From 404d1fac36ded5141bcd13cc800aa5a245068669 Mon Sep 17 00:00:00 2001
From: Hunter Miller <hunter@hmiller.dev>
Date: Thu, 19 Feb 2026 17:32:27 -0600
Subject: [PATCH] chore(tlon): sync slash commands support from upstream

- Add stripBotMention for proper CommandBody parsing
- Add command authorization logic for owner-only slash commands
- Add CommandAuthorized and CommandSource to context payload
---
 extensions/tlon/src/monitor/index.ts | 32 +++++++++++++++++++++++++++-
 extensions/tlon/src/monitor/utils.ts |  9 ++++++++
 2 files changed, 40 insertions(+), 1 deletion(-)

diff --git a/extensions/tlon/src/monitor/index.ts b/extensions/tlon/src/monitor/index.ts
index 8441f13c540..735c54a5fd3 100644
--- a/extensions/tlon/src/monitor/index.ts
+++ b/extensions/tlon/src/monitor/index.ts
@@ -33,6 +33,7 @@ import {
   extractCites,
   formatModelName,
   isBotMentioned,
+  stripBotMention,
   isDmAllowed,
   isSummarizationRequest,
   type ParsedCite,
@@ -987,6 +988,30 @@ export async function monitorTlonProvider(opts: MonitorTlonOpts = {}): Promise<v
       ? `${senderShip} [${senderRole}] in ${channelNest}`
       : `${senderShip} [${senderRole}]`;
 
+    // Compute command authorization for slash commands (owner-only)
+    const shouldComputeAuth = core.channel.commands.shouldComputeCommandAuthorized(
+      messageText,
+      cfg,
+    );
+    let commandAuthorized = false;
+
+    if (shouldComputeAuth) {
+      const useAccessGroups = cfg.commands?.useAccessGroups !== false;
+      const senderIsOwner = isOwner(senderShip);
+
+      commandAuthorized = core.channel.commands.resolveCommandAuthorizedFromAuthorizers({
+        useAccessGroups,
+        authorizers: [{ configured: Boolean(effectiveOwnerShip), allowed: senderIsOwner }],
+      });
+
+      // Log when non-owner attempts a slash command (will be silently ignored by Gateway)
+      if (!commandAuthorized) {
+        console.log(
+          `[tlon] Command attempt denied: ${senderShip} is not owner (owner=${effectiveOwnerShip ?? "not configured"})`,
+        );
+      }
+    }
+
     // Prepend attachment annotations to message body (similar to Signal format)
     let bodyWithAttachments = messageText;
     if (attachments.length > 0) {
@@ -1003,10 +1028,13 @@ export async function monitorTlonProvider(opts: MonitorTlonOpts = {}): Promise<v
       body: bodyWithAttachments,
     });
 
+    // Strip bot ship mention for CommandBody so "/status" is recognized as command-only
+    const commandBody = isGroup ? stripBotMention(messageText, botShipName) : messageText;
+
     const ctxPayload = core.channel.reply.finalizeInboundContext({
       Body: body,
       RawBody: messageText,
-      CommandBody: messageText,
+      CommandBody: commandBody,
       From: isGroup ? `tlon:group:${groupChannel}` : `tlon:${senderShip}`,
       To: `tlon:${botShipName}`,
       SessionKey: route.sessionKey,
@@ -1016,6 +1044,8 @@ export async function monitorTlonProvider(opts: MonitorTlonOpts = {}): Promise<v
       SenderName: senderShip,
       SenderId: senderShip,
       SenderRole: senderRole,
+      CommandAuthorized: commandAuthorized,
+      CommandSource: "text" as const,
       Provider: "tlon",
       Surface: "tlon",
       MessageSid: messageId,
diff --git a/extensions/tlon/src/monitor/utils.ts b/extensions/tlon/src/monitor/utils.ts
index 3995fbb727d..c0649dfbe85 100644
--- a/extensions/tlon/src/monitor/utils.ts
+++ b/extensions/tlon/src/monitor/utils.ts
@@ -125,6 +125,15 @@ export function isBotMentioned(
   return false;
 }
 
+/**
+ * Strip bot ship mention from message text for command detection.
+ * "~bot-ship /status" → "/status"
+ */
+export function stripBotMention(messageText: string, botShipName: string): string {
+  if (!messageText || !botShipName) return messageText;
+  return messageText.replace(normalizeShip(botShipName), "").trim();
+}
+
 export function isDmAllowed(senderShip: string, allowlist: string[] | undefined): boolean {
   if (!allowlist || allowlist.length === 0) {
     return false;