Function handleAppMention

server/src/addie/handler.ts:711–867

(event: AppMentionEvent)

 * Handle @mention in a channel
 */
export async function handleAppMention(event: AppMentionEvent): Promise<void> {
  if (!initialized || !claudeClient) {
    logger.warn('Addie: Not initialized, ignoring mention');
    return;
  }

  const startTime = Date.now();
  const interactionId = generateInteractionId();

  // Check if user is an AAO admin (for admin-only tools access)
  const isAAOAdmin = await isSlackUserAAOAdmin(event.user);
  logger.debug({ userId: event.user, isAAOAdmin }, 'Addie: Checked admin status for mention');

  // Strip bot mention
  const rawText = botUserId ? stripBotMention(event.text, botUserId) : event.text;

  // Resolve user mentions to include names (e.g., <@U123> -> <@U123|John>)
  const textWithResolvedMentions = await resolveSlackMentions(rawText, lookupSlackUserName);

  // Sanitize input
  const inputValidation = sanitizeInput(textWithResolvedMentions);

  // Build per-request context for system prompt
  // Skip goals in channel mentions to prevent membership pitching
  const { requestContext: baseContext, memberContext, personId } = await buildRequestContext(event.user, { skipGoals: true });

  // Record the user's message in the relationship
  if (personId) {
    relationshipDb.recordPersonMessage(personId, 'slack')
      .then(() => relationshipDb.deriveSentiment(personId))
      .catch(error => {
        logger.warn({ error, personId }, 'Addie: Failed to record person message (mention)');
      });
  }

  // Add channel guardrails — mentions always happen in channels
  const channelGuardrails = [
    '',
    '## Channel context',
    '**IMPORTANT: This is a channel message visible to all channel members.**',
    '- You MUST NOT pitch membership, send join links, or recruit in channels — membership conversations belong in DMs.',
    '- You MUST NOT share financial data, member counts, invoice information, individual member details, pricing information, or any other sensitive organizational data.',
  ].join('\n');
  const requestContext = baseContext + channelGuardrails;

  // Add admin prefix to user message if applicable
  const userMessage = isAAOAdmin ? `[ADMIN USER] ${inputValidation.sanitized}` : inputValidation.sanitized;

  // Check for sensitive topics before processing (channel mentions are more public)
  const sensitiveCheck = await checkForSensitiveTopics(
    inputValidation.sanitized,
    event.user,
    event.channel
  );

  // If we should deflect, return the deflection response instead of processing
  let response;
  if (sensitiveCheck.shouldDeflect && sensitiveCheck.deflectResponse) {