fix(bidirectional): drop messages from KNOWN mayor bots (bo-pwib)

[openclaw-dv]

Summary

Wesley msg 729: outbound Slack posts via midgard mayor's bot (user_id U0B385LBXPT) trigger 📬 + 👀 reactions on themselves because the bo-nb97 self-only filter only matches THIS Worker's own bot — not the mayor bots posting THROUGH the shared Slack workspace.

Bug chain that lead here:

Bead	Layer	Fixed
bo-nb97 (PR #6)	bidirectional: peer-bot delivery	Hermes can DM midgard mayor
bo-uu4i (gastown-utils #23)	poll-side self-echo	mayor's context isn't polluted
bo-xyh2 (gastown-utils #24)	poll-side 🤔 reaction	no 🤔 on bot's own writes
bo-pwib (this)	bidirectional: mayor-bot outbounds	the FIRST stage still treated mayor outbounds as inbound

The bidirectional Worker treats midgard mayor's outbound DM as a real Wesley→mayor inbound, fires 📬 + 👀 reactions, AND re-routes the bot's own message back into its own gt-receiver inbox. Self-conversation loop.

Fix

New KNOWN_MAYOR_BOT_USER_IDS env var (comma-separated U… ids) + getMayorBotUserIds(env) resolver that:

1. Env override — parses the comma-separated list when set. Skips the auth.test round-trip on cold start.
2. Auto-discover — calls auth.test against each per-mayor *_MAYOR_BOT_TOKEN env binding present. Mirrors the bo-nb97 getBotUserId shape.
3. Union into a Set<string> the predicate isKnownMayorBot(env, userId) checks against.

Predicate wired into all three event handlers:

const botId = await getBotUserId(env);
if (botId && ev.user === botId) return;          // bo-nb97
if (await isKnownMayorBot(env, ev.user)) return; // bo-pwib

• handleMessage (thread replies)
• handleDm (DMs to per-mayor apps)
• handleChannelMention (@-mentions of a per-mayor app)

handleMessage scope extension

The bead called out handleDm + handleChannelMention. I extended to handleMessage too because mayor↔mayor thread replies have the same loop shape — midgard's reply in a yggdrasil-watched alert thread would otherwise be re-routed. Default-deny is the safer floor; if mayor-to-mayor cross-talk becomes a feature, add an opt-in env override.

Effect

• Mayor's own outbound posts (Wesley msg 729) → silent. No 📬, no 👀, no re-route.
• Wesley's real messages → unchanged.
• Peer bots (Hermes, future third-party Slack integrations) → unchanged from bo-nb97.
• Mayor-to-mayor cross-talk → dropped.

Test plan

No unit tests added — alert-hub has no test harness configured in package.json. Verification via live Slack post-deploy:

• Deploy via the CI workflow.
• Set KNOWN_MAYOR_BOT_USER_IDS="U0B385LBXPT" via wrangler vars OR bind the per-mayor tokens so auth.test resolves them.
• Post via MIDGARD_MAYOR_BOT_TOKEN to Wesley's DM. Confirm no 📬 / 👀 reaction.
• Wesley replies. Confirm reactions DO fire + gt-receiver row lands.
• Post a Hermes message. Confirm bo-nb97 contract preserved.

Cross-repo context

Bead bo-pwib is tracked in the boardroom rig's bd issue tracker. The polecat that produced this PR (boardroom/polecats/dementus) closed bo-pwib with a back-pointer to this PR.

🤖 Generated with Claude Code