diff --git a/.codex/environments/environment.toml b/.codex/environments/environment.toml
new file mode 100644
index 000000000..a068f80ef
--- /dev/null
+++ b/.codex/environments/environment.toml
@@ -0,0 +1,75 @@
+# THIS IS AUTOGENERATED. DO NOT EDIT MANUALLY
+version = 1
+name = "executor"
+
+[setup]
+script = '''
+source_root="/home/rhys/executor"
+reference_source="$source_root/.reference"
+
+if [ -d "$reference_source" ]; then
+  if [ -L .reference ]; then
+    if [ "$(readlink .reference)" != "$reference_source" ]; then
+      ln -sfn "$reference_source" .reference
+    fi
+  elif [ ! -e .reference ]; then
+    ln -s "$reference_source" .reference
+  else
+    echo ".reference already exists; leaving it in place" >&2
+  fi
+fi
+
+find "$source_root" \
+  \( \
+    -name ".git" \
+    -o -name ".reference" \
+    -o -name "node_modules" \
+    -o -name ".turbo" \
+    -o -name ".wrangler" \
+    -o -name ".dev-db" \
+    -o -name "dist" \
+    -o -name "build" \
+    -o -name ".output" \
+  \) -prune \
+  -o -type f \
+  \( -name ".env" -o -name ".env.*" -o -name ".dev.vars" \) \
+  ! -name "*.example" \
+  ! -name "*.sample" \
+  ! -name "*.template" \
+  ! -name ".envrc" \
+  ! -name ".envrc.*" \
+  -print |
+while IFS= read -r source_file; do
+  relative_path="${source_file#"$source_root"/}"
+  target_file="./$relative_path"
+  target_dir="$(dirname "$target_file")"
+
+  if [ -e "$target_file" ]; then
+    continue
+  fi
+
+  mkdir -p "$target_dir"
+  cp -p "$source_file" "$target_file"
+done
+
+git_common_dir="$(git rev-parse --git-common-dir 2>/dev/null || true)"
+if [ -n "$git_common_dir" ] && [ -d "$git_common_dir/info" ]; then
+  touch "$git_common_dir/info/exclude"
+  if ! grep -qxF ".reference" "$git_common_dir/info/exclude"; then
+    printf "\n.reference\n" >> "$git_common_dir/info/exclude"
+  fi
+fi
+'''
+
+[[actions]]
+name = "Run"
+icon = "run"
+command = "bun i"
+
+[[actions]]
+name = "Run Local Server"
+icon = "tool"
+command = '''
+cd apps/local
+bun dev
+'''
diff --git a/.gitignore b/.gitignore
index 7e12161e7..60820a211 100644
--- a/.gitignore
+++ b/.gitignore
@@ -66,11 +66,15 @@ executor.jsonc
 .vscode/mcp.json
 
 # reference repos (pulled via `bun run pull:references`)
+.reference
 .reference/
 .worktrees/
 
 .mcp.json
-.codex/
+.codex/*
+!.codex/environments/
+.codex/environments/*
+!.codex/environments/environment.toml
 
 # Warden local scan outputs
 .warden/