@openclaw/zalouser 2026.5.12 → 2026.5.14-beta.2

package/dist/{accounts-iV_px99V.js → accounts-CTecjIqR.js}

@@ -3,7 +3,7 @@ import { normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runti
 //#region extensions/zalouser/src/accounts.ts
 let zalouserAccountsRuntimePromise;
 async function loadZalouserAccountsRuntime() {
-	zalouserAccountsRuntimePromise ??= import("./accounts.runtime-B4Mw_Xgv.js");
+	zalouserAccountsRuntimePromise ??= import("./accounts.runtime-BtpFX7w7.js");
 	return await zalouserAccountsRuntimePromise;
 }
 const { listAccountIds: listZalouserAccountIds, resolveDefaultAccountId: resolveDefaultZalouserAccountId } = createAccountListHelpers("zalouser");

package/dist/{accounts.runtime-B4Mw_Xgv.js → accounts.runtime-BtpFX7w7.js}

@@ -1,2 +1,2 @@
-import { n as getZaloUserInfo, t as checkZaloAuthenticated } from "./zalo-js-KeIEcTqZ.js";
+import { n as getZaloUserInfo, t as checkZaloAuthenticated } from "./zalo-js-QSY2SsUF.js";
 export { checkZaloAuthenticated, getZaloUserInfo };

package/dist/{api-CaGurb-M.js → api-BKTe9er6.js}

@@ -1,11 +1,11 @@
-import "./setup-surface-Cz9-SO_8.js";
-import "./setup-core-CqipqY98.js";
-import { r as parseZalouserOutboundTarget } from "./session-route-81QGCeV2.js";
-import "./channel-D4jRkVKJ.js";
-import "./security-audit-BZLhil-V.js";
-import { i as listZaloFriendsMatching, n as getZaloUserInfo, s as listZaloGroupsMatching, t as checkZaloAuthenticated } from "./zalo-js-KeIEcTqZ.js";
-import "./channel.setup-Bfi-3_EI.js";
-import { i as sendMessageZalouser, n as sendImageZalouser, r as sendLinkZalouser } from "./send-CH7XlJaj.js";
+import "./setup-surface-Dv3nk0fI.js";
+import "./shared-O0YC-vIX.js";
+import "./channel-BbRxSL6F.js";
+import { r as parseZalouserOutboundTarget } from "./session-route-DWMin5CB.js";
+import "./security-audit-DUQOetcM.js";
+import { i as listZaloFriendsMatching, n as getZaloUserInfo, s as listZaloGroupsMatching, t as checkZaloAuthenticated } from "./zalo-js-QSY2SsUF.js";
+import "./channel.setup-D-TSDzJ-.js";
+import { i as sendMessageZalouser, n as sendImageZalouser, r as sendLinkZalouser } from "./send-SPumHuhS.js";
 import { stringEnum } from "openclaw/plugin-sdk/channel-actions";
 import { formatErrorMessage } from "openclaw/plugin-sdk/error-runtime";
 import { Type } from "typebox";

package/dist/api.js

@@ -1,7 +1,7 @@
-import { n as zalouserSetupWizard } from "./setup-surface-Cz9-SO_8.js";
-import { n as zalouserSetupAdapter, t as createZalouserSetupWizardProxy } from "./setup-core-CqipqY98.js";
-import { t as zalouserPlugin } from "./channel-D4jRkVKJ.js";
-import { n as isZalouserMutableGroupEntry, t as collectZalouserSecurityAuditFindings } from "./security-audit-BZLhil-V.js";
-import { t as zalouserSetupPlugin } from "./channel.setup-Bfi-3_EI.js";
-import { t as createZalouserTool } from "./api-CaGurb-M.js";
+import { n as zalouserSetupWizard } from "./setup-surface-Dv3nk0fI.js";
+import { n as createZalouserSetupWizardProxy, r as zalouserSetupAdapter } from "./shared-O0YC-vIX.js";
+import { t as zalouserPlugin } from "./channel-BbRxSL6F.js";
+import { n as isZalouserMutableGroupEntry, t as collectZalouserSecurityAuditFindings } from "./security-audit-DUQOetcM.js";
+import { t as zalouserSetupPlugin } from "./channel.setup-D-TSDzJ-.js";
+import { t as createZalouserTool } from "./api-BKTe9er6.js";
 export { collectZalouserSecurityAuditFindings, createZalouserSetupWizardProxy, createZalouserTool, isZalouserMutableGroupEntry, zalouserPlugin, zalouserSetupAdapter, zalouserSetupPlugin, zalouserSetupWizard };

package/dist/{channel-D4jRkVKJ.js → channel-BbRxSL6F.js}

@@ -1,21 +1,123 @@
-import { a as resolveZalouserAccountSync, i as resolveDefaultZalouserAccountId, r as listZalouserAccountIds, t as checkZcaAuthenticated } from "./accounts-iV_px99V.js";
-import { a as isNumericTargetId, i as isDangerousNameMatchingEnabled, n as DEFAULT_ACCOUNT_ID, o as normalizeAccountId, r as chunkTextForOutbound, s as sendPayloadWithChunkedTextAndMedia, t as createZalouserPluginBase } from "./shared-BwUAKszU.js";
-import { a as resolveZalouserReactionMessageIds, o as buildZalouserGroupCandidates, s as findZalouserGroupEntry, t as getZalouserRuntime } from "./runtime-nbWip_ng.js";
-import { n as zalouserSetupAdapter, r as writeQrDataUrlToTempFile, t as createZalouserSetupWizardProxy } from "./setup-core-CqipqY98.js";
-import { i as resolveZalouserOutboundSessionRoute, n as parseZalouserDirectoryGroupId, r as parseZalouserOutboundTarget, t as normalizeZalouserTarget } from "./session-route-81QGCeV2.js";
+import { a as resolveZalouserAccountSync, i as resolveDefaultZalouserAccountId, r as listZalouserAccountIds, t as checkZcaAuthenticated } from "./accounts-CTecjIqR.js";
+import { a as DEFAULT_ACCOUNT_ID, c as isNumericTargetId, i as writeQrDataUrlToTempFile, l as normalizeAccountId, n as createZalouserSetupWizardProxy, o as chunkTextForOutbound, r as zalouserSetupAdapter, s as isDangerousNameMatchingEnabled, t as createZalouserPluginBase, u as sendPayloadWithChunkedTextAndMedia } from "./shared-O0YC-vIX.js";
+import { i as resolveZalouserOutboundSessionRoute, n as parseZalouserDirectoryGroupId, r as parseZalouserOutboundTarget, t as normalizeZalouserTarget } from "./session-route-DWMin5CB.js";
 import { createChatChannelPlugin } from "openclaw/plugin-sdk/channel-core";
 import { createAccountStatusSink } from "openclaw/plugin-sdk/channel-lifecycle";
 import { buildPassiveProbedChannelStatusSummary, coerceStatusIssueAccountId, readStatusIssueFields } from "openclaw/plugin-sdk/extension-shared";
 import { createLazyRuntimeModule } from "openclaw/plugin-sdk/lazy-runtime";
 import { createAsyncComputedAccountStatusAdapter, createDefaultChannelRuntimeState } from "openclaw/plugin-sdk/status-helpers";
-import { normalizeLowercaseStringOrEmpty } from "openclaw/plugin-sdk/string-coerce-runtime";
+import { normalizeLowercaseStringOrEmpty, normalizeOptionalLowercaseString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { createScopedDmSecurityResolver } from "openclaw/plugin-sdk/channel-config-helpers";
 import { defineChannelMessageAdapter } from "openclaw/plugin-sdk/channel-message";
 import { createPairingPrefixStripper } from "openclaw/plugin-sdk/channel-pairing";
 import { createEmptyChannelResult, createRawChannelSendResultAdapter } from "openclaw/plugin-sdk/channel-send-result";
 import { createStaticReplyToModeResolver } from "openclaw/plugin-sdk/conversation-runtime";
+import { createPluginRuntimeStore } from "openclaw/plugin-sdk/runtime-store";
+//#region extensions/zalouser/src/group-policy.ts
+function toGroupCandidate(value) {
+	return value?.trim() ?? "";
+}
+function normalizeZalouserGroupSlug(raw) {
+	const trimmed = normalizeOptionalLowercaseString(raw) ?? "";
+	if (!trimmed) return "";
+	return trimmed.replace(/^#/, "").replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "");
+}
+function buildZalouserGroupCandidates(params) {
+	const seen = /* @__PURE__ */ new Set();
+	const out = [];
+	const push = (value) => {
+		const normalized = toGroupCandidate(value);
+		if (!normalized || seen.has(normalized)) return;
+		seen.add(normalized);
+		out.push(normalized);
+	};
+	const groupId = toGroupCandidate(params.groupId);
+	const groupChannel = toGroupCandidate(params.groupChannel);
+	const groupName = toGroupCandidate(params.groupName);
+	push(groupId);
+	if (params.includeGroupIdAlias === true && groupId) push(`group:${groupId}`);
+	if (params.allowNameMatching !== false) {
+		push(groupChannel);
+		push(groupName);
+		if (groupName) push(normalizeZalouserGroupSlug(groupName));
+	}
+	if (params.includeWildcard !== false) push("*");
+	return out;
+}
+function findZalouserGroupEntry(groups, candidates) {
+	if (!groups) return;
+	for (const candidate of candidates) {
+		const entry = groups[candidate];
+		if (entry) return entry;
+	}
+}
+function isZalouserGroupEntryAllowed(entry) {
+	if (!entry) return false;
+	return entry.allow !== false && entry.enabled !== false;
+}
+//#endregion
+//#region extensions/zalouser/src/message-sid.ts
+function toMessageSidPart(value) {
+	if (typeof value === "string") return value.trim();
+	if (typeof value === "number" && Number.isFinite(value)) return String(Math.trunc(value));
+	return "";
+}
+function parseZalouserMessageSidFull(value) {
+	const raw = toMessageSidPart(value);
+	if (!raw) return null;
+	const [msgIdPart, cliMsgIdPart] = raw.split(":").map((entry) => entry.trim());
+	if (!msgIdPart || !cliMsgIdPart) return null;
+	return {
+		msgId: msgIdPart,
+		cliMsgId: cliMsgIdPart
+	};
+}
+function resolveZalouserReactionMessageIds(params) {
+	const explicitMessageId = toMessageSidPart(params.messageId);
+	const explicitCliMsgId = toMessageSidPart(params.cliMsgId);
+	if (explicitMessageId && explicitCliMsgId) return {
+		msgId: explicitMessageId,
+		cliMsgId: explicitCliMsgId
+	};
+	const parsedFromCurrent = parseZalouserMessageSidFull(params.currentMessageId);
+	if (parsedFromCurrent) return parsedFromCurrent;
+	const currentRaw = toMessageSidPart(params.currentMessageId);
+	if (!currentRaw) return null;
+	if (explicitMessageId && !explicitCliMsgId) return {
+		msgId: explicitMessageId,
+		cliMsgId: currentRaw
+	};
+	if (!explicitMessageId && explicitCliMsgId) return {
+		msgId: currentRaw,
+		cliMsgId: explicitCliMsgId
+	};
+	return {
+		msgId: currentRaw,
+		cliMsgId: currentRaw
+	};
+}
+function formatZalouserMessageSidFull(params) {
+	const msgId = toMessageSidPart(params.msgId);
+	const cliMsgId = toMessageSidPart(params.cliMsgId);
+	if (!msgId && !cliMsgId) return;
+	if (msgId && cliMsgId) return `${msgId}:${cliMsgId}`;
+	return msgId || cliMsgId || void 0;
+}
+function resolveZalouserMessageSid(params) {
+	const msgId = toMessageSidPart(params.msgId);
+	const cliMsgId = toMessageSidPart(params.cliMsgId);
+	if (msgId || cliMsgId) return msgId || cliMsgId;
+	return toMessageSidPart(params.fallback) || void 0;
+}
+//#endregion
+//#region extensions/zalouser/src/runtime.ts
+const { setRuntime: setZalouserRuntime, getRuntime: getZalouserRuntime } = createPluginRuntimeStore({
+	pluginId: "zalouser",
+	errorMessage: "Zalouser runtime not initialized"
+});
+//#endregion
 //#region extensions/zalouser/src/channel.adapters.ts
-const loadZalouserChannelRuntime$1 = createLazyRuntimeModule(() => import("./channel.runtime-DKtPzBr_.js"));
+const loadZalouserChannelRuntime$1 = createLazyRuntimeModule(() => import("./channel.runtime-oMRJXO6B.js"));
 const ZALOUSER_TEXT_CHUNK_LIMIT = 2e3;
 function resolveZalouserQrProfile(accountId) {
 	const normalized = normalizeAccountId(accountId);
@@ -346,8 +448,8 @@ function collectZalouserStatusIssues(accounts) {
 }
 //#endregion
 //#region extensions/zalouser/src/channel.ts
-const loadZalouserChannelRuntime = createLazyRuntimeModule(() => import("./channel.runtime-DKtPzBr_.js"));
-const zalouserSetupWizardProxy = createZalouserSetupWizardProxy(async () => (await import("./setup-surface-Cz9-SO_8.js").then((n) => n.t)).zalouserSetupWizard);
+const loadZalouserChannelRuntime = createLazyRuntimeModule(() => import("./channel.runtime-oMRJXO6B.js"));
+const zalouserSetupWizardProxy = createZalouserSetupWizardProxy(async () => (await import("./setup-surface-Dv3nk0fI.js").then((n) => n.t)).zalouserSetupWizard);
 function mapUser(params) {
 	return {
 		kind: "user",
@@ -464,7 +566,7 @@ const zalouserPlugin = createChatChannelPlugin({
 					setStatus: ctx.setStatus
 				});
 				ctx.log?.info(`[${account.accountId}] starting zalouser provider${userLabel}`);
-				const { monitorZalouserProvider } = await import("./monitor-j5lov4Dd.js");
+				const { monitorZalouserProvider } = await import("./monitor-_QHUT-X9.js");
 				return monitorZalouserProvider({
 					account,
 					config: ctx.cfg,
@@ -497,4 +599,4 @@ const zalouserPlugin = createChatChannelPlugin({
 	outbound: zalouserOutboundAdapter
 });
 //#endregion
-export { zalouserPlugin as t };
+export { resolveZalouserMessageSid as a, isZalouserGroupEntryAllowed as c, formatZalouserMessageSidFull as i, getZalouserRuntime as n, buildZalouserGroupCandidates as o, setZalouserRuntime as r, findZalouserGroupEntry as s, zalouserPlugin as t };

package/dist/channel-plugin-api.js

@@ -1,2 +1,2 @@
-import { t as zalouserPlugin } from "./channel-D4jRkVKJ.js";
+import { t as zalouserPlugin } from "./channel-BbRxSL6F.js";
 export { zalouserPlugin };

package/dist/{channel.runtime-DKtPzBr_.js → channel.runtime-oMRJXO6B.js}

@@ -1,6 +1,6 @@
-import { t as collectZalouserSecurityAuditFindings } from "./security-audit-BZLhil-V.js";
-import { a as listZaloGroupMembers, b as waitForZaloQrLogin, c as logoutZaloProfile, i as listZaloFriendsMatching, n as getZaloUserInfo, s as listZaloGroupsMatching, y as startZaloQrLogin } from "./zalo-js-KeIEcTqZ.js";
-import { a as sendReactionZalouser, i as sendMessageZalouser } from "./send-CH7XlJaj.js";
+import { t as collectZalouserSecurityAuditFindings } from "./security-audit-DUQOetcM.js";
+import { a as listZaloGroupMembers, b as waitForZaloQrLogin, c as logoutZaloProfile, i as listZaloFriendsMatching, n as getZaloUserInfo, s as listZaloGroupsMatching, y as startZaloQrLogin } from "./zalo-js-QSY2SsUF.js";
+import { a as sendReactionZalouser, i as sendMessageZalouser } from "./send-SPumHuhS.js";
 import { formatErrorMessage } from "openclaw/plugin-sdk/error-runtime";
 //#region extensions/zalouser/src/probe.ts
 async function probeZalouser(profile, timeoutMs) {

package/dist/{channel.setup-Bfi-3_EI.js → channel.setup-D-TSDzJ-.js}

@@ -1,6 +1,5 @@
-import { n as zalouserSetupWizard } from "./setup-surface-Cz9-SO_8.js";
-import { t as createZalouserPluginBase } from "./shared-BwUAKszU.js";
-import { n as zalouserSetupAdapter } from "./setup-core-CqipqY98.js";
+import { n as zalouserSetupWizard } from "./setup-surface-Dv3nk0fI.js";
+import { r as zalouserSetupAdapter, t as createZalouserPluginBase } from "./shared-O0YC-vIX.js";
 //#region extensions/zalouser/src/channel.setup.ts
 const zalouserSetupPlugin = { ...createZalouserPluginBase({
 	setupWizard: zalouserSetupWizard,

package/dist/contract-api.js

@@ -1,3 +1,3 @@
-import { n as normalizeCompatibilityConfig, t as legacyConfigRules } from "./doctor-contract-DgqHp8E2.js";
-import { t as collectZalouserSecurityAuditFindings } from "./security-audit-BZLhil-V.js";
+import { n as normalizeCompatibilityConfig, t as legacyConfigRules } from "./doctor-contract-BIY2IHB_.js";
+import { t as collectZalouserSecurityAuditFindings } from "./security-audit-DUQOetcM.js";
 export { collectZalouserSecurityAuditFindings, legacyConfigRules, normalizeCompatibilityConfig };

package/dist/doctor-contract-api.js

@@ -1,2 +1,2 @@
-import { n as normalizeCompatibilityConfig, t as legacyConfigRules } from "./doctor-contract-DgqHp8E2.js";
+import { n as normalizeCompatibilityConfig, t as legacyConfigRules } from "./doctor-contract-BIY2IHB_.js";
 export { legacyConfigRules, normalizeCompatibilityConfig };

package/dist/{monitor-j5lov4Dd.js → monitor-_QHUT-X9.js}

@@ -1,6 +1,6 @@
-import { c as isZalouserGroupEntryAllowed, i as resolveZalouserMessageSid, o as buildZalouserGroupCandidates, r as formatZalouserMessageSidFull, s as findZalouserGroupEntry, t as getZalouserRuntime } from "./runtime-nbWip_ng.js";
-import { o as listZaloGroups, r as listZaloFriends, u as resolveZaloGroupContext, v as startZaloListener } from "./zalo-js-KeIEcTqZ.js";
-import { i as sendMessageZalouser, o as sendSeenZalouser, s as sendTypingZalouser, t as sendDeliveredZalouser } from "./send-CH7XlJaj.js";
+import { a as resolveZalouserMessageSid, c as isZalouserGroupEntryAllowed, i as formatZalouserMessageSidFull, n as getZalouserRuntime, o as buildZalouserGroupCandidates, s as findZalouserGroupEntry } from "./channel-BbRxSL6F.js";
+import { o as listZaloGroups, r as listZaloFriends, u as resolveZaloGroupContext, v as startZaloListener } from "./zalo-js-QSY2SsUF.js";
+import { i as sendMessageZalouser, o as sendSeenZalouser, s as sendTypingZalouser, t as sendDeliveredZalouser } from "./send-SPumHuhS.js";
 import { createDeferred } from "openclaw/plugin-sdk/extension-shared";
 import { normalizeLowercaseStringOrEmpty, normalizeOptionalLowercaseString, normalizeStringEntries } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { mergeAllowlist, summarizeMapping } from "openclaw/plugin-sdk/allow-from";

package/dist/runtime-api.js

@@ -1,10 +1,9 @@
-import { n as zalouserSetupWizard } from "./setup-surface-Cz9-SO_8.js";
-import { n as setZalouserRuntime } from "./runtime-nbWip_ng.js";
-import { n as zalouserSetupAdapter, t as createZalouserSetupWizardProxy } from "./setup-core-CqipqY98.js";
-import { t as zalouserPlugin } from "./channel-D4jRkVKJ.js";
-import { n as isZalouserMutableGroupEntry, t as collectZalouserSecurityAuditFindings } from "./security-audit-BZLhil-V.js";
-import { t as zalouserSetupPlugin } from "./channel.setup-Bfi-3_EI.js";
-import { t as createZalouserTool } from "./api-CaGurb-M.js";
+import { n as zalouserSetupWizard } from "./setup-surface-Dv3nk0fI.js";
+import { n as createZalouserSetupWizardProxy, r as zalouserSetupAdapter } from "./shared-O0YC-vIX.js";
+import { r as setZalouserRuntime, t as zalouserPlugin } from "./channel-BbRxSL6F.js";
+import { n as isZalouserMutableGroupEntry, t as collectZalouserSecurityAuditFindings } from "./security-audit-DUQOetcM.js";
+import { t as zalouserSetupPlugin } from "./channel.setup-D-TSDzJ-.js";
+import { t as createZalouserTool } from "./api-BKTe9er6.js";
 import { buildBaseAccountStatusSnapshot } from "openclaw/plugin-sdk/status-helpers";
 import { formatAllowFromLowercase, mergeAllowlist, summarizeMapping } from "openclaw/plugin-sdk/allow-from";
 import { DEFAULT_ACCOUNT_ID, buildChannelConfigSchema, normalizeAccountId } from "openclaw/plugin-sdk/core";

package/dist/{send-CH7XlJaj.js → send-SPumHuhS.js}

@@ -1,4 +1,4 @@
-import { S as TextStyle, _ as sendZaloTypingEvent, f as sendZaloDeliveredEvent, g as sendZaloTextMessage, h as sendZaloSeenEvent, m as sendZaloReaction, p as sendZaloLink, x as createZalouserSendReceipt } from "./zalo-js-KeIEcTqZ.js";
+import { S as TextStyle, _ as sendZaloTypingEvent, f as sendZaloDeliveredEvent, g as sendZaloTextMessage, h as sendZaloSeenEvent, m as sendZaloReaction, p as sendZaloLink, x as createZalouserSendReceipt } from "./zalo-js-QSY2SsUF.js";
 //#region extensions/zalouser/src/text-styles.ts
 const ESCAPE_SENTINEL_START = "
";
 const ESCAPE_SENTINEL_END = "";

package/dist/setup-plugin-api.js

@@ -1,2 +1,2 @@
-import { t as zalouserSetupPlugin } from "./channel.setup-Bfi-3_EI.js";
+import { t as zalouserSetupPlugin } from "./channel.setup-D-TSDzJ-.js";
 export { zalouserSetupPlugin };

package/dist/{setup-surface-Cz9-SO_8.js → setup-surface-Dv3nk0fI.js}

@@ -1,6 +1,6 @@
-import { a as resolveZalouserAccountSync, i as resolveDefaultZalouserAccountId, r as listZalouserAccountIds, t as checkZcaAuthenticated } from "./accounts-iV_px99V.js";
-import { r as writeQrDataUrlToTempFile } from "./setup-core-CqipqY98.js";
-import { b as waitForZaloQrLogin, c as logoutZaloProfile, d as resolveZaloGroupsByEntries, l as resolveZaloAllowFromEntries, y as startZaloQrLogin } from "./zalo-js-KeIEcTqZ.js";
+import { a as resolveZalouserAccountSync, i as resolveDefaultZalouserAccountId, r as listZalouserAccountIds, t as checkZcaAuthenticated } from "./accounts-CTecjIqR.js";
+import { i as writeQrDataUrlToTempFile } from "./shared-O0YC-vIX.js";
+import { b as waitForZaloQrLogin, c as logoutZaloProfile, d as resolveZaloGroupsByEntries, l as resolveZaloAllowFromEntries, y as startZaloQrLogin } from "./zalo-js-QSY2SsUF.js";
 import { DEFAULT_ACCOUNT_ID, addWildcardAllowFrom, formatCliCommand, formatDocsLink, formatResolvedUnresolvedNote, mergeAllowFromEntries, normalizeAccountId, patchScopedAccountConfig } from "openclaw/plugin-sdk/setup";
 //#region \0rolldown/runtime.js
 var __defProp = Object.defineProperty;

package/dist/{shared-BwUAKszU.js → shared-O0YC-vIX.js}

@@ -1,6 +1,6 @@
-import { a as resolveZalouserAccountSync, i as resolveDefaultZalouserAccountId, r as listZalouserAccountIds, t as checkZcaAuthenticated } from "./accounts-iV_px99V.js";
-import { n as normalizeCompatibilityConfig, t as legacyConfigRules } from "./doctor-contract-DgqHp8E2.js";
-import { n as isZalouserMutableGroupEntry } from "./security-audit-BZLhil-V.js";
+import { a as resolveZalouserAccountSync, i as resolveDefaultZalouserAccountId, r as listZalouserAccountIds, t as checkZcaAuthenticated } from "./accounts-CTecjIqR.js";
+import { n as normalizeCompatibilityConfig, t as legacyConfigRules } from "./doctor-contract-BIY2IHB_.js";
+import { n as isZalouserMutableGroupEntry } from "./security-audit-DUQOetcM.js";
 import { formatAllowFromLowercase } from "openclaw/plugin-sdk/allow-from";
 import { AllowFromListSchema, DmPolicySchema, GroupPolicySchema, MarkdownConfigSchema, ToolPolicySchema, buildCatchallMultiAccountChannelSchema, buildChannelConfigSchema } from "openclaw/plugin-sdk/channel-config-schema";
 import { DEFAULT_ACCOUNT_ID, normalizeAccountId } from "openclaw/plugin-sdk/core";
@@ -8,9 +8,48 @@ import { isDangerousNameMatchingEnabled as isDangerousNameMatchingEnabled$1 } fr
 import { chunkTextForOutbound } from "openclaw/plugin-sdk/text-chunking";
 import { isNumericTargetId, sendPayloadWithChunkedTextAndMedia } from "openclaw/plugin-sdk/reply-payload";
 import { adaptScopedAccountAccessor, createScopedChannelConfigAdapter } from "openclaw/plugin-sdk/channel-config-helpers";
+import fsp from "node:fs/promises";
+import path from "node:path";
+import { resolvePreferredOpenClawTmpDir } from "openclaw/plugin-sdk/temp-path";
+import { createDelegatedSetupWizardProxy, createPatchedAccountSetupAdapter } from "openclaw/plugin-sdk/setup-runtime";
 import { describeAccountSnapshot } from "openclaw/plugin-sdk/account-helpers";
 import { z } from "zod";
 import { createDangerousNameMatchingMutableAllowlistWarningCollector } from "openclaw/plugin-sdk/channel-policy";
+//#region extensions/zalouser/src/qr-temp-file.ts
+async function writeQrDataUrlToTempFile(qrDataUrl, profile) {
+	const base64 = (qrDataUrl.trim().match(/^data:image\/png;base64,(.+)$/i)?.[1] ?? "").trim();
+	if (!base64) return null;
+	const safeProfile = profile.replace(/[^a-zA-Z0-9_-]+/g, "-") || "default";
+	const filePath = path.join(resolvePreferredOpenClawTmpDir(), `openclaw-zalouser-qr-${safeProfile}.png`);
+	await fsp.writeFile(filePath, Buffer.from(base64, "base64"));
+	return filePath;
+}
+//#endregion
+//#region extensions/zalouser/src/setup-core.ts
+const channel = "zalouser";
+const zalouserSetupAdapter = createPatchedAccountSetupAdapter({
+	channelKey: channel,
+	validateInput: () => null,
+	buildPatch: () => ({})
+});
+function createZalouserSetupWizardProxy(loadWizard) {
+	return createDelegatedSetupWizardProxy({
+		channel,
+		loadWizard,
+		status: {
+			configuredLabel: "logged in",
+			unconfiguredLabel: "needs QR login",
+			configuredHint: "recommended · logged in",
+			unconfiguredHint: "recommended · QR login",
+			configuredScore: 1,
+			unconfiguredScore: 15
+		},
+		credentials: [],
+		delegatePrepare: true,
+		delegateFinalize: true
+	});
+}
+//#endregion
 //#region extensions/zalouser/src/config-schema.ts
 const groupConfigSchema = z.object({
 	enabled: z.boolean().optional(),
@@ -117,4 +156,4 @@ function createZalouserPluginBase(params) {
 	};
 }
 //#endregion
-export { isNumericTargetId as a, isDangerousNameMatchingEnabled$1 as i, DEFAULT_ACCOUNT_ID as n, normalizeAccountId as o, chunkTextForOutbound as r, sendPayloadWithChunkedTextAndMedia as s, createZalouserPluginBase as t };
+export { DEFAULT_ACCOUNT_ID as a, isNumericTargetId as c, writeQrDataUrlToTempFile as i, normalizeAccountId as l, createZalouserSetupWizardProxy as n, chunkTextForOutbound as o, zalouserSetupAdapter as r, isDangerousNameMatchingEnabled$1 as s, createZalouserPluginBase as t, sendPayloadWithChunkedTextAndMedia as u };

package/dist/test-api.js

@@ -1,5 +1,5 @@
-import { a as resolveZalouserAccountSync, i as resolveDefaultZalouserAccountId, n as getZcaUserInfo, r as listZalouserAccountIds, t as checkZcaAuthenticated } from "./accounts-iV_px99V.js";
-import { r as parseZalouserOutboundTarget } from "./session-route-81QGCeV2.js";
-import { a as listZaloGroupMembers, b as waitForZaloQrLogin, c as logoutZaloProfile, d as resolveZaloGroupsByEntries, i as listZaloFriendsMatching, l as resolveZaloAllowFromEntries, n as getZaloUserInfo, s as listZaloGroupsMatching, t as checkZaloAuthenticated, y as startZaloQrLogin } from "./zalo-js-KeIEcTqZ.js";
-import { i as sendMessageZalouser } from "./send-CH7XlJaj.js";
+import { a as resolveZalouserAccountSync, i as resolveDefaultZalouserAccountId, n as getZcaUserInfo, r as listZalouserAccountIds, t as checkZcaAuthenticated } from "./accounts-CTecjIqR.js";
+import { r as parseZalouserOutboundTarget } from "./session-route-DWMin5CB.js";
+import { a as listZaloGroupMembers, b as waitForZaloQrLogin, c as logoutZaloProfile, d as resolveZaloGroupsByEntries, i as listZaloFriendsMatching, l as resolveZaloAllowFromEntries, n as getZaloUserInfo, s as listZaloGroupsMatching, t as checkZaloAuthenticated, y as startZaloQrLogin } from "./zalo-js-QSY2SsUF.js";
+import { i as sendMessageZalouser } from "./send-SPumHuhS.js";
 export { checkZaloAuthenticated, checkZcaAuthenticated, getZaloUserInfo, getZcaUserInfo, listZaloFriendsMatching, listZaloGroupMembers, listZaloGroupsMatching, listZalouserAccountIds, logoutZaloProfile, parseZalouserOutboundTarget, resolveDefaultZalouserAccountId, resolveZaloAllowFromEntries, resolveZaloGroupsByEntries, resolveZalouserAccountSync, sendMessageZalouser, startZaloQrLogin, waitForZaloQrLogin };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openclaw/zalouser",
-  "version": "2026.5.12",
+  "version": "2026.5.14-beta.2",
   "description": "OpenClaw Zalo Personal Account plugin via native zca-js integration",
   "repository": {
     "type": "git",
@@ -17,7 +17,7 @@
     "openclaw": "workspace:*"
   },
   "peerDependencies": {
-    "openclaw": ">=2026.5.12"
+    "openclaw": ">=2026.5.14-beta.2"
   },
   "peerDependenciesMeta": {
     "openclaw": {
@@ -54,10 +54,10 @@
       "minHostVersion": ">=2026.4.10"
     },
     "compat": {
-      "pluginApi": ">=2026.5.12"
+      "pluginApi": ">=2026.5.14-beta.2"
     },
     "build": {
-      "openclawVersion": "2026.5.12"
+      "openclawVersion": "2026.5.14-beta.2"
     },
     "release": {
       "publishToClawHub": true,

package/dist/runtime-nbWip_ng.js

@@ -1,106 +0,0 @@
-import { normalizeOptionalLowercaseString } from "openclaw/plugin-sdk/string-coerce-runtime";
-import { createPluginRuntimeStore } from "openclaw/plugin-sdk/runtime-store";
-//#region extensions/zalouser/src/group-policy.ts
-function toGroupCandidate(value) {
-	return value?.trim() ?? "";
-}
-function normalizeZalouserGroupSlug(raw) {
-	const trimmed = normalizeOptionalLowercaseString(raw) ?? "";
-	if (!trimmed) return "";
-	return trimmed.replace(/^#/, "").replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "");
-}
-function buildZalouserGroupCandidates(params) {
-	const seen = /* @__PURE__ */ new Set();
-	const out = [];
-	const push = (value) => {
-		const normalized = toGroupCandidate(value);
-		if (!normalized || seen.has(normalized)) return;
-		seen.add(normalized);
-		out.push(normalized);
-	};
-	const groupId = toGroupCandidate(params.groupId);
-	const groupChannel = toGroupCandidate(params.groupChannel);
-	const groupName = toGroupCandidate(params.groupName);
-	push(groupId);
-	if (params.includeGroupIdAlias === true && groupId) push(`group:${groupId}`);
-	if (params.allowNameMatching !== false) {
-		push(groupChannel);
-		push(groupName);
-		if (groupName) push(normalizeZalouserGroupSlug(groupName));
-	}
-	if (params.includeWildcard !== false) push("*");
-	return out;
-}
-function findZalouserGroupEntry(groups, candidates) {
-	if (!groups) return;
-	for (const candidate of candidates) {
-		const entry = groups[candidate];
-		if (entry) return entry;
-	}
-}
-function isZalouserGroupEntryAllowed(entry) {
-	if (!entry) return false;
-	return entry.allow !== false && entry.enabled !== false;
-}
-//#endregion
-//#region extensions/zalouser/src/message-sid.ts
-function toMessageSidPart(value) {
-	if (typeof value === "string") return value.trim();
-	if (typeof value === "number" && Number.isFinite(value)) return String(Math.trunc(value));
-	return "";
-}
-function parseZalouserMessageSidFull(value) {
-	const raw = toMessageSidPart(value);
-	if (!raw) return null;
-	const [msgIdPart, cliMsgIdPart] = raw.split(":").map((entry) => entry.trim());
-	if (!msgIdPart || !cliMsgIdPart) return null;
-	return {
-		msgId: msgIdPart,
-		cliMsgId: cliMsgIdPart
-	};
-}
-function resolveZalouserReactionMessageIds(params) {
-	const explicitMessageId = toMessageSidPart(params.messageId);
-	const explicitCliMsgId = toMessageSidPart(params.cliMsgId);
-	if (explicitMessageId && explicitCliMsgId) return {
-		msgId: explicitMessageId,
-		cliMsgId: explicitCliMsgId
-	};
-	const parsedFromCurrent = parseZalouserMessageSidFull(params.currentMessageId);
-	if (parsedFromCurrent) return parsedFromCurrent;
-	const currentRaw = toMessageSidPart(params.currentMessageId);
-	if (!currentRaw) return null;
-	if (explicitMessageId && !explicitCliMsgId) return {
-		msgId: explicitMessageId,
-		cliMsgId: currentRaw
-	};
-	if (!explicitMessageId && explicitCliMsgId) return {
-		msgId: currentRaw,
-		cliMsgId: explicitCliMsgId
-	};
-	return {
-		msgId: currentRaw,
-		cliMsgId: currentRaw
-	};
-}
-function formatZalouserMessageSidFull(params) {
-	const msgId = toMessageSidPart(params.msgId);
-	const cliMsgId = toMessageSidPart(params.cliMsgId);
-	if (!msgId && !cliMsgId) return;
-	if (msgId && cliMsgId) return `${msgId}:${cliMsgId}`;
-	return msgId || cliMsgId || void 0;
-}
-function resolveZalouserMessageSid(params) {
-	const msgId = toMessageSidPart(params.msgId);
-	const cliMsgId = toMessageSidPart(params.cliMsgId);
-	if (msgId || cliMsgId) return msgId || cliMsgId;
-	return toMessageSidPart(params.fallback) || void 0;
-}
-//#endregion
-//#region extensions/zalouser/src/runtime.ts
-const { setRuntime: setZalouserRuntime, getRuntime: getZalouserRuntime } = createPluginRuntimeStore({
-	pluginId: "zalouser",
-	errorMessage: "Zalouser runtime not initialized"
-});
-//#endregion
-export { resolveZalouserReactionMessageIds as a, isZalouserGroupEntryAllowed as c, resolveZalouserMessageSid as i, setZalouserRuntime as n, buildZalouserGroupCandidates as o, formatZalouserMessageSidFull as r, findZalouserGroupEntry as s, getZalouserRuntime as t };

package/dist/setup-core-CqipqY98.js

@@ -1,40 +0,0 @@
-import fsp from "node:fs/promises";
-import path from "node:path";
-import { resolvePreferredOpenClawTmpDir } from "openclaw/plugin-sdk/temp-path";
-import { createDelegatedSetupWizardProxy, createPatchedAccountSetupAdapter } from "openclaw/plugin-sdk/setup-runtime";
-//#region extensions/zalouser/src/qr-temp-file.ts
-async function writeQrDataUrlToTempFile(qrDataUrl, profile) {
-	const base64 = (qrDataUrl.trim().match(/^data:image\/png;base64,(.+)$/i)?.[1] ?? "").trim();
-	if (!base64) return null;
-	const safeProfile = profile.replace(/[^a-zA-Z0-9_-]+/g, "-") || "default";
-	const filePath = path.join(resolvePreferredOpenClawTmpDir(), `openclaw-zalouser-qr-${safeProfile}.png`);
-	await fsp.writeFile(filePath, Buffer.from(base64, "base64"));
-	return filePath;
-}
-//#endregion
-//#region extensions/zalouser/src/setup-core.ts
-const channel = "zalouser";
-const zalouserSetupAdapter = createPatchedAccountSetupAdapter({
-	channelKey: channel,
-	validateInput: () => null,
-	buildPatch: () => ({})
-});
-function createZalouserSetupWizardProxy(loadWizard) {
-	return createDelegatedSetupWizardProxy({
-		channel,
-		loadWizard,
-		status: {
-			configuredLabel: "logged in",
-			unconfiguredLabel: "needs QR login",
-			configuredHint: "recommended · logged in",
-			unconfiguredHint: "recommended · QR login",
-			configuredScore: 1,
-			unconfiguredScore: 15
-		},
-		credentials: [],
-		delegatePrepare: true,
-		delegateFinalize: true
-	});
-}
-//#endregion
-export { zalouserSetupAdapter as n, writeQrDataUrlToTempFile as r, createZalouserSetupWizardProxy as t };