ci: auto-trigger Gemini Code Assist review on PR push (npm#209)

Author: Justin Poehnelt

.gemini/config.yaml

@@ -0,0 +1,7 @@
+code_review:
+  comment_severity_threshold: HIGH
+  pull_request_opened:
+    help: false
+    summary: true
+    code_review: true
+    include_drafts: false

.github/workflows/automation.yml

@@ -19,6 +19,8 @@ on:
     branches: [main]
   pull_request:
     types: [opened, synchronize, reopened]
+  pull_request_review:
+    types: [submitted]
   check_run:
     types: [completed]
 
@@ -99,3 +101,74 @@ jobs:
         with:
           repo-token: ${{ secrets.GOOGLEWORKSPACE_BOT_TOKEN }}
           sync-labels: true
+
+  gemini-review:
+    name: Gemini Review
+    if: >-
+      github.event_name == 'pull_request' &&
+      github.event.action == 'synchronize'
+    runs-on: ubuntu-latest
+    concurrency:
+      group: gemini-review-${{ github.event.pull_request.number }}
+      cancel-in-progress: true
+    steps:
+      - name: Remove reviewed label
+        uses: actions/github-script@v7
+        with:
+          github-token: ${{ secrets.GOOGLEWORKSPACE_BOT_TOKEN }}
+          script: |
+            try {
+              await github.rest.issues.removeLabel({
+                owner: context.repo.owner,
+                repo: context.repo.repo,
+                issue_number: context.payload.pull_request.number,
+                name: 'gemini: reviewed',
+              });
+            } catch (e) {
+              // Label not present — ignore
+            }
+
+      - name: Debounce
+        run: sleep 60
+
+      - name: Trigger Gemini Code Assist review
+        uses: actions/github-script@v7
+        with:
+          github-token: ${{ secrets.GOOGLEWORKSPACE_BOT_TOKEN }}
+          script: |
+            await github.rest.issues.createComment({
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              issue_number: context.payload.pull_request.number,
+              body: '/gemini review',
+            });
+
+  gemini-reviewed:
+    name: Gemini Reviewed
+    if: >-
+      github.event_name == 'pull_request_review' &&
+      github.event.review.user.login == 'gemini-code-assist[bot]'
+    runs-on: ubuntu-latest
+    steps:
+      - name: Add reviewed label if review matches HEAD
+        uses: actions/github-script@v7
+        with:
+          github-token: ${{ secrets.GOOGLEWORKSPACE_BOT_TOKEN }}
+          script: |
+            const pr = await github.rest.pulls.get({
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              pull_number: context.payload.pull_request.number,
+            });
+
+            if (context.payload.review.commit_id !== pr.data.head.sha) {
+              console.log(`Review is for ${context.payload.review.commit_id} but HEAD is ${pr.data.head.sha} — skipping label`);
+              return;
+            }
+
+            await github.rest.issues.addLabels({
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              issue_number: context.payload.pull_request.number,
+              labels: ['gemini: reviewed'],
+            });