create-openclaw-bot 5.1.13 → 5.1.14

package/CHANGELOG.md

@@ -1,6 +1,15 @@
 # Changelog (English)
 
-## [5.1.13] — 2026-04-08
+
+## [5.1.14] — 2026-04-08
+
+### OpenClaw stability and Docker fixes
+
+- Pinned OpenClaw back to `openclaw@2026.4.5` because the update published on `April 8, 2026` is currently broken.
+- Fixed Dockerfile generation for Windows Docker setups to avoid startup failures caused by bad command escaping and invalid `allowedOrigins`.
+- Added guidance to use `Node.js 20` through `24`, and to avoid `Node.js 25` for now for better OpenClaw stability.
+
+## [5.1.13] — 2026-04-08
 
 ### 🐛 macOS Install Fixes & Wizard Stability
 
@@ -403,3 +412,4 @@ All notable changes to this project will be documented in this file.
 - Configured Telegram-only support.
 - Configured Google Gemini single provider support.
 - Included manual configuration file setup instructions.
+

package/CHANGELOG.vi.md

@@ -1,6 +1,15 @@
 # Changelog (Tiếng Việt)
 
-## [5.1.13] — 2026-04-08
+
+## [5.1.14] — 2026-04-08
+
+### Sửa lỗi ổn định OpenClaw và Docker
+
+- Pin lại OpenClaw về `openclaw@2026.4.5` vì bản cập nhật ngày `08/04/2026` đang lỗi.
+- Sửa Dockerfile cho các case Docker trên Windows để tránh lỗi startup do escape command sai và lỗi `allowedOrigins`.
+- Thêm ghi chú khuyên dùng `Node.js 20` đến `24`, tạm tránh `Node.js 25` để ổn định hơn với OpenClaw.
+
+## [5.1.13] — 2026-04-08
 
 ### 🐛 Sửa lỗi cài macOS & ổn định Wizard
 
@@ -395,3 +404,4 @@ Tất cả những thay đổi nổi bật của dự án sẽ được ghi ché
 - Telegram-only configuration
 - Google Gemini single provider support
 - Manual config file instructions
+

package/README.md

@@ -3,7 +3,7 @@
 # 🦞 OpenClaw Setup
 
 <p align="center">
-  <a href="https://github.com/tuanminhhole/openclaw-setup/releases"><img src="https://img.shields.io/badge/RELEASE-v5.1.13-0EA5E9?style=for-the-badge" alt="Version 5.1.13" /></a>
+  <a href="https://github.com/tuanminhhole/openclaw-setup/releases"><img src="https://img.shields.io/badge/RELEASE-v5.1.14-0EA5E9?style=for-the-badge" alt="Version 5.1.14" /></a>
   <a href="https://github.com/tuanminhhole/openclaw-setup?tab=MIT-1-ov-file"><img src="https://img.shields.io/badge/LICENSE-MIT-success?style=for-the-badge" alt="MIT License" /></a>
   <a href="https://www.npmjs.com/package/create-openclaw-bot"><img src="https://img.shields.io/npm/v/create-openclaw-bot?style=for-the-badge&label=CLI&color=2563EB&logo=npm&logoColor=white" alt="NPM Version" /></a>
   <a href="https://github.com/tuanminhhole/openclaw-setup/stargazers"><img src="https://img.shields.io/github/stars/tuanminhhole/openclaw-setup?style=for-the-badge&color=eab308&logo=github&logoColor=white" alt="GitHub Stars" /></a>
@@ -24,16 +24,11 @@ An interactive **CLI tool** and **Setup Wizard** to deploy your own free AI Bot
 
 ---
 
-## 🆕 What's new in v5.1.13
+## 🆕 What's new in v5.1.14
 
-- 💻 **OS-First Setup** — Step 1 is now choosing your OS (Windows, macOS, Ubuntu, VPS). All scripts, configs, and instructions are generated to match.
-- 🧠 **Gemma 4 — 4 sizes** — `gemma4:e2b` (~4 GB), `gemma4:e4b` (~8 GB), `gemma4:26b` (~18 GB), `gemma4:31b` (~24 GB). Auto-pulled on first launch.
-- 📄 **Consistent script naming** — Scripts are generated per OS: `setup-openclaw-docker-win.bat`, `setup-openclaw-docker-macos.sh`, `setup-openclaw-vps.sh`... No more environment confusion.
-- 🌐 **Native Install for Ubuntu/VPS** — No Docker needed. Both CLI and Web Wizard support running directly with PM2 — less RAM overhead, stable 24/7.
-- 🤖 **Multi-Bot Deployment** — Deploy up to **5 independent Telegram bots** in one setup. Each bot runs in its own isolated workspace (`bot1/`, `bot2/`...) with its own token, name, slash command, and AI personality.
-- 💬 **Department Room Model** — Add all bots to one Telegram group and they behave like a professional team. Bots stay silent by default, only responding when @mentioned or their slash command is used — no spam, no chaos.
-- 🔗 **Group ID Helper** — "Get Group ID" button in Web Wizard + step-by-step guide in CLI. Opens @userinfobot directly — no documentation hunting needed.
-- 🔐 **Zalo Personal QR Login** — Zalo Personal now uses direct QR login flow for both native and Docker. Setup prints exact QR path + copy/login commands — no need to go through `openclaw onboard`.
+- 🔒 **Pinned OpenClaw version** — The OpenClaw update published on `April 8, 2026` is currently broken, so setup now stays on `openclaw@2026.4.5` for stability.
+- 🐳 **Dockerfile fixes** — Fixed the Windows Docker flow so startup no longer breaks on bad command escaping or invalid generated `allowedOrigins`.
+- 🟢 **Stable Node.js note** — Added guidance to use `Node.js 20` through `24`, and to avoid `Node.js 25` for now due to reported OpenClaw issues.
 
 <details>
 <summary><b>Previous: What's new in v5.0.0</b></summary>
@@ -102,7 +97,9 @@ npx create-openclaw-bot
 
 Run in your terminal → follow the interactive prompts → startup script is generated automatically.
 
-> Requires: **Node.js 20 LTS** or newer. Check: `node -v`
+> Requires: **Node.js 20/22/24**. Check: `node -v`
+>
+> Note: **avoid Node.js 25 for now**. There are reports of OpenClaw failing on Node 25.
 
 <details>
 <summary><b>3️⃣ Option C — AI Agent (Antigravity)</b></summary>
@@ -112,7 +109,7 @@ Run in your terminal → follow the interactive prompts → startup script is ge
 2. Open this repo as your workspace
 3. Paste into chat:
    ```
-   Read SETUP.md and set up OpenClaw v5.1.11 for me.
+Read SETUP.md and set up OpenClaw v5.1.14 for me.
    My bot token is X. Use 9Router (no API key).
    My project folder: <YOUR_PATH>
    ```
@@ -127,7 +124,7 @@ Run in your terminal → follow the interactive prompts → startup script is ge
 
 | Requirement             | Notes                                                                     |
 | ----------------------- | ------------------------------------------------------------------------- |
-| **Node.js 20 LTS**      | [Download](https://nodejs.org/) · Check: `node -v`                        |
+| **Node.js 20/22/24**   | [Download](https://nodejs.org/) · Check: `node -v` · Avoid Node 25 for now |
 | **An AI provider**      | 9Router (free) or Gemini/Claude/GPT-4o                                    |
 | **Bot Token**           | From Telegram BotFather or Zalo Developer                                 |
 | **Ollama** _(optional)_ | Only if you want to run Gemma 4 locally · [Download](https://ollama.com/) |
@@ -136,7 +133,7 @@ Run in your terminal → follow the interactive prompts → startup script is ge
 
 | Requirement                     | Notes                                                                                         |
 | ------------------------------- | --------------------------------------------------------------------------------------------- |
-| **Node.js 20 LTS**              | [Download](https://nodejs.org/) · Check: `node -v`                                            |
+| **Node.js 20/22/24**           | [Download](https://nodejs.org/) · Check: `node -v` · Avoid Node 25 for now                    |
 | **Docker Desktop + Compose V2** | [Download](https://www.docker.com/products/docker-desktop/) · Check: `docker compose version` |
 | **An AI provider**              | 9Router runs as a sidecar container — no separate install needed                              |
 | **Bot Token**                   | From Telegram BotFather or Zalo Developer                                                     |

package/README.vi.md

@@ -3,7 +3,7 @@
 # 🦞 OpenClaw Setup
 
 <p align="center">
-  <a href="https://github.com/tuanminhhole/openclaw-setup/releases"><img src="https://img.shields.io/badge/RELEASE-v5.1.11-0EA5E9?style=for-the-badge" alt="Version 5.1.13" /></a>
+  <a href="https://github.com/tuanminhhole/openclaw-setup/releases"><img src="https://img.shields.io/badge/RELEASE-v5.1.14-0EA5E9?style=for-the-badge" alt="Version 5.1.14" /></a>
   <a href="https://github.com/tuanminhhole/openclaw-setup?tab=MIT-1-ov-file"><img src="https://img.shields.io/badge/LICENSE-MIT-success?style=for-the-badge" alt="MIT License" /></a>
   <a href="https://www.npmjs.com/package/create-openclaw-bot"><img src="https://img.shields.io/npm/v/create-openclaw-bot?style=for-the-badge&label=CLI&color=2563EB&logo=npm&logoColor=white" alt="NPM Version" /></a>
   <a href="https://github.com/tuanminhhole/openclaw-setup/stargazers"><img src="https://img.shields.io/github/stars/tuanminhhole/openclaw-setup?style=for-the-badge&color=eab308&logo=github&logoColor=white" alt="GitHub Stars" /></a>
@@ -24,16 +24,11 @@ Công cụ **CLI tương tác** và **Setup Wizard** để tự triển khai Bot
 
 ---
 
-## 🆕 Có gì mới trong v5.1.13
+## 🆕 Có gì mới trong v5.1.14
 
-- 💻 **OS-First Setup** — Bước đầu tiên bây giờ là chọn hệ điều hành của bạn (Windows, macOS, Ubuntu, VPS). Toàn bộ script, cấu hình và hướng dẫn được tạo ra phù hợp với lựa chọn đó.
-- 🧠 **Gemma 4 — 4 kích thước** — `gemma4:e2b` (~4 GB), `gemma4:e4b` (~8 GB), `gemma4:26b` (~18 GB), `gemma4:31b` (~24 GB). Tự pull về khi bot khởi động lần đầu.
-- 📄 **Tên script nhất quán** — Script sinh ra theo đúng OS đã chọn: `setup-openclaw-docker-win.bat`, `setup-openclaw-docker-macos.sh`, `setup-openclaw-vps.sh`... Không còn nhầm lẫn môi trường.
-- 🌐 **Native Install cho Ubuntu/VPS** — Không cần Docker. CLI và Web Wizard đều hỗ trợ chạy trực tiếp với PM2 — tiết kiệm RAM, ổn định 24/7.
-- 🤖 **Triển khai nhiều Bot** — Setup tới **5 Telegram bot độc lập** chỉ trong một lần cài. Mỗi bot sống trong thư mục riêng (`bot1/`, `bot2/`...) với token, tên, slash command và cá tính AI riêng biệt.
-- 💬 **Chế độ Phòng Ban** — Thêm tất cả bot vào một Telegram group, chúng sẽ hoạt động như một đội nhân viên chuyên nghiệp. Bot im lặng theo mặc định — chỉ phản hồi khi được @tag hoặc gọi đúng lệnh slash, không spam, không ồn ào.
-- 🔗 **Nút lấy Group ID tự động** — Nút "Lấy Group ID" ngay trong Web Wizard + hướng dẫn từng bước trong CLI. Mở @userinfobot thẳng luôn — không cần mò docs.
-- 🔐 **Zalo Personal QR Login** — Zalo Personal giờ dùng flow login `zalouser` trực tiếp cho cả native lẫn Docker. Setup in sẵn lệnh login, lệnh copy QR và đường dẫn file QR, không cần vòng qua `openclaw onboard`.
+- 🔒 **Pin lại OpenClaw** — Bản OpenClaw cập nhật ngày `08/04/2026` đang lỗi, nên setup được fix để giữ ở `openclaw@2026.4.5` cho ổn định.
+- 🐳 **Fix Dockerfile** — Sửa luồng Docker cho Windows để không còn lỗi startup do command/escaping sai và tránh lỗi `allowedOrigins` bị sinh ra không hợp lệ.
+- 🟢 **Ghi chú Node.js ổn định** — Thêm note khuyên dùng `Node.js 20` đến `24`, tạm tránh `Node.js 25` vì có report lỗi với OpenClaw.
 
 <details>
 <summary><b>Trước đó: Có gì mới ở v5.0.0</b></summary>
@@ -102,7 +97,9 @@ npx create-openclaw-bot
 
 Chạy lệnh trên trong Terminal → làm theo các prompt tương tác → script khởi động được tạo tự động.
 
-> Yêu cầu: **Node.js 20 LTS** trở lên. Kiểm tra: `node -v`
+> Yêu cầu: **Node.js 20/22/24**. Kiểm tra: `node -v`
+>
+> Lưu ý: **tạm tránh Node.js 25**. Đã có báo cáo OpenClaw lỗi với Node 25.
 
 <details>
 <summary><b>3️⃣ Cách C — AI Agent (Antigravity)</b></summary>
@@ -112,7 +109,7 @@ Chạy lệnh trên trong Terminal → làm theo các prompt tương tác → sc
 2. Mở repo này làm workspace
 3. Paste vào chat:
    ```
-   Read SETUP.md and set up OpenClaw v5.1.11 for me.
+Read SETUP.md and set up OpenClaw v5.1.14 for me.
    My bot token is X. Use 9Router (no API key).
    My project folder: <THƯ_MỤC_CỦA_BẠN>
    ```
@@ -127,7 +124,7 @@ Chạy lệnh trên trong Terminal → làm theo các prompt tương tác → sc
 
 | Yêu cầu                 | Ghi chú                                                             |
 | ----------------------- | ------------------------------------------------------------------- |
-| **Node.js 20 LTS**      | [Tải về](https://nodejs.org/) · Kiểm tra: `node -v`                 |
+| **Node.js 20/22/24**   | [Tải về](https://nodejs.org/) · Kiểm tra: `node -v` · Tạm tránh Node 25 |
 | **Một AI provider**     | 9Router (miễn phí) hoặc Gemini/Claude/GPT-4o                        |
 | **Bot Token**           | Từ Telegram BotFather hoặc Zalo Developer                           |
 | **Ollama** _(tuỳ chọn)_ | Chỉ cần nếu muốn chạy Gemma 4 local · [Tải về](https://ollama.com/) |
@@ -136,7 +133,7 @@ Chạy lệnh trên trong Terminal → làm theo các prompt tương tác → sc
 
 | Yêu cầu                         | Ghi chú                                                                                        |
 | ------------------------------- | ---------------------------------------------------------------------------------------------- |
-| **Node.js 20 LTS**              | [Tải về](https://nodejs.org/) · Kiểm tra: `node -v`                                            |
+| **Node.js 20/22/24**           | [Tải về](https://nodejs.org/) · Kiểm tra: `node -v` · Tạm tránh Node 25                         |
 | **Docker Desktop + Compose V2** | [Tải về](https://www.docker.com/products/docker-desktop/) · Kiểm tra: `docker compose version` |
 | **Một AI provider**             | 9Router chạy như sidecar container — không cần cài riêng                                       |
 | **Bot Token**                   | Từ Telegram BotFather hoặc Zalo Developer                                                      |

package/cli.js

@@ -6,7 +6,8 @@ import path from 'path';
 import os from 'os';
 import chalk from 'chalk';
 import { spawn, execSync, execFileSync } from 'child_process';
-const TELEGRAM_RELAY_PLUGIN_ID = 'openclaw-telegram-multibot-relay';
+const TELEGRAM_RELAY_PLUGIN_ID = 'openclaw-telegram-multibot-relay';
+const OPENCLAW_NPM_SPEC = 'openclaw@2026.4.5';
 // Use plain npm package name — clawhub: protocol not supported in all OpenClaw versions
 const TELEGRAM_RELAY_PLUGIN_SPEC = TELEGRAM_RELAY_PLUGIN_ID;
 
@@ -345,11 +346,11 @@ function installLatestOpenClaw({ isVi, osChoice }) {
     return;
   }
 
-  console.log(chalk.cyan(isVi
-    ? '\n📦 Dang cai/cap nhat openclaw@latest...'
-    : '\n📦 Installing/updating openclaw@latest...'));
-
-  if (!installGlobalPackage('openclaw@latest', { isVi, osChoice, displayName: 'openclaw' })) {
+  console.log(chalk.cyan(isVi
+    ? `\n📦 Dang cai/cap nhat ${OPENCLAW_NPM_SPEC}...`
+    : `\n📦 Installing/updating ${OPENCLAW_NPM_SPEC}...`));
+
+  if (!installGlobalPackage(OPENCLAW_NPM_SPEC, { isVi, osChoice, displayName: 'openclaw' })) {
     process.exit(1);
   }
 
@@ -1370,7 +1371,7 @@ async function main() {
   }
   
   
-  const patchScript = `const fs=require('fs'),os=require('os'),p='/root/.openclaw/openclaw.json';if(fs.existsSync(p)){const c=JSON.parse(fs.readFileSync(p,'utf8'));const a=new Set(['http://localhost:18791','http://127.0.0.1:18791','http://0.0.0.0:18791']);for(const entries of Object.values(os.networkInterfaces()||{})){for(const entry of entries||[]){if(!entry||entry.internal||entry.family!=='IPv4'||!entry.address)continue;a.add(\`http://\${entry.address}:18791\`);}}c.tools=Object.assign({},c.tools,{profile:'full',exec:{host:'gateway',security:'full',ask:'off'}});c.gateway=Object.assign({},c.gateway,{port:18791,bind:'custom',customBindHost:'0.0.0.0',controlUi:Object.assign({},c.gateway?.controlUi,{allowedOrigins:Array.from(a)})});fs.writeFileSync(p,JSON.stringify(c,null,2));}`;
+  const patchScript = `const fs=require('fs'),os=require('os'),p='/root/.openclaw/openclaw.json';if(fs.existsSync(p)){const c=JSON.parse(fs.readFileSync(p,'utf8'));const a=new Set(['http://localhost:18791','http://127.0.0.1:18791','http://0.0.0.0:18791']);for(const entries of Object.values(os.networkInterfaces()||{})){for(const entry of entries||[]){if(!entry||entry.internal||entry.family!=='IPv4'||!entry.address)continue;a.add('http://' + entry.address + ':18791');}}c.tools=Object.assign({},c.tools,{profile:'full',exec:{host:'gateway',security:'full',ask:'off'}});c.gateway=Object.assign({},c.gateway,{port:18791,bind:'custom',customBindHost:'0.0.0.0',controlUi:Object.assign({},c.gateway?.controlUi,{allowedOrigins:Array.from(a).filter(Boolean)})});fs.writeFileSync(p,JSON.stringify(c,null,2));}`;
   const b64Patch = Buffer.from(patchScript).toString('base64');
 
   // Browser Playwright (both desktop & server modes need chromium)
@@ -1405,10 +1406,10 @@ async function main() {
     
   ];
   if (browserDockerLines) dockerfileLines.push(browserDockerLines);
-  dockerfileLines.push(
+  dockerfileLines.push(
     '',
     `ARG CACHEBUST=${Date.now()}`,
-    'RUN npm install -g openclaw@latest',
+    `RUN npm install -g ${OPENCLAW_NPM_SPEC} grammy`,
     '',
     '# Fix chat.send dropping resolved agent timeout into reply pipeline.',
     '# Without this, Telegram/WebChat paths fall back to an internal 300s default even when',
@@ -1420,10 +1421,12 @@ async function main() {
     'EXPOSE 18791',
     '',
     `CMD sh -c "node -e \\"eval(Buffer.from('${b64Patch}','base64').toString())\\" && ${skillInstallCmd}${relayInstallCmd}${socatBridge}(while true; do sleep 5; openclaw devices approve --latest 2>/dev/null || true; done) & openclaw gateway run"`
-  );
-  const dockerfile = dockerfileLines.join('\n');
-
-  await fs.writeFile(path.join(projectDir, 'docker', 'openclaw', 'Dockerfile'), dockerfile);
+  );
+  const dockerfile = dockerfileLines.join('\n');
+
+  const dockerDir = path.join(projectDir, 'docker', 'openclaw');
+  await fs.ensureDir(dockerDir);
+  await fs.writeFile(path.join(dockerDir, 'Dockerfile'), dockerfile);
 
   // agentId no longer tightly coupled here, handled inside bot processes
   const agentId = botName.toLowerCase().replace(/[^a-z0-9]+/g, '-').replace(/-$/, '') || 'chat';
@@ -1658,7 +1661,8 @@ ${hasBrowserDesktop ? `    extra_hosts:
       - ../../.openclaw:/root/.openclaw`;
   }
   
-  await fs.writeFile(path.join(projectDir, 'docker', 'openclaw', 'docker-compose.yml'), compose);
+  await fs.ensureDir(dockerDir);
+  await fs.writeFile(path.join(dockerDir, 'docker-compose.yml'), compose);
 
   let authProfilesJson = {};
   if (provider.isLocal) {
@@ -2378,15 +2382,15 @@ fi
     const isOpenClawInstalled = () => { try { execSync('openclaw --version', { stdio: 'ignore' }); return true; } catch { return false; } };
     if (!isOpenClawInstalled()) {
       console.log(chalk.cyan(isVi
-        ? '\n📦 Đang cài openclaw binary (npm install -g openclaw)...'
-        : '\n📦 Installing openclaw binary (npm install -g openclaw)...'));
-      try {
-        execSync('npm install -g openclaw', { stdio: 'inherit' });
-        console.log(chalk.green(isVi ? '✅ openclaw đã cài xong!' : '✅ openclaw installed!'));
-      } catch {
-        console.log(chalk.yellow(isVi
-          ? '⚠️  Không tự cài được. Chạy thủ công: sudo npm install -g openclaw'
-          : '⚠️  Could not auto-install. Run manually: sudo npm install -g openclaw'));
+        ? `\n📦 Đang cài openclaw binary (npm install -g ${OPENCLAW_NPM_SPEC})...`
+        : `\n📦 Installing openclaw binary (npm install -g ${OPENCLAW_NPM_SPEC})...`));
+      try {
+        execSync(`npm install -g ${OPENCLAW_NPM_SPEC}`, { stdio: 'inherit' });
+        console.log(chalk.green(isVi ? '✅ openclaw đã cài xong!' : '✅ openclaw installed!'));
+      } catch {
+        console.log(chalk.yellow(isVi
+          ? `⚠️  Không tự cài được. Chạy thủ công: sudo npm install -g ${OPENCLAW_NPM_SPEC}`
+          : `⚠️  Could not auto-install. Run manually: sudo npm install -g ${OPENCLAW_NPM_SPEC}`));
       }
     }
 
@@ -2413,9 +2417,9 @@ fi
   } else {
     if (!isOpenClawInstalled()) {
       console.log(chalk.cyan(isVi
-        ? '\n📦 Dang cai openclaw binary (npm install -g openclaw)...'
-        : '\n📦 Installing openclaw binary (npm install -g openclaw)...'));
-      if (!installGlobalPackage('openclaw@latest', { isVi, osChoice, displayName: 'openclaw' })) {
+        ? `\n📦 Dang cai openclaw binary (npm install -g ${OPENCLAW_NPM_SPEC})...`
+        : `\n📦 Installing openclaw binary (npm install -g ${OPENCLAW_NPM_SPEC})...`));
+      if (!installGlobalPackage(OPENCLAW_NPM_SPEC, { isVi, osChoice, displayName: 'openclaw' })) {
         process.exit(1);
       }
       console.log(chalk.green(isVi ? '✅ openclaw da cai xong!' : '✅ openclaw installed!'));

package/docs/install-docker.md

@@ -22,8 +22,9 @@ Docker works well, but it has a learning curve. Review this table before proceed
 
 Before installing Docker, ensure the following:
 
-- **Node.js 20 LTS** or newer: [nodejs.org](https://nodejs.org/)
-  - Node.js 20 LTS is the minimum recommended version as of 2025. Node.js 22 LTS is also fully supported.
+- **Node.js 20/22/24**: [nodejs.org](https://nodejs.org/)
+  - Node.js 20 is the minimum recommended version. Node.js 22 and 24 are also fine.
+  - Avoid Node.js 25 for now; there are reports of OpenClaw failing on it.
   - Verify: `node -v`
 - **Docker Engine with Compose v2 plugin**: Instructions below.
   - Verify Compose v2: `docker compose version` (Note: `docker compose`, not `docker-compose`)

package/docs/install-docker.vi.md

@@ -22,8 +22,9 @@ Docker hiệu quả nhưng có yêu cầu kỹ thuật nhất định. Hãy xem
 
 Trước khi cài Docker, hãy đảm bảo có đủ:
 
-- **Node.js 20 LTS** trở lên: [nodejs.org](https://nodejs.org/)
-  - Node.js 20 LTS là phiên bản tối thiểu được khuyên dùng từ 2025 trở đi. Node.js 22 LTS cũng được hỗ trợ đầy đủ.
+- **Node.js 20/22/24**: [nodejs.org](https://nodejs.org/)
+  - Node.js 20 là mức tối thiểu khuyên dùng. Node.js 22 và 24 cũng ổn.
+  - Tạm tránh Node.js 25 vì đã có report OpenClaw lỗi trên bản này.
   - Kiểm tra: `node -v`
 - **Docker Engine kèm plugin Compose V2**: Hướng dẫn cài bên dưới.
   - Kiểm tra Compose V2: `docker compose version` (Lưu ý: `docker compose`, không phải `docker-compose`)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-openclaw-bot",
-  "version": "5.1.13",
+  "version": "5.1.14",
   "description": "Interactive CLI installer for OpenClaw Bot",
   "main": "cli.js",
   "bin": {

package/setup.js

@@ -804,8 +804,8 @@
       icon: '🐧',
       titleVi: 'Ubuntu / VPS — Khuyên dùng Native (Không Docker)',
       titleEn: 'Ubuntu / VPS — Recommended: Native (No Docker)',
-      descVi: 'Chạy thẳng trên máy, tiết kiệm RAM, khởi động nhanh. Script tự cài Node.js 20 LTS, OpenClaw CLI, PM2, 9Router/Ollama và giữ bot chạy liên tục sau reboot.',
-      descEn: 'Run directly on machine — lower RAM, faster startup. Script auto-installs Node.js 20 LTS, OpenClaw CLI, PM2, 9Router/Ollama and keeps bot running across reboots.',
+      descVi: 'Chạy thẳng trên máy, tiết kiệm RAM, khởi động nhanh. Script tự cài Node.js 20 LTS, OpenClaw CLI, PM2, 9Router/Ollama và giữ bot chạy liên tục sau reboot. Tạm tránh Node 25.',
+      descEn: 'Run directly on machine — lower RAM, faster startup. Script auto-installs Node.js 20 LTS, OpenClaw CLI, PM2, 9Router/Ollama and keeps bot running across reboots. Avoid Node 25 for now.',
       deploy: 'native',
       badgeVi: '💻 Native + PM2',
       badgeEn: '💻 Native + PM2',
@@ -815,8 +815,8 @@
       icon: '🖥️',
       titleVi: 'Linux Desktop — Khuyên dùng Native',
       titleEn: 'Linux Desktop — Recommended: Native',
-      descVi: 'Không cần Docker. Script tự cài Node.js 20 LTS nếu chưa có, cài OpenClaw CLI, rồi cài 9Router hoặc Ollama theo provider bạn chọn và khởi động bot ngay.',
-      descEn: 'No Docker needed. Script auto-installs Node.js 20 LTS if missing, installs OpenClaw CLI, then installs 9Router or Ollama based on your provider choice and starts the bot immediately.',
+      descVi: 'Không cần Docker. Script tự cài Node.js 20 LTS nếu chưa có, cài OpenClaw CLI, rồi cài 9Router hoặc Ollama theo provider bạn chọn và khởi động bot ngay. Tạm tránh Node 25.',
+      descEn: 'No Docker needed. Script auto-installs Node.js 20 LTS if missing, installs OpenClaw CLI, then installs 9Router or Ollama based on your provider choice and starts the bot immediately. Avoid Node 25 for now.',
       deploy: 'native',
       badgeVi: '💻 Native',
       badgeEn: '💻 Native',
@@ -1940,7 +1940,7 @@ model:
       ? 'socat TCP-LISTEN:9222,fork,reuseaddr TCP:host.docker.internal:9222 & '
       : '';
     // Patch config on every startup to keep gateway settings stable
-    const patchCmd = `node -e \\"const fs=require('fs'),os=require('os'),p='/root/.openclaw/openclaw.json';if(fs.existsSync(p)){const c=JSON.parse(fs.readFileSync(p,'utf8'));const a=new Set(['http://localhost:18791','http://127.0.0.1:18791','http://0.0.0.0:18791']);for(const entries of Object.values(os.networkInterfaces()||{})){for(const entry of entries||[]){if(!entry||entry.internal||entry.family!=='IPv4'||!entry.address)continue;a.add(\\\`http://\\\${entry.address}:18791\\\`);}}c.tools=Object.assign({},c.tools,{profile:'full',exec:{host:'gateway',security:'full',ask:'off'}});c.gateway=Object.assign({},c.gateway,{port:18791,bind:'custom',customBindHost:'0.0.0.0',controlUi:Object.assign({},c.gateway?.controlUi,{allowedOrigins:Array.from(a)})});fs.writeFileSync(p,JSON.stringify(c,null,2));}\\" && `;
+    const patchCmd = `node -e \\"const fs=require('fs'),os=require('os'),p='/root/.openclaw/openclaw.json';if(fs.existsSync(p)){const c=JSON.parse(fs.readFileSync(p,'utf8'));const a=new Set(['http://localhost:18791','http://127.0.0.1:18791','http://0.0.0.0:18791']);for(const entries of Object.values(os.networkInterfaces()||{})){for(const entry of entries||[]){if(!entry||entry.internal||entry.family!=='IPv4'||!entry.address)continue;a.add('http://' + entry.address + ':18791');}}c.tools=Object.assign({},c.tools,{profile:'full',exec:{host:'gateway',security:'full',ask:'off'}});c.gateway=Object.assign({},c.gateway,{port:18791,bind:'custom',customBindHost:'0.0.0.0',controlUi:Object.assign({},c.gateway?.controlUi,{allowedOrigins:Array.from(a).filter(Boolean)})});fs.writeFileSync(p,JSON.stringify(c,null,2));}\\" && `;
     // Auto-approve device pairing after gateway starts (required since v2026.3.x)
     const autoApproveCmd = '(while true; do sleep 5; openclaw devices approve --latest 2>/dev/null || true; done) & ';
     const finalCmd = `CMD sh -c "${pluginInstallCmd}${patchCmd}${browserPrefix}${autoApproveCmd}${gatewayCmd}"`;
@@ -1951,7 +1951,7 @@ RUN apt-get update && apt-get install -y git curl${browserAptExtra} && rm -rf /v
 
 
 ARG CACHEBUST=${Date.now()}
-RUN npm install -g openclaw@latest${skillLines}${browserInstallLines}
+RUN npm install -g openclaw@2026.4.5 grammy${skillLines}${browserInstallLines}
 RUN node -e "const fs=require('fs');const path=require('path');const dir='/usr/local/lib/node_modules/openclaw/dist';const from='\\t\\t\\t\\t\\tonAgentRunStart: (runId) => {';const to='\\t\\t\\t\\t\\ttimeoutOverrideSeconds: Math.max(1, Math.ceil(timeoutMs / 1e3)),\\n\\t\\t\\t\\t\\tonAgentRunStart: (runId) => {';const files=fs.readdirSync(dir).filter(n=>/\\.js$/.test(n));let patched=0;for(const file of files){const p=path.join(dir,file);let s='';try{s=fs.readFileSync(p,'utf8');}catch{continue;}if(s.includes(to)||!s.includes(from))continue;s=s.replace(from,to);fs.writeFileSync(p,s);patched++;}if(!patched){process.exit(0);}"
 WORKDIR /root/.openclaw
 
@@ -2979,25 +2979,24 @@ I am **${botName}**. When asked my name, I answer: _"I'm ${botName}"_.`;
       if (p) allPlugins.push(p.package);
     });
     if (isMultiBot && state.channel === 'telegram') allPlugins.push(relayPluginSpec);
-    const pluginCmd = allPlugins.length > 0 ? ('npm exec openclaw plugins install ' + allPlugins.join(' ')) : '';
-
-    function native9RouterSyncScriptContent() {
-      return `const fs=require('fs');
-const path=require('path');
-const INTERVAL=30000;
-const p=path.join(process.env.HOME||process.env.USERPROFILE||'.','.9router','db.json');
-const PM={codex:['cx/gpt-5.4','cx/gpt-5.3-codex','cx/gpt-5.3-codex-high','cx/gpt-5.2-codex','cx/gpt-5.2','cx/gpt-5.1-codex-max','cx/gpt-5.1-codex','cx/gpt-5.1','cx/gpt-5-codex'],claude-code:['cc/claude-opus-4-6','cc/claude-sonnet-4-6','cc/claude-opus-4-5-20251101','cc/claude-sonnet-4-5-20250929','cc/claude-haiku-4-5-20251001'],github:['gh/gpt-5.4','gh/gpt-5.3-codex','gh/gpt-5.2-codex','gh/gpt-5.2','gh/gpt-5.1-codex-max','gh/gpt-5.1-codex','gh/gpt-5.1','gh/gpt-5','gh/gpt-4.1','gh/gpt-4o','gh/claude-opus-4.6','gh/claude-sonnet-4.6','gh/claude-sonnet-4.5','gh/claude-opus-4.5','gh/claude-haiku-4.5','gh/gemini-3-pro-preview','gh/gemini-3-flash-preview','gh/gemini-2.5-pro'],cursor:['cu/default','cu/claude-4.6-opus-max','cu/claude-4.5-opus-high-thinking','cu/claude-4.5-sonnet-thinking','cu/claude-4.5-sonnet','cu/gpt-5.3-codex','cu/gpt-5.2-codex','cu/gemini-3-flash-preview'],kilo:['kc/anthropic/claude-sonnet-4-20250514','kc/anthropic/claude-opus-4-20250514','kc/google/gemini-2.5-pro','kc/google/gemini-2.5-flash','kc/openai/gpt-4.1','kc/deepseek/deepseek-chat'],cline:['cl/anthropic/claude-sonnet-4.6','cl/anthropic/claude-opus-4.6','cl/openai/gpt-5.3-codex','cl/openai/gpt-5.4','cl/google/gemini-3.1-pro-preview'],'gemini-cli':['gc/gemini-3-flash-preview','gc/gemini-3-pro-preview'],iflow:['if/qwen3-coder-plus','if/kimi-k2','if/kimi-k2-thinking','if/glm-4.7','if/deepseek-r1','if/deepseek-v3.2','if/deepseek-v3','if/qwen3-max','if/qwen3-235b','if/iflow-rome-30ba3b'],qwen:['qw/qwen3-coder-plus','qw/qwen3-coder-flash','qw/vision-model','qw/coder-model'],kiro:['kr/claude-sonnet-4.5','kr/claude-haiku-4.5','kr/deepseek-3.2','kr/deepseek-3.1','kr/qwen3-coder-next'],ollama:['ollama/gemma4:e2b','ollama/gemma4:e4b','ollama/gemma4:26b','ollama/gemma4:31b','ollama/qwen3.5','ollama/kimi-k2.5','ollama/glm-5','ollama/glm-4.7-flash','ollama/minimax-m2.5','ollama/gpt-oss:120b'],'kimi-coding':['kmc/kimi-k2.5','kmc/kimi-k2.5-thinking','kmc/kimi-latest'],glm:['glm/glm-5.1','glm/glm-5','glm/glm-4.7'],'glm-cn':['glm/glm-5.1','glm/glm-5','glm/glm-4.7'],minimax:['minimax/MiniMax-M2.7','minimax/MiniMax-M2.5','minimax/MiniMax-M2.1'],kimi:['kimi/kimi-k2.5','kimi/kimi-k2.5-thinking','kimi/kimi-latest'],deepseek:['deepseek/deepseek-chat','deepseek/deepseek-reasoner'],xai:['xai/grok-4','xai/grok-4-fast-reasoning','xai/grok-code-fast-1'],mistral:['mistral/mistral-large-latest','mistral/codestral-latest'],groq:['groq/llama-3.3-70b-versatile','groq/openai/gpt-oss-120b'],cerebras:['cerebras/gpt-oss-120b'],alicode:['alicode/qwen3.5-plus','alicode/qwen3-coder-plus'],openai:['openai/gpt-4o','openai/gpt-4.1'],anthropic:['anthropic/claude-sonnet-4','anthropic/claude-haiku-3.5'],gemini:['gemini/gemini-2.5-flash','gemini/gemini-2.5-pro']};
-const sync=()=>{try{let db={};try{db=JSON.parse(fs.readFileSync(p,'utf8'));}catch{}if(!db.combos)db.combos=[];const removeSmartRoute=()=>{const next=db.combos.filter(x=>x.id!=='smart-route');if(next.length!==db.combos.length){db.combos=next;fs.writeFileSync(p,JSON.stringify(db,null,2));}};const a=(db.providerConnections||[]).filter(c=>c&&c.provider&&c.isActive!==false&&!c.disabled).map(c=>c.provider);if(!a.length){removeSmartRoute();return;}const PREF=['openai','anthropic','claude-code','codex','cursor','github','cline','kimi','minimax','deepseek','glm','alicode','xai','mistral','kilo','kiro','iflow','qwen','gemini-cli','ollama'];a.sort((x,y)=>(PREF.indexOf(x)===-1?99:PREF.indexOf(x))-(PREF.indexOf(y)===-1?99:PREF.indexOf(y)));const m=a.flatMap(provider=>PM[provider]||[]);if(!m.length){removeSmartRoute();return;}const c={id:'smart-route',name:'smart-route',alias:'smart-route',models:m};const i=db.combos.findIndex(x=>x.id==='smart-route');if(i>=0){if(JSON.stringify(db.combos[i].models)!==JSON.stringify(c.models)){db.combos[i]=c;fs.writeFileSync(p,JSON.stringify(db,null,2));}}else{db.combos.push(c);fs.writeFileSync(p,JSON.stringify(db,null,2));}}catch{}};sync();setInterval(sync,INTERVAL);`;
-    }
+    const pluginCmd = allPlugins.length > 0 ? ('call npm exec -- openclaw plugins install ' + allPlugins.join(' ') + ' || goto :fail') : '';
+
+    function native9RouterSyncScriptContent() {
+      return `const fs=require('fs');
+const path=require('path');
+const INTERVAL=30000;
+const p=path.join(process.env.HOME||process.env.USERPROFILE||'.','.9router','db.json');
+const PM={'codex':['cx/gpt-5.4','cx/gpt-5.3-codex','cx/gpt-5.3-codex-high','cx/gpt-5.2-codex','cx/gpt-5.2','cx/gpt-5.1-codex-max','cx/gpt-5.1-codex','cx/gpt-5.1','cx/gpt-5-codex'],'claude-code':['cc/claude-opus-4-6','cc/claude-sonnet-4-6','cc/claude-opus-4-5-20251101','cc/claude-sonnet-4-5-20250929','cc/claude-haiku-4-5-20251001'],'github':['gh/gpt-5.4','gh/gpt-5.3-codex','gh/gpt-5.2-codex','gh/gpt-5.2','gh/gpt-5.1-codex-max','gh/gpt-5.1-codex','gh/gpt-5.1','gh/gpt-5','gh/gpt-4.1','gh/gpt-4o','gh/claude-opus-4.6','gh/claude-sonnet-4.6','gh/claude-sonnet-4.5','gh/claude-opus-4.5','gh/claude-haiku-4.5','gh/gemini-3-pro-preview','gh/gemini-3-flash-preview','gh/gemini-2.5-pro'],'cursor':['cu/default','cu/claude-4.6-opus-max','cu/claude-4.5-opus-high-thinking','cu/claude-4.5-sonnet-thinking','cu/claude-4.5-sonnet','cu/gpt-5.3-codex','cu/gpt-5.2-codex','cu/gemini-3-flash-preview'],'kilo':['kc/anthropic/claude-sonnet-4-20250514','kc/anthropic/claude-opus-4-20250514','kc/google/gemini-2.5-pro','kc/google/gemini-2.5-flash','kc/openai/gpt-4.1','kc/deepseek/deepseek-chat'],'cline':['cl/anthropic/claude-sonnet-4.6','cl/anthropic/claude-opus-4.6','cl/openai/gpt-5.3-codex','cl/openai/gpt-5.4','cl/google/gemini-3.1-pro-preview'],'gemini-cli':['gc/gemini-3-flash-preview','gc/gemini-3-pro-preview'],'iflow':['if/qwen3-coder-plus','if/kimi-k2','if/kimi-k2-thinking','if/glm-4.7','if/deepseek-r1','if/deepseek-v3.2','if/deepseek-v3','if/qwen3-max','if/qwen3-235b','if/iflow-rome-30ba3b'],'qwen':['qw/qwen3-coder-plus','qw/qwen3-coder-flash','qw/vision-model','qw/coder-model'],'kiro':['kr/claude-sonnet-4.5','kr/claude-haiku-4.5','kr/deepseek-3.2','kr/deepseek-3.1','kr/qwen3-coder-next'],'ollama':['ollama/gemma4:e2b','ollama/gemma4:e4b','ollama/gemma4:26b','ollama/gemma4:31b','ollama/qwen3.5','ollama/kimi-k2.5','ollama/glm-5','ollama/glm-4.7-flash','ollama/minimax-m2.5','ollama/gpt-oss:120b'],'kimi-coding':['kmc/kimi-k2.5','kmc/kimi-k2.5-thinking','kmc/kimi-latest'],'glm':['glm/glm-5.1','glm/glm-5','glm/glm-4.7'],'glm-cn':['glm/glm-5.1','glm/glm-5','glm/glm-4.7'],'minimax':['minimax/MiniMax-M2.7','minimax/MiniMax-M2.5','minimax/MiniMax-M2.1'],'kimi':['kimi/kimi-k2.5','kimi/kimi-k2.5-thinking','kimi/kimi-latest'],'deepseek':['deepseek/deepseek-chat','deepseek/deepseek-reasoner'],'xai':['xai/grok-4','xai/grok-4-fast-reasoning','xai/grok-code-fast-1'],'mistral':['mistral/mistral-large-latest','mistral/codestral-latest'],'groq':['groq/llama-3.3-70b-versatile','groq/openai/gpt-oss-120b'],'cerebras':['cerebras/gpt-oss-120b'],'alicode':['alicode/qwen3.5-plus','alicode/qwen3-coder-plus'],'openai':['openai/gpt-4o','openai/gpt-4.1'],'anthropic':['anthropic/claude-sonnet-4','anthropic/claude-haiku-3.5'],'gemini':['gemini/gemini-2.5-flash','gemini/gemini-2.5-pro']};
+const sync=()=>{try{let db={};try{db=JSON.parse(fs.readFileSync(p,'utf8'));}catch{}if(!db.combos)db.combos=[];const removeSmartRoute=()=>{const next=db.combos.filter(x=>x.id!=='smart-route');if(next.length!==db.combos.length){db.combos=next;fs.writeFileSync(p,JSON.stringify(db,null,2));}};const a=(db.providerConnections||[]).filter(c=>c&&c.provider&&c.isActive!==false&&!c.disabled).map(c=>c.provider);if(!a.length){removeSmartRoute();return;}const PREF=['openai','anthropic','claude-code','codex','cursor','github','cline','kimi','minimax','deepseek','glm','alicode','xai','mistral','kilo','kiro','iflow','qwen','gemini-cli','ollama'];a.sort((x,y)=>(PREF.indexOf(x)===-1?99:PREF.indexOf(x))-(PREF.indexOf(y)===-1?99:PREF.indexOf(y)));const m=a.flatMap(provider=>PM[provider]||[]);if(!m.length){removeSmartRoute();return;}const c={id:'smart-route',name:'smart-route',alias:'smart-route',models:m};const i=db.combos.findIndex(x=>x.id==='smart-route');if(i>=0){if(JSON.stringify(db.combos[i].models)!==JSON.stringify(c.models)){db.combos[i]=c;fs.writeFileSync(p,JSON.stringify(db,null,2));}}else{db.combos.push(c);fs.writeFileSync(p,JSON.stringify(db,null,2));}}catch{}};sync();setInterval(sync,INTERVAL);`;
+    }
 
     // ─── Shared initializer (provider install) ───────────────────────────────
     function providerLines(arr, shell) {
       if (is9Router) {
         if (shell === 'bat') {
-          arr.push('npm install -g 9router');
-          arr.push('start "9Router" cmd /k "9router -n -l -H 0.0.0.0 -p 20128 --skip-update"');
-          arr.push('start "9Router Smart Route Sync" cmd /k "node .\\.openclaw\\9router-smart-route-sync.js"');
-          arr.push('timeout /t 5 /nobreak >nul');
+          arr.push('call npm install -g 9router || goto :fail');
+          arr.push('start "9Router" cmd /k "9router -n -l -H 0.0.0.0 -p 20128 --skip-update"');
+          arr.push('timeout /t 5 /nobreak >nul');
         } else {
           arr.push('npm install -g 9router');
           arr.push('nohup env PORT=20128 HOSTNAME=0.0.0.0 node "$(npm root -g)/9router/app/server.js" >/tmp/9router.log 2>&1 &');
@@ -3588,32 +3587,43 @@ ${selectedSkillNames.length ? selectedSkillNames.join('\n') : '- _(No skills ins
       const isDocker = state.deployMode === 'docker';
       scriptName = isDocker ? 'setup-openclaw-docker-win.bat' : 'setup-openclaw-win.bat';
       const lines = [
-        '@echo off',
-        'chcp 65001 >nul',
+        '@echo off',
+        'setlocal EnableExtensions',
+        'chcp 65001 >nul',
         `echo === OpenClaw Setup — Windows${isDocker ? ' Docker' : ' Native'} ===`,
         'echo.',
         'echo [1/5] Kiem tra Node.js...',
         'where node >nul 2>&1 || (echo ERROR: Node.js chua cai! Tai tai: https://nodejs.org && pause && exit /b 1)',
         'echo [2/5] Cai OpenClaw CLI...',
-        'npm install -g openclaw@latest',
+        'call npm install -g openclaw@2026.4.5 || goto :fail',
       ];
       providerLines(lines, 'bat');
       if (pluginCmd) { lines.push('echo Cai plugins...'); lines.push(pluginCmd); }
 
-      if (isMultiBot) {
-        lines.push('echo [4/5] Tao runtime multi-agent dung chung...');
-        appendBatWriteCommands(lines, sharedNativeFileMap());
-        lines.push('echo [5/5] Khoi dong gateway multi-bot...');
-        lines.push('openclaw gateway run');
-      } else {
-        lines.push('echo [4/5] Tao file cau hinh...');
-        appendBatWriteCommands(lines, botFiles(0));
-        lines.push('echo [5/5] Khoi dong bot...');
-        lines.push('openclaw gateway run');
-      }
-
-      lines.push('pause');
-      scriptContent = lines.filter(Boolean).join('\r\n');
+      if (isMultiBot) {
+        lines.push('echo [4/5] Tao runtime multi-agent dung chung...');
+        appendBatWriteCommands(lines, sharedNativeFileMap());
+        if (is9Router) lines.push('start "9Router Smart Route Sync" cmd /k "node .\\.openclaw\\9router-smart-route-sync.js"');
+        lines.push('echo [5/5] Khoi dong gateway multi-bot...');
+        lines.push('call openclaw gateway run');
+      } else {
+        lines.push('echo [4/5] Tao file cau hinh...');
+        appendBatWriteCommands(lines, botFiles(0));
+        if (is9Router) lines.push('start "9Router Smart Route Sync" cmd /k "node .\\.openclaw\\9router-smart-route-sync.js"');
+        lines.push('echo [5/5] Khoi dong bot...');
+        lines.push('call openclaw gateway run');
+      }
+
+      lines.push('goto :end');
+      lines.push(':fail');
+      lines.push('echo.');
+      lines.push('echo Cai dat that bai. Kiem tra dong loi ngay phia tren.');
+      lines.push('pause');
+      lines.push('exit /b 1');
+      lines.push(':end');
+      lines.push('pause');
+      lines.push('endlocal');
+      scriptContent = lines.filter(Boolean).join('\r\n');
 
     // ─── macOS .SH ───────────────────────────────────────────────────────────
     } else if (state.nativeOs === 'linux') {
@@ -3653,7 +3663,7 @@ ${selectedSkillNames.length ? selectedSkillNames.join('\n') : '- _(No skills ins
           'grep -Fqx \'export PATH="$HOME/.local/bin:$PATH"\' "$HOME/.zshrc" 2>/dev/null || echo \'export PATH="$HOME/.local/bin:$PATH"\' >> "$HOME/.zshrc"',
           'grep -Fqx \'export PATH="$HOME/.local/bin:$PATH"\' "$HOME/.profile" 2>/dev/null || echo \'export PATH="$HOME/.local/bin:$PATH"\' >> "$HOME/.profile"',
           '# Install openclaw (user-local first, sudo fallback)',
-          'npm install -g openclaw@latest || sudo npm install -g openclaw@latest',
+          'npm install -g openclaw@2026.4.5 || sudo npm install -g openclaw@2026.4.5',
         ];
         providerLines(sh, 'sh');
         if (pluginCmd) sh.push(pluginCmd);
@@ -3685,7 +3695,7 @@ ${selectedSkillNames.length ? selectedSkillNames.join('\n') : '- _(No skills ins
         'export PATH="$HOME/.local/bin:$PATH"',
         'grep -Fqx \'export PATH="$HOME/.local/bin:$PATH"\' "$HOME/.bashrc" 2>/dev/null || echo \'export PATH="$HOME/.local/bin:$PATH"\' >> "$HOME/.bashrc"',
         'grep -Fqx \'export PATH="$HOME/.local/bin:$PATH"\' "$HOME/.profile" 2>/dev/null || echo \'export PATH="$HOME/.local/bin:$PATH"\' >> "$HOME/.profile"',
-        'npm install -g openclaw@latest pm2@latest',
+        'npm install -g openclaw@2026.4.5 pm2@latest',
       ];
       providerLines(vps, 'sh');
       if (pluginCmd) vps.push(pluginCmd);
@@ -3732,7 +3742,7 @@ ${selectedSkillNames.length ? selectedSkillNames.join('\n') : '- _(No skills ins
         'export PATH="$HOME/.local/bin:$PATH"',
         'grep -Fqx \'export PATH="$HOME/.local/bin:$PATH"\' "$HOME/.bashrc" 2>/dev/null || echo \'export PATH="$HOME/.local/bin:$PATH"\' >> "$HOME/.bashrc"',
         'grep -Fqx \'export PATH="$HOME/.local/bin:$PATH"\' "$HOME/.profile" 2>/dev/null || echo \'export PATH="$HOME/.local/bin:$PATH"\' >> "$HOME/.profile"',
-        'npm install -g openclaw@latest',
+        'npm install -g openclaw@2026.4.5',
       ];
       providerLines(lnx, 'sh');
       if (pluginCmd) lnx.push(pluginCmd);
@@ -3766,7 +3776,7 @@ ${selectedSkillNames.length ? selectedSkillNames.join('\n') : '- _(No skills ins
     if (stepsList) {
       const steps = [];
       steps.push(isVi ? '✅ Kiểm tra Node.js (cài tự động trên Ubuntu/VPS nếu chưa có)' : '✅ Check Node.js (auto-install on Ubuntu/VPS if missing)');
-      steps.push(isVi ? '📦 Cài OpenClaw CLI (<code>npm install -g openclaw@latest</code>)' : '📦 Install OpenClaw CLI (<code>npm install -g openclaw@latest</code>)');
+      steps.push(isVi ? '📦 Cài OpenClaw CLI (<code>npm install -g openclaw@2026.4.5</code>)' : '📦 Install OpenClaw CLI (<code>npm install -g openclaw@2026.4.5</code>)');
       if (is9Router) {
         steps.push(isVi ? '🔀 Cài 9Router (<code>npm install -g 9router</code>) và khởi động tự động' : '🔀 Install 9Router (<code>npm install -g 9router</code>) and start automatically');
       } else if (isOllama) {

package/tests/smoke-cli-logic.mjs

@@ -52,8 +52,8 @@ checks.push(() => expectMatch(
 
 checks.push(() => expectMatch(
   cli,
-  /function installLatestOpenClaw\(\{ isVi, osChoice \}\) \{[\s\S]*installGlobalPackage\('openclaw@latest', \{ isVi, osChoice, displayName: 'openclaw' \}\)[\s\S]*process\.exit\(1\)/,
-  'CLI must provide a shared helper that always installs or upgrades openclaw@latest'
+  /function installLatestOpenClaw\(\{ isVi, osChoice \}\) \{[\s\S]*installGlobalPackage\(OPENCLAW_NPM_SPEC, \{ isVi, osChoice, displayName: 'openclaw' \}\)[\s\S]*process\.exit\(1\)/,
+  'CLI must provide a shared helper that always installs or upgrades the pinned openclaw version'
 ));
 
 checks.push(() => expectMatch(
@@ -70,7 +70,7 @@ checks.push(() => expectMatch(
 
 checks.push(() => expectMatch(
   cli,
-  /if \(!isOpenClawInstalled\(\)\) \{[\s\S]*installGlobalPackage\('openclaw@latest', \{ isVi, osChoice, displayName: 'openclaw' \}\)/,
+  /if \(!isOpenClawInstalled\(\)\) \{[\s\S]*installGlobalPackage\(OPENCLAW_NPM_SPEC, \{ isVi, osChoice, displayName: 'openclaw' \}\)/,
   'Native branch must auto-install openclaw'
 ));
 
@@ -216,6 +216,25 @@ checks.push(() => expectMatch(
   'Native per-bot gateway config must seed control UI allowed origins for each port'
 ));
 
+checks.push(() => expectMatch(
+  cli,
+  /const dockerDir = path\.join\(projectDir, 'docker', 'openclaw'\);\s*await fs\.ensureDir\(dockerDir\);\s*await fs\.writeFile\(path\.join\(dockerDir, 'Dockerfile'\), dockerfile\);[\s\S]*await fs\.ensureDir\(dockerDir\);\s*await fs\.writeFile\(path\.join\(dockerDir, 'docker-compose\.yml'\), compose\);/s,
+  'Docker CLI flow must ensure docker/openclaw exists immediately before writing Dockerfile and docker-compose.yml'
+));
+
+checks.push(() => expectMatch(
+  cli,
+  /RUN npm install -g \$\{OPENCLAW_NPM_SPEC\} grammy/,
+  'Docker CLI image must install grammy alongside openclaw so Telegram runtime dependencies resolve'
+));
+
+checks.push(() => expect(
+  cli.includes("a.add('http://' + entry.address + ':18791')")
+    && cli.includes('allowedOrigins:Array.from(a).filter(Boolean)')
+    && !cli.includes("a.add(`http://${entry.address}:18791`)"),
+  'Docker CLI patch script must avoid shell-expanding ${entry.address} and must filter null origins'
+));
+
 checks.push(() => expectMatch(
   cli,
   /channelKey === 'zalo-personal'\) \{\s*botConfig\.channels\['zalouser'\] = \{\s*enabled: true,\s*dmPolicy: 'open',\s*autoReply: true/s,
@@ -303,19 +322,32 @@ checks.push(() => expectMatch(
 
 checks.push(() => expectMatch(
   setup,
-  /if \(state\.nativeOs === 'win'\) \{[\s\S]*scriptName = isDocker \? 'setup-openclaw-docker-win\.bat' : 'setup-openclaw-win\.bat';[\s\S]*npm install -g openclaw@latest[\s\S]*openclaw gateway run/s,
+  /if \(state\.nativeOs === 'win'\) \{[\s\S]*scriptName = isDocker \? 'setup-openclaw-docker-win\.bat' : 'setup-openclaw-win\.bat';[\s\S]*npm install -g openclaw@2026\.4\.5[\s\S]*openclaw gateway run/s,
   'Windows native/docker script generation must use the correct file name and start command'
 ));
 
 checks.push(() => expectMatch(
   setup,
-  /else if \(state\.nativeOs === 'linux'\) \{[\s\S]*scriptName = isDocker \? 'setup-openclaw-docker-macos\.sh' : 'setup-openclaw-macos\.sh';[\s\S]*npm config set prefix "\$HOME\/\.local"[\s\S]*npm install -g openclaw@latest[\s\S]*openclaw gateway run/s,
+  /else if \(state\.nativeOs === 'linux'\) \{[\s\S]*scriptName = isDocker \? 'setup-openclaw-docker-macos\.sh' : 'setup-openclaw-macos\.sh';[\s\S]*npm config set prefix "\$HOME\/\.local"[\s\S]*npm install -g openclaw@2026\.4\.5[\s\S]*openclaw gateway run/s,
   'macOS script generation must use the correct file name and start command'
 ));
 
 checks.push(() => expectMatch(
   setup,
-  /else if \(state\.nativeOs === 'vps'\) \{[\s\S]*scriptName = 'setup-openclaw-vps\.sh';[\s\S]*npm config set prefix "\$HOME\/\.local"[\s\S]*npm install -g openclaw@latest pm2@latest[\s\S]*pm2 save && pm2 startup/s,
+  /RUN npm install -g openclaw@2026\.4\.5 grammy/,
+  'Wizard Dockerfile generation must install grammy alongside openclaw so Telegram runtime dependencies resolve'
+));
+
+checks.push(() => expect(
+  setup.includes("a.add('http://' + entry.address + ':18791')")
+    && setup.includes('allowedOrigins:Array.from(a).filter(Boolean)')
+    && !setup.includes("a.add(\\`http://\\${entry.address}:18791\\`)"),
+  'Wizard Docker patch command must avoid shell-expanding ${entry.address} and must filter null origins'
+));
+
+checks.push(() => expectMatch(
+  setup,
+  /else if \(state\.nativeOs === 'vps'\) \{[\s\S]*scriptName = 'setup-openclaw-vps\.sh';[\s\S]*npm config set prefix "\$HOME\/\.local"[\s\S]*npm install -g openclaw@2026\.4\.5 pm2@latest[\s\S]*pm2 save && pm2 startup/s,
   'VPS native script generation must install openclaw+pm2 and persist PM2 startup'
 ));
 
@@ -325,6 +357,12 @@ checks.push(() => expectMatch(
   'Native script generation must install and start a standalone 9Router dashboard on port 20128'
 ));
 
+checks.push(() => expectMatch(
+  setup,
+  /} else if \(is9Router\) \{[\s\S]*container_name: openclaw-bot[\s\S]*depends_on:[\s\S]*- 9router[\s\S]*container_name: 9router[\s\S]*PORT=20128[\s\S]*HOSTNAME=0\.0\.0\.0[\s\S]*9router-data:/s,
+  'Wizard single-bot Docker compose must include the 9Router sidecar service and named volume when provider is 9Router'
+));
+
 checks.push(() => expectMatch(
   setup,
   /function native9RouterSyncScriptContent\(\) \{[\s\S]*path\.join\(process\.env\.HOME\|\|process\.env\.USERPROFILE\|\|'\.'\,\'\.9router\'\,\'db\.json\'\)[\s\S]*providerConnections[\s\S]*smart-route/s,
@@ -381,7 +419,7 @@ checks.push(() => expectMatch(
 
 checks.push(() => expectMatch(
   setup,
-  /else if \(state\.nativeOs === 'linux-desktop'\) \{[\s\S]*scriptName = 'setup-openclaw-linux\.sh';[\s\S]*npm config set prefix "\$HOME\/\.local"[\s\S]*npm install -g openclaw@latest[\s\S]*openclaw gateway run/s,
+  /else if \(state\.nativeOs === 'linux-desktop'\) \{[\s\S]*scriptName = 'setup-openclaw-linux\.sh';[\s\S]*npm config set prefix "\$HOME\/\.local"[\s\S]*npm install -g openclaw@2026\.4\.5[\s\S]*openclaw gateway run/s,
   'Linux Desktop native script generation must install openclaw and run the gateway'
 ));