From 837efb916bace1038108237a6dc049ab45dbed52 Mon Sep 17 00:00:00 2001
From: Apify AI Factory <github-apify-factory@apify.com>
Date: Wed, 14 Oct 2026 23:05:37 +0200
Subject: [PATCH 1/3] ci: add the apify-factory review workflow

---
 .github/workflows/factory_review.yaml | 34 +++++++++++++++++++++++++++
 1 file changed, 34 insertions(+)
 create mode 100644 .github/workflows/factory_review.yaml

diff --git a/.github/workflows/factory_review.yaml b/.github/workflows/factory_review.yaml
new file mode 100644
index 00000000..04ac183d
--- /dev/null
+++ b/.github/workflows/factory_review.yaml
@@ -0,0 +1,34 @@
+name: apify-factory review (AI review, and auto-approval)
+
+# Calls the review and auto-approval pipeline in apify/ai-developer. Approvals additionally need the
+# repository's `factory_auto_approve` custom property set to true.
+on:
+  # Taken from the default branch, never from the pull request, so a pull request cannot rewrite
+  # its own review pipeline. Pull request code is never checked out or executed.
+  pull_request_target:
+    types:
+      - review_requested
+      - review_request_removed
+      - converted_to_draft
+      - ready_for_review
+      - synchronize
+
+permissions:
+  contents: read
+  pull-requests: write
+
+jobs:
+  factory-review:
+    uses: apify/ai-developer/.github/workflows/_factory_review.yaml@main
+    secrets: inherit
+    # Paths never auto-approved here, on top of the pipeline's defaults. Proposed from the
+    # repository's layout when this workflow was added; edit them like any other code.
+    with:
+      policy: |
+        {
+          "denyGlobs": [
+            "src/apify/_charging.py",
+            "src/apify/_crypto.py",
+            ".rules.md"
+          ]
+        }

From 04bb06d6195dfde7483aff8bcf26970a48fd22fd Mon Sep 17 00:00:00 2001
From: Apify AI Factory <github-apify-factory@apify.com>
Date: Wed, 14 Oct 2026 23:05:39 +0200
Subject: [PATCH 2/3] ci: make mtrunkat code owner of the review workflow

---
 .github/CODEOWNERS | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS
index fd4e6921..6e4c1247 100644
--- a/.github/CODEOWNERS
+++ b/.github/CODEOWNERS
@@ -2,3 +2,4 @@
 
 /docs/**/*.md @szaganek
 /docs/**/*.mdx @szaganek
+/.github/workflows/factory_review.yaml @mtrunkat

From 468744876b072f396feb96434f860ffd0fffeaab Mon Sep 17 00:00:00 2001
From: Claude <noreply@anthropic.com>
Date: Mon, 19 Oct 2026 14:39:07 +0000
Subject: [PATCH 3/3] ci: call the apify-factory review through apify/workflows

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_011SHLP84hWBQBpH1iALx3E2
---
 .github/workflows/factory_review.yaml | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/factory_review.yaml b/.github/workflows/factory_review.yaml
index 04ac183d..f7552195 100644
--- a/.github/workflows/factory_review.yaml
+++ b/.github/workflows/factory_review.yaml
@@ -1,7 +1,8 @@
 name: apify-factory review (AI review, and auto-approval)
 
-# Calls the review and auto-approval pipeline in apify/ai-developer. Approvals additionally need the
-# repository's `factory_auto_approve` custom property set to true.
+# Calls the apify-factory review and auto-approval pipeline (apify/ai-developer, wired up in
+# apify/workflows). Approvals additionally need the repository's `factory_auto_approve` custom
+# property set to true.
 on:
   # Taken from the default branch, never from the pull request, so a pull request cannot rewrite
   # its own review pipeline. Pull request code is never checked out or executed.
@@ -19,7 +20,7 @@ permissions:
 
 jobs:
   factory-review:
-    uses: apify/ai-developer/.github/workflows/_factory_review.yaml@main
+    uses: apify/workflows/.github/workflows/factory_review.yaml@main
     secrets: inherit
     # Paths never auto-approved here, on top of the pipeline's defaults. Proposed from the
     # repository's layout when this workflow was added; edit them like any other code.