@openclaw/zalouser 2026.5.3 → 2026.5.4-beta.2

package/dist/{api-BRwdUWuS.js → api-C3SYq_R3.js}

@@ -1,7 +1,7 @@
 import "./setup-surface-NCOuKu-l.js";
 import "./setup-core-CqipqY98.js";
 import { r as parseZalouserOutboundTarget } from "./session-route-C0-Xr8bt.js";
-import "./channel-ou_w_2j-.js";
+import "./channel-DLNmGWb8.js";
 import "./security-audit-BZLhil-V.js";
 import { i as listZaloFriendsMatching, n as getZaloUserInfo, s as listZaloGroupsMatching, t as checkZaloAuthenticated } from "./zalo-js-CHCUlY3c.js";
 import "./channel.setup-CiDeBFrn.js";

package/dist/api.js

@@ -1,7 +1,7 @@
 import { n as zalouserSetupWizard } from "./setup-surface-NCOuKu-l.js";
 import { n as zalouserSetupAdapter, t as createZalouserSetupWizardProxy } from "./setup-core-CqipqY98.js";
-import { t as zalouserPlugin } from "./channel-ou_w_2j-.js";
+import { t as zalouserPlugin } from "./channel-DLNmGWb8.js";
 import { n as isZalouserMutableGroupEntry, t as collectZalouserSecurityAuditFindings } from "./security-audit-BZLhil-V.js";
 import { t as zalouserSetupPlugin } from "./channel.setup-CiDeBFrn.js";
-import { t as createZalouserTool } from "./api-BRwdUWuS.js";
+import { t as createZalouserTool } from "./api-C3SYq_R3.js";
 export { collectZalouserSecurityAuditFindings, createZalouserSetupWizardProxy, createZalouserTool, isZalouserMutableGroupEntry, zalouserPlugin, zalouserSetupAdapter, zalouserSetupPlugin, zalouserSetupWizard };

package/dist/{channel-ou_w_2j-.js → channel-DLNmGWb8.js}

@@ -448,7 +448,7 @@ const zalouserPlugin = createChatChannelPlugin({
 					setStatus: ctx.setStatus
 				});
 				ctx.log?.info(`[${account.accountId}] starting zalouser provider${userLabel}`);
-				const { monitorZalouserProvider } = await import("./monitor-Cg7K_s_s.js");
+				const { monitorZalouserProvider } = await import("./monitor-dpWp8FkN.js");
 				return monitorZalouserProvider({
 					account,
 					config: ctx.cfg,

package/dist/channel-plugin-api.js

@@ -1,2 +1,2 @@
-import { t as zalouserPlugin } from "./channel-ou_w_2j-.js";
+import { t as zalouserPlugin } from "./channel-DLNmGWb8.js";
 export { zalouserPlugin };

package/dist/{monitor-Cg7K_s_s.js → monitor-dpWp8FkN.js}

@@ -566,7 +566,8 @@ async function monitorZalouserProvider(options) {
 		const profile = account.profile;
 		const allowFromEntries = (account.config.allowFrom ?? []).map((entry) => normalizeZalouserEntry(String(entry))).filter((entry) => entry && entry !== "*");
 		const groupAllowFromEntries = (account.config.groupAllowFrom ?? []).map((entry) => normalizeZalouserEntry(String(entry))).filter((entry) => entry && entry !== "*");
-		if (allowFromEntries.length > 0 || groupAllowFromEntries.length > 0) {
+		const allowNameMatching = isDangerousNameMatchingEnabled(account.config);
+		if (allowNameMatching && (allowFromEntries.length > 0 || groupAllowFromEntries.length > 0)) {
 			const byName = buildNameIndex(await listZaloFriends(profile), (friend) => friend.displayName);
 			if (allowFromEntries.length > 0) {
 				const { additions, mapping, unresolved } = resolveUserAllowlistEntries(allowFromEntries, byName);
@@ -601,7 +602,7 @@ async function monitorZalouserProvider(options) {
 		}
 		const groupsConfig = account.config.groups ?? {};
 		const groupKeys = Object.keys(groupsConfig).filter((key) => key !== "*");
-		if (groupKeys.length > 0) {
+		if (allowNameMatching && groupKeys.length > 0) {
 			const byName = buildNameIndex(await listZaloGroups(profile), (group) => group.name);
 			const mapping = [];
 			const unresolved = [];

package/dist/runtime-api.js

@@ -1,10 +1,10 @@
 import { n as zalouserSetupWizard } from "./setup-surface-NCOuKu-l.js";
 import { n as setZalouserRuntime } from "./runtime-QNU7vLgI.js";
 import { n as zalouserSetupAdapter, t as createZalouserSetupWizardProxy } from "./setup-core-CqipqY98.js";
-import { t as zalouserPlugin } from "./channel-ou_w_2j-.js";
+import { t as zalouserPlugin } from "./channel-DLNmGWb8.js";
 import { n as isZalouserMutableGroupEntry, t as collectZalouserSecurityAuditFindings } from "./security-audit-BZLhil-V.js";
 import { t as zalouserSetupPlugin } from "./channel.setup-CiDeBFrn.js";
-import { t as createZalouserTool } from "./api-BRwdUWuS.js";
+import { t as createZalouserTool } from "./api-C3SYq_R3.js";
 import { buildBaseAccountStatusSnapshot } from "openclaw/plugin-sdk/status-helpers";
 import { formatAllowFromLowercase, mergeAllowlist, summarizeMapping } from "openclaw/plugin-sdk/allow-from";
 import { DEFAULT_ACCOUNT_ID, buildChannelConfigSchema, normalizeAccountId } from "openclaw/plugin-sdk/core";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openclaw/zalouser",
-  "version": "2026.5.3",
+  "version": "2026.5.4-beta.2",
   "description": "OpenClaw Zalo Personal Account plugin via native zca-js integration",
   "repository": {
     "type": "git",
@@ -16,7 +16,7 @@
     "openclaw": "workspace:*"
   },
   "peerDependencies": {
-    "openclaw": ">=2026.5.3"
+    "openclaw": ">=2026.5.4-beta.2"
   },
   "peerDependenciesMeta": {
     "openclaw": {
@@ -53,10 +53,10 @@
       "minHostVersion": ">=2026.4.10"
     },
     "compat": {
-      "pluginApi": ">=2026.5.3"
+      "pluginApi": ">=2026.5.4-beta.2"
     },
     "build": {
-      "openclawVersion": "2026.5.3"
+      "openclawVersion": "2026.5.4-beta.2"
     },
     "release": {
       "publishToClawHub": true,