fix(installer): drop nested legacy profile tables

Author: rldyourmnd

CHANGELOG.md

@@ -6,6 +6,12 @@ The format follows Keep a Changelog, and marketplace/plugin versions follow Sema
 
 ## [Unreleased]
 
+### Fixed
+
+- System Codex migration now removes nested legacy profile tables such as
+  `[profiles.rldyour-yolo.features]` from `config.toml` instead of leaving them
+  behind for doctor/runtime validation to reject.
+
 ## [1.0.0] - 2026-05-28
 
 ### Changed

scripts/install_system_codex.sh

@@ -556,6 +556,16 @@ def is_rldyour_plugin_header(header_path: list[str]) -> bool:
         and header_path[1].endswith("@rldyour-codex")
     )
 
+
+def is_managed_header(header: str, header_path: list[str]) -> bool:
+    if header in managed_headers:
+        return True
+    return (
+        len(header_path) >= 2
+        and header_path[0] == "profiles"
+        and header_path[1] in {"rldyour-safe", "rldyour-yolo"}
+    )
+
 for raw_line in existing.splitlines():
     if raw_line.strip() == SCHEMA_COMMENT:
         continue
@@ -566,7 +576,7 @@ for raw_line in existing.splitlines():
             append_managed_features()
         header = match.group(1)
         header_path = split_toml_key(header)
-        if header in managed_headers or is_rldyour_plugin_header(header_path):
+        if is_managed_header(header, header_path) or is_rldyour_plugin_header(header_path):
             skip_managed = True
             in_features = False
             in_memories = False

scripts/smoke_codex_hooks_migration.sh

@@ -146,6 +146,16 @@ EOF
       cat >"$config_path" <<'EOF'
 [features]
 use_legacy_landlock = true
+EOF
+      ;;
+    profiles_nested_legacy)
+      cat >"$config_path" <<'EOF'
+[profiles.rldyour-yolo.features]
+terminal_resize_reflow = true
+memories = true
+
+[profiles."rldyour-safe".features]
+terminal_resize_reflow = false
 EOF
       ;;
     *)
@@ -201,6 +211,8 @@ for deprecated_root_key in {
         raise SystemExit(f"{case_name}: deprecated root key was not removed: {deprecated_root_key}")
 if data.get("suppress_unstable_features_warning") is not True:
     raise SystemExit(f"{case_name}: suppress_unstable_features_warning was not enabled: {data!r}")
+if "profiles" in data:
+    raise SystemExit(f"{case_name}: legacy profiles table was not removed: {data['profiles']!r}")
 
 if case_name in {
     "table_legacy",
@@ -270,6 +282,7 @@ cases=(
   features_web_search_canonical_wins
   memories_legacy
   features_legacy_landlock
+  profiles_nested_legacy
 )
 
 for case_name in "${cases[@]}"; do