teleton 0.8.0 → 0.8.1

package/dist/{chunk-H36RFKRI.js → chunk-5FNWBZ5K.js}

@@ -1,7 +1,7 @@
 import {
   telegramGetMyGiftsExecutor,
   telegramGetMyGiftsTool
-} from "./chunk-WIKM24GZ.js";
+} from "./chunk-QBHRXLZS.js";
 import {
   AgentRuntime,
   DEDUST_API_URL,
@@ -20,13 +20,16 @@ import {
   findAssetBySymbol,
   formatTransactions,
   fromUnits,
+  getBlocklistConfig,
   getDecimals,
   getDefaultConfigPath,
+  getTriggersConfig,
   hasStyledButtons,
   listPluginSecretKeys,
   loadConfig,
   loadEnhancedPlugins,
   loadSoul,
+  module_default,
   parseHtml,
   randomLong,
   readRawConfig,
@@ -47,7 +50,7 @@ import {
   withTxLock,
   writePluginSecret,
   writeRawConfig
-} from "./chunk-RQBAMUCV.js";
+} from "./chunk-CGOXE4WP.js";
 import {
   getCachedTonClient,
   getKeyPair,
@@ -58,14 +61,14 @@ import {
   loadTemplate,
   loadWallet,
   setToncenterApiKey
-} from "./chunk-JHYZYFZJ.js";
+} from "./chunk-S6PHGKOC.js";
 import {
   getErrorMessage
 } from "./chunk-XBE4JB7C.js";
 import {
   getEffectiveApiKey,
   getProviderModel
-} from "./chunk-QVBSUYVX.js";
+} from "./chunk-AYWEJCDB.js";
 import {
   getProviderMetadata
 } from "./chunk-PHSAHTK4.js";
@@ -81,7 +84,7 @@ import {
   initializeMemory,
   migrateFromMainDb,
   openModuleDb
-} from "./chunk-SD4NLLYG.js";
+} from "./chunk-7U7BOHCL.js";
 import {
   ELEVENLABS_TTS_URL,
   GECKOTERMINAL_API_URL,
@@ -107,7 +110,7 @@ import {
   TELEGRAM_MAX_MESSAGE_LENGTH,
   WEB_FETCH_MAX_TEXT_LENGTH,
   WEB_SEARCH_MAX_RESULTS
-} from "./chunk-IJBWWQE4.js";
+} from "./chunk-UP55PXFH.js";
 import {
   fetchWithTimeout
 } from "./chunk-XQUHC3JZ.js";
@@ -349,14 +352,15 @@ var TelegramUserClient = class {
               authenticated = true;
               break;
             } catch (err) {
-              if (err.errorMessage === "PHONE_CODE_INVALID") {
+              const errObj = err;
+              if (errObj.errorMessage === "PHONE_CODE_INVALID") {
                 const remaining = maxAttempts - attempt - 1;
                 if (remaining > 0) {
                   console.log(`Invalid code. ${remaining} attempt(s) remaining.`);
                 } else {
                   throw new Error("Authentication failed: too many invalid code attempts");
                 }
-              } else if (err.errorMessage === "SESSION_PASSWORD_NEEDED") {
+              } else if (errObj.errorMessage === "SESSION_PASSWORD_NEEDED") {
                 const pwd = await promptInput("2FA password: ");
                 const { computeCheck } = await import("telegram/Password.js");
                 const srpResult = await this.client.invoke(new Api.account.GetPassword());
@@ -423,15 +427,21 @@ var TelegramUserClient = class {
       }
       await handler(event);
     };
-    this.client.addEventHandler(wrappedHandler, new NewMessage(filters ?? {}));
+    this.client.addEventHandler(
+      // eslint-disable-next-line @typescript-eslint/no-misused-promises -- GramJS event handler accepts async
+      wrappedHandler,
+      new NewMessage(filters ?? {})
+    );
   }
   addServiceMessageHandler(handler) {
     this.client.addEventHandler(async (update) => {
-      if ((update instanceof Api.UpdateNewMessage || update instanceof Api.UpdateNewChannelMessage) && update.message instanceof Api.MessageService) {
+      if ((update instanceof Api.UpdateNewMessage || update instanceof Api.UpdateNewChannelMessage) && // eslint-disable-next-line @typescript-eslint/no-explicit-any -- GramJS update.message lacks proper typing
+      update.message instanceof Api.MessageService) {
         await handler(update.message);
       }
     });
   }
+  // eslint-disable-next-line @typescript-eslint/no-explicit-any -- GramJS raw update event
   addCallbackQueryHandler(handler) {
     this.client.addEventHandler(async (update) => {
       if (update.className === "UpdateBotCallbackQuery" || update.className === "UpdateInlineBotCallbackQuery") {
@@ -459,13 +469,16 @@ var TelegramUserClient = class {
     const parseMode = options.parseMode ?? "html";
     const formattedMessage = parseMode === "html" ? markdownToTelegramHtml(options.message) : options.message;
     return withFloodRetry(
-      () => this.client.sendMessage(entity, {
-        message: formattedMessage,
-        replyTo: options.replyTo,
-        silent: options.silent,
-        parseMode: parseMode === "none" ? void 0 : parseMode,
-        linkPreview: false
-      })
+      () => (
+        // eslint-disable-next-line @typescript-eslint/no-explicit-any -- GramJS sendMessage accepts string | Entity
+        this.client.sendMessage(entity, {
+          message: formattedMessage,
+          replyTo: options.replyTo,
+          silent: options.silent,
+          parseMode: parseMode === "none" ? void 0 : parseMode,
+          linkPreview: false
+        })
+      )
     );
   }
   async getMessages(entity, options) {
@@ -729,7 +742,7 @@ var TelegramBridge = class {
       if (sender instanceof Api2.User) {
         isBot = sender.bot ?? false;
       }
-    } catch (e) {
+    } catch {
     }
     const hasMedia = !!(msg.photo || msg.document || msg.video || msg.audio || msg.voice || msg.sticker);
     let mediaType;
@@ -1221,7 +1234,6 @@ var MessageHandler = class _MessageHandler {
   fullConfig;
   agent;
   rateLimiter;
-  lastProcessedMessageId;
   messageStore;
   chatStore;
   userStore;
@@ -1246,7 +1258,6 @@ var MessageHandler = class _MessageHandler {
     this.chatStore = new ChatStore(db2);
     this.userStore = new UserStore(db2);
     this.pendingHistory = new PendingHistory();
-    this.lastProcessedMessageId = 0;
   }
   setOwnUserId(userId) {
     this.ownUserId = userId;
@@ -1358,10 +1369,11 @@ var MessageHandler = class _MessageHandler {
    * Process and respond to a message
    */
   async handleMessage(message) {
-    if (this.recentMessageIds.has(message.id)) {
+    const dedupKey = `${message.chatId}:${message.id}`;
+    if (this.recentMessageIds.has(dedupKey)) {
       return;
     }
-    this.recentMessageIds.add(message.id);
+    this.recentMessageIds.add(dedupKey);
     if (this.recentMessageIds.size > _MessageHandler.DEDUP_MAX_SIZE) {
       const ids = [...this.recentMessageIds];
       this.recentMessageIds = new Set(ids.slice(ids.length >> 1));
@@ -1452,10 +1464,11 @@ var MessageHandler = class _MessageHandler {
                   config: this.fullConfig
                 }
               );
-              if (transcribeResult.success && transcribeResult.data?.text) {
-                transcriptionText = transcribeResult.data.text;
+              const transcribeData = transcribeResult.data;
+              if (transcribeResult.success && transcribeData?.text) {
+                transcriptionText = transcribeData.text;
                 log6.info(
-                  `\u{1F3A4} Auto-transcribed voice msg ${message.id}: "${transcriptionText.substring(0, 80)}..."`
+                  `\u{1F3A4} Auto-transcribed voice msg ${message.id}: "${transcriptionText?.substring(0, 80)}..."`
                 );
               }
             } catch (err) {
@@ -1561,12 +1574,6 @@ ${message.text}` : ""}` : message.text;
       log6.error({ err: error }, "Error storing message to feed");
     }
   }
-  /**
-   * Get last processed message ID
-   */
-  getLastProcessedMessageId() {
-    return this.lastProcessedMessageId;
-  }
 };
 
 // src/telegram/admin.ts
@@ -1696,7 +1703,7 @@ var AdminHandler = class {
 Use /help for available commands.`;
     }
   }
-  async handleStatusCommand(command) {
+  async handleStatusCommand(_command) {
     const activeChatIds = this.agent.getActiveChatIds();
     const chatCount = activeChatIds.length;
     const cfg = this.agent.getConfig();
@@ -1907,6 +1914,7 @@ Usage: /modules | /modules set <module> <level> | /modules info <module> | /modu
     }
   }
   listModules(chatId) {
+    if (!this.registry || !this.permissions) return "\u274C Module permissions not available";
     const modules = this.registry.getAvailableModules();
     const overrides = this.permissions.getOverrides(chatId);
     const lines = ["\u{1F9E9} **Modules** (this group)\n"];
@@ -1941,6 +1949,7 @@ Usage: /modules | /modules set <module> <level> | /modules info <module> | /modu
     }
     module = module.toLowerCase();
     level = level.toLowerCase();
+    if (!this.registry || !this.permissions) return "\u274C Module permissions not available";
     const available = this.registry.getAvailableModules();
     if (!available.includes(module)) {
       return `\u274C Unknown module: "${module}"`;
@@ -1961,6 +1970,7 @@ Usage: /modules | /modules set <module> <level> | /modules info <module> | /modu
       return "\u274C Usage: /modules info <module>";
     }
     module = module.toLowerCase();
+    if (!this.registry || !this.permissions) return "\u274C Module permissions not available";
     const available = this.registry.getAvailableModules();
     if (!available.includes(module)) {
       return `\u274C Unknown module: "${module}"`;
@@ -1981,6 +1991,7 @@ Usage: /modules | /modules set <module> <level> | /modules info <module> | /modu
     return lines.join("\n");
   }
   resetModules(chatId, module) {
+    if (!this.registry || !this.permissions) return "\u274C Module permissions not available";
     if (module) {
       module = module.toLowerCase();
       const available = this.registry.getAvailableModules();
@@ -2550,7 +2561,7 @@ var ToolRegistry = class {
     }
     this.toolArrayCache = null;
     if (names.length > 0) {
-      const addedTools = names.map((n) => this.tools.get(n).tool);
+      const addedTools = names.map((n) => this.tools.get(n)?.tool).filter((t) => !!t);
       this.notifyToolsChanged([], addedTools);
     }
     return names.length;
@@ -2593,7 +2604,7 @@ var ToolRegistry = class {
     }
     this.toolArrayCache = null;
     const removedNames = [...previousNames].filter((n) => !names.includes(n));
-    const addedTools = names.map((n) => this.tools.get(n).tool);
+    const addedTools = names.map((n) => this.tools.get(n)?.tool).filter((t) => !!t);
     if (removedNames.length > 0 || addedTools.length > 0) {
       this.notifyToolsChanged(removedNames, addedTools);
     }
@@ -2868,7 +2879,7 @@ var telegramForwardMessageExecutor = async (params, context) => {
   try {
     const { fromChatId, toChatId, messageIds, silent = false, background = false } = params;
     const gramJsClient = context.bridge.getClient().getClient();
-    const result = await gramJsClient.invoke(
+    const _result = await gramJsClient.invoke(
       new Api5.messages.ForwardMessages({
         fromPeer: fromChatId,
         toPeer: toChatId,
@@ -3274,6 +3285,7 @@ var telegramGetRepliesExecutor = async (params, context) => {
         limit,
         maxId: 0,
         minId: 0,
+        // eslint-disable-next-line @typescript-eslint/no-explicit-any -- GramJS API response is untyped
         hash: 0n
       })
     );
@@ -3369,6 +3381,7 @@ var telegramGetScheduledMessagesExecutor = async (params, context) => {
     const result = await gramJsClient.invoke(
       new Api11.messages.GetScheduledHistory({
         peer: entity,
+        // eslint-disable-next-line @typescript-eslint/no-explicit-any -- GramJS API response is untyped
         hash: 0n
       })
     );
@@ -3766,7 +3779,7 @@ async function generatePiperTTS(text, voice) {
       });
     });
     unlinkSync(wavPath);
-  } catch (err) {
+  } catch {
     return {
       filePath: wavPath,
       provider: "piper",
@@ -4053,7 +4066,7 @@ var telegramSendVoiceExecutor = async (params, context) => {
     if (generatedFile) {
       try {
         unlinkSync2(generatedFile);
-      } catch (e) {
+      } catch {
       }
     }
   }
@@ -4109,6 +4122,7 @@ var telegramSendStickerExecutor = async (params, context) => {
       const stickerSet = await gramJsClient.invoke(
         new Api15.messages.GetStickerSet({
           stickerset: new Api15.InputStickerSetShortName({
+            // eslint-disable-next-line @typescript-eslint/no-non-null-assertion -- guarded by hasSetInfo check
             shortName: stickerSetShortName
           }),
           hash: 0
@@ -4127,7 +4141,7 @@ var telegramSendStickerExecutor = async (params, context) => {
         };
       }
       const stickerDoc = stickerSet.documents[stickerIndex];
-      const result2 = await gramJsClient.invoke(
+      const _result = await gramJsClient.invoke(
         new Api15.messages.SendMedia({
           peer: chatId,
           media: new Api15.InputMediaDocument({
@@ -4234,10 +4248,12 @@ var telegramSendGifExecutor = async (params, context) => {
     }
     const gramJsClient = context.bridge.getClient().getClient();
     if (hasInlineResult) {
-      const result2 = await gramJsClient.invoke(
+      const _result = await gramJsClient.invoke(
         new Api16.messages.SendInlineBotResult({
           peer: chatId,
+          // eslint-disable-next-line @typescript-eslint/no-non-null-assertion -- guarded by hasInlineResult check
           queryId: toLong(BigInt(queryId)),
+          // eslint-disable-next-line @typescript-eslint/no-non-null-assertion -- guarded by hasInlineResult check
           id: resultId,
           randomId: randomLong(),
           replyTo: replyToId ? new Api16.InputReplyToMessage({ replyToMsgId: replyToId }) : void 0
@@ -4530,6 +4546,7 @@ var visionAnalyzeExecutor = async (params, context) => {
       log27.info(`\u{1F4F7} Downloading image from message ${messageId}...`);
       const gramJsClient = context.bridge.getClient().getClient();
       const messages = await gramJsClient.getMessages(chatId, {
+        // eslint-disable-next-line @typescript-eslint/no-non-null-assertion -- messageId guaranteed in this branch
         ids: [messageId]
       });
       if (!messages || messages.length === 0) {
@@ -4812,7 +4829,7 @@ var telegramGetChatInfoExecutor = async (params, context) => {
     let entity;
     try {
       entity = await gramJsClient.getEntity(chatId);
-    } catch (error) {
+    } catch {
       return {
         success: false,
         error: `Could not find chat "${chatId}"`
@@ -4878,7 +4895,7 @@ var telegramGetChatInfoExecutor = async (params, context) => {
             isDeactivated: chat.deactivated || false
           };
         }
-      } catch (error) {
+      } catch {
         chatInfo = {
           ...chatInfo,
           title: entity instanceof Api18.Channel ? entity.title : entity instanceof Api18.Chat ? entity.title : null,
@@ -4929,7 +4946,7 @@ var telegramMarkAsReadExecutor = async (params, context) => {
     let entity;
     try {
       entity = await gramJsClient.getEntity(chatId);
-    } catch (error) {
+    } catch {
       return {
         success: false,
         error: `Could not find chat "${chatId}"`
@@ -5122,7 +5139,7 @@ var telegramLeaveChannelExecutor = async (params, context) => {
     let channelEntity;
     try {
       channelEntity = await gramJsClient.getEntity(channel);
-    } catch (error) {
+    } catch {
       return {
         success: false,
         error: `Could not find channel "${channel}". Make sure it exists and you have access to it.`
@@ -5416,7 +5433,7 @@ var telegramInviteToChannelExecutor = async (params, context) => {
         } else {
           failed.push(`${userId} (not a user)`);
         }
-      } catch (error) {
+      } catch {
         failed.push(`${userId} (not found)`);
       }
     }
@@ -5436,7 +5453,7 @@ var telegramInviteToChannelExecutor = async (params, context) => {
         } else {
           failed.push(`@${cleanUsername} (not a user)`);
         }
-      } catch (error) {
+      } catch {
         failed.push(`@${username.replace("@", "")} (not found)`);
       }
     }
@@ -5446,7 +5463,7 @@ var telegramInviteToChannelExecutor = async (params, context) => {
         error: `Could not resolve any users to invite. Failed: ${failed.join(", ")}`
       };
     }
-    const result = await gramJsClient.invoke(
+    const _result = await gramJsClient.invoke(
       new Api23.channels.InviteToChannel({
         channel,
         users
@@ -6416,7 +6433,7 @@ var telegramCreatePollExecutor = async (params, context) => {
       closePeriod,
       closeDate
     });
-    const result = await gramJsClient.invoke(
+    const _result = await gramJsClient.invoke(
       new Api31.messages.SendMedia({
         peer: chatId,
         media: new Api31.InputMediaPoll({
@@ -6525,7 +6542,7 @@ var telegramCreateQuizExecutor = async (params, context) => {
       closePeriod,
       closeDate
     });
-    const result = await gramJsClient.invoke(
+    const _result = await gramJsClient.invoke(
       new Api32.messages.SendMedia({
         peer: chatId,
         media: new Api32.InputMediaPoll({
@@ -7048,6 +7065,7 @@ var telegramGetFoldersExecutor = async (_params, context) => {
     const filterList = dialogFilters.filters ?? [];
     const folders = filterList.filter((filter) => filter.className === "DialogFilter").map((filter) => ({
       id: filter.id,
+      // eslint-disable-next-line @typescript-eslint/no-explicit-any -- GramJS API response is untyped
       title: filter.title?.text ?? filter.title,
       emoji: filter.emoticon || null,
       pinnedPeersCount: filter.pinnedPeers?.length || 0,
@@ -7211,7 +7229,7 @@ var telegramAddChatToFolderExecutor = async (params, context) => {
         error: `Folder with ID ${folderId} not found`
       };
     }
-    const chatEntity = await gramJsClient.getEntity(chatId);
+    const _chatEntity = await gramJsClient.getEntity(chatId);
     const inputPeer = await gramJsClient.getInputEntity(chatId);
     const updatedIncludePeers = [...folder.includePeers || []];
     updatedIncludePeers.push(inputPeer);
@@ -7290,7 +7308,7 @@ var telegramUpdateProfileExecutor = async (params, context) => {
     const gramJsClient = context.bridge.getClient().getClient();
     const updates = {};
     if (firstName !== void 0 || lastName !== void 0) {
-      const nameResult = await gramJsClient.invoke(
+      const _nameResult = await gramJsClient.invoke(
         new Api42.account.UpdateProfile({
           firstName,
           lastName
@@ -7396,7 +7414,7 @@ var telegramSetUsernameExecutor = async (params, context) => {
       }
     }
     const gramJsClient = context.bridge.getClient().getClient();
-    const result = await gramJsClient.invoke(
+    const _result = await gramJsClient.invoke(
       new Api44.account.UpdateUsername({
         username: username || ""
       })
@@ -8074,14 +8092,18 @@ function decodeInlineMessageId(encoded) {
   if (buf.length === 20) {
     return new Api49.InputBotInlineMessageID({
       dcId: buf.readInt32LE(0),
+      // eslint-disable-next-line @typescript-eslint/no-explicit-any -- GramJS BigInteger compat
       id: buf.readBigInt64LE(4),
+      // eslint-disable-next-line @typescript-eslint/no-explicit-any -- GramJS BigInteger compat
       accessHash: buf.readBigInt64LE(12)
     });
   } else if (buf.length === 24) {
     return new Api49.InputBotInlineMessageID64({
       dcId: buf.readInt32LE(0),
+      // eslint-disable-next-line @typescript-eslint/no-explicit-any -- GramJS BigInteger compat
       ownerId: buf.readBigInt64LE(4),
       id: buf.readInt32LE(12),
+      // eslint-disable-next-line @typescript-eslint/no-explicit-any -- GramJS BigInteger compat
       accessHash: buf.readBigInt64LE(16)
     });
   }
@@ -8841,7 +8863,7 @@ var VerificationPoller = class {
       const me = this.bridge.getClient().getMe();
       if (!me) return { verified: false };
       const botUserId = Number(me.id);
-      const { telegramGetMyGiftsExecutor: telegramGetMyGiftsExecutor2 } = await import("./get-my-gifts-OMGKOEPM.js");
+      const { telegramGetMyGiftsExecutor: telegramGetMyGiftsExecutor2 } = await import("./get-my-gifts-CC6HAVWB.js");
       const toolContext = {
         bridge: this.bridge,
         db: this.db,
@@ -9066,9 +9088,10 @@ var DealBot = class {
               await this.editViaGramJS(inlineMessageId, text, buttons);
               edited = true;
             } catch (error) {
+              const errMsg = error?.errorMessage;
               log68.warn(
                 { err: error },
-                `[Bot] chosen_inline_result GramJS edit failed: ${error?.errorMessage || error}`
+                `[Bot] chosen_inline_result GramJS edit failed: ${errMsg || error}`
               );
             }
           }
@@ -9081,9 +9104,10 @@ var DealBot = class {
                 reply_markup: keyboard
               });
             } catch (error) {
+              const errDesc = error?.description;
               log68.error(
                 { err: error },
-                `[Bot] chosen_inline_result Grammy fallback failed: ${error?.description || error}`
+                `[Bot] chosen_inline_result Grammy fallback failed: ${errDesc || error}`
               );
             }
           }
@@ -9245,10 +9269,11 @@ var DealBot = class {
         await this.editViaGramJS(inlineMsgId, text, buttons);
         return;
       } catch (error) {
-        if (error?.errorMessage === "MESSAGE_NOT_MODIFIED") return;
+        const errMsg = error?.errorMessage;
+        if (errMsg === "MESSAGE_NOT_MODIFIED") return;
         log68.warn(
           { err: error },
-          `[Bot] GramJS edit failed, falling back to Grammy: ${error?.errorMessage || error}`
+          `[Bot] GramJS edit failed, falling back to Grammy: ${errMsg || error}`
         );
       }
     }
@@ -9260,7 +9285,8 @@ var DealBot = class {
         reply_markup: keyboard
       });
     } catch (error) {
-      if (error?.description?.includes("message is not modified")) return;
+      const desc = error?.description;
+      if (desc?.includes("message is not modified")) return;
       log68.error({ err: error }, "[Bot] Failed to edit inline message");
     }
   }
@@ -9270,10 +9296,11 @@ var DealBot = class {
         await this.editViaGramJS(inlineMessageId, text, buttons);
         return;
       } catch (error) {
-        if (error?.errorMessage === "MESSAGE_NOT_MODIFIED") return;
+        const errMsg = error?.errorMessage;
+        if (errMsg === "MESSAGE_NOT_MODIFIED") return;
         log68.warn(
           { err: error },
-          `[Bot] GramJS edit failed, falling back to Grammy: ${error?.errorMessage || error}`
+          `[Bot] GramJS edit failed, falling back to Grammy: ${errMsg || error}`
         );
       }
     }
@@ -10362,7 +10389,7 @@ var dealsModule = {
     closeDealsDb();
   }
 };
-var module_default = dealsModule;
+var module_default2 = dealsModule;
 function hasVerifiedDeal(giftId, userId) {
   const dealsDb = getDealsDb();
   if (!dealsDb) return false;
@@ -10417,6 +10444,7 @@ var telegramSendGiftExecutor = async (params, context) => {
     const user = await gramJsClient.getInputEntity(userId);
     const invoiceData = {
       peer: user,
+      // eslint-disable-next-line @typescript-eslint/no-explicit-any -- GramJS API response is untyped
       giftId: BigInt(giftId),
       hideName: anonymous,
       message: message ? new Api51.TextWithEntities({ text: message, entities: [] }) : void 0
@@ -10603,6 +10631,7 @@ var telegramSetCollectiblePriceExecutor = async (params, context) => {
       new Api53.payments.UpdateStarGiftPrice({
         stargift: new Api53.InputSavedStarGiftUser({ msgId }),
         resellAmount: new Api53.StarsAmount({
+          // eslint-disable-next-line @typescript-eslint/no-explicit-any -- GramJS API response is untyped
           amount: BigInt(isListing ? price : 0),
           nanos: 0
         })
@@ -10681,6 +10710,7 @@ var telegramGetResaleGiftsExecutor = async (params, context) => {
     }
     const result = await gramJsClient.invoke(
       new Api54.payments.GetResaleStarGifts({
+        // eslint-disable-next-line @typescript-eslint/no-explicit-any -- GramJS API response is untyped
         giftId: BigInt(giftId),
         offset: "",
         limit,
@@ -10704,6 +10734,7 @@ var telegramGetResaleGiftsExecutor = async (params, context) => {
           ownerName: gift.ownerName || void 0,
           priceStars: starsPrice ? starsPrice.amount?.toString() : void 0,
           priceTon: tonPrice ? tonPrice.amount?.toString() : void 0,
+          // eslint-disable-next-line @typescript-eslint/no-explicit-any -- GramJS API response is untyped
           attributes: (gift.attributes || []).map((attr) => ({
             type: attr.className?.replace("StarGiftAttribute", "").toLowerCase(),
             name: attr.name
@@ -10835,6 +10866,7 @@ var telegramSetGiftStatusExecutor = async (params, context) => {
       emojiStatus = new Api56.EmojiStatusEmpty();
     } else {
       emojiStatus = new Api56.InputEmojiStatusCollectible({
+        // eslint-disable-next-line @typescript-eslint/no-explicit-any -- GramJS API response is untyped
         collectibleId: BigInt(collectibleId)
       });
     }
@@ -10955,11 +10987,13 @@ var telegramGetUniqueGiftExecutor = async (params, context) => {
           lastName: ownerUser?.lastName || void 0
         },
         giftAddress: gift.giftAddress || void 0,
+        // eslint-disable-next-line @typescript-eslint/no-explicit-any -- GramJS API response is untyped
         attributes: (gift.attributes || []).map((attr) => ({
           type: attr.className?.replace("StarGiftAttribute", "").toLowerCase(),
           name: attr.name,
           rarityPercent: attr.rarityPermille ? attr.rarityPermille / 10 : void 0
         })),
+        // eslint-disable-next-line @typescript-eslint/no-explicit-any -- GramJS API response is untyped
         resellPrices: (gift.resellAmount || []).map((a) => ({
           amount: a.amount?.toString(),
           isTon: !!a.ton
@@ -11070,6 +11104,7 @@ var telegramSendGiftOfferExecutor = async (params, context) => {
       new Api60.payments.SendStarGiftOffer({
         peer,
         slug,
+        // eslint-disable-next-line @typescript-eslint/no-explicit-any -- GramJS API response is untyped
         price: new Api60.StarsAmount({ amount: BigInt(price), nanos: 0 }),
         duration,
         randomId: randomLong()
@@ -11378,7 +11413,7 @@ var telegramGetUserInfoExecutor = async (params, context) => {
       } else {
         entity = await gramJsClient.getEntity(userId);
       }
-    } catch (error) {
+    } catch {
       return {
         success: false,
         error: `User not found: ${username || userId}`
@@ -12092,7 +12127,7 @@ var telegramCreateScheduledTaskExecutor = async (params, context) => {
             };
           }
         }
-      } catch (e) {
+      } catch {
         return {
           success: false,
           error: "Invalid JSON payload"
@@ -12105,7 +12140,7 @@ var telegramCreateScheduledTaskExecutor = async (params, context) => {
         error: "Database not available"
       };
     }
-    const { getTaskStore } = await import("./tasks-BEZ4QRI2.js");
+    const { getTaskStore } = await import("./tasks-WQIKXDX5.js");
     const taskStore = getTaskStore(context.db);
     if (dependsOn && dependsOn.length > 0) {
       for (const parentId of dependsOn) {
@@ -12212,7 +12247,7 @@ var tonGetAddressTool = {
   description: "Return your TON wallet address in EQ format. No parameters needed.",
   parameters: Type81.Object({})
 };
-var tonGetAddressExecutor = async (params, context) => {
+var tonGetAddressExecutor = async (_params, _context) => {
   try {
     const address = getWalletAddress();
     if (!address) {
@@ -12247,7 +12282,7 @@ var tonGetBalanceTool = {
   parameters: Type82.Object({}),
   category: "data-bearing"
 };
-var tonGetBalanceExecutor = async (params, context) => {
+var tonGetBalanceExecutor = async (_params, _context) => {
   try {
     const address = getWalletAddress();
     if (!address) {
@@ -12291,7 +12326,7 @@ var tonPriceTool = {
   category: "data-bearing",
   parameters: Type83.Object({})
 };
-var tonPriceExecutor = async (params, context) => {
+var tonPriceExecutor = async (_params, _context) => {
   try {
     const priceData = await getTonPrice();
     if (!priceData) {
@@ -12406,13 +12441,13 @@ var tonGetTransactionsTool = {
     )
   })
 };
-var tonGetTransactionsExecutor = async (params, context) => {
+var tonGetTransactionsExecutor = async (params, _context) => {
   try {
     const { address, limit = 10 } = params;
     let addressObj;
     try {
       addressObj = Address5.parse(address);
-    } catch (e) {
+    } catch {
       return {
         success: false,
         error: `Invalid address: ${address}`
@@ -12457,7 +12492,7 @@ var tonMyTransactionsTool = {
     )
   })
 };
-var tonMyTransactionsExecutor = async (params, context) => {
+var tonMyTransactionsExecutor = async (params, _context) => {
   try {
     const { limit = 10 } = params;
     const walletData = loadWallet();
@@ -12517,7 +12552,7 @@ var PERIOD_CONFIG = {
   "90d": { seconds: 7776e3, points: 180 },
   "1y": { seconds: 31536e3, points: 200 }
 };
-var tonChartExecutor = async (params, context) => {
+var tonChartExecutor = async (params, _context) => {
   try {
     const token = params.token || "ton";
     const period = params.period || "7d";
@@ -12621,7 +12656,7 @@ var nftListTool = {
   }),
   category: "data-bearing"
 };
-var nftListExecutor = async (params, context) => {
+var nftListExecutor = async (params, _context) => {
   try {
     const address = params.address || getWalletAddress();
     if (!address) {
@@ -12735,7 +12770,7 @@ var jettonSendTool = {
     )
   })
 };
-var jettonSendExecutor = async (params, context) => {
+var jettonSendExecutor = async (params, _context) => {
   try {
     const { jetton_address, to, amount, comment } = params;
     const walletData = loadWallet();
@@ -12854,7 +12889,7 @@ var jettonBalancesTool = {
   parameters: Type90.Object({}),
   category: "data-bearing"
 };
-var jettonBalancesExecutor = async (params, context) => {
+var jettonBalancesExecutor = async (_params, _context) => {
   try {
     const walletData = loadWallet();
     if (!walletData) {
@@ -12964,7 +12999,7 @@ var jettonInfoTool = {
     })
   })
 };
-var jettonInfoExecutor = async (params, context) => {
+var jettonInfoExecutor = async (params, _context) => {
   try {
     const { jetton_address } = params;
     const response = await tonapiFetch(`/jettons/${jetton_address}`);
@@ -13061,7 +13096,7 @@ var jettonPriceTool = {
     })
   })
 };
-var jettonPriceExecutor = async (params, context) => {
+var jettonPriceExecutor = async (params, _context) => {
   try {
     const { jetton_address } = params;
     const response = await tonapiFetch(
@@ -13169,7 +13204,7 @@ var jettonHoldersTool = {
     )
   })
 };
-var jettonHoldersExecutor = async (params, context) => {
+var jettonHoldersExecutor = async (params, _context) => {
   try {
     const { jetton_address, limit = 10 } = params;
     const response = await tonapiFetch(
@@ -13212,7 +13247,8 @@ var jettonHoldersExecutor = async (params, context) => {
         isWallet: h.owner?.is_wallet || false
       };
     });
-    const totalTop = holders.reduce(
+    const _totalTop = holders.reduce(
+      // eslint-disable-next-line @typescript-eslint/no-explicit-any -- TON API response is untyped
       (sum, h) => sum + parseFloat(h.balance.replace(/,/g, "")),
       0
     );
@@ -13258,7 +13294,7 @@ var jettonHistoryTool = {
     })
   })
 };
-var jettonHistoryExecutor = async (params, context) => {
+var jettonHistoryExecutor = async (params, _context) => {
   try {
     const { jetton_address } = params;
     const ratesResponse = await tonapiFetch(
@@ -13524,7 +13560,7 @@ async function getDedustQuote(fromAsset, toAsset, amount, slippage, tonClient) {
     };
   }
 }
-var dexQuoteExecutor = async (params, context) => {
+var dexQuoteExecutor = async (params, _context) => {
   try {
     const { from_asset, to_asset, amount, slippage = 0.01 } = params;
     const tonClient = await getCachedTonClient();
@@ -13671,7 +13707,7 @@ function estimateMinPrice(length) {
   if (length >= 6 && length <= 10) return "~5-10 TON";
   return "~1 TON";
 }
-var dnsCheckExecutor = async (params, context) => {
+var dnsCheckExecutor = async (params, _context) => {
   try {
     let { domain } = params;
     domain = domain.toLowerCase().replace(/\.ton$/, "");
@@ -13790,7 +13826,7 @@ var dnsAuctionsTool = {
     )
   })
 };
-var dnsAuctionsExecutor = async (params, context) => {
+var dnsAuctionsExecutor = async (params, _context) => {
   try {
     const { limit = 20 } = params;
     const response = await tonapiFetch(`/dns/auctions?tld=ton`);
@@ -13824,6 +13860,7 @@ var dnsAuctionsExecutor = async (params, context) => {
       };
     });
     const summary = formattedAuctions.map(
+      // eslint-disable-next-line @typescript-eslint/no-explicit-any -- TON DNS API response is untyped
       (a, i) => `${i + 1}. ${a.domain} - ${a.currentBid} (${a.bids} bids) - Ends: ${a.endDate}`
     ).join("\n");
     return {
@@ -13860,7 +13897,7 @@ var dnsResolveTool = {
     })
   })
 };
-var dnsResolveExecutor = async (params, context) => {
+var dnsResolveExecutor = async (params, _context) => {
   try {
     let { domain } = params;
     domain = domain.toLowerCase().replace(/\.ton$/, "");
@@ -13931,9 +13968,10 @@ var dnsStartAuctionTool = {
     })
   })
 };
-var dnsStartAuctionExecutor = async (params, context) => {
+var dnsStartAuctionExecutor = async (params, _context) => {
   try {
-    let { domain, amount } = params;
+    let { domain } = params;
+    const { amount } = params;
     domain = domain.toLowerCase().replace(/\.ton$/, "");
     if (domain.length < 4 || domain.length > 126) {
       return {
@@ -14021,9 +14059,10 @@ var dnsBidTool = {
     })
   })
 };
-var dnsBidExecutor = async (params, context) => {
+var dnsBidExecutor = async (params, _context) => {
   try {
-    let { domain, amount } = params;
+    let { domain } = params;
+    const { amount } = params;
     domain = domain.toLowerCase().replace(/\.ton$/, "");
     const fullDomain = `${domain}.ton`;
     const dnsResponse = await tonapiFetch(`/dns/${fullDomain}`);
@@ -14148,9 +14187,10 @@ var dnsLinkTool = {
     )
   })
 };
-var dnsLinkExecutor = async (params, context) => {
+var dnsLinkExecutor = async (params, _context) => {
   try {
-    let { domain, wallet_address } = params;
+    let { domain } = params;
+    const { wallet_address } = params;
     domain = domain.toLowerCase().replace(/\.ton$/, "");
     const fullDomain = `${domain}.ton`;
     const walletData = loadWallet();
@@ -14273,7 +14313,7 @@ var dnsUnlinkTool = {
     })
   })
 };
-var dnsUnlinkExecutor = async (params, context) => {
+var dnsUnlinkExecutor = async (params, _context) => {
   try {
     let { domain } = params;
     domain = domain.toLowerCase().replace(/\.ton$/, "");
@@ -14391,7 +14431,7 @@ var dnsSetSiteTool = {
     })
   })
 };
-var dnsSetSiteExecutor = async (params, context) => {
+var dnsSetSiteExecutor = async (params, _context) => {
   try {
     let { domain, adnl_address } = params;
     domain = domain.toLowerCase().replace(/\.ton$/, "");
@@ -14537,7 +14577,7 @@ var stonfiSwapTool = {
     )
   })
 };
-var stonfiSwapExecutor = async (params, context) => {
+var stonfiSwapExecutor = async (params, _context) => {
   try {
     const { from_asset, to_asset, amount, slippage = 0.01 } = params;
     const walletData = loadWallet();
@@ -14711,7 +14751,7 @@ var stonfiQuoteTool = {
     )
   })
 };
-var stonfiQuoteExecutor = async (params, context) => {
+var stonfiQuoteExecutor = async (params, _context) => {
   try {
     const { from_asset, to_asset, amount, slippage = 0.01 } = params;
     const isTonInput = from_asset.toLowerCase() === "ton" || from_asset === NATIVE_TON_ADDRESS3;
@@ -14817,7 +14857,7 @@ var stonfiSearchTool = {
     )
   })
 };
-var stonfiSearchExecutor = async (params, context) => {
+var stonfiSearchExecutor = async (params, _context) => {
   try {
     const { query, limit = 10 } = params;
     const searchQuery = query.toLowerCase().trim();
@@ -14880,7 +14920,7 @@ var stonfiSearchExecutor = async (params, context) => {
     }
     results.sort((a, b) => b.score - a.score);
     const topResults = results.slice(0, Math.min(limit, 50));
-    const cleanResults = topResults.map(({ score, ...rest }) => rest);
+    const cleanResults = topResults.map(({ score: _score, ...rest }) => rest);
     let message = "";
     if (cleanResults.length === 0) {
       message = `No jettons found matching "${query}". Try a different search term.`;
@@ -14934,7 +14974,7 @@ var stonfiTrendingTool = {
     )
   })
 };
-var stonfiTrendingExecutor = async (params, context) => {
+var stonfiTrendingExecutor = async (params, _context) => {
   try {
     const { limit = 10 } = params;
     const response = await fetchWithTimeout(`${STONFI_API_BASE_URL}/assets`, {
@@ -15014,7 +15054,7 @@ var stonfiPoolsTool = {
     )
   })
 };
-var stonfiPoolsExecutor = async (params, context) => {
+var stonfiPoolsExecutor = async (params, _context) => {
   try {
     const { jetton_address, limit = 10 } = params;
     const response = await fetchWithTimeout(`${STONFI_API_BASE_URL}/pools`, {
@@ -15037,6 +15077,7 @@ var stonfiPoolsExecutor = async (params, context) => {
       });
     }
     pools = pools.filter((p) => !p.deprecated).sort(
+      // eslint-disable-next-line @typescript-eslint/no-explicit-any -- DEX API response is untyped
       (a, b) => parseFloat(b.volume_24h_usd || "0") - parseFloat(a.volume_24h_usd || "0")
     ).slice(0, limit);
     const assetMap = {};
@@ -15149,7 +15190,7 @@ var dedustQuoteTool = {
     )
   })
 };
-var dedustQuoteExecutor = async (params, context) => {
+var dedustQuoteExecutor = async (params, _context) => {
   try {
     const { from_asset, to_asset, amount, pool_type = "volatile", slippage = 0.01 } = params;
     const isTonInput = from_asset.toLowerCase() === "ton";
@@ -15159,7 +15200,7 @@ var dedustQuoteExecutor = async (params, context) => {
     if (!isTonInput) {
       try {
         fromAssetAddr = Address15.parse(from_asset).toString();
-      } catch (error) {
+      } catch {
         return {
           success: false,
           error: `Invalid from_asset address: ${from_asset}`
@@ -15169,7 +15210,7 @@ var dedustQuoteExecutor = async (params, context) => {
     if (!isTonOutput) {
       try {
         toAssetAddr = Address15.parse(to_asset).toString();
-      } catch (error) {
+      } catch {
         return {
           success: false,
           error: `Invalid to_asset address: ${to_asset}`
@@ -15290,7 +15331,7 @@ var dedustSwapTool = {
     )
   })
 };
-var dedustSwapExecutor = async (params, context) => {
+var dedustSwapExecutor = async (params, _context) => {
   try {
     const { from_asset, to_asset, amount, pool_type = "volatile", slippage = 0.01 } = params;
     const walletData = loadWallet();
@@ -15307,7 +15348,7 @@ var dedustSwapExecutor = async (params, context) => {
     if (!isTonInput) {
       try {
         fromAssetAddr = Address16.parse(from_asset).toString();
-      } catch (error) {
+      } catch {
         return {
           success: false,
           error: `Invalid from_asset address: ${from_asset}`
@@ -15317,7 +15358,7 @@ var dedustSwapExecutor = async (params, context) => {
     if (!isTonOutput) {
       try {
         toAssetAddr = Address16.parse(to_asset).toString();
-      } catch (error) {
+      } catch {
         return {
           success: false,
           error: `Invalid to_asset address: ${to_asset}`
@@ -15472,7 +15513,7 @@ var dedustPoolsTool = {
     )
   })
 };
-var dedustPoolsExecutor = async (params, context) => {
+var dedustPoolsExecutor = async (params, _context) => {
   try {
     const { jetton_address, pool_type, limit = 20 } = params;
     const response = await fetchWithTimeout(`${DEDUST_API_URL}/pools`);
@@ -16146,7 +16187,7 @@ function listDir(dirPath, recursive, filter) {
         results.push(...listDir(fullPath, recursive, filter));
       }
     }
-  } catch (error) {
+  } catch {
   }
   return results;
 }
@@ -16881,6 +16922,116 @@ function registerAllTools(registry) {
   }
 }
 
+// src/sdk/hooks/runner.ts
+var DEFAULT_TIMEOUT_MS = 5e3;
+async function withTimeout(fn, ms, label, _log) {
+  let timer;
+  try {
+    await Promise.race([
+      Promise.resolve(fn()),
+      new Promise((_, reject) => {
+        timer = setTimeout(() => reject(new Error(`Hook timeout: ${label}`)), ms);
+      })
+    ]);
+  } finally {
+    if (timer !== void 0) clearTimeout(timer);
+  }
+}
+var BLOCKABLE_HOOKS = /* @__PURE__ */ new Set([
+  "tool:before",
+  "message:receive",
+  "response:before"
+]);
+function createHookRunner(registry, opts) {
+  let hookDepth = 0;
+  const timeoutMs = opts.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+  const catchErrors = opts.catchErrors ?? true;
+  async function runModifyingHook(name, event) {
+    if (!registry.hasHooks(name) || hookDepth > 0) {
+      if (hookDepth > 0) {
+        opts.logger.debug(`Skipping ${name} hooks (reentrancy depth=${hookDepth})`);
+      }
+      return;
+    }
+    const hooks = registry.getHooks(name);
+    hookDepth++;
+    try {
+      for (const hook of hooks) {
+        const label = `${hook.pluginId}:${name}`;
+        const t0 = Date.now();
+        try {
+          await withTimeout(
+            () => hook.handler(event),
+            timeoutMs,
+            label,
+            opts.logger
+          );
+        } catch (err) {
+          if (catchErrors) {
+            opts.logger.error(
+              `Hook error [${label}]: ${getErrorMessage(err)} (after ${Date.now() - t0}ms)`
+            );
+          } else {
+            throw err;
+          }
+        }
+        if (BLOCKABLE_HOOKS.has(name) && event.block) {
+          break;
+        }
+      }
+    } finally {
+      hookDepth--;
+    }
+  }
+  async function runObservingHook(name, event) {
+    if (!registry.hasHooks(name) || hookDepth > 0) {
+      if (hookDepth > 0) {
+        opts.logger.debug(`Skipping ${name} hooks (reentrancy depth=${hookDepth})`);
+      }
+      return;
+    }
+    const hooks = registry.getHooks(name);
+    hookDepth++;
+    try {
+      const results = await Promise.allSettled(
+        hooks.map(async (hook) => {
+          const label = `${hook.pluginId}:${name}`;
+          const t0 = Date.now();
+          try {
+            await withTimeout(
+              () => hook.handler(event),
+              timeoutMs,
+              label,
+              opts.logger
+            );
+          } catch (err) {
+            if (catchErrors) {
+              opts.logger.error(
+                `Hook error [${label}]: ${getErrorMessage(err)} (after ${Date.now() - t0}ms)`
+              );
+            } else {
+              throw err;
+            }
+          }
+        })
+      );
+      if (!catchErrors) {
+        const firstRejected = results.find((r) => r.status === "rejected");
+        if (firstRejected) throw firstRejected.reason;
+      }
+    } finally {
+      hookDepth--;
+    }
+  }
+  return {
+    runModifyingHook,
+    runObservingHook,
+    get depth() {
+      return hookDepth;
+    }
+  };
+}
+
 // src/agent/tools/exec/run.ts
 import { Type as Type126 } from "@sinclair/typebox";
 
@@ -16901,6 +17052,7 @@ function runCommand(command, options) {
       detached: true,
       stdio: ["ignore", "pipe", "pipe"],
       encoding: "utf8"
+      // eslint-disable-next-line @typescript-eslint/no-explicit-any -- Node.js spawn options type doesn't include encoding
     });
     const finish = (exitCode, signal) => {
       if (resolved) return;
@@ -16917,9 +17069,9 @@ function runCommand(command, options) {
         timedOut
       });
     };
-    child.stdout.setEncoding("utf8");
-    child.stderr.setEncoding("utf8");
-    child.stdout.on("data", (chunk) => {
+    child.stdout?.setEncoding("utf8");
+    child.stderr?.setEncoding("utf8");
+    child.stdout?.on("data", (chunk) => {
       if (stdout.length < maxOutput) {
         stdout += chunk;
         if (stdout.length > maxOutput) {
@@ -16928,7 +17080,7 @@ function runCommand(command, options) {
         }
       }
     });
-    child.stderr.on("data", (chunk) => {
+    child.stderr?.on("data", (chunk) => {
       if (stderr.length < maxOutput) {
         stderr += chunk;
         if (stderr.length > maxOutput) {
@@ -16949,10 +17101,10 @@ function runCommand(command, options) {
     const timeoutTimer = setTimeout(() => {
       timedOut = true;
       log131.warn({ command, timeout }, "Command timed out, sending SIGTERM");
-      killProcessGroup(child.pid, "SIGTERM");
+      if (child.pid) killProcessGroup(child.pid, "SIGTERM");
       killTimer = setTimeout(() => {
         log131.warn({ command }, "Grace period expired, sending SIGKILL");
-        killProcessGroup(child.pid, "SIGKILL");
+        if (child.pid) killProcessGroup(child.pid, "SIGKILL");
       }, KILL_GRACE_MS);
     }, timeout);
   });
@@ -17314,11 +17466,11 @@ var execModule = {
     log132.info({ mode: moduleConfig.mode, scope: moduleConfig.scope }, "Exec capability active");
   }
 };
-var module_default2 = execModule;
+var module_default3 = execModule;
 
 // src/agent/tools/module-loader.ts
 var log133 = createLogger("ModuleLoader");
-var BUILTIN_MODULES = [module_default, module_default2];
+var BUILTIN_MODULES = [module_default2, module_default, module_default3];
 function loadModules(registry, config, db2) {
   const loaded = [];
   for (const mod of BUILTIN_MODULES) {
@@ -17623,7 +17775,7 @@ function parseCommand(config) {
   return { command: parts[0], args: parts.slice(1) };
 }
 function extractText(content) {
-  return content.filter((c) => c.type === "text" && c.text).map((c) => c.text).join("\n");
+  return content.filter((c) => c.type === "text" && c.text).map((c) => c.text ?? "").join("\n");
 }
 async function loadMcpServers(config) {
   const entries = Object.entries(config.servers).filter(([, cfg]) => cfg.enabled !== false);
@@ -17635,7 +17787,7 @@ async function loadMcpServers(config) {
         const { command, args } = parseCommand(serverConfig);
         const safeEnv = {};
         for (const key of ["PATH", "HOME", "NODE_PATH", "LANG", "TERM"]) {
-          if (process.env[key]) safeEnv[key] = process.env[key];
+          if (process.env[key]) safeEnv[key] = process.env[key] ?? "";
         }
         const BLOCKED_ENV_KEYS = /* @__PURE__ */ new Set([
           "LD_PRELOAD",
@@ -17729,10 +17881,23 @@ async function registerMcpTools(connections, registry) {
         const prefixedName = `mcp_${conn.serverName}_${mcpTool.name}`;
         const executor = async (params) => {
           try {
-            const result = await conn.client.callTool({
-              name: mcpTool.name,
-              arguments: params
-            });
+            let timeoutHandle;
+            const result = await Promise.race([
+              conn.client.callTool({
+                name: mcpTool.name,
+                arguments: params
+              }),
+              new Promise((_, reject) => {
+                timeoutHandle = setTimeout(
+                  () => reject(
+                    new Error(
+                      `MCP tool "${mcpTool.name}" timed out after ${TOOL_EXECUTION_TIMEOUT_MS / 1e3}s`
+                    )
+                  ),
+                  TOOL_EXECUTION_TIMEOUT_MS
+                );
+              })
+            ]).finally(() => clearTimeout(timeoutHandle));
             if (result.isError) {
               const errorText = extractText(
                 result.content
@@ -17795,6 +17960,101 @@ async function closeMcpServers(connections) {
   );
 }
 
+// src/agent/hooks/user-hook-evaluator.ts
+var ZERO_WIDTH_RE = /[\u200B-\u200D\uFEFF\u00AD]/g;
+var TOKEN_SPLIT_RE = /[\s,.!?;:'"()\[\]{}<>/\\|@#$%^&*+=~`]+/;
+function normalize(text) {
+  return text.toLowerCase().normalize("NFKC").replace(ZERO_WIDTH_RE, "");
+}
+function tokenize(text) {
+  return normalize(text).split(TOKEN_SPLIT_RE).filter(Boolean);
+}
+function matchesMultiWord(messageTokens, keywordTokens) {
+  if (keywordTokens.length > messageTokens.length) return false;
+  for (let i = 0; i <= messageTokens.length - keywordTokens.length; i++) {
+    let match = true;
+    for (let j = 0; j < keywordTokens.length; j++) {
+      if (messageTokens[i + j] !== keywordTokens[j]) {
+        match = false;
+        break;
+      }
+    }
+    if (match) return true;
+  }
+  return false;
+}
+var UserHookEvaluator = class {
+  constructor(db2) {
+    this.db = db2;
+    this.reload();
+  }
+  blocklistEnabled = false;
+  singleKeywords = /* @__PURE__ */ new Set();
+  multiKeywords = [];
+  blockMessage = "";
+  triggers = [];
+  /** Reload config from DB — called on startup and after WebUI changes */
+  reload() {
+    const blocklist = getBlocklistConfig(this.db);
+    this.blocklistEnabled = blocklist.enabled;
+    this.blockMessage = blocklist.message;
+    this.singleKeywords.clear();
+    this.multiKeywords = [];
+    for (const kw of blocklist.keywords) {
+      const tokens = tokenize(kw);
+      if (tokens.length === 0) continue;
+      if (tokens.length === 1) {
+        this.singleKeywords.add(tokens[0]);
+      } else {
+        this.multiKeywords.push(tokens);
+      }
+    }
+    const triggers = getTriggersConfig(this.db);
+    this.triggers = triggers.map((t) => ({
+      ...t,
+      keywordTokens: tokenize(t.keyword)
+    }));
+  }
+  /** Evaluate a message — returns { blocked, blockMessage, additionalContext } */
+  evaluate(text) {
+    const tokens = tokenize(text);
+    if (this.blocklistEnabled) {
+      for (const token of tokens) {
+        if (this.singleKeywords.has(token)) {
+          return {
+            blocked: true,
+            blockMessage: this.blockMessage || void 0,
+            additionalContext: ""
+          };
+        }
+      }
+      for (const kwTokens of this.multiKeywords) {
+        if (matchesMultiWord(tokens, kwTokens)) {
+          return {
+            blocked: true,
+            blockMessage: this.blockMessage || void 0,
+            additionalContext: ""
+          };
+        }
+      }
+    }
+    const contexts = [];
+    const seen = /* @__PURE__ */ new Set();
+    for (const trigger of this.triggers) {
+      if (!trigger.enabled || trigger.keywordTokens.length === 0) continue;
+      const matched = trigger.keywordTokens.length === 1 ? tokens.includes(trigger.keywordTokens[0]) : matchesMultiWord(tokens, trigger.keywordTokens);
+      if (matched && !seen.has(trigger.context)) {
+        seen.add(trigger.context);
+        contexts.push(trigger.context);
+      }
+    }
+    return {
+      blocked: false,
+      additionalContext: contexts.join("\n\n")
+    };
+  }
+};
+
 // src/agent/lifecycle.ts
 import { EventEmitter } from "events";
 var log136 = createLogger("Lifecycle");
@@ -17840,7 +18100,7 @@ var AgentLifecycle = class extends EventEmitter {
       return;
     }
     if (this.state === "starting") {
-      return this.startPromise;
+      return this.startPromise ?? Promise.resolve();
     }
     if (this.state === "stopping") {
       throw new Error("Cannot start while agent is stopping");
@@ -17879,7 +18139,7 @@ var AgentLifecycle = class extends EventEmitter {
       return;
     }
     if (this.state === "stopping") {
-      return this.stopPromise;
+      return this.stopPromise ?? Promise.resolve();
     }
     if (this.state === "starting" && this.startPromise) {
       try {
@@ -17967,17 +18227,19 @@ var TeletonApp = class {
   debouncer = null;
   toolCount = 0;
   toolRegistry;
-  dependencyResolver;
-  // TaskDependencyResolver, imported lazily
+  dependencyResolver = null;
   modules = [];
   memory;
   sdkDeps;
   webuiServer = null;
-  // WebUIServer, imported lazily
   pluginWatcher = null;
   mcpConnections = [];
   callbackHandlerRegistered = false;
   lifecycle = new AgentLifecycle();
+  hookRunner;
+  userHookEvaluator = null;
+  startTime = 0;
+  messagesProcessed = 0;
   configPath;
   constructor(configPath) {
     this.configPath = configPath ?? getDefaultConfigPath();
@@ -18017,6 +18279,8 @@ var TeletonApp = class {
       workspaceDir: join9(TELETON_ROOT)
     });
     const db2 = getDatabase().getDb();
+    this.userHookEvaluator = new UserHookEvaluator(db2);
+    this.agent.setUserHookEvaluator(this.userHookEvaluator);
     this.sdkDeps = { bridge: this.bridge };
     this.modules = loadModules(this.toolRegistry, this.config, db2);
     const modulePermissions = new ModulePermissions(db2);
@@ -18068,7 +18332,7 @@ ${blue}  \u250C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u250
     );
     if (this.config.webui.enabled) {
       try {
-        const { WebUIServer } = await import("./server-H3QA252W.js");
+        const { WebUIServer } = await import("./server-3FHI2SEB.js");
         const mcpServers = () => Object.entries(this.config.mcp.servers).map(([name, serverConfig]) => {
           const type = serverConfig.command ? "stdio" : serverConfig.url ? "streamable-http" : "sse";
           const target = serverConfig.command ?? serverConfig.url ?? "";
@@ -18110,7 +18374,8 @@ ${blue}  \u250C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u250
             pluginContext,
             loadedModuleNames: builtinNames,
             rewireHooks: () => this.wirePluginEventHooks()
-          }
+          },
+          userHookEvaluator: this.userHookEvaluator
         });
         await this.webuiServer.start();
       } catch (error) {
@@ -18129,7 +18394,12 @@ ${blue}  \u250C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u250
   async startAgent() {
     const moduleNames = this.modules.filter((m) => m.tools(this.config).length > 0).map((m) => m.name);
     const builtinNames = this.modules.map((m) => m.name);
-    const externalModules = await loadEnhancedPlugins(this.config, builtinNames, this.sdkDeps);
+    const { modules: externalModules, hookRegistry } = await loadEnhancedPlugins(
+      this.config,
+      builtinNames,
+      this.sdkDeps,
+      getDatabase().getDb()
+    );
     let pluginToolCount = 0;
     const pluginNames = [];
     for (const mod of externalModules) {
@@ -18167,7 +18437,7 @@ ${blue}  \u250C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u250
     }
     this.toolRegistry.loadConfigFromDB(getDatabase().getDb());
     if (this.config.tool_rag.enabled) {
-      const { ToolIndex } = await import("./tool-index-H3SHOJC3.js");
+      const { ToolIndex } = await import("./tool-index-PMAOXWUA.js");
       const toolIndex2 = new ToolIndex(
         getDatabase().getDb(),
         this.memory.embedder,
@@ -18195,18 +18465,21 @@ ${blue}  \u250C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u250
         `\u26A0\uFE0F Tool count (${this.toolCount}) exceeds ${providerMeta.displayName} limit (${providerMeta.toolLimit})`
       );
     }
-    const { migrateSessionsToDb } = await import("./migrate-POHWYEIW.js");
+    const { migrateSessionsToDb } = await import("./migrate-UBBEJ5BL.js");
     migrateSessionsToDb();
-    const { cleanupOldTranscripts } = await import("./transcript-IMNE6KU3.js");
+    const { cleanupOldTranscripts } = await import("./transcript-NGDPSNIH.js");
     cleanupOldTranscripts(30);
-    const { pruneOldSessions } = await import("./store-GAFULOOX.js");
+    const { pruneOldSessions } = await import("./store-M5IMUQCL.js");
     pruneOldSessions(30);
     if (this.memory.embedder.warmup) {
       await this.memory.embedder.warmup();
     }
     const indexResult = await this.memory.knowledge.indexAll();
     const db2 = getDatabase();
-    const ftsResult = db2.rebuildFtsIndexes();
+    let ftsResult = { knowledge: 0, messages: 0 };
+    if (indexResult.indexed > 0) {
+      ftsResult = db2.rebuildFtsIndexes();
+    }
     const toolIndex = this.toolRegistry.getToolIndex();
     if (toolIndex) {
       const t0 = Date.now();
@@ -18216,7 +18489,7 @@ ${blue}  \u250C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u250
     this.agent.initializeContextBuilder(this.memory.embedder, db2.isVectorSearchReady());
     if (this.config.agent.provider === "cocoon") {
       try {
-        const { registerCocoonModels } = await import("./client-LNZTDQSA.js");
+        const { registerCocoonModels } = await import("./client-MPHPIZB6.js");
         const port = this.config.cocoon?.port ?? 1e4;
         const models = await registerCocoonModels(port);
         if (models.length === 0) {
@@ -18238,7 +18511,7 @@ ${blue}  \u250C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u250
     }
     if (this.config.agent.provider === "local" && this.config.agent.base_url) {
       try {
-        const { registerLocalModels } = await import("./client-LNZTDQSA.js");
+        const { registerLocalModels } = await import("./client-MPHPIZB6.js");
         const models = await registerLocalModels(this.config.agent.base_url);
         if (models.length > 0) {
           log137.info(`Discovered ${models.length} local model(s): ${models.join(", ")}`);
@@ -18303,6 +18576,28 @@ ${blue}  \u250C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u250
       inlineRouter.setGramJSBot(activeDealBot.getGramJSBot());
       log137.info("\u{1F50C} Bot SDK: inline router installed");
     }
+    if (hookRegistry.hasAnyHooks()) {
+      const hookRunner = createHookRunner(hookRegistry, { logger: log137 });
+      this.agent.setHookRunner(hookRunner);
+      this.hookRunner = hookRunner;
+      const activeHooks = [
+        "tool:before",
+        "tool:after",
+        "tool:error",
+        "prompt:before",
+        "prompt:after",
+        "session:start",
+        "session:end",
+        "message:receive",
+        "response:before",
+        "response:after",
+        "response:error",
+        "agent:start",
+        "agent:stop"
+      ];
+      const active = activeHooks.filter((n) => hookRegistry.hasHooks(n));
+      log137.info(`\u{1FA9D} Hook runner created (${active.join(", ")})`);
+    }
     this.wirePluginEventHooks();
     if (this.config.dev.hot_reload) {
       this.pluginWatcher = new PluginWatcher({
@@ -18331,6 +18626,26 @@ ${blue}  \u250C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u250
 `
     );
     log137.info("Teleton Agent is running! Press Ctrl+C to stop.");
+    this.startTime = Date.now();
+    this.messagesProcessed = 0;
+    if (this.hookRunner) {
+      let version = "0.0.0";
+      try {
+        const { createRequire } = await import("module");
+        const req = createRequire(import.meta.url);
+        version = req("../package.json").version;
+      } catch {
+      }
+      const agentStartEvent = {
+        version,
+        provider,
+        model: this.config.agent.model,
+        pluginCount: pluginNames.length,
+        toolCount: this.toolCount,
+        timestamp: Date.now()
+      };
+      await this.hookRunner.runObservingHook("agent:start", agentStartEvent);
+    }
     this.debouncer = new MessageDebouncer(
       {
         debounceMs: this.config.telegram.debounce_ms
@@ -18422,6 +18737,7 @@ ${blue}  \u250C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u250
    * Handle a single message (extracted for debouncer callback)
    */
   async handleSingleMessage(message) {
+    this.messagesProcessed++;
     try {
       const ownUserId = this.bridge.getOwnUserId();
       if (ownUserId && message.senderId === Number(ownUserId) && message.text.startsWith("[TASK:")) {
@@ -18488,10 +18804,10 @@ Task: "${taskDescription}"`;
    * Handle scheduled task message
    */
   async handleScheduledTask(message) {
-    const { getTaskStore } = await import("./tasks-BEZ4QRI2.js");
-    const { executeScheduledTask } = await import("./task-executor-RUTFG6VG.js");
-    const { TaskDependencyResolver } = await import("./task-dependency-resolver-3FIKQ7Z6.js");
-    const { getDatabase: getDatabase2 } = await import("./memory-AS7WKGTW.js");
+    const { getTaskStore } = await import("./tasks-WQIKXDX5.js");
+    const { executeScheduledTask } = await import("./task-executor-6W5HRX5C.js");
+    const { TaskDependencyResolver } = await import("./task-dependency-resolver-RR2O5S7B.js");
+    const { getDatabase: getDatabase2 } = await import("./memory-UBHM7ILG.js");
     const db2 = getDatabase2().getDb();
     const taskStore = getTaskStore(db2);
     const match = message.text.match(/^\[TASK:([^\]]+)\]/);
@@ -18572,7 +18888,7 @@ Task: "${taskDescription}"`;
           this.dependencyResolver = new TaskDependencyResolver(taskStore, this.bridge);
         }
         await this.dependencyResolver.onTaskFail(taskId);
-      } catch (e) {
+      } catch {
       }
     }
   }
@@ -18604,14 +18920,18 @@ Task: "${taskDescription}"`;
     }
     if (!this.callbackHandlerRegistered) {
       this.bridge.getClient().addCallbackQueryHandler(async (update) => {
-        const queryId = update.queryId;
-        const data = update.data?.toString() || "";
+        if (!update || typeof update !== "object") {
+          return;
+        }
+        const callbackUpdate = update;
+        const queryId = callbackUpdate.queryId;
+        const data = typeof callbackUpdate.data === "string" ? callbackUpdate.data : callbackUpdate.data?.toString() || "";
         const parts = data.split(":");
         const action = parts[0];
         const params = parts.slice(1);
-        const chatId = update.peer?.channelId?.toString() ?? update.peer?.chatId?.toString() ?? update.peer?.userId?.toString() ?? "";
-        const messageId = update.msgId || 0;
-        const userId = Number(update.userId);
+        const chatId = callbackUpdate.peer?.channelId?.toString() ?? callbackUpdate.peer?.chatId?.toString() ?? callbackUpdate.peer?.userId?.toString() ?? "";
+        const messageId = typeof callbackUpdate.msgId === "number" ? callbackUpdate.msgId : Number(callbackUpdate.msgId || 0);
+        const userId = Number(callbackUpdate.userId);
         const answer = async (text, alert = false) => {
           try {
             await this.bridge.getClient().answerCallbackQuery(queryId, { message: text, alert });
@@ -18676,6 +18996,19 @@ Task: "${taskDescription}"`;
    * Called by lifecycle.stop() — do NOT call directly.
    */
   async stopAgent() {
+    if (this.hookRunner) {
+      try {
+        const agentStopEvent = {
+          reason: "manual",
+          uptimeMs: this.startTime > 0 ? Date.now() - this.startTime : 0,
+          messagesProcessed: this.messagesProcessed,
+          timestamp: Date.now()
+        };
+        await this.hookRunner.runObservingHook("agent:stop", agentStopEvent);
+      } catch (e) {
+        log137.error({ err: e }, "\u26A0\uFE0F agent:stop hook failed");
+      }
+    }
     if (this.pluginWatcher) {
       try {
         await this.pluginWatcher.stop();