fix: repair ccsx codex profile resources

docs/codex-auth.md

@@ -10,8 +10,8 @@ refresh in one session overwrites the other's credentials.
 
 `ccsx auth` solves this by giving each account its own profile directory under
 `~/.ccs/codex-instances/<name>/`. Each profile holds its own `auth.json` and
-`history.jsonl`. A shared `config.toml` is linked via symlink so model/provider settings
-stay in sync.
+`history.jsonl`. Shared `config.toml`, `agents/`, and `skills/` resources are linked
+via symlink so model/provider settings and relative agent role config files stay in sync.
 
 ## Quick start (4 commands)
 
@@ -147,20 +147,39 @@ No OAuth tokens are ever returned by the API endpoint or shown in the UI.
         ├── auth.json            # OAuth credentials (Codex writes here)
         ├── history.jsonl        # Per-profile prompt history (optional)
         ├── sessions/            # Per-profile chat session dirs (optional)
-        └── config.toml -> ~/.codex/config.toml   (symlink — shared)
+        ├── config.toml -> ~/.codex/config.toml   (symlink — shared)
+        ├── agents/ -> ~/.codex/agents/           (symlink — shared)
+        └── skills/ -> ~/.codex/skills/           (symlink — shared)
 
 ~/.codex/
-└── config.toml                  # Single shared model/provider config
+├── config.toml                  # Single shared model/provider config
+├── agents/                      # Shared Codex agent role config files
+└── skills/                      # Shared Codex skills
 ```
 
+`ccsx auth create <name>` and `ccsx <name>` both repair these links idempotently.
+This keeps relative Codex config entries such as `agents/foo.toml` valid inside
+each isolated `CODEX_HOME`.
+
 ## Caveats
 
 ### Windows symlinks
 
 On Windows, creating symlinks requires Developer Mode or elevated privileges.
-If symlink creation fails, CCS falls back to copying `config.toml`. In this case,
-changes to `~/.codex/config.toml` are **not** automatically reflected in the profile —
-you must re-run `ccsx auth create <name> --force` to refresh the copy.
+If symlink creation fails, CCS falls back to copying `config.toml`, `agents/`,
+and `skills/`. In this case, changes to `~/.codex/` resources are **not**
+automatically reflected in the profile; re-run `ccsx auth create <name> --force`
+to refresh the copy.
+
+### Native Codex project-local config warnings
+
+`ccsx` preserves your current working directory. If you launch from your home directory,
+native Codex can also see `~/.codex/config.toml` as `./.codex/config.toml`, a
+project-local config file. Codex rejects user-level-only keys such as `model_providers`
+and `notify` in project-local config. That warning comes from native Codex config
+layering, not from the `ccsx auth` profile resource links. Launch from a project
+directory or move project-local Codex config out of `$HOME/.codex/config.toml` if the
+warning is noisy.
 
 ### `ccsx` vs `ccsxp`
 

docs/project-roadmap.md

@@ -1,6 +1,6 @@
 # CCS Project Roadmap
 
-Last Updated: 2026-05-19
+Last Updated: 2026-05-22
 
 Forward-looking roadmap documenting current priorities, GitHub issues, and future feature plans.
 
@@ -41,6 +41,10 @@ All major modularization work is complete. The codebase evolved from monolithic
 
 ### Recent Fixes
 
+- **2026-05-22**: **#1332** `ccsx auth` profiles now link native Codex
+  `agents/` and `skills/` resources alongside `config.toml`, and `ccsx <profile>`
+  repairs missing resource links at launch so relative agent role `config_file`
+  entries do not warn on existing profiles.
 - **2026-05-20**: **#1285** Codex model picker aliases now include `minimal` and `low` reasoning effort suffixes alongside `medium`, `high`, and `xhigh`, and the dashboard separates base recommendations, reasoning variants, and fast variants so low-effort selections such as `gpt-5.5-low` are visible.
 - **2026-05-19**: **#1252** Claude extension persistence now rejects Codex CLIProxy profiles instead of writing `ANTHROPIC_BASE_URL=/api/provider/codex` into Claude Code settings. Native Codex subscription use stays on `ccsxp` or `ccs codex --target codex`, and `ccs doctor` warns when stale Claude settings still point at the Codex translator.
 - **2026-05-18**: **#1287** `ccsx resume` now passes through to the native Codex `resume` subcommand before CCS profile detection, preserving Codex session continuation while keeping `ccsx auth` on the managed Codex profile namespace.