@boyingliu01/xp-gate 0.31.3 → 0.32.0

package/plugins/dsh/lib/sprint.d.ts

@@ -0,0 +1,60 @@
+/**
+ * Sprint-flow subcommands the model may run.
+ *
+ * @test REQ-DSH-013 sprint-flow subcommands are callable from the model
+ * @intent Expose the sprint state commands the sprint-flow skill instructs the model
+ *         to run, without opening a passthrough to the whole CLI.
+ * @covers AC-DSH-013-01
+ *
+ * The skill references these commands by name, so before this module existed a model
+ * following the skill could read the instruction and had no way to carry it out.
+ *
+ * The whitelist is the security boundary, not a convenience: a passthrough tool would
+ * turn one tool call into arbitrary CLI invocation, which is a far larger surface than
+ * the four gate tools it sits beside. Enumerating both the subcommand and the
+ * phase-transition status keeps every user-influenced token inside a known set.
+ */
+import { type ShellDialect } from "./dialect.js";
+/**
+ * Subcommands in scope. Deliberately excludes anything destructive or
+ * environment-mutating (`uninstall`, `init`, `migrate`, `setup-global`) even though
+ * they are the same CLI.
+ */
+export declare const SPRINT_SUBCOMMANDS: readonly ["sprint-status", "phase-transition", "retro", "ui-review", "sprint-init", "sprint-audit", "next-sprint"];
+export type SprintSubcommand = (typeof SPRINT_SUBCOMMANDS)[number];
+/** The only status values `phase-transition` documents. */
+export declare const PHASE_STATUSES: readonly ["in_progress", "completed", "skipped", "failed", "paused"];
+export type PhaseStatus = (typeof PHASE_STATUSES)[number];
+/** Options a caller may pass. Every field is either enumerated or quoted. */
+export interface SprintCommandOptions {
+    /** phase-transition phase number, 1-6. */
+    readonly phase?: string;
+    /** phase-transition status. */
+    readonly status?: string;
+    /** Project directory, quoted as a single argument. */
+    readonly dir?: string;
+    /** Emit JSON where the subcommand supports it. */
+    readonly json?: boolean;
+    /** `retro`: look back N days. */
+    readonly days?: number;
+    /** `retro`: cover every sprint. */
+    readonly all?: boolean;
+}
+/** Type guard for the subcommand whitelist. */
+export declare function isSprintSubcommand(value: string): boolean;
+/**
+ * Validate a subcommand, throwing rather than returning a sentinel.
+ *
+ * A caller that ignores a boolean would fall through to "run nothing" or, worse, to a
+ * default subcommand; throwing makes the rejection impossible to overlook.
+ */
+export declare function assertSprintSubcommand(value: string): asserts value is SprintSubcommand;
+/**
+ * Build the command line for a whitelisted subcommand.
+ *
+ * User-influenced values reach the shell in exactly two ways: enumerated membership
+ * (subcommand, phase, status) or shell quoting (paths). Nothing is interpolated raw,
+ * which is what keeps this from becoming the injection surface a passthrough would be.
+ */
+export declare function buildSprintCommand(subcommand: string, options?: SprintCommandOptions, dialect?: ShellDialect): string;
+//# sourceMappingURL=sprint.d.ts.map

package/plugins/dsh/lib/sprint.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sprint.d.ts","sourceRoot":"","sources":["../src/sprint.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,KAAK,YAAY,EAAc,MAAM,cAAc,CAAA;AAE5D;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,oHAQrB,CAAA;AAEV,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAA;AAElE,2DAA2D;AAC3D,eAAO,MAAM,cAAc,sEAAuE,CAAA;AAElG,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAA;AAEzD,6EAA6E;AAC7E,MAAM,WAAW,oBAAoB;IACnC,0CAA0C;IAC1C,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;IACvB,+BAA+B;IAC/B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB,sDAAsD;IACtD,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAA;IACrB,kDAAkD;IAClD,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAA;IACvB,iCAAiC;IACjC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;IACtB,mCAAmC;IACnC,QAAQ,CAAC,GAAG,CAAC,EAAE,OAAO,CAAA;CACvB;AAKD,+CAA+C;AAC/C,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAEzD;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,IAAI,gBAAgB,CAMvF;AA2BD;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAChC,UAAU,EAAE,MAAM,EAClB,OAAO,GAAE,oBAAyB,EAClC,OAAO,GAAE,YAAsB,GAC9B,MAAM,CAMR"}

package/plugins/dsh/lib/sprint.js

@@ -0,0 +1,92 @@
+/**
+ * Sprint-flow subcommands the model may run.
+ *
+ * @test REQ-DSH-013 sprint-flow subcommands are callable from the model
+ * @intent Expose the sprint state commands the sprint-flow skill instructs the model
+ *         to run, without opening a passthrough to the whole CLI.
+ * @covers AC-DSH-013-01
+ *
+ * The skill references these commands by name, so before this module existed a model
+ * following the skill could read the instruction and had no way to carry it out.
+ *
+ * The whitelist is the security boundary, not a convenience: a passthrough tool would
+ * turn one tool call into arbitrary CLI invocation, which is a far larger surface than
+ * the four gate tools it sits beside. Enumerating both the subcommand and the
+ * phase-transition status keeps every user-influenced token inside a known set.
+ */
+import { shellQuote } from "./dialect.js";
+/**
+ * Subcommands in scope. Deliberately excludes anything destructive or
+ * environment-mutating (`uninstall`, `init`, `migrate`, `setup-global`) even though
+ * they are the same CLI.
+ */
+export const SPRINT_SUBCOMMANDS = [
+    "sprint-status",
+    "phase-transition",
+    "retro",
+    "ui-review",
+    "sprint-init",
+    "sprint-audit",
+    "next-sprint",
+];
+/** The only status values `phase-transition` documents. */
+export const PHASE_STATUSES = ["in_progress", "completed", "skipped", "failed", "paused"];
+/** Phase numbers the CLI accepts. */
+const PHASE_NUMBERS = ["1", "2", "3", "4", "5", "6"];
+/** Type guard for the subcommand whitelist. */
+export function isSprintSubcommand(value) {
+    return SPRINT_SUBCOMMANDS.includes(value);
+}
+/**
+ * Validate a subcommand, throwing rather than returning a sentinel.
+ *
+ * A caller that ignores a boolean would fall through to "run nothing" or, worse, to a
+ * default subcommand; throwing makes the rejection impossible to overlook.
+ */
+export function assertSprintSubcommand(value) {
+    if (!isSprintSubcommand(value)) {
+        throw new Error(`Unknown sprint subcommand "${value}". Allowed: ${SPRINT_SUBCOMMANDS.join(", ")}`);
+    }
+}
+/** Validate the two positional arguments phase-transition requires. */
+function phaseTokens(options) {
+    const phase = options.phase ?? "";
+    if (!PHASE_NUMBERS.includes(phase)) {
+        throw new Error(`phase must be one of ${PHASE_NUMBERS.join(", ")}; got "${phase}"`);
+    }
+    const status = options.status ?? "";
+    if (!PHASE_STATUSES.includes(status)) {
+        throw new Error(`status must be one of ${PHASE_STATUSES.join(", ")}; got "${status}"`);
+    }
+    return [phase, status];
+}
+/** Append the flags shared by several subcommands. */
+function sharedFlags(options, dialect) {
+    const flags = [];
+    if (options.json)
+        flags.push("--json");
+    if (options.all)
+        flags.push("--all");
+    if (options.days !== undefined && Number.isInteger(options.days) && options.days > 0) {
+        flags.push("--days", String(options.days));
+    }
+    if (options.dir !== undefined)
+        flags.push("--dir", shellQuote(options.dir, dialect));
+    return flags;
+}
+/**
+ * Build the command line for a whitelisted subcommand.
+ *
+ * User-influenced values reach the shell in exactly two ways: enumerated membership
+ * (subcommand, phase, status) or shell quoting (paths). Nothing is interpolated raw,
+ * which is what keeps this from becoming the injection surface a passthrough would be.
+ */
+export function buildSprintCommand(subcommand, options = {}, dialect = "posix") {
+    assertSprintSubcommand(subcommand);
+    const tokens = ["xp-gate", subcommand];
+    if (subcommand === "phase-transition")
+        tokens.push(...phaseTokens(options));
+    tokens.push(...sharedFlags(options, dialect));
+    return tokens.join(" ");
+}
+//# sourceMappingURL=sprint.js.map

package/plugins/dsh/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@boyingliu01/dsh-plugin-xp-gate",
-  "version": "0.31.3",
+  "version": "0.32.0",
   "description": "XP-Gate deterministic quality gates + AI workflow skills as a DeepSeek Harness (DSH) native plugin: gate-check / gate-principles / gate-arch tools + 12 SKILL.md skills",
   "type": "module",
   "main": "./lib/index.js",
@@ -42,15 +42,21 @@
   },
   "peerDependencies": {
     "@deepseek-ai/cordis": "^4.0.1",
-    "@deepseek-ai/dsh-llm": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-shell": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-tools": "^0.1.1-rc.2"
+    "@deepseek-ai/dsh-credentials": ">=0.2.0-rc.2 <0.3.0-0",
+    "@deepseek-ai/dsh-llm": ">=0.2.0-rc.2 <0.3.0-0",
+    "@deepseek-ai/dsh-shell": ">=0.2.0-rc.2 <0.3.0-0",
+    "@deepseek-ai/dsh-skill": ">=0.2.0-rc.2 <0.3.0-0",
+    "@deepseek-ai/dsh-tools": ">=0.2.0-rc.2 <0.3.0-0",
+    "@deepseek-ai/schemastery": "^3.18.5"
   },
   "devDependencies": {
-    "@deepseek-ai/cordis": "4.0.1",
-    "@deepseek-ai/dsh-llm": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-shell": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-tools": "0.1.1-rc.2",
+    "@deepseek-ai/cordis": "4.0.4",
+    "@deepseek-ai/dsh-credentials": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-llm": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-shell": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-skill": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-tools": "0.2.0-rc.2",
+    "@deepseek-ai/schemastery": "3.18.5",
     "@types/node": "^25.6.0",
     "typescript": "^5.9.3",
     "vitest": "^1.6.1",

package/plugins/dsh/scripts/verify-skill-provider.mjs

@@ -0,0 +1,113 @@
+/**
+ * @test REQ-DSH-006
+ * @intent INV-2 end-to-end: drive DSH's REAL SkillRegistry (not a fake), mount the
+ *         xp-gate plugin through its own apply(), and assert the registry surfaces
+ *         all 12 bundled skills with non-empty bodies and resolvable resource bases.
+ * @covers AC-DSH-006-04
+ *
+ * Why this exists: every unit test asserts the provider's internal contract. None
+ * prove the registry actually receives and ranks the skills. v1 shipped 65 files
+ * and passed its own tests while the model saw nothing, so this script uses
+ * @deepseek-ai/dsh-skill's SkillRegistry itself as the consumer.
+ *
+ * Usage: node scripts/verify-skill-provider.mjs <pluginDir>
+ */
+
+import { pathToFileURL } from "node:url"
+import { join } from "node:path"
+
+const EXPECTED = 12
+
+/**
+ * Build a real Cordis Context and mount the DSH SkillRegistry service on it.
+ *
+ * SkillRegistry extends cordis' Service, whose constructor reflects into the
+ * owning context — a plain object literal cannot host it. Cordis also rejects
+ * assigning undeclared properties, so the tools/shell seams are installed by a
+ * small plugin that declares them the way a real DSH service would.
+ */
+async function makeContext(dshRoot, SkillRegistry) {
+  const cordis = await import(
+    pathToFileURL(join(dshRoot, "@deepseek-ai", "cordis", "lib", "index.js")).href
+  )
+  const ctx = new cordis.Context()
+  const tools = []
+
+  const seams = {
+    name: "verify-seams",
+    apply(scope) {
+      scope.provide("tools", { register: (tool) => tools.push(tool) })
+      scope.provide("shell", {
+        resolve: (request) => ({ ...request }),
+        execute: () => Promise.resolve({ result: () => Promise.resolve({}) }),
+      })
+    },
+  }
+
+  ctx.plugin(seams)
+  // SkillRegistry is a Service; mounting it provides ctx.skills.
+  await ctx.plugin(SkillRegistry)
+  return { ctx, tools }
+}
+
+export async function verifySkillProvider(pluginDir, dshRoot) {
+  const skillModule = await import(
+    pathToFileURL(join(dshRoot, "@deepseek-ai", "dsh-skill", "lib", "index.js")).href
+  )
+  const { SkillRegistry } = skillModule
+
+  const plugin = await import(pathToFileURL(join(pluginDir, "lib", "index.js")).href)
+  const { ctx, tools } = await makeContext(dshRoot, SkillRegistry)
+
+  const failures = []
+  if (!Array.isArray(plugin.inject) || !plugin.inject.includes("skills")) {
+    failures.push(`inject does not declare skills: ${JSON.stringify(plugin.inject)}`)
+  }
+
+  plugin.apply(ctx)
+
+  // Registry-level view: exactly what a model-facing consumer would read.
+  const summaries = await ctx.skills.list({ cwd: pluginDir })
+  const ours = summaries.filter((s) => s.provider === "xp-gate")
+  if (ours.length !== EXPECTED) {
+    failures.push(`registry lists ${ours.length} xp-gate skills, expected ${EXPECTED}`)
+  }
+
+  const loaded = []
+  for (const summary of ours) {
+    const definition = await ctx.skills.get(summary.name, { cwd: pluginDir })
+    if (!definition) {
+      failures.push(`${summary.name}: not loadable through the registry`)
+      continue
+    }
+    if (!definition.content || definition.content.trim().length === 0) {
+      failures.push(`${summary.name}: empty body`)
+      continue
+    }
+    if (definition.resourceBase?.kind !== "directory") {
+      failures.push(`${summary.name}: resourceBase is ${JSON.stringify(definition.resourceBase)}`)
+    }
+    loaded.push({ name: summary.name, bytes: definition.content.length })
+  }
+
+  return {
+    ok: failures.length === 0,
+    reason: failures.join("; "),
+    tools: tools.map((t) => t?.name).filter(Boolean),
+    count: ours.length,
+    loaded,
+  }
+}
+
+const isMain = process.argv[1] && import.meta.url === pathToFileURL(process.argv[1]).href
+if (isMain) {
+  const pluginDir = process.argv[2]
+  const dshRoot = process.argv[3] ?? join(pluginDir, "node_modules")
+  if (!pluginDir) {
+    console.error("usage: node scripts/verify-skill-provider.mjs <pluginDir> [dshNodeModulesRoot]")
+    process.exit(2)
+  }
+  const result = await verifySkillProvider(pluginDir, dshRoot)
+  console.log(JSON.stringify(result, null, 2))
+  process.exit(result.ok ? 0 : 1)
+}

package/plugins/dsh/skills/delphi-review/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/DELPHI-REVIEW KNOWLEDGE BASE
 
-**Generated:** 2026-10-26
-**Commit:** 7a6d9971
+**Generated:** 2026-10-28
+**Commit:** 0f58c300
 **Branch:** main
-**Version:** 0.31.3.0
+**Version:** 0.32.0.0
 
 ## OVERVIEW
 Delphi Consensus Review — multi-round anonymous expert review (≥90% threshold, exactly 3 experts with distinct executable model IDs). Supports design, requirements, and code-walkthrough modes.

package/plugins/dsh/skills/sprint-flow/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/SPRINT-FLOW KNOWLEDGE BASE
 
-**Generated:** 2026-10-26
-**Commit:** 7a6d9971
+**Generated:** 2026-10-28
+**Commit:** 0f58c300
 **Branch:** main
-**Version:** 0.31.3.0
+**Version:** 0.32.0.0
 
 ## OVERVIEW
 **6-phase** development pipeline (v2.0 compact redesign, Issue #290): PREP → DESIGN → BUILD → VERIFY → SHIP → CLOSE. Phase 3/6 BUILD default build mode is **ralph-loop** (REQ-level iteration, 40-67% token savings vs parallel). HARD-GATE between DESIGN (2/6) and BUILD (3/6): design must pass Delphi review (≥90% consensus) before any coding.

package/plugins/dsh/skills/test-specification-alignment/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/TEST-SPECIFICATION-ALIGNMENT KNOWLEDGE BASE
 
-**Generated:** 2026-10-26
-**Commit:** 7a6d9971
+**Generated:** 2026-10-28
+**Commit:** 0f58c300
 **Branch:** main
-**Version:** 0.31.3.0
+**Version:** 0.32.0.0
 
 ## OVERVIEW
 Test-Specification Alignment Engine — two-stage validation ensuring tests accurately reflect requirements and design specs.

package/plugins/dsh/src/command-single-form.test.ts

@@ -0,0 +1,67 @@
+/**
+ * @test REQ-DSH-011 single-form command construction
+ * @intent Verify buildCommand emits one unconditional xp-gate invocation per dialect,
+ *         appends an explicit exit-code echo, and no longer branches on whether the
+ *         CLI resolves — so "installed but broken" can never look like a pass.
+ * @covers AC-DSH-011-07 AC-DSH-011-08
+ *
+ * Why: the old form probed with `command -v` / `Get-Command` and printed a hint on
+ * the else branch while leaving the exit code at 0. A CLI that resolved but then
+ * failed produced empty stdout with exit 0, which the model read as green.
+ */
+
+import { describe, it, expect } from "vitest"
+import { buildCommand, GATE_WHITELIST, isGateAllowed } from "./command.js"
+
+describe("buildCommand single form", () => {
+  it("never branches on CLI presence in POSIX form", () => {
+    const command = buildCommand({ subcommand: "check", target: "src", dialect: "posix" })
+    expect(command).not.toContain("command -v")
+    expect(command).not.toContain("if ")
+    expect(command.trimStart().startsWith("xp-gate")).toBe(true)
+  })
+
+  it("never branches on CLI presence in PowerShell form", () => {
+    const command = buildCommand({ subcommand: "check", target: "src", dialect: "powershell" })
+    expect(command).not.toContain("Get-Command")
+    expect(command.trimStart().startsWith("xp-gate")).toBe(true)
+  })
+
+  it("echoes the exit status so a missing CLI becomes a nonzero exit", () => {
+    const posix = buildCommand({ subcommand: "principles", dialect: "posix" })
+    expect(posix).toContain("exit:")
+    expect(posix).toContain("2>&1")
+
+    const powershell = buildCommand({ subcommand: "principles", dialect: "powershell" })
+    expect(powershell).toContain("LASTEXITCODE")
+  })
+
+  it("keeps quoting model-controlled arguments in both dialects", () => {
+    const posix = buildCommand({ subcommand: "check", target: "a b; rm -rf /", dialect: "posix" })
+    expect(posix).toContain("'a b; rm -rf /'")
+
+    const powershell = buildCommand({
+      subcommand: "check",
+      target: "a b; rm -rf /",
+      dialect: "powershell",
+    })
+    expect(powershell).toContain("'a b; rm -rf /'")
+  })
+
+  it("filters gates through the allowlist before they reach the shell", () => {
+    const command = buildCommand({
+      subcommand: "check",
+      target: "src",
+      gates: ["principles", "not-a-gate", "arch"],
+      dialect: "posix",
+    })
+    expect(command).toContain("principles,arch")
+    expect(command).not.toContain("not-a-gate")
+  })
+
+  it("knows which gate ids are allowed", () => {
+    expect(isGateAllowed("principles")).toBe(true)
+    expect(isGateAllowed("nope")).toBe(false)
+    expect(GATE_WHITELIST.length).toBeGreaterThan(0)
+  })
+})

package/plugins/dsh/src/command.test.ts

@@ -1,7 +1,6 @@
 import { describe, it, expect } from "vitest"
 import { resolve } from "node:path"
 import {
-  FALLBACK_MESSAGE,
   GATE_WHITELIST,
   buildCommand,
   isGateAllowed,
@@ -44,11 +43,12 @@ describe("isGateAllowed (enum whitelist)", () => {
 })
 
 describe("buildCommand", () => {
-  it("builds a guarded gate-check command with target + gates", () => {
+  it("builds an unconditional gate-check command with target + gates", () => {
     const cmd = buildCommand({ subcommand: "check", target: "src", gates: ["principles", "arch"] })
-    expect(cmd).toContain("command -v xp-gate")
+    // No presence probe: the command runs regardless and reports its own status.
     expect(cmd).toContain("xp-gate check 'src' --gates 'principles,arch'")
-    expect(cmd).toContain(shq(FALLBACK_MESSAGE))
+    expect(cmd).toContain("[XP-Gate] exit:")
+    expect(cmd).not.toContain("command -v")
   })
 
   it("drops non-whitelisted gates before building the command", () => {
@@ -86,13 +86,16 @@ describe("buildCommand", () => {
 
   /**
    * @test REQ-DSH-005
-   * @intent 验证 xp-gate CLI 缺失时 buildCommand 走 else 分支输出优雅降级安装提示，而非抛错或返回门禁失败
+   * @intent 验证 xp-gate CLI 缺失时不再走 else 分支伪装成功：命令无条件执行并回显退出码，
+   *         由渲染层把 command-not-found 判为 INDETERMINATE 并附安装提示。
+   *         优雅降级保留（不抛错、不崩），但不再静默返回 exit 0。
    * @covers AC-DSH-005-01
    */
-  it("emits the graceful-degradation fallback when xp-gate is absent", () => {
+  it("degrades through the exit code instead of a fake success branch", () => {
     const cmd = buildCommand({ subcommand: "check", target: "src" })
-    expect(cmd).toContain("else printf")
-    expect(cmd).toContain(FALLBACK_MESSAGE)
+    // No else branch: absence becomes a real nonzero exit the renderer can see.
+    expect(cmd).not.toContain("else printf")
+    expect(cmd).toContain("[XP-Gate] exit:")
   })
 })
 
@@ -122,32 +125,32 @@ describe("GATE_WHITELIST", () => {
 
 /**
  * @test REQ-DSH-010
- * @intent 验证 PowerShell 方言下生成的命令使用 Get-Command/Write-Output 而非 POSIX 的
- *         command -v/printf，避免 DSH 在 win32（pwsh executor）下因语法错误导致三个工具全部不可用
+ * @intent 验证 PowerShell 方言下生成的命令使用 Write-Output/$LASTEXITCODE 而非 POSIX 的
+ *         printf/$?，避免 DSH 在 win32（pwsh executor）下因语法错误导致三个工具全部不可用
  * @covers AC-DSH-010-01
  */
 describe("PowerShell dialect (regression: DSH win32 uses the pwsh executor)", () => {
-  it("uses Get-Command instead of command -v", () => {
+  it("reports the exit code with $LASTEXITCODE instead of POSIX $?", () => {
     const cmd = buildCommand({ subcommand: "principles", target: "src/x.ts", dialect: "powershell" })
-    expect(cmd).toContain("Get-Command xp-gate -ErrorAction SilentlyContinue")
+    expect(cmd).toContain("$LASTEXITCODE")
     expect(cmd).not.toContain("command -v")
+    expect(cmd).not.toContain("Get-Command")
   })
 
-  it("uses Write-Output instead of printf for the fallback hint", () => {
+  it("uses Write-Output instead of printf for the exit report", () => {
     const cmd = buildCommand({ subcommand: "check", target: "src", dialect: "powershell" })
     expect(cmd).toContain("Write-Output")
     expect(cmd).not.toContain("printf")
-    expect(cmd).toContain(FALLBACK_MESSAGE)
   })
 
   it("never emits POSIX shell syntax that PowerShell cannot parse", () => {
     const cmd = buildCommand({ subcommand: "check", target: "src", gates: ["principles"], dialect: "powershell" })
     // `/dev/null` and `; then … ; fi` are the constructs that produced
-    // "if语句中的'if'后缺少\"(\"" under the pwsh executor.
+    // "if语句中的'if'后缺少\"(\"" under the pwsh executor. `2>&1` IS valid in
+    // PowerShell and is used deliberately to merge stderr into the report.
     expect(cmd).not.toContain("/dev/null")
     expect(cmd).not.toContain("then ")
     expect(cmd).not.toContain("; fi")
-    expect(cmd).not.toContain("2>&1")
   })
 
   it("preserves the xp-gate invocation and gate subset", () => {
@@ -173,6 +176,7 @@ describe("PowerShell dialect (regression: DSH win32 uses the pwsh executor)", ()
 
   it("defaults to the POSIX dialect when none is given (backwards compatible)", () => {
     const cmd = buildCommand({ subcommand: "arch" })
-    expect(cmd).toContain("command -v xp-gate")
+    expect(cmd).toContain("printf")
+    expect(cmd).not.toContain("Write-Output")
   })
 })

package/plugins/dsh/src/command.ts

@@ -5,10 +5,6 @@ import { type ShellDialect, shellQuote } from "./dialect.js"
 // primitives themselves live in ./dialect.ts.
 export { type ShellDialect, detectDialect, shellQuote, shq } from "./dialect.js"
 
-/** Shown when the global `xp-gate` CLI is not on PATH. */
-export const FALLBACK_MESSAGE =
-  "[XP-Gate] xp-gate CLI not installed. Install it with: npm install -g @boyingliu01/xp-gate"
-
 /**
  * Allowlist of xp-gate gate aliases that are safe to invoke standalone
  * (non-preCommitOnly gates + common aliases). Anything outside this set is
@@ -73,29 +69,31 @@ function buildInner(options: BuildCommandOptions, dialect: ShellDialect): string
 }
 
 /**
- * Build a single guarded shell command: runs `xp-gate …` when the global CLI
- * is present, otherwise prints the graceful-degradation hint. A single
- * presence check avoids a separate probe/run race.
+ * Build a single unconditional shell command.
+ *
+ * There is deliberately no presence probe. An earlier version wrapped the call
+ * in `if command -v xp-gate …; then …; else print hint; fi`, which left the exit
+ * code at 0 on the else branch — so a CLI that resolved but then failed produced
+ * empty stdout with exit 0, and the model read that as a pass.
+ *
+ * Running unconditionally turns "not installed" into an ordinary command-not-found
+ * (nonzero exit, empty output), which renderGateResult classifies as
+ * INDETERMINATE and pairs with an install hint. It also removes the branch that
+ * could not distinguish "absent" from "present but broken".
  */
 export function buildCommand(options: BuildCommandOptions): string {
   const dialect = options.dialect ?? "posix"
   const inner = buildInner(options, dialect)
   if (dialect === "posix") {
-    return `if command -v xp-gate >/dev/null 2>&1; then ${inner}; else printf '%s\\n' ${shellQuote(
-      FALLBACK_MESSAGE,
-      dialect,
-    )}; fi`
+    // Merge stderr into stdout so a failure that only writes to stderr still
+    // reaches the renderer, then echo the status so the exit code survives the
+    // pipeline.
+    return `${inner} 2>&1; printf '\\n[XP-Gate] exit:%s\\n' "$?"`
   }
-  // PowerShell: `Get-Command` resolves the .cmd/.ps1 shims npm writes to
-  // %APPDATA%\npm. Those shims are invisible to a Git-Bash PATH lookup, so this
-  // branch is more reliable than `command -v` on Windows.
-  //
-  // The hint branch leaves $LASTEXITCODE untouched at 0, matching the POSIX
-  // branch's `printf` behaviour.
-  return `if (Get-Command xp-gate -ErrorAction SilentlyContinue) { ${inner} } else { Write-Output ${shellQuote(
-    FALLBACK_MESSAGE,
-    dialect,
-  )} }`
+  // PowerShell: merge streams and report $LASTEXITCODE explicitly. The
+  // .cmd/.ps1 shims npm writes under %APPDATA%\npm are visible here but not to a
+  // Git-Bash PATH lookup, which is why Windows uses this dialect.
+  return `${inner} 2>&1; Write-Output "[XP-Gate] exit:$LASTEXITCODE"`
 }
 
 /** Resolve a model-supplied path against the session cwd; absolutes pass through. */