@openclaw/zalo 2026.10.5-beta.3 → 2026.10.10-beta.1

package/dist/.setup/{api-DcyxnTMW.mjs → api-wgJsO22l.mjs}

@@ -1,5 +1,5 @@
 import { n as zaloDmPolicy, r as zaloSetupAdapter, t as createZaloSetupWizardProxy } from "./setup-core-BohTbM6i.mjs";
-import { t as zaloPlugin } from "./channel-BDoyUcaX.mjs";
+import { t as zaloPlugin } from "./channel-mEpOoL81.mjs";
 import { n as resolveZaloRuntimeGroupPolicy } from "./group-access-Blsyu-ot.mjs";
 import { zaloSetupWizard } from "../setup-api.js";
 import "../api.js";

package/dist/.setup/{channel-BDoyUcaX.mjs → channel-mEpOoL81.mjs}

@@ -25,7 +25,7 @@ import { z } from "zod";
 import { buildChannelOutboundSessionRoute, stripChannelTargetPrefix, stripTargetKindPrefix } from "openclaw/plugin-sdk/core";
 import { coerceStatusIssueAccountId, readStatusIssueFields } from "openclaw/plugin-sdk/extension-shared";
 //#region extensions/zalo/src/actions.ts
-const loadZaloActionsRuntime = createLazyRuntimeNamedExport(() => import("./send-K3VH6hzV.mjs"), "sendMessageZalo");
+const loadZaloActionsRuntime = createLazyRuntimeNamedExport(() => import("./send-DcAYX9XE.mjs"), "sendMessageZalo");
 const providerId = "zalo";
 const ZALO_ACTIONS = /* @__PURE__ */ new Set(["send"]);
 function listEnabledAccounts(cfg, accountId) {
@@ -187,8 +187,8 @@ function looksLikeZaloChatId(raw, normalized) {
 	const target = normalizeZaloMessagingTarget(normalized ?? raw);
 	return Boolean(target);
 }
-const loadZaloChannelRuntime = createLazyRuntimeModule(() => import("./channel.runtime-h7Ma-rtL.mjs"));
-const zaloSetupWizard = createZaloSetupWizardProxy(async () => (await import("./setup-surface-Bzs4Hwk9.mjs").then((n) => n.t)).zaloSetupWizard);
+const loadZaloChannelRuntime = createLazyRuntimeModule(() => import("./channel.runtime-D_N32APw.mjs"));
+const zaloSetupWizard = createZaloSetupWizardProxy(async () => (await import("./setup-surface-C1uIvO1X.mjs").then((n) => n.t)).zaloSetupWizard);
 const zaloTextChunkLimit = 2e3;
 async function sendZaloDelivery(ctx) {
 	const result = await (await loadZaloChannelRuntime()).sendMessageZalo(ctx.to, ctx.text, {

package/dist/.setup/{channel.runtime-h7Ma-rtL.mjs → channel.runtime-D_N32APw.mjs}

@@ -1,4 +1,4 @@
-import { i as getMe, n as ZaloApiError, sendMessageZalo, t as resolveZaloProxyFetch } from "./send-K3VH6hzV.mjs";
+import { i as getMe, n as ZaloApiError, sendMessageZalo, t as resolveZaloProxyFetch } from "./send-DcAYX9XE.mjs";
 import { createAccountStatusSink } from "openclaw/plugin-sdk/channel-outbound";
 import { normalizeSecretInputString } from "openclaw/plugin-sdk/secret-input";
 import { runChannelProbe } from "openclaw/plugin-sdk/text-utility-runtime";
@@ -59,7 +59,7 @@ async function startZaloGatewayAccount(ctx) {
 		setStatus: ctx.setStatus
 	});
 	ctx.log?.info(`[${account.accountId}] starting provider${zaloBotLabel} mode=${mode}`);
-	const { monitorZaloProvider } = await import("./monitor-CkPLrWVm.mjs");
+	const { monitorZaloProvider } = await import("./monitor-K-P5Cxzh.mjs");
 	return monitorZaloProvider({
 		token,
 		account,

package/dist/.setup/{monitor-CkPLrWVm.mjs → monitor-K-P5Cxzh.mjs}

@@ -1,6 +1,6 @@
 import { n as resolveZaloRuntimeGroupPolicy, t as normalizeZaloAllowEntry } from "./group-access-Blsyu-ot.mjs";
 import { t as getZaloRuntime } from "./runtime-Dfhzt7qb.mjs";
-import { a as getUpdates, c as sendMessage, d as ZALO_OUTBOUND_MEDIA_TTL_MS, l as sendPhoto, n as ZaloApiError, o as getWebhookInfo, r as deleteWebhook, s as sendChatAction, t as resolveZaloProxyFetch, u as setWebhook } from "./send-K3VH6hzV.mjs";
+import { a as getUpdates, c as sendMessage, d as ZALO_OUTBOUND_MEDIA_TTL_MS, l as sendPhoto, n as ZaloApiError, o as getWebhookInfo, r as deleteWebhook, s as sendChatAction, t as resolveZaloProxyFetch, u as setWebhook } from "./send-DcAYX9XE.mjs";
 import { createMessageReceiptFromOutboundResults } from "openclaw/plugin-sdk/channel-outbound";
 import { deliverTextOrMediaReply, resolveSendableOutboundReplyParts } from "openclaw/plugin-sdk/reply-payload";
 import { normalizeOptionalString, normalizeStringEntries } from "openclaw/plugin-sdk/string-coerce-runtime";
@@ -194,7 +194,10 @@ function startPollingLoop(params) {
 	const poll = async () => {
 		if (isStopped() || abortSignal.aborted) return;
 		try {
-			const response = await getUpdates(token, { timeout: pollTimeout }, fetcher);
+			const response = await getUpdates(token, {
+				timeout: pollTimeout,
+				signal: abortSignal
+			}, fetcher);
 			if (isStopped() || abortSignal.aborted) return;
 			if (response.ok) statusSink?.(channelReadyPatch());
 			if (response.ok && response.result) {
@@ -640,8 +643,8 @@ async function monitorZaloProvider(options) {
 			stopHandlers.push(unregisterHostedMediaRoute);
 		}
 		if (useWebhook) {
-			const { registerZaloWebhookTarget, handleZaloWebhookRequest } = (await import("./monitor.webhook-B3g1irKn.mjs")).zaloWebhookRuntime;
-			const { createZaloWebhookIngress } = (await import("./webhook-spool-DejV9YSc.mjs")).zaloWebhookIngressRuntime;
+			const { registerZaloWebhookTarget, handleZaloWebhookRequest } = (await import("./monitor.webhook-CqCMBCij.mjs")).zaloWebhookRuntime;
+			const { createZaloWebhookIngress } = (await import("./webhook-spool-Cx5a0Wv0.mjs")).zaloWebhookIngressRuntime;
 			if (!effectiveWebhookUrl || !webhookSecret) throw new Error("Zalo webhookUrl and webhookSecret are required for webhook mode");
 			if (!effectiveWebhookUrl.startsWith("https://")) throw new Error("Zalo webhook URL must use HTTPS");
 			if (webhookSecret.length < 8 || webhookSecret.length > 256) throw new Error("Zalo webhook secret must be 8-256 characters");

package/dist/.setup/{monitor.webhook-B3g1irKn.mjs → monitor.webhook-CqCMBCij.mjs}

@@ -1,4 +1,4 @@
-import { ZaloWebhookPayloadError } from "./webhook-spool-DejV9YSc.mjs";
+import { ZaloWebhookPayloadError } from "./webhook-spool-Cx5a0Wv0.mjs";
 import { resolveClientIp } from "openclaw/plugin-sdk/core";
 import { WEBHOOK_ANOMALY_COUNTER_DEFAULTS, WEBHOOK_RATE_LIMIT_DEFAULTS, applyBasicWebhookRequestGuards, createFixedWindowRateLimiter, createWebhookAnomalyTracker, registerWebhookTarget, registerWebhookTargetWithPluginRoute, resolveWebhookTargetWithAuthOrRejectSync, withResolvedWebhookRequestPipeline } from "openclaw/plugin-sdk/webhook-ingress";
 import { safeEqualSecret } from "openclaw/plugin-sdk/security-runtime";

package/dist/.setup/secret-contract-api-BMxXSY78.mjs

@@ -0,0 +1,2 @@
+export { t as channelSecrets, n as collectRuntimeConfigAssignments, r as secretTargetRegistryEntries } from "./secret-contract-DF_0WQX4.mjs";
+import "../secret-contract-api.js";

package/dist/.setup/{send-K3VH6hzV.mjs → send-DcAYX9XE.mjs}

@@ -56,7 +56,7 @@ async function callZaloApi(method, token, body, options) {
 			method: "POST",
 			headers: { "Content-Type": "application/json" },
 			body: body ? JSON.stringify(body) : void 0,
-			signal: controller.signal
+			signal: options?.signal ? AbortSignal.any([controller.signal, options.signal]) : controller.signal
 		};
 		const response = await captureEffectAuthority().initiate(() => {
 			options?.assertDirectAdapterHandoff?.();
@@ -116,6 +116,7 @@ async function getUpdates(token, params, fetcher) {
 	const timeoutMs = (pollTimeoutSec + 5) * 1e3;
 	return callZaloApi("getUpdates", token, { timeout: String(pollTimeoutSec) }, {
 		timeoutMs,
+		signal: params?.signal,
 		fetch: fetcher
 	});
 }

package/dist/.setup/{setup-surface-Bzs4Hwk9.mjs → setup-surface-C1uIvO1X.mjs}

@@ -1,5 +1,5 @@
 import { a as noteZaloTokenHelp, n as zaloDmPolicy, o as promptZaloAllowFrom, s as inspectZaloAccount } from "./setup-core-BohTbM6i.mjs";
-import { DEFAULT_ACCOUNT_ID, buildSingleChannelSecretPromptState, createSetupTranslator, createStandardChannelSetupStatus, hasConfiguredSecretInput, patchTopLevelChannelConfigSection, promptSingleChannelSecretInput, runSingleChannelSecretStep } from "openclaw/plugin-sdk/setup";
+import { DEFAULT_ACCOUNT_ID, buildSingleChannelSecretPromptState, createSetupTranslator, createStandardChannelSetupStatus, hasConfiguredSecretInput, patchScopedAccountConfig, patchTopLevelChannelConfigSection, promptSingleChannelSecretInput, runSingleChannelSecretStep } from "openclaw/plugin-sdk/setup";
 //#region \0rolldown/runtime.js
 var __defProp = Object.defineProperty;
 var __exportAll = (all, no_symbols) => {
@@ -17,32 +17,22 @@ var setup_surface_exports = /* @__PURE__ */ __exportAll({ zaloSetupWizard: () =>
 const t = createSetupTranslator();
 const channel = "zalo";
 function setZaloUpdateMode(cfg, accountId, mode, webhookUrl, webhookSecret, webhookPath) {
-	const isDefault = accountId === DEFAULT_ACCOUNT_ID;
-	const next = { ...isDefault ? cfg.channels?.zalo : cfg.channels?.zalo?.accounts?.[accountId] };
-	if (mode === "polling") {
-		delete next.webhookUrl;
-		delete next.webhookSecret;
-		delete next.webhookPath;
-	} else {
-		next.webhookUrl = webhookUrl;
-		next.webhookSecret = webhookSecret;
-		next.webhookPath = webhookPath;
-	}
-	let patch = next;
-	if (!isDefault) {
-		const accounts = { ...cfg.channels?.zalo?.accounts };
-		accounts[accountId] = next;
-		patch = { accounts };
-	}
-	return patchTopLevelChannelConfigSection({
+	return patchScopedAccountConfig({
 		cfg,
-		channel,
-		clearFields: isDefault && mode === "polling" ? [
+		channelKey: channel,
+		accountId,
+		ensureChannelEnabled: false,
+		ensureAccountEnabled: false,
+		clearFields: mode === "polling" ? [
 			"webhookUrl",
 			"webhookSecret",
 			"webhookPath"
 		] : void 0,
-		patch
+		patch: mode === "polling" ? {} : {
+			webhookUrl,
+			webhookSecret,
+			webhookPath
+		}
 	});
 }
 const zaloSetupWizard = {
@@ -95,18 +85,15 @@ const zaloSetupWizard = {
 				enabled: true,
 				patch: {}
 			}) : currentCfg,
-			applySet: async (currentCfg, value) => patchTopLevelChannelConfigSection({
+			applySet: async (currentCfg, value) => patchScopedAccountConfig({
 				cfg: currentCfg,
-				channel,
-				enabled: true,
-				patch: accountId === DEFAULT_ACCOUNT_ID ? { botToken: value } : { accounts: {
-					...currentCfg.channels?.zalo?.accounts,
-					[accountId]: {
-						...currentCfg.channels?.zalo?.accounts?.[accountId],
-						enabled: true,
-						botToken: value
-					}
-				} }
+				channelKey: channel,
+				accountId,
+				patch: { botToken: value },
+				accountPatch: {
+					enabled: true,
+					botToken: value
+				}
 			})
 		})).cfg;
 		if (await prompter.confirm({

package/dist/.setup/{webhook-spool-DejV9YSc.mjs → webhook-spool-Cx5a0Wv0.mjs}

@@ -1,9 +1,9 @@
 import { t as getZaloRuntime } from "./runtime-Dfhzt7qb.mjs";
-import { n as ZaloApiError } from "./send-K3VH6hzV.mjs";
+import { n as ZaloApiError } from "./send-DcAYX9XE.mjs";
 import { DEFAULT_INGRESS_ADOPTION_STALL_MS, DEFAULT_INGRESS_RETRY_MAX_ATTEMPTS, bindIngressLifecycleToReplyOptions, createChannelIngressError, createChannelIngressMonitor } from "openclaw/plugin-sdk/channel-outbound";
-import { normalizeNullableString } from "openclaw/plugin-sdk/string-coerce-runtime";
+import { asOptionalObjectRecord, normalizeNullableString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { z } from "zod";
-import { formatErrorMessage } from "openclaw/plugin-sdk/error-runtime";
+import { collectErrorGraphCandidates, formatErrorMessage } from "openclaw/plugin-sdk/error-runtime";
 import { runDetachedWebhookWork } from "openclaw/plugin-sdk/webhook-request-guards";
 //#region extensions/zalo/src/message-schema.ts
 const nonEmptyWebhookStringSchema = z.string().transform((value) => normalizeNullableString(value)).pipe(z.string());
@@ -116,13 +116,10 @@ function parseClaimedUpdate(payload, claimedId) {
 	};
 }
 function isZaloAuthenticationFailure(error) {
-	let current = error;
-	const seen = /* @__PURE__ */ new Set();
-	while (current && typeof current === "object" && !seen.has(current)) {
-		seen.add(current);
-		const candidate = current;
-		if (current instanceof ZaloApiError && (current.errorCode === 401 || current.errorCode === 403) || candidate.status === 401 || candidate.status === 403 || candidate.statusCode === 401 || candidate.statusCode === 403) return true;
-		current = candidate.cause;
+	for (const current of collectErrorGraphCandidates(error, (candidate) => [candidate.cause])) {
+		const candidate = asOptionalObjectRecord(current);
+		if (!candidate) continue;
+		if (candidate instanceof ZaloApiError && (candidate.errorCode === 401 || candidate.errorCode === 403) || candidate.status === 401 || candidate.status === 403 || candidate.statusCode === 401 || candidate.statusCode === 403) return true;
 	}
 	return false;
 }

package/dist/api.js

@@ -1,5 +1,5 @@
 import { n as zaloDmPolicy, r as zaloSetupAdapter, t as createZaloSetupWizardProxy } from "./.setup/setup-core-BohTbM6i.mjs";
-import { t as zaloPlugin } from "./.setup/channel-BDoyUcaX.mjs";
+import { t as zaloPlugin } from "./.setup/channel-mEpOoL81.mjs";
 import { n as resolveZaloRuntimeGroupPolicy } from "./.setup/group-access-Blsyu-ot.mjs";
 import { zaloSetupWizard } from "./setup-api.js";
 export { createZaloSetupWizardProxy, resolveZaloRuntimeGroupPolicy, zaloDmPolicy, zaloPlugin, zaloSetupAdapter, zaloSetupWizard };

package/dist/channel-plugin-api.js

@@ -1,2 +1 @@
-import { t as zaloPlugin } from "./.setup/channel-BDoyUcaX.mjs";
-export { zaloPlugin };
+export { t as zaloPlugin } from "./.setup/channel-mEpOoL81.mjs";

package/dist/contract-api.js

@@ -1,2 +1 @@
-import { n as resolveZaloRuntimeGroupPolicy } from "./.setup/group-access-Blsyu-ot.mjs";
-export { resolveZaloRuntimeGroupPolicy };
+export { n as resolveZaloRuntimeGroupPolicy } from "./.setup/group-access-Blsyu-ot.mjs";

package/dist/runtime-api.js

@@ -1,2 +1 @@
-import { n as setZaloRuntime } from "./.setup/runtime-Dfhzt7qb.mjs";
-export { setZaloRuntime };
+export { n as setZaloRuntime } from "./.setup/runtime-Dfhzt7qb.mjs";

package/dist/secret-contract-api.js

@@ -1,2 +1 @@
-import { n as collectRuntimeConfigAssignments, r as secretTargetRegistryEntries, t as channelSecrets } from "./.setup/secret-contract-DF_0WQX4.mjs";
-export { channelSecrets, collectRuntimeConfigAssignments, secretTargetRegistryEntries };
+export { t as channelSecrets, n as collectRuntimeConfigAssignments, r as secretTargetRegistryEntries } from "./.setup/secret-contract-DF_0WQX4.mjs";

package/dist/setup-entry.js

@@ -4,11 +4,11 @@ import { fileURLToPath } from "node:url";
 var setup_entry_default = defineBundledChannelSetupEntry({
 	importMetaUrl: import.meta.url,
 	plugin: {
-		specifier: fileURLToPath(new URL(".setup/api-DcyxnTMW.mjs", import.meta.url).href),
+		specifier: fileURLToPath(new URL(".setup/api-wgJsO22l.mjs", import.meta.url).href),
 		exportName: "zaloPlugin"
 	},
 	secrets: {
-		specifier: fileURLToPath(new URL(".setup/secret-contract-api-CRklpdRx.mjs", import.meta.url).href),
+		specifier: fileURLToPath(new URL(".setup/secret-contract-api-BMxXSY78.mjs", import.meta.url).href),
 		exportName: "channelSecrets"
 	}
 });

package/dist/setup-surface.js

@@ -1,3 +1,3 @@
-import { n as zaloSetupWizard } from "./.setup/setup-surface-Bzs4Hwk9.mjs";
+import { n as zaloSetupWizard } from "./.setup/setup-surface-C1uIvO1X.mjs";
 import { r as zaloSetupAdapter } from "./.setup/setup-core-BohTbM6i.mjs";
 export { zaloSetupAdapter, zaloSetupWizard };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openclaw/zalo",
-  "version": "2026.10.5-beta.3",
+  "version": "2026.10.10-beta.1",
   "description": "OpenClaw Zalo channel plugin for bot and webhook chats.",
   "repository": {
     "type": "git",
@@ -8,7 +8,7 @@
   },
   "type": "module",
   "peerDependencies": {
-    "openclaw": ">=2026.10.5-beta.3"
+    "openclaw": ">=2026.10.10-beta.1"
   },
   "peerDependenciesMeta": {
     "openclaw": {
@@ -83,10 +83,10 @@
       "minHostVersion": ">=2026.9.8"
     },
     "compat": {
-      "pluginApi": ">=2026.10.5-beta.3"
+      "pluginApi": ">=2026.10.10-beta.1"
     },
     "build": {
-      "openclawVersion": "2026.10.5-beta.3"
+      "openclawVersion": "2026.10.10-beta.1"
     },
     "release": {
       "publishToClawHub": true,

package/dist/.setup/secret-contract-api-CRklpdRx.mjs

@@ -1,3 +0,0 @@
-import { n as collectRuntimeConfigAssignments, r as secretTargetRegistryEntries, t as channelSecrets } from "./secret-contract-DF_0WQX4.mjs";
-import "../secret-contract-api.js";
-export { channelSecrets, collectRuntimeConfigAssignments, secretTargetRegistryEntries };