create-openclaw-bot 5.11.0 → 5.12.0

package/dist/setup/data/channels.js

@@ -55,31 +55,30 @@
     },
     // 'telegram+zalo-personal' — Combo mode tạm ngưng, nghiên cứu thêm.
     'zalo-personal': {
-      name: 'Zalo Personal',
+      name: 'Zalo cá nhân — OpenClaw Zalo Connect',
       hasZaloPersonal: true,
       envKeys: [],
       envExtra: '',
       credSteps: [
-        { textVi: '⚠️ Zalo Personal dùng <strong>unofficial API (zca-js)</strong> — chỉ nên dùng tài khoản phụ', textEn: '⚠️ Zalo Personal uses <strong>unofficial API (zca-js)</strong> — use an alternate account' },
-        { textVi: 'Native setup sẽ tự chạy login và copy QR về thư mục project. Nếu cần chạy lại thủ công, dùng <code>openclaw channels login --channel zalouser --verbose</code>.', textEn: 'Native setup now auto-runs the login flow and copies the QR into the project folder. If needed, rerun it manually with <code>openclaw channels login --channel zalouser --verbose</code>.' },
+        { textVi: '⚠️ Zalo cá nhân chạy qua <strong>OpenClaw Zalo Connect (unofficial, zca-js)</strong> — tự động hoá tài khoản cá nhân có thể vi phạm điều khoản Zalo và khiến tài khoản bị hạn chế. <strong>Chỉ nên dùng tài khoản phụ.</strong>', textEn: '⚠️ Personal Zalo runs on <strong>OpenClaw Zalo Connect (unofficial, zca-js)</strong> — automating a personal account may violate Zalo terms and can get the account restricted. <strong>Use a secondary account.</strong>' },
+        { textVi: 'Sau khi tạo bot, bấm <strong>Đăng nhập Zalo</strong> để quét QR ngay trong giao diện. Nếu cần chạy thủ công: <code>openclaw channels login --channel zalo-connect --account default</code>.', textEn: 'After creating the bot, click <strong>Zalo Login</strong> to scan the QR right in the UI. Manual fallback: <code>openclaw channels login --channel zalo-connect --account default</code>.' },
+        { textVi: 'Mặc định an toàn: DM theo cơ chế pairing, group tắt hết — sau khi quét QR hãy tự chọn DM/nhóm được phép trong cấu hình.', textEn: 'Secure defaults: DM uses pairing, all groups start disabled — after the QR scan, explicitly choose the allowed DMs/groups in the config.' },
       ],
+      // Mirrors buildZaloConnectChannelConfig() in bot-config-gen.js — keys validated
+      // against OpenClaw Zalo Connect 3.0.0's strict channel schema.
       channelConfig: {
-        zalouser: {
+        'zalo-connect': {
           enabled: true,
           defaultAccount: 'default',
           accounts: {
-            default: {
-              dmPolicy: 'open',
-              allowFrom: ['*'],
-              groupPolicy: 'allowlist',
-              groupAllowFrom: ['*'],
-            },
+            default: { enabled: true },
           },
-          dmPolicy: 'open',
-          allowFrom: ['*'],
+          dmPolicy: 'pairing',
+          allowFrom: [],
           groupPolicy: 'allowlist',
-          groupAllowFrom: ['*'],
-          historyLimit: 50,
+          groups: {
+            '*': { enabled: false, requireMention: true },
+          },
         },
       },
       pluginInstall: '',

package/dist/setup/shared/bot-config-gen.js

@@ -248,14 +248,14 @@
     });
     cfg.plugins = pluginsConfig.plugins;
 
-    // ── bindings for zalouser ────────────────────────────────────────────────
+    // ── bindings for zalo-connect ────────────────────────────────────────────────
     if (agentMetas.length > 0 && isZaloPersonal(channelKey)) {
       cfg.bindings = cfg.bindings || [];
       const firstAgentId = agentMetas[0]?.agentId || 'bot';
-      if (!cfg.bindings.some(b => b.match && b.match.channel === 'zalouser')) {
-        // Account-specific from the start so a second Zalo account added later routes
-        // correctly (each zalouser account binds by accountId).
-        cfg.bindings.push({ agentId: firstAgentId, match: { channel: 'zalouser', accountId: 'default' } });
+      if (!cfg.bindings.some(b => b.match && b.match.channel === 'zalo-connect')) {
+        // Account-specific from day one (plan §5.2): each account needs its own
+        // binding + credential namespace even while zalo-connect 2.4.6 is single-account.
+        cfg.bindings.push({ agentId: firstAgentId, match: { channel: 'zalo-connect', accountId: 'default' } });
       }
     }
 
@@ -309,31 +309,15 @@
 
       channels.telegram = telegramConfig;
     } else if (isZaloPersonal(channelKey)) {
-      // Zalo Personal — matches live Mkt/Williams configs
-      channels.zalouser = {
-        enabled: true,
-        defaultAccount: 'default',
-        accounts: {
-          default: {
-            dmPolicy: 'open',
-            allowFrom: ['*'],
-            groupPolicy: 'allowlist',
-            groupAllowFrom: ['*'],
-          },
-        },
-        dmPolicy: 'open',
-        allowFrom: ['*'],
-        groupPolicy: 'allowlist',
-        groupAllowFrom: ['*'],
-        historyLimit: 50,
-        // NOTE: do NOT add `reactionLevel`/`actions` here — the zalouser plugin's config
-        // schema is strict and rejects them ("must not have additional properties"), which
-        // crashes the gateway on boot. zalouser already supports the `react` action by
-        // default; reaction behavior is driven by the prompt (TOOLS.md), not channel config.
-        groups: {
-          '*': { enabled: true, requireMention: false },
-        },
-      };
+      // Zalo Personal → OpenClaw Zalo Connect, the only personal-Zalo backend.
+      // Secure defaults: DM pairing, empty
+      // allowFrom, all groups disabled + requireMention until the owner explicitly
+      // enables them post-QR. Never default to `allowFrom: ["*"]` / open groups.
+      // Every key below is validated against OpenClaw Zalo Connect 3.0.0's schema
+      // (`additionalProperties: false`) — do NOT add keys (e.g. historyLimit,
+      // groupAllowFrom) without re-checking `openclaw.plugin.json` first, an unknown
+      // key crashes the gateway on boot.
+      channels['zalo-connect'] = buildZaloConnectChannelConfig();
     } else if (channelKey === 'zalo-bot') {
       channels.zalo = { enabled: true, provider: 'official_account' };
     }
@@ -342,6 +326,26 @@
   }
 
 
+  // ═══════════════════════════════════════════════════════════════════════════════
+  // buildZaloConnectChannelConfig — secure-default channels['zalo-connect'] block
+  // ═══════════════════════════════════════════════════════════════════════════════
+  function buildZaloConnectChannelConfig() {
+    return {
+      enabled: true,
+      defaultAccount: 'default',
+      accounts: {
+        default: { enabled: true },
+      },
+      dmPolicy: 'pairing',
+      allowFrom: [],
+      groupPolicy: 'allowlist',
+      groups: {
+        '*': { enabled: false, requireMention: true },
+      },
+    };
+  }
+
+
   // ═══════════════════════════════════════════════════════════════════════════════
   // buildPluginsConfig — returns { plugins: { ... } }
   // ═══════════════════════════════════════════════════════════════════════════════
@@ -361,9 +365,11 @@
 
     const allow = ['memory-core'];
 
-    // Zalo Personal channel is native; install openclaw-zalo-mod manually via ClawHub when needed.
+    // Zalo Personal → zalo-connect channel plugin (pinned install happens in the
+    // entrypoint / creation flow). openclaw-zalo-mod stays a separate opt-in plugin.
     if (isZaloPersonal(channelKey)) {
-      allow.push('zalouser');
+      entries['zalo-connect'] = { enabled: true };
+      allow.push('zalo-connect');
     }
 
     // DuckDuckGo search plugin for web-search
@@ -518,6 +524,7 @@
     generateToken,
     buildOpenclawJson,
     buildChannelConfig,
+    buildZaloConnectChannelConfig,
     buildPluginsConfig,
     buildSkillsEntries,
     buildExecApprovalsJson,

package/dist/setup/shared/common-gen.js

@@ -40,6 +40,13 @@
   const TELEGRAM_RELAY_PLUGIN_ID = 'telegram-multibot-relay';
   const TELEGRAM_SETUP_GUIDE_FILENAME = 'TELEGRAM-GROUP-SETUP.md';
 
+  // ── OpenClaw Zalo Connect — single source of truth ──────────────────────────
+  // Pin the maintained fork tag so setup never falls back to upstream/ClawHub.
+  const ZALO_CHANNEL_ID = 'zalo-connect';
+  const ZALO_PLUGIN_ID = 'zalo-connect';
+  const ZALO_CONNECT_VERSION = '3.0.0';
+  const ZALO_CONNECT_PLUGIN_SPEC = 'https://github.com/tuanminhhole/openclaw-zalo-connect.git#v3.0.0';
+
   function buildRelayPluginInstallCommand(prefix = 'openclaw') {
     return `if [ ! -d "$OPENCLAW_STATE_DIR/extensions/${TELEGRAM_RELAY_PLUGIN_ID}" ]; then ${prefix} plugins install ${TELEGRAM_RELAY_PLUGIN_SPEC} 2>/dev/null || true; fi`;
   }
@@ -298,6 +305,10 @@ If setup reported a plugin install error, run this after the bot is running:
     TELEGRAM_RELAY_PLUGIN_SPEC,
     TELEGRAM_RELAY_PLUGIN_ID,
     TELEGRAM_SETUP_GUIDE_FILENAME,
+    ZALO_CHANNEL_ID,
+    ZALO_PLUGIN_ID,
+    ZALO_CONNECT_VERSION,
+    ZALO_CONNECT_PLUGIN_SPEC,
     buildRelayPluginInstallCommand,
     buildRelayPluginInstallCommandWin,
     buildTelegramPostInstallChecklist,

package/dist/setup/shared/docker-gen.js

@@ -223,6 +223,8 @@ if(touched){console.log('[patch-9router] Applied Codex compatibility patch.');}e
       gatewayPort = 18789,
       routerPort = 20128,
       osChoice = '',
+      // Personal-Zalo backend: empty or the single supported `zalo-connect` channel.
+      zaloBackend = '',
     } = options;
     // Windows bind-mounts give ClawHub-installed plugins world-writable perms (which openclaw
     // blocks), so on Windows we isolate extensions in a named volume. On macOS/Linux bind-mounts
@@ -231,6 +233,16 @@ if(touched){console.log('[patch-9router] Applied Codex compatibility patch.');}e
     const useExtensionsVolume = osChoice === 'win';
     const extVolMount = useExtensionsVolume ? '\n      - openclaw-extensions:/home/node/project/.openclaw/extensions' : '';
     const extVolDecl = useExtensionsVolume ? '\n  openclaw-extensions:' : '';
+    // SQLite state on Docker Desktop (macOS/Windows): the host bind mount goes through a
+    // virtualized file share (virtiofs/gRPC-FUSE) whose locking/mmap semantics break SQLite WAL —
+    // OpenClaw crashes with `Error: disk I/O error` on write (e.g. when a Zalo message arrives).
+    // Keep `.openclaw/state` on a named volume (the Linux VM's native filesystem) instead; the
+    // rest of `.openclaw` stays bind-mounted so workspaces/config remain visible on the host.
+    // Linux/VPS bind mounts are native ext4 — unchanged there (and state stays host-visible).
+    const useStateVolume = osChoice === 'macos' || osChoice === 'win';
+    const stateVolMount = useStateVolume ? '\n      - openclaw-state:/home/node/project/.openclaw/state' : '';
+    const stateVolDecl = useStateVolume ? '\n  openclaw-state:' : '';
+    const stateVolBlock = useStateVolume ? '\n\nvolumes:\n  openclaw-state:' : '';
     const skillLines = dockerfileSkillInstallMode === 'build' && allSkills.length > 0
       ? `\n# Install skills (ClawHub)\n${allSkills.map((skill) => `RUN openclaw skills install ${skill} || echo "Warning: Failed to install ${skill} due to rate limits."`).join('\n')}\n`
       : '';
@@ -268,21 +280,20 @@ if(touched){console.log('[patch-9router] Applied Codex compatibility patch.');}e
       '    return 0',
       '  fi',
       '  echo "[entrypoint] plugin $id missing; installing $spec"',
-      '  openclaw plugins install "$spec" 2>/dev/null || echo "[entrypoint] warning: failed to install plugin $spec"',
-      '}',
-      'ensure_zalouser() {',
-      '  NPM_DIR="$OPENCLAW_HOME/npm"',
-      '  PKG_DIR="$NPM_DIR/node_modules/@openclaw/zalouser"',
-      '  if [ -d "$PKG_DIR" ] || [ -d "$OPENCLAW_HOME/extensions/zalouser" ]; then',
-      '    echo "[entrypoint] zalouser plugin already installed (npm or extensions) — skipping"',
-      '  else',
-      '    echo "[entrypoint] zalouser plugin missing; installing via npm"',
-      '    mkdir -p "$NPM_DIR"',
-      '    cd "$NPM_DIR"',
-      '    npm init -y 2>/dev/null || true',
-      '    npm install @openclaw/zalouser@latest 2>/dev/null || echo "[entrypoint] warning: failed to install @openclaw/zalouser"',
-      '    cd /home/node/project',
-      '  fi',
+      '  case "$spec" in',
+      '    https://*.git#*)',
+      '      repo="${spec%%#*}"',
+      '      ref="${spec##*#}"',
+      '      tmp="/tmp/openclaw-plugin-$id-$ref"',
+      '      rm -rf "$tmp"',
+      '      if git clone --depth 1 --branch "$ref" "$repo" "$tmp" 2>/dev/null; then',
+      '        openclaw plugins install "$tmp" 2>/dev/null || echo "[entrypoint] warning: failed to install cloned plugin $id"',
+      '      else',
+      '        echo "[entrypoint] warning: failed to clone plugin $spec"',
+      '      fi',
+      '      ;;',
+      '    *) openclaw plugins install "$spec" 2>/dev/null || echo "[entrypoint] warning: failed to install plugin $spec" ;;',
+      '  esac',
       '}',
       'ensure_skill() {',
       '  id="$1"',
@@ -301,52 +312,14 @@ if(touched){console.log('[patch-9router] Applied Codex compatibility patch.');}e
     // Restore config AFTER plugin installs (which may clobber openclaw.json)
     runtimeParts.push(`node - <<'NODE'\n${restoreConfigScript}\nNODE`);
     runtimeParts.push(`node - <<'NODE'\n${securityCompatScript}\nNODE`);
-    // Zalouser stability: patch watchdog tolerance and add auto-restart monitor
-    runtimeParts.push([
-      '# Patch zalouser watchdog tolerance (35s -> 90s) to survive provider auth pre-warming',
-      'ZALO_JS=$(find "$OPENCLAW_HOME" -path "*/zalouser/dist/zalo-js-*.js" -type f 2>/dev/null | head -1)',
-      'if [ -n "$ZALO_JS" ] && grep -q "35e3" "$ZALO_JS" 2>/dev/null; then',
-      '  sed -i "s/LISTENER_WATCHDOG_MAX_GAP_MS\\\\s*=\\\\s*35e3/LISTENER_WATCHDOG_MAX_GAP_MS = 90e3/" "$ZALO_JS"',
-      '  echo "[entrypoint] patched zalouser watchdog gap: 35s -> 90s"',
-      'fi',
-      '# Automatically run Zalo sticker-mention patch if skill is present',
-      'for MENTIONS_JS in $(find "$OPENCLAW_HOME" -maxdepth 5 -path "*/skills/*/mentions.js" -type f 2>/dev/null); do',
-      '  if [ -f "$MENTIONS_JS" ]; then',
-      '    echo "[entrypoint] Running patch: $MENTIONS_JS"',
-      '    node "$MENTIONS_JS" || echo "[entrypoint] Warning: failed to run patch $MENTIONS_JS"',
-      '  fi',
-      'done',
-    ].join('\n'));
-    // Expose zalouser's ZCA API map (globalThis.__zcaApiByProfile) BEFORE the gateway imports
-    // zalouser, so openclaw-zalo-mod can reach the live Zalo API (dashboard Sync Account, group
-    // admin lookups, …). zalo-mod's own runtime patch lands AFTER zalouser is already imported,
-    // so it never takes effect on the running module — patching here (post sticker-mention restore,
-    // pre gateway-run) is the reliable fix.
-    {
-      const exposeZcaScript = [
-        "const fs=require('fs'),cp=require('child_process');",
-        "let files=[];",
-        "try{ files=cp.execSync('find \"'+(process.env.OPENCLAW_HOME||'')+'/npm\" -path \"*/@openclaw/zalouser/dist/zalo-js-*.js\" -type f 2>/dev/null',{encoding:'utf8'}).split('\\n').filter(Boolean); }catch(e){}",
-        "const reps=[['const apiByProfile = /* @__PURE__ */ new Map();','const apiByProfile = globalThis.__zcaApiByProfile || (globalThis.__zcaApiByProfile = /* @__PURE__ */ new Map());'],['const apiByProfile = new Map();','const apiByProfile = globalThis.__zcaApiByProfile || (globalThis.__zcaApiByProfile = new Map());']];",
-        "for(const f of files){ try{ let s=fs.readFileSync(f,'utf8'); if(s.includes('globalThis.__zcaApiByProfile')) continue; for(const pair of reps){ if(s.includes(pair[0])){ s=s.replace(pair[0],pair[1]); fs.writeFileSync(f,s); console.log('[entrypoint] exposed __zcaApiByProfile for zalo-mod in '+f); break; } } }catch(e){} }",
-      ].join('\n');
-      runtimeParts.push(`# Expose zalouser ZCA API map for openclaw-zalo-mod (before gateway imports zalouser)\nnode - <<'NODE'\n${exposeZcaScript}\nNODE`);
+    if (zaloBackend === 'zalo-connect') {
+      // Pinned ZaloConnect install (never `latest` — plan §4.1). ensure_plugin skips the
+      // install when extensions/zalo-connect already exists, so restarts never re-download
+      // and a reconnect never reinstalls. No dist patching, no mentions.js, no watchdog
+      // hacks: sticker/mention/reaction are native ZaloConnect actions.
+      const zaloConnectSpec = common.ZALO_CONNECT_PLUGIN_SPEC || 'https://github.com/tuanminhhole/openclaw-zalo-connect.git#v3.0.0';
+      runtimeParts.push(`ensure_plugin zalo-connect "${zaloConnectSpec}"`);
     }
-    runtimeParts.push([
-      '# Zalo channel auto-restart monitor (background)',
-      '(',
-      '  sleep 180',
-      '  while true; do',
-      '    sleep 60',
-      '    STATUS=$(openclaw channels status 2>/dev/null | grep -i "Zalo Personal" || true)',
-      '    if echo "$STATUS" | grep -qi "stopped"; then',
-      '      echo "[zalo-monitor] Zalo channel stopped - restarting container in 5s"',
-'      sleep 5',
-      '      kill 1 2>/dev/null || true',
-      '    fi',
-      '  done',
-      ') &',
-    ].join('\n'));
     runtimeParts.push('openclaw gateway run');
     const runtimeScript = ['#!/bin/sh', 'set -e', ...runtimeParts].join('\n');
     let browserInstall = '';
@@ -395,7 +368,7 @@ services:
     env_file:
       - ../../.env
 ${appEnvironmentBlock}${dependsOn}${extraHosts}    volumes:
-      - ${volumeMount}
+      - ${volumeMount}${stateVolMount}
     ports:
       - "127.0.0.1:${gatewayPort}:${gatewayPort}"
 
@@ -420,7 +393,7 @@ ${indentBlock(docker9RouterEntrypointScript, 8)}
       - "127.0.0.1:${routerPort}:${routerPort}"
 
 volumes:
-  9router-data:`;
+  9router-data:${stateVolDecl}`;
       } else if (isLocal) {
         const ollamaModelTag = String(selectedModel || 'ollama/gemma4:e2b').replace('ollama/', '');
         compose = `name: ${multiComposeName}
@@ -432,7 +405,7 @@ services:
     env_file:
       - ../../.env
 ${appEnvironmentBlock}${dependsOn}${extraHosts}    volumes:
-      - ${volumeMount}
+      - ${volumeMount}${stateVolMount}
     ports:
       - "127.0.0.1:${gatewayPort}:${gatewayPort}"
 
@@ -461,7 +434,7 @@ ${appEnvironmentBlock}${dependsOn}${extraHosts}    volumes:
       start_period: 30s
 
 volumes:
-  ollama-data:`;
+  ollama-data:${stateVolDecl}`;
       } else {
         compose = `name: ${multiComposeName}
 services:
@@ -472,9 +445,9 @@ services:
     env_file:
       - ../../.env
 ${appEnvironmentBlock}${extraHosts}    volumes:
-      - ${volumeMount}
+      - ${volumeMount}${stateVolMount}
     ports:
-      - "127.0.0.1:${gatewayPort}:${gatewayPort}"`;
+      - "127.0.0.1:${gatewayPort}:${gatewayPort}"${stateVolBlock}`;
       }
     } else if (is9Router) {
       compose = `name: ${singleComposeName}
@@ -488,7 +461,7 @@ services:
     depends_on:
       - 9router
 ${appEnvironmentBlock}${extraHostsBlock}\n    volumes:
-      - ${volumeMount}
+      - ${volumeMount}${stateVolMount}
       - openclaw-plugins:/home/node/project/.openclaw/npm${extVolMount}
     ports:
       - "127.0.0.1:${gatewayPort}:${gatewayPort}"
@@ -515,7 +488,7 @@ ${indentBlock(docker9RouterEntrypointScript, 8)}
 
 volumes:
   9router-data:
-  openclaw-plugins:${extVolDecl}`;
+  openclaw-plugins:${extVolDecl}${stateVolDecl}`;
     } else if (isLocal) {
       const ollamaModelTag = String(selectedModel || 'ollama/gemma4:e2b').replace('ollama/', '');
       compose = `name: ${singleComposeName}
@@ -531,7 +504,7 @@ ${appEnvironmentBlock}    depends_on:
 ${extraHostsBlock}\n    ports:
       - "127.0.0.1:${gatewayPort}:${gatewayPort}"
     volumes:
-      - ${volumeMount}
+      - ${volumeMount}${stateVolMount}
 
   ollama:
     image: ollama/ollama:latest
@@ -558,7 +531,7 @@ ${extraHostsBlock}\n    ports:
       start_period: 30s
 
 volumes:
-  ollama-data:`;
+  ollama-data:${stateVolDecl}`;
     } else {
       compose = `name: ${singleComposeName}
 services:
@@ -569,9 +542,9 @@ services:
     env_file:
       - ../../.env
 ${appEnvironmentBlock}${plainSingleExtraHosts ? `${extraHostsBlock}\n` : ''}    volumes:
-      - ${volumeMount}
+      - ${volumeMount}${stateVolMount}
     ports:
-      - "127.0.0.1:${gatewayPort}:${gatewayPort}"`;
+      - "127.0.0.1:${gatewayPort}:${gatewayPort}"${stateVolBlock}`;
     }
 
     return {
@@ -599,5 +572,3 @@ ${appEnvironmentBlock}${plainSingleExtraHosts ? `${extraHostsBlock}\n` : ''}
 if (typeof exports !== 'undefined' && typeof globalThis !== 'undefined' && globalThis.__openclawDockerGen) {
   Object.assign(exports, globalThis.__openclawDockerGen);
 }
-
-