create-openclaw-bot 5.1.10 → 5.1.12

package/CHANGELOG.md

@@ -1,6 +1,26 @@
-# Changelog (English)
+# Changelog (English)
 
 
+
+## [5.1.12] — 2026-04-07
+
+### 🧠 Expanded Skills & Auto-Select Multi-Bot Relay Plugin
+
+- **3-Column Skill Grid**: Skill cards now display 3 per row instead of 4 — wider cards, better readability.
+- **7 New ClawHub Skills**: Added `Web Search`, `GitHub`, `Google Calendar`, `Google Drive`, `Google Sheets`, `Notion`, `Slack` — covering the most common productivity workflows available on the OpenClaw dashboard.
+- **Telegram Multi-Bot Relay Auto-Select**: When multiple Telegram bots are selected (botCount ≥ 2), the `telegram-multibot-relay` plugin is automatically checked and written to `openclaw.json → plugins.entries`. Switching back to 1 bot deselects it.
+- **Plugin Selections → openclaw.json**: All plugins selected by the user (Voice Call, Matrix, MS Teams, Nostr...) are now injected into `plugins.entries` so the OpenClaw Dashboard receives the correct `enabled` state. Unselected = disabled.
+- **Fix Step 3 "Next" disabled**: Removed mandatory `cfg-user-info` requirement (it's optional), fixed multi-bot validation to use `cfg-bot-tab-name`.
+- **Fix Step 4 multi-bot token validation**: Now validates `key-bot-token-0` instead of `key-bot-token` in Telegram multi-bot mode.
+- **Fix native multi-bot AGENTS.md missing security rules**: Security rules are now appended to each bot's AGENTS.md during native multi-bot deployment.
+
+## [5.1.11] — 2026-04-07
+
+### 🌟 Zalo Personal DM Policy
+
+- **Open Zalo Inboxes**: The default `dmPolicy` for Zalo Personal deployments has been changed from `pairing` to `open`. This allows any user on the Zalo network to interact with the AI assistant immediately without requiring explicit device pairing approvals natively.
+
+
 ## [5.1.10] — 2026-04-07
 
 ### 🌟 Native UI Auto-Approve Bypasser

package/CHANGELOG.vi.md

@@ -1,6 +1,25 @@
-# Changelog (Tiếng Việt)
+# Changelog (Tiếng Việt)
 
 
+
+## [5.1.12] — 2026-04-07
+
+### 🧠 Thêm Skills & Tự động chọn Plugin Relay
+
+- **Grid Skills 3 cột**: Layout mới 3 card/hàng thay vì 4, card rộng rãi hơn, dễ đọc hơn.
+- **7 Skills mới từ ClawHub**: Bổ sung đầy đủ `Web Search`, `GitHub`, `Google Calendar`, `Google Drive`, `Google Sheets`, `Notion`, `Slack` — phủ khắp các tác vụ năng suất phổ biến nhất trên OpenClaw dashboard.
+- **Plugin Telegram Multi-Bot Relay tự động**: Khi chọn nhiều bot Telegram (botCount ≥ 2), plugin `telegram-multibot-relay` được tự động tick chọn và ghi vào `openclaw.json → plugins.entries`. Khi quay về 1 bot, plugin bị bỏ chọn.
+- **Plugin selections → openclaw.json**: Tất cả plugin được user chọn (Voice Call, Matrix, MS Teams, Nostr...) đều được inject vào `plugins.entries` để Dashboard OpenClaw nhận trạng thái `enabled` đúng. Không chọn = không bật.
+- **Fix Step 3 "Tiếp theo" bị disabled**: Bỏ yêu cầu bắt buộc `cfg-user-info` (optional), sửa multi-bot check dùng `cfg-bot-tab-name`.
+- **Fix Step 4 multi-bot token**: Validate `key-bot-token-0` thay vì `key-bot-token` khi multi-bot Telegram.
+- **Fix AGENTS.md native multi-bot thiếu quy tắc bảo mật**: Inject `securityRules` vào cuối AGENTS.md của từng bot trong native multi-bot deployment.
+
+
+### 🌟 Đổi Chính Sách Bảo Mật Zalo Personal
+
+- **Thả Ga Inbox Zalo Cầm Tay**: Lược bỏ rào cản duyệt bảo mật của Zalo Personal. Thông số `dmPolicy` trên cài đặt Zalo cá nhân đã được chuyển mặc định từ `pairing` sang `open`. Bây giờ bất cứ ai trên mạng lưới Zalo nhắn tin vào tài khoản của Bot đều sẽ được AI tự động tiếp đón ngay lập tức thay vì bị chặn lại chờ bạn duyệt lệnh kết nối E2E!
+
+
 ## [5.1.10] — 2026-04-07
 
 ### 🌟 Tự động Auto-Approve Thiết Bị cho Native VPS

package/README.md

@@ -3,7 +3,7 @@
 # 🦞 OpenClaw Setup
 
 <p align="center">
-  <a href="https://github.com/tuanminhhole/openclaw-setup/releases"><img src="https://img.shields.io/badge/RELEASE-v5.1.10-0EA5E9?style=for-the-badge" alt="Version 5.1.10" /></a>
+  <a href="https://github.com/tuanminhhole/openclaw-setup/releases"><img src="https://img.shields.io/badge/RELEASE-v5.1.11-0EA5E9?style=for-the-badge" alt="Version 5.1.11" /></a>
   <a href="https://github.com/tuanminhhole/openclaw-setup?tab=MIT-1-ov-file"><img src="https://img.shields.io/badge/LICENSE-MIT-success?style=for-the-badge" alt="MIT License" /></a>
   <a href="https://www.npmjs.com/package/create-openclaw-bot"><img src="https://img.shields.io/npm/v/create-openclaw-bot?style=for-the-badge&label=CLI&color=2563EB&logo=npm&logoColor=white" alt="NPM Version" /></a>
   <a href="https://github.com/tuanminhhole/openclaw-setup/stargazers"><img src="https://img.shields.io/github/stars/tuanminhhole/openclaw-setup?style=for-the-badge&color=eab308&logo=github&logoColor=white" alt="GitHub Stars" /></a>
@@ -24,7 +24,7 @@ An interactive **CLI tool** and **Setup Wizard** to deploy your own free AI Bot
 
 ---
 
-## 🆕 What's new in v5.1.10
+## 🆕 What's new in v5.1.11
 
 - 💻 **OS-First Setup** — Step 1 is now choosing your OS (Windows, macOS, Ubuntu, VPS). All scripts, configs, and instructions are generated to match.
 - 🧠 **Gemma 4 — 4 sizes** — `gemma4:e2b` (~4 GB), `gemma4:e4b` (~8 GB), `gemma4:26b` (~18 GB), `gemma4:31b` (~24 GB). Auto-pulled on first launch.
@@ -112,7 +112,7 @@ Run in your terminal → follow the interactive prompts → startup script is ge
 2. Open this repo as your workspace
 3. Paste into chat:
    ```
-   Read SETUP.md and set up OpenClaw v5.1.10 for me.
+   Read SETUP.md and set up OpenClaw v5.1.11 for me.
    My bot token is X. Use 9Router (no API key).
    My project folder: <YOUR_PATH>
    ```

package/README.vi.md

@@ -3,7 +3,7 @@
 # 🦞 OpenClaw Setup
 
 <p align="center">
-  <a href="https://github.com/tuanminhhole/openclaw-setup/releases"><img src="https://img.shields.io/badge/RELEASE-v5.1.10-0EA5E9?style=for-the-badge" alt="Version 5.1.10" /></a>
+  <a href="https://github.com/tuanminhhole/openclaw-setup/releases"><img src="https://img.shields.io/badge/RELEASE-v5.1.11-0EA5E9?style=for-the-badge" alt="Version 5.1.11" /></a>
   <a href="https://github.com/tuanminhhole/openclaw-setup?tab=MIT-1-ov-file"><img src="https://img.shields.io/badge/LICENSE-MIT-success?style=for-the-badge" alt="MIT License" /></a>
   <a href="https://www.npmjs.com/package/create-openclaw-bot"><img src="https://img.shields.io/npm/v/create-openclaw-bot?style=for-the-badge&label=CLI&color=2563EB&logo=npm&logoColor=white" alt="NPM Version" /></a>
   <a href="https://github.com/tuanminhhole/openclaw-setup/stargazers"><img src="https://img.shields.io/github/stars/tuanminhhole/openclaw-setup?style=for-the-badge&color=eab308&logo=github&logoColor=white" alt="GitHub Stars" /></a>
@@ -24,7 +24,7 @@ Công cụ **CLI tương tác** và **Setup Wizard** để tự triển khai Bot
 
 ---
 
-## 🆕 Có gì mới trong v5.1.10
+## 🆕 Có gì mới trong v5.1.11
 
 - 💻 **OS-First Setup** — Bước đầu tiên bây giờ là chọn hệ điều hành của bạn (Windows, macOS, Ubuntu, VPS). Toàn bộ script, cấu hình và hướng dẫn được tạo ra phù hợp với lựa chọn đó.
 - 🧠 **Gemma 4 — 4 kích thước** — `gemma4:e2b` (~4 GB), `gemma4:e4b` (~8 GB), `gemma4:26b` (~18 GB), `gemma4:31b` (~24 GB). Tự pull về khi bot khởi động lần đầu.
@@ -112,7 +112,7 @@ Chạy lệnh trên trong Terminal → làm theo các prompt tương tác → sc
 2. Mở repo này làm workspace
 3. Paste vào chat:
    ```
-   Read SETUP.md and set up OpenClaw v5.1.10 for me.
+   Read SETUP.md and set up OpenClaw v5.1.11 for me.
    My bot token is X. Use 9Router (no API key).
    My project folder: <THƯ_MỤC_CỦA_BẠN>
    ```

package/cli.js

@@ -1,4 +1,4 @@
-#!/usr/bin/env node
+#!/usr/bin/env node
 
 import { input, select, checkbox, confirm } from '@inquirer/prompts';
 import fs from 'fs-extra';
@@ -2104,12 +2104,12 @@ ${hasBrowserDesktop ? `    extra_hosts:
         };
       }
       botConfig.channels['telegram'] = telegramConfig;
-    } else if (channelKey === 'zalo-personal') {
-      botConfig.channels['zalouser'] = {
-        enabled: true,
-        dmPolicy: 'pairing',
-        autoReply: true
-      };
+    } else if (channelKey === 'zalo-personal') {
+      botConfig.channels['zalouser'] = {
+        enabled: true,
+        dmPolicy: 'open',
+        autoReply: true
+      };
     } else if (channelKey === 'zalo-bot') {
       botConfig.channels['zalo'] = { enabled: true, provider: 'official_account' };
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-openclaw-bot",
-  "version": "5.1.10",
+  "version": "5.1.12",
   "description": "Interactive CLI installer for OpenClaw Bot",
   "main": "cli.js",
   "bin": {

package/setup.js

@@ -24,7 +24,7 @@
   };
 
   // ========== State ==========
-  const state = {
+  const state = {
     currentStep: 1,
     totalSteps: 5,
     channel: null,
@@ -47,21 +47,21 @@
       apiKey: '',
       projectPath: '',
     },
-  };
-
-  function getGatewayAllowedOrigins(port) {
-    const normalizedPort = Number(port) || 18791;
-    const origins = new Set([
-      `http://localhost:${normalizedPort}`,
-      `http://127.0.0.1:${normalizedPort}`,
-      `http://0.0.0.0:${normalizedPort}`,
-    ]);
-    const currentHost = (window.location && window.location.hostname) ? window.location.hostname.trim() : '';
-    if (currentHost) {
-      origins.add(`http://${currentHost}:${normalizedPort}`);
-    }
-    return Array.from(origins);
-  }
+  };
+
+  function getGatewayAllowedOrigins(port) {
+    const normalizedPort = Number(port) || 18791;
+    const origins = new Set([
+      `http://localhost:${normalizedPort}`,
+      `http://127.0.0.1:${normalizedPort}`,
+      `http://0.0.0.0:${normalizedPort}`,
+    ]);
+    const currentHost = (window.location && window.location.hostname) ? window.location.hostname.trim() : '';
+    if (currentHost) {
+      origins.add(`http://${currentHost}:${normalizedPort}`);
+    }
+    return Array.from(origins);
+  }
 
 
   // ========== AI Providers & Models ==========
@@ -161,6 +161,14 @@
 
   // ========== Available Plugins (npm packages — runtime/channel extensions) ==========
   const PLUGINS = [
+    {
+      id: 'telegram-multibot-relay',
+      name: 'Telegram Multi-Bot Relay',
+      icon: '🤝',
+      descVi: 'Điều phối nhiều bot Telegram trong cùng group — tự động khi chọn nhiều bot', descEn: 'Coordinate multiple Telegram bots in one group — auto-selected with multi-bot',
+      package: 'telegram-multibot-relay',
+      hidden: true, // hidden in UI, auto-selected programmatically
+    },
     {
       id: 'voice-call',
       name: 'Voice Call',
@@ -193,7 +201,6 @@
 
   // ========== Available Skills (ClawHub registry — agent capabilities) ==========
   const SKILLS = [
-    // Web Search removed — OpenClaw has native search built-in (no Tavily key needed)
     {
       id: 'browser',
       name: 'Browser Automation ⭐(Khuyên dùng)',
@@ -227,7 +234,7 @@
       id: 'image-gen',
       name: 'Image Generation',
       icon: '🎨',
-      descVi: 'Tạo ảnh bằng AI (DALL·E, Flux...)', descEn: 'Generate images using AI (DALL-E, Flux...)',
+      descVi: 'Tạo ảnh bằng AI (DALL·E, Flux, Midjourney...)', descEn: 'Generate images via AI (DALL-E, Flux, Midjourney...)',
       slug: 'image-gen',
       noteVi: 'Dùng chung OPENAI_API_KEY (DALL-E) hoặc thêm FLUX_API_KEY', noteEn: 'Uses OPENAI_API_KEY (DALL-E) or FLUX_API_KEY',
       envVars: ['# FLUX_API_KEY=<your_flux_key>  # chỉ cần nếu dùng Flux'],
@@ -243,11 +250,36 @@
       id: 'email',
       name: 'Email Assistant',
       icon: '📧',
-      descVi: 'Quản lý, soạn, tóm tắt email', descEn: 'Manage, compose, summarize emails',
+      descVi: 'Quản lý, soạn, tóm tắt email (Gmail, Outlook...)', descEn: 'Manage, compose, summarize emails (Gmail, Outlook...)',
       slug: 'email-assistant',
       noteVi: 'Cần cấu hình SMTP trong .env', noteEn: 'Requires SMTP configuration in .env',
       envVars: ['SMTP_HOST=smtp.gmail.com', 'SMTP_PORT=587', 'SMTP_USER=<your_email>', 'SMTP_PASS=<your_app_password>'],
     },
+    {
+      id: 'web-search',
+      name: 'Web Search',
+      icon: '🔍',
+      descVi: 'Tìm kiếm web thời gian thực (DuckDuckGo) — không cần API key', descEn: 'Real-time web search (DuckDuckGo) — no API key needed',
+      slug: 'web-search',
+    },
+    {
+      id: 'notion',
+      name: 'Notion',
+      icon: '📓',
+      descVi: 'Tạo, chỉnh sửa trang và database Notion', descEn: 'Create and edit Notion pages and databases',
+      slug: 'notion',
+      noteVi: 'Cần Notion Integration Token', noteEn: 'Requires Notion Integration Token',
+      envVars: ['NOTION_API_KEY=<your_notion_integration_token>'],
+    },
+    {
+      id: 'slack',
+      name: 'Slack',
+      icon: '🗨️',
+      descVi: 'Gửi tin, react, ghim tin nhắn trong Slack', descEn: 'Send messages, react, pin items in Slack',
+      slug: 'slack',
+      noteVi: 'Cần Slack Bot Token', noteEn: 'Requires Slack Bot Token',
+      envVars: ['SLACK_BOT_TOKEN=<your_slack_bot_token>'],
+    },
   ];
 
   // ========== Channel definitions ==========
@@ -530,6 +562,24 @@
       state.bots.push({ name: '', slashCmd: '', desc: '', provider: 'google', model: 'google/gemini-2.5-flash', token: '', apiKey: '' });
     }
 
+    // Auto-select telegram-multibot-relay plugin when multi-bot, deselect when single
+    const relayId = 'telegram-multibot-relay';
+    if (count > 1) {
+      if (!state.config.plugins.includes(relayId)) {
+        state.config.plugins.push(relayId);
+      }
+    } else {
+      state.config.plugins = state.config.plugins.filter(p => p !== relayId);
+    }
+    // Sync relay card checkbox if already rendered
+    const relayCard = document.querySelector(`.plugin-card[data-plugin="${relayId}"]`);
+    if (relayCard) {
+      const isSelected = count > 1;
+      relayCard.classList.toggle('plugin-card--selected', isSelected);
+      const cb = relayCard.querySelector('input[type="checkbox"]');
+      if (cb) cb.checked = isSelected;
+    }
+
     // Show/hide group option for 2+ bots
     const groupOpt = document.getElementById('multibot-group-option');
     if (groupOpt) groupOpt.style.display = count > 1 ? '' : 'none';
@@ -922,19 +972,30 @@
       // Step 1 (env): always valid
       // Step 2 (channel): require selection
       if (state.currentStep === 2 && !state.channel) isDisabled = true;
-      // Step 3 (bot config): require bot name
+      // Step 3 (bot config): require at least one bot name
       if (state.currentStep === 3) {
-        const nameVal = document.getElementById('cfg-name')?.value?.trim();
-        const userInfoVal = document.getElementById('cfg-user-info')?.value?.trim();
-        if (!nameVal || !userInfoVal) isDisabled = true;
+        if (state.botCount > 1) {
+          // Multi-bot: require name for the currently active bot tab
+          const tabNameVal = document.getElementById('cfg-bot-tab-name')?.value?.trim();
+          if (!tabNameVal) isDisabled = true;
+        } else {
+          // Single bot: require cfg-name or the shared tab name field
+          const nameVal = document.getElementById('cfg-name')?.value?.trim()
+            || document.getElementById('cfg-bot-tab-name')?.value?.trim();
+          if (!nameVal) isDisabled = true;
+        }
       }
       // Step 4 (api keys): require token/key
       if (state.currentStep === 4) {
-        const botTokenEl = document.getElementById('key-bot-token');
         const apiKeyEl = document.getElementById('key-api-key');
         const provider = PROVIDERS[state.config.provider];
-        if ((state.channel === 'telegram' || state.channel === 'zalo-bot') && botTokenEl) {
-          if (!botTokenEl.value.trim()) isDisabled = true;
+        if (state.channel === 'telegram' && state.botCount > 1) {
+          // Multi-bot Telegram: require at least the first bot's token
+          const firstTokenEl = document.getElementById('key-bot-token-0');
+          if (!firstTokenEl || !firstTokenEl.value.trim()) isDisabled = true;
+        } else if (state.channel === 'telegram' || state.channel === 'zalo-bot') {
+          const botTokenEl = document.getElementById('key-bot-token');
+          if (!botTokenEl || !botTokenEl.value.trim()) isDisabled = true;
         }
         if (provider && !provider.isProxy && !provider.isLocal && provider.envKey && apiKeyEl) {
           if (!apiKeyEl.value.trim()) isDisabled = true;
@@ -1010,9 +1071,11 @@
     }
 
     // Plugins grid (npm packages — extra channels/extensions)
+    // Filter out hidden plugins from user-facing grid
+    const visiblePlugins = PLUGINS.filter((p) => !p.hidden);
     const pluginGrid = document.getElementById('extra-plugin-grid');
     if (pluginGrid) {
-      pluginGrid.innerHTML = PLUGINS.map((p) => `
+      pluginGrid.innerHTML = visiblePlugins.map((p) => `
         <label class="plugin-card" data-plugin="${p.id}">
           <input type="checkbox" class="plugin-checkbox" value="${p.id}" onchange="window.__togglePlugin('${p.id}', this.checked)">
           <div class="plugin-card__icon">${p.icon}</div>
@@ -1591,15 +1654,15 @@ Write-Host "Chrome se tu dong bat Debug Mode moi khi ban dang nhap Windows (dela
       commands: { native: 'auto', nativeSkills: 'auto', restart: true, ownerDisplay: 'raw' },
       channels: ch.channelConfig,
       tools: { profile: 'full', exec: { host: 'gateway', security: 'full', ask: 'off' } },
-      gateway: {
-        port: 18791,
-        mode: 'local',
-        bind: '0.0.0.0',
-        controlUi: {
-          allowedOrigins: getGatewayAllowedOrigins(18791),
-        },
-        auth: { mode: 'token', token: crypto.randomUUID().replace(/-/g, '') },
-      },
+      gateway: {
+        port: 18791,
+        mode: 'local',
+        bind: '0.0.0.0',
+        controlUi: {
+          allowedOrigins: getGatewayAllowedOrigins(18791),
+        },
+        auth: { mode: 'token', token: crypto.randomUUID().replace(/-/g, '') },
+      },
     };
 
     // 9Router: add proxy endpoint config under models.providers
@@ -1740,6 +1803,17 @@ Write-Host "Chrome se tu dong bat Debug Mode moi khi ban dang nhap Windows (dela
           'telegram-multibot-relay': { enabled: true },
         },
       };
+    } else if (state.config.plugins.length > 0) {
+      // Non-multibot: write selected visible plugins into openclaw.json
+      const pluginEntries = {};
+      state.config.plugins.forEach((pid) => {
+        const plugin = PLUGINS.find((p) => p.id === pid);
+        if (!plugin || plugin.hidden) return;
+        pluginEntries[plugin.package || pid] = { enabled: true };
+      });
+      if (Object.keys(pluginEntries).length > 0) {
+        clawConfig.plugins = { entries: pluginEntries };
+      }
     }
 
     setOutput('out-openclaw-json', JSON.stringify(clawConfig, null, 2));
@@ -1775,19 +1849,19 @@ model:
     // 3. Dockerfile
     const allPlugins = [];
     if (ch.pluginInstall) allPlugins.push(ch.pluginInstall);
-    const encodeBase64Utf8 = (value) => btoa(String.fromCharCode(...new TextEncoder().encode(String(value))));
-    const indentBlock = (text, spaces) => {
-      const prefix = ' '.repeat(spaces);
-      return String(text).split('\n').map((line) => `${prefix}${line}`).join('\n');
-    };
-    const build9RouterComposeEntrypointScript = (syncScriptBase64) => [
-      'npm install -g 9router',
-      `node -e "require('fs').writeFileSync('/tmp/sync.js',Buffer.from('${syncScriptBase64}','base64').toString())"`,
-      'node /tmp/sync.js > /tmp/sync.log 2>&1 &',
-      'exec 9router -n -l -H 0.0.0.0 -p 20128 --skip-update'
-    ].join('\n');
-
-    state.config.plugins.forEach((pid) => {
+    const encodeBase64Utf8 = (value) => btoa(String.fromCharCode(...new TextEncoder().encode(String(value))));
+    const indentBlock = (text, spaces) => {
+      const prefix = ' '.repeat(spaces);
+      return String(text).split('\n').map((line) => `${prefix}${line}`).join('\n');
+    };
+    const build9RouterComposeEntrypointScript = (syncScriptBase64) => [
+      'npm install -g 9router',
+      `node -e "require('fs').writeFileSync('/tmp/sync.js',Buffer.from('${syncScriptBase64}','base64').toString())"`,
+      'node /tmp/sync.js > /tmp/sync.log 2>&1 &',
+      'exec 9router -n -l -H 0.0.0.0 -p 20128 --skip-update'
+    ].join('\n');
+
+    state.config.plugins.forEach((pid) => {
       const plug = PLUGINS.find((p) => p.id === pid);
       if (plug) allPlugins.push(plug.package);
     });
@@ -1832,7 +1906,7 @@ model:
       ? 'socat TCP-LISTEN:9222,fork,reuseaddr TCP:host.docker.internal:9222 & '
       : '';
     // Patch config on every startup to keep gateway settings stable
-    const patchCmd = `node -e \\"const fs=require('fs'),os=require('os'),p='/root/.openclaw/openclaw.json';if(fs.existsSync(p)){const c=JSON.parse(fs.readFileSync(p,'utf8'));const a=new Set(['http://localhost:18791','http://127.0.0.1:18791','http://0.0.0.0:18791']);for(const entries of Object.values(os.networkInterfaces()||{})){for(const entry of entries||[]){if(!entry||entry.internal||entry.family!=='IPv4'||!entry.address)continue;a.add(\\\`http://\\\${entry.address}:18791\\\`);}}c.tools=Object.assign({},c.tools,{profile:'full',exec:{host:'gateway',security:'full',ask:'off'}});c.gateway=Object.assign({},c.gateway,{port:18791,bind:'custom',customBindHost:'0.0.0.0',controlUi:Object.assign({},c.gateway?.controlUi,{allowedOrigins:Array.from(a)})});fs.writeFileSync(p,JSON.stringify(c,null,2));}\\" && `;
+    const patchCmd = `node -e \\"const fs=require('fs'),os=require('os'),p='/root/.openclaw/openclaw.json';if(fs.existsSync(p)){const c=JSON.parse(fs.readFileSync(p,'utf8'));const a=new Set(['http://localhost:18791','http://127.0.0.1:18791','http://0.0.0.0:18791']);for(const entries of Object.values(os.networkInterfaces()||{})){for(const entry of entries||[]){if(!entry||entry.internal||entry.family!=='IPv4'||!entry.address)continue;a.add(\\\`http://\\\${entry.address}:18791\\\`);}}c.tools=Object.assign({},c.tools,{profile:'full',exec:{host:'gateway',security:'full',ask:'off'}});c.gateway=Object.assign({},c.gateway,{port:18791,bind:'custom',customBindHost:'0.0.0.0',controlUi:Object.assign({},c.gateway?.controlUi,{allowedOrigins:Array.from(a)})});fs.writeFileSync(p,JSON.stringify(c,null,2));}\\" && `;
     // Auto-approve device pairing after gateway starts (required since v2026.3.x)
     const autoApproveCmd = '(while true; do sleep 5; openclaw devices approve --latest 2>/dev/null || true; done) & ';
     const finalCmd = `CMD sh -c "${pluginInstallCmd}${patchCmd}${browserPrefix}${autoApproveCmd}${gatewayCmd}"`;
@@ -1844,7 +1918,7 @@ RUN apt-get update && apt-get install -y git curl${browserAptExtra} && rm -rf /v
 
 ARG CACHEBUST=${Date.now()}
 RUN npm install -g openclaw@latest${skillLines}${browserInstallLines}
-RUN node -e "const fs=require('fs');const path=require('path');const dir='/usr/local/lib/node_modules/openclaw/dist';const from='\\t\\t\\t\\t\\tonAgentRunStart: (runId) => {';const to='\\t\\t\\t\\t\\ttimeoutOverrideSeconds: Math.max(1, Math.ceil(timeoutMs / 1e3)),\\n\\t\\t\\t\\t\\tonAgentRunStart: (runId) => {';const files=fs.readdirSync(dir).filter(n=>/\\.js$/.test(n));let patched=0;for(const file of files){const p=path.join(dir,file);let s='';try{s=fs.readFileSync(p,'utf8');}catch{continue;}if(s.includes(to)||!s.includes(from))continue;s=s.replace(from,to);fs.writeFileSync(p,s);patched++;}if(!patched){process.exit(0);}"
+RUN node -e "const fs=require('fs');const path=require('path');const dir='/usr/local/lib/node_modules/openclaw/dist';const from='\\t\\t\\t\\t\\tonAgentRunStart: (runId) => {';const to='\\t\\t\\t\\t\\ttimeoutOverrideSeconds: Math.max(1, Math.ceil(timeoutMs / 1e3)),\\n\\t\\t\\t\\t\\tonAgentRunStart: (runId) => {';const files=fs.readdirSync(dir).filter(n=>/\\.js$/.test(n));let patched=0;for(const file of files){const p=path.join(dir,file);let s='';try{s=fs.readFileSync(p,'utf8');}catch{continue;}if(s.includes(to)||!s.includes(from))continue;s=s.replace(from,to);fs.writeFileSync(p,s);patched++;}if(!patched){process.exit(0);}"
 WORKDIR /root/.openclaw
 
 EXPOSE 18791
@@ -1863,7 +1937,7 @@ ${finalCmd}`;
     // Background loop inside 9Router container every 30s.
     // Read providerConnections directly from db.json so smart-route survives
     // dashboard auth/response changes in newer 9Router builds.
-    const syncScript = `const fs=require('fs');const INTERVAL=30000;const p='/root/.9router/db.json';
+    const syncScript = `const fs=require('fs');const INTERVAL=30000;const p='/root/.9router/db.json';
 const PM={codex:['cx/gpt-5.4','cx/gpt-5.3-codex','cx/gpt-5.3-codex-high','cx/gpt-5.2-codex','cx/gpt-5.2','cx/gpt-5.1-codex-max','cx/gpt-5.1-codex','cx/gpt-5.1','cx/gpt-5-codex'],'claude-code':['cc/claude-opus-4-6','cc/claude-sonnet-4-6','cc/claude-opus-4-5-20251101','cc/claude-sonnet-4-5-20250929','cc/claude-haiku-4-5-20251001'],github:['gh/gpt-5.4','gh/gpt-5.3-codex','gh/gpt-5.2-codex','gh/gpt-5.2','gh/gpt-5.1-codex-max','gh/gpt-5.1-codex','gh/gpt-5.1','gh/gpt-5','gh/gpt-4.1','gh/gpt-4o','gh/claude-opus-4.6','gh/claude-sonnet-4.6','gh/claude-sonnet-4.5','gh/claude-opus-4.5','gh/claude-haiku-4.5','gh/gemini-3-pro-preview','gh/gemini-3-flash-preview','gh/gemini-2.5-pro'],cursor:['cu/default','cu/claude-4.6-opus-max','cu/claude-4.5-opus-high-thinking','cu/claude-4.5-sonnet-thinking','cu/claude-4.5-sonnet','cu/gpt-5.3-codex','cu/gpt-5.2-codex','cu/gemini-3-flash-preview'],kilo:['kc/anthropic/claude-sonnet-4-20250514','kc/anthropic/claude-opus-4-20250514','kc/google/gemini-2.5-pro','kc/google/gemini-2.5-flash','kc/openai/gpt-4.1','kc/deepseek/deepseek-chat'],cline:['cl/anthropic/claude-sonnet-4.6','cl/anthropic/claude-opus-4.6','cl/openai/gpt-5.3-codex','cl/openai/gpt-5.4','cl/google/gemini-3.1-pro-preview'],'gemini-cli':['gc/gemini-3-flash-preview','gc/gemini-3-pro-preview'],iflow:['if/qwen3-coder-plus','if/kimi-k2','if/kimi-k2-thinking','if/glm-4.7','if/deepseek-r1','if/deepseek-v3.2','if/deepseek-v3','if/qwen3-max','if/qwen3-235b','if/iflow-rome-30ba3b'],qwen:['qw/qwen3-coder-plus','qw/qwen3-coder-flash','qw/vision-model','qw/coder-model'],kiro:['kr/claude-sonnet-4.5','kr/claude-haiku-4.5','kr/deepseek-3.2','kr/deepseek-3.1','kr/qwen3-coder-next'],ollama:['ollama/gemma4:e2b','ollama/gemma4:e4b','ollama/gemma4:26b','ollama/gemma4:31b','ollama/qwen3.5','ollama/kimi-k2.5','ollama/glm-5','ollama/glm-4.7-flash','ollama/minimax-m2.5','ollama/gpt-oss:120b'],'kimi-coding':['kmc/kimi-k2.5','kmc/kimi-k2.5-thinking','kmc/kimi-latest'],glm:['glm/glm-5.1','glm/glm-5','glm/glm-4.7'],'glm-cn':['glm/glm-5.1','glm/glm-5','glm/glm-4.7'],minimax:['minimax/MiniMax-M2.7','minimax/MiniMax-M2.5','minimax/MiniMax-M2.1'],kimi:['kimi/kimi-k2.5','kimi/kimi-k2.5-thinking','kimi/kimi-latest'],deepseek:['deepseek/deepseek-chat','deepseek/deepseek-reasoner'],xai:['xai/grok-4','xai/grok-4-fast-reasoning','xai/grok-code-fast-1'],mistral:['mistral/mistral-large-latest','mistral/codestral-latest'],groq:['groq/llama-3.3-70b-versatile','groq/openai/gpt-oss-120b'],cerebras:['cerebras/gpt-oss-120b'],alicode:['alicode/qwen3.5-plus','alicode/qwen3-coder-plus'],openai:['openai/gpt-4o','openai/gpt-4.1'],anthropic:['anthropic/claude-sonnet-4','anthropic/claude-haiku-3.5'],gemini:['gemini/gemini-2.5-flash','gemini/gemini-2.5-pro']};
 console.log('[sync-combo] 9Router sync loop started...');
 const sync = async () => {
@@ -1913,11 +1987,11 @@ const sync = async () => {
       console.log('[sync-combo] Created smart-route: ' + c.models.length + ' models');
     }
   } catch (e) { }
-};
-setTimeout(sync, 5000);
-setInterval(sync, INTERVAL);`;
-    const syncScriptBase64 = encodeBase64Utf8(syncScript);
-    const docker9RouterEntrypointScript = build9RouterComposeEntrypointScript(syncScriptBase64);
+};
+setTimeout(sync, 5000);
+setInterval(sync, INTERVAL);`;
+    const syncScriptBase64 = encodeBase64Utf8(syncScript);
+    const docker9RouterEntrypointScript = build9RouterComposeEntrypointScript(syncScriptBase64);
 
     let compose;
     if (isMultiBotWizard) {
@@ -1946,14 +2020,14 @@ ${dependsOn}${extraHosts}    volumes:
     image: node:22-slim
     container_name: 9router-multibot
     restart: always
-    entrypoint:
-      - /bin/sh
-      - -c
-      - |
-${indentBlock(docker9RouterEntrypointScript, 8)}
-    environment:
-      - PORT=20128
-      - HOSTNAME=0.0.0.0
+    entrypoint:
+      - /bin/sh
+      - -c
+      - |
+${indentBlock(docker9RouterEntrypointScript, 8)}
+    environment:
+      - PORT=20128
+      - HOSTNAME=0.0.0.0
       - CI=true
     volumes:
       - 9router-data:/root/.9router
@@ -2039,14 +2113,14 @@ ${extraHostsBlock}
     image: node:22-slim
     container_name: 9router
     restart: always
-    entrypoint:
-      - /bin/sh
-      - -c
-      - |
-${indentBlock(docker9RouterEntrypointScript, 8)}
-    environment:
-      - PORT=20128
-      - HOSTNAME=0.0.0.0
+    entrypoint:
+      - /bin/sh
+      - -c
+      - |
+${indentBlock(docker9RouterEntrypointScript, 8)}
+    environment:
+      - PORT=20128
+      - HOSTNAME=0.0.0.0
       - CI=true
     volumes:
       - 9router-data:/root/.9router
@@ -2885,17 +2959,17 @@ const sync=()=>{try{let db={};try{db=JSON.parse(fs.readFileSync(p,'utf8'));}catc
     // ─── Shared initializer (provider install) ───────────────────────────────
     function providerLines(arr, shell) {
       if (is9Router) {
-        if (shell === 'bat') {
-          arr.push('npm install -g 9router');
-          arr.push('start "9Router" cmd /k "9router -n -l -H 0.0.0.0 -p 20128 --skip-update"');
-          arr.push('start "9Router Smart Route Sync" cmd /k "node .\\.openclaw\\9router-smart-route-sync.js"');
-          arr.push('timeout /t 5 /nobreak >nul');
-        } else {
-          arr.push('npm install -g 9router');
-          arr.push('nohup env PORT=20128 HOSTNAME=0.0.0.0 node "$(npm root -g)/9router/app/server.js" >/tmp/9router.log 2>&1 &');
-          arr.push('nohup node ./.openclaw/9router-smart-route-sync.js >/tmp/9router-sync.log 2>&1 &');
-          arr.push('sleep 3');
-        }
+        if (shell === 'bat') {
+          arr.push('npm install -g 9router');
+          arr.push('start "9Router" cmd /k "9router -n -l -H 0.0.0.0 -p 20128 --skip-update"');
+          arr.push('start "9Router Smart Route Sync" cmd /k "node .\\.openclaw\\9router-smart-route-sync.js"');
+          arr.push('timeout /t 5 /nobreak >nul');
+        } else {
+          arr.push('npm install -g 9router');
+          arr.push('nohup env PORT=20128 HOSTNAME=0.0.0.0 node "$(npm root -g)/9router/app/server.js" >/tmp/9router.log 2>&1 &');
+          arr.push('nohup node ./.openclaw/9router-smart-route-sync.js >/tmp/9router-sync.log 2>&1 &');
+          arr.push('sleep 3');
+        }
       } else if (isOllama) {
         if (shell === 'bat') {
           arr.push('where ollama >nul 2>&1 || (powershell -Command "Invoke-WebRequest -Uri https://ollama.com/download/OllamaSetup.exe -OutFile OllamaSetup.exe" && OllamaSetup.exe && del OllamaSetup.exe)');
@@ -3053,15 +3127,15 @@ const sync=()=>{try{let db={};try{db=JSON.parse(fs.readFileSync(p,'utf8'));}catc
             'telegram-multibot-relay': { enabled: true },
           },
         },
-        gateway: {
-          port: 18791,
-          mode: 'local',
-          bind: '0.0.0.0',
-          controlUi: {
-            allowedOrigins: getGatewayAllowedOrigins(18791),
-          },
-          auth: { mode: 'token', token: crypto.randomUUID().replace(/-/g, '') },
-        },
+        gateway: {
+          port: 18791,
+          mode: 'local',
+          bind: '0.0.0.0',
+          controlUi: {
+            allowedOrigins: getGatewayAllowedOrigins(18791),
+          },
+          auth: { mode: 'token', token: crypto.randomUUID().replace(/-/g, '') },
+        },
       };
       return JSON.stringify(cfg, null, 2);
     }
@@ -3103,9 +3177,11 @@ const sync=()=>{try{let db={};try{db=JSON.parse(fs.readFileSync(p,'utf8'));}catc
         files[`.openclaw/${meta.workspaceDir}/SOUL.md`] = isVi
           ? `# Tinh cach\n\n${meta.persona || 'Huu ich that su, gan gui, ngan gon.'}`
           : `# Soul\n\n${meta.persona || 'Helpful, concise, and practical.'}`;
+        const _secRulesForBot = state.config.securityRules || DEFAULT_SECURITY_RULES[isVi ? 'vi' : 'en'];
         files[`.openclaw/${meta.workspaceDir}/AGENTS.md`] = (isVi
-          ? `# Huong dan van hanh\n\n## Vai tro\nBan la **${meta.name}**, ${meta.desc.toLowerCase()}.\n\n## Khi nao nen tra loi\n- Trong group, xem user dang goi ban neu tin nhan co alias cua ban: ${ownAliases.map((alias) => `\`${alias}\``).join(', ')}\n- Neu user tag username Telegram cua ban thi luon tra loi.\n- Gateway se tu dong tha ack \`👍\` khi nhan message; khong can tu tha them neu ack da hien.\n- Neu user dang goi ro bot khac ${relayTargetNames} thi khong cuop loi.\n\n## Phoi hop\n- Dung \`TEAM.md\` lam nguon su that.\n- Neu user bao ban hoi hoac xin y kien tu ${otherBots.length ? otherBots.map((peer) => `\`${peer.name}\``).join(', ') : '`bot khac`'} thi dung agent-to-agent noi bo ngay trong turn hien tai.\n- Neu ban la bot mo loi, chi gui 1 cau mo dau ngan roi handoff ngay. Khong tu noi thay bot dich tru khi handoff that bai ro rang.\n- Khi handoff, phai goi dung agent id ky thuat ${relayTargetIds}, khong dung ten hien thi.\n- Neu ban la bot dich nhan handoff, hay tra loi cong khai ngay trong cung Telegram chat/thread bang chinh account cua minh. Uu tien tra loi co \`[[reply_to_current]]\`; neu can, dung Telegram send/sendMessage action thay vi chi output thuong.\n- Khong bao user phai tag lai bot kia neu ban co the hoi noi bo duoc.`
-          : `# Operating Manual\n\n## Role\nYou are **${meta.name}**, ${meta.desc.toLowerCase()}.\n\n## When To Reply\n- In group chats, treat the message as addressed to you if it contains one of your aliases: ${ownAliases.map((alias) => `\`${alias}\``).join(', ')}\n- Always reply when your Telegram username is tagged.\n- The gateway auto-sends the \`👍\` ack reaction on inbound messages; do not duplicate it manually if it already appeared.\n- If the message is clearly calling another bot such as ${relayTargetNames}, do not hijack it.\n\n## Coordination\n- Use \`TEAM.md\` as the source of truth.\n- If the user asks you to consult ${otherBots.length ? otherBots.map((peer) => `\`${peer.name}\``).join(', ') : '`another bot`'}, use internal agent-to-agent handoff in the same turn.\n- If you are the caller bot, send only one short opener then hand off immediately. Do not speak for the target bot unless the handoff clearly fails.\n- When handing off, use the exact technical agent id ${relayTargetIds}, not the display name.\n- If you are the target bot receiving a handoff, publish the real answer into the same Telegram chat/thread from your own account. Prefer replying with \`[[reply_to_current]]\`; if needed, use the Telegram send/sendMessage action instead of plain assistant output.\n- Do not ask the user to tag the other bot again if you can consult internally.`);
+          ? `# Huong dan van hanh\n\n## Vai tro\nBan la **${meta.name}**, ${meta.desc.toLowerCase()}.\n\n## Khi nao nen tra loi\n- Trong group, xem user dang goi ban neu tin nhan co alias cua ban: ${ownAliases.map((alias) => `\`${alias}\``).join(', ')}\n- Neu user tag username Telegram cua ban thi luon tra loi.\n- Gateway se tu dong tha ack \`👍\` khi nhan message; khong can tu tha them neu ack da hien.\n- Neu user dang goi ro bot khac ${relayTargetNames} thi khong cuop loi.\n\n## Phoi hop\n- Dung \`TEAM.md\` lam nguon su that.\n- Neu user bao ban hoi hoac xin y kien tu ${otherBots.length ? otherBots.map((peer) => `\`${peer.name}\``).join(', ') : '`bot khac`'} thi dung agent-to-agent noi bo ngay trong turn hien tai.\n- Neu ban la bot mo loi, chi gui 1 cau mo dau ngan roi handoff ngay. Khong tu noi thay bot dich tru khi handoff that bai ro rang.\n- Khi handoff, phai goi dung agent id ky thuat ${relayTargetIds}, khong dung ten hien thi.\n- Neu ban la bot dich nhan handoff, hay tra loi cong khai ngay trong cung Telegram chat/thread bang chinh account cua minh. Uu tien tra loi co \`[[reply_to_current]]\`; neu can, dung Telegram send/sendMessage action thay vi chi output thuong.\n- Khong bao user phai tag lai bot kia neu ban co the hoi noi bo duoc.\n\n${_secRulesForBot}`
+          : `# Operating Manual\n\n## Role\nYou are **${meta.name}**, ${meta.desc.toLowerCase()}.\n\n## When To Reply\n- In group chats, treat the message as addressed to you if it contains one of your aliases: ${ownAliases.map((alias) => `\`${alias}\``).join(', ')}\n- Always reply when your Telegram username is tagged.\n- The gateway auto-sends the \`👍\` ack reaction on inbound messages; do not duplicate it manually if it already appeared.\n- If the message is clearly calling another bot such as ${relayTargetNames}, do not hijack it.\n\n## Coordination\n- Use \`TEAM.md\` as the source of truth.\n- If the user asks you to consult ${otherBots.length ? otherBots.map((peer) => `\`${peer.name}\``).join(', ') : '`another bot`'}, use internal agent-to-agent handoff in the same turn.\n- If you are the caller bot, send only one short opener then hand off immediately. Do not speak for the target bot unless the handoff clearly fails.\n- When handing off, use the exact technical agent id ${relayTargetIds}, not the display name.\n- If you are the target bot receiving a handoff, publish the real answer into the same Telegram chat/thread from your own account. Prefer replying with \`[[reply_to_current]]\`; if needed, use the Telegram send/sendMessage action instead of plain assistant output.\n- Do not ask the user to tag the other bot again if you can consult internally.\n\n${_secRulesForBot}`);
+
         files[`.openclaw/${meta.workspaceDir}/TEAM.md`] = teamMd;
         files[`.openclaw/${meta.workspaceDir}/RELAY.md`] = isVi
           ? `# Telegram Relay Playbook\n\n## Muc tieu\n- Cho phep bot mo loi goi bot dich noi bo, sau do bot dich tra loi cong khai bang chinh account cua minh.\n\n## Protocol\n1. Bot mo loi gui 1 cau ngan xac nhan se hoi bot dich.\n2. Bot mo loi handoff noi bo bang dung agent id trong \`TEAM.md\`.\n3. Bot dich tra loi cong khai trong cung chat/thread hien tai.\n4. Neu thay \`[[reply_to_current]]\` hoac Telegram send/sendMessage action kha dung, uu tien dung de bam dung message goc.\n5. Neu handoff that bai ro rang, chi bot mo loi moi duoc fallback tom tat.\n`
@@ -3169,15 +3245,15 @@ const sync=()=>{try{let db={};try{db=JSON.parse(fs.readFileSync(p,'utf8'));}catc
         },
         commands: { native: 'auto', nativeSkills: 'auto', restart: true },
         channels: channelConfig,
-        gateway: {
-          port: basePort,
-          mode: 'local',
-          bind: '0.0.0.0',
-          controlUi: {
-            allowedOrigins: getGatewayAllowedOrigins(basePort),
-          },
-          auth: { mode: 'token', token: crypto.randomUUID().replace(/-/g, '') },
-        },
+        gateway: {
+          port: basePort,
+          mode: 'local',
+          bind: '0.0.0.0',
+          controlUi: {
+            allowedOrigins: getGatewayAllowedOrigins(basePort),
+          },
+          auth: { mode: 'token', token: crypto.randomUUID().replace(/-/g, '') },
+        },
 
       };
       return JSON.stringify(cfg, null, 2);
@@ -3556,12 +3632,12 @@ ${selectedSkillNames.length ? selectedSkillNames.join('\n') : '- _(No skills ins
 
       if (isMultiBot) {
         vps.push('echo "--- Creating shared multi-agent runtime ---"');
-        appendShWriteCommands(vps, sharedNativeFileMap());
-        vps.push('echo "--- Starting shared gateway via PM2 ---"');
-        if (is9Router) {
-          vps.push('PORT=20128 HOSTNAME=0.0.0.0 pm2 start "$(npm root -g)/9router/app/server.js" --name openclaw-multibot-9router --interpreter "$(command -v node)"');
-          vps.push('pm2 start --name openclaw-multibot-9router-sync -- sh -c "node ./.openclaw/9router-smart-route-sync.js"');
-        }
+        appendShWriteCommands(vps, sharedNativeFileMap());
+        vps.push('echo "--- Starting shared gateway via PM2 ---"');
+        if (is9Router) {
+          vps.push('PORT=20128 HOSTNAME=0.0.0.0 pm2 start "$(npm root -g)/9router/app/server.js" --name openclaw-multibot-9router --interpreter "$(command -v node)"');
+          vps.push('pm2 start --name openclaw-multibot-9router-sync -- sh -c "node ./.openclaw/9router-smart-route-sync.js"');
+        }
         vps.push('pm2 start --name openclaw-multibot -- sh -c "openclaw gateway run"');
         vps.push('pm2 save && pm2 startup');
         vps.push(`echo ""`);
@@ -3569,12 +3645,12 @@ ${selectedSkillNames.length ? selectedSkillNames.join('\n') : '- _(No skills ins
         vps.push(`echo "Commands:"`);
         vps.push(`echo "  pm2 status            # Status gateway"`);
         vps.push(`echo "  pm2 logs openclaw-multibot"`);
-      } else {
-        appendShWriteCommands(vps, botFiles(0));
-        if (is9Router) {
-          vps.push('PORT=20128 HOSTNAME=0.0.0.0 pm2 start "$(npm root -g)/9router/app/server.js" --name openclaw-9router --interpreter "$(command -v node)"');
-          vps.push('pm2 start --name openclaw-9router-sync -- sh -c "node ./.openclaw/9router-smart-route-sync.js"');
-        }
+      } else {
+        appendShWriteCommands(vps, botFiles(0));
+        if (is9Router) {
+          vps.push('PORT=20128 HOSTNAME=0.0.0.0 pm2 start "$(npm root -g)/9router/app/server.js" --name openclaw-9router --interpreter "$(command -v node)"');
+          vps.push('pm2 start --name openclaw-9router-sync -- sh -c "node ./.openclaw/9router-smart-route-sync.js"');
+        }
         vps.push('pm2 start --name openclaw -- sh -c "openclaw gateway run"');
         vps.push('pm2 save && pm2 startup');
         vps.push('echo "Bot dang chay! Xem log: pm2 logs openclaw"');

package/style.css

@@ -788,7 +788,7 @@ body::after {
 /* ============ Plugin Grid ============ */
 .plugin-grid {
   display: grid;
-  grid-template-columns: repeat(4, 1fr);
+  grid-template-columns: repeat(3, 1fr);
   gap: 12px;
 }
 

package/tests/smoke-cli-logic.mjs

@@ -218,7 +218,7 @@ checks.push(() => expectMatch(
 
 checks.push(() => expectMatch(
   cli,
-  /channelKey === 'zalo-personal'\) \{\s*botConfig\.channels\['zalouser'\] = \{\s*enabled: true,\s*dmPolicy: 'pairing',\s*autoReply: true/s,
+  /channelKey === 'zalo-personal'\) \{\s*botConfig\.channels\['zalouser'\] = \{\s*enabled: true,\s*dmPolicy: 'open',\s*autoReply: true/s,
   'CLI must configure Zalo Personal under channels.zalouser'
 ));