fix: handle Grok CLI null-status probe

Author: rockyshi1993

changelogs/unreleased.md

@@ -58,6 +58,7 @@ WorkspaceDataAbsorptionScopeGate · DocsSiteVisualAcceptanceGate · OmissionOnly
 - 补齐 `uninstall --host grok` 生命周期：复用 `HostAdapterScopeV1`，官方卸载用户插件并只移除 DevCodex 受管配置，保留 workspace source、未知键/注释与重复卸载幂等性。
 - 关闭诊断与 launcher 的作用域旁路：从子项目执行 `status/doctor` 也检查工作区 owner；`devcodex grok` 先消费官方 `--cwd`，拒绝 system-prompt override/重复 cwd，并在 root kernel 缺失、nested workspace 或 Windows 路径大小写变体下保持 fail-closed/同一身份。
 - 修复无 Grok CLI 环境下 workspace plugin 安装降级路径：仍写入 canonical `plugins.enabled` registration 与 migration receipt，但 installation 保持 `unavailable`，避免 CI/Linux 无 CLI 时 status/doctor 与 host-installation 契约漂移。
+- 补强 Grok CLI 探测降级：当 clean Linux/CI 环境返回 `status=null` 且无 stdout/stderr 时，按 CLI 不可用处理并保留 `unavailable` receipt；真实非零 CLI 输出仍 fail，避免 `GROK_PLUGIN_CLI_UNAVAILABLE: null` 逃逸。
 
 ### 内部完整交付与用户可见输出契约（2026-07-19）
 

scripts/lib/host-adapter-scope.js

@@ -378,6 +378,16 @@ function grokHomePath(env = process.env) {
   return env.GROK_HOME ? path.resolve(env.GROK_HOME) : path.join(os.homedir(), '.grok')
 }
 
+function isGrokCliUnavailableResult(result) {
+  if (result?.error?.code === 'ENOENT' || result?.error?.code === 'EACCES') return true
+  return Boolean(result && result.status === null && !result.signal && !result.stdout && !result.stderr)
+}
+
+function formatGrokCommandOutput(result) {
+  const output = String(result?.stderr || result?.stdout || '').trim()
+  return output || result?.error?.message || 'no output'
+}
+
 function readInstalledPluginRegistry(env = process.env) {
   const registryFile = path.join(grokHomePath(env), 'installed-plugins', 'registry.json')
   if (!fs.existsSync(registryFile)) return { registryFile, value: { version: 1, repos: {} } }
@@ -429,7 +439,7 @@ function inspectGrokPluginInstallation(pluginPath, env = process.env) {
 function syncGrokPluginInstallation({ pluginPath, dryRun = false, env = process.env }) {
   const source = path.resolve(pluginPath)
   const probe = spawnSync('grok', ['version'], { encoding: 'utf8', windowsHide: true, env })
-  if (probe.error?.code === 'ENOENT') {
+  if (isGrokCliUnavailableResult(probe)) {
     return {
       schemaVersion: 'GrokPluginInstallationReceiptV1',
       status: 'unavailable',
@@ -439,7 +449,7 @@ function syncGrokPluginInstallation({ pluginPath, dryRun = false, env = process.
     }
   }
   if (probe.status !== 0) {
-    const error = new Error(`GROK_PLUGIN_CLI_UNAVAILABLE: ${String(probe.stderr || probe.stdout).trim()}`)
+    const error = new Error(`GROK_PLUGIN_CLI_UNAVAILABLE: ${formatGrokCommandOutput(probe)}`)
     error.code = 'GROK_PLUGIN_CLI_UNAVAILABLE'
     throw error
   }
@@ -584,7 +594,7 @@ function syncGrokWorkspacePluginInstallation({
   }
 
   const probe = spawnSync('grok', ['version'], { encoding: 'utf8', windowsHide: true, env })
-  if (probe.error?.code === 'ENOENT') {
+  if (isGrokCliUnavailableResult(probe)) {
     const configBase = configSnapshot.existed
       ? configSnapshot.content
       : (fs.existsSync(configPath) ? fs.readFileSync(configPath, 'utf8') : '')
@@ -614,7 +624,7 @@ function syncGrokWorkspacePluginInstallation({
     }
   }
   if (probe.status !== 0) {
-    const error = new Error(`GROK_PLUGIN_CLI_UNAVAILABLE: ${String(probe.stderr || probe.stdout).trim()}`)
+    const error = new Error(`GROK_PLUGIN_CLI_UNAVAILABLE: ${formatGrokCommandOutput(probe)}`)
     error.code = 'GROK_PLUGIN_CLI_UNAVAILABLE'
     throw error
   }