codex-reviewlisted

# Codex Second-Opinion Review Run the current diff past the **Codex CLI** as an independent reviewer (a different model, fresh context) and triage its findings. Codex runs in a pinned **read-only** sandbox and **never edits the checkout** — it only reports. Claude saves a transcript under `.claude/codex-reviews/` (gitignored) and applies any fixes. **Trigger:** user types `/codex-review [scope]`. It deliberately does NOT carry `disable-model-invocation: true`: that flag currently *also* blocks the `/codex-review` slash command itself (anthropics/claude-code#26251, dup #38969), so the "Manual only" scoping in the description is what keeps it from auto-firing. The CLI-cosmetic `auto-activate` field has been removed. ## Single-writer rule (mandatory) Codex must never write to a checkout Claude is using (one checkout = one writer; two writers race on the same working tree). The read-only sandbox enforces this — do NOT relax `--sandbox read-only` to `workspace-write` (the repo config default is workspace-write, which would violate this rule). Findings come back as text; Claude edits. ## Workflow ### Step 1 — Scope the diff ```bash SCOPE="${ARGUMENTS:-main...HEAD}" # $ARGUMENTS if provided, else the branch diff BRANCH=$(git rev-parse --abbrev-ref HEAD) set -o pipefail # Custom scopes must be one Git revision or revision range, never options/pathspecs. case "$SCOPE" in ""|-*) echo "Invalid scope: use a revision/range like main...HEAD or HEAD~3, not a git option."