teleton 0.1.20 → 0.1.21

package/dist/{chunk-Y4G7HSOQ.js → chunk-LFQSHHRU.js}

@@ -21,7 +21,7 @@ import {
   UserStore,
   getDatabase,
   initializeMemory
-} from "./chunk-JDPS46IZ.js";
+} from "./chunk-Y5X6KZX5.js";
 import {
   ALLOWED_EXTENSIONS,
   MAX_FILE_SIZES,
@@ -1404,9 +1404,6 @@ var CasinoConfigSchema = z.object({
   max_bet_percent: z.number().default(5),
   min_bankroll: z.number().default(10),
   cooldown_seconds: z.number().default(30),
-  house_edge_percent: z.number().default(5),
-  jackpot_threshold: z.number().default(100),
-  jackpot_cooldown_hours: z.number().default(24),
   payment_window_minutes: z.number().default(5),
   max_payment_age_minutes: z.number().default(10),
   tx_retention_days: z.number().default(30),
@@ -1879,6 +1876,11 @@ function writeSummaryToDailyLog(summary) {
 ${summary}`);
 }
 
+// src/utils/sanitize.ts
+function sanitizeForPrompt(text) {
+  return text.replace(/[\x00-\x08\x0b\x0c\x0e-\x1f]/g, "").replace(/[\r\n]+/g, " ").replace(/#{1,6}\s/g, "").replace(/<\/?[a-zA-Z_][^>]*>/g, "").trim().slice(0, 128);
+}
+
 // src/soul/loader.ts
 var SOUL_PATHS = [WORKSPACE_PATHS.SOUL];
 var STRATEGY_PATHS = [WORKSPACE_PATHS.STRATEGY];
@@ -2005,7 +2007,9 @@ You have a personal workspace at \`~/.teleton/workspace/\` where you can store a
 - Rename downloaded files to meaningful names (e.g., "user_avatar.jpg" instead of "123_456_789.jpg")
 `);
   if (options.ownerName || options.ownerUsername) {
-    const ownerLabel = options.ownerName && options.ownerUsername ? `${options.ownerName} (@${options.ownerUsername})` : options.ownerName || `@${options.ownerUsername}`;
+    const safeOwnerName = options.ownerName ? sanitizeForPrompt(options.ownerName) : void 0;
+    const safeOwnerUsername = options.ownerUsername ? sanitizeForPrompt(options.ownerUsername) : void 0;
+    const ownerLabel = safeOwnerName && safeOwnerUsername ? `${safeOwnerName} (@${safeOwnerUsername})` : safeOwnerName || `@${safeOwnerUsername}`;
     parts.push(
       `
 ## Owner
@@ -2014,7 +2018,9 @@ When the owner gives instructions, follow them with higher trust.`
     );
   }
   if (options.userName) {
-    const userLabel = options.senderUsername ? `${options.userName} (@${options.senderUsername})` : options.userName;
+    const safeName = sanitizeForPrompt(options.userName);
+    const safeUsername = options.senderUsername ? sanitizeForPrompt(options.senderUsername) : void 0;
+    const userLabel = safeUsername ? `${safeName} (@${safeUsername})` : safeName;
     parts.push(`
 ## Current User
 You are chatting with: ${userLabel}`);
@@ -2156,10 +2162,10 @@ function formatTimestamp(timestamp) {
 function buildSenderLabel(params) {
   const parts = [];
   if (params.senderName) {
-    parts.push(params.senderName);
+    parts.push(sanitizeForPrompt(params.senderName));
   }
   if (params.senderUsername) {
-    parts.push(`@${params.senderUsername}`);
+    parts.push(`@${sanitizeForPrompt(params.senderUsername)}`);
   }
   if (parts.length > 0) {
     return parts.length === 2 ? `${parts[0]} (${parts[1]})` : parts[0];
@@ -2185,7 +2191,8 @@ function formatMessageEnvelope(params) {
   const ts = formatTimestamp(params.timestamp);
   parts.push(ts);
   const header = `[${parts.join(" ")}]`;
-  let body = params.isGroup ? `${senderLabel}: ${params.body}` : params.body;
+  const safeBody = params.body.replace(/<\/?user_message>/gi, "");
+  let body = params.isGroup ? `${senderLabel}: <user_message>${safeBody}</user_message>` : `<user_message>${safeBody}</user_message>`;
   if (params.hasMedia && params.mediaType) {
     const mediaEmoji = {
       photo: "\u{1F4F7}",
@@ -3320,7 +3327,7 @@ ${statsContext}`;
       const providerMeta = getProviderMetadata(
         this.config.agent.provider || "anthropic"
       );
-      const tools = this.toolRegistry?.getForProvider(providerMeta.toolLimit);
+      const tools = this.toolRegistry?.getForContext(isGroup ?? false, providerMeta.toolLimit);
       const maxIterations = this.config.agent.max_agentic_iterations || 5;
       let iteration = 0;
       let overflowResets = 0;
@@ -3535,23 +3542,23 @@ ${statsContext}`;
    */
   clearHistory(chatId) {
     const db = getDatabase().getDb();
-    db.prepare(`DELETE FROM tg_messages WHERE chat_id = ?`).run(chatId);
     db.prepare(
       `
-      DELETE FROM tg_messages_vec
-      WHERE id IN (
-        SELECT id FROM tg_messages WHERE chat_id = ?
+      DELETE FROM tg_messages_fts
+      WHERE rowid IN (
+        SELECT rowid FROM tg_messages WHERE chat_id = ?
       )
     `
     ).run(chatId);
     db.prepare(
       `
-      DELETE FROM tg_messages_fts
-      WHERE rowid IN (
-        SELECT rowid FROM tg_messages WHERE chat_id = ?
+      DELETE FROM tg_messages_vec
+      WHERE id IN (
+        SELECT id FROM tg_messages WHERE chat_id = ?
       )
     `
     ).run(chatId);
+    db.prepare(`DELETE FROM tg_messages WHERE chat_id = ?`).run(chatId);
     resetSession(chatId);
     console.log(`\u{1F5D1}\uFE0F  Cleared history for chat ${chatId}`);
   }
@@ -3645,7 +3652,7 @@ function markdownToTelegramHtml(markdown) {
   html = html.replace(listPattern, (match) => {
     const index = blockquotes.length;
     const lineCount = match.split("\n").length;
-    const content = match.replace(/\|\|([^|]+)\|\|/g, "<tg-spoiler>$1</tg-spoiler>").replace(/\*\*([^*]+)\*\*/g, "<b>$1</b>").replace(/__([^_]+)__/g, "<b>$1</b>").replace(/~~([^~]+)~~/g, "<s>$1</s>").replace(/(?<!\*)\*([^*]+)\*(?!\*)/g, "<i>$1</i>").replace(/(?<!_)_([^_]+)_(?!_)/g, "<i>$1</i>").replace(/\[([^\]]+)\]\(([^)]+)\)/g, '<a href="$2">$1</a>');
+    const content = escapeHtml(match).replace(/\|\|([^|]+)\|\|/g, "<tg-spoiler>$1</tg-spoiler>").replace(/\*\*([^*]+)\*\*/g, "<b>$1</b>").replace(/__([^_]+)__/g, "<b>$1</b>").replace(/~~([^~]+)~~/g, "<s>$1</s>").replace(/(?<!\*)\*([^*]+)\*(?!\*)/g, "<i>$1</i>").replace(/(?<!_)_([^_]+)_(?!_)/g, "<i>$1</i>").replace(/\[([^\]]+)\]\(([^)]+)\)/g, '<a href="$2">$1</a>');
     const tag = lineCount >= 15 ? "<blockquote expandable>" : "<blockquote>";
     blockquotes.push(`${tag}${content}</blockquote>`);
     return `\0BLOCKQUOTE${index}\0`;
@@ -3653,12 +3660,15 @@ function markdownToTelegramHtml(markdown) {
   html = html.replace(/^(>.*(?:\n>.*)*)/gm, (match) => {
     const index = blockquotes.length;
     const lineCount = match.split("\n").length;
-    let content = match.split("\n").map((line) => line.replace(/^>\s?/, "")).join("\n");
+    let content = escapeHtml(
+      match.split("\n").map((line) => line.replace(/^>\s?/, "")).join("\n")
+    );
     content = content.replace(/\|\|([^|]+)\|\|/g, "<tg-spoiler>$1</tg-spoiler>").replace(/\*\*([^*]+)\*\*/g, "<b>$1</b>").replace(/__([^_]+)__/g, "<b>$1</b>").replace(/~~([^~]+)~~/g, "<s>$1</s>").replace(/(?<!\*)\*([^*]+)\*(?!\*)/g, "<i>$1</i>").replace(/(?<!_)_([^_]+)_(?!_)/g, "<i>$1</i>").replace(/\[([^\]]+)\]\(([^)]+)\)/g, '<a href="$2">$1</a>');
     const tag = lineCount >= 15 ? "<blockquote expandable>" : "<blockquote>";
     blockquotes.push(`${tag}${content}</blockquote>`);
     return `\0BLOCKQUOTE${index}\0`;
   });
+  html = escapeHtml(html);
   html = html.replace(/\|\|([^|]+)\|\|/g, "<tg-spoiler>$1</tg-spoiler>");
   html = html.replace(/\*\*([^*]+)\*\*/g, "<b>$1</b>");
   html = html.replace(/__([^_]+)__/g, "<b>$1</b>");
@@ -4336,15 +4346,16 @@ var PendingHistory = class _PendingHistory {
     const lines = pending.map((msg) => {
       let senderLabel;
       if (msg.senderName && msg.senderUsername) {
-        senderLabel = `${msg.senderName} (@${msg.senderUsername})`;
+        senderLabel = `${sanitizeForPrompt(msg.senderName)} (@${sanitizeForPrompt(msg.senderUsername)})`;
       } else if (msg.senderName) {
-        senderLabel = msg.senderName;
+        senderLabel = sanitizeForPrompt(msg.senderName);
       } else if (msg.senderUsername) {
-        senderLabel = `@${msg.senderUsername}`;
+        senderLabel = `@${sanitizeForPrompt(msg.senderUsername)}`;
       } else {
         senderLabel = `User:${msg.senderId}`;
       }
-      return `${senderLabel}: ${msg.text}`;
+      const safeText = msg.text.replace(/<\/?user_message>/gi, "");
+      return `${senderLabel}: <user_message>${safeText}</user_message>`;
     });
     this.pendingMessages.delete(chatId);
     return `[Chat messages since your last reply]
@@ -4798,8 +4809,8 @@ async function getWalletBalance(address4) {
   try {
     const endpoint = await getHttpEndpoint({ network: "mainnet" });
     const client = new TonClient({ endpoint });
-    const { Address: Address20 } = await import("@ton/core");
-    const addressObj = Address20.parse(address4);
+    const { Address: Address19 } = await import("@ton/core");
+    const addressObj = Address19.parse(address4);
     const balance = await client.getBalance(addressObj);
     const balanceFormatted = fromNano(balance);
     return {
@@ -5668,14 +5679,18 @@ import { join as join14 } from "path";
 import { validateToolCall } from "@mariozechner/pi-ai";
 var ToolRegistry = class {
   tools = /* @__PURE__ */ new Map();
+  scopes = /* @__PURE__ */ new Map();
   /**
-   * Register a new tool
+   * Register a new tool with optional scope
    */
-  register(tool, executor) {
+  register(tool, executor, scope) {
     if (this.tools.has(tool.name)) {
       throw new Error(`Tool "${tool.name}" is already registered`);
     }
     this.tools.set(tool.name, { tool, executor });
+    if (scope && scope !== "always") {
+      this.scopes.set(tool.name, scope);
+    }
   }
   /**
    * Get all registered tools for pi-ai
@@ -5694,6 +5709,19 @@ var ToolRegistry = class {
         error: `Unknown tool: ${toolCall.name}`
       };
     }
+    const scope = this.scopes.get(toolCall.name);
+    if (scope === "dm-only" && context.isGroup) {
+      return {
+        success: false,
+        error: `Tool "${toolCall.name}" is not available in group chats`
+      };
+    }
+    if (scope === "group-only" && !context.isGroup) {
+      return {
+        success: false,
+        error: `Tool "${toolCall.name}" is only available in group chats`
+      };
+    }
     try {
       const validatedArgs = validateToolCall(this.getAll(), toolCall);
       const result = await registered.executor(validatedArgs, context);
@@ -5719,6 +5747,22 @@ var ToolRegistry = class {
     );
     return all.slice(0, toolLimit);
   }
+  /**
+   * Get tools filtered by chat context (DM vs group) and provider limit.
+   * - In groups: excludes "dm-only" tools (financial, private)
+   * - In DMs: excludes "group-only" tools (moderation)
+   */
+  getForContext(isGroup, toolLimit) {
+    const excluded = isGroup ? "dm-only" : "group-only";
+    const filtered = Array.from(this.tools.values()).filter((rt) => this.scopes.get(rt.tool.name) !== excluded).map((rt) => rt.tool);
+    if (toolLimit !== null && filtered.length > toolLimit) {
+      console.warn(
+        `\u26A0\uFE0F Provider tool limit: ${toolLimit}, after scope filter: ${filtered.length}. Truncating to ${toolLimit} tools.`
+      );
+      return filtered.slice(0, toolLimit);
+    }
+    return filtered;
+  }
   /**
    * Check if a tool is registered
    */
@@ -19805,26 +19849,18 @@ var CASINO_CONFIG = {
   // Cooldown
   cooldownSeconds: 30,
   // Seconds between spins per user
-  // House edge
-  houseEdgePercent: 5,
-  // % of each bet goes to jackpot
-  // Jackpot
-  jackpotThreshold: 100,
-  // Minimum TON to award jackpot
-  jackpotCooldownHours: 24,
-  // Hours between jackpot awards
-  // Slot multipliers (40% house edge, 60% payout)
+  // Slot multipliers
   slot: {
-    jackpot: { range: [64, 64], multiplier: 5 },
+    topWin: { range: [64, 64], multiplier: 5 },
     // 777
     bigWin: { range: [60, 63], multiplier: 2.5 },
     mediumWin: { range: [55, 59], multiplier: 1.8 },
     smallWin: { range: [43, 54], multiplier: 1.2 }
     // Values 1-42: no win
   },
-  // Dice multipliers (6.7% house edge, 93.3% payout)
+  // Dice multipliers
   dice: {
-    jackpot: { value: 6, multiplier: 2.5 },
+    topWin: { value: 6, multiplier: 2.5 },
     bigWin: { value: 5, multiplier: 1.8 },
     smallWin: { value: 4, multiplier: 1.3 }
     // Values 1-3: no win
@@ -19852,11 +19888,6 @@ function initCasinoConfig(yaml) {
   if (yaml.max_bet_percent !== void 0) CASINO_CONFIG.maxBetPercent = yaml.max_bet_percent;
   if (yaml.min_bankroll !== void 0) CASINO_CONFIG.minBankroll = yaml.min_bankroll;
   if (yaml.cooldown_seconds !== void 0) CASINO_CONFIG.cooldownSeconds = yaml.cooldown_seconds;
-  if (yaml.house_edge_percent !== void 0)
-    CASINO_CONFIG.houseEdgePercent = yaml.house_edge_percent;
-  if (yaml.jackpot_threshold !== void 0) CASINO_CONFIG.jackpotThreshold = yaml.jackpot_threshold;
-  if (yaml.jackpot_cooldown_hours !== void 0)
-    CASINO_CONFIG.jackpotCooldownHours = yaml.jackpot_cooldown_hours;
   if (yaml.payment_window_minutes !== void 0)
     CASINO_CONFIG.paymentWindowMinutes = yaml.payment_window_minutes;
   if (yaml.max_payment_age_minutes !== void 0)
@@ -19871,8 +19902,7 @@ function initCasinoConfig(yaml) {
 }
 function getSlotMultiplier(value) {
   const { slot } = CASINO_CONFIG;
-  if (value >= slot.jackpot.range[0] && value <= slot.jackpot.range[1])
-    return slot.jackpot.multiplier;
+  if (value >= slot.topWin.range[0] && value <= slot.topWin.range[1]) return slot.topWin.multiplier;
   if (value >= slot.bigWin.range[0] && value <= slot.bigWin.range[1]) return slot.bigWin.multiplier;
   if (value >= slot.mediumWin.range[0] && value <= slot.mediumWin.range[1])
     return slot.mediumWin.multiplier;
@@ -19882,14 +19912,14 @@ function getSlotMultiplier(value) {
 }
 function getDiceMultiplier(value) {
   const { dice } = CASINO_CONFIG;
-  if (value === dice.jackpot.value) return dice.jackpot.multiplier;
+  if (value === dice.topWin.value) return dice.topWin.multiplier;
   if (value === dice.bigWin.value) return dice.bigWin.multiplier;
   if (value === dice.smallWin.value) return dice.smallWin.multiplier;
   return 0;
 }
 function getSlotInterpretation(value) {
   const { slot } = CASINO_CONFIG;
-  if (value >= slot.jackpot.range[0] && value <= slot.jackpot.range[1]) return "\u{1F3B0} JACKPOT 777!";
+  if (value >= slot.topWin.range[0] && value <= slot.topWin.range[1]) return "\u{1F3B0} 777! Top win!";
   if (value >= slot.bigWin.range[0] && value <= slot.bigWin.range[1]) return "\u{1F38A} Big win!";
   if (value >= slot.mediumWin.range[0] && value <= slot.mediumWin.range[1]) return "\u2728 Nice win!";
   if (value >= slot.smallWin.range[0] && value <= slot.smallWin.range[1]) return "\u{1F3AF} Small win!";
@@ -19897,7 +19927,7 @@ function getSlotInterpretation(value) {
 }
 function getDiceInterpretation(value) {
   const { dice } = CASINO_CONFIG;
-  if (value === dice.jackpot.value) return "\u{1F3B2} JACKPOT 6!";
+  if (value === dice.topWin.value) return "\u{1F3B2} 6! Top win!";
   if (value === dice.bigWin.value) return "\u{1F38A} Big win (5)!";
   if (value === dice.smallWin.value) return "\u2728 Nice win (4)!";
   return `Dice: ${value}`;
@@ -19955,9 +19985,9 @@ var casinoBalanceExecutor = async (params, context) => {
       message = `\u2705 Casino bankroll is healthy (${balance.toFixed(2)} TON)`;
       canAcceptBets = true;
     }
-    const jackpotMultiplier = CASINO_CONFIG.slot.jackpot.multiplier;
+    const maxMultiplier = CASINO_CONFIG.slot.topWin.multiplier;
     const maxBetByPercent = balance * (CASINO_CONFIG.maxBetPercent / 100);
-    const maxBetByCoverage = balance / jackpotMultiplier;
+    const maxBetByCoverage = balance / maxMultiplier;
     const maxBet = Math.min(maxBetByPercent, maxBetByCoverage);
     return {
       success: true,
@@ -19971,7 +20001,7 @@ var casinoBalanceExecutor = async (params, context) => {
         maxBet: maxBet.toFixed(2),
         minBankroll: CASINO_CONFIG.minBankroll,
         maxBetPercent: CASINO_CONFIG.maxBetPercent,
-        jackpotMultiplier,
+        maxMultiplier,
         memoFormat: "{username}",
         message
       }
@@ -19994,7 +20024,19 @@ import { Api as Api53 } from "telegram";
 // src/casino/payment-verifier.ts
 import { TonClient as TonClient15, fromNano as fromNano8 } from "@ton/ton";
 import { Address as Address16 } from "@ton/core";
+
+// src/ton/endpoint.ts
 import { getHttpEndpoint as getHttpEndpoint15 } from "@orbs-network/ton-access";
+var ENDPOINT_CACHE_TTL_MS = 6e4;
+var _cache = null;
+async function getCachedHttpEndpoint() {
+  if (_cache && Date.now() - _cache.ts < ENDPOINT_CACHE_TTL_MS) {
+    return _cache.url;
+  }
+  const url = await getHttpEndpoint15({ network: "mainnet" });
+  _cache = { url, ts: Date.now() };
+  return url;
+}
 
 // src/casino/retry.ts
 var DEFAULT_OPTIONS = {
@@ -20068,7 +20110,7 @@ function verifyMemo(memo, identifier) {
 async function verifyPayment(db, params) {
   try {
     const { botWalletAddress, betAmount, requestTime, gameType, userId } = params;
-    const endpoint = await getHttpEndpoint15({ network: "mainnet" });
+    const endpoint = await getCachedHttpEndpoint();
     const client = new TonClient15({ endpoint });
     const botAddress = Address16.parse(botWalletAddress);
     const transactions = await withBlockchainRetry(
@@ -20169,67 +20211,10 @@ function updateCooldown(db, userId) {
   ).run(userId, now);
 }
 
-// src/casino/jackpot-manager.ts
-function getJackpot(db) {
-  const row = db.prepare("SELECT * FROM casino_jackpot WHERE id = 1").get();
-  return row;
-}
-function addToJackpot(db, amount) {
-  const now = Math.floor(Date.now() / 1e3);
-  db.prepare(
-    `
-    UPDATE casino_jackpot
-    SET amount = amount + ?,
-        updated_at = ?
-    WHERE id = 1
-  `
-  ).run(amount, now);
-  const updated = getJackpot(db);
-  return updated.amount;
-}
-function awardJackpot(db, winnerId) {
-  const jackpot = getJackpot(db);
-  const amount = jackpot.amount;
-  const now = Math.floor(Date.now() / 1e3);
-  db.prepare(
-    `
-    UPDATE casino_jackpot
-    SET amount = 0,
-        last_winner_id = ?,
-        last_won_at = ?,
-        updated_at = ?
-    WHERE id = 1
-  `
-  ).run(winnerId, now, now);
-  return { amount, winnerId };
-}
-function calculateHouseEdge(betAmount) {
-  return betAmount * (CASINO_CONFIG.houseEdgePercent / 100);
-}
-function processBetForJackpot(db, betAmount) {
-  const houseEdge = calculateHouseEdge(betAmount);
-  addToJackpot(db, houseEdge);
-  return houseEdge;
-}
-function shouldAwardDailyJackpot(db) {
-  const jackpot = getJackpot(db);
-  const cooldownSeconds = CASINO_CONFIG.jackpotCooldownHours * 60 * 60;
-  const now = Math.floor(Date.now() / 1e3);
-  if (jackpot.amount < CASINO_CONFIG.jackpotThreshold) {
-    return false;
-  }
-  if (!jackpot.lastWonAt) {
-    return true;
-  }
-  const timeSinceLastWin = now - jackpot.lastWonAt;
-  return timeSinceLastWin >= cooldownSeconds;
-}
-
 // src/casino/payout-sender.ts
 import { mnemonicToPrivateKey as mnemonicToPrivateKey11 } from "@ton/crypto";
 import { WalletContractV5R1 as WalletContractV5R111, TonClient as TonClient16, toNano as toNano25, internal as internal9 } from "@ton/ton";
 import { Address as Address17, SendMode as SendMode9 } from "@ton/core";
-import { getHttpEndpoint as getHttpEndpoint16 } from "@orbs-network/ton-access";
 async function sendPayout(playerAddress, amount, message) {
   try {
     try {
@@ -20252,7 +20237,7 @@ async function sendPayout(playerAddress, amount, message) {
       workchain: 0,
       publicKey: keyPair.publicKey
     });
-    const endpoint = await getHttpEndpoint16({ network: "mainnet" });
+    const endpoint = await getCachedHttpEndpoint();
     const client = new TonClient16({ endpoint });
     const contract = client.open(wallet);
     const seqno = await withBlockchainRetry(() => contract.getSeqno(), "getSeqno");
@@ -20294,7 +20279,7 @@ async function sendPayout(playerAddress, amount, message) {
 }
 function getWinMessage(multiplier, amount) {
   if (multiplier >= 5) {
-    return `\u{1F3B0} JACKPOT! You won ${amount.toFixed(2)} TON (${multiplier}x)`;
+    return `\u{1F3B0} 777! You won ${amount.toFixed(2)} TON (${multiplier}x)`;
   } else if (multiplier >= 2.5) {
     return `\u{1F38A} Big win! You won ${amount.toFixed(2)} TON (${multiplier}x)`;
   } else if (multiplier >= 1.8) {
@@ -20448,11 +20433,9 @@ async function executeGame(config, params, context) {
         error: `Failed to get ${config.gameType} result from Telegram.`
       };
     }
-    const houseEdge = processBetForJackpot(context.db, bet_amount);
     const multiplier = config.getMultiplier(gameValue);
     const won = multiplier > 0;
     const payoutAmount = won ? bet_amount * multiplier : 0;
-    const jackpot = getJackpot(context.db);
     const recordBet = context.db.transaction(() => {
       context.db.prepare(
         `INSERT INTO casino_users (telegram_id, wallet_address, total_bets, total_wagered, last_bet_at)
@@ -20526,8 +20509,6 @@ async function executeGame(config, params, context) {
         bet_amount: bet_amount.toFixed(2),
         player_username: username,
         player_wallet: playerWallet,
-        house_edge: houseEdge.toFixed(2),
-        current_jackpot: jackpot.amount.toFixed(2),
         payment_tx_hash: paymentVerification.txHash,
         journal_id: journalId,
         message_id: messageId,
@@ -20548,8 +20529,8 @@ var casinoSpinTool = {
   name: "casino_spin",
   description: `Execute a Teleton Casino slot machine spin with full security checks.
 
-Slot payout table (40% house edge):
-- \u{1F3B0} 64 (777) = JACKPOT (5x bet)
+Slot payout table:
+- \u{1F3B0} 64 (777) = 5x bet
 - \u{1F3B0} 60-63 = Big win (2.5x bet)
 - \u{1F3B0} 55-59 = Medium win (1.8x bet)
 - \u{1F3B0} 43-54 = Small win (1.2x bet)
@@ -20561,8 +20542,7 @@ Process:
 3. Verifies TON payment with username as memo
 4. Auto-discovers player wallet from transaction
 5. Sends \u{1F3B0} slot machine animation
-6. Processes house edge (5%) to daily jackpot
-7. AUTO-PAYOUT if player wins
+6. AUTO-PAYOUT if player wins
 
 Tell the user: "Send X TON to [casino_address] with memo: your_username"`,
   parameters: Type106.Object({
@@ -20590,7 +20570,7 @@ var casinoSpinExecutor = async (params, context) => {
       gameType: "slot",
       toolName: "casino_spin",
       assetLabel: "SPIN",
-      maxMultiplier: CASINO_CONFIG.slot.jackpot.multiplier,
+      maxMultiplier: CASINO_CONFIG.slot.topWin.multiplier,
       getMultiplier: getSlotMultiplier,
       getInterpretation: getSlotInterpretation,
       maxValue: 64
@@ -20607,7 +20587,7 @@ var casinoDiceTool = {
   description: `Execute a Teleton Casino dice roll with full security checks.
 
 Dice payout table:
-- \u{1F3B2} 6 = JACKPOT (2.5x bet)
+- \u{1F3B2} 6 = Best roll (2.5x bet)
 - \u{1F3B2} 5 = Big win (1.8x bet)
 - \u{1F3B2} 4 = Small win (1.3x bet)
 - \u{1F3B2} 1-3 = No win
@@ -20646,7 +20626,7 @@ var casinoDiceExecutor = async (params, context) => {
       gameType: "dice",
       toolName: "casino_dice",
       assetLabel: "DICE",
-      maxMultiplier: CASINO_CONFIG.dice.jackpot.multiplier,
+      maxMultiplier: CASINO_CONFIG.dice.topWin.multiplier,
       getMultiplier: getDiceMultiplier,
       getInterpretation: getDiceInterpretation,
       maxValue: 6
@@ -20656,192 +20636,8 @@ var casinoDiceExecutor = async (params, context) => {
   );
 };
 
-// src/agent/tools/casino/payout.ts
-import { Type as Type108 } from "@sinclair/typebox";
-import { mnemonicToPrivateKey as mnemonicToPrivateKey12 } from "@ton/crypto";
-import { WalletContractV5R1 as WalletContractV5R112, TonClient as TonClient17, toNano as toNano26, internal as internal10 } from "@ton/ton";
-import { Address as Address18, SendMode as SendMode10 } from "@ton/core";
-import { getHttpEndpoint as getHttpEndpoint17 } from "@orbs-network/ton-access";
-var casinoPayoutTool = {
-  name: "casino_payout",
-  description: `Manual payout for Teleton Casino (backup tool - normally not needed).
-
-NOTE: casino_spin and casino_dice already include AUTO-PAYOUT.
-Only use this tool if auto-payout failed and manual intervention is needed.
-
-Slot payout table (40% house edge):
-- Value 64 (\u{1F3B0} 777 Jackpot): 5x bet
-- Values 60-63 (Big win): 2.5x bet
-- Values 55-59 (Medium win): 1.8x bet
-- Values 43-54 (Small win): 1.2x bet
-- Values 1-42: No payout
-
-Sends TON to winner's address and updates journal entry.`,
-  parameters: Type108.Object({
-    player_address: Type108.String({
-      description: "Player's TON wallet address to send winnings"
-    }),
-    bet_amount: Type108.Number({
-      description: "Original bet amount in TON",
-      minimum: 1e-3
-    }),
-    slot_value: Type108.Number({
-      description: "Slot machine result (1-64)",
-      minimum: 1,
-      maximum: 64
-    }),
-    journal_entry_id: Type108.Optional(
-      Type108.Number({
-        description: "Journal entry ID to update with payout info"
-      })
-    )
-  })
-};
-var casinoPayoutExecutor = async (params, context) => {
-  try {
-    const { player_address, bet_amount, slot_value, journal_entry_id } = params;
-    if (!journal_entry_id || !context.db) {
-      return {
-        success: false,
-        error: "Security restriction: casino_payout requires a journal_entry_id from a real spin/dice result."
-      };
-    }
-    const journalEntry = context.db.prepare(
-      `SELECT id, user_id, amount_from, pnl_ton FROM journal WHERE id = ? AND type IN ('casino_spin', 'casino_dice')`
-    ).get(journal_entry_id);
-    if (!journalEntry) {
-      return {
-        success: false,
-        error: `No casino spin/dice found with journal entry #${journal_entry_id}. Cannot send payout without a verified game.`
-      };
-    }
-    if (Math.abs(journalEntry.amount_from - bet_amount) > 0.01) {
-      return {
-        success: false,
-        error: `Bet amount mismatch: journal says ${journalEntry.amount_from} TON but requested ${bet_amount} TON.`
-      };
-    }
-    const multiplier = getSlotMultiplier(slot_value);
-    if (multiplier === 0) {
-      if (journal_entry_id && context.db) {
-        context.db.prepare(
-          `
-          UPDATE journal
-          SET outcome = 'profit',
-              amount_to = 0,
-              pnl_ton = ?,
-              closed_at = unixepoch()
-          WHERE id = ?
-        `
-        ).run(bet_amount, journal_entry_id);
-        context.db.prepare(
-          `
-          UPDATE casino_users
-          SET total_losses = total_losses + 1
-          WHERE telegram_id = (
-            SELECT user_id FROM journal WHERE id = ?
-          )
-        `
-        ).run(journal_entry_id);
-      }
-      return {
-        success: true,
-        data: {
-          win: false,
-          multiplier: 0,
-          payout: 0,
-          slot_value,
-          message: `No win this time. Slot value: ${slot_value}`
-        }
-      };
-    }
-    const payout = bet_amount * multiplier;
-    try {
-      Address18.parse(player_address);
-    } catch (e) {
-      return {
-        success: false,
-        error: `Invalid player address: ${player_address}`
-      };
-    }
-    const walletData = loadWallet();
-    if (!walletData) {
-      return {
-        success: false,
-        error: "Casino wallet not initialized. Contact admin."
-      };
-    }
-    const keyPair = await mnemonicToPrivateKey12(walletData.mnemonic);
-    const wallet = WalletContractV5R112.create({
-      workchain: 0,
-      publicKey: keyPair.publicKey
-    });
-    const endpoint = await getHttpEndpoint17({ network: "mainnet" });
-    const client = new TonClient17({ endpoint });
-    const contract = client.open(wallet);
-    const seqno = await contract.getSeqno();
-    const winType = getSlotInterpretation(slot_value);
-    await contract.sendTransfer({
-      seqno,
-      secretKey: keyPair.secretKey,
-      sendMode: SendMode10.PAY_GAS_SEPARATELY + SendMode10.IGNORE_ERRORS,
-      messages: [
-        internal10({
-          to: Address18.parse(player_address),
-          value: toNano26(payout),
-          body: `${winType} You won ${payout} TON (${multiplier}x)`,
-          bounce: false
-        })
-      ]
-    });
-    if (journal_entry_id && context.db) {
-      const profit = payout - bet_amount;
-      context.db.prepare(
-        `
-        UPDATE journal
-        SET outcome = 'loss',
-            amount_to = ?,
-            pnl_ton = ?,
-            pnl_pct = ?,
-            closed_at = unixepoch()
-        WHERE id = ?
-      `
-      ).run(payout, -profit, -(profit / bet_amount * 100), journal_entry_id);
-    }
-    if (context.db) {
-      context.db.prepare(
-        `
-        UPDATE casino_users
-        SET total_wins = total_wins + 1,
-            total_won = total_won + ?
-        WHERE telegram_id = (
-          SELECT user_id FROM journal WHERE id = ?
-        )
-      `
-      ).run(payout, journal_entry_id || 0);
-    }
-    return {
-      success: true,
-      data: {
-        win: true,
-        multiplier,
-        payout: payout.toFixed(2),
-        slot_value,
-        player_address,
-        message: `${winType} Sent ${payout.toFixed(2)} TON (${multiplier}x) to ${player_address}`
-      }
-    };
-  } catch (error) {
-    console.error("Error in casino_payout:", error);
-    return {
-      success: false,
-      error: error instanceof Error ? error.message : String(error)
-    };
-  }
-};
-
 // src/agent/tools/casino/leaderboard.ts
-import { Type as Type109 } from "@sinclair/typebox";
+import { Type as Type108 } from "@sinclair/typebox";
 var casinoLeaderboardTool = {
   name: "casino_leaderboard",
   description: `Show Teleton Casino leaderboard with top players.
@@ -20856,16 +20652,16 @@ Shows:
 - Total amount wagered
 - Total wins/losses
 - Win rate percentage`,
-  parameters: Type109.Object({
-    limit: Type109.Optional(
-      Type109.Number({
+  parameters: Type108.Object({
+    limit: Type108.Optional(
+      Type108.Number({
         description: "Number of players to show (default: 10)",
         minimum: 1,
         maximum: 50
       })
     ),
-    type: Type109.Optional(
-      Type109.String({
+    type: Type108.Optional(
+      Type108.String({
         description: "Leaderboard type: winners, losers, or wagered",
         enum: ["winners", "losers", "wagered"]
       })
@@ -20970,7 +20766,7 @@ ${formattedPlayers}`
 };
 
 // src/agent/tools/casino/my-stats.ts
-import { Type as Type110 } from "@sinclair/typebox";
+import { Type as Type109 } from "@sinclair/typebox";
 var casinoMyStatsTool = {
   name: "casino_my_stats",
   description: `Show the current player's personal Teleton Casino statistics.
@@ -20983,7 +20779,7 @@ Returns:
 - Net profit/loss
 - Win rate percentage
 - Last bet timestamp`,
-  parameters: Type110.Object({})
+  parameters: Type109.Object({})
 };
 var casinoMyStatsExecutor = async (params, context) => {
   try {
@@ -20997,7 +20793,6 @@ var casinoMyStatsExecutor = async (params, context) => {
            total_losses,
            total_wagered,
            total_won,
-           created_at,
            last_bet_at
          FROM casino_users
          WHERE telegram_id = ?`
@@ -21013,7 +20808,6 @@ var casinoMyStatsExecutor = async (params, context) => {
     }
     const netPnL = playerStats.total_won - playerStats.total_wagered;
     const winRate = playerStats.total_bets > 0 ? (playerStats.total_wins / playerStats.total_bets * 100).toFixed(1) : "0";
-    const firstPlayDate = new Date(playerStats.created_at * 1e3).toLocaleDateString();
     const lastPlayDate = playerStats.last_bet_at ? new Date(playerStats.last_bet_at * 1e3).toLocaleDateString() : "Never";
     let statusEmoji = "\u{1F3AE}";
     if (netPnL > 10) statusEmoji = "\u{1F911}";
@@ -21034,7 +20828,6 @@ var casinoMyStatsExecutor = async (params, context) => {
         net_pnl: netPnL.toFixed(2),
         net_pnl_positive: netPnL >= 0,
         win_rate: winRate,
-        first_play: firstPlayDate,
         last_play: lastPlayDate,
         status_emoji: statusEmoji,
         message: `${statusEmoji} Teleton Casino Stats:
@@ -21055,148 +20848,8 @@ ${netPnL >= 0 ? "\u{1F4C8}" : "\u{1F4C9}"} Net P&L: ${netPnL >= 0 ? "+" : ""}${n
   }
 };
 
-// src/agent/tools/casino/jackpot.ts
-import { Type as Type111 } from "@sinclair/typebox";
-var casinoJackpotInfoTool = {
-  name: "casino_jackpot_info",
-  description: `View the current Teleton Casino daily jackpot status.
-
-Returns:
-- Current jackpot amount (accumulated from 5% house edge)
-- Last winner and award date
-- Whether jackpot is ready to be awarded (100+ TON, 24h+ since last award)
-- Jackpot creation and update timestamps
-
-The jackpot accumulates 5% of every bet. Once it reaches 100 TON and 24 hours have passed since last award, it can be distributed.`,
-  parameters: Type111.Object({})
-};
-var casinoJackpotInfoExecutor = async (params, context) => {
-  try {
-    const jackpot = getJackpot(context.db);
-    const shouldAward = shouldAwardDailyJackpot(context.db);
-    const lastWinner = jackpot.lastWinnerId ? `User ${jackpot.lastWinnerId} (${new Date(jackpot.lastWonAt * 1e3).toLocaleString()})` : "Never awarded";
-    return {
-      success: true,
-      data: {
-        current_amount: jackpot.amount.toFixed(2),
-        last_winner: lastWinner,
-        ready_to_award: shouldAward,
-        min_threshold: "100 TON",
-        award_frequency: "24 hours",
-        created_at: new Date(jackpot.createdAt * 1e3).toISOString(),
-        updated_at: new Date(jackpot.updatedAt * 1e3).toISOString(),
-        message: shouldAward ? `\u{1F3B0} Jackpot ready! ${jackpot.amount.toFixed(2)} TON can be awarded now.` : `\u{1F4B0} Current jackpot: ${jackpot.amount.toFixed(2)} TON`
-      }
-    };
-  } catch (error) {
-    console.error("Error in casino_jackpot_info:", error);
-    return {
-      success: false,
-      error: error instanceof Error ? error.message : String(error)
-    };
-  }
-};
-var casinoAwardJackpotTool = {
-  name: "casino_award_jackpot",
-  description: `Award the Teleton Casino daily jackpot to a winner.
-
-Process:
-1. Checks if jackpot is ready (100+ TON, 24h+ elapsed)
-2. Awards entire jackpot amount to winner's wallet
-3. Resets jackpot to 0
-4. Records winner in jackpot history
-5. Logs to journal
-
-Requirements:
-- Jackpot must be >= 100 TON
-- Must be 24+ hours since last award (or never awarded)
-
-Use this to manually award the jackpot or implement automated daily draws.`,
-  parameters: Type111.Object({
-    winner_telegram_id: Type111.String({
-      description: "Winner's Telegram user ID"
-    }),
-    winner_wallet: Type111.String({
-      description: "Winner's TON wallet address for payout"
-    })
-  })
-};
-var casinoAwardJackpotExecutor = async (params, context) => {
-  try {
-    const { winner_telegram_id, winner_wallet } = params;
-    if (!shouldAwardDailyJackpot(context.db)) {
-      const jackpot = getJackpot(context.db);
-      return {
-        success: false,
-        error: `Jackpot not ready yet. Current: ${jackpot.amount.toFixed(2)} TON (minimum: 100 TON, 24h since last award required)`
-      };
-    }
-    const { amount, winnerId } = awardJackpot(context.db, winner_telegram_id);
-    if (amount === 0) {
-      return {
-        success: false,
-        error: "Jackpot amount is 0 TON, nothing to award."
-      };
-    }
-    const payoutResult = await sendPayout(
-      winner_wallet,
-      amount,
-      `\u{1F3B0}\u{1F3B0}\u{1F3B0} TELETON CASINO DAILY JACKPOT! You won ${amount.toFixed(2)} TON! \u{1F3B0}\u{1F3B0}\u{1F3B0}`
-    );
-    if (!payoutResult.success) {
-      context.db.prepare(
-        "UPDATE casino_jackpot SET amount = ?, last_winner_id = NULL, last_won_at = NULL WHERE id = 1"
-      ).run(amount);
-      return {
-        success: false,
-        error: `Failed to send payout: ${payoutResult.error}`
-      };
-    }
-    context.db.prepare(
-      `INSERT INTO journal (
-          type, action, asset_from, asset_to, amount_from, amount_to,
-          platform, reasoning, outcome, pnl_ton, tx_hash, tool_used,
-          chat_id, user_id, timestamp
-        ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, unixepoch())`
-    ).run(
-      "trade",
-      "casino_jackpot_award",
-      "JACKPOT",
-      "TON",
-      amount,
-      amount,
-      "telegram_casino",
-      `Daily jackpot awarded to ${winner_telegram_id}`,
-      "loss",
-      // Casino lost (paid out jackpot)
-      -amount,
-      payoutResult.txHash,
-      "casino_award_jackpot",
-      null,
-      // No specific chat
-      winner_telegram_id
-    );
-    return {
-      success: true,
-      data: {
-        amount: amount.toFixed(2),
-        winner_id: winnerId,
-        winner_wallet,
-        payout_tx: payoutResult.txHash,
-        message: `\u{1F3B0} Jackpot awarded! ${amount.toFixed(2)} TON sent to ${winner_wallet}`
-      }
-    };
-  } catch (error) {
-    console.error("Error in casino_award_jackpot:", error);
-    return {
-      success: false,
-      error: error instanceof Error ? error.message : String(error)
-    };
-  }
-};
-
 // src/agent/tools/deals/propose.ts
-import { Type as Type112 } from "@sinclair/typebox";
+import { Type as Type110 } from "@sinclair/typebox";
 
 // src/deals/utils.ts
 function generateDealId() {
@@ -21347,36 +21000,36 @@ BEFORE proposing:
 3. This tool will REJECT deals that violate strategy
 
 Deal expires in 2 minutes if not accepted.`,
-  parameters: Type112.Object({
-    chatId: Type112.String({ description: "Chat ID where to send proposal" }),
-    userId: Type112.Number({ description: "Telegram user ID" }),
-    userGivesType: Type112.Union([Type112.Literal("ton"), Type112.Literal("gift")]),
-    userGivesTonAmount: Type112.Optional(
-      Type112.Number({ description: "TON amount user gives (if type=ton)" })
+  parameters: Type110.Object({
+    chatId: Type110.String({ description: "Chat ID where to send proposal" }),
+    userId: Type110.Number({ description: "Telegram user ID" }),
+    userGivesType: Type110.Union([Type110.Literal("ton"), Type110.Literal("gift")]),
+    userGivesTonAmount: Type110.Optional(
+      Type110.Number({ description: "TON amount user gives (if type=ton)" })
     ),
-    userGivesGiftId: Type112.Optional(
-      Type112.String({ description: "Gift msgId user gives (if type=gift)" })
+    userGivesGiftId: Type110.Optional(
+      Type110.String({ description: "Gift msgId user gives (if type=gift)" })
     ),
-    userGivesGiftSlug: Type112.Optional(
-      Type112.String({
+    userGivesGiftSlug: Type110.Optional(
+      Type110.String({
         description: "Gift's slug field from telegram_get_my_gifts (e.g. 'LolPop-425402'), NOT the title"
       })
     ),
-    userGivesValueTon: Type112.Number({ description: "Estimated TON value of what user gives" }),
-    agentGivesType: Type112.Union([Type112.Literal("ton"), Type112.Literal("gift")]),
-    agentGivesTonAmount: Type112.Optional(
-      Type112.Number({ description: "TON amount you give (if type=ton)" })
+    userGivesValueTon: Type110.Number({ description: "Estimated TON value of what user gives" }),
+    agentGivesType: Type110.Union([Type110.Literal("ton"), Type110.Literal("gift")]),
+    agentGivesTonAmount: Type110.Optional(
+      Type110.Number({ description: "TON amount you give (if type=ton)" })
     ),
-    agentGivesGiftId: Type112.Optional(
-      Type112.String({ description: "Gift msgId you give (if type=gift)" })
+    agentGivesGiftId: Type110.Optional(
+      Type110.String({ description: "Gift msgId you give (if type=gift)" })
     ),
-    agentGivesGiftSlug: Type112.Optional(
-      Type112.String({
+    agentGivesGiftSlug: Type110.Optional(
+      Type110.String({
         description: "Gift's slug field from telegram_get_my_gifts (e.g. 'LolPop-425402'), NOT the title"
       })
     ),
-    agentGivesValueTon: Type112.Number({ description: "Estimated TON value of what you give" }),
-    userUsername: Type112.Optional(Type112.String({ description: "User's @username for display" }))
+    agentGivesValueTon: Type110.Number({ description: "Estimated TON value of what you give" }),
+    userUsername: Type110.Optional(Type110.String({ description: "User's @username for display" }))
   })
 };
 var dealProposeExecutor = async (params, context) => {
@@ -21524,7 +21177,7 @@ async function sendInlineBotResult(bridge, chatId, botUsername, dealId) {
 }
 
 // src/agent/tools/deals/verify-payment.ts
-import { Type as Type113 } from "@sinclair/typebox";
+import { Type as Type111 } from "@sinclair/typebox";
 
 // src/deals/gift-detector.ts
 var GiftDetector = class {
@@ -21588,16 +21241,16 @@ var GiftDetector = class {
 };
 
 // src/ton/transfer.ts
-import { mnemonicToPrivateKey as mnemonicToPrivateKey13 } from "@ton/crypto";
-import { WalletContractV5R1 as WalletContractV5R113, TonClient as TonClient18, toNano as toNano27, internal as internal11 } from "@ton/ton";
-import { Address as Address19, SendMode as SendMode11 } from "@ton/core";
-import { getHttpEndpoint as getHttpEndpoint18 } from "@orbs-network/ton-access";
+import { mnemonicToPrivateKey as mnemonicToPrivateKey12 } from "@ton/crypto";
+import { WalletContractV5R1 as WalletContractV5R112, TonClient as TonClient17, toNano as toNano26, internal as internal10 } from "@ton/ton";
+import { Address as Address18, SendMode as SendMode10 } from "@ton/core";
+import { getHttpEndpoint as getHttpEndpoint16 } from "@orbs-network/ton-access";
 async function sendTon(params) {
   try {
     const { toAddress: toAddress2, amount, comment = "", bounce = false } = params;
     let recipientAddress;
     try {
-      recipientAddress = Address19.parse(toAddress2);
+      recipientAddress = Address18.parse(toAddress2);
     } catch (e) {
       console.error(`Invalid recipient address: ${toAddress2}`, e);
       return null;
@@ -21607,23 +21260,23 @@ async function sendTon(params) {
       console.error("Wallet not initialized");
       return null;
     }
-    const keyPair = await mnemonicToPrivateKey13(walletData.mnemonic);
-    const wallet = WalletContractV5R113.create({
+    const keyPair = await mnemonicToPrivateKey12(walletData.mnemonic);
+    const wallet = WalletContractV5R112.create({
       workchain: 0,
       publicKey: keyPair.publicKey
     });
-    const endpoint = await getHttpEndpoint18({ network: "mainnet" });
-    const client = new TonClient18({ endpoint });
+    const endpoint = await getHttpEndpoint16({ network: "mainnet" });
+    const client = new TonClient17({ endpoint });
     const contract = client.open(wallet);
     const seqno = await contract.getSeqno();
     await contract.sendTransfer({
       seqno,
       secretKey: keyPair.secretKey,
-      sendMode: SendMode11.PAY_GAS_SEPARATELY + SendMode11.IGNORE_ERRORS,
+      sendMode: SendMode10.PAY_GAS_SEPARATELY + SendMode10.IGNORE_ERRORS,
       messages: [
-        internal11({
+        internal10({
           to: recipientAddress,
-          value: toNano27(amount),
+          value: toNano26(amount),
           body: comment,
           bounce
         })
@@ -21890,8 +21543,8 @@ Updates deal status to 'verified' if successful.
 Auto-triggers executor after verification.
 
 IMPORTANT: Only call this for deals with status = 'accepted'.`,
-  parameters: Type113.Object({
-    dealId: Type113.String({ description: "Deal ID to verify payment for" })
+  parameters: Type111.Object({
+    dealId: Type111.String({ description: "Deal ID to verify payment for" })
   })
 };
 var dealVerifyPaymentExecutor = async (params, context) => {
@@ -21903,6 +21556,13 @@ var dealVerifyPaymentExecutor = async (params, context) => {
         error: `Deal #${params.dealId} not found`
       };
     }
+    const adminIds = context.config?.telegram.admin_ids ?? [];
+    if (context.senderId !== deal.user_telegram_id && !adminIds.includes(context.senderId)) {
+      return {
+        success: false,
+        error: `\u26D4 You can only verify payment for your own deals.`
+      };
+    }
     if (deal.status !== "accepted") {
       return {
         success: false,
@@ -22055,7 +21715,7 @@ var dealVerifyPaymentExecutor = async (params, context) => {
 };
 
 // src/agent/tools/deals/status.ts
-import { Type as Type114 } from "@sinclair/typebox";
+import { Type as Type112 } from "@sinclair/typebox";
 var dealStatusTool = {
   name: "deal_status",
   description: `Check the status and details of a deal by ID.
@@ -22067,8 +21727,8 @@ Shows:
 - Timestamps (created, expires, verified, completed)
 - Payment/transfer tracking info (TX hashes, msgIds)
 - Profit calculation`,
-  parameters: Type114.Object({
-    dealId: Type114.String({ description: "Deal ID to check status for" })
+  parameters: Type112.Object({
+    dealId: Type112.String({ description: "Deal ID to check status for" })
   })
 };
 var dealStatusExecutor = async (params, context) => {
@@ -22080,6 +21740,13 @@ var dealStatusExecutor = async (params, context) => {
         error: `Deal #${params.dealId} not found`
       };
     }
+    const adminIds = context.config?.telegram.admin_ids ?? [];
+    if (context.senderId !== deal.user_telegram_id && !adminIds.includes(context.senderId)) {
+      return {
+        success: false,
+        error: `\u26D4 You can only view your own deals.`
+      };
+    }
     const createdAt = new Date(deal.created_at * 1e3).toISOString();
     const expiresAt = new Date(deal.expires_at * 1e3).toISOString();
     const verifiedAt = deal.user_payment_verified_at ? new Date(deal.user_payment_verified_at * 1e3).toISOString() : null;
@@ -22180,7 +21847,7 @@ ${deal.notes ? `
 };
 
 // src/agent/tools/deals/list.ts
-import { Type as Type115 } from "@sinclair/typebox";
+import { Type as Type113 } from "@sinclair/typebox";
 var dealListTool = {
   name: "deal_list",
   description: `List recent deals with optional filters.
@@ -22191,21 +21858,26 @@ Filters:
 - limit: Max results (default 20)
 
 Returns summary of each deal with ID, status, parties, trade details, timestamps.`,
-  parameters: Type115.Object({
-    status: Type115.Optional(
-      Type115.String({
+  parameters: Type113.Object({
+    status: Type113.Optional(
+      Type113.String({
         description: "Filter by status: proposed, accepted, verified, completed, declined, expired, cancelled, failed"
       })
     ),
-    userId: Type115.Optional(Type115.Number({ description: "Filter by user's Telegram ID" })),
-    limit: Type115.Optional(
-      Type115.Number({ description: "Max results to return (default 20)", minimum: 1, maximum: 100 })
+    userId: Type113.Optional(Type113.Number({ description: "Filter by user's Telegram ID" })),
+    limit: Type113.Optional(
+      Type113.Number({ description: "Max results to return (default 20)", minimum: 1, maximum: 100 })
     )
   })
 };
 var dealListExecutor = async (params, context) => {
   try {
-    const { status, userId, limit = 20 } = params;
+    const { status, limit = 20 } = params;
+    let { userId } = params;
+    const adminIds = context.config?.telegram.admin_ids ?? [];
+    if (!adminIds.includes(context.senderId)) {
+      userId = context.senderId;
+    }
     let query = `SELECT * FROM deals WHERE 1=1`;
     const queryParams = [];
     if (status) {
@@ -22297,7 +21969,7 @@ var dealListExecutor = async (params, context) => {
 };
 
 // src/agent/tools/deals/cancel.ts
-import { Type as Type116 } from "@sinclair/typebox";
+import { Type as Type114 } from "@sinclair/typebox";
 var dealCancelTool = {
   name: "deal_cancel",
   description: `Cancel an active deal (proposed or accepted status only).
@@ -22313,9 +21985,9 @@ Use this when:
 - External circumstances make deal impossible
 
 The deal status will be set to 'cancelled' and cannot be resumed.`,
-  parameters: Type116.Object({
-    dealId: Type116.String({ description: "Deal ID to cancel" }),
-    reason: Type116.Optional(Type116.String({ description: "Reason for cancellation (optional)" }))
+  parameters: Type114.Object({
+    dealId: Type114.String({ description: "Deal ID to cancel" }),
+    reason: Type114.Optional(Type114.String({ description: "Reason for cancellation (optional)" }))
   })
 };
 var dealCancelExecutor = async (params, context) => {
@@ -22328,6 +22000,13 @@ var dealCancelExecutor = async (params, context) => {
         error: `Deal #${dealId} not found`
       };
     }
+    const adminIds = context.config?.telegram.admin_ids ?? [];
+    if (context.senderId !== deal.user_telegram_id && !adminIds.includes(context.senderId)) {
+      return {
+        success: false,
+        error: `\u26D4 You can only cancel your own deals.`
+      };
+    }
     const cancellableStatuses = ["proposed", "accepted"];
     if (!cancellableStatuses.includes(deal.status)) {
       return {
@@ -22401,45 +22080,57 @@ function registerAllTools(registry, config) {
   registry.register(telegramGetDialogsTool, telegramGetDialogsExecutor);
   registry.register(telegramMarkAsReadTool, telegramMarkAsReadExecutor);
   registry.register(telegramGetChatInfoTool, telegramGetChatInfoExecutor);
-  registry.register(telegramJoinChannelTool, telegramJoinChannelExecutor);
-  registry.register(telegramLeaveChannelTool, telegramLeaveChannelExecutor);
+  registry.register(telegramJoinChannelTool, telegramJoinChannelExecutor, "dm-only");
+  registry.register(telegramLeaveChannelTool, telegramLeaveChannelExecutor, "dm-only");
   registry.register(telegramGetMeTool, telegramGetMeExecutor);
   registry.register(telegramGetParticipantsTool, telegramGetParticipantsExecutor);
-  registry.register(telegramKickUserTool, telegramKickUserExecutor);
-  registry.register(telegramBanUserTool, telegramBanUserExecutor);
-  registry.register(telegramUnbanUserTool, telegramUnbanUserExecutor);
-  registry.register(telegramCreateGroupTool, telegramCreateGroupExecutor);
-  registry.register(telegramSetChatPhotoTool, telegramSetChatPhotoExecutor);
-  registry.register(telegramBlockUserTool, telegramBlockUserExecutor);
-  registry.register(telegramGetBlockedTool, telegramGetBlockedExecutor);
+  registry.register(telegramKickUserTool, telegramKickUserExecutor, "group-only");
+  registry.register(telegramBanUserTool, telegramBanUserExecutor, "group-only");
+  registry.register(telegramUnbanUserTool, telegramUnbanUserExecutor, "group-only");
+  registry.register(telegramCreateGroupTool, telegramCreateGroupExecutor, "dm-only");
+  registry.register(telegramSetChatPhotoTool, telegramSetChatPhotoExecutor, "group-only");
+  registry.register(telegramBlockUserTool, telegramBlockUserExecutor, "dm-only");
+  registry.register(telegramGetBlockedTool, telegramGetBlockedExecutor, "dm-only");
   registry.register(telegramGetCommonChatsTool, telegramGetCommonChatsExecutor);
-  registry.register(telegramSendStoryTool, telegramSendStoryExecutor);
+  registry.register(telegramSendStoryTool, telegramSendStoryExecutor, "dm-only");
   registry.register(telegramGetFoldersTool, telegramGetFoldersExecutor);
   registry.register(telegramCreateFolderTool, telegramCreateFolderExecutor);
   registry.register(telegramAddChatToFolderTool, telegramAddChatToFolderExecutor);
-  registry.register(telegramCreateChannelTool, telegramCreateChannelExecutor);
-  registry.register(telegramUpdateProfileTool, telegramUpdateProfileExecutor);
-  registry.register(telegramSetBioTool, telegramSetBioExecutor);
-  registry.register(telegramSetUsernameTool, telegramSetUsernameExecutor);
+  registry.register(telegramCreateChannelTool, telegramCreateChannelExecutor, "dm-only");
+  registry.register(telegramUpdateProfileTool, telegramUpdateProfileExecutor, "dm-only");
+  registry.register(telegramSetBioTool, telegramSetBioExecutor, "dm-only");
+  registry.register(telegramSetUsernameTool, telegramSetUsernameExecutor, "dm-only");
   registry.register(telegramDeleteMessageTool, telegramDeleteMessageExecutor);
   registry.register(telegramDownloadMediaTool, telegramDownloadMediaExecutor);
   registry.register(visionAnalyzeTool, visionAnalyzeExecutor);
-  registry.register(telegramGetStarsBalanceTool, telegramGetStarsBalanceExecutor);
-  registry.register(telegramGetStarsTransactionsTool, telegramGetStarsTransactionsExecutor);
+  registry.register(telegramGetStarsBalanceTool, telegramGetStarsBalanceExecutor, "dm-only");
+  registry.register(
+    telegramGetStarsTransactionsTool,
+    telegramGetStarsTransactionsExecutor,
+    "dm-only"
+  );
   registry.register(telegramGetAvailableGiftsTool, telegramGetAvailableGiftsExecutor);
-  registry.register(telegramSendGiftTool, telegramSendGiftExecutor);
+  registry.register(telegramSendGiftTool, telegramSendGiftExecutor, "dm-only");
   registry.register(telegramGetMyGiftsTool, telegramGetMyGiftsExecutor);
-  registry.register(telegramTransferCollectibleTool, telegramTransferCollectibleExecutor);
-  registry.register(telegramSetCollectiblePriceTool, telegramSetCollectiblePriceExecutor);
+  registry.register(
+    telegramTransferCollectibleTool,
+    telegramTransferCollectibleExecutor,
+    "dm-only"
+  );
+  registry.register(
+    telegramSetCollectiblePriceTool,
+    telegramSetCollectiblePriceExecutor,
+    "dm-only"
+  );
   registry.register(telegramGetResaleGiftsTool, telegramGetResaleGiftsExecutor);
-  registry.register(telegramBuyResaleGiftTool, telegramBuyResaleGiftExecutor);
-  registry.register(telegramSetGiftStatusTool, telegramSetGiftStatusExecutor);
-  registry.register(memoryWriteTool, memoryWriteExecutor);
+  registry.register(telegramBuyResaleGiftTool, telegramBuyResaleGiftExecutor, "dm-only");
+  registry.register(telegramSetGiftStatusTool, telegramSetGiftStatusExecutor, "dm-only");
+  registry.register(memoryWriteTool, memoryWriteExecutor, "dm-only");
   registry.register(memoryReadTool, memoryReadExecutor);
   registry.register(telegramGetUserInfoTool, telegramGetUserInfoExecutor);
   registry.register(telegramCheckUsernameTool, telegramCheckUsernameExecutor);
-  registry.register(telegramEditChannelInfoTool, telegramEditChannelInfoExecutor);
-  registry.register(telegramInviteToChannelTool, telegramInviteToChannelExecutor);
+  registry.register(telegramEditChannelInfoTool, telegramEditChannelInfoExecutor, "dm-only");
+  registry.register(telegramInviteToChannelTool, telegramInviteToChannelExecutor, "dm-only");
   if (config.market.enabled || config.deals.enabled) {
     registry.register(marketGetFloorTool, marketGetFloorExecutor);
     registry.register(marketSearchTool, marketSearchExecutor);
@@ -22449,12 +22140,12 @@ function registerAllTools(registry, config) {
   registry.register(tonGetAddressTool, tonGetAddressExecutor);
   registry.register(tonGetBalanceTool, tonGetBalanceExecutor);
   registry.register(tonPriceTool, tonPriceExecutor);
-  registry.register(tonSendTool, tonSendExecutor);
+  registry.register(tonSendTool, tonSendExecutor, "dm-only");
   registry.register(tonGetTransactionsTool, tonGetTransactionsExecutor);
   registry.register(tonMyTransactionsTool, tonMyTransactionsExecutor);
   registry.register(jettonBalancesTool, jettonBalancesExecutor);
-  registry.register(jettonSwapTool, jettonSwapExecutor);
-  registry.register(jettonSendTool, jettonSendExecutor);
+  registry.register(jettonSwapTool, jettonSwapExecutor, "dm-only");
+  registry.register(jettonSendTool, jettonSendExecutor, "dm-only");
   registry.register(jettonInfoTool, jettonInfoExecutor);
   registry.register(jettonPriceTool, jettonPriceExecutor);
   registry.register(jettonSearchTool, jettonSearchExecutor);
@@ -22466,40 +22157,37 @@ function registerAllTools(registry, config) {
   registry.register(dnsCheckTool, dnsCheckExecutor);
   registry.register(dnsAuctionsTool, dnsAuctionsExecutor);
   registry.register(dnsResolveTool, dnsResolveExecutor);
-  registry.register(dnsStartAuctionTool, dnsStartAuctionExecutor);
-  registry.register(dnsBidTool, dnsBidExecutor);
-  registry.register(dnsLinkTool, dnsLinkExecutor);
-  registry.register(dnsUnlinkTool, dnsUnlinkExecutor);
+  registry.register(dnsStartAuctionTool, dnsStartAuctionExecutor, "dm-only");
+  registry.register(dnsBidTool, dnsBidExecutor, "dm-only");
+  registry.register(dnsLinkTool, dnsLinkExecutor, "dm-only");
+  registry.register(dnsUnlinkTool, dnsUnlinkExecutor, "dm-only");
   registry.register(dedustQuoteTool, dedustQuoteExecutor);
-  registry.register(dedustSwapTool, dedustSwapExecutor);
+  registry.register(dedustSwapTool, dedustSwapExecutor, "dm-only");
   registry.register(dedustPoolsTool, dedustPoolsExecutor);
   registry.register(dexQuoteTool, dexQuoteExecutor);
-  registry.register(dexSwapTool, dexSwapExecutor);
-  registry.register(journalLogTool, journalLogExecutor);
+  registry.register(dexSwapTool, dexSwapExecutor, "dm-only");
+  registry.register(journalLogTool, journalLogExecutor, "dm-only");
   registry.register(journalQueryTool, journalQueryExecutor);
-  registry.register(journalUpdateTool, journalUpdateExecutor);
+  registry.register(journalUpdateTool, journalUpdateExecutor, "dm-only");
   registry.register(workspaceListTool, workspaceListExecutor);
   registry.register(workspaceReadTool, workspaceReadExecutor);
-  registry.register(workspaceWriteTool, workspaceWriteExecutor);
-  registry.register(workspaceDeleteTool, workspaceDeleteExecutor);
+  registry.register(workspaceWriteTool, workspaceWriteExecutor, "dm-only");
+  registry.register(workspaceDeleteTool, workspaceDeleteExecutor, "dm-only");
   registry.register(workspaceInfoTool, workspaceInfoExecutor);
-  registry.register(workspaceRenameTool, workspaceRenameExecutor);
+  registry.register(workspaceRenameTool, workspaceRenameExecutor, "dm-only");
   if (config.casino.enabled) {
     registry.register(casinoBalanceTool, casinoBalanceExecutor);
     registry.register(casinoSpinTool, casinoSpinExecutor);
     registry.register(casinoDiceTool, casinoDiceExecutor);
-    registry.register(casinoPayoutTool, casinoPayoutExecutor);
     registry.register(casinoLeaderboardTool, casinoLeaderboardExecutor);
     registry.register(casinoMyStatsTool, casinoMyStatsExecutor);
-    registry.register(casinoJackpotInfoTool, casinoJackpotInfoExecutor);
-    registry.register(casinoAwardJackpotTool, casinoAwardJackpotExecutor);
   }
   if (config.deals.enabled) {
-    registry.register(dealProposeTool, dealProposeExecutor);
-    registry.register(dealVerifyPaymentTool, dealVerifyPaymentExecutor);
+    registry.register(dealProposeTool, dealProposeExecutor, "dm-only");
+    registry.register(dealVerifyPaymentTool, dealVerifyPaymentExecutor, "dm-only");
     registry.register(dealStatusTool, dealStatusExecutor);
     registry.register(dealListTool, dealListExecutor);
-    registry.register(dealCancelTool, dealCancelExecutor);
+    registry.register(dealCancelTool, dealCancelExecutor, "dm-only");
   }
 }
 
@@ -23874,7 +23562,7 @@ ${blue}  \u250C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u250
         `\u26A0\uFE0F Tool count (${this.toolCount}) exceeds ${providerMeta.displayName} limit (${providerMeta.toolLimit})`
       );
     }
-    const { migrateSessionsToDb } = await import("./migrate-F256Q7LW.js");
+    const { migrateSessionsToDb } = await import("./migrate-4Z74FLKS.js");
     migrateSessionsToDb();
     const { cleanupOldTranscripts } = await import("./transcript-DF2Y6CFY.js");
     cleanupOldTranscripts(30);
@@ -24060,7 +23748,7 @@ ${blue}  \u250C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u250
       const taskId = match[1];
       const { getTaskStore } = await import("./tasks-M3QDPTGY.js");
       const { executeScheduledTask } = await import("./task-executor-MNI4VIZL.js");
-      const { getDatabase: getDatabase2 } = await import("./memory-Q755V5UK.js");
+      const { getDatabase: getDatabase2 } = await import("./memory-RBJIBZ5L.js");
       const db = getDatabase2().getDb();
       const taskStore = getTaskStore(db);
       const task = taskStore.getTask(taskId);
@@ -24135,7 +23823,7 @@ ${blue}  \u250C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u250
       try {
         const { getTaskStore } = await import("./tasks-M3QDPTGY.js");
         const { TaskDependencyResolver } = await import("./task-dependency-resolver-CWG6DTU4.js");
-        const { getDatabase: getDatabase2 } = await import("./memory-Q755V5UK.js");
+        const { getDatabase: getDatabase2 } = await import("./memory-RBJIBZ5L.js");
         const db = getDatabase2().getDb();
         const taskStore = getTaskStore(db);
         const match = message.text.match(/^\[TASK:([^\]]+)\]/);