pilastdigit/trip-workflow/codex-plan-review

Codex Plan Review

Iterative review of a planning document via Codex CLI. State (thread ID, review text, event log) persisted under .claude/skills/codex-plan-review/state/<sanitized-path>.{thread,review.txt,events.ndjson}.

The companion codex-code-review skill shares the same scripts with its own prompt templates and STATE_DIR.

Arguments

• <plan-path> — auto: start if no thread, resume if exists. Trailing free-text is extra context.
• reset <plan-path> — drop state, next call starts fresh.
• show <plan-path> — display latest review without calling Codex.

Execution

1. Parse `$ARGUMENTS`: extract action (reset/show/auto) and plan path.

1. Auto — try start.sh first (exit code 2 = thread exists -> use resume.sh):

• Start: bash .claude/skills/codex-plan-review/scripts/start.sh --prompt-file .claude/skills/codex-plan-review/prompts/start.tpl <plan-path> [extra]
• Resume: bash .claude/skills/codex-plan-review/scripts/resume.sh --prompt-file .claude/skills/codex-plan-review/prompts/resume.tpl <plan-path> [extra]

1. Reset: bash .claude/skills/codex-plan-review/scripts/reset.sh <plan-path>

1. Show: bash .claude/skills/codex-plan-review/scripts/show.sh <plan-path>

1. Parse trailing tag:

• APPROVED — tell user, done.
• REQUEST_CHANGES — engage critically: fix legitimate findings by editing the plan, push back on incorrect ones. Surface review verbatim, propose fixes, let user confirm.
• NEEDS_REWORK — surface to user before mass-editing.

Notes

• Run Codex calls in a background shell. Invoke start.sh / resume.sh via the Bash tool with run_in_background: true — never as a foreground/inline command. Codex runs at xhigh effort routinely outlast the foreground command timeout; the background task notifies on completion, then read its output. reset.sh / show.sh are instant and fine in the foreground.
• Set `CODEX_TIMEOUT=1800` (30 min) when invoking start.sh / resume.sh — a generous circuit breaker against hung runs, not a performance target; bump higher for unusually large targets rather than risk killing a legitimate run. Script default is 0 = no timeout. On expiry the script fails through the normal error path with a "timed out" message in the stderr tail. Requires GNU timeout/gtimeout (macOS: brew install coreutils); warns and runs unbounded if neither is present.
• Model/effort/tier defaults live in codex-plan-review/scripts/_common.sh, derived from STATE_DIR: implementation → gpt-6-luna at high effort on the fast service tier; plan review → gpt-6-astra at xhigh on standard routing; code review → gpt-6-sol at xhigh on the fast tier; codex-ask → gpt-6-astra at xhigh on standard routing. Adjust that one file to your preferred models, or override per run via CODEX_MODEL / CODEX_EFFORT / CODEX_TIER env vars; the scripts echo the effective values.
• --sandbox read-only. Safe to invoke autonomously.
• On network failure, check *.events.ndjson.stderr. Run reset.sh and retry.
• Thread IDs persisted per-plan (no --last). Concurrent reviews don't collide.
• Extra context -> {{EXTRA_PROMPT}}. Keep short.

Loop Shape

turn 1: start.sh -> REQUEST_CHANGES (A B C)
         address A B C
turn 2: resume.sh -> REQUEST_CHANGES (A B addressed, C stale, new D)
         address C D
turn 3: resume.sh -> APPROVED