feat: learn from review thread resolve/unresolve

[lohitkolluri]

Handles the pull_request_review_thread webhook so resolving/unresolving a review thread on a Codasaurus finding comment actually does something:

• Resolve a thread on a finding comment -> that fingerprint is dismissed repo-wide (same ACL + learning path as a thumbs-down reaction).
• Unresolve -> new un_dismiss_fingerprint store method deletes the dismissal, so the finding surfaces again.
• Adds the pull_request_review_thread event to the GitHub App manifest default_events.

Notes:

• ACL: only repo owner / org members / collaborators / prior contributors / PR author can dismiss via resolve - same trust bar as commands and reactions.
• Existing App installs pick up the new event on the next manifest sync (edit -> permissions -> events update).
• Tests: fingerprint extraction from thread comments, resolver ACL matrix, and the dismiss/un-dismiss store round trip (208 lib tests pass; production_hardening still needs a local Postgres, unrelated).

[codasaurus-e0a6]

Codasaurus

Advisory draft — soft findings only. Codasaurus will not request changes; a maintainer still decides merge.

feat: learn from review thread resolve/unresolve

This PR updates 7 files across src, (root). I spotted 3 things worth a quick look (not blockers). See the list below.

Since last review

Resolved

• Repeated code in src/bot/mod.rs

Still open

• Repeated code in src/bot/threads.rs
• Repeated code in src/bot/worker.rs

New

• Repeated code in src/bot/mod.rs

What to do next

1. Please check [quality]: Repeated code in src/bot/mod.rs
2. Please check [quality]: Repeated code in src/bot/threads.rs
3. Please check [quality]: Repeated code in src/bot/worker.rs

Copy this into your AI coding agent

Paste this prompt into Cursor, Copilot, or another coding agent:

You are fixing Codasaurus review findings on a GitHub pull request.

## Rules
- Change only what is required to resolve the findings below.
- Do not refactor unrelated code or add features.
- Prefer the smallest correct diff.
- `tests/fixtures/golden/` and `golden/*/input.*` files intentionally contain sample secrets/TODOs for detector tests — do not "fix" those unless the PR is explicitly changing the fixture contract.
- Workspace crate imports in `tests/` (e.g. `use codasaurus::…`) are expected — do not add them to Cargo.toml.
- If a finding is a false positive, say so instead of changing code.
- After edits, summarize what you changed and why.

## Findings (priority order)
### 1. [warning] Repeated code
- **Location:** `src/bot/mod.rs`
- **Detector:** `boilerplate`
- **Issue:** Repeated code blocks found (31 instances) — AI often generates repetitive code.
- **Fix:** Extract repeated blocks into reusable functions.


### 2. [warning] Repeated code
- **Location:** `src/bot/threads.rs`
- **Detector:** `boilerplate`
- **Issue:** Repeated code blocks found (4 instances) — AI often generates repetitive code.
- **Fix:** Extract repeated blocks into reusable functions.


### 3. [warning] Repeated code
- **Location:** `src/bot/worker.rs`
- **Detector:** `boilerplate`
- **Issue:** Repeated code blocks found (8 instances) — AI often generates repetitive code.
- **Fix:** Extract repeated blocks into reusable functions.


## PR context
Title: feat: learn from review thread resolve/unresolve

Changes

Path	What changed
CHANGELOG.md	updated
src/api/setup.rs	updated
src/bot/commands.rs	updated
src/bot/mod.rs	updated
src/bot/threads.rs	added
src/bot/worker.rs	updated
src/learning/store.rs	updated

All files (7)

• CHANGELOG.md (modified)
• src/api/setup.rs (modified)
• src/bot/commands.rs (modified)
• src/bot/mod.rs (modified)
• src/bot/threads.rs (added)
• src/bot/worker.rs (modified)
• src/learning/store.rs (modified)

[codasaurus-e0a6]

Context

Blast radius

Sensitive path: src/bot/mod.rs

Related pull requests

• Review maturity: advisory gate, grounding, concerns, eval, learning guard #19: Review maturity: advisory gate, grounding, concerns, eval, learning guar (4 shared files)
• Fix Stats crash, duplicate reviews, ask/LLM, and PR comment UX #6: Fix Stats crash, duplicate reviews, ask/LLM, and PR comment UX (2 shared files)
• feat: Go support, lockfile/license drift detectors, retry command, ARM64 release #20: feat: Go support, lockfile/license drift detectors, retry command, ARM64

[codasaurus-e0a6]

Checks

Before merge

• No blocking findings
• Warning budget within limit
  • At most 0 warnings allowed. Clear the notes on the Files tab, or ask a teammate.
• PR has a title

Reviewer time ~20 min (3/5 · Moderate · 7 files)

Commands

Type as plain text (GitHub Apps are not @-mentionable):

review · describe · summarize · improve · security · ask … · ignore <fp> · help

_{Full list: @codasaurus help}