metheus-governance-mcp-cli 0.2.272 → 0.2.273

package/lib/runner-runtime.mjs

@@ -233,6 +233,12 @@ function resolveRunnerLocalInboundArtifactOwners({
       .filter(Boolean),
   ));
   if (explicitMentions.length > 0) {
+    if (normalizedUpdate.fromIsBot !== true) {
+      if (currentBotSelector && explicitMentions.includes(currentBotSelector) && currentOwner) {
+        return [currentOwner];
+      }
+      return [];
+    }
     const explicitOwners = explicitMentions
       .map((selector) => ownersBySelector.get(selector))
       .filter((owner) => owner && owner.routeKey);
@@ -254,6 +260,26 @@ function resolveRunnerLocalInboundArtifactOwners({
   return currentOwner ? [currentOwner] : [];
 }
 
+function currentRouteOwnsRunnerInboundUpdate({
+  update,
+  routeKey,
+  route,
+  bot,
+  managedConversationBots,
+}) {
+  const normalizedRouteKey = String(routeKey || "").trim();
+  if (!normalizedRouteKey) {
+    return false;
+  }
+  return resolveRunnerLocalInboundArtifactOwners({
+    update,
+    routeKey: normalizedRouteKey,
+    route,
+    bot,
+    managedConversationBots,
+  }).some((owner) => String(safeObject(owner).routeKey || "").trim() === normalizedRouteKey);
+}
+
 function managedConversationBotTargetsCurrentRoute({
   update,
   bot,
@@ -789,6 +815,18 @@ async function archiveRunnerTelegramInboundUpdates({
     if (!String(update.text || "").trim()) {
       continue;
     }
+    if (
+      update.fromIsBot !== true
+      && !currentRouteOwnsRunnerInboundUpdate({
+        update,
+        routeKey,
+        route,
+        bot,
+        managedConversationBots,
+      })
+    ) {
+      continue;
+    }
     const dedupeKey = buildArchivedInboundMessageKey(update.chatID, update.messageID);
     if (boolFromRaw(archivePolicy.dedupeInbound, true) && existingKeys.has(dedupeKey)) {
       continue;

package/lib/selftest-telegram-e2e.mjs

@@ -1649,12 +1649,13 @@ export async function runSelftestTelegramE2E(push, deps) {
     const ryoai3Receipt = safeObject(
       safeObject(safeObject(ownershipState.routes)[routeRyoai3Key]).recent_local_inbound_receipts?.[`${String(e2eDestination.chat_id)}:83`],
     );
+    const ownershipBodies = telegramE2EServer.state.comments.map((item) => String(item.body || ""));
     push(
-      "telegram_local_inbound_receipt_is_attributed_to_explicit_mention_owner_route",
-      String(ryoai2Receipt.receipt_route_key || "") === routeRyoai2Key
-        && String(ryoai2Receipt.receipt_bot_username || "") === "ryoai2_bot"
-        && !String(ryoai3Receipt.receipt_route_key || "").trim(),
-      `owner=${JSON.stringify(ryoai2Receipt)} foreign=${JSON.stringify(ryoai3Receipt)}`,
+      "telegram_human_inbound_does_not_fan_out_to_foreign_owner_routes",
+      !String(ryoai2Receipt.receipt_route_key || "").trim()
+        && !String(ryoai3Receipt.receipt_route_key || "").trim()
+        && ownershipBodies.length === 0,
+      `owner=${JSON.stringify(ryoai2Receipt)} foreign=${JSON.stringify(ryoai3Receipt)} comments=${ownershipBodies.join(" || ")}`,
     );
   } catch (err) {
     push("telegram_runner_e2e_local_mock", false, String(err?.message || err));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "metheus-governance-mcp-cli",
-  "version": "0.2.272",
+  "version": "0.2.273",
   "description": "Metheus Governance MCP CLI (setup + stdio proxy)",
   "type": "module",
   "files": [