abs-zalo-bot 0.8.2 → 0.10.0

package/README.md

@@ -184,7 +184,7 @@ For profile-aware quality, select `gateway_skill = "your-owner-authored-hermes-s
 - `__underline__`: Zalo Underline (`u`).
 - `~~strikethrough~~`: Zalo StrikeThrough (`s`).
 - Color tags: `[RED]...[/RED]` (Ruby Red), `[GREEN]...[/GREEN]` (Emerald Green), `[ORANGE]...[/ORANGE]` (Amber Orange), `[YELLOW]...[/YELLOW]` (Royal Gold) — supports Vietnamese equivalents `[ĐỎ]`, `[XANH]`, `[CAM]`, `[VÀNG]`.
-- **Safe Bubble Chunker (`splitIntoSafeZaloChunks`)**: Automatically breaks long outputs into sequential bubbles <= 650 chars, permanently eliminating Zalo API Error 118 ("Content too long").
+- **Safe Styled Chunker (`formatAndChunkZaloMarkdown`)**: Splits long output without dropping characters or breaking UTF-16 surrogate pairs. Every bubble is capped at 2,000 UTF-16 code units, 40 styles, and 3,000 encoded bytes; styles are clipped and rebased per bubble.
 
 ---
 
@@ -227,22 +227,22 @@ cat hermes-plugin/starter-kit/SOUL.md >> ~/.hermes/SOUL.md
 
 ---
 
-## 🆕 What's New in v0.7.1
+## 🆕 What's New in v0.9.2
 
-> **Robustness release** — self-healing listener, safe styled messages, fixed group member API, expanded payload safety.
+> **Rich-message reliability release** — complete long replies, quoted context, and broader media normalization.
 
 | Feature | Detail |
 | :--- | :--- |
-| **Listener Auto-Restart** | Catches `closed` event from `zca-js` when the listener shuts down permanently (bot goes "deaf" after network drop). Schedules automatic reconnect with exponential back-off: `5s → 15s → 30s → 60s → 120s → 300s`. No operator restart needed. |
-| **Plaintext Fallback for Styled Messages** | When Zalo server rejects a styled (formatted) message with a numeric error code, the bot automatically strips formatting and re-sends as plain text — so the content is never silently lost. Network errors (no error code) are NOT retried to prevent duplicate messages. |
-| **Payload Byte Budget** | `MAX_ZALO_PAYLOAD_BYTES = 3000` + `measurePayloadBytes()` in `zalo_styler.js` cap total UTF-8 bytes of text + style JSON, matching real-world Zalo rejection threshold of ~3,448 bytes. |
-| **Fix `getGroupMembers` API Order** | New `AccountRuntime.getGroupMembers(groupId)` calls `getGroupInfo` first to obtain member UID list, then passes UIDs to `getGroupMembersInfo` — eliminating "Lỗi không xác định" that occurred when a group ID was passed where member UIDs were expected. |
+| **Lossless Styled Chunking** | Long Markdown replies are rendered once, split on readable boundaries, then sent sequentially. Each bubble stays within 2,000 UTF-16 code units, 40 styles, and 3,000 encoded bytes. Styles are clipped and rebased instead of discarded. |
+| **Safe Delivery Semantics** | A quote appears only on the first bubble; an attachment only on the last. Plain-text retry occurs only after a numeric provider rejection. Ambiguous network failures are not retried, preventing likely duplicate sends. |
+| **Quoted Context** | Quoted text and media become normalized Hermes context. Provider URLs remain staging inputs and are excluded from model-facing raw metadata. |
+| **Media Normalization** | Additional Zalo media URL fields are classified and staged through the existing jail and SSRF protections. |
 
 ---
 
-## 🔄 Seamless Zero-Downtime Upgrade (For Existing Users)
+## 🔄 Upgrade (For Existing Users)
 
-If you already installed `abs-zalo-bot`, upgrading to **v0.7.1** takes 5 seconds with **ZERO data loss and NO QR re-scan**:
+If you already installed `abs-zalo-bot`, upgrade to **v0.9.2** after backing up your runtime data:
 
 - **If installed via NPM:**
   ```bash
@@ -258,7 +258,7 @@ If you already installed `abs-zalo-bot`, upgrading to **v0.7.1** takes 5 seconds
   docker compose pull && docker compose up -d
   ```
 
-> *Your active login sessions (`data/sessions/`), databases (`data/bridge.sqlite3`), and `.env` settings are 100% preserved. The bot seamlessly reconnects without requesting a new QR scan.*
+> The upgrade does not intentionally modify `data/sessions/`, `data/bridge.sqlite3`, or `.env`. Back them up before upgrading; reconnection behavior still depends on the active Zalo session.
 
 ---
 

package/mcp/server.js

@@ -63,7 +63,7 @@ function verifyConfirmation(code, action, targetKey) {
 
 const BRIDGE_URL = (process.env.ZALO_BRIDGE_URL || "http://127.0.0.1:3871").replace(/\/$/, "");
 const TOKEN = process.env.DASHBOARD_TOKEN || process.env.ZALO_BRIDGE_TOKEN || "";
-const TOOL_PACK = normalizeToolPack(process.env.ABS_ZALO_TOOL_PACK || "reader");
+const TOOL_PACK = normalizeToolPack(process.env.ABS_ZALO_TOOL_PACK || "admin");
 
 function log(...args) {
   console.error("[abs-zalo-mcp]", ...args);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "abs-zalo-bot",
-  "version": "0.8.2",
+  "version": "0.10.0",
   "type": "module",
   "description": "ABS Zalo Agent Engine — Free, Transparent & Autonomous Zalo AI Agent Engine for Hermes, Claude Code & Codex. Dual Personal QR + Official OA, Group Administration, Lead Intel, Polls, Reactions & MCP Server.",
   "author": "teddiesloco",
@@ -15,15 +15,15 @@
     "claude-code",
     "codex",
     "mcp",
-    "model-context-protocol",
-    "zca-js",
-    "chatbot",
-    "lead-generation",
-    "vietnam",
+    "mcp-server",
+    "personal-zalo",
     "official-account",
-    "personal-qr",
+    "automation",
+    "lead-generation",
+    "customer-support",
+    "community-management",
     "autonomous-agent",
-    "open-source"
+    "abs-engine"
   ],
   "homepage": "https://github.com/teddiesloco/abs-zalo-bot#readme",
   "repository": {
@@ -33,60 +33,37 @@
   "bugs": {
     "url": "https://github.com/teddiesloco/abs-zalo-bot/issues"
   },
+  "bin": {
+    "zalo-personal-mcp": "mcp/server.js"
+  },
   "files": [
     "src/",
     "mcp/",
-    "scripts/",
-    "hermes-plugin/",
-    "config/bots.example.json",
-    "config.toml",
-    ".env.example",
-    "setup.bat",
-    "start.bat",
-    "setup.ps1",
-    "install.sh",
-    "setup.sh",
-    "Dockerfile",
-    "docker-compose.yml",
     "README.md",
-    "SECURITY.md",
-    "LICENSE"
+    "LICENSE",
+    "package.json"
   ],
-  "bin": {
-    "zalo-personal-mcp": "mcp/server.js"
-  },
   "scripts": {
-    "start": "node src/cli.js serve",
-    "dev": "node --watch src/cli.js serve",
-    "self-check": "node src/cli.js self-check",
-    "status": "node src/cli.js status",
-    "qr": "node src/cli.js qr",
-    "onboarding": "node src/cli.js onboarding",
-    "digest": "node src/cli.js digest",
-    "backfill": "node src/cli.js backfill",
-    "mcp": "node mcp/server.js",
-    "setup": "node scripts/setup.js setup",
-    "install:locked": "npm ci",
-    "doctor": "node scripts/setup.js doctor",
-    "dashboard-info": "node scripts/setup.js dashboard-info",
-    "smoke": "node scripts/battle-smoke.js",
-    "battle": "node scripts/battle-smoke.js",
-    "validate-config": "node scripts/public-gate.js validate-config",
-    "secret-scan": "node scripts/public-gate.js secret-scan",
-    "syntax-check": "node scripts/public-gate.js syntax-check",
-    "test": "node --test test/*.test.js",
-    "cold": "npm test && npm run validate-config && npm run secret-scan && npm run syntax-check && npm run self-check && npm run smoke"
-  },
-  "engines": {
-    "node": ">=22.5"
+    "start": "node src/server.js",
+    "test": "node --test",
+    "test:coverage": "node --test --experimental-test-coverage",
+    "lint": "node --check src/*.js test/*.js"
   },
   "dependencies": {
-    "@modelcontextprotocol/sdk": "1.30.0",
+    "@modelcontextprotocol/sdk": "^1.27.0",
+    "better-sqlite3": "^11.8.1",
     "express": "^4.21.2",
-    "zca-js": "2.1.2",
-    "zod": "3.25.76"
+    "qrcode-terminal": "^0.12.0",
+    "ws": "^8.18.0",
+    "zca-js": "^1.7.0"
+  },
+  "devDependencies": {
+    "@types/node": "^22.13.9"
+  },
+  "engines": {
+    "node": ">=20.0.0"
   },
-  "overrides": {
-    "@hono/node-server": "2.1.0"
+  "publishConfig": {
+    "access": "public"
   }
 }

package/src/config.js

@@ -124,6 +124,15 @@ export function loadConfig(configPath) {
     viewer: Array.isArray(data.roles?.viewer) ? data.roles.viewer.map(String) : [],
   };
 
+  const ownerOnlyGroups = new Set(
+    (Array.isArray(data.owner_only_groups)
+      ? data.owner_only_groups.map(String)
+      : String(process.env.ZALO_OWNER_ONLY_GROUPS || data.owner_only_groups || "").split(",")
+    )
+      .map((s) => s.trim())
+      .filter(Boolean)
+  );
+
   let agentProfiles;
   try {
     agentProfiles = normalizeAgentProfiles(data.agent_profiles, defaultAccountId);
@@ -171,6 +180,7 @@ export function loadConfig(configPath) {
     dashboard_port: Number(process.env.PORT || data.dashboard_port || 3871),
     sources: normalizedSources,
     destination,
+    owner_only_groups: ownerOnlyGroups,
     rate_limit: rateLimit,
     roles,
     hermes,

package/src/hermes_bridge.js

@@ -28,18 +28,26 @@ function allowedUsers() {
 
 function gatewaySettings() {
   const groupMode = String(process.env.HERMES_ZALO_GROUP_MODE || "mention").trim();
+  const allowAllUsers = process.env.HERMES_ZALO_ALLOW_ALL === "true" || process.env.HERMES_ZALO_ALLOW_ALL_USERS === "true";
+  const allowAllThreads = process.env.HERMES_ZALO_ALLOW_ALL === "true" || process.env.HERMES_ZALO_ALLOW_ALL_THREADS === "true";
+  const threads = allowedThreads();
+  const users = allowedUsers();
   return {
     enabled: process.env.HERMES_ZALO_GATEWAY_ENABLED === "true",
     autoReply: process.env.HERMES_ZALO_ALLOW_AUTOREPLY === "true",
     groupMode: ["off", "mention", "all"].includes(groupMode) ? groupMode : "mention",
-    threads: allowedThreads(),
-    users: allowedUsers(),
+    allowAllUsers,
+    allowAllThreads,
+    threads,
+    users,
   };
 }
 
 function canDeliverInbound(row, settings) {
-  if (!settings.enabled || !settings.threads.size || !settings.users.size) return false;
-  if (row.is_self || !settings.threads.has(String(row.source_id)) || !settings.users.has(String(row.sender_id))) return false;
+  if (!settings.enabled) return false;
+  if (!settings.allowAllThreads && (!settings.threads.size || !settings.threads.has(String(row.source_id)))) return false;
+  if (!settings.allowAllUsers && (!settings.users.size || !settings.users.has(String(row.sender_id)))) return false;
+  if (row.is_self) return false;
   if (row.source_type !== "group") return true;
   if (settings.groupMode === "all") return true;
   return settings.groupMode === "mention" && Boolean(row.is_mention);
@@ -111,8 +119,9 @@ export function createHermesBridge({ config, store, hub }) {
       const thread = String(threadId || "").trim();
       const body = String(text || "").trim();
       if (!thread || !body || body.length > 4000) throw new Error("invalid_message");
-      if (!gatewaySettings().enabled || !gatewaySettings().autoReply) throw new Error("gateway_autoreply_disabled");
-      if (!allowedThreads().has(thread)) throw new Error("thread_not_allowlisted");
+      const settings = gatewaySettings();
+      if (!settings.enabled || !settings.autoReply) throw new Error("gateway_autoreply_disabled");
+      if (!settings.allowAllThreads && !allowedThreads().has(thread)) throw new Error("thread_not_allowlisted");
       const runtime = hub.getRuntime(accountId());
       const source = store.listSources(accountId()).find((item) => String(item.source_id) === thread);
       const resolvedThreadType = Number(threadType) === 0 ? 0 : source?.source_type === "dm" ? 0 : 1;
@@ -120,6 +129,7 @@ export function createHermesBridge({ config, store, hub }) {
         thread_id: thread,
         thread_type: resolvedThreadType,
         text: body,
+        parse_markdown: true,
         quote: replyTo ? { msgId: String(replyTo) } : undefined,
       });
       store.audit({ accountId: accountId(), actorId: "hermes-zalo-plugin", action: "hermes_bridge_send", detail: `thread=${sha256(thread).slice(0, 12)}` });
@@ -127,8 +137,9 @@ export function createHermesBridge({ config, store, hub }) {
     },
     async typing({ threadId, threadType = null } = {}) {
       const thread = String(threadId || "").trim();
-      if (!gatewaySettings().enabled || !gatewaySettings().autoReply) throw new Error("gateway_autoreply_disabled");
-      if (!thread || !allowedThreads().has(thread)) throw new Error("thread_not_allowlisted");
+      const settings = gatewaySettings();
+      if (!settings.enabled || !settings.autoReply) throw new Error("gateway_autoreply_disabled");
+      if (!thread || (!settings.allowAllThreads && !allowedThreads().has(thread))) throw new Error("thread_not_allowlisted");
       const source = store.listSources(accountId()).find((item) => String(item.source_id) === thread);
       const resolvedThreadType = Number(threadType) === 0 ? 0 : source?.source_type === "dm" ? 0 : 1;
       await hub.getRuntime(accountId()).performPersonalAction("typing", { thread_id: thread, thread_type: resolvedThreadType });

package/src/hermes_media.js

@@ -3,6 +3,8 @@
 import fs from "node:fs";
 import path from "node:path";
 import crypto from "node:crypto";
+import os from "node:os";
+import { spawnSync } from "node:child_process";
 
 const MAX_IMAGE_OR_FILE = 25 * 1024 * 1024;
 const MAX_AUDIO_OR_VIDEO = 100 * 1024 * 1024;
@@ -27,13 +29,15 @@ export function extractAttachmentCandidates(content) {
   const visit = (value, depth = 0) => {
     if (!value || depth > 5 || typeof value !== "object") return;
     if (Array.isArray(value)) return value.forEach((item) => visit(item, depth + 1));
-    const url = [value.href, value.url, value.fileUrl, value.downloadUrl, value.voiceUrl, value.videoUrl]
-      .find((item) => typeof item === "string" && /^https?:\/\//i.test(item));
+    const url = [
+      value.href, value.url, value.fileUrl, value.downloadUrl, value.voiceUrl, value.videoUrl,
+      value.oriUrl, value.hdUrl, value.normalUrl, value.thumb, value.thumbUrl, value.previewThumb, value.rawUrl,
+    ].find((item) => typeof item === "string" && /^https?:\/\//i.test(item));
     if (url && !seen.has(url)) {
       seen.add(url);
       const name = safeName(value.fileName || value.name || value.title || path.basename(new URL(url).pathname), "attachment");
-      const raw = `${value.type || ""} ${value.action || ""} ${name}`.toLowerCase();
-      const kind = /video/.test(raw) ? "video" : /voice|audio/.test(raw) ? "audio" : /photo|image|thumb/.test(raw) ? "image" : "file";
+      const raw = `${value.type || ""} ${value.action || ""} ${name} ${new URL(url).hostname}`.toLowerCase();
+      const kind = /video|\.(?:mp4|mov|webm)$/u.test(raw) ? "video" : /voice|audio|\.(?:mp3|m4a|wav|aac)$/u.test(raw) ? "audio" : /photo|image|thumb|\.(?:jpe?g|png|webp|gif)$/u.test(raw) ? "image" : "file";
       results.push({ url, name, kind });
     }
     for (const child of Object.values(value)) visit(child, depth + 1);
@@ -105,3 +109,102 @@ export function resolveStagedMedia(dataDir, eventId, attachmentId, metadata) {
   if (!full.startsWith(`${root}${path.sep}`) || !fs.existsSync(full)) return null;
   return { ...ref, full };
 }
+
+/**
+ * Đóng gói âm thanh thành M4A (AAC mono 44.1 kHz, 64k) với cờ +faststart
+ * để iPhone (AVPlayer) và Zalo PC (Chromium) phát mượt mà.
+ */
+export function transcodeToM4a(audioPath) {
+  if (!audioPath || !fs.existsSync(audioPath)) return null;
+  const ffmpeg = "ffmpeg";
+  const outputPath = path.join(os.tmpdir(), `zalo_voice_${crypto.randomBytes(6).toString("hex")}.m4a`);
+  try {
+    const res = spawnSync(
+      ffmpeg,
+      [
+        "-v", "error", "-y", "-i", audioPath,
+        "-vn", "-ac", "1", "-ar", "44100", "-c:a", "aac", "-b:a", "64k",
+        "-movflags", "+faststart",
+        outputPath,
+      ],
+      { timeout: 60000 }
+    );
+    if (res.status === 0 && fs.existsSync(outputPath) && fs.statSync(outputPath).size > 0) {
+      return outputPath;
+    }
+  } catch {
+    /* ffmpeg failed or not found */
+  }
+  try {
+    if (fs.existsSync(outputPath)) fs.unlinkSync(outputPath);
+  } catch {
+    /* ignore */
+  }
+  return null;
+}
+
+/**
+ * Nối đuôi tệp (.m4a) vào link CDN Zalo nếu chưa có đuôi âm thanh.
+ * Zalo CDN bỏ qua đuôi này và trả đúng tệp, giúp iOS/PC detect MIME chuẩn.
+ */
+export function withAudioExtension(url, extension = ".m4a") {
+  if (!url || typeof url !== "string") return url;
+  try {
+    const parsed = new URL(url);
+    const pathname = parsed.pathname || "";
+    if (/\.(m4a|aac|mp3|wav|ogg)$/i.test(pathname)) {
+      return url;
+    }
+    const ext = extension.startsWith(".") ? extension : `.${extension}`;
+    parsed.pathname = `${pathname}${ext}`;
+    return parsed.toString();
+  } catch {
+    return url;
+  }
+}
+
+/**
+ * Guard chống gửi lặp tin thoại vào cùng một chat trong cửa sổ thời gian (mặc định 10 phút).
+ */
+export function createVoiceDedupGuard({ windowMs = 10 * 60 * 1000, now = Date.now } = {}) {
+  const sentVoices = new Map();
+  return {
+    isDuplicate(chatId, filePath) {
+      if (!filePath || !fs.existsSync(filePath)) return false;
+      const currentTime = now();
+      for (const [k, v] of sentVoices.entries()) {
+        if (currentTime - v.at > windowMs) sentVoices.delete(k);
+      }
+      try {
+        const stat = fs.statSync(filePath);
+        const key = `${chatId}:${path.resolve(filePath)}:${stat.size}:${stat.mtimeMs}`;
+        return sentVoices.has(key);
+      } catch {
+        return false;
+      }
+    },
+    record(chatId, filePath, result = { ok: true }) {
+      if (!filePath || !fs.existsSync(filePath)) return;
+      try {
+        const stat = fs.statSync(filePath);
+        const key = `${chatId}:${path.resolve(filePath)}:${stat.size}:${stat.mtimeMs}`;
+        sentVoices.set(key, { at: now(), result });
+      } catch {
+        /* ignore */
+      }
+    },
+    get(chatId, filePath) {
+      try {
+        const stat = fs.statSync(filePath);
+        const key = `${chatId}:${path.resolve(filePath)}:${stat.size}:${stat.mtimeMs}`;
+        return sentVoices.get(key)?.result || null;
+      } catch {
+        return null;
+      }
+    },
+    clear() {
+      sentVoices.clear();
+    },
+  };
+}
+

package/src/inbound_router.js

@@ -209,16 +209,19 @@ export async function handleBotBrainCommand({
     brainMeta = { used: false, reason: brain.reason || "brain_fail", manual_review: brain.manual_review };
   }
 
+  const targetId = event.source_id || dest.group_id;
+  const threadType = event.source_type === "dm" ? 0 : 1;
   const decision = policy.evaluateOutbound({
     accountId,
-    targetId: dest.group_id,
+    targetId,
     text: answer,
     kind: "ask_reply",
+    allowSource: true,
   });
   if (!decision.allow) {
     store.logOutbound({
       accountId,
-      targetId: dest.group_id,
+      targetId,
       kind: "ask_reply",
       textSha: sha256(answer),
       ok: false,
@@ -240,7 +243,7 @@ export async function handleBotBrainCommand({
   if (process.env.ALLOW_FAKE_SEND === "true" && !runtime.api) {
     store.logOutbound({
       accountId,
-      targetId: dest.group_id,
+      targetId,
       kind: "ask_reply",
       textSha: decision.textSha || sha256(answer),
       ok: true,
@@ -256,10 +259,14 @@ export async function handleBotBrainCommand({
   }
 
   try {
-    await runtime.sendText(dest.group_id, answer, 1);
+    await runtime.sendText(targetId, answer, threadType, {
+      quote: event.quote?.id ? { msgId: event.quote.id, ownerId: event.quote.authorId } : undefined,
+      styled: true,
+      allow_source: true,
+    });
     store.logOutbound({
       accountId,
-      targetId: dest.group_id,
+      targetId,
       kind: "ask_reply",
       textSha: decision.textSha || sha256(answer),
       ok: true,
@@ -267,7 +274,7 @@ export async function handleBotBrainCommand({
     });
     store.putReport({
       account_id: accountId,
-      destination_source_id: dest.group_id,
+      destination_source_id: targetId,
       report_type: "bot_cmd",
       period_start: since,
       period_end: utcNow(),

package/src/policy.js

@@ -118,11 +118,40 @@ export class PolicyGuard {
       return { allow: false, reason: "self_echo", policy: null, actions: [] };
     }
 
+    const isOwner = event.is_self ||
+      this.roleOf(event.account_id, event.sender_id) === "owner" ||
+      Boolean(this.config.owner_uid && String(event.sender_id) === String(this.config.owner_uid));
+
+    // Owner Fast-Path for group links and undo actions
+    const isLinkJoin = /(?:https?:\/\/)?zalo\.me\/g\/([a-zA-Z0-9_-]+)/i.test(text);
+    const isUndo = /^(?:thu\s*hồi|xóa\s*tin|thuhoi|undo|\/undo)(?:\s+|$)/i.test(text);
+
+    if (isOwner && !inDestination && event.source_type === "group") {
+      if (isLinkJoin) {
+        return { allow: true, reason: "owner_join_link", policy: null, actions: ["owner_action"] };
+      }
+      if (isUndo) {
+        return { allow: true, reason: "owner_undo", policy: null, actions: ["owner_action"] };
+      }
+    }
+
     // DM: store optional only if explicitly enabled; never reply / never brain.
     if (event.source_type === "dm") {
       if (!this.config.listen_dms) {
         return { allow: false, reason: "dm_disabled", policy: null, actions: [] };
       }
+      if (isOwner) {
+        if (isLinkJoin) {
+          return { allow: true, reason: "owner_join_link", policy: null, actions: ["owner_action"] };
+        }
+        if (isUndo) {
+          return { allow: true, reason: "owner_undo", policy: null, actions: ["owner_action"] };
+        }
+        if (isSlash) {
+          return { allow: true, reason: "owner_command", policy: null, actions: ["command"] };
+        }
+        return { allow: true, reason: "owner_dm_ask", policy: null, actions: ["destination_ask"] };
+      }
       return {
         allow: true,
         reason: "dm_store_only",
@@ -179,6 +208,34 @@ export class PolicyGuard {
       };
     }
 
+    // Owner-only groups: Bot stays completely silent unless the sender is the owner.
+    // Non-owner messages are silently stored for context/history without triggering replies.
+    if (
+      event.source_type === "group" &&
+      this.config.owner_only_groups?.has(event.source_id)
+    ) {
+      const isOwner = event.is_self || this.roleOf(event.account_id, event.sender_id) === "owner";
+      if (!isOwner) {
+        const ingestCount = this.store.countInboundRecent(event.account_id, 60);
+        if (ingestCount >= this.ingestPerHour) {
+          return { allow: false, reason: "ingest_rate", policy: null, actions: [] };
+        }
+        return {
+          allow: true,
+          reason: "owner_only_group_silent_store",
+          policy: {
+            account_id: event.account_id,
+            source_id: event.source_id,
+            source_type: "group",
+            source_name: event.source_name || "",
+            mode: "listen_only",
+            muted: true,
+          },
+          actions: ["store"],
+        };
+      }
+    }
+
     // Source groups: READ_ONLY — store only, never reply even if tagged/quoted.
     if (this.config.listen_all_groups && event.source_type === "group") {
       const ingestCount = this.store.countInboundRecent(event.account_id, 60);
@@ -241,7 +298,7 @@ export class PolicyGuard {
     return { allow: true, reason: "ok", minRole };
   }
 
-  evaluateOutbound({ accountId, targetId, text, kind = "digest", alertKey = null }) {
+  evaluateOutbound({ accountId, targetId, text, kind = "digest", alertKey = null, allowSource = false }) {
     // Master hard gate. Future RBAC must replace this only together with an
     // explicit owner approval, numeric-identity checks, scoped capabilities,
     // a quota budget, and its own regression suite.
@@ -261,21 +318,23 @@ export class PolicyGuard {
     if (!text || !String(text).trim()) return { allow: false, reason: "empty_text" };
 
     const dest = this.store.getDestination(accountId);
-    if (!dest.group_id) return { allow: false, reason: "destination_unset" };
+    if (!allowSource && !dest.group_id) return { allow: false, reason: "destination_unset" };
 
-    // HARD: only the configured destination. No source replies, no DM replies.
-    if (String(targetId) !== String(dest.group_id)) {
-      return { allow: false, reason: "target_not_destination" };
+    // Destination gate: enforce strictly if readOnlySource is active and source reply not allowed
+    if (this.readOnlySource && !allowSource) {
+      if (String(targetId) !== String(dest.group_id)) {
+        return { allow: false, reason: "target_not_destination" };
+      }
     }
-    if (String(dest.account_id) && String(dest.account_id) !== String(accountId)) {
+    if (dest.group_id && String(targetId) === String(dest.group_id) && String(dest.account_id) && String(dest.account_id) !== String(accountId)) {
       return { allow: false, reason: "destination_account_mismatch" };
     }
 
-    if (this.readOnlySource && (kind === "reply" || kind === "mention" || kind === "quote")) {
+    if (this.readOnlySource && !allowSource && (kind === "reply" || kind === "mention" || kind === "quote")) {
       return { allow: false, reason: "read_only_source_blocks_reply" };
     }
 
-    if (!["digest", "alert", "ask_reply", "command_reply", "report"].includes(String(kind))) {
+    if (!["digest", "alert", "ask_reply", "command_reply", "report", "runtime_send"].includes(String(kind))) {
       if (kind !== "digest") return { allow: false, reason: "kind_blocked" };
     }
 

package/src/quote_resolver.js

@@ -6,11 +6,46 @@
  * Nếu Agent chỉ đọc text hiện tại, nó sẽ hỏi ngược "Cái nào ạ?" — trải nghiệm tệ.
  *
  * Module này extract nội dung quoted và dán vào context prompt dưới dạng:
- *   [Trích dẫn] <nội dung tin gốc>
+ *   [Trích dẫn từ @Tên] <nội dung tin gốc>
+ * Hoặc [Trích dẫn] <nội dung tin gốc>
  */
 
 import { extractText } from "./schema.js";
 
+/**
+ * Trích xuất toàn bộ thông tin có cấu trúc của tin nhắn được quote.
+ * @param {object|undefined} rawQuote - data.quote từ raw Zalo message
+ * @returns {object|null}
+ */
+export function extractQuote(rawQuote) {
+  if (!rawQuote || typeof rawQuote !== "object") return null;
+  const quote = rawQuote;
+  let attachment = quote.attach;
+  if (typeof attachment === "string" && attachment.trim()) {
+    try {
+      attachment = JSON.parse(attachment);
+    } catch {
+      attachment = null;
+    }
+  }
+
+  const authorId = quote.ownerId ? String(quote.ownerId) : (quote.fromUid ? String(quote.fromUid) : null);
+  const authorName = quote.ownerName || quote.dName || quote.fromD || quote.senderName || "";
+  const text = resolveQuoteText(quote);
+  const id = quote.msgId ? String(quote.msgId) : (quote.globalMsgId ? String(quote.globalMsgId) : null);
+  const cliMsgId = quote.cliMsgId ? String(quote.cliMsgId) : null;
+  const msgType = quote.msgType || quote.cliMsgType || "";
+
+  return {
+    id,
+    cliMsgId,
+    authorId,
+    authorName,
+    text,
+    msgType,
+  };
+}
+
 /**
  * Giải mã payload quote từ Zalo message data.
  * @param {object|undefined} quote   - data.quote từ raw Zalo message
@@ -53,13 +88,17 @@ export function resolveQuoteText(quote) {
 }
 
 /**
- * Nếu event có quoted content, gắn thêm prefix [Trích dẫn] vào text để Agent hiểu ngữ cảnh.
+ * Nếu event có quoted content, gắn thêm prefix [Trích dẫn từ @Tên] hoặc [Trích dẫn] vào text để Agent hiểu ngữ cảnh.
  * @param {object} event - Normalized event từ schema.js
- * @param {object|undefined} rawQuote - data.quote từ raw Zalo message
+ * @param {object|undefined} rawQuote - data.quote từ raw Zalo message hoặc extracted quote object
  * @returns {string}     - text đã kèm ngữ cảnh trích dẫn
  */
 export function enrichTextWithQuote(event, rawQuote) {
-  const quoteText = resolveQuoteText(rawQuote);
-  if (!quoteText) return event.text;
-  return `[Trích dẫn] ${quoteText}\n${event.text}`;
+  const quote = typeof rawQuote === "object" && rawQuote !== null && "authorName" in rawQuote
+    ? rawQuote
+    : extractQuote(rawQuote);
+  if (!quote || !quote.text) return event?.text || "";
+
+  const header = quote.authorName ? `[Trích dẫn từ @${quote.authorName}]` : `[Trích dẫn]`;
+  return `${header} ${quote.text}\n${event?.text || ""}`;
 }