feat(agent): implement automated PR review scripts

- Updated `scripts/automated-pr-review.mjs` to align with specific prompt requirements for formatting fixes and guardrails.
- Added `js/utils/storage.js` to sensitive paths for security review flagging.
- Created `scripts/agent/review-open-prs.mjs` to iterate over open PRs and run the review script using `gh` CLI.

scripts/agent/review-open-prs.mjs

@@ -0,0 +1,102 @@
+import { spawnSync, execSync } from 'node:child_process';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = path.dirname(__filename);
+const ROOT_DIR = path.resolve(__dirname, '../../');
+const REVIEW_SCRIPT_PATH = path.join(ROOT_DIR, 'scripts/automated-pr-review.mjs');
+
+function runCommand(command, args = [], options = {}) {
+    console.log(`> ${command} ${args.join(' ')}`);
+    return spawnSync(command, args, { stdio: 'inherit', encoding: 'utf-8', ...options });
+}
+
+function getOpenPRs() {
+    console.log('Fetching open PRs...');
+    try {
+        const res = spawnSync('gh', ['pr', 'list', '--json', 'number,headRefName,baseRefName,url'], { encoding: 'utf-8' });
+        if (res.error) {
+            console.error('Error fetching PRs (gh CLI not installed?):', res.error.message);
+            return [];
+        }
+        if (res.status !== 0) {
+            // Only log stderr if it's not just "no pull requests found" or similar non-critical output
+            // But gh usually exits 0 even if empty.
+            console.error('Error fetching PRs:', res.stderr);
+            return [];
+        }
+        return JSON.parse(res.stdout);
+    } catch (e) {
+        console.error('Exception fetching PRs:', e);
+        return [];
+    }
+}
+
+async function main() {
+    const openPRs = getOpenPRs();
+    if (openPRs.length === 0) {
+        console.log('No open PRs found or unable to fetch.');
+        return;
+    }
+
+    console.log(`Found ${openPRs.length} open PRs.`);
+
+    // Capture current branch to restore later
+    let originalBranch;
+    try {
+        originalBranch = execSync('git branch --show-current', { encoding: 'utf-8' }).trim();
+    } catch (e) {
+        console.error('Could not determine current branch.');
+        process.exit(1);
+    }
+
+    for (const pr of openPRs) {
+        console.log(`\n=== Processing PR #${pr.number}: ${pr.url} ===`);
+        try {
+            // Checkout PR
+            runCommand('gh', ['pr', 'checkout', pr.number]);
+
+            // Set Environment Variables
+            const env = {
+                ...process.env,
+                PR_NUMBER: pr.number.toString(),
+                GITHUB_BASE_REF: pr.baseRefName,
+                // Assuming origin is the base repo for simplicity in this agent script
+                GITHUB_BASE_REPO_URL: '' // automated-pr-review handles missing URL by using origin
+            };
+
+            // Run Review Script
+            console.log(`Running review for PR #${pr.number}...`);
+            const res = spawnSync('node', [REVIEW_SCRIPT_PATH, '--force-ci'], {
+                env,
+                stdio: 'inherit',
+                encoding: 'utf-8'
+            });
+
+            if (res.status !== 0) {
+                console.log(`Review script failed (exit code ${res.status}). See output above.`);
+            } else {
+                console.log(`Review script completed successfully for PR #${pr.number}.`);
+            }
+
+        } catch (e) {
+            console.error(`Error processing PR #${pr.number}:`, e);
+        } finally {
+            // Clean up workspace before next PR
+            try {
+                execSync('git reset --hard HEAD', { stdio: 'ignore' });
+                execSync('git clean -fd', { stdio: 'ignore' });
+            } catch (e) {}
+        }
+    }
+
+    console.log(`\nRestoring original branch: ${originalBranch}`);
+    try {
+        runCommand('git', ['checkout', originalBranch]);
+    } catch (e) {
+        console.error('Failed to restore original branch:', e);
+    }
+}
+
+main();

scripts/automated-pr-review.mjs

@@ -9,7 +9,8 @@ const SENSITIVE_PATHS = [
   /^js\/dmDecryptor\.js$/,
   /^js\/services\/storageService\.js$/,
   /^js\/services\/attachmentService\.js$/,
-  /^js\/services\/hashtagPreferencesService\.js$/
+  /^js\/services\/hashtagPreferencesService\.js$/,
+  /^js\/utils\/storage\.js$/
 ];
 
 function runCommand(command, args = [], options = {}) {
@@ -92,7 +93,7 @@ async function main() {
   let microFixesStatus = '';
 
   // 1. Install Dependencies
-  if (process.env.CI) {
+  if (process.env.CI || process.argv.includes('--force-ci')) {
       runCommand('npm', ['ci']);
   }
 
@@ -206,7 +207,7 @@ async function main() {
 
             } catch (fallbackError) {
                 console.error('Failed to create follow-up PR:', fallbackError.message);
-                commentBody += '> **ℹ️ Micro-fixes available:** Formatting issues were found. Please run `npm run format` locally and push.\n\n';
+                commentBody += '> **ℹ️ Micro-fixes available:** Formatting issues were found. Please apply `npm run format` and re-run tests.\n\n';
             }
         }
     }