Update bot/__main__.py

bot/__main__.py

@@ -18,8 +18,11 @@ def _validate_required_secrets() -> None:
     if not Telegram.API_ID: missing.append("API_ID")
     if not Telegram.API_HASH: missing.append("API_HASH")
     if not Telegram.OWNER_ID: missing.append("OWNER_ID")
+
+    # ✅ Need BOT_TOKEN or SESSION_STRING (bot session)
     if not (Telegram.BOT_TOKEN or Telegram.SESSION_STRING):
-        missing.append("BOT_TOKEN (preferred) or SESSION_STRING (legacy)")
+        missing.append("BOT_TOKEN or SESSION_STRING (bot session)")
+
     if not Workers.WORKER1_URL: missing.append("WORKER1_URL")
     if not Workers.WORKER2_URL: missing.append("WORKER2_URL")
     if not Workers.BOT_BACKEND_KEY: missing.append("BOT_BACKEND_KEY")
@@ -32,16 +35,21 @@ async def main():
     _validate_required_secrets()
 
     quart_app = create_app()
-    uv_cfg = UvicornConfig(app=quart_app, host=Server.BIND_ADDRESS, port=Server.PORT, log_config=LOGGER_CONFIG_JSON)
+    uv_cfg = UvicornConfig(
+        app=quart_app,
+        host=Server.BIND_ADDRESS,
+        port=Server.PORT,
+        log_config=LOGGER_CONFIG_JSON
+    )
     uv_server = UvicornServer(uv_cfg)
 
     bot, user = create_clients()
-    user_app = user or (bot if not Telegram.BOT_TOKEN else None)
 
-    setup_handlers(bot, user_app=user_app)
+    # ✅ IMPORTANT: only user session can fetch restricted channel messages
+    setup_handlers(bot, user_app=user)
 
     await bot.start()
-    if user and user is not bot:
+    if user:
         await user.start()
 
     asyncio.create_task(log_startup(bot))
@@ -54,7 +62,7 @@ async def main():
             await asyncio.sleep(3600)
     finally:
         try:
-            if user and user is not bot:
+            if user:
                 await user.stop()
         finally:
             await bot.stop()