create-openclaw-bot 5.16.2 → 5.16.4

package/README.md

@@ -7,7 +7,7 @@
 *Run one command → open the dashboard → your bot is live. Windows · macOS · Linux · VPS — Docker-powered, auto-installed for you.*
 
 <p align="center">
-  <a href="https://github.com/tuanminhhole/openclaw-setup/releases"><img src="https://img.shields.io/badge/RELEASE-v5.16.2-0EA5E9?style=for-the-badge" alt="Version 5.16.2" /></a>
+  <a href="https://github.com/tuanminhhole/openclaw-setup/releases"><img src="https://img.shields.io/badge/RELEASE-v5.16.4-0EA5E9?style=for-the-badge" alt="Version 5.16.4" /></a>
   <a href="https://github.com/tuanminhhole/openclaw-setup?tab=MIT-1-ov-file"><img src="https://img.shields.io/badge/LICENSE-MIT-success?style=for-the-badge" alt="MIT License" /></a>
   <a href="https://www.npmjs.com/package/create-openclaw-bot"><img src="https://img.shields.io/npm/v/create-openclaw-bot?style=for-the-badge&label=CLI&color=2563EB&logo=npm&logoColor=white" alt="NPM Version" /></a>
   <a href="https://github.com/tuanminhhole/openclaw-setup/stargazers"><img src="https://img.shields.io/github/stars/tuanminhhole/openclaw-setup?style=for-the-badge&color=eab308&logo=github&logoColor=white" alt="GitHub Stars" /></a>
@@ -37,15 +37,26 @@
 
 ---
 
-## 🆕 What's New in v5.16.2
+## 🆕 What's New in v5.16.4
+
+- 🚑 **The big OpenClaw 2026.8.1 catch-up — the old setup had gone stale; this wave heals it all in one pass.** OpenClaw (the platform the bots run on) shipped a major upgrade and changed the rules: configs are strictly checked, data moved to a new home, several install commands were renamed. With the old setup that meant fresh installs could stall, running bots suddenly went **silent**, and the admin screen showed **0 bots** while the bot was alive. As of 5.16.3–5.16.4: fresh installs run smoothly on 2026.8.1 (Docker and native, Windows/macOS/Linux), and **existing machines heal themselves on upgrade** — stale config cleaned, data relocated, and the old file that could mute the bot retired automatically.
+- 🤖 **The bot stops claiming "I can't see the file"**: files sent through chat now come with clear directions for the AI — even weaker models find them.
+- 🔁 **9Router (the AI model router) comes back on its own** after a server reboot or UI maintenance — previously it could die silently and the bot lost its brain.
+- 🔄 **The in-app "Update" button really updates now**: on standard server installs it used to just restart the old version while reporting success — now it pulls the latest and relaunches itself.
+- 🧭 **One setup build manages both generations** (2026.7 and 2026.8) — renamed commands are tried the new way first with an automatic fallback, so nobody is forced to upgrade overnight.
+
+<details>
+<summary><b>Previous: What's new in v5.15.3</b></summary>
 
 - 🖥️ **"Control PC" — let the bot open Chrome & apps on your machine**: a new toggle on each bot card turns on the ability for the bot to open Chrome or an allow-listed app (TeamViewer, Zalo, …) on the computer running it. **Off by default**, token-gated, allow-list only, desktop-only.
 - 🌐 **Browsing works out of the box on every OS**: the bot drives your real Chrome on a desktop (your logged-in profile, so sites don't flag it) and starts its own headless Chromium on a server — no more "no browser available" just because Chrome wasn't running.
 
+</details>
+
 <details>
 <summary><b>Previous: What's new in v5.14.1</b></summary>
 
-- 🦞 **Zalo bots acknowledge your message with a reaction**: an icon lands on your message right away, so you can see the bot picked it up while the answer is still being written. It runs in the channel layer, so it **costs no tokens**. On by default for new Zalo bots; change or disable it via `messages.ackReaction` in `openclaw.json`. Needs Zalo Connect 3.0.15+.
+- 🦞 **Zalo bots react to acknowledge your message**: an icon appears on the message you just sent, so you know the bot received it while it is still writing the reply. Runs at the chat-channel layer, so it **costs no tokens**. On by default for new Zalo bots; change the icon or turn it off via `messages.ackReaction` in `openclaw.json`. Needs Zalo Connect 3.0.15+.
 
 </details>
 

package/README.vi.md

@@ -7,7 +7,7 @@
 *Chạy một lệnh → mở dashboard → bot lên sóng. Windows · macOS · Linux · VPS — chạy trên Docker, tự cài giúp bạn.*
 
 <p align="center">
-  <a href="https://github.com/tuanminhhole/openclaw-setup/releases"><img src="https://img.shields.io/badge/RELEASE-v5.16.2-0EA5E9?style=for-the-badge" alt="Version 5.16.2" /></a>
+  <a href="https://github.com/tuanminhhole/openclaw-setup/releases"><img src="https://img.shields.io/badge/RELEASE-v5.16.4-0EA5E9?style=for-the-badge" alt="Version 5.16.4" /></a>
   <a href="https://github.com/tuanminhhole/openclaw-setup?tab=MIT-1-ov-file"><img src="https://img.shields.io/badge/LICENSE-MIT-success?style=for-the-badge" alt="MIT License" /></a>
   <a href="https://www.npmjs.com/package/create-openclaw-bot"><img src="https://img.shields.io/npm/v/create-openclaw-bot?style=for-the-badge&label=CLI&color=2563EB&logo=npm&logoColor=white" alt="NPM Version" /></a>
   <a href="https://github.com/tuanminhhole/openclaw-setup/stargazers"><img src="https://img.shields.io/github/stars/tuanminhhole/openclaw-setup?style=for-the-badge&color=eab308&logo=github&logoColor=white" alt="GitHub Stars" /></a>
@@ -37,11 +37,22 @@
 
 ---
 
-## 🆕 Có gì mới trong v5.16.2
+## 🆕 Có gì mới trong v5.16.4
+
+- 🚑 **Theo kịp OpenClaw 2026.8.1 — bản setup cũ đã lỗi thời, đợt này chữa hết một lượt.** OpenClaw (nền tảng chạy bot) nâng cấp lớn và đổi nhiều "luật chơi": file cấu hình bị soát khắt khe hơn, chỗ lưu dữ liệu dời đi, vài lệnh cài đặt đổi tên. Với bản setup cũ, hệ quả là cài bot mới có thể đứng giữa chừng, bot đang chạy bỗng **im lặng không trả lời**, màn hình quản trị hiện **0 bot** dù bot vẫn sống. Từ 5.16.3–5.16.4: cài mới chạy mượt trên 2026.8.1 (đủ Docker lẫn native, Windows/macOS/Linux), **máy cũ tự được chữa khi nâng cấp** — tự dọn cấu hình lỗi thời, tự dời dữ liệu, tự gỡ file cũ từng khiến bot "câm".
+- 🤖 **Bot hết chối "không thấy file"**: file khách gửi qua chat giờ được chỉ đường tận nơi cho AI — kể cả model yếu cũng tìm được.
+- 🔁 **9Router (bộ định tuyến model AI) tự sống lại** sau khi máy chủ khởi động lại hay giao diện bảo trì — trước đây nó có thể chết im mà không ai hay, bot mất não.
+- 🔄 **Nút "Cập nhật" trong giao diện giờ cập nhật thật**: trên máy chủ cài kiểu chuẩn, trước đây nút chỉ khởi động lại bản cũ mà vẫn báo thành công — giờ bấm là setup tự kéo bản mới về rồi tự khởi động lại.
+- 🧭 **Một bản setup quản được cả máy đời cũ (2026.7) lẫn đời mới (2026.8)** — lệnh nào openclaw đổi tên thì setup tự thử tên mới rồi lùi về tên cũ, không bắt khách nâng cấp gấp.
+
+<details>
+<summary><b>Trước đó: Có gì mới trong v5.15.3</b></summary>
 
 - 🖥️ **"Điều khiển máy" — cho bot mở Chrome & ứng dụng trên máy bạn**: nút mới trên thẻ mỗi bot, bật lên là bot mở được Chrome hoặc app trong danh sách cho phép (TeamViewer, Zalo, …) trên máy đang chạy bot. **Mặc định TẮT**, cần token, chỉ giới hạn danh sách bạn khai, chỉ dùng trên máy có màn hình.
 - 🌐 **Duyệt web chạy ngay trên mọi hệ điều hành**: máy để bàn thì bot dùng **Chrome thật** (profile đã đăng nhập, web ít nghi là bot), server thì tự mở Chromium headless — hết cảnh "không có trình duyệt" chỉ vì chưa mở Chrome.
 
+</details>
+
 <details>
 <summary><b>Trước đó: Có gì mới trong v5.14.1</b></summary>
 

package/dist/server/local-server.js

@@ -37,8 +37,39 @@ const CHROME_PROFILE_CACHE_DIRS = [
   'extensions_crx_cache', 'optimization_guide_model_store', 'blob_storage',
 ];
 
+// openclaw 2026.8.x replaced exec-approvals.json with shared SQLite state and BLOCKS every
+// message dispatch while the legacy file exists ("ExecApprovalsMigrationRequiredError" —
+// measured on vps_c-thu 02/09/2026: the bot went silent with zero model calls, and doctor
+// refuses to migrate the file itself). The exec policy already lives in openclaw.json
+// (tools.exec), so on 2026.8+ we must neither write nor keep this file.
+function specMajorMinor(spec) {
+  const m = String(spec || '').match(/(\d{4})\.(\d+)/);
+  return m ? Number(m[1]) * 100 + Number(m[2]) : 0;
+}
+let hostOcMajorMinorCache = null;
+async function hostOpenclawMajorMinor() {
+  if (hostOcMajorMinorCache !== null) return hostOcMajorMinorCache;
+  const r = await runCapture('openclaw', ['--version'], { shell: false }).catch(() => null);
+  hostOcMajorMinorCache = specMajorMinor(r && (r.stdout || r.stderr));
+  return hostOcMajorMinorCache;
+}
+async function projectOpenclawMajorMinor(projectDir) {
+  // Docker projects run the pinned image spec; native projects run the host install.
+  if (isNativeProject(projectDir)) return (await hostOpenclawMajorMinor()) || specMajorMinor(OPENCLAW_NPM_SPEC);
+  return specMajorMinor(OPENCLAW_NPM_SPEC);
+}
+
 async function syncExecApprovals(projectDir, cfg) {
   const openclawHome = join(projectDir, '.openclaw');
+  if ((await projectOpenclawMajorMinor(projectDir)) >= 202608) {
+    for (const f of [join(openclawHome, 'exec-approvals.json'), join(openclawHome, '.openclaw', 'exec-approvals.json')]) {
+      if (existsSync(f)) {
+        await fsp.rename(f, `${f}.bak-legacy-${Date.now()}`).catch(() => {});
+        sendLog(`[migrate] parked legacy exec approvals ${f} (openclaw >=2026.8 blocks dispatch while it exists)`);
+      }
+    }
+    return;
+  }
   const agentMetas = (cfg.agents?.list || []).map((a) => ({ agentId: a.id }));
   const approvals = buildExecApprovalsJson({ agentMetas });
 
@@ -1404,7 +1435,39 @@ function ensureConfigShape(cfg) {
   cfg.agents.defaults = cfg.agents.defaults || { model: { primary: DEFAULT_MODEL, fallbacks: [] } };
   cfg.agents.defaults.model = cfg.agents.defaults.model || { primary: DEFAULT_MODEL, fallbacks: [] };
   if (!cfg.agents.defaults.model.primary || cfg.agents.defaults.model.primary === '9router/smart-route' || cfg.agents.defaults.model.primary === 'openai/smart-route') cfg.agents.defaults.model.primary = DEFAULT_MODEL;
-  cfg.agents.list = Array.isArray(cfg.agents.list) ? cfg.agents.list : [];
+  // openclaw 2026.8.x keys agents by `agents.entries` and its strict schema REJECTS
+  // `agents.list` in the FILE (measured on vps_c-thu: doctor moves list→entries, then the
+  // whole UI shows 0 bots because everything here reads .list). Bridge the two shapes:
+  // hydrate a hidden .list view from entries, and expose .entries as a getter built from
+  // .list — so JSON.stringify writes only schema-valid entries while every read/mutation
+  // path in this file keeps working on .list unchanged. Configs that still use a real
+  // list (openclaw ≤2026.7 projects) keep the old behavior untouched.
+  const rawEntries = (cfg.agents.entries && typeof cfg.agents.entries === 'object' && !Array.isArray(cfg.agents.entries))
+    ? cfg.agents.entries : null;
+  if (rawEntries) {
+    const seeded = Array.isArray(cfg.agents.list) && cfg.agents.list.length
+      ? cfg.agents.list
+      : Object.entries(rawEntries).map(([id, v]) => ({ id, ...(v && typeof v === 'object' ? v : {}) }));
+    Object.defineProperty(cfg.agents, 'list', { value: seeded, enumerable: false, writable: true, configurable: true });
+    Object.defineProperty(cfg.agents, 'entries', {
+      enumerable: true,
+      configurable: true,
+      get() {
+        const out = {};
+        for (const a of (cfg.agents.list || [])) {
+          if (a && a.id) { const { id, ...rest } = a; out[id] = rest; }
+        }
+        return out;
+      },
+      set(v) {
+        if (v && typeof v === 'object' && !Array.isArray(v)) {
+          cfg.agents.list = Object.entries(v).map(([id, x]) => ({ id, ...(x && typeof x === 'object' ? x : {}) }));
+        }
+      },
+    });
+  } else {
+    cfg.agents.list = Array.isArray(cfg.agents.list) ? cfg.agents.list : [];
+  }
   for (const agent of cfg.agents.list) {
     if (agent && typeof agent === 'object') {
       delete agent.channel;
@@ -2389,7 +2452,7 @@ async function startZaloConnectLogin(projectDir, accountId = 'default') {
         const check = await runCapture('docker', ['exec', botContainer, 'sh', '-lc', '[ -d "${OPENCLAW_HOME:-/home/node/project/.openclaw}/extensions/zalo-connect" ] && echo OK || echo MISSING'], { cwd: projectDir, shell: false }).catch(() => ({ stdout: 'ERR' }));
         if (String(check.stdout || '').trim() === 'MISSING') {
           sendLog(`[zalo-connect] Plugin missing — installing ${ZALO_CONNECT_PLUGIN_SPEC}...`);
-          const installCmd = `cd /home/node/project && openclaw plugins install ${ZALO_CONNECT_PLUGIN_SPEC} --force --acknowledge-clawhub-risk 2>&1`;
+          const installCmd = `cd /home/node/project && (openclaw plugins install ${ZALO_CONNECT_PLUGIN_SPEC} --force --accept-capabilities || openclaw plugins install ${ZALO_CONNECT_PLUGIN_SPEC} --force ${LEGACY_CLAWHUB_FLAG}) 2>&1`;
           const inst = await runCapture('docker', ['exec', botContainer, 'sh', '-lc', installCmd], { cwd: projectDir, shell: false });
           const instOut = `${inst.stdout}\n${inst.stderr}`;
           for (const line of instOut.split(/\r?\n/).filter(Boolean)) sendLog(`[zalo-connect] ${line}`);
@@ -2768,7 +2831,12 @@ function nativeServiceLabel(projectDir) {
 /** The env every native CLI call needs (mirrors the docker runtime env in docker-gen.js). */
 function nativeEnv(projectDir, extra = {}) {
   const dir = projectDir || state.projectDir || '';
-  const home = join(dir, '.openclaw');
+  // openclaw 2026.8.x fs-safe refuses atomic writes through a symlinked state dir
+  // ("Atomic replace parent must be a real directory") — hand it the real path. Native
+  // projects on 2026.8.x keep real state at ~/.openclaw with the project dir symlinked
+  // (daemon install rejects a custom OPENCLAW_HOME), so this path IS a symlink there.
+  let home = join(dir, '.openclaw');
+  try { home = fs.realpathSync(home); } catch {}
   const meta = readNativeMeta(dir) || {};
   const gatewayPort = String(meta.gatewayPort || state.gatewayPort || NATIVE_DEFAULT_GATEWAY_PORT);
   const label = nativeServiceLabel(dir);
@@ -2806,6 +2874,27 @@ function ocCapture(projectDir, args, opts = {}) {
   return runCapture(a.cmd, a.args, { shell: false, ...a.opts, ...opts, env: { ...(a.opts.env || {}), ...(opts.env || {}) } });
 }
 
+// openclaw 2026.8.x renamed the ClawHub consent flags — plugins: --accept-capabilities,
+// skills: --acknowledge-install-policy-warning. 2026.7 and older only know
+// --acknowledge-clawhub-risk. Callers pass the NEW flag; when the CLI rejects it
+// ("does not recognize option") retry once with the legacy flag so an updated setup can
+// still manage projects running an older openclaw.
+const LEGACY_CLAWHUB_FLAG = '--acknowledge-clawhub-risk';
+const NEW_CONSENT_FLAGS = ['--accept-capabilities', '--acknowledge-install-policy-warning'];
+function legacyConsentArgs(args) {
+  return args.map((a) => (NEW_CONSENT_FLAGS.includes(a) ? LEGACY_CLAWHUB_FLAG : a));
+}
+function flagNotRecognized(out) {
+  const text = typeof out === 'string' ? out : `${out?.stdout || ''}\n${out?.stderr || ''}\n${out?.message || ''}`;
+  return /does not recognize option/i.test(text);
+}
+/** ocCapture with the 2026.7↔2026.8 consent-flag fallback. */
+async function ocCaptureInstall(projectDir, args, opts = {}) {
+  const out = await ocCapture(projectDir, args, opts);
+  if (!flagNotRecognized(out)) return out;
+  return ocCapture(projectDir, legacyConsentArgs(args), opts);
+}
+
 /** Probe the managed gateway's own /health until it answers. */
 async function waitForNativeGatewayHealthy(projectDir, timeoutMs = 120000) {
   const meta = readNativeMeta(projectDir) || {};
@@ -3191,7 +3280,7 @@ async function ensureNativePlugins(projectDir, { restart = false } = {}) {
     if (existsSync(dir)) continue;
     const spec = id === ZALO_PLUGIN_ID ? ZALO_CONNECT_PLUGIN_SPEC : pluginInstallSpec(id);
     sendLog(`[native] plugin ${id} missing; installing ${spec}`);
-    const out = await ocCapture(projectDir, ['plugins', 'install', spec, '--force', '--acknowledge-clawhub-risk'], { timeout: 300000 });
+    const out = await ocCaptureInstall(projectDir, ['plugins', 'install', spec, '--force', '--accept-capabilities'], { timeout: 300000 });
     const text = `${out.stdout || ''}\n${out.stderr || ''}`;
     for (const line of text.split(/\r?\n/).map((l) => l.trimEnd()).filter(Boolean)) sendLog(`[native] ${line}`);
     if (existsSync(dir) || /installed plugin/i.test(text)) installed.push(id);
@@ -3258,6 +3347,15 @@ async function startNative9Router(projectDir, { restart = false } = {}) {
     sendLog(`[native] 9router already listening on ${routerPort}`);
     return routerPort;
   }
+  // Linux: run 9router as a systemd USER unit, not a detached child. startDetached leaves the
+  // process inside THIS server's cgroup — restarting the setup-ui service (or rebooting the VPS)
+  // silently killed 9router and the bot lost its model (measured on vps_c-thu, 02/09/2026).
+  // macOS/Windows keep the detached process: no deployed native host runs there yet, and each
+  // would need its own service wrapper (launchd/Task Scheduler).
+  if (process.platform === 'linux') {
+    const ok = await installNative9RouterUnit(projectDir, routerPort, dataDir).catch((e) => { sendLog(`[native] 9router unit skipped: ${e.message}`); return false; });
+    if (ok) return routerPort;
+  }
   startDetached('9router', ['-n', '-l', '-H', '127.0.0.1', '-p', String(routerPort), '--skip-update'], {
     cwd: projectDir,
     env: nativeEnv(projectDir, { DATA_DIR: dataDir }),
@@ -3265,6 +3363,92 @@ async function startNative9Router(projectDir, { restart = false } = {}) {
   return routerPort;
 }
 
+async function installNative9RouterUnit(projectDir, routerPort, dataDir) {
+  const bin = resolveBinPath('9router');
+  const binDir = bin.includes('/') ? dirname(bin) : '';
+  const unitDir = join(os.homedir(), '.config', 'systemd', 'user');
+  await fsp.mkdir(unitDir, { recursive: true });
+  const pathLine = [binDir, '/usr/local/sbin', '/usr/local/bin', '/usr/sbin', '/usr/bin', '/sbin', '/bin'].filter(Boolean).join(':');
+  const unit = [
+    '[Unit]',
+    `Description=9Router LLM proxy (127.0.0.1:${routerPort})`,
+    'After=network-online.target',
+    'Wants=network-online.target',
+    'StartLimitIntervalSec=0',
+    '',
+    '[Service]',
+    'Type=simple',
+    `WorkingDirectory=${projectDir}`,
+    `ExecStart=${bin.includes('/') ? bin : '/usr/bin/env 9router'} -n -l -H 127.0.0.1 -p ${routerPort} --skip-update`,
+    'Restart=always',
+    'RestartSec=5',
+    `Environment=HOME=${os.homedir()}`,
+    `Environment=DATA_DIR=${dataDir}`,
+    `Environment=PATH=${pathLine}`,
+    '',
+    '[Install]',
+    'WantedBy=default.target',
+  ].join('\n');
+  await fsp.writeFile(join(unitDir, 'openclaw-9router.service'), `${unit}\n`, 'utf8');
+  await run('systemctl', ['--user', 'daemon-reload'], {}).catch(() => {});
+  const res = await runCapture('systemctl', ['--user', 'enable', '--now', 'openclaw-9router.service'], { shell: false, timeout: 30000 });
+  if (res.code !== 0) throw new Error(String(res.stderr || res.stdout || 'systemctl enable failed').trim().slice(0, 160));
+  sendLog('[native] 9router installed as systemd user unit openclaw-9router.service (survives UI restarts and reboots)');
+  return true;
+}
+
+/**
+ * openclaw 2026.8.x `daemon install` only manages the service when the state dir is the
+ * canonical <account home>/.openclaw — a custom OPENCLAW_HOME is refused, and its fs-safe
+ * layer refuses atomic writes through a symlinked state dir ("parent must be a real
+ * directory"). Measured on vps_c-thu 02/09/2026. So for 2026.8+ the REAL state lives at
+ * ~/.openclaw and <project>/.openclaw becomes a symlink to it (junction on Windows, so no
+ * admin rights needed). nativeEnv() realpaths the symlink, so every other CLI call keeps
+ * working. One native project per OS account — which is how every deployed host runs.
+ * Returns the env for `daemon install` (plain HOME, no OPENCLAW_* overrides), or null when
+ * the runtime is older than 2026.8 and nothing should change.
+ */
+async function prepareNativeStateHome(projectDir) {
+  if ((await hostOpenclawMajorMinor()) < 202608) return null;
+  const home = os.homedir();
+  const homeState = join(home, '.openclaw');
+  const projState = join(projectDir, '.openclaw');
+  const installEnv = { ...nativeEnv(projectDir) };
+  delete installEnv.OPENCLAW_HOME;
+  delete installEnv.OPENCLAW_STATE_DIR;
+  installEnv.HOME = home;
+  if (resolve(projState) === resolve(homeState)) return installEnv;
+  const linkType = process.platform === 'win32' ? 'junction' : 'dir';
+  const projIsLink = (() => { try { return fs.lstatSync(projState).isSymbolicLink(); } catch { return false; } })();
+  if (projIsLink) {
+    // Already migrated (or hand-fixed): just make sure the link lands on the home state.
+    try {
+      if (resolve(fs.realpathSync(projState)) === resolve(homeState)) return installEnv;
+    } catch {}
+    throw new Error(`${projState} là symlink nhưng không trỏ về ${homeState} — kiểm tay trước khi cài service`);
+  }
+  const homeExists = existsSync(homeState) || (() => { try { fs.lstatSync(homeState); return true; } catch { return false; } })();
+  if (homeExists) {
+    const homeIsLink = (() => { try { return fs.lstatSync(homeState).isSymbolicLink(); } catch { return false; } })();
+    if (homeIsLink) {
+      // Reverse layout from an earlier hand-fix attempt: drop the link, the real dir moves in below.
+      fs.unlinkSync(homeState);
+    } else if (existsSync(join(homeState, 'openclaw.json'))) {
+      // A real, populated state dir that is not this project's — do not touch someone's data.
+      throw new Error(`${homeState} đã chứa state của một project khác — 2026.8 chỉ hỗ trợ MỘT project native mỗi tài khoản`);
+    } else {
+      // Stray/partial dir (stale CLI runs create these): park it, keep nothing in the way.
+      const parked = `${homeState}.bak-stray-${Date.now()}`;
+      await fsp.rename(homeState, parked);
+      sendLog(`[native] parked stray state dir ${homeState} -> ${parked}`);
+    }
+  }
+  await fsp.rename(projState, homeState);
+  fs.symlinkSync(homeState, projState, linkType);
+  sendLog(`[native] state moved to ${homeState}; ${projState} is now a symlink (openclaw >=2026.8 layout)`);
+  return installEnv;
+}
+
 /**
  * Bring a native project up end to end: 9router → smart-route sync → resolve its API key into
  * openclaw.json → install the gateway as a managed service. Order matters: the gateway must boot
@@ -3318,7 +3502,16 @@ async function startNativeRuntime({ projectDir, osChoice = '', gatewayPort, rout
   // equivalent of docker's `restart: always`. --force so re-running install updates the port.
   const env = nativeEnv(projectDir);
   await ensureSystemdLinger();
-  await run('openclaw', ['daemon', 'install', '--force', '--port', String(gwPort)], { cwd: projectDir, env });
+  // openclaw 2026.8.x refuses `daemon install` with a custom OPENCLAW_HOME ("service
+  // management skipped: non-default state dir"). Move the real state to ~/.openclaw and
+  // leave a symlink (junction on Windows) at <project>/.openclaw, then install with the
+  // plain account HOME. Older runtimes keep the original env untouched.
+  const daemonEnv = await prepareNativeStateHome(projectDir).catch((e) => { sendLog(`[native] state-home prep skipped: ${e.message}`); return null; });
+  if (daemonEnv) {
+    await run('openclaw', ['daemon', 'install', '--force', '--port', String(gwPort)], { cwd: projectDir, env: daemonEnv });
+  } else {
+    await run('openclaw', ['daemon', 'install', '--force', '--port', String(gwPort)], { cwd: projectDir, env });
+  }
   await hardenNativeServiceRestarts(projectDir).catch((e) => sendLog(`[native] service hardening skipped: ${e.message}`));
   await clearNativeServiceFailure(projectDir).catch(() => {});
   // `daemon install` already STARTED the unit, and that first boot begins the state migrations that
@@ -5326,6 +5519,23 @@ async function discoverDockerBotProjectRoots() {
 // launcher's parent — that covers the folders users actually pick (e.g. ~/openclaw-native, D:\bot)
 // without a full filesystem walk. Mirrors discoverDockerBotProjectRoots so discoverProjects can
 // surface native projects even when this install has no saved state for them.
+// A directory whose .openclaw merely HOLDS another project's state is not a project of its
+// own. openclaw 2026.8.x native layout puts the real state at ~/.openclaw with the project
+// dir symlinked to it — without this filter the account home shows up as a phantom "root"
+// project tab after every refresh (measured on vps_c-thu). The native marker's `label` was
+// written from the ORIGINAL project dir, so a mismatch identifies the phantom.
+function isPhantomStateDirProject(dir) {
+  try {
+    const meta = readNativeMeta(dir);
+    if (!meta || !meta.label) return false;
+    // Compare against the label DERIVED from the directory name — nativeServiceLabel()
+    // itself returns meta.label first, which would make this check always pass.
+    const derived = `ai.openclaw.gateway.${slugify(basename(dir || 'openclaw'), 'bot')}`;
+    return meta.label !== derived;
+  } catch {}
+  return false;
+}
+
 async function discoverNativeProjectRoots(rootProjectDir) {
   const roots = new Set();
   const bases = new Set();
@@ -5345,7 +5555,7 @@ async function discoverNativeProjectRoots(rootProjectDir) {
   if (rootProjectDir && existsSync(nativeMarkerPath(rootProjectDir)) && existsSync(join(rootProjectDir, '.openclaw', 'openclaw.json'))) {
     roots.add(resolve(rootProjectDir));
   }
-  return [...roots];
+  return [...roots].filter((dir) => !isPhantomStateDirProject(dir));
 }
 
 async function findLatestProject(rootProjectDir) {
@@ -5383,7 +5593,7 @@ async function findLatestProject(rootProjectDir) {
 
     if (existsSync(join(full, '.openclaw', 'openclaw.json'))) {
       const st = await fsp.stat(join(full, '.openclaw', 'openclaw.json')).catch(() => null);
-      if (st) candidates.push({ dir: full, mtimeMs: st.mtimeMs });
+      if (st && !isPhantomStateDirProject(full)) candidates.push({ dir: full, mtimeMs: st.mtimeMs });
       return;
     }
     const entries = await fsp.readdir(full, { withFileTypes: true }).catch(() => []);
@@ -5453,6 +5663,10 @@ async function computeDiscoverProjects(rootProjectDir) {
     }
   }
 
+  // Drop phantom state-dir "projects" that slipped into the saved list (e.g. the account
+  // home after a 2026.8.x native state move) — and keep them out of the persisted state.
+  state.projects = state.projects.filter((p) => !isPhantomStateDirProject(p.projectDir));
+
   // In parallel: each buildProjectMeta runs runtime detection (docker calls, port probes), so a
   // handful of projects turned into seconds of dashboard load when this was a sequential loop.
   const metas = await Promise.all(
@@ -5475,16 +5689,22 @@ async function computeDiscoverProjects(rootProjectDir) {
 }
 
 async function resolveProjectDir(rootProjectDir, body = {}) {
-  if (body.projectDir && existsSync(join(resolve(String(body.projectDir)), '.openclaw', 'openclaw.json'))) {
+  // Every acceptance path below must refuse phantom state-dir "projects" — the browser can
+  // keep sending a remembered projectDir (e.g. "/root") long after it stopped being one,
+  // and accepting it re-saves the phantom into state on the next saveState().
+  if (body.projectDir && existsSync(join(resolve(String(body.projectDir)), '.openclaw', 'openclaw.json'))
+      && !isPhantomStateDirProject(resolve(String(body.projectDir)))) {
     state.projectDir = resolve(String(body.projectDir));
     await syncRuntimeState(state.projectDir);
     return state.projectDir;
   }
+  if (state.projectDir && isPhantomStateDirProject(state.projectDir)) state.projectDir = null;
   if (state.projectDir && existsSync(join(state.projectDir, '.openclaw', 'openclaw.json'))) {
     await syncRuntimeState(state.projectDir);
     return state.projectDir;
   }
   await loadSavedState(rootProjectDir);
+  if (state.projectDir && isPhantomStateDirProject(state.projectDir)) state.projectDir = null;
   if (state.projectDir && existsSync(join(state.projectDir, '.openclaw', 'openclaw.json'))) {
     await syncRuntimeState(state.projectDir);
     return state.projectDir;
@@ -5527,6 +5747,7 @@ async function buildProjectMeta(projectDir) {
 async function connectExistingProject(projectDir, rootProjectDir) {
   const resolved = resolve(String(projectDir || ''));
   if (!existsSync(join(resolved, '.openclaw', 'openclaw.json'))) throw httpError(404, 'openclaw.json not found in selected project');
+  if (isPhantomStateDirProject(resolved)) throw httpError(400, `${resolved} chỉ là nơi chứa state của project khác (symlink 2026.8.x), không phải project riêng`);
   // Switch the active project + return its bots FAST (a plain file read). The heavy runtime
   // probing — detectRuntime runs `openclaw gateway status` + `config get` (slow CLI / docker
   // exec) and used to run TWICE here (syncRuntimeState + buildProjectMeta), ~6s total — is
@@ -5888,7 +6109,7 @@ async function installFeature(projectDir, agentId, kind, id) {
       // Native: no container — install on the host with the project env (ocCapture) so the
       // skill lands in this project's workspace, then reload the managed gateway service.
       sendLog(`[skill] Installing/updating clawhub:${slug} natively for agent ${agentId}...`);
-      const out = await ocCapture(projectDir, ['skills', 'install', slug, '--agent', agentId, '--force', '--acknowledge-clawhub-risk']);
+      const out = await ocCaptureInstall(projectDir, ['skills', 'install', slug, '--agent', agentId, '--force', '--acknowledge-install-policy-warning']);
       for (const line of `${out.stdout}\n${out.stderr}`.split(/\r?\n/).filter(Boolean)) sendLog(line);
       if (out.code !== 0 && !isSkillFolderExists(projectDir, agentId, slug)) {
         throw new Error(out.stderr || out.stdout || `Failed to install skill ${slug}.`);
@@ -5899,7 +6120,7 @@ async function installFeature(projectDir, agentId, kind, id) {
       const botContainer = getBotContainerName(projectDir);
       sendLog(`[skill] Installing/updating clawhub:${slug} inside container ${botContainer} for agent ${agentId}...`);
 
-      const cmd = `cd /home/node/project && openclaw skills install ${slug} --agent ${agentId} --force --acknowledge-clawhub-risk`;
+      const cmd = `cd /home/node/project && (openclaw skills install ${slug} --agent ${agentId} --force --acknowledge-install-policy-warning || openclaw skills install ${slug} --agent ${agentId} --force ${LEGACY_CLAWHUB_FLAG})`;
       const cmdOut = await runCapture('docker', ['exec', botContainer, 'sh', '-lc', cmd], { cwd: projectDir, shell: false });
       
       if (cmdOut) {
@@ -5921,9 +6142,13 @@ async function installFeature(projectDir, agentId, kind, id) {
       await run('openclaw', ['doctor', '--fix'], { cwd: projectDir, env: openclawProjectEnv(projectDir) }).catch((err) => sendLog(`[skill] doctor --fix skipped: ${err.message}`));
       sendLog(`[skill] Installing clawhub:${slug} for agent ${agentId}...`);
       
-      await run('openclaw', ['skills', 'install', slug, '--agent', agentId, '--force', '--acknowledge-clawhub-risk'], {
+      const skillArgs = ['skills', 'install', slug, '--agent', agentId, '--force', '--acknowledge-install-policy-warning'];
+      await run('openclaw', skillArgs, {
         cwd: projectDir,
         env: openclawProjectEnv(projectDir)
+      }).catch(async (err) => {
+        if (!flagNotRecognized(err)) throw err;
+        await run('openclaw', legacyConsentArgs(skillArgs), { cwd: projectDir, env: openclawProjectEnv(projectDir) });
       });
     }
 
@@ -5952,14 +6177,14 @@ async function installFeature(projectDir, agentId, kind, id) {
       }
       if (native) {
         sendLog(`[zalo-connect] Installing/updating ${ZALO_CONNECT_PLUGIN_SPEC} natively...`);
-        const out = await ocCapture(projectDir, ['plugins', 'install', ZALO_CONNECT_PLUGIN_SPEC, '--force', '--acknowledge-clawhub-risk']);
+        const out = await ocCaptureInstall(projectDir, ['plugins', 'install', ZALO_CONNECT_PLUGIN_SPEC, '--force', '--accept-capabilities']);
         if (out) for (const line of `${out.stdout}\n${out.stderr}`.split(/\r?\n/).filter(Boolean)) sendLog(`[zalo-connect] ${line}`);
         const okDir = existsSync(join(projectDir, '.openclaw', 'extensions', 'zalo-connect'));
         if (out.code !== 0 && !okDir) throw new Error(out.stderr || out.stdout || 'Failed to install zalo-connect.');
       } else if (composeDir) {
         const botContainer = getBotContainerName(projectDir);
         sendLog(`[zalo-connect] Installing/updating ${ZALO_CONNECT_PLUGIN_SPEC} inside ${botContainer}...`);
-        const cmd = `cd /home/node/project && openclaw plugins install ${ZALO_CONNECT_PLUGIN_SPEC} --force --acknowledge-clawhub-risk 2>&1`;
+        const cmd = `cd /home/node/project && (openclaw plugins install ${ZALO_CONNECT_PLUGIN_SPEC} --force --accept-capabilities || openclaw plugins install ${ZALO_CONNECT_PLUGIN_SPEC} --force ${LEGACY_CLAWHUB_FLAG}) 2>&1`;
         const out = await runCapture('docker', ['exec', botContainer, 'sh', '-lc', cmd], { cwd: projectDir, shell: false });
         if (out) for (const line of `${out.stdout}\n${out.stderr}`.split(/\r?\n/).filter(Boolean)) sendLog(`[zalo-connect] ${line}`);
         const okDir = existsSync(join(projectDir, '.openclaw', 'extensions', 'zalo-connect'));
@@ -5992,7 +6217,7 @@ async function installFeature(projectDir, agentId, kind, id) {
     }
     const installSpec = pluginInstallSpec(id);
     const installArgs = ['plugins', 'install', installSpec, '--force'];
-    if (installSpec.startsWith('clawhub:')) installArgs.push('--acknowledge-clawhub-risk');
+    if (installSpec.startsWith('clawhub:')) installArgs.push('--accept-capabilities');
 
     let composeDir = null;
     if (isNativeProject(projectDir)) {
@@ -6009,11 +6234,11 @@ async function installFeature(projectDir, agentId, kind, id) {
       let cmdOut;
       if (isNativeProject(projectDir)) {
         sendLog(`[plugin] Installing/updating ${installSpec} natively...`);
-        cmdOut = await ocCapture(projectDir, installArgs);
+        cmdOut = await ocCaptureInstall(projectDir, installArgs);
       } else {
         const botContainer = getBotContainerName(projectDir);
         sendLog(`[plugin] Installing/updating ${installSpec} inside container ${botContainer}...`);
-        const cmd = `cd /home/node/project && openclaw ${installArgs.join(' ')}`;
+        const cmd = `cd /home/node/project && (openclaw ${installArgs.join(' ')} || openclaw ${legacyConsentArgs(installArgs).join(' ')})`;
         cmdOut = await runCapture('docker', ['exec', botContainer, 'sh', '-lc', cmd], { cwd: projectDir, shell: false });
       }
 
@@ -6122,6 +6347,13 @@ async function installFeature(projectDir, agentId, kind, id) {
         cwd: projectDir,
         env: openclawProjectEnv(projectDir),
         resolveOnPattern: /Installed plugin:/
+      }).catch(async (err) => {
+        if (!flagNotRecognized(err)) throw err;
+        await run('openclaw', legacyConsentArgs(installArgs), {
+          cwd: projectDir,
+          env: openclawProjectEnv(projectDir),
+          resolveOnPattern: /Installed plugin:/
+        });
       }).catch((err) => {
         // Fallback verification: if the plugin's folder or mapped key is present, it succeeded despite integrity warnings
         const aliases = ['openclaw-zalo-mod', 'zalo-mod', id, id.replace('openclaw-', '')];
@@ -6637,7 +6869,13 @@ async function handler(req, res, rootProjectDir) {
     if (url.pathname === '/api/setup/update' && req.method === 'POST') {
       const installerDir = resolve(__dirname, '../..');
       const isGit = existsSync(resolve(installerDir, '.git'));
-      const mode = isGit ? 'git' : 'github';
+      // npm -g install: the new-host template installs create-openclaw-bot globally and runs
+      // the UI as a systemd user service. Without its own branch this fell into the "github"
+      // relaunch path, which only restarted the OLD version (measured on vps_c-thu, 02/09/2026).
+      // npx installs also live under node_modules, so exclude the _npx cache explicitly.
+      const isNpx = /[\\/]_npx[\\/]/.test(installerDir);
+      const isGlobalNpm = !isGit && !isNpx && /[\\/]node_modules[\\/]create-openclaw-bot[\\/]?$/.test(installerDir);
+      const mode = isGit ? 'git' : (isGlobalNpm ? 'npm-global' : 'github');
       setImmediate(async () => {
         try {
           if (isGit) {
@@ -6651,6 +6889,11 @@ async function handler(req, res, rootProjectDir) {
               await run('npm', ['run', 'build'], { cwd: installerDir }).catch((e) =>
                 sendLog(`[update-setup] build skipped: ${e.message}`));
             }
+          } else if (isGlobalNpm) {
+            // Pull the latest from npm in place, then exit — the service manager (or the
+            // respawn path for a hand-run UI) relaunches onto the freshly installed dist.
+            sendLog('[update-setup] Global npm install detected — npm i -g create-openclaw-bot@latest…');
+            await run('npm', ['i', '-g', 'create-openclaw-bot@latest', '--no-audit', '--no-fund'], { cwd: installerDir });
           } else {
             // Ephemeral `npx github:…` install: nothing to pull in place — the relaunch
             // re-runs `npx github:…`, which fetches the latest from GitHub.

package/dist/setup/shared/bot-config-gen.js

@@ -204,7 +204,9 @@
     }
 
     // ── commands ──────────────────────────────────────────────────────────────
-    cfg.commands = { native: 'auto', nativeSkills: 'auto', restart: true, ownerDisplay: 'raw' };
+    // No `ownerDisplay`: openclaw 2026.8.x strict schema rejects it as an unrecognized key
+    // and refuses to start (measured on vps_c-thu, 02/09/2026).
+    cfg.commands = { native: 'auto', nativeSkills: 'auto', restart: true };
     if (selectedSkills.includes('scheduler')) {
       cfg.commands.ownerAllowFrom = ['*'];
     }
@@ -476,7 +478,8 @@
     plugins.allow = allow;
     // Select learning-memory as the active context engine (always-on memory).
     plugins.slots = { contextEngine: 'learning-memory' };
-    if (allow.length) plugins.bundledDiscovery = 'compat';
+    // No `bundledDiscovery`: openclaw 2026.8.x moved it into shared SQLite state and the
+    // strict schema rejects the key in openclaw.json (measured on vps_c-thu, 02/09/2026).
 
     return { plugins };
   }

package/dist/setup/shared/docker-gen.js

@@ -207,7 +207,7 @@ if(touched){console.log('[patch-9router] Applied Codex compatibility patch.');}e
   // Gio gate theo version openclaw THAT trong container: <2026.8 thi backfill nhu cu, ≥2026.8 thi
   // GO key neu con (tu chua cac project da nhiem). Khong doc duoc version thi KHONG dong nao chay
   // — tha thieu mot default con hon gieo key lam gateway tu choi boot.
-  const contextDefaultsScript = `const fs=require('fs'),path=require('path');const p=path.join(process.cwd(),'.openclaw','openclaw.json');if(fs.existsSync(p)){const c=JSON.parse(fs.readFileSync(p,'utf8'));let ch=false;c.skills=c.skills||{};c.skills.workshop=c.skills.workshop||{};if(!c.skills.workshop.approvalPolicy){c.skills.workshop.approvalPolicy='auto';ch=true;}if(c.browser&&c.browser.enabled!==false){c.tools=c.tools||{};const dn=Array.isArray(c.tools.deny)?c.tools.deny:[];if(!dn.includes('browser')){dn.push('browser');c.tools.deny=dn;ch=true;}}let ocMajorMinor=0;try{const v=String(require('child_process').execSync('openclaw --version',{stdio:['ignore','pipe','ignore']})).match(/(\\d{4})\\.(\\d+)/);if(v)ocMajorMinor=Number(v[1])*100+Number(v[2]);}catch(e){}const d=(c.agents&&c.agents.defaults)?c.agents.defaults:null;if(d){if(d.imageMaxDimensionPx===undefined){d.imageMaxDimensionPx=1024;ch=true;}if(d.imageQuality===undefined){d.imageQuality='efficient';ch=true;}if(ocMajorMinor&&ocMajorMinor<202608){d.contextLimits=d.contextLimits||{};if(d.contextLimits.toolResultMaxChars===undefined){d.contextLimits.toolResultMaxChars=12000;ch=true;}}else if(ocMajorMinor>=202608&&d.contextLimits&&d.contextLimits.toolResultMaxChars!==undefined){delete d.contextLimits.toolResultMaxChars;ch=true;}}if(ocMajorMinor>=202608){const ag=c.agents||{};const nEntries=(Array.isArray(ag.list)?ag.list.length:0)+(ag.entries&&typeof ag.entries==='object'?Object.keys(ag.entries).length:0);if(nEntries>1&&ag.ownership!=='explicit'){ag.ownership='explicit';c.agents=ag;ch=true;}try{const agRoot=path.join(process.cwd(),'.openclaw','agents');for(const id of fs.readdirSync(agRoot)){const sf=path.join(agRoot,id,'sessions','sessions.json');if(fs.existsSync(sf)){fs.renameSync(sf,sf+'.bak-legacy-'+Date.now());console.log('[migrate] parked legacy session store '+sf);}}}catch(e){}}const pr=c.models&&c.models.providers&&c.models.providers['9router'];if(pr&&Array.isArray(pr.models)){for(const m of pr.models){if(m&&m.id==='smart-route'&&(m.contextWindow===200000||m.contextWindow===131072)){m.contextWindow=1048576;ch=true;}}}if(ch)fs.writeFileSync(p,JSON.stringify(c,null,2));}`;
+  const contextDefaultsScript = `const fs=require('fs'),path=require('path');const p=path.join(process.cwd(),'.openclaw','openclaw.json');if(fs.existsSync(p)){const c=JSON.parse(fs.readFileSync(p,'utf8'));let ch=false;c.skills=c.skills||{};c.skills.workshop=c.skills.workshop||{};if(!c.skills.workshop.approvalPolicy){c.skills.workshop.approvalPolicy='auto';ch=true;}if(c.browser&&c.browser.enabled!==false){c.tools=c.tools||{};const dn=Array.isArray(c.tools.deny)?c.tools.deny:[];if(!dn.includes('browser')){dn.push('browser');c.tools.deny=dn;ch=true;}}let ocMajorMinor=0;try{const v=String(require('child_process').execSync('openclaw --version',{stdio:['ignore','pipe','ignore']})).match(/(\\d{4})\\.(\\d+)/);if(v)ocMajorMinor=Number(v[1])*100+Number(v[2]);}catch(e){}const d=(c.agents&&c.agents.defaults)?c.agents.defaults:null;if(d){if(d.imageMaxDimensionPx===undefined){d.imageMaxDimensionPx=1024;ch=true;}if(d.imageQuality===undefined){d.imageQuality='efficient';ch=true;}if(ocMajorMinor&&ocMajorMinor<202608){d.contextLimits=d.contextLimits||{};if(d.contextLimits.toolResultMaxChars===undefined){d.contextLimits.toolResultMaxChars=12000;ch=true;}}else if(ocMajorMinor>=202608&&d.contextLimits&&d.contextLimits.toolResultMaxChars!==undefined){delete d.contextLimits.toolResultMaxChars;ch=true;}}if(ocMajorMinor>=202608){const ag=c.agents||{};const nEntries=(Array.isArray(ag.list)?ag.list.length:0)+(ag.entries&&typeof ag.entries==='object'?Object.keys(ag.entries).length:0);if(nEntries>1&&ag.ownership!=='explicit'){ag.ownership='explicit';c.agents=ag;ch=true;}try{const agRoot=path.join(process.cwd(),'.openclaw','agents');for(const id of fs.readdirSync(agRoot)){const sf=path.join(agRoot,id,'sessions','sessions.json');if(fs.existsSync(sf)){fs.renameSync(sf,sf+'.bak-legacy-'+Date.now());console.log('[migrate] parked legacy session store '+sf);}}}catch(e){}if(c.commands&&c.commands.ownerDisplay!==undefined){delete c.commands.ownerDisplay;ch=true;}if(c.plugins&&c.plugins.bundledDiscovery!==undefined){delete c.plugins.bundledDiscovery;ch=true;}if(Array.isArray(ag.list)){ag.entries=(ag.entries&&typeof ag.entries==='object'&&!Array.isArray(ag.entries))?ag.entries:{};for(const a of ag.list){if(a&&a.id&&!ag.entries[a.id]){const{id:_aid,...rest}=a;ag.entries[_aid]=rest;}}delete ag.list;c.agents=ag;ch=true;console.log('[migrate] moved agents.list into agents.entries');}try{const ea=path.join(process.cwd(),'.openclaw','exec-approvals.json');if(fs.existsSync(ea)){fs.renameSync(ea,ea+'.bak-legacy-'+Date.now());console.log('[migrate] parked legacy exec approvals '+ea);}}catch(e){}}const pr=c.models&&c.models.providers&&c.models.providers['9router'];if(pr&&Array.isArray(pr.models)){for(const m of pr.models){if(m&&m.id==='smart-route'&&(m.contextWindow===200000||m.contextWindow===131072)){m.contextWindow=1048576;ch=true;}}}if(ch)fs.writeFileSync(p,JSON.stringify(c,null,2));}`;
 
   function buildDockerArtifacts(options) {
     const {
@@ -259,10 +259,10 @@ if(touched){console.log('[patch-9router] Applied Codex compatibility patch.');}e
     const stateVolDecl = useStateVolume ? '\n  openclaw-state:' : '';
     const stateVolBlock = useStateVolume ? '\n\nvolumes:\n  openclaw-state:' : '';
     const skillLines = dockerfileSkillInstallMode === 'build' && allSkills.length > 0
-      ? `\n# Install skills (ClawHub)\n${allSkills.map((skill) => `RUN openclaw skills install ${skill} --acknowledge-clawhub-risk || echo "Warning: Failed to install ${skill} due to rate limits."`).join('\n')}\n`
+      ? `\n# Install skills (ClawHub)\n${allSkills.map((skill) => `RUN openclaw skills install ${skill} --acknowledge-install-policy-warning || openclaw skills install ${skill} --acknowledge-clawhub-risk || echo "Warning: Failed to install ${skill} due to rate limits."`).join('\n')}\n`
       : '';
     const pluginLines = dockerfilePlugins.length > 0
-      ? `\n# Install plugins (ClawHub)\n${dockerfilePlugins.map((p) => `RUN openclaw plugins install ${p} --acknowledge-clawhub-risk || echo "Warning: Failed to install plugin ${p}"`).join('\n')}\n`
+      ? `\n# Install plugins (ClawHub)\n${dockerfilePlugins.map((p) => `RUN openclaw plugins install ${p} --accept-capabilities || openclaw plugins install ${p} --acknowledge-clawhub-risk || echo "Warning: Failed to install plugin ${p}"`).join('\n')}\n`
       : '';
     const patchLine = `RUN node -e "const fs=require('fs');const path=require('path');const dir='/usr/local/lib/node_modules/openclaw/dist';const from='\\t\\t\\t\\t\\tonAgentRunStart: (runId) => {';const to='\\t\\t\\t\\t\\ttimeoutOverrideSeconds: Math.max(1, Math.ceil(timeoutMs / 1e3)),\\n\\t\\t\\t\\t\\tonAgentRunStart: (runId) => {';const files=fs.readdirSync(dir).filter(n=>/\\.js$/.test(n));let patched=0;for(const file of files){const p=path.join(dir,file);let s='';try{s=fs.readFileSync(p,'utf8');}catch{continue;}if(s.includes(to)||!s.includes(from))continue;s=s.replace(from,to);fs.writeFileSync(p,s);patched++;}if(!patched){process.exit(0);}"`;
     
@@ -351,7 +351,7 @@ if(touched){console.log('[patch-9router] Applied Codex compatibility patch.');}e
       '        echo "[entrypoint] warning: failed to clone plugin $spec"',
       '      fi',
       '      ;;',
-      '    *) openclaw plugins install "$spec" --acknowledge-clawhub-risk 2>/dev/null || echo "[entrypoint] warning: failed to install plugin $spec" ;;',
+      '    *) openclaw plugins install "$spec" --accept-capabilities 2>/dev/null || openclaw plugins install "$spec" --acknowledge-clawhub-risk 2>/dev/null || echo "[entrypoint] warning: failed to install plugin $spec" ;;',
       '  esac',
       '}',
       'ensure_skill() {',
@@ -361,7 +361,7 @@ if(touched){console.log('[patch-9router] Applied Codex compatibility patch.');}e
       '    return 0',
       '  fi',
       '  echo "[entrypoint] skill $id missing; installing"',
-      '  openclaw skills install "$id" --acknowledge-clawhub-risk 2>/dev/null || echo "[entrypoint] warning: failed to install skill $id"',
+      '  openclaw skills install "$id" --acknowledge-install-policy-warning 2>/dev/null || openclaw skills install "$id" --acknowledge-clawhub-risk 2>/dev/null || echo "[entrypoint] warning: failed to install skill $id"',
       '}',
       'echo "[entrypoint] ensuring runtime assets, then starting gateway"',
     ];

package/dist/setup/shared/workspace-gen.js

@@ -855,6 +855,12 @@ Skills cung cấp công cụ cho bạn. Cần cái nào, đọc \`SKILL.md\` c
 - **Discord links:** Bọc nhiều link trong \`<>\` để khỏi hiện embed
 - **WhatsApp/Zalo:** Không dùng header — dùng **đậm** hoặc IN HOA để nhấn mạnh
 
+**📎 File user gửi qua chat (zip/pdf/doc...):**
+
+- File đã được runtime tải sẵn và nằm ở đường dẫn TUYỆT ĐỐI trong metadata của lượt đó (\`MediaPath\`, hoặc dòng ghi chú "[Attached file(s) already saved to disk...]") — thường là \`.openclaw/media/inbound/…\`, **BÊN NGOÀI workspace của bạn**.
+- Dùng NGUYÊN đường dẫn đó với \`exec\`/\`read\`. ĐỪNG \`find\`/\`ls\` trong workspace rồi kết luận "file chưa được lưu" — file không nằm ở đó là điều bình thường.
+- Không thấy đường dẫn trong lượt hiện tại → nói thật là không thấy file đính kèm, đừng đoán.
+
 ## 💓 Heartbeats — Chủ động!
 
 Khi nhận heartbeat poll, đừng chỉ trả \`HEARTBEAT_OK\` mọi lần. Dùng heartbeat có ích!
@@ -1059,6 +1065,12 @@ Skills provide your tools. When you need one, check its \`SKILL.md\`. Keep local
 - **Discord links:** Wrap multiple links in \`<>\` to suppress embeds
 - **WhatsApp/Zalo:** No headers — use **bold** or CAPS for emphasis
 
+**📎 Files users send through chat (zip/pdf/doc...):**
+
+- The runtime already downloaded the file to an ABSOLUTE path given in that turn's metadata (\`MediaPath\`, or a note line "[Attached file(s) already saved to disk...]") — usually under \`.openclaw/media/inbound/…\`, **OUTSIDE your workspace**.
+- Use that EXACT path with \`exec\`/\`read\`. Do NOT \`find\`/\`ls\` inside your workspace and then claim "the file was never saved" — it is normal for the file not to be there.
+- If no path is present in the current turn, say plainly that you see no attachment — don't guess.
+
 ## 💓 Heartbeats — Be Proactive!
 
 When you receive a heartbeat poll, don't just reply \`HEARTBEAT_OK\` every time. Use heartbeats productively!

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-openclaw-bot",
-  "version": "5.16.2",
+  "version": "5.16.4",
   "description": "Interactive CLI installer for OpenClaw Bot",
   "main": "dist/cli.js",
   "bin": {