Codex on the homelab¶

OpenAI Codex CLI + agent skills pack, managed with the golden operator shell.

What we manage¶

Piece	Location in repo	Deploy target
Agent skills (caveman, grill-me, …)	`operator/agents-skills/`	`~/.agents/skills`
Golden Linux config	`operator/codex/config.toml` + role template	`~/.codex/config.toml` (only if missing)
CLI	GitHub `rust-v*` musl binary (npm on Windows only)	`~/.local/bin/codex`

Ansible: operator-shell role tasks codex.yml (tags: codex). WSL/laptop: operator/dotfiles/bootstrap.sh. Windows: operator/codex/sync-windows.ps1.

Not committed¶

~/.codex/auth.json
MCP tokens / GitHub PATs
Host-only project trust paths (seeded minimal home trust only on fresh configs)

Host inventory (2026-07-23 sweep)¶

Host	Before	Target
Windows	npm 0.145 + rich config + 42 `~/.agents/skills`	keep config; sync skills from repo
WSL	standalone 0.144; empty `.agents`	musl binary + skills via bootstrap
infra-services	standalone present; PATH flaky; no agents skills	musl binary + skills
saltierpoop	config/auth, no binary; no agents skills	musl binary + skills
ubuncap	stale home, no binary	musl binary + skills
recordurbate	npm 0.77 (old)	bump to musl 0.145 + skills
prox + LXCs	nothing	musl binary + skills + fresh config

Owner once per host¶

codex login
# optional secret MCPs (not in git):
#   codex mcp add github -- …

Update skills pack¶

On Windows (canonical):

robocopy $env:USERPROFILE\.agents\skills operator\agents-skills /E
# review diff, commit on feature branch