[dolfim-ibm]

The AI review ran on every push, also on PRs that a maintainer already reviews. That costs money and adds noise. This PR stops the automatic review after a maintainer is involved, and gives maintainers /ai commands instead.

Automatic review only before maintainer activity

Before each push-triggered review, the job reads the issue comments, the reviews, and the review comments of the PR. The review is skipped if one of them comes from a maintainer: OWNER, MEMBER, or COLLABORATOR, not a bot, not the PR author, and not an /ai command. The triage still runs on every push, because it is cheap and keeps the CI-safety label current.

/ai commands

A PR comment from a maintainer that starts with one of these commands:

• /ai review (or /ai): a new, full review of the current commit. It ignores the maintainer check, the "already reviewed" check, and the duplicate gate. The size limits still apply.
• /ai triage: runs the triage again.

The bot adds a 👀 reaction to confirm the command. Comments from other users and other text are ignored. Only an exact command on the first line counts.

Workflow changes

• New trigger: issue_comment (created). A cheap if: on the new context job skips all other comments without running the script.
• The context job runs ai_pr_event.py. It validates the event again and sets the outputs pr, run, and force_review. The other jobs use these outputs and no longer read github.event.pull_request, which does not exist for comment events.
• Concurrency: only pushes and maintainer /ai comments share the group of the PR. Any other comment gets its own group, so it cannot cancel a running triage.
• The comment text never goes into a shell. It is only read from the event file by the script.

Checklist:

• Documentation has been updated, if necessary. (.github/CI_LABELS.md)
• Examples have been added, if necessary.
• Tests have been added, if necessary.

Review evidence:

• uv run pytest tests/test_ai_pr_event.py tests/test_ai_pr_review.py tests/test_ai_pr_triage.py tests/test_groundtruth_diff.py tests/test_pr_topic_labels.py tests/test_pr_approval_reminder.py: 42 passed. The new tests cover command parsing, maintainer and open-PR checks for commands, drafts and bots on pushes, and the maintainer-activity filter (bots, the PR author, command comments).
• make validate: passed. Both folded YAML expressions parse to one line.
• I ran the maintainer check against live PRs (read-only API):
  • involved: fix(docx): keep w:sym characters and map Symbol font text to Unicode #4622 (reviews by dolfim-ibm and ceberam), fix(cache): make pipeline options hash stable across processes #4448, ci: check out the workflow commit in the AI triage jobs #4655 (reviews by PeterStaar-IBM and cau-git);
  • not involved: fix(docx): ignore XML comments and processing instructions #4627 and fix(epub): drop query and fragment from image src #4636.
• Not run: the issue_comment path on GitHub. It runs from main, so the first /ai review comment after the merge tests it.

[github-actions]

✅ DCO Check Passed

Thanks @dolfim-ibm, all your commits are properly signed off. 🎉

[mergify]

Merge Protections

🟢 Merge protection satisfied — ready to merge.

Show 1 satisfied protection

🟢 Enforce conventional commit

Make sure that we follow https://www.conventionalcommits.org/en/v1.0.0/

• title ~= ^(fix|feat|docs|style|refactor|perf|test|build|ci|chore|revert)(?:\(.+\))?(!)?:

[github-actions]

AI triage (advisory)

Checked commit f91424db14. The analysis read the diff only. It did not run code from this pull request.

This PR reduces AI review costs by skipping the automatic review after a maintainer gets involved. It also adds /ai review and /ai triage slash commands for maintainers, implemented via a new issue_comment trigger and a new ai_pr_event.py script.

Topic labels added: enhancement.

CI safety: needs maintainer care before you approve CI.

• .github/CI_LABELS.md: changes CI workflows, actions, or CI scripts
• .github/scripts/ai_pr_event.py: changes CI workflows, actions, or CI scripts
• .github/scripts/ai_pr_review.py: changes CI workflows, actions, or CI scripts
• .github/workflows/ai-pr-triage.yml: changes CI workflows, actions, or CI scripts
• .github/workflows/ai-pr-triage.yml: The concurrency group: key and the if: condition on the context job both evaluate github.event.comment.body directly as a GitHub Actions expression; a crafted comment body could alter expression parsing (expression injection), even though the text never reaches a shell.

1 related pull request(s) in the same code

PR	State	Signal	Assessment
#4655	merged	referenced as #4655	related: PR 4655 changed checkout refs in the same workflow file from base.sha to github.sha. PR 4679 builds on that merged change and restructures the workflow further; the two do different things.

_{The ai:* labels are advisory. They do not approve CI and they do not add tests:full. A new push runs this check again.}

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

[PeterStaar-IBM]

lgtm!