dsh-m 0.4.3 → 0.5.1

package/lib/core/host-api.js

@@ -8,10 +8,11 @@
  */
 import { BOOT_ID, publicInstallStatus } from './dsh-cli.js';
 import { resolveDshVersion } from './dsh-version.js';
-import { listInstalledWithMeta, listMarket, installFromRegistry, uninstallPlugin, upgradePlugin, } from './market.js';
-import { runProfileTransaction, TransactionError, makeNpmWarmPackument } from './profile-transaction.js';
+import { listInstalledWithMeta, listMarket, installFromRegistry, selfUpgrade, uninstallPlugin, upgradePlugin, InstallGuardError, } from './market.js';
+import { runProfileTransaction, TransactionError } from './profile-transaction.js';
 import { readInstalledPluginReadme } from './installed.js';
 import { isNewerVersion, npmLatest } from './versions.js';
+import { getCommunitySummary } from './community.js';
 import { RegistryConfigError } from './registry-controller.js';
 import { checkRegistryEntries } from './registry-check.js';
 import { CATEGORIES } from './registry.js';
@@ -32,6 +33,8 @@ class ApiProtocolError extends Error {
     }
 }
 const BODY_MAX_BYTES = 1 << 20;
+/** 社区开放分类安全 slug（计划 Task 6；与适配层 COMMUNITY_CATEGORY_RE 同语义） */
+const COMMUNITY_SLUG_RE = /^[a-z0-9-]{1,32}$/;
 function readBody(req, maxBytes = BODY_MAX_BYTES) {
     return new Promise((resolve, reject) => {
         const chunks = [];
@@ -100,7 +103,7 @@ function strArg(body, key) {
 function boolArg(v) {
     return v === true || v === 'true' || v === 1 || v === '1';
 }
-function snapshotPayload(snap) {
+function snapshotPayload(snap, config) {
     return {
         registryUrl: snap.configuredAddress,
         configuredAddress: snap.configuredAddress,
@@ -110,6 +113,9 @@ function snapshotPayload(snap) {
         configErrors: snap.configErrors,
         warnings: snap.warnings,
         registryState: snap.loaded,
+        // 社区两键（M1 Task 6）：设置页回显数据源
+        communityCatalog: config?.communityCatalog,
+        communityCatalogPin: config?.communityCatalogPin,
     };
 }
 function sendJson(res, status, value) {
@@ -137,6 +143,22 @@ function errorStatus(err) {
         const status = err.code === 'protected' ? 403 : err.code === 'not-installed' ? 404 : 409;
         return { status, payload: { ok: false, error: err.message, code: err.code } };
     }
+    if (err instanceof InstallGuardError) {
+        // 装后守卫拦截（M2 Task 3）：结构化投影含 needsRestart/restartSafe/kind——GUI 一键重启只读 restartSafe
+        return {
+            status: 409,
+            payload: {
+                ok: false,
+                error: err.message,
+                kind: err.kind,
+                violations: err.violations,
+                compensation: err.compensation,
+                needsRestart: err.needsRestart,
+                restartSafe: err.restartSafe,
+                ...(err.repairBasis ? { repairBasis: err.repairBasis } : {}),
+            },
+        };
+    }
     if (err instanceof IncompatibleError) {
         // 结构化 issue：GUI 据此弹「仍要安装」确认（forceIncompatible 重试）
         return { status: 409, payload: { ok: false, error: err.message, issue: err.issue } };
@@ -169,8 +191,10 @@ export function createApiDispatcher(ctx) {
         installFromRegistry: ctx.deps?.installFromRegistry ?? installFromRegistry,
         uninstallPlugin: ctx.deps?.uninstallPlugin ?? uninstallPlugin,
         upgradePlugin: ctx.deps?.upgradePlugin ?? upgradePlugin,
+        selfUpgrade: ctx.deps?.selfUpgrade ?? selfUpgrade,
         checkRegistryEntries: ctx.deps?.checkRegistryEntries ?? checkRegistryEntries,
         npmLatest: ctx.deps?.npmLatest ?? npmLatest,
+        getCommunitySummary: ctx.deps?.getCommunitySummary ?? getCommunitySummary,
         runTransaction: ctx.deps?.runTransaction ?? runProfileTransaction,
         scheduleRestart: ctx.deps?.scheduleRestart ?? scheduleRestart,
         resolveDshVersion: ctx.deps?.resolveDshVersion ?? resolveDshVersion,
@@ -211,17 +235,11 @@ export function createApiDispatcher(ctx) {
                     break;
                 }
                 case 'self-upgrade': {
-                    const latest = await d.npmLatest(ctx.pkg.name, cfg().timeoutMs ?? 20_000);
-                    // 缺 integrity 一律 fail closed，不进事务
-                    if (!latest.integrity) {
-                        throw new Error(`npm metadata 缺少 dist integrity：${ctx.pkg.name}@${latest.version}，拒绝升级`);
-                    }
-                    const result = await d.runTransaction({ kind: 'install-npm', pkg: ctx.pkg.name, version: latest.version, integrity: latest.integrity, signal }, { warmPackument: makeNpmWarmPackument(cfg().timeoutMs ?? 20_000) });
-                    if (!result.ok)
-                        throw new TransactionError(result);
+                    // M2 Task 3：self-upgrade 收编 market.selfUpgrade（统一 mutation session + 守卫，直调事务旁路封死）
+                    const result = await d.selfUpgrade(ctx.pkg.name, ctx.pkg.version, cfg(), { signal });
                     payload = {
-                        pkg: ctx.pkg.name,
-                        version: latest.version,
+                        pkg: result.pkg,
+                        version: result.version,
                         buildApprovals: result.buildApprovals ?? [],
                         fallbackAllBuilds: result.fallbackAllBuilds === true,
                         needsRestart: true,
@@ -231,7 +249,14 @@ export function createApiDispatcher(ctx) {
                 case 'registry': {
                     await ctx.controller.ensureReady();
                     const snap = await ctx.controller.snapshot({ force: boolArg(body.force), signal });
-                    payload = { plugins: snap.loaded.registry.plugins, registryState: snap.loaded };
+                    // 社区 summary：primaryEntries 直接取本次 snapshot（displaced 与本次响应同代，不重拉主清单）；
+                    // 3s 是本 waiter 的等待上限——到点返回 unavailable summary，主清单响应按契约照常返回
+                    const community = await d.getCommunitySummary(snap.loaded.registry.plugins, cfg(), {
+                        force: boolArg(body.force),
+                        signal,
+                        deadlineAt: Date.now() + 3_000,
+                    });
+                    payload = { plugins: snap.loaded.registry.plugins, registryState: snap.loaded, community };
                     break;
                 }
                 case 'market': {
@@ -241,14 +266,23 @@ export function createApiDispatcher(ctx) {
                     const limit = Number.isFinite(limitRaw) && limitRaw > 0 ? Math.min(50, Math.max(1, Math.floor(limitRaw))) : 50;
                     const offsetRaw = Number(body.offset);
                     const offset = Number.isFinite(offsetRaw) && offsetRaw > 0 ? Math.floor(offsetRaw) : 0;
-                    const category = typeof body.category === 'string' && CATEGORIES.includes(body.category)
-                        ? body.category
-                        : null;
+                    // category：精选 5 + 社区开放 slug（非法 slug → 400，不静默吞）
+                    const categoryRaw = typeof body.category === 'string' ? body.category.trim() : '';
+                    let category = null;
+                    if (categoryRaw !== '') {
+                        if (CATEGORIES.includes(categoryRaw) || COMMUNITY_SLUG_RE.test(categoryRaw)) {
+                            category = categoryRaw;
+                        }
+                        else {
+                            throw new ApiProtocolError(400, `非法分类: ${categoryRaw}（需精选分类或 [a-z0-9-]{1,32} slug）`);
+                        }
+                    }
                     const result = await d.listMarket(cfg(), {
                         query: strArg(body, 'query'),
                         category,
                         offset,
                         limit,
+                        primaryOnly: boolArg(body.primaryOnly),
                         force: boolArg(body.force),
                         withLatest: true,
                         namespace: 'host',
@@ -325,14 +359,14 @@ export function createApiDispatcher(ctx) {
                 }
                 case 'registry-config': {
                     const snap = await ctx.controller.snapshot();
-                    payload = { ...snapshotPayload(snap) };
+                    payload = { applied: false, ...snapshotPayload(snap, cfg()) };
                     break;
                 }
                 case 'registry-config-apply': {
                     if (typeof body.registryUrl !== 'string')
                         throw new ApiProtocolError(400, '缺少 registryUrl');
                     const snap = await ctx.controller.apply(body.registryUrl, { signal });
-                    payload = { applied: true, ...snapshotPayload(snap) };
+                    payload = { applied: true, ...snapshotPayload(snap, cfg()) };
                     break;
                 }
                 case 'registry-default-download': {

package/lib/core/httpx.js

@@ -71,6 +71,7 @@ export async function fetchLimited(url, opts = {}) {
     let current = assertSafeUrl(url);
     const seen = new Set([current.toString()]);
     for (let hop = 0;; hop++) {
+        opts.onRequest?.(current.toString());
         const res = await fetch(current, {
             redirect: 'manual',
             signal,
@@ -149,3 +150,40 @@ export async function isReachable(url, timeoutMs = 8000, signal) {
         return false;
     }
 }
+/**
+ * 拉取失败三要素统一（M2 Task 4）：发生了什么（label + 根因）/ 代价（尝试次数 + 耗时）/ 现在怎么办。
+ * 根因分类：AbortError=「请求被取消」；TimeoutError/超时=「请求超时」；message 形如 `HTTP <n>`
+ * 才映射状态码；其余保留安全化根因（不吞协议错误细节）。
+ */
+export function describeFetchFailure({ label, err, attempts, elapsedMs }) {
+    let reason;
+    if (err instanceof Error && err.name === 'AbortError') {
+        reason = '请求被取消';
+    }
+    else if (err instanceof Error && (err.name === 'TimeoutError' || /timed?\s?out|超时/i.test(err.message))) {
+        reason = '请求超时';
+    }
+    else if (err instanceof HttpError || (err instanceof Error && /^HTTP \d{3}/.test(err.message))) {
+        reason = err instanceof Error ? err.message : String(err);
+    }
+    else if (err instanceof Error) {
+        reason = err.message;
+    }
+    else {
+        reason = String(err);
+    }
+    const cost = [];
+    if (typeof attempts === 'number' && attempts > 0)
+        cost.push(`${attempts} 次尝试`);
+    if (typeof elapsedMs === 'number' && elapsedMs > 0)
+        cost.push(`耗时 ${(elapsedMs / 1000).toFixed(1)}s`);
+    const costText = cost.length > 0 ? `（${cost.join('，')}）` : '';
+    return `${label} 失败：${reason}${costText}；可稍后重试或检查网络后重试`;
+}
+/** 字节下载（社区目录正文用）：非 2xx 抛 HttpError；bytes = 完整响应体。 */
+export async function fetchBytesLimited(url, opts = {}) {
+    const res = await fetchLimited(url, opts);
+    if (!res.ok)
+        throw new HttpError(res.status, `HTTP ${res.status}`, res.headers);
+    return { bytes: res.buffer, finalUrl: res.finalUrl };
+}

package/lib/core/install-guard.js

@@ -0,0 +1,308 @@
+/**
+ * 装后假成功守卫三项检查（M2 Task 2 / DESIGN.md §3「装后假成功守卫」）：
+ * ① NO_DSH_MARKER——包内无 dsh 插件标记（package.json 的 dsh.bundle/dsh.client 键或包内 cordis.patch.yml）；
+ * ② ENTRY_UNRESOLVABLE——入口不可解析（exports/main 指向文件在包目录内不存在，或 realpath 越界）；
+ * ③ LOADER_ID_CONFLICT——新增包的 loader insert id 与现存 id 冲突（两个同 id entry 会让下次开机
+ *    整个 profile 起不来）。
+ *
+ * 读错误分类（io taxonomy）：ENOENT 归属语义结论（marker 不存在/入口不存在/无 patch = 空集）；
+ * EACCES/EIO/坏 JSON/坏 YAML → `unavailable`（结论不可定，由调用方 fail-open + guardWarning）。
+ * 自撞排除：现存 id 集合排除 `addedPkgs ∪ priorPkgs` 的贡献——升级/重复安装不与自己的旧 id 冲突。
+ * bundles 数组不产生 loader id（bundle 是包级启停选择，不是 cordis insert 合成条目），不参与冲突集合。
+ */
+import { readFile, realpath, stat } from 'node:fs/promises';
+import { isAbsolute, join, relative } from 'node:path';
+import { readBundlePatchRows } from './patch-yaml.js';
+/** 包名 → node_modules 内目录（@scope/name → node_modules/@scope/name）。 */
+function pkgDirOf(pkgsDir, name) {
+    return join(pkgsDir, ...name.split('/'));
+}
+function contained(dir, p) {
+    const rel = relative(dir, p);
+    return rel !== '' && !rel.startsWith('..') && !isAbsolute(rel);
+}
+/** 读 JSON：ENOENT → null（语义结论用）；坏 JSON/其他 → 'unreadable'（unavailable 用）。 */
+async function readJsonOrNull(file) {
+    let text;
+    try {
+        text = await readFile(file, 'utf8');
+    }
+    catch (err) {
+        const code = err.code;
+        if (code === 'ENOENT')
+            return null;
+        return 'unreadable';
+    }
+    try {
+        const parsed = JSON.parse(text);
+        if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed))
+            return 'unreadable';
+        return parsed;
+    }
+    catch {
+        return 'unreadable';
+    }
+}
+/** cordis.patch.yml 存在即 marker（内容可读性由 LOADER_ID_CONFLICT 检查另行分类）。 */
+async function hasPatchFile(pkgDir) {
+    try {
+        await stat(join(pkgDir, 'cordis.patch.yml'));
+        return true;
+    }
+    catch (err) {
+        const code = err.code;
+        if (code === 'ENOENT')
+            return null;
+        return 'unreadable';
+    }
+}
+/**
+ * 入口目标解析（保守口径）：
+ * - exports 为 string（root sugar）→ 可检查；
+ * - exports 为 object：仅 `.` 键（值为 string 或 {default}）或仅 `default` 键 → 可检查；
+ *   含其他条件键（./client 等多键导出）→ conservative（调用方 unavailable——多入口解析歧义）；
+ * - 无 exports → main；main 也缺失 → null（NO ENTRY 声明）。
+ */
+function entryTargetOf(pkgJson) {
+    const exportsField = pkgJson.exports;
+    if (typeof exportsField === 'string') {
+        return { target: exportsField };
+    }
+    if (exportsField && typeof exportsField === 'object' && !Array.isArray(exportsField)) {
+        const keys = Object.keys(exportsField);
+        if (keys.includes('.') && keys.length === 1) {
+            const dot = exportsField['.'];
+            if (typeof dot === 'string')
+                return { target: dot };
+            if (dot && typeof dot === 'object' && !Array.isArray(dot)) {
+                const dotKeys = Object.keys(dot);
+                if (dotKeys.length === 1 && dotKeys[0] === 'default' && typeof dot.default === 'string') {
+                    return { target: dot.default };
+                }
+            }
+            return { conservative: true };
+        }
+        if (keys.length === 1 && keys[0] === 'default' && typeof exportsField.default === 'string') {
+            return { target: exportsField.default };
+        }
+        return { conservative: true };
+    }
+    const main = pkgJson.main;
+    if (typeof main === 'string' && main.trim() !== '')
+        return { target: main };
+    return { none: true };
+}
+async function checkEntry(pkg, pkgDir, pkgJson) {
+    const resolved = entryTargetOf(pkgJson);
+    if ('none' in resolved) {
+        return { pkg, code: 'ENTRY_UNRESOLVABLE', detail: 'package.json 缺少 exports/main 入口声明' };
+    }
+    if ('conservative' in resolved) {
+        return { pkg, reason: `入口解析保守跳过（exports 含多条件键，不猜入口）: ${pkgDir}` };
+    }
+    const entryAbs = join(pkgDir, resolved.target);
+    let st;
+    try {
+        st = await stat(entryAbs);
+    }
+    catch (err) {
+        const code = err.code;
+        if (code === 'ENOENT') {
+            return { pkg, code: 'ENTRY_UNRESOLVABLE', detail: `入口文件不存在: ${resolved.target}` };
+        }
+        return { pkg: null, reason: `入口 stat 失败（${code ?? '未知错误'}）: ${entryAbs}` };
+    }
+    if (!st.isFile()) {
+        return { pkg, code: 'ENTRY_UNRESOLVABLE', detail: `入口不是常规文件: ${resolved.target}` };
+    }
+    // realpath containment：入口真实路径必须仍在包目录内（防 symlink 逃逸）
+    try {
+        const [entryReal, pkgReal] = await Promise.all([realpath(entryAbs), realpath(pkgDir)]);
+        if (!contained(pkgReal, entryReal)) {
+            return { pkg, code: 'ENTRY_UNRESOLVABLE', detail: '入口 realpath 越出包目录（symlink 逃逸）' };
+        }
+    }
+    catch (err) {
+        return { pkg: null, reason: `入口 realpath 失败（${err.code ?? '未知错误'}）: ${entryAbs}` };
+    }
+    return null;
+}
+/** 读取一个包的 insert ids：无 patch 文件 → []；坏 YAML → 'unreadable'。 */
+async function insertIdsOf(pkgDir) {
+    let text;
+    try {
+        text = await readFile(join(pkgDir, 'cordis.patch.yml'), 'utf8');
+    }
+    catch (err) {
+        const code = err.code;
+        if (code === 'ENOENT')
+            return [];
+        return 'unreadable';
+    }
+    const rows = readBundlePatchRows(text);
+    if (!rows.readable)
+        return 'unreadable';
+    return rows.inserts.map((row) => row.id);
+}
+/** 读 profile 根 cordis.patch.yml 的 insert ids：ENOENT = 空集；坏 YAML/EACCES = 'unreadable'。 */
+async function rootInsertIds(profileDir) {
+    let text;
+    try {
+        text = await readFile(join(profileDir, 'cordis.patch.yml'), 'utf8');
+    }
+    catch (err) {
+        const code = err.code;
+        if (code === 'ENOENT')
+            return [];
+        return 'unreadable';
+    }
+    const rows = readBundlePatchRows(text);
+    if (!rows.readable)
+        return 'unreadable';
+    return rows.inserts.map((row) => row.id);
+}
+/** dependencies 完整快照缺省实现：`<profileDir>/package.json` 的 dependencies。文件缺失 = 空集（合法新 profile）；其他读取/解析失败显式抛出 → 全局 unavailable。 */
+async function defaultReadDeps(profileDir) {
+    let text;
+    try {
+        text = await readFile(join(profileDir, 'package.json'), 'utf8');
+    }
+    catch (err) {
+        if (err.code === 'ENOENT')
+            return {};
+        throw err;
+    }
+    let raw;
+    try {
+        raw = JSON.parse(text);
+    }
+    catch {
+        throw new Error('profile package.json 不是合法 JSON');
+    }
+    const deps = raw?.dependencies;
+    if (!deps || typeof deps !== 'object' || Array.isArray(deps))
+        return {};
+    const out = {};
+    for (const [name, spec] of Object.entries(deps)) {
+        if (typeof spec === 'string')
+            out[name] = spec;
+    }
+    return out;
+}
+/**
+ * 三项检查入口：对 `addedPkgs` 逐包验证 marker / 入口 / loader id 冲突。
+ * `ok` = 无 violation 且无 unavailable；`unavailable` 非空 → 结论不可定（调用方 fail-open + guardWarning）。
+ */
+export async function verifyInstalledAdditions(input, deps) {
+    const violations = [];
+    const unavailable = [];
+    const pkgsDir = input.pkgsDir ?? join(input.profileDir, 'node_modules');
+    // 依赖全量快照：显式失败 → 全局 unavailable（结论不可定）
+    let installedDeps;
+    try {
+        installedDeps = deps?.readDeps ? await deps.readDeps(input.profileDir) : await defaultReadDeps(input.profileDir);
+    }
+    catch (err) {
+        return {
+            ok: false,
+            violations: [],
+            unavailable: [{ pkg: null, reason: `profile dependencies 全量读取失败：${err instanceof Error ? err.message : err}` }],
+        };
+    }
+    const added = input.addedPkgs.filter((p) => typeof p === 'string' && p.trim() !== '');
+    const excluded = new Set([...added, ...(input.priorPkgs ?? [])]);
+    // ---------- ① NO_DSH_MARKER + ② ENTRY_UNRESOLVABLE（逐新增包） ----------
+    for (const pkg of added) {
+        const pkgDir = pkgDirOf(pkgsDir, pkg);
+        const pkgJson = await readJsonOrNull(join(pkgDir, 'package.json'));
+        if (pkgJson === 'unreadable') {
+            unavailable.push({ pkg, reason: `package.json 不可读（EACCES/坏 JSON）: ${pkgDir}` });
+            continue;
+        }
+        if (pkgJson === null) {
+            violations.push({ pkg, code: 'NO_DSH_MARKER', detail: `包目录或 package.json 不存在: ${pkgDir}` });
+            continue;
+        }
+        const hasKey = 'dsh' in pkgJson && pkgJson.dsh !== null && typeof pkgJson.dsh === 'object';
+        let marker = hasKey;
+        if (!marker) {
+            const patch = await hasPatchFile(pkgDir);
+            if (patch === 'unreadable') {
+                unavailable.push({ pkg, reason: `cordis.patch.yml stat 失败（EACCES 等）: ${pkgDir}` });
+                continue;
+            }
+            marker = patch === true;
+        }
+        if (!marker) {
+            violations.push({ pkg, code: 'NO_DSH_MARKER', detail: '包内无 dsh.bundle/dsh.client 标记且无 cordis.patch.yml' });
+            continue;
+        }
+        // ② 入口（marker 成立才检查；marker 缺失时安装本来就要补偿）
+        const entry = await checkEntry(pkg, pkgDir, pkgJson);
+        if (entry) {
+            if ('code' in entry)
+                violations.push(entry);
+            else
+                unavailable.push(entry);
+        }
+    }
+    // ---------- ③ LOADER_ID_CONFLICT（新增包 pairwise + 现存集合，排除自撞） ----------
+    const rootIds = await rootInsertIds(input.profileDir);
+    if (rootIds === 'unreadable') {
+        unavailable.push({ pkg: null, reason: 'profile 根 cordis.patch.yml 不可读（EACCES/坏 YAML），loader id 集合不可定' });
+    }
+    // 已装依赖包的 insert ids（排除 addedPkgs ∪ priorPkgs 的贡献——自撞排除）
+    const existing = rootIds === 'unreadable' ? [] : rootIds.map((id) => ({ id, source: 'profile 根 patch' }));
+    for (const depName of Object.keys(installedDeps)) {
+        if (excluded.has(depName))
+            continue;
+        const ids = await insertIdsOf(pkgDirOf(pkgsDir, depName));
+        if (ids === 'unreadable') {
+            unavailable.push({ pkg: null, reason: `已装包 cordis.patch.yml 不可读，loader id 集合不可定: ${depName}` });
+            continue;
+        }
+        for (const id of ids)
+            existing.push({ id, source: depName });
+    }
+    // 新增包的 ids（自撞排除在 pairwise 内同样适用：A 的新 id 不会与 A 自己比较）
+    const addedIds = new Map();
+    for (const pkg of added) {
+        addedIds.set(pkg, await insertIdsOf(pkgDirOf(pkgsDir, pkg)));
+    }
+    for (const [pkg, ids] of addedIds) {
+        if (ids === 'unreadable') {
+            unavailable.push({ pkg, reason: `新增包 cordis.patch.yml 不可读（EACCES/坏 YAML）: ${pkg}` });
+            continue;
+        }
+        if (ids.length === 0)
+            continue;
+        // pairwise：与其他新增包
+        const conflicting = [];
+        for (const [other, otherIds] of addedIds) {
+            if (other === pkg || otherIds === 'unreadable')
+                continue;
+            for (const id of ids) {
+                if (otherIds.includes(id))
+                    conflicting.push({ id, source: other });
+            }
+        }
+        // 与现存集合（根 patch + 其他已装包）
+        for (const id of ids) {
+            for (const ex of existing) {
+                if (ex.id === id)
+                    conflicting.push({ id, source: ex.source });
+            }
+        }
+        if (conflicting.length > 0) {
+            const seen = new Set();
+            const unique = conflicting.filter((c) => (seen.has(`${c.id}|${c.source}`) ? false : (seen.add(`${c.id}|${c.source}`), true)));
+            violations.push({
+                pkg,
+                code: 'LOADER_ID_CONFLICT',
+                detail: `insert id 与现存 loader 条目冲突：${unique.map((c) => `${c.id}（来自 ${c.source}）`).join('、')}`,
+                conflictingIds: unique,
+            });
+        }
+    }
+    return { ok: violations.length === 0 && unavailable.length === 0, violations, unavailable };
+}