[codex] migrate Deno Deploy to Deno 2

[0x4007]

Summary

• Uses the shared Deno Deploy reusable workflow branch ubiquity/deno-deploy-workflow/.github/workflows/deno-deploy-reusable.yml@codex/deno-2-programmatic with deploy_platform: deno2.
• Keeps DENO_DEPLOY_TOKEN as the deploy secret and syncs only STATIC_DIR=static for runtime.
• Adds Deno-native deploy/build tooling via deno.jsonc, deno.lock, deno install, and deno task build.
• Updates the build workflow to exercise the same Deno build path used by deploy.
• Adds an esbuild resolver for libsodium-wrappers so Deno-managed npm installs bundle the existing key generator correctly.
• Ignores generated static/out build output.

Validation

• deno install
• deno install --frozen
• deno task build
• deno check serve.ts
• deno check build/esbuild-build.ts
• bun run build
• bun run knip
• bun run format:cspell
• bunx eslint .
• bunx prettier --check .github/workflows/build.yml .github/workflows/deno-deploy.yml build/esbuild-build.ts deno.jsonc
• git diff --check
• Local smoke test with deno task serve:
  • / -> 200 text/html
  • /out/scripts/key-generator/keygen.js -> 200 text/javascript
  • /smoke/path -> 200 text/html

Remote Checks

• Passing: Build, Conventional Commits, Spell Check, Knip.
• Blocked: Deno Deploy reaches Ensure project exists and sync secrets, then the Deno 2 CLI rejects DENO_DEPLOY_TOKEN: The token specified via 'DENO_DEPLOY_TOKEN' or the '--token' flag is invalid.

Notes

• No new deploy secret/env var was added; this needs the existing DENO_DEPLOY_TOKEN value updated to a Deno 2-compatible token.
• yarn is not installed directly in the local shell, so Husky was disabled for the commit after the listed checks passed manually.

[0x4007]

@codex review

[github-actions]

Unused dependencies (1)

Filename	dependencies
package.json	ramda

[0x4007]

@codex review

[0x4007]

@codex review

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 70016a463f

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[0x4007]

@codex review

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 5416705441

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[github-actions]

29 Apr 09:18

9d20eeb ci: use published Deno deploy workflow ref

Show 1 previous deployments

29 Apr 02:17

f5c00a1 fix(ci): use shared Deno 2 deploy workflow

[coderabbitai]

Warning

Rate limit exceeded

@0x4007 has exceeded the limit for the number of commits that can be reviewed per hour. Please wait 26 minutes and 23 seconds before requesting another review.

To keep reviews running without waiting, you can enable usage-based add-on for your organization. This allows additional reviews beyond the hourly cap. Account admins can enable it under billing.

⌛ How to resolve this issue?

After the wait time has elapsed, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

We recommend that you space out your commits to avoid hitting the rate limit.

🚦 How do rate limits work?

CodeRabbit enforces hourly rate limits for each developer per organization.

Our paid plans have higher rate limits than the trial, open-source and free plans. In all cases, we re-allow further reviews after a brief timeout.

Please see our FAQ for further information.

ℹ️ Review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 88ca5240-5eea-4330-bd7c-583c6596aecf

📥 Commits

Reviewing files that changed from the base of the PR and between 3484eea and 9d20eeb.

⛔ Files ignored due to path filters (3)

• bun.lock is excluded by !**/*.lock
• deno.lock is excluded by !**/*.lock
• yarn.lock is excluded by !**/yarn.lock, !**/*.lock

📒 Files selected for processing (9)

• .cspell.json
• .github/workflows/build.yml
• .github/workflows/cspell.yml
• .github/workflows/deno-deploy.yml
• .gitignore
• build/esbuild-build.ts
• deno.jsonc
• knip.ts
• package.json

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch codex/deno-2-deploy

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Review rate limit: 0/1 reviews remaining, refill in 26 minutes and 23 seconds.}

_{Comment @coderabbitai help to get the list of available commands and usage tips.}