@ardennguyen/zalo-agent-cli 1.0.7

package/DISCLAIMER.md

@@ -0,0 +1,27 @@
+# Disclaimer
+
+## ⚠️ Cảnh báo quan trọng / Important Warning
+
+**Tool này sử dụng [zca-js](https://github.com/AKAspanion/zca-js) — một thư viện gọi API Zalo không chính thức. Zalo không hỗ trợ và tài khoản của bạn có thể bị khóa (ban) khi sử dụng.**
+
+**This tool uses [zca-js](https://github.com/AKAspanion/zca-js) — an unofficial Zalo API library. Zalo does not support this and your account may be banned.**
+
+---
+
+This is an **unofficial** project and is **not affiliated with, endorsed by, or connected to Zalo or VNG Corporation** in any way.
+
+This tool is provided for **research, educational, and personal automation purposes only**. By using this tool, you acknowledge and accept that:
+
+- **Your Zalo account may be permanently banned or restricted** — Zalo actively detects and blocks unofficial API usage
+- This tool relies on **reverse-engineered, undocumented APIs** via the zca-js library, which can break at any time
+- There is **no guarantee of stability, compatibility, or continued functionality**
+
+Users are solely responsible for ensuring their use of this tool complies with:
+
+- Zalo's Terms of Service
+- Applicable local and international laws and regulations
+- Data privacy requirements
+
+The authors and contributors of this project accept **no responsibility or liability** for any misuse, account restrictions, bans, or legal consequences arising from the use of this software.
+
+**Sử dụng trên tinh thần tự chịu trách nhiệm. Use at your own risk.**

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,205 @@
+<p align="center">
+  <img src="assets/mascot.png" width="120" alt="zalo-agent-cli mascot" />
+</p>
+
+# zalo-agent-cli
+
+Công cụ CLI tự động hóa Zalo — đa tài khoản, proxy, chuyển khoản ngân hàng, thanh toán QR.
+Xây dựng trên [zca-js](https://github.com/RFS-ADRENO/zca-js).
+
+**[Tiếng Việt](#bắt-đầu-nhanh)** | **[English](#english)**
+
+> [!WARNING]
+> Tool này sử dụng API Zalo **không chính thức** ([zca-js](https://github.com/RFS-ADRENO/zca-js)). Zalo không hỗ trợ và **tài khoản của bạn có thể bị khóa hoặc ban**. Tự chịu trách nhiệm. Không liên kết với Zalo hay VNG. Xem [DISCLAIMER.md](DISCLAIMER.md).
+
+> [!TIP]
+> **AI Agent Skill** — Dùng với OpenClaw, Claude Code, hoặc bất kỳ agent nào hỗ trợ SKILL.md:
+> ```bash
+> clawhub install zalo-agent          # OpenClaw (từ ClawHub registry)
+> cp -r skill/ ~/.claude/skills/zalo-agent/   # Claude Code
+> ```
+> 15+ nhóm lệnh · listen mode + webhook · 55+ ngân hàng VN · đa tài khoản + proxy
+> Xem [skill/SKILL.md](skill/SKILL.md) · [Eval scenarios](skill/evals/)
+
+> [!NOTE]
+> **Zalo Official Account (OA)** — Zalo OA API v3.0 chính thức:
+> ```bash
+> zalo-agent oa init                                    # Setup wizard (interactive)
+> zalo-agent oa init --app-id <ID> --secret <KEY> --skip-webhook  # Non-interactive (AI agent)
+> zalo-agent oa whoami                                  # Xem thông tin OA
+> zalo-agent oa msg text <user-id> "Xin chào"           # Gửi tin nhắn
+> zalo-agent oa listen -p 3000                           # Webhook listener
+> ```
+> OAuth login · gửi tin nhắn · quản lý follower · tag · webhook listener · VPS support
+> Xem [docs/official-account.md](docs/official-account.md)
+
+> [!TIP]
+> **MCP Server (AI Agent Integration)** — Model Context Protocol cho Claude Code và các MCP client:
+> ```bash
+> zalo-agent mcp start              # stdio (local Claude Code)
+> zalo-agent mcp start --http 3847 --auth your-secret  # HTTP (VPS)
+> ```
+> 4 tools: get_messages · send_message · list_threads · mark_read
+> Auto-reconnect · thread filter · noise reduction · group notifications
+> Xem [MCP Guide](skill/references/mcp-guide.md)
+
+---
+
+## Cài đặt
+
+```bash
+npm install -g @ardennguyen/zalo-agent-cli
+```
+
+## Bắt đầu nhanh
+
+### 1. Đăng nhập
+
+```bash
+zalo-agent login
+```
+
+Quét QR bằng **Zalo app > Quét mã QR**. Thông tin tự động lưu.
+
+### 2. Tìm bạn bè
+
+```bash
+zalo-agent friend search "Phúc"
+```
+
+### 3. Lắng nghe tin nhắn (lấy thread ID)
+
+```bash
+zalo-agent listen
+```
+
+Mỗi tin nhắn đến sẽ hiện `threadId`. Dùng `--json` để lấy dạng JSON.
+
+### 4. Gửi tin nhắn
+
+```bash
+# Gửi cho cá nhân
+zalo-agent msg send <THREAD_ID> "Xin chào!"
+
+# Gửi vào nhóm
+zalo-agent msg send <THREAD_ID> "Xin chào nhóm!" -t 1
+```
+
+---
+
+## Danh sách lệnh
+
+Tất cả lệnh hỗ trợ `--json`. Tài liệu đầy đủ: **[Wiki](https://github.com/ardennguyen/zalo-agent-cli/wiki)**
+
+| Nhóm lệnh | Mô tả | Docs |
+|------------|--------|------|
+| `msg` | Gửi tin nhắn, hình, file, voice, video, sticker, link, thẻ chuyển khoản, QR | [Tin nhắn](https://github.com/ardennguyen/zalo-agent-cli/wiki/Tin-Nh%E1%BA%AFn) |
+| `friend` | Danh sách, tìm, thêm, xóa, chặn, biệt danh, gợi ý | [Bạn bè](https://github.com/ardennguyen/zalo-agent-cli/wiki/B%E1%BA%A1n-B%C3%A8) |
+| `group` | Tạo, đổi tên, thành viên, cài đặt, link, ghi chú, lời mời | [Nhóm & Cộng đồng](https://github.com/ardennguyen/zalo-agent-cli/wiki/Nh%C3%B3m) |
+| `conv` | Tắt thông báo, ghim, lưu trữ, ẩn hội thoại, tự xóa | [Hội thoại](https://github.com/ardennguyen/zalo-agent-cli/wiki/H%E1%BB%99i-Tho%E1%BA%A1i) |
+| `profile` | Xem/cập nhật hồ sơ, ảnh đại diện, quyền riêng tư | [Hồ sơ](https://github.com/ardennguyen/zalo-agent-cli/wiki/H%E1%BB%93-S%C6%A1) |
+| `poll` | Tạo, bỏ phiếu, đóng khảo sát | [Khảo sát](https://github.com/ardennguyen/zalo-agent-cli/wiki/Kh%E1%BA%A3o-S%C3%A1t) |
+| `reminder` | Tạo, sửa, xóa nhắc nhở | [Nhắc nhở](https://github.com/ardennguyen/zalo-agent-cli/wiki/Nh%E1%BA%AFc-Nh%E1%BB%9F) |
+| `auto-reply` | Quản lý trả lời tự động | [Trả lời tự động](https://github.com/ardennguyen/zalo-agent-cli/wiki/Tr%E1%BA%A3-L%E1%BB%9Di-T%E1%BB%B1-%C4%90%E1%BB%99ng) |
+| `quick-msg` | Tin nhắn nhanh đã lưu | [Tin nhắn nhanh](https://github.com/ardennguyen/zalo-agent-cli/wiki/Tin-Nh%E1%BA%AFn-Nhanh) |
+| `label` | Nhãn hội thoại | [Nhãn](https://github.com/ardennguyen/zalo-agent-cli/wiki/Nh%C3%A3n) |
+| `catalog` | zBusiness — danh mục sản phẩm | [zBusiness](https://github.com/ardennguyen/zalo-agent-cli/wiki/zBusiness) |
+| `listen` | Lắng nghe tin nhắn real-time, webhook, lưu JSONL | [Lắng nghe](https://github.com/ardennguyen/zalo-agent-cli/wiki/L%E1%BA%AFng-Nghe) |
+| `account` | Đa tài khoản & proxy | [Tài khoản](https://github.com/ardennguyen/zalo-agent-cli/wiki/T%C3%A0i-Kho%E1%BA%A3n) |
+| **`oa`** | **Zalo Official Account API v3.0 — OAuth, tin nhắn, follower, tag, webhook** | **[Official Account](https://github.com/ardennguyen/zalo-agent-cli/wiki/Official-Account)** |
+
+Xem thêm: [Đa tài khoản & Proxy](https://github.com/ardennguyen/zalo-agent-cli/wiki/%C4%90a-T%C3%A0i-Kho%E1%BA%A3n-&-Proxy) · [Cài đặt VPS](https://github.com/ardennguyen/zalo-agent-cli/wiki/C%C3%A0i-%C4%90%E1%BA%B7t-VPS) · [Thẻ chuyển khoản & QR](https://github.com/ardennguyen/zalo-agent-cli/wiki/Th%E1%BA%BB-Chuy%E1%BB%83n-Kho%E1%BA%A3n-&-QR) · [Official Account](https://github.com/ardennguyen/zalo-agent-cli/wiki/Official-Account)
+
+---
+
+## Tính năng
+
+- Đăng nhập QR qua HTTP server tự động (browser + terminal)
+- Đa tài khoản với proxy riêng biệt (1:1)
+- 90+ lệnh phủ hết tính năng Zalo
+- **Zalo Official Account (OA) API v3.0** — OAuth login, gửi tin nhắn, quản lý follower, webhook listener
+- Thẻ chuyển khoản (55+ ngân hàng VN) & QR VietQR
+- Lắng nghe real-time với webhook & lưu JSONL local
+- Output `--json` cho mọi lệnh — scripting & AI agents
+- Credentials mã hóa tại chỗ (quyền 0600)
+- **Dual mode**: interactive (human) + non-interactive (AI agents, CI/CD)
+
+---
+
+
+
+---
+
+## English
+
+CLI tool for Zalo automation — multi-account, proxy support, bank transfers, QR payments.
+
+> [!TIP]
+> **AI Agent Skill** — Use with OpenClaw, Claude Code, or any SKILL.md-compatible agent:
+> ```bash
+> clawhub install zalo-agent                    # OpenClaw (from ClawHub registry)
+> cp -r skill/ ~/.claude/skills/zalo-agent/     # Claude Code
+> ```
+> 15+ command groups · listen mode + webhook · 55+ VN banks · multi-account + proxy
+> See [skill/SKILL.md](skill/SKILL.md) · [Eval scenarios](skill/evals/)
+
+> [!NOTE]
+> **Zalo Official Account (OA)** — Official Zalo OA API v3.0:
+> ```bash
+> zalo-agent oa init                                    # Setup wizard (interactive)
+> zalo-agent oa init --app-id <ID> --secret <KEY> --skip-webhook  # Non-interactive (AI agent)
+> zalo-agent oa whoami                                  # OA profile
+> zalo-agent oa msg text <user-id> "Hello"              # Send message
+> zalo-agent oa listen -p 3000                           # Webhook listener
+> ```
+> OAuth login · messaging · follower management · tags · webhook listener · VPS support
+> See [docs/official-account.md](docs/official-account.md)
+
+> [!TIP]
+> **MCP Server (AI Agent Integration)** — Model Context Protocol support for Claude Code and MCP clients:
+> ```bash
+> zalo-agent mcp start              # stdio (local Claude Code)
+> zalo-agent mcp start --http 3847 --auth your-secret  # HTTP (VPS)
+> ```
+> 4 tools: get_messages · send_message · list_threads · mark_read
+> Auto-reconnect · thread filter · noise reduction · group notifications
+> See [MCP Guide](skill/references/mcp-guide.md)
+
+### Quick Start
+
+```bash
+npm install -g @ardennguyen/zalo-agent-cli
+zalo-agent login                           # 1. Login via QR
+zalo-agent friend search "Name"            # 2. Find a friend
+zalo-agent listen                          # 3. Listen for threadId
+zalo-agent msg send <THREAD_ID> "Hello!"   # 4. Send a message
+```
+
+### Commands
+
+Full docs: **[Wiki](https://github.com/ardennguyen/zalo-agent-cli/wiki)**
+
+| Group | Description | Docs |
+|-------|-------------|------|
+| `msg` | Text, images, files, voice, video, stickers, links, bank cards, QR | [Messages](https://github.com/ardennguyen/zalo-agent-cli/wiki/Messages) |
+| `friend` | List, find, add, remove, block, alias, recommendations | [Friends](https://github.com/ardennguyen/zalo-agent-cli/wiki/Friends) |
+| `group` | Create, rename, members, settings, links, notes, invites | [Groups](https://github.com/ardennguyen/zalo-agent-cli/wiki/Groups) |
+| `conv` | Mute, pin, archive, hidden, auto-delete | [Conversations](https://github.com/ardennguyen/zalo-agent-cli/wiki/Conversations) |
+| `profile` | Profile, avatar gallery, privacy | [Profile](https://github.com/ardennguyen/zalo-agent-cli/wiki/Profile) |
+| `poll` | Create, vote, lock polls | [Polls](https://github.com/ardennguyen/zalo-agent-cli/wiki/Polls) |
+| `reminder` | Create, edit, remove reminders | [Reminders](https://github.com/ardennguyen/zalo-agent-cli/wiki/Reminders) |
+| `auto-reply` | Auto-reply rules | [Auto-Reply](https://github.com/ardennguyen/zalo-agent-cli/wiki/Auto-Reply) |
+| `quick-msg` | Saved quick messages | [Quick Messages](https://github.com/ardennguyen/zalo-agent-cli/wiki/Quick-Messages) |
+| `label` | Conversation labels | [Labels](https://github.com/ardennguyen/zalo-agent-cli/wiki/Labels) |
+| `catalog` | zBusiness catalogs & products | [Catalog](https://github.com/ardennguyen/zalo-agent-cli/wiki/Catalog) |
+| `listen` | Real-time listener, webhook, JSONL | [Listener](https://github.com/ardennguyen/zalo-agent-cli/wiki/Listener) |
+| `account` | Multi-account & proxy | [Accounts](https://github.com/ardennguyen/zalo-agent-cli/wiki/Accounts) |
+| **`oa`** | **Zalo Official Account API v3.0 — OAuth, messaging, followers, webhook** | **[Official Account](https://github.com/ardennguyen/zalo-agent-cli/wiki/Official-Account)** |
+
+
+
+---
+
+## License
+
+[MIT](LICENSE) · See [DISCLAIMER.md](DISCLAIMER.md) for full terms.

package/package.json

@@ -0,0 +1,64 @@
+{
+  "name": "@ardennguyen/zalo-agent-cli",
+  "version": "1.0.7",
+  "description": "CLI tool for Zalo automation — multi-account, proxy, bank transfers, QR payments, Official Account API v3.0",
+  "type": "module",
+  "bin": {
+    "zalo-agent": "src/index.js"
+  },
+  "main": "./src/index.js",
+  "files": [
+    "src/",
+    "LICENSE",
+    "DISCLAIMER.md"
+  ],
+  "scripts": {
+    "test": "node --test src/*.test.js src/**/*.test.js",
+    "lint": "eslint src/",
+    "lint:fix": "eslint src/ --fix",
+    "format": "prettier --write src/",
+    "format:check": "prettier --check src/",
+    "release": "npm version patch -m 'release: v%s' && git push origin main --tags",
+    "prepublishOnly": "npm run lint && npm test"
+  },
+  "keywords": [
+    "zalo",
+    "cli",
+    "automation",
+    "messaging",
+    "vietnam",
+    "proxy",
+    "vietqr",
+    "zca-js",
+    "official-account",
+    "zalo-oa",
+    "webhook"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/ardennguyen/zalo-agent-cli"
+  },
+  "author": "ardennguyen",
+  "license": "MIT",
+  "publishConfig": {
+    "access": "public"
+  },
+  "engines": {
+    "node": ">=22"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.29.0",
+    "chalk": "^5.6.2",
+    "commander": "^15.0.0",
+    "express": "^5.2.1",
+    "https-proxy-agent": "^9.1.0",
+    "node-fetch": "^3.3.2",
+    "undici": "^8.5.0",
+    "zca-js": "^2.1.2",
+    "zod": "^4.4.3"
+  },
+  "devDependencies": {
+    "eslint": "^10.0.3",
+    "prettier": "^3.8.1"
+  }
+}

package/src/cli.test.js

@@ -0,0 +1,98 @@
+/**
+ * CLI interface tests — verify command parsing, help output, and basic behavior
+ * without requiring a Zalo session.
+ */
+
+import { describe, it } from "node:test";
+import assert from "node:assert/strict";
+import { execFileSync } from "child_process";
+import { resolve } from "path";
+
+const CLI = resolve(import.meta.dirname, "index.js");
+
+function run(...args) {
+    return execFileSync("node", [CLI, ...args], {
+        encoding: "utf-8",
+        timeout: 10000,
+        env: { ...process.env, HOME: "/tmp/zalo-agent-cli-test-home" },
+    });
+}
+
+describe("CLI interface", () => {
+    it("--version outputs 1.0.0", () => {
+        const out = run("--version");
+        assert.match(out.trim(), /^\d+\.\d+\.\d+$/);
+    });
+
+    it("--help lists all command groups", () => {
+        const out = run("--help");
+        assert.match(out, /login/);
+        assert.match(out, /msg/);
+        assert.match(out, /friend/);
+        assert.match(out, /group/);
+        assert.match(out, /conv/);
+        assert.match(out, /account/);
+    });
+
+    it("msg --help lists all subcommands", () => {
+        const out = run("msg", "--help");
+        assert.match(out, /send /);
+        assert.match(out, /send-image/);
+        assert.match(out, /send-file/);
+        assert.match(out, /send-card/);
+        assert.match(out, /send-bank/);
+        assert.match(out, /send-qr-transfer/);
+        assert.match(out, /sticker/);
+        assert.match(out, /react/);
+        assert.match(out, /delete/);
+        assert.match(out, /forward/);
+    });
+
+    it("friend --help lists subcommands", () => {
+        const out = run("friend", "--help");
+        assert.match(out, /list/);
+        assert.match(out, /find/);
+        assert.match(out, /info/);
+        assert.match(out, /block/);
+    });
+
+    it("group --help lists subcommands", () => {
+        const out = run("group", "--help");
+        assert.match(out, /create/);
+        assert.match(out, /members/);
+        assert.match(out, /rename/);
+    });
+
+    it("conv --help lists subcommands", () => {
+        const out = run("conv", "--help");
+        assert.match(out, /mute/);
+        assert.match(out, /pinned/);
+        assert.match(out, /archived/);
+    });
+
+    it("account --help lists subcommands", () => {
+        const out = run("account", "--help");
+        assert.match(out, /login/);
+        assert.match(out, /switch/);
+        assert.match(out, /export/);
+        assert.match(out, /remove/);
+    });
+
+    it("login --help shows all flags", () => {
+        const out = run("login", "--help");
+        assert.match(out, /--proxy/);
+        assert.match(out, /--credentials/);
+        assert.match(out, /--qr-url/);
+        assert.match(out, /--qr-port/);
+    });
+
+    it("logout --help shows --purge", () => {
+        const out = run("logout", "--help");
+        assert.match(out, /--purge/);
+    });
+
+    it("account list on clean state shows no accounts", () => {
+        const out = run("account", "list");
+        assert.match(out, /No accounts/);
+    });
+});

package/src/commands/account.js

@@ -0,0 +1,178 @@
+/**
+ * Account commands — multi-account management with per-account proxy.
+ * Includes export for headless/CI credential transfer.
+ */
+
+import { writeFileSync, chmodSync } from "fs";
+import { resolve } from "path";
+import { loginWithQR, loginWithCredentials, extractCredentials, clearSession } from "../core/zalo-client.js";
+import { saveCredentials, loadCredentials } from "../core/credentials.js";
+import { listAccounts, getActive, setActive, addAccount, removeAccount, getAccount } from "../core/accounts.js";
+import { maskProxy } from "../utils/proxy-helpers.js";
+import { displayQR, getQRPath } from "../utils/qr-display.js";
+import { startQrServer } from "../utils/qr-http-server.js";
+import { success, error, info, warning, output } from "../utils/output.js";
+
+export function registerAccountCommands(program) {
+    const account = program.command("account").description("Manage multiple Zalo accounts with proxy");
+
+    account
+        .command("list")
+        .description("List all registered accounts")
+        .action(() => {
+            const accounts = listAccounts();
+            const safe = accounts.map((a) => ({ ...a, proxy: maskProxy(a.proxy) }));
+            output(safe, program.opts().json, () => {
+                if (!accounts.length) {
+                    info("No accounts. Use: zalo-agent account login");
+                    return;
+                }
+                console.log(`  ${"Active".padEnd(8)} ${"Owner ID".padEnd(22)} ${"Name".padEnd(20)} Proxy`);
+                console.log(`  ${"─".repeat(75)}`);
+                for (const a of accounts) {
+                    const marker = a.active ? "  ★" : "   ";
+                    console.log(
+                        `  ${marker.padEnd(8)} ${a.ownId.padEnd(22)} ${(a.name || "").padEnd(20)} ${maskProxy(a.proxy)}`,
+                    );
+                }
+            });
+        });
+
+    account
+        .command("login")
+        .description("Login a new Zalo account via QR code")
+        .option("-p, --proxy <url>", "Dedicated proxy URL for this account")
+        .option("-n, --name <label>", "Friendly label", "")
+        .option("--qr-url", "Start local HTTP server to view QR in browser (for VPS/headless)")
+        .action(async (opts) => {
+            if (opts.proxy) info(`Using proxy: ${maskProxy(opts.proxy)}`);
+            info("Generating QR code... Scan with Zalo mobile app.");
+
+            let qrServer = null;
+            try {
+                const { ownId } = await loginWithQR(opts.proxy, (event) => {
+                    displayQR(event);
+                    if (!qrServer) {
+                        qrServer = startQrServer(getQRPath());
+                    }
+                });
+
+                // Fetch display name from Zalo profile
+                let displayName = opts.name || "";
+                try {
+                    const { getApi } = await import("../core/zalo-client.js");
+                    const accountInfo = await getApi().fetchAccountInfo();
+                    displayName = accountInfo?.profile?.displayName || displayName || ownId;
+                } catch {}
+
+                const creds = extractCredentials();
+                saveCredentials(ownId, creds);
+                addAccount(ownId, displayName, opts.proxy);
+                success(
+                    `Account logged in: ${displayName} (${ownId})${opts.proxy ? ` via ${maskProxy(opts.proxy)}` : ""}`,
+                );
+            } catch (e) {
+                error(`Login failed: ${e.message}`);
+            } finally {
+                if (qrServer) qrServer.close();
+            }
+        });
+
+    account
+        .command("switch <ownerId>")
+        .description("Switch active account (restarts connection with account proxy)")
+        .action(async (ownerId) => {
+            let acc = getAccount(ownerId);
+            if (!acc) {
+                const all = listAccounts();
+                const matches = all.filter((a) => a.ownId.includes(ownerId) || (a.name || "").includes(ownerId));
+                if (matches.length === 1) {
+                    ownerId = matches[0].ownId;
+                    acc = matches[0];
+                } else {
+                    error(`Account not found: ${ownerId}`);
+                    return;
+                }
+            }
+
+            const creds = loadCredentials(ownerId);
+            if (!creds) {
+                error(`No credentials for ${ownerId}. Re-login needed.`);
+                return;
+            }
+
+            info(`Switching to ${ownerId} (${acc?.name || ""})`);
+            if (acc?.proxy) info(`Proxy: ${maskProxy(acc.proxy)}`);
+
+            clearSession();
+            try {
+                await loginWithCredentials(creds, acc?.proxy || null);
+                setActive(ownerId);
+                success(`Switched to ${ownerId}`);
+            } catch (e) {
+                error(`Switch failed: ${e.message}`);
+            }
+        });
+
+    account
+        .command("remove <ownerId>")
+        .description("Remove account and delete its credentials")
+        .action((ownerId) => {
+            if (removeAccount(ownerId)) {
+                success(`Account ${ownerId} removed`);
+            } else {
+                error(`Account not found: ${ownerId}`);
+            }
+        });
+
+    account
+        .command("info")
+        .description("Show currently active account")
+        .action(() => {
+            const active = getActive();
+            const safe = active ? { ...active, proxy: maskProxy(active.proxy) } : null;
+            output(safe, program.opts().json, () => {
+                if (!active) {
+                    info("No active account.");
+                    return;
+                }
+                console.log(`  Owner ID: ${active.ownId}`);
+                console.log(`  Name:     ${active.name || "-"}`);
+                console.log(`  Proxy:    ${maskProxy(active.proxy)}`);
+                console.log(`  Active:   yes`);
+            });
+        });
+
+    account
+        .command("export [ownerId]")
+        .description("Export account credentials for transfer to another machine")
+        .option("-o, --output <path>", "Output file path", "./zalo-creds.json")
+        .action((ownerId, opts) => {
+            const acc = ownerId ? getAccount(ownerId) : getActive();
+            if (!acc) {
+                error("No account found to export.");
+                return;
+            }
+
+            const creds = loadCredentials(acc.ownId);
+            if (!creds) {
+                error(`No credentials for ${acc.ownId}.`);
+                return;
+            }
+
+            const exportData = {
+                ...creds,
+                proxy: acc.proxy || null,
+                ownId: acc.ownId,
+                name: acc.name || "",
+            };
+
+            const outPath = resolve(opts.output);
+            writeFileSync(outPath, JSON.stringify(exportData, null, 2), "utf-8");
+            chmodSync(outPath, 0o600);
+
+            success(`Exported to ${outPath}`);
+            warning("This file contains login credentials. Keep it secure and do not commit to git.");
+            info(`Import on another machine: zalo-agent login --credentials ${opts.output}`);
+        });
+}

package/src/commands/auto-reply.js

@@ -0,0 +1,83 @@
+/**
+ * Auto-reply commands — list, create, update, delete auto-reply messages.
+ */
+
+import { getApi } from "../core/zalo-client.js";
+import { success, error, output } from "../utils/output.js";
+
+export function registerAutoReplyCommands(program) {
+    const ar = program.command("auto-reply").description("Manage auto-reply messages");
+
+    ar.command("list")
+        .description("List all auto-reply rules")
+        .action(async () => {
+            try {
+                const result = await getApi().getAutoReplyList();
+                output(result, program.opts().json);
+            } catch (e) {
+                error(`Get auto-reply list failed: ${e.message}`);
+            }
+        });
+
+    ar.command("create <content>")
+        .description("Create an auto-reply rule")
+        .option("--enable", "Enable the rule (default: true)", true)
+        .option("--no-enable", "Create disabled")
+        .option("--start <ms>", "Start time (epoch ms)", parseInt, 0)
+        .option("--end <ms>", "End time (epoch ms)", parseInt, 0)
+        .option("--scope <n>", "Scope: 0=all, 1=friends, 2=strangers", parseInt, 0)
+        .option("--uids <ids...>", "Specific user IDs to auto-reply to")
+        .action(async (content, opts) => {
+            try {
+                const payload = {
+                    content,
+                    isEnable: opts.enable,
+                    startTime: opts.start,
+                    endTime: opts.end,
+                    scope: opts.scope,
+                };
+                if (opts.uids) payload.uids = opts.uids;
+                const result = await getApi().createAutoReply(payload);
+                output(result, program.opts().json, () => success("Auto-reply created"));
+            } catch (e) {
+                error(`Create auto-reply failed: ${e.message}`);
+            }
+        });
+
+    ar.command("update <id> <content>")
+        .description("Update an auto-reply rule")
+        .option("--enable", "Enable the rule")
+        .option("--no-enable", "Disable the rule")
+        .option("--start <ms>", "Start time (epoch ms)", parseInt, 0)
+        .option("--end <ms>", "End time (epoch ms)", parseInt, 0)
+        .option("--scope <n>", "Scope: 0=all, 1=friends, 2=strangers", parseInt, 0)
+        .option("--uids <ids...>", "Specific user IDs")
+        .action(async (id, content, opts) => {
+            try {
+                const payload = {
+                    id: Number(id),
+                    content,
+                    isEnable: opts.enable ?? true,
+                    startTime: opts.start,
+                    endTime: opts.end,
+                    scope: opts.scope,
+                };
+                if (opts.uids) payload.uids = opts.uids;
+                const result = await getApi().updateAutoReply(payload);
+                output(result, program.opts().json, () => success(`Auto-reply ${id} updated`));
+            } catch (e) {
+                error(`Update auto-reply failed: ${e.message}`);
+            }
+        });
+
+    ar.command("delete <id>")
+        .description("Delete an auto-reply rule")
+        .action(async (id) => {
+            try {
+                const result = await getApi().deleteAutoReply(Number(id));
+                output(result, program.opts().json, () => success(`Auto-reply ${id} deleted`));
+            } catch (e) {
+                error(`Delete auto-reply failed: ${e.message}`);
+            }
+        });
+}