create-openclaw-bot 5.1.11 → 5.1.13

package/setup.js

@@ -24,7 +24,7 @@
   };
 
   // ========== State ==========
-  const state = {
+  const state = {
     currentStep: 1,
     totalSteps: 5,
     channel: null,
@@ -47,21 +47,21 @@
       apiKey: '',
       projectPath: '',
     },
-  };
-
-  function getGatewayAllowedOrigins(port) {
-    const normalizedPort = Number(port) || 18791;
-    const origins = new Set([
-      `http://localhost:${normalizedPort}`,
-      `http://127.0.0.1:${normalizedPort}`,
-      `http://0.0.0.0:${normalizedPort}`,
-    ]);
-    const currentHost = (window.location && window.location.hostname) ? window.location.hostname.trim() : '';
-    if (currentHost) {
-      origins.add(`http://${currentHost}:${normalizedPort}`);
-    }
-    return Array.from(origins);
-  }
+  };
+
+  function getGatewayAllowedOrigins(port) {
+    const normalizedPort = Number(port) || 18791;
+    const origins = new Set([
+      `http://localhost:${normalizedPort}`,
+      `http://127.0.0.1:${normalizedPort}`,
+      `http://0.0.0.0:${normalizedPort}`,
+    ]);
+    const currentHost = (window.location && window.location.hostname) ? window.location.hostname.trim() : '';
+    if (currentHost) {
+      origins.add(`http://${currentHost}:${normalizedPort}`);
+    }
+    return Array.from(origins);
+  }
 
 
   // ========== AI Providers & Models ==========
@@ -161,6 +161,14 @@
 
   // ========== Available Plugins (npm packages — runtime/channel extensions) ==========
   const PLUGINS = [
+    {
+      id: 'telegram-multibot-relay',
+      name: 'Telegram Multi-Bot Relay',
+      icon: '🤝',
+      descVi: 'Điều phối nhiều bot Telegram trong cùng group — tự động khi chọn nhiều bot', descEn: 'Coordinate multiple Telegram bots in one group — auto-selected with multi-bot',
+      package: 'telegram-multibot-relay',
+      hidden: true, // hidden in UI, auto-selected programmatically
+    },
     {
       id: 'voice-call',
       name: 'Voice Call',
@@ -193,7 +201,6 @@
 
   // ========== Available Skills (ClawHub registry — agent capabilities) ==========
   const SKILLS = [
-    // Web Search removed — OpenClaw has native search built-in (no Tavily key needed)
     {
       id: 'browser',
       name: 'Browser Automation ⭐(Khuyên dùng)',
@@ -227,7 +234,7 @@
       id: 'image-gen',
       name: 'Image Generation',
       icon: '🎨',
-      descVi: 'Tạo ảnh bằng AI (DALL·E, Flux...)', descEn: 'Generate images using AI (DALL-E, Flux...)',
+      descVi: 'Tạo ảnh bằng AI (DALL·E, Flux, Midjourney...)', descEn: 'Generate images via AI (DALL-E, Flux, Midjourney...)',
       slug: 'image-gen',
       noteVi: 'Dùng chung OPENAI_API_KEY (DALL-E) hoặc thêm FLUX_API_KEY', noteEn: 'Uses OPENAI_API_KEY (DALL-E) or FLUX_API_KEY',
       envVars: ['# FLUX_API_KEY=<your_flux_key>  # chỉ cần nếu dùng Flux'],
@@ -243,11 +250,36 @@
       id: 'email',
       name: 'Email Assistant',
       icon: '📧',
-      descVi: 'Quản lý, soạn, tóm tắt email', descEn: 'Manage, compose, summarize emails',
+      descVi: 'Quản lý, soạn, tóm tắt email (Gmail, Outlook...)', descEn: 'Manage, compose, summarize emails (Gmail, Outlook...)',
       slug: 'email-assistant',
       noteVi: 'Cần cấu hình SMTP trong .env', noteEn: 'Requires SMTP configuration in .env',
       envVars: ['SMTP_HOST=smtp.gmail.com', 'SMTP_PORT=587', 'SMTP_USER=<your_email>', 'SMTP_PASS=<your_app_password>'],
     },
+    {
+      id: 'web-search',
+      name: 'Web Search',
+      icon: '🔍',
+      descVi: 'Tìm kiếm web thời gian thực (DuckDuckGo) — không cần API key', descEn: 'Real-time web search (DuckDuckGo) — no API key needed',
+      slug: 'web-search',
+    },
+    {
+      id: 'notion',
+      name: 'Notion',
+      icon: '📓',
+      descVi: 'Tạo, chỉnh sửa trang và database Notion', descEn: 'Create and edit Notion pages and databases',
+      slug: 'notion',
+      noteVi: 'Cần Notion Integration Token', noteEn: 'Requires Notion Integration Token',
+      envVars: ['NOTION_API_KEY=<your_notion_integration_token>'],
+    },
+    {
+      id: 'slack',
+      name: 'Slack',
+      icon: '🗨️',
+      descVi: 'Gửi tin, react, ghim tin nhắn trong Slack', descEn: 'Send messages, react, pin items in Slack',
+      slug: 'slack',
+      noteVi: 'Cần Slack Bot Token', noteEn: 'Requires Slack Bot Token',
+      envVars: ['SLACK_BOT_TOKEN=<your_slack_bot_token>'],
+    },
   ];
 
   // ========== Channel definitions ==========
@@ -530,6 +562,24 @@
       state.bots.push({ name: '', slashCmd: '', desc: '', provider: 'google', model: 'google/gemini-2.5-flash', token: '', apiKey: '' });
     }
 
+    // Auto-select telegram-multibot-relay plugin when multi-bot, deselect when single
+    const relayId = 'telegram-multibot-relay';
+    if (count > 1) {
+      if (!state.config.plugins.includes(relayId)) {
+        state.config.plugins.push(relayId);
+      }
+    } else {
+      state.config.plugins = state.config.plugins.filter(p => p !== relayId);
+    }
+    // Sync relay card checkbox if already rendered
+    const relayCard = document.querySelector(`.plugin-card[data-plugin="${relayId}"]`);
+    if (relayCard) {
+      const isSelected = count > 1;
+      relayCard.classList.toggle('plugin-card--selected', isSelected);
+      const cb = relayCard.querySelector('input[type="checkbox"]');
+      if (cb) cb.checked = isSelected;
+    }
+
     // Show/hide group option for 2+ bots
     const groupOpt = document.getElementById('multibot-group-option');
     if (groupOpt) groupOpt.style.display = count > 1 ? '' : 'none';
@@ -606,10 +656,12 @@
       if (labelEl) labelEl.style.display = 'none';
       if (slashGroup) slashGroup.style.display = 'none';
       
-      // Update fields
-      const bot = state.bots[0] || { name: 'Bot 1', desc: '', persona: '', slashCmd: '' };
-      document.getElementById('cfg-bot-tab-name').value = bot.name || '';
-      document.getElementById('cfg-bot-tab-desc').value = bot.desc || '';
+      // Restore single-bot fields — fall back to state.config.botName so Next button
+      // is never falsely disabled just because state.bots[0].name is empty yet.
+      const bot = state.bots[0] || { name: '', desc: '', persona: '', slashCmd: '' };
+      const resolvedName = bot.name || state.config.botName || '';
+      document.getElementById('cfg-bot-tab-name').value = resolvedName;
+      document.getElementById('cfg-bot-tab-desc').value = bot.desc || state.config.description || '';
       document.getElementById('cfg-bot-tab-persona').value = bot.persona || '';
       return;
     }
@@ -640,9 +692,11 @@
     const nameEl = document.getElementById('cfg-bot-tab-name');
     const slashEl = document.getElementById('cfg-bot-tab-slash');
     const descEl = document.getElementById('cfg-bot-tab-desc');
+    const personaEl = document.getElementById('cfg-bot-tab-persona');
     if (nameEl) nameEl.value = bot.name || '';
     if (slashEl) slashEl.value = bot.slashCmd || '';
     if (descEl) descEl.value = bot.desc || '';
+    if (personaEl) personaEl.value = bot.persona || '';
 
     // Also sync global config fields from active bot (provider/model carry over)
     if (bot.provider) {
@@ -683,9 +737,11 @@
     const nameEl = document.getElementById('cfg-bot-tab-name');
     const slashEl = document.getElementById('cfg-bot-tab-slash');
     const descEl = document.getElementById('cfg-bot-tab-desc');
+    const personaEl = document.getElementById('cfg-bot-tab-persona');
     if (nameEl) bot.name = nameEl.value;
     if (slashEl) bot.slashCmd = slashEl.value;
     if (descEl) bot.desc = descEl.value;
+    if (personaEl) bot.persona = personaEl.value;
   }
 
   window.__saveBotTabName = function(val) {
@@ -711,6 +767,12 @@
     }
   };
 
+  window.__saveBotTabPersona = function(val) {
+    if (state.bots[state.activeBotIndex]) {
+      state.bots[state.activeBotIndex].persona = val;
+    }
+  };
+
 
 
   // ========== Step 1: Deploy Mode + OS ==========
@@ -922,19 +984,35 @@
       // Step 1 (env): always valid
       // Step 2 (channel): require selection
       if (state.currentStep === 2 && !state.channel) isDisabled = true;
-      // Step 3 (bot config): require bot name
+      // Step 3 (bot config): require at least one bot name
       if (state.currentStep === 3) {
-        const nameVal = document.getElementById('cfg-name')?.value?.trim();
-        const userInfoVal = document.getElementById('cfg-user-info')?.value?.trim();
-        if (!nameVal || !userInfoVal) isDisabled = true;
+        if (state.botCount > 1) {
+          // Multi-bot: require name for the currently active bot tab
+          // Fallback to state.bots to handle re-render cases where DOM may not yet have the value
+          const activeTab = state._activeBotTab || 0;
+          const tabNameVal = document.getElementById('cfg-bot-tab-name')?.value?.trim()
+            || state.bots[activeTab]?.name?.trim();
+          if (!tabNameVal) isDisabled = true;
+        } else {
+          // Single bot: require cfg-name or the shared tab name field
+          // Fallback to state.config.botName for cases where the DOM field was cleared on re-render
+          const nameVal = document.getElementById('cfg-name')?.value?.trim()
+            || document.getElementById('cfg-bot-tab-name')?.value?.trim()
+            || state.config.botName?.trim();
+          if (!nameVal) isDisabled = true;
+        }
       }
       // Step 4 (api keys): require token/key
       if (state.currentStep === 4) {
-        const botTokenEl = document.getElementById('key-bot-token');
         const apiKeyEl = document.getElementById('key-api-key');
         const provider = PROVIDERS[state.config.provider];
-        if ((state.channel === 'telegram' || state.channel === 'zalo-bot') && botTokenEl) {
-          if (!botTokenEl.value.trim()) isDisabled = true;
+        if (state.channel === 'telegram' && state.botCount > 1) {
+          // Multi-bot Telegram: require at least the first bot's token
+          const firstTokenEl = document.getElementById('key-bot-token-0');
+          if (!firstTokenEl || !firstTokenEl.value.trim()) isDisabled = true;
+        } else if (state.channel === 'telegram' || state.channel === 'zalo-bot') {
+          const botTokenEl = document.getElementById('key-bot-token');
+          if (!botTokenEl || !botTokenEl.value.trim()) isDisabled = true;
         }
         if (provider && !provider.isProxy && !provider.isLocal && provider.envKey && apiKeyEl) {
           if (!apiKeyEl.value.trim()) isDisabled = true;
@@ -1010,9 +1088,11 @@
     }
 
     // Plugins grid (npm packages — extra channels/extensions)
+    // Filter out hidden plugins from user-facing grid
+    const visiblePlugins = PLUGINS.filter((p) => !p.hidden);
     const pluginGrid = document.getElementById('extra-plugin-grid');
     if (pluginGrid) {
-      pluginGrid.innerHTML = PLUGINS.map((p) => `
+      pluginGrid.innerHTML = visiblePlugins.map((p) => `
         <label class="plugin-card" data-plugin="${p.id}">
           <input type="checkbox" class="plugin-checkbox" value="${p.id}" onchange="window.__togglePlugin('${p.id}', this.checked)">
           <div class="plugin-card__icon">${p.icon}</div>
@@ -1065,6 +1145,17 @@
           prompt.value = DEFAULT_PROMPTS[lang].replace('{BOT_NAME}', nameVal).replace('{BOT_DESC}', descVal);
           autoExpand(prompt);
         }
+        // Sync single-bot name to state + re-check Next button
+        if (e.target.id === 'cfg-name') {
+          state.config.botName = e.target.value;
+          if (state.bots[0]) state.bots[0].name = e.target.value;
+        }
+        updateNavButtons();
+      }
+      // Also re-check Next when typing directly in the tab name field
+      if (e.target.id === 'cfg-bot-tab-name') {
+        if (state.bots[state.activeBotIndex]) state.bots[state.activeBotIndex].name = e.target.value;
+        updateNavButtons();
       }
       if (e.target.id === 'cfg-prompt') {
         e.target.dataset.userEdited = 'true';
@@ -1164,6 +1255,12 @@
     state.config.systemPrompt = document.getElementById('cfg-prompt')?.value || state.config.systemPrompt || DEFAULT_PROMPTS['vi'];
     state.config.userInfo = document.getElementById('cfg-user-info')?.value?.trim() || state.config.userInfo || '';
     state.config.securityRules = document.getElementById('cfg-security')?.value || state.config.securityRules || DEFAULT_SECURITY_RULES['vi'];
+    // Also save bot-tab-name → bots[0].name so both state locations stay in sync
+    const tabName = document.getElementById('cfg-bot-tab-name')?.value?.trim();
+    if (tabName && state.bots[0]) state.bots[0].name = tabName;
+    else if (state.config.botName && state.bots[0] && !state.bots[0].name) {
+      state.bots[0].name = state.config.botName;
+    }
   }
 
   // Save Step 4 credential inputs to state (persists across Back navigation)
@@ -1591,15 +1688,15 @@ Write-Host "Chrome se tu dong bat Debug Mode moi khi ban dang nhap Windows (dela
       commands: { native: 'auto', nativeSkills: 'auto', restart: true, ownerDisplay: 'raw' },
       channels: ch.channelConfig,
       tools: { profile: 'full', exec: { host: 'gateway', security: 'full', ask: 'off' } },
-      gateway: {
-        port: 18791,
-        mode: 'local',
-        bind: '0.0.0.0',
-        controlUi: {
-          allowedOrigins: getGatewayAllowedOrigins(18791),
-        },
-        auth: { mode: 'token', token: crypto.randomUUID().replace(/-/g, '') },
-      },
+      gateway: {
+        port: 18791,
+        mode: 'local',
+        bind: '0.0.0.0',
+        controlUi: {
+          allowedOrigins: getGatewayAllowedOrigins(18791),
+        },
+        auth: { mode: 'token', token: crypto.randomUUID().replace(/-/g, '') },
+      },
     };
 
     // 9Router: add proxy endpoint config under models.providers
@@ -1740,6 +1837,17 @@ Write-Host "Chrome se tu dong bat Debug Mode moi khi ban dang nhap Windows (dela
           'telegram-multibot-relay': { enabled: true },
         },
       };
+    } else if (state.config.plugins.length > 0) {
+      // Non-multibot: write selected visible plugins into openclaw.json
+      const pluginEntries = {};
+      state.config.plugins.forEach((pid) => {
+        const plugin = PLUGINS.find((p) => p.id === pid);
+        if (!plugin || plugin.hidden) return;
+        pluginEntries[plugin.package || pid] = { enabled: true };
+      });
+      if (Object.keys(pluginEntries).length > 0) {
+        clawConfig.plugins = { entries: pluginEntries };
+      }
     }
 
     setOutput('out-openclaw-json', JSON.stringify(clawConfig, null, 2));
@@ -1775,19 +1883,19 @@ model:
     // 3. Dockerfile
     const allPlugins = [];
     if (ch.pluginInstall) allPlugins.push(ch.pluginInstall);
-    const encodeBase64Utf8 = (value) => btoa(String.fromCharCode(...new TextEncoder().encode(String(value))));
-    const indentBlock = (text, spaces) => {
-      const prefix = ' '.repeat(spaces);
-      return String(text).split('\n').map((line) => `${prefix}${line}`).join('\n');
-    };
-    const build9RouterComposeEntrypointScript = (syncScriptBase64) => [
-      'npm install -g 9router',
-      `node -e "require('fs').writeFileSync('/tmp/sync.js',Buffer.from('${syncScriptBase64}','base64').toString())"`,
-      'node /tmp/sync.js > /tmp/sync.log 2>&1 &',
-      'exec 9router -n -l -H 0.0.0.0 -p 20128 --skip-update'
-    ].join('\n');
-
-    state.config.plugins.forEach((pid) => {
+    const encodeBase64Utf8 = (value) => btoa(String.fromCharCode(...new TextEncoder().encode(String(value))));
+    const indentBlock = (text, spaces) => {
+      const prefix = ' '.repeat(spaces);
+      return String(text).split('\n').map((line) => `${prefix}${line}`).join('\n');
+    };
+    const build9RouterComposeEntrypointScript = (syncScriptBase64) => [
+      'npm install -g 9router',
+      `node -e "require('fs').writeFileSync('/tmp/sync.js',Buffer.from('${syncScriptBase64}','base64').toString())"`,
+      'node /tmp/sync.js > /tmp/sync.log 2>&1 &',
+      'exec 9router -n -l -H 0.0.0.0 -p 20128 --skip-update'
+    ].join('\n');
+
+    state.config.plugins.forEach((pid) => {
       const plug = PLUGINS.find((p) => p.id === pid);
       if (plug) allPlugins.push(plug.package);
     });
@@ -1832,7 +1940,7 @@ model:
       ? 'socat TCP-LISTEN:9222,fork,reuseaddr TCP:host.docker.internal:9222 & '
       : '';
     // Patch config on every startup to keep gateway settings stable
-    const patchCmd = `node -e \\"const fs=require('fs'),os=require('os'),p='/root/.openclaw/openclaw.json';if(fs.existsSync(p)){const c=JSON.parse(fs.readFileSync(p,'utf8'));const a=new Set(['http://localhost:18791','http://127.0.0.1:18791','http://0.0.0.0:18791']);for(const entries of Object.values(os.networkInterfaces()||{})){for(const entry of entries||[]){if(!entry||entry.internal||entry.family!=='IPv4'||!entry.address)continue;a.add(\\\`http://\\\${entry.address}:18791\\\`);}}c.tools=Object.assign({},c.tools,{profile:'full',exec:{host:'gateway',security:'full',ask:'off'}});c.gateway=Object.assign({},c.gateway,{port:18791,bind:'custom',customBindHost:'0.0.0.0',controlUi:Object.assign({},c.gateway?.controlUi,{allowedOrigins:Array.from(a)})});fs.writeFileSync(p,JSON.stringify(c,null,2));}\\" && `;
+    const patchCmd = `node -e \\"const fs=require('fs'),os=require('os'),p='/root/.openclaw/openclaw.json';if(fs.existsSync(p)){const c=JSON.parse(fs.readFileSync(p,'utf8'));const a=new Set(['http://localhost:18791','http://127.0.0.1:18791','http://0.0.0.0:18791']);for(const entries of Object.values(os.networkInterfaces()||{})){for(const entry of entries||[]){if(!entry||entry.internal||entry.family!=='IPv4'||!entry.address)continue;a.add(\\\`http://\\\${entry.address}:18791\\\`);}}c.tools=Object.assign({},c.tools,{profile:'full',exec:{host:'gateway',security:'full',ask:'off'}});c.gateway=Object.assign({},c.gateway,{port:18791,bind:'custom',customBindHost:'0.0.0.0',controlUi:Object.assign({},c.gateway?.controlUi,{allowedOrigins:Array.from(a)})});fs.writeFileSync(p,JSON.stringify(c,null,2));}\\" && `;
     // Auto-approve device pairing after gateway starts (required since v2026.3.x)
     const autoApproveCmd = '(while true; do sleep 5; openclaw devices approve --latest 2>/dev/null || true; done) & ';
     const finalCmd = `CMD sh -c "${pluginInstallCmd}${patchCmd}${browserPrefix}${autoApproveCmd}${gatewayCmd}"`;
@@ -1844,7 +1952,7 @@ RUN apt-get update && apt-get install -y git curl${browserAptExtra} && rm -rf /v
 
 ARG CACHEBUST=${Date.now()}
 RUN npm install -g openclaw@latest${skillLines}${browserInstallLines}
-RUN node -e "const fs=require('fs');const path=require('path');const dir='/usr/local/lib/node_modules/openclaw/dist';const from='\\t\\t\\t\\t\\tonAgentRunStart: (runId) => {';const to='\\t\\t\\t\\t\\ttimeoutOverrideSeconds: Math.max(1, Math.ceil(timeoutMs / 1e3)),\\n\\t\\t\\t\\t\\tonAgentRunStart: (runId) => {';const files=fs.readdirSync(dir).filter(n=>/\\.js$/.test(n));let patched=0;for(const file of files){const p=path.join(dir,file);let s='';try{s=fs.readFileSync(p,'utf8');}catch{continue;}if(s.includes(to)||!s.includes(from))continue;s=s.replace(from,to);fs.writeFileSync(p,s);patched++;}if(!patched){process.exit(0);}"
+RUN node -e "const fs=require('fs');const path=require('path');const dir='/usr/local/lib/node_modules/openclaw/dist';const from='\\t\\t\\t\\t\\tonAgentRunStart: (runId) => {';const to='\\t\\t\\t\\t\\ttimeoutOverrideSeconds: Math.max(1, Math.ceil(timeoutMs / 1e3)),\\n\\t\\t\\t\\t\\tonAgentRunStart: (runId) => {';const files=fs.readdirSync(dir).filter(n=>/\\.js$/.test(n));let patched=0;for(const file of files){const p=path.join(dir,file);let s='';try{s=fs.readFileSync(p,'utf8');}catch{continue;}if(s.includes(to)||!s.includes(from))continue;s=s.replace(from,to);fs.writeFileSync(p,s);patched++;}if(!patched){process.exit(0);}"
 WORKDIR /root/.openclaw
 
 EXPOSE 18791
@@ -1863,7 +1971,7 @@ ${finalCmd}`;
     // Background loop inside 9Router container every 30s.
     // Read providerConnections directly from db.json so smart-route survives
     // dashboard auth/response changes in newer 9Router builds.
-    const syncScript = `const fs=require('fs');const INTERVAL=30000;const p='/root/.9router/db.json';
+    const syncScript = `const fs=require('fs');const INTERVAL=30000;const p='/root/.9router/db.json';
 const PM={codex:['cx/gpt-5.4','cx/gpt-5.3-codex','cx/gpt-5.3-codex-high','cx/gpt-5.2-codex','cx/gpt-5.2','cx/gpt-5.1-codex-max','cx/gpt-5.1-codex','cx/gpt-5.1','cx/gpt-5-codex'],'claude-code':['cc/claude-opus-4-6','cc/claude-sonnet-4-6','cc/claude-opus-4-5-20251101','cc/claude-sonnet-4-5-20250929','cc/claude-haiku-4-5-20251001'],github:['gh/gpt-5.4','gh/gpt-5.3-codex','gh/gpt-5.2-codex','gh/gpt-5.2','gh/gpt-5.1-codex-max','gh/gpt-5.1-codex','gh/gpt-5.1','gh/gpt-5','gh/gpt-4.1','gh/gpt-4o','gh/claude-opus-4.6','gh/claude-sonnet-4.6','gh/claude-sonnet-4.5','gh/claude-opus-4.5','gh/claude-haiku-4.5','gh/gemini-3-pro-preview','gh/gemini-3-flash-preview','gh/gemini-2.5-pro'],cursor:['cu/default','cu/claude-4.6-opus-max','cu/claude-4.5-opus-high-thinking','cu/claude-4.5-sonnet-thinking','cu/claude-4.5-sonnet','cu/gpt-5.3-codex','cu/gpt-5.2-codex','cu/gemini-3-flash-preview'],kilo:['kc/anthropic/claude-sonnet-4-20250514','kc/anthropic/claude-opus-4-20250514','kc/google/gemini-2.5-pro','kc/google/gemini-2.5-flash','kc/openai/gpt-4.1','kc/deepseek/deepseek-chat'],cline:['cl/anthropic/claude-sonnet-4.6','cl/anthropic/claude-opus-4.6','cl/openai/gpt-5.3-codex','cl/openai/gpt-5.4','cl/google/gemini-3.1-pro-preview'],'gemini-cli':['gc/gemini-3-flash-preview','gc/gemini-3-pro-preview'],iflow:['if/qwen3-coder-plus','if/kimi-k2','if/kimi-k2-thinking','if/glm-4.7','if/deepseek-r1','if/deepseek-v3.2','if/deepseek-v3','if/qwen3-max','if/qwen3-235b','if/iflow-rome-30ba3b'],qwen:['qw/qwen3-coder-plus','qw/qwen3-coder-flash','qw/vision-model','qw/coder-model'],kiro:['kr/claude-sonnet-4.5','kr/claude-haiku-4.5','kr/deepseek-3.2','kr/deepseek-3.1','kr/qwen3-coder-next'],ollama:['ollama/gemma4:e2b','ollama/gemma4:e4b','ollama/gemma4:26b','ollama/gemma4:31b','ollama/qwen3.5','ollama/kimi-k2.5','ollama/glm-5','ollama/glm-4.7-flash','ollama/minimax-m2.5','ollama/gpt-oss:120b'],'kimi-coding':['kmc/kimi-k2.5','kmc/kimi-k2.5-thinking','kmc/kimi-latest'],glm:['glm/glm-5.1','glm/glm-5','glm/glm-4.7'],'glm-cn':['glm/glm-5.1','glm/glm-5','glm/glm-4.7'],minimax:['minimax/MiniMax-M2.7','minimax/MiniMax-M2.5','minimax/MiniMax-M2.1'],kimi:['kimi/kimi-k2.5','kimi/kimi-k2.5-thinking','kimi/kimi-latest'],deepseek:['deepseek/deepseek-chat','deepseek/deepseek-reasoner'],xai:['xai/grok-4','xai/grok-4-fast-reasoning','xai/grok-code-fast-1'],mistral:['mistral/mistral-large-latest','mistral/codestral-latest'],groq:['groq/llama-3.3-70b-versatile','groq/openai/gpt-oss-120b'],cerebras:['cerebras/gpt-oss-120b'],alicode:['alicode/qwen3.5-plus','alicode/qwen3-coder-plus'],openai:['openai/gpt-4o','openai/gpt-4.1'],anthropic:['anthropic/claude-sonnet-4','anthropic/claude-haiku-3.5'],gemini:['gemini/gemini-2.5-flash','gemini/gemini-2.5-pro']};
 console.log('[sync-combo] 9Router sync loop started...');
 const sync = async () => {
@@ -1913,11 +2021,11 @@ const sync = async () => {
       console.log('[sync-combo] Created smart-route: ' + c.models.length + ' models');
     }
   } catch (e) { }
-};
-setTimeout(sync, 5000);
-setInterval(sync, INTERVAL);`;
-    const syncScriptBase64 = encodeBase64Utf8(syncScript);
-    const docker9RouterEntrypointScript = build9RouterComposeEntrypointScript(syncScriptBase64);
+};
+setTimeout(sync, 5000);
+setInterval(sync, INTERVAL);`;
+    const syncScriptBase64 = encodeBase64Utf8(syncScript);
+    const docker9RouterEntrypointScript = build9RouterComposeEntrypointScript(syncScriptBase64);
 
     let compose;
     if (isMultiBotWizard) {
@@ -1946,14 +2054,14 @@ ${dependsOn}${extraHosts}    volumes:
     image: node:22-slim
     container_name: 9router-multibot
     restart: always
-    entrypoint:
-      - /bin/sh
-      - -c
-      - |
-${indentBlock(docker9RouterEntrypointScript, 8)}
-    environment:
-      - PORT=20128
-      - HOSTNAME=0.0.0.0
+    entrypoint:
+      - /bin/sh
+      - -c
+      - |
+${indentBlock(docker9RouterEntrypointScript, 8)}
+    environment:
+      - PORT=20128
+      - HOSTNAME=0.0.0.0
       - CI=true
     volumes:
       - 9router-data:/root/.9router
@@ -2039,14 +2147,14 @@ ${extraHostsBlock}
     image: node:22-slim
     container_name: 9router
     restart: always
-    entrypoint:
-      - /bin/sh
-      - -c
-      - |
-${indentBlock(docker9RouterEntrypointScript, 8)}
-    environment:
-      - PORT=20128
-      - HOSTNAME=0.0.0.0
+    entrypoint:
+      - /bin/sh
+      - -c
+      - |
+${indentBlock(docker9RouterEntrypointScript, 8)}
+    environment:
+      - PORT=20128
+      - HOSTNAME=0.0.0.0
       - CI=true
     volumes:
       - 9router-data:/root/.9router
@@ -2885,17 +2993,17 @@ const sync=()=>{try{let db={};try{db=JSON.parse(fs.readFileSync(p,'utf8'));}catc
     // ─── Shared initializer (provider install) ───────────────────────────────
     function providerLines(arr, shell) {
       if (is9Router) {
-        if (shell === 'bat') {
-          arr.push('npm install -g 9router');
-          arr.push('start "9Router" cmd /k "9router -n -l -H 0.0.0.0 -p 20128 --skip-update"');
-          arr.push('start "9Router Smart Route Sync" cmd /k "node .\\.openclaw\\9router-smart-route-sync.js"');
-          arr.push('timeout /t 5 /nobreak >nul');
-        } else {
-          arr.push('npm install -g 9router');
-          arr.push('nohup env PORT=20128 HOSTNAME=0.0.0.0 node "$(npm root -g)/9router/app/server.js" >/tmp/9router.log 2>&1 &');
-          arr.push('nohup node ./.openclaw/9router-smart-route-sync.js >/tmp/9router-sync.log 2>&1 &');
-          arr.push('sleep 3');
-        }
+        if (shell === 'bat') {
+          arr.push('npm install -g 9router');
+          arr.push('start "9Router" cmd /k "9router -n -l -H 0.0.0.0 -p 20128 --skip-update"');
+          arr.push('start "9Router Smart Route Sync" cmd /k "node .\\.openclaw\\9router-smart-route-sync.js"');
+          arr.push('timeout /t 5 /nobreak >nul');
+        } else {
+          arr.push('npm install -g 9router');
+          arr.push('nohup env PORT=20128 HOSTNAME=0.0.0.0 node "$(npm root -g)/9router/app/server.js" >/tmp/9router.log 2>&1 &');
+          arr.push('nohup node ./.openclaw/9router-smart-route-sync.js >/tmp/9router-sync.log 2>&1 &');
+          arr.push('sleep 3');
+        }
       } else if (isOllama) {
         if (shell === 'bat') {
           arr.push('where ollama >nul 2>&1 || (powershell -Command "Invoke-WebRequest -Uri https://ollama.com/download/OllamaSetup.exe -OutFile OllamaSetup.exe" && OllamaSetup.exe && del OllamaSetup.exe)');
@@ -3053,15 +3161,15 @@ const sync=()=>{try{let db={};try{db=JSON.parse(fs.readFileSync(p,'utf8'));}catc
             'telegram-multibot-relay': { enabled: true },
           },
         },
-        gateway: {
-          port: 18791,
-          mode: 'local',
-          bind: '0.0.0.0',
-          controlUi: {
-            allowedOrigins: getGatewayAllowedOrigins(18791),
-          },
-          auth: { mode: 'token', token: crypto.randomUUID().replace(/-/g, '') },
-        },
+        gateway: {
+          port: 18791,
+          mode: 'local',
+          bind: '0.0.0.0',
+          controlUi: {
+            allowedOrigins: getGatewayAllowedOrigins(18791),
+          },
+          auth: { mode: 'token', token: crypto.randomUUID().replace(/-/g, '') },
+        },
       };
       return JSON.stringify(cfg, null, 2);
     }
@@ -3103,9 +3211,11 @@ const sync=()=>{try{let db={};try{db=JSON.parse(fs.readFileSync(p,'utf8'));}catc
         files[`.openclaw/${meta.workspaceDir}/SOUL.md`] = isVi
           ? `# Tinh cach\n\n${meta.persona || 'Huu ich that su, gan gui, ngan gon.'}`
           : `# Soul\n\n${meta.persona || 'Helpful, concise, and practical.'}`;
+        const _secRulesForBot = state.config.securityRules || DEFAULT_SECURITY_RULES[isVi ? 'vi' : 'en'];
         files[`.openclaw/${meta.workspaceDir}/AGENTS.md`] = (isVi
-          ? `# Huong dan van hanh\n\n## Vai tro\nBan la **${meta.name}**, ${meta.desc.toLowerCase()}.\n\n## Khi nao nen tra loi\n- Trong group, xem user dang goi ban neu tin nhan co alias cua ban: ${ownAliases.map((alias) => `\`${alias}\``).join(', ')}\n- Neu user tag username Telegram cua ban thi luon tra loi.\n- Gateway se tu dong tha ack \`👍\` khi nhan message; khong can tu tha them neu ack da hien.\n- Neu user dang goi ro bot khac ${relayTargetNames} thi khong cuop loi.\n\n## Phoi hop\n- Dung \`TEAM.md\` lam nguon su that.\n- Neu user bao ban hoi hoac xin y kien tu ${otherBots.length ? otherBots.map((peer) => `\`${peer.name}\``).join(', ') : '`bot khac`'} thi dung agent-to-agent noi bo ngay trong turn hien tai.\n- Neu ban la bot mo loi, chi gui 1 cau mo dau ngan roi handoff ngay. Khong tu noi thay bot dich tru khi handoff that bai ro rang.\n- Khi handoff, phai goi dung agent id ky thuat ${relayTargetIds}, khong dung ten hien thi.\n- Neu ban la bot dich nhan handoff, hay tra loi cong khai ngay trong cung Telegram chat/thread bang chinh account cua minh. Uu tien tra loi co \`[[reply_to_current]]\`; neu can, dung Telegram send/sendMessage action thay vi chi output thuong.\n- Khong bao user phai tag lai bot kia neu ban co the hoi noi bo duoc.`
-          : `# Operating Manual\n\n## Role\nYou are **${meta.name}**, ${meta.desc.toLowerCase()}.\n\n## When To Reply\n- In group chats, treat the message as addressed to you if it contains one of your aliases: ${ownAliases.map((alias) => `\`${alias}\``).join(', ')}\n- Always reply when your Telegram username is tagged.\n- The gateway auto-sends the \`👍\` ack reaction on inbound messages; do not duplicate it manually if it already appeared.\n- If the message is clearly calling another bot such as ${relayTargetNames}, do not hijack it.\n\n## Coordination\n- Use \`TEAM.md\` as the source of truth.\n- If the user asks you to consult ${otherBots.length ? otherBots.map((peer) => `\`${peer.name}\``).join(', ') : '`another bot`'}, use internal agent-to-agent handoff in the same turn.\n- If you are the caller bot, send only one short opener then hand off immediately. Do not speak for the target bot unless the handoff clearly fails.\n- When handing off, use the exact technical agent id ${relayTargetIds}, not the display name.\n- If you are the target bot receiving a handoff, publish the real answer into the same Telegram chat/thread from your own account. Prefer replying with \`[[reply_to_current]]\`; if needed, use the Telegram send/sendMessage action instead of plain assistant output.\n- Do not ask the user to tag the other bot again if you can consult internally.`);
+          ? `# Huong dan van hanh\n\n## Vai tro\nBan la **${meta.name}**, ${meta.desc.toLowerCase()}.\n\n## Khi nao nen tra loi\n- Trong group, xem user dang goi ban neu tin nhan co alias cua ban: ${ownAliases.map((alias) => `\`${alias}\``).join(', ')}\n- Neu user tag username Telegram cua ban thi luon tra loi.\n- Gateway se tu dong tha ack \`👍\` khi nhan message; khong can tu tha them neu ack da hien.\n- Neu user dang goi ro bot khac ${relayTargetNames} thi khong cuop loi.\n\n## Phoi hop\n- Dung \`TEAM.md\` lam nguon su that.\n- Neu user bao ban hoi hoac xin y kien tu ${otherBots.length ? otherBots.map((peer) => `\`${peer.name}\``).join(', ') : '`bot khac`'} thi dung agent-to-agent noi bo ngay trong turn hien tai.\n- Neu ban la bot mo loi, chi gui 1 cau mo dau ngan roi handoff ngay. Khong tu noi thay bot dich tru khi handoff that bai ro rang.\n- Khi handoff, phai goi dung agent id ky thuat ${relayTargetIds}, khong dung ten hien thi.\n- Neu ban la bot dich nhan handoff, hay tra loi cong khai ngay trong cung Telegram chat/thread bang chinh account cua minh. Uu tien tra loi co \`[[reply_to_current]]\`; neu can, dung Telegram send/sendMessage action thay vi chi output thuong.\n- Khong bao user phai tag lai bot kia neu ban co the hoi noi bo duoc.\n\n${_secRulesForBot}`
+          : `# Operating Manual\n\n## Role\nYou are **${meta.name}**, ${meta.desc.toLowerCase()}.\n\n## When To Reply\n- In group chats, treat the message as addressed to you if it contains one of your aliases: ${ownAliases.map((alias) => `\`${alias}\``).join(', ')}\n- Always reply when your Telegram username is tagged.\n- The gateway auto-sends the \`👍\` ack reaction on inbound messages; do not duplicate it manually if it already appeared.\n- If the message is clearly calling another bot such as ${relayTargetNames}, do not hijack it.\n\n## Coordination\n- Use \`TEAM.md\` as the source of truth.\n- If the user asks you to consult ${otherBots.length ? otherBots.map((peer) => `\`${peer.name}\``).join(', ') : '`another bot`'}, use internal agent-to-agent handoff in the same turn.\n- If you are the caller bot, send only one short opener then hand off immediately. Do not speak for the target bot unless the handoff clearly fails.\n- When handing off, use the exact technical agent id ${relayTargetIds}, not the display name.\n- If you are the target bot receiving a handoff, publish the real answer into the same Telegram chat/thread from your own account. Prefer replying with \`[[reply_to_current]]\`; if needed, use the Telegram send/sendMessage action instead of plain assistant output.\n- Do not ask the user to tag the other bot again if you can consult internally.\n\n${_secRulesForBot}`);
+
         files[`.openclaw/${meta.workspaceDir}/TEAM.md`] = teamMd;
         files[`.openclaw/${meta.workspaceDir}/RELAY.md`] = isVi
           ? `# Telegram Relay Playbook\n\n## Muc tieu\n- Cho phep bot mo loi goi bot dich noi bo, sau do bot dich tra loi cong khai bang chinh account cua minh.\n\n## Protocol\n1. Bot mo loi gui 1 cau ngan xac nhan se hoi bot dich.\n2. Bot mo loi handoff noi bo bang dung agent id trong \`TEAM.md\`.\n3. Bot dich tra loi cong khai trong cung chat/thread hien tai.\n4. Neu thay \`[[reply_to_current]]\` hoac Telegram send/sendMessage action kha dung, uu tien dung de bam dung message goc.\n5. Neu handoff that bai ro rang, chi bot mo loi moi duoc fallback tom tat.\n`
@@ -3169,15 +3279,15 @@ const sync=()=>{try{let db={};try{db=JSON.parse(fs.readFileSync(p,'utf8'));}catc
         },
         commands: { native: 'auto', nativeSkills: 'auto', restart: true },
         channels: channelConfig,
-        gateway: {
-          port: basePort,
-          mode: 'local',
-          bind: '0.0.0.0',
-          controlUi: {
-            allowedOrigins: getGatewayAllowedOrigins(basePort),
-          },
-          auth: { mode: 'token', token: crypto.randomUUID().replace(/-/g, '') },
-        },
+        gateway: {
+          port: basePort,
+          mode: 'local',
+          bind: '0.0.0.0',
+          controlUi: {
+            allowedOrigins: getGatewayAllowedOrigins(basePort),
+          },
+          auth: { mode: 'token', token: crypto.randomUUID().replace(/-/g, '') },
+        },
 
       };
       return JSON.stringify(cfg, null, 2);
@@ -3509,29 +3619,55 @@ ${selectedSkillNames.length ? selectedSkillNames.join('\n') : '- _(No skills ins
     } else if (state.nativeOs === 'linux') {
       const isDocker = state.deployMode === 'docker';
       scriptName = isDocker ? 'setup-openclaw-docker-macos.sh' : 'setup-openclaw-macos.sh';
-      const sh = [
-        '#!/usr/bin/env bash', 'set -e',
-        `echo "=== OpenClaw Setup — macOS${isDocker ? ' Docker' : ' Native'} ==="`,
-        'command -v node > /dev/null 2>&1 || { echo "ERROR: Node.js chua cai! https://nodejs.org"; exit 1; }',
-        'mkdir -p "$HOME/.local/bin"',
-        'npm config set prefix "$HOME/.local"',
-        'export PATH="$HOME/.local/bin:$PATH"',
-        'grep -Fqx \'export PATH="$HOME/.local/bin:$PATH"\' "$HOME/.zshrc" 2>/dev/null || echo \'export PATH="$HOME/.local/bin:$PATH"\' >> "$HOME/.zshrc"',
-        'grep -Fqx \'export PATH="$HOME/.local/bin:$PATH"\' "$HOME/.profile" 2>/dev/null || echo \'export PATH="$HOME/.local/bin:$PATH"\' >> "$HOME/.profile"',
-        'npm install -g openclaw@latest',
-      ];
-      providerLines(sh, 'sh');
-      if (pluginCmd) sh.push(pluginCmd);
 
-      if (isMultiBot) {
-        appendShWriteCommands(sh, sharedNativeFileMap());
-        sh.push('echo "Starting shared multi-bot gateway..."');
-        sh.push('openclaw gateway run');
-      } else {
+      if (isDocker) {
+        // ── macOS Docker mode: write files then docker compose up ──────────────
+        const sh = [
+          '#!/usr/bin/env bash', 'set -e',
+          'echo "=== OpenClaw Setup \u2014 macOS Docker ==="',
+          '# Check Docker Desktop is running',
+          'if ! docker info > /dev/null 2>&1; then',
+          '  echo "\u274c Docker Desktop chua chay! Mo Docker Desktop roi chay lai script nay."',
+          '  exit 1',
+          'fi',
+        ];
         appendShWriteCommands(sh, botFiles(0));
-        sh.push('openclaw gateway run');
+        sh.push('echo "Starting bot via Docker Compose..."');
+        sh.push('if docker compose version > /dev/null 2>&1; then COMPOSE="docker compose"; else COMPOSE="docker-compose"; fi');
+        sh.push('cd docker/openclaw');
+        sh.push('$COMPOSE up --detach --build');
+        sh.push('echo "\u2705 Bot dang chay via Docker. Xem log: docker logs -f openclaw-bot"');
+        scriptContent = sh.filter(Boolean).join('\n');
+      } else {
+        // ── macOS Native mode: same approach as Ubuntu but no PM2, no apt ────────
+        // Do NOT use 'npm config set prefix' on macOS — breaks Homebrew Node.
+        // Use export npm_config_prefix per-session + sudo fallback.
+        const sh = [
+          '#!/usr/bin/env bash', 'set -e',
+          'echo "=== OpenClaw Setup \u2014 macOS Native ==="',
+          'command -v node > /dev/null 2>&1 || { echo "ERROR: Node.js chua cai! https://nodejs.org"; exit 1; }',
+          '# User-local npm prefix (Homebrew-safe — no global npmrc mutation)',
+          'mkdir -p "$HOME/.local/bin"',
+          'export npm_config_prefix="$HOME/.local"',
+          'export PATH="$HOME/.local/bin:$PATH"',
+          'grep -Fqx \'export PATH="$HOME/.local/bin:$PATH"\' "$HOME/.zshrc" 2>/dev/null || echo \'export PATH="$HOME/.local/bin:$PATH"\' >> "$HOME/.zshrc"',
+          'grep -Fqx \'export PATH="$HOME/.local/bin:$PATH"\' "$HOME/.profile" 2>/dev/null || echo \'export PATH="$HOME/.local/bin:$PATH"\' >> "$HOME/.profile"',
+          '# Install openclaw (user-local first, sudo fallback)',
+          'npm install -g openclaw@latest || sudo npm install -g openclaw@latest',
+        ];
+        providerLines(sh, 'sh');
+        if (pluginCmd) sh.push(pluginCmd);
+
+        if (isMultiBot) {
+          appendShWriteCommands(sh, sharedNativeFileMap());
+          sh.push('echo "Starting shared multi-bot gateway..."');
+          sh.push('openclaw gateway run');
+        } else {
+          appendShWriteCommands(sh, botFiles(0));
+          sh.push('openclaw gateway run');
+        }
+        scriptContent = sh.filter(Boolean).join('\n');
       }
-      scriptContent = sh.filter(Boolean).join('\n');
 
     // ─── VPS/Ubuntu PM2 .SH ──────────────────────────────────────────────────
     } else if (state.nativeOs === 'vps') {
@@ -3556,12 +3692,12 @@ ${selectedSkillNames.length ? selectedSkillNames.join('\n') : '- _(No skills ins
 
       if (isMultiBot) {
         vps.push('echo "--- Creating shared multi-agent runtime ---"');
-        appendShWriteCommands(vps, sharedNativeFileMap());
-        vps.push('echo "--- Starting shared gateway via PM2 ---"');
-        if (is9Router) {
-          vps.push('PORT=20128 HOSTNAME=0.0.0.0 pm2 start "$(npm root -g)/9router/app/server.js" --name openclaw-multibot-9router --interpreter "$(command -v node)"');
-          vps.push('pm2 start --name openclaw-multibot-9router-sync -- sh -c "node ./.openclaw/9router-smart-route-sync.js"');
-        }
+        appendShWriteCommands(vps, sharedNativeFileMap());
+        vps.push('echo "--- Starting shared gateway via PM2 ---"');
+        if (is9Router) {
+          vps.push('PORT=20128 HOSTNAME=0.0.0.0 pm2 start "$(npm root -g)/9router/app/server.js" --name openclaw-multibot-9router --interpreter "$(command -v node)"');
+          vps.push('pm2 start --name openclaw-multibot-9router-sync -- sh -c "node ./.openclaw/9router-smart-route-sync.js"');
+        }
         vps.push('pm2 start --name openclaw-multibot -- sh -c "openclaw gateway run"');
         vps.push('pm2 save && pm2 startup');
         vps.push(`echo ""`);
@@ -3569,12 +3705,12 @@ ${selectedSkillNames.length ? selectedSkillNames.join('\n') : '- _(No skills ins
         vps.push(`echo "Commands:"`);
         vps.push(`echo "  pm2 status            # Status gateway"`);
         vps.push(`echo "  pm2 logs openclaw-multibot"`);
-      } else {
-        appendShWriteCommands(vps, botFiles(0));
-        if (is9Router) {
-          vps.push('PORT=20128 HOSTNAME=0.0.0.0 pm2 start "$(npm root -g)/9router/app/server.js" --name openclaw-9router --interpreter "$(command -v node)"');
-          vps.push('pm2 start --name openclaw-9router-sync -- sh -c "node ./.openclaw/9router-smart-route-sync.js"');
-        }
+      } else {
+        appendShWriteCommands(vps, botFiles(0));
+        if (is9Router) {
+          vps.push('PORT=20128 HOSTNAME=0.0.0.0 pm2 start "$(npm root -g)/9router/app/server.js" --name openclaw-9router --interpreter "$(command -v node)"');
+          vps.push('pm2 start --name openclaw-9router-sync -- sh -c "node ./.openclaw/9router-smart-route-sync.js"');
+        }
         vps.push('pm2 start --name openclaw -- sh -c "openclaw gateway run"');
         vps.push('pm2 save && pm2 startup');
         vps.push('echo "Bot dang chay! Xem log: pm2 logs openclaw"');
@@ -3881,14 +4017,14 @@ echo ""
 
     script += `# \${isVi ? 'Tạo thư mục' : 'Create directories'}\n`;
     Array.from(dirs).sort().forEach(dir => {
-      script += `mkdir -p "\${dir}"\n`;
+      script += `mkdir -p "${dir}"\n`;
     });
     script += '\n';
 
     Object.entries(files).forEach(([path, content]) => {
       script += `# \${path}\n`;
       const contentStr = typeof content === 'string' ? content : '';
-      script += `cat > "\${path}" << 'CLAWEOF'\n`;
+      script += `cat > "${path}" << 'CLAWEOF'\n`;
       script += contentStr;
       if (!contentStr.endsWith('\n')) script += '\n';
       script += `CLAWEOF\n\n`;
@@ -3899,6 +4035,7 @@ echo ""
     script += `echo ""\n`;
     script += `echo "\${isVi ? '🐳 Đang khởi động Docker (có thể mất vài phút)...' : '🐳 Starting Docker (may take a few minutes)...'}"\n`;
     script += `if docker compose version > /dev/null 2>&1; then\n  COMPOSE_CMD="docker compose"\nelif docker-compose version > /dev/null 2>&1; then\n  COMPOSE_CMD="docker-compose"\nelse\n  echo "\${isVi ? '❌ Không tìm thấy Docker Compose! Cài bằng: sudo apt-get install docker-compose-plugin' : '❌ Docker Compose not found! Install: sudo apt-get install docker-compose-plugin'}"\n  exit 1\nfi\n`;
+    script += `# Check Docker daemon is actually running\nif ! docker info > /dev/null 2>&1; then\n  echo "${isVi ? '❌ Docker daemon chưa chạy! Hãy mở Docker Desktop rồi chạy lại.' : '❌ Docker daemon is not running! Open Docker Desktop first, then re-run this script.'}"; exit 1\nfi\n`;
     
     if (isMultiBot) {
       script += `cd "docker/openclaw"\n`;