@team-agent/installer 0.5.65 → 0.5.68

package/crates/team-agent/src/provider/adapter.rs

@@ -342,6 +342,22 @@ impl ProviderAdapter for BasicProviderAdapter {
                 native_mcp_config: false,
                 writes_global_settings: true,
             },
+            // Grok: --resume/--fork-session 齐全 → resume/fork true; 无原生
+            // --mcp-config flag → native_mcp_config false (MCP 走 .grok/config.toml)。
+            Provider::Grok => ProviderCaps {
+                resume: true,
+                fork: true,
+                native_mcp_config: false,
+                writes_global_settings: false,
+            },
+            // Cursor agent: --resume [chatId] 有 → resume true; 无 fork flag →
+            // fork false; 无 --mcp-config → native_mcp_config false。
+            Provider::CursorAgent => ProviderCaps {
+                resume: true,
+                fork: false,
+                native_mcp_config: false,
+                writes_global_settings: false,
+            },
             Provider::Fake => ProviderCaps {
                 resume: false,
                 fork: false,
@@ -389,6 +405,9 @@ impl ProviderAdapter for BasicProviderAdapter {
             // 标"weak / no auth-status command available";Compatible/Official 走 BYOK
             // 路径,有 COPILOT_PROVIDER_BASE_URL 时已脱离 GitHub 登录通道。
             Provider::Copilot => copilot_auth_hint(auth_mode),
+            // Cursor: 登录探测未接。U-17 前不得把未观测写成 Present（shim 对
+            // `cursor-agent status` 会假绿 Logged in）。缺键 ≠ 已知未登录，故不用 Missing。
+            Provider::CursorAgent => AuthHintStatus::Unknown,
             _ => match auth_mode {
                 AuthMode::Subscription => AuthHintStatus::Present,
                 AuthMode::OfficialApi | AuthMode::CompatibleApi => AuthHintStatus::MissingOrUnknown,
@@ -454,6 +473,24 @@ impl ProviderAdapter for BasicProviderAdapter {
                 }
                 Ok(argv)
             }
+            Provider::Grok => Ok(grok_launch_command(
+                self,
+                auth_mode,
+                mcp_config,
+                system_prompt,
+                model,
+                tools,
+            )?),
+            Provider::CursorAgent => Ok(cursor_agent_base_command(
+                self,
+                auth_mode,
+                mcp_config,
+                system_prompt,
+                model,
+                tools,
+                false,
+                None,
+            )?),
             Provider::Fake => Ok(fake_worker_command()),
         }
     }
@@ -543,6 +580,32 @@ impl ProviderAdapter for BasicProviderAdapter {
             //   * `-C <workspace>`(双保险,即便 spawn cwd 漂移也能锚定)
             // mcp_config inline 形态由 build_command 写入,launch 路径会用
             // point_native_mcp_config_at_file 重写为 @<file> 形(§C1 note)。
+            Provider::Grok => {
+                // Align with Claude/Copilot: the UUID on `--session-id` is
+                // also the capture hint. `CommandPlan::argv_only` used to
+                // drop expected_session_id, so `_pending_session_id` was
+                // never written and restart could not resume.
+                let expected = next_session_token();
+                let mut argv = grok_base_command(
+                    self,
+                    ctx.auth_mode,
+                    ctx.mcp_config,
+                    ctx.system_prompt,
+                    ctx.model,
+                    ctx.tools,
+                    ctx.profile_launch
+                        .is_some_and(|profile| profile.managed_mcp_config),
+                    ctx.effort,
+                )?;
+                argv.push("--session-id".to_string());
+                argv.push(expected.clone());
+                Ok(CommandPlan {
+                    argv,
+                    expected_session_id: Some(SessionId::new(expected)),
+                    provider_projects_root: None,
+                    managed_mcp_config: false,
+                })
+            }
             Provider::Copilot => {
                 let expected = next_session_token();
                 let mut argv = copilot_base_command(
@@ -561,6 +624,27 @@ impl ProviderAdapter for BasicProviderAdapter {
                     managed_mcp_config: false,
                 })
             }
+            Provider::CursorAgent => {
+                // U-01 create-chat 无登录超时；禁止发明 --session-id。
+                // pending 只能是 CLI chatId，本拍不造假 uuid。
+                let argv = cursor_agent_base_command(
+                    self,
+                    ctx.auth_mode,
+                    ctx.mcp_config,
+                    ctx.system_prompt,
+                    ctx.model,
+                    ctx.tools,
+                    ctx.profile_launch
+                        .is_some_and(|profile| profile.managed_mcp_config),
+                    ctx.effort,
+                )?;
+                Ok(CommandPlan {
+                    argv,
+                    expected_session_id: None,
+                    provider_projects_root: None,
+                    managed_mcp_config: false,
+                })
+            }
             _ => self
                 .build_command_with_tools(
                     ctx.auth_mode,
@@ -725,6 +809,40 @@ impl ProviderAdapter for BasicProviderAdapter {
                 argv.push(session_id.as_str().to_string());
                 Ok(argv)
             }
+            // Grok resume: base + `--resume <id>` (grok -r/--resume 接受 id|title)。
+            Provider::Grok => {
+                let mut argv = grok_base_command(
+                    self,
+                    auth_mode,
+                    mcp_config,
+                    system_prompt,
+                    model,
+                    tools,
+                    false,
+                    None,
+                )?;
+                argv.push("--resume".to_string());
+                argv.push(session_id.as_str().to_string());
+                Ok(argv)
+            }
+            // Cursor resume: base + `--resume <chatId>`。
+            Provider::CursorAgent => {
+                let mut argv = cursor_agent_base_command(
+                    self,
+                    auth_mode,
+                    mcp_config,
+                    system_prompt,
+                    model,
+                    tools,
+                    false,
+                    None,
+                )?;
+                // Put --resume immediately after `agent` so the CLI treats it as
+                // the session mode rather than a trailing flag after --workspace.
+                argv.insert(1, "--resume".to_string());
+                argv.insert(2, session_id.as_str().to_string());
+                Ok(argv)
+            }
             Provider::GeminiCli | Provider::Fake => Err(ProviderError::ResumeUnavailable(format!(
                 "{} resume requires session_id",
                 provider_wire(self.provider)
@@ -801,6 +919,54 @@ impl ProviderAdapter for BasicProviderAdapter {
                 argv.push(session_id.as_str().to_string());
                 Ok(CommandPlan::argv_only(argv))
             }
+            Provider::Grok => {
+                let Some(session_id) = session_id else {
+                    return Err(ProviderError::ResumeUnavailable(
+                        "resume requires session_id".to_string(),
+                    ));
+                };
+                let mut argv = grok_base_command(
+                    self,
+                    ctx.auth_mode,
+                    ctx.mcp_config,
+                    ctx.system_prompt,
+                    ctx.model,
+                    ctx.tools,
+                    ctx.profile_launch
+                        .is_some_and(|profile| profile.managed_mcp_config),
+                    ctx.effort,
+                )?;
+                argv.push("--resume".to_string());
+                argv.push(session_id.as_str().to_string());
+                Ok(CommandPlan::argv_only(argv))
+            }
+            Provider::CursorAgent => {
+                let Some(session_id) = session_id else {
+                    return Err(ProviderError::ResumeUnavailable(
+                        "cursor_agent resume requires chatId; empty --resume is forbidden (picker)".to_string(),
+                    ));
+                };
+                let raw = session_id.as_str();
+                if raw.is_empty() || raw.contains('/') || raw.contains('\\') || raw.contains('\0') {
+                    return Err(ProviderError::ResumeUnavailable(
+                        "cursor_agent resume rejected forged or empty chatId".to_string(),
+                    ));
+                }
+                let mut argv = cursor_agent_base_command(
+                    self,
+                    ctx.auth_mode,
+                    ctx.mcp_config,
+                    ctx.system_prompt,
+                    ctx.model,
+                    ctx.tools,
+                    ctx.profile_launch
+                        .is_some_and(|profile| profile.managed_mcp_config),
+                    ctx.effort,
+                )?;
+                argv.push("--resume".to_string());
+                argv.push(raw.to_string());
+                Ok(CommandPlan::argv_only(argv))
+            }
             _ => self
                 .build_resume_command_with_context(
                     session_id,
@@ -882,7 +1048,27 @@ impl ProviderAdapter for BasicProviderAdapter {
             Provider::Copilot => Err(ProviderError::CapabilityUnsupported(
                 "copilot CLI 无 fork 旗标,session-store 不支持 branched continuation".to_string(),
             )),
-            Provider::GeminiCli | Provider::Fake => {
+            // Grok fork: base + 新 `--session-id` + `--resume <src>` + `--fork-session`
+            // (grok help: --fork-session 需配合 --resume/--continue)。
+            Provider::Grok => {
+                let mut argv = grok_base_command(
+                    self,
+                    auth_mode,
+                    mcp_config,
+                    system_prompt,
+                    model,
+                    tools,
+                    false,
+                    None,
+                )?;
+                argv.push("--session-id".to_string());
+                argv.push(next_session_token());
+                argv.push("--resume".to_string());
+                argv.push(session_id.as_str().to_string());
+                argv.push("--fork-session".to_string());
+                Ok(argv)
+            }
+            Provider::CursorAgent | Provider::GeminiCli | Provider::Fake => {
                 Err(ProviderError::CapabilityUnsupported(format!(
                     "{} does not support native session fork",
                     provider_wire(self.provider)
@@ -1006,6 +1192,30 @@ impl ProviderAdapter for BasicProviderAdapter {
                     managed_mcp_config: profile.managed_mcp_config,
                 })
             }
+            Provider::Grok => {
+                let Some(session_id) = session_id else {
+                    return Err(ProviderError::ResumeUnavailable(
+                        "fork requires session_id".to_string(),
+                    ));
+                };
+                let mut argv = grok_base_command(
+                    self,
+                    ctx.auth_mode,
+                    ctx.mcp_config,
+                    ctx.system_prompt,
+                    ctx.model,
+                    ctx.tools,
+                    ctx.profile_launch
+                        .is_some_and(|profile| profile.managed_mcp_config),
+                    ctx.effort,
+                )?;
+                argv.push("--session-id".to_string());
+                argv.push(next_session_token());
+                argv.push("--resume".to_string());
+                argv.push(session_id.as_str().to_string());
+                argv.push("--fork-session".to_string());
+                Ok(CommandPlan::argv_only(argv))
+            }
             _ => self
                 .fork_with_context(
                     session_id,
@@ -1061,9 +1271,17 @@ impl ProviderAdapter for BasicProviderAdapter {
                 r"working|processing",
                 r"Error|panic",
             ),
-            Provider::GeminiCli | Provider::Fake => {
+            // Grok: 暂无专有 status 正则, 沿用 generic。
+            Provider::Grok | Provider::GeminiCli | Provider::Fake => {
                 patterns(r">", r"working|processing", r"Error|Traceback")
             }
+            // Cursor: U-15 未过前不得用 generic `>` 单独判已证实 idle。
+            // 字面量 `cursor-idle-unset-until-u15` 不会出现在屏上。
+            Provider::CursorAgent => patterns(
+                r"cursor-idle-unset-until-u15",
+                r"cursor-busy-unset-until-u15",
+                r"Error|Traceback",
+            ),
         }
     }
 
@@ -1164,7 +1382,9 @@ pub(crate) fn json_inline(value: &serde_json::Value) -> String {
 use super::adapters::claude::{claude_base_command, claude_launch_command};
 use super::adapters::codex::codex_base_command;
 use super::adapters::copilot::{copilot_base_command, copilot_base_command_resume};
+use super::adapters::cursor_agent::cursor_agent_base_command;
 use super::adapters::fake::fake_worker_command;
+use super::adapters::grok::{grok_base_command, grok_launch_command};
 
 /// Contract C / MUST-8: the per-worker Team Agent MCP server config used by Claude
 /// (`--mcp-config`) and Codex (`-c mcp_servers.*` injection). Placeholders
@@ -1249,9 +1469,16 @@ pub(crate) fn next_session_token() -> String {
 #[cfg(test)]
 mod fork_materialization_source_guard {
     #[test]
-    fn lifecycle_uses_provider_neutral_fork_materialization_dispatch() {
+    fn lifecycle_uses_in_window_fork_not_session_file_materialization() {
         let source = include_str!("../lifecycle/launch/fork_agent.rs");
-        assert!(source.contains(".materialize_fork_backing("));
+        assert!(
+            source.contains("in_window_fork(") && source.contains("inject_clean_command"),
+            "fork must stay on the shared in-window inject path"
+        );
+        assert!(
+            !source.contains(".materialize_fork_backing("),
+            "session-file fork materialization must stay gone"
+        );
         assert!(!source.contains("materialize_codex_fork"));
         assert!(!source.contains("codex_fork"));
     }

package/crates/team-agent/src/provider/adapters/claude.rs

@@ -8,7 +8,7 @@
 //! resolver (`claude_context_model`) stay in `adapter.rs`; capture scanning
 //! helpers now live under `provider/session_scan/claude.rs`.
 
-use crate::model::enums::AuthMode;
+use crate::model::enums::{AuthMode, Provider};
 use crate::provider::adapter::{next_session_token, prompt_needs_native_mcp, BasicProviderAdapter};
 use crate::provider::{McpConfig, ProviderAdapter, ProviderError};
 
@@ -49,7 +49,10 @@ pub(crate) fn claude_base_command(
 ) -> Result<Vec<String>, ProviderError> {
     let mut argv = vec!["claude".to_string()];
     if claude_dangerous_auto_approve(tools) {
-        argv.push("--dangerously-skip-permissions".to_string());
+        // 0.5.66 bypass 单源:flag 由 provider_bypass_flag 表供给(单源)。
+        let flag = crate::provider::bypass_flags::provider_bypass_flag(Provider::Claude)
+            .expect("claude provider must define a bypass flag");
+        argv.push(flag.to_string());
     } else {
         argv.push("--permission-mode".to_string());
         argv.push("default".to_string());

package/crates/team-agent/src/provider/adapters/codex.rs

@@ -6,7 +6,7 @@
 //! `json_inline` stays in `adapter.rs` because it is also used by other
 //! sites; this file reaches it via `super::*`.
 
-use crate::model::enums::AuthMode;
+use crate::model::enums::{AuthMode, Provider};
 use crate::provider::adapter::json_inline;
 use crate::provider::{McpConfig, ProviderCommandOverrides};
 
@@ -41,7 +41,10 @@ pub(crate) fn codex_base_command(
         argv.push(profile.to_string());
     }
     if codex_dangerous_auto_approve(tools) {
-        argv.push("--dangerously-bypass-approvals-and-sandbox".to_string());
+        // 0.5.66 bypass 单源:flag 由 provider_bypass_flag 表供给。
+        let flag = crate::provider::bypass_flags::provider_bypass_flag(Provider::Codex)
+            .expect("codex provider must define a bypass flag");
+        argv.push(flag.to_string());
     } else {
         argv.push("--sandbox".to_string());
         argv.push(codex_sandbox_mode(tools).to_string());

package/crates/team-agent/src/provider/adapters/copilot.rs

@@ -7,7 +7,7 @@
 //! translation. Auth hint (`copilot_auth_hint`) stays in `adapter.rs`;
 //! session-store scanning lives under `provider/session_scan/copilot.rs`.
 
-use crate::model::enums::AuthMode;
+use crate::model::enums::{AuthMode, Provider};
 use crate::provider::McpConfig;
 
 pub(crate) fn copilot_base_command(
@@ -29,7 +29,10 @@ pub(crate) fn copilot_base_command(
         "--disable-builtin-mcps".to_string(),
     ];
     if copilot_dangerous_auto_approve(tools) {
-        argv.push("--allow-all".to_string());
+        // 0.5.66 bypass 单源:flag 由 provider_bypass_flag 表供给。
+        let flag = crate::provider::bypass_flags::provider_bypass_flag(Provider::Copilot)
+            .expect("copilot provider must define a bypass flag");
+        argv.push(flag.to_string());
     } else {
         for flag in copilot_permission_flags(tools) {
             argv.push(flag);

package/crates/team-agent/src/provider/adapters/cursor_agent.rs

@@ -0,0 +1,86 @@
+//! ---
+//! purpose: Cursor agent CLI argv；role 走 .cursor/rules，MCP 走 mcp.json overlay
+//! contract:
+//!   provides:
+//!     - name: cursor_agent_base_command
+//!       what: 只组已实测文档化 flag；mcp_config 不入 argv，由 launch overlay 写盘
+//! boundary:
+//!   - 不调未文档化 flag（--system-prompt / --allowed-tools）
+//!   - 不写 grok 那种 cwd 独占闸
+//!   - 不打印代理值
+//! maturity: wired
+//! ---
+//!
+//! Cursor `agent` CLI（与 `cursor-agent` 同二进制）。主路径与
+//! `.team/scripts/cursor_seat.sh` 实测一致：
+//!   `--trust --sandbox disabled --workspace <物理路径> [--force] [--model]`
+//! Role 不入 argv，写 `<workspace>/.cursor/rules/*.mdc` + `alwaysApply: true`。
+//! MCP 无 `--mcp-config`；身份必须写进 `.cursor/mcp.json` 的 env 表
+//! （cursor 不把父进程 TEAM_AGENT_* 传给 MCP 子进程）。
+//!
+//! 隐藏 flag `--system-prompt` / `--allowed-tools` 实测存在但 help 未列，
+//! 随时可能消失。可以在注释里记录，代码里不许调。
+//! `--allowed-tools` 正反行为未验证，不写「支持工具白名单」。
+
+use crate::model::enums::AuthMode;
+use crate::provider::adapter::BasicProviderAdapter;
+use crate::provider::{McpConfig, ProviderError};
+
+pub(crate) fn cursor_agent_launch_command(
+    adapter: &BasicProviderAdapter,
+    auth_mode: AuthMode,
+    mcp_config: Option<&McpConfig>,
+    system_prompt: Option<&str>,
+    model: Option<&str>,
+    tools: &[&str],
+) -> Result<Vec<String>, ProviderError> {
+    cursor_agent_base_command(
+        adapter,
+        auth_mode,
+        mcp_config,
+        system_prompt,
+        model,
+        tools,
+        false,
+        None,
+    )
+}
+
+pub(crate) fn cursor_agent_base_command(
+    adapter: &BasicProviderAdapter,
+    auth_mode: AuthMode,
+    mcp_config: Option<&McpConfig>,
+    system_prompt: Option<&str>,
+    model: Option<&str>,
+    tools: &[&str],
+    managed_mcp_config: bool,
+    effort: Option<crate::model::enums::ProviderEffort>,
+) -> Result<Vec<String>, ProviderError> {
+    let mut argv = vec!["agent".to_string()];
+    // --trust 跳过 Workspace Trust 闸（已实测）。无此 flag 会停在 Do you trust。
+    argv.push("--trust".to_string());
+    if cursor_agent_dangerous_auto_approve(tools) {
+        argv.push("--force".to_string());
+    }
+    // 与 cursor_seat.sh 主路径一致。沙箱实际隔离面未再拆，但 flag 本身已实测。
+    argv.push("--sandbox".to_string());
+    argv.push("disabled".to_string());
+    if let Some(model) = model {
+        argv.push("--model".to_string());
+        argv.push(model.to_string());
+    }
+    // Cursor `--effort` flag 不存在；框架在调用方丢掉 effort。绝不发明 flag。
+    let _ = effort;
+    // system_prompt 不入 argv（help 无 --rules / --append-system-prompt）。
+    // launch 写 `<workspace>/.cursor/rules/team-agent-role-<agent_id>.mdc`。
+    // mcp_config 也不入 argv（无 --mcp-config）。launch 写 `.cursor/mcp.json`
+    // 并 `agent mcp enable team_orchestrator`。这里收下以免静默丢弃。
+    let _ = (adapter, auth_mode, mcp_config, managed_mcp_config, system_prompt);
+    argv.push("--workspace".to_string());
+    argv.push("{workspace}".to_string());
+    Ok(argv)
+}
+
+pub(crate) fn cursor_agent_dangerous_auto_approve(tools: &[&str]) -> bool {
+    tools.contains(&"dangerous_auto_approve")
+}

package/crates/team-agent/src/provider/adapters/grok.rs

@@ -0,0 +1,157 @@
+//!
+//! purpose: Grok CLI argv + permission deny 映射；MCP 不走 CLI flag
+//! contract: launch 写 `<cwd>/.grok/config.toml`；未登录 / 目录未信任必须拒绝启动。
+//!   角色缺 model 必须拒绝启动（禁止内建 / team / CLI 任何隐式默认）。
+//!   未知工具映射记成 Unsupported，不发明 deny 名
+//! mcp_injection: dir_scoped —— 每席必须独立工作目录；同 cwd 多席会静默串台，故拒绝。
+//!   对照 claude/codex 是 argv 作用域（`--mcp-config`），同目录多席没有这个问题。
+//!   本版 exclusive 检查不读 per-agent cwd，一个 workspace 只支持一个 grok 席。
+//!   这是 Provider::Grok 的能力边界，不是框架对所有 provider 的限制。
+//! boundary: 只服务 Provider::Grok。不改 claude/codex/copilot 路径
+//!
+//! Grok CLI provider-local command builders + permission helpers.
+//!
+//! Mirrors `adapters/claude.rs` (0.5.67 provider-adapter step). Pure
+//! flag-name adaptation over the claude skeleton — no new abstraction
+//! layers, no public-API changes outside the provider dispatch.
+//!
+//! Grok CLI flag map (亲核 attest 0.5.67 + grok-full-help.txt):
+//!   bypass  → `--always-approve`  ("Auto-approve all tool executions")
+//!   system  → `--rules <RULES>`   ("Extra rules to append to the system prompt")
+//!   model   → `-m, --model <MODEL>`
+//!   session → `-s, --session-id <SESSION_ID>` (fresh spawn)
+//!   resume  → `-r, --resume [<ID_OR_TITLE>]` / `-c, --continue`
+//!   fork    → `--fork-session` (with --resume)
+//!   effort  → `--effort <level>` (alias of `--reasoning-effort`)
+//!             grok accepts low|medium|high|xhigh; CLI rejects `max`
+//!   deny    → `--disallowed-tools` (compat alias `--disallowedTools`)
+//!   cwd     → `--cwd <CWD>` / `-w, --worktree [<WORKTREE>]`
+//!
+//! No native `--mcp-config` flag on the Grok CLI (`grok mcp` is a subcommand)
+//! → `native_mcp_config: false`; MCP reaches the worker via launch-path
+//! `<cwd>/.grok/config.toml` (`apply_grok_mcp_overlay`).
+
+use crate::model::enums::AuthMode;
+use crate::provider::adapter::{next_session_token, BasicProviderAdapter};
+use crate::provider::{McpConfig, ProviderError};
+
+pub(crate) fn grok_launch_command(
+    adapter: &BasicProviderAdapter,
+    auth_mode: AuthMode,
+    mcp_config: Option<&McpConfig>,
+    system_prompt: Option<&str>,
+    model: Option<&str>,
+    tools: &[&str],
+) -> Result<Vec<String>, ProviderError> {
+    let mut argv = grok_base_command(
+        adapter,
+        auth_mode,
+        mcp_config,
+        system_prompt,
+        model,
+        tools,
+        false,
+        None,
+    )?;
+    argv.push("--session-id".to_string());
+    argv.push(next_session_token());
+    Ok(argv)
+}
+
+pub(crate) fn grok_base_command(
+    adapter: &BasicProviderAdapter,
+    auth_mode: AuthMode,
+    mcp_config: Option<&McpConfig>,
+    system_prompt: Option<&str>,
+    model: Option<&str>,
+    tools: &[&str],
+    managed_mcp_config: bool,
+    effort: Option<crate::model::enums::ProviderEffort>,
+) -> Result<Vec<String>, ProviderError> {
+    let mut argv = vec!["grok".to_string()];
+    if grok_dangerous_auto_approve(tools) {
+        argv.push("--always-approve".to_string());
+    }
+    let model = match model.map(str::trim).filter(|value| !value.is_empty()) {
+        Some(model) => model,
+        None => {
+            return Err(ProviderError::Command(
+                "grok launch requires an explicit model. \
+Without an explicit model the framework fills a built-in default (grok-4 for grok), \
+so the seat silently gets a model and context window that are not in the role file, \
+while argv still looks normal. The role file must name the model itself; \
+built-in defaults, team-level defaults, and the Grok CLI global default are all implicit sources. \
+Set the role front-matter field, for example:\n\
+model: grok-4.6"
+                    .to_string(),
+            ));
+        }
+    };
+    argv.push("--model".to_string());
+    argv.push(model.to_string());
+    if let Some(effort) = effort {
+        // Grok accepts `--effort` as alias for `--reasoning-effort`.
+        argv.push("--effort".to_string());
+        argv.push(effort.as_str().to_string());
+    }
+    if let Some(prompt) = system_prompt {
+        argv.push("--rules".to_string());
+        argv.push(prompt.to_string());
+    }
+    // Grok CLI has no `--mcp-config` flag — the claude inline-MCP block is
+    // intentionally absent. Launch writes `<cwd>/.grok/config.toml`.
+    let _ = (adapter, auth_mode, mcp_config, managed_mcp_config);
+    for tool in grok_disallowed_tools(tools) {
+        argv.push("--disallowedTools".to_string());
+        argv.push(tool.to_string());
+    }
+    Ok(argv)
+}
+
+pub(crate) fn grok_dangerous_auto_approve(tools: &[&str]) -> bool {
+    tools.contains(&"dangerous_auto_approve")
+}
+
+pub(crate) fn grok_disallowed_tools(tools: &[&str]) -> Vec<&'static str> {
+    let mut disallowed = Vec::new();
+    for tool in [
+        "execute_bash",
+        "fs_read",
+        "fs_write",
+        "fs_list",
+        "network",
+        "git_diff",
+        "mcp_team",
+        "provider_builtin",
+    ] {
+        if tools.contains(&tool) {
+            continue;
+        }
+        match grok_tool_mapping(tool) {
+            GrokToolMapping::Deny(names) => disallowed.extend(names),
+            GrokToolMapping::Unsupported | GrokToolMapping::Bypass => {}
+        }
+    }
+    disallowed
+}
+
+/// Canonical tool → grok CLI deny names. Unknown tools stay Unsupported
+/// (no invented `--disallowedTools` token).
+pub(crate) fn grok_tool_mapping(tool: &str) -> GrokToolMapping {
+    match tool {
+        "execute_bash" => GrokToolMapping::Deny(&["Bash"]),
+        "fs_read" => GrokToolMapping::Deny(&["Read"]),
+        "fs_write" => GrokToolMapping::Deny(&["Edit", "Write", "MultiEdit", "NotebookEdit"]),
+        "fs_list" => GrokToolMapping::Deny(&["Glob", "Grep"]),
+        "dangerous_auto_approve" => GrokToolMapping::Bypass,
+        "network" | "git_diff" | "mcp_team" | "provider_builtin" => GrokToolMapping::Unsupported,
+        _ => GrokToolMapping::Unsupported,
+    }
+}
+
+#[derive(Debug, Clone, Copy, PartialEq, Eq)]
+pub(crate) enum GrokToolMapping {
+    Deny(&'static [&'static str]),
+    Bypass,
+    Unsupported,
+}

package/crates/team-agent/src/provider/adapters/mod.rs

@@ -28,3 +28,5 @@ pub(crate) mod codex;
 pub(crate) mod copilot;
 pub(crate) mod copilot_fork;
 pub(crate) mod fake;
+pub(crate) mod grok;
+pub(crate) mod cursor_agent;