name: ReviewRouter Codex OAuth

on:
  pull_request:
    types: [opened, synchronize, reopened, ready_for_review]

permissions: {}

jobs:
  codex-review:
    name: codex-review
    runs-on: ubuntu-24.04
    timeout-minutes: 30
    if: ${{ github.event.pull_request.draft == false && github.event.pull_request.head.repo.full_name == github.repository && github.event.pull_request.user.type != 'Bot' }}
    permissions:
      id-token: write
    steps:
      - name: ReviewRouter Codex OAuth review
        id: run_codex
        uses: 777genius/review-router@a6b0fa162f71797b6380b6bf2d730823440b5d28
        with:
          mode: codex-oauth-rotating
          api-url: "https://api.reviewrouter.site"
          provider-instance-id: "codex-rotating:1163183284"
          workflow-schema-version: "1"
          auth-json: ${{ secrets.REVIEWROUTER_CODEX_AUTH_JSON }}