@openclaw/zalo 2026.7.2-beta.7 → 2026.7.33

package/dist/{send-BUvbbedq.js → .setup/send-CNCw5UOt.mjs}

@@ -1,17 +1,11 @@
-import { d as resolveZaloAccount, f as resolveZaloToken } from "./setup-core-LzhuTlsD.js";
+import { d as resolveZaloToken, u as resolveZaloAccount } from "./setup-core-BLbVCFpT.mjs";
 import { createMessageReceiptFromOutboundResults } from "openclaw/plugin-sdk/channel-outbound";
-import { stripChannelTargetPrefix, stripTargetKindPrefix } from "openclaw/plugin-sdk/core";
 import { formatErrorMessage } from "openclaw/plugin-sdk/error-runtime";
 import { truncateUtf16Safe } from "openclaw/plugin-sdk/text-utility-runtime";
 import { resolveTimerTimeoutMs } from "openclaw/plugin-sdk/number-runtime";
 import { readProviderJsonResponse } from "openclaw/plugin-sdk/provider-http";
 import { resolvePinnedHostnameWithPolicy } from "openclaw/plugin-sdk/ssrf-runtime";
 import { makeProxyFetch } from "openclaw/plugin-sdk/fetch-runtime";
-//#region extensions/zalo/src/timeouts.ts
-const ZALO_DEFAULT_REQUEST_TIMEOUT_MS = 3e4;
-const ZALO_OUTBOUND_MEDIA_TTL_MS = 2 * 6e4;
-const ZALO_SEND_PHOTO_REQUEST_TIMEOUT_MS = 15e4;
-//#endregion
 //#region extensions/zalo/src/api.ts
 /**
 * Zalo Bot API client
@@ -51,20 +45,21 @@ function resolveZaloApiUrl(apiUrl) {
 async function callZaloApi(method, token, body, options) {
 	const url = `${resolveZaloApiUrl(options?.apiUrl)}/bot${token}/${method}`;
 	const controller = new AbortController();
-	const requestTimeoutMs = resolveTimerTimeoutMs(options?.timeoutMs, ZALO_DEFAULT_REQUEST_TIMEOUT_MS);
-	const timeoutId = setTimeout(() => controller.abort(), requestTimeoutMs);
+	const requestTimeoutMs = options?.timeoutMs === void 0 ? void 0 : resolveTimerTimeoutMs(options.timeoutMs, 1);
+	const timeoutId = requestTimeoutMs === void 0 ? void 0 : setTimeout(() => controller.abort(), requestTimeoutMs);
 	const fetcher = options?.fetch ?? fetch;
 	try {
-		const data = await readProviderJsonResponse(await fetcher(url, {
+		const response = await fetcher(url, {
 			method: "POST",
 			headers: { "Content-Type": "application/json" },
 			body: body ? JSON.stringify(body) : void 0,
 			signal: controller.signal
-		}), `zalo.${method}`);
+		});
+		const data = await readProviderJsonResponse(response, `zalo.${method}`);
 		if (!data.ok) throw new ZaloApiError(data.description ?? `Zalo API error: ${method}`, data.error_code, data.description);
 		return data;
 	} finally {
-		clearTimeout(timeoutId);
+		if (timeoutId) clearTimeout(timeoutId);
 	}
 }
 /**
@@ -98,10 +93,7 @@ async function sendPhoto(token, params, fetcher) {
 	return callZaloApi("sendPhoto", token, {
 		...params,
 		photo: parsedPhotoUrl.href
-	}, {
-		timeoutMs: ZALO_SEND_PHOTO_REQUEST_TIMEOUT_MS,
-		fetch: fetcher
-	});
+	}, { fetch: fetcher });
 }
 /**
 * Send a temporary chat action such as typing.
@@ -232,7 +224,7 @@ function resolveValidatedSendContext(chatId, options) {
 		ok: false,
 		error: "No Zalo bot token configured"
 	};
-	const trimmedChatId = normalizeZaloSendChatId(chatId);
+	const trimmedChatId = chatId?.trim();
 	if (!trimmedChatId) return {
 		ok: false,
 		error: "No chat_id provided"
@@ -244,9 +236,6 @@ function resolveValidatedSendContext(chatId, options) {
 		fetcher
 	};
 }
-function normalizeZaloSendChatId(chatId) {
-	return stripTargetKindPrefix(stripChannelTargetPrefix(chatId, "zalo", "zl"));
-}
 function resolveSendContextOrFailure(chatId, options) {
 	const context = resolveValidatedSendContext(chatId, options);
 	return context.ok ? { context } : { failure: {
@@ -297,4 +286,4 @@ async function sendPhotoZalo(chatId, photoUrl, options = {}) {
 	}, context.fetcher))());
 }
 //#endregion
-export { getMe as a, sendChatAction as c, setWebhook as d, ZALO_OUTBOUND_MEDIA_TTL_MS as f, deleteWebhook as i, sendMessage as l, resolveZaloProxyFetch as n, getUpdates as o, ZaloApiError as r, getWebhookInfo as s, sendMessageZalo as t, sendPhoto as u };
+export { getMe as a, sendChatAction as c, setWebhook as d, deleteWebhook as i, sendMessage as l, resolveZaloProxyFetch as n, getUpdates as o, ZaloApiError as r, getWebhookInfo as s, sendMessageZalo as t, sendPhoto as u };

package/dist/{setup-core-LzhuTlsD.js → .setup/setup-core-BLbVCFpT.mjs}

@@ -1,12 +1,10 @@
-import { createAccountListHelpers } from "openclaw/plugin-sdk/account-helpers";
+import { createAccountListHelpers, resolveMergedAccountConfig } from "openclaw/plugin-sdk/account-helpers";
 import { DEFAULT_ACCOUNT_ID, normalizeAccountId } from "openclaw/plugin-sdk/account-id";
 import { normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { tryReadSecretFileSync } from "openclaw/plugin-sdk/core";
 import { resolveAccountEntry } from "openclaw/plugin-sdk/routing";
-import { buildSecretInputSchema, normalizeSecretInputString, resolveSecretInputString } from "openclaw/plugin-sdk/secret-input";
-import { createChannelDmPolicy } from "openclaw/plugin-sdk/channel-dm-policy";
-import { defineChannelSetupContract } from "openclaw/plugin-sdk/channel-setup";
-import { DEFAULT_ACCOUNT_ID as DEFAULT_ACCOUNT_ID$1, createDelegatedSetupWizardProxy, createPatchedAccountSetupAdapter, createSetupInputPresenceValidator, createSetupTranslator, formatDocsLink, mergeAllowFromEntries, normalizeAccountId as normalizeAccountId$1, patchScopedAccountConfig, setSetupChannelEnabled } from "openclaw/plugin-sdk/setup";
+import { buildSecretInputSchema, normalizeResolvedSecretInputString, normalizeSecretInputString } from "openclaw/plugin-sdk/secret-input";
+import { DEFAULT_ACCOUNT_ID as DEFAULT_ACCOUNT_ID$1, addWildcardAllowFrom, createDelegatedSetupWizardProxy, createPatchedAccountSetupAdapter, createSetupInputPresenceValidator, createSetupTranslator, formatDocsLink, mergeAllowFromEntries, normalizeAccountId as normalizeAccountId$1 } from "openclaw/plugin-sdk/setup";
 //#region \0rolldown/runtime.js
 var __defProp = Object.defineProperty;
 var __exportAll = (all, no_symbols) => {
@@ -30,116 +28,95 @@ function resolveZaloToken(config, accountId, options) {
 	const accountConfig = resolveAccountEntry(baseConfig?.accounts, normalizeAccountId(resolvedAccountId));
 	const accountHasBotToken = Boolean(accountConfig && Object.hasOwn(accountConfig, "botToken"));
 	if (accountConfig && accountHasBotToken) {
-		const token = resolveSecretInputString({
+		const token = options?.allowUnresolvedSecretRef ? normalizeSecretInputString(accountConfig.botToken) : normalizeResolvedSecretInputString({
 			value: accountConfig.botToken,
-			path: `channels.zalo.accounts.${resolvedAccountId}.botToken`,
-			mode: options?.mode
+			path: `channels.zalo.accounts.${resolvedAccountId}.botToken`
 		});
-		if (token.status === "available") return {
-			token: token.value,
-			source: "config",
-			status: "available"
-		};
-		if (token.status === "configured_unavailable") return {
-			token: "",
-			source: "config",
-			status: "configured_unavailable"
+		if (token) return {
+			token,
+			source: "config"
 		};
 		const fileToken = readTokenFromFile(accountConfig.tokenFile);
 		if (fileToken) return {
 			token: fileToken,
-			source: "configFile",
-			status: "available"
+			source: "configFile"
 		};
 	}
 	if (!accountHasBotToken) {
 		const fileToken = readTokenFromFile(accountConfig?.tokenFile);
 		if (fileToken) return {
 			token: fileToken,
-			source: "configFile",
-			status: "available"
+			source: "configFile"
 		};
 	}
 	if (!accountHasBotToken) {
-		const token = resolveSecretInputString({
+		const token = options?.allowUnresolvedSecretRef ? normalizeSecretInputString(baseConfig?.botToken) : normalizeResolvedSecretInputString({
 			value: baseConfig?.botToken,
-			path: "channels.zalo.botToken",
-			mode: options?.mode
+			path: "channels.zalo.botToken"
 		});
-		if (token.status === "available") return {
-			token: token.value,
-			source: "config",
-			status: "available"
-		};
-		if (token.status === "configured_unavailable") return {
-			token: "",
-			source: "config",
-			status: "configured_unavailable"
+		if (token) return {
+			token,
+			source: "config"
 		};
 		const fileToken = readTokenFromFile(baseConfig?.tokenFile);
 		if (fileToken) return {
 			token: fileToken,
-			source: "configFile",
-			status: "available"
+			source: "configFile"
 		};
 	}
 	if (isDefaultAccount) {
 		const envToken = process.env.ZALO_BOT_TOKEN?.trim();
 		if (envToken) return {
 			token: envToken,
-			source: "env",
-			status: "available"
+			source: "env"
 		};
 	}
 	return {
 		token: "",
-		source: "none",
-		status: "missing"
+		source: "none"
 	};
 }
 //#endregion
 //#region extensions/zalo/src/accounts.ts
 var accounts_exports = /* @__PURE__ */ __exportAll({
-	inspectZaloAccount: () => inspectZaloAccount,
+	listEnabledZaloAccounts: () => listEnabledZaloAccounts,
 	listZaloAccountIds: () => listZaloAccountIds,
 	resolveDefaultZaloAccountId: () => resolveDefaultZaloAccountId,
 	resolveZaloAccount: () => resolveZaloAccount
 });
-const { listAccountIds: listZaloAccountIds, resolveDefaultAccountId: resolveDefaultZaloAccountId, resolveAccountConfig: mergeZaloAccountConfig } = createAccountListHelpers("zalo", {
-	omitKeys: ["defaultAccount"],
-	implicitDefaultAccount: {
-		channelKeys: ["botToken", "tokenFile"],
-		envVars: ["ZALO_BOT_TOKEN"]
-	}
-});
-function resolveZaloAccountWithMode(params) {
+const { listAccountIds: listZaloAccountIds, resolveDefaultAccountId: resolveDefaultZaloAccountId } = createAccountListHelpers("zalo", { implicitDefaultAccount: {
+	channelKeys: ["botToken", "tokenFile"],
+	envVars: ["ZALO_BOT_TOKEN"]
+} });
+function mergeZaloAccountConfig(cfg, accountId) {
+	return resolveMergedAccountConfig({
+		channelConfig: cfg.channels?.zalo,
+		accounts: (cfg.channels?.zalo)?.accounts,
+		accountId,
+		omitKeys: ["defaultAccount"]
+	});
+}
+function resolveZaloAccount(params) {
 	const accountId = normalizeAccountId(params.accountId ?? (params.cfg.channels?.zalo)?.defaultAccount);
 	const baseEnabled = (params.cfg.channels?.zalo)?.enabled !== false;
 	const merged = mergeZaloAccountConfig(params.cfg, accountId);
 	const accountEnabled = merged.enabled !== false;
 	const enabled = baseEnabled && accountEnabled;
-	const tokenResolution = resolveZaloToken(params.cfg.channels?.zalo, accountId, { mode: params.mode });
+	const tokenResolution = resolveZaloToken(params.cfg.channels?.zalo, accountId, { allowUnresolvedSecretRef: params.allowUnresolvedSecretRef });
 	return {
 		accountId,
 		name: normalizeOptionalString(merged.name),
 		enabled,
 		token: tokenResolution.token,
 		tokenSource: tokenResolution.source,
-		tokenStatus: tokenResolution.status,
 		config: merged
 	};
 }
-function resolveZaloAccount(params) {
-	return resolveZaloAccountWithMode({
-		...params,
-		mode: "strict"
-	});
-}
-function inspectZaloAccount(params) {
-	return resolveZaloAccountWithMode({
-		...params,
-		mode: "inspect"
-	});
+function listEnabledZaloAccounts(cfg) {
+	return listZaloAccountIds(cfg).map((accountId) => resolveZaloAccount({
+		cfg,
+		accountId
+	})).filter((account) => account.enabled);
 }
 //#endregion
 //#region extensions/zalo/src/setup-allow-from.ts
@@ -160,7 +137,7 @@ async function promptZaloAllowFrom(params) {
 		cfg,
 		accountId
 	}).config.allowFrom ?? [];
-	const unique = mergeAllowFromEntries(existingAllowFrom, [(await prompter.text({
+	const normalized = (await prompter.text({
 		message: t$1("wizard.zalo.allowFromPrompt"),
 		placeholder: "123456789",
 		initialValue: existingAllowFrom[0] ? String(existingAllowFrom[0]) : void 0,
@@ -169,7 +146,8 @@ async function promptZaloAllowFrom(params) {
 			if (!raw) return t$1("common.required");
 			if (!/^\d+$/.test(raw)) return t$1("wizard.zalo.allowFromNumeric");
 		}
-	})).trim()]);
+	})).trim();
+	const unique = mergeAllowFromEntries(existingAllowFrom, [normalized]);
 	if (accountId === DEFAULT_ACCOUNT_ID$1) return {
 		...cfg,
 		channels: {
@@ -207,69 +185,78 @@ async function promptZaloAllowFrom(params) {
 //#region extensions/zalo/src/setup-core.ts
 const t = createSetupTranslator();
 const channel = "zalo";
-const zaloSetupAdapter = {
-	...createPatchedAccountSetupAdapter({
-		channelKey: channel,
-		validateInput: createSetupInputPresenceValidator({
-			defaultAccountOnlyEnvError: "ZALO_BOT_TOKEN can only be used for the default account.",
-			whenNotUseEnv: [{
-				someOf: ["token", "tokenFile"],
-				message: "Zalo requires token or --token-file (or --use-env)."
-			}]
-		}),
-		buildPatch: (input) => input.useEnv ? {} : input.tokenFile ? { tokenFile: input.tokenFile } : input.token ? { botToken: input.token } : {}
+const zaloSetupAdapter = createPatchedAccountSetupAdapter({
+	channelKey: channel,
+	validateInput: createSetupInputPresenceValidator({
+		defaultAccountOnlyEnvError: "ZALO_BOT_TOKEN can only be used for the default account.",
+		whenNotUseEnv: [{
+			someOf: ["token", "tokenFile"],
+			message: "Zalo requires token or --token-file (or --use-env)."
+		}]
 	}),
-	singleAccountKeysToMove: ["webhookSecret", "tokenFile"]
-};
-const zaloSetupContract = defineChannelSetupContract({
-	fields: {
-		token: {
-			kind: "string",
-			sensitive: true,
-			cli: {
-				flags: "--token <token>",
-				description: "Zalo bot token"
-			}
-		},
-		tokenFile: {
-			kind: "string",
-			sensitive: true,
-			cli: {
-				flags: "--token-file <path>",
-				description: "Zalo bot token file"
-			}
-		},
-		useEnv: {
-			kind: "boolean",
-			cli: {
-				flags: "--use-env",
-				description: "Use ZALO_BOT_TOKEN"
-			}
-		}
-	},
-	legacyAdapter: zaloSetupAdapter
+	buildPatch: (input) => input.useEnv ? {} : input.tokenFile ? { tokenFile: input.tokenFile } : input.token ? { botToken: input.token } : {}
 });
-const zaloDmPolicy = createChannelDmPolicy({
+const zaloDmPolicy = {
 	label: "Zalo",
 	channel,
-	resolveAccount: (cfg, accountId) => {
-		return resolveZaloAccount({
+	policyKey: "channels.zalo.dmPolicy",
+	allowFromKey: "channels.zalo.allowFrom",
+	resolveConfigKeys: (cfg, accountId) => (accountId ?? resolveDefaultZaloAccountId(cfg)) !== DEFAULT_ACCOUNT_ID$1 ? {
+		policyKey: `channels.zalo.accounts.${accountId ?? resolveDefaultZaloAccountId(cfg)}.dmPolicy`,
+		allowFromKey: `channels.zalo.accounts.${accountId ?? resolveDefaultZaloAccountId(cfg)}.allowFrom`
+	} : {
+		policyKey: "channels.zalo.dmPolicy",
+		allowFromKey: "channels.zalo.allowFrom"
+	},
+	getCurrent: (cfg, accountId) => resolveZaloAccount({
+		cfg,
+		accountId: accountId ?? resolveDefaultZaloAccountId(cfg)
+	}).config.dmPolicy ?? "pairing",
+	setPolicy: (cfg, policy, accountId) => {
+		const resolvedAccountId = accountId && normalizeAccountId$1(accountId) ? normalizeAccountId$1(accountId) ?? DEFAULT_ACCOUNT_ID$1 : resolveDefaultZaloAccountId(cfg);
+		const resolved = resolveZaloAccount({
 			cfg,
-			accountId: accountId && normalizeAccountId$1(accountId) ? normalizeAccountId$1(accountId) ?? DEFAULT_ACCOUNT_ID$1 : resolveDefaultZaloAccountId(cfg)
+			accountId: resolvedAccountId
 		});
+		if (resolvedAccountId === DEFAULT_ACCOUNT_ID$1) return {
+			...cfg,
+			channels: {
+				...cfg.channels,
+				zalo: {
+					...cfg.channels?.zalo,
+					enabled: true,
+					dmPolicy: policy,
+					...policy === "open" ? { allowFrom: addWildcardAllowFrom(resolved.config.allowFrom) } : {}
+				}
+			}
+		};
+		const currentAccount = cfg.channels?.zalo?.accounts?.[resolvedAccountId];
+		return {
+			...cfg,
+			channels: {
+				...cfg.channels,
+				zalo: {
+					...cfg.channels?.zalo,
+					enabled: true,
+					accounts: {
+						...cfg.channels?.zalo?.accounts,
+						[resolvedAccountId]: {
+							...currentAccount,
+							enabled: currentAccount?.enabled ?? true,
+							dmPolicy: policy,
+							...policy === "open" ? { allowFrom: addWildcardAllowFrom(resolved.config.allowFrom) } : {}
+						}
+					}
+				}
+			}
+		};
 	},
-	applyPatch: ({ cfg, account, patch }) => patchScopedAccountConfig({
-		cfg,
-		channelKey: channel,
-		accountId: account.accountId,
-		patch
-	}),
 	promptAllowFrom: async ({ cfg, prompter, accountId }) => promptZaloAllowFrom({
 		cfg,
 		prompter,
 		accountId: accountId ?? resolveDefaultZaloAccountId(cfg)
 	})
-});
+};
 function createZaloSetupWizardProxy(loadWizard) {
 	return createDelegatedSetupWizardProxy({
 		channel,
@@ -285,8 +272,17 @@ function createZaloSetupWizardProxy(loadWizard) {
 		credentials: [],
 		delegateFinalize: true,
 		dmPolicy: zaloDmPolicy,
-		disable: (cfg) => setSetupChannelEnabled(cfg, channel, false)
+		disable: (cfg) => ({
+			...cfg,
+			channels: {
+				...cfg.channels,
+				zalo: {
+					...cfg.channels?.zalo,
+					enabled: false
+				}
+			}
+		})
 	});
 }
 //#endregion
-export { noteZaloTokenHelp as a, inspectZaloAccount as c, resolveZaloAccount as d, resolveZaloToken as f, zaloSetupContract as i, listZaloAccountIds as l, normalizeSecretInputString as m, zaloDmPolicy as n, promptZaloAllowFrom as o, buildSecretInputSchema as p, zaloSetupAdapter as r, accounts_exports as s, createZaloSetupWizardProxy as t, resolveDefaultZaloAccountId as u };
+export { promptZaloAllowFrom as a, listZaloAccountIds as c, resolveZaloToken as d, buildSecretInputSchema as f, noteZaloTokenHelp as i, resolveDefaultZaloAccountId as l, zaloDmPolicy as n, accounts_exports as o, normalizeSecretInputString as p, zaloSetupAdapter as r, listEnabledZaloAccounts as s, createZaloSetupWizardProxy as t, resolveZaloAccount as u };

package/dist/{setup-surface-CQMbpZye.js → .setup/setup-surface-gn6fs9pd.mjs}

@@ -1,4 +1,4 @@
-import { a as noteZaloTokenHelp, c as inspectZaloAccount, n as zaloDmPolicy, o as promptZaloAllowFrom } from "./setup-core-LzhuTlsD.js";
+import { a as promptZaloAllowFrom, i as noteZaloTokenHelp, n as zaloDmPolicy, u as resolveZaloAccount } from "./setup-core-BLbVCFpT.mjs";
 import { DEFAULT_ACCOUNT_ID, buildSingleChannelSecretPromptState, createSetupTranslator, createStandardChannelSetupStatus, hasConfiguredSecretInput, promptSingleChannelSecretInput, runSingleChannelSecretStep } from "openclaw/plugin-sdk/setup";
 //#region extensions/zalo/src/setup-surface.ts
 const t = createSetupTranslator();
@@ -72,9 +72,10 @@ const zaloSetupWizard = {
 		unconfiguredScore: 10,
 		includeStatusLine: true,
 		resolveConfigured: ({ cfg, accountId }) => {
-			const account = inspectZaloAccount({
+			const account = resolveZaloAccount({
 				cfg,
-				accountId
+				accountId,
+				allowUnresolvedSecretRef: true
 			});
 			return Boolean(account.token) || hasConfiguredSecretInput(account.config.botToken) || Boolean(account.config.tokenFile?.trim());
 		}
@@ -82,9 +83,10 @@ const zaloSetupWizard = {
 	credentials: [],
 	finalize: async ({ cfg, accountId, forceAllowFrom, options, prompter }) => {
 		let next = cfg;
-		const resolvedAccount = inspectZaloAccount({
+		const resolvedAccount = resolveZaloAccount({
 			cfg: next,
-			accountId
+			accountId,
+			allowUnresolvedSecretRef: true
 		});
 		const accountConfigured = Boolean(resolvedAccount.token);
 		const allowEnv = accountId === DEFAULT_ACCOUNT_ID;

package/dist/api.js

@@ -1,5 +1,5 @@
-import { n as zaloDmPolicy, r as zaloSetupAdapter, t as createZaloSetupWizardProxy } from "./setup-core-LzhuTlsD.js";
-import { t as zaloPlugin } from "./channel-idqJI6YK.js";
-import { n as resolveZaloRuntimeGroupPolicy } from "./group-access-8qHRzDHx.js";
+import { n as zaloDmPolicy, r as zaloSetupAdapter, t as createZaloSetupWizardProxy } from "./.setup/setup-core-BLbVCFpT.mjs";
+import { t as zaloPlugin } from "./.setup/channel-ChIucoCG.mjs";
+import { n as resolveZaloRuntimeGroupPolicy } from "./.setup/group-access-8qHRzDHx.mjs";
 import { zaloSetupWizard } from "./setup-api.js";
 export { createZaloSetupWizardProxy, resolveZaloRuntimeGroupPolicy, zaloDmPolicy, zaloPlugin, zaloSetupAdapter, zaloSetupWizard };

package/dist/channel-plugin-api.js

@@ -1,2 +1,2 @@
-import { t as zaloPlugin } from "./channel-idqJI6YK.js";
+import { t as zaloPlugin } from "./.setup/channel-ChIucoCG.mjs";
 export { zaloPlugin };

package/dist/contract-api.js

@@ -1,2 +1,2 @@
-import { n as resolveZaloRuntimeGroupPolicy } from "./group-access-8qHRzDHx.js";
+import { n as resolveZaloRuntimeGroupPolicy } from "./.setup/group-access-8qHRzDHx.mjs";
 export { resolveZaloRuntimeGroupPolicy };

package/dist/runtime-api.js

@@ -1,2 +1,2 @@
-import { A as mergeAllowFromEntries, B as registerWebhookTargetWithPluginRoute, C as formatAllowFromLowercase, D as isNumericTargetId, E as isNormalizedSenderAllowed, F as promptSingleChannelSecretInput, G as resolveWebhookTargetWithAuthOrRejectSync, H as resolveDefaultGroupPolicy, I as readJsonWebhookBodyOrReject, J as setTopLevelChannelDmPolicyWithAllowFrom, K as runSingleChannelSecretStep, L as readStringParam, M as normalizeAccountId, N as normalizeResolvedSecretInputString, O as jsonResult, P as normalizeSecretInputString, R as registerPluginHttpRoute, S as deliverTextOrMediaReply, T as hasConfiguredSecretInput, U as resolveOpenProviderRuntimeGroupPolicy, V as resolveClientIp, W as resolveWebhookPath, X as warnMissingProviderGroupPolicyFallbackOnce, Y as waitForAbortSignal, Z as withResolvedWebhookRequestPipeline, _ as createChannelMessageReplyPipeline, a as WEBHOOK_ANOMALY_COUNTER_DEFAULTS, b as createFixedWindowRateLimiter, c as applyAccountNameToChannelSection, d as buildBaseAccountStatusSnapshot, f as buildChannelConfigSchema, g as chunkTextForOutbound, h as buildTokenChannelStatusSummary, i as PAIRING_APPROVED_MESSAGE, j as migrateBaseNameToDefaultAccount, k as logTypingFailure, l as applyBasicWebhookRequestGuards, m as buildSingleChannelSecretPromptState, n as setZaloRuntime, o as WEBHOOK_RATE_LIMIT_DEFAULTS, p as buildSecretInputSchema, q as sendPayloadWithChunkedTextAndMedia, r as DEFAULT_ACCOUNT_ID, s as addWildcardAllowFrom, u as applySetupAccountConfigPatch, v as createChannelPairingController, w as formatPairingApproveHint, x as createWebhookAnomalyTracker, y as createDedupeCache, z as registerWebhookTarget } from "./runtime-api-qxdOyk3M.js";
-export { DEFAULT_ACCOUNT_ID, PAIRING_APPROVED_MESSAGE, WEBHOOK_ANOMALY_COUNTER_DEFAULTS, WEBHOOK_RATE_LIMIT_DEFAULTS, addWildcardAllowFrom, applyAccountNameToChannelSection, applyBasicWebhookRequestGuards, applySetupAccountConfigPatch, buildBaseAccountStatusSnapshot, buildChannelConfigSchema, buildSecretInputSchema, buildSingleChannelSecretPromptState, buildTokenChannelStatusSummary, chunkTextForOutbound, createChannelMessageReplyPipeline, createChannelPairingController, createDedupeCache, createFixedWindowRateLimiter, createWebhookAnomalyTracker, deliverTextOrMediaReply, formatAllowFromLowercase, formatPairingApproveHint, hasConfiguredSecretInput, isNormalizedSenderAllowed, isNumericTargetId, jsonResult, logTypingFailure, mergeAllowFromEntries, migrateBaseNameToDefaultAccount, normalizeAccountId, normalizeResolvedSecretInputString, normalizeSecretInputString, promptSingleChannelSecretInput, readJsonWebhookBodyOrReject, readStringParam, registerPluginHttpRoute, registerWebhookTarget, registerWebhookTargetWithPluginRoute, resolveClientIp, resolveDefaultGroupPolicy, resolveOpenProviderRuntimeGroupPolicy, resolveWebhookPath, resolveWebhookTargetWithAuthOrRejectSync, runSingleChannelSecretStep, sendPayloadWithChunkedTextAndMedia, setTopLevelChannelDmPolicyWithAllowFrom, setZaloRuntime, waitForAbortSignal, warnMissingProviderGroupPolicyFallbackOnce, withResolvedWebhookRequestPipeline };
+import { A as mergeAllowFromEntries, B as registerWebhookTargetWithPluginRoute, C as formatAllowFromLowercase, D as isNumericTargetId, E as isNormalizedSenderAllowed, F as promptSingleChannelSecretInput, G as resolveWebhookPath, H as resolveDefaultGroupPolicy, I as readJsonWebhookBodyOrReject, J as sendPayloadWithChunkedTextAndMedia, K as resolveWebhookTargetWithAuthOrRejectSync, L as readStringParam, M as normalizeAccountId, N as normalizeResolvedSecretInputString, O as jsonResult, P as normalizeSecretInputString, Q as withResolvedWebhookRequestPipeline, R as registerPluginHttpRoute, S as deliverTextOrMediaReply, T as hasConfiguredSecretInput, U as resolveInboundRouteEnvelopeBuilderWithRuntime, V as resolveClientIp, W as resolveOpenProviderRuntimeGroupPolicy, X as waitForAbortSignal, Y as setTopLevelChannelDmPolicyWithAllowFrom, Z as warnMissingProviderGroupPolicyFallbackOnce, _ as createChannelMessageReplyPipeline, a as WEBHOOK_ANOMALY_COUNTER_DEFAULTS, b as createFixedWindowRateLimiter, c as applyAccountNameToChannelSection, d as buildBaseAccountStatusSnapshot, f as buildChannelConfigSchema, g as chunkTextForOutbound, h as buildTokenChannelStatusSummary, i as PAIRING_APPROVED_MESSAGE, j as migrateBaseNameToDefaultAccount, k as logTypingFailure, l as applyBasicWebhookRequestGuards, m as buildSingleChannelSecretPromptState, n as setZaloRuntime, o as WEBHOOK_RATE_LIMIT_DEFAULTS, p as buildSecretInputSchema, q as runSingleChannelSecretStep, r as DEFAULT_ACCOUNT_ID, s as addWildcardAllowFrom, u as applySetupAccountConfigPatch, v as createChannelPairingController, w as formatPairingApproveHint, x as createWebhookAnomalyTracker, y as createDedupeCache, z as registerWebhookTarget } from "./.setup/runtime-api-CAA4ZtqF.mjs";
+export { DEFAULT_ACCOUNT_ID, PAIRING_APPROVED_MESSAGE, WEBHOOK_ANOMALY_COUNTER_DEFAULTS, WEBHOOK_RATE_LIMIT_DEFAULTS, addWildcardAllowFrom, applyAccountNameToChannelSection, applyBasicWebhookRequestGuards, applySetupAccountConfigPatch, buildBaseAccountStatusSnapshot, buildChannelConfigSchema, buildSecretInputSchema, buildSingleChannelSecretPromptState, buildTokenChannelStatusSummary, chunkTextForOutbound, createChannelMessageReplyPipeline, createChannelPairingController, createDedupeCache, createFixedWindowRateLimiter, createWebhookAnomalyTracker, deliverTextOrMediaReply, formatAllowFromLowercase, formatPairingApproveHint, hasConfiguredSecretInput, isNormalizedSenderAllowed, isNumericTargetId, jsonResult, logTypingFailure, mergeAllowFromEntries, migrateBaseNameToDefaultAccount, normalizeAccountId, normalizeResolvedSecretInputString, normalizeSecretInputString, promptSingleChannelSecretInput, readJsonWebhookBodyOrReject, readStringParam, registerPluginHttpRoute, registerWebhookTarget, registerWebhookTargetWithPluginRoute, resolveClientIp, resolveDefaultGroupPolicy, resolveInboundRouteEnvelopeBuilderWithRuntime, resolveOpenProviderRuntimeGroupPolicy, resolveWebhookPath, resolveWebhookTargetWithAuthOrRejectSync, runSingleChannelSecretStep, sendPayloadWithChunkedTextAndMedia, setTopLevelChannelDmPolicyWithAllowFrom, setZaloRuntime, waitForAbortSignal, warnMissingProviderGroupPolicyFallbackOnce, withResolvedWebhookRequestPipeline };

package/dist/secret-contract-api.js

@@ -1,2 +1,2 @@
-import { n as collectRuntimeConfigAssignments, r as secretTargetRegistryEntries, t as channelSecrets } from "./secret-contract-Bxvjh0Hq.js";
+import { n as collectRuntimeConfigAssignments, r as secretTargetRegistryEntries, t as channelSecrets } from "./.setup/secret-contract-Bno_huZF.mjs";
 export { channelSecrets, collectRuntimeConfigAssignments, secretTargetRegistryEntries };

package/dist/setup-api.js

@@ -1,5 +1,5 @@
-import { n as zaloDmPolicy, r as zaloSetupAdapter, t as createZaloSetupWizardProxy } from "./setup-core-LzhuTlsD.js";
-import { n as resolveZaloRuntimeGroupPolicy } from "./group-access-8qHRzDHx.js";
+import { n as zaloDmPolicy, r as zaloSetupAdapter, t as createZaloSetupWizardProxy } from "./.setup/setup-core-BLbVCFpT.mjs";
+import { n as resolveZaloRuntimeGroupPolicy } from "./.setup/group-access-8qHRzDHx.mjs";
 import { loadBundledEntryExportSync } from "openclaw/plugin-sdk/channel-entry-contract";
 //#region extensions/zalo/setup-api.ts
 function createLazyObjectValue(load) {

package/dist/setup-entry.js

@@ -1,13 +1,14 @@
 import { defineBundledChannelSetupEntry } from "openclaw/plugin-sdk/channel-entry-contract";
+import { fileURLToPath } from "node:url";
 //#region extensions/zalo/setup-entry.ts
 var setup_entry_default = defineBundledChannelSetupEntry({
 	importMetaUrl: import.meta.url,
 	plugin: {
-		specifier: "./api.js",
+		specifier: fileURLToPath(new URL(".setup/api-D2kRAHnC.mjs", import.meta.url).href),
 		exportName: "zaloPlugin"
 	},
 	secrets: {
-		specifier: "./secret-contract-api.js",
+		specifier: fileURLToPath(new URL(".setup/secret-contract-api-CILabB_S.mjs", import.meta.url).href),
 		exportName: "channelSecrets"
 	}
 });

package/openclaw.plugin.json

@@ -9,6 +9,12 @@
   "channels": [
     "zalo"
   ],
+  "channelEnvVars": {
+    "zalo": [
+      "ZALO_BOT_TOKEN",
+      "ZALO_WEBHOOK_SECRET"
+    ]
+  },
   "configSchema": {
     "type": "object",
     "additionalProperties": false,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openclaw/zalo",
-  "version": "2026.7.2-beta.7",
+  "version": "2026.7.33",
   "description": "OpenClaw Zalo channel plugin for bot and webhook chats.",
   "repository": {
     "type": "git",
@@ -8,7 +8,7 @@
   },
   "type": "module",
   "peerDependencies": {
-    "openclaw": ">=2026.7.2-beta.7"
+    "openclaw": ">=2026.7.33"
   },
   "peerDependenciesMeta": {
     "openclaw": {
@@ -20,19 +20,8 @@
       "./index.ts"
     ],
     "setupEntry": "./dist/setup-entry.js",
-    "setupFeatures": {
-      "configPromotion": true
-    },
     "channel": {
       "id": "zalo",
-      "configuredState": {
-        "env": {
-          "anyOf": [
-            "ZALO_BOT_TOKEN",
-            "ZALO_WEBHOOK_SECRET"
-          ]
-        }
-      },
       "label": "Zalo",
       "selectionLabel": "Zalo (Bot API)",
       "docsPath": "/channels/zalo",
@@ -42,37 +31,7 @@
         "zl"
       ],
       "order": 80,
-      "quickstartAllowFrom": true,
-      "setup": {
-        "fields": [
-          {
-            "key": "token",
-            "kind": "string",
-            "sensitive": true,
-            "cli": {
-              "flags": "--token <token>",
-              "description": "Zalo bot token"
-            }
-          },
-          {
-            "key": "tokenFile",
-            "kind": "string",
-            "sensitive": true,
-            "cli": {
-              "flags": "--token-file <path>",
-              "description": "Zalo bot token file"
-            }
-          },
-          {
-            "key": "useEnv",
-            "kind": "boolean",
-            "cli": {
-              "flags": "--use-env",
-              "description": "Use ZALO_BOT_TOKEN"
-            }
-          }
-        ]
-      }
+      "quickstartAllowFrom": true
     },
     "install": {
       "npmSpec": "@openclaw/zalo",
@@ -80,10 +39,10 @@
       "minHostVersion": ">=2026.4.10"
     },
     "compat": {
-      "pluginApi": ">=2026.7.2-beta.7"
+      "pluginApi": ">=2026.7.33"
     },
     "build": {
-      "openclawVersion": "2026.7.2-beta.7"
+      "openclawVersion": "2026.7.33"
     },
     "release": {
       "publishToClawHub": true,