fix(ci): fetch codex binary for autoreview

Author: gersmann

.github/workflows/codex-autoreview.yml

@@ -25,6 +25,18 @@ jobs:
       - uses: actions/checkout@v4
         with:
           fetch-depth: 0
+      - name: Install Codex binary fetch dependencies
+        run: python3 -m pip install zstandard
+      - name: Fetch bundled codex binary
+        env:
+          CODEX_BINARY_RELEASE_TAG: ${{ vars.CODEX_BINARY_RELEASE_TAG || 'rust-v0.122.0' }}
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          set -euo pipefail
+          python3 scripts/fetch_codex_binary.py \
+            --release-tag "$CODEX_BINARY_RELEASE_TAG" \
+            --target-triple x86_64-unknown-linux-musl
+          test -x codex/vendor/x86_64-unknown-linux-musl/codex/codex
       - name: Codex autonomous review
         uses: gersmann/codex-review-action@v1
         with:
@@ -44,6 +56,18 @@ jobs:
       - uses: actions/checkout@v4
         with:
           fetch-depth: 0
+      - name: Install Codex binary fetch dependencies
+        run: python3 -m pip install zstandard
+      - name: Fetch bundled codex binary
+        env:
+          CODEX_BINARY_RELEASE_TAG: ${{ vars.CODEX_BINARY_RELEASE_TAG || 'rust-v0.122.0' }}
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          set -euo pipefail
+          python3 scripts/fetch_codex_binary.py \
+            --release-tag "$CODEX_BINARY_RELEASE_TAG" \
+            --target-triple x86_64-unknown-linux-musl
+          test -x codex/vendor/x86_64-unknown-linux-musl/codex/codex
       - name: Codex autonomous edits
         uses: gersmann/codex-review-action@v1
         with:

tests/test_release_workflows.py

@@ -9,6 +9,7 @@ def test_binary_fetch_workflows_default_to_pinned_codex_release() -> None:
     for workflow_path in (
         Path(".github/workflows/ci.yml"),
         Path(".github/workflows/release-published.yml"),
+        Path(".github/workflows/codex-autoreview.yml"),
     ):
         workflow = workflow_path.read_text()
 
@@ -38,3 +39,14 @@ def test_release_workflow_rejects_pypi_oversized_files_before_publish() -> None:
     assert workflow.index("Verify PyPI file size limit") < workflow.index(
         "pypa/gh-action-pypi-publish"
     )
+
+
+def test_autoreview_workflow_fetches_codex_binary_before_action() -> None:
+    workflow = Path(".github/workflows/codex-autoreview.yml").read_text()
+
+    assert workflow.count("Fetch bundled codex binary") == 2
+    assert workflow.count("--target-triple x86_64-unknown-linux-musl") == 2
+    assert workflow.count("test -x codex/vendor/x86_64-unknown-linux-musl/codex/codex") == 2
+    assert workflow.index("Fetch bundled codex binary") < workflow.index(
+        "gersmann/codex-review-action@v1"
+    )