@openclaw/zalo 2026.9.6 → 2026.9.7

package/dist/.setup/{api-BDqk_OyX.mjs → api-YaSbmx07.mjs}

@@ -1,6 +1,6 @@
-import { n as zaloDmPolicy, r as zaloSetupAdapter, t as createZaloSetupWizardProxy } from "./setup-core-CCMLSh4Q.mjs";
-import { t as zaloPlugin } from "./channel-C4-ovULW.mjs";
-import { n as resolveZaloRuntimeGroupPolicy } from "./group-access-8qHRzDHx.mjs";
+import { n as zaloDmPolicy, r as zaloSetupAdapter, t as createZaloSetupWizardProxy } from "./setup-core-BE-EaCnS.mjs";
+import { t as zaloPlugin } from "./channel-COgJOEix.mjs";
+import { n as resolveZaloRuntimeGroupPolicy } from "./group-access-Blsyu-ot.mjs";
 import { zaloSetupWizard } from "../setup-api.js";
 import "../api.js";
 export { createZaloSetupWizardProxy, resolveZaloRuntimeGroupPolicy, zaloDmPolicy, zaloPlugin, zaloSetupAdapter, zaloSetupWizard };

package/dist/.setup/{channel-C4-ovULW.mjs → channel-COgJOEix.mjs}

@@ -1,4 +1,4 @@
-import { c as isZaloAccountConfigured, d as resolveZaloAccount, i as zaloSetupContract, l as listZaloAccountIds, p as buildSecretInputSchema, s as inspectZaloAccount, t as createZaloSetupWizardProxy, u as resolveDefaultZaloAccountId } from "./setup-core-CCMLSh4Q.mjs";
+import { c as isZaloAccountConfigured, d as resolveZaloAccount, i as zaloSetupContract, l as listZaloAccountIds, p as buildSecretInputSchema, s as inspectZaloAccount, t as createZaloSetupWizardProxy, u as resolveDefaultZaloAccountId } from "./setup-core-BE-EaCnS.mjs";
 import { n as collectRuntimeConfigAssignments, r as secretTargetRegistryEntries } from "./secret-contract-Cpsqe5Cv.mjs";
 import { describeWebhookAccountSnapshot } from "openclaw/plugin-sdk/account-helpers";
 import { DEFAULT_ACCOUNT_ID } from "openclaw/plugin-sdk/account-id";
@@ -24,7 +24,7 @@ import { z } from "zod";
 import { buildChannelOutboundSessionRoute, stripChannelTargetPrefix, stripTargetKindPrefix } from "openclaw/plugin-sdk/core";
 import { coerceStatusIssueAccountId, readStatusIssueFields } from "openclaw/plugin-sdk/extension-shared";
 //#region extensions/zalo/src/actions.ts
-const loadZaloActionsRuntime = createLazyRuntimeNamedExport(() => import("./actions.runtime-B7EqgwH6.mjs"), "zaloActionsRuntime");
+const loadZaloActionsRuntime = createLazyRuntimeNamedExport(() => import("./send-sCQINy2G.mjs"), "sendMessageZalo");
 const providerId = "zalo";
 const ZALO_ACTIONS = /* @__PURE__ */ new Set(["send"]);
 function listEnabledAccounts(cfg, accountId) {
@@ -54,8 +54,7 @@ const zaloMessageActions = {
 				allowEmpty: true
 			});
 			const mediaUrl = readStringParam(params, "media", { trim: false });
-			const { sendMessageZalo } = await loadZaloActionsRuntime();
-			const result = await sendMessageZalo(to ?? "", content ?? "", {
+			const result = await (await loadZaloActionsRuntime())(to ?? "", content ?? "", {
 				accountId: accountId ?? void 0,
 				mediaUrl: mediaUrl ?? void 0,
 				cfg,
@@ -187,8 +186,8 @@ function looksLikeZaloChatId(raw, normalized) {
 	const target = normalizeZaloMessagingTarget(normalized ?? raw);
 	return Boolean(target);
 }
-const loadZaloChannelRuntime = createLazyRuntimeModule(() => import("./channel.runtime-Bm9k5qqB.mjs"));
-const zaloSetupWizard = createZaloSetupWizardProxy(async () => (await import("./setup-surface-CNyPRzlv.mjs").then((n) => n.t)).zaloSetupWizard);
+const loadZaloChannelRuntime = createLazyRuntimeModule(() => import("./channel.runtime-F1ScBwNC.mjs"));
+const zaloSetupWizard = createZaloSetupWizardProxy(async () => (await import("./setup-surface-DMW4dLWX.mjs").then((n) => n.t)).zaloSetupWizard);
 const zaloTextChunkLimit = 2e3;
 async function sendZaloDelivery(ctx) {
 	const result = await (await loadZaloChannelRuntime()).sendZaloText({

package/dist/.setup/{channel.runtime-Bm9k5qqB.mjs → channel.runtime-F1ScBwNC.mjs}

@@ -1,5 +1,5 @@
-import { m as normalizeSecretInputString } from "./setup-core-CCMLSh4Q.mjs";
-import { a as getMe, n as resolveZaloProxyFetch, r as ZaloApiError, t as sendMessageZalo } from "./send-Div0xZFE.mjs";
+import { m as normalizeSecretInputString } from "./setup-core-BE-EaCnS.mjs";
+import { i as getMe, n as ZaloApiError, sendMessageZalo, t as resolveZaloProxyFetch } from "./send-sCQINy2G.mjs";
 import { createAccountStatusSink } from "openclaw/plugin-sdk/channel-outbound";
 import { runChannelProbe } from "openclaw/plugin-sdk/text-utility-runtime";
 //#region extensions/zalo/src/probe.ts
@@ -62,7 +62,7 @@ async function startZaloGatewayAccount(ctx) {
 		setStatus: ctx.setStatus
 	});
 	ctx.log?.info(`[${account.accountId}] starting provider${zaloBotLabel} mode=${mode}`);
-	const { monitorZaloProvider } = await import("./monitor-BXzlUPAd.mjs");
+	const { monitorZaloProvider } = await import("./monitor-BbW2wx_3.mjs");
 	return monitorZaloProvider({
 		token,
 		account,

package/dist/.setup/group-access-Blsyu-ot.mjs

@@ -0,0 +1,8 @@
+import { resolveOpenProviderRuntimeGroupPolicy as resolveZaloRuntimeGroupPolicy } from "openclaw/plugin-sdk/runtime-group-policy";
+//#region extensions/zalo/src/group-access.ts
+const ZALO_ALLOW_FROM_PREFIX_RE = /^(zalo|zl):/i;
+function normalizeZaloAllowEntry(value) {
+	return value.trim().replace(ZALO_ALLOW_FROM_PREFIX_RE, "").trim().toLowerCase();
+}
+//#endregion
+export { resolveZaloRuntimeGroupPolicy as n, normalizeZaloAllowEntry as t };

package/dist/.setup/{monitor-BXzlUPAd.mjs → monitor-BbW2wx_3.mjs}

@@ -1,18 +1,18 @@
-import { n as resolveZaloRuntimeGroupPolicy, t as normalizeZaloAllowEntry } from "./group-access-8qHRzDHx.mjs";
+import { n as resolveZaloRuntimeGroupPolicy, t as normalizeZaloAllowEntry } from "./group-access-Blsyu-ot.mjs";
 import { t as getZaloRuntime } from "./runtime-Dfhzt7qb.mjs";
-import { c as sendChatAction, d as setWebhook, f as ZALO_OUTBOUND_MEDIA_TTL_MS, i as deleteWebhook, l as sendMessage, n as resolveZaloProxyFetch, o as getUpdates, r as ZaloApiError, s as getWebhookInfo, u as sendPhoto } from "./send-Div0xZFE.mjs";
+import { a as getUpdates, c as sendMessage, d as ZALO_OUTBOUND_MEDIA_TTL_MS, l as sendPhoto, n as ZaloApiError, o as getWebhookInfo, r as deleteWebhook, s as sendChatAction, t as resolveZaloProxyFetch, u as setWebhook } from "./send-sCQINy2G.mjs";
 import { createMessageReceiptFromOutboundResults } from "openclaw/plugin-sdk/channel-outbound";
 import { createLazyRuntimeModule, createLazyRuntimeNamedExport } from "openclaw/plugin-sdk/lazy-runtime";
 import { deliverTextOrMediaReply, resolveSendableOutboundReplyParts } from "openclaw/plugin-sdk/reply-payload";
 import { normalizeStringEntries } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { resolveDefaultGroupPolicy, warnMissingProviderGroupPolicyFallbackOnce } from "openclaw/plugin-sdk/runtime-group-policy";
-import { createChannelPairingController } from "openclaw/plugin-sdk/channel-pairing";
-import { logTypingFailure } from "openclaw/plugin-sdk/channel-feedback";
-import { registerPluginHttpRoute, resolveWebhookPath } from "openclaw/plugin-sdk/webhook-ingress";
 import { asDateTimestampMs, resolveExpiresAtMsFromDurationMs } from "openclaw/plugin-sdk/number-runtime";
+import { logTypingFailure } from "openclaw/plugin-sdk/channel-feedback";
 import { createChannelPartialDeliveryError, formatInboundMediaUnavailableText, resolveChannelInboundRouteEnvelope } from "openclaw/plugin-sdk/channel-inbound";
+import { createChannelPairingController } from "openclaw/plugin-sdk/channel-pairing";
 import { channelReadyPatch } from "openclaw/plugin-sdk/gateway-runtime";
 import { sleepWithAbort, waitForAbortSignal } from "openclaw/plugin-sdk/runtime-env";
+import { registerPluginHttpRoute, resolveWebhookPath } from "openclaw/plugin-sdk/webhook-ingress";
 import { createHostedOutboundMediaStore } from "openclaw/plugin-sdk/outbound-media";
 import { safeEqualSecret } from "openclaw/plugin-sdk/security-runtime";
 //#region extensions/zalo/src/monitor-durable.ts
@@ -172,8 +172,8 @@ function resolveZaloTimestampMs(date) {
 	if (!date) return;
 	return date >= UNIX_MILLISECONDS_THRESHOLD ? date : date * 1e3;
 }
-const loadZaloWebhookRuntime = createLazyRuntimeNamedExport(() => import("./monitor.webhook-B_9qJI4O.mjs"), "zaloWebhookRuntime");
-const loadZaloWebhookIngressRuntime = createLazyRuntimeNamedExport(() => import("./webhook-spool-BSTKDQ8X.mjs"), "zaloWebhookIngressRuntime");
+const loadZaloWebhookRuntime = createLazyRuntimeNamedExport(() => import("./monitor.webhook-CaknDJfy.mjs"), "zaloWebhookRuntime");
+const loadZaloWebhookIngressRuntime = createLazyRuntimeNamedExport(() => import("./webhook-spool-CTCugbD_.mjs"), "zaloWebhookIngressRuntime");
 const loadZaloWebhookModule = createLazyRuntimeModule(async () => ({
 	...await loadZaloWebhookRuntime(),
 	...await loadZaloWebhookIngressRuntime()
@@ -216,26 +216,10 @@ function normalizeWebhookUrl(url) {
 function logVerbose(core, runtime, message) {
 	if (core.logging.shouldLogVerbose()) runtime.log?.(`[zalo] ${message}`);
 }
-async function handleZaloWebhookRequest(req, res) {
-	const { handleZaloWebhookRequest: handleZaloWebhookRequestInternal } = await loadZaloWebhookModule();
-	return await handleZaloWebhookRequestInternal(req, res);
-}
 function startPollingLoop(params) {
-	const { token, account, config, runtime, core, mediaMaxMb, canHostMedia, webhookUrl, webhookPath, abortSignal, isStopped, statusSink, fetcher } = params;
+	const { abortSignal, isStopped, ...processingContext } = params;
+	const { token, account, runtime, statusSink, fetcher } = processingContext;
 	const pollTimeout = 30;
-	const processingContext = {
-		token,
-		account,
-		config,
-		runtime,
-		core,
-		mediaMaxMb,
-		canHostMedia,
-		webhookUrl,
-		webhookPath,
-		statusSink,
-		fetcher
-	};
 	runtime.log?.(`[${account.accountId}] Zalo polling loop started timeout=${String(pollTimeout)}s`);
 	const poll = async () => {
 		if (isStopped() || abortSignal.aborted) return;
@@ -269,22 +253,9 @@ function startPollingLoop(params) {
 	poll();
 }
 async function processUpdate(params) {
-	const { update, token, account, config, runtime, core, mediaMaxMb, statusSink, fetcher } = params;
+	const { update, ...sharedContext } = params;
+	const { account, core, runtime } = sharedContext;
 	const { event_name, message } = update;
-	const sharedContext = {
-		token,
-		account,
-		config,
-		runtime,
-		core,
-		mediaMaxMb,
-		canHostMedia: params.canHostMedia,
-		webhookUrl: params.webhookUrl,
-		webhookPath: params.webhookPath,
-		statusSink,
-		fetcher,
-		turnAdoptionLifecycle: params.turnAdoptionLifecycle
-	};
 	if (!message) return;
 	switch (event_name) {
 		case "message.text.received":
@@ -296,8 +267,7 @@ async function processUpdate(params) {
 		case "message.image.received":
 			await handleImageMessage({
 				message,
-				...sharedContext,
-				mediaMaxMb
+				...sharedContext
 			});
 			break;
 		case "message.sticker.received":
@@ -312,10 +282,7 @@ async function handleTextMessage(params) {
 	if (!text?.trim()) return;
 	await processMessageWithPipeline({
 		...params,
-		text,
-		mediaKind: void 0,
-		mediaPath: void 0,
-		mediaType: void 0
+		text
 	});
 }
 async function handleImageMessage(params) {
@@ -324,9 +291,7 @@ async function handleImageMessage(params) {
 	const authorization = await authorizeZaloMessage({
 		...params,
 		text: caption,
-		mediaKind: "image",
-		mediaPath: void 0,
-		mediaType: void 0
+		mediaKind: "image"
 	});
 	if (!authorization) return;
 	let mediaPath;
@@ -404,8 +369,7 @@ async function authorizeZaloMessage(params) {
 		groupAllowFrom: normalizeStringEntries(account.config.groupAllowFrom),
 		command: shouldComputeAuth ? {} : void 0
 	});
-	const access = await resolveChannelIngress();
-	const senderAccess = access.senderAccess;
+	const senderAccess = (await resolveChannelIngress()).senderAccess;
 	if (isGroup) {
 		warnMissingProviderGroupPolicyFallbackOnce({
 			providerMissingFallbackApplied: senderAccess.providerMissingFallbackApplied,
@@ -447,10 +411,8 @@ async function authorizeZaloMessage(params) {
 		return;
 	}
 	return {
-		channelIngress: access,
 		resolveChannelIngress,
 		chatId,
-		commandAuthorized: access.commandAccess.requested ? access.commandAccess.authorized : void 0,
 		isGroup,
 		rawBody,
 		senderId,
@@ -460,11 +422,7 @@ async function authorizeZaloMessage(params) {
 async function processMessageWithPipeline(params) {
 	const { message, token, account, config, runtime, core, mediaPath, mediaKind, mediaType, statusSink, fetcher, agentBody: agentBodyOverride, authorization: authorizationOverride } = params;
 	const { message_id, date } = message;
-	const authorization = authorizationOverride ?? await authorizeZaloMessage({
-		...params,
-		mediaPath,
-		mediaType
-	});
+	const authorization = authorizationOverride ?? await authorizeZaloMessage(params);
 	if (!authorization) return;
 	const { isGroup, chatId, senderId, senderName, rawBody } = authorization;
 	const agentBody = agentBodyOverride ?? rawBody;
@@ -714,7 +672,7 @@ async function monitorZaloProvider(options) {
 			stopHandlers.push(unregisterHostedMediaRoute);
 		}
 		if (useWebhook) {
-			const { createZaloWebhookIngress, registerZaloWebhookTarget } = await loadZaloWebhookModule();
+			const { createZaloWebhookIngress, registerZaloWebhookTarget, handleZaloWebhookRequest } = await loadZaloWebhookModule();
 			if (!effectiveWebhookUrl || !webhookSecret) throw new Error("Zalo webhookUrl and webhookSecret are required for webhook mode");
 			if (!effectiveWebhookUrl.startsWith("https://")) throw new Error("Zalo webhook URL must use HTTPS");
 			if (webhookSecret.length < 8 || webhookSecret.length > 256) throw new Error("Zalo webhook secret must be 8-256 characters");
@@ -794,20 +752,16 @@ async function monitorZaloProvider(options) {
 		}
 		runtime.log?.(`[${account.accountId}] Zalo polling mode: clearing webhook before startup`);
 		try {
-			try {
-				const currentWebhookUrl = normalizeWebhookUrl((await getWebhookInfo(token, fetcher)).result?.url);
-				if (!currentWebhookUrl) runtime.log?.(`[${account.accountId}] Zalo polling mode ready (no webhook configured)`);
-				else {
-					runtime.log?.(`[${account.accountId}] Zalo polling mode disabling existing webhook ${describeWebhookTarget(currentWebhookUrl)}`);
-					await deleteWebhook(token, fetcher);
-					runtime.log?.(`[${account.accountId}] Zalo polling mode ready (webhook disabled)`);
-				}
-			} catch (err) {
-				if (err instanceof ZaloApiError && err.errorCode === 404) runtime.log?.(`[${account.accountId}] Zalo polling mode webhook inspection unavailable; continuing without webhook cleanup`);
-				else throw err;
+			const currentWebhookUrl = normalizeWebhookUrl((await getWebhookInfo(token, fetcher)).result?.url);
+			if (!currentWebhookUrl) runtime.log?.(`[${account.accountId}] Zalo polling mode ready (no webhook configured)`);
+			else {
+				runtime.log?.(`[${account.accountId}] Zalo polling mode disabling existing webhook ${describeWebhookTarget(currentWebhookUrl)}`);
+				await deleteWebhook(token, fetcher);
+				runtime.log?.(`[${account.accountId}] Zalo polling mode ready (webhook disabled)`);
 			}
 		} catch (err) {
-			runtime.error?.(`[${account.accountId}] Zalo polling startup could not clear webhook: ${formatZaloError(err)}`);
+			if (err instanceof ZaloApiError && err.errorCode === 404) runtime.log?.(`[${account.accountId}] Zalo polling mode webhook inspection unavailable; continuing without webhook cleanup`);
+			else runtime.error?.(`[${account.accountId}] Zalo polling startup could not clear webhook: ${formatZaloError(err)}`);
 		}
 		startPollingLoop({
 			token,

package/dist/.setup/{monitor.webhook-B_9qJI4O.mjs → monitor.webhook-CaknDJfy.mjs}

@@ -1,5 +1,6 @@
-import { WEBHOOK_ANOMALY_COUNTER_DEFAULTS, WEBHOOK_RATE_LIMIT_DEFAULTS, applyBasicWebhookRequestGuards, createFixedWindowRateLimiter, createWebhookAnomalyTracker, registerWebhookTarget, registerWebhookTargetWithPluginRoute, resolveClientIp, resolveWebhookTargetWithAuthOrRejectSync, withResolvedWebhookRequestPipeline } from "../runtime-api.js";
-import { ZaloWebhookPayloadError } from "./webhook-spool-BSTKDQ8X.mjs";
+import { ZaloWebhookPayloadError } from "./webhook-spool-CTCugbD_.mjs";
+import { resolveClientIp } from "openclaw/plugin-sdk/core";
+import { WEBHOOK_ANOMALY_COUNTER_DEFAULTS, WEBHOOK_RATE_LIMIT_DEFAULTS, applyBasicWebhookRequestGuards, createFixedWindowRateLimiter, createWebhookAnomalyTracker, registerWebhookTarget, registerWebhookTargetWithPluginRoute, resolveWebhookTargetWithAuthOrRejectSync, withResolvedWebhookRequestPipeline } from "openclaw/plugin-sdk/webhook-ingress";
 import { safeEqualSecret } from "openclaw/plugin-sdk/security-runtime";
 import { readWebhookBodyOrReject } from "openclaw/plugin-sdk/webhook-request-guards";
 //#region extensions/zalo/src/monitor.webhook.ts

package/dist/.setup/{send-Div0xZFE.mjs → send-sCQINy2G.mjs}

@@ -1,12 +1,12 @@
-import { d as resolveZaloAccount, f as resolveZaloToken } from "./setup-core-CCMLSh4Q.mjs";
+import { d as resolveZaloAccount, f as resolveZaloToken } from "./setup-core-BE-EaCnS.mjs";
 import { createMessageReceiptFromOutboundResults } from "openclaw/plugin-sdk/channel-outbound";
 import { stripChannelTargetPrefix, stripTargetKindPrefix } from "openclaw/plugin-sdk/core";
-import { formatErrorMessage } from "openclaw/plugin-sdk/error-runtime";
 import { truncateUtf16Safe } from "openclaw/plugin-sdk/text-utility-runtime";
 import { resolveTimerTimeoutMs } from "openclaw/plugin-sdk/number-runtime";
 import { assertOkOrThrowProviderError, readProviderJsonResponse } from "openclaw/plugin-sdk/provider-http";
 import { resolvePinnedHostnameWithPolicy } from "openclaw/plugin-sdk/ssrf-runtime";
 import { makeProxyFetch } from "openclaw/plugin-sdk/fetch-runtime";
+import { formatErrorMessage } from "openclaw/plugin-sdk/error-runtime";
 //#region extensions/zalo/src/timeouts.ts
 const ZALO_DEFAULT_REQUEST_TIMEOUT_MS = 3e4;
 const ZALO_OUTBOUND_MEDIA_TTL_MS = 12e4;
@@ -179,25 +179,6 @@ function createZaloSendReceipt(params) {
 		kind: params.kind
 	});
 }
-function toZaloSendResult(response, params) {
-	if (response.ok && response.result) return {
-		ok: true,
-		messageId: response.result.message_id,
-		receipt: createZaloSendReceipt({
-			messageId: response.result.message_id,
-			chatId: params.chatId,
-			kind: params.kind
-		})
-	};
-	return {
-		ok: false,
-		error: "Failed to send message",
-		receipt: createZaloSendReceipt({
-			chatId: params.chatId,
-			kind: params.kind
-		})
-	};
-}
 async function runZaloSend(failureMessage, params, assertDirectAdapterHandoff, send) {
 	let handoffRejected = false;
 	let handoffError;
@@ -211,11 +192,20 @@ async function runZaloSend(failureMessage, params, assertDirectAdapterHandoff, s
 		}
 	} : void 0;
 	try {
-		const result = toZaloSendResult(await send(assertCurrent), params);
-		return result.ok ? result : {
+		const response = await send(assertCurrent);
+		const messageId = response.ok && response.result ? response.result.message_id : void 0;
+		const receipt = createZaloSendReceipt({
+			...params,
+			messageId
+		});
+		return response.ok && response.result ? {
+			ok: true,
+			messageId,
+			receipt
+		} : {
 			ok: false,
 			error: failureMessage,
-			receipt: result.receipt
+			receipt
 		};
 	} catch (err) {
 		if (handoffRejected && Object.is(handoffError, err)) throw err;
@@ -247,69 +237,44 @@ function resolveSendContext(options) {
 		fetcher: resolveZaloProxyFetch(proxy)
 	};
 }
-function resolveValidatedSendContext(chatId, options) {
+async function sendMessageZalo(chatId, text, options = {}) {
 	const { token, fetcher } = resolveSendContext(options);
-	if (!token) return {
-		ok: false,
-		error: "No Zalo bot token configured"
-	};
-	const trimmedChatId = normalizeZaloSendChatId(chatId);
-	if (!trimmedChatId) return {
+	const normalizedChatId = token ? stripTargetKindPrefix(stripChannelTargetPrefix(chatId, "zalo", "zl")) : "";
+	if (!token || !normalizedChatId) return {
 		ok: false,
-		error: "No chat_id provided"
-	};
-	return {
-		ok: true,
-		chatId: trimmedChatId,
-		token,
-		fetcher
-	};
-}
-function normalizeZaloSendChatId(chatId) {
-	return stripTargetKindPrefix(stripChannelTargetPrefix(chatId, "zalo", "zl"));
-}
-function resolveSendContextOrFailure(chatId, options) {
-	const context = resolveValidatedSendContext(chatId, options);
-	return context.ok ? { context } : { failure: {
-		ok: false,
-		error: context.error,
+		error: token ? "No chat_id provided" : "No Zalo bot token configured",
 		receipt: createZaloSendReceipt({
 			chatId,
 			kind: "unknown"
 		})
-	} };
-}
-async function sendMessageZalo(chatId, text, options = {}) {
-	const resolved = resolveSendContextOrFailure(chatId, options);
-	if ("failure" in resolved) return resolved.failure;
-	const { context } = resolved;
+	};
 	if (options.mediaUrl && (options.mediaUrl.trim() || !text)) {
 		const photoUrl = options.mediaUrl.trim();
 		if (!photoUrl) return {
 			ok: false,
 			error: "No photo URL provided",
 			receipt: createZaloSendReceipt({
-				chatId: context.chatId,
+				chatId: normalizedChatId,
 				kind: "media"
 			})
 		};
 		const caption = text || options.caption;
 		return await runZaloSend("Failed to send photo", {
-			chatId: context.chatId,
+			chatId: normalizedChatId,
 			kind: "media"
-		}, options.assertDirectAdapterHandoff, (assertCurrent) => sendPhoto(context.token, {
-			chat_id: context.chatId,
+		}, options.assertDirectAdapterHandoff, (assertCurrent) => sendPhoto(token, {
+			chat_id: normalizedChatId,
 			photo: photoUrl,
 			caption
-		}, context.fetcher, assertCurrent));
+		}, fetcher, assertCurrent));
 	}
 	return await runZaloSend("Failed to send message", {
-		chatId: context.chatId,
+		chatId: normalizedChatId,
 		kind: "text"
-	}, options.assertDirectAdapterHandoff, (assertCurrent) => sendMessage(context.token, {
-		chat_id: context.chatId,
+	}, options.assertDirectAdapterHandoff, (assertCurrent) => sendMessage(token, {
+		chat_id: normalizedChatId,
 		text: truncateUtf16Safe(text, 2e3)
-	}, context.fetcher, assertCurrent));
+	}, fetcher, assertCurrent));
 }
 //#endregion
-export { getMe as a, sendChatAction as c, setWebhook as d, ZALO_OUTBOUND_MEDIA_TTL_MS as f, deleteWebhook as i, sendMessage as l, resolveZaloProxyFetch as n, getUpdates as o, ZaloApiError as r, getWebhookInfo as s, sendMessageZalo as t, sendPhoto as u };
+export { getUpdates as a, sendMessage as c, ZALO_OUTBOUND_MEDIA_TTL_MS as d, getMe as i, sendPhoto as l, ZaloApiError as n, getWebhookInfo as o, deleteWebhook as r, sendChatAction as s, sendMessageZalo, resolveZaloProxyFetch as t, setWebhook as u };

package/dist/.setup/{setup-core-CCMLSh4Q.mjs → setup-core-BE-EaCnS.mjs}

@@ -227,7 +227,7 @@ const zaloDmPolicy = createChannelDmPolicy({
 	resolveAccount: (cfg, accountId) => {
 		return resolveZaloAccount({
 			cfg,
-			accountId: accountId && normalizeAccountId$1(accountId) ? normalizeAccountId$1(accountId) ?? DEFAULT_ACCOUNT_ID$1 : resolveDefaultZaloAccountId(cfg)
+			accountId: accountId ? normalizeAccountId$1(accountId) : resolveDefaultZaloAccountId(cfg)
 		});
 	},
 	applyPatch: ({ cfg, account, patch }) => patchScopedAccountConfig({

package/dist/.setup/{setup-surface-CNyPRzlv.mjs → setup-surface-DMW4dLWX.mjs}

@@ -1,4 +1,4 @@
-import { a as noteZaloTokenHelp, n as zaloDmPolicy, o as promptZaloAllowFrom, s as inspectZaloAccount } from "./setup-core-CCMLSh4Q.mjs";
+import { a as noteZaloTokenHelp, n as zaloDmPolicy, o as promptZaloAllowFrom, s as inspectZaloAccount } from "./setup-core-BE-EaCnS.mjs";
 import { DEFAULT_ACCOUNT_ID, buildSingleChannelSecretPromptState, createSetupTranslator, createStandardChannelSetupStatus, hasConfiguredSecretInput, patchTopLevelChannelConfigSection, promptSingleChannelSecretInput, runSingleChannelSecretStep } from "openclaw/plugin-sdk/setup";
 //#region \0rolldown/runtime.js
 var __defProp = Object.defineProperty;
@@ -125,15 +125,15 @@ const zaloSetupWizard = {
 					return "/zalo-webhook";
 				}
 			})();
-			let webhookSecretResult = await promptSingleChannelSecretInput({
+			const promptWebhookSecret = (hasWebhookSecret) => promptSingleChannelSecretInput({
 				cfg: next,
 				prompter,
 				providerHint: "zalo-webhook",
 				credentialLabel: t("wizard.zalo.webhookSecret"),
 				secretInputMode: options?.secretInputMode,
 				...buildSingleChannelSecretPromptState({
-					accountConfigured: hasConfiguredSecretInput(resolvedAccount.config.webhookSecret),
-					hasConfigToken: hasConfiguredSecretInput(resolvedAccount.config.webhookSecret),
+					accountConfigured: hasWebhookSecret,
+					hasConfigToken: hasWebhookSecret,
 					allowEnv: false
 				}),
 				envPrompt: "",
@@ -141,24 +141,10 @@ const zaloSetupWizard = {
 				inputPrompt: t("wizard.zalo.webhookSecretInput"),
 				preferredEnvVar: "ZALO_WEBHOOK_SECRET"
 			});
+			let webhookSecretResult = await promptWebhookSecret(hasConfiguredSecretInput(resolvedAccount.config.webhookSecret));
 			while (webhookSecretResult.action === "set" && typeof webhookSecretResult.value === "string" && (webhookSecretResult.value.length < 8 || webhookSecretResult.value.length > 256)) {
 				await prompter.note(t("wizard.zalo.webhookSecretLength"), t("wizard.zalo.webhookTitle"));
-				webhookSecretResult = await promptSingleChannelSecretInput({
-					cfg: next,
-					prompter,
-					providerHint: "zalo-webhook",
-					credentialLabel: t("wizard.zalo.webhookSecret"),
-					secretInputMode: options?.secretInputMode,
-					...buildSingleChannelSecretPromptState({
-						accountConfigured: false,
-						hasConfigToken: false,
-						allowEnv: false
-					}),
-					envPrompt: "",
-					keepPrompt: t("wizard.zalo.webhookSecretKeep"),
-					inputPrompt: t("wizard.zalo.webhookSecretInput"),
-					preferredEnvVar: "ZALO_WEBHOOK_SECRET"
-				});
+				webhookSecretResult = await promptWebhookSecret(false);
 			}
 			const webhookSecret = webhookSecretResult.action === "set" ? webhookSecretResult.value : resolvedAccount.config.webhookSecret;
 			const webhookPath = (await prompter.text({

package/dist/.setup/{webhook-spool-BSTKDQ8X.mjs → webhook-spool-CTCugbD_.mjs}

@@ -1,5 +1,5 @@
 import { t as getZaloRuntime } from "./runtime-Dfhzt7qb.mjs";
-import { r as ZaloApiError } from "./send-Div0xZFE.mjs";
+import { n as ZaloApiError } from "./send-sCQINy2G.mjs";
 import { DEFAULT_INGRESS_ADOPTION_STALL_MS, DEFAULT_INGRESS_RETRY_MAX_ATTEMPTS, bindIngressLifecycleToReplyOptions, createChannelIngressError, createChannelIngressMonitor } from "openclaw/plugin-sdk/channel-outbound";
 import { normalizeNullableString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { z } from "zod";

package/dist/api.js

@@ -1,5 +1,5 @@
-import { n as zaloDmPolicy, r as zaloSetupAdapter, t as createZaloSetupWizardProxy } from "./.setup/setup-core-CCMLSh4Q.mjs";
-import { t as zaloPlugin } from "./.setup/channel-C4-ovULW.mjs";
-import { n as resolveZaloRuntimeGroupPolicy } from "./.setup/group-access-8qHRzDHx.mjs";
+import { n as zaloDmPolicy, r as zaloSetupAdapter, t as createZaloSetupWizardProxy } from "./.setup/setup-core-BE-EaCnS.mjs";
+import { t as zaloPlugin } from "./.setup/channel-COgJOEix.mjs";
+import { n as resolveZaloRuntimeGroupPolicy } from "./.setup/group-access-Blsyu-ot.mjs";
 import { zaloSetupWizard } from "./setup-api.js";
 export { createZaloSetupWizardProxy, resolveZaloRuntimeGroupPolicy, zaloDmPolicy, zaloPlugin, zaloSetupAdapter, zaloSetupWizard };

package/dist/channel-plugin-api.js

@@ -1,2 +1,2 @@
-import { t as zaloPlugin } from "./.setup/channel-C4-ovULW.mjs";
+import { t as zaloPlugin } from "./.setup/channel-COgJOEix.mjs";
 export { zaloPlugin };

package/dist/contract-api.js

@@ -1,2 +1,2 @@
-import { n as resolveZaloRuntimeGroupPolicy } from "./.setup/group-access-8qHRzDHx.mjs";
+import { n as resolveZaloRuntimeGroupPolicy } from "./.setup/group-access-Blsyu-ot.mjs";
 export { resolveZaloRuntimeGroupPolicy };

package/dist/runtime-api.js

@@ -1,16 +1,2 @@
 import { n as setZaloRuntime } from "./.setup/runtime-Dfhzt7qb.mjs";
-import { formatAllowFromLowercase, isNormalizedSenderAllowed } from "openclaw/plugin-sdk/allow-from";
-import { createChannelMessageReplyPipeline } from "openclaw/plugin-sdk/channel-outbound";
-import { PAIRING_APPROVED_MESSAGE, buildTokenChannelStatusSummary } from "openclaw/plugin-sdk/channel-status";
-import { deliverTextOrMediaReply, isNumericTargetId, sendPayloadWithChunkedTextAndMedia } from "openclaw/plugin-sdk/reply-payload";
-import { buildBaseAccountStatusSnapshot } from "openclaw/plugin-sdk/status-helpers";
-import { chunkTextForOutbound } from "openclaw/plugin-sdk/text-chunking";
-import { buildSecretInputSchema, hasConfiguredSecretInput, normalizeResolvedSecretInputString, normalizeSecretInputString } from "openclaw/plugin-sdk/secret-input";
-import { DEFAULT_ACCOUNT_ID, buildChannelConfigSchema, createDedupeCache, formatPairingApproveHint, jsonResult, normalizeAccountId, readStringParam, resolveClientIp } from "openclaw/plugin-sdk/core";
-import { addWildcardAllowFrom, applyAccountNameToChannelSection, applySetupAccountConfigPatch, buildSingleChannelSecretPromptState, mergeAllowFromEntries, migrateBaseNameToDefaultAccount, promptSingleChannelSecretInput, runSingleChannelSecretStep, setTopLevelChannelDmPolicyWithAllowFrom } from "openclaw/plugin-sdk/setup";
-import { resolveDefaultGroupPolicy, resolveOpenProviderRuntimeGroupPolicy, warnMissingProviderGroupPolicyFallbackOnce } from "openclaw/plugin-sdk/runtime-group-policy";
-import { createChannelPairingController } from "openclaw/plugin-sdk/channel-pairing";
-import { logTypingFailure } from "openclaw/plugin-sdk/channel-feedback";
-import { waitForAbortSignal } from "openclaw/plugin-sdk/runtime";
-import { WEBHOOK_ANOMALY_COUNTER_DEFAULTS, WEBHOOK_RATE_LIMIT_DEFAULTS, applyBasicWebhookRequestGuards, createFixedWindowRateLimiter, createWebhookAnomalyTracker, readJsonWebhookBodyOrReject, registerPluginHttpRoute, registerWebhookTarget, registerWebhookTargetWithPluginRoute, resolveWebhookPath, resolveWebhookTargetWithAuthOrRejectSync, withResolvedWebhookRequestPipeline } from "openclaw/plugin-sdk/webhook-ingress";
-export { DEFAULT_ACCOUNT_ID, PAIRING_APPROVED_MESSAGE, WEBHOOK_ANOMALY_COUNTER_DEFAULTS, WEBHOOK_RATE_LIMIT_DEFAULTS, addWildcardAllowFrom, applyAccountNameToChannelSection, applyBasicWebhookRequestGuards, applySetupAccountConfigPatch, buildBaseAccountStatusSnapshot, buildChannelConfigSchema, buildSecretInputSchema, buildSingleChannelSecretPromptState, buildTokenChannelStatusSummary, chunkTextForOutbound, createChannelMessageReplyPipeline, createChannelPairingController, createDedupeCache, createFixedWindowRateLimiter, createWebhookAnomalyTracker, deliverTextOrMediaReply, formatAllowFromLowercase, formatPairingApproveHint, hasConfiguredSecretInput, isNormalizedSenderAllowed, isNumericTargetId, jsonResult, logTypingFailure, mergeAllowFromEntries, migrateBaseNameToDefaultAccount, normalizeAccountId, normalizeResolvedSecretInputString, normalizeSecretInputString, promptSingleChannelSecretInput, readJsonWebhookBodyOrReject, readStringParam, registerPluginHttpRoute, registerWebhookTarget, registerWebhookTargetWithPluginRoute, resolveClientIp, resolveDefaultGroupPolicy, resolveOpenProviderRuntimeGroupPolicy, resolveWebhookPath, resolveWebhookTargetWithAuthOrRejectSync, runSingleChannelSecretStep, sendPayloadWithChunkedTextAndMedia, setTopLevelChannelDmPolicyWithAllowFrom, setZaloRuntime, waitForAbortSignal, warnMissingProviderGroupPolicyFallbackOnce, withResolvedWebhookRequestPipeline };
+export { setZaloRuntime };

package/dist/setup-api.js

@@ -1,5 +1,5 @@
-import { n as zaloDmPolicy, r as zaloSetupAdapter, t as createZaloSetupWizardProxy } from "./.setup/setup-core-CCMLSh4Q.mjs";
-import { n as resolveZaloRuntimeGroupPolicy } from "./.setup/group-access-8qHRzDHx.mjs";
+import { n as zaloDmPolicy, r as zaloSetupAdapter, t as createZaloSetupWizardProxy } from "./.setup/setup-core-BE-EaCnS.mjs";
+import { n as resolveZaloRuntimeGroupPolicy } from "./.setup/group-access-Blsyu-ot.mjs";
 import { loadBundledEntryExportSync } from "openclaw/plugin-sdk/channel-entry-contract";
 //#region extensions/zalo/setup-api.ts
 function createLazyObjectValue(load) {

package/dist/setup-entry.js

@@ -4,7 +4,7 @@ import { fileURLToPath } from "node:url";
 var setup_entry_default = defineBundledChannelSetupEntry({
 	importMetaUrl: import.meta.url,
 	plugin: {
-		specifier: fileURLToPath(new URL(".setup/api-BDqk_OyX.mjs", import.meta.url).href),
+		specifier: fileURLToPath(new URL(".setup/api-YaSbmx07.mjs", import.meta.url).href),
 		exportName: "zaloPlugin"
 	},
 	secrets: {

package/dist/setup-surface.js

@@ -1,3 +1,3 @@
-import { n as zaloSetupWizard } from "./.setup/setup-surface-CNyPRzlv.mjs";
-import { r as zaloSetupAdapter } from "./.setup/setup-core-CCMLSh4Q.mjs";
+import { n as zaloSetupWizard } from "./.setup/setup-surface-DMW4dLWX.mjs";
+import { r as zaloSetupAdapter } from "./.setup/setup-core-BE-EaCnS.mjs";
 export { zaloSetupAdapter, zaloSetupWizard };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openclaw/zalo",
-  "version": "2026.9.6",
+  "version": "2026.9.7",
   "description": "OpenClaw Zalo channel plugin for bot and webhook chats.",
   "repository": {
     "type": "git",
@@ -8,7 +8,7 @@
   },
   "type": "module",
   "peerDependencies": {
-    "openclaw": ">=2026.9.6"
+    "openclaw": ">=2026.9.7"
   },
   "peerDependenciesMeta": {
     "openclaw": {
@@ -83,10 +83,10 @@
       "minHostVersion": ">=2026.4.10"
     },
     "compat": {
-      "pluginApi": ">=2026.9.6"
+      "pluginApi": ">=2026.9.7"
     },
     "build": {
-      "openclawVersion": "2026.9.6"
+      "openclawVersion": "2026.9.7"
     },
     "release": {
       "publishToClawHub": true,

package/dist/.setup/actions.runtime-B7EqgwH6.mjs

@@ -1,5 +0,0 @@
-import { t as sendMessageZalo } from "./send-Div0xZFE.mjs";
-//#region extensions/zalo/src/actions.runtime.ts
-const zaloActionsRuntime = { sendMessageZalo };
-//#endregion
-export { zaloActionsRuntime };

package/dist/.setup/group-access-8qHRzDHx.mjs

@@ -1,15 +0,0 @@
-import { resolveOpenProviderRuntimeGroupPolicy } from "openclaw/plugin-sdk/runtime-group-policy";
-//#region extensions/zalo/src/group-access.ts
-const ZALO_ALLOW_FROM_PREFIX_RE = /^(zalo|zl):/i;
-function normalizeZaloAllowEntry(value) {
-	return value.trim().replace(ZALO_ALLOW_FROM_PREFIX_RE, "").trim().toLowerCase();
-}
-function resolveZaloRuntimeGroupPolicy(params) {
-	return resolveOpenProviderRuntimeGroupPolicy({
-		providerConfigPresent: params.providerConfigPresent,
-		groupPolicy: params.groupPolicy,
-		defaultGroupPolicy: params.defaultGroupPolicy
-	});
-}
-//#endregion
-export { resolveZaloRuntimeGroupPolicy as n, normalizeZaloAllowEntry as t };