Prepare State Hub retirement baseline

scripts/bootstrap-env.sh

@@ -14,6 +14,7 @@ AUTHORIZE_SSH=0
 ALLOW_PLAINTEXT_STORE=0
 SKIP_GITEA=0
 SKIP_MCP=0
+SKIP_CODEX=0
 SSH_KEY="${SSH_KEY:-$HOME/.ssh/id_ed25519}"
 SSH_TARGETS=(
   "tegwick@92.205.62.239"
@@ -39,6 +40,7 @@ Options:
   --gitea-token TOKEN       Gitea token; otherwise prompted when interactive.
   --skip-gitea              Do not create or update ~/.railiance_gitea.conf.
   --skip-mcp                Do not run make register-mcp.
+  --skip-codex              Do not configure Codex sandbox networking.
   -h, --help                Show this help.
 USAGE
 }
@@ -118,6 +120,10 @@ while [ "$#" -gt 0 ]; do
       SKIP_MCP=1
       shift
       ;;
+    --skip-codex)
+      SKIP_CODEX=1
+      shift
+      ;;
     -h|--help)
       usage
       exit 0
@@ -342,6 +348,19 @@ register_mcp() {
   fi
 }
 
+configure_codex() {
+  step "Configuring Codex State Hub access"
+  if [ "$SKIP_CODEX" -eq 1 ]; then
+    warn "Skipping Codex configuration by request."
+    return
+  fi
+  local args=()
+  if [ "$DRY_RUN" -eq 1 ]; then
+    args+=(--dry-run)
+  fi
+  "$STATE_HUB_DIR/scripts/configure-codex.sh" "${args[@]}"
+}
+
 health_check() {
   step "Checking State Hub reachability"
   if curl -fsS --max-time 2 "http://127.0.0.1:8000/state/health" >/dev/null 2>&1; then
@@ -362,6 +381,7 @@ main() {
   setup_ssh_key
   write_gitea_conf
   register_mcp
+  configure_codex
   health_check
   ok "Bootstrap checks complete."
 }