create-openclaw-bot 5.10.0 → 5.11.0

package/README.md

@@ -4,10 +4,10 @@
 
 ### One **Web UI** to scaffold, deploy & run free multi-bot AI assistants — zero terminal required
 
-*Run one command → open the dashboard → your bot is live. Windows · macOS · Linux · VPS, on Docker or native.*
+*Run one command → open the dashboard → your bot is live. Windows · macOS · Linux · VPS — Docker-powered, auto-installed for you.*
 
 <p align="center">
-  <a href="https://github.com/tuanminhhole/openclaw-setup/releases"><img src="https://img.shields.io/badge/RELEASE-v5.10.0-0EA5E9?style=for-the-badge" alt="Version 5.10.0" /></a>
+  <a href="https://github.com/tuanminhhole/openclaw-setup/releases"><img src="https://img.shields.io/badge/RELEASE-v5.11.0-0EA5E9?style=for-the-badge" alt="Version 5.11.0" /></a>
   <a href="https://github.com/tuanminhhole/openclaw-setup?tab=MIT-1-ov-file"><img src="https://img.shields.io/badge/LICENSE-MIT-success?style=for-the-badge" alt="MIT License" /></a>
   <a href="https://www.npmjs.com/package/create-openclaw-bot"><img src="https://img.shields.io/npm/v/create-openclaw-bot?style=for-the-badge&label=CLI&color=2563EB&logo=npm&logoColor=white" alt="NPM Version" /></a>
   <a href="https://github.com/tuanminhhole/openclaw-setup/stargazers"><img src="https://img.shields.io/github/stars/tuanminhhole/openclaw-setup?style=for-the-badge&color=eab308&logo=github&logoColor=white" alt="GitHub Stars" /></a>
@@ -27,7 +27,26 @@
 
 ---
 
-## 🆕 What's New in v5.10.0
+## 🆕 What's New in v5.11.0
+
+- 🚀 **Facebook Messenger, 1-click**: the `fb-messenger` plugin is now **public on ClawHub** and installs straight from the dashboard — create a Messenger bot, open **Bot → Plugins**, and hit **Install** on the `openclaw-fb-messenger` card. Webhook + Graph API, auto User→Page token, HMAC verify.
+- 🐳 **Docker-only, rock-solid**: dropped the native (non-Docker) install path to focus on the Docker flow that runs flawlessly and stably across Windows / macOS / Linux / VPS, with cross-OS Docker auto-install.
+- 🖥️ **Chrome-debug on headless VPS**: the browser-automation Chrome-debug relay now works on a headless VPS (bridge-IP-scoped, auto-opens ufw); the bot file editor also saves non-`.md` text files.
+
+<details>
+<summary><b>Previous: What's new in v5.10.1</b></summary>
+
+- 🔧 **Docker fixes**: plugin updates keep the zalo-mod dashboard port, and granted disk/folder mounts (including whole Windows drives like `D:\`) now survive a rebuild instead of being dropped.
+- 🔄 **Native auto-restart (process supervision)**: native installs now register the gateway + 9router as OS services (macOS launchd, Linux systemd, Windows detached) that restart on crash/reboot — mirroring Docker's `restart: always`. Best-effort, falls back to a plain detached process.
+- 🔐 **9router first-install sync — fixed**: no longer permanently disables "Require login". The generated `sync.js` logs in with 9router's default password `123456`, builds the `smart-route` combo from active providers **once**, then stops. Require login stays ON (change the password later); `/v1` model calls are unaffected.
+- 📁 **Native workspace path — fixed**: agent `workspace` is now relative, so persona/memory/skills resolve correctly on native installs (previously a container-absolute path pointing nowhere on the host).
+- 🧩 **Config `meta` no longer clobbered**: the generator stops seeding `meta`, so OpenClaw owns it — prevents config parse failures from a version-range `lastTouchedVersion`.
+- 💅 **Dashboard UI polish**: Bot/Setup hero shortcuts, plugin version badges, cleaner feature-toggle layout, responsive/mobile fixes, and no more duplicate page title on the dashboard tab.
+
+</details>
+
+<details>
+<summary><b>Previous: What's new in v5.9.0</b></summary>
 
 - 🧠 **TencentDB Agent Memory — 1-click install**: New memory plugin in the UI. A 4-tier (L0–L3) layered-memory + context-compression engine that keeps long sessions coherent and **cuts token usage by up to ~61%**. Fully local (SQLite), no API key, Docker-ready.
 - ⚡ **Token-lean defaults for every new bot**: Ships with context pruning (cache-TTL) + `safeguard` compaction — **cheaper & sharper long conversations** with zero tuning.
@@ -36,6 +55,8 @@
 - 🐳 **One-click Docker controls**: Restart / Rebuild the bot container and grant it disk access (mount any host folder at `/mnt/<name>`, cross-OS) right from the dashboard — restart your bot without touching the command line.
 - ⚡ **Faster Dashboard & Bot pages**: Runtime/version detection now probes **once** and is cached instead of re-running on every page load — bot status dropped from ~4s to ~3ms on repeat loads. Cache auto-invalidates on update/rebuild/restart/install.
 
+</details>
+
 <details>
 <summary><b>Previous: What's new in v5.8.24 (Launcher Auto-Update)</b></summary>
 
@@ -190,7 +211,7 @@ npx github:tuanminhhole/openclaw-setup
 - **Telegram**: Acquire your official Bot Token from `@BotFather`.
 - **Zalo Bot API**: Obtain credentials from [developers.zalo.me](https://developers.zalo.me).
 - **Zalo Personal**: Scan the QR authorization image displayed on the OpenClaw Dashboard.
-- **Facebook Messenger**: Via the private `fb-messenger` plugin (contact **tuanminhhole** to receive it) — just provide a Page token.
+- **Facebook Messenger**: Via the `fb-messenger` plugin (public on ClawHub, installable from the Setup UI) — just provide a Page token.
 - **Discord**: _Coming soon._
 - **Lark**: _Coming soon._
 
@@ -275,7 +296,7 @@ Companion repos to build a complete, self-running AI assistant:
 - [vietbrain](https://github.com/tuanminhhole/vietbrain) — Vietnamese "Second Brain" framework for Obsidian (AI-ready)
 
 **🔌 Plugins (runtime)**
-- `openclaw-fb-messenger` — Facebook Messenger channel *(private — contact to receive)*
+- [openclaw-fb-messenger](https://github.com/tuanminhhole/openclaw-fb-messenger) — Facebook Messenger channel (webhook + Graph API), installable from the Setup UI
 - [openclaw-telegram-multibot-relay](https://github.com/tuanminhhole/openclaw-telegram-multibot-relay) — Multibot Telegram relay, delegation & native cron reminders
 - [openclaw-zalo-mod](https://github.com/tuanminhhole/openclaw-zalo-mod) — Zero-token Zalo group management (slash commands, anti-spam, warn, memory)
 - [openclaw-browser-automation](https://github.com/tuanminhhole/openclaw-browser-automation) — Smart Search & Browser Automation
@@ -283,7 +304,7 @@ Companion repos to build a complete, self-running AI assistant:
 - [openclaw-n8n-facebook-poster](https://github.com/tuanminhhole/openclaw-n8n-facebook-poster) — Auto-post to Facebook via n8n
 
 **🧩 Skills**
-- [openclaw-skill-super-memory](https://github.com/tuanminhhole/openclaw-skill-super-memory) — Advanced long-term memory for agents
+- [openclaw-skill-learning-memory](https://github.com/tuanminhhole/openclaw-skill-learning-memory) — Self-evolving long-term memory for agents
 - [openclaw-skill-infographic](https://github.com/tuanminhhole/openclaw-skill-infographic) — Infographic generation
 - [openclaw-skill-zalo-sticker-mention](https://github.com/tuanminhhole/openclaw-skill-zalo-sticker-mention) — Stickers & mentions on Zalo
 

package/README.vi.md

@@ -4,10 +4,10 @@
 
 ### Một **giao diện Web** để tạo, triển khai & vận hành trợ lý AI đa bot miễn phí — không cần gõ terminal
 
-*Chạy một lệnh → mở dashboard → bot lên sóng. Windows · macOS · Linux · VPS, chạy Docker hoặc native.*
+*Chạy một lệnh → mở dashboard → bot lên sóng. Windows · macOS · Linux · VPS — chạy trên Docker, tự cài giúp bạn.*
 
 <p align="center">
-  <a href="https://github.com/tuanminhhole/openclaw-setup/releases"><img src="https://img.shields.io/badge/RELEASE-v5.10.0-0EA5E9?style=for-the-badge" alt="Version 5.10.0" /></a>
+  <a href="https://github.com/tuanminhhole/openclaw-setup/releases"><img src="https://img.shields.io/badge/RELEASE-v5.11.0-0EA5E9?style=for-the-badge" alt="Version 5.11.0" /></a>
   <a href="https://github.com/tuanminhhole/openclaw-setup?tab=MIT-1-ov-file"><img src="https://img.shields.io/badge/LICENSE-MIT-success?style=for-the-badge" alt="MIT License" /></a>
   <a href="https://www.npmjs.com/package/create-openclaw-bot"><img src="https://img.shields.io/npm/v/create-openclaw-bot?style=for-the-badge&label=CLI&color=2563EB&logo=npm&logoColor=white" alt="NPM Version" /></a>
   <a href="https://github.com/tuanminhhole/openclaw-setup/stargazers"><img src="https://img.shields.io/github/stars/tuanminhhole/openclaw-setup?style=for-the-badge&color=eab308&logo=github&logoColor=white" alt="GitHub Stars" /></a>
@@ -27,7 +27,26 @@
 
 ---
 
-## 🆕 Có gì mới trong v5.10.0
+## 🆕 Có gì mới trong v5.11.0
+
+- 🚀 **Facebook Messenger, cài 1 chạm**: plugin `fb-messenger` giờ đã **public trên ClawHub** và cài ngay trên dashboard — tạo bot Messenger, mở **Bot → Plugins**, bấm **Cài** ở thẻ `openclaw-fb-messenger`. Webhook + Graph API, tự đổi User→Page token, xác minh HMAC.
+- 🐳 **Chỉ còn Docker, cực ổn định**: loại bỏ kiểu cài native (không Docker) để tập trung cho luồng Docker chạy hoàn hảo & ổn định trên Windows / macOS / Linux / VPS, kèm tự cài Docker đa hệ điều hành.
+- 🖥️ **Chrome-debug trên VPS headless**: relay Chrome-debug của browser-automation giờ chạy được trên VPS headless (giới hạn theo bridge-IP, tự mở ufw); trình sửa file bot cũng lưu được file text không phải `.md`.
+
+<details>
+<summary><b>Trước đó: Có gì mới trong v5.10.1</b></summary>
+
+- 🔧 **Sửa lỗi Docker**: update plugin giữ nguyên port dashboard zalo-mod, và ổ đĩa/thư mục đã cấp quyền (kể cả nguyên ổ Windows như `D:\`) không còn bị mất sau khi rebuild.
+- 🔄 **Tự khởi động lại tiến trình (native)**: cài native giờ đăng ký gateway + 9router thành service hệ điều hành (macOS launchd, Linux systemd, Windows detached), tự chạy lại khi crash/reboot — như `restart: always` của Docker. Best-effort, lỗi thì fallback chạy detached.
+- 🔐 **Sync 9router lần đầu — đã sửa**: không còn tắt vĩnh viễn "Require login". `sync.js` đăng nhập bằng mật khẩu mặc định `123456`, tạo combo `smart-route` từ provider đang active **một lần** rồi dừng. Require login giữ ON (đổi mật khẩu sau); model-call `/v1` không bị ảnh hưởng.
+- 📁 **Đường dẫn workspace native — đã sửa**: `workspace` của agent giờ là tương đối, persona/memory/skills nằm đúng chỗ khi cài native (trước là đường dẫn tuyệt đối kiểu container → trỏ sai trên host).
+- 🧩 **Không ghi đè khối `meta` trong config**: generator ngừng seed `meta` để OpenClaw tự quản — tránh lỗi parse config do `lastTouchedVersion` là dải version.
+- 💅 **UI dashboard gọn hơn**: nút tắt Bot/Cài đặt ở hero, badge version plugin, layout toggle tính năng, responsive/mobile, bỏ tiêu đề trùng ở tab dashboard.
+
+</details>
+
+<details>
+<summary><b>Trước đó: Có gì mới trong v5.9.0</b></summary>
 
 - 🧠 **TencentDB Agent Memory — cài 1 chạm**: Plugin bộ nhớ mới ngay trên UI. Bộ nhớ phân tầng 4 lớp (L0–L3) + nén ngữ cảnh, giữ session dài mạch lạc và **tiết kiệm tới ~61% token**. Chạy local hoàn toàn (SQLite), không cần API key, sẵn sàng cho Docker.
 - ⚡ **Cấu hình tiết kiệm token mặc định cho mọi bot mới**: Tự có context pruning (cache-TTL) + compaction `safeguard` — **hội thoại dài rẻ hơn & sắc nét hơn**, không cần chỉnh tay.
@@ -36,6 +55,8 @@
 - 🐳 **Nút điều khiển Docker 1 chạm**: Restart / Rebuild container bot và cấp quyền ổ đĩa (mount thư mục host bất kỳ vào `/mnt/<tên>`, đa OS) ngay trên dashboard — khởi động lại bot mà không cần gõ lệnh.
 - ⚡ **Trang Dashboard & Bot load nhanh hơn**: Việc dò runtime/version giờ chỉ chạy **một lần** rồi cache thay vì lặp lại mỗi lần tải trang — bot status giảm từ ~4s xuống ~3ms ở các lần tải sau. Cache tự xoá khi update/rebuild/restart/cài đặt.
 
+</details>
+
 <details>
 <summary><b>Trước đó: Có gì mới trong v5.8.24 (Tự động cập nhật Launcher)</b></summary>
 
@@ -190,7 +211,7 @@ npx github:tuanminhhole/openclaw-setup
 - **Telegram**: Lấy token bot chính thức từ `@BotFather`.
 - **Zalo Bot API**: Lấy thông tin kết nối chính thức từ [developers.zalo.me](https://developers.zalo.me).
 - **Zalo Cá nhân (Zalo Personal)**: Kích hoạt cực nhanh bằng cách quét mã QR hiển thị ngay trên Dashboard OpenClaw.
-- **Facebook Messenger**: Qua plugin riêng `fb-messenger` (liên hệ **tuanminhhole** để nhận) — chỉ cần dùng Page token.
+- **Facebook Messenger**: Qua plugin `fb-messenger` (public trên ClawHub, cài ngay trên giao diện Setup) — chỉ cần dùng Page token.
 - **Discord**: _Sắp ra mắt._
 - **Lark**: _Sắp ra mắt._
 
@@ -275,7 +296,7 @@ Các repo đi kèm để bạn dựng một trợ lý AI "tự vận hành" hoà
 - [vietbrain](https://github.com/tuanminhhole/vietbrain) — Bộ khung "Bộ Não Thứ Hai" tiếng Việt cho Obsidian (sẵn sàng AI)
 
 **🔌 Plugin (runtime)**
-- `openclaw-fb-messenger` — Kênh Facebook Messenger *(riêng tư — liên hệ để nhận)*
+- [openclaw-fb-messenger](https://github.com/tuanminhhole/openclaw-fb-messenger) — Kênh Facebook Messenger (webhook + Graph API), cài ngay trên giao diện Setup
 - [openclaw-telegram-multibot-relay](https://github.com/tuanminhhole/openclaw-telegram-multibot-relay) — Multibot Telegram relay, delegation & cron nhắc lịch native
 - [openclaw-zalo-mod](https://github.com/tuanminhhole/openclaw-zalo-mod) — Quản lý nhóm Zalo zero-token (slash command, anti-spam, warn, memory)
 - [openclaw-browser-automation](https://github.com/tuanminhhole/openclaw-browser-automation) — Smart Search & Browser Automation
@@ -283,7 +304,7 @@ Các repo đi kèm để bạn dựng một trợ lý AI "tự vận hành" hoà
 - [openclaw-n8n-facebook-poster](https://github.com/tuanminhhole/openclaw-n8n-facebook-poster) — Tự động đăng Facebook qua n8n
 
 **🧩 Skill**
-- [openclaw-skill-super-memory](https://github.com/tuanminhhole/openclaw-skill-super-memory) — Bộ nhớ nâng cao cho agent
+- [openclaw-skill-learning-memory](https://github.com/tuanminhhole/openclaw-skill-learning-memory) — Bộ nhớ dài hạn tự tiến hoá cho agent
 - [openclaw-skill-infographic](https://github.com/tuanminhhole/openclaw-skill-infographic) — Tạo infographic
 - [openclaw-skill-zalo-sticker-mention](https://github.com/tuanminhhole/openclaw-skill-zalo-sticker-mention) — Sticker & mention trên Zalo
 

package/dist/server/local-server.js

@@ -388,9 +388,9 @@ async function getAvailableDrives() {
   return drives.length ? drives : ['C:\\', 'D:\\'];
 }
 
-function recommendedMode(osChoice) {
-  if (osChoice === 'win' || osChoice === 'macos') return 'docker';
-  return 'native';
+// Docker is the only supported deploy mode now (native was removed).
+function recommendedMode() {
+  return 'docker';
 }
 
 function commandExists(cmd, args = ['--version']) {
@@ -438,27 +438,6 @@ function run(cmd, args, opts = {}) {
   });
 }
 
-function startDetached(cmd, args, opts = {}) {
-  sendLog(`$ ${cmd} ${args.join(' ')} &`);
-  const shell = process.platform === 'win32';
-  const rawBin = resolveBinPath(cmd);
-  const bin = shell && rawBin.includes(' ') && !rawBin.startsWith('"') ? `"${rawBin}"` : rawBin;
-  const child = spawn(bin, args, {
-    cwd: opts.cwd,
-    shell,
-    detached: true,
-    stdio: 'ignore',
-    windowsHide: opts.windowsHide ?? true,
-    env: { ...process.env, ...(opts.env || {}) },
-  });
-  child.on('error', (err) => {
-    sendLog(`[error] Failed to start background command "${cmd}": ${err.message}`);
-    console.error(`Failed to start background command "${cmd}":`, err);
-  });
-  child.unref();
-  return child.pid;
-}
-
 async function getCurrentRuntimeVersions() {
   const [openclaw, nineRouter, node] = await Promise.all([
     commandExists('openclaw', ['--version']),
@@ -605,135 +584,6 @@ Timed out after ${opts.timeout}ms`.trim() : stderr });
   });
 }
 
-// ── Native process supervision (auto-restart) ───────────────────────────────
-// Docker containers get `restart: always` for free. For native installs we register the gateway
-// and 9router as OS services so they survive crashes and reboots, mirroring that guarantee:
-//   • macOS  → per-user launchd LaunchAgent (KeepAlive + RunAtLoad)
-//   • Linux  → systemd unit (system unit when root, else --user) with Restart=always
-//   • Windows / anything else → plain detached process (no supervision; unchanged behaviour)
-// Every step is best-effort: any failure falls back to startDetached, so a native install can
-// never end up worse off than before this feature existed.
-function escapeXml(s) { return String(s).replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;'); }
-function nativeServiceId(projectDir) { return slugify(basename(projectDir || 'openclaw')) || 'bot'; }
-function nativeServiceLabels(projectDir) {
-  const id = nativeServiceId(projectDir);
-  return {
-    '9router': { launchd: `com.openclaw.9router.${id}`, systemd: `openclaw-9router-${id}.service` },
-    sync: { launchd: `com.openclaw.sync.${id}`, systemd: `openclaw-sync-${id}.service` },
-    gateway: { launchd: `com.openclaw.gateway.${id}`, systemd: `openclaw-gateway-${id}.service` },
-  };
-}
-async function resolveAbsoluteBin(cmd) {
-  try {
-    const out = await runCapture(process.platform === 'win32' ? 'where' : 'which', [cmd], { shell: false, timeout: 5000 });
-    const first = String(out.stdout || '').split(/\r?\n/).map((s) => s.trim()).find(Boolean);
-    if (out.code === 0 && first) return first;
-  } catch {}
-  return resolveBinPath(cmd);
-}
-function systemdUserUnitDir() { return join(getRealHomedir(), '.config', 'systemd', 'user'); }
-function isRootUser() { return typeof process.getuid === 'function' && process.getuid() === 0; }
-
-/**
- * Start one native process under OS supervision (auto-restart). Falls back to a plain detached
- * process on Windows/unknown platforms or if the service tooling errors. Returns the method used:
- * 'launchd' | 'systemd' | 'detached'.
- */
-async function startNativeService({ projectDir, name, cmd, args, desc, env }) {
-  const labels = nativeServiceLabels(projectDir)[name];
-  const logDir = join(projectDir, '.openclaw', 'logs');
-  await fsp.mkdir(logDir, { recursive: true }).catch(() => {});
-  const serviceEnv = { PATH: process.env.PATH || '', HOME: getRealHomedir(), ...env };
-  try {
-    const absBin = await resolveAbsoluteBin(cmd);
-    if (process.platform === 'darwin') {
-      const agentsDir = join(getRealHomedir(), 'Library', 'LaunchAgents');
-      await fsp.mkdir(agentsDir, { recursive: true });
-      const progArgs = [absBin, ...args].map((a) => `      <string>${escapeXml(a)}</string>`).join('\n');
-      const envDict = Object.entries(serviceEnv).map(([k, v]) => `      <key>${escapeXml(k)}</key><string>${escapeXml(String(v))}</string>`).join('\n');
-      const plist = `<?xml version="1.0" encoding="UTF-8"?>
-<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
-<plist version="1.0"><dict>
-  <key>Label</key><string>${labels.launchd}</string>
-  <key>ProgramArguments</key><array>
-${progArgs}
-  </array>
-  <key>WorkingDirectory</key><string>${escapeXml(projectDir)}</string>
-  <key>EnvironmentVariables</key><dict>
-${envDict}
-  </dict>
-  <key>RunAtLoad</key><true/>
-  <key>KeepAlive</key><true/>
-  <key>StandardOutPath</key><string>${escapeXml(join(logDir, name + '.out.log'))}</string>
-  <key>StandardErrorPath</key><string>${escapeXml(join(logDir, name + '.err.log'))}</string>
-</dict></plist>`;
-      const plistPath = join(agentsDir, `${labels.launchd}.plist`);
-      await fsp.writeFile(plistPath, plist, 'utf8');
-      await run('launchctl', ['unload', plistPath], {}).catch(() => {});
-      await run('launchctl', ['load', '-w', plistPath], {});
-      sendLog(`[native] launchd service ${labels.launchd} loaded (auto-restart)`);
-      return 'launchd';
-    }
-    if (process.platform === 'linux') {
-      const root = isRootUser();
-      const unitDir = root ? '/etc/systemd/system' : systemdUserUnitDir();
-      await fsp.mkdir(unitDir, { recursive: true });
-      const sc = (a) => run('systemctl', root ? a : ['--user', ...a], {});
-      const envLines = Object.entries(serviceEnv).map(([k, v]) => `Environment="${k}=${String(v).replace(/\n/g, ' ')}"`).join('\n');
-      const execStart = [absBin, ...args].map((a) => (/[\s"']/.test(a) ? JSON.stringify(a) : a)).join(' ');
-      const unit = `[Unit]
-Description=${desc}
-After=network-online.target
-Wants=network-online.target
-
-[Service]
-Type=simple
-WorkingDirectory=${projectDir}
-${envLines}
-ExecStart=${execStart}
-Restart=always
-RestartSec=3
-
-[Install]
-WantedBy=${root ? 'multi-user.target' : 'default.target'}
-`;
-      await fsp.writeFile(join(unitDir, labels.systemd), unit, 'utf8');
-      await sc(['daemon-reload']);
-      await sc(['enable', '--now', labels.systemd]);
-      sendLog(`[native] systemd ${root ? 'system' : 'user'} service ${labels.systemd} enabled (Restart=always)`);
-      return 'systemd';
-    }
-  } catch (e) {
-    sendLog(`[native] ${name} service setup failed (${e.message}); falling back to detached process`);
-  }
-  const pid = startDetached(cmd, args, { cwd: projectDir, env });
-  if (name === 'gateway') state.botPid = pid;
-  return 'detached';
-}
-
-/** Remove any launchd/systemd services registered for a native project (used on delete). */
-async function removeNativeAutostart(projectDir) {
-  const labels = nativeServiceLabels(projectDir);
-  try {
-    if (process.platform === 'darwin') {
-      const agentsDir = join(getRealHomedir(), 'Library', 'LaunchAgents');
-      for (const k of ['9router', 'sync', 'gateway']) {
-        const p = join(agentsDir, `${labels[k].launchd}.plist`);
-        if (existsSync(p)) { await run('launchctl', ['unload', p], {}).catch(() => {}); await fsp.unlink(p).catch(() => {}); }
-      }
-    } else if (process.platform === 'linux') {
-      const root = isRootUser();
-      const unitDir = root ? '/etc/systemd/system' : systemdUserUnitDir();
-      const sc = (a) => run('systemctl', root ? a : ['--user', ...a], {}).catch(() => {});
-      let changed = false;
-      for (const k of ['9router', 'sync', 'gateway']) {
-        const u = join(unitDir, labels[k].systemd);
-        if (existsSync(u)) { await sc(['disable', '--now', labels[k].systemd]); await fsp.unlink(u).catch(() => {}); changed = true; }
-      }
-      if (changed) await sc(['daemon-reload']);
-    }
-  } catch (e) { sendLog(`[native] autostart teardown skipped: ${e.message}`); }
-}
 
 function safeJoin(root, name) {
   const clean = normalize(String(name || '')).replace(/^([/\\])+/, '');
@@ -2079,104 +1929,7 @@ try{
     return { message: 'Generating Zalo QR. The image will appear automatically.' };
   }
 
-  // ── Native (non-Docker) path ──────────────────────────────────────────────
-  // Same flow as Docker but on the host: run `openclaw channels login` directly,
-  // read the QR PNG straight off the host filesystem, then restart the native
-  // gateway so the saved credentials take effect.
-  const gatewayPort = state.gatewayPort || 18789;
-  const runtimeEnv = {
-    ...process.env,
-    OPENCLAW_HOME: join(projectDir, '.openclaw'),
-    OPENCLAW_STATE_DIR: join(projectDir, '.openclaw'),
-    OPENCLAW_GATEWAY_PORT: String(gatewayPort),
-    OPENCLAW_PORT: String(gatewayPort),
-  };
-
-  // The runtime writes the QR to a uid-scoped temp dir; probe the likely locations.
-  const uid = (typeof process.getuid === 'function') ? process.getuid() : '';
-  const qrNames = profile === 'default'
-    ? ['openclaw-zalouser-qr.png', 'openclaw-zalouser-qr-default.png', `openclaw-zalouser-qr-${profile}.png`]
-    : [`openclaw-zalouser-qr-${profile}.png`];
-  const qrDirs = [join(os.tmpdir(), 'openclaw'), '/tmp/openclaw', `/tmp/openclaw-${uid}`, '/tmp/openclaw-1000', join(os.tmpdir(), `openclaw-${uid}`)];
-  const nativeQrPaths = [...new Set(qrDirs.flatMap((d) => qrNames.map((n) => join(d, n))))];
-
-  // Clean stale credentials & QR files so we only ever surface a fresh code.
-  const credFile = profile === 'default' ? 'credentials.json' : `credentials-${profile}.json`;
-  const credPath = join(projectDir, '.openclaw', 'credentials', 'zalouser', credFile);
-  try { await fsp.rm(credPath, { force: true }); } catch {}
-  for (const p of nativeQrPaths) { try { await fsp.rm(p, { force: true }); } catch {} }
-
-  sendLog('[zalouser] Generating Zalo QR (native). The image will appear automatically.');
-
-  const MAX_LOGIN_ATTEMPTS = 4;
-  const RETRY_DELAYS = [0, 8000, 15000, 20000];
-  let loginAttempt = 0;
-  let sent = false;
-  let restartAfterLogin = false;
-
-  // Poll the host filesystem for the QR PNG across all retry attempts.
-  let tries = 0;
-  const poll = setInterval(() => {
-    if (sent || tries++ > 120) {
-      clearInterval(poll);
-      if (!sent) sendLog('[zalouser] QR not found yet. Try closing/reopening login, or run `openclaw channels login --channel zalouser --verbose` on the host.');
-      return;
-    }
-    for (const p of nativeQrPaths) {
-      try {
-        if (existsSync(p) && fs.statSync(p).size > 100) {
-          const b64 = fs.readFileSync(p).toString('base64');
-          if (b64.length > 100) {
-            sent = true;
-            clearInterval(poll);
-            sendLog(`[zalouser:qr] data:image/png;base64,${b64}`);
-            sendLog('[zalouser] Scan this QR with the Zalo app.');
-            break;
-          }
-        }
-      } catch {}
-    }
-  }, 1000);
-
-  const loginArgs = ['channels', 'login', '--channel', 'zalouser', '--account', profile, '--verbose'];
-  const runLoginAttempt = () => {
-    loginAttempt++;
-    if (loginAttempt > 1) sendLog(`[zalouser] Retry attempt ${loginAttempt}/${MAX_LOGIN_ATTEMPTS}...`);
-    const child = spawn('openclaw', loginArgs, { cwd: projectDir, env: runtimeEnv, shell: false, windowsHide: true });
-    const handleLoginLine = (line) => {
-      sendLog(line);
-      if (/login successful|saved auth/i.test(line)) restartAfterLogin = true;
-    };
-    child.stdout.on('data', (d) => String(d).split(/\r?\n/).filter(Boolean).forEach(handleLoginLine));
-    child.stderr.on('data', (d) => String(d).split(/\r?\n/).filter(Boolean).forEach(handleLoginLine));
-    child.on('error', (err) => sendLog(`[zalouser] Login process failed: ${err.message}. Is the 'openclaw' CLI installed on PATH?`));
-    child.on('close', async (code) => {
-      sendLog(`[zalouser] Login process exited ${code}`);
-      if (code === 0 || restartAfterLogin || sent) {
-        if (restartAfterLogin) {
-          sendLog('[zalouser] Login saved. Restarting native gateway so Zalo User can receive messages...');
-          try {
-            await run('openclaw', ['gateway', 'stop'], { cwd: projectDir, env: runtimeEnv });
-            state.botPid = startDetached('openclaw', ['gateway', 'run'], { cwd: projectDir, env: runtimeEnv });
-            sendLog(`[zalouser] Native gateway restarted (pid=${state.botPid || 'unknown'}). Try sending a Zalo message now.`);
-          } catch (err) {
-            sendLog(`[zalouser] Gateway restart failed: ${err.message}. Restart it manually: openclaw gateway run`);
-          }
-        }
-        zaloLoginInFlight = false;
-      } else if (loginAttempt < MAX_LOGIN_ATTEMPTS && !sent) {
-        const delay = RETRY_DELAYS[loginAttempt] || 10000;
-        sendLog(`[zalouser] QR not ready yet. Waiting ${delay / 1000}s before retry...`);
-        setTimeout(runLoginAttempt, delay);
-      } else {
-        sendLog('[zalouser] All login attempts exhausted. Try clicking "Đăng nhập Zalo" again.');
-        zaloLoginInFlight = false;
-      }
-    });
-  };
-
-  runLoginAttempt();
-  return { message: 'Generating Zalo QR (native). The image will appear automatically.' };
+  throw httpError(400, 'Zalo login cần project Docker đang chạy (không tìm thấy docker-compose.yml).');
 }
 
 function getBotServiceName(projectDir) {
@@ -2277,6 +2030,13 @@ async function syncDockerInfra(projectDir, force = false) {
 
   sendLog(`[sync] Updating Docker infrastructure files (v${existingVersion} \u2192 v${SETUP_VERSION})`);
   await fsp.writeFile(join(dockerDir, 'Dockerfile'), docker.dockerfile, 'utf8');
+  // Capture the user's custom disk/folder mounts from the OLD compose before we overwrite it — a
+  // full regen only re-emits the default volumes, so without this the bot loses granted drives.
+  let carriedMounts = [];
+  try {
+    const prevCompose = join(dockerDir, 'docker-compose.yml');
+    if (existsSync(prevCompose)) carriedMounts = parseComposeMounts(await fsp.readFile(prevCompose, 'utf8'));
+  } catch {}
   await fsp.writeFile(join(dockerDir, 'docker-compose.yml'), newCompose, 'utf8');
   // Preserve zalo-mod dashboard port if plugin is active
   try {
@@ -2287,14 +2047,29 @@ async function syncDockerInfra(projectDir, force = false) {
       let cc = await fsp.readFile(join(dockerDir, 'docker-compose.yml'), 'utf8');
       if (!cc.includes(`:${dp}`)) {
         const gpStr = String(gatewayPort);
+        // Match the gateway published-port line whatever the host prefix is — the generated form is
+        // "127.0.0.1:<gw>:<gw>", so keying off the container port (":<gw>" before the quote) is the
+        // only reliable anchor. The old `(?:\d+:)?` variant never matched the "127.0.0.1:" prefix.
         cc = cc.replace(
-          new RegExp(`^(\\s*-\\s*"(?:\\d+:)?${gpStr}(?::${gpStr})?"\\s*)$`, 'm'),
+          new RegExp(`^(\\s*-\\s*"[^"\\n]*:${gpStr}")\\s*$`, 'm'),
           `$1\n      - "127.0.0.1:${dp}:${dp}"  # zalo-mod dashboard`
         );
         await fsp.writeFile(join(dockerDir, 'docker-compose.yml'), cc, 'utf8');
       }
     }
   } catch {}
+  // Re-inject the user's custom mounts carried over from the old compose.
+  if (carriedMounts.length) {
+    try {
+      const cpath = join(dockerDir, 'docker-compose.yml');
+      const cur = await fsp.readFile(cpath, 'utf8');
+      const merged = injectMountsIntoCompose(cur, carriedMounts);
+      if (merged !== cur) {
+        await fsp.writeFile(cpath, merged, 'utf8');
+        sendLog(`[sync] Preserved ${carriedMounts.length} granted mount(s) across the compose regen`);
+      }
+    } catch (e) { sendLog(`[sync] Warning: could not re-apply granted mounts: ${e.message}`); }
+  }
   await fsp.writeFile(entrypointPath, entryScript, 'utf8');
   if (docker.syncScript) await fsp.writeFile(join(dockerDir, 'sync.js'), docker.syncScript, 'utf8');
   if (docker.patchScript) await fsp.writeFile(join(dockerDir, 'patch-9router.js'), docker.patchScript, 'utf8');
@@ -2370,16 +2145,7 @@ async function updateRuntime(target, projectDir) {
     probeCacheClear();
     return { ok: true, target, spec, mode: 'docker' };
   }
-  await run('npm', ['install', '-g', spec]);
-  if (isRouter) {
-    await run('openclaw', ['gateway', 'stop'], { cwd: projectDir }).catch(() => {});
-    await run('npm', ['install', '-g', NINE_ROUTER_NPM_SPEC]);
-  } else {
-    await run('npm', ['install', '-g', OPENCLAW_NPM_SPEC]);
-  }
-  await syncRuntimeState(projectDir, { full: true }).catch(() => {});
-  probeCacheClear();
-  return { ok: true, target, spec, mode: 'native' };
+  throw httpError(400, 'Không có project Docker để cập nhật runtime.');
 }
 
 async function restartDockerBotContainer(projectDir = state.projectDir) {
@@ -2392,6 +2158,45 @@ async function restartDockerBotContainer(projectDir = state.projectDir) {
   return true;
 }
 
+// Parse user-granted disk/folder mounts (/mnt/<name>, excluding the always-present /mnt/project)
+// from a docker-compose.yml string. Handles both the long-form bind (type/source/target) and the
+// legacy short form `- "<host>:/mnt/<name>"`.
+function parseComposeMounts(compose) {
+  const mounts = [];
+  const lines = String(compose || '').split('\n');
+  for (let i = 0; i < lines.length; i++) {
+    const tm = lines[i].match(/^\s*target:\s*['"]?(\/mnt\/[A-Za-z0-9._-]+)['"]?\s*$/);
+    if (tm && tm[1] !== '/mnt/project') {
+      let host = '';
+      for (let j = i - 1; j >= Math.max(0, i - 3); j--) {
+        const sm = lines[j].match(/^\s*source:\s*['"]?(.+?)['"]?\s*$/);
+        if (sm) { host = sm[1].replace(/''/g, "'"); break; }
+      }
+      if (host) mounts.push({ host, target: tm[1] });
+      continue;
+    }
+    const ssm = lines[i].match(/^\s*-\s*"?([^":\n]+):(\/mnt\/[A-Za-z0-9._-]+)"?\s*$/);
+    if (ssm && ssm[2] !== '/mnt/project') mounts.push({ host: ssm[1].trim(), target: ssm[2] });
+  }
+  return mounts;
+}
+
+// Insert long-form bind mounts (idempotent) after the project's .openclaw volume line. Returns the
+// original string unchanged if the anchor is missing or a mount is already present.
+function injectMountsIntoCompose(compose, mounts) {
+  const anchor = /^(\s*-\s*\.\.\/\.\.\/\.openclaw:\/home\/node\/project\/\.openclaw)\s*$/m;
+  if (!Array.isArray(mounts) || !mounts.length || !anchor.test(compose)) return compose;
+  let out = compose;
+  for (const m of mounts) {
+    if (!m || !m.host || !m.target) continue;
+    if (out.includes(`target: ${m.target}`) || out.includes(`:${m.target}"`) || out.includes(`:${m.target}\n`) || out.includes(m.host)) continue;
+    const src = `'${String(m.host).replace(/'/g, "''")}'`;
+    const block = `      - type: bind\n        source: ${src}\n        target: ${m.target}`;
+    out = out.replace(anchor, `$1\n${block}`);
+  }
+  return out;
+}
+
 // Grant the bot access to a host disk/folder by mounting it into the container at /mnt/<name>.
 // Project-scoped: all bots in this project share the container, so all of them can use it.
 // Per-bot limits are described in AGENTS.md (not enforced at the mount layer).
@@ -2399,7 +2204,10 @@ async function addBotMount(projectDir, hostPath, mountName = '') {
   // Cross-OS normalize: trim, convert Windows backslashes → forward slashes (Docker accepts
   // forward slashes on every OS, incl. `C:/Users/...`), drop trailing separators. This avoids
   // YAML backslash issues and keeps the path uniform.
-  const cleanPath = String(hostPath || '').trim().replace(/\\+/g, '/').replace(/\/+$/, '');
+  let cleanPath = String(hostPath || '').trim().replace(/\\+/g, '/').replace(/\/+$/, '');
+  // A bare Windows drive letter ("D:") is an INVALID Docker bind source — the trailing-slash strip
+  // above turns "D:/" into "D:". Restore the slash so mounting a whole drive (e.g. D:\) works.
+  if (/^[a-zA-Z]:$/.test(cleanPath)) cleanPath += '/';
   if (!cleanPath) throw httpError(400, 'Đường dẫn ổ đĩa/thư mục đang trống');
   const composeFile = join(projectDir, 'docker', 'openclaw', 'docker-compose.yml');
   if (!existsSync(composeFile)) throw httpError(400, 'Không tìm thấy docker-compose.yml (project có thể không chạy ở chế độ Docker)');
@@ -2540,6 +2348,192 @@ async function writeCoreProject({ projectDir, osChoice, mode, gatewayPort = 1878
   }
 }
 
+// Locate a real Chrome/Chromium binary on the host (for the "grant Chrome to the bot" button).
+async function findChromeBinary() {
+  if (process.platform === 'darwin') {
+    for (const p of [
+      '/Applications/Google Chrome.app/Contents/MacOS/Google Chrome',
+      '/Applications/Google Chrome Canary.app/Contents/MacOS/Google Chrome Canary',
+      '/Applications/Chromium.app/Contents/MacOS/Chromium',
+    ]) if (existsSync(p)) return p;
+    return '';
+  }
+  if (process.platform === 'win32') {
+    for (const p of [
+      'C:\\Program Files\\Google\\Chrome\\Application\\chrome.exe',
+      'C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe',
+      join(process.env.LOCALAPPDATA || '', 'Google', 'Chrome', 'Application', 'chrome.exe'),
+    ]) if (p && existsSync(p)) return p;
+    return '';
+  }
+  for (const c of ['google-chrome', 'google-chrome-stable', 'chromium-browser', 'chromium']) {
+    const r = await commandExists(c, ['--version']);
+    if (r.ok) return c;
+  }
+  return '';
+}
+
+// TCP relay for headless VPS: `ssh -R 9222:...` binds the VPS loopback only (sshd GatewayPorts
+// defaults to "no"), which the bot container cannot reach. This relay listens on the docker
+// bridge IP (host.docker.internal from inside the container) and pipes to the loopback tunnel.
+let _chromeRelayServer = null;
+async function getDockerBridgeIp() {
+  try {
+    const out = await runCapture('sh', ['-c', "ip -4 -o addr show docker0 | awk '{print $4}' | cut -d/ -f1"], { shell: false, timeout: 4000 });
+    const ip = String(out.stdout || '').trim();
+    if (/^\d+\.\d+\.\d+\.\d+$/.test(ip)) return ip;
+  } catch {}
+  return '172.17.0.1';
+}
+async function ensureChromeRelay() {
+  if (_chromeRelayServer) return true;
+  const bridgeIp = await getDockerBridgeIp();
+  return new Promise((resolveP) => {
+    const relay = net.createServer((client) => {
+      const upstream = net.connect(9222, '127.0.0.1');
+      client.pipe(upstream).pipe(client);
+      client.on('error', () => upstream.destroy());
+      upstream.on('error', () => client.destroy());
+    });
+    relay.once('error', () => resolveP(false)); // EADDRINUSE etc. → likely already relayed
+    relay.listen(9222, bridgeIp, () => {
+      _chromeRelayServer = relay;
+      sendLog(`[chrome] Relay ${bridgeIp}:9222 → 127.0.0.1:9222 sẵn sàng (chờ SSH tunnel từ máy bạn).`);
+      // Ubuntu VPSes usually run ufw with default-deny INPUT, which silently drops container→host
+      // traffic to the relay. Open the port scoped to the PRIVATE bridge IP only (not reachable
+      // from the internet). Best-effort; `ufw allow` skips duplicates on re-runs.
+      run('sh', ['-c', `command -v ufw >/dev/null 2>&1 && ufw status 2>/dev/null | grep -q "Status: active" && ufw allow in to ${bridgeIp} port 9222 proto tcp comment "openclaw chrome-debug relay (docker bridge only)" || true`])
+        .catch(() => sendLog('[chrome] Không thể tự mở firewall cho relay — nếu bot không thấy Chrome, chạy: ufw allow in to ' + bridgeIp + ' port 9222 proto tcp'));
+      resolveP(true);
+    });
+  });
+}
+
+// Launch real host Chrome in remote-debugging mode (port 9222) so the browser-automation plugin
+// can drive the user's actual Chrome (logged-in profile) instead of headless Chromium. The bot
+// reaches it via CDP (host.docker.internal:9222 from the container). Detached: keeps running after
+// this request. `--remote-allow-origins=*` is required by modern Chrome for cross-origin CDP.
+// On a headless VPS there is no Chrome to open here — instead we start the bridge relay and hand
+// back copy-paste commands so the user runs Chrome on THEIR machine + a reverse SSH tunnel.
+async function startChromeDebug() {
+  if (isHeadlessServer()) {
+    await ensureChromeRelay();
+    const ip = (await getPublicIp().catch(() => '')) || '<IP-VPS>';
+    const user = sshUserName();
+    return {
+      ok: true,
+      headless: true,
+      port: 9222,
+      chromeCmdMac: `"/Applications/Google Chrome.app/Contents/MacOS/Google Chrome" --remote-debugging-port=9222 --user-data-dir="$HOME/.openclaw-chrome-debug" --remote-allow-origins='*'`,
+      chromeCmdWin: `"C:\\Program Files\\Google\\Chrome\\Application\\chrome.exe" --remote-debugging-port=9222 --user-data-dir=%TEMP%\\openclaw-chrome-debug --remote-allow-origins=*`,
+      tunnelCmd: `ssh -N -R 9222:127.0.0.1:9222 ${user}@${ip}`,
+    };
+  }
+  const bin = await findChromeBinary();
+  if (!bin) {
+    throw httpError(400, process.platform === 'linux'
+      ? 'Không tìm thấy Chrome/Chromium trên máy. Cài google-chrome hoặc chromium rồi thử lại (không áp dụng cho VPS không có giao diện).'
+      : 'Không tìm thấy Google Chrome. Hãy cài Chrome rồi thử lại.');
+  }
+  const port = 9222;
+  const userDataDir = join(os.tmpdir(), 'openclaw-chrome-debug');
+  const args = [
+    `--remote-debugging-port=${port}`,
+    `--user-data-dir=${userDataDir}`,
+    '--remote-allow-origins=*',
+    '--no-first-run',
+    '--no-default-browser-check',
+  ];
+  const child = spawn(bin, args, { detached: true, stdio: 'ignore', windowsHide: false });
+  child.on('error', (e) => sendLog(`[chrome] Không mở được Chrome debug: ${e.message}`));
+  child.unref();
+  sendLog(`[chrome] Đã mở Chrome debug ở cổng ${port} (${bin}). Bot sẽ ưu tiên dùng Chrome này.`);
+  return { ok: true, port, browser: bin, userDataDir };
+}
+
+// Poll until the Docker daemon responds (or timeout). Returns true if ready.
+async function waitForDockerDaemon(timeoutMs) {
+  const deadline = Date.now() + timeoutMs;
+  for (;;) {
+    const ok = await commandExists('docker', ['version', '--format', '{{.Server.Version}}']);
+    if (ok.ok) return true;
+    if (Date.now() >= deadline) return false;
+    await new Promise((r) => setTimeout(r, 3000));
+  }
+}
+
+// Ensure Docker (engine + compose) is available before a docker-mode install, auto-installing the
+// latest version appropriate for the host OS when it is missing:
+//   • Linux → Docker's official convenience script (get.docker.com; auto-detects the distro) + start daemon
+//   • macOS → Docker Desktop via Homebrew cask, then launch it
+//   • Windows → Docker Desktop via winget (fallback Chocolatey), then launch it
+// macOS/Windows Docker Desktop needs a GUI/WSL startup (and sometimes a reboot), so we install +
+// launch + wait, and give a clear next-step if the daemon still isn't up when we time out.
+async function ensureDockerInstalled(osChoice) {
+  if (await waitForDockerDaemon(0)) return; // already running
+  const cliOk = await commandExists('docker', ['--version']);
+
+  if (process.platform === 'linux') {
+    const root = typeof process.getuid === 'function' && process.getuid() === 0;
+    const sudo = root ? '' : 'sudo ';
+    if (!cliOk.ok) {
+      sendLog('[docker] Chưa có Docker — đang tự cài Docker Engine mới nhất qua script chính thức get.docker.com (1–3 phút)...');
+      await run('sh', ['-c', `curl -fsSL https://get.docker.com -o /tmp/get-docker.sh && ${sudo}sh /tmp/get-docker.sh`]);
+      if (!root) await run('sh', ['-c', 'sudo usermod -aG docker "$USER" || true']).catch(() => {});
+    }
+    sendLog('[docker] Bật & khởi động Docker daemon...');
+    await run('sh', ['-c', `${sudo}systemctl enable --now docker`]).catch(() => {});
+    if (!(await waitForDockerDaemon(20000))) {
+      throw httpError(500, 'Đã cài Docker nhưng daemon chưa chạy. Hãy chạy `systemctl start docker` (hoặc đăng nhập lại nếu vừa thêm vào nhóm docker) rồi cài lại.');
+    }
+    sendLog('[docker] Docker đã sẵn sàng.');
+    return;
+  }
+
+  if (process.platform === 'darwin') {
+    if (!cliOk.ok) {
+      const brew = await commandExists('brew', ['--version']);
+      if (!brew.ok) {
+        throw httpError(400, 'macOS: cần Homebrew để tự cài Docker Desktop. Cài Homebrew tại https://brew.sh (hoặc cài Docker Desktop thủ công) rồi cài lại.');
+      }
+      sendLog('[docker] macOS: đang cài Docker Desktop mới nhất qua Homebrew (brew install --cask docker)...');
+      await run('brew', ['install', '--cask', 'docker']);
+    }
+    sendLog('[docker] Mở Docker Desktop và chờ daemon khởi động...');
+    await run('open', ['-a', 'Docker']).catch(() => {});
+    if (!(await waitForDockerDaemon(120000))) {
+      throw httpError(500, 'Đã cài Docker Desktop — hãy mở Docker Desktop, hoàn tất cấp quyền lần đầu, đợi biểu tượng cá voi báo "running" rồi cài lại.');
+    }
+    sendLog('[docker] Docker đã sẵn sàng.');
+    return;
+  }
+
+  if (process.platform === 'win32') {
+    if (!cliOk.ok) {
+      const winget = await commandExists('winget', ['--version']);
+      const choco = await commandExists('choco', ['--version']);
+      if (winget.ok) {
+        sendLog('[docker] Windows: đang cài Docker Desktop mới nhất qua winget...');
+        await run('winget', ['install', '-e', '--id', 'Docker.DockerDesktop', '--accept-source-agreements', '--accept-package-agreements']);
+      } else if (choco.ok) {
+        sendLog('[docker] Windows: đang cài Docker Desktop qua Chocolatey...');
+        await run('choco', ['install', 'docker-desktop', '-y']);
+      } else {
+        throw httpError(400, 'Windows: cần winget hoặc Chocolatey để tự cài Docker Desktop (hoặc cài thủ công tại https://www.docker.com). Cài xong rồi thử lại.');
+      }
+    }
+    sendLog('[docker] Mở Docker Desktop và chờ daemon khởi động...');
+    await run('cmd', ['/c', 'start', '', '%ProgramFiles%\\Docker\\Docker\\Docker Desktop.exe']).catch(() => {});
+    if (!(await waitForDockerDaemon(120000))) {
+      throw httpError(500, 'Đã cài Docker Desktop — Windows có thể cần bật WSL2 và khởi động lại máy. Hãy mở Docker Desktop, đợi "running" (hoặc reboot nếu được yêu cầu) rồi cài lại.');
+    }
+    sendLog('[docker] Docker đã sẵn sàng.');
+    return;
+  }
+
+  throw httpError(400, 'Hệ điều hành không được hỗ trợ tự cài Docker. Hãy cài Docker thủ công rồi thử lại.');
+}
+
 async function installCore({ osChoice, mode, projectDir, gatewayPort = 18789, routerPort = 20128 }) {
   state.installing = true;
   state.installed = false;
@@ -2551,6 +2545,9 @@ async function installCore({ osChoice, mode, projectDir, gatewayPort = 18789, ro
   try {
     sendLog('OpenClaw local installer started');
     sendLog(`Target: OS=${osChoice}, mode=${mode}, project=${projectDir}, gatewayPort=${gatewayPort}, routerPort=${routerPort}`);
+    // Make sure Docker is present (auto-install on Linux/VPS) before doing any work — fail fast
+    // with a clear message rather than deep inside `docker compose up`.
+    await ensureDockerInstalled(osChoice);
     await writeCoreProject({ projectDir, osChoice, mode, gatewayPort, routerPort });
     await run('npm', ['install', '-g', OPENCLAW_NPM_SPEC]);
     await run('npm', ['install', '-g', NINE_ROUTER_NPM_SPEC]);
@@ -2567,63 +2564,6 @@ async function installCore({ osChoice, mode, projectDir, gatewayPort = 18789, ro
       await run('docker', ['compose', 'up', '-d', '--build'], { cwd: dockerDir });
       await applyResolved9RouterApiKey(projectDir).catch(() => {});
       await recreateDockerBot(projectDir).catch(() => {});
-    } else {
-      const nineRouterDataDir = join(projectDir, '.9router');
-      const nineRouterDbPath = join(nineRouterDataDir, 'db', 'data.sqlite');
-      const runtimeEnv = {
-        OPENCLAW_HOME: join(projectDir, '.openclaw'),
-        OPENCLAW_STATE_DIR: join(projectDir, '.openclaw'),
-        DATA_DIR: nineRouterDataDir,
-        OPENCLAW_GATEWAY_PORT: String(gatewayPort),
-        OPENCLAW_PORT: String(gatewayPort),
-        // Parity with the docker runtime env (docker-gen.js) so the gateway and browser plugin
-        // behave the same natively: allow the private-network control-UI websocket and tell the
-        // browser plugin which host OS it is running on.
-        OPENCLAW_ALLOW_INSECURE_PRIVATE_WS: '1',
-        OPENCLAW_SETUP_OS: osChoice || '',
-        OPENCLAW_BROWSER_HOST_OS: osChoice || '',
-      };
-      await run('openclaw', ['gateway', 'stop'], { cwd: projectDir, env: runtimeEnv }).catch(() => {});
-      // 9router binds loopback in native mode on purpose: openclaw runs on the SAME host and
-      // reaches it via localhost (see get9RouterBaseUrl), so there is no reason to expose the LLM
-      // proxy on 0.0.0.0 — even on a VPS that would be an open relay. Only the gateway is exposed.
-      // Start 9router first (auto-restart supervised), then sync, then the gateway — so the gateway
-      // boots after 9router is reachable and after the API key has been written to its config.
-      const routerMethod = await startNativeService({
-        projectDir, name: '9router', cmd: '9router', desc: `OpenClaw 9router (${nativeServiceId(projectDir)})`,
-        args: ['-n', '-l', '-H', '127.0.0.1', '-p', String(routerPort), '--skip-update'], env: runtimeEnv,
-      });
-      // Smart-route auto-sync: the docker sidecar runs a script that disables 9router's login
-      // requirement and builds the default `smart-route` combo from the active providers. Native
-      // mode skipped this, so the default model had no backing models. Reuse the exact docker
-      // script with the native DB path (passed via env to stay cross-platform / shell-safe).
-      try {
-        const artifacts = buildDockerArtifacts({ is9Router: true, osChoice, openClawNpmSpec: OPENCLAW_NPM_SPEC, gatewayPort, routerPort });
-        if (artifacts.syncScript) {
-          await fsp.mkdir(nineRouterDataDir, { recursive: true });
-          const syncPath = join(nineRouterDataDir, 'sync.js');
-          await fsp.writeFile(syncPath, artifacts.syncScript, 'utf8');
-          // Run the sync under supervision too (managed service) so it is torn down cleanly on
-          // delete instead of leaking an orphaned `node sync.js` process.
-          await startNativeService({
-            projectDir, name: 'sync', cmd: process.execPath, args: [syncPath],
-            desc: `OpenClaw 9router smart-route sync (${nativeServiceId(projectDir)})`,
-            env: { ...runtimeEnv, NINEROUTER_DB_PATH: nineRouterDbPath, PORT: String(routerPort) },
-          });
-          sendLog('[native] 9router smart-route sync started');
-        }
-      } catch (e) {
-        sendLog(`[native] smart-route sync setup skipped: ${e.message}`);
-      }
-      // Give 9router a moment to boot + sync to disable its login gate, then resolve its API key
-      // into openclaw.json BEFORE the gateway starts (so the gateway reads it on first boot).
-      await new Promise((r) => setTimeout(r, 8000));
-      await applyResolved9RouterApiKey(projectDir).catch(() => {});
-      const gatewayMethod = await startNativeService({
-        projectDir, name: 'gateway', cmd: 'openclaw', desc: `OpenClaw gateway (${nativeServiceId(projectDir)})`,
-        args: ['gateway', 'run'], env: runtimeEnv,
-      });
-      sendLog(`Native runtime started — 9router via ${routerMethod}, gateway via ${gatewayMethod}${state.botPid ? ` (pid=${state.botPid})` : ''}`);
     }
     state.installed = true;
     sendLog('✅ Install completed');
@@ -3028,10 +2968,6 @@ async function deleteProjectFolder(projectDir, rootProjectDir) {
     });
     // Sleep 2.5 seconds to let Windows file system release overlays/locks
     await new Promise((resolve) => setTimeout(resolve, 2500));
-  } else {
-    // Native project: stop & remove any launchd/systemd auto-restart services so they don't keep
-    // respawning a deleted bot. No-op when no services were registered.
-    await removeNativeAutostart(resolved);
   }
 
   try {
@@ -3260,7 +3196,7 @@ async function applyFeatureToggle(projectDir, agentId, kind, id, enabled) {
             if (dashPort && !composeContent.includes(`:${dashPort}`)) {
               const gwPortStr = String(Number(cfg.gateway?.port) || state.gatewayPort || 18789);
               composeContent = composeContent.replace(
-                new RegExp(`^(\\s*-\\s*"(?:\\d+:)?${gwPortStr}(?::${gwPortStr})?"\\s*)$`, 'm'),
+                new RegExp(`^(\\s*-\\s*"[^"\\n]*:${gwPortStr}")\\s*$`, 'm'),
                 `$1\n      - "127.0.0.1:${dashPort}:${dashPort}"  # zalo-mod dashboard`
               );
               await fsp.writeFile(composeFile, composeContent, 'utf8');
@@ -3459,7 +3395,7 @@ async function installFeature(projectDir, agentId, kind, id) {
             // Insert dashboard port after the gateway port line
             const gwPortStr = String(gwPort);
             composeContent = composeContent.replace(
-              new RegExp(`^(\\s*-\\s*"(?:\\d+:)?${gwPortStr}(?::${gwPortStr})?"\\s*)$`, 'm'),
+              new RegExp(`^(\\s*-\\s*"[^"\\n]*:${gwPortStr}")\\s*$`, 'm'),
               `$1\n      - ${dashPortMapping}  # zalo-mod dashboard`
             );
             await fsp.writeFile(composeFile, composeContent, 'utf8');
@@ -3920,6 +3856,9 @@ async function handler(req, res, rootProjectDir) {
       const projectDir = await resolveProjectDir(rootProjectDir, body);
       return json(res, await addBotMount(projectDir, body.hostPath, body.mountName));
     }
+    if (url.pathname === '/api/browser/start-chrome-debug' && req.method === 'POST') {
+      return json(res, await startChromeDebug());
+    }
     if (url.pathname === '/api/setup/update' && req.method === 'POST') {
       const installerDir = resolve(__dirname, '../..');
       const isGit = existsSync(resolve(installerDir, '.git'));
@@ -4036,11 +3975,19 @@ async function handler(req, res, rootProjectDir) {
         return json(res, { name, content: await fsp.readFile(file, 'utf8') });
       }
       if (req.method === 'PUT') {
-        if (!name.endsWith('.md')) throw httpError(400, 'Only markdown files (.md) can be modified');
+        // Allow the same text types the file tree marks editable (it exposes .json/.js/.yml/…,
+        // not just .md — the old .md-only guard made "Save" silently fail on those files).
+        const writableExt = new Set(['.md', '.txt', '.json', '.js', '.mjs', '.cjs', '.ts', '.tsx', '.jsx', '.yml', '.yaml', '.env', '.sh', '.bat', '.ps1', '.html', '.css']);
+        if (!writableExt.has(extname(name).toLowerCase())) throw httpError(400, `Loại file này không hỗ trợ sửa từ UI (${extname(name) || 'không có đuôi'})`);
         const body = await readJson(req);
         const projectDir = await resolveProjectDir(rootProjectDir, body);
         const file = safeJoin(projectDir, name);
-        await fsp.writeFile(file, String(body.content || ''), 'utf8');
+        const content = String(body.content || '');
+        // Don't let a typo brick openclaw.json & friends — reject invalid JSON with a clear error.
+        if (extname(name).toLowerCase() === '.json') {
+          try { JSON.parse(content); } catch (e) { throw httpError(400, `JSON không hợp lệ: ${e.message}`); }
+        }
+        await fsp.writeFile(file, content, 'utf8');
         return json(res, { ok: true });
       }
     }
@@ -4254,7 +4201,7 @@ export async function startLocalInstaller({ host = '127.0.0.1', preferredPort =
   printRemoteAccessHint(port).catch(() => {});
 }
 
-export { createBotInProject, updateBotInProject, deleteBotInProject, validateOpenclawConfig, startZaloUserLogin, readBotCredentials, resolveProject9RouterApiKey, installCore, deleteProjectFolder, removeNativeAutostart };
+export { createBotInProject, updateBotInProject, deleteBotInProject, validateOpenclawConfig, startZaloUserLogin, readBotCredentials, resolveProject9RouterApiKey, installCore, deleteProjectFolder };
 
 
 

package/dist/web/app.js

@@ -7,9 +7,9 @@ const OS_OPTIONS = [
   { id: 'linux-desktop', title: 'Linux Desktop', subtitle: 'Ubuntu / Debian / Fedora', icon: `${SVG_CDN}/linux/default.svg`, badge: 'Desktop' },
   { id: 'vps', title: 'Linux VPS', subtitle: 'Server install with public bind', icon: `${SVG_CDN}/ubuntu/default.svg`, badge: 'Server' },
 ];
+// Docker is the only supported deploy mode. (Native mode was removed.)
 const MODE_OPTIONS = [
   { id: 'docker', title: 'Docker', subtitle: 'Isolated containers, safest default', icon: `${SVG_CDN}/docker/default.svg`, badge: 'Recommended' },
-  { id: 'native', title: 'Native', subtitle: 'Direct host install, lighter runtime', icon: `data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 64 64'%3E%3Crect width='64' height='64' rx='16' fill='%231b1113'/%3E%3Cpath d='M15 22l9 10-9 10' fill='none' stroke='%23ff3b4d' stroke-width='5' stroke-linecap='round' stroke-linejoin='round'/%3E%3Cpath d='M30 42h19' fill='none' stroke='%23f8f7f7' stroke-width='5' stroke-linecap='round'/%3E%3C/svg%3E`, badge: 'Advanced' },
 ];
 const BOT_CHANNELS = [
   { id: 'telegram', title: 'Telegram', subtitle: 'Bot API', icon: `${SVG_CDN}/telegram/default.svg`, badge: 'Tele' },
@@ -155,7 +155,7 @@ function fbPluginModal() {
   return `<div class="modal-backdrop confirm-backdrop" data-fbplugin="close">
     <section class="donate-modal confirm-modal" role="dialog" aria-modal="true" aria-label="fb-messenger plugin" onclick="event.stopPropagation()">
       <button class="modal-x" data-fbplugin="close" aria-label="Close"><svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.2" stroke-linecap="round"><path d="M6 6l12 12M18 6L6 18"/></svg></button>
-      <div class="donate-head"><span aria-hidden="true">🔌</span><div><p>${t('Cần plugin','Plugin required')}</p><h2>fb-messenger</h2><small>${t('Để tạo bot <b>Facebook Messenger</b>, bạn cần plugin <b>fb-messenger</b> do <b>tuanminhhole</b> cung cấp. Plugin hiện chưa public — vui lòng liên hệ để nhận.','To create a <b>Facebook Messenger</b> bot you need the <b>fb-messenger</b> plugin provided by <b>tuanminhhole</b>. It is not public yet — please reach out to get it.')}</small></div></div>
+      <div class="donate-head"><span aria-hidden="true">🔌</span><div><p>${t('Cần plugin','Plugin required')}</p><h2>fb-messenger</h2><small>${t('Bot <b>Facebook Messenger</b> cần plugin <b>fb-messenger</b> (đã public trên ClawHub). Bấm <b>Tạo bot</b>, rồi mở <b>Bot → Plugins</b> và bấm <b>Cài</b> ở thẻ <b>openclaw-fb-messenger</b>.','A <b>Facebook Messenger</b> bot needs the <b>fb-messenger</b> plugin (now public on ClawHub). Click <b>Create bot</b>, then open <b>Bot → Plugins</b> and hit <b>Install</b> on the <b>openclaw-fb-messenger</b> card.')}</small></div></div>
       <div class="socials" style="justify-content:center;display:flex;gap:10px;width:100%;margin:8px 0 4px;">
         ${socials.map(([n,u])=>`<a href="${u}" target="_blank" rel="noopener" aria-label="${n}">${socialIcon(n)}</a>`).join('')}
       </div>
@@ -169,8 +169,9 @@ function confirmModal() {
   return `<div class="modal-backdrop confirm-backdrop" data-confirm-action="cancel">
     <section class="donate-modal confirm-modal" role="dialog" aria-modal="true" aria-label="${escapeHtml(m.title)}" onclick="event.stopPropagation()">
       <button class="modal-x" data-confirm-action="cancel" aria-label="Close"><svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.2" stroke-linecap="round"><path d="M6 6l12 12M18 6L6 18"/></svg></button>
-      <div class="donate-head"><span aria-hidden="true">⚠</span><div><p>${escapeHtml(m.eyebrow || t('Xác nhận','Confirm'))}</p><h2>${escapeHtml(m.title)}</h2><small>${escapeHtml(m.message || '')}</small></div></div>
-      <div class="confirm-actions"><button class="secondary" data-confirm-action="cancel">${t('Hủy','Cancel')}</button><button class="primary danger" data-confirm-action="ok">${escapeHtml(m.okText || t('Xóa','Delete'))}</button></div>
+      <div class="donate-head"><span aria-hidden="true">${escapeHtml(m.icon || '⚠')}</span><div><p>${escapeHtml(m.eyebrow || t('Xác nhận','Confirm'))}</p><h2>${escapeHtml(m.title)}</h2><small>${escapeHtml(m.message || '')}</small></div></div>
+      ${m.bodyHtml ? `<div class="confirm-body">${m.bodyHtml}</div>` : ''}
+      <div class="confirm-actions">${m.hideCancel ? '' : `<button class="secondary" data-confirm-action="cancel">${t('Hủy','Cancel')}</button>`}<button class="primary ${m.okDanger === false ? '' : 'danger'}" data-confirm-action="ok">${escapeHtml(m.okText || t('Xóa','Delete'))}</button></div>
     </section>
   </div>`;
 }
@@ -210,7 +211,6 @@ function installModal() {
   const osChoices = OS_OPTIONS.map(o => [o.id, t(o.title, o.title), trChoice(o).subtitle]);
   const modeChoices = [
     ['docker', 'Docker', t('\u0043ontainer c\u00f4 l\u1eadp, an to\u00e0n nh\u1ea5t', 'Isolated containers, safest default')],
-    ['native', 'Native', t('C\u00e0i tr\u1ef1c ti\u1ebfp, runtime nh\u1eb9 h\u01a1n', 'Direct host install, lighter runtime')],
   ];
   return `<div class="modal-backdrop install-backdrop" data-install-modal="close">
     <section class="donate-modal install-modal" role="dialog" aria-modal="true" aria-label="${t('T\u1ea1o Project','Create Project')}" onclick="event.stopPropagation()">
@@ -519,7 +519,7 @@ function renderFilesPanel() {
   // Re-wire only file-panel-specific handlers
   panel.querySelectorAll('[data-select-file]').forEach(btn => btn.onclick = () => { state.selectedFile = btn.dataset.selectFile; renderFilesPanel(); });
   panel.querySelectorAll('[data-toggle-dir]').forEach(btn => btn.onclick = () => { const p = btn.dataset.toggleDir; state.openDirs[p] = !(state.openDirs[p] ?? true); renderFilesPanel(); });
-  panel.querySelectorAll('.save').forEach(btn => btn.onclick = () => withButtonLoading(btn, async () => { const name = btn.dataset.file; await api('/api/bot/files/'+encodeURIComponent(name), { method: 'PUT', body: { projectDir: activeProjectDir(), content: document.querySelector(`[data-editor="${CSS.escape(name)}"]`).value } }); showToast(t('Đã lưu', 'Saved'), t('Đã lưu tệp tin: ', 'Saved file: ') + fileBaseName(name), 'success'); btn.innerHTML=`${actionIcon('save')} ${ui('saved')}`; setTimeout(()=>btn.innerHTML=`${actionIcon('save')} ${ui('save')}`,1200); }));
+  panel.querySelectorAll('.save').forEach(btn => btn.onclick = () => withButtonLoading(btn, async () => { const name = btn.dataset.file; try { await api('/api/bot/files/'+encodeURIComponent(name), { method: 'PUT', body: { projectDir: activeProjectDir(), content: document.querySelector(`[data-editor="${CSS.escape(name)}"]`).value } }); showToast(t('Đã lưu', 'Saved'), t('Đã lưu tệp tin: ', 'Saved file: ') + fileBaseName(name), 'success'); btn.innerHTML=`${actionIcon('save')} ${ui('saved')}`; setTimeout(()=>btn.innerHTML=`${actionIcon('save')} ${ui('save')}`,1200); } catch (err) { showToast(t('Lưu thất bại', 'Save failed'), err.message, 'error'); } }));
 }
 
 function renderSkillsPanel() {
@@ -564,6 +564,34 @@ function wireSkillsHandlers(scope = document) {
     }
     renderSkillsPanel();
   });
+  scope.querySelectorAll('[data-chrome-debug]').forEach(btn => btn.onclick = async () => {
+    btn.disabled = true;
+    try {
+      const r = await api('/api/browser/start-chrome-debug', { method: 'POST', body: {} });
+      if (r.headless) {
+        // VPS has no display — guide the user to run Chrome on THEIR machine + a reverse tunnel.
+        state.confirmModal = {
+          icon: '🌐',
+          eyebrow: t('Chrome debug', 'Chrome debug'),
+          title: t('Dùng Chrome trên máy của bạn', 'Use Chrome on your computer'),
+          message: t('VPS không có màn hình nên không mở Chrome tại đây. Chạy 2 lệnh dưới trên máy của bạn và GIỮ chúng chạy — bot sẽ tự dùng Chrome đó (cổng 9222). Không làm cũng không sao: bot vẫn có trình duyệt ẩn (headless) sẵn trong container.', 'This VPS has no display. Run the two commands below on YOUR computer and keep them running — the bot will use that Chrome (port 9222). Optional: the bot already has a built-in headless browser.'),
+          bodyHtml: `<p class="guide-step">1. ${t('Mở Chrome debug trên máy bạn — macOS:', 'Start Chrome debug on your machine — macOS:')}</p><code class="cmd">${escapeHtml(r.chromeCmdMac)}</code><p class="guide-step">${t('Hoặc Windows:', 'Or Windows:')}</p><code class="cmd">${escapeHtml(r.chromeCmdWin)}</code><p class="guide-step">2. ${t('Tạo tunnel về VPS (cửa sổ terminal khác):', 'Create the reverse tunnel (another terminal):')}</p><code class="cmd">${escapeHtml(r.tunnelCmd)}</code>`,
+          okText: t('Đã hiểu', 'Got it'),
+          okDanger: false,
+          hideCancel: true,
+          onConfirm: () => { state.confirmModal = null; render(); },
+        };
+        render();
+      } else {
+        showToast(t('Đã mở Chrome debug', 'Chrome debug started'),
+          `${t('Cổng', 'Port')} ${r.port} — ${t('bot sẽ ưu tiên dùng Chrome này', 'the bot will prefer this Chrome')}`, 'success');
+      }
+    } catch (err) {
+      showToast(t('Thất bại', 'Failed'), err.message, 'error');
+    } finally {
+      btn.disabled = false;
+    }
+  });
 }
 
 function title() {
@@ -907,11 +935,17 @@ function joinDisplayPath(root = '', child = '') {
   const r = String(root || '').replace(/[\\/]+$/, '');
   const c = String(child || '').replace(/^[\\/]+/, '');
   if (!r) return c || '-';
-  return c ? `${r}\\${c.replace(/\//g, '\\')}` : r;
+  if (!c) return r;
+  // Match the separator style of the project root: Windows paths (C:\...) join with "\",
+  // POSIX paths join with "/" (the old always-backslash join rendered Linux paths mangled).
+  const win = /^[A-Za-z]:/.test(r) || r.includes('\\');
+  return win ? `${r}\\${c.replace(/\//g, '\\')}` : `${r}/${c.replace(/\\/g, '/')}`;
 }
 function projectPathLine(bot = currentBot(), fileName = '') {
   const s = state.install || {};
-  const workspace = bot?.workspace || '';
+  // Legacy configs stored the container-absolute workspace; show it relative to the project root
+  // (new configs are already relative — see bot-config-gen).
+  const workspace = String(bot?.workspace || '').replace(/^\/home\/node\/project\/?/, '');
   const relFile = fileName ? String(fileName).replace(/^\.openclaw[\\/][^\\/]+[\\/]?/, '') : '';
   const full = workspace ? joinDisplayPath(s.projectDir || '', relFile ? `${workspace}/${relFile}` : workspace) : (s.projectDir || '-');
   const label = workspace ? t('Workspace','Workspace') : ui('project');
@@ -972,6 +1006,7 @@ function botSkillsPanel() {
     { id: 'memory-tencentdb', title: 'TencentDB Agent Memory', desc: 'Bộ nhớ phân tầng L0–L3 + nén ngữ cảnh: nhớ tốt session dài, tiết kiệm ~61% token (local SQLite, không cần API)' },
     { id: 'openclaw-browser-automation', title: 'openclaw-browser-automation', desc: 'Smart Search + Browser (headless & Chrome thật)' },
     { id: 'openclaw-zalo-mod', title: 'openclaw-zalo-mod', desc: 'Zalo group helpers', channels: ['zalo-personal'], openWebPort: 18790, openWebPath: '/dashboard' },
+    { id: 'openclaw-fb-messenger', title: 'openclaw-fb-messenger', desc: t('Kênh Facebook Messenger — webhook + Graph API (bắt buộc cho bot Messenger)', 'Facebook Messenger channel — webhook + Graph API (required for Messenger bots)'), channels: ['fb-messenger'] },
     { id: 'openclaw-facebook-crawler', title: 'openclaw-facebook-crawler', desc: 'Facebook crawler automation', channels: ['fb-messenger'] },
     { id: 'openclaw-n8n-facebook-poster', title: 'openclaw-n8n-facebook-poster', desc: 'Facebook post automation (n8n)', channels: ['fb-messenger'] },
   ];
@@ -1003,6 +1038,9 @@ function botSkillsPanel() {
       if (requiresInstall) {
         secs.push(`<button class="secondary icon-btn2 update-plugin-btn" type="button" data-feature-install="${key}" ${loading ? 'disabled' : ''} title="${t('Cập nhật lên bản mới nhất','Update to latest version')}" style="padding: 4px 8px; font-size: 11px; height: 28px; border-width: 1px; color:#ffb020; border-color: rgba(255,176,32,0.25); background: rgba(255,176,32,0.05);">${actionIcon('refresh')}<span>${t('Cập nhật','Update')}</span></button>`);
       }
+      if (item.id === 'browser-automation' || item.id === 'openclaw-browser-automation') {
+        secs.push(`<button class="secondary icon-btn2" type="button" data-chrome-debug title="${t('Mở Chrome (chế độ debug) trên máy này để bot dùng trình duyệt thật (đã đăng nhập)','Open real Chrome in debug mode on this machine so the bot can use it')}" style="padding: 4px 8px; font-size: 11px; height: 28px; border-width: 1px; color:#4285F4; border-color: rgba(66,133,244,0.3); background: rgba(66,133,244,0.06);">${actionIcon('link')}<span>${t('Mở Chrome debug','Open Chrome debug')}</span></button>`);
+      }
     } else {
       secs.push(`<button class="secondary icon-btn2" type="button" data-feature-install="${key}" ${loading ? 'disabled' : ''}>${actionIcon('download')} ${ui('installVerb')}</button>`);
     }
@@ -1371,13 +1409,9 @@ document.querySelectorAll('[data-project-pick-folder]').forEach(btn => btn.oncli
   });
   $('#bot-create')?.addEventListener('submit', async (ev) => {
     ev.preventDefault();
-    // Facebook Messenger needs the private fb-messenger plugin. If it isn't installed,
-    // show a contact modal instead of creating a broken bot.
-    if (state.botChannel === 'fb-messenger' && !state.botEditId && !state.featureInstalled?.['plugin:openclaw-fb-messenger']) {
-      state.fbPluginModalOpen = true;
-      render();
-      return;
-    }
+    // Facebook Messenger needs the fb-messenger plugin (public on ClawHub). We don't block
+    // creation — the heads-up modal on channel-select tells the user to install it from the
+    // bot's Plugins section afterwards (installable via the openclaw-fb-messenger card).
     const submitBtn = ev.currentTarget.querySelector('button[type="submit"]');
     if (submitBtn?.classList.contains('is-loading')) return;
     await withButtonLoading(submitBtn, async () => {
@@ -1428,7 +1462,7 @@ document.querySelectorAll('[data-project-pick-folder]').forEach(btn => btn.oncli
     }
     });
   });
-  document.querySelectorAll('.save').forEach(btn => btn.onclick = () => withButtonLoading(btn, async () => { const name = btn.dataset.file; await api('/api/bot/files/'+encodeURIComponent(name), { method: 'PUT', body: { projectDir: activeProjectDir(), content: document.querySelector(`[data-editor="${CSS.escape(name)}"]`).value } }); showToast(t('Đã lưu', 'Saved'), t('Đã lưu tệp tin: ', 'Saved file: ') + fileBaseName(name), 'success'); btn.innerHTML=`${actionIcon('save')} ${ui('saved')}`; setTimeout(()=>btn.innerHTML=`${actionIcon('save')} ${ui('save')}`,1200); }));
+  document.querySelectorAll('.save').forEach(btn => btn.onclick = () => withButtonLoading(btn, async () => { const name = btn.dataset.file; try { await api('/api/bot/files/'+encodeURIComponent(name), { method: 'PUT', body: { projectDir: activeProjectDir(), content: document.querySelector(`[data-editor="${CSS.escape(name)}"]`).value } }); showToast(t('Đã lưu', 'Saved'), t('Đã lưu tệp tin: ', 'Saved file: ') + fileBaseName(name), 'success'); btn.innerHTML=`${actionIcon('save')} ${ui('saved')}`; setTimeout(()=>btn.innerHTML=`${actionIcon('save')} ${ui('save')}`,1200); } catch (err) { showToast(t('Lưu thất bại', 'Save failed'), err.message, 'error'); } }));
   wireSkillsHandlers(document);
 }
 

package/dist/web/styles.css

@@ -419,7 +419,6 @@ html[data-theme="light"] .bot-form-grid input,html[data-theme="light"] .bot-form
 .mini-pill{display:inline-flex;align-items:center;min-height:26px;padding:4px 10px;border-radius:999px;background:rgba(255,255,255,.04);border:1px solid rgba(255,36,54,.55);font-size:12px;font-weight:800;letter-spacing:.2px}
 .mini-pill--os{border-color:#64748b;color:#cbd5e1}
 .mini-pill--docker{border-color:#2496ed;color:#9bd5ff}
-.mini-pill--native{border-color:#7c5cff;color:#cfc4ff}
 .channel-tabs{display:flex;gap:10px;align-items:center;flex-wrap:wrap;margin-bottom:18px}
 .channel-tabs button{display:inline-flex;align-items:center;gap:8px;border:1px solid rgba(255,36,54,.24);background:rgba(255,255,255,.045);color:var(--body);border-radius:999px;padding:9px 12px;font-weight:900;cursor:pointer}
 .channel-tabs button.active{background:rgba(255,36,54,.16);border-color:var(--primary);color:var(--ink);box-shadow:0 0 0 1px rgba(255,36,54,.18) inset}
@@ -1931,6 +1930,12 @@ body:has(.modal-backdrop) .bottom{display:none!important}
 /* Bot / Cài đặt hero buttons sit side-by-side — keep their labels on one line. */
 .dash-actions .icon-btn2{white-space:nowrap}
 
+/* [Confirm modal] Optional body block for step-by-step guides (e.g. Chrome-debug on a VPS):
+   copyable command lines with wrap, compact spacing. */
+.confirm-body{display:grid;gap:8px;margin:14px 0 2px}
+.confirm-body .cmd{margin-top:0;user-select:all;word-break:break-all;white-space:pre-wrap;font-size:11.5px;line-height:1.5}
+.guide-step{margin:4px 0 0;color:var(--body);font-size:13px;font-weight:700}
+
 @media(max-width:760px){
   /* [Topbar] Keep search + theme + language on ONE row; theme becomes icon-only and the
      language globe icon is dropped so the whole bar stays compact. */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-openclaw-bot",
-  "version": "5.10.0",
+  "version": "5.11.0",
   "description": "Interactive CLI installer for OpenClaw Bot",
   "main": "dist/cli.js",
   "bin": {