fix(security): lock down inbound DMs by default

src/config/zod-schema.ts

@@ -87,6 +87,8 @@ const ReplyToModeSchema = z.union([
 //   - .default("open") ensures runtime always resolves to "open" if not provided
 const GroupPolicySchema = z.enum(["open", "disabled", "allowlist"]);
 
+const DmPolicySchema = z.enum(["pairing", "allowlist", "open", "disabled"]);
+
 const QueueModeBySurfaceSchema = z
   .object({
     whatsapp: QueueModeSchema.optional(),
@@ -674,6 +676,7 @@ export const ClawdbotSchema = z.object({
               enabled: z.boolean().optional(),
               /** Override auth directory for this WhatsApp account (Baileys multi-file auth state). */
               authDir: z.string().optional(),
+              dmPolicy: DmPolicySchema.optional().default("pairing"),
               allowFrom: z.array(z.string()).optional(),
               groupAllowFrom: z.array(z.string()).optional(),
               groupPolicy: GroupPolicySchema.optional().default("open"),
@@ -689,9 +692,23 @@ export const ClawdbotSchema = z.object({
                 )
                 .optional(),
             })
+            .superRefine((value, ctx) => {
+              if (value.dmPolicy !== "open") return;
+              const allow = (value.allowFrom ?? [])
+                .map((v) => String(v).trim())
+                .filter(Boolean);
+              if (allow.includes("*")) return;
+              ctx.addIssue({
+                code: z.ZodIssueCode.custom,
+                path: ["allowFrom"],
+                message:
+                  'whatsapp.accounts.*.dmPolicy="open" requires allowFrom to include "*"',
+              });
+            })
             .optional(),
         )
         .optional(),
+      dmPolicy: DmPolicySchema.optional().default("pairing"),
       allowFrom: z.array(z.string()).optional(),
       groupAllowFrom: z.array(z.string()).optional(),
       groupPolicy: GroupPolicySchema.optional().default("open"),
@@ -707,10 +724,24 @@ export const ClawdbotSchema = z.object({
         )
         .optional(),
     })
+    .superRefine((value, ctx) => {
+      if (value.dmPolicy !== "open") return;
+      const allow = (value.allowFrom ?? [])
+        .map((v) => String(v).trim())
+        .filter(Boolean);
+      if (allow.includes("*")) return;
+      ctx.addIssue({
+        code: z.ZodIssueCode.custom,
+        path: ["allowFrom"],
+        message:
+          'whatsapp.dmPolicy="open" requires whatsapp.allowFrom to include "*"',
+      });
+    })
     .optional(),
   telegram: z
     .object({
       enabled: z.boolean().optional(),
+      dmPolicy: DmPolicySchema.optional().default("pairing"),
       botToken: z.string().optional(),
       tokenFile: z.string().optional(),
       replyToMode: ReplyToModeSchema.optional(),
@@ -734,6 +765,19 @@ export const ClawdbotSchema = z.object({
       webhookSecret: z.string().optional(),
       webhookPath: z.string().optional(),
     })
+    .superRefine((value, ctx) => {
+      if (value.dmPolicy !== "open") return;
+      const allow = (value.allowFrom ?? [])
+        .map((v) => String(v).trim())
+        .filter(Boolean);
+      if (allow.includes("*")) return;
+      ctx.addIssue({
+        code: z.ZodIssueCode.custom,
+        path: ["allowFrom"],
+        message:
+          'telegram.dmPolicy="open" requires telegram.allowFrom to include "*"',
+      });
+    })
     .optional(),
   discord: z
     .object({
@@ -774,10 +818,24 @@ export const ClawdbotSchema = z.object({
       dm: z
         .object({
           enabled: z.boolean().optional(),
+          policy: DmPolicySchema.optional().default("pairing"),
           allowFrom: z.array(z.union([z.string(), z.number()])).optional(),
           groupEnabled: z.boolean().optional(),
           groupChannels: z.array(z.union([z.string(), z.number()])).optional(),
         })
+        .superRefine((value, ctx) => {
+          if (value.policy !== "open") return;
+          const allow = (value.allowFrom ?? [])
+            .map((v) => String(v).trim())
+            .filter(Boolean);
+          if (allow.includes("*")) return;
+          ctx.addIssue({
+            code: z.ZodIssueCode.custom,
+            path: ["allowFrom"],
+            message:
+              'discord.dm.policy="open" requires discord.dm.allowFrom to include "*"',
+          });
+        })
         .optional(),
       guilds: z
         .record(
@@ -842,10 +900,24 @@ export const ClawdbotSchema = z.object({
       dm: z
         .object({
           enabled: z.boolean().optional(),
+          policy: DmPolicySchema.optional().default("pairing"),
           allowFrom: z.array(z.union([z.string(), z.number()])).optional(),
           groupEnabled: z.boolean().optional(),
           groupChannels: z.array(z.union([z.string(), z.number()])).optional(),
         })
+        .superRefine((value, ctx) => {
+          if (value.policy !== "open") return;
+          const allow = (value.allowFrom ?? [])
+            .map((v) => String(v).trim())
+            .filter(Boolean);
+          if (allow.includes("*")) return;
+          ctx.addIssue({
+            code: z.ZodIssueCode.custom,
+            path: ["allowFrom"],
+            message:
+              'slack.dm.policy="open" requires slack.dm.allowFrom to include "*"',
+          });
+        })
         .optional(),
       channels: z
         .record(
@@ -875,11 +947,25 @@ export const ClawdbotSchema = z.object({
       ignoreAttachments: z.boolean().optional(),
       ignoreStories: z.boolean().optional(),
       sendReadReceipts: z.boolean().optional(),
+      dmPolicy: DmPolicySchema.optional().default("pairing"),
       allowFrom: z.array(z.union([z.string(), z.number()])).optional(),
       groupAllowFrom: z.array(z.union([z.string(), z.number()])).optional(),
       groupPolicy: GroupPolicySchema.optional().default("open"),
       textChunkLimit: z.number().int().positive().optional(),
-      mediaMaxMb: z.number().positive().optional(),
+      mediaMaxMb: z.number().int().positive().optional(),
+    })
+    .superRefine((value, ctx) => {
+      if (value.dmPolicy !== "open") return;
+      const allow = (value.allowFrom ?? [])
+        .map((v) => String(v).trim())
+        .filter(Boolean);
+      if (allow.includes("*")) return;
+      ctx.addIssue({
+        code: z.ZodIssueCode.custom,
+        path: ["allowFrom"],
+        message:
+          'signal.dmPolicy="open" requires signal.allowFrom to include "*"',
+      });
     })
     .optional(),
   imessage: z
@@ -891,11 +977,12 @@ export const ClawdbotSchema = z.object({
         .union([z.literal("imessage"), z.literal("sms"), z.literal("auto")])
         .optional(),
       region: z.string().optional(),
+      dmPolicy: DmPolicySchema.optional().default("pairing"),
       allowFrom: z.array(z.union([z.string(), z.number()])).optional(),
       groupAllowFrom: z.array(z.union([z.string(), z.number()])).optional(),
       groupPolicy: GroupPolicySchema.optional().default("open"),
       includeAttachments: z.boolean().optional(),
-      mediaMaxMb: z.number().positive().optional(),
+      mediaMaxMb: z.number().int().positive().optional(),
       textChunkLimit: z.number().int().positive().optional(),
       groups: z
         .record(
@@ -908,6 +995,19 @@ export const ClawdbotSchema = z.object({
         )
         .optional(),
     })
+    .superRefine((value, ctx) => {
+      if (value.dmPolicy !== "open") return;
+      const allow = (value.allowFrom ?? [])
+        .map((v) => String(v).trim())
+        .filter(Boolean);
+      if (allow.includes("*")) return;
+      ctx.addIssue({
+        code: z.ZodIssueCode.custom,
+        path: ["allowFrom"],
+        message:
+          'imessage.dmPolicy="open" requires imessage.allowFrom to include "*"',
+      });
+    })
     .optional(),
   bridge: z
     .object({