dsh-vibe-math 2.7.3 → 2.8.1

package/tests/math-computation-discovery.mutants.mjs

@@ -33,14 +33,14 @@ function runSuite(dir) {
   const o = String(r.stdout || '') + String(r.stderr || '')
   return { status: r.status, out: o, failLines: o.split('\n').filter((l) => /^\s*FAIL\b/.test(l)), sum: (o.split('\n').filter((l) => /passed, \d+ failed/.test(l)).slice(-1)[0] || '').trim() }
 }
-const M3_FROM = "  // round-9: then the known per-OS install locations (an engine installed without touching PATH).\n  for (const p of await knownInstallCandidates(H, d.name)) {\n    if (typeof p === 'string' && p) return p\n  }\n"
+const M3_FROM = "  // round-9: then the known per-OS install locations (an engine installed without touching PATH).\n  for (const p of await knownInstallCandidates(H, d.name)) {\n    if (typeof p === 'string' && p) return { exe: p, via: 'known-install' }\n  }\n"
 const CASES = [
   { name: 'm3: the known-install-location lookup is dropped (PATH + bundled runtime only)',
     expect: 'a Rscript that exists ONLY in the default install dir is discovered',
     edit: (t) => t.replace(M3_FROM, '') },
   { name: 'b1: the host-injected install roots are ignored (back to ambient env)',
     expect: 'a Rscript that exists ONLY in the default install dir is discovered',
-    edit: (t) => t.replace('const roots = injected || mathInstallRoots(engineName, env, win)', 'const roots = mathInstallRoots(engineName, env, win)') },
+    edit: (t) => t.replace('const roots = (Array.isArray(injected) && injected.length) ? injected : mathInstallRoots(engineName, env, win)', 'const roots = mathInstallRoots(engineName, env, win)') },
   { name: 'b2: the octave/julia per-OS root entries are removed',
     expect: 'every engine with a well-defined default install dir declares per-OS roots: octave',
     edit: (t) => t.split('octave: win').join('octaveDisabled: win').split('julia: win').join('juliaDisabled: win') },
@@ -58,7 +58,7 @@ const CASES = [
   ok(b.status === 0, 'baseline: the shipped suite is green on the copied module pair (so a red below is the mutation)', b.sum.slice(0, 70))
   rmSync(dir, { recursive: true, force: true })
 }
-const ORIGIN = readFileSync(join(SRC, 'math-computation.js'), 'utf8')
+const ORIGIN = readFileSync(join(SRC, 'math-computation.js'), 'utf8').replace(/\r\n/g, '\n')  // anchors are LF
 for (const c of CASES) {
   const mutated = c.edit(ORIGIN)
   if (mutated === ORIGIN) { ok(false, c.name + ' — the single-site anchor applies', 'ANCHOR MISS'); continue }

package/tests/math-computation-shared.test.mjs

@@ -42,7 +42,7 @@ if (process.argv.includes('--self-probe')) {
   const dir = mkdtempSync(join(tmpdir(), 'mc-shared-selfprobe-'))
   const enginesSrc = join(dirname(modPath), 'math-engines.js')
   try { copyFileSync(enginesSrc, join(dir, 'math-engines.js')) } catch (e) { /* engines may be resolved elsewhere */ }
-  const src = rf(modPath, 'utf8')
+  const src = rf(modPath, 'utf8').replace(/\r\n/g, '\n')
   const whitelist = '  if (extra && Array.isArray(extra.absent)) out.absent = extra.absent\n'
   if (src.indexOf(whitelist) === -1) {
     console.log('SELF-PROBE FAIL: the fail() whitelist line for absent[] was not found (the probe cannot mutate what it cannot see)')
@@ -62,7 +62,7 @@ if (process.argv.includes('--self-probe')) {
   // assertion in the child's FAIL line (a label found anywhere in the output is NOT a red).
   const s45line = '      out.installedSoFar = results.filter((x) => x.exit === 0).map((x) => x.argv)\n'
   const dir2 = mkdtempSync(join(tmpdir(), 'mc-shared-selfprobe2-'))
-  const src2 = rf(modPath, 'utf8')
+  const src2 = rf(modPath, 'utf8').replace(/\r\n/g, '\n')
   let ok2 = false
   if (src2.indexOf(s45line) === -1) {
     console.log('SELF-PROBE FAIL: the installedSoFar assignment was not found (cannot mutate what it cannot see)')
@@ -81,7 +81,7 @@ if (process.argv.includes('--self-probe')) {
   // case 3 (§30, verify provenance): the SAME predicates the §30 assertions use, fed a broken helper.
   // The real `verifyFields(engine)` helper is extracted from the module under test and run against a stub
   // descriptor table; dropping its single reason line (or the no-empty-slot guard) must flip its predicate.
-  const src3 = rf(modPath, 'utf8')
+  const src3 = rf(modPath, 'utf8').replace(/\r\n/g, '\n')
   const hStart = src3.indexOf('function verifyFields(engine) {')
   let helper = ''
   if (hStart !== -1) {
@@ -113,7 +113,82 @@ if (process.argv.includes('--self-probe')) {
     ok3 = bad3 === 0
     console.log('  --- §30 verify-provenance predicates: ' + (cases3.length - bad3) + '/' + cases3.length + ' as required')
   }
-  process.exit(child.status !== 0 && named && ok2 && ok3 ? 0 : 1)
+  // case 4 (task-1): mislabel the bundled-runtime stage -> the named foundVia assertion must redden.
+  // NOTE: the self-probe's fs imports are ALIASED at the top of this block (`rf` = readFileSync,
+  // `wf` = writeFileSync); using the unaliased names here is a ReferenceError, not a probe failure.
+  let ok4 = false
+  {
+    const dir4 = mkdtempSync(join(tmpdir(), 'mc-shared-selfprobe4-'))
+    try {
+      copyFileSync(join(dirname(modPath), 'math-engines.js'), join(dir4, 'math-engines.js'))
+      const src4 = rf(modPath, 'utf8').replace(/\r\n/g, '\n')
+      const FROM4 = "via: 'host-runtime'"
+      const n4 = src4.split(FROM4).length - 1
+      if (n4 !== 1) {
+        console.log('SELF-PROBE FAIL: the stage-2 via anchor occurs ' + n4 + ' times (expected exactly 1)')
+      } else {
+        wf(join(dir4, 'math-computation.js'), src4.split(FROM4).join("via: 'path'"), 'utf8')
+        const child4 = spawnSync(process.execPath, [fileURLToPath(import.meta.url)], { encoding: 'utf8', maxBuffer: 1 << 26,
+          env: Object.assign({}, process.env, { MATH_COMPUTATION_MODULE: join(dir4, 'math-computation.js') }) })
+        const out4 = String(child4.stdout || '') + String(child4.stderr || '')
+        const failLines4 = out4.split('\n').filter((l) => /^\s*FAIL\b/.test(l))
+        const named4 = failLines4.some((l) => l.indexOf('a bundled runtime tree is reported as host-runtime') !== -1)
+        const summary4 = out4.split('\n').filter((l) => /passed,/.test(l)).slice(-1)[0] || 'no summary'
+        ok4 = child4.status !== 0 && named4
+        console.log((ok4 ? 'SELF-PROBE PASS' : 'SELF-PROBE FAIL') + ': mislabelling the bundled-runtime stage reddens the named foundVia assertion (' + summary4 + ')')
+        if (!ok4) for (const l of failLines4.slice(0, 4)) console.log('      child FAIL line: ' + l.trim().slice(0, 140))
+      }
+    } finally { rmSync(dir4, { recursive: true, force: true }) }
+  }
+  // case 5 (task-2 item 3): restore the old `injected || …` form -> the named empty-injection
+  // assertion must redden (a JS empty array is truthy, so the per-OS table was suppressed).
+  let ok5 = false
+  {
+    const dir5 = mkdtempSync(join(tmpdir(), 'mc-shared-selfprobe5-'))
+    try {
+      copyFileSync(join(dirname(modPath), 'math-engines.js'), join(dir5, 'math-engines.js'))
+      const src5 = rf(modPath, 'utf8').replace(/\r\n/g, '\n')
+      const FIXED5 = 'const roots = (Array.isArray(injected) && injected.length) ? injected : mathInstallRoots(engineName, env, win)'
+      const n5 = src5.split(FIXED5).length - 1
+      if (n5 !== 1) console.log('SELF-PROBE FAIL: the empty-array guard occurs ' + n5 + ' times (expected exactly 1)')
+      else {
+        wf(join(dir5, 'math-computation.js'), src5.split(FIXED5).join('const roots = injected || mathInstallRoots(engineName, env, win)'), 'utf8')
+        const child5 = spawnSync(process.execPath, [fileURLToPath(import.meta.url)], { encoding: 'utf8', maxBuffer: 1 << 26,
+          env: Object.assign({}, process.env, { MATH_COMPUTATION_MODULE: join(dir5, 'math-computation.js') }) })
+        const out5 = String(child5.stdout || '') + String(child5.stderr || '')
+        const failLines5 = out5.split('\n').filter((l) => /^\s*FAIL\b/.test(l))
+        ok5 = child5.status !== 0 && failLines5.some((l) => l.indexOf('task-2 empty-injection') !== -1)
+        const sum5 = (out5.split('\n').filter((l) => /passed,/.test(l)).slice(-1)[0] || 'no summary').trim()
+        console.log((ok5 ? 'SELF-PROBE PASS' : 'SELF-PROBE FAIL') + ': restoring the old injected-truthiness form reddens the named empty-injection assertion (' + sum5 + ')')
+        if (!ok5) for (const l of failLines5.slice(0, 4)) console.log('      child FAIL line: ' + l.trim().slice(0, 140))
+      }
+    } finally { rmSync(dir5, { recursive: true, force: true }) }
+  }
+  // case 6 (task-2 built-in route): empty the built-in root table -> the named built-in-route assertion
+  // must redden (§23c injects NO roots, so the built-in table is the only stage that can find it).
+  let ok6 = false
+  {
+    const dir6 = mkdtempSync(join(tmpdir(), 'mc-shared-selfprobe6-'))
+    try {
+      copyFileSync(join(dirname(modPath), 'math-engines.js'), join(dir6, 'math-engines.js'))
+      const src6 = rf(modPath, 'utf8').replace(/\r\n/g, '\n')
+      const TABLE6 = 'return (table[engineName] || []).filter((x) => typeof x === \'string\' && x)'
+      const n6 = src6.split(TABLE6).length - 1
+      if (n6 !== 1) console.log('SELF-PROBE FAIL: the built-in root-table return occurs ' + n6 + ' times (expected exactly 1)')
+      else {
+        wf(join(dir6, 'math-computation.js'), src6.split(TABLE6).join('return []'), 'utf8')
+        const child6 = spawnSync(process.execPath, [fileURLToPath(import.meta.url)], { encoding: 'utf8', maxBuffer: 1 << 26,
+          env: Object.assign({}, process.env, { MATH_COMPUTATION_MODULE: join(dir6, 'math-computation.js') }) })
+        const out6 = String(child6.stdout || '') + String(child6.stderr || '')
+        const failLines6 = out6.split('\n').filter((l) => /^\s*FAIL\b/.test(l))
+        ok6 = child6.status !== 0 && failLines6.some((l) => l.indexOf('task-2 built-in route') !== -1)
+        const sum6 = (out6.split('\n').filter((l) => /passed,/.test(l)).slice(-1)[0] || 'no summary').trim()
+        console.log((ok6 ? 'SELF-PROBE PASS' : 'SELF-PROBE FAIL') + ': emptying the built-in root table reddens the named built-in-route assertion (' + sum6 + ')')
+        if (!ok6) for (const l of failLines6.slice(0, 4)) console.log('      child FAIL line: ' + l.trim().slice(0, 140))
+      }
+    } finally { rmSync(dir6, { recursive: true, force: true }) }
+  }
+    process.exit(child.status !== 0 && named && ok2 && ok3 && ok4 && ok5 && ok6 ? 0 : 1)
 }
 
 let passed = 0, failed = 0
@@ -278,7 +353,7 @@ console.log('-- math_computation shared contract --')
     ok(r.cliScriptAppended === true, 'the return shell flags cliScriptAppended')
     ok(r.engine === 'cli:/fake/bin/mytool' && r.engineInfo.name === 'cli:/fake/bin/mytool', 'cli is labelled cli:<command> in the shell and engineInfo')
     const rj = JSON.parse(state.file(r.receipt.json))
-    ok(rj.engine.name === 'cli:/fake/bin/mytool' && rj.engine.source === 'cli' && rj.cli && rj.cli.argv.length === 2, 'cli receipt records cli:<command>, source=cli and the USER argv')
+    ok(rj.engine.name === 'cli:/fake/bin/mytool' && rj.engine.source === 'cli' && rj.engine.foundVia === 'cli' && rj.cli && rj.cli.argv.length === 2, 'cli receipt records cli:<command>, source=cli, foundVia=cli and the USER argv')
     ok(rj.cli.scriptAppended === true && rj.argv[rj.argv.length - 1] === r.argv[3], 'the receipt records scriptAppended and the executed argv')
   })
   await withHost({ params: { mathMode: 'typed' } }, async (state) => {
@@ -705,6 +780,7 @@ console.log('-- math_computation shared contract --')
     const p = await hb.call({ op: 'probe', engine: 'python' })
     ok(p.ok === true && p.engine === 'python' && p.engineInfo.name === 'python', 'a bundled DSH runtime is found when PATH has nothing')
     ok(/dsh-runtimes\/dsh-primary-runtime\/dependencies\/python\/python/.test(p.engineInfo.path), 'the discovered path comes from the generically globbed runtime tree')
+      ok(p.engineInfo.foundVia === 'host-runtime', '★ a bundled runtime tree is reported as host-runtime (foundVia, not the coarse source)')
     const r = await hb.call({ op: 'run', engine: 'python', mode: 'code', code: 'print(1)\n' })
     ok(r.ok === true && !!r.engineInfo.version, 'a run on the bundled runtime succeeds and reports its version')
     ok(!r.next, 'a found bundled runtime emits NO install guidance')
@@ -930,6 +1006,7 @@ console.log('-- math_computation shared contract --')
   const p = await h.call({ op: 'probe', engine: 'r' })
   ok(p.ok === true && p.engine === 'r', '★ a Rscript that exists ONLY in the default install dir is discovered (not on PATH)')
   ok(!!p.engineInfo && /installs\/R\/R-4\.6\.1\/bin\/Rscript/.test(String(p.engineInfo.path)), 'the discovered path is the versioned install dir (' + String(p.engineInfo && p.engineInfo.path).slice(0, 60) + ')')
+      ok(p.engineInfo.foundVia === 'known-install', '★ a known install dir is reported as known-install (foundVia)')
 }
 // ── 23b. round-B (F3): the SAME walker covers Octave and Julia default dirs (both layout shapes)
 {
@@ -956,6 +1033,46 @@ console.log('-- math_computation shared contract --')
       '★ every engine with a well-defined default install dir declares per-OS roots: ' + e)
   }
 }
+// ── 23c (task-2): the route a REAL machine takes — the BUILT-IN per-OS table + a REAL filesystem
+// listing. §23/§23b above both INJECT the candidate roots; this section has NO `installRoots` at all
+// and uses a real absolute temp dir laid out like <tmp>/R/<version>/bin. `knownInstallCandidates`
+// reads process.env at CALL time, so pointing `ProgramFiles` at the temp dir is enough (no seam).
+async function task2ProbeBuiltInRoots(opts) {
+  const { mkdtempSync, mkdirSync, writeFileSync, readdirSync, rmSync } = await import('node:fs')
+  const { tmpdir } = await import('node:os')
+  const { join } = await import('node:path')
+  const tmp = mkdtempSync(join(tmpdir(), 'mc-known-install-'))
+  const prevPF = process.env.ProgramFiles
+  try {
+    mkdirSync(join(tmp, 'R', 'R-4.6.1', 'bin'), { recursive: true })
+    writeFileSync(join(tmp, 'R', 'R-4.6.1', 'bin', 'Rscript.exe'), '')
+    process.env.ProgramFiles = tmp
+    const h = makeFakeHost(Object.assign({ installed: [], runtimeRoots: [] }, opts || {}))
+    h.host.listDirAbs = async (abs) => {
+      try { return readdirSync(abs, { withFileTypes: true }).map((e) => ({ name: e.name, type: e.isDirectory() ? 'directory' : 'file' })) } catch (e) { return [] }
+    }
+    M.registerMathComputation(h.host)
+    const p = await h.call({ op: 'probe', engine: 'r' })
+    return { p, tmp }
+  } finally {
+    if (prevPF === undefined) delete process.env.ProgramFiles; else process.env.ProgramFiles = prevPF
+    rmSync(tmp, { recursive: true, force: true })
+  }
+}
+{
+  const { p, tmp } = await task2ProbeBuiltInRoots(null)
+  ok(p.ok === true && p.engine === 'r', '★ task-2 built-in route: an engine under the BUILT-IN per-OS root is discovered with a REAL fs listing (no installRoots injection)')
+  ok(!!p.engineInfo && /R-4\.6\.1\/bin\/Rscript/.test(String(p.engineInfo.path)) && String(p.engineInfo.path).replace(/\\/g, '/').indexOf(tmp.replace(/\\/g, '/')) !== -1,
+    '★ task-2 built-in route: the discovered path is the versioned install dir inside the temp root (' + String(p.engineInfo && p.engineInfo.path) + ')')
+  ok(!!p.engineInfo && p.engineInfo.foundVia === 'known-install', '★ task-2 built-in route: foundVia names the known-install stage (' + String(p.engineInfo && p.engineInfo.foundVia) + ')')
+}
+// ── 23d (task-2 item 3): an EMPTY injected array must not suppress the built-in table. A JS empty array
+// is TRUTHY, so `injected || mathInstallRoots(...)` silently disabled the whole per-OS stage.
+{
+  const { p } = await task2ProbeBuiltInRoots({ installRoots: { r: [] } })
+  ok(p.ok === true && !!p.engineInfo && p.engineInfo.foundVia === 'known-install',
+    '★ task-2 empty-injection: a host that answers [] still falls back to the BUILT-IN roots (a JS empty array is truthy)')
+}
 // ── 24. round-9 (real-engine): never suggest an install command that cannot run on this machine
 {
   const h = makeFakeHost({ installed: [] })   // `winget` is NOT resolvable here

package/tests/math-computation-v2.test.mjs

@@ -158,6 +158,7 @@ function makeHost() {
   const toolRegs = []
   const cmdRegs = []
   const spawns = []
+  let interruptThrows = false   // task-14 (SLV P3): injection seam for the "host refuses to interrupt" branch
   const ctx = {
     get(name) {
       if (name === 'subprocess') return (fake && fake.noSubprocess) ? undefined : subprocess
@@ -180,7 +181,7 @@ function makeHost() {
       },
       async sendMessage() { return 'w' },
       async followup() { return 'w' },
-      interrupt() {},
+      interrupt() { if (interruptThrows) throw new Error('宿主拒绝中断（测试注入）') },
     },
     fs: {
       async resolve(rel, opts) { const base = (opts && opts.cwd) || WS; const p = String(rel).replace(/\\/g, '/'); return /^([A-Za-z]:|\/)/.test(p) ? p : join(base, ...p.split('/')) },
@@ -205,7 +206,7 @@ function makeHost() {
       return t[p]
     },
   })
-  return { ctx, toolRegs, cmdRegs, spawns, listeners, fs: fsBase }
+  return { ctx, toolRegs, cmdRegs, spawns, listeners, fs: fsBase, set interruptThrows(v) { interruptThrows = v } }
 }
 function makeRoot(id) { return { id, options: { provider: 'mock', model: 'mock' }, session: { id, header: { cwd: WS, parentSession: undefined } }, followup() {} } }
 
@@ -703,6 +704,17 @@ section('§19 成员作用域失败诊断：interruptChild 显式失败 + decisi
   const badDecide = await call('vibe_math_decide', { id: 'no-such-decision', action: 'approve' })
   assert(badDecide.ok === false && badDecide.code === 'VIBE_MATH_DECISION_NOT_FOUND', '★ [D1] 未知 decision id ⇒ code=VIBE_MATH_DECISION_NOT_FOUND，不是裸 message（实测 ' + JSON.stringify(badDecide).slice(0, 170) + '）')
   assert(!!badDecide.next && badDecide.next.tool === 'vibe_math_list_decisions', '★ [D1] 决策诊断的 next 指向真实存在的 vibe_math_list_decisions（实测 ' + JSON.stringify(badDecide.next || null) + '）')
+  // task-14 (SLV P3): the "host REFUSES to interrupt" branch — the one failure mode §19 did NOT cover.
+  // A live child is required FIRST (otherwise the code returns CHILD_NOT_FOUND and the guard would pass for
+  // the wrong reason); only then does the fake host start throwing.
+  const liveChild = (H.spawns && H.spawns.length) ? H.spawns[H.spawns.length - 1].childId : ''
+  const interruptible = await rawInterrupt({ childId: liveChild })
+  assert(interruptible.ok === true, '★ [P3/v2] 前置：可中断的 child 返回 ok:true（childId=' + liveChild + '，实测 ' + JSON.stringify(interruptible).slice(0, 140) + '）')
+  H.interruptThrows = true
+  let refused
+  try { refused = await rawInterrupt({ childId: liveChild }) } finally { H.interruptThrows = false }
+  assert(refused && refused.ok !== true && refused.code === 'VIBE_MATH_INTERRUPT_FAILED', '★ [P3/v2] 宿主拒绝中断 ⇒ 具名失败 code=VIBE_MATH_INTERRUPT_FAILED（实测 ' + JSON.stringify(refused).slice(0, 170) + '）')
+  assert(!!refused.next && refused.next.tool === 'vibe_math_abort' && !!refused.next.hint, '★ [P3/v2] 该失败带 next{tool=vibe_math_abort,hint}（实测 ' + JSON.stringify(refused.next || null) + '）')
 }
 // ── §20 审计 P0（**文本层断言**）：成员可见材料必须写明"文件工具按会话 cwd 解析相对路径 ⇒ 下面列出的
 // 相对路径要先拼项目根的绝对前缀；计算产物用回执的绝对字段 receipt.scriptAbs"。断言直接读**产出文本**

package/tests/math-computation-v3.test.mjs

@@ -158,6 +158,7 @@ function makeHost() {
   const toolRegs = []
   const cmdRegs = []
   const spawns = []
+  let interruptThrows = false   // task-14 (SLV P3): injection seam for the "host refuses to interrupt" branch
   const ctx = {
     get(name) {
       if (name === 'subprocess') return (fake && fake.noSubprocess) ? undefined : subprocess
@@ -180,7 +181,7 @@ function makeHost() {
       },
       async sendMessage() { return 'w' },
       async followup() { return 'w' },
-      interrupt() {},
+      interrupt() { if (interruptThrows) throw new Error('宿主拒绝中断（测试注入）') },
     },
     fs: {
       async resolve(rel, opts) { const base = (opts && opts.cwd) || WS; const p = String(rel).replace(/\\/g, '/'); return /^([A-Za-z]:|\/)/.test(p) ? p : join(base, ...p.split('/')) },
@@ -205,7 +206,7 @@ function makeHost() {
       return t[p]
     },
   })
-  return { ctx, toolRegs, cmdRegs, spawns, listeners, fs: fsBase }
+  return { ctx, toolRegs, cmdRegs, spawns, listeners, fs: fsBase, set interruptThrows(v) { interruptThrows = v } }
 }
 function makeRoot(id) { return { id, options: { provider: 'mock', model: 'mock' }, session: { id, header: { cwd: WS, parentSession: undefined } }, followup() {} } }
 
@@ -709,6 +710,17 @@ section('§19 成员作用域失败诊断：interruptChild 显式失败 + decisi
   const badDecide = await call('vibe_math_decide', { id: 'no-such-decision', action: 'approve' })
   assert(badDecide.ok === false && badDecide.code === 'VIBE_MATH_DECISION_NOT_FOUND', '★ [D1] 未知 decision id ⇒ code=VIBE_MATH_DECISION_NOT_FOUND，不是裸 message（实测 ' + JSON.stringify(badDecide).slice(0, 170) + '）')
   assert(!!badDecide.next && badDecide.next.tool === 'vibe_math_list_decisions', '★ [D1] 决策诊断的 next 指向真实存在的 vibe_math_list_decisions（实测 ' + JSON.stringify(badDecide.next || null) + '）')
+  // task-14 (SLV P3): the "host REFUSES to interrupt" branch — the one failure mode §19 did NOT cover.
+  // A live child is required FIRST (otherwise the code returns CHILD_NOT_FOUND and the guard would pass for
+  // the wrong reason); only then does the fake host start throwing.
+  const liveChild = (H.spawns && H.spawns.length) ? H.spawns[H.spawns.length - 1].childId : ''
+  const interruptible = await rawInterrupt({ childId: liveChild })
+  assert(interruptible.ok === true, '★ [P3/v3] 前置：可中断的 child 返回 ok:true（childId=' + liveChild + '，实测 ' + JSON.stringify(interruptible).slice(0, 140) + '）')
+  H.interruptThrows = true
+  let refused
+  try { refused = await rawInterrupt({ childId: liveChild }) } finally { H.interruptThrows = false }
+  assert(refused && refused.ok !== true && refused.code === 'VIBE_MATH_INTERRUPT_FAILED', '★ [P3/v3] 宿主拒绝中断 ⇒ 具名失败 code=VIBE_MATH_INTERRUPT_FAILED（实测 ' + JSON.stringify(refused).slice(0, 170) + '）')
+  assert(!!refused.next && refused.next.tool === 'vibe_math_abort' && !!refused.next.hint, '★ [P3/v3] 该失败带 next{tool=vibe_math_abort,hint}（实测 ' + JSON.stringify(refused.next || null) + '）')
 }
 // ── §20 审计 P0（**文本层断言**）：成员可见材料必须写明"文件工具按会话 cwd 解析相对路径 ⇒ 下面列出的
 // 相对路径要先拼项目根的绝对前缀；计算产物用回执的绝对字段 receipt.scriptAbs"。断言直接读**产出文本**