teleton 0.2.3 → 0.2.5

package/dist/{chunk-KU4Z3TYC.js → chunk-KS7B2CVM.js}

@@ -1,3 +1,13 @@
+import {
+  Mi,
+  Mn,
+  br,
+  dt,
+  le,
+  qn,
+  ut,
+  ye
+} from "./chunk-U7FQYCBQ.js";
 import {
   initScraperDb
 } from "./chunk-DUW5VBAZ.js";
@@ -14,12 +24,13 @@ import {
   MessageStore,
   USED_TRANSACTIONS_SCHEMA,
   UserStore,
+  closeDatabase,
   createDbWrapper,
   getDatabase,
   initializeMemory,
   migrateFromMainDb,
   openModuleDb
-} from "./chunk-TBIMVWQZ.js";
+} from "./chunk-DR6WM6B5.js";
 import {
   COINGECKO_API_URL,
   ELEVENLABS_TTS_URL,
@@ -29,7 +40,7 @@ import {
   fetchWithTimeout,
   setTonapiKey,
   tonapiFetch
-} from "./chunk-WMIN6AGX.js";
+} from "./chunk-DAMFGHXV.js";
 import {
   COMPACTION_KEEP_RECENT,
   COMPACTION_MAX_MESSAGES,
@@ -42,8 +53,10 @@ import {
   DEBOUNCE_MAX_BUFFER_SIZE,
   DEBOUNCE_MAX_MULTIPLIER,
   DEFAULT_GIFTS_QUERY_LIMIT,
+  MAX_DEPENDENTS_PER_TASK,
   MAX_POLL_QUESTION_LENGTH,
   MAX_TOOL_RESULT_SIZE,
+  MAX_WRITE_SIZE,
   PAYMENT_TOLERANCE_RATIO,
   PENDING_HISTORY_MAX_AGE_MS,
   PENDING_HISTORY_MAX_PER_CHAT,
@@ -52,7 +65,14 @@ import {
   TELEGRAM_CONNECTION_RETRIES,
   TELEGRAM_FLOOD_SLEEP_THRESHOLD,
   TELEGRAM_MAX_MESSAGE_LENGTH
-} from "./chunk-QMN6ZOA5.js";
+} from "./chunk-2X4PCE7V.js";
+import {
+  ALLOWED_EXTENSIONS,
+  MAX_FILE_SIZES,
+  TELETON_ROOT,
+  WORKSPACE_PATHS,
+  WORKSPACE_ROOT
+} from "./chunk-EYWNOHMJ.js";
 import {
   GRAMJS_RETRY_DELAY_MS,
   MESSAGE_HANDLER_LOCK_TIMEOUT_MS,
@@ -63,29 +83,13 @@ import {
   RETRY_DEFAULT_MAX_ATTEMPTS,
   RETRY_DEFAULT_MAX_DELAY_MS,
   RETRY_DEFAULT_TIMEOUT_MS,
+  TOOL_EXECUTION_TIMEOUT_MS,
   TTS_TIMEOUT_MS
-} from "./chunk-LJXYESJJ.js";
-import {
-  ALLOWED_EXTENSIONS,
-  MAX_FILE_SIZES,
-  TELETON_ROOT,
-  WORKSPACE_PATHS,
-  WORKSPACE_ROOT
-} from "./chunk-EYWNOHMJ.js";
+} from "./chunk-LCMHAUNK.js";
 import {
   telegramGetMyGiftsExecutor,
   telegramGetMyGiftsTool
 } from "./chunk-B2PRMXOH.js";
-import {
-  Mi,
-  Mn,
-  br,
-  dt,
-  le,
-  qn,
-  ut,
-  ye
-} from "./chunk-U7FQYCBQ.js";
 import {
   __commonJS,
   __toESM
@@ -3408,7 +3412,13 @@ ${statsContext}`;
       const providerMeta = getProviderMetadata(
         this.config.agent.provider || "anthropic"
       );
-      const tools23 = this.toolRegistry?.getForContext(isGroup ?? false, providerMeta.toolLimit);
+      const isAdmin = toolContext?.config?.telegram.admin_ids.includes(toolContext.senderId) ?? false;
+      const tools23 = this.toolRegistry?.getForContext(
+        isGroup ?? false,
+        providerMeta.toolLimit,
+        chatId,
+        isAdmin
+      );
       const maxIterations = this.config.agent.max_agentic_iterations || 5;
       let iteration = 0;
       let overflowResets = 0;
@@ -3623,22 +3633,6 @@ ${statsContext}`;
    */
   clearHistory(chatId) {
     const db3 = getDatabase().getDb();
-    db3.prepare(
-      `
-      DELETE FROM tg_messages_fts
-      WHERE rowid IN (
-        SELECT rowid FROM tg_messages WHERE chat_id = ?
-      )
-    `
-    ).run(chatId);
-    db3.prepare(
-      `
-      DELETE FROM tg_messages_vec
-      WHERE id IN (
-        SELECT id FROM tg_messages WHERE chat_id = ?
-      )
-    `
-    ).run(chatId);
     db3.prepare(`DELETE FROM tg_messages WHERE chat_id = ?`).run(chatId);
     resetSession(chatId);
     console.log(`\u{1F5D1}\uFE0F  Cleared history for chat ${chatId}`);
@@ -4839,7 +4833,21 @@ import { mnemonicNew, mnemonicToPrivateKey, mnemonicValidate } from "@ton/crypto
 import { WalletContractV5R1, TonClient, fromNano } from "@ton/ton";
 import { readFileSync as readFileSync7, writeFileSync as writeFileSync5, existsSync as existsSync8, mkdirSync as mkdirSync6, chmodSync as chmodSync2 } from "fs";
 import { join as join6, dirname as dirname5 } from "path";
+
+// src/ton/endpoint.ts
 import { getHttpEndpoint } from "@orbs-network/ton-access";
+var ENDPOINT_CACHE_TTL_MS = 6e4;
+var _cache = null;
+async function getCachedHttpEndpoint() {
+  if (_cache && Date.now() - _cache.ts < ENDPOINT_CACHE_TTL_MS) {
+    return _cache.url;
+  }
+  const url = await getHttpEndpoint({ network: "mainnet" });
+  _cache = { url, ts: Date.now() };
+  return url;
+}
+
+// src/ton/wallet-service.ts
 var WALLET_FILE = join6(TELETON_ROOT, "wallet.json");
 async function generateWallet() {
   const mnemonic = await mnemonicNew(24);
@@ -4905,7 +4913,7 @@ function getWalletAddress() {
 }
 async function getWalletBalance(address4) {
   try {
-    const endpoint = await getHttpEndpoint({ network: "mainnet" });
+    const endpoint = await getCachedHttpEndpoint();
     const client = new TonClient({ endpoint });
     const { Address: Address19 } = await import("@ton/core");
     const addressObj = Address19.parse(address4);
@@ -4999,15 +5007,20 @@ function initDealsConfig(yaml) {
 // src/telegram/admin.ts
 var VALID_DM_POLICIES = ["open", "allowlist", "pairing", "disabled"];
 var VALID_GROUP_POLICIES = ["open", "allowlist", "disabled"];
+var VALID_MODULE_LEVELS = ["open", "admin", "disabled"];
 var AdminHandler = class {
   bridge;
   config;
   agent;
   paused = false;
-  constructor(bridge, config, agent) {
+  permissions;
+  registry;
+  constructor(bridge, config, agent, permissions, registry) {
     this.bridge = bridge;
     this.config = config;
     this.agent = agent;
+    this.permissions = permissions ?? null;
+    this.registry = registry ?? null;
   }
   /**
    * Check if user is admin
@@ -5042,7 +5055,7 @@ var AdminHandler = class {
   /**
    * Handle admin command
    */
-  async handleCommand(command, chatId, senderId) {
+  async handleCommand(command, chatId, senderId, isGroup) {
     if (!this.isAdmin(senderId)) {
       return "\u26D4 Admin access required";
     }
@@ -5073,6 +5086,8 @@ var AdminHandler = class {
         return await this.handleStopCommand();
       case "verbose":
         return this.handleVerboseCommand();
+      case "modules":
+        return this.handleModulesCommand(command, isGroup ?? false);
       case "help":
         return this.handleHelpCommand();
       case "ping":
@@ -5285,6 +5300,124 @@ Usage:
     setVerbose(next);
     return next ? "\u{1F50A} Verbose logging **ON**" : "\u{1F507} Verbose logging **OFF**";
   }
+  /**
+   * /modules - Manage per-group module permissions
+   */
+  handleModulesCommand(command, isGroup) {
+    if (!this.permissions || !this.registry) {
+      return "\u274C Module permissions non disponible";
+    }
+    if (!isGroup) {
+      return "\u274C /modules est uniquement disponible dans les groupes";
+    }
+    const chatId = command.chatId;
+    const sub = command.args[0]?.toLowerCase();
+    if (!sub) {
+      return this.listModules(chatId);
+    }
+    switch (sub) {
+      case "set":
+        return this.setModuleLevel(chatId, command.args[1], command.args[2], command.senderId);
+      case "info":
+        return this.showModuleInfo(command.args[1], chatId);
+      case "reset":
+        return this.resetModules(chatId, command.args[1]);
+      default:
+        return `\u274C Sous-commande inconnue: "${sub}"
+
+Usage: /modules | /modules set <module> <level> | /modules info <module> | /modules reset [module]`;
+    }
+  }
+  listModules(chatId) {
+    const modules = this.registry.getAvailableModules();
+    const overrides = this.permissions.getOverrides(chatId);
+    const lines = ["\u{1F9E9} **Modules** (ce groupe)\n"];
+    for (const mod of modules) {
+      const count = this.registry.getModuleToolCount(mod);
+      const level = overrides.get(mod) ?? "open";
+      const isProtected = this.permissions.isProtected(mod);
+      let icon;
+      switch (level) {
+        case "open":
+          icon = "\u2705";
+          break;
+        case "admin":
+          icon = "\u{1F510}";
+          break;
+        case "disabled":
+          icon = "\u274C";
+          break;
+      }
+      const toolWord = count === 1 ? "tool" : "tools";
+      const protectedMark = isProtected ? " \u{1F512}" : "";
+      lines.push(` ${icon} **${mod}**   ${count} ${toolWord}  ${level}${protectedMark}`);
+    }
+    lines.push("");
+    lines.push("Niveaux: `open` | `admin` | `disabled`");
+    lines.push("Usage: `/modules set <module> <level>`");
+    return lines.join("\n");
+  }
+  setModuleLevel(chatId, module, level, senderId) {
+    if (!module || !level) {
+      return "\u274C Usage: /modules set <module> <level>";
+    }
+    module = module.toLowerCase();
+    level = level.toLowerCase();
+    const available = this.registry.getAvailableModules();
+    if (!available.includes(module)) {
+      return `\u274C Module inconnu: "${module}"`;
+    }
+    if (this.permissions.isProtected(module)) {
+      return `\u26D4 Module "${module}" est prot\xE9g\xE9`;
+    }
+    if (!VALID_MODULE_LEVELS.includes(level)) {
+      return `\u274C Niveau invalide: "${level}". Valide: ${VALID_MODULE_LEVELS.join(", ")}`;
+    }
+    const oldLevel = this.permissions.getLevel(chatId, module);
+    this.permissions.setLevel(chatId, module, level, senderId);
+    const icons = { open: "\u2705", admin: "\u{1F510}", disabled: "\u274C" };
+    return `${icons[level]} **${module}**: ${oldLevel} \u2192 ${level}`;
+  }
+  showModuleInfo(module, chatId) {
+    if (!module) {
+      return "\u274C Usage: /modules info <module>";
+    }
+    module = module.toLowerCase();
+    const available = this.registry.getAvailableModules();
+    if (!available.includes(module)) {
+      return `\u274C Module inconnu: "${module}"`;
+    }
+    const tools23 = this.registry.getModuleTools(module);
+    const count = tools23.length;
+    const toolWord = count === 1 ? "tool" : "tools";
+    const level = this.permissions.getLevel(chatId, module);
+    const isProtected = this.permissions.isProtected(module);
+    const protectedMark = isProtected ? " \u{1F512}" : "";
+    const lines = [
+      `\u{1F4E6} Module "**${module}**" \u2014 ${level}${protectedMark} (${count} ${toolWord})
+`
+    ];
+    for (const t of tools23) {
+      lines.push(` ${t.name}   ${t.scope}`);
+    }
+    return lines.join("\n");
+  }
+  resetModules(chatId, module) {
+    if (module) {
+      module = module.toLowerCase();
+      const available = this.registry.getAvailableModules();
+      if (!available.includes(module)) {
+        return `\u274C Module inconnu: "${module}"`;
+      }
+      if (this.permissions.isProtected(module)) {
+        return `\u26D4 Module "${module}" est prot\xE9g\xE9 (d\xE9j\xE0 open)`;
+      }
+      this.permissions.resetModule(chatId, module);
+      return `\u2705 **${module}** \u2192 open`;
+    }
+    this.permissions.resetAll(chatId);
+    return "\u2705 Tous les modules remis \xE0 **open**";
+  }
   /**
    * /help - Show available commands
    */
@@ -5306,6 +5439,9 @@ Change access policy
 **/strategy** [buy|sell <percent>]
 View or change trading thresholds
 
+**/modules** [set|info|reset]
+Manage per-group module permissions
+
 **/wallet**
 Check TON wallet balance
 
@@ -5457,6 +5593,8 @@ import { validateToolCall } from "@mariozechner/pi-ai";
 var ToolRegistry = class {
   tools = /* @__PURE__ */ new Map();
   scopes = /* @__PURE__ */ new Map();
+  toolModules = /* @__PURE__ */ new Map();
+  permissions = null;
   /**
    * Register a new tool with optional scope
    */
@@ -5468,6 +5606,42 @@ var ToolRegistry = class {
     if (scope && scope !== "always") {
       this.scopes.set(tool.name, scope);
     }
+    this.toolModules.set(tool.name, tool.name.split("_")[0]);
+  }
+  /**
+   * Set the module permissions manager
+   */
+  setPermissions(mp) {
+    this.permissions = mp;
+  }
+  /**
+   * Get sorted unique module names derived from registered tools
+   */
+  getAvailableModules() {
+    const modules = new Set(this.toolModules.values());
+    return Array.from(modules).sort();
+  }
+  /**
+   * Get the number of tools in a module
+   */
+  getModuleToolCount(module) {
+    let count = 0;
+    for (const mod of this.toolModules.values()) {
+      if (mod === module) count++;
+    }
+    return count;
+  }
+  /**
+   * Get tools belonging to a module with their scope
+   */
+  getModuleTools(module) {
+    const result = [];
+    for (const [name, mod] of this.toolModules) {
+      if (mod === module) {
+        result.push({ name, scope: this.scopes.get(name) ?? "always" });
+      }
+    }
+    return result.sort((a, b) => a.name.localeCompare(b.name));
   }
   /**
    * Get all registered tools for pi-ai
@@ -5499,9 +5673,43 @@ var ToolRegistry = class {
         error: `Tool "${toolCall.name}" is only available in group chats`
       };
     }
+    if (context.isGroup && this.permissions) {
+      const module = this.toolModules.get(toolCall.name);
+      if (module) {
+        const level = this.permissions.getLevel(context.chatId, module);
+        if (level === "disabled") {
+          return {
+            success: false,
+            error: `Module "${module}" is disabled in this group`
+          };
+        }
+        if (level === "admin") {
+          const isAdmin = context.config?.telegram.admin_ids.includes(context.senderId) ?? false;
+          if (!isAdmin) {
+            return {
+              success: false,
+              error: `Module "${module}" is restricted to admins in this group`
+            };
+          }
+        }
+      }
+    }
     try {
       const validatedArgs = validateToolCall(this.getAll(), toolCall);
-      const result = await registered.executor(validatedArgs, context);
+      let timeoutHandle;
+      const result = await Promise.race([
+        registered.executor(validatedArgs, context),
+        new Promise((_, reject) => {
+          timeoutHandle = setTimeout(
+            () => reject(
+              new Error(
+                `Tool "${toolCall.name}" timed out after ${TOOL_EXECUTION_TIMEOUT_MS / 1e3}s`
+              )
+            ),
+            TOOL_EXECUTION_TIMEOUT_MS
+          );
+        })
+      ]).finally(() => clearTimeout(timeoutHandle));
       return result;
     } catch (error) {
       console.error(`Error executing tool ${toolCall.name}:`, error);
@@ -5525,13 +5733,25 @@ var ToolRegistry = class {
     return all.slice(0, toolLimit);
   }
   /**
-   * Get tools filtered by chat context (DM vs group) and provider limit.
+   * Get tools filtered by chat context (DM vs group), module permissions, and provider limit.
    * - In groups: excludes "dm-only" tools (financial, private)
    * - In DMs: excludes "group-only" tools (moderation)
+   * - In groups with permissions: excludes disabled modules, admin-only modules for non-admins
    */
-  getForContext(isGroup, toolLimit) {
+  getForContext(isGroup, toolLimit, chatId, isAdmin) {
     const excluded = isGroup ? "dm-only" : "group-only";
-    const filtered = Array.from(this.tools.values()).filter((rt) => this.scopes.get(rt.tool.name) !== excluded).map((rt) => rt.tool);
+    const filtered = Array.from(this.tools.values()).filter((rt) => {
+      if (this.scopes.get(rt.tool.name) === excluded) return false;
+      if (isGroup && chatId && this.permissions) {
+        const module = this.toolModules.get(rt.tool.name);
+        if (module) {
+          const level = this.permissions.getLevel(chatId, module);
+          if (level === "disabled") return false;
+          if (level === "admin" && !isAdmin) return false;
+        }
+      }
+      return true;
+    }).map((rt) => rt.tool);
     if (toolLimit !== null && filtered.length > toolLimit) {
       console.warn(
         `\u26A0\uFE0F Provider tool limit: ${toolLimit}, after scope filter: ${filtered.length}. Truncating to ${toolLimit} tools.`
@@ -10006,18 +10226,20 @@ function getDeal(db3, dealId) {
 }
 function acceptDeal(db3, dealId) {
   const newExpiry = Math.floor(Date.now() / 1e3) + DEAL_VERIFICATION_WINDOW_SECONDS;
-  db3.prepare(`UPDATE deals SET status = 'accepted', expires_at = ? WHERE id = ?`).run(
-    newExpiry,
-    dealId
-  );
+  const r3 = db3.prepare(
+    `UPDATE deals SET status = 'accepted', expires_at = ? WHERE id = ? AND status = 'proposed'`
+  ).run(newExpiry, dealId);
+  return r3.changes === 1;
 }
 function declineDeal(db3, dealId) {
-  db3.prepare(`UPDATE deals SET status = 'declined' WHERE id = ?`).run(dealId);
+  const r3 = db3.prepare(`UPDATE deals SET status = 'declined' WHERE id = ? AND status = 'proposed'`).run(dealId);
+  return r3.changes === 1;
 }
 function claimPayment(db3, dealId) {
-  db3.prepare(
-    `UPDATE deals SET status = 'payment_claimed', payment_claimed_at = unixepoch() WHERE id = ?`
+  const r3 = db3.prepare(
+    `UPDATE deals SET status = 'payment_claimed', payment_claimed_at = unixepoch() WHERE id = ? AND status = 'accepted'`
   ).run(dealId);
+  return r3.changes === 1;
 }
 function setInlineMessageId(db3, dealId, inlineMessageId) {
   db3.prepare(`UPDATE deals SET inline_message_id = ? WHERE id = ?`).run(inlineMessageId, dealId);
@@ -10027,7 +10249,10 @@ function isDealExpired(deal) {
   return now > deal.expiresAt;
 }
 function expireDeal(db3, dealId) {
-  db3.prepare(`UPDATE deals SET status = 'expired' WHERE id = ?`).run(dealId);
+  const r3 = db3.prepare(
+    `UPDATE deals SET status = 'expired' WHERE id = ? AND status IN ('proposed', 'accepted')`
+  ).run(dealId);
+  return r3.changes === 1;
 }
 function getDealsAwaitingVerification(db3) {
   const rows = db3.prepare(
@@ -10520,19 +10745,6 @@ var GramJSBotClient = class {
 import { TonClient as TonClient2, fromNano as fromNano2 } from "@ton/ton";
 import { Address } from "@ton/core";
 
-// src/ton/endpoint.ts
-import { getHttpEndpoint as getHttpEndpoint2 } from "@orbs-network/ton-access";
-var ENDPOINT_CACHE_TTL_MS = 6e4;
-var _cache = null;
-async function getCachedHttpEndpoint() {
-  if (_cache && Date.now() - _cache.ts < ENDPOINT_CACHE_TTL_MS) {
-    return _cache.url;
-  }
-  const url = await getHttpEndpoint2({ network: "mainnet" });
-  _cache = { url, ts: Date.now() };
-  return url;
-}
-
 // src/casino/retry.ts
 var DEFAULT_OPTIONS = {
   maxAttempts: RETRY_DEFAULT_MAX_ATTEMPTS,
@@ -10767,7 +10979,6 @@ If you already sent, wait a moment and try again.`
 import { mnemonicToPrivateKey as mnemonicToPrivateKey2 } from "@ton/crypto";
 import { WalletContractV5R1 as WalletContractV5R12, TonClient as TonClient3, toNano, internal } from "@ton/ton";
 import { Address as Address2, SendMode } from "@ton/core";
-import { getHttpEndpoint as getHttpEndpoint3 } from "@orbs-network/ton-access";
 async function sendTon(params) {
   try {
     const { toAddress: toAddress2, amount, comment = "", bounce = false } = params;
@@ -10788,7 +10999,7 @@ async function sendTon(params) {
       workchain: 0,
       publicKey: keyPair.publicKey
     });
-    const endpoint = await getHttpEndpoint3({ network: "mainnet" });
+    const endpoint = await getCachedHttpEndpoint();
     const client = new TonClient3({ endpoint });
     const contract = client.open(wallet);
     const seqno = await contract.getSeqno();
@@ -11477,12 +11688,16 @@ var VerificationPoller = class {
    * Handle verification timeout
    */
   async handleTimeout(deal) {
-    this.db.prepare(
+    const r3 = this.db.prepare(
       `UPDATE deals SET
           status = 'failed',
           notes = 'Payment verification timeout'
-        WHERE id = ?`
+        WHERE id = ? AND status = 'payment_claimed'`
     ).run(deal.dealId);
+    if (r3.changes !== 1) {
+      this.retryMap.delete(deal.dealId);
+      return;
+    }
     if (deal.inlineMessageId) {
       const { text, buttons } = buildFailedMessage(
         deal,
@@ -11944,6 +12159,7 @@ function openDealsDb() {
     CREATE INDEX IF NOT EXISTS idx_deals_chat ON deals(chat_id);
     CREATE INDEX IF NOT EXISTS idx_deals_inline_msg ON deals(inline_message_id) WHERE inline_message_id IS NOT NULL;
     CREATE INDEX IF NOT EXISTS idx_deals_payment_claimed ON deals(payment_claimed_at) WHERE payment_claimed_at IS NOT NULL;
+    CREATE INDEX IF NOT EXISTS idx_deals_expires ON deals(expires_at) WHERE status IN ('proposed', 'accepted');
 
     CREATE TABLE IF NOT EXISTS user_trade_stats (
       telegram_id INTEGER PRIMARY KEY,
@@ -14364,7 +14580,6 @@ var telegramCreateScheduledTaskExecutor = async (params, context) => {
     }
     const { getTaskStore } = await import("./tasks-M3QDPTGY.js");
     const taskStore = getTaskStore(context.db);
-    const MAX_DEPENDENTS_PER_TASK = 10;
     if (dependsOn && dependsOn.length > 0) {
       for (const parentId of dependsOn) {
         const existingDependents = taskStore.getDependents(parentId);
@@ -14867,7 +15082,6 @@ import { Type as Type75 } from "@sinclair/typebox";
 import { mnemonicToPrivateKey as mnemonicToPrivateKey3 } from "@ton/crypto";
 import { WalletContractV5R1 as WalletContractV5R13, TonClient as TonClient4, toNano as toNano2, internal as internal2 } from "@ton/ton";
 import { Address as Address3, SendMode as SendMode2 } from "@ton/core";
-import { getHttpEndpoint as getHttpEndpoint4 } from "@orbs-network/ton-access";
 var tonSendTool = {
   name: "ton_send",
   description: "Send TON cryptocurrency to an address. Requires wallet to be initialized. Amount is in TON (not nanoTON). Example: amount 1.5 = 1.5 TON. Always confirm the transaction details before sending.",
@@ -14909,7 +15123,7 @@ var tonSendExecutor = async (params, context) => {
       workchain: 0,
       publicKey: keyPair.publicKey
     });
-    const endpoint = await getHttpEndpoint4({ network: "mainnet" });
+    const endpoint = await getCachedHttpEndpoint();
     const client = new TonClient4({ endpoint });
     const contract = client.open(wallet);
     const seqno = await contract.getSeqno();
@@ -14949,7 +15163,6 @@ var tonSendExecutor = async (params, context) => {
 import { Type as Type76 } from "@sinclair/typebox";
 import { TonClient as TonClient5, fromNano as fromNano3 } from "@ton/ton";
 import { Address as Address4 } from "@ton/core";
-import { getHttpEndpoint as getHttpEndpoint5 } from "@orbs-network/ton-access";
 var OP_CODES = {
   COMMENT: 0,
   JETTON_TRANSFER: 260734629,
@@ -15025,7 +15238,7 @@ var tonGetTransactionsExecutor = async (params, context) => {
         error: `Invalid address: ${address4}`
       };
     }
-    const endpoint = await getHttpEndpoint5({ network: "mainnet" });
+    const endpoint = await getCachedHttpEndpoint();
     const client = new TonClient5({ endpoint });
     const transactions = await client.getTransactions(addressObj, {
       limit: Math.min(limit, 50)
@@ -15169,7 +15382,6 @@ var tonGetTransactionsExecutor = async (params, context) => {
 import { Type as Type77 } from "@sinclair/typebox";
 import { TonClient as TonClient6, fromNano as fromNano4 } from "@ton/ton";
 import { Address as Address5 } from "@ton/core";
-import { getHttpEndpoint as getHttpEndpoint6 } from "@orbs-network/ton-access";
 var OP_CODES2 = {
   COMMENT: 0,
   JETTON_TRANSFER: 260734629,
@@ -15241,7 +15453,7 @@ var tonMyTransactionsExecutor = async (params, context) => {
       };
     }
     const addressObj = Address5.parse(walletData.address);
-    const endpoint = await getHttpEndpoint6({ network: "mainnet" });
+    const endpoint = await getCachedHttpEndpoint();
     const client = new TonClient6({ endpoint });
     const transactions = await client.getTransactions(addressObj, {
       limit: Math.min(limit, 50)
@@ -15647,7 +15859,6 @@ import { Type as Type81 } from "@sinclair/typebox";
 import { mnemonicToPrivateKey as mnemonicToPrivateKey4 } from "@ton/crypto";
 import { WalletContractV5R1 as WalletContractV5R14, TonClient as TonClient7, toNano as toNano3, internal as internal3, beginCell } from "@ton/ton";
 import { Address as Address6, SendMode as SendMode3 } from "@ton/core";
-import { getHttpEndpoint as getHttpEndpoint7 } from "@orbs-network/ton-access";
 var DNS_COLLECTION = "EQC3dNlesgVD8YbAazcauIrXBPfiVhMMr5YYk2in0Mtsz0Bz";
 var dnsStartAuctionTool = {
   name: "dns_start_auction",
@@ -15690,7 +15901,7 @@ var dnsStartAuctionExecutor = async (params, context) => {
       workchain: 0,
       publicKey: keyPair.publicKey
     });
-    const endpoint = await getHttpEndpoint7({ network: "mainnet" });
+    const endpoint = await getCachedHttpEndpoint();
     const client = new TonClient7({ endpoint });
     const contract = client.open(wallet);
     const seqno = await contract.getSeqno();
@@ -15735,7 +15946,6 @@ import { Type as Type82 } from "@sinclair/typebox";
 import { mnemonicToPrivateKey as mnemonicToPrivateKey5 } from "@ton/crypto";
 import { WalletContractV5R1 as WalletContractV5R15, TonClient as TonClient8, toNano as toNano4, internal as internal4 } from "@ton/ton";
 import { Address as Address7, SendMode as SendMode4 } from "@ton/core";
-import { getHttpEndpoint as getHttpEndpoint8 } from "@orbs-network/ton-access";
 var dnsBidTool = {
   name: "dns_bid",
   description: "Place a bid on an existing .ton domain auction. Bid must be at least 5% higher than current bid. The domain must already be in auction (use dns_check first to verify status and get current bid).",
@@ -15808,7 +16018,7 @@ var dnsBidExecutor = async (params, context) => {
       workchain: 0,
       publicKey: keyPair.publicKey
     });
-    const endpoint = await getHttpEndpoint8({ network: "mainnet" });
+    const endpoint = await getCachedHttpEndpoint();
     const client = new TonClient8({ endpoint });
     const contract = client.open(wallet);
     const seqno = await contract.getSeqno();
@@ -15853,7 +16063,6 @@ import { Type as Type83 } from "@sinclair/typebox";
 import { mnemonicToPrivateKey as mnemonicToPrivateKey6 } from "@ton/crypto";
 import { WalletContractV5R1 as WalletContractV5R16, TonClient as TonClient9, toNano as toNano5, internal as internal5, beginCell as beginCell2 } from "@ton/ton";
 import { Address as Address8, SendMode as SendMode5 } from "@ton/core";
-import { getHttpEndpoint as getHttpEndpoint9 } from "@orbs-network/ton-access";
 var DNS_CHANGE_RECORD_OP = 1320284409;
 var DNS_SMC_ADDRESS_PREFIX = 40915;
 var WALLET_RECORD_KEY = BigInt(
@@ -15935,7 +16144,7 @@ var dnsLinkExecutor = async (params, context) => {
       workchain: 0,
       publicKey: keyPair.publicKey
     });
-    const endpoint = await getHttpEndpoint9({ network: "mainnet" });
+    const endpoint = await getCachedHttpEndpoint();
     const client = new TonClient9({ endpoint });
     const contract = client.open(wallet);
     const seqno = await contract.getSeqno();
@@ -15981,7 +16190,6 @@ import { Type as Type84 } from "@sinclair/typebox";
 import { mnemonicToPrivateKey as mnemonicToPrivateKey7 } from "@ton/crypto";
 import { WalletContractV5R1 as WalletContractV5R17, TonClient as TonClient10, toNano as toNano6, internal as internal6, beginCell as beginCell3 } from "@ton/ton";
 import { Address as Address9, SendMode as SendMode6 } from "@ton/core";
-import { getHttpEndpoint as getHttpEndpoint10 } from "@orbs-network/ton-access";
 var DNS_CHANGE_RECORD_OP2 = 1320284409;
 var WALLET_RECORD_KEY2 = BigInt(
   "0xe8d44050873dba865aa7c170ab4cce64d90839a34dcfd6cf71d14e0205443b1b"
@@ -16048,7 +16256,7 @@ var dnsUnlinkExecutor = async (params, context) => {
       workchain: 0,
       publicKey: keyPair.publicKey
     });
-    const endpoint = await getHttpEndpoint10({ network: "mainnet" });
+    const endpoint = await getCachedHttpEndpoint();
     const client = new TonClient10({ endpoint });
     const contract = client.open(wallet);
     const seqno = await contract.getSeqno();
@@ -16208,7 +16416,6 @@ import { Type as Type86 } from "@sinclair/typebox";
 import { mnemonicToPrivateKey as mnemonicToPrivateKey8 } from "@ton/crypto";
 import { WalletContractV5R1 as WalletContractV5R18, TonClient as TonClient11, toNano as toNano19, internal as internal7 } from "@ton/ton";
 import { SendMode as SendMode7 } from "@ton/core";
-import { getHttpEndpoint as getHttpEndpoint11 } from "@orbs-network/ton-access";
 
 // node_modules/@ston-fi/sdk/dist/chunk-HNMPFVZW.js
 import { Address as Address10, address } from "@ton/ton";
@@ -19579,7 +19786,7 @@ var jettonSwapExecutor = async (params, context) => {
         error: `Invalid to_asset address: ${toAddress2}`
       };
     }
-    const endpoint = await getHttpEndpoint11({ network: "mainnet" });
+    const endpoint = await getCachedHttpEndpoint();
     const tonClient = new TonClient11({ endpoint });
     const stonApiClient = new StonApiClient();
     console.log(`Simulating swap: ${amount} ${fromAddress} \u2192 ${toAddress2}`);
@@ -19668,7 +19875,6 @@ import { Type as Type87 } from "@sinclair/typebox";
 import { mnemonicToPrivateKey as mnemonicToPrivateKey9 } from "@ton/crypto";
 import { WalletContractV5R1 as WalletContractV5R19, TonClient as TonClient12, toNano as toNano20, internal as internal8 } from "@ton/ton";
 import { Address as Address13, SendMode as SendMode8, beginCell as beginCell15 } from "@ton/core";
-import { getHttpEndpoint as getHttpEndpoint12 } from "@orbs-network/ton-access";
 var JETTON_TRANSFER_OP = 260734629;
 var jettonSendTool = {
   name: "jetton_send",
@@ -19748,7 +19954,7 @@ var jettonSendExecutor = async (params, context) => {
       workchain: 0,
       publicKey: keyPair.publicKey
     });
-    const endpoint = await getHttpEndpoint12({ network: "mainnet" });
+    const endpoint = await getCachedHttpEndpoint();
     const client = new TonClient12({ endpoint });
     const walletContract = client.open(wallet);
     const seqno = await walletContract.getSeqno();
@@ -20610,7 +20816,7 @@ var jettonPoolsExecutor = async (params, context) => {
 
 // src/agent/tools/jetton/index.ts
 var tools18 = [
-  { tool: jettonSwapTool, executor: jettonSwapExecutor, scope: "dm-only" },
+  { tool: jettonSwapTool, executor: jettonSwapExecutor },
   { tool: jettonSendTool, executor: jettonSendExecutor, scope: "dm-only" },
   { tool: jettonBalancesTool, executor: jettonBalancesExecutor },
   { tool: jettonInfoTool, executor: jettonInfoExecutor },
@@ -20627,7 +20833,6 @@ var tools18 = [
 import { Type as Type96 } from "@sinclair/typebox";
 import { TonClient as TonClient13, toNano as toNano22, fromNano as fromNano5 } from "@ton/ton";
 import { Address as Address14 } from "@ton/core";
-import { getHttpEndpoint as getHttpEndpoint13 } from "@orbs-network/ton-access";
 import { Factory, Asset, PoolType, ReadinessStatus } from "@dedust/sdk";
 
 // src/agent/tools/dedust/constants.ts
@@ -20701,7 +20906,7 @@ var dedustQuoteExecutor = async (params, context) => {
         };
       }
     }
-    const endpoint = await getHttpEndpoint13({ network: "mainnet" });
+    const endpoint = await getCachedHttpEndpoint();
     const tonClient = new TonClient13({ endpoint });
     const factory = tonClient.open(
       Factory.createFromAddress(Address14.parse(DEDUST_FACTORY_MAINNET))
@@ -20785,7 +20990,6 @@ import { Type as Type97 } from "@sinclair/typebox";
 import { mnemonicToPrivateKey as mnemonicToPrivateKey10 } from "@ton/crypto";
 import { WalletContractV5R1 as WalletContractV5R110, TonClient as TonClient14, toNano as toNano23, fromNano as fromNano6 } from "@ton/ton";
 import { Address as Address15 } from "@ton/core";
-import { getHttpEndpoint as getHttpEndpoint14 } from "@orbs-network/ton-access";
 import { Factory as Factory2, Asset as Asset2, PoolType as PoolType2, ReadinessStatus as ReadinessStatus2, JettonRoot, VaultJetton } from "@dedust/sdk";
 var dedustSwapTool = {
   name: "dedust_swap",
@@ -20849,7 +21053,7 @@ var dedustSwapExecutor = async (params, context) => {
         };
       }
     }
-    const endpoint = await getHttpEndpoint14({ network: "mainnet" });
+    const endpoint = await getCachedHttpEndpoint();
     const tonClient = new TonClient14({ endpoint });
     const factory = tonClient.open(
       Factory2.createFromAddress(Address15.parse(DEDUST_FACTORY_MAINNET))
@@ -21079,7 +21283,7 @@ var dedustPoolsExecutor = async (params, context) => {
 
 // src/agent/tools/dedust/index.ts
 var tools19 = [
-  { tool: dedustSwapTool, executor: dedustSwapExecutor, scope: "dm-only" },
+  { tool: dedustSwapTool, executor: dedustSwapExecutor },
   { tool: dedustQuoteTool, executor: dedustQuoteExecutor },
   { tool: dedustPoolsTool, executor: dedustPoolsExecutor }
 ];
@@ -21088,7 +21292,6 @@ var tools19 = [
 import { Type as Type99 } from "@sinclair/typebox";
 import { TonClient as TonClient15, toNano as toNano24, fromNano as fromNano7 } from "@ton/ton";
 import { Address as Address16 } from "@ton/core";
-import { getHttpEndpoint as getHttpEndpoint15 } from "@orbs-network/ton-access";
 import { Factory as Factory3, Asset as Asset3, PoolType as PoolType3, ReadinessStatus as ReadinessStatus3 } from "@dedust/sdk";
 var dexQuoteTool = {
   name: "dex_quote",
@@ -21235,7 +21438,7 @@ async function getDedustQuote(fromAsset, toAsset, amount, slippage, tonClient) {
 var dexQuoteExecutor = async (params, context) => {
   try {
     const { from_asset, to_asset, amount, slippage = 0.01 } = params;
-    const endpoint = await getHttpEndpoint15({ network: "mainnet" });
+    const endpoint = await getCachedHttpEndpoint();
     const tonClient = new TonClient15({ endpoint });
     const [stonfiQuote, dedustQuote] = await Promise.all([
       getStonfiQuote(from_asset, to_asset, amount, slippage),
@@ -21347,7 +21550,6 @@ import { Type as Type100 } from "@sinclair/typebox";
 import { mnemonicToPrivateKey as mnemonicToPrivateKey11 } from "@ton/crypto";
 import { WalletContractV5R1 as WalletContractV5R111, TonClient as TonClient16, toNano as toNano25, fromNano as fromNano8 } from "@ton/ton";
 import { Address as Address17, SendMode as SendMode9, internal as internal9 } from "@ton/core";
-import { getHttpEndpoint as getHttpEndpoint16 } from "@orbs-network/ton-access";
 import { Factory as Factory4, Asset as Asset4, PoolType as PoolType4, ReadinessStatus as ReadinessStatus4, JettonRoot as JettonRoot2, VaultJetton as VaultJetton2 } from "@dedust/sdk";
 var dexSwapTool = {
   name: "dex_swap",
@@ -21569,7 +21771,7 @@ var dexSwapExecutor = async (params, context) => {
     if (!isTonOutput && !to_asset.match(/^[EUe][Qq][A-Za-z0-9_-]{46}$/)) {
       return { success: false, error: `Invalid to_asset address: ${to_asset}` };
     }
-    const endpoint = await getHttpEndpoint16({ network: "mainnet" });
+    const endpoint = await getCachedHttpEndpoint();
     const tonClient = new TonClient16({ endpoint });
     let stonfiQuote = null;
     let dedustQuote = null;
@@ -21683,7 +21885,7 @@ var dexSwapExecutor = async (params, context) => {
 
 // src/agent/tools/dex/index.ts
 var tools20 = [
-  { tool: dexSwapTool, executor: dexSwapExecutor, scope: "dm-only" },
+  { tool: dexSwapTool, executor: dexSwapExecutor },
   { tool: dexQuoteTool, executor: dexQuoteExecutor }
 ];
 
@@ -22302,7 +22504,6 @@ var workspaceWriteExecutor = async (params, _context) => {
       writeContent = content;
     }
     const contentSize = Buffer.byteLength(writeContent);
-    const MAX_WRITE_SIZE = 50 * 1024 * 1024;
     if (contentSize > MAX_WRITE_SIZE) {
       return {
         success: false,
@@ -22918,10 +23119,10 @@ async function sendPayout(playerAddress, amount, message) {
     const endpoint = await getCachedHttpEndpoint();
     const client = new TonClient17({ endpoint });
     const contract = client.open(wallet);
-    const seqno = await withBlockchainRetry(() => contract.getSeqno(), "getSeqno");
-    await withBlockchainRetry(
-      () => contract.sendTransfer({
-        seqno,
+    const seqno = await withBlockchainRetry(async () => {
+      const seq = await contract.getSeqno();
+      await contract.sendTransfer({
+        seqno: seq,
         secretKey: keyPair.secretKey,
         sendMode: SendMode10.PAY_GAS_SEPARATELY,
         messages: [
@@ -22932,9 +23133,9 @@ async function sendPayout(playerAddress, amount, message) {
             bounce: false
           })
         ]
-      }),
-      "sendTransfer"
-    );
+      });
+      return seq;
+    }, "payout");
     const walletAddr = wallet.address.toString({ bounceable: false });
     const walletShort = walletAddr.slice(-8);
     const timestamp = Date.now();
@@ -23586,7 +23787,7 @@ var MarketScraperService = class {
     this.isScrapingInProgress = true;
     console.log("\u{1F504} Starting full market scrape...");
     try {
-      const { runScraper } = await import("./scraper-DSAYK6QJ.js");
+      const { runScraper } = await import("./scraper-2O6Z3ZHT.js");
       const result = await runScraper({
         workers: 4,
         limit: 0
@@ -23930,6 +24131,85 @@ function loadModules(registry, config, db3) {
   return loaded;
 }
 
+// src/agent/tools/module-permissions.ts
+var PROTECTED_MODULES = /* @__PURE__ */ new Set(["telegram", "memory"]);
+var ModulePermissions = class {
+  db;
+  /** chatId → module → level */
+  cache = /* @__PURE__ */ new Map();
+  constructor(db3) {
+    this.db = db3;
+    this.ensureTable();
+    this.loadAll();
+  }
+  ensureTable() {
+    this.db.exec(`
+      CREATE TABLE IF NOT EXISTS group_modules (
+        chat_id    TEXT NOT NULL,
+        module     TEXT NOT NULL,
+        level      TEXT NOT NULL CHECK(level IN ('open', 'admin', 'disabled')),
+        updated_at INTEGER NOT NULL DEFAULT (unixepoch()),
+        updated_by INTEGER,
+        PRIMARY KEY (chat_id, module)
+      )
+    `);
+  }
+  loadAll() {
+    const rows = this.db.prepare("SELECT chat_id, module, level FROM group_modules").all();
+    for (const row of rows) {
+      let chatMap = this.cache.get(row.chat_id);
+      if (!chatMap) {
+        chatMap = /* @__PURE__ */ new Map();
+        this.cache.set(row.chat_id, chatMap);
+      }
+      chatMap.set(row.module, row.level);
+    }
+  }
+  /** Get the effective level for a module in a chat. Default: "open". */
+  getLevel(chatId, module) {
+    return this.cache.get(chatId)?.get(module) ?? "open";
+  }
+  /** Set the level for a module in a chat. Throws if module is protected. */
+  setLevel(chatId, module, level, userId) {
+    if (PROTECTED_MODULES.has(module)) {
+      throw new Error(`Module "${module}" est prot\xE9g\xE9`);
+    }
+    if (level === "open") {
+      this.db.prepare("DELETE FROM group_modules WHERE chat_id = ? AND module = ?").run(chatId, module);
+      this.cache.get(chatId)?.delete(module);
+    } else {
+      this.db.prepare(
+        `INSERT OR REPLACE INTO group_modules (chat_id, module, level, updated_at, updated_by)
+           VALUES (?, ?, ?, unixepoch(), ?)`
+      ).run(chatId, module, level, userId ?? null);
+      let chatMap = this.cache.get(chatId);
+      if (!chatMap) {
+        chatMap = /* @__PURE__ */ new Map();
+        this.cache.set(chatId, chatMap);
+      }
+      chatMap.set(module, level);
+    }
+  }
+  /** Reset a single module to default ("open"). */
+  resetModule(chatId, module) {
+    this.db.prepare("DELETE FROM group_modules WHERE chat_id = ? AND module = ?").run(chatId, module);
+    this.cache.get(chatId)?.delete(module);
+  }
+  /** Reset all modules for a chat to default ("open"). */
+  resetAll(chatId) {
+    this.db.prepare("DELETE FROM group_modules WHERE chat_id = ?").run(chatId);
+    this.cache.delete(chatId);
+  }
+  /** Get all non-default overrides for a chat. */
+  getOverrides(chatId) {
+    return this.cache.get(chatId) ?? /* @__PURE__ */ new Map();
+  }
+  /** Check if a module is protected (always open, cannot be changed). */
+  isProtected(module) {
+    return PROTECTED_MODULES.has(module);
+  }
+};
+
 // src/index.ts
 var TonnetApp = class {
   config;
@@ -23977,6 +24257,8 @@ var TonnetApp = class {
     });
     const db3 = getDatabase().getDb();
     this.modules = loadModules(this.toolRegistry, this.config, db3);
+    const modulePermissions = new ModulePermissions(db3);
+    this.toolRegistry.setPermissions(modulePermissions);
     this.toolCount = this.toolRegistry.count;
     this.messageHandler = new MessageHandler(
       this.bridge,
@@ -23989,7 +24271,13 @@ var TonnetApp = class {
       this.config
       // Pass full config for vision tool API key access
     );
-    this.adminHandler = new AdminHandler(this.bridge, this.config.telegram, this.agent);
+    this.adminHandler = new AdminHandler(
+      this.bridge,
+      this.config.telegram,
+      this.agent,
+      modulePermissions,
+      this.toolRegistry
+    );
   }
   /**
    * Start the agent
@@ -24028,7 +24316,7 @@ ${blue}  \u250C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u250
         `\u26A0\uFE0F Tool count (${this.toolCount}) exceeds ${providerMeta.displayName} limit (${providerMeta.toolLimit})`
       );
     }
-    const { migrateSessionsToDb } = await import("./migrate-7XOO67O5.js");
+    const { migrateSessionsToDb } = await import("./migrate-6BQZVOBN.js");
     migrateSessionsToDb();
     const { cleanupOldTranscripts } = await import("./transcript-DF2Y6CFY.js");
     cleanupOldTranscripts(30);
@@ -24149,7 +24437,8 @@ ${blue}  \u250C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u250
           const response = await this.adminHandler.handleCommand(
             adminCmd,
             message.chatId,
-            message.senderId
+            message.senderId,
+            message.isGroup
           );
           await this.bridge.sendMessage({
             chatId: message.chatId,
@@ -24177,8 +24466,8 @@ ${blue}  \u250C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u250
       }
       const taskId = match[1];
       const { getTaskStore } = await import("./tasks-M3QDPTGY.js");
-      const { executeScheduledTask } = await import("./task-executor-MNI4VIZL.js");
-      const { getDatabase: getDatabase2 } = await import("./memory-OEOLPEXP.js");
+      const { executeScheduledTask } = await import("./task-executor-4SVB72GR.js");
+      const { getDatabase: getDatabase2 } = await import("./memory-PDEJIPK6.js");
       const db3 = getDatabase2().getDb();
       const taskStore = getTaskStore(db3);
       const task = taskStore.getTask(taskId);
@@ -24244,7 +24533,7 @@ ${blue}  \u250C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u250
       taskStore.completeTask(taskId, response.content);
       console.log(`\u2705 Executed scheduled task ${taskId}: ${task.description}`);
       if (!this.dependencyResolver) {
-        const { TaskDependencyResolver } = await import("./task-dependency-resolver-CWG6DTU4.js");
+        const { TaskDependencyResolver } = await import("./task-dependency-resolver-WNYOTWWM.js");
         this.dependencyResolver = new TaskDependencyResolver(taskStore, this.bridge);
       }
       await this.dependencyResolver.onTaskComplete(taskId);
@@ -24252,8 +24541,8 @@ ${blue}  \u250C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u250
       console.error("Error handling scheduled task:", error);
       try {
         const { getTaskStore } = await import("./tasks-M3QDPTGY.js");
-        const { TaskDependencyResolver } = await import("./task-dependency-resolver-CWG6DTU4.js");
-        const { getDatabase: getDatabase2 } = await import("./memory-OEOLPEXP.js");
+        const { TaskDependencyResolver } = await import("./task-dependency-resolver-WNYOTWWM.js");
+        const { getDatabase: getDatabase2 } = await import("./memory-PDEJIPK6.js");
         const db3 = getDatabase2().getDb();
         const taskStore = getTaskStore(db3);
         const match = message.text.match(/^\[TASK:([^\]]+)\]/);
@@ -24281,6 +24570,7 @@ ${blue}  \u250C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u250
       await mod.stop?.();
     }
     await this.bridge.disconnect();
+    closeDatabase();
   }
 };
 async function main(configPath) {
@@ -24292,14 +24582,19 @@ async function main(configPath) {
     console.error("\u{1F4A5} Uncaught exception:", error);
     process.exit(1);
   });
-  process.on("SIGINT", async () => {
-    await app.stop();
-    process.exit(0);
-  });
-  process.on("SIGTERM", async () => {
+  const gracefulShutdown = async () => {
+    const { SHUTDOWN_TIMEOUT_MS } = await import("./timeouts-ZAK6NELA.js");
+    const forceExit = setTimeout(() => {
+      console.error("\u26A0\uFE0F Shutdown timed out, forcing exit");
+      process.exit(1);
+    }, SHUTDOWN_TIMEOUT_MS);
+    forceExit.unref();
     await app.stop();
+    clearTimeout(forceExit);
     process.exit(0);
-  });
+  };
+  process.on("SIGINT", gracefulShutdown);
+  process.on("SIGTERM", gracefulShutdown);
   await app.start();
 }
 if (import.meta.url === `file://${process.argv[1]}`) {