fix: overhaul GitHub bots -- review pipeline, spam guard, messaging, CodeRabbit

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: 2 people

.coderabbit.yaml

@@ -29,7 +29,7 @@ reviews:
   path_filters: []
 
   auto_review:
-    enabled: true
+    enabled: false
     drafts: false
     base_branches:
       - main

.github/workflows/bounty-tracker.yml

@@ -160,7 +160,7 @@ jobs:
                   pr_labels = [l["name"] for l in closing_pr.get("labels", [])]
                   if "paid" in pr_labels:
                       print(f"PR #{pr_num} already has 'paid' label — skipping duplicate notification")
-                      sys.exit(0)
+                      exit(0)
 
                   keyboard = {"inline_keyboard": [[{"text": "\U0001f440 View PR", "url": pr_url}]]}
 
@@ -223,7 +223,7 @@ jobs:
                                       f"Check out the other [open bounties]"
                                       f"(https://github.com/{repo}/issues?q=is%3Aissue+is%3Aopen+label%3Abounty) "
                                       f"for more opportunities.\n\n"
-                                      f"---\n*SolFoundry Bot \U0001f3ed*"
+                                      f"---\n*-- SolFoundry Bot*"
                                   )
                                   requests.post(
                                       f"https://api.github.com/repos/{repo}/issues/{opr_num}/comments",

.github/workflows/claim-guard.yml

@@ -236,8 +236,8 @@ jobs:
                       f"- The project owner reviews and approves/denies your claim\n"
                       f"- Once approved: 14-day deadline, AI review ≥7/10\n\n"
                       f"Keep building — the top-tier bounties will open up.\n\n"
-                      f"⚠️ Star rewards and content bounties don't count toward tier progression.\n\n"
-                      f"*— SolFoundry Bot 🏭*"
+                      f"Star rewards and content bounties don't count toward tier progression.\n\n"
+                      f"---\n*-- SolFoundry Bot*"
                   )
                   gh_post(f"repos/{repo}/issues/{issue}/comments", {"body": body})
                   exit(0)
@@ -274,7 +274,7 @@ jobs:
                           f"⚠️ @{user} — You already have an active T3 claim (#{list(user_t3_claims)[0]}). "
                           f"Please complete or release your existing claim before taking on another.\n\n"
                           f"**One T3 bounty at a time** — these are large-scope projects that need full focus.\n\n"
-                          f"*— SolFoundry Bot 🏭*"
+                          f"---\n*-- SolFoundry Bot*"
                       )
                       gh_post(f"repos/{repo}/issues/{issue}/comments", {"body": body})
                       exit(0)
@@ -287,7 +287,7 @@ jobs:
                   f"**Your stats:** {t1_count} T1 + {t2_count} T2 completed bounties ✅\n"
                   f"**Proposal:** {comment[:300]}{'...' if len(comment) > 300 else ''}\n\n"
                   f"You'll be notified here when your claim is approved or denied.\n\n"
-                  f"*— SolFoundry Bot 🏭*"
+                  f"---\n*-- SolFoundry Bot*"
               )
               gh_post(f"repos/{repo}/issues/{issue}/comments", {"body": body})
 

.github/workflows/escrow-cleanup.yml

@@ -23,15 +23,15 @@ jobs:
         run: |
           PR_NUM="${{ github.event.pull_request.number }}"
           PR_TITLE="${{ github.event.pull_request.title }}"
-          PR_BODY=$(curl -sf -H "Authorization: token $GH_TOKEN" \
+          PR_BODY=$(curl -s -H "Authorization: token $GH_TOKEN" \
             "https://api.github.com/repos/${{ github.repository }}/pulls/$PR_NUM" \
             | python3 -c "import sys,json; print(json.loads(sys.stdin.read()).get('body','') or '')" 2>/dev/null)
 
           # Extract linked issue number
           ISSUE_NUM=$(PR_TITLE="$PR_TITLE" PR_BODY_TEXT="$PR_BODY" python3 -c "
           import re, os
           text = os.environ.get('PR_TITLE', '') + ' ' + os.environ.get('PR_BODY_TEXT', '')
-          m = re.search(r'(?:closes|fixes|resolves)\s+(?:\S+#)?(\d+)', text, re.IGNORECASE)
+          m = re.search(r'(?:closes|fixes|resolves|issue|bounty)\s*:?\s*(?:\S+#)?(\d+)', text, re.IGNORECASE)
           print(m.group(1) if m else '')
           " 2>/dev/null)
 
@@ -41,7 +41,7 @@ jobs:
           fi
 
           # Check if the bounty issue has review-passed label
-          LABELS=$(curl -sf -H "Authorization: token $GH_TOKEN" \
+          LABELS=$(curl -s -H "Authorization: token $GH_TOKEN" \
             "https://api.github.com/repos/${{ github.repository }}/issues/$ISSUE_NUM" \
             | python3 -c "import sys,json; print(','.join(l['name'] for l in json.loads(sys.stdin.read()).get('labels',[])))" 2>/dev/null)
 
@@ -52,7 +52,7 @@ jobs:
 
           # Verify this closed PR is the one that holds the lock
           # Check for the escrow-lock-pr-N tracking comment
-          LOCK_HOLDER=$(curl -sf -H "Authorization: token $GH_TOKEN" \
+          LOCK_HOLDER=$(curl -s -H "Authorization: token $GH_TOKEN" \
             "https://api.github.com/repos/${{ github.repository }}/issues/$ISSUE_NUM/comments?per_page=100" \
             | python3 -c "
           import sys, json, re
@@ -73,15 +73,15 @@ jobs:
 
           # Remove the review-passed label
           echo "Removing review-passed label from issue #$ISSUE_NUM (PR #$PR_NUM closed)"
-          curl -sf -X DELETE \
+          curl -s -X DELETE \
             -H "Authorization: token $GH_TOKEN" \
             "https://api.github.com/repos/${{ github.repository }}/issues/$ISSUE_NUM/labels/review-passed"
 
           # Post a comment noting the unlock
-          curl -sf -X POST \
+          curl -s -X POST \
             -H "Authorization: token $GH_TOKEN" \
             -H "Content-Type: application/json" \
             "https://api.github.com/repos/${{ github.repository }}/issues/$ISSUE_NUM/comments" \
-            -d "{\"body\":\"🔓 **Escrow lock released** — PR #$PR_NUM was closed without merging.\n\nThis bounty is open for new submissions.\n\n---\n*SolFoundry Review Bot*\"}"
+            -d "{\"body\":\"Escrow lock released — PR #$PR_NUM was closed without merging.\n\nThis bounty is open for new submissions.\n\n---\n*-- SolFoundry Bot*\"}"
 
           echo "Escrow lock cleaned up for issue #$ISSUE_NUM"