chore: allow legacy dependency manifest removal

Co-Authored-By: Codex <noreply@openai.com>

Author: Pigbibi

scripts/gate_codex_app_review.py

@@ -92,6 +92,8 @@ def compile_patterns(policy: dict[str, Any]) -> list[re.Pattern[str]]:
 
 # ─── static guard ────────────────────────────────────────────────────────────
 
+ALLOWED_REMOVED_FILES = {"constraints.txt", "requirements.txt"}
+
 _SENSITIVE = re.compile(
     r'(?:api[_\s]?key|secret|password|token|credential|private[_\s]?key)\s*[:=]\s*["\']'
     r'(?!\$\{\{|{{|example|placeholder|test|your[-_\s]|xxx|TODO|CHANGEME)[^"\']{12,}["\']',
@@ -128,7 +130,8 @@ def check_metadata(files: list[dict[str, Any]], policy: dict[str, Any]) -> list[
     for f in files:
         fn = f.get("filename", "?")
         st = (f.get("status") or "").lower().strip()
-        if st == "removed": issues.append(f"**File deleted**: `{fn}` — verify intentional")
+        if st == "removed" and fn not in ALLOWED_REMOVED_FILES:
+            issues.append(f"**File deleted**: `{fn}` — verify intentional")
         elif st == "renamed": issues.append(f"**File renamed**: `{f.get('previous_filename', '?')}` → `{fn}`")
     if len(files) > mx_f:
         issues.append(f"**Too many files**: {len(files)} changed (limit {mx_f})")

tests/test_gate_codex_app_review.py

@@ -0,0 +1,18 @@
+from __future__ import annotations
+
+from scripts.gate_codex_app_review import check_metadata
+
+
+def test_metadata_allows_removing_legacy_dependency_manifests() -> None:
+    files = [
+        {"filename": "requirements.txt", "status": "removed"},
+        {"filename": "constraints.txt", "status": "removed"},
+    ]
+
+    assert check_metadata(files, {}) == []
+
+
+def test_metadata_still_blocks_other_deleted_files() -> None:
+    files = [{"filename": "main.py", "status": "removed"}]
+
+    assert check_metadata(files, {}) == ["**File deleted**: `main.py` — verify intentional"]