic";
 import type { FetchFace } from "../../src/app/api/_platform/_lifecycle/steps/download";
 import type { ExecFace } from "../../src/app/api/_platform/_lifecycle/steps/extract";
 import type { ReloadFace } from "../../src/app/api/_platform/_lifecycle/steps/reload";
-import type { MarketEnv } from "../../src/app/api/_platform/market/api";
+import type { MarketEnv } from "../../src/oj-market/api/api";
 import { createHash } from "node:crypto";
 import { readFileSync } from "node:fs";
 import * as fsp from "node:fs/promises";
@@ -21,15 +21,14 @@ import { fileURLToPath } from "node:url";
 import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
 import { parse } from "yaml";
 import { defaultTestKey, nodeVerifyEd25519, signedArchiveFor } from "../../../src/lifecycle/__tests__/helpers";
-import { signIndex } from "../../../src/publish";
+import { generateKeyPair } from "../../../src/lifecycle/keygen";
+import { signCanonical } from "../../../src/lifecycle/sign";
 import { readLock, writeLock } from "../../src/app/api/_platform/_lifecycle/lock";
-import { compareVersions } from "../../src/app/api/_platform/_lifecycle/semver";
 import { createStateStore } from "../../src/app/api/_platform/_lifecycle/state";
 import { getTask, writeTask } from "../../src/app/api/_platform/_lifecycle/tasks";
 import { createTrustStore } from "../../src/app/api/_platform/_lifecycle/trust";
 import { invalidateAllUsers } from "../../src/app/api/_platform/_shared/service/infra/access";
-import { createMarketApi, marketEnv, parseVersionsJson, versionsJsonPathOf } from "../../src/app/api/_platform/market/api";
-import { localIndexSource } from "../../src/app/api/_platform/market/index-source";
+import { createMarketApi, marketEnv, parseVersionsJson, versionsJsonPathOf } from "../../src/oj-market/api/api";
 import { installDb } from "../fixture";
 
 function hexToBytes(hex: string): Uint8Array {
@@ -85,45 +84,6 @@ function manifestFixture(version = "0.1.0"): any {
 	};
 }
 
-/** REG-CS2 时效：签发时刻与失效时刻（epoch 秒；用例里取「刚签发」以免被判过期） */
-const ISSUED_AT = Math.floor(Date.now() / 1000);
-const EXPIRES_AT = ISSUED_AT + 7 * 24 * 60 * 60;
-
-/**
- * Form B 三级索引夹具（REG-CS5：catalog + shards）。JSON 序列充当 yaml.parse 全局的载荷——
- *  解析面是 oj 全局，端点只管喂文本取对象。catalog 只记「包名 → 分片号」无版本明细。
- */
-const CATALOG = JSON.stringify({
-	// REG-CS1/CS2：catalog = 代次与时效真源，所有索引签名必须与它同代
-	seq: 1,
-	issued_at: ISSUED_AT,
-	expires_at: EXPIRES_AT,
-	generated_at: "2026-10-17T00:00:00Z",
-	cdn: CDN,
-	// 片号 → 代次钉值（REG-CS1③：分片签名 seq 必须等于钉值；byte 相同的分片可跨代复用）
-	shards: { 1: 1 },
-	// 包名 → 分片号（无版本明细；版本明细在分片里）
-	solutions: [
-		{ name: "demo-solution", shards: [1] },
-		{ name: "wiki", shards: [1] },
-	],
-});
-/** 最新版详细描述（C2-05；喂给 index 聚合断言，验证卡片能读到方案「提供什么」） */
-const LATEST_DESCRIPTION = "演示方案：提供示例 CRUD 与菜单路由，覆盖安装、升级、回滚与历史留痕全链路。";
-/** 分片正文（纯内容无 meta：版本条目即 Form B manifest——原 manifests.yaml 聚合清单并入分片） */
-const SHARD_1 = JSON.stringify({
-	solutions: [
-		{ name: "demo-solution", latest: "0.2.0", versions: [{ ...manifestFixture("0.2.0"), description: LATEST_DESCRIPTION }, manifestFixture("0.1.0")] },
-		{ name: "wiki", latest: "1.3.0", versions: [{ name: "wiki", version: "1.3.0", archive: { file: "wiki-1.3.0.tgz", sha256: "x", size: 1 } }] },
-	],
-});
-
-/** 基线代次 */
-const SEQ = 1;
-/** 索引签名（REG-CS1：签名覆盖 (kind, seq)——换 kind 或换代都验不过） */
-const CATALOG_SIG = JSON.stringify(signIndex("catalog", SEQ, CATALOG, TEST_KEY.privateKeyPem, "test.publisher"));
-const SHARD_1_SIG = JSON.stringify(signIndex("shard", 1, SHARD_1, TEST_KEY.privateKeyPem, "test.publisher"));
-
 let root: string;
 let sharedRoot: string;
 let staging: string;
@@ -142,20 +102,7 @@ const fetchInits: unknown[] = [];
 const cdnFetch = ((url: string, init?: unknown) => {
 	fetchCalls.push(url);
 	fetchInits.push(init);
-	// 基线 CDN 已签名（REG-CS1：缺签名即拒，故所有「正常路径」夹具都必须带 .sig）。
-	// .sig 判定先行：`catalog.yaml.sig` 也以 `.yaml` 结尾，顺序反了会把签名当正文。
-	if (url.endsWith("catalog.yaml.sig"))
-		return { ok: true, status: 200, arrayBuffer: async () => new TextEncoder().encode(CATALOG_SIG).buffer as ArrayBuffer };
-	if (url.endsWith("shards/1.yaml.sig"))
-		return { ok: true, status: 200, arrayBuffer: async () => new TextEncoder().encode(SHARD_1_SIG).buffer as ArrayBuffer };
-	const text = url.endsWith("catalog.yaml")
-		? CATALOG
-		: url.endsWith("shards/1.yaml")
-			? SHARD_1
-			: null;
-	if (text !== null) {
-		return { ok: true, status: 200, arrayBuffer: async () => new TextEncoder().encode(text).buffer as ArrayBuffer };
-	}
+	// v4 §四：安装解析直读 DB 目录，fetch 只剩「包字节 + smoke 探针」两类出站
 	if (url.endsWith(".tgz")) {
 		return { ok: true, status: 200, arrayBuffer: async () => ARCHIVE.slice().buffer as ArrayBuffer };
 	}
@@ -271,6 +218,7 @@ beforeEach(async () => {
 		fail: (status: number, msg: string) => {
 			last = { status, msg };
 		},
+		header: () => {},
 	};
 	last = null;
 	fetchCalls.length = 0;
@@ -287,6 +235,23 @@ afterEach(async () => {
 	await fsp.rm(root, { recursive: true, force: true });
 });
 
+/**
+ * 直插 market_release 行（v4 §四 DB 目录：目录聚合/安装解析/releases 共同数据源；上传链路见 cdn-upload.spec）。
+ *  signed（缺省 true）按 manifestFixture 同源签名落 sig 三列——install 用例 verify 段六码分流需要；
+ *  manifest 缺省 null（目录聚合类用例只数行数；卡片字段用例显式传 manifest）。
+ */
+function seedRelease(product: string, version: string, opts: { key_id?: string | null, published_at?: number, yanked?: number, manifest?: unknown, signed?: boolean } = {}) {
+	const at = opts.published_at ?? 1000;
+	const sig = opts.signed === false
+		? { alg: null, value: null, pk: null, reg: null }
+		: (() => {
+			const s = signedArchiveFor(ARCHIVE, product, version, { keyPair: TEST_KEY }).sig;
+			return { alg: String(s.alg), value: String(s.value), pk: String(s.public_key), reg: String(s.registry_id) };
+		})();
+	dbo.prepare("INSERT INTO market_release (product,version,key_id,sha256,size,published_at,published_at_source,yanked,first_seen_at,sig_alg,sig_value,sig_public_key,sig_registry_id,manifest) VALUES (?,?,?,?,?,?,?,?,?,?,?,?,?,?)")
+		.run(product, version, "key_id" in opts ? opts.key_id : "test.publisher", SHA256, ARCHIVE.byteLength, at, "upload", opts.yanked ?? 0, at, sig.alg, sig.value, sig.pk, sig.reg, opts.manifest === undefined ? null : JSON.stringify(opts.manifest));
+}
+
 describe("权限门（R9：市场编排 superadmin 独占，meta 登录即可）", () => {
 	it("非 superadmin 访问 install/task/index 一律 403（拒权不泄露存在性）", async () => {
 		g.http = { user: { id: 2 } };
@@ -322,30 +287,321 @@ describe("权限门（R9：市场编排 superadmin 独占，meta 登录即可）
 	});
 });
 
-describe("POST install（cdn：Form B 索引解析属市场侧，安装器不拼 URL）", () => {
-	it("指定版本：解析 catalog+shard → runInstall 推进至 done，task 文件全 stage 就位且索引拉取不带 no-cache", async () => {
+describe("0003 迁移（market_release 扩列演化，v4 §一：表演化非新建）", () => {
+	it("sig_alg/sig_value/sig_public_key/manifest 四列就位，既有列与表不破坏（releases 端点照常读）", () => {
+		const cols = (dbo.prepare("PRAGMA table_info(market_release)").all() as Array<{ name: string }>).map(c => c.name);
+		// 新增四列（DB 目录化：签名三字段 + 包内嵌 manifest 抽取物）
+		for (const c of ["sig_alg", "sig_value", "sig_public_key", "manifest"])
+			expect(cols).toContain(c);
+		// 既有九列不破坏（0002 形状原样保留，列名沿用 product 不改 name）
+		for (const c of ["id", "product", "version", "key_id", "sha256", "size", "published_at", "published_at_source", "yanked", "first_seen_at"])
+			expect(cols).toContain(c);
+	});
+});
+
+describe("GET catalog（v4 §三：匿名分页目录 JSON，DB 直读合成单协议 shape）", () => {
+	/** 直插 market_release 行（目录聚合数据源；上传链路见 cdn-upload.spec） */
+	function seedRelease(product: string, version: string, opts: { key_id?: string | null, published_at?: number, yanked?: number, manifest?: unknown } = {}) {
+		const at = opts.published_at ?? 1000;
+		dbo.prepare("INSERT INTO market_release (product,version,key_id,sha256,size,published_at,published_at_source,yanked,first_seen_at,manifest) VALUES (?,?,?,?,?,?,?,?,?,?)")
+			.run(product, version, "key_id" in opts ? opts.key_id : "test.publisher", SHA256, ARCHIVE.byteLength, at, "upload", opts.yanked ?? 0, at, opts.manifest === undefined ? null : JSON.stringify(opts.manifest));
+	}
+
+	it("25 包 ?page=2&size=10 → 第 11–20 条 + total=25 + page/size 回显 + api_version + items 形状", async () => {
+		for (let i = 1; i <= 25; i++)
+			seedRelease(`pkg-${String(i).padStart(2, "0")}`, "0.1.0", { published_at: 1000 + i, manifest: { name: `pkg-${String(i).padStart(2, "0")}`, version: "0.1.0", summary: `方案 ${i}` } });
+		const api = createMarketApi(makeEnv());
+		g.http = { query: { page: "2", size: "10" } };
+		await api.catalog.get();
+		expect(last?.status).toBe(200);
+		const d = last?.data as { api_version: string, page: number, size: number, total: number, truncated: boolean, items: Array<Record<string, unknown>> };
+		expect(d.api_version).toBe("v1");
+		expect(d.page).toBe(2);
+		expect(d.size).toBe(10);
+		expect(d.total).toBe(25);
+		expect(d.items).toHaveLength(10);
+		// 排序 published_at desc → 第 11–20 条 = pkg-15 … pkg-06（published_at 1025..1016 倒序）
+		expect((d.items[0] as { product: string }).product).toBe("pkg-15");
+		expect((d.items[9] as { product: string }).product).toBe("pkg-06");
+		// items 形状：product/latest/publisher(key_id)/versions_count/summary
+		expect(d.items[0]).toMatchObject({ product: "pkg-15", latest: "0.1.0", publisher: "test.publisher", versions_count: 1, summary: "方案 15" });
+		// 中间页截断标记
+		expect(d.truncated).toBe(true);
+	});
+
+	it("响应顶层带 registry_id（签名推送 canonical 首段 = 站点身份，CLI 发现面）；未配置 → null", async () => {
+		seedRelease("pkg-a", "0.1.0");
+		// 显式注入站点身份（生产 = config.yaml vars.registry_id，经 readSiteVar 同源回落）
+		g.http = { query: {} };
+		await createMarketApi(makeEnv({ registryId: "test.registry" })).catalog.get();
+		expect(last?.status).toBe(200);
+		expect((last?.data as { registry_id: string }).registry_id).toBe("test.registry");
+		// 未配置（注入缺省 + 无 config vars）→ null：CLI 侧据此给「站点未配置 registry_id」人话
+		await createMarketApi(makeEnv({ registryId: undefined })).catalog.get();
+		expect((last?.data as { registry_id: unknown }).registry_id).toBeNull();
+	});
+
+	it("非法 page/size 收敛不报错（pageArgs 口径数据表）；末页 truncated=false", async () => {
+		seedRelease("pkg-a", "0.1.0");
+		const api = createMarketApi(makeEnv());
+		for (const [page, size, expectPage, expectSize] of [["0", "0", 1, 20], ["-1", "abc", 1, 20], ["abc", "500", 1, 200], ["2.9", "10", 2, 10]] as const) {
+			g.http = { query: { page, size } };
+			await api.catalog.get();
+			expect(last?.status).toBe(200);
+			const d = last?.data as { page: number, size: number };
+			expect(d.page).toBe(expectPage);
+			expect(d.size).toBe(expectSize);
+		}
+		g.http = { query: { page: "1", size: "20" } };
+		await api.catalog.get();
+		expect((last?.data as { truncated: boolean }).truncated).toBe(false);
+	});
+
+	it("排序稳定：同 published_at 按 product 升序（防翻页重复/丢条目）", async () => {
+		seedRelease("pkg-b", "0.1.0", { published_at: 5000 });
+		seedRelease("pkg-a", "0.1.0", { published_at: 5000 });
+		seedRelease("pkg-c", "0.1.0", { published_at: 5000 });
+		const api = createMarketApi(makeEnv());
+		g.http = { query: { size: "2", page: "1" } };
+		await api.catalog.get();
+		expect(((last?.data as { items: Array<{ product: string }> }).items).map(i => i.product)).toEqual(["pkg-a", "pkg-b"]);
+		g.http = { query: { size: "2", page: "2" } };
+		await api.catalog.get();
+		expect(((last?.data as { items: Array<{ product: string }> }).items).map(i => i.product)).toEqual(["pkg-c"]);
+	});
+
+	it("清单不含 yanked 行：yanked 版本不计入；全 yanked 的 product 整项消失", async () => {
+		seedRelease("live-pkg", "0.1.0");
+		seedRelease("live-pkg", "0.2.0", { yanked: 1 });
+		seedRelease("gone-pkg", "0.1.0", { yanked: 1 });
+		const api = createMarketApi(makeEnv());
+		g.http = { query: {} };
+		await api.catalog.get();
+		const items = (last?.data as { items: Array<{ product: string, latest: string, versions_count: number }> }).items;
+		expect(items.map(i => i.product)).toEqual(["live-pkg"]);
+		expect(items[0]).toMatchObject({ latest: "0.1.0", versions_count: 1 });
+	});
+
+	it("latest = 未 yanked 的 semver max（非存储列，API 计算）；summary 取 latest 版 manifest", async () => {
+		seedRelease("sem-pkg", "0.10.0", { published_at: 100, manifest: { summary: "旧" } });
+		seedRelease("sem-pkg", "0.9.0", { published_at: 300, manifest: { summary: "新" } });
+		seedRelease("no-manifest-pkg", "1.0.0", { key_id: null });
+		const api = createMarketApi(makeEnv());
+		g.http = { query: {} };
+		await api.catalog.get();
+		const items = (last?.data as { items: Array<Record<string, unknown>> }).items;
+		const sem = items.find(i => i.product === "sem-pkg")!;
+		expect(sem.latest).toBe("0.10.0"); // semver 序非字典序
+		expect(sem.summary).toBe("旧"); // latest 0.10.0 的 manifest
+		expect(sem.publisher).toBe("test.publisher");
+		// 遗留行（manifest NULL、key_id NULL）：summary 缺省、publisher null
+		const legacy = items.find(i => i.product === "no-manifest-pkg")!;
+		expect(legacy.summary).toBeUndefined();
+		expect(legacy.publisher).toBeNull();
+	});
+
+	it("匿名可读（无 user 也 200）+ Cache-Control: no-store 断言", async () => {
+		seedRelease("anon-pkg", "0.1.0");
+		const api = createMarketApi(makeEnv());
+		const headers: Array<[string, string]> = [];
+		g.json = {
+			ok: (data: unknown) => {
+				last = { status: 200, data };
+			},
+			fail: (status: number, msg: string) => {
+				last = { status, msg };
+			},
+			header: (k: string, v: string) => {
+				headers.push([k, v]);
+			},
+		};
+		g.http = { query: {} };
+		await api.catalog.get();
+		expect(last?.status).toBe(200);
+		expect(headers).toContainEqual(["Cache-Control", "no-store"]);
+	});
+});
+
+describe("GET catalog/detail（v4 §三：详情保留 yanked 条目，安装解析数据源）", () => {
+	function seedRelease(product: string, version: string, opts: { key_id?: string, yanked?: number, published_at?: number, manifest?: unknown } = {}) {
+		const at = opts.published_at ?? 1000;
+		dbo.prepare("INSERT INTO market_release (product,version,key_id,sha256,size,published_at,published_at_source,yanked,first_seen_at,manifest) VALUES (?,?,?,?,?,?,?,?,?,?)")
+			.run(product, version, opts.key_id ?? "test.publisher", SHA256, ARCHIVE.byteLength, at, "upload", opts.yanked ?? 0, at, opts.manifest === undefined ? null : JSON.stringify(opts.manifest));
+	}
+	const MANIFEST_010 = { name: "demo-solution", version: "0.1.0", summary: "演示", archive: { file: "demo-solution-0.1.0.tgz" } };
+
+	it("versions 全量含 yanked:true 条目、semver 降序；archive.file 正名 + signature 落位", async () => {
+		seedRelease("demo-solution", "0.1.0", { manifest: MANIFEST_010 });
+		seedRelease("demo-solution", "0.2.0", { yanked: 1, published_at: 2000, manifest: { name: "demo-solution", version: "0.2.0", archive: { file: "wrong-name.tgz" } } });
+		const api = createMarketApi(makeEnv());
+		g.http = { query: { name: "demo-solution" } };
+		await api.catalog.detail.get();
+		expect(last?.status).toBe(200);
+		const d = last?.data as { product: string, latest: string, versions: Array<Record<string, unknown>> };
+		expect(d.product).toBe("demo-solution");
+		expect(d.latest).toBe("0.1.0"); // yanked 不计入 latest
+		expect(d.versions.map(v => v.version)).toEqual(["0.2.0", "0.1.0"]); // semver 降序
+		expect(d.versions[0]).toMatchObject({ version: "0.2.0", yanked: true });
+		expect(d.versions[1]).toMatchObject({ version: "0.1.0", yanked: false, summary: "演示" });
+		// archive.file 由服务端组表正名（存量 manifest 内嵌 file 不可信，逐字 <name>-<version>.tgz）
+		for (const v of d.versions)
+			expect((v.archive as { file: string }).file).toBe(`demo-solution-${v.version}.tgz`);
+		expect((d.versions[0].archive as Record<string, unknown>).sha256).toBe(SHA256);
+	});
+
+	it("未知 name → 404；?version= 过滤；全 yanked 时 latest=null", async () => {
+		seedRelease("demo-solution", "0.1.0");
+		seedRelease("yanked-all", "0.1.0", { yanked: 1 });
+		const api = createMarketApi(makeEnv());
+		g.http = { query: { name: "nope" } };
+		await api.catalog.detail.get();
+		expect(last?.status).toBe(404);
+		g.http = { query: { name: "demo-solution", version: "0.1.0" } };
+		await api.catalog.detail.get();
+		expect((last?.data as { versions: unknown[] }).versions).toHaveLength(1);
+		g.http = { query: { name: "demo-solution", version: "9.9.9" } };
+		await api.catalog.detail.get();
+		expect((last?.data as { versions: unknown[] }).versions).toHaveLength(0);
+		g.http = { query: { name: "yanked-all" } };
+		await api.catalog.detail.get();
+		expect((last?.data as { latest: string | null }).latest).toBeNull();
+	});
+
+	it("匿名可读 + 错误文案卫生（404 message 不含路径/SQL/内部拓扑）", async () => {
+		const api = createMarketApi(makeEnv());
+		g.http = { query: { name: "nope" } };
+		await api.catalog.detail.get();
+		expect(last?.status).toBe(404);
+		expect(String(last?.msg)).not.toMatch(/\/|SELECT|sqlite|cdn\//i);
+	});
+});
+
+describe("POST /market/yank（v4 §三：签名 yank，清单摘除/详情保留）", () => {
+	const REGISTRY = "test.registry";
+	function seedRelease(product: string, version: string, opts: { key_id?: string | null, yanked?: number, published_at?: number } = {}) {
+		const at = opts.published_at ?? 1000;
+		dbo.prepare("INSERT INTO market_release (product,version,key_id,sha256,size,published_at,published_at_source,yanked,first_seen_at) VALUES (?,?,?,?,?,?,?,?,?)")
+			.run(product, version, "key_id" in opts ? opts.key_id : "test.publisher", SHA256, ARCHIVE.byteLength, at, "upload", opts.yanked ?? 0, at);
+	}
+	/** yank 签名面：canonical `market-yank:<registry>:<product>:<version>`（服务端重算口径同上传） */
+	function yankSignature(product: string, version: string, key: typeof TEST_KEY = TEST_KEY, keyId = "test.publisher") {
+		return { "x-ojm-key-id": keyId, "x-ojm-signature": signCanonical(key.privateKeyPem, `market-yank:${REGISTRY}:${product}:${version}`) };
+	}
+
+	it("签名 + key 匹配行 key_id → 200：行 yanked=1、catalog 清单即摘除、detail 标 yanked:true", async () => {
+		seedRelease("demo-solution", "0.1.0");
+		const api = createMarketApi(makeEnv({ registryId: REGISTRY }));
+		g.http = { user: { id: 1 }, body: { product: "demo-solution", version: "0.1.0", by: "rel-ops", reason: "严重缺陷" }, headers: yankSignature("demo-solution", "0.1.0") };
+		await api.yank.post();
+		expect(last?.status).toBe(200);
+		expect(last?.data).toMatchObject({ ok: true, product: "demo-solution", version: "0.1.0", yanked: true });
+		expect(dbo.prepare("SELECT yanked FROM market_release WHERE product=? AND version=?").get("demo-solution", "0.1.0").yanked).toBe(1);
+		// 清单即摘除（匿名面直读）
+		g.http = { query: {} };
+		await api.catalog.get();
+		expect((last?.data as { items: unknown[] }).items).toHaveLength(0);
+		// 详情保留 + yanked 标记
+		g.http = { query: { name: "demo-solution" } };
+		await api.catalog.detail.get();
+		const d = last?.data as { latest: string | null, versions: Array<{ yanked: boolean }> };
+		expect(d.latest).toBeNull();
+		expect(d.versions[0]!.yanked).toBe(true);
+	});
+
+	it("审计：by/reason 落 market_history（action=yank，operator=key_id）", async () => {
+		seedRelease("demo-solution", "0.1.0");
+		const api = createMarketApi(makeEnv({ registryId: REGISTRY }));
+		g.http = { user: { id: 1 }, body: { product: "demo-solution", version: "0.1.0", by: "rel-ops", reason: "严重缺陷" }, headers: yankSignature("demo-solution", "0.1.0") };
+		await api.yank.post();
+		const rows = dbo.prepare("SELECT * FROM market_history WHERE action='yank'").all();
+		expect(rows).toHaveLength(1);
+		expect(rows[0]).toMatchObject({ solution: "demo-solution", version: "0.1.0", status: "success", operator: "test.publisher" });
+		expect(String(rows[0].message)).toContain("rel-ops");
+		expect(String(rows[0].message)).toContain("严重缺陷");
+	});
+
+	it("数据表：未信任 key 403 / 非该行发布者 403 / 未知版本 404 / 重复幂等 200", async () => {
+		seedRelease("demo-solution", "0.1.0");
+		seedRelease("other-pkg", "0.1.0", { key_id: "other.publisher" });
+		const foreign = generateKeyPair();
+		const api = createMarketApi(makeEnv({ registryId: REGISTRY }));
+		// 未信任 key
+		g.http = { body: { product: "demo-solution", version: "0.1.0" }, headers: { ...yankSignature("demo-solution", "0.1.0", foreign, "foreign.publisher") } };
+		await api.yank.post();
+		expect(last?.status).toBe(403);
+		// 受信但非该行发布者（other.publisher 未入信任库，先入再测——否则落 403 信任面）
+		await createTrustStore(join(sharedRoot, ".solutions", "trusted-keys.yaml"), { audit: () => {} }).add("other.publisher", foreign.publicKeyHex);
+		g.http = { body: { product: "demo-solution", version: "0.1.0" }, headers: { ...yankSignature("demo-solution", "0.1.0", foreign, "other.publisher") } };
+		await api.yank.post();
+		expect(last?.status).toBe(403);
+		expect(String(last?.msg)).toContain("发布者");
+		// 未知版本 404
+		g.http = { body: { product: "demo-solution", version: "9.9.9" }, headers: yankSignature("demo-solution", "9.9.9") };
+		await api.yank.post();
+		expect(last?.status).toBe(404);
+		// 重复 yank 幂等 200
+		g.http = { body: { product: "demo-solution", version: "0.1.0" }, headers: yankSignature("demo-solution", "0.1.0") };
+		await api.yank.post();
+		expect(last?.status).toBe(200);
+		g.http = { body: { product: "demo-solution", version: "0.1.0" }, headers: yankSignature("demo-solution", "0.1.0") };
+		await api.yank.post();
+		expect(last?.status).toBe(200);
+		expect((last?.data as { idempotent: boolean }).idempotent).toBe(true);
+	});
+
+	it("伪造签名（canonical 不符）→ 401", async () => {
+		seedRelease("demo-solution", "0.1.0");
+		const api = createMarketApi(makeEnv({ registryId: REGISTRY }));
+		g.http = { body: { product: "demo-solution", version: "0.1.0" }, headers: yankSignature("demo-solution", "0.2.0") };
+		await api.yank.post();
+		expect(last?.status).toBe(401);
+	});
+
+	it("unyank 恢复同模型：restore → 200、行 yanked=0、清单恢复；遗留行（key_id NULL）403 指向 superadmin 通道", async () => {
+		seedRelease("demo-solution", "0.1.0", { yanked: 1 });
+		seedRelease("legacy-pkg", "0.1.0", { key_id: null });
+		const api = createMarketApi(makeEnv({ registryId: REGISTRY }));
+		g.http = { body: { product: "demo-solution", version: "0.1.0", restore: true }, headers: yankSignature("demo-solution", "0.1.0") };
+		await api.yank.post();
+		expect(last?.status).toBe(200);
+		expect((last?.data as { yanked: boolean }).yanked).toBe(false);
+		expect(dbo.prepare("SELECT yanked FROM market_release WHERE product=? AND version=?").get("demo-solution", "0.1.0").yanked).toBe(0);
+		expect(dbo.prepare("SELECT COUNT(*) c FROM market_history WHERE action='unyank'").all()[0].c).toBe(1);
+		g.http = { query: {} };
+		await api.catalog.get();
+		expect((last?.data as { items: Array<{ product: string }> }).items.map(i => i.product)).toContain("demo-solution");
+		// 遗留行（无发布者）→ 403，superadmin 管理通道兜底
+		g.http = { body: { product: "legacy-pkg", version: "0.1.0" }, headers: yankSignature("legacy-pkg", "0.1.0") };
+		await api.yank.post();
+		expect(last?.status).toBe(403);
+		expect(String(last?.msg)).toContain("superadmin");
+	});
+});
+
+describe("POST install（cdn：DB 目录解析属市场侧，安装器不拼 URL；v4 §四）", () => {
+	it("指定版本：目录行解析 → runInstall 推进至 done，task 文件全 stage 就位且零索引出站", async () => {
+		seedRelease("demo-solution", "0.1.0", { manifest: manifestFixture("0.1.0") });
+		seedRelease("demo-solution", "0.2.0", { published_at: 2000, manifest: manifestFixture("0.2.0") });
 		const api = createMarketApi(makeEnv());
 		g.http = { user: { id: 1 }, body: { name: "demo-solution", version: "0.1.0", source: "cdn" } };
 		await api.install.post();
 		expect(last?.status).toBe(200);
 		const taskId = (last?.data as { task_id?: unknown })?.task_id;
 		expect(typeof taskId).toBe("string");
-		// 索引解析：catalog.yaml + shards/1.yaml + 分发包，URL 由 base 归一化拼装
-		expect(fetchCalls[0]).toBe(`${CDN}catalog.yaml`);
-		expect(fetchCalls).toContain(`${CDN}shards/1.yaml`);
+		// 解析直读 DB：出站只有分发包字节（绝不拉 catalog.yaml/shards）
 		expect(fetchCalls).toContain(`${CDN}demo-solution-0.1.0.tgz`);
-		// REG-CS5④：读面不再发 cache-control: no-cache——新鲜度由服务端 max-age=60,
-		// stale-while-revalidate=60 + ETag/If-None-Match 条件请求承载（Q8）
-		expect(fetchInits.every(i => (i as { headers?: Record<string, string> } | undefined)?.headers?.["cache-control"] === undefined)).toBe(true);
+		expect(fetchCalls.some(u => u.endsWith(".yaml") || u.endsWith(".yaml.sig"))).toBe(false);
 		// 后台推进：runInstall 状态机逐 stage 落盘，终态 done + 全 stage 明细
 		const rec = await getTask(taskDir, taskId as string);
 		expect(rec?.status).toBe("done");
-		expect(rec?.stages.map(s => s.stage)).toEqual(STAGE_ORDER);
+		expect(rec?.stages.map(x => x.stage)).toEqual(STAGE_ORDER);
 		expect(rec?.version).toBe("0.1.0");
 		expect(rec?.appliedSeq).toBe(3);
 	});
 
-	it("version 缺省取 latest（同名只展示最高版本，PRD §5.3）", async () => {
+	it("version 缺省取 latest（未 yanked 的 semver max，API 计算）", async () => {
+		seedRelease("demo-solution", "0.1.0", { manifest: manifestFixture("0.1.0") });
+		seedRelease("demo-solution", "0.2.0", { published_at: 2000, manifest: manifestFixture("0.2.0") });
 		const api = createMarketApi(makeEnv());
 		g.http = { user: { id: 1 }, body: { name: "demo-solution", version: null, source: "cdn" } };
 		await api.install.post();
@@ -355,7 +611,7 @@ describe("POST install（cdn：Form B 索引解析属市场侧，安装器不拼
 		expect((await getTask(taskDir, taskId))?.version).toBe("0.2.0");
 	});
 
-	it("可读失败不崩：source 非法 400 / 未配置市场地址 503 / 索引无此方案 404", async () => {
+	it("可读失败不崩：source 非法 400 / 未配置市场地址 503 / 目录无此方案 404（含回填指引）/ 目录无此版本 404", async () => {
 		const api = createMarketApi(makeEnv());
 		g.http = { user: { id: 1 }, body: { name: "demo-solution", version: null, source: "git" } };
 		await api.install.post();
@@ -368,49 +624,20 @@ describe("POST install（cdn：Form B 索引解析属市场侧，安装器不拼
 		g.http = { user: { id: 1 }, body: { name: "nope", version: null, source: "cdn" } };
 		await api.install.post();
 		expect(last?.status).toBe(404);
+		expect(String(last?.msg)).toContain("回填");
+		seedRelease("demo-solution", "0.1.0", { manifest: manifestFixture("0.1.0") });
+		g.http = { user: { id: 1 }, body: { name: "demo-solution", version: "9.9.9", source: "cdn" } };
+		await api.install.post();
+		expect(last?.status).toBe(404);
+		expect(String(last?.msg)).toContain("9.9.9");
 	});
 });
 
-describe("REG-CS4 yank（安装侧精确版本拒装）", () => {
-	/** 带 yanked 标记的三级索引：0.2.0 被下线、0.1.0 正常；latest 已被源方改为 0.1.0 */
-	function yankedCdnFetch(): FetchFace {
-		const catalog = JSON.stringify({
-			seq: 1,
-			issued_at: ISSUED_AT,
-			expires_at: EXPIRES_AT,
-			shards: { 1: 1 },
-			solutions: [{ name: "demo-solution", shards: [1] }],
-		});
-		const shard = JSON.stringify({
-			solutions: [{
-				name: "demo-solution",
-				latest: "0.1.0",
-				versions: [
-					{ ...manifestFixture("0.2.0"), yanked: true, yanked_at: ISSUED_AT },
-					manifestFixture("0.1.0"),
-				],
-			}],
-		});
-		const catalogSig = JSON.stringify(signIndex("catalog", SEQ, catalog, TEST_KEY.privateKeyPem, "test.publisher"));
-		const shardSig = JSON.stringify(signIndex("shard", 1, shard, TEST_KEY.privateKeyPem, "test.publisher"));
-		return ((url: string) => {
-			const text = String(url).endsWith("catalog.yaml")
-				? catalog
-				: String(url).endsWith("shards/1.yaml") ? shard : null;
-			if (text !== null)
-				return { ok: true, status: 200, arrayBuffer: async () => new TextEncoder().encode(text).buffer as ArrayBuffer };
-			if (String(url).endsWith(".yaml.sig")) {
-				const sig = String(url).includes("shards") ? shardSig : catalogSig;
-				return { ok: true, status: 200, arrayBuffer: async () => new TextEncoder().encode(sig).buffer as ArrayBuffer };
-			}
-			if (String(url).endsWith(".tgz"))
-				return { ok: true, status: 200, arrayBuffer: async () => ARCHIVE.slice().buffer as ArrayBuffer };
-			return { ok: true, status: 200, arrayBuffer: async () => new ArrayBuffer(0) };
-		}) as FetchFace;
-	}
-
+describe("REG-CS4 yank（安装侧精确版本拒装，DB 目录口径）", () => {
 	it("精确安装被下线版本 → 409 拒装（含「下线」人话），不触碰 .tgz", async () => {
-		const api = createMarketApi(makeEnv({ fetch: yankedCdnFetch() }));
+		seedRelease("demo-solution", "0.2.0", { yanked: 1, published_at: 2000, manifest: manifestFixture("0.2.0") });
+		seedRelease("demo-solution", "0.1.0", { manifest: manifestFixture("0.1.0") });
+		const api = createMarketApi(makeEnv());
 		fetchCalls.length = 0;
 		g.http = { user: { id: 1 }, body: { name: "demo-solution", version: "0.2.0", source: "cdn" } };
 		await api.install.post();
@@ -419,14 +646,25 @@ describe("REG-CS4 yank（安装侧精确版本拒装）", () => {
 		expect(fetchCalls.some(u => u.endsWith(".tgz"))).toBe(false);
 	});
 
-	it("latest 路径不命中 yanked（源方已把 latest 改为未下线版本）→ 正常装 0.1.0", async () => {
-		const api = createMarketApi(makeEnv({ fetch: yankedCdnFetch() }));
+	it("latest 路径自动跳过 yanked（API 计算的 latest 只数未下线版本）→ 正常装 0.1.0", async () => {
+		seedRelease("demo-solution", "0.2.0", { yanked: 1, published_at: 2000, manifest: manifestFixture("0.2.0") });
+		seedRelease("demo-solution", "0.1.0", { manifest: manifestFixture("0.1.0") });
+		const api = createMarketApi(makeEnv());
 		g.http = { user: { id: 1 }, body: { name: "demo-solution", version: null, source: "cdn" } };
 		await api.install.post();
 		expect(last?.status).toBe(200);
 		const taskId = (last?.data as { task_id?: unknown })?.task_id as string;
 		expect((await getTask(taskDir, taskId))?.version).toBe("0.1.0");
 	});
+
+	it("全部版本被下线 → 409 人话（latest 不可得）", async () => {
+		seedRelease("demo-solution", "0.1.0", { yanked: 1, manifest: manifestFixture("0.1.0") });
+		const api = createMarketApi(makeEnv());
+		g.http = { user: { id: 1 }, body: { name: "demo-solution", version: null, source: "cdn" } };
+		await api.install.post();
+		expect(last?.status).toBe(409);
+		expect(String(last?.msg)).toContain("下线");
+	});
 });
 
 describe("相对基址（REG-CS6：/cdn 自供按配置的 canonical_origin 补全，绝不读请求 Host 头防 SSRF）", () => {
@@ -434,7 +672,8 @@ describe("相对基址（REG-CS6：/cdn 自供按配置的 canonical_origin 补
 	const FORGED = "169.254.169.254"; // 伪造 Host（云元数据 IP）——绝不可牵引出站
 	const relEnv = (overrides: Partial<MarketEnv> = {}) => makeEnv({ cdnBase: async () => REL, ...overrides });
 
-	it("自供回归：canonical_origin 配置 → 相对 /cdn URL 按配置 origin 补全绝对 URL（非 Host 头）", async () => {
+	it("自供回归：canonical_origin 配置 → 相对 /cdn 包字节 URL 按配置 origin 补全绝对 URL（非 Host 头）", async () => {
+		seedRelease("demo-solution", "0.1.0", { manifest: manifestFixture("0.1.0") });
 		const api = createMarketApi(relEnv({ canonicalOrigin: "http://127.0.0.1:5174" }));
 		fetchCalls.length = 0;
 		g.http = { user: { id: 1 }, body: { name: "demo-solution", version: "0.1.0", source: "cdn" }, headers: { host: FORGED } };
@@ -445,30 +684,8 @@ describe("相对基址（REG-CS6：/cdn 自供按配置的 canonical_origin 补
 		expect(fetchCalls.some(u => String(u).includes(FORGED))).toBe(false);
 	});
 
-	it("index：canonical_origin 配置 → 索引与分片拉取按配置 origin 补全（非 Host 头）", async () => {
-		const api = createMarketApi(relEnv({ canonicalOrigin: "http://127.0.0.1:5174" }));
-		fetchCalls.length = 0;
-		g.http = { user: { id: 1 }, headers: { host: FORGED } };
-		await api.index.get();
-		expect(last?.status).toBe(200);
-		expect(fetchCalls).toContain("http://127.0.0.1:5174/cdn/catalog.yaml");
-		expect(fetchCalls).toContain("http://127.0.0.1:5174/cdn/shards/1.yaml");
-		expect(fetchCalls.some(u => String(u).includes(FORGED))).toBe(false);
-	});
-
-	it("index：canonical_origin 缺失 + 相对基址 → 明确报错指向 vars.canonical_origin（不回落 Host）", async () => {
-		const api = createMarketApi(relEnv({ canonicalOrigin: undefined }));
-		fetchCalls.length = 0;
-		g.http = { user: { id: 1 }, headers: { host: FORGED } };
-		await api.index.get();
-		expect(last?.status).toBe(503);
-		expect(last?.msg).toContain("vars.canonical_origin");
-		// 未发起任何出站；伪造 Host 头绝不被采用
-		expect(fetchCalls.length).toBe(0);
-		expect(fetchCalls.some(u => String(u).includes(FORGED))).toBe(false);
-	});
-
 	it("install：canonical_origin 非法（ftp://）→ 明确报错指向 vars.canonical_origin", async () => {
+		seedRelease("demo-solution", "0.1.0", { manifest: manifestFixture("0.1.0") });
 		const api = createMarketApi(relEnv({ canonicalOrigin: "ftp://nope" }));
 		fetchCalls.length = 0;
 		g.http = { user: { id: 1 }, body: { name: "demo-solution", version: "0.1.0", source: "cdn" }, headers: { host: FORGED } };
@@ -480,6 +697,7 @@ describe("相对基址（REG-CS6：/cdn 自供按配置的 canonical_origin 补
 
 	it("install：canonical_origin 缺失（冒烟探针 URL 恒相对）→ 明确报错指向 vars.canonical_origin", async () => {
 		// 绝对基址（外部 CDN）也要 canonical origin——冒烟探针 URL 恒为站点相对路径
+		seedRelease("demo-solution", "0.1.0", { manifest: manifestFixture("0.1.0") });
 		const api = createMarketApi(makeEnv({ canonicalOrigin: undefined }));
 		fetchCalls.length = 0;
 		g.http = { user: { id: 1 }, body: { name: "demo-solution", version: "0.1.0", source: "cdn" }, headers: { host: FORGED } };
@@ -488,16 +706,6 @@ describe("相对基址（REG-CS6：/cdn 自供按配置的 canonical_origin 补
 		expect(last?.msg).toContain("vars.canonical_origin");
 		expect(fetchCalls.length).toBe(0);
 	});
-
-	it("绝对基址（外部 CDN）index + canonical_origin 缺失 → 无需 origin，索引照常", async () => {
-		const api = createMarketApi(makeEnv({ canonicalOrigin: undefined }));
-		fetchCalls.length = 0;
-		g.http = { user: { id: 1 }, headers: { host: FORGED } };
-		await api.index.get();
-		expect(last?.status).toBe(200);
-		expect(fetchCalls).toContain(`${CDN}catalog.yaml`);
-		expect(fetchCalls.some(u => String(u).includes(FORGED))).toBe(false);
-	});
 });
 
 describe("POST install/cancel（P3-12 端点接线，U5/P3-8 令牌的消费面）", () => {
@@ -523,6 +731,7 @@ describe("POST install/cancel（P3-12 端点接线，U5/P3-8 令牌的消费面
 				},
 			},
 		}));
+		seedRelease("demo-solution", "0.1.0", { manifest: manifestFixture("0.1.0") });
 		g.http = { user: { id: 1 }, body: { name: "demo-solution", version: "0.1.0", source: "cdn" } };
 		const running = api.install.post(); // 不 await——在途安装
 		await vi.waitFor(async () => {
@@ -819,15 +1028,10 @@ describe("POST enable（生命周期开关：P1-13 瘦客户端触发面，四
 	});
 });
 
-describe("GET index（CDN catalog + shards 拉取 + 本地 state 对比）", () => {
-	it("未配置市场地址 → 503 可读错误（「未配置市场地址」卡片区口径，PRD §5.3）", async () => {
-		const api = createMarketApi(makeEnv({ cdnBase: async () => null }));
-		await api.index.get();
-		expect(last?.status).toBe(503);
-		expect(String(last?.msg)).toContain("未配置市场地址");
-	});
+describe("GET index（v4 §四：DB 目录分页 + 本地 state 对比；索引机制退役）", () => {
+	const LATEST_DESCRIPTION = "演示方案：提供示例 CRUD 与菜单路由，覆盖安装、升级、回滚与历史留痕全链路。";
 
-	it("聚合对比：CDN 最新版本 + 本地已装/enabled + upgradable + available/changelog/publisher/publisher_key/license/summary/description/trust/key_id/operator（P2-11）；本地独有方案也列出；拉取不带 no-cache", async () => {
+	it("聚合对比：DB 最新版本 + 本地已装/enabled + upgradable + available/changelog/publisher/publisher_key/license/summary/description/trust_state/key_id/operator（P2-11）；本地独有方案也列出；零索引出站", async () => {
 		const env = makeEnv();
 		const state = await createStateStore(env.statePath);
 		await state.write({
@@ -836,45 +1040,83 @@ describe("GET index（CDN catalog + shards 拉取 + 本地 state 对比）", ()
 				"legacy": { version: "9.9.9", enabled: false, installedAt: 2 },
 			},
 		});
+		seedRelease("demo-solution", "0.1.0", { published_at: 1000, manifest: manifestFixture("0.1.0") });
+		seedRelease("demo-solution", "0.2.0", { published_at: 2000, manifest: { ...manifestFixture("0.2.0"), description: LATEST_DESCRIPTION } });
+		seedRelease("wiki", "1.3.0", { published_at: 1500 });
 		const api = createMarketApi(env);
 		await api.index.get();
 		expect(last?.status).toBe(200);
-		expect(fetchCalls[0]).toBe(`${CDN}catalog.yaml`);
-		// REG-CS5④：读面不再发 cache-control: no-cache（服务端缓存头 + 条件请求承载新鲜度）
-		expect(fetchInits.every(i => (i as { headers?: Record<string, string> } | undefined)?.headers?.["cache-control"] === undefined)).toBe(true);
-		expect(last?.data).toEqual([
+		// 直读 DB：零索引出站
+		expect(fetchCalls.some(u => u.endsWith(".yaml") || u.endsWith(".yaml.sig"))).toBe(false);
+		const d = last?.data as { list: unknown[], total: number, page: number, size: number };
+		expect(d.total).toBe(3);
+		expect(d.page).toBe(1);
+		expect(d.size).toBe(20);
+		expect(d.list).toEqual([
 			{ name: "demo-solution", latest: "0.2.0", installed: "0.1.0", enabled: true, upgradable: true, available: ["0.1.0", "0.2.0"], changelog: ["0.2.0 变更条目"], publisher: "oj-module", publisher_key: "test.publisher", license: "MIT", summary: "演示方案", description: LATEST_DESCRIPTION, trust_state: "trusted", key_id: "test.publisher", operator: null },
-			{ name: "wiki", latest: "1.3.0", installed: null, enabled: null, upgradable: false, available: ["1.3.0"], changelog: null, publisher: null, publisher_key: null, license: null, summary: null, description: null, trust_state: null, key_id: null, operator: null },
 			{ name: "legacy", latest: null, installed: "9.9.9", enabled: false, upgradable: false, available: [], changelog: null, publisher: null, publisher_key: null, license: null, summary: null, description: null, trust_state: null, key_id: null, operator: null },
+			{ name: "wiki", latest: "1.3.0", installed: null, enabled: null, upgradable: false, available: ["1.3.0"], changelog: null, publisher: null, publisher_key: "test.publisher", license: null, summary: null, description: null, trust_state: null, key_id: null, operator: null },
 		]);
 	});
 
+	it("翻页：?page=&size= 截窗口（产品名字典序）；末页 truncated 语义由 total/size 承载", async () => {
+		for (let i = 1; i <= 5; i++)
+			seedRelease(`pkg-${String(i).padStart(2, "0")}`, "0.1.0");
+		const api = createMarketApi(makeEnv());
+		g.http = { user: { id: 1 }, query: { page: "2", size: "2" } };
+		await api.index.get();
+		expect(last?.status).toBe(200);
+		const d = last?.data as { list: Array<{ name: string }>, total: number, page: number, size: number };
+		expect(d.total).toBe(5);
+		expect(d.page).toBe(2);
+		expect(d.size).toBe(2);
+		expect(d.list.map(r => r.name)).toEqual(["pkg-03", "pkg-04"]);
+	});
+
+	it("yanked 版本不计入 latest/available（卡片只见在架版本），全 yanked 产品 latest=null", async () => {
+		seedRelease("demo-solution", "0.2.0", { yanked: 1, published_at: 2000, manifest: manifestFixture("0.2.0") });
+		seedRelease("demo-solution", "0.1.0", { manifest: manifestFixture("0.1.0") });
+		seedRelease("gone", "1.0.0", { yanked: 1, manifest: { name: "gone", version: "1.0.0" } });
+		const api = createMarketApi(makeEnv());
+		g.http = { user: { id: 1 } };
+		await api.index.get();
+		const d = last?.data as { list: Array<{ name: string, latest: string | null, available: string[] }> };
+		const demo = d.list.find(r => r.name === "demo-solution")!;
+		expect(demo.latest).toBe("0.1.0");
+		expect(demo.available).toEqual(["0.1.0"]);
+		expect(d.list.find(r => r.name === "gone")?.latest).toBeNull();
+	});
+
 	it("operator 回落 history 行（P2-11：最近一次 install 动作的 operator；表缺失/无行 → null 不炸）", async () => {
 		dbo.prepare("insert into market_history (solution, version, action, status, operator, message, created_at) values (?, ?, ?, ?, ?, ?, ?)")
 			.run("demo-solution", "0.1.0", "install", "done", "alice", "", 1700000000);
+		seedRelease("demo-solution", "0.1.0");
 		const api = createMarketApi(makeEnv());
 		g.http = { user: { id: 1 } };
 		await api.index.get();
 		expect(last?.status).toBe(200);
-		const rows = last?.data as Array<{ name: string, operator: string | null }>;
-		expect(rows.find(r => r.name === "demo-solution")?.operator).toBe("alice");
-		expect(rows.find(r => r.name === "wiki")?.operator).toBeNull();
+		const d = last?.data as { list: Array<{ name: string, operator: string | null }> };
+		expect(d.list.find(r => r.name === "demo-solution")?.operator).toBe("alice");
 	});
 
-	it("shards/1.yaml 签名不可达 → 502 index_sig_missing 不降级（REG-CS1 fail-closed：可用性不再压过完整性）", async () => {
-		const fetchFn = (async (url: string) => {
-			if (String(url).endsWith("shards/1.yaml.sig"))
-				return { ok: false, status: 503, arrayBuffer: async () => new ArrayBuffer(0) };
-			return cdnFetch(url);
-		}) as FetchFace;
-		const api = createMarketApi(makeEnv({ fetch: fetchFn }));
+	it("operator 批量口径一致（minor M6：一页多产品，每产品取各自最近一次 install operator，互不穿串）", async () => {
+		const ins = dbo.prepare("insert into market_history (solution, version, action, status, operator, message, created_at) values (?, ?, ?, ?, ?, ?, ?)");
+		ins.run("demo-solution", "0.1.0", "install", "done", "alice", "", 1700000000);
+		ins.run("demo-solution", "0.1.1", "install", "done", "bob", "", 1700000001); // 更近一次 → demo 应取 bob
+		ins.run("wiki", "1.0.0", "install", "done", "carol", "", 1700000002);
+		seedRelease("demo-solution", "0.1.1");
+		seedRelease("wiki", "1.0.0");
+		const api = createMarketApi(makeEnv());
 		g.http = { user: { id: 1 } };
 		await api.index.get();
-		expect(last?.status).toBe(502);
-		expect(String(last?.msg)).toContain("index_sig_missing");
+		expect(last?.status).toBe(200);
+		const d = last?.data as { list: Array<{ name: string, operator: string | null }> };
+		expect(d.list.find(r => r.name === "demo-solution")?.operator).toBe("bob");
+		expect(d.list.find(r => r.name === "wiki")?.operator).toBe("carol");
 	});
 
 	it("P2-12 bootstrap key（G3 双轨第一轨）：信任库为空 + bootstrapKey 注入 → cdn 首装直达 done 不落 needs_trust", async () => {
+		seedRelease("demo-solution", "0.1.0", { manifest: manifestFixture("0.1.0") });
 		await fsp.rm(join(sharedRoot, ".solutions", "trusted-keys.yaml"), { force: true }); // beforeEach 已播种，删库文件模拟全新站点
 		const env = makeEnv({ bootstrapKey: { key_id: "test.publisher", public_key: TEST_KEY.publicKeyHex } });
 		const api = createMarketApi(env);
@@ -889,6 +1131,7 @@ describe("GET index（CDN catalog + shards 拉取 + 本地 state 对比）", ()
 	});
 
 	it("P2-12：无 bootstrapKey（内置未回填口径）+ 信任库为空 → needs_trust（双轨第二轨 TOFU 不失守）", async () => {
+		seedRelease("demo-solution", "0.1.0", { manifest: manifestFixture("0.1.0") });
 		await fsp.rm(join(sharedRoot, ".solutions", "trusted-keys.yaml"), { force: true });
 		const api = createMarketApi(makeEnv());
 		g.http = { user: { id: 1 }, body: { name: "demo-solution", version: "0.1.0", source: "cdn" } };
@@ -896,513 +1139,6 @@ describe("GET index（CDN catalog + shards 拉取 + 本地 state 对比）", ()
 		const taskId = (last?.data as { task_id?: unknown })?.task_id as string;
 		expect((await getTask(taskDir, taskId))?.status).toBe("needs_trust");
 	});
-
-	it("archive.file 邪例表（P2-11 索引投毒加固：file 逐字 <name>-<version>.tgz）→ 502 拒", async () => {
-		for (const file of ["../evil.tgz", "/etc/hosts.tgz", "other-0.1.0.tgz", "demo-solution-9.9.9.tgz"]) {
-			const catalog = JSON.stringify({ seq: 1, issued_at: ISSUED_AT, expires_at: EXPIRES_AT, shards: { 1: 1 }, solutions: [{ name: "demo-solution", shards: [1] }] });
-			const base = manifestFixture("0.1.0");
-			const shard = JSON.stringify({ solutions: [{ name: "demo-solution", latest: "0.1.0", versions: [{ ...base, archive: { ...base.archive, file } }] }] });
-			// 本用例聚焦 file 逐字校验：索引照常签名，否则会先被「缺签名」挡下而测不到 file 分支
-			const catalogSig = JSON.stringify(signIndex("catalog", 1, catalog, TEST_KEY.privateKeyPem, "test.publisher"));
-			const shardSig = JSON.stringify(signIndex("shard", 1, shard, TEST_KEY.privateKeyPem, "test.publisher"));
-			const fetchFn = (async (url: string) => {
-				const text = String(url).endsWith("catalog.yaml") ? catalog : String(url).endsWith("shards/1.yaml") ? shard : null;
-				if (text !== null)
-					return { ok: true, status: 200, arrayBuffer: async () => new TextEncoder().encode(text).buffer as ArrayBuffer };
-				if (String(url).endsWith(".yaml.sig")) {
-					const sig = String(url).includes("shards") ? shardSig : catalogSig;
-					return { ok: true, status: 200, arrayBuffer: async () => new TextEncoder().encode(sig).buffer as ArrayBuffer };
-				}
-				return { ok: true, status: 200, arrayBuffer: async () => ARCHIVE.slice().buffer as ArrayBuffer }; // .tgz 下载字节
-			}) as FetchFace;
-			const api = createMarketApi(makeEnv({ fetch: fetchFn }));
-			g.http = { user: { id: 1 }, body: { name: "demo-solution", version: "0.1.0", source: "cdn" } };
-			await api.install.post();
-			expect(last?.status, `file=${file}`).toBe(502);
-			expect(String(last?.msg), `file=${file}`).toContain("逐字");
-		}
-	});
-
-	it("索引不可达 → 502 可读错误不崩", async () => {
-		const api = createMarketApi(makeEnv({
-			fetch: (async () => ({ ok: false, status: 503, arrayBuffer: async () => new ArrayBuffer(0) })) as FetchFace,
-		}));
-		await api.index.get();
-		expect(last?.status).toBe(502);
-	});
-});
-
-describe("REG-CS1 索引签名强制（G4 fail-closed：署名相符采用 / 篡改拒 / 缺失即拒 / 不同代即拒）", () => {
-	/** 注入 .sig 的三级 CDN：非空 .sig 进验签分支；缺/空 .sig → 404（REG-CS1 起即拒，不再容忍） */
-	function signingCdnFetch(sigs: { catalog?: string, shard?: string }): FetchFace {
-		return ((url: string, init?: unknown) => {
-			fetchCalls.push(url);
-			fetchInits.push(init);
-			if (String(url).endsWith(".yaml.sig")) {
-				const kind = String(url).includes("shards") ? "shard" : "catalog";
-				const body = sigs[kind];
-				if (body !== undefined && body.trim() !== "")
-					return { ok: true, status: 200, arrayBuffer: async () => new TextEncoder().encode(body).buffer as ArrayBuffer };
-				return { ok: false, status: 404, arrayBuffer: async () => new ArrayBuffer(0) }; // 缺失/空 .sig
-			}
-			const text = String(url).endsWith("catalog.yaml")
-				? CATALOG
-				: String(url).endsWith("shards/1.yaml") ? SHARD_1 : null;
-			if (text !== null)
-				return { ok: true, status: 200, arrayBuffer: async () => new TextEncoder().encode(text).buffer as ArrayBuffer };
-			if (String(url).endsWith(".tgz"))
-				return { ok: true, status: 200, arrayBuffer: async () => ARCHIVE.slice().buffer as ArrayBuffer };
-			return { ok: true, status: 200, arrayBuffer: async () => new ArrayBuffer(0) };
-		}) as FetchFace;
-	}
-
-	/**
-	 * 代次可配的三级 CDN：catalog 正文 seq、catalog 签名 seq、catalog 对 shard 1 的钉值、
-	 * shard 1 签名 seq 分别可设——用来造「新总目录 + 旧分片」「改了正文没换签名」等中间态。
-	 * 分片正文恒为 SHARD_1（纯内容无 seq：代次只由签名与 catalog 钉值携带）。
-	 */
-	function generationCdnFetch(args: { catalogSeq: number, shardPin: number, shardSigSeq: number }): FetchFace {
-		const catalog = JSON.stringify({ seq: args.catalogSeq, issued_at: ISSUED_AT, expires_at: EXPIRES_AT, shards: { 1: args.shardPin }, solutions: [{ name: "demo-solution", shards: [1] }] });
-		const catalogSig = JSON.stringify(signIndex("catalog", args.catalogSeq, catalog, TEST_KEY.privateKeyPem, "test.publisher"));
-		const shardSig = JSON.stringify(signIndex("shard", args.shardSigSeq, SHARD_1, TEST_KEY.privateKeyPem, "test.publisher"));
-		return ((url: string) => {
-			fetchCalls.push(url);
-			if (String(url).endsWith(".yaml.sig")) {
-				const sig = String(url).includes("shards") ? shardSig : catalogSig;
-				return { ok: true, status: 200, arrayBuffer: async () => new TextEncoder().encode(sig).buffer as ArrayBuffer };
-			}
-			const text = String(url).endsWith("catalog.yaml") ? catalog : String(url).endsWith("shards/1.yaml") ? SHARD_1 : null;
-			if (text !== null)
-				return { ok: true, status: 200, arrayBuffer: async () => new TextEncoder().encode(text).buffer as ArrayBuffer };
-			if (String(url).endsWith(".tgz"))
-				return { ok: true, status: 200, arrayBuffer: async () => ARCHIVE.slice().buffer as ArrayBuffer };
-			return { ok: true, status: 200, arrayBuffer: async () => new ArrayBuffer(0) };
-		}) as FetchFace;
-	}
-
-	it("署名相符：catalog/shard 均带合法 .sig → index 照常 200（G4 采用，验签分支确已触发）", async () => {
-		const api = createMarketApi(makeEnv({ fetch: signingCdnFetch({ catalog: CATALOG_SIG, shard: SHARD_1_SIG }) }));
-		g.http = { user: { id: 1 } };
-		await api.index.get();
-		expect(last?.status).toBe(200);
-		expect((last?.data as unknown[]).length).toBeGreaterThan(0);
-		expect(fetchCalls.some(u => u.endsWith("catalog.yaml.sig"))).toBe(true);
-		expect(fetchCalls.some(u => u.endsWith("shards/1.yaml.sig"))).toBe(true);
-	});
-
-	it("篡改拒：catalog .sig 对别的字节签名（非索引真值）→ verifyIndexSig 不符 → 502 fail-closed（G4 不吞）", async () => {
-		const catalogSig = JSON.stringify(signIndex("catalog", SEQ, `${CATALOG}\n# tampered`, TEST_KEY.privateKeyPem, "test.publisher"));
-		const api = createMarketApi(makeEnv({ fetch: signingCdnFetch({ catalog: catalogSig, shard: SHARD_1_SIG }) }));
-		g.http = { user: { id: 1 } };
-		await api.index.get();
-		expect(last?.status).toBe(502);
-		expect(String(last?.msg)).toContain("index_sig_mismatch");
-	});
-
-	it("缺失即拒：CDN 不回 .sig → 502 index_sig_missing（不再「滚动发布期容忍」）＋两步补签提示", async () => {
-		const api = createMarketApi(makeEnv({ fetch: signingCdnFetch({}) }));
-		g.http = { user: { id: 1 } };
-		await api.index.get();
-		expect(last?.status).toBe(502);
-		expect(String(last?.msg)).toContain("index_sig_missing");
-		expect(String(last?.msg)).toContain("ojm market build-index");
-		expect(String(last?.msg)).toContain("ojm publish");
-	});
-
-	it("空 .sig 等同缺失 → 502 index_sig_missing（不能靠空体绕过）", async () => {
-		const api = createMarketApi(makeEnv({ fetch: signingCdnFetch({ catalog: "   ", shard: "   " }) }));
-		g.http = { user: { id: 1 } };
-		await api.index.get();
-		expect(last?.status).toBe(502);
-		expect(String(last?.msg)).toContain("index_sig_missing");
-	});
-
-	it("签名未覆盖代次（旧格式无 seq）→ 502 index_sig_mismatch（不默认通过）", async () => {
-		const legacy = JSON.stringify({ alg: "Ed25519", key_id: "test.publisher", public_key: TEST_KEY.publicKeyHex, value: "AAAA", canon: "v1" });
-		const api = createMarketApi(makeEnv({ fetch: signingCdnFetch({ catalog: legacy, shard: legacy }) }));
-		g.http = { user: { id: 1 } };
-		await api.index.get();
-		expect(last?.status).toBe(502);
-		expect(String(last?.msg)).toContain("index_sig_mismatch");
-	});
-
-	it("跨文件不同代（红队 F2）：总目录第 7 代钉 shard 7、分片签名第 6 代 → 502 index_generation_mismatch（提示源在重建，不是「被篡改」）", async () => {
-		const api = createMarketApi(makeEnv({ fetch: generationCdnFetch({ catalogSeq: 7, shardPin: 7, shardSigSeq: 6 }) }));
-		g.http = { user: { id: 1 } };
-		await api.index.get();
-		expect(last?.status).toBe(502);
-		expect(String(last?.msg)).toContain("index_generation_mismatch");
-		expect(String(last?.msg)).toContain("源正在重建索引，请稍后重试");
-		expect(String(last?.msg)).not.toContain("被篡改");
-	});
-
-	it("正文与签名不同代（改了正文没换签名）→ 502 index_generation_mismatch", async () => {
-		// catalog 正文 seq=7 但签名 seq=6：body-seq 与 sig-seq 对不上（半个写入）
-		const catalog = JSON.stringify({ seq: 7, issued_at: ISSUED_AT, expires_at: EXPIRES_AT, shards: { 1: 6 }, solutions: [{ name: "demo-solution", shards: [1] }] });
-		const catalogSig = JSON.stringify(signIndex("catalog", 6, catalog, TEST_KEY.privateKeyPem, "test.publisher"));
-		const shardSig = JSON.stringify(signIndex("shard", 6, SHARD_1, TEST_KEY.privateKeyPem, "test.publisher"));
-		const fetchFn = ((url: string) => {
-			fetchCalls.push(url);
-			if (String(url).endsWith(".yaml.sig")) {
-				const sig = String(url).includes("shards") ? shardSig : catalogSig;
-				return { ok: true, status: 200, arrayBuffer: async () => new TextEncoder().encode(sig).buffer as ArrayBuffer };
-			}
-			const text = String(url).endsWith("catalog.yaml") ? catalog : String(url).endsWith("shards/1.yaml") ? SHARD_1 : null;
-			if (text !== null)
-				return { ok: true, status: 200, arrayBuffer: async () => new TextEncoder().encode(text).buffer as ArrayBuffer };
-			return { ok: true, status: 200, arrayBuffer: async () => new ArrayBuffer(0) };
-		}) as FetchFace;
-		const api = createMarketApi(makeEnv({ fetch: fetchFn }));
-		g.http = { user: { id: 1 } };
-		await api.index.get();
-		expect(last?.status).toBe(502);
-		expect(String(last?.msg)).toContain("index_generation_mismatch");
-	});
-
-	it("同代放行：catalog 第 7 代、钉 shard 7、分片签名第 7 代 → 200（不误伤正常重建）", async () => {
-		const api = createMarketApi(makeEnv({ fetch: generationCdnFetch({ catalogSeq: 7, shardPin: 7, shardSigSeq: 7 }) }));
-		g.http = { user: { id: 1 } };
-		await api.index.get();
-		expect(last?.status).toBe(200);
-	});
-
-	it("byte 相同分片跨代复用：catalog 第 7 代钉 shard 3、分片签名第 3 代 → 200（钉值口径，非恒等 catalog 代次）", async () => {
-		const api = createMarketApi(makeEnv({ fetch: generationCdnFetch({ catalogSeq: 7, shardPin: 3, shardSigSeq: 3 }) }));
-		g.http = { user: { id: 1 } };
-		await api.index.get();
-		expect(last?.status).toBe(200);
-	});
-
-	it("安装侧同判定：缺签名 → install 502 index_sig_missing（离线 verify 与站点安装不能一个拒一个放）", async () => {
-		const api = createMarketApi(makeEnv({ fetch: signingCdnFetch({}) }));
-		g.http = { user: { id: 1 }, body: { name: "demo-solution", version: "0.1.0", source: "cdn" } };
-		await api.install.post();
-		expect(last?.status).toBe(502);
-		expect(String(last?.msg)).toContain("index_sig_missing");
-	});
-});
-
-describe("REG-CS2 索引新鲜度（过期即拒 / 代次回退即拒 / 状态损坏 fail-closed）", () => {
-	/** 代次与时效可配的三级 CDN：catalog 正文 seq 与时效封套可设；分片与 catalog 同代（钉值 = seq，签名 seq = 钉值） */
-	function timedCdnFetch(args: { seq: number, shardPin?: number, expiresAt?: number | null }): FetchFace {
-		const pin = args.shardPin ?? args.seq;
-		const catalog = JSON.stringify({
-			seq: args.seq,
-			// expiresAt = null → 索引不带时效封套（旧 ojm 产物）
-			...(args.expiresAt === null ? {} : { issued_at: ISSUED_AT, expires_at: args.expiresAt ?? EXPIRES_AT }),
-			shards: { 1: pin },
-			solutions: [{ name: "demo-solution", shards: [1] }],
-		});
-		const catalogSig = JSON.stringify(signIndex("catalog", args.seq, catalog, TEST_KEY.privateKeyPem, "test.publisher"));
-		const shardSig = JSON.stringify(signIndex("shard", pin, SHARD_1, TEST_KEY.privateKeyPem, "test.publisher"));
-		return ((url: string) => {
-			fetchCalls.push(url);
-			if (String(url).endsWith(".yaml.sig")) {
-				const sig = String(url).includes("shards") ? shardSig : catalogSig;
-				return { ok: true, status: 200, arrayBuffer: async () => new TextEncoder().encode(sig).buffer as ArrayBuffer };
-			}
-			const text = String(url).endsWith("catalog.yaml") ? catalog : String(url).endsWith("shards/1.yaml") ? SHARD_1 : null;
-			if (text !== null)
-				return { ok: true, status: 200, arrayBuffer: async () => new TextEncoder().encode(text).buffer as ArrayBuffer };
-			return { ok: true, status: 200, arrayBuffer: async () => ARCHIVE.slice().buffer as ArrayBuffer };
-		}) as FetchFace;
-	}
-
-	it("索引已过期（expires_at 已过）→ 502 index_expired", async () => {
-		const api = createMarketApi(makeEnv({ fetch: timedCdnFetch({ seq: 1, expiresAt: ISSUED_AT - 1 }) }));
-		g.http = { user: { id: 1 } };
-		await api.index.get();
-		expect(last?.status).toBe(502);
-		expect(String(last?.msg)).toContain("index_expired");
-	});
-
-	it("索引不带时效（旧 ojm 产物）→ 502 index_expired（不可判定即按过期处理）", async () => {
-		const api = createMarketApi(makeEnv({ fetch: timedCdnFetch({ seq: 1, expiresAt: null }) }));
-		g.http = { user: { id: 1 } };
-		await api.index.get();
-		expect(last?.status).toBe(502);
-		expect(String(last?.msg)).toContain("index_expired");
-	});
-
-	it("源返回更旧的代次（镜像落后 / 旧快照回放）→ 502 index_stale，且水位不被拉低", async () => {
-		// 先见第 7 代（水位落库），同源再返回第 3 代 → 回放被挡
-		const seen7 = createMarketApi(makeEnv({ fetch: timedCdnFetch({ seq: 7 }) }));
-		g.http = { user: { id: 1 } };
-		await seen7.index.get();
-		expect(last?.status).toBe(200);
-
-		const replayed = createMarketApi(makeEnv({ fetch: timedCdnFetch({ seq: 3 }) }));
-		g.http = { user: { id: 1 } };
-		await replayed.index.get();
-		expect(last?.status).toBe(502);
-		expect(String(last?.msg)).toContain("index_stale");
-		const row = dbo.prepare("SELECT max_seq FROM reg_source_seq WHERE source_url = ?").get(CDN.replace(/\/$/, "")) as { max_seq: number } | undefined;
-		expect(row?.max_seq).toBe(7);
-	});
-
-	it("同代重复拉取 → 放行（幂等，不误伤正常重复请求）", async () => {
-		const fetchFn = timedCdnFetch({ seq: 4 });
-		g.http = { user: { id: 1 } };
-		await createMarketApi(makeEnv({ fetch: fetchFn })).index.get();
-		expect(last?.status).toBe(200);
-		await createMarketApi(makeEnv({ fetch: fetchFn })).index.get();
-		expect(last?.status).toBe(200);
-	});
-
-	it("代次水位表缺失（未 migrate）→ 502 index_state_corrupt（fail-closed，不静默当「第一次见」）", async () => {
-		dbo.exec("DROP TABLE reg_source_seq");
-		const api = createMarketApi(makeEnv({ fetch: timedCdnFetch({ seq: 1 }) }));
-		g.http = { user: { id: 1 } };
-		await api.index.get();
-		expect(last?.status).toBe(502);
-		expect(String(last?.msg)).toContain("index_state_corrupt");
-	});
-});
-
-describe("REG-CS5 三级索引（装箱分片 + 条件请求 + DIP 读取源 + 读写两侧半写防线）", () => {
-	/**
-	 * 2500 版本跨 3 片的装箱索引（BDD①；装箱口径与写侧 sharding.ts 同参：单片 ≤1000 版本）：
-	 * 1 号片持 1.0.0..1.0.999、2 号片持 1.0.1000..1.0.1999、3 号片持 1.0.2000..1.0.2499，
-	 * 最高片持最新版。两端界版本给完整 Form B manifest（安装链消费面），
-	 * 其余条目只要 name/version/archive 三要素（latest 单调与 available 消费）。
-	 */
-	function bigIndexFetch(): FetchFace {
-		const cut = 1000;
-		const entryOf = (v: string, full: boolean): Record<string, unknown> => full
-			? manifestFixture(v)
-			: { name: "demo-solution", version: v, archive: { file: `demo-solution-${v}.tgz`, sha256: SHA256, size: ARCHIVE.byteLength } };
-		const range = (from: number, to: number, fullAt: number[]): Array<Record<string, unknown>> =>
-			Array.from({ length: to - from + 1 }, (_, i) => entryOf(`1.0.${from + i}`, fullAt.includes(from + i)));
-		const shard1 = JSON.stringify({ solutions: [{ name: "demo-solution", latest: `1.0.${cut - 1}`, versions: range(0, cut - 1, [0]) }] });
-		const shard2 = JSON.stringify({ solutions: [{ name: "demo-solution", latest: `1.0.${cut * 2 - 1}`, versions: range(cut, cut * 2 - 1, []) }] });
-		const shard3 = JSON.stringify({ solutions: [{ name: "demo-solution", latest: "1.0.2499", versions: range(cut * 2, 2499, [2499]) }] });
-		const catalog = JSON.stringify({ seq: 1, issued_at: ISSUED_AT, expires_at: EXPIRES_AT, shards: { 1: 1, 2: 1, 3: 1 }, solutions: [{ name: "demo-solution", shards: [1, 2, 3] }] });
-		const catalogSig = JSON.stringify(signIndex("catalog", 1, catalog, TEST_KEY.privateKeyPem, "test.publisher"));
-		const shardSigs = [shard1, shard2, shard3].map(body => JSON.stringify(signIndex("shard", 1, body, TEST_KEY.privateKeyPem, "test.publisher")));
-		return ((url: string) => {
-			fetchCalls.push(url);
-			if (String(url).endsWith(".yaml.sig")) {
-				const hit = /shards\/(\d+)\.yaml\.sig$/.exec(String(url));
-				const sig = hit === null ? catalogSig : shardSigs[Number(hit[1]) - 1]!;
-				return { ok: true, status: 200, arrayBuffer: async () => new TextEncoder().encode(sig).buffer as ArrayBuffer };
-			}
-			const text = String(url).endsWith("catalog.yaml")
-				? catalog
-				: String(url).endsWith("shards/1.yaml") ? shard1 : String(url).endsWith("shards/2.yaml") ? shard2 : String(url).endsWith("shards/3.yaml") ? shard3 : null;
-			if (text !== null)
-				return { ok: true, status: 200, arrayBuffer: async () => new TextEncoder().encode(text).buffer as ArrayBuffer };
-			if (String(url).endsWith(".tgz"))
-				return { ok: true, status: 200, arrayBuffer: async () => ARCHIVE.slice().buffer as ArrayBuffer };
-			return { ok: true, status: 200, arrayBuffer: async () => new ArrayBuffer(0) };
-		}) as FetchFace;
-	}
-
-	it("BDD① 装箱分片：2500 版本跨 3 片，latest 安装只拉最高片（≤ 1 catalog + 1 shard）→ done", async () => {
-		const api = createMarketApi(makeEnv({ fetch: bigIndexFetch(), reload: reloadStubFor("1.0.2499") }));
-		fetchCalls.length = 0;
-		g.http = { user: { id: 1 }, body: { name: "demo-solution", version: null, source: "cdn" } };
-		await api.install.post();
-		expect(last?.status).toBe(200);
-		expect(fetchCalls).toContain(`${CDN}catalog.yaml`);
-		expect(fetchCalls).toContain(`${CDN}shards/3.yaml`);
-		// 降序尝试：最高片即中，低片一次都不拉（索引请求 ≤ 1 catalog + 1 shard）
-		expect(fetchCalls.some(u => u.endsWith("shards/1.yaml"))).toBe(false);
-		expect(fetchCalls.some(u => u.endsWith("shards/2.yaml"))).toBe(false);
-		expect(fetchCalls).toContain(`${CDN}demo-solution-1.0.2499.tgz`);
-		const taskId = (last?.data as { task_id?: unknown })?.task_id as string;
-		const rec = await getTask(taskDir, taskId);
-		expect(rec?.version).toBe("1.0.2499");
-		expect(rec?.status).toBe("done");
-	});
-
-	it("BDD① 回落低片：显式指定最低版本 → 先试最高片未中，逐片回落到 1 号片命中 → done", async () => {
-		const api = createMarketApi(makeEnv({ fetch: bigIndexFetch(), reload: reloadStubFor("1.0.0") }));
-		fetchCalls.length = 0;
-		g.http = { user: { id: 1 }, body: { name: "demo-solution", version: "1.0.0", source: "cdn" } };
-		await api.install.post();
-		expect(last?.status).toBe(200);
-		expect(fetchCalls).toContain(`${CDN}shards/3.yaml`); // 仍先试最高片
-		expect(fetchCalls).toContain(`${CDN}shards/2.yaml`); // 未中 → 回落中片
-		expect(fetchCalls).toContain(`${CDN}shards/1.yaml`); // 仍未中 → 回落低片命中
-		expect(fetchCalls).toContain(`${CDN}demo-solution-1.0.0.tgz`);
-		const taskId = (last?.data as { task_id?: unknown })?.task_id as string;
-		const rec = await getTask(taskDir, taskId);
-		expect(rec?.version).toBe("1.0.0");
-		expect(rec?.status).toBe("done");
-	});
-
-	it("页面 available 全集（回滚候选要版本全集）：3 片 2500 版跨片全局升序，latest 取最高片", async () => {
-		const api = createMarketApi(makeEnv({ fetch: bigIndexFetch() }));
-		g.http = { user: { id: 1 } };
-		await api.index.get();
-		expect(last?.status).toBe(200);
-		const row = (last?.data as Array<{ name: string, latest: string | null, available: string[], changelog: string[] | null, publisher: string | null }>).find(r => r.name === "demo-solution");
-		expect(row?.latest).toBe("1.0.2499");
-		expect(row?.available).toHaveLength(2500);
-		expect(row?.available[0]).toBe("1.0.0");
-		expect(row?.available[999]).toBe("1.0.999"); // 1 号片末条
-		expect(row?.available[1000]).toBe("1.0.1000"); // 2 号片首条——跨片拼接处仍升序
-		expect(row?.available[1999]).toBe("1.0.1999"); // 2 号片末条
-		expect(row?.available[2000]).toBe("1.0.2000"); // 3 号片首条
-		expect(row?.available[2499]).toBe("1.0.2499");
-		expect([...row!.available].sort(compareVersions)).toEqual(row!.available);
-		// latest 的 changelog/publisher 直接取分片条目（无独立聚合清单）
-		expect(row?.changelog).toEqual(["1.0.2499 变更条目"]);
-		expect(row?.publisher).toBe("oj-module");
-	});
-
-	it("条件请求缓存（Q8 可用性通道）：第二轮索引拉取带 If-None-Match → 304 不重传正文，缓存副本照常出数", async () => {
-		// 独立基址：etagCache 是模块级（url → {etag, body}），与其余用例的 CDN 基址隔离
-		const ETAG_BASE = "https://etag.example.com/cdn/";
-		let notModified = 0;
-		const fetchFn = ((url: string, init?: unknown) => {
-			fetchCalls.push(url);
-			fetchInits.push(init);
-			const conditional = (init as { headers?: Record<string, string> } | undefined)?.headers?.["if-none-match"];
-			const text = String(url).endsWith("catalog.yaml")
-				? CATALOG
-				: String(url).endsWith("shards/1.yaml") ? SHARD_1 : null;
-			const sigText = String(url).endsWith("catalog.yaml.sig")
-				? CATALOG_SIG
-				: String(url).endsWith("shards/1.yaml.sig") ? SHARD_1_SIG : null;
-			// 带条件头的请求：服务端认 ETag → 304 空正文（ok=false 但语义是「未变」）
-			if (conditional !== undefined) {
-				notModified++;
-				return { ok: false, status: 304, arrayBuffer: async () => new ArrayBuffer(0) };
-			}
-			const body = text ?? sigText;
-			if (body !== null) {
-				return {
-					ok: true,
-					status: 200,
-					arrayBuffer: async () => new TextEncoder().encode(body).buffer as ArrayBuffer,
-					// 响应头读取面（site-facade 扩展）：读 ETag 供下一轮 If-None-Match
-					headers: { get: (name: string) => (name.toLowerCase() === "etag" ? `"idx-${body.length}"` : null) },
-				};
-			}
-			return { ok: true, status: 200, arrayBuffer: async () => new ArrayBuffer(0) };
-		}) as FetchFace;
-		const api = createMarketApi(makeEnv({ cdnBase: async () => ETAG_BASE, fetch: fetchFn }));
-		g.http = { user: { id: 1 } };
-		// 第一轮：无缓存 → 四项索引请求（catalog 正文+签名、shard 正文+签名）全量 200 + ETag
-		await api.index.get();
-		expect(last?.status).toBe(200);
-		const first = last?.data;
-		expect(notModified).toBe(0);
-		expect(fetchInits.every(i => (i as { headers?: Record<string, string> } | undefined)?.headers?.["if-none-match"] === undefined)).toBe(true);
-		// 读面不发 no-cache：新鲜度由服务端缓存头 + 条件请求承载
-		expect(fetchInits.every(i => (i as { headers?: Record<string, string> } | undefined)?.headers?.["cache-control"] === undefined)).toBe(true);
-		// 第二轮：四项全部带 If-None-Match → 全部 304 不重传，缓存副本出数与首轮逐字一致
-		await api.index.get();
-		expect(last?.status).toBe(200);
-		expect(last?.data).toEqual(first);
-		const second = fetchInits.slice(4);
-		expect(second).toHaveLength(4);
-		expect(second.every(i => (i as { headers?: Record<string, string> }).headers?.["if-none-match"] !== undefined)).toBe(true);
-		expect(notModified).toBe(4);
-	});
-
-	it("DIP 本地目录索引源：indexSource 注入 → 零 HTTP 直读 catalog+shards，校验语义与 HTTP 实现同构", async () => {
-		const dir = join(root, "cdn-mirror");
-		await fsp.mkdir(join(dir, "shards"), { recursive: true });
-		await fsp.writeFile(join(dir, "catalog.yaml"), CATALOG);
-		await fsp.writeFile(join(dir, "catalog.yaml.sig"), CATALOG_SIG);
-		await fsp.writeFile(join(dir, "shards", "1.yaml"), SHARD_1);
-		await fsp.writeFile(join(dir, "shards", "1.yaml.sig"), SHARD_1_SIG);
-		const api = createMarketApi(makeEnv({ indexSource: localIndexSource(dir) }));
-		fetchCalls.length = 0;
-		g.http = { user: { id: 1 } };
-		await api.index.get();
-		expect(last?.status).toBe(200);
-		expect(fetchCalls.length).toBe(0); // 本地直读，零出站
-		const row = (last?.data as Array<{ name: string, latest: string | null }>).find(r => r.name === "demo-solution");
-		expect(row?.latest).toBe("0.2.0");
-	});
-
-	it("本地目录索引源同构拒载：缺 .sig → 502 index_sig_missing（与 HTTP 实现一个判定）", async () => {
-		const dir = join(root, "cdn-mirror-nosig");
-		await fsp.mkdir(join(dir, "shards"), { recursive: true });
-		await fsp.writeFile(join(dir, "catalog.yaml"), CATALOG);
-		await fsp.writeFile(join(dir, "shards", "1.yaml"), SHARD_1);
-		await fsp.writeFile(join(dir, "shards", "1.yaml.sig"), SHARD_1_SIG); // 只缺 catalog 的签名
-		const api = createMarketApi(makeEnv({ indexSource: localIndexSource(dir) }));
-		g.http = { user: { id: 1 } };
-		await api.index.get();
-		expect(last?.status).toBe(502);
-		expect(String(last?.msg)).toContain("index_sig_missing");
-	});
-
-	it("读侧半写防线：catalog 钉了 shards/2.yaml 但 CDN 缺该文件 → 502 fail-closed（不是「没有该方案」）", async () => {
-		// 写侧原子落地序：分片正文 → 分片签名 → catalog 正文 → catalog 签名。
-		// 此夹具 = catalog 已提交、shard 2 尚未落盘的中间态（读侧视角的半写）
-		const catalog = JSON.stringify({ seq: 1, issued_at: ISSUED_AT, expires_at: EXPIRES_AT, shards: { 1: 1, 2: 1 }, solutions: [{ name: "demo-solution", shards: [1, 2] }] });
-		const catalogSig = JSON.stringify(signIndex("catalog", 1, catalog, TEST_KEY.privateKeyPem, "test.publisher"));
-		const fetchFn = ((url: string) => {
-			fetchCalls.push(url);
-			if (String(url).includes("shards/2"))
-				return { ok: false, status: 404, arrayBuffer: async () => new ArrayBuffer(0) }; // 分片还没落盘
-			if (String(url).endsWith("catalog.yaml.sig"))
-				return { ok: true, status: 200, arrayBuffer: async () => new TextEncoder().encode(catalogSig).buffer as ArrayBuffer };
-			if (String(url).endsWith("shards/1.yaml.sig"))
-				return { ok: true, status: 200, arrayBuffer: async () => new TextEncoder().encode(SHARD_1_SIG).buffer as ArrayBuffer };
-			const text = String(url).endsWith("catalog.yaml") ? catalog : String(url).endsWith("shards/1.yaml") ? SHARD_1 : null;
-			if (text !== null)
-				return { ok: true, status: 200, arrayBuffer: async () => new TextEncoder().encode(text).buffer as ArrayBuffer };
-			return { ok: true, status: 200, arrayBuffer: async () => new ArrayBuffer(0) };
-		}) as FetchFace;
-		const api = createMarketApi(makeEnv({ fetch: fetchFn }));
-		g.http = { user: { id: 1 } };
-		await api.index.get();
-		expect(last?.status).toBe(502);
-		expect(String(last?.msg)).toContain("shards/2.yaml");
-	});
-
-	it("索引结构破损邪例表（签名过的不可信输入，G4：结构破损与字节被改同类）→ 502 index_generation_mismatch", async () => {
-		const brokenCatalogs = [
-			// 分片钉值为空
-			JSON.stringify({ seq: 1, issued_at: ISSUED_AT, expires_at: EXPIRES_AT, shards: {}, solutions: [{ name: "demo-solution", shards: [1] }] }),
-			// 方案指向未钉分片（不静默跳过——那会伪装成「没有该方案」）
-			JSON.stringify({ seq: 1, issued_at: ISSUED_AT, expires_at: EXPIRES_AT, shards: { 1: 1 }, solutions: [{ name: "demo-solution", shards: [2] }] }),
-		];
-		for (const catalog of brokenCatalogs) {
-			const catalogSig = JSON.stringify(signIndex("catalog", 1, catalog, TEST_KEY.privateKeyPem, "test.publisher"));
-			const fetchFn = ((url: string) => {
-				if (String(url).endsWith("catalog.yaml.sig"))
-					return { ok: true, status: 200, arrayBuffer: async () => new TextEncoder().encode(catalogSig).buffer as ArrayBuffer };
-				if (String(url).endsWith("catalog.yaml"))
-					return { ok: true, status: 200, arrayBuffer: async () => new TextEncoder().encode(catalog).buffer as ArrayBuffer };
-				return { ok: false, status: 404, arrayBuffer: async () => new ArrayBuffer(0) };
-			}) as FetchFace;
-			const api = createMarketApi(makeEnv({ fetch: fetchFn }));
-			g.http = { user: { id: 1 } };
-			await api.index.get();
-			expect(last?.status).toBe(502);
-			expect(String(last?.msg)).toContain("index_generation_mismatch");
-		}
-	});
-
-	it("分片结构破损（签名过但缺 solutions 数组）→ 502 fail-closed（不猜、不降级）", async () => {
-		const shard = JSON.stringify({ packages: [] }); // 旧键名/畸形：分片解析面拒
-		const catalog = JSON.stringify({ seq: 1, issued_at: ISSUED_AT, expires_at: EXPIRES_AT, shards: { 1: 1 }, solutions: [{ name: "demo-solution", shards: [1] }] });
-		const catalogSig = JSON.stringify(signIndex("catalog", 1, catalog, TEST_KEY.privateKeyPem, "test.publisher"));
-		const shardSig = JSON.stringify(signIndex("shard", 1, shard, TEST_KEY.privateKeyPem, "test.publisher"));
-		const fetchFn = ((url: string) => {
-			if (String(url).endsWith(".yaml.sig")) {
-				const sig = String(url).includes("shards") ? shardSig : catalogSig;
-				return { ok: true, status: 200, arrayBuffer: async () => new TextEncoder().encode(sig).buffer as ArrayBuffer };
-			}
-			const text = String(url).endsWith("catalog.yaml") ? catalog : String(url).endsWith("shards/1.yaml") ? shard : null;
-			if (text !== null)
-				return { ok: true, status: 200, arrayBuffer: async () => new TextEncoder().encode(text).buffer as ArrayBuffer };
-			return { ok: false, status: 404, arrayBuffer: async () => new ArrayBuffer(0) };
-		}) as FetchFace;
-		const api = createMarketApi(makeEnv({ fetch: fetchFn }));
-		g.http = { user: { id: 1 } };
-		await api.index.get();
-		expect(last?.status).toBe(502);
-		expect(String(last?.msg)).toContain("shards/1.yaml");
-		expect(String(last?.msg)).toContain("solutions");
-	});
 });
 
 describe("hostVersions 缺省接线（B-11：C2-09 比对真源 = <dist>/versions.json，ojm 宿主构建产物）", () => {
@@ -1424,6 +1160,7 @@ describe("hostVersions 缺省接线（B-11：C2-09 比对真源 = <dist>/version
 	it("集成：env 未注入 hostVersions + <release 根>/versions.json 在盘 → install 全链 done（C2-09 比对走缺省真源）", async () => {
 		await fsp.mkdir(sharedRoot, { recursive: true });
 		await fsp.writeFile(join(sharedRoot, "versions.json"), JSON.stringify({ "@oj-module/runtime": "0.1.77" }));
+		seedRelease("demo-solution", "0.1.0", { manifest: manifestFixture("0.1.0") });
 		const env = makeEnv();
 		delete (env as Partial<MarketEnv>).hostVersions;
 		const api = createMarketApi(env);
@@ -1435,6 +1172,7 @@ describe("hostVersions 缺省接线（B-11：C2-09 比对真源 = <dist>/version
 	});
 
 	it("集成：versions.json 缺失且未注入 → C2-09 fail-closed，install 终态 failed@preflight", async () => {
+		seedRelease("demo-solution", "0.1.0", { manifest: manifestFixture("0.1.0") });
 		const env = makeEnv();
 		delete (env as Partial<MarketEnv>).hostVersions;
 		const api = createMarketApi(env);
@@ -1471,6 +1209,7 @@ describe("P1-16 接线：marketEnv 生产口径 / exec opts 转发 / operator
 				return base.run(argv, opts);
 			},
 		};
+		seedRelease("demo-solution", "0.1.0", { manifest: manifestFixture("0.1.0") });
 		const api = createMarketApi(makeEnv({ exec }));
 		g.http = { user: { id: 1 }, body: { name: "demo-solution", version: "0.1.0", source: "cdn" } };
 		await api.install.post();
@@ -1484,6 +1223,7 @@ describe("P1-16 接线：marketEnv 生产口径 / exec opts 转发 / operator
 
 	it("smoke 探针补全（REG-CS6）：按配置的 canonical_origin 补全相对探针，绝不读请求 Host 头", async () => {
 		// 配置 canonical origin；伪造 Host 头（云元数据 IP）在场，验证出站不被其牵引
+		seedRelease("demo-solution", "0.1.0", { manifest: manifestFixture("0.1.0") });
 		const api = createMarketApi(makeEnv({ canonicalOrigin: "http://site.example:9781" }));
 		g.http = { user: { id: 1 }, body: { name: "demo-solution", version: "0.1.0", source: "cdn" }, headers: { host: "169.254.169.254" } };
 		await api.install.post();
@@ -1500,6 +1240,7 @@ describe("P1-16 接线：marketEnv 生产口径 / exec opts 转发 / operator
 	});
 
 	it("ledgerHead 接真源：env.ledgerHeadOf 注入时 migrate 段按其值判禁降版（head 高于目标 seq → 拒切 failed@migrating）", async () => {
+		seedRelease("demo-solution", "0.1.0", { manifest: manifestFixture("0.1.0") });
 		const api = createMarketApi(makeEnv({ ledgerHeadOf: async () => 99 }));
 		g.http = { user: { id: 1 }, body: { name: "demo-solution", version: "0.1.0", source: "cdn" } };
 		await api.install.post();
@@ -1515,6 +1256,7 @@ describe("P1-16 接线：marketEnv 生产口径 / exec opts 转发 / operator
 		await writeLock(join(sharedRoot, "manifests.yaml"), { "demo-solution": "0.1.0", "other": "1.0.0" });
 		const state = await createStateStore(join(sharedRoot, ".solutions", "state.yaml"));
 		await state.write({ solutions: { "demo-solution": { version: "0.1.0", enabled: true, installedAt: 1 } } });
+		seedRelease("demo-solution", "0.1.0", { manifest: manifestFixture("0.1.0") });
 		const api = createMarketApi(makeEnv());
 		g.http = { user: { id: 1 }, body: { name: "demo-solution", version: "0.1.0", source: "cdn" } };
 		await api.install.post();
@@ -1563,146 +1305,49 @@ describe("P1-16 接线：marketEnv 生产口径 / exec opts 转发 / operator
 	});
 });
 
-// ── 发布历史（GET /market/releases）────────────────────────────────────────────
-// 数据源是签名索引本身：每次读先把索引里出现过的 product@version 幂等补进 market_release，
-// 再按发布时间倒序分页。索引读不到不阻断查询（返回已入库行 + syncError）。
+// ── 发布历史（GET /oj-market/releases；v4 §四：数据源 = market_release 上传写入行，索引 syncReleases 退役）──
 
 interface ReleasePageData {
-	list: Array<{ id: number, product: string, version: string, published_at: number, published_at_source: string, yanked: number }>
+	list: Array<{ id: number, product: string, version: string, key_id: string | null, sha256: string | null, size: number | null, published_at: number, published_at_source: string, yanked: number }>
 	total: number
 	page: number
 	size: number
-	syncError: string | null
-}
-
-/** HEAD 可读 Last-Modified 的 CDN 面（其余请求复用 cdnFetch 的完整夹具） */
-function headAwareFetch(lastModified: string): FetchFace {
-	return (async (url: string, init?: { method?: string }) => {
-		if (init?.method === "HEAD") {
-			return {
-				ok: true,
-				status: 200,
-				arrayBuffer: async () => new ArrayBuffer(0),
-				headers: { get: (name: string) => name.toLowerCase() === "last-modified" ? lastModified : null },
-			};
-		}
-		return cdnFetch(url);
-	}) as FetchFace;
-}
-
-/** 换一版分片正文（并按其字节重签，seq 与 catalog 同代），用于构造「索引说已下线」） */
-function shardWithYanked(): { body: string, sig: string } {
-	const body = JSON.stringify({
-		solutions: [{
-			name: "demo-solution",
-			latest: "0.2.0",
-			versions: [
-				{ ...manifestFixture("0.2.0"), description: LATEST_DESCRIPTION },
-				{ ...manifestFixture("0.1.0"), yanked: true },
-			],
-		}],
-	});
-	return { body, sig: JSON.stringify(signIndex("shard", SEQ, body, TEST_KEY.privateKeyPem, "test.publisher")) };
 }
 
-describe("GET /market/releases（发布历史：索引对账落库 + 分页）", () => {
-	it("首读把索引里全部 product@version 补进历史：产品/版本/发布时间齐全，无 HEAD 头时回落索引 issued_at（source=index）", async () => {
-		const api = createMarketApi(makeEnv());
-		g.http = { user: { id: 1 } };
-		await api.releases.get();
-		expect(last?.status).toBe(200);
-		const page = last?.data as ReleasePageData;
-		expect(page.syncError).toBeNull();
-		expect(page.total).toBe(3);
-		expect(page.list.map(r => `${r.product}@${r.version}`)).toEqual(["wiki@1.3.0", "demo-solution@0.1.0", "demo-solution@0.2.0"]);
-		expect(page.list.every(r => r.published_at === ISSUED_AT && r.published_at_source === "index")).toBe(true);
-		// 每行先试 HEAD（拿真正的落 CDN 时刻），失败才回落——不是完全不问源
-		expect(fetchInits.some(i => (i as { method?: string } | undefined)?.method === "HEAD")).toBe(true);
-	});
-
-	it("HEAD 拿得到 Last-Modified → 用文件时间并标 source=file（索引时间只作兜底，不冒充精确）", async () => {
-		const api = createMarketApi(makeEnv({ fetch: headAwareFetch("Wed, 01 Oct 2025 00:00:00 GMT") }));
-		g.http = { user: { id: 1 } };
-		await api.releases.get();
-		expect(last?.status).toBe(200);
-		const page = last?.data as ReleasePageData;
-		const expected = Math.floor(Date.parse("Wed, 01 Oct 2025 00:00:00 GMT") / 1000);
-		expect(page.list.every(r => r.published_at === expected && r.published_at_source === "file")).toBe(true);
-	});
-
-	it("幂等 + append-only：二次读不重复插入，已入库的 published_at 不被索引时间改写", async () => {
-		// 预置一行「上次记录的历史」：发布时间是事实，哪怕与本次索引的时间不同也不该被刷新
-		dbo.prepare("INSERT INTO market_release (product, version, published_at, published_at_source, yanked, first_seen_at) VALUES (?, ?, ?, ?, ?, ?)")
-			.run("demo-solution", "0.2.0", 1_600_000_000, "file", 0, 1_600_000_000);
-		const api = createMarketApi(makeEnv());
-		g.http = { user: { id: 1 } };
-		await api.releases.get();
-		await api.releases.get();
-		expect(last?.status).toBe(200);
-		const page = last?.data as ReleasePageData;
-		expect(page.total).toBe(3);
-		const rows = dbo.prepare("SELECT product, version, published_at FROM market_release ORDER BY product, version").all() as Array<{ product: string, version: string, published_at: number }>;
-		expect(rows).toHaveLength(3);
-		expect(rows.find(r => r.product === "demo-solution" && r.version === "0.2.0")?.published_at).toBe(1_600_000_000);
-	});
-
-	it("yanked 跟随索引（0→1 与 1→0 双向）：下线是当前状态，不是历史事实的改写", async () => {
-		// 1→0：库里记着已下线，索引又回到在架
-		dbo.prepare("INSERT INTO market_release (product, version, published_at, published_at_source, yanked, first_seen_at) VALUES (?, ?, ?, ?, ?, ?)")
-			.run("demo-solution", "0.2.0", ISSUED_AT, "index", 1, ISSUED_AT);
+describe("GET /oj-market/releases（发布历史：DB 目录行直读 + 分页）", () => {
+	it("直读上传写入行：published_at 倒序分页，字段齐全（含 yanked 当前态与 published_at_source）", async () => {
+		seedRelease("demo-solution", "0.1.0", { published_at: 1000, manifest: manifestFixture("0.1.0") });
+		seedRelease("demo-solution", "0.2.0", { published_at: 3000, yanked: 1, manifest: manifestFixture("0.2.0") });
+		seedRelease("wiki", "1.0.0", { published_at: 2000, key_id: null });
 		const api = createMarketApi(makeEnv());
 		g.http = { user: { id: 1 } };
 		await api.releases.get();
 		expect(last?.status).toBe(200);
-		expect((dbo.prepare("SELECT yanked FROM market_release WHERE product = ? AND version = ?").get("demo-solution", "0.2.0") as { yanked: number }).yanked).toBe(0);
-
-		// 0→1：换一版已签名的分片，其中 0.1.0 标了 yanked
-		const yanked = shardWithYanked();
-		const fetchFn = (async (url: string) => {
-			if (String(url).endsWith("shards/1.yaml.sig"))
-				return { ok: true, status: 200, arrayBuffer: async () => new TextEncoder().encode(yanked.sig).buffer as ArrayBuffer };
-			if (String(url).endsWith("shards/1.yaml"))
-				return { ok: true, status: 200, arrayBuffer: async () => new TextEncoder().encode(yanked.body).buffer as ArrayBuffer };
-			return cdnFetch(url);
-		}) as FetchFace;
-		const api2 = createMarketApi(makeEnv({ fetch: fetchFn }));
-		g.http = { user: { id: 1 } };
-		await api2.releases.get();
-		expect(last?.status).toBe(200);
-		expect((dbo.prepare("SELECT yanked FROM market_release WHERE product = ? AND version = ?").get("demo-solution", "0.1.0") as { yanked: number }).yanked).toBe(1);
-	});
-
-	it("索引读不到（验签失败）→ 200 + 已入库历史 + syncError 人话（观测面不阻断页面）", async () => {
-		const api = createMarketApi(makeEnv());
-		g.http = { user: { id: 1 } };
-		await api.releases.get();
-		expect((last?.data as ReleasePageData).total).toBe(3);
-
-		const brokenFetch = (async (url: string) => {
-			if (String(url).endsWith("shards/1.yaml.sig"))
-				return { ok: false, status: 503, arrayBuffer: async () => new ArrayBuffer(0) };
-			return cdnFetch(url);
-		}) as FetchFace;
-		const api2 = createMarketApi(makeEnv({ fetch: brokenFetch }));
-		g.http = { user: { id: 1 } };
-		await api2.releases.get();
-		expect(last?.status).toBe(200);
-		const page = last?.data as ReleasePageData;
-		expect(page.total).toBe(3);
-		expect(page.syncError).toContain("index_sig_missing");
+		const d = last?.data as ReleasePageData;
+		expect(d.total).toBe(3);
+		expect(d.page).toBe(1);
+		expect(d.size).toBe(20);
+		expect(d.list.map(r => `${r.product}@${r.version}`)).toEqual(["demo-solution@0.2.0", "wiki@1.0.0", "demo-solution@0.1.0"]);
+		expect(d.list[0]).toMatchObject({ product: "demo-solution", version: "0.2.0", key_id: "test.publisher", sha256: SHA256, size: ARCHIVE.byteLength, published_at: 3000, published_at_source: "upload", yanked: 1 });
+		// 遗留行（key_id NULL）照常可读——历史是观测面
+		expect(d.list[1]?.key_id).toBeNull();
+		// 直读 DB：零索引出站、零 syncError 字段（退役不留双尸）
+		expect(fetchCalls.length).toBe(0);
+		expect("syncError" in d).toBe(false);
 	});
 
 	it("门与分页：匿名 401；page/limit 透传并按发布时间倒序取页", async () => {
+		for (let i = 1; i <= 5; i++)
+			seedRelease(`pkg-${String(i).padStart(2, "0")}`, "0.1.0", { published_at: 1000 + i });
 		const api = createMarketApi(makeEnv());
 		g.http = {};
 		await api.releases.get();
 		expect(last?.status).toBe(401);
-
-		g.http = { user: { id: 1 }, query: { page: "2", limit: "1" } };
+		g.http = { user: { id: 1 }, query: { page: "2", limit: "2" } };
 		await api.releases.get();
-		expect(last?.status).toBe(200);
-		const page = last?.data as ReleasePageData;
-		expect(page).toMatchObject({ page: 2, size: 1, total: 3 });
-		expect(page.list).toHaveLength(1);
+		const d = last?.data as ReleasePageData;
+		expect(d.page).toBe(2);
+		expect(d.size).toBe(2);
+		expect(d.list.map(r => r.product)).toEqual(["pkg-03", "pkg-02"]);
 	});
 });