teleton 0.8.0 → 0.8.1

package/dist/{chunk-RQBAMUCV.js → chunk-CGOXE4WP.js}

@@ -7,7 +7,7 @@ import {
   getWalletBalance,
   invalidateTonClientCache,
   loadWallet
-} from "./chunk-JHYZYFZJ.js";
+} from "./chunk-S6PHGKOC.js";
 import {
   getOrCreateSession,
   getSession,
@@ -15,7 +15,7 @@ import {
   resetSessionWithPolicy,
   shouldResetSession,
   updateSession
-} from "./chunk-TVRZJIZX.js";
+} from "./chunk-KVXV7EF7.js";
 import {
   Mi,
   Mn,
@@ -35,7 +35,7 @@ import {
   getProviderModel,
   getUtilityModel,
   loadContextFromTranscript
-} from "./chunk-QVBSUYVX.js";
+} from "./chunk-AYWEJCDB.js";
 import {
   getProviderMetadata,
   getSupportedProviders
@@ -44,14 +44,14 @@ import {
   appendToTranscript,
   archiveTranscript,
   transcriptExists
-} from "./chunk-P36I6OIV.js";
+} from "./chunk-QV2GLOTK.js";
 import {
   ContextBuilder,
   createDbWrapper,
   getDatabase,
   migrateFromMainDb,
   openModuleDb
-} from "./chunk-SD4NLLYG.js";
+} from "./chunk-7U7BOHCL.js";
 import {
   GECKOTERMINAL_API_URL,
   tonapiFetch
@@ -80,11 +80,13 @@ import {
   OVERSIZED_MESSAGE_RATIO,
   PAYMENT_TOLERANCE_RATIO,
   RATE_LIMIT_MAX_RETRIES,
+  RESULT_TRUNCATION_KEEP_CHARS,
+  RESULT_TRUNCATION_THRESHOLD,
   SERVER_ERROR_MAX_RETRIES,
   SESSION_SLUG_MAX_TOKENS,
   SESSION_SLUG_RECENT_MESSAGES,
   TOKEN_ESTIMATE_SAFETY_MARGIN
-} from "./chunk-IJBWWQE4.js";
+} from "./chunk-UP55PXFH.js";
 import {
   fetchWithTimeout
 } from "./chunk-XQUHC3JZ.js";
@@ -1130,7 +1132,6 @@ This session was compacted and migrated to a new session ID. The summary above p
 }
 
 // src/memory/compaction.ts
-import { encodingForModel } from "js-tiktoken";
 var DEFAULT_COMPACTION_CONFIG = {
   enabled: true,
   maxMessages: COMPACTION_MAX_MESSAGES,
@@ -1375,56 +1376,119 @@ var CompactionManager = class {
 // src/memory/observation-masking.ts
 var DEFAULT_MASKING_CONFIG = {
   keepRecentCount: MASKING_KEEP_RECENT_COUNT,
-  keepErrorResults: true
+  keepErrorResults: true,
+  truncationThreshold: RESULT_TRUNCATION_THRESHOLD,
+  truncationKeepChars: RESULT_TRUNCATION_KEEP_CHARS
 };
 var isCocoonToolResult = (msg) => msg.role === "user" && Array.isArray(msg.content) && msg.content.some((c2) => c2.type === "text" && c2.text.includes("<tool_response>"));
-function maskOldToolResults(messages, config = DEFAULT_MASKING_CONFIG, toolRegistry) {
+function isExempt(toolMsg, config, toolRegistry) {
+  if (config.keepErrorResults && toolMsg.isError) return true;
+  if (toolRegistry && toolRegistry.getToolCategory(toolMsg.toolName) === "data-bearing")
+    return true;
+  return false;
+}
+function truncateToolResult(text, keepChars) {
+  try {
+    const parsed = JSON.parse(text);
+    if (parsed.data?.summary) {
+      return JSON.stringify({
+        success: parsed.success,
+        data: { summary: parsed.data.summary, _truncated: true }
+      });
+    }
+    if (parsed.data?.message) {
+      return JSON.stringify({
+        success: parsed.success,
+        data: { summary: parsed.data.message, _truncated: true }
+      });
+    }
+  } catch {
+  }
+  return text.slice(0, keepChars) + `
+...[truncated, original: ${text.length} chars]`;
+}
+function maskOldToolResults(messages, options) {
+  const config = options?.config ?? DEFAULT_MASKING_CONFIG;
+  const toolRegistry = options?.toolRegistry;
+  const iterStart = options?.currentIterationStartIndex;
   const toolResults = messages.map((msg, index) => ({ msg, index })).filter(({ msg }) => msg.role === "toolResult" || isCocoonToolResult(msg));
-  if (toolResults.length <= config.keepRecentCount) {
+  const needsMasking = toolResults.length > config.keepRecentCount;
+  const needsTruncation = iterStart !== void 0 && config.truncationThreshold > 0;
+  if (!needsMasking && !needsTruncation) {
     return messages;
   }
-  const toMask = toolResults.slice(0, -config.keepRecentCount);
   const result = [...messages];
-  for (const { msg, index } of toMask) {
-    if (isCocoonToolResult(msg)) {
+  if (needsMasking) {
+    const toMask = toolResults.slice(0, -config.keepRecentCount);
+    for (const { msg, index } of toMask) {
+      if (isCocoonToolResult(msg)) {
+        result[index] = {
+          ...msg,
+          content: [{ type: "text", text: "[Tool response masked]" }]
+        };
+        continue;
+      }
+      const toolMsg = msg;
+      if (isExempt(toolMsg, config, toolRegistry)) continue;
+      let summaryText = "";
+      try {
+        const textBlock = toolMsg.content.find((c2) => c2.type === "text");
+        if (textBlock) {
+          const parsed = JSON.parse(textBlock.text);
+          if (parsed.data?.summary) {
+            summaryText = ` - ${parsed.data.summary}`;
+          } else if (parsed.data?.message) {
+            summaryText = ` - ${parsed.data.message}`;
+          }
+        }
+      } catch {
+      }
       result[index] = {
-        ...msg,
-        content: [{ type: "text", text: "[Tool response masked]" }]
+        ...toolMsg,
+        content: [
+          {
+            type: "text",
+            text: `[Tool: ${toolMsg.toolName} - ${toolMsg.isError ? "ERROR" : "OK"}${summaryText}]`
+          }
+        ]
       };
-      continue;
-    }
-    const toolMsg = msg;
-    if (config.keepErrorResults && toolMsg.isError) {
-      continue;
     }
-    if (toolRegistry) {
-      const category = toolRegistry.getToolCategory(toolMsg.toolName);
-      if (category === "data-bearing") {
+  }
+  if (needsTruncation) {
+    const recentResults = needsMasking ? toolResults.slice(-config.keepRecentCount) : toolResults;
+    for (const { msg, index } of recentResults) {
+      if (index >= iterStart) continue;
+      if (isCocoonToolResult(msg)) {
+        const userMsg = msg;
+        if (!Array.isArray(userMsg.content)) continue;
+        const textBlock2 = userMsg.content.find((c2) => c2.type === "text");
+        if (textBlock2 && textBlock2.text.length > config.truncationThreshold) {
+          result[index] = {
+            ...userMsg,
+            content: [
+              {
+                type: "text",
+                text: truncateToolResult(textBlock2.text, config.truncationKeepChars)
+              }
+            ]
+          };
+        }
         continue;
       }
-    }
-    let summaryText = "";
-    try {
+      const toolMsg = msg;
+      if (isExempt(toolMsg, config, toolRegistry)) continue;
       const textBlock = toolMsg.content.find((c2) => c2.type === "text");
-      if (textBlock) {
-        const parsed = JSON.parse(textBlock.text);
-        if (parsed.data?.summary) {
-          summaryText = ` - ${parsed.data.summary}`;
-        } else if (parsed.data?.message) {
-          summaryText = ` - ${parsed.data.message}`;
-        }
-      }
-    } catch {
+      if (!textBlock || textBlock.text.length <= config.truncationThreshold) continue;
+      result[index] = {
+        ...toolMsg,
+        content: [
+          {
+            type: "text",
+            text: truncateToolResult(textBlock.text, config.truncationKeepChars)
+          }
+        ]
+      };
     }
-    result[index] = {
-      ...toolMsg,
-      content: [
-        {
-          type: "text",
-          text: `[Tool: ${toolMsg.toolName} - ${toolMsg.isError ? "ERROR" : "OK"}${summaryText}]`
-        }
-      ]
-    };
   }
   return result;
 }
@@ -1484,6 +1548,8 @@ var AgentRuntime = class {
   contextBuilder = null;
   toolRegistry = null;
   embedder = null;
+  hookRunner;
+  userHookEvaluator;
   constructor(config, soul, toolRegistry) {
     this.config = config;
     this.soul = soul ?? "";
@@ -1504,6 +1570,12 @@ var AgentRuntime = class {
       this.compactionManager = new CompactionManager(DEFAULT_COMPACTION_CONFIG);
     }
   }
+  setHookRunner(runner) {
+    this.hookRunner = runner;
+  }
+  setUserHookEvaluator(evaluator) {
+    this.userHookEvaluator = evaluator;
+  }
   initializeContextBuilder(embedder, vectorEnabled) {
     this.embedder = embedder;
     const db = getDatabase().getDb();
@@ -1528,12 +1600,59 @@ var AgentRuntime = class {
       messageId,
       replyContext
     } = opts;
+    const effectiveIsGroup = isGroup ?? false;
+    const processStartTime = Date.now();
     try {
+      let userHookContext = "";
+      if (this.userHookEvaluator) {
+        const hookResult = this.userHookEvaluator.evaluate(userMessage);
+        if (hookResult.blocked) {
+          log6.info("Message blocked by keyword filter");
+          return { content: hookResult.blockMessage ?? "", toolCalls: [] };
+        }
+        if (hookResult.additionalContext) {
+          userHookContext = sanitizeForContext(hookResult.additionalContext);
+        }
+      }
+      let effectiveMessage = userMessage;
+      let hookMessageContext = "";
+      if (this.hookRunner) {
+        const msgEvent = {
+          chatId,
+          senderId: toolContext?.senderId ? String(toolContext.senderId) : chatId,
+          senderName: userName ?? "",
+          isGroup: effectiveIsGroup,
+          isReply: !!replyContext,
+          replyToMessageId: replyContext ? messageId : void 0,
+          messageId: messageId ?? 0,
+          timestamp: timestamp ?? Date.now(),
+          text: userMessage,
+          block: false,
+          blockReason: "",
+          additionalContext: ""
+        };
+        await this.hookRunner.runModifyingHook("message:receive", msgEvent);
+        if (msgEvent.block) {
+          log6.info(`\u{1F6AB} Message blocked by hook: ${msgEvent.blockReason || "no reason"}`);
+          return { content: "", toolCalls: [] };
+        }
+        effectiveMessage = sanitizeForContext(msgEvent.text);
+        if (msgEvent.additionalContext) {
+          hookMessageContext = sanitizeForContext(msgEvent.additionalContext);
+        }
+      }
       let session = getOrCreateSession(chatId);
       const now = timestamp ?? Date.now();
       const resetPolicy = this.config.agent.session_reset_policy;
       if (shouldResetSession(session, resetPolicy)) {
         log6.info(`\u{1F504} Auto-resetting session based on policy`);
+        if (this.hookRunner) {
+          await this.hookRunner.runObservingHook("session:end", {
+            sessionId: session.sessionId,
+            chatId,
+            messageCount: session.messageCount
+          });
+        }
         if (transcriptExists(session.sessionId)) {
           try {
             log6.info(`\u{1F4BE} Saving memory before daily reset...`);
@@ -1555,11 +1674,19 @@ var AgentRuntime = class {
         session = resetSessionWithPolicy(chatId, resetPolicy);
       }
       let context = loadContextFromTranscript(session.sessionId);
-      if (context.messages.length > 0) {
+      const isNewSession = context.messages.length === 0;
+      if (!isNewSession) {
         log6.info(`\u{1F4D6} Loading existing session: ${session.sessionId}`);
       } else {
         log6.info(`\u{1F195} Starting new session: ${session.sessionId}`);
       }
+      if (this.hookRunner) {
+        await this.hookRunner.runObservingHook("session:start", {
+          sessionId: session.sessionId,
+          chatId,
+          isResume: !isNewSession
+        });
+      }
       const previousTimestamp = session.updatedAt;
       let formattedMessage = formatMessageEnvelope({
         channel: "Telegram",
@@ -1569,8 +1696,8 @@ var AgentRuntime = class {
         senderRank,
         timestamp: now,
         previousTimestamp,
-        body: userMessage,
-        isGroup: isGroup ?? false,
+        body: effectiveMessage,
+        isGroup: effectiveIsGroup,
         hasMedia,
         mediaType,
         messageId,
@@ -1589,10 +1716,10 @@ ${formattedMessage}`;
       log6.info(`\u{1F4E8} ${msgType}: "${preview}${formattedMessage.length > 50 ? "..." : ""}"`);
       let relevantContext = "";
       let queryEmbedding;
-      const isNonTrivial = !isTrivialMessage(userMessage);
+      const isNonTrivial = !isTrivialMessage(effectiveMessage);
       if (this.embedder && isNonTrivial) {
         try {
-          queryEmbedding = await this.embedder.embedQuery(userMessage);
+          queryEmbedding = await this.embedder.embedQuery(effectiveMessage);
         } catch (error) {
           log6.warn({ err: error }, "Embedding computation failed");
         }
@@ -1600,7 +1727,7 @@ ${formattedMessage}`;
       if (this.contextBuilder && isNonTrivial) {
         try {
           const dbContext = await this.contextBuilder.buildContext({
-            query: userMessage,
+            query: effectiveMessage,
             chatId,
             includeAgentMemory: true,
             includeFeedHistory: true,
@@ -1645,8 +1772,23 @@ ${statsContext}
 ${relevantContext}` : `You are in a Telegram conversation with chat ID: ${chatId}. Maintain conversation continuity.
 
 ${statsContext}`;
+      let hookAdditionalContext = "";
+      if (this.hookRunner) {
+        const promptEvent = {
+          chatId,
+          sessionId: session.sessionId,
+          isGroup: effectiveIsGroup,
+          additionalContext: ""
+        };
+        await this.hookRunner.runModifyingHook("prompt:before", promptEvent);
+        hookAdditionalContext = sanitizeForContext(promptEvent.additionalContext);
+      }
       const compactionConfig = this.compactionManager.getConfig();
       const needsMemoryFlush = compactionConfig.enabled && compactionConfig.memoryFlushEnabled && context.messages.length > Math.floor((compactionConfig.maxMessages ?? 200) * 0.75);
+      const allHookContext = [userHookContext, hookAdditionalContext, hookMessageContext].filter(Boolean).join("\n\n");
+      const finalContext = additionalContext + (allHookContext ? `
+
+${allHookContext}` : "");
       const systemPrompt = buildSystemPrompt({
         soul: this.soul,
         userName,
@@ -1654,11 +1796,23 @@ ${statsContext}`;
         senderId: toolContext?.senderId,
         ownerName: this.config.telegram.owner_name,
         ownerUsername: this.config.telegram.owner_username,
-        context: additionalContext,
-        includeMemory: !isGroup,
-        includeStrategy: !isGroup,
+        context: finalContext,
+        includeMemory: !effectiveIsGroup,
+        includeStrategy: !effectiveIsGroup,
         memoryFlushWarning: needsMemoryFlush
       });
+      if (this.hookRunner) {
+        const promptAfterEvent = {
+          chatId,
+          sessionId: session.sessionId,
+          isGroup: effectiveIsGroup,
+          promptLength: systemPrompt.length,
+          sectionCount: (systemPrompt.match(/^#{1,3} /gm) || []).length,
+          ragContextLength: relevantContext.length,
+          hookContextLength: allHookContext.length
+        };
+        await this.hookRunner.runObservingHook("prompt:after", promptAfterEvent);
+      }
       const userMsg = {
         role: "user",
         content: formattedMessage,
@@ -1686,12 +1840,12 @@ ${statsContext}`;
       let tools;
       {
         const toolIndex = this.toolRegistry?.getToolIndex();
-        const useRAG = toolIndex?.isIndexed && this.config.tool_rag?.enabled !== false && !isTrivialMessage(userMessage) && !(providerMeta.toolLimit === null && this.config.tool_rag?.skip_unlimited_providers !== false);
+        const useRAG = toolIndex?.isIndexed && this.config.tool_rag?.enabled !== false && !isTrivialMessage(effectiveMessage) && !(providerMeta.toolLimit === null && this.config.tool_rag?.skip_unlimited_providers !== false);
         if (useRAG && this.toolRegistry && queryEmbedding) {
           tools = await this.toolRegistry.getForContextWithRAG(
-            userMessage,
+            effectiveMessage,
             queryEmbedding,
-            isGroup ?? false,
+            effectiveIsGroup,
             providerMeta.toolLimit,
             chatId,
             isAdmin
@@ -1699,7 +1853,7 @@ ${statsContext}`;
           log6.info(`\u{1F50D} Tool RAG: ${tools.length}/${this.toolRegistry.count} tools selected`);
         } else {
           tools = this.toolRegistry?.getForContext(
-            isGroup ?? false,
+            effectiveIsGroup,
             providerMeta.toolLimit,
             chatId,
             isAdmin
@@ -1718,11 +1872,11 @@ ${statsContext}`;
       while (iteration < maxIterations) {
         iteration++;
         log6.debug(`\u{1F504} Agentic iteration ${iteration}/${maxIterations}`);
-        const maskedMessages = maskOldToolResults(
-          context.messages,
-          void 0,
-          this.toolRegistry ?? void 0
-        );
+        const iterationStartIndex = context.messages.length;
+        const maskedMessages = maskOldToolResults(context.messages, {
+          toolRegistry: this.toolRegistry ?? void 0,
+          currentIterationStartIndex: iterationStartIndex
+        });
         const maskedContext = { ...context, messages: maskedMessages };
         const response2 = await chatWithContext(this.config.agent, {
           systemPrompt,
@@ -1734,6 +1888,21 @@ ${statsContext}`;
         const assistantMsg = response2.message;
         if (assistantMsg.stopReason === "error") {
           const errorMsg = assistantMsg.errorMessage || "";
+          if (this.hookRunner) {
+            const errorCode = errorMsg.includes("429") || errorMsg.toLowerCase().includes("rate") ? "RATE_LIMIT" : isContextOverflowError(errorMsg) ? "CONTEXT_OVERFLOW" : errorMsg.includes("500") || errorMsg.includes("502") || errorMsg.includes("503") ? "PROVIDER_ERROR" : "UNKNOWN";
+            const responseErrorEvent = {
+              chatId,
+              sessionId: session.sessionId,
+              isGroup: effectiveIsGroup,
+              error: errorMsg,
+              errorCode,
+              provider,
+              model: this.config.agent.model,
+              retryCount: rateLimitRetries + serverErrorRetries,
+              durationMs: Date.now() - processStartTime
+            };
+            await this.hookRunner.runObservingHook("response:error", responseErrorEvent);
+          }
           if (isContextOverflowError(errorMsg)) {
             overflowResets++;
             if (overflowResets > 1) {
@@ -1822,33 +1991,103 @@ ${statsContext}`;
           const fullContext = {
             ...toolContext,
             chatId,
-            isGroup: isGroup ?? false
+            isGroup: effectiveIsGroup
           };
-          const result = await this.toolRegistry.execute(block, fullContext);
+          let toolParams = block.arguments ?? {};
+          let blocked = false;
+          let blockReason = "";
+          if (this.hookRunner) {
+            const beforeEvent = {
+              toolName: block.name,
+              params: structuredClone(toolParams),
+              chatId,
+              isGroup: effectiveIsGroup,
+              block: false,
+              blockReason: ""
+            };
+            await this.hookRunner.runModifyingHook("tool:before", beforeEvent);
+            if (beforeEvent.block) {
+              blocked = true;
+              blockReason = beforeEvent.blockReason || "Blocked by plugin hook";
+            } else {
+              toolParams = structuredClone(beforeEvent.params);
+            }
+          }
+          let result;
+          if (blocked) {
+            result = { success: false, error: blockReason };
+            if (this.hookRunner) {
+              const afterEvent = {
+                toolName: block.name,
+                params: structuredClone(toolParams),
+                result: { success: false, error: blockReason },
+                durationMs: 0,
+                chatId,
+                isGroup: effectiveIsGroup,
+                blocked: true,
+                blockReason
+              };
+              await this.hookRunner.runObservingHook("tool:after", afterEvent);
+            }
+          } else {
+            const startTime = Date.now();
+            try {
+              result = await this.toolRegistry.execute(
+                { ...block, arguments: toolParams },
+                fullContext
+              );
+            } catch (execErr) {
+              const durationMs2 = Date.now() - startTime;
+              const errMsg = execErr instanceof Error ? execErr.message : String(execErr);
+              const errStack = execErr instanceof Error ? execErr.stack : void 0;
+              result = { success: false, error: errMsg };
+              if (this.hookRunner) {
+                const errorEvent = {
+                  toolName: block.name,
+                  params: structuredClone(toolParams),
+                  error: errMsg,
+                  // Note: stack traces are exposed to plugins for debugging — accepted tradeoff
+                  stack: errStack,
+                  chatId,
+                  isGroup: effectiveIsGroup,
+                  durationMs: durationMs2
+                };
+                await this.hookRunner.runObservingHook("tool:error", errorEvent);
+              }
+            }
+            const durationMs = Date.now() - startTime;
+            if (this.hookRunner) {
+              const afterEvent = {
+                toolName: block.name,
+                params: structuredClone(toolParams),
+                result: { success: result.success, data: result.data, error: result.error },
+                durationMs,
+                chatId,
+                isGroup: effectiveIsGroup
+              };
+              await this.hookRunner.runObservingHook("tool:after", afterEvent);
+            }
+          }
           log6.debug(`${block.name}: ${result.success ? "\u2713" : "\u2717"} ${result.error || ""}`);
           iterationToolNames.push(`${block.name} ${result.success ? "\u2713" : "\u2717"}`);
           totalToolCalls.push({
             name: block.name,
             input: block.arguments
           });
-          let resultText = JSON.stringify(result, null, 2);
+          let resultText = JSON.stringify(result);
           if (resultText.length > MAX_TOOL_RESULT_SIZE) {
             log6.warn(`\u26A0\uFE0F Tool result too large (${resultText.length} chars), truncating...`);
             const data = result.data;
             if (data?.summary || data?.message) {
-              resultText = JSON.stringify(
-                {
-                  success: result.success,
-                  data: {
-                    summary: data.summary || data.message,
-                    _truncated: true,
-                    _originalSize: resultText.length,
-                    _message: "Full data truncated. Use limit parameter for smaller results."
-                  }
-                },
-                null,
-                2
-              );
+              resultText = JSON.stringify({
+                success: result.success,
+                data: {
+                  summary: data.summary || data.message,
+                  _truncated: true,
+                  _originalSize: resultText.length,
+                  _message: "Full data truncated. Use limit parameter for smaller results."
+                }
+              });
             } else {
               resultText = resultText.slice(0, MAX_TOOL_RESULT_SIZE) + "\n...[TRUNCATED]";
             }
@@ -1947,6 +2186,42 @@ ${statsContext}`;
         log6.warn("\u26A0\uFE0F Empty response with zero tokens - possible API issue");
         content = "I couldn't process your request. Please try again.";
       }
+      let responseMetadata = {};
+      if (this.hookRunner) {
+        const responseBeforeEvent = {
+          chatId,
+          sessionId: session.sessionId,
+          isGroup: effectiveIsGroup,
+          originalText: content,
+          text: content,
+          block: false,
+          blockReason: "",
+          metadata: {}
+        };
+        await this.hookRunner.runModifyingHook("response:before", responseBeforeEvent);
+        if (responseBeforeEvent.block) {
+          log6.info(
+            `\u{1F6AB} Response blocked by hook: ${responseBeforeEvent.blockReason || "no reason"}`
+          );
+          content = "";
+        } else {
+          content = responseBeforeEvent.text;
+        }
+        responseMetadata = responseBeforeEvent.metadata;
+      }
+      if (this.hookRunner) {
+        const responseAfterEvent = {
+          chatId,
+          sessionId: session.sessionId,
+          isGroup: effectiveIsGroup,
+          text: content,
+          durationMs: Date.now() - processStartTime,
+          toolsUsed: totalToolCalls.map((tc) => tc.name),
+          tokenUsage: accumulatedUsage.input > 0 || accumulatedUsage.output > 0 ? { input: accumulatedUsage.input, output: accumulatedUsage.output } : void 0,
+          metadata: responseMetadata
+        };
+        await this.hookRunner.runObservingHook("response:after", responseAfterEvent);
+      }
       return {
         content,
         toolCalls: totalToolCalls
@@ -2124,6 +2399,7 @@ function parseHtml(html) {
                       new Api2.MessageEntityCustomEmoji({
                         offset: open.offset,
                         length,
+                        // eslint-disable-next-line @typescript-eslint/no-explicit-any -- GramJS BigInteger compat
                         documentId: BigInt(open.emojiId)
                       })
                     );
@@ -2262,11 +2538,14 @@ var InlineRouter = class {
   }
   async handleInlineQuery(ctx, pluginName, query, plugin) {
     try {
+      const inlineQuery = ctx.inlineQuery;
+      const from = ctx.from;
+      if (!inlineQuery || !from || !plugin.onInlineQuery) return;
       const iqCtx = {
         query,
-        queryId: ctx.inlineQuery.id,
-        userId: ctx.from.id,
-        offset: ctx.inlineQuery.offset
+        queryId: inlineQuery.id,
+        userId: from.id,
+        offset: inlineQuery.offset
       };
       const results = await withTimeout(
         plugin.onInlineQuery(iqCtx),
@@ -2291,7 +2570,7 @@ var InlineRouter = class {
     try {
       let matchedHandler;
       let matchGroups = [];
-      for (const entry of plugin.onCallback) {
+      for (const entry of plugin.onCallback ?? []) {
         const groups = globMatch(entry.regex, strippedData);
         if (groups !== null) {
           matchedHandler = entry.handler;
@@ -2304,14 +2583,17 @@ var InlineRouter = class {
         return;
       }
       const gramjsBotRef = this.gramjsBot;
+      const callbackQuery = ctx.callbackQuery;
+      const from = ctx.from;
+      if (!from || !callbackQuery) return;
       const cbCtx = {
         data: strippedData,
         match: matchGroups,
-        userId: ctx.from.id,
-        username: ctx.from.username,
-        inlineMessageId: ctx.callbackQuery.inline_message_id,
+        userId: from.id,
+        username: from.username,
+        inlineMessageId: callbackQuery.inline_message_id,
         chatId: ctx.chat?.id?.toString(),
-        messageId: ctx.callbackQuery.message?.message_id,
+        messageId: callbackQuery.message?.message_id,
         async answer(text, alert) {
           if (!answered) {
             answered = true;
@@ -2320,7 +2602,7 @@ var InlineRouter = class {
         },
         async editMessage(text, opts) {
           const styledButtons = opts?.keyboard ? prefixButtons(opts.keyboard, pluginName) : void 0;
-          const inlineMsgId = ctx.callbackQuery.inline_message_id;
+          const inlineMsgId = ctx.callbackQuery?.inline_message_id;
           if (inlineMsgId && gramjsBotRef?.isConnected() && styledButtons) {
             try {
               const strippedHtml = stripCustomEmoji(text);
@@ -2334,10 +2616,9 @@ var InlineRouter = class {
               });
               return;
             } catch (error) {
-              if (error?.errorMessage === "MESSAGE_NOT_MODIFIED") return;
-              log7.debug(
-                `GramJS edit failed, falling back to Grammy: ${error?.errorMessage || error}`
-              );
+              const errMsg = error?.errorMessage;
+              if (errMsg === "MESSAGE_NOT_MODIFIED") return;
+              log7.debug(`GramJS edit failed, falling back to Grammy: ${errMsg || error}`);
             }
           }
           const replyMarkup = styledButtons ? toGrammyKeyboard(styledButtons) : void 0;
@@ -2368,13 +2649,15 @@ var InlineRouter = class {
   }
   async handleChosenResult(ctx, pluginName, plugin) {
     try {
-      const resultId = ctx.chosenInlineResult.result_id;
+      const chosenResult = ctx.chosenInlineResult;
+      if (!chosenResult || !plugin.onChosenResult) return;
+      const resultId = chosenResult.result_id;
       const colonIdx = resultId.indexOf(":");
       const strippedResultId = colonIdx > 0 ? resultId.slice(colonIdx + 1) : resultId;
       const crCtx = {
         resultId: strippedResultId,
-        inlineMessageId: ctx.chosenInlineResult.inline_message_id,
-        query: ctx.chosenInlineResult.query
+        inlineMessageId: chosenResult.inline_message_id,
+        query: chosenResult.query
       };
       await plugin.onChosenResult(crCtx);
     } catch (error) {
@@ -2460,6 +2743,30 @@ import { readdirSync as readdirSync2, readFileSync as readFileSync5, existsSync
 import { join as join5 } from "path";
 import { pathToFileURL } from "url";
 import { execFile } from "child_process";
+
+// src/agent/tools/plugin-config-store.ts
+function getPluginPriorities(db) {
+  const rows = db.prepare("SELECT plugin_name, priority FROM plugin_config").all();
+  const map = /* @__PURE__ */ new Map();
+  for (const row of rows) {
+    map.set(row.plugin_name, row.priority);
+  }
+  return map;
+}
+function setPluginPriority(db, pluginName, priority) {
+  db.prepare(
+    `INSERT INTO plugin_config (plugin_name, priority, updated_at)
+     VALUES (?, ?, datetime('now'))
+     ON CONFLICT(plugin_name) DO UPDATE SET
+       priority = excluded.priority,
+       updated_at = excluded.updated_at`
+  ).run(pluginName, priority);
+}
+function resetPluginPriority(db, pluginName) {
+  db.prepare("DELETE FROM plugin_config WHERE plugin_name = ?").run(pluginName);
+}
+
+// src/agent/tools/plugin-loader.ts
 import { promisify } from "util";
 
 // src/agent/tools/plugin-validator.ts
@@ -2491,7 +2798,14 @@ var ManifestSchema = z.object({
       inlinePerMinute: z.number().positive().optional(),
       callbackPerMinute: z.number().positive().optional()
     }).optional()
-  }).optional()
+  }).optional(),
+  hooks: z.array(
+    z.object({
+      name: z.string().min(1).max(64),
+      priority: z.number().optional(),
+      description: z.string().max(256).optional()
+    })
+  ).optional()
 });
 function validateManifest(raw) {
   return ManifestSchema.parse(raw);
@@ -2607,8 +2921,9 @@ async function sendTon(params) {
       log9.info(`Sent ${amount} TON to ${toAddress2.slice(0, 8)}... - seqno: ${seqno}`);
       return pseudoHash;
     } catch (error) {
-      const status = error?.status || error?.response?.status;
-      if (status === 429 || status >= 500) {
+      const err = error;
+      const status = err?.status || err?.response?.status;
+      if (status === 429 || status !== void 0 && status >= 500) {
         invalidateTonClientCache();
       }
       log9.error({ err: error }, "Error sending TON");
@@ -3142,9 +3457,9 @@ var retryStatusCodes = /* @__PURE__ */ new Set([
 var nullBodyResponses = /* @__PURE__ */ new Set([101, 204, 205, 304]);
 function createFetch(globalOptions = {}) {
   const {
-    fetch: fetch2 = globalThis.fetch,
+    fetch: fetch3 = globalThis.fetch,
     Headers: Headers2 = globalThis.Headers,
-    AbortController: AbortController2 = globalThis.AbortController
+    AbortController: AbortController3 = globalThis.AbortController
   } = globalOptions;
   async function onError(context) {
     const isAbort = context.error && context.error.name === "AbortError" && !context.options.timeout || false;
@@ -3228,7 +3543,7 @@ function createFetch(globalOptions = {}) {
     }
     let abortTimeout;
     if (!context.options.signal && context.options.timeout) {
-      const controller = new AbortController2();
+      const controller = new AbortController3();
       abortTimeout = setTimeout(() => {
         const error = new Error(
           "[TimeoutError]: The operation was aborted due to timeout"
@@ -3240,7 +3555,7 @@ function createFetch(globalOptions = {}) {
       context.options.signal = controller.signal;
     }
     try {
-      context.response = await fetch2(
+      context.response = await fetch3(
         context.request,
         context.options
       );
@@ -3302,7 +3617,7 @@ function createFetch(globalOptions = {}) {
     return r3._data;
   };
   $fetch.raw = $fetchRaw;
-  $fetch.native = (...args) => fetch2(...args);
+  $fetch.native = (...args) => fetch3(...args);
   $fetch.create = (defaultOptions = {}, customGlobalOptions = {}) => createFetch({
     ...globalOptions,
     ...customGlobalOptions,
@@ -3333,10 +3648,10 @@ function createNodeFetch() {
     return r(input, { ...nodeFetchOptions, ...init });
   };
 }
-var fetch = globalThis.fetch ? (...args) => globalThis.fetch(...args) : createNodeFetch();
+var fetch2 = globalThis.fetch ? (...args) => globalThis.fetch(...args) : createNodeFetch();
 var Headers = globalThis.Headers || n;
-var AbortController = globalThis.AbortController || T;
-var ofetch = createFetch({ fetch, Headers, AbortController });
+var AbortController2 = globalThis.AbortController || T;
+var ofetch = createFetch({ fetch: fetch2, Headers, AbortController: AbortController2 });
 
 // node_modules/@ston-fi/api/dist/esm/index.js
 var __create = Object.create;
@@ -6192,7 +6507,7 @@ var stonApiClient = new StonApiClient();
 function isTon(asset) {
   return asset.toLowerCase() === "ton";
 }
-async function getStonfiQuote(fromAsset, toAsset, amount, slippage, log13) {
+async function getStonfiQuote(fromAsset, toAsset, amount, slippage, log15) {
   try {
     const isTonInput = isTon(fromAsset);
     const isTonOutput = isTon(toAsset);
@@ -6223,11 +6538,11 @@ async function getStonfiQuote(fromAsset, toAsset, amount, slippage, log13) {
       fee: feeAmount.toFixed(6)
     };
   } catch (err) {
-    log13.debug("dex.quoteSTONfi() failed:", err);
+    log15.debug("dex.quoteSTONfi() failed:", err);
     return null;
   }
 }
-async function getDedustQuote(fromAsset, toAsset, amount, slippage, log13) {
+async function getDedustQuote(fromAsset, toAsset, amount, slippage, log15) {
   try {
     const isTonInput = isTon(fromAsset);
     const isTonOutput = isTon(toAsset);
@@ -6261,11 +6576,11 @@ async function getDedustQuote(fromAsset, toAsset, amount, slippage, log13) {
       poolType
     };
   } catch (err) {
-    log13.debug("dex.quoteDeDust() failed:", err);
+    log15.debug("dex.quoteDeDust() failed:", err);
     return null;
   }
 }
-async function executeSTONfiSwap(params, log13) {
+async function executeSTONfiSwap(params, _log) {
   const { fromAsset, toAsset, amount, slippage = 0.01 } = params;
   const walletData = loadWallet();
   if (!walletData) {
@@ -6352,7 +6667,7 @@ async function executeSTONfiSwap(params, log13) {
     };
   });
 }
-async function executeDedustSwap(params, log13) {
+async function executeDedustSwap(params, _log) {
   const { fromAsset, toAsset, amount, slippage = 0.01 } = params;
   const walletData = loadWallet();
   if (!walletData) {
@@ -6372,7 +6687,7 @@ async function executeDedustSwap(params, log13) {
   const fromDecimals = await getDecimals(isTonInput ? "ton" : fromAsset);
   const toDecimals = await getDecimals(isTonOutput ? "ton" : toAsset);
   const amountIn = toUnits(amount, fromDecimals);
-  const { amountOut, tradeFee } = await pool.getEstimatedSwapOut({
+  const { amountOut } = await pool.getEstimatedSwapOut({
     assetIn: fromAssetObj,
     amountIn
   });
@@ -6433,14 +6748,14 @@ function validateDexParams(amount, slippage) {
     throw new PluginSDKError("Slippage must be between 0 and 1", "OPERATION_FAILED");
   }
 }
-function createDexSDK(log13) {
+function createDexSDK(log15) {
   return {
     async quote(params) {
       validateDexParams(params.amount, params.slippage);
       const slippage = params.slippage ?? 0.01;
       const [stonfi, dedust] = await Promise.all([
-        getStonfiQuote(params.fromAsset, params.toAsset, params.amount, slippage, log13),
-        getDedustQuote(params.fromAsset, params.toAsset, params.amount, slippage, log13)
+        getStonfiQuote(params.fromAsset, params.toAsset, params.amount, slippage, log15),
+        getDedustQuote(params.fromAsset, params.toAsset, params.amount, slippage, log15)
       ]);
       if (!stonfi && !dedust) {
         throw new PluginSDKError("No DEX has liquidity for this pair", "OPERATION_FAILED");
@@ -6474,7 +6789,7 @@ function createDexSDK(log13) {
         params.toAsset,
         params.amount,
         params.slippage ?? 0.01,
-        log13
+        log15
       );
     },
     async quoteDeDust(params) {
@@ -6483,25 +6798,25 @@ function createDexSDK(log13) {
         params.toAsset,
         params.amount,
         params.slippage ?? 0.01,
-        log13
+        log15
       );
     },
     async swap(params) {
       validateDexParams(params.amount, params.slippage);
       if (params.dex === "stonfi") {
-        return executeSTONfiSwap(params, log13);
+        return executeSTONfiSwap(params, log15);
       }
       if (params.dex === "dedust") {
-        return executeDedustSwap(params, log13);
+        return executeDedustSwap(params, log15);
       }
       const quoteResult = await this.quote(params);
-      return quoteResult.recommended === "stonfi" ? executeSTONfiSwap(params, log13) : executeDedustSwap(params, log13);
+      return quoteResult.recommended === "stonfi" ? executeSTONfiSwap(params, log15) : executeDedustSwap(params, log15);
     },
     async swapSTONfi(params) {
-      return executeSTONfiSwap(params, log13);
+      return executeSTONfiSwap(params, log15);
     },
     async swapDeDust(params) {
-      return executeDedustSwap(params, log13);
+      return executeDedustSwap(params, log15);
     }
   };
 }
@@ -6538,7 +6853,7 @@ function normalizeDomain(domain) {
   if (!d.endsWith(".ton")) d += ".ton";
   return d;
 }
-function createDnsSDK(log13) {
+function createDnsSDK(log15) {
   return {
     async check(domain) {
       const normalized = normalizeDomain(domain);
@@ -6561,7 +6876,7 @@ function createDnsSDK(log13) {
         };
       } catch (err) {
         if (err instanceof PluginSDKError) throw err;
-        log13.debug("dns.check() failed:", err);
+        log15.debug("dns.check() failed:", err);
         throw new PluginSDKError(
           `Failed to check domain: ${err instanceof Error ? err.message : String(err)}`,
           "OPERATION_FAILED"
@@ -6574,7 +6889,7 @@ function createDnsSDK(log13) {
         const response = await tonapiFetch(`/dns/${encodeURIComponent(normalized)}`);
         if (response.status === 404) return null;
         if (!response.ok) {
-          log13.debug(`dns.resolve() TonAPI error: ${response.status}`);
+          log15.debug(`dns.resolve() TonAPI error: ${response.status}`);
           return null;
         }
         const data = await response.json();
@@ -6586,7 +6901,7 @@ function createDnsSDK(log13) {
           expirationDate: data.expiring_at || void 0
         };
       } catch (err) {
-        log13.debug("dns.resolve() failed:", err);
+        log15.debug("dns.resolve() failed:", err);
         return null;
       }
     },
@@ -6596,7 +6911,7 @@ function createDnsSDK(log13) {
           `/dns/auctions?tld=ton&limit=${Math.min(limit ?? 20, 100)}`
         );
         if (!response.ok) {
-          log13.debug(`dns.getAuctions() TonAPI error: ${response.status}`);
+          log15.debug(`dns.getAuctions() TonAPI error: ${response.status}`);
           return [];
         }
         const data = await response.json();
@@ -6609,7 +6924,7 @@ function createDnsSDK(log13) {
           bids: a.bids || 0
         }));
       } catch (err) {
-        log13.debug("dns.getAuctions() failed:", err);
+        log15.debug("dns.getAuctions() failed:", err);
         return [];
       }
     },
@@ -6648,7 +6963,10 @@ function createDnsSDK(log13) {
         throw new PluginSDKError(`No active auction found for ${normalized}`, "OPERATION_FAILED");
       }
       try {
-        await sendWalletMessage(Address6.parse(checkResult.nftAddress), toNano15(amount.toString()));
+        await sendWalletMessage(
+          Address6.parse(checkResult.nftAddress),
+          toNano15(amount.toString())
+        );
         return { domain: normalized, bidAmount: amount.toString(), success: true };
       } catch (err) {
         if (err instanceof PluginSDKError) throw err;
@@ -6745,7 +7063,7 @@ import {
   WalletContractV5R1 as WalletContractV5R14,
   internal as internal4
 } from "@ton/ton";
-import { Address as TonAddress, beginCell as beginCell13, SendMode as SendMode4 } from "@ton/core";
+import { Address as TonAddress, beginCell as beginCell13, SendMode as SendMode4, storeMessage } from "@ton/core";
 
 // src/ton/format-transactions.ts
 import { fromNano } from "@ton/ton";
@@ -6920,25 +7238,25 @@ function findJettonBalance(balances, jettonAddress) {
     }
   });
 }
-function cleanupOldTransactions(db, retentionDays, log13) {
+function cleanupOldTransactions(db, retentionDays, log15) {
   if (Math.random() > CLEANUP_PROBABILITY) return;
   try {
     const cutoff = Math.floor(Date.now() / 1e3) - retentionDays * 24 * 60 * 60;
     const result = db.prepare("DELETE FROM used_transactions WHERE used_at < ?").run(cutoff);
     if (result.changes > 0) {
-      log13.debug(`Cleaned up ${result.changes} old transaction records (>${retentionDays}d)`);
+      log15.debug(`Cleaned up ${result.changes} old transaction records (>${retentionDays}d)`);
     }
   } catch (err) {
-    log13.error("Transaction cleanup failed:", err);
+    log15.error("Transaction cleanup failed:", err);
   }
 }
-function createTonSDK(log13, db) {
+function createTonSDK(log15, db) {
   return {
     getAddress() {
       try {
         return getWalletAddress();
       } catch (err) {
-        log13.error("ton.getAddress() failed:", err);
+        log15.error("ton.getAddress() failed:", err);
         return null;
       }
     },
@@ -6948,7 +7266,7 @@ function createTonSDK(log13, db) {
         if (!addr) return null;
         return await getWalletBalance(addr);
       } catch (err) {
-        log13.error("ton.getBalance() failed:", err);
+        log15.error("ton.getBalance() failed:", err);
         return null;
       }
     },
@@ -6956,7 +7274,7 @@ function createTonSDK(log13, db) {
       try {
         return await getTonPrice();
       } catch (err) {
-        log13.error("ton.getPrice() failed:", err);
+        log15.error("ton.getPrice() failed:", err);
         return null;
       }
     },
@@ -7007,7 +7325,7 @@ function createTonSDK(log13, db) {
         );
         return formatTransactions(transactions);
       } catch (err) {
-        log13.error("ton.getTransactions() failed:", err);
+        log15.error("ton.getTransactions() failed:", err);
         return [];
       }
     },
@@ -7030,7 +7348,7 @@ function createTonSDK(log13, db) {
         throw new PluginSDKError("Wallet not initialized", "WALLET_NOT_INITIALIZED");
       }
       const maxAgeMinutes = params.maxAgeMinutes ?? DEFAULT_MAX_AGE_MINUTES;
-      cleanupOldTransactions(db, DEFAULT_TX_RETENTION_DAYS, log13);
+      cleanupOldTransactions(db, DEFAULT_TX_RETENTION_DAYS, log15);
       try {
         const txs = await this.getTransactions(address4, 20);
         for (const tx of txs) {
@@ -7064,7 +7382,7 @@ function createTonSDK(log13, db) {
         };
       } catch (err) {
         if (err instanceof PluginSDKError) throw err;
-        log13.error("ton.verifyPayment() failed:", err);
+        log15.error("ton.verifyPayment() failed:", err);
         return {
           verified: false,
           error: `Verification failed: ${err instanceof Error ? err.message : String(err)}`
@@ -7078,7 +7396,7 @@ function createTonSDK(log13, db) {
         if (!addr) return [];
         const response = await tonapiFetch(`/accounts/${encodeURIComponent(addr)}/jettons`);
         if (!response.ok) {
-          log13.error(`ton.getJettonBalances() TonAPI error: ${response.status}`);
+          log15.error(`ton.getJettonBalances() TonAPI error: ${response.status}`);
           return [];
         }
         const data = await response.json();
@@ -7102,7 +7420,7 @@ function createTonSDK(log13, db) {
         }
         return balances;
       } catch (err) {
-        log13.error("ton.getJettonBalances() failed:", err);
+        log15.error("ton.getJettonBalances() failed:", err);
         return [];
       }
     },
@@ -7111,7 +7429,7 @@ function createTonSDK(log13, db) {
         const response = await tonapiFetch(`/jettons/${encodeURIComponent(jettonAddress)}`);
         if (response.status === 404) return null;
         if (!response.ok) {
-          log13.error(`ton.getJettonInfo() TonAPI error: ${response.status}`);
+          log15.error(`ton.getJettonInfo() TonAPI error: ${response.status}`);
           return null;
         }
         const data = await response.json();
@@ -7129,7 +7447,7 @@ function createTonSDK(log13, db) {
           image: data.preview || metadata.image || void 0
         };
       } catch (err) {
-        log13.error("ton.getJettonInfo() failed:", err);
+        log15.error("ton.getJettonInfo() failed:", err);
         return null;
       }
     },
@@ -7221,7 +7539,7 @@ function createTonSDK(log13, db) {
               if (status === 429 || status && status >= 500) {
                 invalidateTonClientCache();
                 if (attempt < MAX_SEND_ATTEMPTS) {
-                  log13.warn(
+                  log15.warn(
                     `sendJetton attempt ${attempt} failed (${status}): ${JSON.stringify(respData ?? err.message)}, retrying...`
                   );
                   await new Promise((r3) => setTimeout(r3, 1e3 * attempt));
@@ -7250,17 +7568,197 @@ function createTonSDK(log13, db) {
       try {
         const response = await tonapiFetch(`/accounts/${encodeURIComponent(ownerAddress)}/jettons`);
         if (!response.ok) {
-          log13.error(`ton.getJettonWalletAddress() TonAPI error: ${response.status}`);
+          log15.error(`ton.getJettonWalletAddress() TonAPI error: ${response.status}`);
           return null;
         }
         const data = await response.json();
         const match = findJettonBalance(data.balances ?? [], jettonAddress);
         return match ? match.wallet_address.address : null;
       } catch (err) {
-        log13.error("ton.getJettonWalletAddress() failed:", err);
+        log15.error("ton.getJettonWalletAddress() failed:", err);
+        return null;
+      }
+    },
+    // ─── Signed Transfers (no broadcast) ──────────────────────────
+    async createTransfer(to, amount, comment) {
+      const walletData = loadWallet();
+      if (!walletData) {
+        throw new PluginSDKError("Wallet not initialized", "WALLET_NOT_INITIALIZED");
+      }
+      if (!Number.isFinite(amount) || amount <= 0) {
+        throw new PluginSDKError("Amount must be a positive number", "OPERATION_FAILED");
+      }
+      try {
+        TonAddress.parse(to);
+      } catch {
+        throw new PluginSDKError("Invalid TON address format", "INVALID_ADDRESS");
+      }
+      try {
+        const keyPair = await getKeyPair();
+        if (!keyPair) {
+          throw new PluginSDKError("Wallet key derivation failed", "OPERATION_FAILED");
+        }
+        const boc = await withTxLock(async () => {
+          const wallet = WalletContractV5R14.create({
+            workchain: 0,
+            publicKey: keyPair.publicKey
+          });
+          const client = await getCachedTonClient();
+          const contract = client.open(wallet);
+          const seqno = await contract.getSeqno();
+          const transferCell = wallet.createTransfer({
+            seqno,
+            secretKey: keyPair.secretKey,
+            sendMode: SendMode4.PAY_GAS_SEPARATELY,
+            messages: [
+              internal4({
+                to: TonAddress.parse(to),
+                value: tonToNano(amount),
+                body: comment || "",
+                bounce: false
+              })
+            ]
+          });
+          const extMsg = beginCell13().store(
+            storeMessage({
+              info: {
+                type: "external-in",
+                dest: wallet.address,
+                importFee: 0n
+              },
+              init: seqno === 0 ? wallet.init : void 0,
+              body: transferCell
+            })
+          ).endCell();
+          return extMsg.toBoc().toString("base64");
+        });
+        return {
+          boc,
+          publicKey: walletData.publicKey,
+          walletVersion: "v5r1"
+        };
+      } catch (err) {
+        if (err instanceof PluginSDKError) throw err;
+        throw new PluginSDKError(
+          `Failed to create transfer: ${err instanceof Error ? err.message : String(err)}`,
+          "OPERATION_FAILED"
+        );
+      }
+    },
+    async createJettonTransfer(jettonAddress, to, amount, opts) {
+      const walletData = loadWallet();
+      if (!walletData) {
+        throw new PluginSDKError("Wallet not initialized", "WALLET_NOT_INITIALIZED");
+      }
+      if (!Number.isFinite(amount) || amount <= 0) {
+        throw new PluginSDKError("Amount must be a positive number", "OPERATION_FAILED");
+      }
+      try {
+        TonAddress.parse(to);
+      } catch {
+        throw new PluginSDKError("Invalid recipient address", "INVALID_ADDRESS");
+      }
+      try {
+        const jettonsResponse = await tonapiFetch(
+          `/accounts/${encodeURIComponent(walletData.address)}/jettons`
+        );
+        if (!jettonsResponse.ok) {
+          throw new PluginSDKError(
+            `Failed to fetch jetton balances: ${jettonsResponse.status}`,
+            "OPERATION_FAILED"
+          );
+        }
+        const jettonsData = await jettonsResponse.json();
+        const jettonBalance = findJettonBalance(jettonsData.balances ?? [], jettonAddress);
+        if (!jettonBalance) {
+          throw new PluginSDKError(
+            `You don't own any of this jetton: ${jettonAddress}`,
+            "OPERATION_FAILED"
+          );
+        }
+        const senderJettonWallet = jettonBalance.wallet_address.address;
+        const decimals = jettonBalance.jetton.decimals ?? 9;
+        const currentBalance = BigInt(jettonBalance.balance);
+        const amountStr = amount.toFixed(decimals);
+        const [whole, frac = ""] = amountStr.split(".");
+        const amountInUnits = BigInt(whole + (frac + "0".repeat(decimals)).slice(0, decimals));
+        if (amountInUnits > currentBalance) {
+          const balStr = formatTokenBalance(currentBalance, decimals);
+          throw new PluginSDKError(
+            `Insufficient balance. Have ${balStr}, need ${amount}`,
+            "OPERATION_FAILED"
+          );
+        }
+        const comment = opts?.comment;
+        let forwardPayload = beginCell13().endCell();
+        if (comment) {
+          forwardPayload = beginCell13().storeUint(0, 32).storeStringTail(comment).endCell();
+        }
+        const JETTON_TRANSFER_OP = 260734629;
+        const messageBody = beginCell13().storeUint(JETTON_TRANSFER_OP, 32).storeUint(0, 64).storeCoins(amountInUnits).storeAddress(TonAddress.parse(to)).storeAddress(TonAddress.parse(walletData.address)).storeBit(false).storeCoins(comment ? tonToNano("0.01") : BigInt(1)).storeBit(comment ? 1 : 0).storeRef(comment ? forwardPayload : beginCell13().endCell()).endCell();
+        const keyPair = await getKeyPair();
+        if (!keyPair) {
+          throw new PluginSDKError("Wallet key derivation failed", "OPERATION_FAILED");
+        }
+        const boc = await withTxLock(async () => {
+          const wallet = WalletContractV5R14.create({
+            workchain: 0,
+            publicKey: keyPair.publicKey
+          });
+          const client = await getCachedTonClient();
+          const walletContract = client.open(wallet);
+          const seqno = await walletContract.getSeqno();
+          const transferCell = wallet.createTransfer({
+            seqno,
+            secretKey: keyPair.secretKey,
+            sendMode: SendMode4.PAY_GAS_SEPARATELY,
+            messages: [
+              internal4({
+                to: TonAddress.parse(senderJettonWallet),
+                value: tonToNano("0.05"),
+                body: messageBody,
+                bounce: true
+              })
+            ]
+          });
+          const extMsg = beginCell13().store(
+            storeMessage({
+              info: {
+                type: "external-in",
+                dest: wallet.address,
+                importFee: 0n
+              },
+              init: seqno === 0 ? wallet.init : void 0,
+              body: transferCell
+            })
+          ).endCell();
+          return extMsg.toBoc().toString("base64");
+        });
+        return {
+          boc,
+          publicKey: walletData.publicKey,
+          walletVersion: "v5r1"
+        };
+      } catch (err) {
+        if (err instanceof PluginSDKError) throw err;
+        throw new PluginSDKError(
+          `Failed to create jetton transfer: ${err instanceof Error ? err.message : String(err)}`,
+          "OPERATION_FAILED"
+        );
+      }
+    },
+    getPublicKey() {
+      try {
+        const wallet = loadWallet();
+        return wallet?.publicKey ?? null;
+      } catch (err) {
+        log15.error("ton.getPublicKey() failed:", err);
         return null;
       }
     },
+    getWalletVersion() {
+      return "v5r1";
+    },
     // ─── NFT ─────────────────────────────────────────────────────
     async getNftItems(ownerAddress) {
       try {
@@ -7270,14 +7768,14 @@ function createTonSDK(log13, db) {
           `/accounts/${encodeURIComponent(addr)}/nfts?limit=100&indirect_ownership=true`
         );
         if (!response.ok) {
-          log13.error(`ton.getNftItems() TonAPI error: ${response.status}`);
+          log15.error(`ton.getNftItems() TonAPI error: ${response.status}`);
           return [];
         }
         const data = await response.json();
         if (!Array.isArray(data.nft_items)) return [];
         return data.nft_items.filter((item) => item.trust !== "blacklist").map((item) => mapNftItem(item));
       } catch (err) {
-        log13.error("ton.getNftItems() failed:", err);
+        log15.error("ton.getNftItems() failed:", err);
         return [];
       }
     },
@@ -7286,13 +7784,13 @@ function createTonSDK(log13, db) {
         const response = await tonapiFetch(`/nfts/${encodeURIComponent(nftAddress)}`);
         if (response.status === 404) return null;
         if (!response.ok) {
-          log13.error(`ton.getNftInfo() TonAPI error: ${response.status}`);
+          log15.error(`ton.getNftInfo() TonAPI error: ${response.status}`);
           return null;
         }
         const item = await response.json();
         return mapNftItem(item);
       } catch (err) {
-        log13.error("ton.getNftInfo() failed:", err);
+        log15.error("ton.getNftInfo() failed:", err);
         return null;
       }
     },
@@ -7325,7 +7823,7 @@ function createTonSDK(log13, db) {
           `/rates?tokens=${encodeURIComponent(jettonAddress)}&currencies=usd,ton`
         );
         if (!response.ok) {
-          log13.debug(`ton.getJettonPrice() TonAPI error: ${response.status}`);
+          log15.debug(`ton.getJettonPrice() TonAPI error: ${response.status}`);
           return null;
         }
         const data = await response.json();
@@ -7339,7 +7837,7 @@ function createTonSDK(log13, db) {
           change30d: rateData.diff_30d?.USD ?? null
         };
       } catch (err) {
-        log13.debug("ton.getJettonPrice() failed:", err);
+        log15.debug("ton.getJettonPrice() failed:", err);
         return null;
       }
     },
@@ -7353,7 +7851,7 @@ function createTonSDK(log13, db) {
           tonapiFetch(`/jettons/${encodeURIComponent(jettonAddress)}`)
         ]);
         if (!holdersResponse.ok) {
-          log13.debug(`ton.getJettonHolders() TonAPI error: ${holdersResponse.status}`);
+          log15.debug(`ton.getJettonHolders() TonAPI error: ${holdersResponse.status}`);
           return [];
         }
         const data = await holdersResponse.json();
@@ -7373,7 +7871,7 @@ function createTonSDK(log13, db) {
           };
         });
       } catch (err) {
-        log13.debug("ton.getJettonHolders() failed:", err);
+        log15.debug("ton.getJettonHolders() failed:", err);
         return [];
       }
     },
@@ -7445,13 +7943,13 @@ function createTonSDK(log13, db) {
           holders: holdersCount
         };
       } catch (err) {
-        log13.debug("ton.getJettonHistory() failed:", err);
+        log15.debug("ton.getJettonHistory() failed:", err);
         return null;
       }
     },
     // ─── Sub-namespaces ───────────────────────────────────────────
-    dex: Object.freeze(createDexSDK(log13)),
-    dns: Object.freeze(createDnsSDK(log13))
+    dex: Object.freeze(createDexSDK(log15)),
+    dns: Object.freeze(createDnsSDK(log15))
   };
 }
 function mapNftItem(item) {
@@ -7500,6 +7998,7 @@ function toSimpleMessage(msg) {
   return {
     id: msg.id,
     text: msg.message ?? "",
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any -- GramJS fromId is a union of untyped peer types
     senderId: Number(msg.fromId?.userId ?? msg.fromId?.channelId ?? 0),
     timestamp: new Date(msg.date * 1e3)
   };
@@ -7513,7 +8012,7 @@ async function getApi() {
 }
 
 // src/sdk/telegram-messages.ts
-function createTelegramMessagesSDK(bridge, log13) {
+function createTelegramMessagesSDK(bridge, log15) {
   function requireBridge2() {
     requireBridge(bridge);
   }
@@ -7620,7 +8119,7 @@ function createTelegramMessagesSDK(bridge, log13) {
         return (resultData.messages ?? []).map(toSimpleMessage);
       } catch (err) {
         if (err instanceof PluginSDKError) throw err;
-        log13.error("telegram.searchMessages() failed:", err);
+        log15.error("telegram.searchMessages() failed:", err);
         return [];
       }
     },
@@ -7657,6 +8156,7 @@ function createTelegramMessagesSDK(bridge, log13) {
             limit,
             maxId: 0,
             minId: 0,
+            // eslint-disable-next-line @typescript-eslint/no-explicit-any -- GramJS BigInteger compat requires bigint cast
             hash: 0n
           })
         );
@@ -7847,6 +8347,7 @@ function createTelegramMessagesSDK(bridge, log13) {
         const result = await gramJsClient.invoke(
           new Api4.messages.GetScheduledHistory({
             peer,
+            // eslint-disable-next-line @typescript-eslint/no-explicit-any -- GramJS BigInteger compat requires bigint cast
             hash: 0n
           })
         );
@@ -7861,7 +8362,7 @@ function createTelegramMessagesSDK(bridge, log13) {
         return messages;
       } catch (err) {
         if (err instanceof PluginSDKError) throw err;
-        log13.error("telegram.getScheduledMessages() failed:", err);
+        log15.error("telegram.getScheduledMessages() failed:", err);
         return [];
       }
     },
@@ -7922,7 +8423,7 @@ function createTelegramMessagesSDK(bridge, log13) {
 }
 
 // src/sdk/telegram-social.ts
-function createTelegramSocialSDK(bridge, log13) {
+function createTelegramSocialSDK(bridge, log15) {
   function requireBridge2() {
     requireBridge(bridge);
   }
@@ -7997,7 +8498,7 @@ function createTelegramSocialSDK(bridge, log13) {
         return null;
       } catch (err) {
         if (err instanceof PluginSDKError) throw err;
-        log13.error("telegram.getChatInfo() failed:", err);
+        log15.error("telegram.getChatInfo() failed:", err);
         return null;
       }
     },
@@ -8005,7 +8506,6 @@ function createTelegramSocialSDK(bridge, log13) {
       requireBridge2();
       try {
         const client = getClient2();
-        const Api4 = await getApi();
         let entity;
         try {
           const id = typeof userId === "string" ? userId.replace("@", "") : userId.toString();
@@ -8112,7 +8612,7 @@ function createTelegramSocialSDK(bridge, log13) {
         });
       } catch (err) {
         if (err instanceof PluginSDKError) throw err;
-        log13.error("telegram.getParticipants() failed:", err);
+        log15.error("telegram.getParticipants() failed:", err);
         return [];
       }
     },
@@ -8474,7 +8974,7 @@ function createTelegramSocialSDK(bridge, log13) {
         }));
       } catch (err) {
         if (err instanceof PluginSDKError) throw err;
-        log13.error("telegram.getDialogs() failed:", err);
+        log15.error("telegram.getDialogs() failed:", err);
         return [];
       }
     },
@@ -8488,7 +8988,7 @@ function createTelegramSocialSDK(bridge, log13) {
         return messages.map(toSimpleMessage);
       } catch (err) {
         if (err instanceof PluginSDKError) throw err;
-        log13.error("telegram.getHistory() failed:", err);
+        log15.error("telegram.getHistory() failed:", err);
         return [];
       }
     },
@@ -8519,7 +9019,7 @@ function createTelegramSocialSDK(bridge, log13) {
         }));
       } catch (err) {
         if (err instanceof PluginSDKError) throw err;
-        log13.error("telegram.getStarsTransactions() failed:", err);
+        log15.error("telegram.getStarsTransactions() failed:", err);
         return [];
       }
     },
@@ -8624,7 +9124,7 @@ function createTelegramSocialSDK(bridge, log13) {
         };
       } catch (err) {
         if (err instanceof PluginSDKError) throw err;
-        log13.error("telegram.getCollectibleInfo() failed:", err);
+        log15.error("telegram.getCollectibleInfo() failed:", err);
         return null;
       }
     },
@@ -8662,7 +9162,7 @@ function createTelegramSocialSDK(bridge, log13) {
       } catch (err) {
         if (err.errorMessage === "STARGIFT_SLUG_INVALID") return null;
         if (err instanceof PluginSDKError) throw err;
-        log13.error("telegram.getUniqueGift() failed:", err);
+        log15.error("telegram.getUniqueGift() failed:", err);
         return null;
       }
     },
@@ -8688,7 +9188,7 @@ function createTelegramSocialSDK(bridge, log13) {
       } catch (err) {
         if (err.errorMessage === "STARGIFT_SLUG_INVALID") return null;
         if (err instanceof PluginSDKError) throw err;
-        log13.error("telegram.getUniqueGiftValue() failed:", err);
+        log15.error("telegram.getUniqueGiftValue() failed:", err);
         return null;
       }
     },
@@ -8723,7 +9223,7 @@ function createTelegramSocialSDK(bridge, log13) {
         const client = getClient2();
         const { Api: Api4, helpers } = await import("telegram");
         const { CustomFile } = await import("telegram/client/uploads.js");
-        const { readFileSync: readFileSync7, statSync: statSync2 } = await import("fs");
+        const { readFileSync: readFileSync8, statSync: statSync2 } = await import("fs");
         const { basename: basename2 } = await import("path");
         const { resolve: resolve2, normalize: normalize2 } = await import("path");
         const { homedir: homedir3 } = await import("os");
@@ -8748,7 +9248,7 @@ function createTelegramSocialSDK(bridge, log13) {
         }
         const fileName = basename2(filePath);
         const fileSize = statSync2(filePath).size;
-        const fileBuffer = readFileSync7(filePath);
+        const fileBuffer = readFileSync8(filePath);
         const isVideo = filePath.toLowerCase().match(/\.(mp4|mov|avi|webm|mkv|m4v)$/);
         const customFile = new CustomFile(fileName, fileSize, filePath, fileBuffer);
         const uploadedFile = await client.uploadFile({
@@ -8799,7 +9299,7 @@ function createTelegramSocialSDK(bridge, log13) {
 }
 
 // src/sdk/telegram.ts
-function createTelegramSDK(bridge, log13) {
+function createTelegramSDK(bridge, log15) {
   function requireBridge2() {
     requireBridge(bridge);
   }
@@ -8903,7 +9403,7 @@ function createTelegramSDK(bridge, log13) {
           timestamp: m.timestamp
         }));
       } catch (err) {
-        log13.error("telegram.getMessages() failed:", err);
+        log15.error("telegram.getMessages() failed:", err);
         return [];
       }
     },
@@ -8925,7 +9425,7 @@ function createTelegramSDK(bridge, log13) {
       return bridge.isAvailable();
     },
     getRawClient() {
-      log13.warn("getRawClient() called \u2014 this bypasses SDK sandbox guarantees");
+      log15.warn("getRawClient() called \u2014 this bypasses SDK sandbox guarantees");
       if (!bridge.isAvailable()) return null;
       try {
         return bridge.getClient().getClient();
@@ -8934,8 +9434,8 @@ function createTelegramSDK(bridge, log13) {
       }
     },
     // Spread extended methods from sub-modules
-    ...createTelegramMessagesSDK(bridge, log13),
-    ...createTelegramSocialSDK(bridge, log13)
+    ...createTelegramMessagesSDK(bridge, log15),
+    ...createTelegramSocialSDK(bridge, log15)
   };
 }
 
@@ -8976,23 +9476,23 @@ function deletePluginSecret(pluginName, key) {
 function listPluginSecretKeys(pluginName) {
   return Object.keys(readSecretsFile(pluginName));
 }
-function createSecretsSDK(pluginName, pluginConfig, log13) {
+function createSecretsSDK(pluginName, pluginConfig, log15) {
   const envPrefix = pluginName.replace(/-/g, "_").toUpperCase();
   function get(key) {
     const envKey = `${envPrefix}_${key.toUpperCase()}`;
     const envValue = process.env[envKey];
     if (envValue) {
-      log13.debug(`Secret "${key}" resolved from env var ${envKey}`);
+      log15.debug(`Secret "${key}" resolved from env var ${envKey}`);
       return envValue;
     }
     const stored = readSecretsFile(pluginName);
     if (key in stored && stored[key]) {
-      log13.debug(`Secret "${key}" resolved from secrets store`);
+      log15.debug(`Secret "${key}" resolved from secrets store`);
       return stored[key];
     }
     const configValue = pluginConfig[key];
     if (configValue !== void 0 && configValue !== null) {
-      log13.debug(`Secret "${key}" resolved from pluginConfig`);
+      log15.debug(`Secret "${key}" resolved from pluginConfig`);
       return String(configValue);
     }
     return void 0;
@@ -9094,7 +9594,7 @@ function createStorageSDK(db) {
 }
 
 // src/sdk/bot.ts
-function createBotSDK(router, gramjsBot, grammyBot, pluginName, manifest, rateLimiter, log13) {
+function createBotSDK(router, gramjsBot, grammyBot, pluginName, manifest, rateLimiter, log15) {
   if (!router || !manifest || !manifest.inline && !manifest.callbacks) {
     return null;
   }
@@ -9102,7 +9602,7 @@ function createBotSDK(router, gramjsBot, grammyBot, pluginName, manifest, rateLi
   const callbackLimit = manifest.rateLimits?.callbackPerMinute ?? 60;
   const handlers = {};
   function syncToRouter() {
-    router.registerPlugin(pluginName, { ...handlers });
+    router?.registerPlugin(pluginName, { ...handlers });
   }
   const sdk = {
     get isAvailable() {
@@ -9117,7 +9617,7 @@ function createBotSDK(router, gramjsBot, grammyBot, pluginName, manifest, rateLi
     },
     onInlineQuery(handler) {
       if (handlers.onInlineQuery) {
-        log13.warn("onInlineQuery called again \u2014 overwriting previous handler");
+        log15.warn("onInlineQuery called again \u2014 overwriting previous handler");
       }
       handlers.onInlineQuery = async (ctx) => {
         if (rateLimiter) {
@@ -9163,7 +9663,7 @@ function createBotSDK(router, gramjsBot, grammyBot, pluginName, manifest, rateLi
           return;
         } catch (error) {
           if (error?.errorMessage === "MESSAGE_NOT_MODIFIED") return;
-          log13.warn(`GramJS edit failed, falling back to Grammy: ${error?.errorMessage || error}`);
+          log15.warn(`GramJS edit failed, falling back to Grammy: ${error?.errorMessage || error}`);
         }
       }
       if (grammyBot) {
@@ -9176,7 +9676,7 @@ function createBotSDK(router, gramjsBot, grammyBot, pluginName, manifest, rateLi
           });
         } catch (error) {
           if (error?.description?.includes("message is not modified")) return;
-          log13.error(`Failed to edit inline message: ${error?.description || error}`);
+          log15.error(`Failed to edit inline message: ${error?.description || error}`);
         }
       }
     },
@@ -9235,13 +9735,13 @@ function createSafeDb(db) {
   });
 }
 function createPluginSDK(deps, opts) {
-  const log13 = createLogger2(opts.pluginName);
+  const log15 = createLogger2(opts.pluginName);
   const safeDb = opts.db ? createSafeDb(opts.db) : null;
-  const ton = Object.freeze(createTonSDK(log13, safeDb));
-  const telegram = Object.freeze(createTelegramSDK(deps.bridge, log13));
-  const secrets = Object.freeze(createSecretsSDK(opts.pluginName, opts.pluginConfig, log13));
+  const ton = Object.freeze(createTonSDK(log15, safeDb));
+  const telegram = Object.freeze(createTelegramSDK(deps.bridge, log15));
+  const secrets = Object.freeze(createSecretsSDK(opts.pluginName, opts.pluginConfig, log15));
   const storage = safeDb ? Object.freeze(createStorageSDK(safeDb)) : null;
-  const frozenLog = Object.freeze(log13);
+  const frozenLog = Object.freeze(log15);
   const frozenConfig = Object.freeze(JSON.parse(JSON.stringify(opts.sanitizedConfig ?? {})));
   const frozenPluginConfig = Object.freeze(JSON.parse(JSON.stringify(opts.pluginConfig ?? {})));
   let cachedBot;
@@ -9269,6 +9769,36 @@ function createPluginSDK(deps, opts) {
       );
       if (result) cachedBot = result;
       return result;
+    },
+    on(hookName, handler, onOpts) {
+      if (!opts.hookRegistry) {
+        log15.warn(`Hook registration unavailable \u2014 sdk.on() ignored`);
+        return;
+      }
+      if (opts.declaredHooks) {
+        const declared = opts.declaredHooks.some((h2) => h2.name === hookName);
+        if (!declared) {
+          log15.warn(`Hook "${hookName}" not declared in manifest \u2014 registration rejected`);
+          return;
+        }
+      }
+      const rawPriority = Number(onOpts?.priority) || 0;
+      const clampedPriority = Math.max(-1e3, Math.min(1e3, rawPriority));
+      if (rawPriority !== clampedPriority) {
+        log15.debug(`Hook "${hookName}" priority ${rawPriority} clamped to ${clampedPriority}`);
+      }
+      const registered = opts.hookRegistry.register({
+        pluginId: opts.pluginName,
+        hookName,
+        handler,
+        priority: clampedPriority,
+        globalPriority: opts.globalPriority ?? 0
+      });
+      if (!registered) {
+        log15.warn(
+          `Hook registration limit reached for plugin "${opts.pluginName}" \u2014 "${hookName}" rejected`
+        );
+      }
     }
   };
   return Object.freeze(sdk);
@@ -9329,11 +9859,64 @@ function semverSatisfies(current, range) {
   return cur.major === req.major && cur.minor === req.minor && cur.patch === req.patch;
 }
 
+// src/sdk/hooks/registry.ts
+var MAX_HOOKS_PER_PLUGIN = 100;
+var HookRegistry = class {
+  hooks = [];
+  hookMap = /* @__PURE__ */ new Map();
+  rebuildMap() {
+    this.hookMap.clear();
+    for (const h2 of this.hooks) {
+      let arr = this.hookMap.get(h2.hookName);
+      if (!arr) {
+        arr = [];
+        this.hookMap.set(h2.hookName, arr);
+      }
+      arr.push(h2);
+    }
+    for (const arr of this.hookMap.values()) {
+      arr.sort((a, b) => {
+        const aPrio = a.globalPriority + a.priority;
+        const bPrio = b.globalPriority + b.priority;
+        return aPrio - bPrio;
+      });
+    }
+  }
+  register(reg) {
+    const pluginHookCount = this.hooks.filter((h2) => h2.pluginId === reg.pluginId).length;
+    if (pluginHookCount >= MAX_HOOKS_PER_PLUGIN) {
+      return false;
+    }
+    this.hooks.push({ ...reg, globalPriority: reg.globalPriority ?? 0 });
+    this.rebuildMap();
+    return true;
+  }
+  getHooks(name) {
+    return this.hookMap.get(name) ?? [];
+  }
+  hasHooks(name) {
+    return (this.hookMap.get(name)?.length ?? 0) > 0;
+  }
+  hasAnyHooks() {
+    return this.hooks.length > 0;
+  }
+  unregister(pluginId) {
+    const before = this.hooks.length;
+    this.hooks = this.hooks.filter((h2) => h2.pluginId !== pluginId);
+    this.rebuildMap();
+    return before - this.hooks.length;
+  }
+  clear() {
+    this.hooks = [];
+    this.hookMap.clear();
+  }
+};
+
 // src/agent/tools/plugin-loader.ts
 var execFileAsync = promisify(execFile);
 var log12 = createLogger("PluginLoader");
 var PLUGIN_DATA_DIR = join5(TELETON_ROOT, "plugins", "data");
-function adaptPlugin(raw, entryName, config, loadedModuleNames, sdkDeps) {
+function adaptPlugin(raw, entryName, config, loadedModuleNames, sdkDeps, hookRegistry, pluginPriorities) {
   let manifest = null;
   if (raw.manifest) {
     try {
@@ -9363,6 +9946,7 @@ function adaptPlugin(raw, entryName, config, loadedModuleNames, sdkDeps) {
   }
   const pluginName = manifest?.name ?? entryName.replace(/\.js$/, "");
   const pluginVersion = manifest?.version ?? "0.0.0";
+  const globalPriority = pluginPriorities?.get(pluginName) ?? 0;
   if (manifest?.dependencies) {
     for (const dep of manifest.dependencies) {
       if (!loadedModuleNames.includes(dep)) {
@@ -9425,7 +10009,7 @@ function adaptPlugin(raw, entryName, config, loadedModuleNames, sdkDeps) {
         const dbPath = join5(PLUGIN_DATA_DIR, `${pluginName}.db`);
         pluginDb = openModuleDb(dbPath);
         if (hasMigrate) {
-          raw.migrate(pluginDb);
+          raw.migrate?.(pluginDb);
           const pluginTables = pluginDb.prepare(
             `SELECT name FROM sqlite_master WHERE type='table' AND name NOT LIKE 'sqlite_%'`
           ).all().map((t) => t.name).filter((n2) => n2 !== "_kv");
@@ -9453,7 +10037,10 @@ function adaptPlugin(raw, entryName, config, loadedModuleNames, sdkDeps) {
             db: pluginDb,
             sanitizedConfig,
             pluginConfig,
-            botManifest: manifest?.bot
+            botManifest: manifest?.bot,
+            hookRegistry,
+            declaredHooks: manifest?.hooks,
+            globalPriority
           });
           toolDefs = raw.tools(sdk);
         } else if (Array.isArray(raw.tools)) {
@@ -9550,12 +10137,20 @@ async function ensurePluginDeps(pluginDir, pluginEntry) {
     log12.error(`[${pluginEntry}] Failed to install deps: ${String(err).slice(0, 300)}`);
   }
 }
-async function loadEnhancedPlugins(config, loadedModuleNames, sdkDeps) {
+async function loadEnhancedPlugins(config, loadedModuleNames, sdkDeps, db) {
+  const hookRegistry = new HookRegistry();
   const pluginsDir = WORKSPACE_PATHS.PLUGINS_DIR;
   if (!existsSync6(pluginsDir)) {
-    return [];
+    return { modules: [], hookRegistry };
   }
-  const entries = readdirSync2(pluginsDir);
+  let pluginPriorities = /* @__PURE__ */ new Map();
+  if (db) {
+    try {
+      pluginPriorities = getPluginPriorities(db);
+    } catch {
+    }
+  }
+  const entries = readdirSync2(pluginsDir).sort();
   const modules = [];
   const loadedNames = /* @__PURE__ */ new Set();
   const pluginPaths = [];
@@ -9603,7 +10198,15 @@ async function loadEnhancedPlugins(config, loadedModuleNames, sdkDeps) {
         log12.warn(`Plugin "${entry}": no 'tools' array or function exported, skipping`);
         continue;
       }
-      const adapted = adaptPlugin(mod, entry, config, loadedModuleNames, sdkDeps);
+      const adapted = adaptPlugin(
+        mod,
+        entry,
+        config,
+        loadedModuleNames,
+        sdkDeps,
+        hookRegistry,
+        pluginPriorities
+      );
       if (loadedNames.has(adapted.name)) {
         log12.warn(`Plugin "${adapted.name}" already loaded, skipping duplicate from "${entry}"`);
         continue;
@@ -9614,7 +10217,7 @@ async function loadEnhancedPlugins(config, loadedModuleNames, sdkDeps) {
       log12.error(`Plugin "${entry}" failed to adapt: ${err instanceof Error ? err.message : err}`);
     }
   }
-  return modules;
+  return { modules, hookRegistry };
 }
 
 // src/config/configurable-keys.ts
@@ -10122,6 +10725,40 @@ var CONFIGURABLE_KEYS = {
     mask: identity,
     parse: (v) => Number(v)
   },
+  // ─── TON Proxy ────────────────────────────────────────────────────
+  "ton_proxy.enabled": {
+    type: "boolean",
+    category: "TON Proxy",
+    label: "TON Proxy Enabled",
+    description: "Enable Tonutils-Proxy for .ton site access (auto-downloads binary on first run)",
+    sensitive: false,
+    hotReload: "instant",
+    validate: enumValidator(["true", "false"]),
+    mask: identity,
+    parse: (v) => v === "true"
+  },
+  "ton_proxy.port": {
+    type: "number",
+    category: "TON Proxy",
+    label: "Proxy Port",
+    description: "HTTP proxy port for .ton sites (default: 8080)",
+    sensitive: false,
+    hotReload: "restart",
+    validate: numberInRange(1, 65535),
+    mask: identity,
+    parse: (v) => Number(v)
+  },
+  "ton_proxy.binary_path": {
+    type: "string",
+    category: "TON Proxy",
+    label: "Binary Path",
+    description: "Custom path to tonutils-proxy-cli (leave empty for auto-download)",
+    sensitive: false,
+    hotReload: "restart",
+    validate: noValidation,
+    mask: identity,
+    parse: identity
+  },
   // ─── Capabilities ──────────────────────────────────────────────────
   "capabilities.exec.mode": {
     type: "enum",
@@ -10227,6 +10864,392 @@ function writeRawConfig(raw, configPath) {
   writeFileSync3(fullPath, stringify2(raw), { encoding: "utf-8", mode: 384 });
 }
 
+// src/ton-proxy/manager.ts
+import { spawn, execSync } from "child_process";
+import {
+  existsSync as existsSync8,
+  chmodSync,
+  createWriteStream,
+  readFileSync as readFileSync7,
+  writeFileSync as writeFileSync4,
+  unlinkSync
+} from "fs";
+import { mkdir as mkdir2 } from "fs/promises";
+import { join as join6 } from "path";
+import { pipeline } from "stream/promises";
+var log13 = createLogger("TonProxy");
+var GITHUB_REPO = "xssnick/Tonutils-Proxy";
+var BINARY_DIR = join6(TELETON_ROOT, "bin");
+var PID_FILE = join6(TELETON_ROOT, "ton-proxy.pid");
+var HEALTH_CHECK_INTERVAL_MS = 3e4;
+var HEALTH_CHECK_TIMEOUT_MS = 5e3;
+var KILL_GRACE_MS = 5e3;
+var TonProxyManager = class {
+  process = null;
+  healthInterval = null;
+  config;
+  restartCount = 0;
+  maxRestarts = 3;
+  constructor(config) {
+    this.config = config;
+  }
+  /** Resolve the binary path — user-specified or auto-detected */
+  getBinaryPath() {
+    if (this.config.binary_path) return this.config.binary_path;
+    return join6(BINARY_DIR, getBinaryName());
+  }
+  /** Check if the binary exists on disk */
+  isInstalled() {
+    return existsSync8(this.getBinaryPath());
+  }
+  /** Whether the proxy process is currently running */
+  isRunning() {
+    return this.process !== null && this.process.exitCode === null;
+  }
+  /**
+   * Download the latest CLI binary from GitHub releases.
+   * Fetches the latest release tag, then downloads the platform-appropriate binary.
+   */
+  async install() {
+    const binaryName = getBinaryName();
+    log13.info(`Downloading TON Proxy binary (${binaryName})...`);
+    await mkdir2(BINARY_DIR, { recursive: true });
+    const releaseUrl = `https://api.github.com/repos/${GITHUB_REPO}/releases/latest`;
+    const releaseRes = await fetch(releaseUrl, {
+      headers: { Accept: "application/vnd.github.v3+json" }
+    });
+    if (!releaseRes.ok) {
+      throw new Error(`Failed to fetch latest release: ${releaseRes.status}`);
+    }
+    const release = await releaseRes.json();
+    const tag = release.tag_name;
+    const downloadUrl = `https://github.com/${GITHUB_REPO}/releases/download/${tag}/${binaryName}`;
+    log13.info(`Downloading ${downloadUrl}`);
+    const res = await fetch(downloadUrl);
+    if (!res.ok || !res.body) {
+      throw new Error(`Download failed: ${res.status} ${res.statusText}`);
+    }
+    const dest = this.getBinaryPath();
+    const fileStream = createWriteStream(dest);
+    await pipeline(res.body, fileStream);
+    chmodSync(dest, 493);
+    log13.info(`TON Proxy installed: ${dest} (${tag})`);
+  }
+  /** Kill any orphan proxy process from a previous session */
+  killOrphan() {
+    if (existsSync8(PID_FILE)) {
+      try {
+        const pid = parseInt(readFileSync7(PID_FILE, "utf-8").trim(), 10);
+        if (pid && !isNaN(pid)) {
+          try {
+            process.kill(pid, 0);
+            log13.warn(`Killing orphan TON Proxy (PID ${pid}) from previous session`);
+            process.kill(pid, "SIGTERM");
+          } catch {
+          }
+        }
+        unlinkSync(PID_FILE);
+      } catch {
+      }
+    }
+    try {
+      const out = execSync(`ss -tlnp 2>/dev/null | grep ':${this.config.port} ' || true`, {
+        encoding: "utf-8",
+        timeout: 3e3
+      });
+      const pidMatch = out.match(/pid=(\d+)/);
+      if (pidMatch) {
+        const pid = parseInt(pidMatch[1], 10);
+        log13.warn(`Port ${this.config.port} occupied by PID ${pid}, killing it`);
+        try {
+          process.kill(pid, "SIGTERM");
+        } catch {
+        }
+        execSync("sleep 0.5");
+      }
+    } catch {
+    }
+  }
+  /** Write PID to file for orphan detection */
+  writePidFile(pid) {
+    try {
+      writeFileSync4(PID_FILE, String(pid), { mode: 384 });
+    } catch {
+      log13.warn("Failed to write TON Proxy PID file");
+    }
+  }
+  /** Remove PID file */
+  removePidFile() {
+    try {
+      if (existsSync8(PID_FILE)) unlinkSync(PID_FILE);
+    } catch {
+    }
+  }
+  /** Start the proxy process */
+  async start() {
+    if (this.isRunning()) {
+      log13.warn("TON Proxy is already running");
+      return;
+    }
+    this.restartCount = 0;
+    this.maxRestarts = 3;
+    this.killOrphan();
+    if (!this.isInstalled()) {
+      await this.install();
+    }
+    const binaryPath = this.getBinaryPath();
+    const port = String(this.config.port);
+    log13.info(`Starting TON Proxy on 127.0.0.1:${port}`);
+    this.process = spawn(binaryPath, ["-addr", `127.0.0.1:${port}`], {
+      cwd: BINARY_DIR,
+      stdio: ["ignore", "pipe", "pipe"],
+      detached: false
+    });
+    this.process.stdout?.on("data", (chunk) => {
+      const line = chunk.toString().trim();
+      if (line) log13.debug(`[proxy] ${line}`);
+    });
+    this.process.stderr?.on("data", (chunk) => {
+      const line = chunk.toString().trim();
+      if (line) log13.warn(`[proxy:err] ${line}`);
+    });
+    this.process.on("exit", (code, signal) => {
+      log13.info(`TON Proxy exited (code=${code}, signal=${signal})`);
+      this.process = null;
+      this.removePidFile();
+      if (code !== 0 && code !== null && this.restartCount < this.maxRestarts) {
+        this.restartCount++;
+        log13.warn(`Auto-restarting TON Proxy (attempt ${this.restartCount}/${this.maxRestarts})`);
+        this.start().catch((err) => log13.error({ err }, "Failed to auto-restart TON Proxy"));
+      }
+    });
+    this.process.on("error", (err) => {
+      log13.error({ err }, "TON Proxy process error");
+      this.process = null;
+    });
+    this.startHealthCheck();
+    await new Promise((resolve2, reject) => {
+      const timer = setTimeout(() => {
+        if (this.isRunning()) {
+          resolve2();
+        } else {
+          reject(new Error("TON Proxy process exited immediately"));
+        }
+      }, 1e3);
+      this.process?.on("exit", () => {
+        clearTimeout(timer);
+        reject(new Error("TON Proxy process exited during startup"));
+      });
+    });
+    if (this.process?.pid) this.writePidFile(this.process.pid);
+    log13.info(`TON Proxy running on 127.0.0.1:${port} (PID ${this.process?.pid})`);
+  }
+  /** Stop the proxy process gracefully */
+  async stop() {
+    this.stopHealthCheck();
+    if (!this.process) return;
+    this.maxRestarts = 0;
+    log13.info("Stopping TON Proxy...");
+    return new Promise((resolve2) => {
+      if (!this.process) {
+        resolve2();
+        return;
+      }
+      const forceKill = setTimeout(() => {
+        if (this.process) {
+          log13.warn("TON Proxy did not exit gracefully, sending SIGKILL");
+          this.process.kill("SIGKILL");
+        }
+      }, KILL_GRACE_MS);
+      this.process.on("exit", () => {
+        clearTimeout(forceKill);
+        this.process = null;
+        this.removePidFile();
+        resolve2();
+      });
+      this.process.kill("SIGTERM");
+    });
+  }
+  /** Remove the downloaded binary from disk */
+  async uninstall() {
+    if (this.isRunning()) {
+      await this.stop();
+    }
+    const binaryPath = this.getBinaryPath();
+    if (existsSync8(binaryPath)) {
+      const { unlink } = await import("fs/promises");
+      await unlink(binaryPath);
+      log13.info(`TON Proxy binary removed: ${binaryPath}`);
+    }
+  }
+  /** Get proxy status for WebUI / tools */
+  getStatus() {
+    return {
+      running: this.isRunning(),
+      port: this.config.port,
+      installed: this.isInstalled(),
+      pid: this.process?.pid
+    };
+  }
+  startHealthCheck() {
+    this.stopHealthCheck();
+    this.healthInterval = setInterval(() => {
+      void this.checkHealth();
+    }, HEALTH_CHECK_INTERVAL_MS);
+  }
+  stopHealthCheck() {
+    if (this.healthInterval) {
+      clearInterval(this.healthInterval);
+      this.healthInterval = null;
+    }
+  }
+  async checkHealth() {
+    if (!this.isRunning()) return;
+    try {
+      const controller = new AbortController();
+      const timeout = setTimeout(() => controller.abort(), HEALTH_CHECK_TIMEOUT_MS);
+      const res = await fetch(`http://127.0.0.1:${this.config.port}/`, {
+        signal: controller.signal
+      }).catch(() => null);
+      clearTimeout(timeout);
+      if (!res) {
+        log13.warn("TON Proxy health check failed (no response)");
+      }
+    } catch {
+    }
+  }
+};
+function getBinaryName() {
+  const platform = process.platform;
+  const arch = process.arch;
+  let os;
+  switch (platform) {
+    case "linux":
+      os = "linux";
+      break;
+    case "darwin":
+      os = "darwin";
+      break;
+    case "win32":
+      os = "windows";
+      break;
+    default:
+      throw new Error(`Unsupported platform: ${platform}`);
+  }
+  let cpuArch;
+  switch (arch) {
+    case "x64":
+      cpuArch = "amd64";
+      break;
+    case "arm64":
+      cpuArch = "arm64";
+      break;
+    default:
+      throw new Error(`Unsupported architecture: ${arch}`);
+  }
+  const ext = platform === "win32" ? ".exe" : "";
+  return `tonutils-proxy-cli-${os}-${cpuArch}${ext}`;
+}
+
+// src/ton-proxy/tools.ts
+import { Type } from "@sinclair/typebox";
+var proxyManager = null;
+function setProxyManager(mgr) {
+  proxyManager = mgr;
+}
+var tonProxyStatusTool = {
+  name: "ton_proxy_status",
+  description: "Check the status of the TON Proxy (Tonutils-Proxy). Returns whether the proxy is running, installed, the port, and PID.",
+  parameters: Type.Object({})
+};
+var tonProxyStatusExecutor = async () => {
+  if (!proxyManager) {
+    return { success: true, data: { enabled: false, message: "TON Proxy is not configured" } };
+  }
+  return { success: true, data: proxyManager.getStatus() };
+};
+
+// src/ton-proxy/module.ts
+var log14 = createLogger("TonProxyModule");
+var manager = null;
+function getTonProxyManager() {
+  return manager;
+}
+function setTonProxyManager(mgr) {
+  manager = mgr;
+  setProxyManager(mgr);
+}
+var tonProxyModule = {
+  name: "ton-proxy",
+  version: "1.0.0",
+  tools(config) {
+    if (!config.ton_proxy?.enabled) return [];
+    return [{ tool: tonProxyStatusTool, executor: tonProxyStatusExecutor }];
+  },
+  async start(context) {
+    if (!context.config.ton_proxy?.enabled) return;
+    const proxyConfig = context.config.ton_proxy;
+    manager = new TonProxyManager({
+      enabled: proxyConfig.enabled,
+      port: proxyConfig.port,
+      binary_path: proxyConfig.binary_path
+    });
+    setProxyManager(manager);
+    try {
+      await manager.start();
+      log14.info(`TON Proxy started on port ${proxyConfig.port}`);
+    } catch (err) {
+      log14.error({ err }, "Failed to start TON Proxy");
+      manager = null;
+    }
+  },
+  async stop() {
+    if (manager) {
+      await manager.stop();
+      manager = null;
+      setProxyManager(null);
+    }
+  }
+};
+var module_default = tonProxyModule;
+
+// src/agent/hooks/user-hook-store.ts
+function getUserHookConfig(db, key) {
+  const row = db.prepare("SELECT value FROM user_hook_config WHERE key = ?").get(key);
+  return row?.value ?? null;
+}
+function setUserHookConfig(db, key, value) {
+  db.prepare(
+    `INSERT INTO user_hook_config (key, value, updated_at)
+     VALUES (?, ?, datetime('now'))
+     ON CONFLICT(key) DO UPDATE SET
+       value = excluded.value,
+       updated_at = excluded.updated_at`
+  ).run(key, value);
+}
+function getBlocklistConfig(db) {
+  const enabled = getUserHookConfig(db, "blocklist.enabled");
+  const keywords = getUserHookConfig(db, "blocklist.keywords");
+  const message = getUserHookConfig(db, "blocklist.message");
+  return {
+    enabled: enabled === "true",
+    keywords: keywords ? JSON.parse(keywords) : [],
+    message: message ?? ""
+  };
+}
+function setBlocklistConfig(db, config) {
+  setUserHookConfig(db, "blocklist.enabled", String(config.enabled));
+  setUserHookConfig(db, "blocklist.keywords", JSON.stringify(config.keywords));
+  setUserHookConfig(db, "blocklist.message", config.message);
+}
+function getTriggersConfig(db) {
+  const raw = getUserHookConfig(db, "triggers");
+  return raw ? JSON.parse(raw) : [];
+}
+function setTriggersConfig(db, triggers) {
+  setUserHookConfig(db, "triggers", JSON.stringify(triggers));
+}
+
 export {
   loadConfig,
   configExists,
@@ -10268,6 +11291,9 @@ export {
   toUnits,
   fromUnits,
   dexFactory,
+  getPluginPriorities,
+  setPluginPriority,
+  resetPluginPriority,
   InlineRouter,
   adaptPlugin,
   ensurePluginDeps,
@@ -10277,5 +11303,13 @@ export {
   setNestedValue,
   deleteNestedValue,
   readRawConfig,
-  writeRawConfig
+  writeRawConfig,
+  TonProxyManager,
+  getTonProxyManager,
+  setTonProxyManager,
+  module_default,
+  getBlocklistConfig,
+  setBlocklistConfig,
+  getTriggersConfig,
+  setTriggersConfig
 };