@poolzin/pool-bot 2026.2.23 → 2026.2.25

package/dist/plugins/runtime/index.js

@@ -1,30 +1,29 @@
 import { createRequire } from "node:module";
+import { resolveEffectiveMessagesConfig, resolveHumanDelayConfig } from "../../agents/identity.js";
+import { createMemoryGetTool, createMemorySearchTool } from "../../agents/tools/memory-tool.js";
+import { handleSlackAction } from "../../agents/tools/slack-actions.js";
 import { chunkByNewline, chunkMarkdownText, chunkMarkdownTextWithMode, chunkText, chunkTextWithMode, resolveChunkMode, resolveTextChunkLimit, } from "../../auto-reply/chunk.js";
 import { hasControlCommand, isControlCommandMessage, shouldComputeCommandAuthorized, } from "../../auto-reply/command-detection.js";
 import { shouldHandleTextCommands } from "../../auto-reply/commands-registry.js";
-import { createInboundDebouncer, resolveInboundDebounceMs, } from "../../auto-reply/inbound-debounce.js";
 import { formatAgentEnvelope, formatInboundEnvelope, resolveEnvelopeFormatOptions, } from "../../auto-reply/envelope.js";
+import { createInboundDebouncer, resolveInboundDebounceMs, } from "../../auto-reply/inbound-debounce.js";
 import { dispatchReplyFromConfig } from "../../auto-reply/reply/dispatch-from-config.js";
+import { finalizeInboundContext } from "../../auto-reply/reply/inbound-context.js";
 import { buildMentionRegexes, matchesMentionPatterns, matchesMentionWithExplicit, } from "../../auto-reply/reply/mentions.js";
 import { dispatchReplyWithBufferedBlockDispatcher } from "../../auto-reply/reply/provider-dispatcher.js";
 import { createReplyDispatcherWithTyping } from "../../auto-reply/reply/reply-dispatcher.js";
-import { finalizeInboundContext } from "../../auto-reply/reply/inbound-context.js";
-import { resolveEffectiveMessagesConfig, resolveHumanDelayConfig } from "../../agents/identity.js";
-import { createMemoryGetTool, createMemorySearchTool } from "../../agents/tools/memory-tool.js";
-import { handleSlackAction } from "../../agents/tools/slack-actions.js";
-import { handleWhatsAppAction } from "../../agents/tools/whatsapp-actions.js";
 import { removeAckReactionAfterReply, shouldAckReaction } from "../../channels/ack-reactions.js";
 import { resolveCommandAuthorizedFromAuthorizers } from "../../channels/command-gating.js";
-import { recordInboundSession } from "../../channels/session.js";
 import { discordMessageActions } from "../../channels/plugins/actions/discord.js";
 import { signalMessageActions } from "../../channels/plugins/actions/signal.js";
 import { telegramMessageActions } from "../../channels/plugins/actions/telegram.js";
 import { createWhatsAppLoginTool } from "../../channels/plugins/agent-tools/whatsapp-login.js";
-import { monitorWebChannel } from "../../channels/web/index.js";
+import { recordInboundSession } from "../../channels/session.js";
+import { registerMemoryCli } from "../../cli/memory-cli.js";
+import { loadConfig, writeConfigFile } from "../../config/config.js";
 import { resolveChannelGroupPolicy, resolveChannelGroupRequireMention, } from "../../config/group-policy.js";
 import { resolveMarkdownTableMode } from "../../config/markdown-tables.js";
 import { resolveStateDir } from "../../config/paths.js";
-import { loadConfig, writeConfigFile } from "../../config/config.js";
 import { readSessionUpdatedAt, recordSessionMetaFromInbound, resolveStorePath, updateLastRoute, } from "../../config/sessions.js";
 import { auditDiscordChannelPermissions } from "../../discord/audit.js";
 import { listDiscordDirectoryGroupsLive, listDiscordDirectoryPeersLive, } from "../../discord/directory-live.js";
@@ -33,15 +32,20 @@ import { probeDiscord } from "../../discord/probe.js";
 import { resolveDiscordChannelAllowlist } from "../../discord/resolve-channels.js";
 import { resolveDiscordUserAllowlist } from "../../discord/resolve-users.js";
 import { sendMessageDiscord, sendPollDiscord } from "../../discord/send.js";
-import { getChannelActivity, recordChannelActivity } from "../../infra/channel-activity.js";
-import { enqueueSystemEvent } from "../../infra/system-events.js";
+import { shouldLogVerbose } from "../../globals.js";
 import { monitorIMessageProvider } from "../../imessage/monitor.js";
 import { probeIMessage } from "../../imessage/probe.js";
 import { sendMessageIMessage } from "../../imessage/send.js";
-import { shouldLogVerbose } from "../../globals.js";
-import { convertMarkdownTables } from "../../markdown/tables.js";
+import { getChannelActivity, recordChannelActivity } from "../../infra/channel-activity.js";
+import { enqueueSystemEvent } from "../../infra/system-events.js";
+import { listLineAccountIds, normalizeAccountId as normalizeLineAccountId, resolveDefaultLineAccountId, resolveLineAccount, } from "../../line/accounts.js";
+import { monitorLineProvider } from "../../line/monitor.js";
+import { probeLineBot } from "../../line/probe.js";
+import { createQuickReplyItems, pushMessageLine, pushMessagesLine, pushFlexMessage, pushTemplateMessage, pushLocationMessage, pushTextMessageWithQuickReplies, sendMessageLine, } from "../../line/send.js";
+import { buildTemplateMessageFromPayload } from "../../line/template-messages.js";
 import { getChildLogger } from "../../logging.js";
 import { normalizeLogLevel } from "../../logging/levels.js";
+import { convertMarkdownTables } from "../../markdown/tables.js";
 import { isVoiceCompatibleAudio } from "../../media/audio.js";
 import { mediaKindFromMime } from "../../media/constants.js";
 import { fetchRemoteMedia } from "../../media/fetch.js";
@@ -55,8 +59,8 @@ import { resolveAgentRoute } from "../../routing/resolve-route.js";
 import { monitorSignalProvider } from "../../signal/index.js";
 import { probeSignal } from "../../signal/probe.js";
 import { sendMessageSignal } from "../../signal/send.js";
-import { monitorSlackProvider } from "../../slack/index.js";
 import { listSlackDirectoryGroupsLive, listSlackDirectoryPeersLive, } from "../../slack/directory-live.js";
+import { monitorSlackProvider } from "../../slack/index.js";
 import { probeSlack } from "../../slack/probe.js";
 import { resolveSlackChannelAllowlist } from "../../slack/resolve-channels.js";
 import { resolveSlackUserAllowlist } from "../../slack/resolve-users.js";
@@ -64,26 +68,18 @@ import { sendMessageSlack } from "../../slack/send.js";
 import { auditTelegramGroupMembership, collectTelegramUnmentionedGroupIds, } from "../../telegram/audit.js";
 import { monitorTelegramProvider } from "../../telegram/monitor.js";
 import { probeTelegram } from "../../telegram/probe.js";
-import { sendMessageTelegram } from "../../telegram/send.js";
+import { sendMessageTelegram, sendPollTelegram } from "../../telegram/send.js";
 import { resolveTelegramToken } from "../../telegram/token.js";
-import { loadWebMedia } from "../../web/media.js";
+import { textToSpeechTelephony } from "../../tts/tts.js";
 import { getActiveWebListener } from "../../web/active-listener.js";
 import { getWebAuthAgeMs, logoutWeb, logWebSelfId, readWebSelfId, webAuthExists, } from "../../web/auth-store.js";
-import { loginWeb } from "../../web/login.js";
-import { startWebLoginWithQr, waitForWebLogin } from "../../web/login-qr.js";
-import { sendMessageWhatsApp, sendPollWhatsApp } from "../../web/outbound.js";
-import { registerMemoryCli } from "../../cli/memory-cli.js";
+import { loadWebMedia } from "../../web/media.js";
 import { formatNativeDependencyHint } from "./native-deps.js";
-import { textToSpeechTelephony } from "../../tts/tts.js";
-import { listLineAccountIds, normalizeAccountId as normalizeLineAccountId, resolveDefaultLineAccountId, resolveLineAccount, } from "../../line/accounts.js";
-import { probeLineBot } from "../../line/probe.js";
-import { createQuickReplyItems, pushMessageLine, pushMessagesLine, pushFlexMessage, pushTemplateMessage, pushLocationMessage, pushTextMessageWithQuickReplies, sendMessageLine, } from "../../line/send.js";
-import { monitorLineProvider } from "../../line/monitor.js";
-import { buildTemplateMessageFromPayload } from "../../line/template-messages.js";
 let cachedVersion = null;
 function resolveVersion() {
-    if (cachedVersion)
+    if (cachedVersion) {
         return cachedVersion;
+    }
     try {
         const require = createRequire(import.meta.url);
         const pkg = require("../../../package.json");
@@ -95,196 +91,265 @@ function resolveVersion() {
         return cachedVersion;
     }
 }
+const sendMessageWhatsAppLazy = async (...args) => {
+    const { sendMessageWhatsApp } = await loadWebOutbound();
+    return sendMessageWhatsApp(...args);
+};
+const sendPollWhatsAppLazy = async (...args) => {
+    const { sendPollWhatsApp } = await loadWebOutbound();
+    return sendPollWhatsApp(...args);
+};
+const loginWebLazy = async (...args) => {
+    const { loginWeb } = await loadWebLogin();
+    return loginWeb(...args);
+};
+const startWebLoginWithQrLazy = async (...args) => {
+    const { startWebLoginWithQr } = await loadWebLoginQr();
+    return startWebLoginWithQr(...args);
+};
+const waitForWebLoginLazy = async (...args) => {
+    const { waitForWebLogin } = await loadWebLoginQr();
+    return waitForWebLogin(...args);
+};
+const monitorWebChannelLazy = async (...args) => {
+    const { monitorWebChannel } = await loadWebChannel();
+    return monitorWebChannel(...args);
+};
+const handleWhatsAppActionLazy = async (...args) => {
+    const { handleWhatsAppAction } = await loadWhatsAppActions();
+    return handleWhatsAppAction(...args);
+};
+let webOutboundPromise = null;
+let webLoginPromise = null;
+let webLoginQrPromise = null;
+let webChannelPromise = null;
+let whatsappActionsPromise = null;
+function loadWebOutbound() {
+    webOutboundPromise ??= import("../../web/outbound.js");
+    return webOutboundPromise;
+}
+function loadWebLogin() {
+    webLoginPromise ??= import("../../web/login.js");
+    return webLoginPromise;
+}
+function loadWebLoginQr() {
+    webLoginQrPromise ??= import("../../web/login-qr.js");
+    return webLoginQrPromise;
+}
+function loadWebChannel() {
+    webChannelPromise ??= import("../../channels/web/index.js");
+    return webChannelPromise;
+}
+function loadWhatsAppActions() {
+    whatsappActionsPromise ??= import("../../agents/tools/whatsapp-actions.js");
+    return whatsappActionsPromise;
+}
 export function createPluginRuntime() {
     return {
         version: resolveVersion(),
-        config: {
-            loadConfig,
-            writeConfigFile,
+        config: createRuntimeConfig(),
+        system: createRuntimeSystem(),
+        media: createRuntimeMedia(),
+        tts: { textToSpeechTelephony },
+        tools: createRuntimeTools(),
+        channel: createRuntimeChannel(),
+        logging: createRuntimeLogging(),
+        state: { resolveStateDir },
+    };
+}
+function createRuntimeConfig() {
+    return {
+        loadConfig,
+        writeConfigFile,
+    };
+}
+function createRuntimeSystem() {
+    return {
+        enqueueSystemEvent,
+        runCommandWithTimeout,
+        formatNativeDependencyHint,
+    };
+}
+function createRuntimeMedia() {
+    return {
+        loadWebMedia,
+        detectMime,
+        mediaKindFromMime,
+        isVoiceCompatibleAudio,
+        getImageMetadata,
+        resizeToJpeg,
+    };
+}
+function createRuntimeTools() {
+    return {
+        createMemoryGetTool,
+        createMemorySearchTool,
+        registerMemoryCli,
+    };
+}
+function createRuntimeChannel() {
+    return {
+        text: {
+            chunkByNewline,
+            chunkMarkdownText,
+            chunkMarkdownTextWithMode,
+            chunkText,
+            chunkTextWithMode,
+            resolveChunkMode,
+            resolveTextChunkLimit,
+            hasControlCommand,
+            resolveMarkdownTableMode,
+            convertMarkdownTables,
+        },
+        reply: {
+            dispatchReplyWithBufferedBlockDispatcher,
+            createReplyDispatcherWithTyping,
+            resolveEffectiveMessagesConfig,
+            resolveHumanDelayConfig,
+            dispatchReplyFromConfig,
+            finalizeInboundContext,
+            formatAgentEnvelope,
+            /** @deprecated Prefer `BodyForAgent` + structured user-context blocks (do not build plaintext envelopes for prompts). */
+            formatInboundEnvelope,
+            resolveEnvelopeFormatOptions,
         },
-        system: {
-            enqueueSystemEvent,
-            runCommandWithTimeout,
-            formatNativeDependencyHint,
+        routing: {
+            resolveAgentRoute,
+        },
+        pairing: {
+            buildPairingReply,
+            readAllowFromStore: readChannelAllowFromStore,
+            upsertPairingRequest: upsertChannelPairingRequest,
         },
         media: {
-            loadWebMedia,
-            detectMime,
-            mediaKindFromMime,
-            isVoiceCompatibleAudio,
-            getImageMetadata,
-            resizeToJpeg,
+            fetchRemoteMedia,
+            saveMediaBuffer,
+        },
+        activity: {
+            record: recordChannelActivity,
+            get: getChannelActivity,
+        },
+        session: {
+            resolveStorePath,
+            readSessionUpdatedAt,
+            recordSessionMetaFromInbound,
+            recordInboundSession,
+            updateLastRoute,
+        },
+        mentions: {
+            buildMentionRegexes,
+            matchesMentionPatterns,
+            matchesMentionWithExplicit,
+        },
+        reactions: {
+            shouldAckReaction,
+            removeAckReactionAfterReply,
         },
-        tts: {
-            textToSpeechTelephony,
+        groups: {
+            resolveGroupPolicy: resolveChannelGroupPolicy,
+            resolveRequireMention: resolveChannelGroupRequireMention,
         },
-        tools: {
-            createMemoryGetTool,
-            createMemorySearchTool,
-            registerMemoryCli,
+        debounce: {
+            createInboundDebouncer,
+            resolveInboundDebounceMs,
         },
-        channel: {
-            text: {
-                chunkByNewline,
-                chunkMarkdownText,
-                chunkMarkdownTextWithMode,
-                chunkText,
-                chunkTextWithMode,
-                resolveChunkMode,
-                resolveTextChunkLimit,
-                hasControlCommand,
-                resolveMarkdownTableMode,
-                convertMarkdownTables,
-            },
-            reply: {
-                dispatchReplyWithBufferedBlockDispatcher,
-                createReplyDispatcherWithTyping,
-                resolveEffectiveMessagesConfig,
-                resolveHumanDelayConfig,
-                dispatchReplyFromConfig,
-                finalizeInboundContext,
-                formatAgentEnvelope,
-                formatInboundEnvelope,
-                resolveEnvelopeFormatOptions,
-            },
-            routing: {
-                resolveAgentRoute,
-            },
-            pairing: {
-                buildPairingReply,
-                readAllowFromStore: readChannelAllowFromStore,
-                upsertPairingRequest: upsertChannelPairingRequest,
-            },
-            media: {
-                fetchRemoteMedia,
-                saveMediaBuffer,
-            },
-            activity: {
-                record: recordChannelActivity,
-                get: getChannelActivity,
-            },
-            session: {
-                resolveStorePath,
-                readSessionUpdatedAt,
-                recordSessionMetaFromInbound,
-                recordInboundSession,
-                updateLastRoute,
-            },
-            mentions: {
-                buildMentionRegexes,
-                matchesMentionPatterns,
-                matchesMentionWithExplicit,
-            },
-            reactions: {
-                shouldAckReaction,
-                removeAckReactionAfterReply,
-            },
-            groups: {
-                resolveGroupPolicy: resolveChannelGroupPolicy,
-                resolveRequireMention: resolveChannelGroupRequireMention,
-            },
-            debounce: {
-                createInboundDebouncer,
-                resolveInboundDebounceMs,
-            },
-            commands: {
-                resolveCommandAuthorizedFromAuthorizers,
-                isControlCommandMessage,
-                shouldComputeCommandAuthorized,
-                shouldHandleTextCommands,
-            },
-            discord: {
-                messageActions: discordMessageActions,
-                auditChannelPermissions: auditDiscordChannelPermissions,
-                listDirectoryGroupsLive: listDiscordDirectoryGroupsLive,
-                listDirectoryPeersLive: listDiscordDirectoryPeersLive,
-                probeDiscord,
-                resolveChannelAllowlist: resolveDiscordChannelAllowlist,
-                resolveUserAllowlist: resolveDiscordUserAllowlist,
-                sendMessageDiscord,
-                sendPollDiscord,
-                monitorDiscordProvider,
-            },
-            slack: {
-                listDirectoryGroupsLive: listSlackDirectoryGroupsLive,
-                listDirectoryPeersLive: listSlackDirectoryPeersLive,
-                probeSlack,
-                resolveChannelAllowlist: resolveSlackChannelAllowlist,
-                resolveUserAllowlist: resolveSlackUserAllowlist,
-                sendMessageSlack,
-                monitorSlackProvider,
-                handleSlackAction,
-            },
-            telegram: {
-                auditGroupMembership: auditTelegramGroupMembership,
-                collectUnmentionedGroupIds: collectTelegramUnmentionedGroupIds,
-                probeTelegram,
-                resolveTelegramToken,
-                sendMessageTelegram,
-                monitorTelegramProvider,
-                messageActions: telegramMessageActions,
-            },
-            signal: {
-                probeSignal,
-                sendMessageSignal,
-                monitorSignalProvider,
-                messageActions: signalMessageActions,
-            },
-            imessage: {
-                monitorIMessageProvider,
-                probeIMessage,
-                sendMessageIMessage,
-            },
-            whatsapp: {
-                getActiveWebListener,
-                getWebAuthAgeMs,
-                logoutWeb,
-                logWebSelfId,
-                readWebSelfId,
-                webAuthExists,
-                sendMessageWhatsApp,
-                sendPollWhatsApp,
-                loginWeb,
-                startWebLoginWithQr,
-                waitForWebLogin,
-                monitorWebChannel,
-                handleWhatsAppAction,
-                createLoginTool: createWhatsAppLoginTool,
-            },
-            line: {
-                listLineAccountIds,
-                resolveDefaultLineAccountId,
-                resolveLineAccount,
-                normalizeAccountId: normalizeLineAccountId,
-                probeLineBot,
-                sendMessageLine,
-                pushMessageLine,
-                pushMessagesLine,
-                pushFlexMessage,
-                pushTemplateMessage,
-                pushLocationMessage,
-                pushTextMessageWithQuickReplies,
-                createQuickReplyItems,
-                buildTemplateMessageFromPayload,
-                monitorLineProvider,
-            },
+        commands: {
+            resolveCommandAuthorizedFromAuthorizers,
+            isControlCommandMessage,
+            shouldComputeCommandAuthorized,
+            shouldHandleTextCommands,
         },
-        logging: {
-            shouldLogVerbose,
-            getChildLogger: (bindings, opts) => {
-                const logger = getChildLogger(bindings, {
-                    level: opts?.level ? normalizeLogLevel(opts.level) : undefined,
-                });
-                return {
-                    debug: (message) => logger.debug?.(message),
-                    info: (message) => logger.info(message),
-                    warn: (message) => logger.warn(message),
-                    error: (message) => logger.error(message),
-                };
-            },
+        discord: {
+            messageActions: discordMessageActions,
+            auditChannelPermissions: auditDiscordChannelPermissions,
+            listDirectoryGroupsLive: listDiscordDirectoryGroupsLive,
+            listDirectoryPeersLive: listDiscordDirectoryPeersLive,
+            probeDiscord,
+            resolveChannelAllowlist: resolveDiscordChannelAllowlist,
+            resolveUserAllowlist: resolveDiscordUserAllowlist,
+            sendMessageDiscord,
+            sendPollDiscord,
+            monitorDiscordProvider,
         },
-        state: {
-            resolveStateDir,
+        slack: {
+            listDirectoryGroupsLive: listSlackDirectoryGroupsLive,
+            listDirectoryPeersLive: listSlackDirectoryPeersLive,
+            probeSlack,
+            resolveChannelAllowlist: resolveSlackChannelAllowlist,
+            resolveUserAllowlist: resolveSlackUserAllowlist,
+            sendMessageSlack,
+            monitorSlackProvider,
+            handleSlackAction,
+        },
+        telegram: {
+            auditGroupMembership: auditTelegramGroupMembership,
+            collectUnmentionedGroupIds: collectTelegramUnmentionedGroupIds,
+            probeTelegram,
+            resolveTelegramToken,
+            sendMessageTelegram,
+            sendPollTelegram,
+            monitorTelegramProvider,
+            messageActions: telegramMessageActions,
+        },
+        signal: {
+            probeSignal,
+            sendMessageSignal,
+            monitorSignalProvider,
+            messageActions: signalMessageActions,
+        },
+        imessage: {
+            monitorIMessageProvider,
+            probeIMessage,
+            sendMessageIMessage,
+        },
+        whatsapp: {
+            getActiveWebListener,
+            getWebAuthAgeMs,
+            logoutWeb,
+            logWebSelfId,
+            readWebSelfId,
+            webAuthExists,
+            sendMessageWhatsApp: sendMessageWhatsAppLazy,
+            sendPollWhatsApp: sendPollWhatsAppLazy,
+            loginWeb: loginWebLazy,
+            startWebLoginWithQr: startWebLoginWithQrLazy,
+            waitForWebLogin: waitForWebLoginLazy,
+            monitorWebChannel: monitorWebChannelLazy,
+            handleWhatsAppAction: handleWhatsAppActionLazy,
+            createLoginTool: createWhatsAppLoginTool,
+        },
+        line: {
+            listLineAccountIds,
+            resolveDefaultLineAccountId,
+            resolveLineAccount,
+            normalizeAccountId: normalizeLineAccountId,
+            probeLineBot,
+            sendMessageLine,
+            pushMessageLine,
+            pushMessagesLine,
+            pushFlexMessage,
+            pushTemplateMessage,
+            pushLocationMessage,
+            pushTextMessageWithQuickReplies,
+            createQuickReplyItems,
+            buildTemplateMessageFromPayload,
+            monitorLineProvider,
+        },
+    };
+}
+function createRuntimeLogging() {
+    return {
+        shouldLogVerbose,
+        getChildLogger: (bindings, opts) => {
+            const logger = getChildLogger(bindings, {
+                level: opts?.level ? normalizeLogLevel(opts.level) : undefined,
+            });
+            return {
+                debug: (message) => logger.debug?.(message),
+                info: (message) => logger.info(message),
+                warn: (message) => logger.warn(message),
+                error: (message) => logger.error(message),
+            };
         },
     };
 }

package/dist/providers/github-copilot-models.js

@@ -4,6 +4,8 @@ const DEFAULT_MAX_TOKENS = 8192;
 // We keep this list intentionally broad; if a model isn't available Copilot will
 // return an error and users can remove it from their config.
 const DEFAULT_MODEL_IDS = [
+    "claude-sonnet-4.6",
+    "claude-sonnet-4.5",
     "gpt-4o",
     "gpt-4.1",
     "gpt-4.1-mini",
@@ -17,8 +19,9 @@ export function getDefaultCopilotModelIds() {
 }
 export function buildCopilotModelDefinition(modelId) {
     const id = modelId.trim();
-    if (!id)
+    if (!id) {
         throw new Error("Model id required");
+    }
     return {
         id,
         name: id,

package/dist/security/audit-channel.js

@@ -3,11 +3,10 @@ import { isNumericTelegramUserId, normalizeTelegramAllowFromEntry, } from "../ch
 import { formatCliCommand } from "../cli/command-format.js";
 import { resolveNativeCommandsEnabled, resolveNativeSkillsEnabled } from "../config/commands.js";
 import { readChannelAllowFromStore } from "../pairing/pairing-store.js";
+import { normalizeStringEntries } from "../shared/string-normalization.js";
+import { resolveDmAllowState } from "./dm-policy-shared.js";
 function normalizeAllowFromList(list) {
-    if (!Array.isArray(list)) {
-        return [];
-    }
-    return list.map((v) => String(v).trim()).filter(Boolean);
+    return normalizeStringEntries(Array.isArray(list) ? list : undefined);
 }
 function classifyChannelWarningSeverity(message) {
     const s = message.toLowerCase();
@@ -40,22 +39,12 @@ export async function collectChannelSecurityFindings(params) {
     };
     const warnDmPolicy = async (input) => {
         const policyPath = input.policyPath ?? `${input.allowFromPath}policy`;
-        const configAllowFrom = normalizeAllowFromList(input.allowFrom);
-        const hasWildcard = configAllowFrom.includes("*");
+        const { hasWildcard, isMultiUserDm } = await resolveDmAllowState({
+            provider: input.provider,
+            allowFrom: input.allowFrom,
+            normalizeEntry: input.normalizeEntry,
+        });
         const dmScope = params.cfg.session?.dmScope ?? "main";
-        const storeAllowFrom = await readChannelAllowFromStore(input.provider).catch(() => []);
-        const normalizeEntry = input.normalizeEntry ?? ((value) => value);
-        const normalizedCfg = configAllowFrom
-            .filter((value) => value !== "*")
-            .map((value) => normalizeEntry(value))
-            .map((value) => value.trim())
-            .filter(Boolean);
-        const normalizedStore = storeAllowFrom
-            .map((value) => normalizeEntry(value))
-            .map((value) => value.trim())
-            .filter(Boolean);
-        const allowCount = Array.from(new Set([...normalizedCfg, ...normalizedStore])).length;
-        const isMultiUserDm = hasWildcard || allowCount > 1;
         if (input.dmPolicy === "open") {
             const allowFromKey = `${input.allowFromPath}allowFrom`;
             findings.push({