feat: /review code review requests with claim workflow (#49) (#114)

* feat: /review code review requests with claim workflow (#49)

* fix(review): atomic claim, stale config, URL validation, error messages

Author: BillChirico

config.json

@@ -151,6 +151,7 @@
       "rank": "everyone",
       "leaderboard": "everyone",
       "profile": "everyone",
+      "review": "everyone",
       "showcase": "everyone"
     }
   },
@@ -204,5 +205,11 @@
     "announceChannelId": null,
     "levelThresholds": [100, 300, 600, 1000, 1500, 2500, 4000, 6000, 8500, 12000],
     "roleRewards": {}
+  },
+  "review": {
+    "enabled": false,
+    "channelId": null,
+    "staleAfterDays": 7,
+    "xpReward": 50
   }
 }

migrations/010_reviews.cjs

@@ -0,0 +1,49 @@
+/**
+ * Migration 010 — Code Review Requests
+ * Creates the reviews table for the /review command.
+ *
+ * @see https://github.com/VolvoxLLC/volvox-bot/issues/49
+ */
+
+'use strict';
+
+/**
+ * @param {import('pg').Pool} pool
+ */
+async function up(pool) {
+  await pool.query(`
+    CREATE TABLE IF NOT EXISTS reviews (
+      id SERIAL PRIMARY KEY,
+      guild_id TEXT NOT NULL,
+      requester_id TEXT NOT NULL,
+      reviewer_id TEXT,
+      url TEXT NOT NULL,
+      description TEXT NOT NULL,
+      language TEXT,
+      status TEXT DEFAULT 'open' CHECK (status IN ('open', 'claimed', 'completed', 'stale')),
+      message_id TEXT,
+      channel_id TEXT,
+      thread_id TEXT,
+      feedback TEXT,
+      created_at TIMESTAMPTZ DEFAULT NOW(),
+      claimed_at TIMESTAMPTZ,
+      completed_at TIMESTAMPTZ
+    );
+
+    CREATE INDEX IF NOT EXISTS idx_reviews_guild ON reviews(guild_id);
+    CREATE INDEX IF NOT EXISTS idx_reviews_status ON reviews(guild_id, status);
+  `);
+}
+
+/**
+ * @param {import('pg').Pool} pool
+ */
+async function down(pool) {
+  await pool.query(`
+    DROP INDEX IF EXISTS idx_reviews_status;
+    DROP INDEX IF EXISTS idx_reviews_guild;
+    DROP TABLE IF EXISTS reviews;
+  `);
+}
+
+module.exports = { up, down };

src/api/utils/configAllowlist.js

@@ -23,6 +23,7 @@ export const SAFE_CONFIG_KEYS = new Set([
   'reputation',
   'engagement',
   'github',
+  'review',
 ]);
 
 export const READABLE_CONFIG_KEYS = [...SAFE_CONFIG_KEYS, 'logging'];