install writes Codex agent role TOMLs that Codex rejects as "invalid transport" (0.9.1-rc.1)

[dergachoff]

Problem

After install -y on v0.9.1-rc.1, Codex CLI 0.146.0 prints three startup warnings and drops all three generated roles:

Ignoring malformed agent role definition: failed to deserialize agent role file at ~/.codex/agents/codebase-memory[-scout|-auditor].toml: invalid transport

Evidence

Each generated profile's [mcp_servers.codebase-memory-mcp] table carries only enabled_tools — no command or url. Codex deserializes role files standalone, and its McpServerConfig requires a transport before config-layer inheritance applies, so the whole role is discarded. Current main renders the same table (src/cli/agent_profiles.c, since f0db224), and Codex rejects it identically on 0.144.0 through 0.147.0-alpha.4 — the profiles have been invalid since the feature landed, not a Codex regression.

Expected fix

Render command = "<installed cbm binary>" in each Codex role's table, keeping enabled_tools. Dropping the table instead would silence the warning but inherit the full MCP surface, defeating the per-role tool restriction. Sibling of #1387 (install summary vs. what actually lands, on a second client surface). Happy to send a small renderer + test PR.

[DeusData]

Thank you for including Codex’s exact validation error and the generated TOML. Current main emits enabled_tools for these direct role profiles without declaring a command or URL transport, which accounts for the rejection. This is a high-priority 0.9.1-rc installer bug, and PR #1408 is the active fix track.

[DeusData]

Fixed on main by your #1408, merged as e512c80 — including in-place migration of the rc.1-written transport-less role files, so existing installs heal on the next install run. This will ship in the next 0.9.1 build. Thanks again for the report + fix combo!