fix(discordbot): ignore replies addressed to other users

[michaelmwu]

Summary

• veto unmentioned authorized-thread continuations that canonically mention another Discord member before they can append to or steer the Centaur session
• preserve direct Centaur trigger precedence when another member is also named, while leaving actor, role, thread, TTL, and active-execution protections unchanged
• route from raw Gateway <@id> / <@!id> syntax instead of adapter-rendered text and cover the policy at unit, admission, and real Chat SDK ingress levels

Stack

• targets harden-discord-actor-access because PR Harden Discord actor-scoped access and approvals #27 introduces the actor-scoped Discord admission policy this change extends

Validation

• corepack pnpm --filter discordbot run check:types
• corepack pnpm --filter discordbot test (161 passed)
• git diff --check

---

Note

Low Risk
Narrow ingress filter on unmentioned continuations; direct bot mentions unchanged. Low risk to auth or session integrity.

Overview
Authorized-thread follow-ups no longer append to or steer the Centaur session when the message is an unmentioned reply that canonically mentions another Discord user (<@id> / <@!id>). Ingress denies those with directed_to_other_discord_member after the existing actor, TTL, and policy checks.

Adds discordMentionRoutingDecision to classify addressees from raw Gateway content; direct Centaur mentions still win when both the bot and another member appear in the same message. discordGatewayEventFromMessage now uses raw.content (not adapter message.text) so routing uses immutable user IDs.

README and unit, admission, and Chat SDK emulate tests cover the behavior.

^{Reviewed by Cursor Bugbot for commit 4a41292. Bugbot is set up for automated code reviews on this repo. Configure here.}

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Team

Run ID: c57da257-c130-4c96-b632-88ee5ac72cba

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-09-01T06:21:35.850180Z	4a41292	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[cursor]

Bugbot couldn't run - usage limit reached

Bugbot is counted against Cursor usage for this user or team, and this run hit a usage or spend limit.

A user or team admin can review and increase usage limits in the Cursor dashboard.

(requestId: serverGenReqId_a9d51327-3d5a-4fa9-a80c-5dff4bd1f4ff)