@openclaw/zalo 2026.7.2-beta.7 → 2026.8.1-beta.2

package/dist/{actions.runtime-BYBjeo4Q.js → actions.runtime-BRP15DNe.js}

@@ -1,4 +1,4 @@
-import { t as sendMessageZalo } from "./send-BUvbbedq.js";
+import { t as sendMessageZalo } from "./send-BGGtv8x_.js";
 //#region extensions/zalo/src/actions.runtime.ts
 const zaloActionsRuntime = { sendMessageZalo };
 //#endregion

package/dist/api.js

@@ -1,5 +1,5 @@
-import { n as zaloDmPolicy, r as zaloSetupAdapter, t as createZaloSetupWizardProxy } from "./setup-core-LzhuTlsD.js";
-import { t as zaloPlugin } from "./channel-idqJI6YK.js";
+import { n as zaloDmPolicy, r as zaloSetupAdapter, t as createZaloSetupWizardProxy } from "./setup-core-T6qc2eAG.js";
+import { t as zaloPlugin } from "./channel-Dcp-XLf8.js";
 import { n as resolveZaloRuntimeGroupPolicy } from "./group-access-8qHRzDHx.js";
 import { zaloSetupWizard } from "./setup-api.js";
 export { createZaloSetupWizardProxy, resolveZaloRuntimeGroupPolicy, zaloDmPolicy, zaloPlugin, zaloSetupAdapter, zaloSetupWizard };

package/dist/{channel-idqJI6YK.js → channel-Dcp-XLf8.js}

@@ -1,4 +1,4 @@
-import { c as inspectZaloAccount, d as resolveZaloAccount, i as zaloSetupContract, l as listZaloAccountIds, p as buildSecretInputSchema, r as zaloSetupAdapter, t as createZaloSetupWizardProxy, u as resolveDefaultZaloAccountId } from "./setup-core-LzhuTlsD.js";
+import { c as inspectZaloAccount, d as resolveZaloAccount, i as zaloSetupContract, l as listZaloAccountIds, p as buildSecretInputSchema, t as createZaloSetupWizardProxy, u as resolveDefaultZaloAccountId } from "./setup-core-T6qc2eAG.js";
 import { n as collectRuntimeConfigAssignments, r as secretTargetRegistryEntries } from "./secret-contract-Bxvjh0Hq.js";
 import { describeWebhookAccountSnapshot } from "openclaw/plugin-sdk/account-helpers";
 import { DEFAULT_ACCOUNT_ID } from "openclaw/plugin-sdk/account-id";
@@ -24,7 +24,7 @@ import { AllowFromListSchema, DmPolicySchema, GroupPolicySchema, MarkdownConfigS
 import { z } from "zod";
 import { coerceStatusIssueAccountId, readStatusIssueFields } from "openclaw/plugin-sdk/extension-shared";
 //#region extensions/zalo/src/actions.ts
-const loadZaloActionsRuntime = createLazyRuntimeNamedExport(() => import("./actions.runtime-BYBjeo4Q.js"), "zaloActionsRuntime");
+const loadZaloActionsRuntime = createLazyRuntimeNamedExport(() => import("./actions.runtime-BRP15DNe.js"), "zaloActionsRuntime");
 const providerId = "zalo";
 const ZALO_ACTIONS = /* @__PURE__ */ new Set(["send"]);
 function listEnabledAccounts(cfg, accountId) {
@@ -92,6 +92,7 @@ const zaloApprovalAuth = createChannelApprovalAuth({
 const ZaloConfigSchema = buildMultiAccountChannelSchema(z.object({
 	name: z.string().optional(),
 	enabled: z.boolean().optional(),
+	configWrites: z.boolean().optional(),
 	markdown: MarkdownConfigSchema,
 	botToken: buildSecretInputSchema().optional(),
 	tokenFile: z.string().optional(),
@@ -179,8 +180,8 @@ function looksLikeZaloChatId(raw, normalized) {
 	const target = normalizeZaloMessagingTarget(normalized ?? raw);
 	return Boolean(target);
 }
-const loadZaloChannelRuntime = createLazyRuntimeModule(() => import("./channel.runtime-DsaLk085.js"));
-const zaloSetupWizard = createZaloSetupWizardProxy(async () => (await import("./setup-surface-CQMbpZye.js")).zaloSetupWizard);
+const loadZaloChannelRuntime = createLazyRuntimeModule(() => import("./channel.runtime-5CivhE5e.js"));
+const zaloSetupWizard = createZaloSetupWizardProxy(async () => (await import("./setup-surface-edfRk3eu.js").then((n) => n.t)).zaloSetupWizard);
 const zaloTextChunkLimit = 2e3;
 async function sendZaloDelivery(ctx) {
 	const result = await (await loadZaloChannelRuntime()).sendZaloText({
@@ -263,7 +264,6 @@ const zaloPlugin = createChatChannelPlugin({
 	base: {
 		id: "zalo",
 		meta,
-		setup: zaloSetupAdapter,
 		setupContract: zaloSetupContract,
 		setupWizard: zaloSetupWizard,
 		capabilities: {
@@ -301,6 +301,10 @@ const zaloPlugin = createChatChannelPlugin({
 		messaging: {
 			targetPrefixes: ["zalo", "zl"],
 			normalizeTarget: normalizeZaloMessagingTarget,
+			inferTargetChatType: ({ to }) => {
+				const target = normalizeZaloMessagingTarget(to);
+				return target ? /^group:/i.test(target) ? "group" : "direct" : void 0;
+			},
 			resolveOutboundSessionRoute: (params) => resolveZaloOutboundSessionRoute(params),
 			targetResolver: {
 				looksLikeId: looksLikeZaloChatId,

package/dist/channel-plugin-api.js

@@ -1,2 +1,2 @@
-import { t as zaloPlugin } from "./channel-idqJI6YK.js";
+import { t as zaloPlugin } from "./channel-Dcp-XLf8.js";
 export { zaloPlugin };

package/dist/{channel.runtime-DsaLk085.js → channel.runtime-5CivhE5e.js}

@@ -1,58 +1,41 @@
-import { m as normalizeSecretInputString } from "./setup-core-LzhuTlsD.js";
+import { m as normalizeSecretInputString } from "./setup-core-T6qc2eAG.js";
 import { i as PAIRING_APPROVED_MESSAGE } from "./runtime-api-qxdOyk3M.js";
-import { a as getMe, n as resolveZaloProxyFetch, r as ZaloApiError, t as sendMessageZalo } from "./send-BUvbbedq.js";
+import { a as getMe, n as resolveZaloProxyFetch, r as ZaloApiError, t as sendMessageZalo } from "./send-BGGtv8x_.js";
 import { createAccountStatusSink } from "openclaw/plugin-sdk/channel-outbound";
+import { runChannelProbe } from "openclaw/plugin-sdk/text-utility-runtime";
 //#region extensions/zalo/src/probe.ts
+function formatZaloProbeError(error, timeoutMs) {
+	if (error instanceof ZaloApiError) return error.description ?? error.message;
+	if (error instanceof Error) return error.name === "AbortError" ? `Request timed out after ${timeoutMs}ms` : error.message;
+	return String(error);
+}
 async function probeZalo(token, timeoutMs = 5e3, fetcher) {
 	if (!token?.trim()) return {
 		ok: false,
 		error: "No token provided",
 		elapsedMs: 0
 	};
-	const startTime = Date.now();
-	try {
+	return await runChannelProbe(void 0, async ({ elapsedMs }) => {
 		const response = await getMe(token.trim(), timeoutMs, fetcher);
-		const elapsedMs = Date.now() - startTime;
 		if (response.ok && response.result) return {
 			ok: true,
 			bot: response.result,
-			elapsedMs
+			elapsedMs: elapsedMs()
 		};
 		return {
 			ok: false,
 			error: "Invalid response from Zalo API",
-			elapsedMs
-		};
-	} catch (err) {
-		const elapsedMs = Date.now() - startTime;
-		if (err instanceof ZaloApiError) return {
-			ok: false,
-			error: err.description ?? err.message,
-			elapsedMs
+			elapsedMs: elapsedMs()
 		};
-		if (err instanceof Error) {
-			if (err.name === "AbortError") return {
-				ok: false,
-				error: `Request timed out after ${timeoutMs}ms`,
-				elapsedMs
-			};
-			return {
-				ok: false,
-				error: err.message,
-				elapsedMs
-			};
-		}
-		return {
-			ok: false,
-			error: String(err),
-			elapsedMs
-		};
-	}
+	}, (error) => ({
+		ok: false,
+		error: formatZaloProbeError(error, timeoutMs)
+	}));
 }
 //#endregion
 //#region extensions/zalo/src/channel.runtime.ts
 async function notifyZaloPairingApproval(params) {
-	const { resolveZaloAccount } = await import("./setup-core-LzhuTlsD.js").then((n) => n.s);
+	const { resolveZaloAccount } = await import("./setup-core-T6qc2eAG.js").then((n) => n.s);
 	const account = resolveZaloAccount({ cfg: params.cfg });
 	if (!account.token) throw new Error("Zalo token not configured");
 	await sendMessageZalo(params.id, PAIRING_APPROVED_MESSAGE, { token: account.token });
@@ -86,7 +69,7 @@ async function startZaloGatewayAccount(ctx) {
 		setStatus: ctx.setStatus
 	});
 	ctx.log?.info(`[${account.accountId}] starting provider${zaloBotLabel} mode=${mode}`);
-	const { monitorZaloProvider } = await import("./monitor-C5cximHM.js");
+	const { monitorZaloProvider } = await import("./monitor-Ckz5Mo22.js");
 	return monitorZaloProvider({
 		token,
 		account,

package/dist/{monitor-C5cximHM.js → monitor-Ckz5Mo22.js}

@@ -1,16 +1,18 @@
 import { n as resolveZaloRuntimeGroupPolicy, t as normalizeZaloAllowEntry } from "./group-access-8qHRzDHx.js";
 import { t as getZaloRuntime } from "./runtime-api-qxdOyk3M.js";
-import { c as sendChatAction, d as setWebhook, f as ZALO_OUTBOUND_MEDIA_TTL_MS, i as deleteWebhook, l as sendMessage, n as resolveZaloProxyFetch, o as getUpdates, r as ZaloApiError, s as getWebhookInfo, u as sendPhoto } from "./send-BUvbbedq.js";
+import { c as sendChatAction, d as setWebhook, f as ZALO_OUTBOUND_MEDIA_TTL_MS, i as deleteWebhook, l as sendMessage, n as resolveZaloProxyFetch, o as getUpdates, r as ZaloApiError, s as getWebhookInfo, u as sendPhoto } from "./send-BGGtv8x_.js";
+import { createMessageReceiptFromOutboundResults } from "openclaw/plugin-sdk/channel-outbound";
 import { createLazyRuntimeModule, createLazyRuntimeNamedExport } from "openclaw/plugin-sdk/lazy-runtime";
 import { deliverTextOrMediaReply, resolveSendableOutboundReplyParts } from "openclaw/plugin-sdk/reply-payload";
 import { normalizeStringEntries } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { resolveDefaultGroupPolicy, warnMissingProviderGroupPolicyFallbackOnce } from "openclaw/plugin-sdk/runtime-group-policy";
 import { createChannelPairingController } from "openclaw/plugin-sdk/channel-pairing";
 import { logTypingFailure } from "openclaw/plugin-sdk/channel-feedback";
-import { registerPluginHttpRoute, resolveWebhookPath } from "openclaw/plugin-sdk/webhook-ingress";
+import { canonicalizeWebhookRouteKey, registerPluginHttpRoute, resolveWebhookPath } from "openclaw/plugin-sdk/webhook-ingress";
 import { asDateTimestampMs, resolveExpiresAtMsFromDurationMs } from "openclaw/plugin-sdk/number-runtime";
-import { formatInboundMediaUnavailableText, resolveChannelInboundRouteEnvelope } from "openclaw/plugin-sdk/channel-inbound";
+import { createChannelPartialDeliveryError, formatInboundMediaUnavailableText, resolveChannelInboundRouteEnvelope } from "openclaw/plugin-sdk/channel-inbound";
 import { resolveStableChannelMessageIngress } from "openclaw/plugin-sdk/channel-ingress-runtime";
+import { channelReadyPatch } from "openclaw/plugin-sdk/gateway-runtime";
 import { sleepWithAbort, waitForAbortSignal } from "openclaw/plugin-sdk/runtime-env";
 import { createHostedOutboundMediaStore } from "openclaw/plugin-sdk/outbound-media";
 import { safeEqualSecret } from "openclaw/plugin-sdk/security-runtime";
@@ -115,35 +117,44 @@ async function tryHandleHostedZaloMediaRequest(req, res) {
 		res.end("Expired");
 		return true;
 	}
-	const entry = await store.read(id, now);
-	if (!entry || entry.metadata.routePath !== routePath) {
+	const metadata = await store.readMetadata(id, now);
+	if (!metadata || metadata.routePath !== routePath) {
 		res.statusCode = 404;
 		res.end("Not Found");
 		return true;
 	}
-	const expiresAt = asDateTimestampMs(entry.metadata.expiresAt);
+	const expiresAt = asDateTimestampMs(metadata.expiresAt);
 	if (expiresAt === void 0 || expiresAt <= now) {
 		await store.delete(id);
 		res.statusCode = 410;
 		res.end("Expired");
 		return true;
 	}
-	if (!safeEqualSecret(url.searchParams.get("token"), entry.metadata.token)) {
+	const token = url.searchParams.get("token");
+	if (!safeEqualSecret(token, metadata.token)) {
 		res.statusCode = 401;
 		res.end("Unauthorized");
 		return true;
 	}
-	if (entry.metadata.contentType) res.setHeader("Content-Type", entry.metadata.contentType);
+	let servedMetadata = metadata;
+	let body;
+	if (method === "GET") {
+		const entry = await store.read(id, now);
+		if (!entry || entry.metadata.routePath !== routePath || !safeEqualSecret(token, entry.metadata.token)) {
+			res.statusCode = 404;
+			res.end("Not Found");
+			return true;
+		}
+		servedMetadata = entry.metadata;
+		body = entry.buffer;
+	}
+	if (servedMetadata.contentType) res.setHeader("Content-Type", servedMetadata.contentType);
 	res.setHeader("Cache-Control", "no-store");
 	res.setHeader("X-Content-Type-Options", "nosniff");
-	res.setHeader("Content-Length", String(entry.metadata.byteLength));
-	if (method === "HEAD") {
-		res.statusCode = 200;
-		res.end();
-		return true;
-	}
+	res.setHeader("Content-Length", String(servedMetadata.byteLength));
 	res.statusCode = 200;
-	res.end(entry.buffer);
+	res.end(body);
+	if (method === "HEAD") return true;
 	await store.delete(id);
 	return true;
 }
@@ -163,31 +174,23 @@ function resolveZaloTimestampMs(date) {
 	if (!date) return;
 	return date >= UNIX_MILLISECONDS_THRESHOLD ? date : date * 1e3;
 }
-const loadZaloWebhookRuntime = createLazyRuntimeNamedExport(() => import("./monitor.webhook-D56OCa3C.js"), "zaloWebhookRuntime");
-const loadZaloWebhookIngressRuntime = createLazyRuntimeNamedExport(() => import("./webhook-spool-DzCPbb3O.js"), "zaloWebhookIngressRuntime");
+const loadZaloWebhookRuntime = createLazyRuntimeNamedExport(() => import("./monitor.webhook-S7nThy3R.js"), "zaloWebhookRuntime");
+const loadZaloWebhookIngressRuntime = createLazyRuntimeNamedExport(() => import("./webhook-spool-Bf17xwqi.js"), "zaloWebhookIngressRuntime");
 const loadZaloWebhookModule = createLazyRuntimeModule(async () => ({
 	...await loadZaloWebhookRuntime(),
 	...await loadZaloWebhookIngressRuntime()
 }));
-function releaseSharedHostedMediaRouteRef(routePath) {
-	const current = hostedMediaRouteRefs.get(routePath);
-	if (!current) return;
-	if (current.count > 1) {
-		current.count -= 1;
-		return;
-	}
-	hostedMediaRouteRefs.delete(routePath);
-	for (const unregisterHandle of current.unregisters) unregisterHandle();
-}
 function registerSharedHostedMediaRoute(params) {
+	const routeKey = canonicalizeWebhookRouteKey(params.path);
 	const unregister = registerPluginHttpRoute({
 		auth: "plugin",
 		match: "prefix",
 		path: params.path,
 		pluginId: "zalo",
 		source: "zalo-hosted-media",
-		accountId: params.accountId,
 		log: params.log,
+		reuseExistingSameOwner: true,
+		throwOnFailure: true,
 		handler: async (req, res) => {
 			if (!await tryHandleHostedZaloMediaRequest(req, res) && !res.headersSent) {
 				res.statusCode = 404;
@@ -196,17 +199,23 @@ function registerSharedHostedMediaRoute(params) {
 			}
 		}
 	});
-	const existing = hostedMediaRouteRefs.get(params.path);
-	if (existing) {
-		existing.count += 1;
-		existing.unregisters.push(unregister);
-		return () => releaseSharedHostedMediaRouteRef(params.path);
-	}
-	hostedMediaRouteRefs.set(params.path, {
-		count: 1,
-		unregisters: [unregister]
-	});
-	return () => releaseSharedHostedMediaRouteRef(params.path);
+	const acquired = hostedMediaRouteRefs.get(routeKey) ?? {
+		count: 0,
+		unregisters: []
+	};
+	if (acquired.count === 0) hostedMediaRouteRefs.set(routeKey, acquired);
+	acquired.count += 1;
+	acquired.unregisters.push(unregister);
+	let released = false;
+	return () => {
+		if (released) return;
+		released = true;
+		if (hostedMediaRouteRefs.get(routeKey) !== acquired) return;
+		acquired.count -= 1;
+		if (acquired.count > 0) return;
+		hostedMediaRouteRefs.delete(routeKey);
+		for (const unregisterHandle of acquired.unregisters) unregisterHandle();
+	};
 }
 function formatZaloError(error) {
 	if (error instanceof Error) return error.stack ?? `${error.name}: ${error.message}`;
@@ -253,6 +262,7 @@ function startPollingLoop(params) {
 		try {
 			const response = await getUpdates(token, { timeout: pollTimeout }, fetcher);
 			if (isStopped() || abortSignal.aborted) return;
+			if (response.ok) statusSink?.(channelReadyPatch());
 			if (response.ok && response.result) {
 				statusSink?.({ lastInboundAt: Date.now() });
 				await processUpdate({
@@ -262,7 +272,13 @@ function startPollingLoop(params) {
 			}
 		} catch (err) {
 			if (err instanceof ZaloApiError && err.isPollingTimeout) {} else if (!isStopped() && !abortSignal.aborted) {
-				runtime.error?.(`[${account.accountId}] Zalo polling error: ${formatZaloError(err)}`);
+				const error = formatZaloError(err);
+				runtime.error?.(`[${account.accountId}] Zalo polling error: ${error}`);
+				statusSink?.({
+					connected: false,
+					lifecycle: "recovering",
+					lastError: error
+				});
 				await sleepWithAbort(5e3, abortSignal).catch(() => void 0);
 			}
 		}
@@ -385,7 +401,7 @@ async function authorizeZaloMessage(params) {
 		defaultGroupPolicy
 	});
 	const shouldComputeAuth = core.channel.commands.shouldComputeCommandAuthorized(rawBody, config);
-	const access = await resolveStableChannelMessageIngress({
+	const resolveChannelIngress = async (contextBinding) => await resolveStableChannelMessageIngress({
 		channelId: "zalo",
 		accountId: account.accountId,
 		identity: {
@@ -401,6 +417,7 @@ async function authorizeZaloMessage(params) {
 			kind: isGroup ? "group" : "direct",
 			id: chatId
 		},
+		contextBinding,
 		providerMissingFallbackApplied,
 		dmPolicy,
 		groupPolicy,
@@ -409,6 +426,7 @@ async function authorizeZaloMessage(params) {
 		groupAllowFrom: normalizeStringEntries(account.config.groupAllowFrom),
 		command: shouldComputeAuth ? {} : void 0
 	});
+	const access = await resolveChannelIngress();
 	const senderAccess = access.senderAccess;
 	if (isGroup) {
 		warnMissingProviderGroupPolicyFallbackOnce({
@@ -451,6 +469,8 @@ async function authorizeZaloMessage(params) {
 		return;
 	}
 	return {
+		channelIngress: access,
+		resolveChannelIngress,
 		chatId,
 		commandAuthorized: access.commandAccess.requested ? access.commandAccess.authorized : void 0,
 		isGroup,
@@ -468,7 +488,7 @@ async function processMessageWithPipeline(params) {
 		mediaType
 	});
 	if (!authorization) return;
-	const { isGroup, chatId, senderId, senderName, rawBody, commandAuthorized } = authorization;
+	const { isGroup, chatId, senderId, senderName, rawBody } = authorization;
 	const agentBody = agentBodyOverride ?? rawBody;
 	const { route, buildEnvelope } = resolveChannelInboundRouteEnvelope({
 		cfg: config,
@@ -479,6 +499,17 @@ async function processMessageWithPipeline(params) {
 			id: chatId
 		}
 	});
+	const channelIngress = await authorization.resolveChannelIngress({
+		agentId: route.agentId,
+		sessionKey: route.sessionKey,
+		messageId: message_id,
+		inboundEventKind: "user_request"
+	});
+	if (!channelIngress.senderAccess.allowed) {
+		logVerbose(core, runtime, `zalo: authorization changed before dispatch for ${senderId}`);
+		return;
+	}
+	const commandAuthorized = channelIngress.commandAccess.requested ? channelIngress.commandAccess.authorized : void 0;
 	if (isGroup && core.channel.commands.isControlCommandMessage(rawBody, config) && commandAuthorized !== true) {
 		logVerbose(core, runtime, `zalo: drop control command from unauthorized sender ${senderId}`);
 		return;
@@ -492,6 +523,7 @@ async function processMessageWithPipeline(params) {
 		body: agentBody
 	});
 	const ctxPayload = core.channel.inbound.buildContext({
+		channelIngress,
 		channel: "zalo",
 		accountId: route.accountId,
 		messageId: message_id,
@@ -561,7 +593,6 @@ async function processMessageWithPipeline(params) {
 					payload,
 					token,
 					chatId,
-					runtime,
 					core,
 					config,
 					webhookUrl: params.webhookUrl,
@@ -575,8 +606,8 @@ async function processMessageWithPipeline(params) {
 					tableMode: "off"
 				});
 			},
-			onDelivered: () => {
-				statusSink?.({ lastOutboundAt: Date.now() });
+			onDelivered: (_payload, _info, result) => {
+				if (result?.visibleReplySent !== false) statusSink?.({ lastOutboundAt: Date.now() });
 			},
 			onError: (err, info) => {
 				runtime.error?.(`[${account.accountId}] Zalo ${info.kind} reply failed: ${String(err)}`);
@@ -606,49 +637,64 @@ async function processMessageWithPipeline(params) {
 	});
 }
 async function deliverZaloReply(params) {
-	const { payload, token, chatId, runtime, core, config, webhookUrl, webhookPath, proxyUrl, mediaMaxBytes, canHostMedia, accountId, statusSink, fetcher } = params;
+	const { payload, token, chatId, core, config, webhookUrl, webhookPath, proxyUrl, mediaMaxBytes, canHostMedia, accountId, statusSink, fetcher } = params;
 	const tableMode = params.tableMode ?? "code";
 	const reply = resolveSendableOutboundReplyParts(payload, { text: core.channel.text.convertMarkdownTables(payload.text ?? "", tableMode) });
 	const chunkMode = core.channel.text.resolveChunkMode(config, "zalo", accountId);
-	await deliverTextOrMediaReply({
-		payload,
-		text: reply.text,
-		chunkText: (value) => core.channel.text.chunkMarkdownTextWithMode(value, ZALO_TEXT_LIMIT, chunkMode),
-		sendText: async (chunk) => {
-			try {
-				await sendMessage(token, {
+	const acceptedMessageIds = [];
+	let visibleReplySent = false;
+	const recordAcceptedSend = (result) => {
+		const messageId = result.result?.message_id;
+		if (messageId) acceptedMessageIds.push(messageId);
+		visibleReplySent = true;
+		statusSink?.({ lastOutboundAt: Date.now() });
+	};
+	try {
+		await deliverTextOrMediaReply({
+			payload,
+			text: reply.text,
+			chunkText: (value) => core.channel.text.chunkMarkdownTextWithMode(value, ZALO_TEXT_LIMIT, chunkMode),
+			sendText: async (chunk) => {
+				recordAcceptedSend(await sendMessage(token, {
 					chat_id: chatId,
 					text: chunk
-				}, fetcher);
-				statusSink?.({ lastOutboundAt: Date.now() });
-			} catch (err) {
-				runtime.error?.(`Zalo message send failed: ${String(err)}`);
+				}, fetcher));
+			},
+			sendMedia: async ({ mediaUrl, caption }) => {
+				const sendableMediaUrl = canHostMedia && webhookUrl && webhookPath ? await prepareHostedZaloMediaUrl({
+					mediaUrl,
+					webhookUrl,
+					webhookPath,
+					maxBytes: mediaMaxBytes,
+					proxyUrl
+				}) : mediaUrl;
+				recordAcceptedSend(await sendPhoto(token, {
+					chat_id: chatId,
+					photo: sendableMediaUrl,
+					caption
+				}, fetcher));
 			}
-		},
-		sendMedia: async ({ mediaUrl, caption }) => {
-			const sendableMediaUrl = canHostMedia && webhookUrl && webhookPath ? await prepareHostedZaloMediaUrl({
-				mediaUrl,
-				webhookUrl,
-				webhookPath,
-				maxBytes: mediaMaxBytes,
-				proxyUrl
-			}) : mediaUrl;
-			await sendPhoto(token, {
-				chat_id: chatId,
-				photo: sendableMediaUrl,
-				caption
-			}, fetcher);
-			statusSink?.({ lastOutboundAt: Date.now() });
-		},
-		onMediaError: (error) => {
-			runtime.error?.(`Zalo photo send failed: ${error instanceof Error ? error.message : JSON.stringify(error)}`);
-		}
-	});
+		});
+	} catch (error) {
+		if (!visibleReplySent) throw error;
+		throw createChannelPartialDeliveryError(error, {
+			messageIds: acceptedMessageIds,
+			receipt: createMessageReceiptFromOutboundResults({
+				results: acceptedMessageIds.map((messageId) => ({
+					channel: "zalo",
+					messageId
+				})),
+				kind: reply.hasMedia ? "media" : "text"
+			}),
+			visibleReplySent: true
+		});
+	}
 }
 async function monitorZaloProvider(options) {
 	const { token, account, config, runtime, abortSignal, useWebhook, webhookUrl, webhookSecret, webhookPath, statusSink, fetcher: fetcherOverride } = options;
 	const core = getZaloRuntime();
-	const effectiveMediaMaxMb = account.config.mediaMaxMb ?? DEFAULT_MEDIA_MAX_MB;
+	const configuredMediaMaxMb = account.config.mediaMaxMb;
+	const effectiveMediaMaxMb = typeof configuredMediaMaxMb === "number" && configuredMediaMaxMb > 0 ? configuredMediaMaxMb : DEFAULT_MEDIA_MAX_MB;
 	const fetcher = fetcherOverride ?? resolveZaloProxyFetch(account.config.proxy);
 	const mode = useWebhook ? "webhook" : "polling";
 	const effectiveWebhookUrl = normalizeWebhookUrl(webhookUrl ?? account.config.webhookUrl);
@@ -684,7 +730,6 @@ async function monitorZaloProvider(options) {
 		if (hostedMediaRoutePath) {
 			const unregisterHostedMediaRoute = registerSharedHostedMediaRoute({
 				path: hostedMediaRoutePath,
-				accountId: account.accountId,
 				log: runtime.log
 			});
 			stopHandlers.push(unregisterHostedMediaRoute);
@@ -735,6 +780,7 @@ async function monitorZaloProvider(options) {
 				source: "zalo-webhook",
 				accountId: account.accountId,
 				log: runtime.log,
+				throwOnFailure: true,
 				handler: async (req, res) => {
 					if (!await handleZaloWebhookRequest(req, res) && !res.headersSent) {
 						res.statusCode = 404;
@@ -748,6 +794,7 @@ async function monitorZaloProvider(options) {
 				url: effectiveWebhookUrl,
 				secret_token: webhookSecret
 			}, fetcher);
+			statusSink?.(channelReadyPatch());
 			let webhookCleanupPromise;
 			cleanupWebhook = async () => {
 				if (!webhookCleanupPromise) webhookCleanupPromise = (async () => {
@@ -800,7 +847,13 @@ async function monitorZaloProvider(options) {
 		});
 		await waitForAbortSignal(abortSignal);
 	} catch (err) {
-		runtime.error?.(`[${account.accountId}] Zalo provider startup failed mode=${mode}: ${formatZaloError(err)}`);
+		const error = formatZaloError(err);
+		runtime.error?.(`[${account.accountId}] Zalo provider startup failed mode=${mode}: ${error}`);
+		statusSink?.({
+			connected: false,
+			lifecycle: "recovering",
+			lastError: error
+		});
 		throw err;
 	} finally {
 		abortSignal.removeEventListener("abort", stopOnAbort);

package/dist/{monitor.webhook-D56OCa3C.js → monitor.webhook-S7nThy3R.js}

@@ -1,5 +1,5 @@
 import { B as registerWebhookTargetWithPluginRoute, G as resolveWebhookTargetWithAuthOrRejectSync, V as resolveClientIp, Z as withResolvedWebhookRequestPipeline, a as WEBHOOK_ANOMALY_COUNTER_DEFAULTS, b as createFixedWindowRateLimiter, l as applyBasicWebhookRequestGuards, o as WEBHOOK_RATE_LIMIT_DEFAULTS, x as createWebhookAnomalyTracker, z as registerWebhookTarget } from "./runtime-api-qxdOyk3M.js";
-import { ZaloWebhookPayloadError } from "./webhook-spool-DzCPbb3O.js";
+import { ZaloWebhookPayloadError } from "./webhook-spool-Bf17xwqi.js";
 import { safeEqualSecret } from "openclaw/plugin-sdk/security-runtime";
 import { readWebhookBodyOrReject } from "openclaw/plugin-sdk/webhook-request-guards";
 //#region extensions/zalo/src/monitor.webhook.ts
@@ -20,9 +20,6 @@ function clearZaloWebhookSecurityStateForTest() {
 	webhookRateLimiter.clear();
 	webhookAnomalyTracker.clear();
 }
-function getZaloWebhookRateLimitStateSizeForTest() {
-	return webhookRateLimiter.size();
-}
 function getZaloWebhookStatusCounterSizeForTest() {
 	return webhookAnomalyTracker.size();
 }
@@ -119,7 +116,6 @@ async function handleZaloWebhookRequest(req, res) {
 }
 const zaloWebhookRuntime = {
 	clearZaloWebhookSecurityStateForTest,
-	getZaloWebhookRateLimitStateSizeForTest,
 	getZaloWebhookStatusCounterSizeForTest,
 	handleZaloWebhookRequest,
 	registerZaloWebhookTarget

package/dist/{send-BUvbbedq.js → send-BGGtv8x_.js}

@@ -1,4 +1,4 @@
-import { d as resolveZaloAccount, f as resolveZaloToken } from "./setup-core-LzhuTlsD.js";
+import { d as resolveZaloAccount, f as resolveZaloToken } from "./setup-core-T6qc2eAG.js";
 import { createMessageReceiptFromOutboundResults } from "openclaw/plugin-sdk/channel-outbound";
 import { stripChannelTargetPrefix, stripTargetKindPrefix } from "openclaw/plugin-sdk/core";
 import { formatErrorMessage } from "openclaw/plugin-sdk/error-runtime";

package/dist/setup-api.js

@@ -1,4 +1,4 @@
-import { n as zaloDmPolicy, r as zaloSetupAdapter, t as createZaloSetupWizardProxy } from "./setup-core-LzhuTlsD.js";
+import { n as zaloDmPolicy, r as zaloSetupAdapter, t as createZaloSetupWizardProxy } from "./setup-core-T6qc2eAG.js";
 import { n as resolveZaloRuntimeGroupPolicy } from "./group-access-8qHRzDHx.js";
 import { loadBundledEntryExportSync } from "openclaw/plugin-sdk/channel-entry-contract";
 //#region extensions/zalo/setup-api.ts
@@ -23,7 +23,7 @@ function createLazyObjectValue(load) {
 	});
 }
 function loadSetupSurfaceModule() {
-	return loadBundledEntryExportSync(import.meta.url, { specifier: "./src/setup-surface.js" });
+	return loadBundledEntryExportSync(import.meta.url, { specifier: "./setup-surface.js" });
 }
 const zaloSetupWizard = createLazyObjectValue(() => loadSetupSurfaceModule().zaloSetupWizard);
 //#endregion

package/dist/{setup-core-LzhuTlsD.js → setup-core-T6qc2eAG.js}

@@ -244,7 +244,8 @@ const zaloSetupContract = defineChannelSetupContract({
 			cli: {
 				flags: "--use-env",
 				description: "Use ZALO_BOT_TOKEN"
-			}
+			},
+			envVars: ["ZALO_BOT_TOKEN"]
 		}
 	},
 	legacyAdapter: zaloSetupAdapter
@@ -289,4 +290,4 @@ function createZaloSetupWizardProxy(loadWizard) {
 	});
 }
 //#endregion
-export { noteZaloTokenHelp as a, inspectZaloAccount as c, resolveZaloAccount as d, resolveZaloToken as f, zaloSetupContract as i, listZaloAccountIds as l, normalizeSecretInputString as m, zaloDmPolicy as n, promptZaloAllowFrom as o, buildSecretInputSchema as p, zaloSetupAdapter as r, accounts_exports as s, createZaloSetupWizardProxy as t, resolveDefaultZaloAccountId as u };
+export { noteZaloTokenHelp as a, inspectZaloAccount as c, resolveZaloAccount as d, resolveZaloToken as f, __exportAll as h, zaloSetupContract as i, listZaloAccountIds as l, normalizeSecretInputString as m, zaloDmPolicy as n, promptZaloAllowFrom as o, buildSecretInputSchema as p, zaloSetupAdapter as r, accounts_exports as s, createZaloSetupWizardProxy as t, resolveDefaultZaloAccountId as u };

package/dist/{setup-surface-CQMbpZye.js → setup-surface-edfRk3eu.js}

@@ -1,6 +1,7 @@
-import { a as noteZaloTokenHelp, c as inspectZaloAccount, n as zaloDmPolicy, o as promptZaloAllowFrom } from "./setup-core-LzhuTlsD.js";
+import { a as noteZaloTokenHelp, c as inspectZaloAccount, h as __exportAll, n as zaloDmPolicy, o as promptZaloAllowFrom } from "./setup-core-T6qc2eAG.js";
 import { DEFAULT_ACCOUNT_ID, buildSingleChannelSecretPromptState, createSetupTranslator, createStandardChannelSetupStatus, hasConfiguredSecretInput, promptSingleChannelSecretInput, runSingleChannelSecretStep } from "openclaw/plugin-sdk/setup";
 //#region extensions/zalo/src/setup-surface.ts
+var setup_surface_exports = /* @__PURE__ */ __exportAll({ zaloSetupWizard: () => zaloSetupWizard });
 const t = createSetupTranslator();
 const channel = "zalo";
 function setZaloUpdateMode(cfg, accountId, mode, webhookUrl, webhookSecret, webhookPath) {
@@ -211,4 +212,4 @@ const zaloSetupWizard = {
 	dmPolicy: zaloDmPolicy
 };
 //#endregion
-export { zaloSetupWizard };
+export { zaloSetupWizard as n, setup_surface_exports as t };

package/dist/setup-surface.js

@@ -0,0 +1,3 @@
+import { r as zaloSetupAdapter } from "./setup-core-T6qc2eAG.js";
+import { n as zaloSetupWizard } from "./setup-surface-edfRk3eu.js";
+export { zaloSetupAdapter, zaloSetupWizard };

package/dist/{webhook-spool-DzCPbb3O.js → webhook-spool-Bf17xwqi.js}

@@ -1,8 +1,9 @@
 import { t as getZaloRuntime } from "./runtime-api-qxdOyk3M.js";
-import { r as ZaloApiError } from "./send-BUvbbedq.js";
+import { r as ZaloApiError } from "./send-BGGtv8x_.js";
 import { DEFAULT_INGRESS_ADOPTION_STALL_MS, DEFAULT_INGRESS_RETRY_MAX_ATTEMPTS, bindIngressLifecycleToReplyOptions, createChannelIngressError, createChannelIngressMonitor } from "openclaw/plugin-sdk/channel-outbound";
 import { normalizeNullableString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { isRecord } from "openclaw/plugin-sdk/channel-secret-basic-runtime";
+import { formatErrorMessage } from "openclaw/plugin-sdk/error-runtime";
 import { runDetachedWebhookWork } from "openclaw/plugin-sdk/webhook-request-guards";
 //#region extensions/zalo/src/webhook-spool.ts
 const ZALO_WEBHOOK_SPOOL_VERSION = 1;
@@ -51,9 +52,6 @@ function parseClaimedUpdate(payload, claimedId) {
 	if (eventName === "message.text.received" && typeof message.text !== "string") throw new ZaloWebhookPayloadError("Zalo text event is missing message.text.");
 	return facts.update;
 }
-function errorText(error) {
-	return error instanceof Error ? error.message : String(error);
-}
 function isZaloAuthenticationFailure(error) {
 	let current = error;
 	const seen = /* @__PURE__ */ new Set();
@@ -99,14 +97,14 @@ function createZaloWebhookIngress(options) {
 				};
 				if (isZaloAuthenticationFailure(error)) return {
 					reason: "authentication-failed",
-					message: errorText(error)
+					message: formatErrorMessage(error)
 				};
 				return null;
 			},
 			onLog: (message) => options.runtime.error?.(`zalo ingress: ${message}`)
 		},
 		createStoppedError: () => /* @__PURE__ */ new Error("Zalo ingress stopped."),
-		onError: (error) => options.runtime.error?.(`zalo ingress drain failed: ${errorText(error)}`)
+		onError: (error) => options.runtime.error?.(`zalo ingress drain failed: ${formatErrorMessage(error)}`)
 	});
 	return {
 		accept: async (rawEvent) => {

package/openclaw.plugin.json

@@ -1,5 +1,6 @@
 {
   "id": "zalo",
+  "doctorContract": {},
   "name": "Zalo",
   "description": "OpenClaw Zalo channel plugin for bot and webhook chats.",
   "icon": "https://cdn.simpleicons.org/zalo",
@@ -26,6 +27,9 @@
           "enabled": {
             "type": "boolean"
           },
+          "configWrites": {
+            "type": "boolean"
+          },
           "markdown": {
             "type": "object",
             "properties": {
@@ -71,6 +75,29 @@
                     ],
                     "additionalProperties": false
                   },
+                  {
+                    "type": "object",
+                    "properties": {
+                      "source": {
+                        "type": "string",
+                        "const": "store"
+                      },
+                      "provider": {
+                        "type": "string",
+                        "pattern": "^[a-z][a-z0-9_-]{0,63}$"
+                      },
+                      "id": {
+                        "type": "string",
+                        "pattern": "^[A-Z][A-Z0-9_]{0,127}$"
+                      }
+                    },
+                    "required": [
+                      "source",
+                      "provider",
+                      "id"
+                    ],
+                    "additionalProperties": false
+                  },
                   {
                     "type": "object",
                     "properties": {
@@ -155,6 +182,29 @@
                     ],
                     "additionalProperties": false
                   },
+                  {
+                    "type": "object",
+                    "properties": {
+                      "source": {
+                        "type": "string",
+                        "const": "store"
+                      },
+                      "provider": {
+                        "type": "string",
+                        "pattern": "^[a-z][a-z0-9_-]{0,63}$"
+                      },
+                      "id": {
+                        "type": "string",
+                        "pattern": "^[A-Z][A-Z0-9_]{0,127}$"
+                      }
+                    },
+                    "required": [
+                      "source",
+                      "provider",
+                      "id"
+                    ],
+                    "additionalProperties": false
+                  },
                   {
                     "type": "object",
                     "properties": {
@@ -270,6 +320,9 @@
                 "enabled": {
                   "type": "boolean"
                 },
+                "configWrites": {
+                  "type": "boolean"
+                },
                 "markdown": {
                   "type": "object",
                   "properties": {
@@ -315,6 +368,29 @@
                           ],
                           "additionalProperties": false
                         },
+                        {
+                          "type": "object",
+                          "properties": {
+                            "source": {
+                              "type": "string",
+                              "const": "store"
+                            },
+                            "provider": {
+                              "type": "string",
+                              "pattern": "^[a-z][a-z0-9_-]{0,63}$"
+                            },
+                            "id": {
+                              "type": "string",
+                              "pattern": "^[A-Z][A-Z0-9_]{0,127}$"
+                            }
+                          },
+                          "required": [
+                            "source",
+                            "provider",
+                            "id"
+                          ],
+                          "additionalProperties": false
+                        },
                         {
                           "type": "object",
                           "properties": {
@@ -399,6 +475,29 @@
                           ],
                           "additionalProperties": false
                         },
+                        {
+                          "type": "object",
+                          "properties": {
+                            "source": {
+                              "type": "string",
+                              "const": "store"
+                            },
+                            "provider": {
+                              "type": "string",
+                              "pattern": "^[a-z][a-z0-9_-]{0,63}$"
+                            },
+                            "id": {
+                              "type": "string",
+                              "pattern": "^[A-Z][A-Z0-9_]{0,127}$"
+                            }
+                          },
+                          "required": [
+                            "source",
+                            "provider",
+                            "id"
+                          ],
+                          "additionalProperties": false
+                        },
                         {
                           "type": "object",
                           "properties": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openclaw/zalo",
-  "version": "2026.7.2-beta.7",
+  "version": "2026.8.1-beta.2",
   "description": "OpenClaw Zalo channel plugin for bot and webhook chats.",
   "repository": {
     "type": "git",
@@ -8,7 +8,7 @@
   },
   "type": "module",
   "peerDependencies": {
-    "openclaw": ">=2026.7.2-beta.7"
+    "openclaw": ">=2026.8.1-beta.2"
   },
   "peerDependenciesMeta": {
     "openclaw": {
@@ -69,7 +69,10 @@
             "cli": {
               "flags": "--use-env",
               "description": "Use ZALO_BOT_TOKEN"
-            }
+            },
+            "envVars": [
+              "ZALO_BOT_TOKEN"
+            ]
           }
         ]
       }
@@ -80,10 +83,10 @@
       "minHostVersion": ">=2026.4.10"
     },
     "compat": {
-      "pluginApi": ">=2026.7.2-beta.7"
+      "pluginApi": ">=2026.8.1-beta.2"
     },
     "build": {
-      "openclawVersion": "2026.7.2-beta.7"
+      "openclawVersion": "2026.8.1-beta.2"
     },
     "release": {
       "publishToClawHub": true,