fix: throttle Codex auto-resolve workflow

[BigSimmo]

Summary

• change Codex auto-resolve dedupe from per-head-SHA to per-PR
• skip auto-resolve request comments so the workflow cannot re-trigger itself
• treat token comment 403s as a non-fatal skip

Verification

• git diff --check

Notes

• This is intentionally minimal because PR docs: add Codex review throttling protocol #439 is self-mutating and repeatedly canceling checks before it can merge.

[supabase]

This pull request has been ignored for the connected project sjrfecxgysukkwxsowpy because there are no changes detected in supabase directory. You can change this behaviour in Project Integrations Settings ↗︎.

---

Preview Branches by Supabase.
Learn more about Supabase Branching ↗︎.

[coderabbitai]

📝 Walkthrough

Walkthrough

Updates the Codex auto-resolve review-comment workflow to scope concurrency and deduplication by pull request number instead of head SHA, skip comments that already resemble auto-resolve requests, update duplicate-notice text, and guard comment creation against HTTP 403 errors. AGENTS.md guidance is updated to match.

Changes

Codex Auto-Resolve Workflow Update

Layer / File(s)	Summary
Concurrency scoping and dedup marker by PR number .github/workflows/codex-autofix-review-comments.yml	Concurrency group key and deduplication marker are switched from PR head SHA to PR number, with an expanded skip condition for comments already resembling auto-resolve requests, and updated duplicate-notice text.
Guarded comment creation and docs update .github/workflows/codex-autofix-review-comments.yml, AGENTS.md	Comment creation is wrapped in try/catch to skip on HTTP 403 and rethrow other errors; AGENTS.md trigger guidance is reworded to describe skipping review-thread replies and preventing duplicate resolve requests across head SHA changes.

Estimated code review effort: 2 (Simple) | ~10 minutes

---

🔕 Pre-merge checks override applied

The pre-merge checks have been overridden successfully. You can now proceed with the merge.

Overridden by @BigSimmo via checkbox on 2026-07-09T11:19:30.766Z.

❌ Failed checks (1 error)

Check name	Status	Explanation	Resolution
Verification Claims	❌ Error [IGNORED]	PR description’s Verification section only lists git diff --check and omits an explicit run/result statement.	Rewrite it as Ran git diff --check: passed or Not run: reason.

✅ Passed checks (10 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title clearly summarizes the main change: throttling the Codex auto-resolve workflow.
Description check	✅ Passed	The description matches the template structure with Summary, Verification, and Notes, and includes the key implementation points.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Generated And Sensitive Files	✅ Passed	Only a workflow and AGENTS.md changed; no secrets, credentials, tokens, private keys, or generated/artifact files were committed.
Risky Git Or Deployment Actions	✅ Passed	The PR adds safer workflow/docs guidance and no instructions to force-push, reset, delete branches, or deploy without confirmation.
Supabase Project And Schema Safety	✅ Passed	PR only updates a GitHub workflow and AGENTS guidance; no Supabase env refs, schema, RLS, migrations, or destructive DB changes were added.
Runtime And Package Manager Integrity	✅ Passed	No package-manager/runtime regression: only AGENTS and a workflow changed; package.json, .nvmrc, .npmrc, and package-lock still enforce Node 24/npm 11.
Api Route Failure Handling	✅ Passed	HEAD only changes a GitHub workflow and AGENTS.md; no API/server/provider/rag/ingestion code was touched.

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch codex/fix-codex-review-loop

✨ Simplify code

• Create PR with simplified code
• Commit simplified code in branch codex/fix-codex-review-loop

---

_{Comment @coderabbitai help to get the list of available commands.}

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 518f86a512

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".