Add Codex review workflows

.github/workflows/auto-codex-review.yml

@@ -0,0 +1,55 @@
+name: Auto Codex Review on PR
+
+on:
+  pull_request_target:
+    types: [opened, synchronize, reopened, ready_for_review]
+
+jobs:
+  codex-review:
+    runs-on: ubuntu-latest
+    if: github.event.pull_request.draft == false && github.actor != 'dependabot[bot]'
+    steps:
+      - name: Request Codex review
+        uses: actions/github-script@v8
+        with:
+          github-token: ${{ secrets.CODEX_PAT }}
+          script: |
+            const pullRequest = context.payload.pull_request;
+            const prNumber = pullRequest.number;
+            const event = context.payload.action;
+            const headSha = pullRequest.head.sha;
+            const requestBody = [
+              '@codex review plz',
+              '',
+              `Event: ${event}`,
+              `Commit: ${headSha}`
+            ].join('\n');
+
+            // Detect the PAT owner's login so dedup works regardless of which account owns the token
+            const { data: tokenUser } = await github.rest.users.getAuthenticated();
+            const botLogin = tokenUser.login;
+
+            const comments = await github.rest.issues.listComments({
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              issue_number: prNumber,
+              per_page: 100
+            });
+            const alreadyRequestedForCommit = comments.data.some(
+              c =>
+                c.user.login === botLogin &&
+                c.body.includes('@codex review plz') &&
+                c.body.includes(`Commit: ${headSha}`)
+            );
+            if (alreadyRequestedForCommit) {
+              console.log(`Codex review already requested for commit ${headSha}, skipping`);
+              return;
+            }
+
+            await github.rest.issues.createComment({
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              issue_number: prNumber,
+              body: requestBody
+            });
+            console.log(`Requested Codex review on PR #${prNumber} for commit ${headSha}`);

.github/workflows/codex-review.yml

@@ -0,0 +1,31 @@
+name: Codex Review
+
+on:
+  workflow_dispatch:
+    inputs:
+      pr_number:
+        description: 'PR number to review'
+        required: true
+        type: number
+
+permissions:
+  contents: read
+  issues: write
+
+jobs:
+  request-review:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Comment on PR to trigger Codex review
+        uses: actions/github-script@v8
+        with:
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+          script: |
+            const prNumber = ${{ inputs.pr_number }};
+            await github.rest.issues.createComment({
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              issue_number: prNumber,
+              body: '@codex review plz'
+            });
+            console.log(`Requested Codex review on PR #${prNumber}`);