dsh-vibe-math 2.7.2 → 2.7.3

package/tests/formal-verify-v5.test.mjs

@@ -277,7 +277,7 @@ console.log('-- V5 Lean formal verification --')
 section("1 'off' (default) is a true no-op")
 const RA = makeRoot()
 const st0 = await foundInstitute(RA, '形式化开关默认关闭测试')
-assert(st0.params.formalVerify === 'off', "the default is 'off' (got " + st0.params.formalVerify + ')')
+assert((st0.params||{}).formalVerify === 'off', "the default is 'off' (got " + (st0.params||{}).formalVerify + ')')
 
 // ★ The persistence contract (the DSH 0.2.0 audit fix). v5 used to keep the institute in a
 // host-only session projection: it appended `vibe5/*` events to the user's OWN session log, and
@@ -294,8 +294,9 @@ assert(st0.params.formalVerify === 'off', "the default is 'off' (got " + st0.par
   const before = await callTool('vibe_v5_status', {}, RA)
   const RA2 = makeRoot(wsOf(RA))   // fresh root, fresh backend, same workspace = a reload
   const after = await callTool('vibe_v5_status', {}, RA2)
-  assert(after.members.length === before.members.length && after.params.formalVerify === before.params.formalVerify,
-    '★ a reload reads the roster and the parameters back out of the JSON file (' + after.members.length + ' members, formalVerify=' + after.params.formalVerify + ')')
+  assert(before.params && after.params && typeof before.params === 'object' && typeof after.params === 'object', 'non-vacuous: BOTH reload views must EXPOSE params before they are compared (undefined === undefined is not a pass)')
+  assert(after.members.length === before.members.length && (after.params||{}).formalVerify === (before.params||{}).formalVerify,
+    '★ a reload reads the roster and the parameters back out of the JSON file (' + after.members.length + ' members, formalVerify=' + (after.params||{}).formalVerify + ')')
   assert(RA2.session._events.length === 0, '★ the reloading root appends nothing to its session log either')
 }
 {
@@ -360,16 +361,16 @@ section('2 parameter validation and runtime switching')
 const RB = makeRoot()
 await foundInstitute(RB, '形式化参数校验测试')
 const bad = await callTool('vibe_v5_set', { formalVerify: 'banana' }, RB)
-assert(bad.params.formalVerify === 'off', "an unknown mode degrades to 'off', never to a stronger mode (got " + bad.params.formalVerify + ')')
+assert((bad.params||{}).formalVerify === 'off', "an unknown mode degrades to 'off', never to a stronger mode (got " + (bad.params||{}).formalVerify + ')')
 const enc = await callTool('vibe_v5_set', { formalVerify: 'encourage' }, RB)
-assert(enc.params.formalVerify === 'encourage', "'encourage' is accepted")
+assert((enc.params||{}).formalVerify === 'encourage', "'encourage' is accepted")
 const req = await callTool('vibe_v5_set', { formalVerify: 'require', leanTimeoutMs: -5, leanCommand: '   ' }, RB)
-assert(req.params.formalVerify === 'require', "'require' is accepted")
-assert(req.params.leanTimeoutMs === 120000, 'a non-positive leanTimeoutMs falls back to the default (' + req.params.leanTimeoutMs + ')')
-assert(req.params.leanCommand === 'lean', 'a blank leanCommand falls back to "lean"')
+assert((req.params||{}).formalVerify === 'require', "'require' is accepted")
+assert((req.params||{}).leanTimeoutMs === 120000, 'a non-positive leanTimeoutMs falls back to the default (' + (req.params||{}).leanTimeoutMs + ')')
+assert((req.params||{}).leanCommand === 'lean', 'a blank leanCommand falls back to "lean"')
 await callTool('vibe_v5_set', { leanCommand: 'lake', leanArgs: ['env', 'lean'] }, RB)
 const stL = await callTool('vibe_v5_status', {}, RB)
-assert(stL.params.leanCommand === 'lake' && stL.params.leanArgs.join(' ') === 'env lean', 'leanCommand/leanArgs are settable (lake env lean)')
+assert((stL.params||{}).leanCommand === 'lake' && ((stL.params||{}).leanArgs||[]).join(' ') === 'env lean', 'leanCommand/leanArgs are settable (lake env lean)')
 
 // ---------- 3. 'encourage' injection ----------
 section("3 'encourage' injects the Lean section into the right prompts")
@@ -717,6 +718,64 @@ assert(stDef.undecided.indexOf('p-def') !== -1, '★ it is recorded as 未定论
 assert(!existsSync(join(instG, 'Verified', '命题', 'p-def.md')), 'no Verified card is written for it')
 assert(/p-def/.test(readIf(join(instG, 'Formal', 'TODO.md'))), 'it is on the formalisation TODO list')
 
+
+// ===============================================================
+// N. v5 LIB_SPEC path basis (D3 class): every member-visible library declaration must carry the
+//    SAME root the code's readers/writers use (Members/<id>/Progress/progress.md etc.), otherwise a
+//    compliant member writes a file nobody reads (the vm-selftest3 symptom).
+// ===============================================================
+section('N v5 LIB_SPEC declares the same path basis the code reads/writes (D3 class)')
+{
+  const { readFileSync } = await import('node:fs')
+  const src = readFileSync(PLUGIN, 'utf8')
+  const start = src.indexOf('const LIB_SPEC = [')
+  assert(start > 0, 'the charter LIB_SPEC block exists')
+  const spec = src.slice(start, src.indexOf("].join('\\n')", start))
+  for (const d of ['Progress/progress.md', 'Propos/<id>.md', 'Methods/<id>.md', 'Subproblems/<id>.md']) {
+    assert(spec.includes('Members/<你>/' + d), '★ LIB_SPEC declares ' + d + ' under the member root (Members/<你>/' + d + ') - the root the readers/writers use')
+  }
+  assert(!/·\s+(?:Progress|Propos|Methods|Subproblems)\/<你>\//.test(spec), '★ no LIB_SPEC declaration keeps the legacy bare Progress/<你>/ shape (a member copying it writes outside Members/<id>/)')
+  assert(src.includes("const rel = 'Members/' + memberId + '/Progress/progress.md'"), '★ the code writer path shares that root (Members/<id>/Progress/progress.md)')
+}
+// ===============================================================
+// N2. v5 assign/prioritize/nudge: the tool DESCRIPTION's allowed-caller set must match the GATE.
+//     All three share one gate (office always; academician only when academicianLeads), while the
+//     descriptions used to claim academician-only - so a reader (or a model) would never call them
+//     from the office, which the prompt explicitly allows.
+// ===============================================================
+section('N2 v5 assign/prioritize/nudge descriptions match their shared gate')
+{
+  const { readFileSync } = await import('node:fs')
+  const src = readFileSync(PLUGIN, 'utf8')
+  const gate = 'if (!isOffice(memberId) && !(isAcademician(memberId) && params.academicianLeads)) {'
+  const gates = src.split(gate).length - 1
+  assert(gates >= 2, '* assign + prioritize share the office-or-academician gate condition (found ' + gates + ')')
+  assert(/async function nudge[\s\S]{0,900}isOffice\((?:memberId|callerId)\)/.test(src), '* the nudge gate also admits the office (isOffice, whatever the caller parameter is named)')
+  for (const tool of ['vibe_v5_assign', 'vibe_v5_prioritize', 'vibe_v5_nudge']) {
+    const at = src.indexOf("registerTool('" + tool + "', '")
+    assert(at > 0, '* ' + tool + ' is registered')
+    const dstart = at + ("registerTool('" + tool + "', '").length
+    const desc = src.slice(dstart, src.indexOf("',", dstart))
+    assert(/\(office/.test(desc) && /academician/.test(desc), '* ' + tool + ' description names BOTH allowed callers (office + academician), matching its gate')
+    assert(!desc.includes("'(academician)"), '* ' + tool + ' description does not claim academician-only while the gate allows the office')
+  }
+}
+// ===============================================================
+// N3. DEFECT-1 contract for EVERY refusal: a caller that cannot be identified must still get a
+//     next{tool,hint}, not just a code+message (the office/session root and stale children hit
+//     these 'no calling member' returns).
+// ===============================================================
+section('N3 every "no calling member" refusal carries a next{tool,hint}')
+{
+  const { readFileSync } = await import('node:fs')
+  const src = readFileSync(PLUGIN, 'utf8')
+  const msgs = [...src.matchAll(/message: 'no calling member:[\s\S]*?'/g)]
+  assert(msgs.length >= 6, '* the member-scoped writing tools refuse an unidentified caller (' + msgs.length + ' sites)')
+  for (const m of msgs) {
+    const after = src.slice(m.index + m[0].length, m.index + m[0].length + 260)
+    assert(/next:\s*\{\s*kind:/.test(after), '* refusal "' + m[0].slice(0, 60) + '..." carries next{tool,hint} (not a bare code+message)')
+  }
+}
 console.log('')
 console.log('passed=' + passed + ' failed=' + failed)
 if (failed) { console.error('FAILURES:'); for (const f of failures) console.error('  - ' + f); process.exit(1) }

package/tests/helpers/doc-counts-format.mjs

@@ -0,0 +1,41 @@
+// ONE definition of every count sentence (D1). The writer (scripts/update-doc-counts.mjs), the guard
+// (tests/audit-readme-counts.mjs) and the mutant harness all import this module, so the three cannot
+// disagree about the shape. Sentences are rebuilt WHOLE (never partially regex-edited), which makes the
+// writer idempotent — `--check` converges.
+//
+// VOCABULARY: `derived.*` are JOB counts (the gate's own job list: base jobs + VARIANTS jobs), NOT file
+// counts (a naive file count gives 82/38). `shipped.*` ARE file counts (package.json#files is a file list).
+
+export function claims(derived, shipped) {
+  const zhTotal = '`TOTAL ' + derived.total + '`（' + derived.suites + ' 套件 + ' + derived.probes + ' 探针/变体，**作业计数**（job count），不是文件计数）'
+  const zhShipped = shipped.total + ' 个 `tests/*.mjs`（' + shipped.suites + ' 个套件 + ' + shipped.probes + ' 个探针/脚本）'
+  const enTotal = '`TOTAL ' + derived.total + ' (' + derived.suites + ' suites + ' + derived.probes + ' probes/variants — JOB counts, not file counts)'
+  const enShipped = 'which ' + shipped.total + ' of the `tests/*.mjs` files ship in the package (' + shipped.suites + ' suites + ' + shipped.probes + ' probe/script files)'
+  const ttRow = '| `tests/run-tests.mjs`（**' + derived.total + ' 项作业**（job count）= ' + derived.suites + ' 套件 + '
+    + derived.probes + ' 探针/变体；**由 `--counts` 派生**） | ≈ 424 s（历史基线） | **≈ 121 s**（历史基线；当前实测墙钟 ≈ 200 s，并发 4） | `TOTAL '
+    + derived.total + '  PASS ' + derived.total + '  FAIL 0  (suites ' + derived.suites + ' · probes ' + derived.probes + ')`；实测 `wall 120.7s · sum 424.2s`，关键路径 = `e2e-v4-fixes`（≈ 98 s） |'
+  const ttOutput = '`TOTAL ' + derived.total + '  PASS ' + derived.total + '  FAIL 0  (suites ' + derived.suites + ' · probes ' + derived.probes + ')`'
+  const ckClaim = derived.total + ' 项作业（job count）= ' + derived.suites + ' 套件 + ' + derived.probes + ' 探针/变体'
+  const ckShipped = '只发 `tests/` 的 **' + shipped.total + '** 项（**文件计数**；其中 `.test.mjs` **' + shipped.suites + '** 个）'
+  const d1Row = '- **计数（实测）**：`TOTAL ' + derived.total + '`（' + derived.suites + ' 套件 + ' + derived.probes
+    + ' 探针/变体，**作业计数/job count**，不是文件计数）；随包 `tests/*.mjs` = ' + shipped.total + '（**文件计数**：' + shipped.suites
+    + ' 个套件 + ' + shipped.probes + ' 个探针/脚本）。'
+  const zhBullet = '- **测试耗时基线与并行跑法**：[`docs/test-timing.md`](docs/test-timing.md)（`node tests/run-tests.mjs` 并行跑**全部套件 + 全部探针**：'
+    + zhTotal + '；**这些数字必须派生**：`node tests/run-tests.mjs --counts` 是权威来源（**作业计数**，不是文件计数），并由 '
+    + '[`tests/audit-readme-counts.mjs`](tests/audit-readme-counts.mjs) 校验本页与另两份文档；随包发布的是 `files[]` 里的 '
+    + zhShipped + '（文件计数），其余仅开发检出可见，清单见该文档 §1.1；每个 runner 都会打印耗时/加速比供下次选策略）'
+  const enBullet = '- **Test timing baseline and parallel run recipes**: [`docs/test-timing.md`](docs/test-timing.md) '
+    + '(`node tests/run-tests.mjs` runs **every suite AND every probe** in parallel: ' + enTotal + '; the authority is '
+    + '`node tests/run-tests.mjs --counts` (JOB counts, not file counts), checked by '
+    + '[`tests/audit-readme-counts.mjs`](tests/audit-readme-counts.mjs); ' + enShipped
+    + ' and which are repository-only is in §1.1 of that document; every runner prints its elapsed time/speedup so the next strategy can be chosen)'
+  return { zhTotal, zhShipped, enTotal, enShipped, ttRow, ttOutput, ckClaim, ckShipped, d1Row, zhBullet, enBullet }
+}
+
+/** Stable line markers: each canonical line replaces the line that carries its marker. */
+export const MARKERS = {
+  zhBullet: '[`docs/test-timing.md`](docs/test-timing.md)（`node tests/run-tests.mjs`',
+  enBullet: '[`docs/test-timing.md`](docs/test-timing.md) (`node tests/run-tests.mjs`',
+  ttRow: '| `tests/run-tests.mjs`（',
+  d1Row: '- **计数（实测',
+}

package/tests/helpers/math-computation-fake-seam.mjs

@@ -88,6 +88,10 @@ export function makeFakeHost(opts = {}) {
     // `absTree` maps an absolute directory to its entries, so a test can fake DSH's layout
     // (`<root>/dsh-runtimes/<tree>/dependencies/python/python.exe`).
     runtimeRoots: ('runtimeRoots' in opts) ? (async () => (opts.runtimeRoots || [])) : undefined,
+    // round-B (F4): OPTIONAL per-engine install roots. When supplied, the module uses THESE instead of
+    // this process's environment, so a test never depends on the ambient machine's %ProgramFiles% /
+    // %LOCALAPPDATA% (or on which engines the developer happens to have installed).
+    installRoots: opts.installRoots ? (async (engine) => (opts.installRoots[engine] || [])) : undefined,
     listDirAbs: opts.absTree ? (async (abs) => (opts.absTree[String(abs).replace(/\\/g, '/')] || [])) : undefined,
     resolveExecutable: async (cmd) => {
       if (opts.resolveThrows) throw new Error('resolve failed: ' + cmd)

package/tests/math-computation-a1.mutants.mjs

@@ -0,0 +1,72 @@
+// Registered mutant harness for the A1 skip-ledger contract (tests/math-computation-v2|v3.test.mjs).
+// A1 is load-bearing only if NON-EXERCISE reddens it: each family nulls the copy module's
+// packageManager/packageManagerAvailable and must redden the named line. Two families (one per preset).
+// Exit criterion: every family reddens BY NAME; any skipped family prints, is counted, and forces exit 1.
+// Run: node tests/math-computation-a1.mutants.mjs
+import { readFileSync, writeFileSync, mkdirSync, copyFileSync, rmSync, readdirSync } from 'node:fs'
+import { execFileSync } from 'node:child_process'
+import { dirname, join } from 'node:path'
+import { tmpdir } from 'node:os'
+import { fileURLToPath } from 'node:url'
+
+// Bound every child run: run-tests has no per-suite timeout, so an unbounded child hangs the gate.
+// A timeout is reported as HANG, counts as a failure for that family, and is listed in hangs=[].
+const CHILD_TIMEOUT_MS = Number(process.env.MUTANT_CHILD_TIMEOUT_MS || 120000)
+const TIMES = []
+const hangs = []
+let lastHang = false
+const HERE = dirname(fileURLToPath(import.meta.url))
+const REPO = join(HERE, '..')
+function copyGraph(preset, file, dest) {
+  const src = join(REPO, preset, file)
+  copyFileSync(src, join(dest, file))
+  for (const m of readFileSync(src, 'utf8').matchAll(/from\s+'(\.\/[A-Za-z0-9_.-]+\.js)'/g)) {
+    const dep = m[1].slice(2)
+    if (!readdirSync(dest).includes(dep)) copyGraph(preset, dep, dest)
+  }
+}
+const skipped = []
+function runFamily(f) {
+  const dest = join(tmpdir(), 'a1-mut-' + Math.random().toString(36).slice(2, 10))
+  mkdirSync(dest, { recursive: true })
+  copyGraph(f.preset, f.preset + '.js', dest)
+  const target = join(dest, 'math-computation.js')
+  const before = readFileSync(target, 'utf8')
+  let mutated = before
+  for (const [from, to] of f.edits) {
+    const n = mutated.split(from).length - 1
+    if (n !== 1) { skipped.push(f.name + ' (' + from.slice(0, 24) + ' x' + n + ')'); console.error('  SKIP - ' + f.name + ' (anchor x' + n + ')'); rmSync(dest, { recursive: true, force: true }); return false }
+    mutated = mutated.split(from).join(to)
+  }
+  writeFileSync(target, mutated, 'utf8')
+  try { execFileSync(process.execPath, ['--check', target], { stdio: 'pipe' }) }
+  catch (e) { writeFileSync(target, before, 'utf8'); skipped.push(f.name + ' (mutation did not compile)'); console.error('  SKIP - ' + f.name + ' (mutation did not compile; restored)'); rmSync(dest, { recursive: true, force: true }); return false }
+  let out = ''
+  let code = 0
+  try { out = execFileSync(process.execPath, [f.suite], { cwd: REPO, encoding: 'utf8', timeout: CHILD_TIMEOUT_MS, killSignal: 'SIGKILL', env: Object.assign({}, process.env, { [f.env]: join(dest, f.preset + '.js') }) }) }
+  catch (e) { if (e && (e.killed || e.signal === 'SIGKILL')) lastHang = true; code = (e && e.status) || 1; out = String((e && e.stdout) || '') + String((e && e.stderr) || '') }
+  const named = out.split(/\r?\n/).filter((l) => /^\s*(FAIL - | {2}- )/.test(l) && f.expect.test(l)).map((l) => l.trim())
+  const ok = code !== 0 && named.length > 0
+  console.log((ok ? '  ok - ' : '  FAIL - ') + f.name + (named.length ? ' :: ' + named[0].slice(0, 135) : ' :: no named red (exit=' + code + ')'))
+  rmSync(dest, { recursive: true, force: true })
+  return ok
+}
+const EDITS = [
+  ['    packageManager: mgr,', '    packageManager: null,'],
+  ['    packageManagerAvailable: mgr ? available : null,', '    packageManagerAvailable: null,'],
+]
+const FAMILIES = [
+  { name: 'A1-v2 (packageManager nulled)', preset: 'vibe-math-v2', suite: 'tests/math-computation-v2.test.mjs', env: 'MC_V2_PLUGIN', edits: EDITS,
+    expect: /A1：「包管理器存在 ⇒ 可执行命令」这半契约必须真的跑过/ },
+  { name: 'A1-v3 (packageManager nulled)', preset: 'vibe-math-v3', suite: 'tests/math-computation-v3.test.mjs', env: 'MC_V3_PLUGIN', edits: EDITS,
+    expect: /A1：「包管理器存在 ⇒ 可执行命令」这半契约必须真的跑过/ },
+]
+let red = 0
+for (const f of FAMILIES) { const t0 = Date.now(); lastHang = false; const ok = runFamily(f); const ms = Date.now() - t0; TIMES.push([f.name, ms]); if (lastHang) hangs.push(f.name + "(" + Math.round(ms / 1000) + "s)"); if (ok) red++ }
+console.log('')
+console.log('mutant families reddening the A1 contract by name: ' + red + '/' + FAMILIES.length)
+console.log('skipped=[' + skipped.join(' | ') + ']')
+console.log('timings: ' + TIMES.map((t) => String(t[0]).split(':')[0] + '=' + t[1] + 'ms').join('  '))
+console.log('hangs=[' + hangs.join(' | ') + ']')
+if (red !== FAMILIES.length || skipped.length || hangs.length) process.exit(1)
+console.log('ALL MUTANTS RED AS REQUIRED')

package/tests/math-computation-archive-rerun.mutants.mjs

@@ -0,0 +1,65 @@
+#!/usr/bin/env node
+/**
+ * Mutant harness for tests/math-computation-shared.test.mjs §26 — ARCHIVE / RERUN provenance (ships:
+ * `tests/*.mutants.mjs`). Replaces the dev-only draft `_oneoff/auditR2/roundA-mutants.mjs` (a1/a2).
+ *
+ * §26: re-running an EDITED original source keeps the same archive (attempt >= 2, `scriptChanged`), while
+ * pointing at an ARCHIVED copy yields a NEW archive and flags `fileIsArchivedScript` /
+ * `ARCHIVED_SCRIPT_RERUN`.
+ *
+ * Same shape as `math-computation-discovery.mutants.mjs`: copy `math-engines.js` + a ONE-SITE-mutated
+ * `math-computation.js` into a private dir, run the SHIPPED suite through `MATH_COMPUTATION_MODULE`, and
+ * require the named §26 assertion to redden. Baseline: the same copied pair, UNMUTATED, stays green.
+ *
+ * Run: node tests/math-computation-archive-rerun.mutants.mjs
+ */
+import { mkdtempSync, copyFileSync, readFileSync, writeFileSync, rmSync } from 'node:fs'
+import { tmpdir } from 'node:os'
+import { join } from 'node:path'
+import { spawnSync } from 'node:child_process'
+import { fileURLToPath } from 'node:url'
+
+const HERE = fileURLToPath(new URL('./', import.meta.url))
+const REPO = join(HERE, '..')
+const SRC = join(REPO, 'vibe-math-v2')
+const SUITE = join(HERE, 'math-computation-shared.test.mjs')
+let passed = 0, failed = 0
+const ok = (c, l, d) => { if (c) { passed++; console.log('  ok   ' + l) } else { failed++; console.log('  FAIL ' + l + (d ? ' — ' + d : '')) } }
+
+function runSuite(dir) {
+  const r = spawnSync(process.execPath, [SUITE], { cwd: REPO, encoding: 'utf8', maxBuffer: 1 << 26, env: Object.assign({}, process.env, { MATH_COMPUTATION_MODULE: join(dir, 'math-computation.js') }) })
+  const o = String(r.stdout || '') + String(r.stderr || '')
+  return { status: r.status, out: o, failLines: o.split('\n').filter((l) => /^\s*FAIL\b/.test(l)), sum: (o.split('\n').filter((l) => /passed, \d+ failed/.test(l)).slice(-1)[0] || '').trim() }
+}
+const CASES = [
+  { name: 'a1: the ARCHIVED_SCRIPT_RERUN warning is dropped',
+    expect: 'the response warns ARCHIVED_SCRIPT_RERUN',
+    edit: (t) => t.replace(/^[ \t]*if \(archivedScriptSource\) warnings\.push\(warning\('ARCHIVED_SCRIPT_RERUN'.*$/m, '') },
+  { name: 'a2: an archived source is never detected (always false)',
+    expect: 'the response flags fileIsArchivedScript',
+    edit: (t) => t.split('archivedScriptSource = /^Computation\\//.test(String(fileRel))').join('archivedScriptSource = false') },
+]
+{
+  const dir = mkdtempSync(join(tmpdir(), 'mc-archive-base-'))
+  copyFileSync(join(SRC, 'math-engines.js'), join(dir, 'math-engines.js'))
+  copyFileSync(join(SRC, 'math-computation.js'), join(dir, 'math-computation.js'))
+  const b = runSuite(dir)
+  ok(b.status === 0, 'baseline: the shipped suite is green on the copied module pair (so a red below is the mutation)', b.sum.slice(0, 70))
+  rmSync(dir, { recursive: true, force: true })
+}
+const ORIGIN = readFileSync(join(SRC, 'math-computation.js'), 'utf8')
+for (const c of CASES) {
+  const mutated = c.edit(ORIGIN)
+  if (mutated === ORIGIN) { ok(false, c.name + ' — the single-site anchor applies', 'ANCHOR MISS'); continue }
+  const dir = mkdtempSync(join(tmpdir(), 'mc-archive-mut-'))
+  copyFileSync(join(SRC, 'math-engines.js'), join(dir, 'math-engines.js'))
+  writeFileSync(join(dir, 'math-computation.js'), mutated)
+  const r = runSuite(dir)
+  const named = r.failLines.some((l) => l.indexOf(c.expect) !== -1)
+  ok(r.status !== 0 && named, '★ ' + c.name + ' -> ' + r.sum, named ? '' : 'named red not found (unit: named §26 assertion labels)')
+  if (!named) for (const l of r.failLines.slice(0, 3)) console.log('        ' + l.trim().slice(0, 140))
+  rmSync(dir, { recursive: true, force: true })
+}
+console.log('')
+console.log('=== MATH ARCHIVE/RERUN MUTANTS: ' + passed + ' passed, ' + failed + ' failed ===')
+process.exit(failed === 0 ? 0 : 1)

package/tests/math-computation-discovery.mutants.mjs

@@ -0,0 +1,76 @@
+#!/usr/bin/env node
+/**
+ * Mutant harness for tests/math-computation-shared.test.mjs §23 / §23b (ENGINE DISCOVERY) and §24 (install
+ * suggestions must be runnable). Ships: `tests/*.mutants.mjs`. Replaces the dev-only drafts
+ * `_oneoff/auditR2/round9-mutants.mjs` (m3, m4) and `_oneoff/auditR2/roundB-mutants.mjs` (b1/b2).
+ *
+ * §23: an engine INSTALLED but not on PATH must still be discovered (R's default install dir); §23b: the
+ * same walker covers Octave and Julia, and every engine with a well-defined default dir declares per-OS
+ * roots. The roots are INJECTED through the host seam, so the fixtures do not depend on this machine's
+ * `ProgramFiles`/`LOCALAPPDATA` (the round-B F4 fix).
+ *
+ * Each case copies `math-engines.js` + a ONE-SITE-mutated `math-computation.js` into a private dir and runs
+ * the SHIPPED suite through `MATH_COMPUTATION_MODULE`, requiring the named §23/§23b assertion to redden.
+ * Baseline: the same copied setup, UNMUTATED, must stay green (so the mutation is the only red cause).
+ *
+ * Run: node tests/math-computation-discovery.mutants.mjs
+ */
+import { mkdtempSync, copyFileSync, readFileSync, writeFileSync, rmSync } from 'node:fs'
+import { tmpdir } from 'node:os'
+import { join } from 'node:path'
+import { spawnSync } from 'node:child_process'
+import { fileURLToPath } from 'node:url'
+
+const HERE = fileURLToPath(new URL('./', import.meta.url))
+const REPO = join(HERE, '..')
+const SRC = join(REPO, 'vibe-math-v2')
+const SUITE = join(HERE, 'math-computation-shared.test.mjs')
+let passed = 0, failed = 0
+const ok = (c, l, d) => { if (c) { passed++; console.log('  ok   ' + l) } else { failed++; console.log('  FAIL ' + l + (d ? ' — ' + d : '')) } }
+
+function runSuite(dir) {
+  const r = spawnSync(process.execPath, [SUITE], { cwd: REPO, encoding: 'utf8', maxBuffer: 1 << 26, env: Object.assign({}, process.env, { MATH_COMPUTATION_MODULE: join(dir, 'math-computation.js') }) })
+  const o = String(r.stdout || '') + String(r.stderr || '')
+  return { status: r.status, out: o, failLines: o.split('\n').filter((l) => /^\s*FAIL\b/.test(l)), sum: (o.split('\n').filter((l) => /passed, \d+ failed/.test(l)).slice(-1)[0] || '').trim() }
+}
+const M3_FROM = "  // round-9: then the known per-OS install locations (an engine installed without touching PATH).\n  for (const p of await knownInstallCandidates(H, d.name)) {\n    if (typeof p === 'string' && p) return p\n  }\n"
+const CASES = [
+  { name: 'm3: the known-install-location lookup is dropped (PATH + bundled runtime only)',
+    expect: 'a Rscript that exists ONLY in the default install dir is discovered',
+    edit: (t) => t.replace(M3_FROM, '') },
+  { name: 'b1: the host-injected install roots are ignored (back to ambient env)',
+    expect: 'a Rscript that exists ONLY in the default install dir is discovered',
+    edit: (t) => t.replace('const roots = injected || mathInstallRoots(engineName, env, win)', 'const roots = mathInstallRoots(engineName, env, win)') },
+  { name: 'b2: the octave/julia per-OS root entries are removed',
+    expect: 'every engine with a well-defined default install dir declares per-OS roots: octave',
+    edit: (t) => t.split('octave: win').join('octaveDisabled: win').split('julia: win').join('juliaDisabled: win') },
+  { name: 'm4: a package manager is assumed available (a command that cannot run is offered)',
+    expect: 'no runnable-looking command when its package manager is absent',
+    edit: (t) => t.replace("    try { available = !!(await H.resolveExecutable(mgr)) } catch (e) { available = false }", '    available = true') },
+]
+
+// baseline: the copied setup, unmutated, must stay green
+{
+  const dir = mkdtempSync(join(tmpdir(), 'mc-discovery-base-'))
+  copyFileSync(join(SRC, 'math-engines.js'), join(dir, 'math-engines.js'))
+  copyFileSync(join(SRC, 'math-computation.js'), join(dir, 'math-computation.js'))
+  const b = runSuite(dir)
+  ok(b.status === 0, 'baseline: the shipped suite is green on the copied module pair (so a red below is the mutation)', b.sum.slice(0, 70))
+  rmSync(dir, { recursive: true, force: true })
+}
+const ORIGIN = readFileSync(join(SRC, 'math-computation.js'), 'utf8')
+for (const c of CASES) {
+  const mutated = c.edit(ORIGIN)
+  if (mutated === ORIGIN) { ok(false, c.name + ' — the single-site anchor applies', 'ANCHOR MISS'); continue }
+  const dir = mkdtempSync(join(tmpdir(), 'mc-discovery-mut-'))
+  copyFileSync(join(SRC, 'math-engines.js'), join(dir, 'math-engines.js'))
+  writeFileSync(join(dir, 'math-computation.js'), mutated)
+  const r = runSuite(dir)
+  const named = r.failLines.some((l) => l.indexOf(c.expect) !== -1)
+  ok(r.status !== 0 && named, '★ ' + c.name + ' -> ' + r.sum, named ? '' : 'named red not found (unit: named §23/§23b assertion labels)')
+  if (!named) for (const l of r.failLines.slice(0, 3)) console.log('        ' + l.trim().slice(0, 140))
+  rmSync(dir, { recursive: true, force: true })
+}
+console.log('')
+console.log('=== MATH DISCOVERY MUTANTS: ' + passed + ' passed, ' + failed + ' failed ===')
+process.exit(failed === 0 ? 0 : 1)