diff --git a/.codex/README.md b/.codex/README.md
new file mode 100644
index 0000000..f356e9b
--- /dev/null
+++ b/.codex/README.md
@@ -0,0 +1,30 @@
+# Codex Cloud Environment
+
+Use these repo-local scripts when configuring the Codex cloud environment for `useorgx/orgx-claude-code-plugin`.
+
+## Setup script
+
+```bash
+bash .codex/setup-cloud.sh
+```
+
+## Maintenance script
+
+```bash
+bash .codex/maintenance-cloud.sh
+```
+
+## Environment notes
+
+- Node 22 or newer is safe for this repository.
+- No OrgX API secrets are required for static plugin verification.
+- Keep internet access limited to the setup phase unless a task explicitly needs external services.
+
+## Verification commands
+
+```bash
+npm run typecheck
+npm run test
+npm run verify
+npm run check
+```
diff --git a/.codex/cleanup-local-worktree.sh b/.codex/cleanup-local-worktree.sh
new file mode 100755
index 0000000..1404250
--- /dev/null
+++ b/.codex/cleanup-local-worktree.sh
@@ -0,0 +1,10 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+cd "${CODEX_WORKTREE_PATH:-$(dirname "${BASH_SOURCE[0]}")/..}"
+
+if [ -f docker-compose.yml ] || [ -f docker-compose.yaml ] || [ -f compose.yml ] || [ -f compose.yaml ]; then
+  docker compose down --remove-orphans 2>/dev/null || true
+fi
+
+rm -rf .cache/tmp .next/cache .turbo .vitest .wrangler/tmp node_modules/.cache tmp
diff --git a/.codex/maintenance-cloud.sh b/.codex/maintenance-cloud.sh
new file mode 100755
index 0000000..6f14a10
--- /dev/null
+++ b/.codex/maintenance-cloud.sh
@@ -0,0 +1,11 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+cd "$(dirname "${BASH_SOURCE[0]}")/.."
+
+export CI=1
+export HUSKY=0
+export npm_config_audit=false
+export npm_config_fund=false
+
+npm ci --include=dev
diff --git a/.codex/setup-cloud.sh b/.codex/setup-cloud.sh
new file mode 100755
index 0000000..fcb999f
--- /dev/null
+++ b/.codex/setup-cloud.sh
@@ -0,0 +1,15 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+cd "$(dirname "${BASH_SOURCE[0]}")/.."
+
+export CI=1
+export HUSKY=0
+export npm_config_audit=false
+export npm_config_fund=false
+
+node --version
+npm --version
+
+npm ci --include=dev
+npm run check
diff --git a/.codex/setup-local-worktree.sh b/.codex/setup-local-worktree.sh
new file mode 100755
index 0000000..ada8e39
--- /dev/null
+++ b/.codex/setup-local-worktree.sh
@@ -0,0 +1,10 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+cd "${CODEX_WORKTREE_PATH:-$(dirname "${BASH_SOURCE[0]}")/..}"
+
+if [ -x .codex/maintenance-cloud.sh ]; then
+  bash .codex/maintenance-cloud.sh
+else
+  echo "No .codex/maintenance-cloud.sh found; skipping local worktree setup."
+fi
diff --git a/AGENTS.md b/AGENTS.md
index 5864874..76b7429 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -31,6 +31,24 @@ Build mode is the default unless explicitly switched to release mode.
 - Frontend changes: run focused desktop/mobile smoke checks for changed flows.
 - Always label verification scope explicitly: `targeted`, `partial`, or `full`.
 
+## Codex Cloud Environment
+
+Use the checked-in setup scripts when configuring this repo in Codex cloud:
+
+```bash
+bash .codex/setup-cloud.sh
+```
+
+Use this as the cached-environment maintenance script:
+
+```bash
+bash .codex/maintenance-cloud.sh
+```
+
+The setup script installs from `package-lock.json` with `npm ci --include=dev`
+and runs `npm run check`. No OrgX API secrets are required for static plugin
+verification.
+
 ## Strict Mode: Release Mode
 Release mode is required for any PR merge, tag/release, or production-impacting action.