fix: keep Grok registration on no-cli workspace install

Author: rockyshi1993

changelogs/unreleased.md

@@ -57,6 +57,7 @@ WorkspaceDataAbsorptionScopeGate · DocsSiteVisualAcceptanceGate · OmissionOnly
 - 拆分包开发与 Claude 安装态 MCP 契约：源码根 `.mcp.json` 改为指向实际存在的包内 `mcp/*`，CLI 仍为业务项目生成 `.claude/mcp/*`，避免 Grok 在源码仓发现通用 manifest 时启动不存在路径。
 - 补齐 `uninstall --host grok` 生命周期：复用 `HostAdapterScopeV1`，官方卸载用户插件并只移除 DevCodex 受管配置，保留 workspace source、未知键/注释与重复卸载幂等性。
 - 关闭诊断与 launcher 的作用域旁路：从子项目执行 `status/doctor` 也检查工作区 owner；`devcodex grok` 先消费官方 `--cwd`，拒绝 system-prompt override/重复 cwd，并在 root kernel 缺失、nested workspace 或 Windows 路径大小写变体下保持 fail-closed/同一身份。
+- 修复无 Grok CLI 环境下 workspace plugin 安装降级路径：仍写入 canonical `plugins.enabled` registration 与 migration receipt，但 installation 保持 `unavailable`，避免 CI/Linux 无 CLI 时 status/doctor 与 host-installation 契约漂移。
 
 ### 内部完整交付与用户可见输出契约（2026-07-19）
 

scripts/lib/host-adapter-scope.js

@@ -585,16 +585,33 @@ function syncGrokWorkspacePluginInstallation({
 
   const probe = spawnSync('grok', ['version'], { encoding: 'utf8', windowsHide: true, env })
   if (probe.error?.code === 'ENOENT') {
-    return {
+    const configBase = configSnapshot.existed
+      ? configSnapshot.content
+      : (fs.existsSync(configPath) ? fs.readFileSync(configPath, 'utf8') : '')
+    const merge = mergeGrokPluginRegistration(configBase, canonical, { legacyPluginPaths: legacy })
+    if (merge.changed || !configSnapshot.existed) writeTextAtomic(configPath, merge.desired)
+    const configAfter = fs.existsSync(configPath) ? fs.readFileSync(configPath, 'utf8') : ''
+    const receipt = {
       schemaVersion: 'GrokWorkspacePluginMigrationReceiptV1',
       status: 'unavailable',
       reason: 'grok-cli-not-found-legacy-source-retained',
       pluginPath: portable(canonical),
       legacyPluginPaths: legacy.map(portable),
       legacySources: legacySources.map(portable),
       backupPaths: [],
+      configPath,
+      configBeforeDigest: contentDigest(configSnapshot.content),
+      configAfterDigest: contentDigest(configAfter),
       dryRun: false
     }
+    if (activeRoot) {
+      const receiptFile = path.join(activeRoot, 'managed', 'grok-plugin-migration.json')
+      writeTextAtomic(receiptFile, JSON.stringify({ ...receipt, recordedAt: new Date().toISOString() }, null, 2) + '\n')
+      receipt.receiptFile = receiptFile
+    }
+    return {
+      ...receipt
+    }
   }
   if (probe.status !== 0) {
     const error = new Error(`GROK_PLUGIN_CLI_UNAVAILABLE: ${String(probe.stderr || probe.stdout).trim()}`)

scripts/test-host-installation.js

@@ -8,7 +8,11 @@ const path = require('path')
 const { spawnSync } = require('child_process')
 const { buildDeploymentDescriptors } = require('./lib/deployment-descriptors')
 const { buildCliHostUtils } = require('./lib/cli-host-utils')
-const { mergeGrokPluginRegistration, removeGrokPluginRegistration } = require('./lib/host-adapter-scope')
+const {
+  mergeGrokPluginRegistration,
+  removeGrokPluginRegistration,
+  syncGrokWorkspacePluginInstallation
+} = require('./lib/host-adapter-scope')
 const { buildGrokLaunchPlan } = require('./lib/grok-workspace-launcher')
 
 const ROOT = path.resolve(__dirname, '..')
@@ -122,6 +126,28 @@ assert.throws(
   'an explicit user disable must fail closed without being overwritten'
 )
 
+const noCliWorkspace = path.join(FIXTURE_ROOT, 'no-cli-workspace')
+const noCliActiveRoot = path.join(noCliWorkspace, '.devcodex', 'workspace')
+const noCliGrokHome = path.join(FIXTURE_ROOT, 'no-cli-grok-home')
+const noCliPlugin = path.join(noCliWorkspace, '.grok', 'devcodex', 'plugins', 'devcodex-workspace')
+const noCliLegacy = path.join(noCliWorkspace, '.grok', 'plugins', 'devcodex-workspace')
+fs.mkdirSync(noCliPlugin, { recursive: true })
+fs.mkdirSync(noCliLegacy, { recursive: true })
+fs.mkdirSync(noCliGrokHome, { recursive: true })
+fs.writeFileSync(path.join(noCliPlugin, 'plugin.json'), '{"name":"devcodex-workspace"}\n', 'utf8')
+fs.writeFileSync(path.join(noCliLegacy, 'plugin.json'), '{"name":"devcodex-workspace-legacy"}\n', 'utf8')
+fs.writeFileSync(path.join(noCliGrokHome, 'config.toml'), '[plugins]\nenabled = ["project-owned"]\n', 'utf8')
+const noCliReceipt = syncGrokWorkspacePluginInstallation({
+  pluginPath: noCliPlugin,
+  legacyPluginPaths: [noCliLegacy],
+  activeRoot: noCliActiveRoot,
+  env: { ...process.env, GROK_HOME: noCliGrokHome, PATH: '' }
+})
+assert.strictEqual(noCliReceipt.status, 'unavailable')
+assert.match(fs.readFileSync(path.join(noCliGrokHome, 'config.toml'), 'utf8'), /enabled = \["project-owned", "devcodex-workspace"\]/)
+assert(fs.existsSync(noCliLegacy), 'no-CLI migration must retain the legacy source')
+assert(fs.existsSync(path.join(noCliActiveRoot, 'managed', 'grok-plugin-migration.json')), 'no-CLI migration receipt must be recorded')
+
 const hostUtils = buildCliHostUtils({
   fs,
   path,