[codex] generate modular agent skills

.agents/skills/gog-admin/SKILL.md

@@ -0,0 +1,36 @@
+---
+name: gog-admin
+description: "Workspace Admin operations through gog."
+---
+
+# Workspace Admin
+
+<!-- Generated by scripts/gen-agent-skills.mjs; do not edit. -->
+
+Use `gog` for Workspace Admin operations. Read `../gog/SKILL.md` first for shared auth,
+output, safety, and live-write rules.
+
+## Safe start
+
+```bash
+gog auth list --check --json --no-input
+gog schema admin --json
+gog --readonly --account user@example.com admin --help
+```
+
+- Select the account explicitly with `--account`.
+- Use `--json --wrap-untrusted` for agent-readable Google content.
+- Use `--readonly` when the task must not mutate Google data.
+- Use `--no-input` in automation and `--dry-run` before supported writes.
+- Confirm the exact account, object, and mutation before any write or delete.
+
+## Commands
+
+| Command | Purpose |
+| --- | --- |
+| `groups` | Manage Workspace groups |
+| `orgunits` | Manage Workspace organizational units |
+| `users` | Manage Workspace users |
+
+Run `gog admin <command> --help` for flags and `gog schema admin <command> --json`
+for the machine-readable contract. Do not guess command syntax.

.agents/skills/gog-admin/agents/openai.yaml

@@ -0,0 +1,4 @@
+interface:
+  display_name: "gog Workspace Admin"
+  short_description: "Operate Workspace Admin safely with gog"
+  default_prompt: "Use $gog-admin to perform this Workspace Admin task safely."

.agents/skills/gog-analytics/SKILL.md

@@ -0,0 +1,35 @@
+---
+name: gog-analytics
+description: "Google Analytics operations through gog."
+---
+
+# Google Analytics
+
+<!-- Generated by scripts/gen-agent-skills.mjs; do not edit. -->
+
+Use `gog` for Google Analytics operations. Read `../gog/SKILL.md` first for shared auth,
+output, safety, and live-write rules.
+
+## Safe start
+
+```bash
+gog auth list --check --json --no-input
+gog schema analytics --json
+gog --readonly --account user@example.com analytics --help
+```
+
+- Select the account explicitly with `--account`.
+- Use `--json --wrap-untrusted` for agent-readable Google content.
+- Use `--readonly` when the task must not mutate Google data.
+- Use `--no-input` in automation and `--dry-run` before supported writes.
+- Confirm the exact account, object, and mutation before any write or delete.
+
+## Commands
+
+| Command | Purpose |
+| --- | --- |
+| `accounts` | List GA4 account summaries |
+| `report` | Run a GA4 report (Analytics Data API) |
+
+Run `gog analytics <command> --help` for flags and `gog schema analytics <command> --json`
+for the machine-readable contract. Do not guess command syntax.

.agents/skills/gog-analytics/agents/openai.yaml

@@ -0,0 +1,4 @@
+interface:
+  display_name: "gog Google Analytics"
+  short_description: "Operate Google Analytics safely with gog"
+  default_prompt: "Use $gog-analytics to perform this Google Analytics task safely."

.agents/skills/gog-appscript/SKILL.md

@@ -0,0 +1,37 @@
+---
+name: gog-appscript
+description: "Apps Script operations through gog."
+---
+
+# Apps Script
+
+<!-- Generated by scripts/gen-agent-skills.mjs; do not edit. -->
+
+Use `gog` for Apps Script operations. Read `../gog/SKILL.md` first for shared auth,
+output, safety, and live-write rules.
+
+## Safe start
+
+```bash
+gog auth list --check --json --no-input
+gog schema appscript --json
+gog --readonly --account user@example.com appscript --help
+```
+
+- Select the account explicitly with `--account`.
+- Use `--json --wrap-untrusted` for agent-readable Google content.
+- Use `--readonly` when the task must not mutate Google data.
+- Use `--no-input` in automation and `--dry-run` before supported writes.
+- Confirm the exact account, object, and mutation before any write or delete.
+
+## Commands
+
+| Command | Purpose |
+| --- | --- |
+| `content` | Get Apps Script project content |
+| `create` | Create an Apps Script project |
+| `get` | Get Apps Script project metadata |
+| `run` | Run a deployed Apps Script function |
+
+Run `gog appscript <command> --help` for flags and `gog schema appscript <command> --json`
+for the machine-readable contract. Do not guess command syntax.

.agents/skills/gog-appscript/agents/openai.yaml

@@ -0,0 +1,4 @@
+interface:
+  display_name: "gog Apps Script"
+  short_description: "Operate Apps Script safely with gog"
+  default_prompt: "Use $gog-appscript to perform this Apps Script task safely."

.agents/skills/gog-calendar/SKILL.md

@@ -0,0 +1,59 @@
+---
+name: gog-calendar
+description: "Google Calendar operations through gog."
+---
+
+# Google Calendar
+
+<!-- Generated by scripts/gen-agent-skills.mjs; do not edit. -->
+
+Use `gog` for Google Calendar operations. Read `../gog/SKILL.md` first for shared auth,
+output, safety, and live-write rules.
+
+## Safe start
+
+```bash
+gog auth list --check --json --no-input
+gog schema calendar --json
+gog --readonly --account user@example.com calendar events --today --json --wrap-untrusted
+```
+
+- Select the account explicitly with `--account`.
+- Use `--json --wrap-untrusted` for agent-readable Google content.
+- Use `--readonly` when the task must not mutate Google data.
+- Use `--no-input` in automation and `--dry-run` before supported writes.
+- Confirm the exact account, object, and mutation before any write or delete.
+
+## Commands
+
+| Command | Purpose |
+| --- | --- |
+| `acl` | List calendar ACL |
+| `alias` | Manage calendar aliases |
+| `calendars` | List calendars |
+| `colors` | Show calendar colors |
+| `conflicts` | Find busy-time overlaps across calendars |
+| `create` | Create an event |
+| `create-calendar` | Create a new secondary calendar |
+| `delete` | Delete an event |
+| `delete-calendar` | Delete an owned secondary calendar |
+| `event` | Get event |
+| `events` | List events from a calendar or all calendars |
+| `focus-time` | Create a Focus Time block |
+| `freebusy` | Get free/busy |
+| `move` | Move an event to another calendar |
+| `out-of-office` | Create an Out of Office event |
+| `propose-time` | Generate URL to propose a new meeting time (browser-only feature) |
+| `raw` | Dump raw Google Calendar API response as JSON (Events.Get; lossless; for scripting and LLM consumption) |
+| `respond` | Respond to an event invitation |
+| `search` | Search events |
+| `subscribe` | Add a calendar to your calendar list |
+| `team` | Show events for Workspace group members (service account, direct token, or ADC) |
+| `time` | Show server time |
+| `unsubscribe` | Remove a calendar from your calendar list |
+| `update` | Update an event |
+| `users` | List workspace users (use their email as calendar ID) |
+| `working-location` | Set working location (home/office/custom) |
+
+Run `gog calendar <command> --help` for flags and `gog schema calendar <command> --json`
+for the machine-readable contract. Do not guess command syntax.

.agents/skills/gog-calendar/agents/openai.yaml

@@ -0,0 +1,4 @@
+interface:
+  display_name: "gog Google Calendar"
+  short_description: "Operate Google Calendar safely with gog"
+  default_prompt: "Use $gog-calendar to perform this Google Calendar task safely."

.agents/skills/gog-chat/SKILL.md

@@ -0,0 +1,37 @@
+---
+name: gog-chat
+description: "Google Chat operations through gog."
+---
+
+# Google Chat
+
+<!-- Generated by scripts/gen-agent-skills.mjs; do not edit. -->
+
+Use `gog` for Google Chat operations. Read `../gog/SKILL.md` first for shared auth,
+output, safety, and live-write rules.
+
+## Safe start
+
+```bash
+gog auth list --check --json --no-input
+gog schema chat --json
+gog --readonly --account user@example.com chat --help
+```
+
+- Select the account explicitly with `--account`.
+- Use `--json --wrap-untrusted` for agent-readable Google content.
+- Use `--readonly` when the task must not mutate Google data.
+- Use `--no-input` in automation and `--dry-run` before supported writes.
+- Confirm the exact account, object, and mutation before any write or delete.
+
+## Commands
+
+| Command | Purpose |
+| --- | --- |
+| `dm` | Direct messages |
+| `messages` | Chat messages |
+| `spaces` | Chat spaces |
+| `threads` | Chat threads |
+
+Run `gog chat <command> --help` for flags and `gog schema chat <command> --json`
+for the machine-readable contract. Do not guess command syntax.

.agents/skills/gog-chat/agents/openai.yaml

@@ -0,0 +1,4 @@
+interface:
+  display_name: "gog Google Chat"
+  short_description: "Operate Google Chat safely with gog"
+  default_prompt: "Use $gog-chat to perform this Google Chat task safely."

.agents/skills/gog-classroom/SKILL.md

@@ -0,0 +1,46 @@
+---
+name: gog-classroom
+description: "Google Classroom operations through gog."
+---
+
+# Google Classroom
+
+<!-- Generated by scripts/gen-agent-skills.mjs; do not edit. -->
+
+Use `gog` for Google Classroom operations. Read `../gog/SKILL.md` first for shared auth,
+output, safety, and live-write rules.
+
+## Safe start
+
+```bash
+gog auth list --check --json --no-input
+gog schema classroom --json
+gog --readonly --account user@example.com classroom --help
+```
+
+- Select the account explicitly with `--account`.
+- Use `--json --wrap-untrusted` for agent-readable Google content.
+- Use `--readonly` when the task must not mutate Google data.
+- Use `--no-input` in automation and `--dry-run` before supported writes.
+- Confirm the exact account, object, and mutation before any write or delete.
+
+## Commands
+
+| Command | Purpose |
+| --- | --- |
+| `announcements` | Announcements |
+| `courses` | Courses |
+| `coursework` | Coursework |
+| `guardian-invitations` | Guardian invitations |
+| `guardians` | Guardians |
+| `invitations` | Invitations |
+| `materials` | Coursework materials |
+| `profile` | User profiles |
+| `roster` | Course roster (students + teachers) |
+| `students` | Course students |
+| `submissions` | Student submissions |
+| `teachers` | Course teachers |
+| `topics` | Topics |
+
+Run `gog classroom <command> --help` for flags and `gog schema classroom <command> --json`
+for the machine-readable contract. Do not guess command syntax.

.agents/skills/gog-classroom/agents/openai.yaml

@@ -0,0 +1,4 @@
+interface:
+  display_name: "gog Google Classroom"
+  short_description: "Operate Google Classroom safely with gog"
+  default_prompt: "Use $gog-classroom to perform this Google Classroom task safely."

.agents/skills/gog-contacts-cleanup/SKILL.md

@@ -0,0 +1,29 @@
+---
+name: gog-contacts-cleanup
+description: "Google Contacts duplicate review and guarded cleanup with gog."
+---
+
+# Contacts cleanup
+
+Read `../gog/SKILL.md` and `../gog-contacts/SKILL.md` first.
+
+1. Detect duplicates without mutation:
+
+   ```bash
+   gog --account user@example.com --readonly contacts dedupe --match email,phone,name --json --wrap-untrusted
+   ```
+
+2. Present each proposed group with resource IDs and the fields that matched. Flag conflicts in
+   names, organizations, notes, and non-empty phone/email values.
+3. Preview the exact merge plan:
+
+   ```bash
+   gog --account user@example.com contacts dedupe --resource people/ONE \
+     --resource people/TWO --apply --dry-run --json
+   ```
+
+4. Apply only explicitly approved groups. Omit `--force` unless the user requested non-interactive
+   execution after reviewing the plan.
+
+Never merge solely on a similar name. Prefer exact normalized email or phone evidence and retain
+the richest contact as the primary resource.

.agents/skills/gog-contacts-cleanup/agents/openai.yaml

@@ -0,0 +1,4 @@
+interface:
+  display_name: "gog Contacts Cleanup"
+  short_description: "Find and clean duplicate contacts safely"
+  default_prompt: "Use $gog-contacts-cleanup to inspect duplicate Google Contacts and prepare a safe cleanup plan."

.agents/skills/gog-contacts/SKILL.md

@@ -0,0 +1,44 @@
+---
+name: gog-contacts
+description: "Google Contacts operations through gog."
+---
+
+# Google Contacts
+
+<!-- Generated by scripts/gen-agent-skills.mjs; do not edit. -->
+
+Use `gog` for Google Contacts operations. Read `../gog/SKILL.md` first for shared auth,
+output, safety, and live-write rules.
+
+## Safe start
+
+```bash
+gog auth list --check --json --no-input
+gog schema contacts --json
+gog --readonly --account user@example.com contacts search alice --json --wrap-untrusted
+```
+
+- Select the account explicitly with `--account`.
+- Use `--json --wrap-untrusted` for agent-readable Google content.
+- Use `--readonly` when the task must not mutate Google data.
+- Use `--no-input` in automation and `--dry-run` before supported writes.
+- Confirm the exact account, object, and mutation before any write or delete.
+
+## Commands
+
+| Command | Purpose |
+| --- | --- |
+| `create` | Create a contact |
+| `dedupe` | Find likely duplicate contacts and optionally merge them |
+| `delete` | Delete a contact |
+| `directory` | Directory contacts |
+| `export` | Export contacts as vCard (.vcf) |
+| `get` | Get a contact |
+| `list` | List contacts |
+| `other` | Other contacts |
+| `raw` | Dump raw People API response as JSON (People.Get; lossless; for scripting and LLM consumption) |
+| `search` | Search contacts by name/email/phone |
+| `update` | Update a contact |
+
+Run `gog contacts <command> --help` for flags and `gog schema contacts <command> --json`
+for the machine-readable contract. Do not guess command syntax.

.agents/skills/gog-contacts/agents/openai.yaml

@@ -0,0 +1,4 @@
+interface:
+  display_name: "gog Google Contacts"
+  short_description: "Operate Google Contacts safely with gog"
+  default_prompt: "Use $gog-contacts to perform this Google Contacts task safely."