[RFC] Should a face-to-face room's remote seats appear in the sidebar Bot list? Clarify room-only vs granted remotes #1821

背景 / Background

Reported in #1819: after a Face-to-face room, other participants' Bots stay in the owner's sidebar as Friend's Bot. The reporter is not sure whether those Bots were shared with them personally (a Bot Social grant) or only seated through the room (room-only identity). Both look identical in the sidebar.

A related face-to-face bug was filed today (#1764, rename refused because updateRoom runs the two-Bot check on a name-only patch).

文档里的规则 / What the docs say

docs/subsystems/social.md invariant 4:

When that Bot leaves its last face room or the room closes, the plugin revokes the room-only identity (remove_home_member) and drops room-scoped remotes from Friends' Bots.

and:

Live face-to-face rooms and friends' Bots sit in the core TeamSidebar list (globe / people mark), not a second Friends' Bots section.

So a granted friend's Bot in the sidebar is intended; a room-only remote surviving its room is not. What is not documented is how a person tells the two apart, and whether a room-only Bot should appear in the sidebar while the room is open.

需要确认的问题 / Open questions

1. While a face-to-face room is open, should that room's remote seats (friends' Bots that joined only for this room) appear in my sidebar Bot list at all — or only inside the room?
2. After the room closes, is the current behavior supposed to drop them immediately, on the next roster poll, or only after remove_home_member succeeds? What if that revoke fails?
3. Identical presentation: both kinds render as Friend's Bot + globe. Should a room-only remote be visually distinguished (e.g. "In this room only") or hidden from the sidebar entirely?
4. If a friend shares a Bot and it is also a room seat, which one wins and how is it revoked?

复现 / Repro (as reported)

• v0.2.15, instance flybot682b8a43, 2026-10-30
• Sidebar shows several Friend's Bot rows attributed to people the reporter met in face-to-face rooms
• Screenshot in 面对面房间结束后，其他参与者的 Bot 仍出现在侧边栏（疑似 room-only 泄漏） #1819

建议的判定标准 / Proposed acceptance criteria

• Room-only remote: visible only while the room is open (and inside the room), never in the global Bot list after leave/close
• Granted friend's Bot: visible, revocable from People with access
• A test that opens a face room with one remote seat, closes it, and asserts the sidebar no longer lists that Bot (and that a genuinely granted Bot survives the same flow)

Please confirm the intended behavior so #1819 can be triaged as a bug or closed as by design.