fix: codex pipeline — auto-trigger review and prevent duplicate PRs (#10)

* fix: expand codex-gate positive keywords to match Codex comment style

* fix: codex pipeline — auto-trigger review and prevent duplicate PRs

* fix: update codex-gate to use connector bot account and improve review prompt

Author: FuugaMo

.github/workflows/codex-gate.yml

@@ -23,7 +23,7 @@ jobs:
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           script: |
-            const CODEX_USER = 'FuugaMo';
+            const CODEX_USER = 'chatgpt-codex-connector';
 
             // ── Resolve PR and commit SHA ──────────────────────────────────────
             let pr, sha;
@@ -68,7 +68,7 @@ jobs:
                 // COMMENTED — parse the body for signals
                 const body = (review.body || '').toLowerCase();
                 const critical = ['critical', 'p0', 'security issue', 'breaking', 'incorrect'];
-                const positive = ['lgtm', 'no issues', 'looks good', 'no critical', 'approved'];
+                const positive = ['lgtm', 'no issues', 'looks good', 'no critical', 'approved', "didn't find any", 'no major issues', 'hooray'];
                 if (critical.some(k => body.includes(k))) {
                   state       = 'failure';
                   description = 'Codex flagged critical issues';
@@ -83,7 +83,7 @@ jobs:
               if (comment.user.login !== CODEX_USER) return;
               const body = (comment.body || '').toLowerCase();
               const critical = ['critical', 'p0', 'security issue', 'breaking', 'incorrect'];
-              const positive = ['lgtm', 'no issues', 'looks good', 'no critical', 'approved'];
+              const positive = ['lgtm', 'no issues', 'looks good', 'no critical', 'approved', "didn't find any", 'no major issues', 'hooray'];
               if (critical.some(k => body.includes(k))) {
                 state       = 'failure';
                 description = 'Codex flagged critical issues';

.github/workflows/codex-trigger.yml

@@ -0,0 +1,21 @@
+name: Trigger Codex Review
+
+on:
+  pull_request:
+    types: [opened, reopened, labeled]
+
+jobs:
+  trigger:
+    if: contains(github.event.pull_request.labels.*.name, 'auto-fix')
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/github-script@v7
+        with:
+          github-token: ${{ secrets.FUUGAMO_PAT }}
+          script: |
+            await github.rest.issues.createComment({
+              owner: context.repo.owner,
+              repo:  context.repo.repo,
+              issue_number: context.payload.pull_request.number,
+              body: '@codex Please review this PR. If you find no critical issues, reply with "LGTM". If you find critical issues, describe them clearly.',
+            });

.github/workflows/issue-label-on-pr.yml

@@ -0,0 +1,36 @@
+name: Label Issue When PR Opened
+
+on:
+  pull_request:
+    types: [opened, reopened]
+
+permissions:
+  issues: write
+  pull-requests: read
+
+jobs:
+  label-issue:
+    if: contains(github.event.pull_request.labels.*.name, 'auto-fix')
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/github-script@v7
+        with:
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+          script: |
+            const body = context.payload.pull_request.body || '';
+            const matches = body.match(/(?:closes?|fixes?|resolves?)\s+#(\d+)/gi) || [];
+            const issueNumbers = matches.map(m => parseInt(m.match(/#(\d+)/)[1]));
+
+            for (const num of issueNumbers) {
+              try {
+                await github.rest.issues.addLabels({
+                  owner: context.repo.owner,
+                  repo:  context.repo.repo,
+                  issue_number: num,
+                  labels: ['has-pr'],
+                });
+                console.log(`Labeled issue #${num} with has-pr`);
+              } catch (e) {
+                console.warn(`Could not label issue #${num}: ${e.message}`);
+              }
+            }