{"agent":"codex","input":"Review the Phoenix pull request identified by the URL, base SHA and head SHA the caller appends below. Require the PR identity and verify the checked-out head. Read mix.exs, mix.lock, CI and test configuration, then install dependencies with mix deps.get using compatible Elixir and OTP. Review changes to package publishing and API controllers with surrounding authorization, repository scope, persistence and tests. Use disposable Postgres, never production data; run relevant ExUnit tests and mix test, noting the alias's database setup. Post one GitHub review with current-head file-and-line findings, a concrete failure scenario for each, blocking issues separated from suggestions, exact test results and limits of test doubles. If posting is unavailable, return the review and state it was not posted. Do not change source, push commits, publish packages or merge.","resources":[{"url":"https://github.com/your-org/your-app"}]}