@openclaw/zalo 2026.6.5-beta.1 → 2026.6.5-beta.3

package/dist/api.js

@@ -1,5 +1,5 @@
 import { n as zaloDmPolicy, r as zaloSetupAdapter, t as createZaloSetupWizardProxy } from "./setup-core-fwCh0QUi.js";
-import { t as zaloPlugin } from "./channel-DSMo5e3B.js";
+import { t as zaloPlugin } from "./channel-fQwAowmS.js";
 import { n as resolveZaloRuntimeGroupPolicy } from "./group-access-8qHRzDHx.js";
 import { zaloSetupWizard } from "./setup-api.js";
 export { createZaloSetupWizardProxy, resolveZaloRuntimeGroupPolicy, zaloDmPolicy, zaloPlugin, zaloSetupAdapter, zaloSetupWizard };

package/dist/{channel-DSMo5e3B.js → channel-fQwAowmS.js}

@@ -173,7 +173,7 @@ function normalizeZaloMessagingTarget(raw) {
 	if (!trimmed) return;
 	return trimmed.replace(/^(zalo|zl):/i, "").trim();
 }
-const loadZaloChannelRuntime = createLazyRuntimeModule(() => import("./channel.runtime-uSuM_HDe.js"));
+const loadZaloChannelRuntime = createLazyRuntimeModule(() => import("./channel.runtime-Dfy33H5M.js"));
 const zaloSetupWizard = createZaloSetupWizardProxy(async () => (await import("./setup-surface-8eRimod9.js")).zaloSetupWizard);
 const zaloTextChunkLimit = 2e3;
 const zaloRawSendResultAdapter = createRawChannelSendResultAdapter({

package/dist/channel-plugin-api.js

@@ -1,2 +1,2 @@
-import { t as zaloPlugin } from "./channel-DSMo5e3B.js";
+import { t as zaloPlugin } from "./channel-fQwAowmS.js";
 export { zaloPlugin };

package/dist/{channel.runtime-uSuM_HDe.js → channel.runtime-Dfy33H5M.js}

@@ -86,7 +86,7 @@ async function startZaloGatewayAccount(ctx) {
 		setStatus: ctx.setStatus
 	});
 	ctx.log?.info(`[${account.accountId}] starting provider${zaloBotLabel} mode=${mode}`);
-	const { monitorZaloProvider } = await import("./monitor-BEIaqyy1.js");
+	const { monitorZaloProvider } = await import("./monitor-BcYKNoj4.js");
 	return monitorZaloProvider({
 		token,
 		account,

package/dist/{monitor-BEIaqyy1.js → monitor-BcYKNoj4.js}

@@ -11,12 +11,7 @@ import { registerPluginHttpRoute, resolveWebhookPath } from "openclaw/plugin-sdk
 import { asDateTimestampMs, resolveExpiresAtMsFromDurationMs } from "openclaw/plugin-sdk/number-runtime";
 import { resolveStableChannelMessageIngress } from "openclaw/plugin-sdk/channel-ingress-runtime";
 import { waitForAbortSignal } from "openclaw/plugin-sdk/runtime-env";
-import { randomBytes } from "node:crypto";
-import { readFile, readdir, stat, unlink } from "node:fs/promises";
-import { join } from "node:path";
-import { loadOutboundMediaFromUrl } from "openclaw/plugin-sdk/outbound-media";
-import { privateFileStore } from "openclaw/plugin-sdk/security-runtime";
-import { resolvePreferredOpenClawTmpDir } from "openclaw/plugin-sdk/temp-path";
+import { createHostedOutboundMediaStore } from "openclaw/plugin-sdk/outbound-media";
 //#region extensions/zalo/src/monitor-durable.ts
 function prepareZaloDurableReplyPayload(params) {
 	if (!params.payload.text) return params.payload;
@@ -36,63 +31,32 @@ function resolveZaloDurableReplyOptions(params) {
 const ZALO_OUTBOUND_MEDIA_TTL_MS = 2 * 6e4;
 const ZALO_OUTBOUND_MEDIA_SEGMENT = "media";
 const ZALO_OUTBOUND_MEDIA_PREFIX = `/${ZALO_OUTBOUND_MEDIA_SEGMENT}/`;
-const ZALO_OUTBOUND_MEDIA_DIR_NAME = "openclaw-zalo-outbound-media";
-function resolveHostedZaloMediaDirName() {
-	const workerId = process.env.VITEST_WORKER_ID ?? process.env.VITEST_POOL_ID;
-	if (!workerId) return ZALO_OUTBOUND_MEDIA_DIR_NAME;
-	return `${ZALO_OUTBOUND_MEDIA_DIR_NAME}-${workerId.replaceAll(/[^a-zA-Z0-9_.-]/gu, "_")}`;
-}
-const ZALO_OUTBOUND_MEDIA_DIR = join(resolvePreferredOpenClawTmpDir(), resolveHostedZaloMediaDirName());
 const ZALO_OUTBOUND_MEDIA_ID_RE = /^[a-f0-9]{24}$/;
-function resolveHostedZaloMediaMetadataPath(id) {
-	return join(ZALO_OUTBOUND_MEDIA_DIR, `${id}.json`);
-}
-function resolveHostedZaloMediaBufferPath(id) {
-	return join(ZALO_OUTBOUND_MEDIA_DIR, `${id}.bin`);
-}
-function createHostedZaloMediaId() {
-	return randomBytes(12).toString("hex");
-}
-function createHostedZaloMediaToken() {
-	return randomBytes(24).toString("hex");
-}
-async function ensureHostedZaloMediaDir() {
-	await privateFileStore(ZALO_OUTBOUND_MEDIA_DIR).writeText(".ready", "");
-	await unlink(join(ZALO_OUTBOUND_MEDIA_DIR, ".ready")).catch(() => void 0);
-}
-async function deleteHostedZaloMediaEntry(id) {
-	await Promise.all([unlink(resolveHostedZaloMediaMetadataPath(id)).catch(() => void 0), unlink(resolveHostedZaloMediaBufferPath(id)).catch(() => void 0)]);
-}
-async function cleanupExpiredHostedZaloMedia(nowMs = Date.now()) {
-	const now = asDateTimestampMs(nowMs);
-	if (now === void 0) return;
-	let fileNames;
-	try {
-		fileNames = await readdir(ZALO_OUTBOUND_MEDIA_DIR);
-	} catch {
-		return;
-	}
-	await Promise.all(fileNames.filter((fileName) => fileName.endsWith(".json")).map(async (fileName) => {
-		const id = fileName.slice(0, -5);
-		try {
-			const metadataRaw = await readFile(resolveHostedZaloMediaMetadataPath(id), "utf8");
-			const expiresAt = asDateTimestampMs(JSON.parse(metadataRaw).expiresAt);
-			if (expiresAt === void 0 || expiresAt <= now) await deleteHostedZaloMediaEntry(id);
-		} catch {
-			await deleteHostedZaloMediaEntry(id);
-		}
-	}));
+const ZALO_OUTBOUND_MEDIA_NAMESPACE = "hosted-outbound-media";
+const ZALO_OUTBOUND_MEDIA_CHUNKS_NAMESPACE = "hosted-outbound-media-chunks";
+const ZALO_OUTBOUND_MEDIA_MAX_ENTRIES = 64;
+const ZALO_OUTBOUND_MEDIA_MAX_CHUNK_ROWS = ZALO_OUTBOUND_MEDIA_MAX_ENTRIES * 256;
+let hostedZaloMediaStore;
+function createHostedZaloMediaStore() {
+	const runtime = getZaloRuntime();
+	return createHostedOutboundMediaStore({
+		metadataStore: runtime.state.openKeyedStore({
+			namespace: ZALO_OUTBOUND_MEDIA_NAMESPACE,
+			maxEntries: 80
+		}),
+		chunkStore: runtime.state.openKeyedStore({
+			namespace: ZALO_OUTBOUND_MEDIA_CHUNKS_NAMESPACE,
+			maxEntries: ZALO_OUTBOUND_MEDIA_MAX_CHUNK_ROWS
+		}),
+		ttlMs: ZALO_OUTBOUND_MEDIA_TTL_MS,
+		maxEntries: ZALO_OUTBOUND_MEDIA_MAX_ENTRIES,
+		maxChunkRows: ZALO_OUTBOUND_MEDIA_MAX_CHUNK_ROWS,
+		resolveExpiresAtMs: (ttlMs) => resolveExpiresAtMsFromDurationMs(ttlMs)
+	});
 }
-async function readHostedZaloMediaEntry(id) {
-	try {
-		const [metadataRaw, buffer] = await Promise.all([readFile(resolveHostedZaloMediaMetadataPath(id), "utf8"), readFile(resolveHostedZaloMediaBufferPath(id))]);
-		return {
-			metadata: JSON.parse(metadataRaw),
-			buffer
-		};
-	} catch {
-		return null;
-	}
+function getHostedZaloMediaStore() {
+	hostedZaloMediaStore ??= createHostedZaloMediaStore();
+	return hostedZaloMediaStore;
 }
 function resolveHostedZaloMediaRoutePrefix(params) {
 	const webhookRoutePath = resolveWebhookPath({
@@ -107,39 +71,24 @@ function resolveHostedZaloMediaRoutePath(params) {
 	return `${resolveHostedZaloMediaRoutePrefix(params)}/`;
 }
 async function prepareHostedZaloMediaUrl(params) {
-	await ensureHostedZaloMediaDir();
-	await cleanupExpiredHostedZaloMedia();
 	const now = asDateTimestampMs(Date.now());
-	const expiresAt = now === void 0 ? void 0 : resolveExpiresAtMsFromDurationMs(ZALO_OUTBOUND_MEDIA_TTL_MS, { nowMs: now });
-	if (expiresAt === void 0) throw new Error("Zalo outbound media expiry could not be resolved");
-	const media = await loadOutboundMediaFromUrl(params.mediaUrl, {
-		maxBytes: params.maxBytes,
-		...params.proxyUrl ? { proxyUrl: params.proxyUrl } : {}
-	});
+	if ((now === void 0 ? void 0 : resolveExpiresAtMsFromDurationMs(ZALO_OUTBOUND_MEDIA_TTL_MS, { nowMs: now })) === void 0) throw new Error("Zalo outbound media expiry could not be resolved");
 	const routePath = resolveHostedZaloMediaRoutePath({
 		webhookUrl: params.webhookUrl,
 		webhookPath: params.webhookPath
 	});
-	const id = createHostedZaloMediaId();
-	const token = createHostedZaloMediaToken();
 	const publicBaseUrl = new URL(params.webhookUrl).origin;
-	const store = privateFileStore(ZALO_OUTBOUND_MEDIA_DIR);
-	await store.writeText(`${id}.bin`, media.buffer);
-	try {
-		await store.writeJson(`${id}.json`, {
-			routePath,
-			token,
-			contentType: media.contentType,
-			expiresAt
-		});
-	} catch (error) {
-		await deleteHostedZaloMediaEntry(id);
-		throw error;
-	}
-	return `${publicBaseUrl}${routePath}${id}?token=${token}`;
+	return await getHostedZaloMediaStore().prepareUrl({
+		mediaUrl: params.mediaUrl,
+		routePath,
+		publicBaseUrl,
+		maxBytes: params.maxBytes,
+		...params.proxyUrl ? { proxyUrl: params.proxyUrl } : {}
+	});
 }
 async function tryHandleHostedZaloMediaRequest(req, res) {
-	await cleanupExpiredHostedZaloMedia();
+	const store = getHostedZaloMediaStore();
+	await store.cleanupExpired();
 	const method = req.method ?? "GET";
 	if (method !== "GET" && method !== "HEAD") return false;
 	let url;
@@ -158,16 +107,22 @@ async function tryHandleHostedZaloMediaRequest(req, res) {
 		res.end("Not Found");
 		return true;
 	}
-	const entry = await readHostedZaloMediaEntry(id);
+	const now = asDateTimestampMs(Date.now());
+	if (now === void 0) {
+		await store.delete(id);
+		res.statusCode = 410;
+		res.end("Expired");
+		return true;
+	}
+	const entry = await store.read(id, now);
 	if (!entry || entry.metadata.routePath !== routePath) {
 		res.statusCode = 404;
 		res.end("Not Found");
 		return true;
 	}
-	const now = asDateTimestampMs(Date.now());
 	const expiresAt = asDateTimestampMs(entry.metadata.expiresAt);
-	if (now === void 0 || expiresAt === void 0 || expiresAt <= now) {
-		await deleteHostedZaloMediaEntry(id);
+	if (expiresAt === void 0 || expiresAt <= now) {
+		await store.delete(id);
 		res.statusCode = 410;
 		res.end("Expired");
 		return true;
@@ -180,8 +135,7 @@ async function tryHandleHostedZaloMediaRequest(req, res) {
 	if (entry.metadata.contentType) res.setHeader("Content-Type", entry.metadata.contentType);
 	res.setHeader("Cache-Control", "no-store");
 	res.setHeader("X-Content-Type-Options", "nosniff");
-	const bufferStats = await stat(resolveHostedZaloMediaBufferPath(id)).catch(() => null);
-	if (bufferStats) res.setHeader("Content-Length", String(bufferStats.size));
+	res.setHeader("Content-Length", String(entry.metadata.byteLength));
 	if (method === "HEAD") {
 		res.statusCode = 200;
 		res.end();
@@ -189,7 +143,7 @@ async function tryHandleHostedZaloMediaRequest(req, res) {
 	}
 	res.statusCode = 200;
 	res.end(entry.buffer);
-	await deleteHostedZaloMediaEntry(id);
+	await store.delete(id);
 	return true;
 }
 //#endregion
@@ -201,7 +155,7 @@ const ZALO_TYPING_TIMEOUT_MS = 5e3;
 let zaloWebhookModulePromise;
 const hostedMediaRouteRefs = /* @__PURE__ */ new Map();
 function loadZaloWebhookModule() {
-	zaloWebhookModulePromise ??= import("./monitor.webhook-BSYRYNHE.js");
+	zaloWebhookModulePromise ??= import("./monitor.webhook-B23mUx-y.js");
 	return zaloWebhookModulePromise;
 }
 function registerSharedHostedMediaRoute(params) {

package/npm-shrinkwrap.json

@@ -1,17 +1,17 @@
 {
   "name": "@openclaw/zalo",
-  "version": "2026.6.5-beta.1",
+  "version": "2026.6.5-beta.3",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@openclaw/zalo",
-      "version": "2026.6.5-beta.1",
+      "version": "2026.6.5-beta.3",
       "dependencies": {
         "zod": "4.4.3"
       },
       "peerDependencies": {
-        "openclaw": ">=2026.6.5-beta.1"
+        "openclaw": ">=2026.6.5-beta.3"
       },
       "peerDependenciesMeta": {
         "openclaw": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openclaw/zalo",
-  "version": "2026.6.5-beta.1",
+  "version": "2026.6.5-beta.3",
   "description": "OpenClaw Zalo channel plugin for bot and webhook chats.",
   "repository": {
     "type": "git",
@@ -8,7 +8,7 @@
   },
   "type": "module",
   "peerDependencies": {
-    "openclaw": ">=2026.6.5-beta.1"
+    "openclaw": ">=2026.6.5-beta.3"
   },
   "peerDependenciesMeta": {
     "openclaw": {
@@ -39,10 +39,10 @@
       "minHostVersion": ">=2026.4.10"
     },
     "compat": {
-      "pluginApi": ">=2026.6.5-beta.1"
+      "pluginApi": ">=2026.6.5-beta.3"
     },
     "build": {
-      "openclawVersion": "2026.6.5-beta.1"
+      "openclawVersion": "2026.6.5-beta.3"
     },
     "release": {
       "publishToClawHub": true,

package/dist/{monitor.webhook-BSYRYNHE.js → monitor.webhook-B23mUx-y.js}

@@ -1,6 +1,6 @@
 import { B as registerWebhookTargetWithPluginRoute, I as readJsonWebhookBodyOrReject, K as resolveWebhookTargetWithAuthOrRejectSync, Q as withResolvedWebhookRequestPipeline, V as resolveClientIp, a as WEBHOOK_ANOMALY_COUNTER_DEFAULTS, b as createFixedWindowRateLimiter, l as applyBasicWebhookRequestGuards, o as WEBHOOK_RATE_LIMIT_DEFAULTS, x as createWebhookAnomalyTracker, z as registerWebhookTarget } from "./runtime-api-CDwUY_-_.js";
-import { safeEqualSecret } from "openclaw/plugin-sdk/security-runtime";
 import { createClaimableDedupe } from "openclaw/plugin-sdk/persistent-dedupe";
+import { safeEqualSecret } from "openclaw/plugin-sdk/security-runtime";
 //#region extensions/zalo/src/monitor.webhook.ts
 const ZALO_WEBHOOK_REPLAY_WINDOW_MS = 5 * 6e4;
 const webhookTargets = /* @__PURE__ */ new Map();