feat(ack): add grok workers and allow --always-approve

Grok is a first-class worker CLI. Launcher argv includes --always-approve so
unattended tool calls are not blocked; sandbox stays required.

skills/ack/examples/delivery.example.yaml

@@ -6,6 +6,10 @@ project:
 enabled: true
 defaultProfile: "review"
 
+intents:
+  testEnvironment: test-env
+  release: null
+
 entrypoints:
   verify:
     kind: make
@@ -100,6 +104,19 @@ environments:
     mutex: "notes-test-deploy"
 
 profiles:
+  test-env:
+    stopAt: validation_ready
+    steps:
+      - id: build-deb
+        action: build
+        artifact: service-deb
+      - id: deploy-test
+        action: deploy
+        artifact: service-deb
+        environment: test-server
+      - id: smoke-test
+        action: health-check
+        environment: test-server
   review:
     stopAt: review_ready
     steps:

skills/ack/examples/project.example.md

@@ -1,6 +1,6 @@
 # notes-web Agent 协作协议（示例，项目覆盖层）
 
-> 本项目基于 ack v0.15.0。
+> 本项目基于 ack v0.17.1。
 > 通用规范由 `/ack` 从 Skill 自身的 `references/` 读取，本文件只填项目差异。
 > 覆盖层文件放在 `docs/ack/project.md`，不占用 `AGENTS.md`。
 > ACK 不会自动修改 `AGENTS.md`、`CLAUDE.md` 或其它 Agent 指令文件。
@@ -39,7 +39,8 @@
 | Test | `codex-test-standard` | standard |
 | Developer 升级 | `codex-dev-strong` | strong |
 
-本文件不保存或拼接 worker shell 命令。
+项目如改用 Cursor 或 Grok，应修改结构化 profile、allowlist 和 defaults，再运行
+任务板校验。本文件不保存或拼接 worker shell 命令。
 
 ## 路径权限
 

skills/ack/examples/tasks.example.yaml

@@ -3,7 +3,7 @@
 version: 1
 updatedAt: "2026-07-06T09:40:00+08:00"
 source: "Coordinator (PM) Agent"
-ackVersion: "0.15.0"
+ackVersion: "0.17.1"
 project:
   name: "notes-web"
   baseUrl: "http://localhost:5173"
@@ -27,6 +27,12 @@ project:
           standard: ["auto"]
         test:
           standard: ["auto"]
+      grok:
+        developer:
+          standard: ["grok-4.5"]
+          strong: ["grok-4.6"]
+        test:
+          standard: ["grok-4.5"]
     profiles:
       codex-dev-standard:
         role: "developer"
@@ -63,6 +69,27 @@ project:
         model: "auto"
         reasoningEffort: null
         permissionMode: "workspace-write"
+      grok-dev-standard:
+        role: "developer"
+        cli: "grok"
+        tier: "standard"
+        model: "grok-4.5"
+        reasoningEffort: "medium"
+        permissionMode: "workspace-write"
+      grok-test-standard:
+        role: "test"
+        cli: "grok"
+        tier: "standard"
+        model: "grok-4.5"
+        reasoningEffort: "low"
+        permissionMode: "workspace-write"
+      grok-dev-strong:
+        role: "developer"
+        cli: "grok"
+        tier: "strong"
+        model: "grok-4.6"
+        reasoningEffort: "high"
+        permissionMode: "workspace-write"
     defaults:
       developer: "codex-dev-standard"
       test: "codex-test-standard"