Aispam Commands

Complete guide to the Aispam module — the per-chat AI spam filter

🤖 Aispam Commands

The Aispam module is an opt-in, per-chat AI spam filter. When it is on, every message in the chat is judged by TypeSafe’s Jev decision model against the chat’s own title, description and rules, and messages the model is confident are spam are deleted.

It is the only module that deletes on a judgement rather than a rule, and it is off in every chat until an admin turns it on.

Commands

on/off also accept yes/no. A bare /aispam reports status and lists the data sent to the model.

What Happens To A Flagged Message

Only one action exists: the message is deleted. No warning, no mute, no restriction, no reply, and no notice to the sender. Every deletion is mirrored to MESSAGE_DUMP with the probability, category, model version and the message text, which is the audit trail and the only feedback loop for tuning.

Thresholds

Jev is English-first, so only a message it reads as English takes the lower bar. The message’s own language decides, not the chat’s configured language: an English chat still receives posts written in other languages, and those are held to the higher bar. If the language answer is missing or unreadable, the higher bar applies.

What Is Skipped

These messages are never sent to the model:

• Anything from an admin or an approved user.
• Members still solving a captcha challenge.
• This bot’s own commands: a bare /command, or /command@thisbot. A slash message aimed at another bot is judged like any other text.
• Messages with no text or caption, and messages from bots, channels, anonymous admins or linked channels.

What The Model Receives

For each checked message:

• The chat’s title, description, rules and language.
• The sender’s profile: days since the bot first saw them, messages in the last hour, warn count.
• The message text or caption, the domains it links to, and whether it is a forward or a reply.
• The sender’s few most recent messages in this chat, and how many messages they posted in the last hour.

The sender window is kept in Redis for one hour, keyed per chat and user, and expires on its own. Nothing else about a message is stored. A message joins the window even when the check that follows it fails, and losing Redis costs the window rather than the check: the message is still judged, with no history.

No names, usernames, user IDs, phone numbers, or messages from other chats are sent. /aispam prints this list in the chat.

Failure Behaviour

The filter fails open: a timeout, rate limit, server error or unparseable answer produces no verdict and no action. 429 and 5xx get exactly one retry, honouring Retry-After. After five consecutive failures in a chat, checks for that chat pause for five minutes and the chat gets one notice; the stored setting is untouched, so protection resumes on its own.

Checks run on a bounded worker queue. When the queue is full — a raid, or a provider brownout — checks are shed rather than queued unbounded. A shed check means “not checked”, and antiflood still owns floods.

Required Permissions

Enabling is refused, with a message explaining why, when the bot operator has not configured an API key or has switched the filter off globally — an admin is never left believing their chat is protected when it is not.

Operator Setup

The key is registered with logredact, so it never appears in logs.