@openclaw/zalo 2026.7.2-beta.7 → 2026.8.1-beta.3

package/dist/{actions.runtime-BYBjeo4Q.js → actions.runtime-DUY9_6Ss.js}

@@ -1,4 +1,4 @@
-import { t as sendMessageZalo } from "./send-BUvbbedq.js";
+import { t as sendMessageZalo } from "./send-DVMIplpy.js";
 //#region extensions/zalo/src/actions.runtime.ts
 const zaloActionsRuntime = { sendMessageZalo };
 //#endregion

package/dist/api.js

@@ -1,5 +1,5 @@
-import { n as zaloDmPolicy, r as zaloSetupAdapter, t as createZaloSetupWizardProxy } from "./setup-core-LzhuTlsD.js";
-import { t as zaloPlugin } from "./channel-idqJI6YK.js";
+import { n as zaloDmPolicy, r as zaloSetupAdapter, t as createZaloSetupWizardProxy } from "./setup-core-CcCJ1E26.js";
+import { t as zaloPlugin } from "./channel-Vdxu1Y3k.js";
 import { n as resolveZaloRuntimeGroupPolicy } from "./group-access-8qHRzDHx.js";
 import { zaloSetupWizard } from "./setup-api.js";
 export { createZaloSetupWizardProxy, resolveZaloRuntimeGroupPolicy, zaloDmPolicy, zaloPlugin, zaloSetupAdapter, zaloSetupWizard };

package/dist/{channel-idqJI6YK.js → channel-Vdxu1Y3k.js}

@@ -1,12 +1,12 @@
-import { c as inspectZaloAccount, d as resolveZaloAccount, i as zaloSetupContract, l as listZaloAccountIds, p as buildSecretInputSchema, r as zaloSetupAdapter, t as createZaloSetupWizardProxy, u as resolveDefaultZaloAccountId } from "./setup-core-LzhuTlsD.js";
-import { n as collectRuntimeConfigAssignments, r as secretTargetRegistryEntries } from "./secret-contract-Bxvjh0Hq.js";
+import { c as inspectZaloAccount, d as resolveZaloAccount, i as zaloSetupContract, l as listZaloAccountIds, p as buildSecretInputSchema, t as createZaloSetupWizardProxy, u as resolveDefaultZaloAccountId } from "./setup-core-CcCJ1E26.js";
+import { n as collectRuntimeConfigAssignments, r as secretTargetRegistryEntries } from "./secret-contract-Cpsqe5Cv.js";
 import { describeWebhookAccountSnapshot } from "openclaw/plugin-sdk/account-helpers";
 import { DEFAULT_ACCOUNT_ID } from "openclaw/plugin-sdk/account-id";
 import { formatAllowFromLowercase } from "openclaw/plugin-sdk/allow-from";
 import { adaptScopedAccountAccessor, createScopedChannelConfigAdapter, createScopedDmSecurityResolver, mapAllowFromEntries } from "openclaw/plugin-sdk/channel-config-helpers";
 import { buildChannelConfigSchema, createChatChannelPlugin } from "openclaw/plugin-sdk/channel-core";
 import { defineChannelMessageAdapter } from "openclaw/plugin-sdk/channel-outbound";
-import { buildOpenGroupPolicyRestrictSendersWarning, buildOpenGroupPolicyWarning, createOpenProviderGroupPolicyWarningCollector } from "openclaw/plugin-sdk/channel-policy";
+import { buildOpenGroupPolicyRestrictSendersWarning, buildOpenGroupPolicyWarning, createConditionalWarningCollector, createOpenProviderGroupPolicyWarningCollector } from "openclaw/plugin-sdk/channel-policy";
 import { createAttachedChannelResultAdapter, createEmptyChannelResult } from "openclaw/plugin-sdk/channel-send-result";
 import { buildTokenChannelStatusSummary } from "openclaw/plugin-sdk/channel-status";
 import { createStaticReplyToModeResolver } from "openclaw/plugin-sdk/conversation-runtime";
@@ -16,15 +16,15 @@ import { sendPayloadWithChunkedTextAndMedia } from "openclaw/plugin-sdk/reply-pa
 import { createComputedAccountStatusAdapter, createDefaultChannelRuntimeState, standardDmPolicyOpenIssue } from "openclaw/plugin-sdk/status-helpers";
 import { chunkTextForOutbound, sanitizeAssistantVisibleText } from "openclaw/plugin-sdk/text-chunking";
 import { normalizeLowercaseStringOrEmpty } from "openclaw/plugin-sdk/string-coerce-runtime";
-import { buildChannelOutboundSessionRoute, stripChannelTargetPrefix, stripTargetKindPrefix } from "openclaw/plugin-sdk/core";
 import { jsonResult, readStringParam } from "openclaw/plugin-sdk/channel-actions";
 import { extractToolSend } from "openclaw/plugin-sdk/tool-send";
 import { createChannelApprovalAuth } from "openclaw/plugin-sdk/approval-auth-runtime";
 import { AllowFromListSchema, DmPolicySchema, GroupPolicySchema, MarkdownConfigSchema, buildMultiAccountChannelSchema } from "openclaw/plugin-sdk/channel-config-schema";
 import { z } from "zod";
+import { buildChannelOutboundSessionRoute, stripChannelTargetPrefix, stripTargetKindPrefix } from "openclaw/plugin-sdk/core";
 import { coerceStatusIssueAccountId, readStatusIssueFields } from "openclaw/plugin-sdk/extension-shared";
 //#region extensions/zalo/src/actions.ts
-const loadZaloActionsRuntime = createLazyRuntimeNamedExport(() => import("./actions.runtime-BYBjeo4Q.js"), "zaloActionsRuntime");
+const loadZaloActionsRuntime = createLazyRuntimeNamedExport(() => import("./actions.runtime-DUY9_6Ss.js"), "zaloActionsRuntime");
 const providerId = "zalo";
 const ZALO_ACTIONS = /* @__PURE__ */ new Set(["send"]);
 function listEnabledAccounts(cfg, accountId) {
@@ -92,6 +92,7 @@ const zaloApprovalAuth = createChannelApprovalAuth({
 const ZaloConfigSchema = buildMultiAccountChannelSchema(z.object({
 	name: z.string().optional(),
 	enabled: z.boolean().optional(),
+	configWrites: z.boolean().optional(),
 	markdown: MarkdownConfigSchema,
 	botToken: buildSecretInputSchema().optional(),
 	tokenFile: z.string().optional(),
@@ -179,8 +180,8 @@ function looksLikeZaloChatId(raw, normalized) {
 	const target = normalizeZaloMessagingTarget(normalized ?? raw);
 	return Boolean(target);
 }
-const loadZaloChannelRuntime = createLazyRuntimeModule(() => import("./channel.runtime-DsaLk085.js"));
-const zaloSetupWizard = createZaloSetupWizardProxy(async () => (await import("./setup-surface-CQMbpZye.js")).zaloSetupWizard);
+const loadZaloChannelRuntime = createLazyRuntimeModule(() => import("./channel.runtime-UD-M7eDb.js"));
+const zaloSetupWizard = createZaloSetupWizardProxy(async () => (await import("./setup-surface-CIpp_MDf.js").then((n) => n.t)).zaloSetupWizard);
 const zaloTextChunkLimit = 2e3;
 async function sendZaloDelivery(ctx) {
 	const result = await (await loadZaloChannelRuntime()).sendZaloText({
@@ -259,11 +260,16 @@ const collectZaloSecurityWarnings = createOpenProviderGroupPolicyWarningCollecto
 		})];
 	}
 });
+const collectZaloOpenGroupFindings = createConditionalWarningCollector.findings({
+	collectWarnings: collectZaloSecurityWarnings,
+	checkId: "channels.zalo.groups.open",
+	severity: "critical",
+	title: "Zalo security warning"
+});
 const zaloPlugin = createChatChannelPlugin({
 	base: {
 		id: "zalo",
 		meta,
-		setup: zaloSetupAdapter,
 		setupContract: zaloSetupContract,
 		setupWizard: zaloSetupWizard,
 		capabilities: {
@@ -301,6 +307,10 @@ const zaloPlugin = createChatChannelPlugin({
 		messaging: {
 			targetPrefixes: ["zalo", "zl"],
 			normalizeTarget: normalizeZaloMessagingTarget,
+			inferTargetChatType: ({ to }) => {
+				const target = normalizeZaloMessagingTarget(to);
+				return target ? /^group:/i.test(target) ? "group" : "direct" : void 0;
+			},
 			resolveOutboundSessionRoute: (params) => resolveZaloOutboundSessionRoute(params),
 			targetResolver: {
 				looksLikeId: looksLikeZaloChatId,
@@ -345,7 +355,7 @@ const zaloPlugin = createChatChannelPlugin({
 	},
 	security: {
 		resolveDmPolicy: resolveZaloDmPolicy,
-		collectWarnings: collectZaloSecurityWarnings
+		collectWarnings: collectZaloOpenGroupFindings
 	},
 	pairing: { text: {
 		idLabel: "zaloUserId",

package/dist/channel-plugin-api.js

@@ -1,2 +1,2 @@
-import { t as zaloPlugin } from "./channel-idqJI6YK.js";
+import { t as zaloPlugin } from "./channel-Vdxu1Y3k.js";
 export { zaloPlugin };

package/dist/{channel.runtime-DsaLk085.js → channel.runtime-UD-M7eDb.js}

@@ -1,58 +1,41 @@
-import { m as normalizeSecretInputString } from "./setup-core-LzhuTlsD.js";
-import { i as PAIRING_APPROVED_MESSAGE } from "./runtime-api-qxdOyk3M.js";
-import { a as getMe, n as resolveZaloProxyFetch, r as ZaloApiError, t as sendMessageZalo } from "./send-BUvbbedq.js";
+import { m as normalizeSecretInputString } from "./setup-core-CcCJ1E26.js";
+import { i as PAIRING_APPROVED_MESSAGE } from "./runtime-api-BNim5FCa.js";
+import { a as getMe, n as resolveZaloProxyFetch, r as ZaloApiError, t as sendMessageZalo } from "./send-DVMIplpy.js";
 import { createAccountStatusSink } from "openclaw/plugin-sdk/channel-outbound";
+import { runChannelProbe } from "openclaw/plugin-sdk/text-utility-runtime";
 //#region extensions/zalo/src/probe.ts
+function formatZaloProbeError(error, timeoutMs) {
+	if (error instanceof ZaloApiError) return error.description ?? error.message;
+	if (error instanceof Error) return error.name === "AbortError" ? `Request timed out after ${timeoutMs}ms` : error.message;
+	return String(error);
+}
 async function probeZalo(token, timeoutMs = 5e3, fetcher) {
 	if (!token?.trim()) return {
 		ok: false,
 		error: "No token provided",
 		elapsedMs: 0
 	};
-	const startTime = Date.now();
-	try {
+	return await runChannelProbe(void 0, async ({ elapsedMs }) => {
 		const response = await getMe(token.trim(), timeoutMs, fetcher);
-		const elapsedMs = Date.now() - startTime;
 		if (response.ok && response.result) return {
 			ok: true,
 			bot: response.result,
-			elapsedMs
+			elapsedMs: elapsedMs()
 		};
 		return {
 			ok: false,
 			error: "Invalid response from Zalo API",
-			elapsedMs
-		};
-	} catch (err) {
-		const elapsedMs = Date.now() - startTime;
-		if (err instanceof ZaloApiError) return {
-			ok: false,
-			error: err.description ?? err.message,
-			elapsedMs
+			elapsedMs: elapsedMs()
 		};
-		if (err instanceof Error) {
-			if (err.name === "AbortError") return {
-				ok: false,
-				error: `Request timed out after ${timeoutMs}ms`,
-				elapsedMs
-			};
-			return {
-				ok: false,
-				error: err.message,
-				elapsedMs
-			};
-		}
-		return {
-			ok: false,
-			error: String(err),
-			elapsedMs
-		};
-	}
+	}, (error) => ({
+		ok: false,
+		error: formatZaloProbeError(error, timeoutMs)
+	}));
 }
 //#endregion
 //#region extensions/zalo/src/channel.runtime.ts
 async function notifyZaloPairingApproval(params) {
-	const { resolveZaloAccount } = await import("./setup-core-LzhuTlsD.js").then((n) => n.s);
+	const { resolveZaloAccount } = await import("./setup-core-CcCJ1E26.js").then((n) => n.s);
 	const account = resolveZaloAccount({ cfg: params.cfg });
 	if (!account.token) throw new Error("Zalo token not configured");
 	await sendMessageZalo(params.id, PAIRING_APPROVED_MESSAGE, { token: account.token });
@@ -86,7 +69,7 @@ async function startZaloGatewayAccount(ctx) {
 		setStatus: ctx.setStatus
 	});
 	ctx.log?.info(`[${account.accountId}] starting provider${zaloBotLabel} mode=${mode}`);
-	const { monitorZaloProvider } = await import("./monitor-C5cximHM.js");
+	const { monitorZaloProvider } = await import("./monitor-JdVVhnCm.js");
 	return monitorZaloProvider({
 		token,
 		account,

package/dist/{monitor-C5cximHM.js → monitor-JdVVhnCm.js}

@@ -1,16 +1,18 @@
 import { n as resolveZaloRuntimeGroupPolicy, t as normalizeZaloAllowEntry } from "./group-access-8qHRzDHx.js";
-import { t as getZaloRuntime } from "./runtime-api-qxdOyk3M.js";
-import { c as sendChatAction, d as setWebhook, f as ZALO_OUTBOUND_MEDIA_TTL_MS, i as deleteWebhook, l as sendMessage, n as resolveZaloProxyFetch, o as getUpdates, r as ZaloApiError, s as getWebhookInfo, u as sendPhoto } from "./send-BUvbbedq.js";
+import { t as getZaloRuntime } from "./runtime-api-BNim5FCa.js";
+import { c as sendChatAction, d as setWebhook, f as ZALO_OUTBOUND_MEDIA_TTL_MS, i as deleteWebhook, l as sendMessage, n as resolveZaloProxyFetch, o as getUpdates, r as ZaloApiError, s as getWebhookInfo, u as sendPhoto } from "./send-DVMIplpy.js";
+import { createMessageReceiptFromOutboundResults } from "openclaw/plugin-sdk/channel-outbound";
 import { createLazyRuntimeModule, createLazyRuntimeNamedExport } from "openclaw/plugin-sdk/lazy-runtime";
 import { deliverTextOrMediaReply, resolveSendableOutboundReplyParts } from "openclaw/plugin-sdk/reply-payload";
 import { normalizeStringEntries } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { resolveDefaultGroupPolicy, warnMissingProviderGroupPolicyFallbackOnce } from "openclaw/plugin-sdk/runtime-group-policy";
 import { createChannelPairingController } from "openclaw/plugin-sdk/channel-pairing";
 import { logTypingFailure } from "openclaw/plugin-sdk/channel-feedback";
-import { registerPluginHttpRoute, resolveWebhookPath } from "openclaw/plugin-sdk/webhook-ingress";
+import { canonicalizeWebhookRouteKey, registerPluginHttpRoute, resolveWebhookPath } from "openclaw/plugin-sdk/webhook-ingress";
 import { asDateTimestampMs, resolveExpiresAtMsFromDurationMs } from "openclaw/plugin-sdk/number-runtime";
-import { formatInboundMediaUnavailableText, resolveChannelInboundRouteEnvelope } from "openclaw/plugin-sdk/channel-inbound";
+import { createChannelPartialDeliveryError, formatInboundMediaUnavailableText, resolveChannelInboundRouteEnvelope } from "openclaw/plugin-sdk/channel-inbound";
 import { resolveStableChannelMessageIngress } from "openclaw/plugin-sdk/channel-ingress-runtime";
+import { channelReadyPatch } from "openclaw/plugin-sdk/gateway-runtime";
 import { sleepWithAbort, waitForAbortSignal } from "openclaw/plugin-sdk/runtime-env";
 import { createHostedOutboundMediaStore } from "openclaw/plugin-sdk/outbound-media";
 import { safeEqualSecret } from "openclaw/plugin-sdk/security-runtime";
@@ -115,35 +117,44 @@ async function tryHandleHostedZaloMediaRequest(req, res) {
 		res.end("Expired");
 		return true;
 	}
-	const entry = await store.read(id, now);
-	if (!entry || entry.metadata.routePath !== routePath) {
+	const metadata = await store.readMetadata(id, now);
+	if (!metadata || metadata.routePath !== routePath) {
 		res.statusCode = 404;
 		res.end("Not Found");
 		return true;
 	}
-	const expiresAt = asDateTimestampMs(entry.metadata.expiresAt);
+	const expiresAt = asDateTimestampMs(metadata.expiresAt);
 	if (expiresAt === void 0 || expiresAt <= now) {
 		await store.delete(id);
 		res.statusCode = 410;
 		res.end("Expired");
 		return true;
 	}
-	if (!safeEqualSecret(url.searchParams.get("token"), entry.metadata.token)) {
+	const token = url.searchParams.get("token");
+	if (!safeEqualSecret(token, metadata.token)) {
 		res.statusCode = 401;
 		res.end("Unauthorized");
 		return true;
 	}
-	if (entry.metadata.contentType) res.setHeader("Content-Type", entry.metadata.contentType);
+	let servedMetadata = metadata;
+	let body;
+	if (method === "GET") {
+		const entry = await store.read(id, now);
+		if (!entry || entry.metadata.routePath !== routePath || !safeEqualSecret(token, entry.metadata.token)) {
+			res.statusCode = 404;
+			res.end("Not Found");
+			return true;
+		}
+		servedMetadata = entry.metadata;
+		body = entry.buffer;
+	}
+	if (servedMetadata.contentType) res.setHeader("Content-Type", servedMetadata.contentType);
 	res.setHeader("Cache-Control", "no-store");
 	res.setHeader("X-Content-Type-Options", "nosniff");
-	res.setHeader("Content-Length", String(entry.metadata.byteLength));
-	if (method === "HEAD") {
-		res.statusCode = 200;
-		res.end();
-		return true;
-	}
+	res.setHeader("Content-Length", String(servedMetadata.byteLength));
 	res.statusCode = 200;
-	res.end(entry.buffer);
+	res.end(body);
+	if (method === "HEAD") return true;
 	await store.delete(id);
 	return true;
 }
@@ -163,31 +174,23 @@ function resolveZaloTimestampMs(date) {
 	if (!date) return;
 	return date >= UNIX_MILLISECONDS_THRESHOLD ? date : date * 1e3;
 }
-const loadZaloWebhookRuntime = createLazyRuntimeNamedExport(() => import("./monitor.webhook-D56OCa3C.js"), "zaloWebhookRuntime");
-const loadZaloWebhookIngressRuntime = createLazyRuntimeNamedExport(() => import("./webhook-spool-DzCPbb3O.js"), "zaloWebhookIngressRuntime");
+const loadZaloWebhookRuntime = createLazyRuntimeNamedExport(() => import("./monitor.webhook-cl1sV6j0.js"), "zaloWebhookRuntime");
+const loadZaloWebhookIngressRuntime = createLazyRuntimeNamedExport(() => import("./webhook-spool-Bdnu4GjY.js"), "zaloWebhookIngressRuntime");
 const loadZaloWebhookModule = createLazyRuntimeModule(async () => ({
 	...await loadZaloWebhookRuntime(),
 	...await loadZaloWebhookIngressRuntime()
 }));
-function releaseSharedHostedMediaRouteRef(routePath) {
-	const current = hostedMediaRouteRefs.get(routePath);
-	if (!current) return;
-	if (current.count > 1) {
-		current.count -= 1;
-		return;
-	}
-	hostedMediaRouteRefs.delete(routePath);
-	for (const unregisterHandle of current.unregisters) unregisterHandle();
-}
 function registerSharedHostedMediaRoute(params) {
+	const routeKey = canonicalizeWebhookRouteKey(params.path);
 	const unregister = registerPluginHttpRoute({
 		auth: "plugin",
 		match: "prefix",
 		path: params.path,
 		pluginId: "zalo",
 		source: "zalo-hosted-media",
-		accountId: params.accountId,
 		log: params.log,
+		reuseExistingSameOwner: true,
+		throwOnFailure: true,
 		handler: async (req, res) => {
 			if (!await tryHandleHostedZaloMediaRequest(req, res) && !res.headersSent) {
 				res.statusCode = 404;
@@ -196,17 +199,23 @@ function registerSharedHostedMediaRoute(params) {
 			}
 		}
 	});
-	const existing = hostedMediaRouteRefs.get(params.path);
-	if (existing) {
-		existing.count += 1;
-		existing.unregisters.push(unregister);
-		return () => releaseSharedHostedMediaRouteRef(params.path);
-	}
-	hostedMediaRouteRefs.set(params.path, {
-		count: 1,
-		unregisters: [unregister]
-	});
-	return () => releaseSharedHostedMediaRouteRef(params.path);
+	const acquired = hostedMediaRouteRefs.get(routeKey) ?? {
+		count: 0,
+		unregisters: []
+	};
+	if (acquired.count === 0) hostedMediaRouteRefs.set(routeKey, acquired);
+	acquired.count += 1;
+	acquired.unregisters.push(unregister);
+	let released = false;
+	return () => {
+		if (released) return;
+		released = true;
+		if (hostedMediaRouteRefs.get(routeKey) !== acquired) return;
+		acquired.count -= 1;
+		if (acquired.count > 0) return;
+		hostedMediaRouteRefs.delete(routeKey);
+		for (const unregisterHandle of acquired.unregisters) unregisterHandle();
+	};
 }
 function formatZaloError(error) {
 	if (error instanceof Error) return error.stack ?? `${error.name}: ${error.message}`;
@@ -253,6 +262,7 @@ function startPollingLoop(params) {
 		try {
 			const response = await getUpdates(token, { timeout: pollTimeout }, fetcher);
 			if (isStopped() || abortSignal.aborted) return;
+			if (response.ok) statusSink?.(channelReadyPatch());
 			if (response.ok && response.result) {
 				statusSink?.({ lastInboundAt: Date.now() });
 				await processUpdate({
@@ -262,7 +272,13 @@ function startPollingLoop(params) {
 			}
 		} catch (err) {
 			if (err instanceof ZaloApiError && err.isPollingTimeout) {} else if (!isStopped() && !abortSignal.aborted) {
-				runtime.error?.(`[${account.accountId}] Zalo polling error: ${formatZaloError(err)}`);
+				const error = formatZaloError(err);
+				runtime.error?.(`[${account.accountId}] Zalo polling error: ${error}`);
+				statusSink?.({
+					connected: false,
+					lifecycle: "recovering",
+					lastError: error
+				});
 				await sleepWithAbort(5e3, abortSignal).catch(() => void 0);
 			}
 		}
@@ -385,7 +401,7 @@ async function authorizeZaloMessage(params) {
 		defaultGroupPolicy
 	});
 	const shouldComputeAuth = core.channel.commands.shouldComputeCommandAuthorized(rawBody, config);
-	const access = await resolveStableChannelMessageIngress({
+	const resolveChannelIngress = async (contextBinding) => await resolveStableChannelMessageIngress({
 		channelId: "zalo",
 		accountId: account.accountId,
 		identity: {
@@ -401,6 +417,7 @@ async function authorizeZaloMessage(params) {
 			kind: isGroup ? "group" : "direct",
 			id: chatId
 		},
+		contextBinding,
 		providerMissingFallbackApplied,
 		dmPolicy,
 		groupPolicy,
@@ -409,6 +426,7 @@ async function authorizeZaloMessage(params) {
 		groupAllowFrom: normalizeStringEntries(account.config.groupAllowFrom),
 		command: shouldComputeAuth ? {} : void 0
 	});
+	const access = await resolveChannelIngress();
 	const senderAccess = access.senderAccess;
 	if (isGroup) {
 		warnMissingProviderGroupPolicyFallbackOnce({
@@ -451,6 +469,8 @@ async function authorizeZaloMessage(params) {
 		return;
 	}
 	return {
+		channelIngress: access,
+		resolveChannelIngress,
 		chatId,
 		commandAuthorized: access.commandAccess.requested ? access.commandAccess.authorized : void 0,
 		isGroup,
@@ -468,7 +488,7 @@ async function processMessageWithPipeline(params) {
 		mediaType
 	});
 	if (!authorization) return;
-	const { isGroup, chatId, senderId, senderName, rawBody, commandAuthorized } = authorization;
+	const { isGroup, chatId, senderId, senderName, rawBody } = authorization;
 	const agentBody = agentBodyOverride ?? rawBody;
 	const { route, buildEnvelope } = resolveChannelInboundRouteEnvelope({
 		cfg: config,
@@ -479,6 +499,17 @@ async function processMessageWithPipeline(params) {
 			id: chatId
 		}
 	});
+	const channelIngress = await authorization.resolveChannelIngress({
+		agentId: route.agentId,
+		sessionKey: route.sessionKey,
+		messageId: message_id,
+		inboundEventKind: "user_request"
+	});
+	if (!channelIngress.senderAccess.allowed) {
+		logVerbose(core, runtime, `zalo: authorization changed before dispatch for ${senderId}`);
+		return;
+	}
+	const commandAuthorized = channelIngress.commandAccess.requested ? channelIngress.commandAccess.authorized : void 0;
 	if (isGroup && core.channel.commands.isControlCommandMessage(rawBody, config) && commandAuthorized !== true) {
 		logVerbose(core, runtime, `zalo: drop control command from unauthorized sender ${senderId}`);
 		return;
@@ -492,6 +523,7 @@ async function processMessageWithPipeline(params) {
 		body: agentBody
 	});
 	const ctxPayload = core.channel.inbound.buildContext({
+		channelIngress,
 		channel: "zalo",
 		accountId: route.accountId,
 		messageId: message_id,
@@ -561,7 +593,6 @@ async function processMessageWithPipeline(params) {
 					payload,
 					token,
 					chatId,
-					runtime,
 					core,
 					config,
 					webhookUrl: params.webhookUrl,
@@ -575,8 +606,8 @@ async function processMessageWithPipeline(params) {
 					tableMode: "off"
 				});
 			},
-			onDelivered: () => {
-				statusSink?.({ lastOutboundAt: Date.now() });
+			onDelivered: (_payload, _info, result) => {
+				if (result?.visibleReplySent !== false) statusSink?.({ lastOutboundAt: Date.now() });
 			},
 			onError: (err, info) => {
 				runtime.error?.(`[${account.accountId}] Zalo ${info.kind} reply failed: ${String(err)}`);
@@ -606,49 +637,64 @@ async function processMessageWithPipeline(params) {
 	});
 }
 async function deliverZaloReply(params) {
-	const { payload, token, chatId, runtime, core, config, webhookUrl, webhookPath, proxyUrl, mediaMaxBytes, canHostMedia, accountId, statusSink, fetcher } = params;
+	const { payload, token, chatId, core, config, webhookUrl, webhookPath, proxyUrl, mediaMaxBytes, canHostMedia, accountId, statusSink, fetcher } = params;
 	const tableMode = params.tableMode ?? "code";
 	const reply = resolveSendableOutboundReplyParts(payload, { text: core.channel.text.convertMarkdownTables(payload.text ?? "", tableMode) });
 	const chunkMode = core.channel.text.resolveChunkMode(config, "zalo", accountId);
-	await deliverTextOrMediaReply({
-		payload,
-		text: reply.text,
-		chunkText: (value) => core.channel.text.chunkMarkdownTextWithMode(value, ZALO_TEXT_LIMIT, chunkMode),
-		sendText: async (chunk) => {
-			try {
-				await sendMessage(token, {
+	const acceptedMessageIds = [];
+	let visibleReplySent = false;
+	const recordAcceptedSend = (result) => {
+		const messageId = result.result?.message_id;
+		if (messageId) acceptedMessageIds.push(messageId);
+		visibleReplySent = true;
+		statusSink?.({ lastOutboundAt: Date.now() });
+	};
+	try {
+		await deliverTextOrMediaReply({
+			payload,
+			text: reply.text,
+			chunkText: (value) => core.channel.text.chunkMarkdownTextWithMode(value, ZALO_TEXT_LIMIT, chunkMode),
+			sendText: async (chunk) => {
+				recordAcceptedSend(await sendMessage(token, {
 					chat_id: chatId,
 					text: chunk
-				}, fetcher);
-				statusSink?.({ lastOutboundAt: Date.now() });
-			} catch (err) {
-				runtime.error?.(`Zalo message send failed: ${String(err)}`);
+				}, fetcher));
+			},
+			sendMedia: async ({ mediaUrl, caption }) => {
+				const sendableMediaUrl = canHostMedia && webhookUrl && webhookPath ? await prepareHostedZaloMediaUrl({
+					mediaUrl,
+					webhookUrl,
+					webhookPath,
+					maxBytes: mediaMaxBytes,
+					proxyUrl
+				}) : mediaUrl;
+				recordAcceptedSend(await sendPhoto(token, {
+					chat_id: chatId,
+					photo: sendableMediaUrl,
+					caption
+				}, fetcher));
 			}
-		},
-		sendMedia: async ({ mediaUrl, caption }) => {
-			const sendableMediaUrl = canHostMedia && webhookUrl && webhookPath ? await prepareHostedZaloMediaUrl({
-				mediaUrl,
-				webhookUrl,
-				webhookPath,
-				maxBytes: mediaMaxBytes,
-				proxyUrl
-			}) : mediaUrl;
-			await sendPhoto(token, {
-				chat_id: chatId,
-				photo: sendableMediaUrl,
-				caption
-			}, fetcher);
-			statusSink?.({ lastOutboundAt: Date.now() });
-		},
-		onMediaError: (error) => {
-			runtime.error?.(`Zalo photo send failed: ${error instanceof Error ? error.message : JSON.stringify(error)}`);
-		}
-	});
+		});
+	} catch (error) {
+		if (!visibleReplySent) throw error;
+		throw createChannelPartialDeliveryError(error, {
+			messageIds: acceptedMessageIds,
+			receipt: createMessageReceiptFromOutboundResults({
+				results: acceptedMessageIds.map((messageId) => ({
+					channel: "zalo",
+					messageId
+				})),
+				kind: reply.hasMedia ? "media" : "text"
+			}),
+			visibleReplySent: true
+		});
+	}
 }
 async function monitorZaloProvider(options) {
 	const { token, account, config, runtime, abortSignal, useWebhook, webhookUrl, webhookSecret, webhookPath, statusSink, fetcher: fetcherOverride } = options;
 	const core = getZaloRuntime();
-	const effectiveMediaMaxMb = account.config.mediaMaxMb ?? DEFAULT_MEDIA_MAX_MB;
+	const configuredMediaMaxMb = account.config.mediaMaxMb;
+	const effectiveMediaMaxMb = typeof configuredMediaMaxMb === "number" && configuredMediaMaxMb > 0 ? configuredMediaMaxMb : DEFAULT_MEDIA_MAX_MB;
 	const fetcher = fetcherOverride ?? resolveZaloProxyFetch(account.config.proxy);
 	const mode = useWebhook ? "webhook" : "polling";
 	const effectiveWebhookUrl = normalizeWebhookUrl(webhookUrl ?? account.config.webhookUrl);
@@ -684,7 +730,6 @@ async function monitorZaloProvider(options) {
 		if (hostedMediaRoutePath) {
 			const unregisterHostedMediaRoute = registerSharedHostedMediaRoute({
 				path: hostedMediaRoutePath,
-				accountId: account.accountId,
 				log: runtime.log
 			});
 			stopHandlers.push(unregisterHostedMediaRoute);
@@ -735,6 +780,7 @@ async function monitorZaloProvider(options) {
 				source: "zalo-webhook",
 				accountId: account.accountId,
 				log: runtime.log,
+				throwOnFailure: true,
 				handler: async (req, res) => {
 					if (!await handleZaloWebhookRequest(req, res) && !res.headersSent) {
 						res.statusCode = 404;
@@ -748,6 +794,7 @@ async function monitorZaloProvider(options) {
 				url: effectiveWebhookUrl,
 				secret_token: webhookSecret
 			}, fetcher);
+			statusSink?.(channelReadyPatch());
 			let webhookCleanupPromise;
 			cleanupWebhook = async () => {
 				if (!webhookCleanupPromise) webhookCleanupPromise = (async () => {
@@ -800,7 +847,13 @@ async function monitorZaloProvider(options) {
 		});
 		await waitForAbortSignal(abortSignal);
 	} catch (err) {
-		runtime.error?.(`[${account.accountId}] Zalo provider startup failed mode=${mode}: ${formatZaloError(err)}`);
+		const error = formatZaloError(err);
+		runtime.error?.(`[${account.accountId}] Zalo provider startup failed mode=${mode}: ${error}`);
+		statusSink?.({
+			connected: false,
+			lifecycle: "recovering",
+			lastError: error
+		});
 		throw err;
 	} finally {
 		abortSignal.removeEventListener("abort", stopOnAbort);

package/dist/{monitor.webhook-D56OCa3C.js → monitor.webhook-cl1sV6j0.js}

@@ -1,5 +1,5 @@
-import { B as registerWebhookTargetWithPluginRoute, G as resolveWebhookTargetWithAuthOrRejectSync, V as resolveClientIp, Z as withResolvedWebhookRequestPipeline, a as WEBHOOK_ANOMALY_COUNTER_DEFAULTS, b as createFixedWindowRateLimiter, l as applyBasicWebhookRequestGuards, o as WEBHOOK_RATE_LIMIT_DEFAULTS, x as createWebhookAnomalyTracker, z as registerWebhookTarget } from "./runtime-api-qxdOyk3M.js";
-import { ZaloWebhookPayloadError } from "./webhook-spool-DzCPbb3O.js";
+import { B as registerWebhookTargetWithPluginRoute, G as resolveWebhookTargetWithAuthOrRejectSync, V as resolveClientIp, Z as withResolvedWebhookRequestPipeline, a as WEBHOOK_ANOMALY_COUNTER_DEFAULTS, b as createFixedWindowRateLimiter, l as applyBasicWebhookRequestGuards, o as WEBHOOK_RATE_LIMIT_DEFAULTS, x as createWebhookAnomalyTracker, z as registerWebhookTarget } from "./runtime-api-BNim5FCa.js";
+import { ZaloWebhookPayloadError } from "./webhook-spool-Bdnu4GjY.js";
 import { safeEqualSecret } from "openclaw/plugin-sdk/security-runtime";
 import { readWebhookBodyOrReject } from "openclaw/plugin-sdk/webhook-request-guards";
 //#region extensions/zalo/src/monitor.webhook.ts
@@ -20,9 +20,6 @@ function clearZaloWebhookSecurityStateForTest() {
 	webhookRateLimiter.clear();
 	webhookAnomalyTracker.clear();
 }
-function getZaloWebhookRateLimitStateSizeForTest() {
-	return webhookRateLimiter.size();
-}
 function getZaloWebhookStatusCounterSizeForTest() {
 	return webhookAnomalyTracker.size();
 }
@@ -119,7 +116,6 @@ async function handleZaloWebhookRequest(req, res) {
 }
 const zaloWebhookRuntime = {
 	clearZaloWebhookSecurityStateForTest,
-	getZaloWebhookRateLimitStateSizeForTest,
 	getZaloWebhookStatusCounterSizeForTest,
 	handleZaloWebhookRequest,
 	registerZaloWebhookTarget

package/dist/runtime-api.js

@@ -1,2 +1,2 @@
-import { A as mergeAllowFromEntries, B as registerWebhookTargetWithPluginRoute, C as formatAllowFromLowercase, D as isNumericTargetId, E as isNormalizedSenderAllowed, F as promptSingleChannelSecretInput, G as resolveWebhookTargetWithAuthOrRejectSync, H as resolveDefaultGroupPolicy, I as readJsonWebhookBodyOrReject, J as setTopLevelChannelDmPolicyWithAllowFrom, K as runSingleChannelSecretStep, L as readStringParam, M as normalizeAccountId, N as normalizeResolvedSecretInputString, O as jsonResult, P as normalizeSecretInputString, R as registerPluginHttpRoute, S as deliverTextOrMediaReply, T as hasConfiguredSecretInput, U as resolveOpenProviderRuntimeGroupPolicy, V as resolveClientIp, W as resolveWebhookPath, X as warnMissingProviderGroupPolicyFallbackOnce, Y as waitForAbortSignal, Z as withResolvedWebhookRequestPipeline, _ as createChannelMessageReplyPipeline, a as WEBHOOK_ANOMALY_COUNTER_DEFAULTS, b as createFixedWindowRateLimiter, c as applyAccountNameToChannelSection, d as buildBaseAccountStatusSnapshot, f as buildChannelConfigSchema, g as chunkTextForOutbound, h as buildTokenChannelStatusSummary, i as PAIRING_APPROVED_MESSAGE, j as migrateBaseNameToDefaultAccount, k as logTypingFailure, l as applyBasicWebhookRequestGuards, m as buildSingleChannelSecretPromptState, n as setZaloRuntime, o as WEBHOOK_RATE_LIMIT_DEFAULTS, p as buildSecretInputSchema, q as sendPayloadWithChunkedTextAndMedia, r as DEFAULT_ACCOUNT_ID, s as addWildcardAllowFrom, u as applySetupAccountConfigPatch, v as createChannelPairingController, w as formatPairingApproveHint, x as createWebhookAnomalyTracker, y as createDedupeCache, z as registerWebhookTarget } from "./runtime-api-qxdOyk3M.js";
+import { A as mergeAllowFromEntries, B as registerWebhookTargetWithPluginRoute, C as formatAllowFromLowercase, D as isNumericTargetId, E as isNormalizedSenderAllowed, F as promptSingleChannelSecretInput, G as resolveWebhookTargetWithAuthOrRejectSync, H as resolveDefaultGroupPolicy, I as readJsonWebhookBodyOrReject, J as setTopLevelChannelDmPolicyWithAllowFrom, K as runSingleChannelSecretStep, L as readStringParam, M as normalizeAccountId, N as normalizeResolvedSecretInputString, O as jsonResult, P as normalizeSecretInputString, R as registerPluginHttpRoute, S as deliverTextOrMediaReply, T as hasConfiguredSecretInput, U as resolveOpenProviderRuntimeGroupPolicy, V as resolveClientIp, W as resolveWebhookPath, X as warnMissingProviderGroupPolicyFallbackOnce, Y as waitForAbortSignal, Z as withResolvedWebhookRequestPipeline, _ as createChannelMessageReplyPipeline, a as WEBHOOK_ANOMALY_COUNTER_DEFAULTS, b as createFixedWindowRateLimiter, c as applyAccountNameToChannelSection, d as buildBaseAccountStatusSnapshot, f as buildChannelConfigSchema, g as chunkTextForOutbound, h as buildTokenChannelStatusSummary, i as PAIRING_APPROVED_MESSAGE, j as migrateBaseNameToDefaultAccount, k as logTypingFailure, l as applyBasicWebhookRequestGuards, m as buildSingleChannelSecretPromptState, n as setZaloRuntime, o as WEBHOOK_RATE_LIMIT_DEFAULTS, p as buildSecretInputSchema, q as sendPayloadWithChunkedTextAndMedia, r as DEFAULT_ACCOUNT_ID, s as addWildcardAllowFrom, u as applySetupAccountConfigPatch, v as createChannelPairingController, w as formatPairingApproveHint, x as createWebhookAnomalyTracker, y as createDedupeCache, z as registerWebhookTarget } from "./runtime-api-BNim5FCa.js";
 export { DEFAULT_ACCOUNT_ID, PAIRING_APPROVED_MESSAGE, WEBHOOK_ANOMALY_COUNTER_DEFAULTS, WEBHOOK_RATE_LIMIT_DEFAULTS, addWildcardAllowFrom, applyAccountNameToChannelSection, applyBasicWebhookRequestGuards, applySetupAccountConfigPatch, buildBaseAccountStatusSnapshot, buildChannelConfigSchema, buildSecretInputSchema, buildSingleChannelSecretPromptState, buildTokenChannelStatusSummary, chunkTextForOutbound, createChannelMessageReplyPipeline, createChannelPairingController, createDedupeCache, createFixedWindowRateLimiter, createWebhookAnomalyTracker, deliverTextOrMediaReply, formatAllowFromLowercase, formatPairingApproveHint, hasConfiguredSecretInput, isNormalizedSenderAllowed, isNumericTargetId, jsonResult, logTypingFailure, mergeAllowFromEntries, migrateBaseNameToDefaultAccount, normalizeAccountId, normalizeResolvedSecretInputString, normalizeSecretInputString, promptSingleChannelSecretInput, readJsonWebhookBodyOrReject, readStringParam, registerPluginHttpRoute, registerWebhookTarget, registerWebhookTargetWithPluginRoute, resolveClientIp, resolveDefaultGroupPolicy, resolveOpenProviderRuntimeGroupPolicy, resolveWebhookPath, resolveWebhookTargetWithAuthOrRejectSync, runSingleChannelSecretStep, sendPayloadWithChunkedTextAndMedia, setTopLevelChannelDmPolicyWithAllowFrom, setZaloRuntime, waitForAbortSignal, warnMissingProviderGroupPolicyFallbackOnce, withResolvedWebhookRequestPipeline };

package/dist/{secret-contract-Bxvjh0Hq.js → secret-contract-Cpsqe5Cv.js}

@@ -1,4 +1,4 @@
-import { collectConditionalChannelFieldAssignments, createChannelSecretTargetRegistryEntries, getChannelSurface, hasOwnProperty } from "openclaw/plugin-sdk/channel-secret-basic-runtime";
+import { collectConditionalChannelFieldAssignments, createChannelSecretTargetRegistryEntries, getChannelSurface, hasOwnProperty, normalizeSecretStringValue } from "openclaw/plugin-sdk/channel-secret-basic-runtime";
 //#region extensions/zalo/src/secret-contract.ts
 const secretTargetRegistryEntries = createChannelSecretTargetRegistryEntries({
 	channelKey: "zalo",
@@ -17,7 +17,7 @@ function collectRuntimeConfigAssignments(params) {
 		defaults: params.defaults,
 		context: params.context,
 		topLevelActiveWithoutAccounts: true,
-		topLevelInheritedAccountActive: ({ account, enabled }) => enabled && !hasOwnProperty(account, "botToken"),
+		topLevelInheritedAccountActive: ({ account, enabled }) => enabled && !hasOwnProperty(account, "botToken") && !normalizeSecretStringValue(account.tokenFile),
 		accountActive: ({ enabled }) => enabled,
 		topInactiveReason: "no enabled Zalo surface inherits this top-level botToken.",
 		accountInactiveReason: "Zalo account is disabled."

package/dist/secret-contract-api.js

@@ -1,2 +1,2 @@
-import { n as collectRuntimeConfigAssignments, r as secretTargetRegistryEntries, t as channelSecrets } from "./secret-contract-Bxvjh0Hq.js";
+import { n as collectRuntimeConfigAssignments, r as secretTargetRegistryEntries, t as channelSecrets } from "./secret-contract-Cpsqe5Cv.js";
 export { channelSecrets, collectRuntimeConfigAssignments, secretTargetRegistryEntries };