feat(pr-review): progress comment + session link in review body

[all-hands-bot]

Summary

Two related UX improvements to the pr-review plugin that let reviewers trace every automated review back to its execution session.

---

Changes

1. get_session_url() — auto-detect the execution environment

Added to agent_script.py. Detects which environment the script is running in and returns the appropriate link, with no manual configuration needed:

Environment	Source env vars	URL produced
GitHub Actions	GITHUB_SERVER_URL + GITHUB_REPOSITORY + GITHUB_RUN_ID	{server}/{repo}/actions/runs/{run_id}
OpenHands Cloud Automation	OPENHANDS_CLOUD_API_URL + SANDBOX_ID	{cloud_url}/conversations/{sandbox_id}
Explicit override	REVIEW_RUN_URL (existing)	used as-is (backward-compatible)

2. Progress comment — post before / update after

🔍 Review in progress… · View session          ← posted before agent starts
✅ Review complete. · View session              ← patched after run_review() returns

post_progress_comment() and update_progress_comment() are non-fatal — if the GitHub API call fails (e.g. token lacks issue comment write), the review still proceeds.

3. Session link in the review body

Added _SESSION_LINK_SECTION to prompt.py and wired session_url through format_prompt(). When a session URL is available, the agent is instructed to append:

This review was generated by an AI agent (OpenHands). View session

to the end of the top-level review body. Skipped when collect_feedback=True to avoid duplicating the URL that already appears in the feedback footer.

---

Behavior by scenario

Trigger	Progress comment	Session link in review
GitHub Actions workflow	✅ with Actions run link	✅ Actions run link
OpenHands Cloud Automation	✅ with conversation link	✅ conversation link
Local / other	✅ without link	❌ omitted

---

This PR was created by an AI agent (OpenHands) on behalf of the user.

@all-hands-bot can click here to continue refining the PR

[xingyaoww]

Closing this PR — the session URL and progress comment functionality is no longer needed in the plugin.

What changed: The session URL is now injected by sdk_main.py in the automation service (OpenHands/automation#142) via conversation.update_secrets({"AUTOMATION_SESSION_URL": url}). The SDK auto-exports secrets as env vars in the agent's bash session, so the automation prompt's ${AUTOMATION_SESSION_URL} picks it up directly.

The progress comment posting/updating and the session link in the review body are handled entirely by the automation prompt (Steps 1, 3, 4, 5) — no plugin-side changes are needed.

Specifically, this PR's get_session_url() relied on SANDBOX_ID + OPENHANDS_CLOUD_API_URL, but:

• SANDBOX_ID ≠ conversation_id (they're different identifiers)
• Those env vars aren't reliably available in the agent's bash subprocess

The correct approach in PR #142 builds the URL from conversation.id after Conversation(...) is created, which is the authoritative source for the conversation UUID.

This comment was posted by an AI agent (OpenHands) on behalf of the user.