feat: auto-load project codex skills

Author: skulidropek

packages/app/tests/docker-git/entrypoint-auth.test.ts

@@ -79,6 +79,13 @@ describe("renderEntrypoint auth bridge", () => {
       expect(entrypoint).toContain("CLAUDE_GLOBAL_PROMPT_FILE=\"/home/dev/.claude/CLAUDE.md\"")
       expect(entrypoint).toContain("CLAUDE_AUTO_SYSTEM_PROMPT=\"${CLAUDE_AUTO_SYSTEM_PROMPT:-1}\"")
       expect(entrypoint).toContain("docker-git-managed:claude-md")
+      expect(entrypoint).toContain("docker_git_sync_project_codex_skills()")
+      expect(entrypoint).toContain('project_skills_root="$codex_home/skills/.docker-git-project"')
+      expect(entrypoint).toContain('"20-agents-skills::.agents/skills"')
+      expect(entrypoint).toContain('"30-agents-dot-skills::.agents/.skills"')
+      expect(entrypoint).toContain('"80-codex-skills::.codex/skills"')
+      expect(entrypoint).toContain('"90-codex-dot-skills::.codex/.skills"')
+      expect(entrypoint).toContain('docker_git_sync_project_codex_skills')
       expect(entrypoint).toContain(
         "SUBAGENTS_LINE=\"Для решения задач обязательно используй subagents. Сам агент обязан выполнять финальную проверку, интеграцию и валидацию результата перед ответом пользователю.\""
       )

packages/lib/src/core/templates-entrypoint.ts

@@ -15,6 +15,7 @@ import { renderEntrypointClaudeConfig } from "./templates-entrypoint/claude.js"
 import {
   renderEntrypointAgentsNotice,
   renderEntrypointCodexHome,
+  renderEntrypointProjectCodexSkillsSync,
   renderEntrypointCodexResumeHint,
   renderEntrypointCodexSharedAuth,
   renderEntrypointMcpPlaywright
@@ -51,6 +52,7 @@ export const renderEntrypoint = (config: TemplateConfig): string =>
     renderEntrypointInputRc(config),
     renderEntrypointZshConfig(),
     renderEntrypointCodexResumeHint(config),
+    renderEntrypointProjectCodexSkillsSync(config),
     renderEntrypointAgentsNotice(config),
     renderEntrypointDockerSocket(config),
     renderEntrypointGitConfig(config),

packages/lib/src/core/templates-entrypoint/codex.ts

@@ -121,6 +121,53 @@ export const renderEntrypointMcpPlaywright = (config: TemplateConfig): string =>
     .replaceAll("__CODEX_HOME__", config.codexHome)
     .replaceAll("__SERVICE_NAME__", config.serviceName)
 
+const entrypointProjectCodexSkillsSyncTemplate = String.raw`# Mirror project-owned Codex skill trees into CODEX_HOME without overwriting global skills.
+docker_git_sync_project_codex_skills() {
+  local codex_home="${"$"}{CODEX_HOME:-__CODEX_HOME__}"
+  local project_dir="${"$"}{TARGET_DIR:-}"
+  local project_skills_root="$codex_home/skills/.docker-git-project"
+  local linked=0
+  local spec=""
+  local mount_name=""
+  local relative_path=""
+
+  if [[ -z "$project_dir" || ! -d "$project_dir" ]]; then
+    return 0
+  fi
+
+  mkdir -p "$codex_home/skills"
+  rm -rf "$project_skills_root"
+  mkdir -p "$project_skills_root"
+
+  # Priority goes from generic -> shared agent dirs -> agent-specific Codex dirs.
+  for spec in \
+    "10-root-skills::.skills" \
+    "20-agents-skills::.agents/skills" \
+    "30-agents-dot-skills::.agents/.skills" \
+    "40-claude-skills::.claude/skills" \
+    "50-claude-dot-skills::.claude/.skills" \
+    "80-codex-skills::.codex/skills" \
+    "90-codex-dot-skills::.codex/.skills"; do
+    mount_name="${"$"}{spec%%::*}"
+    relative_path="${"$"}{spec#*::}"
+
+    if [[ -d "$project_dir/$relative_path" ]]; then
+      ln -sfn "$project_dir/$relative_path" "$project_skills_root/$mount_name"
+      chown -h 1000:1000 "$project_skills_root/$mount_name" 2>/dev/null || true
+      linked=1
+    fi
+  done
+
+  chown 1000:1000 "$codex_home/skills" "$project_skills_root" 2>/dev/null || true
+
+  if [[ "$linked" -eq 1 ]]; then
+    echo "[codex-skills] linked project skill trees into $project_skills_root"
+  fi
+}`
+
+export const renderEntrypointProjectCodexSkillsSync = (config: TemplateConfig): string =>
+  entrypointProjectCodexSkillsSyncTemplate.replaceAll("__CODEX_HOME__", config.codexHome)
+
 const entrypointAgentsNoticeTemplate = String.raw`# Ensure global AGENTS.md exists for container context
 AGENTS_PATH="__CODEX_HOME__/AGENTS.md"
 LEGACY_AGENTS_PATH="/home/__SSH_USER__/AGENTS.md"

packages/lib/src/core/templates-entrypoint/tasks.ts

@@ -221,5 +221,9 @@ ${renderEntrypointAutoUpdate()}
 
 ${renderEntrypointClone(config)}
 
+if [[ "$CLONE_OK" -eq 1 ]]; then
+  docker_git_sync_project_codex_skills
+fi
+
 ${renderAgentLaunch(config)}
 ) &`

packages/lib/tests/usecases/apply.test.ts

@@ -153,6 +153,10 @@ describe("applyProjectFiles", () => {
         expect(composeAfter).toContain("cpus:")
         expect(composeAfter).toContain('mem_limit: "')
 
+        const entrypointAfter = yield* _(fs.readFileString(path.join(outDir, "entrypoint.sh")))
+        expect(entrypointAfter).toContain("docker_git_sync_project_codex_skills()")
+        expect(entrypointAfter).toContain('"20-agents-skills::.agents/skills"')
+
         const configAfter = yield* _(fs.readFileString(configPath))
         expect(configAfter).toContain('"cpuLimit": "30%"')
         expect(configAfter).toContain('"ramLimit": "30%"')

packages/lib/tests/usecases/prepare-files.test.ts

@@ -175,6 +175,11 @@ describe("prepareProjectFiles", () => {
         expect(entrypoint).toContain('. /etc/profile 2>/dev/null || true;')
         expect(entrypoint).toContain("codex exec")
         expect(entrypoint).not.toContain("codex --approval-mode full-auto")
+        expect(entrypoint).toContain("docker_git_sync_project_codex_skills()")
+        expect(entrypoint).toContain('project_skills_root="$codex_home/skills/.docker-git-project"')
+        expect(entrypoint).toContain('"10-root-skills::.skills"')
+        expect(entrypoint).toContain('"20-agents-skills::.agents/skills"')
+        expect(entrypoint).toContain('"90-codex-dot-skills::.codex/.skills"')
         expect(entrypoint).toContain("docker_git_repair_dns() {")
         expect(entrypoint).toContain('local test_domain="github.com"')
         expect(entrypoint).toContain('local fallback_dns="8.8.8.8 8.8.4.4 1.1.1.1"')
@@ -186,6 +191,7 @@ describe("prepareProjectFiles", () => {
         expect(entrypoint).toContain("cat > \"$MOVE_SCRIPT\" << 'EOFMOVE'")
         expect(entrypoint).toMatch(/\nEOFMOVE\n\s*chmod \+x "\$MOVE_SCRIPT"/)
         expect(entrypoint).not.toContain("\n  EOFMOVE\n")
+        expect(entrypoint).toContain("if [[ \"$CLONE_OK\" -eq 1 ]]; then\n  docker_git_sync_project_codex_skills\nfi")
         expect(composeBefore).toContain("container_name: dg-test")
         expect(composeBefore).toContain("restart: unless-stopped")
         expect(composeBefore).toContain(":/home/dev/.docker-git")