create-openclaw-bot 5.2.1 → 5.2.3

package/CHANGELOG.md

@@ -1,6 +1,27 @@
 # Changelog (English)
 
 
+## [5.2.3] — 2026-04-10
+
+### 🐛 Bug Fixes & Encoding Improvements
+
+- **Fix: `ReferenceError: projectDir is not defined`** — Crash when clicking "Generate Configs" in multi-bot mode. `nativeProjectOpenClawRoot` in `buildTelegramPostInstallChecklist()` referenced an undefined `projectDir` variable and was dead code (unused in return value). Removed.
+- **Fix: Step 3 "Next" button validation** — `state._activeBotTab` was a typo of `state.activeBotIndex`, causing multi-bot validation to always read the wrong tab index.
+- **Fix: `saveFormData()` always saved bot tab name to `bots[0]`** — In multi-bot mode, the active bot name was always written to `bots[0]` regardless of which tab was active. Now correctly saves to `bots[state.activeBotIndex]`.
+- **UX: Inline hint for disabled "Generate Configs" button** — When the button is blocked, a warning now appears showing exactly which fields are still missing (e.g. "Missing: GOOGLE_API_KEY").
+- **Fix: Vietnamese diacritics in generated `.bat` and `.sh` scripts** — All Vietnamese echo/Write-Host strings in the generated Windows setup script and Linux/macOS bash script have been converted to ASCII (no diacritics) to prevent encoding errors on systems with non-UTF-8 codepages.
+
+## [5.2.2] — 2026-04-10
+
+
+### 🐛 Docker & Native PM2 Bug Fixes
+
+- **Fix Docker crash loop (socat port conflict)**: `socat TCP-LISTEN:18791` was binding `0.0.0.0:18791` before `openclaw gateway run` started, causing `EADDRINUSE` on `127.0.0.1:18791`. Removed the broken gateway bridge from the generated Dockerfile CMD in both `cli.js` and `setup.js`.
+- **Fix Docker dashboard not accessible from host**: Gateway `bind` was set to `'loopback'` — Docker port mapping cannot route to container loopback. Restored the v5.0.9 working pattern: `bind:'custom', customBindHost:'0.0.0.0'`.
+- **Fix `delete c.gateway.customBindHost`**: A stray `delete` statement was erasing the `customBindHost` key right after setting it. Removed.
+- **Fix Docker build re-downloading npm packages on every rebuild**: `ARG CACHEBUST=<epoch>` was cache-busting the `npm install -g openclaw` layer on every build (even config-only changes). Replaced with a version-stable `ARG OPENCLAW_VER` so Docker layer cache is reused between rebuilds.
+- **Fix native PM2 double `.openclaw` nesting**: `ecosystem.config.js` was setting `OPENCLAW_HOME: projectDir/.openclaw`, causing OpenClaw to resolve workspace as `projectDir/.openclaw/.openclaw/workspace`. Removed `OPENCLAW_HOME` from PM2 env; OpenClaw discovers config via `cwd` (matching v5.0.9 behavior).
+
 ## [5.2.1] — 2026-04-09
 
 ### 🐛 Native Ubuntu/VPS Bug Fixes

package/CHANGELOG.vi.md

@@ -1,6 +1,28 @@
 # Changelog (Tiếng Việt)
 
 
+## [5.2.3] — 2026-04-10
+
+### 🐛 Sửa lỗi & Cải thiện encoding
+
+- **Fix: `ReferenceError: projectDir is not defined`** — Crash khi bấm "Generate Configs" ở chế độ multi-bot. Biến `projectDir` không được khai báo trong `buildTelegramPostInstallChecklist()` và là dead code (không dùng trong return). Đã xoá.
+- **Fix: Nút "Tiếp theo" ở Bước 3 bị validate sai** — `state._activeBotTab` là typo của `state.activeBotIndex`, khiến validation multi-bot luôn đọc sai tab index.
+- **Fix: `saveFormData()` luôn lưu tên bot vào `bots[0]`** — Trong multi-bot mode, tên bot đang active bị ghi đè cố định vào `bots[0]` thay vì `bots[state.activeBotIndex]`. Đã sửa.
+- **UX: Hiển thị gợi ý khi nút "Generate Configs" bị khoá** — Khi nút bị disable, một cảnh báo xuất hiện ngay bên dưới cho biết trường nào còn thiếu (ví dụ: "Còn thiếu: GOOGLE_API_KEY").
+- **Fix: Tiếng Việt có dấu trong file `.bat` và `.sh` được tạo ra** — Toàn bộ chuỗi echo/Write-Host tiếng Việt có dấu trong script cài đặt cho Windows và Linux/macOS đã được chuyển về dạng không dấu (ASCII thuần) để tránh lỗi encoding trên các máy không dùng UTF-8.
+
+## [5.2.2] — 2026-04-10
+
+
+### 🐛 Sửa lỗi Docker & Native PM2
+
+- **Sửa crash loop Docker (xung đột port socat)**: `socat TCP-LISTEN:18791` chiếm port `0.0.0.0:18791` trước khi `openclaw gateway run` khởi động, gây `EADDRINUSE`. Đã xóa gateway bridge khỏi Dockerfile CMD trong `cli.js` và `setup.js`.
+- **Sửa Dashboard Docker không vào được từ host**: Gateway `bind` đặt là `'loopback'` — Docker port mapping không reach được loopback bên trong container. Khôi phục pattern đúng từ v5.0.9: `bind:'custom', customBindHost:'0.0.0.0'`.
+- **Sửa `delete c.gateway.customBindHost`**: Một lệnh `delete` thừa đang xóa key `customBindHost` ngay sau khi set. Đã xóa dòng đó.
+- **Sửa Docker tải lại npm mỗi lần build**: `ARG CACHEBUST=<timestamp>` bust cache layer `npm install -g openclaw` mỗi lần build dù chỉ đổi config. Thay bằng `ARG OPENCLAW_VER` ổn định theo version — Docker tái sử dụng cache giữa các lần rebuild.
+- **Sửa lồng đôi `.openclaw` trong native PM2**: `ecosystem.config.js` đang đặt `OPENCLAW_HOME: projectDir/.openclaw`, khiến OpenClaw resolve workspace thành `projectDir/.openclaw/.openclaw/workspace`. Đã xóa `OPENCLAW_HOME` khỏi PM2 env; OpenClaw tự tìm config qua `cwd` (khớp với v5.0.9).
+
+
 ## [5.2.1] — 2026-04-09
 
 ### 🐛 Sửa Lỗi Ubuntu/VPS Native

package/README.md

@@ -3,7 +3,7 @@
 # 🦞 OpenClaw Setup
 
 <p align="center">
-  <a href="https://github.com/tuanminhhole/openclaw-setup/releases"><img src="https://img.shields.io/badge/RELEASE-v5.2.1-0EA5E9?style=for-the-badge" alt="Version 5.2.1" /></a>
+  <a href="https://github.com/tuanminhhole/openclaw-setup/releases"><img src="https://img.shields.io/badge/RELEASE-v5.2.3-0EA5E9?style=for-the-badge" alt="Version 5.2.3" /></a>
   <a href="https://github.com/tuanminhhole/openclaw-setup?tab=MIT-1-ov-file"><img src="https://img.shields.io/badge/LICENSE-MIT-success?style=for-the-badge" alt="MIT License" /></a>
   <a href="https://www.npmjs.com/package/create-openclaw-bot"><img src="https://img.shields.io/npm/v/create-openclaw-bot?style=for-the-badge&label=CLI&color=2563EB&logo=npm&logoColor=white" alt="NPM Version" /></a>
   <a href="https://github.com/tuanminhhole/openclaw-setup/stargazers"><img src="https://img.shields.io/github/stars/tuanminhhole/openclaw-setup?style=for-the-badge&color=eab308&logo=github&logoColor=white" alt="GitHub Stars" /></a>
@@ -24,7 +24,7 @@ An interactive **CLI tool** and **Setup Wizard** to deploy your own free AI Bot
 
 ---
 
-## 🆕 What's new in v5.2.1
+## 🆕 What's new in v5.2.3
 
 - 🔄 **One-command upgrade** — Run `npx create-openclaw-bot@latest upgrade` in your bot folder to update OpenClaw without re-running the wizard. Auto-detects Docker vs Native mode.
 - 🪟 **Windows upgrade shortcut** — `upgrade.ps1` ships with the repo. Double-click it to upgrade instantly (no terminal knowledge required).
@@ -32,7 +32,7 @@ An interactive **CLI tool** and **Setup Wizard** to deploy your own free AI Bot
 - 🛡️ **All user data preserved** — `.env`, memory, sessions, credentials, and 9Router OAuth tokens are never touched during upgrade.
 
 <details>
-<summary><b>Previous: What's new in v5.2.1</b></summary>
+<summary><b>Previous: What's new in v5.2.3</b></summary>
 
 - 🔒 **Pinned OpenClaw version** — The OpenClaw update published on `April 8, 2026` is currently broken, so setup now stays on `openclaw@2026.4.5` for stability.
 - 🐳 **Dockerfile fixes** — Fixed the Windows Docker flow so startup no longer breaks on bad command escaping or invalid generated `allowedOrigins`.
@@ -110,7 +110,7 @@ Run in your terminal → follow the interactive prompts → startup script is ge
 2. Open this repo as your workspace
 3. Paste into chat:
    ```
-Read SETUP.md and set up OpenClaw v5.2.1 for me.
+Read SETUP.md and set up OpenClaw v5.2.3 for me.
    My bot token is X. Use 9Router (no API key).
    My project folder: <YOUR_PATH>
    ```

package/README.vi.md

@@ -3,7 +3,7 @@
 # 🦞 OpenClaw Setup
 
 <p align="center">
-  <a href="https://github.com/tuanminhhole/openclaw-setup/releases"><img src="https://img.shields.io/badge/RELEASE-v5.2.1-0EA5E9?style=for-the-badge" alt="Version 5.2.1" /></a>
+  <a href="https://github.com/tuanminhhole/openclaw-setup/releases"><img src="https://img.shields.io/badge/RELEASE-v5.2.3-0EA5E9?style=for-the-badge" alt="Version 5.2.3" /></a>
   <a href="https://github.com/tuanminhhole/openclaw-setup?tab=MIT-1-ov-file"><img src="https://img.shields.io/badge/LICENSE-MIT-success?style=for-the-badge" alt="MIT License" /></a>
   <a href="https://www.npmjs.com/package/create-openclaw-bot"><img src="https://img.shields.io/npm/v/create-openclaw-bot?style=for-the-badge&label=CLI&color=2563EB&logo=npm&logoColor=white" alt="NPM Version" /></a>
   <a href="https://github.com/tuanminhhole/openclaw-setup/stargazers"><img src="https://img.shields.io/github/stars/tuanminhhole/openclaw-setup?style=for-the-badge&color=eab308&logo=github&logoColor=white" alt="GitHub Stars" /></a>
@@ -24,7 +24,7 @@ Công cụ **CLI tương tác** và **Setup Wizard** để tự triển khai Bot
 
 ---
 
-## 🆕 Có gì mới trong v5.2.1
+## 🆕 Có gì mới trong v5.2.3
 
 - 🔄 **Upgrade 1 lệnh** — Chạy `npx create-openclaw-bot@latest upgrade` trong thư mục bot để cập nhật OpenClaw mà không cần chạy lại wizard. Tự động nhận diện Docker hay Native.
 - 🪟 **Windows: double-click để upgrade** — File `upgrade.ps1` có sẵn trong repo. Nhấp đúp là xong — không cần biết terminal.
@@ -32,7 +32,7 @@ Công cụ **CLI tương tác** và **Setup Wizard** để tự triển khai Bot
 - 🛡️ **Dữ liệu cũ giữ nguyên hoàn toàn** — `.env`, memory, sessions, credentials, OAuth token 9Router không bao giờ bị xoá khi upgrade.
 
 <details>
-<summary><b>Trước đó: Có gì mới ở v5.2.1</b></summary>
+<summary><b>Trước đó: Có gì mới ở v5.2.3</b></summary>
 
 - 🔒 **Pin lại OpenClaw** — Bản OpenClaw cập nhật ngày `08/04/2026` đang lỗi, nên setup được fix để giữ ở `openclaw@2026.4.5` cho ổn định.
 - 🐳 **Fix Dockerfile** — Sửa luồng Docker cho Windows để không còn lỗi startup do command/escaping sai và tránh lỗi `allowedOrigins` bị sinh ra không hợp lệ.
@@ -110,7 +110,7 @@ Chạy lệnh trên trong Terminal → làm theo các prompt tương tác → sc
 2. Mở repo này làm workspace
 3. Paste vào chat:
    ```
-Read SETUP.md and set up OpenClaw v5.2.1 for me.
+Read SETUP.md and set up OpenClaw v5.2.3 for me.
    My bot token is X. Use 9Router (no API key).
    My project folder: <THƯ_MỤC_CỦA_BẠN>
    ```

package/cli.js

@@ -1,4 +1,4 @@
-#!/usr/bin/env node
+#!/usr/bin/env node
 
 import { input, select, checkbox, confirm } from '@inquirer/prompts';
 import fs from 'fs-extra';
@@ -1624,7 +1624,7 @@ async function main() {
   }
   
   
-  const patchScript = `const fs=require('fs'),os=require('os'),p='/root/.openclaw/openclaw.json';if(fs.existsSync(p)){const c=JSON.parse(fs.readFileSync(p,'utf8'));const a=new Set(['http://localhost:18791','http://127.0.0.1:18791','http://0.0.0.0:18791']);for(const entries of Object.values(os.networkInterfaces()||{})){for(const entry of entries||[]){if(!entry||entry.internal||entry.family!=='IPv4'||!entry.address)continue;a.add('http://' + entry.address + ':18791');}}c.tools=Object.assign({},c.tools,{profile:'full',exec:{host:'gateway',security:'full',ask:'off'}});c.gateway=Object.assign({},c.gateway,{port:18791,bind:'loopback',controlUi:Object.assign({},c.gateway?.controlUi,{allowedOrigins:Array.from(a).filter(Boolean)})});delete c.gateway.customBindHost;fs.writeFileSync(p,JSON.stringify(c,null,2));}`;
+  const patchScript = `const fs=require('fs'),os=require('os'),p='/root/.openclaw/openclaw.json';if(fs.existsSync(p)){const c=JSON.parse(fs.readFileSync(p,'utf8'));const a=new Set(['http://localhost:18791','http://127.0.0.1:18791','http://0.0.0.0:18791']);for(const entries of Object.values(os.networkInterfaces()||{})){for(const entry of entries||[]){if(!entry||entry.internal||entry.family!=='IPv4'||!entry.address)continue;a.add('http://' + entry.address + ':18791');}}c.tools=Object.assign({},c.tools,{profile:'full',exec:{host:'gateway',security:'full',ask:'off'}});c.gateway=Object.assign({},c.gateway,{port:18791,bind:'custom',customBindHost:'0.0.0.0',controlUi:Object.assign({},c.gateway?.controlUi,{allowedOrigins:Array.from(a).filter(Boolean)})});fs.writeFileSync(p,JSON.stringify(c,null,2));}`;
   const b64Patch = Buffer.from(patchScript).toString('base64');
 
   // Browser Playwright (both desktop & server modes need chromium)
@@ -1639,7 +1639,9 @@ async function main() {
   // socat only for Desktop mode (bridge to host Chrome)
   const socatApt = ' socat';
   const socatBridge = hasBrowserDesktop ? 'socat TCP-LISTEN:9222,fork,reuseaddr TCP:host.docker.internal:9222 & ' : '';
-  const gatewayBridge = 'socat TCP-LISTEN:18791,fork,reuseaddr TCP:127.0.0.1:18791 & ';
+  // gatewayBridge removed: socat on 0.0.0.0:18791 conflicts with openclaw binding 127.0.0.1:18791.
+  // The openclaw gateway connects outbound to chat platforms — no inbound bridge needed.
+  const gatewayBridge = '';
 
   // Skills install at RUNTIME (not build-time — requires openclaw config + ClawHub auth)
   const skillSlugs = SKILLS
@@ -1662,7 +1664,7 @@ async function main() {
   if (browserDockerLines) dockerfileLines.push(browserDockerLines);
   dockerfileLines.push(
     '',
-    `ARG CACHEBUST=${Date.now()}`,
+    `ARG OPENCLAW_VER="${OPENCLAW_NPM_SPEC}"`,
     `RUN npm install -g ${OPENCLAW_NPM_SPEC} ${OPENCLAW_RUNTIME_PACKAGES}`,
     '',
     '# Fix chat.send dropping resolved agent timeout into reply pipeline.',
@@ -2138,7 +2140,7 @@ ${hasBrowserDesktop ? `    extra_hosts:
         `      interpreter: 'none',`,
         `      autorestart: true,`,
         `      watch: false,`,
-        `      env: { NODE_ENV: 'production', OPENCLAW_HOME: '${path.join(projectDir, '.openclaw').replace(/\\/g, '/')}', DATA_DIR: '${path.join(projectDir, '.9router').replace(/\\/g, '/')}' }`,
+        `      env: { NODE_ENV: 'production', DATA_DIR: '${path.join(projectDir, '.9router').replace(/\\/g, '/')}' }`,
         '    },',
         '    {',
         `      name: '${botName || 'openclaw-multibot'}-auto-approve',`,
@@ -2148,7 +2150,7 @@ ${hasBrowserDesktop ? `    extra_hosts:
         `      interpreter: 'none',`,
         `      autorestart: true,`,
         `      watch: false,`,
-        `      env: { NODE_ENV: 'production', OPENCLAW_HOME: '${path.join(projectDir, '.openclaw').replace(/\\/g, '/')}', DATA_DIR: '${path.join(projectDir, '.9router').replace(/\\/g, '/')}' }`,
+        `      env: { NODE_ENV: 'production', DATA_DIR: '${path.join(projectDir, '.9router').replace(/\\/g, '/')}' }`,
         '    }',
       ].join('\n');
       const ecosystemContent = [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-openclaw-bot",
-  "version": "5.2.1",
+  "version": "5.2.3",
   "description": "Interactive CLI installer for OpenClaw Bot",
   "main": "cli.js",
   "bin": {

package/setup.js

@@ -1,4 +1,4 @@
-/* ============================================
+/* ============================================
    OpenClaw Setup Wizard — Logic v2
    Multi-model, Multi-plugin, Multi-channel
    ============================================ */
@@ -1061,7 +1061,7 @@
         if (state.botCount > 1) {
           // Multi-bot: require name for the currently active bot tab
           // Fallback to state.bots to handle re-render cases where DOM may not yet have the value
-          const activeTab = state._activeBotTab || 0;
+          const activeTab = state.activeBotIndex || 0;
           const tabNameVal = document.getElementById('cfg-bot-tab-name')?.value?.trim()
             || state.bots[activeTab]?.name?.trim();
           if (!tabNameVal) isDisabled = true;
@@ -1099,6 +1099,36 @@
       btnNextLabel.textContent = state.currentStep === 4
         ? (lang === 'vi' ? 'Generate Configs' : 'Generate Configs')
         : (lang === 'vi' ? 'Tiếp theo' : 'Next');
+
+      // Show inline hint when Generate Configs is blocked
+      let hintEl = document.getElementById('btn-next-hint');
+      if (state.currentStep === 4 && isDisabled) {
+        if (!hintEl) {
+          hintEl = document.createElement('p');
+          hintEl.id = 'btn-next-hint';
+          hintEl.style.cssText = 'font-size:12px;color:#ffc107;text-align:center;margin:6px 16px 0;';
+          const navEl = document.querySelector('.nav-buttons');
+          if (navEl && navEl.parentNode) navEl.parentNode.insertBefore(hintEl, navEl.nextSibling);
+        }
+        const missing = [];
+        const _prov = PROVIDERS[state.config.provider];
+        if (state.channel === 'telegram' && state.botCount > 1) {
+          const t0 = document.getElementById('key-bot-token-0')?.value?.trim() || state.bots[0]?.token?.trim() || '';
+          if (!t0) missing.push(lang === 'vi' ? 'Token Bot 1' : 'Bot 1 Token');
+        } else if (state.channel === 'telegram' || state.channel === 'zalo-bot') {
+          const bt = document.getElementById('key-bot-token')?.value?.trim() || state.config.botToken?.trim() || '';
+          if (!bt) missing.push('Bot Token');
+        }
+        if (_prov && !_prov.isProxy && !_prov.isLocal && _prov.envKey) {
+          const ak = document.getElementById('key-api-key')?.value?.trim() || state.config.apiKey?.trim() || '';
+          if (!ak) missing.push(_prov.envLabel || _prov.envKey);
+        }
+        if (missing.length) {
+          hintEl.textContent = (lang === 'vi' ? '⚠️ Còn thiếu: ' : '⚠️ Missing: ') + missing.join(', ');
+        }
+      } else if (hintEl) {
+        hintEl.remove();
+      }
     }
   }
 
@@ -1382,9 +1412,12 @@
     state.config.userInfo = document.getElementById('cfg-user-info')?.value?.trim() || state.config.userInfo || '';
     state.config.securityRules = document.getElementById('cfg-security')?.value || state.config.securityRules || DEFAULT_SECURITY_RULES['vi'];
     // Also save bot-tab-name → bots[0].name so both state locations stay in sync
+    // Save bot-tab-name to the ACTIVE bot (not always bots[0])
     const tabName = document.getElementById('cfg-bot-tab-name')?.value?.trim();
-    if (tabName && state.bots[0]) state.bots[0].name = tabName;
-    else if (state.config.botName && state.bots[0] && !state.bots[0].name) {
+    if (tabName && state.bots[state.activeBotIndex]) {
+      state.bots[state.activeBotIndex].name = tabName;
+      if (state.botCount <= 1) state.config.botName = tabName;
+    } else if (state.config.botName && state.bots[0] && !state.bots[0].name) {
       state.bots[0].name = state.config.botName;
     }
     if (state.bots[state.activeBotIndex]) {
@@ -1682,7 +1715,6 @@
 
     function buildTelegramPostInstallChecklist() {
       const groupId = state.groupId || '';
-      const nativeProjectOpenClawRoot = `${projectDir.replace(/\\/g, '/')}/.openclaw`;
       const botList = state.bots.slice(0, state.botCount).map((bot, idx) => `- **${bot?.name || `Bot ${idx + 1}`}**`).join('\n');
       const isVi = lang === 'vi';
       return isVi
@@ -2083,9 +2115,10 @@ model:
     const browserPrefix = hasBrowser
       ? 'socat TCP-LISTEN:9222,fork,reuseaddr TCP:host.docker.internal:9222 & '
       : '';
-    const gatewayBridgePrefix = 'socat TCP-LISTEN:18791,fork,reuseaddr TCP:127.0.0.1:18791 & ';
+    // gatewayBridgePrefix removed: socat on 0.0.0.0:18791 conflicts with openclaw binding 127.0.0.1:18791.
+    const gatewayBridgePrefix = '';
     // Patch config on every startup to keep gateway settings stable
-    const patchCmd = `node -e \\"const fs=require('fs'),os=require('os'),p='/root/.openclaw/openclaw.json';if(fs.existsSync(p)){const c=JSON.parse(fs.readFileSync(p,'utf8'));const a=new Set(['http://localhost:18791','http://127.0.0.1:18791','http://0.0.0.0:18791']);for(const entries of Object.values(os.networkInterfaces()||{})){for(const entry of entries||[]){if(!entry||entry.internal||entry.family!=='IPv4'||!entry.address)continue;a.add('http://' + entry.address + ':18791');}}c.tools=Object.assign({},c.tools,{profile:'full',exec:{host:'gateway',security:'full',ask:'off'}});c.gateway=Object.assign({},c.gateway,{port:18791,bind:'loopback',controlUi:Object.assign({},c.gateway?.controlUi,{allowedOrigins:Array.from(a).filter(Boolean)})});delete c.gateway.customBindHost;fs.writeFileSync(p,JSON.stringify(c,null,2));}\\" && `;
+    const patchCmd = `node -e \\"const fs=require('fs'),os=require('os'),p='/root/.openclaw/openclaw.json';if(fs.existsSync(p)){const c=JSON.parse(fs.readFileSync(p,'utf8'));const a=new Set(['http://localhost:18791','http://127.0.0.1:18791','http://0.0.0.0:18791']);for(const entries of Object.values(os.networkInterfaces()||{})){for(const entry of entries||[]){if(!entry||entry.internal||entry.family!=='IPv4'||!entry.address)continue;a.add('http://' + entry.address + ':18791');}}c.tools=Object.assign({},c.tools,{profile:'full',exec:{host:'gateway',security:'full',ask:'off'}});c.gateway=Object.assign({},c.gateway,{port:18791,bind:'custom',customBindHost:'0.0.0.0',controlUi:Object.assign({},c.gateway?.controlUi,{allowedOrigins:Array.from(a).filter(Boolean)})});fs.writeFileSync(p,JSON.stringify(c,null,2));}\\" && `;
     // Auto-approve device pairing after gateway starts (required since v2026.3.x)
     const autoApproveCmd = '(while true; do sleep 5; openclaw devices approve --latest 2>/dev/null || true; done) & ';
     const finalCmd = `CMD sh -c "${pluginInstallCmd}${patchCmd}${browserPrefix}${gatewayBridgePrefix}${autoApproveCmd}${gatewayCmd}"`;
@@ -2095,7 +2128,7 @@ model:
 RUN apt-get update && apt-get install -y git curl${browserAptExtra} && rm -rf /var/lib/apt/lists/*
 
 
-ARG CACHEBUST=${Date.now()}
+ARG OPENCLAW_VER="openclaw@2026.4.5"
 RUN npm install -g openclaw@2026.4.5 ${openClawRuntimePackages}${skillLines}${browserInstallLines}
 RUN node -e "const fs=require('fs');const path=require('path');const dir='/usr/local/lib/node_modules/openclaw/dist';const from='\\t\\t\\t\\t\\tonAgentRunStart: (runId) => {';const to='\\t\\t\\t\\t\\ttimeoutOverrideSeconds: Math.max(1, Math.ceil(timeoutMs / 1e3)),\\n\\t\\t\\t\\t\\tonAgentRunStart: (runId) => {';const files=fs.readdirSync(dir).filter(n=>/\\.js$/.test(n));let patched=0;for(const file of files){const p=path.join(dir,file);let s='';try{s=fs.readFileSync(p,'utf8');}catch{continue;}if(s.includes(to)||!s.includes(from))continue;s=s.replace(from,to);fs.writeFileSync(p,s);patched++;}if(!patched){process.exit(0);}"
 WORKDIR /root/.openclaw
@@ -4156,7 +4189,7 @@ Write-Host ""
 
 try {
 # [1/4] Create directories
-Write-Host "[1/4] ${isVi ? 'Tạo thư mục...' : 'Creating directories...'}" -ForegroundColor Yellow
+Write-Host "[1/4] ${isVi ? 'Tao thu muc...' : 'Creating directories...'}" -ForegroundColor Yellow
 
 # Ensure root directory exists first
 New-Item -ItemType Directory -Force -Path "$projectDir" | Out-Null
@@ -4172,7 +4205,7 @@ New-Item -ItemType Directory -Force -Path "$projectDir" | Out-Null
       const winDir = dir.replace(/\//g, '\\');
       ps += `New-Item -ItemType Directory -Force -Path "$projectDir\\${winDir}" | Out-Null\n`;
     });
-    ps += `Write-Host "  ✅ ${isVi ? 'Thư mục đã tạo' : 'Directories created'}" -ForegroundColor Green\n\n`;
+    ps += `Write-Host "  ✅ ${isVi ? 'Thu muc da tao' : 'Directories created'}" -ForegroundColor Green\n\n`;
 
     // [2/4] Write config files
     ps += `# [2/4] ${isVi ? 'Ghi config files...' : 'Writing config files...'}\nWrite-Host "[2/4] ${isVi ? 'Ghi config files...' : 'Writing config files...'}" -ForegroundColor Yellow\n`;
@@ -4186,50 +4219,50 @@ New-Item -ItemType Directory -Force -Path "$projectDir" | Out-Null
       ps += `\n[IO.File]::WriteAllText("$projectDir\\${winPath}", @'\n${safeContent}\n'@, $utf8)\n`;
     });
 
-    ps += `\nWrite-Host "  ✅ ${isVi ? 'Config files đã ghi' : 'Config files written'}" -ForegroundColor Green\n\n`;
+    ps += `\nWrite-Host "  ✅ ${isVi ? 'Config files da ghi' : 'Config files written'}" -ForegroundColor Green\n\n`;
 
     // [3/4] Docker build
     ps += `# [3/4] Docker build
-Write-Host "[3/4] ${isVi ? 'Build Docker image (có thể mất vài phút)...' : 'Building Docker image (may take a few minutes)...'}" -ForegroundColor Yellow
+Write-Host "[3/4] ${isVi ? 'Build Docker image (co the mat vai phut)...' : 'Building Docker image (may take a few minutes)...'}" -ForegroundColor Yellow
 Set-Location "$projectDir\\docker\\openclaw"
 docker compose build
 if ($LASTEXITCODE -ne 0) {
-    Write-Host "  ❌ ${isVi ? 'Docker build thất bại. Docker Desktop đã chạy chưa?' : 'Docker build failed. Is Docker Desktop running?'}" -ForegroundColor Red
-    Read-Host "${isVi ? 'Nhấn Enter để thoát' : 'Press Enter to exit'}"
+    Write-Host "  ❌ ${isVi ? 'Docker build that bai. Docker Desktop da chay chua?' : 'Docker build failed. Is Docker Desktop running?'}" -ForegroundColor Red
+    Read-Host "${isVi ? 'Nhan Enter de thoat' : 'Press Enter to exit'}"
     exit 1
 }
-Write-Host "  ✅ ${isVi ? 'Docker image đã build' : 'Docker image built'}" -ForegroundColor Green
+Write-Host "  ✅ ${isVi ? 'Docker image da build' : 'Docker image built'}" -ForegroundColor Green
 
 `;
 
     // [4/4] Docker up
     ps += `# [4/4] Start bot
-Write-Host "[4/4] ${isVi ? 'Khởi động bot...' : 'Starting bot...'}" -ForegroundColor Yellow
+Write-Host "[4/4] ${isVi ? 'Khoi dong bot...' : 'Starting bot...'}" -ForegroundColor Yellow
 docker compose up -d
-Write-Host "  ✅ ${isVi ? 'Bot đang chạy!' : 'Bot is running!'}" -ForegroundColor Green
+Write-Host "  ✅ ${isVi ? 'Bot dang chay!' : 'Bot is running!'}" -ForegroundColor Green
 
 Write-Host ""
-Write-Host "  🎉 ${isVi ? 'Setup hoàn tất!' : 'Setup complete!'}" -ForegroundColor Cyan
+Write-Host "  🎉 ${isVi ? 'Setup hoan tat!' : 'Setup complete!'}" -ForegroundColor Cyan
 `;
 
     // Post-setup notes
     const is9Router = state.config.provider === '9router';
     if (is9Router) {
-      ps += `Write-Host "  ${isVi ? 'Mở http://localhost:30128/dashboard để login OAuth' : 'Open http://localhost:30128/dashboard to login OAuth'}" -ForegroundColor White\n`;
+      ps += `Write-Host "  ${isVi ? 'Mo http://localhost:30128/dashboard de login OAuth' : 'Open http://localhost:30128/dashboard to login OAuth'}" -ForegroundColor White\n`;
     }
     if (state.channel === 'zalo-personal') {
-      ps += `Write-Host "  ${isVi ? 'Chạy: docker compose exec -it ai-bot openclaw channels login --channel zalouser --verbose' : 'Run: docker compose exec -it ai-bot openclaw channels login --channel zalouser --verbose'}" -ForegroundColor White\n`;
-      ps += `Write-Host "  ${isVi ? 'QR sẽ nằm tại /tmp/openclaw/openclaw-zalouser-qr-default.png' : 'QR will be written to /tmp/openclaw/openclaw-zalouser-qr-default.png'}" -ForegroundColor DarkGray\n`;
-      ps += `Write-Host "  ${isVi ? 'Copy QR ra ngoài: docker compose cp ai-bot:/tmp/openclaw/openclaw-zalouser-qr-default.png ./zalo-login-qr.png' : 'Copy the QR out: docker compose cp ai-bot:/tmp/openclaw/openclaw-zalouser-qr-default.png ./zalo-login-qr.png'}" -ForegroundColor DarkGray\n`;
+      ps += `Write-Host "  ${isVi ? 'Chay: docker compose exec -it ai-bot openclaw channels login --channel zalouser --verbose' : 'Run: docker compose exec -it ai-bot openclaw channels login --channel zalouser --verbose'}" -ForegroundColor White\n`;
+      ps += `Write-Host "  ${isVi ? 'QR se nam tai /tmp/openclaw/openclaw-zalouser-qr-default.png' : 'QR will be written to /tmp/openclaw/openclaw-zalouser-qr-default.png'}" -ForegroundColor DarkGray\n`;
+      ps += `Write-Host "  ${isVi ? 'Copy QR ra ngoai: docker compose cp ai-bot:/tmp/openclaw/openclaw-zalouser-qr-default.png ./zalo-login-qr.png' : 'Copy the QR out: docker compose cp ai-bot:/tmp/openclaw/openclaw-zalouser-qr-default.png ./zalo-login-qr.png'}" -ForegroundColor DarkGray\n`;
     }
 
     ps += `Write-Host ""
 } catch {
     Write-Host ""
-    Write-Host "  ❌ LỖI / ERROR: $($_.Exception.Message)" -ForegroundColor Red
+    Write-Host "  ❌ LOI / ERROR: $($_.Exception.Message)" -ForegroundColor Red
     Write-Host ""
 }
-Read-Host "${isVi ? 'Nhấn Enter để thoát' : 'Press Enter to exit'}"
+Read-Host "${isVi ? 'Nhan Enter de thoat' : 'Press Enter to exit'}"
 `;
 
     // Wrap in a .bat that extracts the PS section to a temp .ps1 then runs it.
@@ -4335,7 +4368,7 @@ ${ps}`;
 
     let script = `#!/bin/bash
 # 🦞 OpenClaw Setup Script${isMultiBot ? ` — Multi-Bot (${state.botCount} bots)` : ''}
-# ${isVi ? 'Tạo bởi OpenClaw Wizard — paste vào terminal trong thư mục project' : 'Generated by OpenClaw Wizard — paste into terminal in your project folder'}
+# ${isVi ? 'Tao boi OpenClaw Wizard — paste vao terminal trong thu muc project' : 'Generated by OpenClaw Wizard — paste into terminal in your project folder'}
 set -e
 echo "🦞 OpenClaw Setup${isMultiBot ? ` (${state.botCount} bots)` : ''}..."
 echo ""
@@ -4348,7 +4381,7 @@ echo ""
       if (dir) dirs.add(dir);
     });
 
-    script += `# \${isVi ? 'Tạo thư mục' : 'Create directories'}\n`;
+    script += `# \${isVi ? 'Tao thu muc' : 'Create directories'}\n`;
     Array.from(dirs).sort().forEach(dir => {
       script += `mkdir -p "${dir}"\n`;
     });
@@ -4364,16 +4397,16 @@ echo ""
     });
     
     script += `echo ""\n`;
-    script += `echo "\${isVi ? '✅ Tạo file xong!' : '✅ Files created!'}"\n`;
+    script += `echo "\${isVi ? '✅ Tao file xong!' : '✅ Files created!'}"\n`;
     script += `echo ""\n`;
-    script += `echo "\${isVi ? '🐳 Đang khởi động Docker (có thể mất vài phút)...' : '🐳 Starting Docker (may take a few minutes)...'}"\n`;
-    script += `if docker compose version > /dev/null 2>&1; then\n  COMPOSE_CMD="docker compose"\nelif docker-compose version > /dev/null 2>&1; then\n  COMPOSE_CMD="docker-compose"\nelse\n  echo "\${isVi ? '❌ Không tìm thấy Docker Compose! Cài bằng: sudo apt-get install docker-compose-plugin' : '❌ Docker Compose not found! Install: sudo apt-get install docker-compose-plugin'}"\n  exit 1\nfi\n`;
-    script += `# Check Docker daemon is actually running\nif ! docker info > /dev/null 2>&1; then\n  echo "${isVi ? '❌ Docker daemon chưa chạy! Hãy mở Docker Desktop rồi chạy lại.' : '❌ Docker daemon is not running! Open Docker Desktop first, then re-run this script.'}"; exit 1\nfi\n`;
+    script += `echo "\${isVi ? '🐳 Dang khoi dong Docker (co the mat vai phut)...' : '🐳 Starting Docker (may take a few minutes)...'}"\n`;
+    script += `if docker compose version > /dev/null 2>&1; then\n  COMPOSE_CMD="docker compose"\nelif docker-compose version > /dev/null 2>&1; then\n  COMPOSE_CMD="docker-compose"\nelse\n  echo "\${isVi ? '❌ Khong tim thay Docker Compose! Cai bang: sudo apt-get install docker-compose-plugin' : '❌ Docker Compose not found! Install: sudo apt-get install docker-compose-plugin'}"\n  exit 1\nfi\n`;
+    script += `# Check Docker daemon is actually running\nif ! docker info > /dev/null 2>&1; then\n  echo "${isVi ? '❌ Docker daemon chua chay! Hay mo Docker Desktop roi chay lai.' : '❌ Docker daemon is not running! Open Docker Desktop first, then re-run this script.'}"; exit 1\nfi\n`;
     
     if (isMultiBot) {
       script += `cd "docker/openclaw"\n`;
       script += `$COMPOSE_CMD up --detach --build\n`;
-      script += `if [ $? -ne 0 ]; then\n  echo "\${isVi ? '❌ Docker build thất bại.' : '❌ Docker build failed.'}"\n  exit 1\nfi\n`;
+      script += `if [ $? -ne 0 ]; then\n  echo "\${isVi ? '❌ Docker build that bai.' : '❌ Docker build failed.'}"\n  exit 1\nfi\n`;
       script += `echo ""\n`;
       script += `echo "${isVi ? 'OK: ${state.botCount} bot dang chay!' : 'OK: ${state.botCount} bots are running!'}"\n`;
       for (let i = 0; i < state.botCount; i++) {
@@ -4384,8 +4417,8 @@ echo ""
     } else {
       script += `cd "docker/openclaw"\n`;
       script += `$COMPOSE_CMD up --detach --build\n`;
-      script += `if [ $? -ne 0 ]; then\n  echo "\${isVi ? '❌ Docker build thất bại.' : '❌ Docker build failed.'}"\n  exit 1\nfi\n`;
-      script += `echo "\${isVi ? '🎉 Bot đang chạy! Xem log qua:' : '🎉 Bot is running! View logs:'}"\n`;
+      script += `if [ $? -ne 0 ]; then\n  echo "\${isVi ? '❌ Docker build that bai.' : '❌ Docker build failed.'}"\n  exit 1\nfi\n`;
+      script += `echo "\${isVi ? '🎉 Bot dang chay! Xem log qua:' : '🎉 Bot is running! View logs:'}"\n`;
       script += `echo "  docker logs -f openclaw-bot"\n`;
       script += `echo ""\n`;
     }

package/tests/smoke-cli-logic.mjs

@@ -241,11 +241,12 @@ checks.push(() => expectMatch(
 checks.push(() => expect(
   cli.includes("a.add('http://' + entry.address + ':18791')")
     && cli.includes('allowedOrigins:Array.from(a).filter(Boolean)')
-    && cli.includes("bind:'loopback'")
-    && cli.includes("delete c.gateway.customBindHost;")
-    && cli.includes("const gatewayBridge = 'socat TCP-LISTEN:18791,fork,reuseaddr TCP:127.0.0.1:18791 & ';")
+    && cli.includes("bind:'custom',customBindHost:'0.0.0.0'")
+    && !cli.includes("bind:'loopback'")
+    && !cli.includes("delete c.gateway.customBindHost;")
+    && !cli.includes("const gatewayBridge = 'socat TCP-LISTEN:18791")
     && !cli.includes("a.add(`http://${entry.address}:18791`)"),
-  'Docker CLI patch script must keep the gateway loopback-local behind a socat bridge and avoid shell-expanding ${entry.address}'
+  'Docker CLI patch script must use bind:custom+customBindHost:0.0.0.0, skip socat gateway bridge, and avoid shell-expanding ${entry.address}'
 ));
 
 checks.push(() => expectMatch(
@@ -361,11 +362,12 @@ checks.push(() => expectMatch(
 checks.push(() => expect(
   setup.includes("a.add('http://' + entry.address + ':18791')")
     && setup.includes('allowedOrigins:Array.from(a).filter(Boolean)')
-    && setup.includes("bind:'loopback'")
-    && setup.includes("delete c.gateway.customBindHost;")
-    && setup.includes("const gatewayBridgePrefix = 'socat TCP-LISTEN:18791,fork,reuseaddr TCP:127.0.0.1:18791 & ';")
+    && setup.includes("bind:'custom',customBindHost:'0.0.0.0'")
+    && !setup.includes("bind:'loopback'")
+    && !setup.includes("delete c.gateway.customBindHost;")
+    && !setup.includes("const gatewayBridgePrefix = 'socat TCP-LISTEN:18791")
     && !setup.includes("a.add(\\`http://\\${entry.address}:18791\\`)"),
-  'Wizard Docker patch command must keep the gateway loopback-local behind a socat bridge and avoid shell-expanding ${entry.address}'
+  'Wizard Docker patch command must use bind:custom+customBindHost:0.0.0.0, skip socat gateway bridge, and avoid shell-expanding ${entry.address}'
 ));
 
 checks.push(() => expectMatch(