feat: add hermes-generated ops skills

scripts/codex/check-codex-global-state.sh

@@ -12,6 +12,7 @@ CONFIG_FILE="$CODEX_HOME/config.toml"
 AGENTS_FILE="$CODEX_HOME/AGENTS.md"
 PROMPTS_DIR="$CODEX_HOME/prompts"
 SKILLS_DIR="$CODEX_HOME/skills"
+ROLE_DIR="$CODEX_HOME/agents"
 HOOKS_DIR_EXPECT="${ECC_GLOBAL_HOOKS_DIR:-$CODEX_HOME/git-hooks}"
 
 failures=0
@@ -89,12 +90,14 @@ fi
 if [[ -f "$CONFIG_FILE" ]]; then
   check_config_pattern '^multi_agent\s*=\s*true' "multi_agent is enabled"
   check_config_absent '^\s*collab\s*=' "deprecated collab flag is absent"
-  check_config_pattern '^persistent_instructions\s*=' "persistent_instructions is configured"
+  check_config_pattern '^profile\s*=\s*"full-access"' "default profile is full-access"
+  check_config_pattern '^\[profiles\.full-access\]' "profiles.full-access exists"
   check_config_pattern '^\[profiles\.strict\]' "profiles.strict exists"
   check_config_pattern '^\[profiles\.yolo\]' "profiles.yolo exists"
 
   for section in \
     'mcp_servers.github' \
+    'mcp_servers.exa' \
     'mcp_servers.memory' \
     'mcp_servers.sequential-thinking' \
     'mcp_servers.context7-mcp'
@@ -152,6 +155,26 @@ else
   fail "Skills directory missing ($SKILLS_DIR)"
 fi
 
+if [[ -d "$ROLE_DIR" ]]; then
+  missing_roles=0
+  for role_file in explorer.toml reviewer.toml docs-researcher.toml; do
+    if [[ -f "$ROLE_DIR/$role_file" ]]; then
+      :
+    else
+      printf '  - missing agent role config: %s\n' "$role_file"
+      missing_roles=$((missing_roles + 1))
+    fi
+  done
+
+  if [[ "$missing_roles" -eq 0 ]]; then
+    ok "Global Codex agent role configs are present"
+  else
+    fail "$missing_roles required agent role configs are missing"
+  fi
+else
+  fail "Agent role config directory missing ($ROLE_DIR)"
+fi
+
 if [[ -f "$PROMPTS_DIR/ecc-prompts-manifest.txt" ]]; then
   ok "Command prompts manifest exists"
 else

scripts/sync-ecc-to-codex.sh

@@ -28,6 +28,8 @@ CONFIG_FILE="$CODEX_HOME/config.toml"
 AGENTS_FILE="$CODEX_HOME/AGENTS.md"
 AGENTS_ROOT_SRC="$REPO_ROOT/AGENTS.md"
 AGENTS_CODEX_SUPP_SRC="$REPO_ROOT/.codex/AGENTS.md"
+ROLE_CONFIG_SRC="$REPO_ROOT/.codex/agents"
+ROLE_CONFIG_DEST="$CODEX_HOME/agents"
 SKILLS_SRC="$REPO_ROOT/.agents/skills"
 SKILLS_DEST="$CODEX_HOME/skills"
 PROMPTS_SRC="$REPO_ROOT/commands"
@@ -131,6 +133,7 @@ MCP_MERGE_SCRIPT="$REPO_ROOT/scripts/codex/merge-mcp-config.js"
 
 require_path "$REPO_ROOT/AGENTS.md" "ECC AGENTS.md"
 require_path "$AGENTS_CODEX_SUPP_SRC" "ECC Codex AGENTS supplement"
+require_path "$ROLE_CONFIG_SRC" "ECC Codex agent config directory"
 require_path "$SKILLS_SRC" "ECC skills directory"
 require_path "$PROMPTS_SRC" "ECC commands directory"
 require_path "$HOOKS_INSTALLER" "ECC global git hooks installer"
@@ -245,6 +248,17 @@ for skill_dir in "$SKILLS_SRC"/*; do
   skills_count=$((skills_count + 1))
 done
 
+log "Syncing ECC Codex agent role configs"
+run_or_echo "mkdir -p \"$ROLE_CONFIG_DEST\""
+role_count=0
+for role_file in "$ROLE_CONFIG_SRC"/*.toml; do
+  [[ -f "$role_file" ]] || continue
+  role_name="$(basename "$role_file")"
+  dest="$ROLE_CONFIG_DEST/$role_name"
+  run_or_echo "cp \"$role_file\" \"$dest\""
+  role_count=$((role_count + 1))
+done
+
 log "Generating prompt files from ECC commands"
 run_or_echo "mkdir -p \"$PROMPTS_DEST\""
 manifest="$PROMPTS_DEST/ecc-prompts-manifest.txt"
@@ -470,21 +484,22 @@ fi
 
 log "Installing global git safety hooks"
 if [[ "$MODE" == "dry-run" ]]; then
-  "$HOOKS_INSTALLER" --dry-run
+  bash "$HOOKS_INSTALLER" --dry-run
 else
-  "$HOOKS_INSTALLER"
+  bash "$HOOKS_INSTALLER"
 fi
 
 log "Running global regression sanity check"
 if [[ "$MODE" == "dry-run" ]]; then
-  printf '[dry-run] %s\n' "$SANITY_CHECKER"
+  printf '[dry-run] bash %s\n' "$SANITY_CHECKER"
 else
-  "$SANITY_CHECKER"
+  bash "$SANITY_CHECKER"
 fi
 
 log "Sync complete"
 log "Backup saved at: $BACKUP_DIR"
 log "Skills synced: $skills_count"
+log "Agent role configs synced: $role_count"
 log "Prompts generated: $((prompt_count + extension_count)) (commands: $prompt_count, extensions: $extension_count)"
 
 if [[ "$MODE" == "apply" ]]; then