dsh-vibe-math 2.7.1 → 2.7.2

package/vibe-math-v5/math-computation.js

@@ -72,11 +72,12 @@ export const MATH_PERSONA_TOOL_LINE = '- math_computation {op: probe|run|receipt
 // P2a: the archive -> edit -> re-run workflow. Injected into every preset's rule block (and appended
 // to both persona blocks) so an agent cannot miss that (a) the script is archived, (b) it may edit
 // it, and (c) re-running is what produces evidence for the edited code.
-export const MATH_ARCHIVE_WORKFLOW_LINE = '- 归档→编辑→重跑：mode:\'code\' 的脚本原件在回执的 scriptPath（Computation/<id>/script.<ext>），你可以用普通文件工具打开并编辑它；'
+export const MATH_ARCHIVE_WORKFLOW_LINE = '- 归档→编辑→重跑：mode:\'code\' 的脚本原件在回执的 scriptPath（Computation/<id>/script.<ext>，**相对项目根**）；'
+  + '**成员的文件工具是按会话 cwd 解析的**，所以打开它要用**绝对路径** `receipt.scriptAbs`，或把 `receipt.cwd` 与 `receipt.scriptPath` 拼起来（回执两个字段都有）；'
   + '编辑后用 mode:\'file\' 指向它重跑，会写出一份**新回执/新 attempt**（含新的 scriptHash）。**旧回执对修改后的代码无效**——'
   + '报告里必须引用与当前代码哈希一致的那份回执；工具会在 scriptChanged / scriptChangedDuringRun 为 true 时显式告警。'
 
-export const MATH_ARCHIVE_WORKFLOW_LINE_EN = '- Archive -> edit -> re-run: for mode:\'code\' the script original is at the receipt\'s scriptPath (Computation/<id>/script.<ext>) and you may open/edit it with your normal file tools; after editing, re-run it with mode:\'file\' to write a NEW receipt/attempt with a NEW scriptHash. **An old receipt is NOT evidence for edited code** - cite the receipt whose scriptHash matches the current code; the tool warns explicitly via scriptChanged / scriptChangedDuringRun.'
+export const MATH_ARCHIVE_WORKFLOW_LINE_EN = '- Archive -> edit -> re-run: for mode:\'code\' the script original is at the receipt\'s scriptPath (Computation/<id>/script.<ext>, **relative to the project root**); member file tools resolve paths against the SESSION CWD, so open it via the ABSOLUTE `receipt.scriptAbs`, or join `receipt.cwd` with `receipt.scriptPath` (both are in the receipt); after editing, re-run it with mode:\'file\' to write a NEW receipt/attempt with a NEW scriptHash. **An old receipt is NOT evidence for edited code** - cite the receipt whose scriptHash matches the current code; the tool warns explicitly via scriptChanged / scriptChangedDuringRun.'
 
 // Round-6 (A): honesty about SUBSTITUTIONS. An alternative that weakens exactness or conclusion
 // strength must be declared, and the conclusion must never read as if the requested (exact) result
@@ -288,14 +289,39 @@ function fail(code, engine, message, extra) {
   // round-7 (live-session fix): the probe diagnostic must survive into the response, otherwise
   // "存在但不可用" is opaque (a real session showed exactly that).
   if (extra && extra.probe) out.probe = jsonSafeDiag(extra.probe)
+  // round-9 (F7): the version-constraint policy travels with failures too (no silent drop).
+  if (extra && extra.versionPolicy) out.versionPolicy = extra.versionPolicy
+  if (extra && extra.constraintsNotEnforced) out.constraintsNotEnforced = extra.constraintsNotEnforced
   return out
 }
 
-function userInstallNext(engine) {
+// round-9 (real-engine finding): the suggested install command may not be runnable on this machine
+// (e.g. `winget` is absent), and handing a user a command that cannot run is misleading. So the
+// command is emitted ONLY when its package manager is actually resolvable; otherwise we return the
+// official vendor/download pointer plus an explicit note. Async because resolution goes through the host.
+async function userInstallNext(H, engine) {
   const d = MATH_ENGINES[engine] || {}
   const per = d.userInstall || {}
   const platform = process && process.platform === 'win32' ? 'windows' : (process && process.platform === 'darwin' ? 'macos' : 'linux')
-  return next('user-install', { engine: engine, perOs: per, command: per[platform] || '', platform: platform })
+  const raw = per[platform] || ''
+  const mgr = (function () { const m = /^\s*(winget|brew|apt-get|apt|choco|scoop|dnf|pacman|zypper)\b/.exec(String(raw)); return m ? m[1] : null })()
+  let available = true
+  if (mgr) {
+    try { available = !!(await H.resolveExecutable(mgr)) } catch (e) { available = false }
+  }
+  return next('user-install', {
+    engine: engine,
+    perOs: per,
+    command: (mgr && !available) ? '' : raw,
+    suggestedCommand: raw,
+    platform: platform,
+    packageManager: mgr,
+    packageManagerAvailable: mgr ? available : null,
+    vendorUrl: d.vendor || null,
+    note: (mgr && !available)
+      ? ('本机没有检测到包管理器 ' + mgr + '：建议命令无法运行，请按上面的官方地址手动安装（或先自行安装一个包管理器）。')
+      : null,
+  })
 }
 
 // ── host adaptation ─────────────────────────────────────────────────────────────────────────────
@@ -353,6 +379,42 @@ export async function probeMathEngines(host, opts) {
   return result
 }
 
+// round-9 (real-engine finding): an engine can be INSTALLED yet invisible, because discovery only
+// looked at the server process's PATH (R 4.6.1 landed in C:\Program Files\R\R-4.6.1\bin and was NOT
+// added to PATH). Add the known per-OS INSTALL locations, globbed by version, still AFTER PATH and
+// after the bundled runtime; existence is always proven by LISTING, never assumed.
+async function knownInstallCandidates(H, engineName) {
+  if (typeof H.listDirAbs !== 'function') return []
+  const cands = mathEngineCandidates(engineName)
+  if (!cands) return []
+  const env = (typeof process !== 'undefined' && process.env) || {}
+  const win = !!(typeof process !== 'undefined' && process.platform === 'win32')
+  const exts = win ? ['', '.exe', '.cmd'] : ['']
+  const out = []
+  const listDirs = async (dir) => { try { return ((await H.listDirAbs(dir)) || []).filter((e) => e && e.type === 'directory').map((e) => e.name) } catch (e) { return [] } }
+  const listFiles = async (dir) => { try { return ((await H.listDirAbs(dir)) || []).filter((e) => e && e.type === 'file').map((e) => e.name) } catch (e) { return [] } }
+  const match = async (dir) => {
+    const files = await listFiles(dir)
+    for (const c of cands) for (const x of exts) if (files.indexOf(c + x) !== -1) out.push(dir + '/' + c + x)
+  }
+  if (engineName === 'r') {
+    const roots = win
+      ? [String(env.ProgramFiles || 'C:/Program Files') + '/R', String(env['ProgramFiles(x86)'] || 'C:/Program Files (x86)') + '/R', env.LOCALAPPDATA ? String(env.LOCALAPPDATA) + '/Programs/R' : null]
+      : ['/usr/lib/R', '/Library/Frameworks/R.framework/Resources', '/usr/local/lib/R', '/opt/R', '/usr/lib64/R']
+    for (const root of roots) {
+      if (!root) continue
+      for (const d of await listDirs(root)) await match(root + '/' + d + '/bin') // windows versioned dirs
+      await match(root + '/bin')                                                 // unix / framework layout
+    }
+  } else if (engineName === 'python' && win) {
+    const local = env.LOCALAPPDATA ? String(env.LOCALAPPDATA) + '/Programs/Python' : null
+    for (const d of (local ? await listDirs(local) : [])) await match(local + '/' + d)
+    const pf = String(env.ProgramFiles || 'C:/Program Files')
+    for (const d of await listDirs(pf)) if (/^Python[0-9]/i.test(d)) await match(pf + '/' + d)
+  }
+  return Array.from(new Set(out))
+}
+
 async function resolveCandidate(H, d) {
   const cands = mathEngineCandidates(d.name)
   if (!cands) return null
@@ -362,11 +424,15 @@ async function resolveCandidate(H, d) {
       if (typeof p === 'string' && p) return p
     } catch (e) { /* not this one */ }
   }
-  // round-7 (fix 2): DSH ships its own runtimes; PATH always wins, so this is the LAST resort. The
+  // round-7 (fix 2): DSH ships its own runtimes; PATH always wins, so this is a LAST resort. The
   // tree name is globbed (never hard-coded) and executable names come from the descriptor candidates.
   for (const p of await dshRuntimeCandidates(H, d.name)) {
     if (typeof p === 'string' && p) return p
   }
+  // round-9: then the known per-OS install locations (an engine installed without touching PATH).
+  for (const p of await knownInstallCandidates(H, d.name)) {
+    if (typeof p === 'string' && p) return p
+  }
   return null
 }
 
@@ -513,7 +579,7 @@ async function resolveEngine(H, requested, params, args) {
       if (params.mathMode !== 'typed+shell') return fail('MATH_REFUSED', name, 'cli 被策略禁用（mathMode=' + params.mathMode + '）', { next: next('reason', { reason: 'policy' }) })
       let exe = null
       try { exe = await H.resolveExecutable(args.cli.command) } catch (e) { exe = null }
-      if (!exe) return fail('MATH_ENGINE_NOT_FOUND', name, 'cli 命令无法解析：' + args.cli.command, { next: userInstallNext('cli') })
+      if (!exe) return fail('MATH_ENGINE_NOT_FOUND', name, 'cli 命令无法解析：' + args.cli.command, { next: await userInstallNext(H, 'cli') })
       // round-7 (finding 5): report the REAL version when the command's family is recognisable (the
       // descriptor for that family carries the version probe); unknown commands stay 'unknown'.
       let cliVersion = 'unknown'
@@ -548,7 +614,7 @@ async function resolveEngine(H, requested, params, args) {
     return { ok: true, name: name, desc: d, exe: hit, version: v.version }
   }
   const first = requested === 'auto' ? (params.mathEngines[0] || 'python') : requested
-  return fail('MATH_ENGINE_NOT_FOUND', first, '本机没有可用的计算引擎（试过：' + names.join(', ') + '）', { next: userInstallNext(first) })
+  return fail('MATH_ENGINE_NOT_FOUND', first, '本机没有可用的计算引擎（试过：' + names.join(', ') + '）', { next: await userInstallNext(H, first) })
 }
 
 // ── package probe ───────────────────────────────────────────────────────────────────────────────
@@ -810,7 +876,7 @@ async function opProbe(H, args, params) {
   }
   if (!probe.available && !(chosen && chosen.ok)) {
     const first = requested || params.mathEngines[0] || 'python'
-    const out = fail('MATH_ENGINE_NOT_FOUND', first, '本机没有可用的计算引擎（请求：' + first + '）', { next: userInstallNext(first), engines: [], available: false, packages: packages })
+    const out = fail('MATH_ENGINE_NOT_FOUND', first, '本机没有可用的计算引擎（请求：' + first + '）', { next: await userInstallNext(H, first), engines: [], available: false, packages: packages })
     out.op = 'probe'
     return out
   }
@@ -821,10 +887,22 @@ async function opProbe(H, args, params) {
     engines.push({ name: chosen.name, path: chosen.exe, version: chosen.version, license: (MATH_ENGINES[chosen.name] || {}).license })
   }
   const engineInfo = (chosen && chosen.ok) ? { name: chosen.name, path: chosen.exe, version: chosen.version } : null
+  // round-9 (F3): the availability line must never be silently partial - name the CONFIGURED engines
+  // that were not found (and why), instead of just listing the ones that happened to resolve.
+  const foundNames = engines.map((e) => e.name)
+  // Per-engine absence explanation. The key is `why` (NOT the reserved machine-readable vocabulary
+  // key), so the parity guard's exhaustive `next.reason` set stays exactly the refusal vocabulary.
+  const absent = params.mathEngines.filter((e) => foundNames.indexOf(e) === -1).map((e) => {
+    if (MATH_ENGINES[e] && MATH_ENGINES[e].resolveFrom === 'cli.command') return { engine: e, why: 'needs-a-caller-supplied-command' }
+    return { engine: e, why: 'not-found-on-this-machine' }
+  })
   return {
     ok: true, op: 'probe', engine: engineInfo ? engineInfo.name : null, engineInfo: engineInfo,
     engines: engines, available: true, packages: packages,
-    message: '可用引擎：' + engines.map((e) => e.name + ' ' + e.version).join('、') + (engineInfo ? '（请求 ' + engineInfo.name + '：' + engineInfo.version + '）' : ''),
+    configured: params.mathEngines.slice(), absent: absent,
+    message: '可用引擎：' + engines.map((e) => e.name + ' ' + e.version).join('、')
+      + (engineInfo ? '（请求 ' + engineInfo.name + '：' + engineInfo.version + '）' : '')
+      + (absent.length ? '；已配置但本机未发现：' + absent.map((a) => a.engine).join('、') : '；已配置的引擎都在'),
   }
 }
 
@@ -851,6 +929,9 @@ async function opRun(H, args, params) {
   const engineLabel = det.name === 'cli' ? ('cli:' + cliCommand) : det.name
 
   const want = (args.packages && args.packages.length) ? args.packages : params.mathPackages
+  // round-9 (F7): version constraints are NOT enforced - we only check existence by base name.
+  const pinnedSpecs = want.filter((sp) => parsePackageSpec(sp).pinned)
+  const versionPolicy = 'version-constraints-are-existence-only: 只按 base name 检查是否存在，约束本身从不校验（版本求解交给包管理器）' + (pinnedSpecs.length ? '；本次未校验的约束：' + pinnedSpecs.join(', ') : '；本次没有版本约束')
   // round-7 (finding 3): for cli the precheck runs against the FAMILY of `cli.command` (same
   // discovery-shaped logic); an unrecognisable command SKIPS the precheck instead of reporting a
   // false "missing" that would block the escape hatch.
@@ -865,6 +946,7 @@ async function opRun(H, args, params) {
       missing: missing,
       next: next('agent-install', { engine: det.name, packages: missing, specs: want.slice(), dryRun: true }),
       packages: pk,
+      versionPolicy: versionPolicy, constraintsNotEnforced: pinnedSpecs.slice(),
     })
   }
 
@@ -872,10 +954,17 @@ async function opRun(H, args, params) {
   let scriptText = ''
   let fileRel = null
   let sourceHashBefore = null
+  // round-9 (N1): `mode:'file'` is keyed by the SOURCE PATH, so re-running an ORIGINAL source lands on
+  // the same archive id (attempt>=2, scriptChanged). Pointing it at an ARCHIVED script instead targets
+  // a different path and therefore a NEW archive id by design - the prior attempt is never touched, but
+  // there is no previous receipt FOR THAT ID, so scriptChanged/previousReceipt are necessarily empty.
+  // That is not a bug, but it must be SAID rather than looking like broken change detection.
+  let archivedScriptSource = false
   if (mode === 'code') scriptText = args.code
   else if (mode === 'file') {
     fileRel = projectRel('', args.file)
     if (fileRel === null) return fail('MATH_REFUSED', det.name, 'file 必须位于项目内：' + args.file, { next: next('reason', { reason: 'path-outside-project' }) })
+    archivedScriptSource = /^Computation\//.test(String(fileRel))
     const txt = await H.readText(fileRel)
     if (txt === undefined) return fail('MATH_REFUSED', det.name, '找不到文件：' + args.file, { next: next('reason', { reason: 'file-not-found' }) })
     scriptText = txt
@@ -939,6 +1028,7 @@ async function opRun(H, args, params) {
   }
 
   const warnings = []
+  if (archivedScriptSource) warnings.push(warning('ARCHIVED_SCRIPT_RERUN', 'mode:\'file\' 指向的是**归档脚本**（Computation/…）：按设计归档 id 以**源路径**为键，所以这是一次**新归档**（新目录、attempt 1），没有该 id 的历史回执 ⇒ scriptChanged/previousReceipt 为空是**预期**，且**旧 attempt 绝不会被覆盖**。要做"编辑→重跑→attempt≥2 + scriptChanged"的核对，请把 mode:\'file\' 指向**原始源文件**并编辑它，而不是指向归档副本。'))
   if (!probeDet && want.length) warnings.push(warning('PACKAGE_PRECHECK_SKIPPED', 'engine=cli：无法从命令名判断引擎族，已跳过包预检（不阻塞执行，也不会误报缺包）；如需预检请直接用 python/r/octave/julia 或改用可识别的解释器路径。'))
   if (pk && pk.probeFailed && want.length) warnings.push(warning('PACKAGE_PRECHECK_UNKNOWN', '包预检未能执行（宿主 subprocess 在这几次尝试里返回空/超时，会话早期常见）：本次不判定缺包、不阻塞执行；如需确定性结论请重试或直接用对应引擎。probe=' + JSON.stringify(pk.argv) + ' attempts=' + JSON.stringify(pk.attempts)))
   if (fullOut.length > MATH_CAPS.stdout) warnings.push(warning('OUTPUT_TRUNCATED', 'stdout 超过 64KB，完整版见 ' + dir + '/stdout.txt'))
@@ -953,7 +1043,15 @@ async function opRun(H, args, params) {
     engine: { name: engineLabel, path: det.exe, version: det.version, source: det.name === 'cli' ? 'cli' : 'path' },
     script: { path: scriptRel, sha256: scriptHash, bytes: Buffer.byteLength(scriptText, 'utf8') },
     scriptPath: scriptRel, scriptHash: scriptHash,
+    // round-8 (P0/D3): member file tools are session-cwd relative, so the ABSOLUTE locations must be
+    // in the receipt: `scriptAbs` is directly openable, `cwd` is the project root to join with.
+    scriptAbs: scriptAbs, cwd: root,
     sourceFile: fileRel || null,
+    fileIsArchivedScript: archivedScriptSource,
+    // round-9 (N2): a TIMEOUT must still carry the evidence it produced - the capped partial output
+    // lives in the receipt as well as in stdout.txt/stderr.txt on disk.
+    partialStdout: String(fullOut).slice(-2000),
+    partialStderr: String(fullErr).slice(-2000),
     sourceHashBefore: sourceHashBefore, sourceHashAfter: sourceHashAfter,
     scriptChanged: scriptChanged, scriptChangedDuringRun: scriptChangedDuringRun,
     previousReceipt: prevReceipt ? { runId: prevReceipt.runId, attempt: prevReceipt.attempt || 1, scriptHash: prevReceipt.scriptHash || (prevReceipt.script && prevReceipt.script.sha256) || null } : null,
@@ -979,12 +1077,20 @@ async function opRun(H, args, params) {
 
   const shell = {
     ok: true, op: 'run', engine: engineLabel, mode: mode,
+    runId: runId, attempt: attempt,
+    versionPolicy: versionPolicy, constraintsNotEnforced: pinnedSpecs.slice(),
     engineInfo: receipt.engine,
     argv: assembled.argv.slice(),
     scriptPath: scriptRel, scriptHash: scriptHash,
+    scriptAbs: scriptAbs, cwd: root,
     attempt: attempt, attemptDir: dir, baseRunDir: baseDir,
     scriptChanged: scriptChanged, scriptChangedDuringRun: scriptChangedDuringRun,
     sourceFile: fileRel || null,
+    fileIsArchivedScript: archivedScriptSource,
+    // round-9 (N2): a TIMEOUT must still carry the evidence it produced - the capped partial output
+    // lives in the receipt as well as in stdout.txt/stderr.txt on disk.
+    partialStdout: String(fullOut).slice(-2000),
+    partialStderr: String(fullErr).slice(-2000),
     previousReceipt: receipt.previousReceipt,
     cliScriptAppended: !!(receipt.cli && receipt.cli.scriptAppended),
     packages: pk.found,
@@ -994,8 +1100,13 @@ async function opRun(H, args, params) {
     warnings: warnings,
   }
   if (receipt.timedOut) {
-    return Object.assign(fail('MATH_TIMEOUT', engineLabel, '执行超时（' + timeoutMs + 'ms）已被终止', { argv: assembled.argv.slice(), receipt: receiptRef }),
-      archiveFields(), { ms: receipt.ms, timedOut: true })
+    // round-9 (F5): failure EVIDENCE must be uniform - a timeout carries the SAME fields a non-zero
+    // exit does (exit + stderr), plus timedOut:true.
+    const out = fail('MATH_TIMEOUT', engineLabel, '执行超时（' + timeoutMs + 'ms）已被终止', { argv: assembled.argv.slice(), receipt: receiptRef })
+    out.exit = null
+    out.stdout = String(fullOut).slice(0, MATH_CAPS.stdout)
+    out.stderr = String(fullErr).slice(0, MATH_CAPS.stderr)
+    return Object.assign(out, archiveFields(), { ms: receipt.ms, timedOut: true })
   }
   if (r.exit !== 0) {
     const blob = fullErr + '\n' + fullOut

package/vibe-math-v5/vibe-math-v5.js

@@ -769,6 +769,14 @@ export function apply(ctx) {
     const vibeRoot = () => (workspaceRoot() + '/VibeMath').replace(/\\/g, '/')
     const projectRoot = () => vibeRoot() + '/Projects/' + project
     const instRoot = () => projectRoot() + '/Institutes/' + instituteName
+    // DEFECT A (3rd self-test): member-facing text used INSTITUTE-relative paths
+    // (`Members/<id>/…`), but a member's OWN file tools resolve a relative path against the
+    // SESSION CWD — so a member following that text verbatim created `<cwd>/Members/…`, a stray
+    // tree outside `VibeMath/Projects/…` (the self-test's `Members/acad/Propos/p-*.md`). Every
+    // member-facing path now uses the CWD-relative form (their real baseline); the framework's own
+    // writes keep going through `instRoot()`. `instRel()` is the one place that composes it.
+    const instRootRel = () => 'VibeMath/Projects/' + project + '/Institutes/' + instituteName
+    const instRel = (rel) => instRootRel() + '/' + String(rel == null ? '' : rel).replace(/^\/+/, '')
 
     function getPolicy() {
       const sp = sandboxPolicyOf()
@@ -924,9 +932,95 @@ export function apply(ctx) {
     const memberById = (id) => inst().members.find((m) => m.id === id)
     const voters = () => activeMembers().filter((m) => m.kind === 'academician' || m.kind === 'researcher')
     const voterCount = () => voters().length
-    function quorumM() {
+    function quorumMFrom(vc) {
       const cap = Math.max(1, Math.floor(Number(params.quorumCap) || 3))
-      return Math.max(1, Math.min(cap, voterCount()))
+      return Math.max(1, Math.min(cap, vc))
+    }
+    function quorumM() { return quorumMFrom(voterCount()) }
+    // DEFECT B (3rd self-test): the office's digest showed `m=2` while `status`/`acad` showed
+    // `m=3` in the SAME window — two views had computed the voter set at different moments
+    // (roster-snapshot timing). Every quorum-bearing view now reads ONE live snapshot and carries
+    // its `rosterVersion`, so all views at one point in time are provably identical and a stale
+    // reader can be DETECTED instead of silently disagreeing.
+    function rosterVersion() {
+      const ids = voters().map((m) => String(m.id) + ':' + String(m.phase)).sort()
+      return 'r' + String((inst().members || []).length) + ':' + ids.join(',')
+    }
+    function rosterSnapshot() {
+      const vs = voters()
+      const vc = vs.length
+      const started = vc > 0
+      return {
+        version: rosterVersion(),
+        m: started ? quorumMFrom(vc) : 0,
+        voters: vs.map((m) => m.id),
+        voterCount: vc,
+        started: started,
+      }
+    }
+    // DEFECT 2 (v5 self-test §18): before `start` there are no voters, yet the reported quorum
+    // was `m=1` with `voters=0` — it read like "a quorum of 1 is already there". The REPORTED
+    // quorum is therefore coherent and explicit: `started:false`, `m:0`, `voterCount:0` and the
+    // next step. `quorumM()` itself stays >=1 so the consensus arithmetic is unchanged, and
+    // `judgeVerdict` refuses to conclude at all when there are no voters.
+    function quorumView() {
+      const snap = rosterSnapshot()
+      const started = snap.started
+      const view = {
+        m: snap.m,
+        mode: params.quorumMode,
+        voters: snap.voters,
+        voterCount: snap.voterCount,
+        started: started,
+        phase: started ? 'voting' : 'not-started',
+        rosterVersion: snap.version,
+      }
+      if (!started) {
+        view.next = {
+          kind: 'start', tool: 'vibe_v5_start',
+          hint: '研究所尚未启动：有表决权者 0 人，因此 m 记为 0（不是"已满足 1 票门槛"）。先 vibe_v5_start（或 /v5 start）建立名册，m 才有意义。',
+        }
+      }
+      return view
+    }
+    // DEFECT 1 (v5 self-test §18): a member-scoped tool called before the institute exists — or
+    // by nobody identifiable — answered a BARE `V5_MEMBER_NOT_FOUND`, so an operator (or the
+    // model) could not tell WHY it failed or WHAT TO DO FIRST. The error CODE is unchanged (all
+    // existing gates keep matching on it); the answer now names the state and the next step, in
+    // the same `next`-hint shape the `math_computation` tool uses.
+    function memberDiagnosis(what, memberId) {
+      const total = (inst().members || []).length
+      const active = activeMembers().length
+      const who = String(memberId || '')
+      if (active === 0 && !running) {
+        return {
+          ok: false, code: 'V5_MEMBER_NOT_FOUND',
+          message: what + '失败：研究所尚未启动（在册 ' + total + ' 名、有表决权者 0 人），没有可归属的成员身份。',
+          next: {
+            kind: 'start', tool: 'vibe_v5_start',
+            hint: '先启动研究所（vibe_v5_start 或 /v5 start）让框架派出常驻成员，再由**成员子代理**调用该工具；所办（会话根）本身不是成员。',
+          },
+        }
+      }
+      if (active === 0) {
+        return {
+          ok: false, code: 'V5_MEMBER_NOT_FOUND',
+          message: what + '失败：研究所当前没有在册（active）成员。',
+          next: { kind: 'staff', tool: 'vibe_v5_add_researcher', hint: '先用 vibe_v5_add_researcher / vibe_v5_hire 补充成员，再调用该工具。' },
+        }
+      }
+      if (!who) {
+        return {
+          ok: false, code: 'V5_MEMBER_NOT_FOUND',
+          message: what + '失败：无法识别调用者（这是成员工具，所办/会话根没有成员身份）。',
+          next: { kind: 'member-call', tool: 'vibe_v5_members', hint: '请由成员子代理调用；所办可用 vibe_v5_message 转达，或直接用所办工具（vibe_v5_report / vibe_v5_status）。' },
+        }
+      }
+      return {
+        ok: false, code: 'V5_MEMBER_NOT_FOUND',
+        message: what + '失败：名册中没有成员 "' + who + '"（可能已被解雇或尚未就位）。',
+        next: { kind: 'roster', tool: 'vibe_v5_members', hint: '先用 vibe_v5_members 查看当前名册与阶段（active / provisioning / dismissed）。' },
+      }
     }
     function byChild(childId) { return inst().members.find((m) => m.childId === childId) }
     // The live academician's id, or '' when the office founded the institute with
@@ -1149,7 +1243,7 @@ export function apply(ctx) {
       L.push('  2. 只有 Verified/ 目录下的结论（以及成果卡中标注"已验证·真/假"的条目）绝对可信。')
       L.push('     其余一切——他人的推测、你自己的未验结论、Progress/、Methods/ 里的未验证断言——')
       L.push('     都只是经验性参考，引用时必须注明"未验证"。')
-      L.push('  3. 任何人可以读任何人的成果库；你只能写自己的库（Members/<你>/）。')
+      L.push('  3. 任何人可以读任何人的成果库；你只能写自己的库（' + instRel('Members/<你>/') + '）。')
       L.push('  4. 你写下的有价值内容由你自己判断是否入库，但入库必须写明三项：')
       L.push('     价值程度、动机用途计划、你自己对"该对象为真"的概率估计。')
       L.push('  5. 你随时可以在群聊里说话；要单独找人可以私信。需要集体决策就提议开会。')
@@ -1164,8 +1258,10 @@ export function apply(ctx) {
       L.push('')
       // ── 三、libraries ───────────────────────────────────────────────────
       L.push('【三、你的资料库、progress 与卡片格式】')
-      L.push('  你的资料库根目录：Members/' + member.id + '/')
+      L.push('  你的资料库根目录（**相对会话工作目录**）：' + instRel('Members/' + member.id + '/'))
       L.push('  （以下路径都相对该目录。你**只写这里**，但可以读任何人的对应目录。）')
+      L.push('  ⚠ 路径基准：你自己的文件工具的**相对路径以会话工作目录为基准**，所以直接读写文件时必须用上面这条完整路径；')
+      L.push('    若只想记录成果，直接用 vibe_v5_record_progress / vibe_v5_record_proposition / vibe_v5_record_method / vibe_v5_record_subproblem，框架会写到正确位置。')
       L.push('')
       L.push(LIB_SPEC)
       L.push('')
@@ -1303,7 +1399,7 @@ export function apply(ctx) {
       const ms = activeMembers()
       const b = []
       b.push('[状态] 你是 ' + member.id + '（' + kindLabel(member.kind) + '）｜轮次 ' + (rounds.get(member.id) || 0) +
-        '｜法定票数 m=' + quorumM() + '｜有表决权者 ' + voterCount() + ' 人')
+        '｜法定票数 m=' + (voterCount() > 0 ? quorumM() : '未启动') + '｜有表决权者 ' + voterCount() + ' 人')
       b.push('[在册] ' + (ms.length ? ms.map((x) => x.id).join('、') : '（无）'))
       // Members that are on the books but NOT on the floor. Silently omitting them made a
       // failed provision invisible to the whole institute.
@@ -1770,7 +1866,7 @@ export function apply(ctx) {
         const soft = (contextPct.get(member.id) || 0) >= Number(params.compactThreshold) ||
           (roundsSinceCompact.get(member.id) || 0) >= Number(params.compactAfterRounds)
         if (soft) {
-          prompt = CORE_RULES + '\n[CONTEXT COMPACT — 你的对话已接近上限。不要重新推导历史。\n' +
+          prompt = coreRules() + '\n[CONTEXT COMPACT — 你的对话已接近上限。不要重新推导历史。\n' +
             '请把当前工作状态浓缩成一段自述（已有发现、当前方向、已记录的关键成果、下一步具体动作、未决问题），' +
             '然后照常以 JSON 回答本轮。请在回复里填 "contextPct": 15 与 "compacted": true。]\n\n' + prompt
           // Reset the counter WITH the injection so the directive cannot repeat on the
@@ -1779,7 +1875,7 @@ export function apply(ctx) {
         }
       }
       if (needReanchor.has(member.id)) {
-        prompt = CORE_RULES + '\n' + prompt
+        prompt = coreRules() + '\n' + prompt
         needReanchor.delete(member.id)
       }
       try {
@@ -1861,7 +1957,7 @@ export function apply(ctx) {
         L.push('  "prioritize": {"order":[{"task_id":"t-1","priority":2}],"why":"…"}   ← 设定全所优先级，')
         L.push('  "nudge": {"to":"r-2","why":"为何督办","next_step":"建议的具体下一步"}，')
       }
-      L.push('  "task_create": {"subject":"…","description":"…","blocked_by":["t-1"],"write_scopes":["Members/r-1/Propos"]},')
+      L.push('  "task_create": {"subject":"…","description":"…","blocked_by":["t-1"],"write_scopes":["' + instRel('Members/r-1/Propos') + '"]},')
       L.push('  "task_claim": "t-3",')
       L.push('  "task_done": "t-3",')
       L.push('  "task_update": {"task_id":"t-3","expected_revision":2,"action":"complete|release|reopen|edit|set_dependencies|delete"},')
@@ -3328,9 +3424,12 @@ export function apply(ctx) {
     // A SHORT core-rules recap, injected ONLY (a) right after a REAL compaction, or
     // (b) in the same wake as a soft-compact directive — never on every round. The
     // charter itself lives in `persona` and needs no reinforcement otherwise.
-    const CORE_RULES = '[核心规则] 只有 Verified/（及标记"已验证·真/假"的卡片）算已确立；' +
+    // A function, not a frozen string: the member-facing library path must reflect the LIVE
+    // project/institute (DEFECT A) — a path captured at session creation could point at the
+    // default project after a `configure`.
+    const coreRules = () => '[核心规则] 只有 Verified/（及标记"已验证·真/假"的卡片）算已确立；' +
       '任何对象要进 Verified/，必须至少有 m 名有表决权者投出布尔值（恰好 1 或恰好 0）**且没有任何一张反向票**，否则留库附平均概率；' +
-      '你只写自己的库（Members/<你>/），可只读任何人的库；组织与分派由院士负责，但判断属于你自己；' +
+      '你只写自己的库（' + instRel('Members/<你>/') + '——相对**会话工作目录**），可只读任何人的库；组织与分派由院士负责，但判断属于你自己；' +
       '退出时只输出一个 JSON 对象。'
 
     // ONE place accounts for context usage on EVERY reply (normal, meeting, verify,
@@ -3377,7 +3476,7 @@ export function apply(ctx) {
       return n
     }
     async function publishProgress(memberId, text) {
-      if (!memberId || !memberById(memberId)) return { ok: false, code: 'V5_MEMBER_NOT_FOUND' }
+      if (!memberId || !memberById(memberId)) return memberDiagnosis('记录研究进度（vibe_v5_record_progress）', memberId)
       if (!String(text || '').trim()) return { ok: false, code: 'V5_INVALID_ARGUMENT', message: 'empty progress' }
       const rel = 'Members/' + memberId + '/Progress/progress.md'
       const prev = (await readTextRel(rel)) || ''
@@ -3390,7 +3489,7 @@ export function apply(ctx) {
     // hard requirements. Missing fields are refused rather than silently defaulted,
     // so the libraries keep their meaning.
     async function recordCard(memberId, kind, o) {
-      if (!memberId || !memberById(memberId)) return { ok: false, code: 'V5_MEMBER_NOT_FOUND', message: 'no such member' }
+      if (!memberId || !memberById(memberId)) return memberDiagnosis('记录成果卡片（vibe_v5_record_proposition/method/subproblem）', memberId)
       const args = o || {}
       const missing = []
       if (args.value === undefined || args.value === null) missing.push('value（价值程度）')
@@ -3553,7 +3652,7 @@ export function apply(ctx) {
       // An unknown caller must be refused HERE as well: `owner = task.ownerId === memberId` is true
       // for an UNOWNED task (ownerId '') when memberId is '', so without this guard an
       // unidentifiable caller would count as the owner of every unclaimed task (audit L6 follow-up).
-      if (!memberId) return { ok: false, code: 'V5_MEMBER_NOT_FOUND', message: 'no calling member' }
+      if (!memberId) return memberDiagnosis('修改任务（vibe_v5_task_update）', memberId)
       const args = o || {}
       const id = String(args.task_id || args.taskId || '')
       const task = inst().tasks.find((x) => x.id === id)
@@ -3650,7 +3749,7 @@ export function apply(ctx) {
     // it can never make any statement true, and the assignee may object with reasons
     // (the objection is broadcast, not silently swallowed).
     async function taskAssign(memberId, o) {
-      if (!memberId) return { ok: false, code: 'V5_MEMBER_NOT_FOUND', message: 'no calling member' }
+      if (!memberId) return memberDiagnosis('分派任务（vibe_v5_assign）', memberId)
       if (!isOffice(memberId) && !(isAcademician(memberId) && params.academicianLeads)) {
         return { ok: false, code: 'V5_NOT_ACADEMICIAN', message: 'only the academician (or the office) can assign tasks' }
       }
@@ -3694,7 +3793,7 @@ export function apply(ctx) {
       return { ok: true, task: taskView(withMeta) }
     }
     async function taskPrioritize(memberId, o) {
-      if (!memberId) return { ok: false, code: 'V5_MEMBER_NOT_FOUND', message: 'no calling member' }
+      if (!memberId) return memberDiagnosis('设置任务优先级（vibe_v5_task_prioritize）', memberId)
       if (!isOffice(memberId) && !(isAcademician(memberId) && params.academicianLeads)) {
         return { ok: false, code: 'V5_NOT_ACADEMICIAN', message: 'only the academician (or the office) can set priorities' }
       }
@@ -3746,7 +3845,7 @@ export function apply(ctx) {
       const s = inst()
       const lines = ['# 研究所编制表（人读镜像）｜' + instituteName + '｜' + fmtTime(), '',
         '> 权威状态在 State/<研究所>.v5state.json 里；本文件只是快照，勿手改。', '']
-      lines.push('- 求真门槛：m = ' + quorumM() + '（模式 ' + params.quorumMode + '）｜有表决权者 ' + voterCount() + ' 人')
+      lines.push('- 求真门槛：' + (voterCount() > 0 ? 'm = ' + quorumM() : '未启动（有表决权者 0 人，m 未定义）') + '（模式 ' + params.quorumMode + '）｜有表决权者 ' + voterCount() + ' 人')
       lines.push('- 阶段：' + phase + '｜运行中：' + running + '｜已结题：' + autoDone)
       lines.push('')
       lines.push('| 代号 | 职位 | 状态 | 雇主 | 方向/用途 | 轮次 | 上下文% |')
@@ -3873,6 +3972,9 @@ export function apply(ctx) {
       }
       const mean = all.length ? all.reduce((a, x) => a + x, 0) / all.length : 0.5
       const base = { m, P, bTrue, bFalse, abstain, mean, votedCount: all.length, voters: E }
+      // DEFECT 2 hardening: with NO voters there is nothing to conclude — every `>= m` test
+      // below would be trivially satisfiable if m were ever 0. Consensus needs voters.
+      if (P === 0) return Object.assign(base, { outcome: 'undecided', reason: 'no voters: the institute has no voting members yet' })
       if (params.quorumMode === 'all-unanimous') {
         const allVoted = E.length > 0 && E.every((id) => votes[id])
         if (!allVoted) return Object.assign(base, { outcome: 'undecided', reason: 'not every voter has voted' })
@@ -4219,7 +4321,7 @@ export function apply(ctx) {
     // Record one vote and, when every voter has answered, settle the round.
     async function castVerdict(memberId, target, verdict, reason) {
       const member = memberById(memberId)
-      if (!member) return { ok: false, code: 'V5_MEMBER_NOT_FOUND' }
+      if (!member) return memberDiagnosis('投票（vibe_v5_verdict）', memberId)
       if (member.kind === 'temp') {
         // Temp workers have no vote — but their judgement still matters, so it is
         // relayed to the group instead of being silently dropped.
@@ -4578,7 +4680,7 @@ export function apply(ctx) {
       L.push('【最终论文·撰写 —— ' + kindLabel(member.kind) + ' ' + member.id + '】')
       L.push('本所对原问题的一致结论已经达成，现在撰写**最终论文**（第 ' + p.round + '/' + PAPER_MAX_ROUNDS + ' 轮）。')
       L.push('请你**只写你自己库里已有证据支撑**的内容：')
-      L.push('- 直接引用你的卡片（Members/' + member.id + '/Propos|Methods|Subproblems/）、Members/' + member.id + '/Progress/progress.md、你参与的表决记录；')
+      L.push('- 直接引用你的卡片（' + instRel('Members/' + member.id + '/Propos|Methods|Subproblems/') + '）、' + instRel('Members/' + member.id + '/Progress/progress.md') + '、你参与的表决记录；')
       L.push('- **不得编造**：没有证据的推测不要写成结论；未决 / 被否证的条目必须显式标注“未定论 / 已被否证”；')
       L.push('- 在 evidence 里写清证据路径，附录会逐条索引。')
       if (p.round > 1) {
@@ -4598,7 +4700,7 @@ export function apply(ctx) {
       L.push('    "methods": "你创造/发现的方法、理论、思想、有价值经验、数学理解",')
       L.push('    "rules": "你从这些工作中归纳出的可复用规律",')
       L.push('    "limits": "局限、未决、被否证之处（必须诚实、显式）",')
-      L.push('    "evidence": ["Members/' + member.id + '/Propos/p-x.md"] } }')
+      L.push('    "evidence": ["' + instRel('Members/' + member.id + '/Propos/p-x.md') + '"] } }')
       return L.join('\n')
     }
     function paperReviewPrompt(member, p, ofId) {
@@ -5024,8 +5126,10 @@ export function apply(ctx) {
       }
       if (ev.formalKeys.length) out.push('Formal/Index.md', 'Formal/TODO.md')
       for (const m of ev.members) {
-        out.push('Members/' + m.id + '/Progress/progress.md（' + m.id + ' 的研究日志）')
-        out.push('Members/' + m.id + '/{Propos,Methods,Subproblems}/（' + m.id + ' 的卡片）')
+        // Member-facing evidence paths are CWD-relative (DEFECT A): a member copying one of these
+        // into its own file tool must not create a stray `<cwd>/Members/…` tree.
+        out.push(instRel('Members/' + m.id + '/Progress/progress.md') + '（' + m.id + ' 的研究日志）')
+        out.push(instRel('Members/' + m.id + '/{Propos,Methods,Subproblems}/') + '（' + m.id + ' 的卡片）')
       }
       out.push('Institutes.md（编制镜像）', 'Shared/TaskBoard.md（任务板镜像）')
       out.push('Paper/' + p.id + '/paper.log.md（本论文流程往来）')
@@ -5508,7 +5612,7 @@ export function apply(ctx) {
       return { ok: true, dismissed: id, reclaimedTasks: reclaimed, reason }
     }
     async function nudge(callerId, o) {
-      if (!callerId) return { ok: false, code: 'V5_MEMBER_NOT_FOUND', message: 'no calling member' }
+      if (!callerId) return memberDiagnosis('督办（vibe_v5_nudge）', callerId)
       if (!isOffice(callerId) && !(isAcademician(callerId) && params.academicianLeads)) {
         return { ok: false, code: 'V5_NOT_ACADEMICIAN', message: 'only the academician (or the office) can nudge members' }
       }
@@ -6103,7 +6207,7 @@ export function apply(ctx) {
         memberMayRejectAssign: params.memberMayRejectAssign,
         researcherCount: params.researcherCount,
         quorumCap: params.quorumCap, quorumMode: params.quorumMode,
-        m: quorumM(), voterCount: voterCount(),
+        m: quorumView().m, voterCount: voterCount(), started: voterCount() > 0,
         verdictMaxRounds: params.verdictMaxRounds,
         maxTempPerMember: params.maxTempPerMember, maxTempTotal: params.maxTempTotal,
         compactThreshold: params.compactThreshold, compactAfterRounds: params.compactAfterRounds,
@@ -6419,7 +6523,7 @@ export function apply(ctx) {
         // failure modes that silently drop state were invisible in the operator's view.
         diagnostics: s.diagnostics || [],
         debug: Object.assign({ scheduling, reschedule }, dbg),
-        quorum: { m: quorumM(), mode: params.quorumMode, voters: voters().map((m) => m.id), voterCount: voterCount() },
+        quorum: quorumView(),
         members: s.members.map((m) => ({
           id: m.id, kind: m.kind, phase: m.phase, direction: m.direction, hiredBy: m.hiredBy,
           rounds: rounds.get(m.id) || 0, busy: busy.has(m.id), contextPct: contextPct.get(m.id) || 0,
@@ -6456,12 +6560,15 @@ export function apply(ctx) {
     function report() {
       syncParamsFromState()
       const s = inst()
+      // ONE snapshot for the whole report: the text line and the returned `quorum` object can
+      // never disagree (DEFECT B), and `rosterVersion` lets a reader detect a stale copy.
+      const qv = quorumView()
       const L = []
       L.push('# 「' + instituteName + '」研究所汇报')
       L.push('')
       L.push('- 项目：' + project + '｜阶段：' + phase + '｜运行中：' + running + '｜已结题：' + autoDone)
       L.push('- 研究对象：' + (s.problem.statement ? s.problem.statement.slice(0, 200) : '（未设定）'))
-      L.push('- 求真门槛：m = ' + quorumM() + '（模式 ' + params.quorumMode + '）｜有表决权者 ' + voterCount() + ' 人')
+      L.push('- 求真门槛：' + (qv.started ? 'm = ' + qv.m : '未启动（有表决权者 0 人，m 未定义）') + '（模式 ' + params.quorumMode + '）｜有表决权者 ' + qv.voterCount + ' 人｜rosterVersion ' + qv.rosterVersion)
       L.push('')
       L.push('## 编制')
       if (!s.members.length) L.push('（暂无成员）')
@@ -6533,8 +6640,8 @@ export function apply(ctx) {
       L.push('')
       L.push('## 文件位置')
       L.push('- 根目录：' + instRoot())
-      L.push('- 已确立：Verified/｜成员库：Members/<id>/｜群聊：Shared/Chat/｜会议：Shared/Meetings/｜辩论：Shared/Debates/')
-      return { ok: true, report: L.join('\n') }
+      L.push('- 工作目录相对路径（你的文件工具的基准）：' + instRootRel() + '/｜已确立：Verified/｜成员库：Members/<id>/｜群聊：Shared/Chat/｜会议：Shared/Meetings/｜辩论：Shared/Debates/')
+      return { ok: true, report: L.join('\n'), quorum: qv }
     }
     // Adding/removing a PERMANENT researcher is a change to the institute's public
     // structure, so members may only propose it; the office decides and executes.
@@ -6606,6 +6713,8 @@ export function apply(ctx) {
       startPaper, paperStatus: paperSummary, finalizePaperByOffice,
       // authorization helpers (used by tool handlers)
       memberIdOfAgent, isOffice, isAcademician, isProvablyOffice, officeCaller, memberById, activeMembers,
+      // diagnosis helpers (defects 1/2 of the architecture self-test)
+      memberDiagnosis, quorumM, quorumView, voterCount,
     }
   }
 
@@ -6800,7 +6909,7 @@ export function apply(ctx) {
   // ── member-facing controls ────────────────────────────────────────────────
   registerTool('vibe_v5_say', '(member) Speak in the group chat (omit "to"), send a private message ("to":"r-2"), or address only the voters ("to":"voters").', objParams({ text: S, to: S }, ['text']), (s, a, x) => {
     const from = s.memberIdOfAgent(x)
-    if (!from) return { ok: false, code: 'V5_MEMBER_NOT_FOUND', message: 'no calling member' }
+    if (!from) return s.memberDiagnosis('发言（vibe_v5_say）', from)
     const to = a.to || 'all'
     return s.say(from, { to, text: a.text, kind: to === 'voters' ? 'voters' : (a.to ? 'dm' : 'chat') })
   })