create-openclaw-bot 5.15.4 → 5.16.0

package/README.md

@@ -7,7 +7,7 @@
 *Run one command → open the dashboard → your bot is live. Windows · macOS · Linux · VPS — Docker-powered, auto-installed for you.*
 
 <p align="center">
-  <a href="https://github.com/tuanminhhole/openclaw-setup/releases"><img src="https://img.shields.io/badge/RELEASE-v5.15.4-0EA5E9?style=for-the-badge" alt="Version 5.15.4" /></a>
+  <a href="https://github.com/tuanminhhole/openclaw-setup/releases"><img src="https://img.shields.io/badge/RELEASE-v5.16.0-0EA5E9?style=for-the-badge" alt="Version 5.16.0" /></a>
   <a href="https://github.com/tuanminhhole/openclaw-setup?tab=MIT-1-ov-file"><img src="https://img.shields.io/badge/LICENSE-MIT-success?style=for-the-badge" alt="MIT License" /></a>
   <a href="https://www.npmjs.com/package/create-openclaw-bot"><img src="https://img.shields.io/npm/v/create-openclaw-bot?style=for-the-badge&label=CLI&color=2563EB&logo=npm&logoColor=white" alt="NPM Version" /></a>
   <a href="https://github.com/tuanminhhole/openclaw-setup/stargazers"><img src="https://img.shields.io/github/stars/tuanminhhole/openclaw-setup?style=for-the-badge&color=eab308&logo=github&logoColor=white" alt="GitHub Stars" /></a>
@@ -37,7 +37,7 @@
 
 ---
 
-## 🆕 What's New in v5.15.4
+## 🆕 What's New in v5.16.0
 
 - 🖥️ **"Control PC" — let the bot open Chrome & apps on your machine**: a new toggle on each bot card turns on the ability for the bot to open Chrome or an allow-listed app (TeamViewer, Zalo, …) on the computer running it. **Off by default**, token-gated, allow-list only, desktop-only.
 - 🌐 **Browsing works out of the box on every OS**: the bot drives your real Chrome on a desktop (your logged-in profile, so sites don't flag it) and starts its own headless Chromium on a server — no more "no browser available" just because Chrome wasn't running.

package/README.vi.md

@@ -7,7 +7,7 @@
 *Chạy một lệnh → mở dashboard → bot lên sóng. Windows · macOS · Linux · VPS — chạy trên Docker, tự cài giúp bạn.*
 
 <p align="center">
-  <a href="https://github.com/tuanminhhole/openclaw-setup/releases"><img src="https://img.shields.io/badge/RELEASE-v5.15.4-0EA5E9?style=for-the-badge" alt="Version 5.15.4" /></a>
+  <a href="https://github.com/tuanminhhole/openclaw-setup/releases"><img src="https://img.shields.io/badge/RELEASE-v5.16.0-0EA5E9?style=for-the-badge" alt="Version 5.16.0" /></a>
   <a href="https://github.com/tuanminhhole/openclaw-setup?tab=MIT-1-ov-file"><img src="https://img.shields.io/badge/LICENSE-MIT-success?style=for-the-badge" alt="MIT License" /></a>
   <a href="https://www.npmjs.com/package/create-openclaw-bot"><img src="https://img.shields.io/npm/v/create-openclaw-bot?style=for-the-badge&label=CLI&color=2563EB&logo=npm&logoColor=white" alt="NPM Version" /></a>
   <a href="https://github.com/tuanminhhole/openclaw-setup/stargazers"><img src="https://img.shields.io/github/stars/tuanminhhole/openclaw-setup?style=for-the-badge&color=eab308&logo=github&logoColor=white" alt="GitHub Stars" /></a>
@@ -37,7 +37,7 @@
 
 ---
 
-## 🆕 Có gì mới trong v5.15.4
+## 🆕 Có gì mới trong v5.16.0
 
 - 🖥️ **"Điều khiển máy" — cho bot mở Chrome & ứng dụng trên máy bạn**: nút mới trên thẻ mỗi bot, bật lên là bot mở được Chrome hoặc app trong danh sách cho phép (TeamViewer, Zalo, …) trên máy đang chạy bot. **Mặc định TẮT**, cần token, chỉ giới hạn danh sách bạn khai, chỉ dùng trên máy có màn hình.
 - 🌐 **Duyệt web chạy ngay trên mọi hệ điều hành**: máy để bàn thì bot dùng **Chrome thật** (profile đã đăng nhập, web ít nghi là bot), server thì tự mở Chromium headless — hết cảnh "không có trình duyệt" chỉ vì chưa mở Chrome.

package/dist/server/local-server.js

@@ -2767,6 +2767,10 @@ async function ocDaemon(projectDir, verb, extraArgs = []) {
  * stop+start that raced the migration lease all over again.
  */
 async function restartNativeRuntime(projectDir) {
+  // Every restart is a chance to repair a project installed before these two fixes existed — both
+  // calls are no-ops once the service env is complete and the stray files have been adopted.
+  await adoptStrayNativeHome(projectDir).catch(() => {});
+  await syncNativeServiceEnv(projectDir).catch(() => {});
   const stopStart = async () => {
     await ocDaemon(projectDir, 'stop');
     return ocDaemon(projectDir, 'start');
@@ -2799,6 +2803,102 @@ async function restartNativeRuntime(projectDir) {
   return true;
 }
 
+/**
+ * Make the generated service carry everything nativeEnv() promises.
+ *
+ * `openclaw daemon install` propagates only a fixed allow-list into the service it writes:
+ * OPENCLAW_STATE_DIR survives, but OPENCLAW_HOME does NOT — verified on both a systemd user unit and
+ * a launchd env-wrapper. Anything resolving paths from OPENCLAW_HOME then falls back to `~/.openclaw`
+ * and writes OUTSIDE the project. zalo-connect is the visible casualty: it stages inbound files and
+ * its Zalo session credentials under the wrong home, so a PDF sent to the bot lands somewhere the
+ * agent's workspace cannot reach ("em chưa trích xuất được nội dung từ PDF") and the session sits in
+ * a different home from the config that describes it.
+ *
+ * Idempotent: keys already present are left alone, so this is safe to run on every restart and it
+ * self-heals projects created before the fix.
+ */
+async function syncNativeServiceEnv(projectDir) {
+  if (!isNativeProject(projectDir)) return [];
+  const want = nativeEnv(projectDir);
+  const label = nativeServiceLabel(projectDir);
+
+  if (process.platform === 'linux') {
+    const unit = `${label}.service`;
+    const shown = await runCapture('systemctl', ['--user', 'show', '-p', 'FragmentPath', '--value', unit], { shell: false, timeout: 10000 });
+    const path = String(shown.stdout || '').trim() || join(os.homedir(), '.config', 'systemd', 'user', unit);
+    if (!existsSync(path)) return [];
+    const lines = (await fsp.readFile(path, 'utf8')).split('\n');
+    const have = new Set();
+    for (const line of lines) {
+      const m = line.trim().match(/^Environment="?([A-Z_0-9]+)=/);
+      if (m) have.add(m[1]);
+    }
+    const missing = Object.entries(want).filter(([k, v]) => !have.has(k) && v !== '');
+    if (!missing.length) return [];
+    // Insert after the last existing Environment= line so the additions stay inside [Service].
+    let at = -1;
+    lines.forEach((line, i) => { if (line.startsWith('Environment=')) at = i; });
+    if (at < 0) at = lines.findIndex((line) => line.trim() === '[Service]');
+    if (at < 0) return [];
+    lines.splice(at + 1, 0, ...missing.map(([k, v]) => `Environment=${k}=${v}`));
+    await fsp.copyFile(path, `${path}.bak`).catch(() => {});
+    await fsp.writeFile(path, lines.join('\n'), 'utf8');
+    await run('systemctl', ['--user', 'daemon-reload'], {}).catch(() => {});
+    sendLog(`[native] service env completed: ${missing.map(([k]) => k).join(', ')}`);
+    return missing.map(([k]) => k);
+  }
+
+  if (process.platform === 'darwin') {
+    // launchd runs the gateway through an env-wrapper that sources this file, so patching it is the
+    // launchd equivalent of adding Environment= lines to a unit.
+    const envFile = join(projectDir, '.openclaw', 'service-env', `${label}.env`);
+    if (!existsSync(envFile)) return [];
+    const body = await fsp.readFile(envFile, 'utf8');
+    const have = new Set([...body.matchAll(/^\s*export\s+([A-Z_0-9]+)=/gm)].map((m) => m[1]));
+    const missing = Object.entries(want).filter(([k, v]) => !have.has(k) && v !== '');
+    if (!missing.length) return [];
+    const added = missing.map(([k, v]) => `export ${k}='${String(v).replace(/'/g, "'\\''")}'`).join('\n');
+    await fsp.copyFile(envFile, `${envFile}.bak`).catch(() => {});
+    await fsp.writeFile(envFile, `${body.replace(/\n*$/, '')}\n${added}\n`, 'utf8');
+    sendLog(`[native] service env completed: ${missing.map(([k]) => k).join(', ')}`);
+    return missing.map(([k]) => k);
+  }
+
+  return [];
+}
+
+/**
+ * Reunite a native project with the files an unset OPENCLAW_HOME scattered into `~/.openclaw`.
+ *
+ * This MUST run before syncNativeServiceEnv takes effect: once OPENCLAW_HOME is finally correct, the
+ * plugin looks for its Zalo session inside the project — and if the credentials are still sitting in
+ * the home directory it finds nothing and demands a fresh QR login. Copy (never move) so a failed
+ * run leaves the working original in place; skip anything the project already has.
+ */
+async function adoptStrayNativeHome(projectDir) {
+  if (!isNativeProject(projectDir)) return [];
+  const projectHome = join(projectDir, '.openclaw');
+  const strayHome = join(os.homedir(), '.openclaw');
+  if (resolve(strayHome) === resolve(projectHome) || !existsSync(strayHome)) return [];
+  const moved = [];
+  const entries = await fsp.readdir(strayHome, { withFileTypes: true }).catch(() => []);
+  for (const entry of entries) {
+    // `state` is deliberately excluded: the project has its own live database and merging two
+    // sqlite files is not something a copy can do correctly.
+    const isCreds = /^zalo-connect-credentials.*\.json$/.test(entry.name);
+    if (!isCreds && entry.name !== 'media') continue;
+    const from = join(strayHome, entry.name);
+    const to = join(projectHome, entry.name);
+    if (existsSync(to)) continue;
+    await fsp.cp(from, to, { recursive: true }).catch(() => {});
+    if (existsSync(to)) moved.push(entry.name);
+  }
+  if (moved.length) {
+    sendLog(`[migrate] Native: adopted ${moved.join(', ')} from ${strayHome} (written there while OPENCLAW_HOME was unset).`);
+  }
+  return moved;
+}
+
 /**
  * `openclaw daemon install` has no `--system` flag, so on Linux the gateway becomes a systemd USER
  * unit — and a user manager without linger is torn down when that user's last session exits. On a
@@ -2836,6 +2936,16 @@ async function ensureSystemdLinger() {
  */
 async function ensureNativePlugins(projectDir, { restart = false } = {}) {
   if (!isNativeProject(projectDir)) return [];
+  // Same cleanup the container entrypoint does (docker-gen.js): an interrupted `plugins install`
+  // leaves extensions/.openclaw-install-stage-XXXXXX behind, and it still carries a plugin manifest —
+  // so the gateway logs "duplicate plugin id detected" every boot and a stale build competes with the
+  // real one for the same id. Native has no entrypoint, so it has to happen here.
+  const extRoot = join(projectDir, '.openclaw', 'extensions');
+  for (const entry of await fsp.readdir(extRoot, { withFileTypes: true }).catch(() => [])) {
+    if (!entry.isDirectory() || !entry.name.startsWith('.openclaw-install-stage-')) continue;
+    await fsp.rm(join(extRoot, entry.name), { recursive: true, force: true }).catch(() => {});
+    sendLog(`[native] removed abandoned plugin staging dir ${entry.name}`);
+  }
   let cfg = {};
   try { cfg = JSON.parse(await fsp.readFile(join(projectDir, '.openclaw', 'openclaw.json'), 'utf8')); } catch {}
   // learning-memory backs plugins.slots.contextEngine for every bot; zalo-connect only when a bot
@@ -2972,6 +3082,11 @@ async function startNativeRuntime({ projectDir, osChoice = '', gatewayPort, rout
   const env = nativeEnv(projectDir);
   await ensureSystemdLinger();
   await run('openclaw', ['daemon', 'install', '--force', '--port', String(gwPort)], { cwd: projectDir, env });
+  // Order is load-bearing: adopt the stray files FIRST, then complete the service env. The other way
+  // round, the gateway boots with a corrected OPENCLAW_HOME, finds no Zalo session there, and asks
+  // for a new QR scan even though a perfectly good session exists in the home directory.
+  await adoptStrayNativeHome(projectDir).catch((e) => sendLog(`[migrate] stray home skipped: ${e.message}`));
+  await syncNativeServiceEnv(projectDir).catch((e) => sendLog(`[native] service env sync skipped: ${e.message}`));
   await run('openclaw', ['daemon', 'start'], { cwd: projectDir, env });
   // Let the first boot finish its state migrations here, while nothing else is competing for the
   // lease. Every later action (create bot, install plugin) then restarts a settled gateway.
@@ -6658,4 +6773,4 @@ export async function startLocalInstaller({ host = '127.0.0.1', preferredPort =
   ]).catch(() => {});
 }
 
-export { patchBrowserAutomationHostPreference, debugChromeProfileDir, defaultChromeProfileDir, createBotInProject, updateBotInProject, deleteBotInProject, validateOpenclawConfig, startZaloLogin, readBotCredentials, resolveProject9RouterApiKey, installCore, deleteProjectFolder, buildZaloHealthSnapshot, removeEmptyWorkspaceAttestations, runHostCommand, detectHostCommands, detectHostCapabilityCommands, grantHostCapabilities, detectCodexApp, detectCodexMarketplace, resolveCodexCli, openPrivacyPane, projectDeployMode, isNativeProject, nativeServiceLabel, nativeEnv, ocArgv, migrateNativePaths, discoverNativeProjectRoots, detectOs, stripCliWarnings, migrationLeaseDeadline, ensureNativePlugins, findFreeHostPort };
+export { patchBrowserAutomationHostPreference, debugChromeProfileDir, defaultChromeProfileDir, createBotInProject, updateBotInProject, deleteBotInProject, validateOpenclawConfig, startZaloLogin, readBotCredentials, resolveProject9RouterApiKey, installCore, deleteProjectFolder, buildZaloHealthSnapshot, removeEmptyWorkspaceAttestations, runHostCommand, detectHostCommands, detectHostCapabilityCommands, grantHostCapabilities, detectCodexApp, detectCodexMarketplace, resolveCodexCli, openPrivacyPane, projectDeployMode, isNativeProject, nativeServiceLabel, nativeEnv, ocArgv, migrateNativePaths, discoverNativeProjectRoots, detectOs, stripCliWarnings, migrationLeaseDeadline, ensureNativePlugins, findFreeHostPort, syncNativeServiceEnv, adoptStrayNativeHome };

package/dist/setup/shared/common-gen.js

@@ -268,7 +268,13 @@ If setup reported a plugin install error, run this after the bot is running:
         {
           id: 'smart-route',
           name: 'Smart Proxy (Auto Route)',
-          contextWindow: 200000,
+          // smart-route fans out to whatever free upstreams the operator's combo holds, and the
+          // SMALLEST window in that pool is the real ceiling — many free models stop at 128k.
+          // Declaring 200k let sessions grow past what the route could actually accept: once
+          // full, even the compaction summarize call overflowed and every turn died with
+          // "auto-compaction could not recover" until /new. 131072 keeps compaction triggering
+          // (window - reserveTokens) while the summarize request still fits everywhere.
+          contextWindow: 131072,
           maxTokens: 8192,
           input: ['text', 'image'],
         },

package/dist/setup/shared/docker-gen.js

@@ -272,8 +272,12 @@ if(touched){console.log('[patch-9router] Applied Codex compatibility patch.');}e
     //   • imageMaxDimensionPx / imageQuality / contextLimits.toolResultMaxChars → keep one
     //     heavy turn (deep research, 4K chart read-back) from overflowing the context
     //     window mid tool-loop, which cannot be compacted and poisons the session.
+    //   • smart-route contextWindow 200000 → 131072: the old declared window exceeded the
+    //     smallest upstream in typical free-model combos, so full sessions deadlocked —
+    //     the compaction summarize call itself overflowed and only /new recovered. Only the
+    //     exact setup-written 200000 is rewritten; an operator's custom value is left alone.
     // Each key is only filled in when absent, so an operator's own tuning is never clobbered.
-    const contextDefaultsScript = `const fs=require('fs'),path=require('path');const p=path.join(process.cwd(),'.openclaw','openclaw.json');if(fs.existsSync(p)){const c=JSON.parse(fs.readFileSync(p,'utf8'));let ch=false;c.skills=c.skills||{};c.skills.workshop=c.skills.workshop||{};if(!c.skills.workshop.approvalPolicy){c.skills.workshop.approvalPolicy='auto';ch=true;}if(c.browser&&c.browser.enabled!==false){c.tools=c.tools||{};const dn=Array.isArray(c.tools.deny)?c.tools.deny:[];if(!dn.includes('browser')){dn.push('browser');c.tools.deny=dn;ch=true;}}const d=(c.agents&&c.agents.defaults)?c.agents.defaults:null;if(d){if(d.imageMaxDimensionPx===undefined){d.imageMaxDimensionPx=1024;ch=true;}if(d.imageQuality===undefined){d.imageQuality='efficient';ch=true;}d.contextLimits=d.contextLimits||{};if(d.contextLimits.toolResultMaxChars===undefined){d.contextLimits.toolResultMaxChars=12000;ch=true;}}if(ch)fs.writeFileSync(p,JSON.stringify(c,null,2));}`;
+    const contextDefaultsScript = `const fs=require('fs'),path=require('path');const p=path.join(process.cwd(),'.openclaw','openclaw.json');if(fs.existsSync(p)){const c=JSON.parse(fs.readFileSync(p,'utf8'));let ch=false;c.skills=c.skills||{};c.skills.workshop=c.skills.workshop||{};if(!c.skills.workshop.approvalPolicy){c.skills.workshop.approvalPolicy='auto';ch=true;}if(c.browser&&c.browser.enabled!==false){c.tools=c.tools||{};const dn=Array.isArray(c.tools.deny)?c.tools.deny:[];if(!dn.includes('browser')){dn.push('browser');c.tools.deny=dn;ch=true;}}const d=(c.agents&&c.agents.defaults)?c.agents.defaults:null;if(d){if(d.imageMaxDimensionPx===undefined){d.imageMaxDimensionPx=1024;ch=true;}if(d.imageQuality===undefined){d.imageQuality='efficient';ch=true;}d.contextLimits=d.contextLimits||{};if(d.contextLimits.toolResultMaxChars===undefined){d.contextLimits.toolResultMaxChars=12000;ch=true;}}const pr=c.models&&c.models.providers&&c.models.providers['9router'];if(pr&&Array.isArray(pr.models)){for(const m of pr.models){if(m&&m.id==='smart-route'&&m.contextWindow===200000){m.contextWindow=131072;ch=true;}}}if(ch)fs.writeFileSync(p,JSON.stringify(c,null,2));}`;
     // Companion backfill for the same older projects: their TOOLS.md was generated before the
     // skill-authoring / long-turn guidance existed, and workspace files are only written when a
     // bot is created — so a rebuild alone leaves the assistant stopping at "proposal awaiting
@@ -288,6 +292,17 @@ if(touched){console.log('[patch-9router] Applied Codex compatibility patch.');}e
       'export OPENCLAW_HOME="${OPENCLAW_HOME:-$PWD/.openclaw}"',
       'export OPENCLAW_STATE_DIR="${OPENCLAW_STATE_DIR:-$OPENCLAW_HOME}"',
       'mkdir -p "$OPENCLAW_HOME" "$OPENCLAW_STATE_DIR"',
+      // `openclaw plugins install` unpacks into extensions/.openclaw-install-stage-XXXXXX and removes
+      // it when it finishes. An interrupted install leaves the staging copy behind — and it still
+      // carries a plugin manifest, so the gateway logs "duplicate plugin id detected" on every boot
+      // and a stale build competes with the real one for the same id. Found on a production host: a
+      // zalo-connect 3.0.7 stage dir shadowing 3.0.17 for a week. Nothing is installing at entrypoint
+      // time, so any stage dir here is by definition abandoned.
+      'for stage in "$OPENCLAW_HOME"/extensions/.openclaw-install-stage-*; do',
+      '  [ -d "$stage" ] || continue',
+      '  echo "[entrypoint] removing abandoned plugin staging dir $(basename "$stage")"',
+      '  rm -rf "$stage"',
+      'done',
       'if [ "$OPENCLAW_STATE_DIR" != "$OPENCLAW_HOME" ]; then',
       '  for path in "$OPENCLAW_HOME"/*; do',
       '    [ -e "$path" ] || continue',

package/dist/web/app.js

@@ -413,7 +413,11 @@ function remoteAccessPanel(s = {}) {
   const host = r.host || '<your-server-ip>';
   const user = r.user || 'root';
   const portOf = (raw, def) => { try { return new URL(raw).port || def; } catch { return def; } };
-  const ports = Array.from(new Set([r.uiPort || 51789, portOf(s.gatewayUrl, 18789), portOf(s.routerUrl, 20128), 18790]));
+  // zalo-mod's dashboard is gateway port + 1, not a fixed 18790 — the same rule the plugin card's
+  // "Open" button uses. Hardcoding it meant any project whose gateway is not on 18789 got a tunnel
+  // command missing the dashboard port, and the dashboard then simply failed to load with no clue why.
+  const gwPort = Number(portOf(s.gatewayUrl, 18789));
+  const ports = Array.from(new Set([r.uiPort || 51789, gwPort, Number(portOf(s.routerUrl, 20128)), gwPort + 1]));
   const cmd = `ssh ${ports.map((p) => `-L ${p}:127.0.0.1:${p}`).join(' ')} ${user}@${host}`;
   return `<details class="card" style="margin-top:12px;" ${r.headless ? 'open' : ''}>
     <summary style="cursor:pointer; font-weight:600;">🌐 ${t('Mở từ máy khác (VPS/server)', 'Open from another machine (VPS/server)')}</summary>
@@ -1011,11 +1015,7 @@ function botListPanel(bots) {
   const listItems = bots.map(b => {
     const role = (b.role || b.desc || b.description || '').trim() || t('Tr\u1ee3 l\u00fd OpenClaw','OpenClaw assistant');
     const isZalo = b.channel === 'zalo-personal';
-    const health = isZalo ? zaloAccountHealth(b) : null;
-    const connection = !health ? t('Chưa rõ','Unknown') : health.running ? t('Đã kết nối','Connected') : health.lastError ? t('Mất kết nối','Disconnected') : t('Đang kết nối','Connecting');
-    const login = !health ? t('Chưa rõ','Unknown') : health.sessionSaved ? t('Đã đăng nhập','Logged in') : t('Chưa đăng nhập','Not logged in');
-    const connectionTone = health?.running ? 'ok' : health?.lastError ? 'bad' : 'warn';
-    const loginTone = health?.sessionSaved ? 'ok' : health ? 'bad' : 'warn';
+    const { connection, login, connectionTone, loginTone } = zaloHealthBadges(b);
     return `<article class="bot-item ${state.activeBotId===b.id?'active':''}" data-bot-id="${escapeHtml(b.id)}"><div class="bot-item-actions"><button class="bot-edit" data-edit-bot="${escapeHtml(b.id)}" title="${t('Sửa bot','Edit bot')}" aria-label="${t('Sửa bot','Edit bot')}">${actionIcon('edit')}</button><button class="bot-delete" data-delete-bot="${escapeHtml(b.id)}" title="${t('X\u00f3a bot','Delete bot')}" aria-label="${t('X\u00f3a bot','Delete bot')}">&times;</button></div><div class="bot-item-title"><b>${escapeHtml(b.name)}</b></div><small title="${escapeHtml(role)}">${escapeHtml(role)}</small>${isZalo ? `<div class="zalo-bot-health"><div><span>${t('Kết nối','Connection')}</span><em class="${connectionTone}">${connection}</em></div><div><span>${t('Đăng nhập','Login')}</span><em class="${loginTone}">${login}</em></div></div>` : ''}</article>`;
   });
   listItems.push(`
@@ -1623,7 +1623,10 @@ document.querySelectorAll('[data-project-pick-folder]').forEach(btn => btn.oncli
     body.projectDir = activeProjectDir();
     body.channel = state.botChannel || 'telegram';
     body.userTimezone = state.tz;
-    if (body.channel === 'zalo-personal') {
+    // Only the CREATE flow starts a Zalo QR login (the server kicks it off and sets
+    // loginStarted). Editing a bot (rename, persona...) must never pop the QR modal —
+    // the session is already saved and the PUT endpoint starts no login.
+    if (body.channel === 'zalo-personal' && !state.botEditId) {
       state.botModalOpen = false;
       state.zaloLoginOpen = true;
       state.zaloQrDataUrl = '';
@@ -1718,6 +1721,24 @@ function zaloAccountHealth(bot) {
     || accounts.find((account) => account.accountId === (bot?.accountId || 'default'))
     || null;
 }
+// Connection/login labels for one bot. lastError wins over running: the gateway keeps
+// running=true while the Zalo listener is stuck in a retry loop (e.g. "Đăng nhập thất
+// bại"), so a running-first check painted dead bots green.
+function zaloHealthBadges(bot) {
+  const health = bot?.channel === 'zalo-personal' ? zaloAccountHealth(bot) : null;
+  const loginFailed = !!health?.lastError && /đăng nhập|log ?in|auth|credential|session/i.test(String(health.lastError));
+  const connection = !health ? t('Chưa rõ','Unknown')
+    : health.lastError ? t('Mất kết nối','Disconnected')
+    : health.running ? t('Đã kết nối','Connected')
+    : t('Đang kết nối','Connecting');
+  const login = !health ? t('Chưa rõ','Unknown')
+    : loginFailed ? t('Phiên hết hạn','Session expired')
+    : health.sessionSaved ? t('Đã đăng nhập','Logged in')
+    : t('Chưa đăng nhập','Not logged in');
+  const connectionTone = !health ? 'warn' : health.lastError ? 'bad' : health.running ? 'ok' : 'warn';
+  const loginTone = !health ? 'warn' : loginFailed ? 'bad' : health.sessionSaved ? 'ok' : 'bad';
+  return { health, connection, login, connectionTone, loginTone };
+}
 function zaloToolbar(channelBots = []) {
   const active = channelBots.find((bot) => bot.id === state.activeBotId) || channelBots[0];
   const health = zaloAccountHealth(active);
@@ -1729,6 +1750,42 @@ async function loadZaloHealth(silent=false){
   try { state.zaloHealth = await api('/api/zalo/health' + projectQuery()); } catch (_) { state.zaloHealth = null; }
   if (!silent) render();
 }
+// Patch the connection/login badges of the rendered bot cards in place. render() rebuilds
+// the whole panel (killing focus/scroll), so the auto-refresh below must never call it.
+function updateZaloHealthDom() {
+  const bots = state.install?.bots || [];
+  document.querySelectorAll('.bot-item[data-bot-id] .zalo-bot-health').forEach((wrap) => {
+    const id = wrap.closest('[data-bot-id]')?.dataset.botId;
+    const bot = bots.find((b) => b.id === id);
+    if (!bot) return;
+    const badges = zaloHealthBadges(bot);
+    const ems = wrap.querySelectorAll('em');
+    if (ems[0]) { ems[0].className = badges.connectionTone; ems[0].textContent = badges.connection; }
+    if (ems[1]) { ems[1].className = badges.loginTone; ems[1].textContent = badges.login; }
+  });
+}
+// Live status: poll the health endpoint while Zalo bots are on screen (the server caches
+// the ~3s CLI probe with a short TTL, so this stays cheap) and patch the badges in place —
+// no more pressing "Làm mới" to see a bot drop or come back.
+const ZALO_HEALTH_POLL_MS = 10000;
+let zaloHealthPollBusy = false;
+// Debounced instant refresh for log-visible state changes (login saved, container
+// restarted...) so the badges flip within ~2s instead of waiting out a poll tick.
+let zaloHealthRefreshTimer = null;
+function scheduleZaloHealthRefresh() {
+  if (zaloHealthRefreshTimer) return;
+  zaloHealthRefreshTimer = setTimeout(async () => {
+    zaloHealthRefreshTimer = null;
+    try { await loadZaloHealth(true); updateZaloHealthDom(); } catch (_) {}
+  }, 1500);
+}
+setInterval(async () => {
+  if (document.hidden || zaloHealthPollBusy) return;
+  if (!activeProjectDir()) return;
+  if (!document.querySelector('.bot-item[data-bot-id] .zalo-bot-health')) return;
+  zaloHealthPollBusy = true;
+  try { await loadZaloHealth(true); updateZaloHealthDom(); } finally { zaloHealthPollBusy = false; }
+}, ZALO_HEALTH_POLL_MS);
 async function loadFeatureFlags(silent=false){
   const botId=currentBotId();
   if (!activeProjectDir()) { state.featureFlags = {}; state.featureInstalled = {}; state.featureVersions = {}; if (!silent) render(); return; }
@@ -1784,6 +1841,7 @@ function appendLogLine(line) {
     });
     return;
   }
+  if (/\[zalo-connect\].*(login saved|listener (connected|start failed)|restarted|login failed|logged out)/i.test(line)) scheduleZaloHealthRefresh();
   const html = `<p>${escapeHtml(line)}</p>`;
   if (state.zaloLoginOpen || /\[zalo-connect\]|zalo|qr|login|scan/i.test(line)) {
     state.zaloLoginLines.push(cleanTerminalLine(line));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-openclaw-bot",
-  "version": "5.15.4",
+  "version": "5.16.0",
   "description": "Interactive CLI installer for OpenClaw Bot",
   "main": "dist/cli.js",
   "bin": {