@openclaw/zalo 2026.7.2-beta.7 → 2026.8.1-beta.3

package/dist/{send-BUvbbedq.js → send-DVMIplpy.js}

@@ -1,10 +1,10 @@
-import { d as resolveZaloAccount, f as resolveZaloToken } from "./setup-core-LzhuTlsD.js";
+import { d as resolveZaloAccount, f as resolveZaloToken } from "./setup-core-CcCJ1E26.js";
 import { createMessageReceiptFromOutboundResults } from "openclaw/plugin-sdk/channel-outbound";
 import { stripChannelTargetPrefix, stripTargetKindPrefix } from "openclaw/plugin-sdk/core";
 import { formatErrorMessage } from "openclaw/plugin-sdk/error-runtime";
 import { truncateUtf16Safe } from "openclaw/plugin-sdk/text-utility-runtime";
 import { resolveTimerTimeoutMs } from "openclaw/plugin-sdk/number-runtime";
-import { readProviderJsonResponse } from "openclaw/plugin-sdk/provider-http";
+import { assertOkOrThrowProviderError, readProviderJsonResponse } from "openclaw/plugin-sdk/provider-http";
 import { resolvePinnedHostnameWithPolicy } from "openclaw/plugin-sdk/ssrf-runtime";
 import { makeProxyFetch } from "openclaw/plugin-sdk/fetch-runtime";
 //#region extensions/zalo/src/timeouts.ts
@@ -55,12 +55,14 @@ async function callZaloApi(method, token, body, options) {
 	const timeoutId = setTimeout(() => controller.abort(), requestTimeoutMs);
 	const fetcher = options?.fetch ?? fetch;
 	try {
-		const data = await readProviderJsonResponse(await fetcher(url, {
+		const response = await fetcher(url, {
 			method: "POST",
 			headers: { "Content-Type": "application/json" },
 			body: body ? JSON.stringify(body) : void 0,
 			signal: controller.signal
-		}), `zalo.${method}`);
+		});
+		await assertOkOrThrowProviderError(response, `zalo.${method}`);
+		const data = await readProviderJsonResponse(response, `zalo.${method}`);
 		if (!data.ok) throw new ZaloApiError(data.description ?? `Zalo API error: ${method}`, data.error_code, data.description);
 		return data;
 	} finally {

package/dist/setup-api.js

@@ -1,4 +1,4 @@
-import { n as zaloDmPolicy, r as zaloSetupAdapter, t as createZaloSetupWizardProxy } from "./setup-core-LzhuTlsD.js";
+import { n as zaloDmPolicy, r as zaloSetupAdapter, t as createZaloSetupWizardProxy } from "./setup-core-CcCJ1E26.js";
 import { n as resolveZaloRuntimeGroupPolicy } from "./group-access-8qHRzDHx.js";
 import { loadBundledEntryExportSync } from "openclaw/plugin-sdk/channel-entry-contract";
 //#region extensions/zalo/setup-api.ts
@@ -23,7 +23,7 @@ function createLazyObjectValue(load) {
 	});
 }
 function loadSetupSurfaceModule() {
-	return loadBundledEntryExportSync(import.meta.url, { specifier: "./src/setup-surface.js" });
+	return loadBundledEntryExportSync(import.meta.url, { specifier: "./setup-surface.js" });
 }
 const zaloSetupWizard = createLazyObjectValue(() => loadSetupSurfaceModule().zaloSetupWizard);
 //#endregion

package/dist/{setup-core-LzhuTlsD.js → setup-core-CcCJ1E26.js}

@@ -1,8 +1,8 @@
 import { createAccountListHelpers } from "openclaw/plugin-sdk/account-helpers";
 import { DEFAULT_ACCOUNT_ID, normalizeAccountId } from "openclaw/plugin-sdk/account-id";
 import { normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
-import { tryReadSecretFileSync } from "openclaw/plugin-sdk/core";
 import { resolveAccountEntry } from "openclaw/plugin-sdk/routing";
+import { tryReadSecretFileSync } from "openclaw/plugin-sdk/secret-file-runtime";
 import { buildSecretInputSchema, normalizeSecretInputString, resolveSecretInputString } from "openclaw/plugin-sdk/secret-input";
 import { createChannelDmPolicy } from "openclaw/plugin-sdk/channel-dm-policy";
 import { defineChannelSetupContract } from "openclaw/plugin-sdk/channel-setup";
@@ -20,8 +20,18 @@ var __exportAll = (all, no_symbols) => {
 };
 //#endregion
 //#region extensions/zalo/src/token.ts
-function readTokenFromFile(tokenFile) {
-	return tryReadSecretFileSync(tokenFile, "Zalo token file", { rejectSymlink: true }) ?? "";
+function readTokenFromFile(tokenFile, configPath) {
+	const result = tryReadSecretFileSync(tokenFile, "Zalo token file", { rejectSymlink: true }, { configPath });
+	return result.status === "available" ? {
+		token: result.value,
+		source: "configFile",
+		status: "available"
+	} : {
+		token: "",
+		source: "configFile",
+		status: "configured_unavailable",
+		credentialDiagnostics: [result.diagnostic]
+	};
 }
 function resolveZaloToken(config, accountId, options) {
 	const resolvedAccountId = normalizeAccountId(accountId ?? config?.defaultAccount);
@@ -45,21 +55,8 @@ function resolveZaloToken(config, accountId, options) {
 			source: "config",
 			status: "configured_unavailable"
 		};
-		const fileToken = readTokenFromFile(accountConfig.tokenFile);
-		if (fileToken) return {
-			token: fileToken,
-			source: "configFile",
-			status: "available"
-		};
-	}
-	if (!accountHasBotToken) {
-		const fileToken = readTokenFromFile(accountConfig?.tokenFile);
-		if (fileToken) return {
-			token: fileToken,
-			source: "configFile",
-			status: "available"
-		};
 	}
+	if (accountConfig?.tokenFile?.trim()) return readTokenFromFile(accountConfig.tokenFile, `channels.zalo.accounts.${resolvedAccountId}.tokenFile`);
 	if (!accountHasBotToken) {
 		const token = resolveSecretInputString({
 			value: baseConfig?.botToken,
@@ -76,12 +73,7 @@ function resolveZaloToken(config, accountId, options) {
 			source: "config",
 			status: "configured_unavailable"
 		};
-		const fileToken = readTokenFromFile(baseConfig?.tokenFile);
-		if (fileToken) return {
-			token: fileToken,
-			source: "configFile",
-			status: "available"
-		};
+		if (baseConfig?.tokenFile?.trim()) return readTokenFromFile(baseConfig.tokenFile, "channels.zalo.tokenFile");
 	}
 	if (isDefaultAccount) {
 		const envToken = process.env.ZALO_BOT_TOKEN?.trim();
@@ -126,6 +118,7 @@ function resolveZaloAccountWithMode(params) {
 		token: tokenResolution.token,
 		tokenSource: tokenResolution.source,
 		tokenStatus: tokenResolution.status,
+		...tokenResolution.credentialDiagnostics ? { credentialDiagnostics: tokenResolution.credentialDiagnostics } : {},
 		config: merged
 	};
 }
@@ -244,7 +237,8 @@ const zaloSetupContract = defineChannelSetupContract({
 			cli: {
 				flags: "--use-env",
 				description: "Use ZALO_BOT_TOKEN"
-			}
+			},
+			envVars: ["ZALO_BOT_TOKEN"]
 		}
 	},
 	legacyAdapter: zaloSetupAdapter
@@ -289,4 +283,4 @@ function createZaloSetupWizardProxy(loadWizard) {
 	});
 }
 //#endregion
-export { noteZaloTokenHelp as a, inspectZaloAccount as c, resolveZaloAccount as d, resolveZaloToken as f, zaloSetupContract as i, listZaloAccountIds as l, normalizeSecretInputString as m, zaloDmPolicy as n, promptZaloAllowFrom as o, buildSecretInputSchema as p, zaloSetupAdapter as r, accounts_exports as s, createZaloSetupWizardProxy as t, resolveDefaultZaloAccountId as u };
+export { noteZaloTokenHelp as a, inspectZaloAccount as c, resolveZaloAccount as d, resolveZaloToken as f, __exportAll as h, zaloSetupContract as i, listZaloAccountIds as l, normalizeSecretInputString as m, zaloDmPolicy as n, promptZaloAllowFrom as o, buildSecretInputSchema as p, zaloSetupAdapter as r, accounts_exports as s, createZaloSetupWizardProxy as t, resolveDefaultZaloAccountId as u };

package/dist/{setup-surface-CQMbpZye.js → setup-surface-CIpp_MDf.js}

@@ -1,6 +1,7 @@
-import { a as noteZaloTokenHelp, c as inspectZaloAccount, n as zaloDmPolicy, o as promptZaloAllowFrom } from "./setup-core-LzhuTlsD.js";
+import { a as noteZaloTokenHelp, c as inspectZaloAccount, h as __exportAll, n as zaloDmPolicy, o as promptZaloAllowFrom } from "./setup-core-CcCJ1E26.js";
 import { DEFAULT_ACCOUNT_ID, buildSingleChannelSecretPromptState, createSetupTranslator, createStandardChannelSetupStatus, hasConfiguredSecretInput, promptSingleChannelSecretInput, runSingleChannelSecretStep } from "openclaw/plugin-sdk/setup";
 //#region extensions/zalo/src/setup-surface.ts
+var setup_surface_exports = /* @__PURE__ */ __exportAll({ zaloSetupWizard: () => zaloSetupWizard });
 const t = createSetupTranslator();
 const channel = "zalo";
 function setZaloUpdateMode(cfg, accountId, mode, webhookUrl, webhookSecret, webhookPath) {
@@ -211,4 +212,4 @@ const zaloSetupWizard = {
 	dmPolicy: zaloDmPolicy
 };
 //#endregion
-export { zaloSetupWizard };
+export { zaloSetupWizard as n, setup_surface_exports as t };

package/dist/setup-surface.js

@@ -0,0 +1,3 @@
+import { r as zaloSetupAdapter } from "./setup-core-CcCJ1E26.js";
+import { n as zaloSetupWizard } from "./setup-surface-CIpp_MDf.js";
+export { zaloSetupAdapter, zaloSetupWizard };

package/dist/webhook-spool-Bdnu4GjY.js

@@ -0,0 +1,180 @@
+import { t as getZaloRuntime } from "./runtime-api-BNim5FCa.js";
+import { r as ZaloApiError } from "./send-DVMIplpy.js";
+import { DEFAULT_INGRESS_ADOPTION_STALL_MS, DEFAULT_INGRESS_RETRY_MAX_ATTEMPTS, bindIngressLifecycleToReplyOptions, createChannelIngressError, createChannelIngressMonitor } from "openclaw/plugin-sdk/channel-outbound";
+import { normalizeNullableString } from "openclaw/plugin-sdk/string-coerce-runtime";
+import { z } from "zod";
+import { formatErrorMessage } from "openclaw/plugin-sdk/error-runtime";
+import { runDetachedWebhookWork } from "openclaw/plugin-sdk/webhook-request-guards";
+//#region extensions/zalo/src/webhook-spool.ts
+const ZALO_WEBHOOK_SPOOL_VERSION = 1;
+const ZALO_WEBHOOK_DRAIN_INTERVAL_MS = 500;
+const ZALO_WEBHOOK_MAX_CONCURRENT_DELIVERIES = 8;
+const ZaloWebhookPayloadError = createChannelIngressError("ZaloWebhookPayloadError");
+const nonEmptyWebhookStringSchema = z.string().transform((value) => normalizeNullableString(value)).pipe(z.string());
+const optionalWebhookStringSchema = z.string().optional().catch(void 0);
+const webhookEnvelopeSchema = z.looseObject({
+	ok: z.unknown().optional(),
+	result: z.looseObject({}).optional().catch(void 0)
+}).transform((envelope) => envelope.ok === true && envelope.result ? envelope.result : envelope);
+const webhookAdmissionSchema = z.looseObject({ message: z.looseObject({
+	message_id: nonEmptyWebhookStringSchema,
+	chat: z.looseObject({ id: nonEmptyWebhookStringSchema })
+}) });
+const webhookSenderSchema = z.object({
+	id: nonEmptyWebhookStringSchema,
+	name: optionalWebhookStringSchema,
+	display_name: optionalWebhookStringSchema,
+	avatar: optionalWebhookStringSchema,
+	is_bot: z.boolean().optional().catch(void 0)
+});
+const webhookChatSchema = z.object({
+	id: nonEmptyWebhookStringSchema,
+	chat_type: z.enum(["PRIVATE", "GROUP"])
+});
+const webhookMessageSchema = z.object({
+	message_id: nonEmptyWebhookStringSchema,
+	from: webhookSenderSchema,
+	chat: webhookChatSchema,
+	date: z.number().finite(),
+	text: optionalWebhookStringSchema,
+	photo_url: optionalWebhookStringSchema,
+	caption: optionalWebhookStringSchema,
+	sticker: optionalWebhookStringSchema,
+	message_type: optionalWebhookStringSchema
+});
+const webhookUpdateSchema = z.object({
+	event_name: z.enum([
+		"message.text.received",
+		"message.image.received",
+		"message.sticker.received",
+		"message.unsupported.received"
+	]),
+	message: webhookMessageSchema
+}).superRefine((update, context) => {
+	if (update.event_name === "message.text.received" && update.message.text === void 0) context.addIssue({
+		code: "custom",
+		path: ["message", "text"],
+		message: "text event requires message.text"
+	});
+});
+function parseRawRecord(rawEvent) {
+	let parsed;
+	try {
+		parsed = JSON.parse(rawEvent);
+	} catch (error) {
+		throw new ZaloWebhookPayloadError("Zalo webhook body contains invalid JSON.", { cause: error });
+	}
+	const envelope = webhookEnvelopeSchema.safeParse(parsed);
+	if (!envelope.success) throw new ZaloWebhookPayloadError("Zalo webhook body must be a JSON object.");
+	return envelope.data;
+}
+function inspectZaloWebhookEvent(rawEvent) {
+	const update = parseRawRecord(rawEvent);
+	const admission = webhookAdmissionSchema.safeParse(update);
+	if (!admission.success) {
+		if (admission.error.issues.some((issue) => issue.path[0] === "message" && (issue.path.length === 1 || issue.path[1] === "message_id"))) throw new ZaloWebhookPayloadError("Zalo webhook message is missing message.message_id.");
+		if (admission.error.issues.some((issue) => issue.path[0] === "message" && issue.path[1] === "chat")) throw new ZaloWebhookPayloadError("Zalo webhook message is missing message.chat.id.");
+		throw new ZaloWebhookPayloadError("Zalo webhook message is missing message.message_id.");
+	}
+	return {
+		eventId: admission.data.message.message_id,
+		laneKey: `chat:${admission.data.message.chat.id}`,
+		update
+	};
+}
+function parseClaimedUpdate(payload, claimedId) {
+	if (payload.version !== ZALO_WEBHOOK_SPOOL_VERSION || typeof payload.rawEvent !== "string") throw new ZaloWebhookPayloadError("Zalo webhook spool payload is invalid.");
+	const facts = inspectZaloWebhookEvent(payload.rawEvent);
+	if (facts.eventId !== claimedId) throw new ZaloWebhookPayloadError("Zalo webhook message id changed after durable admission.");
+	const parsed = webhookUpdateSchema.safeParse(facts.update);
+	if (!parsed.success) {
+		const paths = parsed.error.issues.map((issue) => issue.path.join("."));
+		if (paths.some((path) => path === "event_name")) throw new ZaloWebhookPayloadError("Zalo webhook event_name is unsupported.");
+		if (paths.some((path) => path === "message.from" || path.startsWith("message.from.id"))) throw new ZaloWebhookPayloadError("Zalo webhook message is missing message.from.id.");
+		if (paths.some((path) => path === "message.chat" || path.startsWith("message.chat.id"))) throw new ZaloWebhookPayloadError("Zalo webhook message is missing message.chat.id.");
+		if (paths.some((path) => path.startsWith("message.chat.chat_type"))) throw new ZaloWebhookPayloadError("Zalo webhook message has an invalid chat type.");
+		if (paths.some((path) => path.startsWith("message.date"))) throw new ZaloWebhookPayloadError("Zalo webhook message has an invalid date.");
+		if (paths.some((path) => path.startsWith("message.text"))) throw new ZaloWebhookPayloadError("Zalo text event is missing message.text.");
+		throw new ZaloWebhookPayloadError("Zalo webhook event_name is unsupported.");
+	}
+	const { event_name: eventName, message } = parsed.data;
+	return {
+		event_name: eventName,
+		message: {
+			message_id: claimedId,
+			from: message.from,
+			chat: message.chat,
+			date: message.date,
+			...message.text !== void 0 ? { text: message.text } : {},
+			...message.photo_url !== void 0 ? { photo_url: message.photo_url } : {},
+			...message.caption !== void 0 ? { caption: message.caption } : {},
+			...message.sticker !== void 0 ? { sticker: message.sticker } : {},
+			...message.message_type !== void 0 ? { message_type: message.message_type } : {}
+		}
+	};
+}
+function isZaloAuthenticationFailure(error) {
+	let current = error;
+	const seen = /* @__PURE__ */ new Set();
+	while (current && typeof current === "object" && !seen.has(current)) {
+		seen.add(current);
+		const candidate = current;
+		if (current instanceof ZaloApiError && (current.errorCode === 401 || current.errorCode === 403) || candidate.status === 401 || candidate.status === 403 || candidate.statusCode === 401 || candidate.statusCode === 403) return true;
+		current = candidate.cause;
+	}
+	return false;
+}
+function createZaloWebhookIngress(options) {
+	const monitor = createChannelIngressMonitor({
+		queue: options.queue ?? getZaloRuntime().state.openChannelIngressQueue({ accountId: options.accountId }),
+		inspect: (rawEvent) => inspectZaloWebhookEvent(rawEvent),
+		payload: {
+			storage: "raw-event",
+			version: ZALO_WEBHOOK_SPOOL_VERSION,
+			serialize: (rawEvent) => rawEvent,
+			deserialize: (rawEvent) => rawEvent,
+			createClaimError: (kind) => new ZaloWebhookPayloadError(kind === "invalid-version" ? "Zalo webhook spool payload is invalid." : "Zalo webhook identity changed after durable admission.")
+		},
+		deliver: async (_rawEvent, lifecycle, claim) => {
+			const update = parseClaimedUpdate(claim.payload, claim.id);
+			await options.deliver(update, bindIngressLifecycleToReplyOptions(lifecycle).turnAdoptionLifecycle);
+		},
+		pollIntervalMs: ZALO_WEBHOOK_DRAIN_INTERVAL_MS,
+		retention: { failedMaxEntries: 5e3 },
+		waitForDeliveryIdleBeforeRepump: false,
+		runPumpTask: runDetachedWebhookWork,
+		deferredClaims: "wait-on-stop",
+		drain: {
+			adoptionStallTimeoutMs: DEFAULT_INGRESS_ADOPTION_STALL_MS,
+			startLimit: ZALO_WEBHOOK_MAX_CONCURRENT_DELIVERIES,
+			retryPolicy: {
+				maxAttempts: DEFAULT_INGRESS_RETRY_MAX_ATTEMPTS,
+				deadLetterMinAgeMs: 0
+			},
+			resolveNonRetryableFailure: (error) => {
+				if (error instanceof ZaloWebhookPayloadError) return {
+					reason: "invalid-event",
+					message: error.message
+				};
+				if (isZaloAuthenticationFailure(error)) return {
+					reason: "authentication-failed",
+					message: formatErrorMessage(error)
+				};
+				return null;
+			},
+			onLog: (message) => options.runtime.error?.(`zalo ingress: ${message}`)
+		},
+		createStoppedError: () => /* @__PURE__ */ new Error("Zalo ingress stopped."),
+		onError: (error) => options.runtime.error?.(`zalo ingress drain failed: ${formatErrorMessage(error)}`)
+	});
+	return {
+		accept: async (rawEvent) => {
+			await monitor.admit(rawEvent);
+		},
+		start: monitor.start,
+		stop: monitor.stop
+	};
+}
+const zaloWebhookIngressRuntime = { createZaloWebhookIngress };
+//#endregion
+export { ZaloWebhookPayloadError, zaloWebhookIngressRuntime };

package/openclaw.plugin.json

@@ -1,5 +1,6 @@
 {
   "id": "zalo",
+  "doctorContract": {},
   "name": "Zalo",
   "description": "OpenClaw Zalo channel plugin for bot and webhook chats.",
   "icon": "https://cdn.simpleicons.org/zalo",
@@ -26,6 +27,9 @@
           "enabled": {
             "type": "boolean"
           },
+          "configWrites": {
+            "type": "boolean"
+          },
           "markdown": {
             "type": "object",
             "properties": {
@@ -71,6 +75,29 @@
                     ],
                     "additionalProperties": false
                   },
+                  {
+                    "type": "object",
+                    "properties": {
+                      "source": {
+                        "type": "string",
+                        "const": "store"
+                      },
+                      "provider": {
+                        "type": "string",
+                        "pattern": "^[a-z][a-z0-9_-]{0,63}$"
+                      },
+                      "id": {
+                        "type": "string",
+                        "pattern": "^[A-Z][A-Z0-9_]{0,127}$"
+                      }
+                    },
+                    "required": [
+                      "source",
+                      "provider",
+                      "id"
+                    ],
+                    "additionalProperties": false
+                  },
                   {
                     "type": "object",
                     "properties": {
@@ -155,6 +182,29 @@
                     ],
                     "additionalProperties": false
                   },
+                  {
+                    "type": "object",
+                    "properties": {
+                      "source": {
+                        "type": "string",
+                        "const": "store"
+                      },
+                      "provider": {
+                        "type": "string",
+                        "pattern": "^[a-z][a-z0-9_-]{0,63}$"
+                      },
+                      "id": {
+                        "type": "string",
+                        "pattern": "^[A-Z][A-Z0-9_]{0,127}$"
+                      }
+                    },
+                    "required": [
+                      "source",
+                      "provider",
+                      "id"
+                    ],
+                    "additionalProperties": false
+                  },
                   {
                     "type": "object",
                     "properties": {
@@ -270,6 +320,9 @@
                 "enabled": {
                   "type": "boolean"
                 },
+                "configWrites": {
+                  "type": "boolean"
+                },
                 "markdown": {
                   "type": "object",
                   "properties": {
@@ -315,6 +368,29 @@
                           ],
                           "additionalProperties": false
                         },
+                        {
+                          "type": "object",
+                          "properties": {
+                            "source": {
+                              "type": "string",
+                              "const": "store"
+                            },
+                            "provider": {
+                              "type": "string",
+                              "pattern": "^[a-z][a-z0-9_-]{0,63}$"
+                            },
+                            "id": {
+                              "type": "string",
+                              "pattern": "^[A-Z][A-Z0-9_]{0,127}$"
+                            }
+                          },
+                          "required": [
+                            "source",
+                            "provider",
+                            "id"
+                          ],
+                          "additionalProperties": false
+                        },
                         {
                           "type": "object",
                           "properties": {
@@ -399,6 +475,29 @@
                           ],
                           "additionalProperties": false
                         },
+                        {
+                          "type": "object",
+                          "properties": {
+                            "source": {
+                              "type": "string",
+                              "const": "store"
+                            },
+                            "provider": {
+                              "type": "string",
+                              "pattern": "^[a-z][a-z0-9_-]{0,63}$"
+                            },
+                            "id": {
+                              "type": "string",
+                              "pattern": "^[A-Z][A-Z0-9_]{0,127}$"
+                            }
+                          },
+                          "required": [
+                            "source",
+                            "provider",
+                            "id"
+                          ],
+                          "additionalProperties": false
+                        },
                         {
                           "type": "object",
                           "properties": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openclaw/zalo",
-  "version": "2026.7.2-beta.7",
+  "version": "2026.8.1-beta.3",
   "description": "OpenClaw Zalo channel plugin for bot and webhook chats.",
   "repository": {
     "type": "git",
@@ -8,7 +8,7 @@
   },
   "type": "module",
   "peerDependencies": {
-    "openclaw": ">=2026.7.2-beta.7"
+    "openclaw": ">=2026.8.1-beta.3"
   },
   "peerDependenciesMeta": {
     "openclaw": {
@@ -69,7 +69,10 @@
             "cli": {
               "flags": "--use-env",
               "description": "Use ZALO_BOT_TOKEN"
-            }
+            },
+            "envVars": [
+              "ZALO_BOT_TOKEN"
+            ]
           }
         ]
       }
@@ -80,10 +83,10 @@
       "minHostVersion": ">=2026.4.10"
     },
     "compat": {
-      "pluginApi": ">=2026.7.2-beta.7"
+      "pluginApi": ">=2026.8.1-beta.3"
     },
     "build": {
-      "openclawVersion": "2026.7.2-beta.7"
+      "openclawVersion": "2026.8.1-beta.3"
     },
     "release": {
       "publishToClawHub": true,

package/dist/webhook-spool-DzCPbb3O.js

@@ -1,121 +0,0 @@
-import { t as getZaloRuntime } from "./runtime-api-qxdOyk3M.js";
-import { r as ZaloApiError } from "./send-BUvbbedq.js";
-import { DEFAULT_INGRESS_ADOPTION_STALL_MS, DEFAULT_INGRESS_RETRY_MAX_ATTEMPTS, bindIngressLifecycleToReplyOptions, createChannelIngressError, createChannelIngressMonitor } from "openclaw/plugin-sdk/channel-outbound";
-import { normalizeNullableString } from "openclaw/plugin-sdk/string-coerce-runtime";
-import { isRecord } from "openclaw/plugin-sdk/channel-secret-basic-runtime";
-import { runDetachedWebhookWork } from "openclaw/plugin-sdk/webhook-request-guards";
-//#region extensions/zalo/src/webhook-spool.ts
-const ZALO_WEBHOOK_SPOOL_VERSION = 1;
-const ZALO_WEBHOOK_DRAIN_INTERVAL_MS = 500;
-const ZALO_WEBHOOK_MAX_CONCURRENT_DELIVERIES = 8;
-const ZaloWebhookPayloadError = createChannelIngressError("ZaloWebhookPayloadError");
-function parseRawRecord(rawEvent) {
-	let parsed;
-	try {
-		parsed = JSON.parse(rawEvent);
-	} catch (error) {
-		throw new ZaloWebhookPayloadError("Zalo webhook body contains invalid JSON.", { cause: error });
-	}
-	if (!isRecord(parsed)) throw new ZaloWebhookPayloadError("Zalo webhook body must be a JSON object.");
-	return parsed;
-}
-function resolveUpdateRecord(envelope) {
-	if (envelope.ok === true && isRecord(envelope.result)) return envelope.result;
-	return envelope;
-}
-function inspectZaloWebhookEvent(rawEvent) {
-	const update = resolveUpdateRecord(parseRawRecord(rawEvent));
-	const message = isRecord(update.message) ? update.message : null;
-	const eventId = normalizeNullableString(message?.message_id);
-	if (!eventId) throw new ZaloWebhookPayloadError("Zalo webhook message is missing message.message_id.");
-	const chatId = normalizeNullableString((isRecord(message?.chat) ? message.chat : null)?.id);
-	if (!chatId) throw new ZaloWebhookPayloadError("Zalo webhook message is missing message.chat.id.");
-	return {
-		eventId,
-		laneKey: `chat:${chatId}`,
-		update
-	};
-}
-function parseClaimedUpdate(payload, claimedId) {
-	if (payload.version !== ZALO_WEBHOOK_SPOOL_VERSION || typeof payload.rawEvent !== "string") throw new ZaloWebhookPayloadError("Zalo webhook spool payload is invalid.");
-	const facts = inspectZaloWebhookEvent(payload.rawEvent);
-	if (facts.eventId !== claimedId) throw new ZaloWebhookPayloadError("Zalo webhook message id changed after durable admission.");
-	const eventName = normalizeNullableString(facts.update.event_name);
-	if (eventName !== "message.text.received" && eventName !== "message.image.received" && eventName !== "message.sticker.received" && eventName !== "message.unsupported.received") throw new ZaloWebhookPayloadError("Zalo webhook event_name is unsupported.");
-	const message = facts.update.message;
-	const from = isRecord(message.from) ? message.from : null;
-	const chat = isRecord(message.chat) ? message.chat : null;
-	if (!normalizeNullableString(from?.id)) throw new ZaloWebhookPayloadError("Zalo webhook message is missing message.from.id.");
-	if (chat?.chat_type !== "PRIVATE" && chat?.chat_type !== "GROUP") throw new ZaloWebhookPayloadError("Zalo webhook message has an invalid chat type.");
-	if (typeof message.date !== "number" || !Number.isFinite(message.date)) throw new ZaloWebhookPayloadError("Zalo webhook message has an invalid date.");
-	if (eventName === "message.text.received" && typeof message.text !== "string") throw new ZaloWebhookPayloadError("Zalo text event is missing message.text.");
-	return facts.update;
-}
-function errorText(error) {
-	return error instanceof Error ? error.message : String(error);
-}
-function isZaloAuthenticationFailure(error) {
-	let current = error;
-	const seen = /* @__PURE__ */ new Set();
-	while (current && typeof current === "object" && !seen.has(current)) {
-		seen.add(current);
-		const candidate = current;
-		if (current instanceof ZaloApiError && (current.errorCode === 401 || current.errorCode === 403) || candidate.status === 401 || candidate.status === 403 || candidate.statusCode === 401 || candidate.statusCode === 403) return true;
-		current = candidate.cause;
-	}
-	return false;
-}
-function createZaloWebhookIngress(options) {
-	const monitor = createChannelIngressMonitor({
-		queue: options.queue ?? getZaloRuntime().state.openChannelIngressQueue({ accountId: options.accountId }),
-		inspect: (rawEvent) => inspectZaloWebhookEvent(rawEvent),
-		payload: {
-			storage: "raw-event",
-			version: ZALO_WEBHOOK_SPOOL_VERSION,
-			serialize: (rawEvent) => rawEvent,
-			deserialize: (rawEvent) => rawEvent,
-			createClaimError: (kind) => new ZaloWebhookPayloadError(kind === "invalid-version" ? "Zalo webhook spool payload is invalid." : "Zalo webhook identity changed after durable admission.")
-		},
-		deliver: async (_rawEvent, lifecycle, claim) => {
-			const update = parseClaimedUpdate(claim.payload, claim.id);
-			await options.deliver(update, bindIngressLifecycleToReplyOptions(lifecycle).turnAdoptionLifecycle);
-		},
-		pollIntervalMs: ZALO_WEBHOOK_DRAIN_INTERVAL_MS,
-		retention: { failedMaxEntries: 5e3 },
-		waitForDeliveryIdleBeforeRepump: false,
-		runPumpTask: runDetachedWebhookWork,
-		deferredClaims: "wait-on-stop",
-		drain: {
-			adoptionStallTimeoutMs: DEFAULT_INGRESS_ADOPTION_STALL_MS,
-			startLimit: ZALO_WEBHOOK_MAX_CONCURRENT_DELIVERIES,
-			retryPolicy: {
-				maxAttempts: DEFAULT_INGRESS_RETRY_MAX_ATTEMPTS,
-				deadLetterMinAgeMs: 0
-			},
-			resolveNonRetryableFailure: (error) => {
-				if (error instanceof ZaloWebhookPayloadError) return {
-					reason: "invalid-event",
-					message: error.message
-				};
-				if (isZaloAuthenticationFailure(error)) return {
-					reason: "authentication-failed",
-					message: errorText(error)
-				};
-				return null;
-			},
-			onLog: (message) => options.runtime.error?.(`zalo ingress: ${message}`)
-		},
-		createStoppedError: () => /* @__PURE__ */ new Error("Zalo ingress stopped."),
-		onError: (error) => options.runtime.error?.(`zalo ingress drain failed: ${errorText(error)}`)
-	});
-	return {
-		accept: async (rawEvent) => {
-			await monitor.admit(rawEvent);
-		},
-		start: monitor.start,
-		stop: monitor.stop
-	};
-}
-const zaloWebhookIngressRuntime = { createZaloWebhookIngress };
-//#endregion
-export { ZaloWebhookPayloadError, zaloWebhookIngressRuntime };

package/dist/{runtime-api-qxdOyk3M.js → runtime-api-BNim5FCa.js}

@@ -4,8 +4,8 @@ import { PAIRING_APPROVED_MESSAGE, buildTokenChannelStatusSummary as buildTokenC
 import { deliverTextOrMediaReply as deliverTextOrMediaReply$1, isNumericTargetId, sendPayloadWithChunkedTextAndMedia as sendPayloadWithChunkedTextAndMedia$1 } from "openclaw/plugin-sdk/reply-payload";
 import { buildBaseAccountStatusSnapshot } from "openclaw/plugin-sdk/status-helpers";
 import { chunkTextForOutbound as chunkTextForOutbound$1 } from "openclaw/plugin-sdk/text-chunking";
-import { DEFAULT_ACCOUNT_ID as DEFAULT_ACCOUNT_ID$1, buildChannelConfigSchema, createDedupeCache, formatPairingApproveHint, jsonResult, normalizeAccountId as normalizeAccountId$1, readStringParam, resolveClientIp } from "openclaw/plugin-sdk/core";
 import { buildSecretInputSchema, hasConfiguredSecretInput as hasConfiguredSecretInput$1, normalizeResolvedSecretInputString, normalizeSecretInputString } from "openclaw/plugin-sdk/secret-input";
+import { DEFAULT_ACCOUNT_ID as DEFAULT_ACCOUNT_ID$1, buildChannelConfigSchema, createDedupeCache, formatPairingApproveHint, jsonResult, normalizeAccountId as normalizeAccountId$1, readStringParam, resolveClientIp } from "openclaw/plugin-sdk/core";
 import { addWildcardAllowFrom, applyAccountNameToChannelSection, applySetupAccountConfigPatch, buildSingleChannelSecretPromptState as buildSingleChannelSecretPromptState$1, mergeAllowFromEntries as mergeAllowFromEntries$1, migrateBaseNameToDefaultAccount, promptSingleChannelSecretInput as promptSingleChannelSecretInput$1, runSingleChannelSecretStep as runSingleChannelSecretStep$1, setTopLevelChannelDmPolicyWithAllowFrom } from "openclaw/plugin-sdk/setup";
 import { resolveDefaultGroupPolicy as resolveDefaultGroupPolicy$1, resolveOpenProviderRuntimeGroupPolicy as resolveOpenProviderRuntimeGroupPolicy$1, warnMissingProviderGroupPolicyFallbackOnce as warnMissingProviderGroupPolicyFallbackOnce$1 } from "openclaw/plugin-sdk/runtime-group-policy";
 import { createChannelPairingController as createChannelPairingController$1 } from "openclaw/plugin-sdk/channel-pairing";