create-openclaw-bot 5.16.8 → 5.17.0

package/README.md

@@ -4,10 +4,10 @@
 
 ### One **Web UI** to scaffold, deploy & run free multi-bot AI assistants — zero terminal required
 
-*Run one command → open the dashboard → your bot is live. Windows · macOS · Linux · VPS — Docker-powered, auto-installed for you.*
+*Run one command → open the dashboard → your bot is live. Windows, macOS, Linux, VPS — Docker-powered, auto-installed for you.*
 
 <p align="center">
-  <a href="https://github.com/tuanminhhole/openclaw-setup/releases"><img src="https://img.shields.io/badge/RELEASE-v5.16.8-0EA5E9?style=for-the-badge" alt="Version 5.16.8" /></a>
+  <a href="https://github.com/tuanminhhole/openclaw-setup/releases"><img src="https://img.shields.io/badge/RELEASE-v5.17.0-0EA5E9?style=for-the-badge" alt="Version 5.17.0" /></a>
   <a href="https://github.com/tuanminhhole/openclaw-setup?tab=MIT-1-ov-file"><img src="https://img.shields.io/badge/LICENSE-MIT-success?style=for-the-badge" alt="MIT License" /></a>
   <a href="https://www.npmjs.com/package/create-openclaw-bot"><img src="https://img.shields.io/npm/v/create-openclaw-bot?style=for-the-badge&label=CLI&color=2563EB&logo=npm&logoColor=white" alt="NPM Version" /></a>
   <a href="https://github.com/tuanminhhole/openclaw-setup/stargazers"><img src="https://img.shields.io/github/stars/tuanminhhole/openclaw-setup?style=for-the-badge&color=eab308&logo=github&logoColor=white" alt="GitHub Stars" /></a>
@@ -37,7 +37,7 @@
 
 ---
 
-## 🆕 What's New in v5.16.8
+## 🆕 What's New in v5.17.0
 
 - 🩹 **Native installs on OpenClaw 2026.8 are smooth from the first run** - this wave patches the remaining chain of issues measured on fresh customer machines: generated configs pass the new strict checks 100%, install steps run in the right order, and restarts/plugin installs no longer get blocked midway.
 - 🔑 **9Router login works on Docker**: the new 9Router blocks the default password for "remote" access - and inside Docker every request counts as remote, so 123456 could never log in. It works now (still change the password once you're in).

package/README.vi.md

@@ -4,10 +4,10 @@
 
 ### Một **giao diện Web** để tạo, triển khai & vận hành trợ lý AI đa bot miễn phí — không cần gõ terminal
 
-*Chạy một lệnh → mở dashboard → bot lên sóng. Windows · macOS · Linux · VPS — chạy trên Docker, tự cài giúp bạn.*
+*Chạy một lệnh, mở dashboard, bot lên sóng. Windows, macOS, Linux, VPS. Bot chạy thẳng trên máy, không cần Docker.*
 
 <p align="center">
-  <a href="https://github.com/tuanminhhole/openclaw-setup/releases"><img src="https://img.shields.io/badge/RELEASE-v5.16.8-0EA5E9?style=for-the-badge" alt="Version 5.16.8" /></a>
+  <a href="https://github.com/tuanminhhole/openclaw-setup/releases"><img src="https://img.shields.io/badge/RELEASE-v5.17.0-0EA5E9?style=for-the-badge" alt="Version 5.17.0" /></a>
   <a href="https://github.com/tuanminhhole/openclaw-setup?tab=MIT-1-ov-file"><img src="https://img.shields.io/badge/LICENSE-MIT-success?style=for-the-badge" alt="MIT License" /></a>
   <a href="https://www.npmjs.com/package/create-openclaw-bot"><img src="https://img.shields.io/npm/v/create-openclaw-bot?style=for-the-badge&label=CLI&color=2563EB&logo=npm&logoColor=white" alt="NPM Version" /></a>
   <a href="https://github.com/tuanminhhole/openclaw-setup/stargazers"><img src="https://img.shields.io/github/stars/tuanminhhole/openclaw-setup?style=for-the-badge&color=eab308&logo=github&logoColor=white" alt="GitHub Stars" /></a>
@@ -37,7 +37,7 @@
 
 ---
 
-## 🆕 Có gì mới trong v5.16.8
+## 🆕 Có gì mới trong v5.17.0
 
 - 🩹 **Cài native trên OpenClaw 2026.8 mượt từ phát đầu** - đợt này vá nốt chuỗi lỗi đo được khi dựng máy khách mới: cấu hình sinh ra sạch 100% với bộ soát khắt khe của OpenClaw mới, các bước cài tự chạy đúng thứ tự, và mọi thao tác khởi động lại/cài plugin không còn bị chặn giữa chừng.
 - 🔑 **Đăng nhập 9Router hoạt động trên Docker**: bản 9Router mới chặn mật khẩu mặc định với truy cập "từ xa" - mà trong Docker thì mọi truy cập đều bị tính là từ xa, nên trước đây không cách nào vào được bằng 123456. Giờ đăng nhập bình thường (vào rồi vẫn nên đổi mật khẩu).
@@ -246,9 +246,10 @@ Bấm nút **Cập nhật** ở **góc trên bên phải giao diện Setup**. H
 
 ## 📋 Yêu cầu hệ thống
 
-- **Node.js 24 LTS** (bắt buộc) — wizard Setup chạy bằng Node, nên cần cho **cả** chế độ Docker lẫn Native. [Tải Node.js](https://nodejs.org/).
+- **Node.js 24 LTS** (bắt buộc). Cả trình cài đặt lẫn bot đều chạy bằng Node. [Tải Node.js](https://nodejs.org/).
+  Máy chưa có Node thì trình cài đặt tự cài giúp bạn.
 - **Git**: Đã cài đặt và có trong biến môi trường PATH.
-- **Docker Desktop** (khuyên dùng, để chạy bot): hỗ trợ Docker Compose V2. [Tải Docker](https://www.docker.com/products/docker-desktop/).
+- **Không cần Docker nữa.** Từ bản 5.17.0 bot chạy thẳng trên máy.
 
 ---
 
@@ -258,9 +259,8 @@ Bấm nút **Cập nhật** ở **góc trên bên phải giao diện Setup**. H
 
 **1. Mở giao diện Setup** — chạy lệnh cài ở trên, dashboard sẽ mở trên trình duyệt.
 
-**2. Chọn Hệ điều hành & Chế độ chạy** — cài [Node.js 24 LTS](https://nodejs.org/) trước (wizard chạy bằng Node — cần cho **cả 2** chế độ). Rồi vào tab **Cài đặt**, chọn hệ điều hành và chế độ chạy:
-- **Docker** (khuyên dùng) — chạy cách ly và **tạo được nhiều project/bot**. Cài thêm [Docker Desktop](https://www.docker.com/products/docker-desktop/).
-- **Native** — nhẹ hơn, chạy bot thẳng trên máy (không cần Docker).
+**2. Chọn Hệ điều hành** rồi bấm tiếp. Chế độ chạy giờ chỉ còn **Native**, tức bot chạy thẳng trên máy bạn.
+Ô Docker vẫn hiện nhưng đã khoá, bấm không được. Lý do ghi ngay trên màn hình.
 
 **3. Nhập đường dẫn & tên project** — nhập đường dẫn thư mục và tên project (ví dụ tên: `bot`), rồi bấm **Cài đặt**. Ví dụ đường dẫn:
 - Windows: `D:\bot`

package/dist/server/local-server.js

@@ -17,6 +17,7 @@ const { buildWorkspaceFileMap, buildCronjobSkillMd, buildInfographicGeneratorSki
 const { buildOpenclawJson, buildEnvFileContent, buildExecApprovalsJson, buildZaloConnectChannelConfig } = loadSharedModule('../setup/shared/bot-config-gen.js', '__openclawBotConfig');
 const { buildDockerArtifacts, contextDefaultsScript } = loadSharedModule('../setup/shared/docker-gen.js', '__openclawDockerGen');
 const { HOST_UI_PS1, HOST_UI_PS1_VERSION } = loadSharedModule('../setup/shared/host-ui-ps1.js', '__openclawHostUiPs1');
+const { buildWindowsLaunchers, WINDOWS_DESKTOP_LAUNCHERS } = loadSharedModule('../setup/shared/windows-launcher-gen.js', '__openclawWindowsLaunchers');
 const { OPENCLAW_NPM_SPEC, NINE_ROUTER_NPM_SPEC, ZALO_CHANNEL_ID, ZALO_PLUGIN_ID, ZALO_CONNECT_VERSION, ZALO_CONNECT_PLUGIN_SPEC, build9RouterProviderConfig, get9RouterBaseUrl } = loadSharedModule('../setup/shared/common-gen.js', '__openclawCommon');
 const dataExport = loadSharedModule('../setup/data/index.js', '__openclawData');
 
@@ -47,11 +48,26 @@ function specMajorMinor(spec) {
   return m ? Number(m[1]) * 100 + Number(m[2]) : 0;
 }
 let hostOcMajorMinorCache = null;
+/**
+ * Drop the cached host version. MUST be called right after `npm i -g openclaw@…` changes the
+ * global install, because the cache below survives the upgrade and every version-gated
+ * decision after it would still see the OLD runtime.
+ */
+function invalidateHostOpenclawVersion() {
+  hostOcMajorMinorCache = null;
+}
 async function hostOpenclawMajorMinor() {
   // Cache only a REAL version: during bot creation this is first called before
   // `npm i -g openclaw` has run, and caching that 0 forever made prepareNativeStateHome
   // skip the 2026.8 state-home move — daemon install then failed with "non-default
   // state dir" (measured on a fresh native install, 03/09/2026).
+  //
+  // A real-but-STALE version is just as bad and does not self-heal: on a host that already
+  // had an older openclaw (vps_mkt ran 2026.7.1-2), the first call caches 202607, the
+  // installer then upgrades the global package to 2026.9.x, and prepareNativeStateHome still
+  // reads 202607 → skips the state-home move → `daemon install` dies with "non-default state
+  // dir or config path" and the gateway never starts. Measured on vps_mkt, 07/09/2026.
+  // Hence invalidateHostOpenclawVersion() after every global install/upgrade.
   if (hostOcMajorMinorCache) return hostOcMajorMinorCache;
   const r = await runCapture('openclaw', ['--version'], { shell: false }).catch(() => null);
   hostOcMajorMinorCache = specMajorMinor(r && (r.stdout || r.stderr));
@@ -1198,7 +1214,12 @@ async function detectRuntime(projectDir) {
     routerPort,
     gatewayUrl: `http://127.0.0.1:${gatewayPort}`,
     routerUrl: `http://127.0.0.1:${routerPort}`,
-    mode: existsSync(join(projectDir || '', 'docker', 'openclaw', 'docker-compose.yml')) ? 'docker' : 'native',
+    // Ask projectDeployMode, don't re-derive from the compose file: a project migrated to native
+    // KEEPS its docker/ folder on purpose (that is the way back), so "compose file exists" stops
+    // meaning "runs on docker" the moment migration lands. Getting this wrong made the dashboard
+    // report OpenClaw and 9Router OFFLINE on a machine whose native gateway was answering 200 —
+    // it was probing the stopped containers. Seen on win_kha, 10/09/2026.
+    mode: projectDeployMode(projectDir),
     cliGatewayStatus,
     syncSource,
   };
@@ -2755,15 +2776,34 @@ async function computeZaloHealth(projectDir) {
           textStatus = `${r.stdout || ''}\n${r.stderr || ''}`;
         } catch {}
       }
-      // zalo-connect writes credentials under the project's .openclaw (OPENCLAW_HOME); fall
-      // back to the real home dir in case the plugin used os.homedir() instead.
+      // Where the Zalo session file lives depends on the plugin version, and getting this wrong
+      // makes a perfectly logged-in bot show as "chưa đăng nhập":
+      //   <=3.1.4  <home>/.openclaw/zalo-connect-credentials[-<account>].json
+      //   >=3.1.5  <state>/credentials/zalo-connect/credentials[-<account>].json
+      // 3.1.5 MOVES the old file on first run and leaves a *.migrated stub behind, so a scan that
+      // only knows the old shape finds nothing at all. Look in the new layout first, then fall
+      // back, and normalise the new names to the old ones so the caller's lookup keeps working.
+      // Measured on win_kha after the zalo-connect upgrade, 10/09/2026.
       const credRe = /^zalo-connect-credentials(?:-[^.]+)?\.json$/i;
-      for (const dir of [join(projectDir, '.openclaw'), join(os.homedir(), '.openclaw')]) {
+      const newCredRe = /^credentials(?:-[^.]+)?\.json$/i;
+      const toLegacyName = (n) => n.replace(/^credentials/, 'zalo-connect-credentials');
+      for (const dir of [
+        join(projectDir, '.openclaw', 'credentials', 'zalo-connect'),
+        join(os.homedir(), '.openclaw', 'credentials', 'zalo-connect'),
+      ]) {
         try {
-          const names = (await fsp.readdir(dir)).filter((n) => credRe.test(n));
-          if (names.length) { credentialNames = names; break; }
+          const names = (await fsp.readdir(dir)).filter((n) => newCredRe.test(n));
+          if (names.length) { credentialNames = names.map(toLegacyName); break; }
         } catch {}
       }
+      if (!credentialNames || !credentialNames.length) {
+        for (const dir of [join(projectDir, '.openclaw'), join(os.homedir(), '.openclaw')]) {
+          try {
+            const names = (await fsp.readdir(dir)).filter((n) => credRe.test(n));
+            if (names.length) { credentialNames = names; break; }
+          } catch {}
+        }
+      }
     }
   } else {
     try {
@@ -3530,6 +3570,286 @@ async function prepareNativeStateHome(projectDir) {
   return installEnv;
 }
 
+/**
+ * Turn OpenClaw's real computer-use on or off for a project.
+ *
+ * Three pieces must line up, and a bot with only two of them reports "I don't have permission"
+ * without saying which one is missing — that ambiguity cost a whole debugging session:
+ *   1. `computer` (+ `screen`) allowed in tools.alsoAllow — otherwise the agent never receives
+ *      the tool at all, no matter what else is configured;
+ *   2. the `cua-computer` plugin, which is MANDATORY on Windows and ships disabled. It also has
+ *      to be on plugins.allow, or enabling is refused with "blocked by allowlist";
+ *   3. a node host process advertising `computer.act` + `screen.snapshot`. The tool is only the
+ *      model-facing surface; the node is what actually touches the screen, which is why a
+ *      correctly configured tool still does nothing on its own.
+ *
+ * The node host must run inside a real interactive desktop session — started from a service or
+ * an SSH session it either dies with the session or cannot see a desktop at all. Launching it
+ * from here works because the operator pressing the button is sitting at that desktop.
+ */
+async function setComputerUse(projectDir, enable) {
+  const cfgPath = join(projectDir, '.openclaw', 'openclaw.json');
+  if (!existsSync(cfgPath)) return { ok: false, error: 'openclaw.json not found' };
+  const cfg = JSON.parse(await fsp.readFile(cfgPath, 'utf8'));
+
+  cfg.tools = (cfg.tools && typeof cfg.tools === 'object') ? cfg.tools : {};
+  const allow = new Set(Array.isArray(cfg.tools.alsoAllow) ? cfg.tools.alsoAllow : []);
+  cfg.plugins = (cfg.plugins && typeof cfg.plugins === 'object') ? cfg.plugins : {};
+  cfg.plugins.allow = Array.isArray(cfg.plugins.allow) ? cfg.plugins.allow : [];
+  cfg.plugins.entries = (cfg.plugins.entries && typeof cfg.plugins.entries === 'object') ? cfg.plugins.entries : {};
+
+  if (enable) {
+    allow.add('computer');
+    allow.add('screen');
+    if (!cfg.plugins.allow.includes('cua-computer')) cfg.plugins.allow.push('cua-computer');
+    cfg.plugins.entries['cua-computer'] = { ...(cfg.plugins.entries['cua-computer'] || {}), enabled: true };
+  } else {
+    allow.delete('computer');
+    allow.delete('screen');
+    if (cfg.plugins.entries['cua-computer']) cfg.plugins.entries['cua-computer'].enabled = false;
+  }
+  cfg.tools.alsoAllow = [...allow];
+  await fsp.writeFile(cfgPath, JSON.stringify(cfg, null, 2) + '\n', 'utf8');
+
+  if (!enable) {
+    await stopNodeHost().catch(() => {});
+    sendLog('[computer-use] Đã tắt: gỡ tool computer/screen và dừng node điều khiển.');
+    return { ok: true, enabled: false };
+  }
+
+  sendLog('[computer-use] Đã bật tool computer + plugin cua-computer. Đang khởi động node điều khiển...');
+  const meta = readNativeMeta(projectDir) || {};
+  const port = meta.gatewayPort || state.gatewayPort || NATIVE_DEFAULT_GATEWAY_PORT;
+  await startNodeHost(projectDir, port);
+  return { ok: true, enabled: true, gatewayPort: port };
+}
+
+/** Run `openclaw node run` detached so it outlives this request but stays in this desktop session. */
+async function startNodeHost(projectDir, gatewayPort) {
+  if (await nodeHostRunning()) { sendLog('[computer-use] Node điều khiển đã chạy sẵn.'); return; }
+  const a = ocArgv(projectDir, ['node', 'run', '--host', '127.0.0.1', '--port', String(gatewayPort)]);
+  const child = spawn(a.cmd, a.args, { ...a.opts, detached: true, stdio: 'ignore', windowsHide: true });
+  child.on('error', (err) => sendLog(`[computer-use] không chạy được node host: ${err.message}`));
+  child.unref();
+  // Confirm instead of assuming: a node host that failed to start looks exactly like one that
+  // started, until the bot says it has no permission.
+  for (let i = 0; i < 15; i++) {
+    await new Promise((r) => setTimeout(r, 2000));
+    if (await nodeHostRunning()) { sendLog('[computer-use] Node điều khiển đã kết nối.'); return; }
+  }
+  sendLog('[computer-use] Node điều khiển chưa lên sau 30s — kiểm tra lại bằng `openclaw node status`.');
+}
+
+async function nodeHostRunning() {
+  if (process.platform === 'win32') {
+    const r = await runCapture('powershell', ['-NoProfile', '-Command',
+      "(Get-CimInstance Win32_Process -Filter \"Name='node.exe'\" | Where-Object { $_.CommandLine -like '*node*run*--host*' } | Measure-Object).Count"], { shell: false, timeout: 8000 });
+    return Number(String(r.stdout || '0').trim()) > 0;
+  }
+  const r = await runCapture('sh', ['-c', "ps ax | grep -c '[n]ode run --host'"], { shell: false, timeout: 8000 });
+  return Number(String(r.stdout || '0').trim()) > 0;
+}
+
+async function stopNodeHost() {
+  if (process.platform === 'win32') {
+    await runCapture('powershell', ['-NoProfile', '-Command',
+      "Get-CimInstance Win32_Process -Filter \"Name='node.exe'\" | Where-Object { $_.CommandLine -like '*node*run*--host*' } | ForEach-Object { Stop-Process -Id $_.ProcessId -Force -EA SilentlyContinue }"], { shell: false, timeout: 10000 });
+    return;
+  }
+  await runCapture('sh', ['-c', "pkill -f 'node run --host' || true"], { shell: false, timeout: 10000 });
+}
+
+/**
+ * Write the double-click launchers into the project and copy the operator-facing ones to the
+ * Desktop. Safe to re-run: it overwrites, so a fixed launcher reaches machines on the next
+ * install or update instead of leaving the customer pressing a stale copy.
+ */
+async function writeWindowsLaunchers(projectDir, gatewayPort, routerPort) {
+  const files = buildWindowsLaunchers({ projectDir, gatewayPort, routerPort, setupPort: activeUiPort || 51789 });
+  for (const [name, content] of Object.entries(files)) {
+    await fsp.writeFile(join(projectDir, name), content, 'utf8');
+  }
+  const desktop = join(os.homedir(), 'Desktop');
+  if (existsSync(desktop)) {
+    for (const name of WINDOWS_DESKTOP_LAUNCHERS) {
+      await fsp.writeFile(join(desktop, name), files[name], 'utf8').catch(() => {});
+    }
+    sendLog(`[native] Đã đặt ${WINDOWS_DESKTOP_LAUNCHERS.length} tệp bấm-đúp lên Desktop.`);
+  }
+}
+
+/**
+ * Move a running docker project onto native, keeping every bot and every workspace file.
+ *
+ * Why this exists: openclaw >=2026.9 writes files through @openclaw/fs-safe, which fstat()s the
+ * file after an atomic rename. That check cannot pass through a Docker Desktop bind mount on
+ * Windows, so the moment a docker image is rebuilt onto 2026.9.x the gateway can no longer write
+ * its own config: every boot is unclean, the restart-loop breaker trips, and the bot is down with
+ * a misleading "ENOENT: fstat". Measured end to end on win_kha, 09/09/2026 — native on the very
+ * same NTFS path works, so the fault is the bind-mount layer, not the disk.
+ *
+ * The data lives in two different places and only one of them is visible on the host:
+ * bind-mounted paths are already on disk, but named volumes are not — state (the sqlite DB with
+ * every session), the plugin tree, and 9router's login live inside volumes. Copy those out FIRST;
+ * everything after this point is reversible, the containers and image are left untouched.
+ */
+async function migrateDockerProjectToNative(projectDir, { osChoice = '' } = {}) {
+  const composeFile = join(projectDir, 'docker', 'openclaw', 'docker-compose.yml');
+  if (!existsSync(composeFile)) return false;
+  sendLog('[migrate] Chuyển project từ Docker sang native...');
+
+  // 1. Stop the containers so nothing writes while we copy. Never `down -v` — that deletes the
+  //    very volumes holding the customer's sessions.
+  await run('docker', ['compose', '-f', composeFile, 'stop']).catch(() => {});
+  // Stopping is not enough: the containers carry a restart policy, so the next reboot brings them
+  // back and they grab 18789/18790 before the native gateway can bind — the native process then
+  // dies with EADDRINUSE seconds after reporting "ready", which reads like a random crash.
+  // Measured on win_kha after its first reboot, 10/09/2026. Clear the policy, keep the containers.
+  const psAll = await runCapture('docker', ['compose', '-f', composeFile, 'ps', '-a', '--format', '{{.Name}}'], { shell: false });
+  const names = String(psAll.stdout || '').split(/\r?\n/).map((x) => x.trim()).filter(Boolean);
+  if (names.length) await run('docker', ['update', '--restart=no', ...names]).catch(() => {});
+
+  // 2. Copy every named volume out to the host path it maps to. Read the mapping from the
+  //    containers themselves rather than guessing volume names: compose prefixes them with the
+  //    project name, which differs per machine.
+  const psOut = await runCapture('docker', ['compose', '-f', composeFile, 'ps', '-a', '--format', '{{.Name}}'], { shell: false });
+  const containers = String(psOut.stdout || '').split(/\r?\n/).map((s) => s.trim()).filter(Boolean);
+  const CONTAINER_HOME = '/home/node/project';
+  let copied = 0;
+  for (const name of containers) {
+    const insp = await runCapture('docker', ['inspect', name, '--format', '{{range .Mounts}}{{.Type}}|{{.Name}}|{{.Destination}}\n{{end}}'], { shell: false });
+    for (const line of String(insp.stdout || '').split(/\r?\n/)) {
+      const [type, volName, dest] = line.split('|').map((s) => (s || '').trim());
+      if (type !== 'volume' || !volName || !dest) continue;
+      // Map the in-container path back onto the project on disk.
+      let hostDir = null;
+      if (dest.startsWith(`${CONTAINER_HOME}/`)) hostDir = join(projectDir, dest.slice(CONTAINER_HOME.length + 1));
+      else if (dest === '/root/.9router' || dest.endsWith('/.9router')) hostDir = join(projectDir, '.9router');
+      if (!hostDir) { sendLog(`[migrate] bỏ qua volume ${volName} (${dest}) — không map được về project`); continue; }
+      await fsp.mkdir(hostDir, { recursive: true });
+      // Copy with a throwaway container: the volume has no host path we can read directly.
+      const r = await runCapture('docker', [
+        'run', '--rm', '-v', `${volName}:/__src:ro`, '-v', `${hostDir}:/__dst`,
+        'node:22-slim', 'sh', '-c', 'cp -a /__src/. /__dst/ 2>/dev/null; ls -A /__dst | head -1',
+      ], { shell: false });
+      if (r.stdout && r.stdout.trim()) { copied++; sendLog(`[migrate] ${volName} → ${hostDir}`); }
+      else sendLog(`[migrate] ${volName} rỗng hoặc không chép được — kiểm tra tay: ${hostDir}`);
+    }
+  }
+  sendLog(`[migrate] đã đưa ${copied} volume xuống đĩa.`);
+
+  // 3. Rewrite what only made sense inside the container.
+  const cfgPath = join(projectDir, '.openclaw', 'openclaw.json');
+  if (existsSync(cfgPath)) {
+    const before = await fsp.readFile(cfgPath, 'utf8');
+    await fsp.writeFile(`${cfgPath}.bak-truoc-native`, before, 'utf8');
+    let cfg = null;
+    try { cfg = JSON.parse(before); } catch { cfg = null; }
+    if (cfg) {
+      // 3a. Container-absolute workspace paths. On Windows these become "C:\home\node\..." and
+      //     every plugin fails its install-dir check.
+      const projPosix = join(projectDir, '.openclaw').replace(/\\/g, '/');
+      let text = JSON.stringify(cfg, null, 2).split(`${CONTAINER_HOME}/.openclaw`).join(projPosix);
+      cfg = JSON.parse(text);
+      // 3a-ter. RELATIVE workspace paths. Inside the container the process always ran from
+      //     /home/node/project so ".openclaw/workspace-x" resolved correctly. Native has no such
+      //     guarantee: the customer double-clicks a launcher from wherever they filed it, and the
+      //     agent then looks for its workspace under THAT folder and dies with WORKSPACE_VANISHED
+      //     — while agents that happen to carry an absolute path keep working, so only some bots
+      //     break. Exactly what happened when the launchers were moved into a Desktop subfolder
+      //     (win_kha 10/09/2026). Pin every workspace to the project.
+      {
+        const ag = cfg.agents || {};
+        const list = ag.entries && typeof ag.entries === 'object' ? Object.entries(ag.entries)
+          : Array.isArray(ag.list) ? ag.list.map((a) => [a && a.id, a]) : [];
+        for (const [aid, meta] of list) {
+          if (!meta || typeof meta.workspace !== 'string') continue;
+          const w = meta.workspace;
+          if (/^[a-zA-Z]:[\\/]/.test(w) || w.startsWith('/')) continue; // already absolute
+          meta.workspace = join(projectDir, w.replace(/^\.[\\/]/, '')).replace(/\\/g, '/');
+          sendLog(`[migrate] workspace ${aid}: "${w}" → "${meta.workspace}" (đường tương đối phụ thuộc chỗ bấm tệp)`);
+        }
+      }
+      text = JSON.stringify(cfg, null, 2);
+
+      // 3a-bis. Docker-only HOSTNAMES. `http://9router:20128` resolves through compose's internal
+      //     DNS and nowhere else, so on native every model call dies with
+      //     `getaddrinfo ENOTFOUND 9router` — the bot still reacts (that is the channel, no model
+      //     needed) but can never reply, which reads as "bot ignores me". Same story for
+      //     host.docker.internal and the 192.168.65.x Desktop bridge. Measured win_kha 10/09/2026.
+      text = text
+        .split('http://9router:20128').join('http://127.0.0.1:20128')
+        .split('http://host.docker.internal:20128').join('http://127.0.0.1:20128')
+        .replace(/http:\/\/192\.168\.65\.\d+:(\d+)/g, 'http://127.0.0.1:$1');
+      cfg = JSON.parse(text);
+      // 3b. bind. Inside docker, 0.0.0.0 was safe because the port was published to loopback only.
+      //     Native binds the host directly, so the same value would expose the gateway to the LAN.
+      cfg.gateway = (cfg.gateway && typeof cfg.gateway === 'object') ? cfg.gateway : {};
+      if (cfg.gateway.bind !== 'loopback') {
+        cfg.gateway.bind = 'loopback';
+        delete cfg.gateway.customBindHost;
+        if (cfg.gateway.controlUi) {
+          cfg.gateway.controlUi.allowedOrigins = ['http://localhost:' + (cfg.gateway.port || NATIVE_DEFAULT_GATEWAY_PORT), 'http://127.0.0.1:' + (cfg.gateway.port || NATIVE_DEFAULT_GATEWAY_PORT)];
+        }
+        sendLog('[migrate] gateway.bind → loopback (native bind thẳng lên host, 0.0.0.0 là mở ra mạng)');
+      }
+      // 3c. The browser-automation plugin rewrites the browser block on every boot, so simply
+      //     deleting the bad key below is not enough — it grows back and the config is invalid
+      //     again by the next restart (same shape as the old toolResultMaxChars reinfection).
+      //     Take the pen away from it; patchDocker is pointless here now too.
+      const baEntry = cfg.plugins && cfg.plugins.entries && cfg.plugins.entries['browser-automation'];
+      if (baEntry && typeof baEntry === 'object') {
+        baEntry.config = (baEntry.config && typeof baEntry.config === 'object') ? baEntry.config : {};
+        baEntry.config.manageBrowserConfig = false;
+        baEntry.config.patchDocker = false;
+        sendLog('[migrate] tắt browser-automation.manageBrowserConfig (nó ghi lại khoá 2026.9 từ chối mỗi lần boot)');
+      }
+      // 3d. browser profile colour: required up to 2026.8, rejected outright by 2026.9.
+      const profiles = (cfg.browser && cfg.browser.profiles) || null;
+      if (profiles && typeof profiles === 'object') {
+        for (const key of Object.keys(profiles)) {
+          if (profiles[key] && typeof profiles[key] === 'object' && profiles[key].color !== undefined) {
+            delete profiles[key].color;
+            sendLog(`[migrate] gỡ browser.profiles.${key}.color (2026.9 không nhận)`);
+          }
+        }
+      }
+      await fsp.writeFile(cfgPath, JSON.stringify(cfg, null, 2) + '\n', 'utf8');
+    }
+  }
+
+  // 4. Backup folders sitting inside extensions/ are still scanned as real plugins — that is where
+  //    the long-standing "duplicate plugin id" warnings came from. A leading dot does NOT hide them
+  //    on Windows, so move them out of the tree entirely.
+  const extDir = join(projectDir, '.openclaw', 'extensions');
+  if (existsSync(extDir)) {
+    const parked = join(projectDir, '_plugin-backups');
+    for (const entry of await fsp.readdir(extDir).catch(() => [])) {
+      if (!/\.(bak|broken|old)[-.]|^\.openclaw-install-backups$/i.test(entry)) continue;
+      await fsp.mkdir(parked, { recursive: true });
+      await fsp.rename(join(extDir, entry), join(parked, entry.replace(/^\./, ''))).catch(() => {});
+      sendLog(`[migrate] dời bản sao lưu plugin ra khỏi extensions/: ${entry}`);
+    }
+  }
+
+  // 5. zalo-connect wrote its Zalo sessions next to the container's HOME, which was itself
+  //    <project>/.openclaw — leaving them one level too deep. Lift them so 3.1.5's one-time
+  //    migration finds them; without this every account comes back "not authenticated".
+  const nested = join(projectDir, '.openclaw', '.openclaw');
+  if (existsSync(nested)) {
+    for (const entry of await fsp.readdir(nested).catch(() => [])) {
+      if (!/^zalo-connect-credentials.*\.json$/.test(entry)) continue;
+      const target = join(projectDir, '.openclaw', entry);
+      if (existsSync(target)) continue;
+      await fsp.copyFile(join(nested, entry), target).catch(() => {});
+      sendLog(`[migrate] nâng phiên Zalo lên đúng chỗ: ${entry}`);
+    }
+  }
+
+  sendLog('[migrate] Xong phần dữ liệu. Container và image giữ nguyên để còn quay lui.');
+  return true;
+}
+
 /**
  * Bring a native project up end to end: 9router → smart-route sync → resolve its API key into
  * openclaw.json → install the gateway as a managed service. Order matters: the gateway must boot
@@ -3547,6 +3867,15 @@ async function startNativeRuntime({ projectDir, osChoice = '', gatewayPort, rout
     'utf8',
   );
 
+  // Windows has no usable service story for this (see windows-launcher-gen.js): the Scheduled
+  // Task openclaw installs is bound to a login session, so it dies with the SSH session and is
+  // refused outright when set to run at boot. Give the owner double-click launchers instead —
+  // the same shape as the .command files on macOS — and put the three they actually press on
+  // the Desktop where they can find them.
+  if (process.platform === 'win32') {
+    await writeWindowsLaunchers(projectDir, gwPort, rtPort).catch((e) => sendLog(`[native] launcher: ${e.message}`));
+  }
+
   await startNative9Router(projectDir);
 
   // Same smart-route sync the docker sidecar runs, pointed at the native DB path. Without it
@@ -3808,12 +4137,37 @@ async function updateRuntime(target, projectDir) {
   if (isNativeProject(projectDir)) {
     sendLog(`[native] Updating ${target} → ${spec}`);
     await run('npm', ['install', '-g', spec]);
+    if (!isRouter) invalidateHostOpenclawVersion();
     if (isRouter) await startNative9Router(projectDir, { restart: true }).catch((e) => sendLog(`[native] 9router restart: ${e.message}`));
     else await restartNativeRuntime(projectDir);
     await syncRuntimeState(projectDir, { full: true }).catch(() => {});
     probeCacheClear();
     return { ok: true, target, spec, mode: 'native' };
   }
+  // A docker project asked to update is a docker project about to rebuild its image — which is
+  // exactly the step that lands it on openclaw >=2026.9 and breaks writing through the bind mount
+  // (see migrateDockerProjectToNative). So the update IS the migration: move the data onto native
+  // first, then update the native way. Doing it here rather than on every page load keeps it a
+  // deliberate act by the customer, not something that reshapes their machine behind their back.
+  if (!isNativeProject(projectDir) && projectDir && existsSync(join(projectDir, 'docker', 'openclaw', 'docker-compose.yml'))) {
+    sendLog('[update] Project đang chạy Docker — chuyển sang native trước khi cập nhật.');
+    await ensureNodeInstalled();
+    await migrateDockerProjectToNative(projectDir, { osChoice: state.os || '' });
+    await run('npm', ['install', '-g', OPENCLAW_NPM_SPEC]);
+    invalidateHostOpenclawVersion();
+    await run('npm', ['install', '-g', NINE_ROUTER_NPM_SPEC]);
+    const meta = readNativeMeta(projectDir) || {};
+    await startNativeRuntime({
+      projectDir,
+      osChoice: state.os || '',
+      gatewayPort: meta.gatewayPort || state.gatewayPort,
+      routerPort: meta.routerPort || state.routerPort,
+    });
+    await syncRuntimeState(projectDir, { full: true }).catch(() => {});
+    probeCacheClear();
+    sendLog('[update] Đã chuyển sang native. Container Docker được giữ nguyên (đã dừng) để còn quay lui.');
+    return { ok: true, target, spec, mode: 'native', migratedFromDocker: true };
+  }
   if (state.mode === 'docker' && projectDir) {
     const dockerDir = join(projectDir, 'docker', 'openclaw');
     if (isRouter) {
@@ -4127,11 +4481,63 @@ function detectHostApps() {
     add('zalo', [join(local, 'Programs', 'Zalo', 'Zalo.exe'), join(local, 'Zalo', 'Zalo.exe')]);
     add('explorer', ['C:\\Windows\\explorer.exe']);
     add('notepad', ['C:\\Windows\\System32\\notepad.exe']);
+    // A hand-written shortlist only covers what WE thought of. Every customer machine has its
+    // own software, and the bot is useless the moment it is asked for something not on the list —
+    // "mở TeamViewer" fails not because the app is missing but because nobody enumerated it.
+    // The Start Menu is the one place Windows guarantees an entry per installed app, and a .lnk
+    // launches correctly without knowing where the .exe actually lives. Scanning it turns the
+    // list from "5 apps we guessed" into "everything this machine has", and it stays correct
+    // when the customer installs something new. Measured on win_kha: 5 → 182 apps.
+    Object.assign(apps, scanWindowsStartMenuApps(), apps); // hand-written entries win
   } else if (process.platform === 'darwin') {
     add('teamviewer', ['/Applications/TeamViewer.app']);
     add('chrome', ['/Applications/Google Chrome.app']);
     add('zalo', ['/Applications/Zalo.app']);
     add('finder', ['/System/Library/CoreServices/Finder.app']);
+    // Same idea as Windows: enumerate what is really installed instead of guessing.
+    Object.assign(apps, scanMacApplications(), apps);
+  }
+  return apps;
+}
+
+/** Every .lnk under both Start Menu trees, keyed by a slug of its name. */
+function scanWindowsStartMenuApps() {
+  const apps = {};
+  // Uninstallers and doc links are not apps; opening one by accident is worse than not having it.
+  const SKIP = /(uninstall|gỡ cài đặt|go cai dat|readme|help|documentation|website|release notes|license|repair|modify)/i;
+  const roots = [
+    join(process.env.ProgramData || 'C:\\ProgramData', 'Microsoft', 'Windows', 'Start Menu', 'Programs'),
+    join(process.env.APPDATA || '', 'Microsoft', 'Windows', 'Start Menu', 'Programs'),
+  ];
+  const walk = (dir, depth = 0) => {
+    if (depth > 4) return;
+    let entries = [];
+    try { entries = fs.readdirSync(dir, { withFileTypes: true }); } catch { return; }
+    for (const e of entries) {
+      const p = join(dir, e.name);
+      if (e.isDirectory()) { walk(p, depth + 1); continue; }
+      if (!/\.lnk$/i.test(e.name)) continue;
+      const name = e.name.replace(/\.lnk$/i, '');
+      if (SKIP.test(name)) continue;
+      const key = slugify(name, '');
+      if (key && !apps[key]) apps[key] = p;
+    }
+  };
+  for (const r of roots) if (r) walk(r);
+  return apps;
+}
+
+/** Installed .app bundles, so macOS gets the same "everything on this machine" list. */
+function scanMacApplications() {
+  const apps = {};
+  for (const dir of ['/Applications', '/System/Applications', join(os.homedir(), 'Applications')]) {
+    let entries = [];
+    try { entries = fs.readdirSync(dir, { withFileTypes: true }); } catch { continue; }
+    for (const e of entries) {
+      if (!e.name.endsWith('.app')) continue;
+      const key = slugify(e.name.replace(/\.app$/, ''), '');
+      if (key && !apps[key]) apps[key] = join(dir, e.name);
+    }
   }
   return apps;
 }
@@ -4988,9 +5394,19 @@ async function writeHostControlAccess(projectDir, cfg) {
     '',
     '- macOS: `open -a "<Tên app>"` — ví dụ `open -a "TeamViewer"`',
     '- Linux: `xdg-open <app|url>` hoặc chạy binary trực tiếp',
-    '- Windows: `cmd /c start "" "<app>"`',
+    ...(process.platform === 'win32' ? [
+      '- Windows: **đừng** gọi `Start-Process <TênApp>` — tên app KHÔNG phải lệnh trên PATH, bạn sẽ nhận',
+      '  `The system cannot find the file specified`. Hãy tra shortcut trong Start Menu rồi mở nó:',
+      '',
+      '```sh',
+      'powershell -NoProfile -Command "$n=\'TeamViewer\'; $r=@(\"$env:ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\",\"$env:APPDATA\\Microsoft\\Windows\\Start Menu\\Programs\"); $l=Get-ChildItem $r -Recurse -Filter \"*$n*.lnk\" -EA SilentlyContinue | Select -First 1; if($l){ Start-Process $l.FullName } else { \"khong tim thay $n\" }"',
+      '```',
+      '',
+      'Đổi `TeamViewer` thành tên app cần mở. Cách này đúng với MỌI app đã cài, kể cả app chủ mới cài hôm qua,',
+      'vì Windows luôn đặt shortcut vào Start Menu và `.lnk` tự biết đường dẫn thật.',
+    ] : ['- Windows: `cmd /c start "" "<app>"`']),
     '',
-    apps.length ? `App chủ gợi ý: ${apps.map((a) => `\`${a}\``).join(', ')}.` : 'Chủ chưa liệt kê app — mở theo tên app có trên máy.',
+    apps.length ? `App có trên máy này: ${apps.map((a) => `\`${a}\``).join(', ')}.` : 'Chủ chưa liệt kê app — mở theo tên app có trên máy.',
     ...captureBlock,
     ...scriptBlock,
     '',
@@ -5292,6 +5708,79 @@ async function waitForDockerDaemon(timeoutMs) {
   }
 }
 
+// OpenClaw's own engines range, copied verbatim from its package.json:
+//   ">=22.22.3 <23 || >=24.15.0 <25 || >=25.9.0"
+// The gaps matter — Node 23.x and 25.0–25.8 are NOT usable — so "install the latest Node" is the
+// wrong instinct here. When we have to install, we install 24 LTS, which sits inside a supported
+// window and is what every working host in the fleet already runs.
+const NODE_TARGET_MAJOR = 24;
+function nodeVersionSupported(raw) {
+  const m = String(raw || '').match(/v?(\d+)\.(\d+)\.(\d+)/);
+  if (!m) return false;
+  const [maj, min, pat] = [Number(m[1]), Number(m[2]), Number(m[3])];
+  const atLeast = (a, b, c) => maj > a || (maj === a && (min > b || (min === b && pat >= c)));
+  if (maj === 22) return atLeast(22, 22, 3);
+  if (maj === 24) return atLeast(24, 15, 0);
+  if (maj >= 25) return maj > 25 || atLeast(25, 9, 0);
+  return false;
+}
+
+// Native mode runs openclaw straight off the host, so the host's Node IS the runtime — unlike
+// docker mode, where the image carried its own. A customer machine that never needed Node before
+// (or carries one outside openclaw's supported range) must get a usable one before anything else,
+// otherwise the install dies deep inside `npm i -g openclaw` with an unreadable engine error.
+async function ensureNodeInstalled() {
+  const current = await commandExists('node', ['--version']);
+  if (current.ok && nodeVersionSupported(current.output)) {
+    sendLog(`[node] Node ${current.output.trim()} hợp lệ.`);
+    return;
+  }
+  const why = current.ok
+    ? `Node ${current.output.trim()} nằm ngoài dải OpenClaw hỗ trợ`
+    : 'Máy chưa có Node';
+  sendLog(`[node] ${why} — đang cài Node ${NODE_TARGET_MAJOR} LTS...`);
+
+  if (process.platform === 'linux') {
+    const root = typeof process.getuid === 'function' && process.getuid() === 0;
+    const sudo = root ? '' : 'sudo ';
+    // NodeSource covers deb/rpm and pins the major, so we land inside the supported window
+    // instead of whatever "latest" happens to be that week.
+    await run('sh', ['-c',
+      `curl -fsSL https://deb.nodesource.com/setup_${NODE_TARGET_MAJOR}.x | ${sudo}bash - && ${sudo}apt-get install -y nodejs`,
+    ]).catch(async () => {
+      sendLog('[node] apt không dùng được — thử nvm...');
+      await run('sh', ['-c',
+        `export NVM_DIR="$HOME/.nvm"; curl -fsSL https://raw.githubusercontent.com/nvm-sh/nvm/v0.40.1/install.sh | bash && . "$NVM_DIR/nvm.sh" && nvm install ${NODE_TARGET_MAJOR} && nvm alias default ${NODE_TARGET_MAJOR}`,
+      ]);
+    });
+  } else if (process.platform === 'darwin') {
+    const brew = await commandExists('brew', ['--version']);
+    if (!brew.ok) throw httpError(400, 'macOS: cần Homebrew để tự cài Node. Cài tại https://brew.sh rồi thử lại.');
+    await run('brew', ['install', `node@${NODE_TARGET_MAJOR}`]);
+    await run('brew', ['link', '--overwrite', '--force', `node@${NODE_TARGET_MAJOR}`]).catch(() => {});
+  } else if (process.platform === 'win32') {
+    const winget = await commandExists('winget', ['--version']);
+    const choco = await commandExists('choco', ['--version']);
+    if (winget.ok) {
+      await run('winget', ['install', '-e', '--id', `OpenJS.NodeJS.LTS`, '--accept-source-agreements', '--accept-package-agreements']);
+    } else if (choco.ok) {
+      await run('choco', ['install', 'nodejs-lts', '-y']);
+    } else {
+      throw httpError(400, `Windows: cần winget hoặc Chocolatey để tự cài Node (hoặc cài Node ${NODE_TARGET_MAJOR} LTS thủ công tại https://nodejs.org) rồi thử lại.`);
+    }
+  } else {
+    throw httpError(400, `Hệ điều hành không tự cài Node được. Hãy cài Node ${NODE_TARGET_MAJOR} LTS thủ công rồi thử lại.`);
+  }
+
+  // A fresh install lands on a PATH this process never picked up, so re-check through a new shell
+  // rather than trusting our own env.
+  const after = await commandExists('node', ['--version']);
+  if (!after.ok || !nodeVersionSupported(after.output)) {
+    throw httpError(500, `Đã cài Node nhưng phiên bản hiện tại (${after.output || 'không đọc được'}) vẫn ngoài dải OpenClaw hỗ trợ. Mở lại cửa sổ dòng lệnh (hoặc đăng xuất/đăng nhập lại) để PATH cập nhật, rồi cài lại.`);
+  }
+  sendLog(`[node] Node ${after.output.trim()} đã sẵn sàng.`);
+}
+
 // Ensure Docker (engine + compose) is available before a docker-mode install, auto-installing the
 // latest version appropriate for the host OS when it is missing:
 //   • Linux → Docker's official convenience script (get.docker.com; auto-detects the distro) + start daemon
@@ -5391,9 +5880,15 @@ async function installCore({ osChoice, mode, projectDir, gatewayPort = 18789, ro
     // Make sure Docker is present (auto-install on Linux/VPS) before doing any work — fail fast
     // with a clear message rather than deep inside `docker compose up`. Native mode has no
     // container, so it skips this entirely (that is much of the point of choosing it).
-    if (mode !== 'native') await ensureDockerInstalled(osChoice);
+    // Native has no image to carry a runtime, so the host's Node IS the runtime — get a supported
+    // one on the machine before npm touches anything. Docker still needs the daemon instead.
+    if (mode === 'native') await ensureNodeInstalled();
+    else await ensureDockerInstalled(osChoice);
     await writeCoreProject({ projectDir, osChoice, mode, gatewayPort, routerPort, userTimezone });
     await run('npm', ['install', '-g', OPENCLAW_NPM_SPEC]);
+    // The global runtime just changed — every version gate after this point (notably
+    // prepareNativeStateHome) must read the NEW version, not the one this host booted with.
+    invalidateHostOpenclawVersion();
     await run('npm', ['install', '-g', NINE_ROUTER_NPM_SPEC]);
     if (mode === 'docker') {
       const dockerDir = join(projectDir, 'docker', 'openclaw');
@@ -5613,6 +6108,34 @@ async function discoverDockerBotProjectRoots() {
 // dir symlinked to it — without this filter the account home shows up as a phantom "root"
 // project tab after every refresh (measured on vps_c-thu). The native marker's `label` was
 // written from the ORIGINAL project dir, so a mismatch identifies the phantom.
+/**
+ * Two paths can be the same project: a native install links the account home and the project dir
+ * together, so `~/.openclaw` and `<project>/.openclaw` resolve to one directory on disk. Scanning
+ * finds both and the dashboard then lists the SAME bots twice under two project names (seen on
+ * win_kha as "bot" and "VT 2025", 4 identical bots online in each — 10/09/2026).
+ *
+ * Dedupe on where `.openclaw` really lands, and keep the entry that IS the real directory: the
+ * link side is an artefact of the install layout, not somewhere the customer put a project.
+ * Works whichever way the link points, which matters because the direction differs between a
+ * fresh native install and one migrated over from docker.
+ */
+function dedupeProjectsByRealState(dirs) {
+  const byReal = new Map();
+  for (const dir of dirs) {
+    if (!dir) continue;
+    const statePath = join(dir, '.openclaw');
+    let real = statePath;
+    let isLink = false;
+    try { real = fs.realpathSync(statePath); } catch {}
+    try { isLink = fs.lstatSync(statePath).isSymbolicLink(); } catch {}
+    const key = resolve(real).toLowerCase();
+    const prev = byReal.get(key);
+    // First one wins, unless we already kept a link and now meet the real directory.
+    if (!prev || (prev.isLink && !isLink)) byReal.set(key, { dir, isLink });
+  }
+  return [...byReal.values()].map((v) => v.dir);
+}
+
 function isPhantomStateDirProject(dir) {
   try {
     const meta = readNativeMeta(dir);
@@ -5644,7 +6167,7 @@ async function discoverNativeProjectRoots(rootProjectDir) {
   if (rootProjectDir && existsSync(nativeMarkerPath(rootProjectDir)) && existsSync(join(rootProjectDir, '.openclaw', 'openclaw.json'))) {
     roots.add(resolve(rootProjectDir));
   }
-  return [...roots].filter((dir) => !isPhantomStateDirProject(dir));
+  return dedupeProjectsByRealState([...roots].filter((dir) => !isPhantomStateDirProject(dir)));
 }
 
 async function findLatestProject(rootProjectDir) {
@@ -5699,7 +6222,10 @@ async function findLatestProject(rootProjectDir) {
     candidates.push({ dir: dr, mtimeMs: (st?.mtimeMs || 0) + 1e15 });
   }
   candidates.sort((a, b) => b.mtimeMs - a.mtimeMs);
-  return candidates[0]?.dir || null;
+  // Drop the linked twin before picking a winner, or the account-home view of the same project
+  // can outrank the project itself purely on mtime.
+  const keep = new Set(dedupeProjectsByRealState(candidates.map((c) => c.dir)));
+  return candidates.find((c) => keep.has(c.dir))?.dir || candidates[0]?.dir || null;
 }
 
 async function ensureProjectsLoaded(rootProjectDir) {
@@ -5710,7 +6236,10 @@ async function ensureProjectsLoaded(rootProjectDir) {
     try {
       const saved = JSON.parse(await fsp.readFile(file, 'utf8'));
       if (Array.isArray(saved?.projects)) {
-        state.projects = saved.projects;
+        // Filter on the way IN: a linked twin already written to the state file would otherwise
+        // survive every later dedupe, because the dashboard reads state.projects directly.
+        const keep = new Set(dedupeProjectsByRealState(saved.projects.map((p) => p && p.projectDir)));
+        state.projects = saved.projects.filter((p) => p && keep.has(p.projectDir));
       }
     } catch {}
   }
@@ -5755,6 +6284,11 @@ async function computeDiscoverProjects(rootProjectDir) {
   // Drop phantom state-dir "projects" that slipped into the saved list (e.g. the account
   // home after a 2026.8.x native state move) — and keep them out of the persisted state.
   state.projects = state.projects.filter((p) => !isPhantomStateDirProject(p.projectDir));
+  // The label check above only catches projects that carry a marker with a mismatched label.
+  // A linked twin without one still slips through and the dashboard shows the same bots under
+  // two project names, both "online" — collapse those onto the real directory.
+  const keepDirs = new Set(dedupeProjectsByRealState(state.projects.map((p) => p.projectDir)));
+  state.projects = state.projects.filter((p) => keepDirs.has(p.projectDir));
 
   // In parallel: each buildProjectMeta runs runtime detection (docker calls, port probes), so a
   // handful of projects turned into seconds of dashboard load when this was a sequential loop.
@@ -6916,6 +7450,18 @@ async function handler(req, res, rootProjectDir) {
       // capture / recording and node-script permissions get granted (opt out with grants:false).
       const granted = cfg.enabled && body.grants !== false ? grantHostCapabilities(cfg) : [];
       if (granted.length) sendLog(`[host-control] Đã cấp thêm quyền chạy: ${granted.join(', ')}.`);
+      // Pressing this button means "let the bot drive this machine", so it must deliver the real
+      // thing — OpenClaw's own `computer` tool (screenshot → click → type → drag), not just the
+      // ability to launch an app. That tool needs three separate pieces switched on together, and
+      // any one missing leaves the bot insisting it has no permission:
+      //   • the tool allowed for agents, • the cua-computer plugin (mandatory on Windows),
+      //   • a running node host advertising computer.act + screen.snapshot.
+      // Doing it here rather than in a side script matters: the node host must live in a real
+      // interactive desktop session, and the operator pressing this button IS in one.
+      const computerUse = await setComputerUse(projectDir, cfg.enabled).catch((e) => {
+        sendLog(`[host-control] computer-use: ${e.message}`);
+        return { ok: false, error: e.message };
+      });
       await fsp.writeFile(hostControlConfigPath(projectDir), JSON.stringify(cfg, null, 2), 'utf8');
       let started = { ok: false, reason: 'disabled' };
       if (cfg.enabled) started = await ensureHostControl(projectDir);
@@ -6923,6 +7469,7 @@ async function handler(req, res, rootProjectDir) {
       // disabling strips it so a bot never keeps instructions for an endpoint now refusing.
       await writeHostControlAccess(projectDir, cfg).catch(() => {});
       sendLog(`[host-control] ${cfg.enabled ? 'Đã BẬT' : 'Đã TẮT'} quyền điều khiển máy cho bot.`);
+      if (cfg.enabled && computerUse?.ok) sendLog('[host-control] Bot có thể chụp màn hình, click chuột, gõ phím trên máy này.');
       // Make sure the Codex desktop app can actually do GUI work, so `codex exec` is enough for
       // the bot: install computer-use into the app and repair its MCP registration. Nothing is
       // installed into the OpenClaw project and the gateway never restarts.
@@ -7414,4 +7961,4 @@ export async function startLocalInstaller({ host = '127.0.0.1', preferredPort =
   ]).catch(() => {});
 }
 
-export { patchBrowserAutomationHostPreference, debugChromeProfileDir, defaultChromeProfileDir, createBotInProject, updateBotInProject, deleteBotInProject, validateOpenclawConfig, startZaloLogin, readBotCredentials, resolveProject9RouterApiKey, installCore, deleteProjectFolder, buildZaloHealthSnapshot, removeEmptyWorkspaceAttestations, runHostCommand, detectHostCommands, detectHostCapabilityCommands, grantHostCapabilities, detectCodexApp, detectCodexMarketplace, resolveCodexCli, openPrivacyPane, projectDeployMode, isNativeProject, nativeServiceLabel, nativeEnv, ocArgv, migrateNativePaths, discoverNativeProjectRoots, detectOs, stripCliWarnings, migrationLeaseDeadline, ensureNativePlugins, findFreeHostPort, syncNativeServiceEnv, adoptStrayNativeHome, runNativeConfigMigrations, detectExistingSetupUi, hardenNativeServiceRestarts, clearNativeServiceFailure, describePortHolder, reportNativeGatewayBlockage };
+export { patchBrowserAutomationHostPreference, debugChromeProfileDir, defaultChromeProfileDir, createBotInProject, updateBotInProject, deleteBotInProject, validateOpenclawConfig, startZaloLogin, readBotCredentials, resolveProject9RouterApiKey, installCore, deleteProjectFolder, buildZaloHealthSnapshot, removeEmptyWorkspaceAttestations, runHostCommand, detectHostCommands, detectHostCapabilityCommands, grantHostCapabilities, detectCodexApp, detectCodexMarketplace, resolveCodexCli, openPrivacyPane, projectDeployMode, isNativeProject, nativeServiceLabel, nativeEnv, ocArgv, migrateNativePaths, discoverNativeProjectRoots, detectOs, stripCliWarnings, migrationLeaseDeadline, ensureNativePlugins, findFreeHostPort, syncNativeServiceEnv, adoptStrayNativeHome, runNativeConfigMigrations, detectExistingSetupUi, nodeVersionSupported, migrateDockerProjectToNative, dedupeProjectsByRealState, hardenNativeServiceRestarts, clearNativeServiceFailure, describePortHolder, reportNativeGatewayBlockage };

package/dist/setup/shared/bot-config-gen.js

@@ -230,6 +230,23 @@
       cfg.messages = { ackReaction: '/-heart', ackReactionScope: 'all' };
     }
 
+    // ── session scope ─────────────────────────────────────────────────────────
+    // OpenClaw's own default (`main`) funnels EVERY direct message from EVERY person into a
+    // single shared session. Its runtime calls that out as a security problem verbatim:
+    //   "⚠️ SECURITY: Multiple users sharing DM session.
+    //    Configure \"session.dmScope: per-channel-peer\" in OpenClaw config."
+    // Two things go wrong in practice, both measured on vps_thuy-le 07/09/2026: the Control
+    // UI shows no DM session at all (there is nothing per-peer to list, so only groups
+    // appear), and the one shared session grows without bound until the model answers with
+    // an empty turn — "incomplete turn … payloads=0 tools=0" surfacing to the user as
+    // "⚠️ Agent couldn't generate a response".
+    // per-channel-peer (not per-peer) is the vendor's own wording and is the right split for
+    // a bot wired to several channels: the same person on Zalo and on Telegram stays apart.
+    // The key exists since 2026.7, so this is safe on every runtime setup installs.
+    // Only NEW configs get it — existing customer bots keep their current scope until
+    // someone changes it deliberately, because splitting sessions drops the old context.
+    cfg.session = { ...(cfg.session || {}), dmScope: 'per-channel-peer' };
+
     // ── commands ──────────────────────────────────────────────────────────────
     // No `ownerDisplay`: openclaw 2026.8.x strict schema rejects it as an unrecognized key
     // and refuses to start (measured on vps_c-thu, 02/09/2026).

package/dist/setup/shared/docker-gen.js

@@ -207,7 +207,7 @@ if(touched){console.log('[patch-9router] Applied Codex compatibility patch.');}e
   // Gio gate theo version openclaw THAT trong container: <2026.8 thi backfill nhu cu, ≥2026.8 thi
   // GO key neu con (tu chua cac project da nhiem). Khong doc duoc version thi KHONG dong nao chay
   // — tha thieu mot default con hon gieo key lam gateway tu choi boot.
-  const contextDefaultsScript = `const fs=require('fs'),path=require('path');const p=path.join(process.cwd(),'.openclaw','openclaw.json');if(fs.existsSync(p)){const c=JSON.parse(fs.readFileSync(p,'utf8'));let ch=false;c.skills=c.skills||{};c.skills.workshop=c.skills.workshop||{};if(!c.skills.workshop.approvalPolicy){c.skills.workshop.approvalPolicy='auto';ch=true;}if(c.browser&&c.browser.enabled!==false){c.tools=c.tools||{};const dn=Array.isArray(c.tools.deny)?c.tools.deny:[];if(!dn.includes('browser')){dn.push('browser');c.tools.deny=dn;ch=true;}}let ocMajorMinor=0;try{const v=String(require('child_process').execSync('openclaw --version',{stdio:['ignore','pipe','ignore']})).match(/(\\d{4})\\.(\\d+)/);if(v)ocMajorMinor=Number(v[1])*100+Number(v[2]);}catch(e){}const d=(c.agents&&c.agents.defaults)?c.agents.defaults:null;if(d){if(d.imageMaxDimensionPx===undefined){d.imageMaxDimensionPx=1024;ch=true;}if(d.imageQuality===undefined){d.imageQuality='efficient';ch=true;}if(ocMajorMinor&&ocMajorMinor<202608){d.contextLimits=d.contextLimits||{};if(d.contextLimits.toolResultMaxChars===undefined){d.contextLimits.toolResultMaxChars=12000;ch=true;}}else if(ocMajorMinor>=202608&&d.contextLimits&&d.contextLimits.toolResultMaxChars!==undefined){delete d.contextLimits.toolResultMaxChars;ch=true;}}if(ocMajorMinor>=202609){if(c.messages&&c.messages.removeAckAfterReply!==undefined){delete c.messages.removeAckAfterReply;ch=true;console.log('[migrate] go messages.removeAckAfterReply (2026.9 khong con nhan khoa nay)');}if(c.meta&&c.meta.lastTouchedAt!==undefined){delete c.meta.lastTouchedAt;ch=true;console.log('[migrate] go meta.lastTouchedAt (2026.9 khong con nhan khoa nay)');}}c.gateway=(c.gateway&&typeof c.gateway==='object')?c.gateway:{};if(c.gateway.mode===undefined){c.gateway.mode='local';ch=true;console.log('[migrate] gateway.mode=local (2026.9 tu choi chay neu thieu)');}c.tools=c.tools||{};c.tools.sessions=(c.tools.sessions&&typeof c.tools.sessions==='object')?c.tools.sessions:{};if(c.tools.sessions.visibility===undefined){c.tools.sessions.visibility='agent';ch=true;console.log('[migrate] tools.sessions.visibility=agent (khong cho bot doc phien cua bot khac)');}if(ocMajorMinor>=202608&&d&&d.modelSelectionScope===undefined){d.modelSelectionScope='session';ch=true;console.log('[migrate] agents.defaults.modelSelectionScope=session (khong ghi de model trong config)');}if(ocMajorMinor>=202608){const ag=c.agents||{};const nEntries=(Array.isArray(ag.list)?ag.list.length:0)+(ag.entries&&typeof ag.entries==='object'?Object.keys(ag.entries).length:0);if(nEntries>1&&ag.ownership!=='explicit'){ag.ownership='explicit';c.agents=ag;ch=true;}try{const agRoot=path.join(process.cwd(),'.openclaw','agents');for(const id of fs.readdirSync(agRoot)){const sf=path.join(agRoot,id,'sessions','sessions.json');if(fs.existsSync(sf)){fs.renameSync(sf,sf+'.bak-legacy-'+Date.now());console.log('[migrate] parked legacy session store '+sf);}}}catch(e){}if(c.commands&&c.commands.ownerDisplay!==undefined){delete c.commands.ownerDisplay;ch=true;}if(c.plugins&&c.plugins.bundledDiscovery!==undefined){delete c.plugins.bundledDiscovery;ch=true;}if(Array.isArray(ag.list)){ag.entries=(ag.entries&&typeof ag.entries==='object'&&!Array.isArray(ag.entries))?ag.entries:{};for(const a of ag.list){if(a&&a.id&&!ag.entries[a.id]){const{id:_aid,...rest}=a;ag.entries[_aid]=rest;}}delete ag.list;c.agents=ag;ch=true;console.log('[migrate] moved agents.list into agents.entries');}try{const ea=path.join(process.cwd(),'.openclaw','exec-approvals.json');if(fs.existsSync(ea)){fs.renameSync(ea,ea+'.bak-legacy-'+Date.now());console.log('[migrate] parked legacy exec approvals '+ea);}}catch(e){}try{const ag2=c.agents||{};const ids=(ag2.entries&&typeof ag2.entries==='object')?Object.keys(ag2.entries):(Array.isArray(ag2.list)?ag2.list.map(function(a){return a&&a.id;}).filter(Boolean):[]);if(ids.length>1&&d){if(!(d.heartbeat&&d.heartbeat.agentId)){d.heartbeat=(d.heartbeat&&typeof d.heartbeat==='object')?d.heartbeat:{};d.heartbeat.agentId=ids[0];ch=true;console.log('[migrate] agents.defaults.heartbeat.agentId='+ids[0]+' (khong thi heartbeat tat cam)');}if(!(d.systemAgent&&d.systemAgent.agentId)){d.systemAgent=(d.systemAgent&&typeof d.systemAgent==='object')?d.systemAgent:{};d.systemAgent.agentId=ids[0];ch=true;console.log('[migrate] agents.defaults.systemAgent.agentId='+ids[0]+' (khong thi cron.list vo ca trang Automations)');}const tk=(c.talk&&typeof c.talk==='object')?c.talk:{};if(!tk.agentId){tk.agentId=ids[0];c.talk=tk;ch=true;console.log('[migrate] talk.agentId='+ids[0]+' (khong thi talk.catalog loi khi mo Control UI)');}}}catch(e){}}const pr=c.models&&c.models.providers&&c.models.providers['9router'];if(pr&&Array.isArray(pr.models)){for(const m of pr.models){if(m&&m.id==='smart-route'&&(m.contextWindow===200000||m.contextWindow===131072)){m.contextWindow=1048576;ch=true;}}}if(ch)fs.writeFileSync(p,JSON.stringify(c,null,2));}`;
+  const contextDefaultsScript = `const fs=require('fs'),path=require('path');const p=path.join(process.cwd(),'.openclaw','openclaw.json');if(fs.existsSync(p)){const c=JSON.parse(fs.readFileSync(p,'utf8'));let ch=false;c.skills=c.skills||{};c.skills.workshop=c.skills.workshop||{};if(!c.skills.workshop.approvalPolicy){c.skills.workshop.approvalPolicy='auto';ch=true;}if(c.browser&&c.browser.enabled!==false){c.tools=c.tools||{};const dn=Array.isArray(c.tools.deny)?c.tools.deny:[];if(!dn.includes('browser')){dn.push('browser');c.tools.deny=dn;ch=true;}}let ocMajorMinor=0;try{const v=String(require('child_process').execSync('openclaw --version',{stdio:['ignore','pipe','ignore']})).match(/(\\d{4})\\.(\\d+)/);if(v)ocMajorMinor=Number(v[1])*100+Number(v[2]);}catch(e){}const d=(c.agents&&c.agents.defaults)?c.agents.defaults:null;if(d){if(d.imageMaxDimensionPx===undefined){d.imageMaxDimensionPx=1024;ch=true;}if(d.imageQuality===undefined){d.imageQuality='efficient';ch=true;}if(ocMajorMinor&&ocMajorMinor<202608){d.contextLimits=d.contextLimits||{};if(d.contextLimits.toolResultMaxChars===undefined){d.contextLimits.toolResultMaxChars=12000;ch=true;}}else if(ocMajorMinor>=202608&&d.contextLimits&&d.contextLimits.toolResultMaxChars!==undefined){delete d.contextLimits.toolResultMaxChars;ch=true;}}if(ocMajorMinor>=202609){if(c.messages&&c.messages.removeAckAfterReply!==undefined){delete c.messages.removeAckAfterReply;ch=true;console.log('[migrate] go messages.removeAckAfterReply (2026.9 khong con nhan khoa nay)');}if(c.meta&&c.meta.lastTouchedAt!==undefined){delete c.meta.lastTouchedAt;ch=true;console.log('[migrate] go meta.lastTouchedAt (2026.9 khong con nhan khoa nay)');}if(c.browser&&c.browser.profiles&&typeof c.browser.profiles==='object'){for(const pn of Object.keys(c.browser.profiles)){const bp=c.browser.profiles[pn];if(bp&&typeof bp==='object'&&bp.color!==undefined){delete bp.color;ch=true;console.log('[migrate] go browser.profiles.'+pn+'.color (2026.9 khong con nhan khoa nay)');}}}}c.gateway=(c.gateway&&typeof c.gateway==='object')?c.gateway:{};if(c.gateway.mode===undefined){c.gateway.mode='local';ch=true;console.log('[migrate] gateway.mode=local (2026.9 tu choi chay neu thieu)');}c.tools=c.tools||{};c.tools.sessions=(c.tools.sessions&&typeof c.tools.sessions==='object')?c.tools.sessions:{};if(c.tools.sessions.visibility===undefined){c.tools.sessions.visibility='agent';ch=true;console.log('[migrate] tools.sessions.visibility=agent (khong cho bot doc phien cua bot khac)');}if(ocMajorMinor>=202608&&d&&d.modelSelectionScope===undefined){d.modelSelectionScope='session';ch=true;console.log('[migrate] agents.defaults.modelSelectionScope=session (khong ghi de model trong config)');}if(ocMajorMinor>=202608){const ag=c.agents||{};const nEntries=(Array.isArray(ag.list)?ag.list.length:0)+(ag.entries&&typeof ag.entries==='object'?Object.keys(ag.entries).length:0);if(nEntries>1&&ag.ownership!=='explicit'){ag.ownership='explicit';c.agents=ag;ch=true;}try{const agRoot=path.join(process.cwd(),'.openclaw','agents');for(const id of fs.readdirSync(agRoot)){const sf=path.join(agRoot,id,'sessions','sessions.json');if(fs.existsSync(sf)){fs.renameSync(sf,sf+'.bak-legacy-'+Date.now());console.log('[migrate] parked legacy session store '+sf);}}}catch(e){}if(c.commands&&c.commands.ownerDisplay!==undefined){delete c.commands.ownerDisplay;ch=true;}if(c.plugins&&c.plugins.bundledDiscovery!==undefined){delete c.plugins.bundledDiscovery;ch=true;}if(Array.isArray(ag.list)){ag.entries=(ag.entries&&typeof ag.entries==='object'&&!Array.isArray(ag.entries))?ag.entries:{};for(const a of ag.list){if(a&&a.id&&!ag.entries[a.id]){const{id:_aid,...rest}=a;ag.entries[_aid]=rest;}}delete ag.list;c.agents=ag;ch=true;console.log('[migrate] moved agents.list into agents.entries');}try{const ea=path.join(process.cwd(),'.openclaw','exec-approvals.json');if(fs.existsSync(ea)){fs.renameSync(ea,ea+'.bak-legacy-'+Date.now());console.log('[migrate] parked legacy exec approvals '+ea);}}catch(e){}try{const ag2=c.agents||{};const ids=(ag2.entries&&typeof ag2.entries==='object')?Object.keys(ag2.entries):(Array.isArray(ag2.list)?ag2.list.map(function(a){return a&&a.id;}).filter(Boolean):[]);if(ids.length>1&&d){if(!(d.heartbeat&&d.heartbeat.agentId)){d.heartbeat=(d.heartbeat&&typeof d.heartbeat==='object')?d.heartbeat:{};d.heartbeat.agentId=ids[0];ch=true;console.log('[migrate] agents.defaults.heartbeat.agentId='+ids[0]+' (khong thi heartbeat tat cam)');}if(!(d.systemAgent&&d.systemAgent.agentId)){d.systemAgent=(d.systemAgent&&typeof d.systemAgent==='object')?d.systemAgent:{};d.systemAgent.agentId=ids[0];ch=true;console.log('[migrate] agents.defaults.systemAgent.agentId='+ids[0]+' (khong thi cron.list vo ca trang Automations)');}const tk=(c.talk&&typeof c.talk==='object')?c.talk:{};if(!tk.agentId){tk.agentId=ids[0];c.talk=tk;ch=true;console.log('[migrate] talk.agentId='+ids[0]+' (khong thi talk.catalog loi khi mo Control UI)');}}}catch(e){}}const pr=c.models&&c.models.providers&&c.models.providers['9router'];if(pr&&Array.isArray(pr.models)){for(const m of pr.models){if(m&&m.id==='smart-route'&&(m.contextWindow===200000||m.contextWindow===131072)){m.contextWindow=1048576;ch=true;}}}if(ch)fs.writeFileSync(p,JSON.stringify(c,null,2));}`;
 
   function buildDockerArtifacts(options) {
     const {

package/dist/setup/shared/windows-launcher-gen.js

@@ -0,0 +1,199 @@
+'use strict';
+
+/**
+ * Double-click launchers for a NATIVE bot on Windows.
+ *
+ * Why these exist instead of a Scheduled Task: `openclaw daemon install` creates a task with
+ * `LogonType: Interactive`, which means the gateway is tied to whoever's login session started
+ * it. Two consequences measured on win_kha (10/09/2026):
+ *   • anything started over SSH dies the moment the session closes (LastTaskResult 0xC000013A);
+ *   • a task set to run at boot is refused outright, because "at startup" and "only while
+ *     someone is logged in" contradict each other (0x800710E0).
+ * Making it run without a login needs the account password stored in the task — Task Scheduler
+ * rejected that too ("The user account is unknown, the password is incorrect"). So the owner
+ * drives it by hand, exactly like the .command files on macOS.
+ *
+ * Every trap below cost a round trip with a customer waiting, so they are encoded here:
+ *
+ *  1. `.cmd` MUST be CRLF. LF-only files break on Windows.
+ *  2. Never name a launcher after the command it calls. `9router.cmd` in the project dir plus
+ *     `cd /d <project>` makes `call 9router` re-enter the same file — BATCH RECURSION, and the
+ *     process dies before doing anything.
+ *  3. Never append to a fixed log file. 9router holds its log open for its whole lifetime, so
+ *     the SECOND run cannot open it and exits with "The process cannot access the file because
+ *     it is being used by another process" — invisible on the first run, which is why it is easy
+ *     to ship broken.
+ *  4. 9router shows a `Choose Interface` menu when its stdout looks like a real console. Started
+ *     hidden, nobody can answer it, so it hangs and never opens its port. `> NUL` is what tells
+ *     it to run unattended. Symptom without it: works when run by hand, silently dead in the
+ *     background — same command.
+ *  5. `Start-Process -WindowStyle Hidden` does NOT hide a console a .cmd opens for itself. Only
+ *     WScript.Shell.Run(..., 0, False) truly hides it. Leaving a visible window is not cosmetic:
+ *     it IS the bot, and closing it kills the bot.
+ *  6. Anchor the working directory. Agents may carry relative workspace paths, which resolve
+ *     against the launcher's cwd — move the files into a folder and those bots die with
+ *     WORKSPACE_VANISHED while the others keep working.
+ */
+
+const CRLF = (s) => s.replace(/\r?\n/g, '\r\n');
+
+/** Hidden-launch helper. WScript is the only reliable way to start a .cmd with no window. */
+function buildRunHiddenVbs() {
+  return CRLF(
+    'Set sh = CreateObject("WScript.Shell")\n' +
+    'sh.Run "cmd /c """ & WScript.Arguments(0) & """", 0, False\n',
+  );
+}
+
+/** Starts 9router. Named start-9router.cmd on purpose — see trap 2. */
+function build9RouterCmd({ projectDir, routerPort }) {
+  return CRLF(
+    '@echo off\n' +
+    'rem Ten tep KHONG duoc la "9router.cmd": trung ten thi lenh ben duoi goi lai chinh no.\n' +
+    'rem "> NUL" la bat buoc: neu dau ra la man hinh that, 9router bay menu "Choose Interface"\n' +
+    'rem roi cho nguoi chon va khong bao gio mo cong.\n' +
+    `cd /d ${projectDir}\n` +
+    `set "DATA_DIR=${projectDir}\\.9router"\n` +
+    `call 9router -n -l -H 127.0.0.1 -p ${routerPort} --skip-update > NUL 2>&1\n`,
+  );
+}
+
+/** Starts the gateway. Calls node directly — see the --task-supervisor note below. */
+function buildGatewayCmd({ projectDir, gatewayPort }) {
+  return CRLF(
+    '@echo off\n' +
+    'rem Goi thang node, KHONG qua gateway.cmd cua openclaw: tep do chay kem --task-supervisor,\n' +
+    'rem no di tim Scheduled Task de ban giao; khong co task thi no de them tien trinh + cua so.\n' +
+    'rem Khong redirect ra tep co dinh (xem trap 3) — openclaw tu ghi nhat ky trong %TEMP%\\openclaw.\n' +
+    `cd /d ${projectDir}\n` +
+    'set "HOME=%USERPROFILE%"\n' +
+    `set "OPENCLAW_GATEWAY_PORT=${gatewayPort}"\n` +
+    `set "OPENCLAW_PORT=${gatewayPort}"\n` +
+    '"%ProgramFiles%\\nodejs\\node.exe" --max-old-space-size=8192 ' +
+    `"%APPDATA%\\npm\\node_modules\\openclaw\\dist\\index.js" gateway --port ${gatewayPort}\n`,
+  );
+}
+
+function buildSetupUiCmd({ projectDir, setupPort }) {
+  return CRLF(
+    '@echo off\n' +
+    'rem Ten tep nhat ky kem gio, de lan chay sau khong dung vao tep dang bi giu (trap 3).\n' +
+    `cd /d ${projectDir}\n` +
+    'for /f "tokens=1-4 delims=/: " %%a in ("%TIME%") do set "T=%%a%%b%%c"\n' +
+    `call npx create-openclaw-bot --host=127.0.0.1 --port=${setupPort} --no-open --project-dir=${projectDir}` +
+    ` > "${projectDir}\\setup-ui-%T%.log" 2>&1\n`,
+  );
+}
+
+function buildStartBotCmd({ projectDir, gatewayPort, routerPort }) {
+  const dashPort = gatewayPort + 1;
+  return CRLF(
+    '@echo off\n' +
+    'title Khoi dong bot OpenClaw\n' +
+    'color 0A\n' +
+    `cd /d ${projectDir}\n` +
+    'echo.\n' +
+    'echo   ============================================\n' +
+    `echo      KHOI DONG BOT  --  ${projectDir}\n` +
+    'echo   ============================================\n' +
+    'echo.\n' +
+    'echo   Dang bat 9Router...\n' +
+    `powershell -NoProfile -Command "if (-not (Get-NetTCPConnection -LocalPort ${routerPort} -State Listen -EA SilentlyContinue)) { Start-Process wscript -ArgumentList '${projectDir}\\run-hidden.vbs','${projectDir}\\start-9router.cmd' -WindowStyle Hidden }" >nul 2>&1\n` +
+    'echo   Cho 9Router san sang...\n' +
+    `powershell -NoProfile -Command "for($i=0;$i -lt 20;$i++){ try{ Invoke-WebRequest 'http://127.0.0.1:${routerPort}/' -UseBasicParsing -TimeoutSec 3 | Out-Null; break } catch { Start-Sleep -Seconds 2 } }"\n` +
+    'echo   Dang bat bot (gateway)...\n' +
+    `powershell -NoProfile -Command "if (-not (Get-NetTCPConnection -LocalPort ${gatewayPort} -State Listen -EA SilentlyContinue)) { Start-Process wscript -ArgumentList '${projectDir}\\run-hidden.vbs','${projectDir}\\gateway-start.cmd' -WindowStyle Hidden }" >nul 2>&1\n` +
+    'echo   Cho bot san sang (co the mat 30-60 giay)...\n' +
+    'echo.\n' +
+    `powershell -NoProfile -Command "$ok=$false; for($i=0;$i -lt 40;$i++){ try{ Invoke-WebRequest 'http://127.0.0.1:${gatewayPort}/health' -UseBasicParsing -TimeoutSec 3 | Out-Null; $ok=$true; break } catch { Start-Sleep -Seconds 3 } }; if($ok){ Write-Host '   [OK] Bot da chay.' -ForegroundColor Green } else { Write-Host '   [LOI] Bot chua len.' -ForegroundColor Red }"\n` +
+    'echo.\n' +
+    'echo   --- Trang thai ---\n' +
+    `powershell -NoProfile -Command "foreach($x in @(@('Bot (gateway)','http://127.0.0.1:${gatewayPort}/health'),@('9Router','http://127.0.0.1:${routerPort}/'),@('Bang dieu khien Zalo','http://127.0.0.1:${dashPort}/dashboard'))){ try{ (Invoke-WebRequest $x[1] -UseBasicParsing -TimeoutSec 6) | Out-Null; Write-Host ('   {0,-22} DANG CHAY' -f $x[0]) -ForegroundColor Green } catch { Write-Host ('   {0,-22} TAT' -f $x[0]) -ForegroundColor Red } }"\n` +
+    'echo.\n' +
+    'echo   Bot chay AN, khong co cua so nao de lo tay dong.\n' +
+    'echo   Bot chi tat khi ban DANG XUAT / TAT may, hoac bam "3 - DUNG BOT".\n' +
+    'echo.\n' +
+    'timeout /t 12 >nul\n',
+  );
+}
+
+function buildOpenUiCmd({ projectDir, setupPort }) {
+  return CRLF(
+    '@echo off\n' +
+    'title Mo giao dien bot\n' +
+    'color 0B\n' +
+    `cd /d ${projectDir}\n` +
+    'echo.\n' +
+    'echo   ============================================\n' +
+    'echo      MO GIAO DIEN QUAN TRI BOT\n' +
+    'echo   ============================================\n' +
+    'echo.\n' +
+    `powershell -NoProfile -Command "if (-not (Get-NetTCPConnection -LocalPort ${setupPort} -State Listen -EA SilentlyContinue)) { Write-Host '   Dang bat giao dien...'; Start-Process wscript -ArgumentList '${projectDir}\\run-hidden.vbs','${projectDir}\\setup-ui.cmd' -WindowStyle Hidden } else { Write-Host '   Giao dien dang chay san.' }"\n` +
+    'echo   Cho giao dien san sang...\n' +
+    `powershell -NoProfile -Command "for($i=0;$i -lt 30;$i++){ try{ Invoke-WebRequest 'http://127.0.0.1:${setupPort}/' -UseBasicParsing -TimeoutSec 3 | Out-Null; break } catch { Start-Sleep -Seconds 2 } }"\n` +
+    `start "" http://127.0.0.1:${setupPort}\n` +
+    'echo.\n' +
+    'echo   Da mo trinh duyet. Dong cua so nay duoc roi.\n' +
+    'timeout /t 8 >nul\n',
+  );
+}
+
+function buildStopBotCmd({ gatewayPort, routerPort }) {
+  return CRLF(
+    '@echo off\n' +
+    'title Dung bot OpenClaw\n' +
+    'color 0C\n' +
+    'echo.\n' +
+    'echo   Dang dung bot va 9Router...\n' +
+    'powershell -NoProfile -Command "Get-CimInstance Win32_Process -Filter \\"Name=\'node.exe\'\\" | Where-Object { $_.CommandLine -like \'*openclaw*gateway*\' -or $_.CommandLine -like \'*9router*\' } | ForEach-Object { Write-Host (\'   dung PID \' + $_.ProcessId); Stop-Process -Id $_.ProcessId -Force -EA SilentlyContinue }"\n' +
+    'echo.\n' +
+    `powershell -NoProfile -Command "Start-Sleep -Seconds 3; foreach($x in @(@('Bot',${gatewayPort}),@('9Router',${routerPort}))){ $c=Get-NetTCPConnection -LocalPort $x[1] -State Listen -EA SilentlyContinue; if($c){ Write-Host ('   {0,-10} VAN CHAY' -f $x[0]) -ForegroundColor Yellow } else { Write-Host ('   {0,-10} da tat' -f $x[0]) -ForegroundColor Green } }"\n` +
+    'echo.\n' +
+    'pause\n',
+  );
+}
+
+function buildReadme({ projectDir, gatewayPort, routerPort, setupPort }) {
+  return CRLF(
+    'BOT OPENCLAW TREN MAY NAY - HUONG DAN NHANH\n' +
+    '===========================================\n\n' +
+    'Ba tep .cmd, bam dup la chay. Khong can go lenh.\n\n' +
+    '  1 - KHOI DONG BOT.cmd     Bat bot len. Bam sau moi lan khoi dong may.\n' +
+    '  2 - MO GIAO DIEN.cmd      Mo trang quan tri bot trong trinh duyet.\n' +
+    '  3 - DUNG BOT.cmd          Tat bot (chi dung khi can).\n\n' +
+    'QUAN TRONG\n' +
+    '----------\n' +
+    '- Bot chay AN hoan toan: khong co cua so den nao nam tren man hinh.\n' +
+    '- Bot KHONG tu chay khi bat may. Sau moi lan khoi dong lai may,\n' +
+    '  bam "1 - KHOI DONG BOT" mot lan la xong.\n' +
+    '- Bot se tat khi ban DANG XUAT hoac TAT may.\n' +
+    '- Dat cac tep nay o dau cung duoc, chung deu neo ve ' + projectDir + '.\n\n' +
+    'Cong dang dung:\n' +
+    `  ${gatewayPort}  bot (gateway)\n` +
+    `  ${gatewayPort + 1}  bang dieu khien Zalo\n` +
+    `  ${routerPort}  9Router\n` +
+    `  ${setupPort}  giao dien quan tri\n`,
+  );
+}
+
+/** All launcher files for a native Windows project, as { relativeName: content }. */
+function buildWindowsLaunchers({ projectDir, gatewayPort = 18789, routerPort = 20128, setupPort = 51789 }) {
+  const opts = { projectDir, gatewayPort, routerPort, setupPort };
+  return {
+    'run-hidden.vbs': buildRunHiddenVbs(),
+    'start-9router.cmd': build9RouterCmd(opts),
+    'gateway-start.cmd': buildGatewayCmd(opts),
+    'setup-ui.cmd': buildSetupUiCmd(opts),
+    '0 - DOC TRUOC.txt': buildReadme(opts),
+    '1 - KHOI DONG BOT.cmd': buildStartBotCmd(opts),
+    '2 - MO GIAO DIEN.cmd': buildOpenUiCmd(opts),
+    '3 - DUNG BOT.cmd': buildStopBotCmd(opts),
+  };
+}
+
+/** Which of the generated files belong on the Desktop rather than in the project folder. */
+const WINDOWS_DESKTOP_LAUNCHERS = ['0 - DOC TRUOC.txt', '1 - KHOI DONG BOT.cmd', '2 - MO GIAO DIEN.cmd', '3 - DUNG BOT.cmd'];
+
+const api = { buildWindowsLaunchers, WINDOWS_DESKTOP_LAUNCHERS };
+if (typeof globalThis !== 'undefined') globalThis.__openclawWindowsLaunchers = api;
+if (typeof exports !== 'undefined') Object.assign(exports, api);

package/dist/web/app.js

@@ -1,5 +1,5 @@
 const $ = (sel) => document.querySelector(sel);
-const state = { tab: 'dashboard', system: null, install: null, files: [], catalog: { skills: [], plugins: [] }, logs: [], zaloLoginOpen: false, zaloLoginLines: [], zaloQrDataUrl: '', lang: localStorage.getItem('openclaw-lang') || 'vi', theme: localStorage.getItem('openclaw-theme') || 'dark', tz: localStorage.getItem('openclaw-tz') || 'Asia/Ho_Chi_Minh', navCollapsed: localStorage.getItem('openclaw-nav')==='1', os: null, mode: null, donateOpen: false, botModalOpen: false, botEditId: '', installModalOpen: false, fbPluginModalOpen: false, installTab: 'docker', installDraft: null, pathModal: null, confirmModal: null, botChannel: 'telegram', botPane: 'list', activeBotId: '', selectedFile: '', botMessage: '', projectConnectMessage: '', pendingProjectDir: '', selectedProjectDir: '', featureFlags: {}, featureInstalled: {}, featureLoading: {}, featureLocked: {}, zaloBackend: '', zaloHealth: null, openDirs: {} };
+const state = { tab: 'dashboard', system: null, install: null, files: [], catalog: { skills: [], plugins: [] }, logs: [], zaloLoginOpen: false, zaloLoginLines: [], zaloQrDataUrl: '', lang: localStorage.getItem('openclaw-lang') || 'vi', theme: localStorage.getItem('openclaw-theme') || 'dark', tz: localStorage.getItem('openclaw-tz') || 'Asia/Ho_Chi_Minh', navCollapsed: localStorage.getItem('openclaw-nav')==='1', os: null, mode: null, donateOpen: false, botModalOpen: false, botEditId: '', installModalOpen: false, fbPluginModalOpen: false, installTab: 'native', installDraft: null, pathModal: null, confirmModal: null, botChannel: 'telegram', botPane: 'list', activeBotId: '', selectedFile: '', botMessage: '', projectConnectMessage: '', pendingProjectDir: '', selectedProjectDir: '', featureFlags: {}, featureInstalled: {}, featureLoading: {}, featureLocked: {}, zaloBackend: '', zaloHealth: null, openDirs: {} };
 const SVG_CDN = 'https://cdn.jsdelivr.net/gh/glincker/thesvg@main/public/icons';
 const OS_OPTIONS = [
   { id: 'win', title: 'Windows', subtitle: 'Auto-detected desktop', icon: `${SVG_CDN}/windows/default.svg`, badge: 'Desktop' },
@@ -212,19 +212,24 @@ function installModal() {
   const sys = state.system || {};
   const draft = refreshInstallDraft();
   const os = draft.os || state.os || sys?.os || 'win';
-  const mode = draft.mode || state.installTab || state.mode || sys?.recommendedMode || 'docker';
+  const mode = draft.mode || state.installTab || 'native';
   const pathExample = os === 'win' ? 'C:\\openclaw-setup' : os === 'macos' ? '/Users/you/openclaw-setup' : '/home/you/openclaw-setup';
   const osChoices = OS_OPTIONS.map(o => [o.id, t(o.title, o.title), trChoice(o).subtitle]);
+  // Docker is closed for NEW projects: openclaw >=2026.9 writes config through fs-safe, which
+  // fstat()s the file after an atomic rename \u2014 a check that cannot pass through a Docker Desktop
+  // bind mount on Windows, so the first image rebuild after that takes the gateway down for good
+  // (measured on win_kha, 09/09/2026). Existing docker projects keep running and move to native on
+  // their next update; the tile stays visible but disabled so the reason is on screen.
   const modeChoices = [
-    ['docker', 'Docker', t('\u0043ontainer c\u00f4 l\u1eadp, an to\u00e0n nh\u1ea5t', 'Isolated containers, safest default')],
-    ['native', 'Native', t('Ch\u1ea1y th\u1eb3ng tr\u00ean m\u00e1y n\u00e0y \u2014 kh\u00f4ng c\u1ea7n Docker, \u0111i\u1ec1u khi\u1ec3n \u0111\u01b0\u1ee3c app', 'Runs on this machine \u2014 no Docker, can drive desktop apps')],
+    ['native', 'Native', t('Ch\u1ea1y th\u1eb3ng tr\u00ean m\u00e1y n\u00e0y \u2014 kh\u00f4ng c\u1ea7n Docker, \u0111i\u1ec1u khi\u1ec3n \u0111\u01b0\u1ee3c app', 'Runs on this machine \u2014 no Docker, can drive desktop apps'), false],
+    ['docker', 'Docker', t('\u0110\u00e3 ng\u1eebng \u2014 OpenClaw 2026.9 kh\u00f4ng ghi \u0111\u01b0\u1ee3c c\u1ea5u h\u00ecnh qua Docker tr\u00ean Windows', 'Retired \u2014 OpenClaw 2026.9 cannot write config through Docker on Windows'), true],
   ];
   return `<div class="modal-backdrop install-backdrop" data-install-modal="close">
     <section class="donate-modal install-modal" role="dialog" aria-modal="true" aria-label="${t('T\u1ea1o Project','Create Project')}" onclick="event.stopPropagation()">
       <button class="modal-x" data-install-modal="close" aria-label="Close"><svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.2" stroke-linecap="round"><path d="M6 6l12 12M18 6L6 18"/></svg></button>
       <div class="donate-head"><span aria-hidden="true">+</span><div><p>${t('T\u1ea1o Project','Create Project')}</p><h2>${t('T\u1ea1o Project','Create Project')}</h2><small>${t('Ch\u1ecdn s\u1eb5n ch\u1ebf \u0111\u1ed9 \u1edf tab tr\u00ean. B\u00ean d\u01b0\u1edbi ch\u1ec9 c\u1ea7n ch\u1ecdn OS v\u00e0 nh\u1eadp ho\u1eb7c ch\u1ecdn \u0111\u01b0\u1eddng d\u1eabn project.','Mode stays in the tabs above. Below, choose OS and enter or pick the project path.')}</small></div></div>
       <form id="install-form" class="install-form">
-        <div class="install-tabs">${modeChoices.map(([id,label,desc]) => `<button type="button" class="install-tab ${mode===id?'is-active':''}" data-install-set="mode" data-value="${id}"><strong>${escapeHtml(label)}</strong><small>${escapeHtml(desc)}</small></button>`).join('')}</div>
+        <div class="install-tabs">${modeChoices.map(([id,label,desc,locked]) => `<button type="button" class="install-tab ${mode===id?'is-active':''}${locked?' is-locked':''}" data-install-set="mode" data-value="${id}"${locked?' disabled aria-disabled="true"':''}><strong>${escapeHtml(label)}${locked?' 🔒':''}</strong><small>${escapeHtml(desc)}</small></button>`).join('')}</div>
         <div class="install-grid install-grid--compact">
           <div class="field wide"><span>${t('H\u1ec7 \u0111i\u1ec1u h\u00e0nh','Operating system')}</span>${pillGroup('os', os, osChoices)}<small>${t('\u0110\u00e3 ch\u1ecdn s\u1eb5n theo m\u00e1y \u0111ang ch\u1ea1y','Preselected from the current machine')}</small></div>
           <label class="field wide"><span>${t('Đường dẫn project','Project path')}</span><input name="projectDir" placeholder="${escapeHtml(pathExample)}" value="${escapeHtml(draft.projectDir || pathExample)}" /><small>${t('Ví dụ: C:\\openclaw-setup hoặc /home/you/openclaw-setup. Bạn có thể tự sửa tên folder bot thành tên bất kỳ.','Example: C:\\openclaw-setup or /home/you/openclaw-setup. You can rename folder bot to any name.')}</small></label>
@@ -1546,7 +1551,7 @@ document.querySelectorAll('[data-project-pick-folder]').forEach(btn => btn.oncli
   });
   $('#install')?.addEventListener('click', () => {
     state.installModalOpen = true;
-    state.installTab = document.querySelector('input[name=mode]:checked')?.value || state.mode || state.system?.recommendedMode || 'docker';
+    state.installTab = document.querySelector('input[name=mode]:checked')?.value || 'native';
     const os = document.querySelector('input[name=os]:checked')?.value || state.os || state.system?.os || 'win';
     const defaultDir = os === 'win' ? 'E:\\bot' : os === 'macos' ? '/Users/you/openclaw-bot' : '/home/you/openclaw-bot';
     

package/dist/web/styles.css

@@ -2060,3 +2060,4 @@ body:has(.modal-backdrop) .bottom{display:none!important}
 .feature-switch span{width:42px;height:24px}
 .feature-switch span:after{top:2px;left:2px;width:18px;height:18px}
 .feature-switch input:checked + span:after{left:22px}
+.install-tab.is-locked{opacity:.45;cursor:not-allowed;filter:grayscale(1)}.install-tab.is-locked:hover{transform:none;border-color:var(--hair)}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-openclaw-bot",
-  "version": "5.16.8",
+  "version": "5.17.0",
   "description": "Interactive CLI installer for OpenClaw Bot",
   "main": "dist/cli.js",
   "bin": {