Summary

Ignore resolved or outdated inline Codex review findings when syncing 🤖 codex labels, so a PR can become codex: ok after the finding thread has actually been handled.

Type of change

• fix: — bug fix (no behavior change beyond the bug)
• feat: — new user-facing feature or capability
• refactor: — internal refactor (no behavior change, no API change)
• docs: — documentation only
• chore: / ci: / build: — tooling, CI, packaging
• test: — test-only change
• Breaking change (also append ! after the type, e.g. feat!: or include BREAKING CHANGE: footer)

Linked issue: Related to #703

OpenSpec

• This PR includes / updates an OpenSpec change
• Not applicable — bug fix that matches the existing spec
• Not applicable — docs / CI / chore only
• This PR touches a codex-faithful path (image pipeline, request/response
  shape, SSE framing, OAuth flow) and preserves upstream-equivalent behavior

Change directory: openspec/changes/ignore-resolved-codex-inline-findings/

Changes

• Collect unresolved, non-outdated review-thread comment URLs before merging inline review comments into the label-sync timeline.
• Ignore current-head inline Codex finding comments when their thread has already been resolved or outdated.
• Add regression tests proving resolved findings are ignored while unresolved findings still count.

Test plan

uv run pytest tests/unit/test_sync_codex_ok_labels.py -q
uv run ruff check .github/scripts/sync_codex_ok_labels.py tests/unit/test_sync_codex_ok_labels.py
uv run ruff format --check .github/scripts/sync_codex_ok_labels.py tests/unit/test_sync_codex_ok_labels.py
uv run openspec validate ignore-resolved-codex-inline-findings --strict
uv run openspec validate --specs

Screenshots / output (optional)

Patched dry-run against #703 before applying labels:

dry-run Soju06/codex-lb#703: head=fcf6e61cf5bd checks=success merge=CLEAN review=clean ok=False->True/add needs_work=True->False/remove legacy=- approve_runs=- trigger_codex=False reason=clean Codex review matches current head

Checklist

• Title is in Conventional Commits format (<type>(<scope>)?: <subject>).
• Linked the related issue / discussion above.
• Added or updated tests covering the change.
• Ran uv run pre-commit run local-ci --hook-stage manual --all-files or the relevant make <target> subset locally.
• If touching specs: openspec validate --specs passes and /opsx:verify is clean.
• CHANGELOG is not edited by hand (release-please handles it).