fix(cloud): harden setup lifecycle and remove obsolete prompts

.codex/config.toml

@@ -15,7 +15,8 @@
 # this file does not force `model` or `model_reasoning_effort`, and Cloud agents accept
 # plain-language confirmation rather than a prompt token (see docs/agents/codex-reasoning-effort.md).
 # Cloud shell-environment exclusions (`[shell_environment_policy]`) are written to
-# `$HOME/.codex/config.toml` by `scripts/setup-codex-cloud.sh`, not committed here.
+# `$CODEX_HOME/config.toml` (default `$HOME/.codex/config.toml`) by the explicitly
+# selected legacy `scripts/setup-codex-cloud.sh`, not committed here.
 
 [mcp_servers.figma_cloud]
 url = "https://mcp.figma.com/mcp"

data/repo-awareness-snapshot.json

@@ -2634,11 +2634,6 @@
         "section": "archive",
         "catalogued": true
       },
-      {
-        "path": "docs/prompts/codex-cloud-review/2-codex-full-stack-master-prompt-review-and-stress-test.md",
-        "section": "prompts",
-        "catalogued": true
-      },
       {
         "path": "docs/superpowers/plans/2026-09-26-cpd-elevation.md",
         "section": "superpowers",
@@ -3494,11 +3489,6 @@
         "section": "plans",
         "catalogued": true
       },
-      {
-        "path": "docs/prompts/codex-cloud-review/3-codex-agents-md-companion.md",
-        "section": "prompts",
-        "catalogued": true
-      },
       {
         "path": "docs/care-plan/clinical-language-trace.md",
         "section": "care-plan",
@@ -4324,6 +4314,11 @@
         "section": "archive",
         "catalogued": true
       },
+      {
+        "path": "docs/decisions/2026-10-17-cloud-setup-repair-and-prompt-cleanup.md",
+        "section": "decisions",
+        "catalogued": true
+      },
       {
         "path": "docs/redesign/03-decision-log.md",
         "section": "redesign",
@@ -5199,11 +5194,6 @@
         "section": "audit",
         "catalogued": true
       },
-      {
-        "path": "docs/prompts/codex-cloud-review/1-codex-full-stack-master-review-prompt.md",
-        "section": "prompts",
-        "catalogued": true
-      },
       {
         "path": "docs/decisions/2026-09-25-offline-pocket-pack.md",
         "section": "decisions",

docs/README.md

@@ -265,9 +265,6 @@ Every remaining tracked document in this category (process, plus the `agents/` r
 - [prompts/codex-architecture-maintainability-ultra-review.md](prompts/codex-architecture-maintainability-ultra-review.md) — Codex Local Ultra — Architecture & Maintainability Review Orchestrator — Perform a rigorous, evidence-based Architecture and Maintainability review of this repository using multi-agent coordination.
 - [prompts/codex-cloud-design-status-semantics.md](prompts/codex-cloud-design-status-semantics.md) — Retired implementation prompt; status semantics landed, human screenshot disposition remains separate.
 - [prompts/codex-cloud-detailed-task.md](prompts/codex-cloud-detailed-task.md) — Codex Cloud detailed-task prompt — Use this prompt when assigning a substantial implementation, refactor, defect fix, or other detailed task to Codex Cloud in this repository.
-- [prompts/codex-cloud-review/1-codex-full-stack-master-review-prompt.md](prompts/codex-cloud-review/1-codex-full-stack-master-review-prompt.md) — Codex Comprehensive Full-Stack Product, Design, Architecture, Engineering, Security, Quality and Refactoring Master Prompt — Keep this master specification as a normal Markdown file, for example:
-- [prompts/codex-cloud-review/2-codex-full-stack-master-prompt-review-and-stress-test.md](prompts/codex-cloud-review/2-codex-full-stack-master-prompt-review-and-stress-test.md) — Review and Adversarial Stress Test of the Codex Full-Stack Master Prompt — The original Cursor prompt had unusually strong domain coverage and quality controls.
-- [prompts/codex-cloud-review/3-codex-agents-md-companion.md](prompts/codex-cloud-review/3-codex-agents-md-companion.md) — Codex Repository Working Agreement
 - [prompts/codex-data-database-safety-ultra-review.md](prompts/codex-data-database-safety-ultra-review.md) — Codex Local Ultra — Data & Database Safety Review Orchestrator — Perform a rigorous, evidence-based Data & Database Safety review of this repository using multi-agent coordination.
 - [prompts/codex-documentation-ownership-ultra-review.md](prompts/codex-documentation-ownership-ultra-review.md) — Codex Local Ultra — Documentation & Ownership Review Orchestrator — Perform a rigorous, evidence-based Documentation & Ownership review of this repository using multi-agent coordination.
 - [prompts/codex-functional-correctness-ultra-review.md](prompts/codex-functional-correctness-ultra-review.md) — Codex Local Ultra — Functional Correctness Review Orchestrator — Perform a rigorous, evidence-based Functional Correctness review of this repository using multi-agent coordination.
@@ -344,7 +341,7 @@ Every remaining tracked document in this category, one line each; the descriptio
 | [organisation/](organisation/)                   | The organisation map: one file per area (`systems/`), shared, not-yet-placed and ignored lists, last-read pins. Checked by `npm run check:organisation`                                                  |
 | [agents/](agents/)                               | Agent-rule reference files `AGENTS.md` delegates to by name — the full text of rules its always-loaded core only points at                                                                               |
 | [rag-behaviour/](rag-behaviour/)                 | Protected retrieval/ranking surface: behaviour map, refuted approaches, safeguards. **Read before touching ranking.**                                                                                    |
-| [prompts/](prompts/)                             | Copy/paste review prompts, including the verbatim `codex-cloud-review/` inputs                                                                                                                           |
+| [prompts/](prompts/)                             | Current task and review prompts; follow the canonical repository and Cloud operating instructions                                                                                                        |
 | [codex/](codex/)                                 | Per-lens Codex ultra-review output folders, one per review dimension                                                                                                                                     |
 | [evidence/](evidence/)                           | Captured evidence artifacts backing ledger items (reliability reports, review manifests)                                                                                                                 |
 | [audit/](audit/)                                 | Dated repo, design, accessibility, and latency audits (point-in-time)                                                                                                                                    |

docs/codex-cloud.md

@@ -20,8 +20,27 @@ profile when shell PATH ordering bypasses a shim; that child-process protection
 raw parent clean or select the legacy workflow for an unrelated current host. Raw-boundary guards
 still run before setup or maintenance mutations; follow the canonical recovery policy below.
 
+Setup writes shell exclusions to the selected `CODEX_HOME/config.toml`, falling back to
+`~/.codex/config.toml` only when `CODEX_HOME` is unset. It preserves unrelated settings and
+rejects conflicting shell policies before replacing the generated runtime profile. These
+files protect subsequent child commands; they do not remove variables from an existing parent.
+The shim installer validates all three target commands before replacing any installed wrapper,
+so an incompatible npm/npx fallback leaves the existing wrappers intact.
+This includes bundled npm/npx binaries beside Node. Setup and shim installation reject directories
+at file destinations before replacing anything. Maintenance reruns setup when shim validation
+fails, retaining the ordinary raw-boundary checks on that repair path.
+
+The Python selector removes cached virtual-environment PATH entries using literal comparisons,
+including repeated entries and home directories containing brackets or spaces. Local diagnostic
+version probes have a five-second timeout; an unresponsive tool is reported as unavailable.
+
 ## Tools and authentication
 
+Retired imported review prompts have been removed, including the old full-stack master prompt,
+its stress-test commentary and its duplicate working agreement. Use the maintained
+[detailed-task prompt](prompts/codex-cloud-detailed-task.md) and canonical operating policy for new
+work. The supported optional legacy runbook and dated audit evidence remain available.
+
 For the cross-client Desktop/CLI template versus a separately installed/authenticated workspace app,
 see [tools and providers](agents/codex-cloud-environment.md#tools-providers-and-credentials).
 Readiness comes from the current host and actual callable tools, not a recorded account tier.

docs/decisions/2026-10-17-cloud-setup-repair-and-prompt-cleanup.md

@@ -0,0 +1,17 @@
+# Decision: repair Cloud setup and remove obsolete imported prompts
+
+- **Status:** decided 2026-10-17
+- **Source:** `docs/codex-cloud.md`, find "Retired imported review prompts have been removed"
+- **Retires:** `cloud-imported-working-agreement`
+
+The owner requested setup repairs, improvements and removal of stale files. Setup now respects
+the selected Codex configuration directory and preserves an existing runtime profile when
+configuration admission fails. Shim target validation precedes wrapper replacement. The three
+old imported review inputs and their scanner exemptions are removed; retained legacy tooling
+and dated audit evidence remain. These repairs do not establish a clean raw parent environment.
+
+A follow-up audit covers cached Python PATH filtering, bundled npm/npx compatibility,
+non-file output targets, maintenance recovery after shim validation failure and bounded local
+diagnostic probes. Regression tests use temporary directories and synthetic executables.
+
+If this summary and the source ever differ, the source wins.

docs/organisation/retired-rules.json

@@ -1,6 +1,14 @@
 {
   "version": 1,
   "rules": [
+    {
+      "id": "cloud-imported-working-agreement",
+      "retired": "2026-10-17",
+      "summary": "The old imported full-stack review inputs and duplicate working agreement are removed. Use the maintained task prompt and canonical operating policy.",
+      "pattern": "Merge this content into the repository.s existing root.*AGENTS\\.md|docs/prompts/codex-full-stack-master-review\\.md|docs/prompts/codex-cloud-review/1-codex-full-stack-master-review-prompt\\.md",
+      "allowedContext": "removed|retired|historical|superseded",
+      "decision": "docs/decisions/2026-10-17-cloud-setup-repair-and-prompt-cleanup.md"
+    },
     {
       "id": "cloud-unavailable-route-defaults",
       "retired": "2026-10-16",