@heylemon/lemonade 0.0.3 → 0.0.4

package/dist/build-info.json

@@ -1,5 +1,5 @@
 {
-  "version": "0.0.3",
-  "commit": "8e50eaf2ca7f01fbb0397deb3de3cb00f2708c6a",
-  "builtAt": "2026-02-20T05:09:41.173Z"
+  "version": "0.0.4",
+  "commit": "a26b38261e6a55844b0eed17963361b8374e9742",
+  "builtAt": "2026-02-20T05:21:43.349Z"
 }

package/dist/canvas-host/a2ui/.bundle.hash

@@ -1 +1 @@
-5ec7ab3a52d725f743100ac38ce0d8c9672f04988280eeecd179252ba58b11dd
+d27c866a9f91a1bf3b7a29bef001583ee57f61540140511ed6840c4b5dfcd5eb

package/dist/slack/monitor/allow-list.js

@@ -21,6 +21,7 @@ export function resolveSlackAllowListMatch(params) {
     }
     const id = params.id?.toLowerCase();
     const name = params.name?.toLowerCase();
+    const email = params.email?.toLowerCase();
     const slug = normalizeSlackSlug(name);
     const candidates = [
         { value: id, source: "id" },
@@ -29,6 +30,7 @@ export function resolveSlackAllowListMatch(params) {
         { value: name, source: "name" },
         { value: name ? `slack:${name}` : undefined, source: "prefixed-name" },
         { value: slug, source: "slug" },
+        { value: email, source: "email" },
     ];
     for (const candidate of candidates) {
         if (!candidate.value)

package/dist/slack/monitor/context.js

@@ -98,7 +98,8 @@ export function createSlackMonitorContext(params) {
             });
             const profile = info.user?.profile;
             const name = profile?.display_name || profile?.real_name || info.user?.name || undefined;
-            const entry = { name };
+            const email = profile?.email || undefined;
+            const entry = { name, email };
             userCache.set(userId, entry);
             return entry;
         }

package/dist/slack/monitor/message-handler/prepare.js

@@ -96,24 +96,26 @@ export async function prepareSlackMessage(params) {
             return null;
         }
         if (ctx.dmPolicy !== "open") {
+            const dmSender = await ctx.resolveUserName(directUserId);
+            const dmSenderEmail = dmSender?.email ?? undefined;
             const allowMatch = resolveSlackAllowListMatch({
                 allowList: allowFromLower,
                 id: directUserId,
+                email: dmSenderEmail,
             });
             const allowMatchMeta = formatAllowlistMatchMeta(allowMatch);
             if (!allowMatch.allowed) {
-                // Check if sender is an approved guest (responses only, no tools)
                 const guestMatch = resolveSlackAllowListMatch({
                     allowList: guestFromLower,
                     id: directUserId,
+                    email: dmSenderEmail,
                 });
                 if (guestMatch.allowed) {
                     isGuestSender = true;
                     logVerbose(`slack: guest sender ${directUserId} allowed (responses only, no tools)`);
                 }
                 else if (ctx.dmPolicy === "pairing" || ctx.dmPolicy === "allowlist") {
-                    const sender = await ctx.resolveUserName(directUserId);
-                    const senderName = sender?.name ?? undefined;
+                    const senderName = dmSender?.name ?? undefined;
                     const { created } = await upsertChannelPairingRequest({
                         channel: "slack",
                         id: directUserId,
@@ -226,6 +228,7 @@ export async function prepareSlackMessage(params) {
         allowList: allowFromLower,
         id: senderId,
         name: senderName,
+        email: sender?.email,
     }).allowed;
     const channelUsersAllowlistConfigured = isRoom && Array.isArray(channelConfig?.users) && channelConfig.users.length > 0;
     const channelCommandAuthorized = isRoom && channelUsersAllowlistConfigured

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@heylemon/lemonade",
-  "version": "0.0.3",
+  "version": "0.0.4",
   "description": "AI gateway CLI for Lemon - local AI assistant with integrations",
   "publishConfig": {
     "access": "restricted"