create-openclaw-bot 5.3.0 → 5.3.4

package/setup.js

@@ -614,11 +614,34 @@
         step2.querySelectorAll('.channel-card[data-channel]').forEach((c) => c.classList.remove('channel-card--selected'));
         card.classList.add('channel-card--selected');
 
-        // Show multi-bot panel for Telegram and Telegram+Zalo combo
         const multibotPanel = document.getElementById('multibot-panel');
-        if (multibotPanel) {
-          const showPanel = state.channel === 'telegram' || state.channel === 'telegram+zalo-personal';
-          multibotPanel.style.display = showPanel ? '' : 'none';
+        if (state.channel === 'telegram+zalo-personal') {
+          // Combo: hide the bot-count selector (fixed 1 Telegram bot), show 2 per-channel tabs
+          if (multibotPanel) multibotPanel.style.display = 'none';
+          // Reset to single-bot and ensure 2 bots in array (index 0 = Telegram, index 1 = Zalo)
+          state.botCount = 1;
+          while (state.bots.length < 2) {
+            state.bots.push({ name: '', slashCmd: '', desc: '', provider: state.bots[0]?.provider || 'google', model: state.bots[0]?.model || 'google/gemini-2.5-flash', token: '', apiKey: '' });
+          }
+          // Hide global identity-grid (each tab has own name/desc)
+          const identityGrid = document.querySelector('.identity-grid');
+          if (identityGrid) {
+            const nameField = identityGrid.querySelector('.form-group:has(#cfg-name)');
+            const descField = identityGrid.querySelector('.form-group:has(#cfg-desc)');
+            if (nameField) nameField.style.display = 'none';
+            if (descField) descField.style.display = 'none';
+          }
+        } else {
+          // Not combo: show multibot panel for telegram only
+          if (multibotPanel) multibotPanel.style.display = state.channel === 'telegram' ? '' : 'none';
+          // Restore global identity-grid visibility if was hidden by combo
+          const identityGrid = document.querySelector('.identity-grid');
+          if (identityGrid) {
+            const nameField = identityGrid.querySelector('.form-group:has(#cfg-name)');
+            const descField = identityGrid.querySelector('.form-group:has(#cfg-desc)');
+            if (nameField) nameField.style.display = '';
+            if (descField) descField.style.display = '';
+          }
         }
 
         updateNavButtons();
@@ -737,8 +760,40 @@
     const slashGroup = document.getElementById('slash-cmd-group');
     if (!tabBar || !tabsEl) return;
 
+    const isCombo = state.channel === 'telegram+zalo-personal';
+
     tabBar.style.display = 'block';
 
+    // ── Combo mode: 2 fixed tabs (Telegram / Zalo Personal) ─────────────────
+    if (isCombo) {
+      tabsEl.style.display = 'flex';
+      if (labelEl) { labelEl.style.display = 'block'; labelEl.textContent = ''; }
+      if (slashGroup) slashGroup.style.display = 'none'; // slash cmd not relevant for Zalo
+
+      const COMBO_TABS = [
+        { icon: '📨', labelVi: 'Telegram', labelEn: 'Telegram' },
+        { icon: '💬', labelVi: 'Zalo Personal', labelEn: 'Zalo Personal' },
+      ];
+      const lang = document.getElementById('cfg-language')?.value || 'vi';
+
+      tabsEl.innerHTML = COMBO_TABS.map((tab, i) => {
+        const isActive = i === state.activeBotIndex;
+        const customName = state.bots[i]?.name;
+        const labelText = customName ? customName : (lang === 'vi' ? tab.labelVi : tab.labelEn);
+        const label = `${tab.icon} ${labelText}`;
+        return `<button onclick="window.__switchBotTab(${i})" style="
+          padding:7px 18px;border-radius:8px;cursor:pointer;font-size:13px;font-weight:600;
+          border:1px solid ${isActive ? 'rgba(99,102,241,0.6)' : 'rgba(255,255,255,0.12)'};
+          background:${isActive ? 'rgba(99,102,241,0.2)' : 'transparent'};
+          color:${isActive ? 'var(--text-primary)' : 'var(--text-secondary)'};
+          transition:all 0.15s;">${label}</button>`;
+      }).join('');
+
+      syncBotTabMeta();
+      return;
+    }
+
+    // ── Normal mode ──────────────────────────────────────────────────────────
     if (state.botCount <= 1) {
       tabsEl.style.display = 'none';
       if (labelEl) labelEl.style.display = 'none';
@@ -1074,16 +1129,15 @@
       if (state.currentStep === 2 && !state.channel) isDisabled = true;
       // Step 3 (bot config): require at least one bot name
       if (state.currentStep === 3) {
-        if (state.botCount > 1) {
-          // Multi-bot: require name for the currently active bot tab
-          // Fallback to state.bots to handle re-render cases where DOM may not yet have the value
+        const isCombo = state.channel === 'telegram+zalo-personal';
+        if (state.botCount > 1 || isCombo) {
+          // Multi-bot or combo: require name for the currently active bot tab
           const activeTab = state.activeBotIndex || 0;
           const tabNameVal = document.getElementById('cfg-bot-tab-name')?.value?.trim()
             || state.bots[activeTab]?.name?.trim();
           if (!tabNameVal) isDisabled = true;
         } else {
           // Single bot: require cfg-name or the shared tab name field
-          // Fallback to state.config.botName for cases where the DOM field was cleared on re-render
           const nameVal = document.getElementById('cfg-name')?.value?.trim()
             || document.getElementById('cfg-bot-tab-name')?.value?.trim()
             || state.config.botName?.trim();
@@ -1093,12 +1147,13 @@
       // Step 4 (api keys): require token/key
       if (state.currentStep === 4) {
         const provider = PROVIDERS[state.config.provider];
-        if (state.channel === 'telegram' && state.botCount > 1) {
+        const hasTelegramCh = state.channel === 'telegram' || state.channel === 'telegram+zalo-personal';
+        if (hasTelegramCh && state.botCount > 1) {
           // Multi-bot: check DOM first, fallback to state (works even before user types)
           const firstTokenEl = document.getElementById('key-bot-token-0');
           const firstTokenVal = firstTokenEl?.value?.trim() || state.bots[0]?.token?.trim() || '';
           if (!firstTokenVal) isDisabled = true;
-        } else if (state.channel === 'telegram' || state.channel === 'zalo-bot') {
+        } else if (hasTelegramCh || state.channel === 'zalo-bot') {
           const botTokenEl = document.getElementById('key-bot-token');
           const botTokenVal = botTokenEl?.value?.trim() || state.config.botToken?.trim() || '';
           if (!botTokenVal) isDisabled = true;
@@ -1430,9 +1485,13 @@
     // Also save bot-tab-name → bots[0].name so both state locations stay in sync
     // Save bot-tab-name to the ACTIVE bot (not always bots[0])
     const tabName = document.getElementById('cfg-bot-tab-name')?.value?.trim();
+    const isCombo = state.channel === 'telegram+zalo-personal';
     if (tabName && state.bots[state.activeBotIndex]) {
       state.bots[state.activeBotIndex].name = tabName;
-      if (state.botCount <= 1) state.config.botName = tabName;
+      // For single-bot or combo (use Telegram tab = index 0 as primary name)
+      if (state.botCount <= 1 || isCombo) {
+        if (!isCombo || state.activeBotIndex === 0) state.config.botName = tabName;
+      }
     } else if (state.config.botName && state.bots[0] && !state.bots[0].name) {
       state.bots[0].name = state.config.botName;
     }
@@ -1450,9 +1509,9 @@
     if (botTokenEl) state.config.botToken = botTokenEl.value;
     if (apiKeyEl) state.config.apiKey = apiKeyEl.value;
     if (pathEl) state.config.projectPath = pathEl.value;
-    if (state.botCount <= 1 && state.bots[state.activeBotIndex]) {
-      if (botTokenEl) state.bots[state.activeBotIndex].token = botTokenEl.value;
-      if (apiKeyEl) state.bots[state.activeBotIndex].apiKey = apiKeyEl.value;
+    if (state.botCount <= 1 && state.bots[0]) {
+      if (botTokenEl) state.bots[0].token = botTokenEl.value;
+      if (apiKeyEl) state.bots[0].apiKey = apiKeyEl.value;
     }
 
     // Also save multi-bot tokens individually
@@ -1547,7 +1606,10 @@
       cHtml += `<div style="padding: 16px 20px; border: 1px solid rgba(255,255,255,0.08); border-radius: 12px; background: rgba(255,255,255,0.02);">`;
       cHtml += `<h3 style="margin: 0 0 12px; font-size: 15px; font-weight: 700; color: var(--text-primary);">${channelIcon} ${isVi ? 'Kênh chat' : 'Chat Channel'} — ${channelName}</h3>`;
 
-      if (state.channel === 'telegram') {
+      const hasTelegramChKey = state.channel === 'telegram' || state.channel === 'telegram+zalo-personal';
+      const hasZaloPersonalChKey = state.channel === 'zalo-personal' || state.channel === 'telegram+zalo-personal';
+
+      if (hasTelegramChKey) {
         if (state.botCount > 1) {
           // Multi-bot: one token per bot
           cHtml += `<div style="display:flex;flex-direction:column;gap:12px;">`;
@@ -1571,14 +1633,16 @@
             <p class="form-group__hint">${isVi ? 'Lấy từ <a href="https://t.me/BotFather" target="_blank">@BotFather</a> trên Telegram' : 'Get from <a href="https://t.me/BotFather" target="_blank">@BotFather</a> on Telegram'}</p>
           </div>`;
         }
-      } else if (state.channel === 'zalo-bot') {
+      }
+      if (state.channel === 'zalo-bot') {
         cHtml += `<div class="form-group" style="margin: 0;">
           <label class="form-group__label" for="key-bot-token">🔑 Zalo Bot Token <span style="color: var(--danger, #ef4444);">*</span></label>
           <input type="text" class="form-input" id="key-bot-token" placeholder="Zalo Bot Token" style="font-family: monospace; font-size: 13px;" oninput="window.__validateKeys()">
           <p class="form-group__hint">${isVi ? 'Lấy từ <a href="https://developers.zalo.me" target="_blank">Zalo Bot Platform</a>' : 'Get from <a href="https://developers.zalo.me" target="_blank">Zalo Bot Platform</a>'}</p>
         </div>`;
-      } else if (state.channel === 'zalo-personal' || state.channel === 'telegram+zalo-personal') {
-        cHtml += `<div style="display: flex; gap: 8px; align-items: flex-start; padding: 12px 14px; background: rgba(245,158,11,0.06); border: 1px solid rgba(245,158,11,0.2); border-radius: 8px; font-size: 13px; color: var(--warning); margin: 0;">
+      }
+      if (hasZaloPersonalChKey) {
+        cHtml += `<div style="display: flex; gap: 8px; align-items: flex-start; padding: 12px 14px; background: rgba(245,158,11,0.06); border: 1px solid rgba(245,158,11,0.2); border-radius: 8px; font-size: 13px; color: var(--warning); margin: ${hasTelegramChKey ? '12px 0 0' : '0'};">
           <span style="font-size: 16px; margin-top: -2px;">⚠️</span>
           <span style="line-height: 1.5;">${isVi
             ? '<strong>Zalo Personal</strong> sử dụng unofficial API (zca-js). Tài khoản Zalo của bạn có thể bị hạn chế hoặc khóa. Chỉ nên dùng với tài khoản phụ.'
@@ -1657,7 +1721,8 @@
     }
 
     // Bot tokens
-    if (state.channel === 'telegram' && state.botCount > 1) {
+    const hasTelegramForEnv = state.channel === 'telegram' || state.channel === 'telegram+zalo-personal';
+    if (hasTelegramForEnv && state.botCount > 1) {
       // Multi-bot: one env var per bot
       lines.push('');
       lines.push('# Multi-bot Telegram tokens');
@@ -1702,6 +1767,8 @@
   }
 
 
+  const openClawRuntimePackages = 'grammy @grammyjs/runner @grammyjs/transformer-throttler @buape/carbon @larksuiteoapi/node-sdk @slack/web-api';
+
   // ========== Step 4: Generate Output ==========
   function generateOutput() {
     const ch = CHANNELS[state.channel];
@@ -1717,9 +1784,8 @@
 
     const is9Router = provider.isProxy;
     const isLocal = provider.isLocal;
-    const isTelegramMultiBot = state.botCount > 1 && state.channel === 'telegram';
+    const isTelegramMultiBot = state.botCount > 1 && (state.channel === 'telegram' || state.channel === 'telegram+zalo-personal');
     const relayPluginSpec = 'openclaw-telegram-multibot-relay';
-    const openClawRuntimePackages = 'grammy @grammyjs/runner @grammyjs/transformer-throttler @buape/carbon @larksuiteoapi/node-sdk @slack/web-api';
 
     function buildRelayPluginInstallCommand(prefix) {
       return `${prefix} plugins install ${relayPluginSpec} 2>/dev/null || true`;
@@ -1867,7 +1933,7 @@ Write-Host "Chrome se tu dong bat Debug Mode moi khi ban dang nhap Windows (dela
         },
         list: [{
           id: agentId,
-          workspace: 'workspace',
+          workspace: `.openclaw/workspace-${agentId}`,
           agentDir: `agents/${agentId}/agent`,
           model: { primary: state.config.model, fallbacks: [] },
         }],
@@ -1984,7 +2050,7 @@ Write-Host "Chrome se tu dong bat Debug Mode moi khi ban dang nhap Windows (dela
       clawConfig.agents.list = multiBotAgentMetas.map((meta) => ({
         id: meta.agentId,
         name: meta.name,
-        workspace: meta.workspaceDir,
+        workspace: '.openclaw/' + meta.workspaceDir,
         agentDir: `agents/${meta.agentId}/agent`,
         model: { primary: state.config.model, fallbacks: [] },
       }));
@@ -2159,7 +2225,7 @@ ${finalCmd}`;
 
     setOutput('out-dockerfile', dockerfile);
 
-    const isMultiBotWizard = state.botCount > 1 && state.channel === 'telegram';
+    const isMultiBotWizard = state.botCount > 1 && (state.channel === 'telegram' || state.channel === 'telegram+zalo-personal');
 
     // 4. docker-compose.yml
     // extra_hosts always needed for browser (socat → host Chrome)
@@ -2490,12 +2556,13 @@ docker logs -f openclaw-bot${approveNote}`);
     // 7. Generate ALL workspace Markdown files
     // OpenClaw auto-injects these into agent context at the start of every session.
     // Hierarchy: per-agent files → global workspace files → config defaults.
-    const botName = isMultiBotWizard
+    const isComboChannel = state.channel === 'telegram+zalo-personal';
+    const botName = (isMultiBotWizard || isComboChannel)
       ? (state.bots[0]?.name || state.config.botName || 'Chat Bot')
       : (state.config.botName || 'Chat Bot');
     const lang = state.config.language || 'vi';
     const userPrompt = state.config.systemPrompt || '';
-    const descText = isMultiBotWizard
+    const descText = (isMultiBotWizard || isComboChannel)
       ? (state.bots[0]?.desc || state.config.description || (lang === 'vi' ? 'Trợ lý AI cá nhân' : 'Personal AI assistant'))
       : (state.config.description || (lang === 'vi' ? 'Trợ lý AI cá nhân' : 'Personal AI assistant'));
 
@@ -2955,7 +3022,7 @@ fi
         botConfig.agents.defaults.model = { primary: state.config.model, fallbacks: [] };
         botConfig.agents.list = [{
           id: botAgentId,
-          workspace: 'workspace',
+          workspace: `.openclaw/workspace-${botAgentId}`,
           agentDir: `agents/${botAgentId}/agent`,
           model: { primary: state.config.model, fallbacks: [] },
         }];
@@ -3173,6 +3240,7 @@ I am **${botName}**. When asked my name, I answer: _"I'm ${botName}"_.`;
       .filter((skill) => skill && skill.id !== 'scheduler' && skill.slug && skill.slug !== 'browser-automation');
     const selectedModel = (state.config.model || 'ollama/gemma4:e2b').replace('ollama/', '');
     const isMultiBot = state.botCount > 1 && state.channel === 'telegram';
+    const isComboChannel = state.channel === 'telegram+zalo-personal';
     const projectDir = state.config.projectPath || '.';
     const todayStamp = new Date().toISOString().slice(0, 10);
 
@@ -3201,30 +3269,76 @@ const sync=async()=>{try{const res=await fetch(ROUTER+'/api/providers');if(!res.
       return "node -e \"const fs=require('fs'),path=require('path'),os=require('os'),cp=require('child_process');const home=os.homedir();const roots=[];try{const root=cp.execSync('npm root -g',{stdio:['ignore','pipe','ignore'],encoding:'utf8'}).trim();if(root)roots.push(root);}catch{}for(const prefix of [process.env.npm_config_prefix,process.env.NPM_CONFIG_PREFIX,process.env.PREFIX,process.env.NPM_PREFIX,path.join(home,'.local'),path.join(home,'.npm-global'),path.join(home,'.local','share','npm')].filter(Boolean)){roots.push(path.join(prefix,'lib','node_modules'));}roots.push(path.join(home,'.local','share','npm','lib','node_modules'));roots.push(path.join(home,'.local','lib','node_modules'));const seen=new Set();const found=roots.map(root=>path.join(root,'9router','app','server.js')).find(candidate=>{if(seen.has(candidate))return false;seen.add(candidate);return fs.existsSync(candidate);});if(!found)process.exit(1);console.log(found);\"";
     }
 
-    function windowsHiddenNodeLaunch(targetPath, extraEnv = {}) {
-      function quotePowerShellSingle(value) {
-        return `'${String(value).replace(/'/g, "''")}'`;
-      }
+    function windowsHiddenNodeLaunch(targetPath, extraEnv = {}, extraArgs = []) {
+      // Set env vars via $env: prefix (PS5/PS7 compatible, -Environment flag is PS7+ only)
       const envAssignments = Object.entries(extraEnv)
-        .map(([key, value]) => `$env:${key}=${quotePowerShellSingle(String(value))}`)
-        .join('; ');
-      return `powershell -NoProfile -NonInteractive -ExecutionPolicy Bypass -Command "${envAssignments ? `${envAssignments}; ` : ''}Start-Process -WindowStyle Hidden -FilePath (Get-Command node).Source -ArgumentList @('${targetPath.replace(/'/g, "''")}')"`;
+        .map(([k, v]) => `$env:${k}='${String(v).replace(/'/g, "''")}'; `)
+        .join('');
+      const safePath = targetPath.replace(/\\/g, '\\\\').replace(/'/g, "''");
+      const argList = [`'${safePath}'`, ...extraArgs.map(a => `'${String(a).replace(/'/g, "''")}' `)].join(',');
+      return `powershell -NoProfile -NonInteractive -ExecutionPolicy Bypass -Command "${envAssignments}Start-Process -WindowStyle Hidden -FilePath (Get-Command node).Source -ArgumentList @(${argList})"`;
     }
 
     // ─── Shared initializer (provider install) ───────────────────────────────
     function providerLines(arr, shell) {
       if (is9Router) {
         if (shell === 'bat') {
+          arr.push(':: Dung 9Router dang chay (neu co) - tranh loi EBUSY khi npm cap nhat file dang bi lock');
+          arr.push('wmic process where "Name=\'node.exe\' and CommandLine like \'%%9router%%\'" delete >nul 2>&1');
+          arr.push('wmic process where "Name=\'cmd.exe\' and CommandLine like \'%%9router%%\'" delete >nul 2>&1');
+          arr.push('timeout /t 3 /nobreak >nul');
           arr.push('call npm install -g 9router || goto :fail');
-          arr.push(`for /f "usebackq delims=" %%I in (\`${native9RouterServerEntryLookup()}\`) do set "NINE_ROUTER_ENTRY=%%I"`);
-          arr.push(windowsHiddenNodeLaunch('%NINE_ROUTER_ENTRY%', { PORT: '20128', HOSTNAME: '0.0.0.0', DATA_DIR: '%DATA_DIR%' }));
-          arr.push('timeout /t 5 /nobreak >nul');
+          arr.push('echo [OK] 9Router da duoc cai dat thanh cong.');
+          // Pre-create DATA_DIR and seed db.json with requireLogin:false BEFORE starting 9router.
+          // If db.json is missing when 9router boots, it defaults to ~/.9router and requireLogin:true,
+          // blocking the dashboard. Must be done BEFORE the `start` command below.
+          arr.push('if not exist "%DATA_DIR%" mkdir "%DATA_DIR%"');
+          arr.push('if not exist "%DATA_DIR%\\db.json" (');
+          arr.push('> "%DATA_DIR%\\db.json" (');
+          arr.push('echo({');
+          arr.push('echo(  "providerConnections": [],');
+          arr.push('echo(  "providerNodes": [],');
+          arr.push('echo(  "proxyPools": [],');
+          arr.push('echo(  "modelAliases": {},');
+          arr.push('echo(  "mitmAlias": {},');
+          arr.push('echo(  "combos": [],');
+          arr.push('echo(  "apiKeys": [],');
+          arr.push('echo(  "settings": {');
+          arr.push('echo(    "requireLogin": false,');
+          arr.push('echo(    "cloudEnabled": false,');
+          arr.push('echo(    "tunnelEnabled": false,');
+          arr.push('echo(    "comboStrategy": "fallback",');
+          arr.push('echo(    "mitmRouterBaseUrl": "http://localhost:20128"');
+          arr.push('echo(  },');
+          arr.push('echo(  "pricing": {}');
+          arr.push('echo(}');
+          arr.push(')');
+          arr.push(')');
+          // Launch 9Router as a fully detached process via PowerShell Start-Process -WindowStyle Hidden.
+          // Using `start ... cmd /c "...--tray"` caused 9Router to die when the CMD window was closed
+          // because cmd /c is a child of the started CMD, which is killed when that window closes.
+          // Start-Process with WindowStyle Hidden creates a truly independent process that survives
+          // even if all visible terminal windows are closed.
+          // Write a temp .ps1 launcher to avoid CMD->PS quoting issues.
+          // Start-Process cannot run .cmd files directly — cmd.exe must be the FilePath.
+          arr.push('echo Khoi dong 9Router (background)...');
+          arr.push('echo $env:DATA_DIR = \'%DATA_DIR%\' > "%TEMP%\\oc-start9r.ps1"');
+          arr.push('echo $b = Join-Path $env:APPDATA \'npm\\9router.cmd\' >> "%TEMP%\\oc-start9r.ps1"');
+          arr.push('echo if ^(-not ^(Test-Path $b^)^) { $b = Join-Path $env:APPDATA \'npm\\9router\' } >> "%TEMP%\\oc-start9r.ps1"');
+          arr.push(`echo Start-Process 'cmd.exe' -WindowStyle Hidden -WorkingDirectory '${projectDir}' -ArgumentList ^('/c "' + $b + '" -n -H 0.0.0.0 -p 20128 --skip-update'^) >> "%TEMP%\\oc-start9r.ps1"`);
+          arr.push('powershell -NoProfile -ExecutionPolicy Bypass -File "%TEMP%\\oc-start9r.ps1"');
+          arr.push('del "%TEMP%\\oc-start9r.ps1" >nul 2>&1');
+          arr.push('timeout /t 8 /nobreak >nul');
         } else {
           arr.push('npm install -g 9router');
-          arr.push(`NINE_ROUTER_ENTRY="$(${native9RouterServerEntryLookup()})"`);
-          arr.push('nohup env PORT=20128 HOSTNAME=0.0.0.0 DATA_DIR="$PWD/.9router" node "$NINE_ROUTER_ENTRY" >/tmp/9router.log 2>&1 &');
-          arr.push('nohup env DATA_DIR="$PWD/.9router" node ./.openclaw/9router-smart-route-sync.js >/tmp/9router-sync.log 2>&1 &');
-          arr.push('sleep 3');
+          // Pre-seed .9router/db.json before starting 9router (prevents requireLogin:true on first boot)
+          arr.push('mkdir -p ".9router"');
+          arr.push('if [ ! -f ".9router/db.json" ]; then cat > ".9router/db.json" << \'DBJSON\'\n{\n  "providerConnections": [],\n  "providerNodes": [],\n  "proxyPools": [],\n  "modelAliases": {},\n  "mitmAlias": {},\n  "combos": [],\n  "apiKeys": [],\n  "settings": {\n    "requireLogin": false,\n    "cloudEnabled": false,\n    "tunnelEnabled": false,\n    "comboStrategy": "fallback",\n    "mitmRouterBaseUrl": "http://localhost:20128"\n  },\n  "pricing": {}\n}\nDBJSON\nfi');
+          arr.push('NINE_ROUTER_BIN="$(command -v 9router)"');
+          // NOTE: -l (stdin listen mode) intentionally omitted — causes hangs in non-TTY environments
+          arr.push('nohup env PORT=20128 HOSTNAME=0.0.0.0 DATA_DIR="$PWD/.9router" "$NINE_ROUTER_BIN" -n -H 0.0.0.0 -p 20128 --skip-update > /tmp/9router.log 2>&1 &');
+          arr.push('nohup env DATA_DIR="$PWD/.9router" node ./.9router/9router-smart-route-sync.js > /tmp/9router-sync.log 2>&1 &');
+          arr.push('sleep 5');
         }
       } else if (isOllama) {
         if (shell === 'bat') {
@@ -3340,7 +3454,7 @@ const sync=async()=>{try{const res=await fetch(ROUTER+'/api/providers');if(!res.
           list: multiBotAgentMetas.map((meta) => ({
             id: meta.agentId,
             name: meta.name,
-            workspace: meta.workspaceDir,
+            workspace: '.openclaw/' + meta.workspaceDir,
             agentDir: `agents/${meta.agentId}/agent`,
             model: { primary: state.config.model, fallbacks: [] },
           })),
@@ -3407,7 +3521,7 @@ const sync=async()=>{try{const res=await fetch(ROUTER+'/api/providers');if(!res.
         '.openclaw/auth-profiles.json': sharedNativeAuthProfilesContent(),
         'TELEGRAM-POST-INSTALL.md': buildTelegramPostInstallChecklist(),
       };
-      if (is9Router) files['.openclaw/9router-smart-route-sync.js'] = native9RouterSyncScriptContent();
+      if (is9Router) files['.9router/9router-smart-route-sync.js'] = native9RouterSyncScriptContent();
       const teamMd = isVi
         ? `# Doi Bot\n\n${multiBotAgentMetas.map((meta) => `## ${meta.name}\n- Vai tro: ${meta.desc}\n- Agent ID: \`${meta.agentId}\`\n- Telegram accountId: \`${meta.accountId}\`\n- Slash command: ${meta.slashCmd || '_(chua co)_'}\n- Tinh cach: ${meta.persona || '_(khong ghi ro)_'}`).join('\n\n')}\n\n## Quy uoc phoi hop\n- Tat ca bot trong doi biet ro vai tro cua nhau.\n- Neu user bao ban hoi mot bot khac, hay dung agent-to-agent noi bo thay vi doi Telegram chuyen tin cua bot.\n- Bot mo loi chi noi 1 cau ngan, sau do chuyen turn noi bo cho bot dich.\n- Bot dich phai tra loi cong khai bang chinh Telegram account cua minh trong cung chat/thread hien tai.\n- Neu can fallback, chi bot mo loi moi duoc phep tom tat thay.`
         : `# Bot Team\n\n${multiBotAgentMetas.map((meta) => `## ${meta.name}\n- Role: ${meta.desc}\n- Agent ID: \`${meta.agentId}\`\n- Telegram accountId: \`${meta.accountId}\`\n- Slash command: ${meta.slashCmd || '_(not set)_'}\n- Persona: ${meta.persona || '_(not specified)_'}`).join('\n\n')}\n\n## Coordination Rules\n- Every bot knows the full roster.\n- If the user asks you to consult another bot, use internal agent-to-agent handoff instead of waiting for Telegram bot-to-bot delivery.\n- The caller bot only sends one short opener, then hands off internally.\n- The target bot must publish the real answer with its own Telegram account in the same chat/thread.\n- If a fallback is needed, only the caller bot may summarize on behalf of the target.`;
@@ -3461,7 +3575,7 @@ const sync=async()=>{try{const res=await fetch(ROUTER+'/api/providers');if(!res.
     // ─── Per-bot ENV content ──────────────────────────────────────────────────
     function botEnvContent(botIndex) {
       const bot = state.bots[botIndex] || {};
-      const botProvider = PROVIDERS[bot.provider] || provider;
+      const botProvider = (provider && provider.isProxy) ? provider : (PROVIDERS[bot.provider] || provider);
       const lines = [];
       if (botProvider.isProxy) {
         lines.push('# 9Router: no API key needed');
@@ -3485,21 +3599,25 @@ const sync=async()=>{try{const res=await fetch(ROUTER+'/api/providers');if(!res.
       const agentId = botName.toLowerCase().replace(/[^a-z0-9]+/g, '-');
       const basePort = 18791 + botIndex;
       const groupId = state.groupId || '';
-      const botProvider = PROVIDERS[bot.provider] || provider;
+      
+      // Force use global provider if proxy mode is chosen globally, else use bot specific provider
+      const botProvider = (provider && provider.isProxy) ? provider : (PROVIDERS[bot.provider] || provider);
+      const actualModel = botProvider.isProxy ? provider.models[0].id : (bot.model || state.config.model);
+
       const cfg = {
         meta: { lastTouchedVersion: '2026.3.24' },
         agents: {
           defaults: {
-            model: { primary: bot.model || state.config.model },
+            model: { primary: actualModel },
             compaction: { mode: 'safeguard' },
             timeoutSeconds: botProvider.isLocal ? 900 : 120,
             ...(botProvider.isLocal ? { llm: { idleTimeoutSeconds: 300 } } : {}),
           },
           list: [{
             id: agentId,
-            workspace: 'workspace',
+            workspace: `.openclaw/workspace-${agentId}`,
             agentDir: `agents/${agentId}/agent`,
-            model: { primary: bot.model || state.config.model }
+            model: { primary: actualModel }
           }],
         },
         ...(botProvider.isProxy ? {
@@ -3568,7 +3686,7 @@ const sync=async()=>{try{const res=await fetch(ROUTER+'/api/providers');if(!res.
         cfg.plugins = { ...(cfg.plugins || {}), slots: { ...((cfg.plugins && cfg.plugins.slots) || {}), memory: 'none' } };
       }
 
-      if (state.channel === 'telegram') {
+      if (state.channel === 'telegram' || state.channel === 'telegram+zalo-personal') {
         cfg.channels.telegram = {
           enabled: true,
           dmPolicy: 'open',
@@ -3584,7 +3702,9 @@ const sync=async()=>{try{const res=await fetch(ROUTER+'/api/providers');if(!res.
             },
           };
         }
-      } else if (state.channel === 'zalo-personal' || state.channel === 'telegram+zalo-personal') {
+      }
+      
+      if (state.channel === 'zalo-personal' || state.channel === 'telegram+zalo-personal') {
         cfg.channels.zalouser = {
           enabled: true,
           dmPolicy: 'open',
@@ -3767,6 +3887,7 @@ You are **${botName}**, ${botDesc.toLowerCase()}.
 - Prefer English unless user uses another language
 - When asked your name: _"I'm ${botName}"_
 - Never fabricate information`;
+      const _secRules = state.config.securityRules || DEFAULT_SECURITY_RULES[isVi ? 'vi' : 'en'];
       const extraAgentsMd = isVi
         ? `\n\n## Khi nao nen tra loi\n- Trong group, chi tra loi khi tin nhan co alias cua ban: ${ownAliases.map((alias) => `\`${alias}\``).join(', ')} hoac username Telegram cua ban.\n- Neu tin nhan khong goi ban, hay im lang hoan toan.\n- Neu tin nhan chi goi ro bot khac ${otherBotNames.length ? otherBotNames.map((name) => `\`${name}\``).join(', ') : '`bot khac`'} thi khong cuop loi.\n- Khi da biet user dang goi ban, hay tha reaction co dinh \`👍\` truoc roi moi tra loi bang text. Khong dung emoji khac.\n- Khi can phoi hop noi bo, dung dung agent id ky thuat trong \`TEAM.md\`, khong dung ten hien thi.\n- Khi hoi ve vai tro cac bot, dung \`TEAM.md\` lam nguon su that.`
         : `\n\n## When To Reply\n- In group chats, only reply when the message contains one of your aliases: ${ownAliases.map((alias) => `\`${alias}\``).join(', ')} or your Telegram username.\n- If the message is not calling you, stay completely silent.\n- If the message is clearly calling another bot such as ${otherBotNames.length ? otherBotNames.map((name) => `\`${name}\``).join(', ') : '`another bot`'}, do not hijack it.\n- Once you know the user is calling you, add the fixed reaction \`👍\` first, then send the text reply. Do not use any other reaction emoji.\n- When you need internal coordination, use the exact technical agent id from \`TEAM.md\`, not the display name.\n- Use \`TEAM.md\` as the source of truth for team roles.`;
@@ -3795,7 +3916,7 @@ ${selectedSkillNames.length ? selectedSkillNames.join('\n') : '- _(Chưa có ski
 ## Quy ước
 - Ưu tiên dùng tool thay vì đoán
 - Browser: dùng khi user yêu cầu thao tác web
-- Memory: cập nhật khi biết thông tin quan trọng`
+- Memory: cập nhật khi biết thông tin quan trọng\n\n## Ghi chú thiết lập của bạn\n\nGhi lại cấu hình riêng của môi trường bạn, ví dụ:\n- Tên thiết bị, camera, SSH hosts\n- Giọng nói ưa thích (TTS)\n- Alias và shortcut\n\n---\n\nThêm ghi chú nào giúp ích cho công việc của bạn.`
         : `# Tool Usage Guide
 
 ## Installed Skills
@@ -3804,7 +3925,7 @@ ${selectedSkillNames.length ? selectedSkillNames.join('\n') : '- _(No skills ins
 ## Conventions
 - Prefer tools over guessing
 - Use Browser for explicit web tasks
-- Update Memory when important user info appears`;
+- Update Memory when important user info appears\n\n## Your Setup Notes\n\nRecord environment-specific config, e.g.:\n- Device names, cameras, SSH hosts\n- Preferred TTS voice\n- Aliases and shortcuts\n\n---\n\nAdd whatever helps you do your job.`;
       const memoryMd = isVi
         ? `# Bộ nhớ dài hạn
 
@@ -3817,7 +3938,7 @@ ${selectedSkillNames.length ? selectedSkillNames.join('\n') : '- _(No skills ins
       const files = {
         'IDENTITY.md': identityMd,
         'SOUL.md': soulMd,
-        'AGENTS.md': agentsMd + extraAgentsMd,
+        'AGENTS.md': agentsMd + extraAgentsMd + '\n\n' + _secRules,
         'TEAM.md': teamMd,
         'USER.md': userMd,
         'TOOLS.md': toolsMd,
@@ -3842,11 +3963,11 @@ ${selectedSkillNames.length ? selectedSkillNames.join('\n') : '- _(No skills ins
       files[`${base}/.openclaw/openclaw.json`] = botConfigContent(botIndex);
       files[`${base}/.openclaw/exec-approvals.json`] = botExecApprovalsContent(botIndex);
       files[`${base}/.openclaw/auth-profiles.json`] = botAuthProfilesContent(botIndex);
-      if (is9Router) files[`${base}/.openclaw/9router-smart-route-sync.js`] = native9RouterSyncScriptContent();
+      if (is9Router) files[`${base}/.9router/9router-smart-route-sync.js`] = native9RouterSyncScriptContent();
       files[`${base}/.openclaw/agents/${agentId}.yaml`] = botAgentYamlContent(botIndex);
       files[`${base}/.openclaw/agents/${agentId}/agent/auth-profiles.json`] = botAuthProfilesContent(botIndex);
       Object.entries(botWorkspaceFiles(botIndex)).forEach(([name, content]) => {
-        files[`${base}/.openclaw/workspace/${name}`] = content;
+        files[`${base}/.openclaw/workspace-${agentId}/${name}`] = content;
       });
       return files;
     }
@@ -3888,6 +4009,9 @@ ${selectedSkillNames.length ? selectedSkillNames.join('\n') : '- _(No skills ins
       return Object.fromEntries(Object.entries(files).map(([relPath, content]) => {
         const normalized = relPath.replace(/\\/g, '/');
         if (normalized === '.env') return ['%PROJECT_DIR%\\.env', content];
+        if (normalized.startsWith('.9router/')) {
+          return [`%DATA_DIR%\\${normalized.slice('.9router/'.length).replace(/\//g, '\\')}`, content];
+        }
         if (normalized.startsWith('.openclaw/')) {
           return [`%OPENCLAW_HOME%\\${normalized.slice('.openclaw/'.length).replace(/\//g, '\\')}`, content];
         }
@@ -3913,12 +4037,15 @@ ${selectedSkillNames.length ? selectedSkillNames.join('\n') : '- _(No skills ins
         'set "OPENCLAW_STATE_DIR=%PROJECT_DIR%\\.openclaw"',
         'set "DATA_DIR=%PROJECT_DIR%\\.9router"',
         'set "PATH=%APPDATA%\\npm;%PATH%"',
+        ':: Fix PowerShell ExecutionPolicy so .ps1 wrappers (openclaw, 9router) can run',
+        'powershell -NoProfile -Command "Set-ExecutionPolicy -Scope CurrentUser -ExecutionPolicy RemoteSigned -Force" >nul 2>&1',
         `echo === OpenClaw Setup — Windows${isDocker ? ' Docker' : ' Native'} ===`,
         'echo.',
         'echo [1/5] Kiem tra Node.js...',
         'where node >nul 2>&1 || (echo ERROR: Node.js chua cai! Tai tai: https://nodejs.org && pause && exit /b 1)',
         'echo [2/5] Cai OpenClaw CLI...',
         `call npm install -g openclaw@2026.4.5 ${openClawRuntimePackages} || goto :fail`,
+        'echo [OK] OpenClaw da duoc cai dat thanh cong.',
       ];
       providerLines(lines, 'bat');
       if (hasBrowser) {
@@ -3932,12 +4059,14 @@ ${selectedSkillNames.length ? selectedSkillNames.join('\n') : '- _(No skills ins
       }
       if (pluginCmd) { lines.push('echo Cai plugins...'); lines.push(pluginCmd); }
       lines.push('if not exist "%OPENCLAW_HOME%" mkdir "%OPENCLAW_HOME%"');
-      lines.push('if not exist "%DATA_DIR%" mkdir "%DATA_DIR%"');
+      // DATA_DIR creation + db.json pre-seeding is handled inside providerLines() for 9Router.
+      // For non-9Router providers we still ensure the folder exists.
+      if (!is9Router) lines.push('if not exist "%DATA_DIR%" mkdir "%DATA_DIR%"');
 
       if (isMultiBot) {
         lines.push('echo [4/5] Tao runtime multi-agent dung chung...');
         appendBatWriteCommands(lines, mapWindowsNativeFiles(sharedNativeFileMap()));
-        if (is9Router) lines.push(windowsHiddenNodeLaunch('%OPENCLAW_HOME%\\9router-smart-route-sync.js', { DATA_DIR: '%DATA_DIR%' }));
+        if (is9Router) lines.push(windowsHiddenNodeLaunch('%DATA_DIR%\\9router-smart-route-sync.js', { DATA_DIR: '%DATA_DIR%' }));
         lines.push('if not exist "%OPENCLAW_HOME%\\openclaw.json" (echo ERROR: Khong tim thay "%OPENCLAW_HOME%\\openclaw.json" && goto :fail)');
         lines.push('echo.');
         lines.push('echo OpenClaw Dashboard: http://127.0.0.1:18791');
@@ -3948,12 +4077,182 @@ ${selectedSkillNames.length ? selectedSkillNames.join('\n') : '- _(No skills ins
           lines.push('echo 9Router Dashboard: http://127.0.0.1:20128/dashboard');
           lines.push('echo Other reachable URLs: http://localhost:20128/dashboard');
         }
-        lines.push('echo [5/5] Khoi dong gateway multi-bot...');
-        lines.push('call openclaw gateway run');
+        const needsZaloLoginMulti = state.channel === 'zalo-personal' || state.channel === 'telegram+zalo-personal';
+        if (needsZaloLoginMulti) {
+          lines.push('echo [5/6] Khoi dong gateway (cua so moi) de chuan bi dang nhap Zalo...');
+          // Use BAT-native `start` which inherits current env vars - no PS escaping needed
+          lines.push('start "OpenClaw Gateway" cmd /c "openclaw gateway run"');
+          lines.push('echo Cho gateway khoi dong (15 giay)...');
+          lines.push('timeout /t 15 /nobreak >nul');
+          lines.push('echo [6/6] Dang nhap Zalo - dang tao ma QR...');
+          lines.push('openclaw channels login --channel zalouser --instance default --verbose');
+          lines.push('echo.');
+          // Copy QR PNG from TEMP to project dir so user can open it easily
+          lines.push('set "QR_TMP=%TEMP%\\openclaw\\openclaw-zalouser-qr-default.png"');
+          lines.push('if exist "%QR_TMP%" (');
+          lines.push('  copy /y "%QR_TMP%" "%PROJECT_DIR%\\zalo-login-qr.png" >nul');
+          lines.push('  echo ===================================================');
+          lines.push('  echo Ma QR Zalo da duoc luu tai:');
+          lines.push('  echo   %PROJECT_DIR%\\zalo-login-qr.png');
+          lines.push('  echo Mo file anh tren r dung Zalo quet de dang nhap!');
+          lines.push('  echo ===================================================');
+          lines.push('  start "" "%PROJECT_DIR%\\zalo-login-qr.png"');
+          lines.push(') else (');
+          lines.push('  echo Khong tim thay file QR. Vui long kiem tra cua so Gateway.');
+          lines.push(')');
+          lines.push('echo Gateway dang chay trong cua so rieng.');
+          lines.push('echo De khoi dong lai: openclaw gateway run');
+        } else {
+          lines.push('echo [5/5] Khoi dong gateway multi-bot...');
+        lines.push(':: Khoi dong OpenClaw Gateway trong cua so moi');
+        lines.push('echo $env:OPENCLAW_HOME = \'%OPENCLAW_HOME%\' > "%TEMP%\\oc-startgw.ps1"');
+        lines.push('echo $env:OPENCLAW_STATE_DIR = \'%OPENCLAW_HOME%\' >> "%TEMP%\\oc-startgw.ps1"');
+        lines.push('echo $b = Join-Path $env:APPDATA \'npm\\openclaw.cmd\' >> "%TEMP%\\oc-startgw.ps1"');
+        lines.push('echo if ^(-not ^(Test-Path $b^)^) { $b = Join-Path $env:APPDATA \'npm\\openclaw\' } >> "%TEMP%\\oc-startgw.ps1"');
+        lines.push("echo Start-Process 'cmd.exe' -WindowStyle Normal -WorkingDirectory '%PROJECT_DIR%' -ArgumentList ^('/c \"' + $b + '\" gateway run'^) >> \"%TEMP%\\oc-startgw.ps1\"");
+        lines.push('powershell -NoProfile -ExecutionPolicy Bypass -File "%TEMP%\\oc-startgw.ps1"');
+        lines.push('del "%TEMP%\\oc-startgw.ps1" >nul 2>&1');
+        lines.push('timeout /t 5 /nobreak >nul');
+        lines.push('echo.');
+        lines.push('echo [OK] OpenClaw Gateway dang khoi dong trong cua so moi!');
+        lines.push('echo OpenClaw Dashboard:   http://127.0.0.1:18791');
+        lines.push('echo If the dashboard asks for a Gateway Token, run: openclaw dashboard');
+        }
+      } else if (isComboChannel) {
+        // ── Combo: Telegram + Zalo Personal — 2 bots, 1 gateway ─────────────
+        lines.push('echo [4/5] Tao file cau hinh cho 2 bot (Telegram + Zalo Personal)...');
+        // Bot 0 = Telegram bot
+        const bot0Files = botFiles(0);
+        // Bot 1 = Zalo bot (same workspace root, separate agent/workspace dirs)
+        const bot1 = state.bots[1] || {};
+        const zaloName = bot1.name || 'Zalo Bot';
+        const zaloDesc = bot1.desc || (isVi ? 'Tro ly Zalo ca nhan' : 'Personal Zalo assistant');
+        const zaloPersona = bot1.persona || '';
+        const zaloAgentId = zaloName.toLowerCase().replace(/[^a-z0-9]+/g, '-').replace(/^-+|-+$/g, '') || 'zalo-bot';
+        const bot0Name = (state.bots[0] || {}).name || 'Bot 1';
+        const bot0AgentId = bot0Name.toLowerCase().replace(/[^a-z0-9]+/g, '-').replace(/^-+|-+$/g, '') || 'bot-1';
+        // Merge bot0's config to also include zalo agent in agents.list + bindings
+        const mergedConfig = JSON.parse(bot0Files['./.openclaw/openclaw.json'] || '{}');
+        if (!mergedConfig.agents) mergedConfig.agents = { defaults: {}, list: [] };
+        if (!Array.isArray(mergedConfig.agents.list)) mergedConfig.agents.list = [];
+        // Add Zalo agent to list if not already there
+        const hasZaloInList = mergedConfig.agents.list.some(a => a.id === zaloAgentId);
+        if (!hasZaloInList) {
+          mergedConfig.agents.list.push({
+            id: zaloAgentId,
+            name: zaloName,
+            workspace: `.openclaw/workspace-${zaloAgentId}`,
+            agentDir: `agents/${zaloAgentId}/agent`,
+            model: { primary: (bot1.model || state.config.model) },
+          });
+        }
+        // Ensure bindings exist
+        if (!Array.isArray(mergedConfig.bindings)) mergedConfig.bindings = [];
+        // Bind Telegram bot to bot0
+        const hasTelegramBinding = mergedConfig.bindings.some(b => b && b.match && b.match.channel === 'telegram');
+        if (!hasTelegramBinding) {
+          mergedConfig.bindings.push({ agentId: bot0AgentId, match: { channel: 'telegram', accountId: 'default' } });
+        }
+        // Bind Zalo channel to zalo agent
+        const hasZaloBinding = mergedConfig.bindings.some(b => b && b.match && b.match.channel === 'zalouser');
+        if (!hasZaloBinding) {
+          mergedConfig.bindings.push({ agentId: zaloAgentId, match: { channel: 'zalouser', accountId: 'default' } });
+        }
+        // Ensure zalouser channel is in config
+        if (!mergedConfig.channels) mergedConfig.channels = {};
+        if (!mergedConfig.channels.zalouser) {
+          mergedConfig.channels.zalouser = { enabled: true, dmPolicy: 'open', autoReply: true };
+        }
+        bot0Files['./.openclaw/openclaw.json'] = JSON.stringify(mergedConfig, null, 2);
+        appendBatWriteCommands(lines, mapWindowsNativeFiles(bot0Files));
+        // Zalo agent YAML
+        const zaloAgentYaml = `name: ${zaloAgentId}\ndescription: "${zaloDesc}"\n\nmodel:\n  primary: ${bot1.model || state.config.model}`;
+        const zaloWorkspaceDir = `workspace-${zaloAgentId}`;
+        const _zaloSecRules = state.config.securityRules || DEFAULT_SECURITY_RULES[isVi ? 'vi' : 'en'];
+        const zaloFiles = {
+          [`.openclaw/agents/${zaloAgentId}.yaml`]: zaloAgentYaml,
+          [`.openclaw/agents/${zaloAgentId}/agent/auth-profiles.json`]: sharedNativeAuthProfilesContent(),
+          [`.openclaw/${zaloWorkspaceDir}/IDENTITY.md`]: isVi
+            ? `# Danh tinh\n\n- **Ten:** ${zaloName}\n- **Vai tro:** ${zaloDesc}\n\n---\n\nMinh la **${zaloName}**. Khi ai hoi ten, minh tra loi: _"Minh la ${zaloName}"_.`
+            : `# Identity\n\n- **Name:** ${zaloName}\n- **Role:** ${zaloDesc}\n\n---\n\nI am **${zaloName}**. When asked my name, I answer: _"I'm ${zaloName}"_.`,
+          [`.openclaw/${zaloWorkspaceDir}/SOUL.md`]: isVi
+            ? `# Tinh cach\n\n**Huu ich that su.** Bo qua cau ne, cu giup thang.\n**Co ca tinh.** Tro ly khong co ca tinh thi chi la cong cu.\n\n## Phong cach\n- Tu nhien, gan gui\n- Truc tiep, ngan gon${zaloPersona ? `\n\n## Custom Rules\n${zaloPersona}` : ''}`
+            : `# Soul\n\n**Be genuinely helpful.** Skip filler and just help.\n**Have personality.** An assistant with no personality is just a tool.\n\n## Style\n- Natural and concise\n- Direct and practical${zaloPersona ? `\n\n## Custom Rules\n${zaloPersona}` : ''}`,
+          [`.openclaw/${zaloWorkspaceDir}/AGENTS.md`]: isVi
+            ? `# Huong dan van hanh\n\n## Vai tro\nBan la **${zaloName}**, ${zaloDesc.toLowerCase()}.\n\n## Kenh Zalo Personal\n- Ban hoat dong tren kenh Zalo Personal (zca-js).\n- Tra loi moi tin nhan DM theo chinh sach dmPolicy: open.\n- Khong can duoc goi ten moi tra loi (DM la rieng tu).\n\n## Quy tac tra loi\n- Tra loi ngan gon, suc tich\n- Uu tien tieng Viet\n- Khi hoi ten: _"Minh la ${zaloName}"_\n- Khong bia thong tin\n\n${_zaloSecRules}`
+            : `# Operating Manual\n\n## Role\nYou are **${zaloName}**, ${zaloDesc.toLowerCase()}.\n\n## Zalo Personal Channel\n- You operate on the Zalo Personal channel (zca-js).\n- Reply to all DMs with dmPolicy: open.\n- DMs are private — no need to be mentioned to reply.\n\n## Reply Rules\n- Be concise\n- Prefer Vietnamese\n- When asked your name: _"I'm ${zaloName}"_\n- Never fabricate information\n\n${_zaloSecRules}`,
+          [`.openclaw/${zaloWorkspaceDir}/TEAM.md`]: isVi
+            ? `# Doi Bot\n\n## ${bot0Name}\n- Vai tro: ${(state.bots[0] || {}).desc || 'Tro ly Telegram'}\n- Kenh: Telegram\n\n## ${zaloName}\n- Vai tro: ${zaloDesc}\n- Kenh: Zalo Personal`
+            : `# Bot Team\n\n## ${bot0Name}\n- Role: ${(state.bots[0] || {}).desc || 'Telegram assistant'}\n- Channel: Telegram\n\n## ${zaloName}\n- Role: ${zaloDesc}\n- Channel: Zalo Personal`,
+          [`.openclaw/${zaloWorkspaceDir}/USER.md`]: isVi
+            ? `# Thong tin nguoi dung\n\n## Tong quan\n- **Ngon ngu uu tien:** Tieng Viet\n\n## Thong tin ca nhan\n${state.config.userInfo || '- _(Chua co gi)_'}`
+            : `# User Profile\n\n## Overview\n- **Preferred language:** Vietnamese\n\n## Notes\n${state.config.userInfo || '- _(Nothing yet)_'}`,
+          [`.openclaw/${zaloWorkspaceDir}/MEMORY.md`]: isVi
+            ? `# Bo nho dai han\n\n## Ghi chu\n- _(Chua co gi)_`
+          [`.openclaw/${zaloWorkspaceDir}/TOOLS.md`]: isVi
+            ? `# Hướng dẫn sử dụng Tools\n\n## Skills đã cài\n${selectedSkillNames.length ? selectedSkillNames.join('\n') : '- _(Chưa có skill nào)_'}\n\n## Quy ước\n- Ưu tiên dùng tool thay vì đoán\n- Browser: dùng khi user yêu cầu thao tác web\n- Memory: cập nhật khi biết thông tin quan trọng\n\n## Ghi chú thiết lập của bạn\n\nGhi lại cấu hình riêng của môi trường bạn, ví dụ:\n- Tên thiết bị, camera, SSH hosts\n- Giọng nói ưa thích (TTS)\n\n---\n\nThêm ghi chú nào giúp ích cho công việc của bạn.`
+            : `# Tool Usage Guide\n\n## Installed Skills\n${selectedSkillNames.length ? selectedSkillNames.join('\n') : '- _(No skills installed)_'}\n\n## Conventions\n- Prefer tools over guessing\n- Use Browser for explicit web tasks\n- Update Memory when important user info appears\n\n## Your Setup Notes\n\nRecord environment-specific config, e.g.:\n- Device names, cameras, SSH hosts\n- Preferred TTS voice\n\n---\n\nAdd whatever helps you do your job.`,
+            : `# Long-term Memory\n\n## Notes\n- _(Nothing yet)_`,
+        };
+        appendBatWriteCommands(lines, mapWindowsNativeFiles(zaloFiles));
+        if (is9Router) lines.push(windowsHiddenNodeLaunch('%DATA_DIR%\\9router-smart-route-sync.js', { DATA_DIR: '%DATA_DIR%' }));
+        lines.push('if not exist "%OPENCLAW_HOME%\\openclaw.json" (echo ERROR: Khong tim thay "%OPENCLAW_HOME%\\openclaw.json" && goto :fail)');
+        lines.push('echo.');
+        lines.push('echo OpenClaw Dashboard: http://127.0.0.1:18791');
+        lines.push('echo Other reachable URLs: http://localhost:18791');
+        lines.push('echo If the dashboard asks for a Gateway Token, run: openclaw dashboard');
+        if (is9Router) {
+          lines.push('echo.');
+          lines.push('echo 9Router Dashboard: http://127.0.0.1:20128/dashboard');
+          lines.push('echo Other reachable URLs: http://localhost:20128/dashboard');
+        }
+        // Login Zalo trực tiếp (không cần gateway chạy trước — openclaw channels login standalone)
+        // Sau khi login thành công, gateway sẽ tự nhận credentials khi khởi động.
+        lines.push('echo [5/6] Dang nhap Zalo Personal...');
+        lines.push('echo.');
+        lines.push('echo === HUONG DAN DANG NHAP ZALO ===');
+        lines.push('echo OpenClaw se hien duong dan file anh QR trong cua so nay.');
+        lines.push('echo Hay mo file anh do, chon Quet QR trong app Zalo va quet.');
+        lines.push('echo Neu het gio, nhap R de tao ma QR moi.');
+        lines.push('echo ================================');
+        lines.push('echo.');
+        lines.push(':retry_zalo');
+        lines.push('echo Dang tao ma QR Zalo moi...');
+        lines.push('echo.');
+        lines.push('call openclaw channels login --channel zalouser --verbose');
+        lines.push('if %ERRORLEVEL% equ 0 goto :zalo_done');
+        lines.push('echo.');
+        lines.push('echo [WARN] Ma QR het han hoac chua duoc quet kip.');
+        lines.push('echo   R - Tao ma QR moi va thu lai');
+        lines.push('echo   Enter - Bo qua dang nhap Zalo (Zalo se khong hoat dong)');
+        lines.push('set /p RETRY_ZALO=Ban chon: ');
+        lines.push('if /i "%RETRY_ZALO%"=="R" goto :retry_zalo');
+        lines.push('echo [SKIP] Bo qua. Zalo se khong hoat dong cho den khi dang nhap lai.');
+        lines.push('goto :zalo_continue');
+        lines.push(':zalo_done');
+        lines.push('echo [OK] Dang nhap Zalo thanh cong!');
+        lines.push(':zalo_continue');
+        lines.push(':: Dong gateway cu (neu co lock file) truoc khi khoi dong lai');
+        lines.push('call openclaw gateway stop 2>nul');
+        lines.push('timeout /t 2 /nobreak >nul');
+        lines.push('echo [6/6] Khoi dong bot (Telegram + Zalo)...');
+        lines.push(':: Khoi dong OpenClaw Gateway trong cua so moi');
+        lines.push('echo $env:OPENCLAW_HOME = \'%OPENCLAW_HOME%\' > "%TEMP%\\oc-startgw.ps1"');
+        lines.push('echo $env:OPENCLAW_STATE_DIR = \'%OPENCLAW_HOME%\' >> "%TEMP%\\oc-startgw.ps1"');
+        lines.push('echo $b = Join-Path $env:APPDATA \'npm\\openclaw.cmd\' >> "%TEMP%\\oc-startgw.ps1"');
+        lines.push('echo if ^(-not ^(Test-Path $b^)^) { $b = Join-Path $env:APPDATA \'npm\\openclaw\' } >> "%TEMP%\\oc-startgw.ps1"');
+        lines.push("echo Start-Process 'cmd.exe' -WindowStyle Normal -WorkingDirectory '%PROJECT_DIR%' -ArgumentList ^('/c \"' + $b + '\" gateway run'^) >> \"%TEMP%\\oc-startgw.ps1\"");
+        lines.push('powershell -NoProfile -ExecutionPolicy Bypass -File "%TEMP%\\oc-startgw.ps1"');
+        lines.push('del "%TEMP%\\oc-startgw.ps1" >nul 2>&1');
+        lines.push('timeout /t 5 /nobreak >nul');
+        lines.push('echo.');
+        lines.push('echo [OK] OpenClaw Gateway dang khoi dong trong cua so moi!');
+        lines.push('echo OpenClaw Dashboard:   http://127.0.0.1:18791');
+        lines.push('echo If the dashboard asks for a Gateway Token, run: openclaw dashboard');
       } else {
         lines.push('echo [4/5] Tao file cau hinh...');
         appendBatWriteCommands(lines, mapWindowsNativeFiles(botFiles(0)));
-        if (is9Router) lines.push(windowsHiddenNodeLaunch('%OPENCLAW_HOME%\\9router-smart-route-sync.js', { DATA_DIR: '%DATA_DIR%' }));
+        if (is9Router) lines.push(windowsHiddenNodeLaunch('%DATA_DIR%\\9router-smart-route-sync.js', { DATA_DIR: '%DATA_DIR%' }));
         lines.push('if not exist "%OPENCLAW_HOME%\\openclaw.json" (echo ERROR: Khong tim thay "%OPENCLAW_HOME%\\openclaw.json" && goto :fail)');
         lines.push('echo.');
         lines.push('echo OpenClaw Dashboard: http://127.0.0.1:18791');
@@ -3964,8 +4263,55 @@ ${selectedSkillNames.length ? selectedSkillNames.join('\n') : '- _(No skills ins
           lines.push('echo 9Router Dashboard: http://127.0.0.1:20128/dashboard');
           lines.push('echo Other reachable URLs: http://localhost:20128/dashboard');
         }
-        lines.push('echo [5/5] Khoi dong bot...');
-        lines.push('call openclaw gateway run');
+        const needsZaloLogin = state.channel === 'zalo-personal';
+        if (needsZaloLogin) {
+        // Login Zalo trực tiếp (không cần gateway chạy trước)
+        lines.push('echo [5/5] Dang nhap Zalo Personal...');
+        lines.push('echo.');
+        lines.push('echo === HUONG DAN DANG NHAP ZALO ===');
+        lines.push('echo Cua so Zalo Login se mo. Hay:');
+        lines.push('echo   1. Doi QR hien ra trong cua so Zalo Login');
+        lines.push('echo   2. Mo app Zalo, chon Quet QR va quet ma');
+        lines.push('echo   3. Doi thay chu "Login successful" trong cua so do');
+        lines.push('echo   4. Dong cua so Zalo Login');
+        lines.push('echo ================================');
+        lines.push('echo.');
+        lines.push('start "Zalo Login" cmd /k "cd /d \"%PROJECT_DIR%\" && set OPENCLAW_HOME=%OPENCLAW_HOME% && set OPENCLAW_STATE_DIR=%OPENCLAW_HOME% && openclaw channels login --channel zalouser --verbose"');
+        lines.push('echo Nhan phim bat ky sau khi dong cua so Zalo Login...');
+        lines.push('pause >nul');
+        lines.push(':: Dong gateway cu (neu co lock file tu cua so Zalo Login) truoc khi khoi dong lai');
+        lines.push('call openclaw gateway stop 2>nul');
+        lines.push('timeout /t 2 /nobreak >nul');
+        lines.push('echo [6/6] Khoi dong bot...');
+        lines.push(':: Khoi dong OpenClaw Gateway trong cua so moi');
+        lines.push('echo $env:OPENCLAW_HOME = \'%OPENCLAW_HOME%\' > "%TEMP%\\oc-startgw.ps1"');
+        lines.push('echo $env:OPENCLAW_STATE_DIR = \'%OPENCLAW_HOME%\' >> "%TEMP%\\oc-startgw.ps1"');
+        lines.push('echo $b = Join-Path $env:APPDATA \'npm\\openclaw.cmd\' >> "%TEMP%\\oc-startgw.ps1"');
+        lines.push('echo if ^(-not ^(Test-Path $b^)^) { $b = Join-Path $env:APPDATA \'npm\\openclaw\' } >> "%TEMP%\\oc-startgw.ps1"');
+        lines.push("echo Start-Process 'cmd.exe' -WindowStyle Normal -WorkingDirectory '%PROJECT_DIR%' -ArgumentList ^('/c \"' + $b + '\" gateway run'^) >> \"%TEMP%\\oc-startgw.ps1\"");
+        lines.push('powershell -NoProfile -ExecutionPolicy Bypass -File "%TEMP%\\oc-startgw.ps1"');
+        lines.push('del "%TEMP%\\oc-startgw.ps1" >nul 2>&1');
+        lines.push('timeout /t 5 /nobreak >nul');
+        lines.push('echo.');
+        lines.push('echo [OK] OpenClaw Gateway dang khoi dong trong cua so moi!');
+        lines.push('echo OpenClaw Dashboard:   http://127.0.0.1:18791');
+        lines.push('echo If the dashboard asks for a Gateway Token, run: openclaw dashboard');
+        } else {
+          lines.push('echo [5/5] Khoi dong bot...');
+        lines.push(':: Khoi dong OpenClaw Gateway trong cua so moi');
+        lines.push('echo $env:OPENCLAW_HOME = \'%OPENCLAW_HOME%\' > "%TEMP%\\oc-startgw.ps1"');
+        lines.push('echo $env:OPENCLAW_STATE_DIR = \'%OPENCLAW_HOME%\' >> "%TEMP%\\oc-startgw.ps1"');
+        lines.push('echo $b = Join-Path $env:APPDATA \'npm\\openclaw.cmd\' >> "%TEMP%\\oc-startgw.ps1"');
+        lines.push('echo if ^(-not ^(Test-Path $b^)^) { $b = Join-Path $env:APPDATA \'npm\\openclaw\' } >> "%TEMP%\\oc-startgw.ps1"');
+        lines.push("echo Start-Process 'cmd.exe' -WindowStyle Normal -WorkingDirectory '%PROJECT_DIR%' -ArgumentList ^('/c \"' + $b + '\" gateway run'^) >> \"%TEMP%\\oc-startgw.ps1\"");
+        lines.push('powershell -NoProfile -ExecutionPolicy Bypass -File "%TEMP%\\oc-startgw.ps1"');
+        lines.push('del "%TEMP%\\oc-startgw.ps1" >nul 2>&1');
+        lines.push('timeout /t 5 /nobreak >nul');
+        lines.push('echo.');
+        lines.push('echo [OK] OpenClaw Gateway dang khoi dong trong cua so moi!');
+        lines.push('echo OpenClaw Dashboard:   http://127.0.0.1:18791');
+        lines.push('echo If the dashboard asks for a Gateway Token, run: openclaw dashboard');
+        }
       }
 
       lines.push('goto :end');
@@ -4073,7 +4419,7 @@ ${selectedSkillNames.length ? selectedSkillNames.join('\n') : '- _(No skills ins
         if (is9Router) {
           vps.push(`NINE_ROUTER_ENTRY="$(${native9RouterServerEntryLookup()})"`);
           vps.push('PORT=20128 HOSTNAME=0.0.0.0 pm2 start "$NINE_ROUTER_ENTRY" --name openclaw-multibot-9router --interpreter "$(command -v node)"');
-          vps.push('pm2 start --name openclaw-multibot-9router-sync -- sh -c "node ./.openclaw/9router-smart-route-sync.js"');
+          vps.push('pm2 start --name openclaw-multibot-9router-sync -- sh -c "node ./.9router/9router-smart-route-sync.js"');
         }
         vps.push('pm2 start --name openclaw-multibot -- sh -c "openclaw gateway run"');
         vps.push('pm2 save && pm2 startup');
@@ -4087,7 +4433,7 @@ ${selectedSkillNames.length ? selectedSkillNames.join('\n') : '- _(No skills ins
         if (is9Router) {
           vps.push(`NINE_ROUTER_ENTRY="$(${native9RouterServerEntryLookup()})"`);
           vps.push('PORT=20128 HOSTNAME=0.0.0.0 pm2 start "$NINE_ROUTER_ENTRY" --name openclaw-9router --interpreter "$(command -v node)"');
-          vps.push('pm2 start --name openclaw-9router-sync -- sh -c "node ./.openclaw/9router-smart-route-sync.js"');
+          vps.push('pm2 start --name openclaw-9router-sync -- sh -c "node ./.9router/9router-smart-route-sync.js"');
         }
         vps.push('pm2 start --name openclaw -- sh -c "openclaw gateway run"');
         vps.push('pm2 save && pm2 startup');
@@ -4175,17 +4521,294 @@ ${selectedSkillNames.length ? selectedSkillNames.join('\n') : '- _(No skills ins
 
 
 
+  // ========== Generate Uninstall Script ==========
+  function generateUninstallScript() {
+    const os = state.nativeOs || 'win';
+    const isDocker = state.deployMode === 'docker';
+    const projectDirRaw = document.getElementById('cfg-project-path')?.value?.trim() || '.';
+    // Normalise to a sensible display path
+    const projectDir = projectDirRaw;
+    const absWin = projectDir.replace(/\//g, '\\');
+    const absUnix = projectDir.replace(/\\/g, '/');
+    const botName = (state.bots[0]?.name || 'openclaw').toLowerCase().replace(/[^a-z0-9]+/g, '-');
+
+    // ── Windows native .bat ────────────────────────────────────────────────────
+    if (os === 'win' && !isDocker) {
+      return {
+        name: 'uninstall-openclaw-win.bat',
+        content: `@echo off
+setlocal EnableExtensions
+chcp 65001 >nul
+echo.
+echo ============================================================
+echo   OpenClaw Uninstaller - Windows Native
+echo   Project: ${absWin}
+echo ============================================================
+echo.
+echo [WARNING] This will:
+echo   1. Kill openclaw and 9router background processes
+echo   2. Uninstall global npm packages (openclaw, 9router)
+echo   3. Delete the project folder and all its data
+echo.
+set /p CONFIRM=Nhap YES de xac nhan xoa toan bo: 
+if /i not "%CONFIRM%"=="YES" (
+  echo Huy bo. Khong xoa gi ca.
+  pause
+  exit /b 0
+)
+echo.
+echo [1/4] Dang dung cac tien trinh openclaw va 9router...
+wmic process where "Name='node.exe' and CommandLine like '%%9router%%'" delete >nul 2>&1
+wmic process where "Name='cmd.exe' and CommandLine like '%%9router%%'" delete >nul 2>&1
+wmic process where "Name='node.exe' and CommandLine like '%%openclaw.mjs%%'" delete >nul 2>&1
+timeout /t 2 /nobreak >nul
+echo    OK: Tien trinh da dung.
+echo.
+echo [2/4] Dang go cai npm packages toan cau...
+set "PATH=%APPDATA%\\npm;%PATH%"
+call npm uninstall -g openclaw 9router grammy @grammyjs/runner @grammyjs/transformer-throttler @buape/carbon @larksuiteoapi/node-sdk @slack/web-api 2>nul
+echo    OK: npm packages da duoc go cai.
+echo.
+echo [3/4] Xoa thu muc project...
+set "TARGET=${absWin}"
+if exist "%TARGET%" (
+  rd /s /q "%TARGET%"
+  echo    OK: Da xoa %TARGET%
+) else (
+  echo    INFO: Thu muc khong ton tai: %TARGET%
+)
+echo.
+echo [4/4] Xoa thu muc .9router trong Home (neu co)...
+if exist "%USERPROFILE%\\.9router" (
+  set /p CLEAN_HOME=Xoa ca %USERPROFILE%\\.9router? [YES/no]: 
+  if /i "%CLEAN_HOME%"=="YES" rd /s /q "%USERPROFILE%\\.9router" >nul 2>&1
+)
+echo.
+echo ============================================================
+echo   Go cai hoan tat!
+echo   De cai lai: chay lai file setup hoac npx create-openclaw-bot
+echo ============================================================
+pause
+endlocal
+`
+      };
+    }
+
+    // ── Windows Docker .bat ────────────────────────────────────────────────────
+    if (os === 'win' && isDocker) {
+      return {
+        name: 'uninstall-openclaw-docker.bat',
+        content: `@echo off
+setlocal EnableExtensions
+chcp 65001 >nul
+echo.
+echo ============================================================
+echo   OpenClaw Uninstaller - Docker (Windows)
+echo   Project: ${absWin}
+echo ============================================================
+echo.
+echo [WARNING] This will stop Docker containers and delete the project folder.
+echo.
+set /p CONFIRM=Nhap YES de xac nhan xoa toan bo: 
+if /i not "%CONFIRM%"=="YES" (
+  echo Huy bo. Khong xoa gi ca.
+  pause
+  exit /b 0
+)
+echo.
+echo [1/2] Dang dung Docker containers...
+cd /d "${absWin}\docker\openclaw" 2>nul && (
+  docker compose down --volumes --remove-orphans 2>nul || docker-compose down --volumes --remove-orphans 2>nul
+  echo    OK: Containers da dung.
+) || echo    INFO: Khong tim thay docker compose.
+echo.
+echo [2/2] Xoa thu muc project...
+cd /d "%USERPROFILE%"
+if exist "${absWin}" (
+  rd /s /q "${absWin}"
+  echo    OK: Da xoa ${absWin}
+)
+echo.
+echo ============================================================
+echo   Go cai hoan tat! De cai lai: npx create-openclaw-bot@latest
+echo ============================================================
+pause
+endlocal
+`
+      };
+    }
+
+    // ── VPS / PM2 .sh ─────────────────────────────────────────────────────────
+    if (os === 'vps') {
+      return {
+        name: 'uninstall-openclaw-vps.sh',
+        content: `#!/usr/bin/env bash
+# ====== OpenClaw Uninstaller — VPS / Ubuntu Server (PM2) ======
+set -e
+PROJECT_DIR="${absUnix}"
+APP_NAME="${botName}"
+
+echo ""
+echo "============================================================"
+echo "  OpenClaw Uninstaller — VPS / Ubuntu Server"
+echo "  Project: $PROJECT_DIR"
+echo "  PM2 app: $APP_NAME"
+echo "============================================================"
+echo ""
+read -rp "Type YES to confirm full removal: " CONFIRM
+if [ "$CONFIRM" != "YES" ]; then echo "Cancelled."; exit 0; fi
+
+echo "[1/5] Stopping PM2 processes..."
+if command -v pm2 &>/dev/null; then
+  pm2 delete "$APP_NAME" "$APP_NAME-9router" "$APP_NAME-9router-sync" openclaw openclaw-multibot 2>/dev/null || true
+  pm2 save --force 2>/dev/null || true
+fi
+
+echo "[2/5] Killing leftover processes on ports 18791 / 20128..."
+for port in 18791 20128; do
+  pid=$(lsof -ti tcp:\$port 2>/dev/null || true)
+  [ -n "\$pid" ] && kill -9 \$pid 2>/dev/null || true
+done
+
+echo "[3/5] Uninstalling npm packages..."
+npm uninstall -g openclaw 9router pm2 grammy @grammyjs/runner @grammyjs/transformer-throttler @buape/carbon @larksuiteoapi/node-sdk @slack/web-api 2>/dev/null || true
+
+echo "[4/5] Removing project directory..."
+[ -d "\$PROJECT_DIR" ] && rm -rf "\$PROJECT_DIR" && echo "   OK: Deleted \$PROJECT_DIR" || echo "   INFO: Not found."
+
+echo "[5/5] Checking home-level .9router / .openclaw..."
+for dir in "\$HOME/.9router" "\$HOME/.openclaw"; do
+  if [ -d "\$dir" ]; then
+    read -rp "Delete \$dir ? [YES/no]: " CLEAN
+    [ "\$CLEAN" = "YES" ] && rm -rf "\$dir" && echo "   OK: Deleted \$dir" || echo "   Kept: \$dir"
+  fi
+done
+
+echo ""
+echo "============================================================"
+echo "  Uninstall complete! Re-install: npx create-openclaw-bot@latest"
+echo "============================================================"
+`
+      };
+    }
+
+    // ── macOS / Linux Desktop .sh ──────────────────────────────────────────────
+    if (os === 'linux' || os === 'linux-desktop') {
+      const label = os === 'linux' ? 'macOS' : 'Linux Desktop';
+      return {
+        name: 'uninstall-openclaw.sh',
+        content: `#!/usr/bin/env bash
+# ====== OpenClaw Uninstaller — ${label} (Native) ======
+set -e
+PROJECT_DIR="${absUnix}"
+
+echo ""
+echo "============================================================"
+echo "  OpenClaw Uninstaller — ${label} Native"
+echo "  Project: $PROJECT_DIR"
+echo "============================================================"
+echo ""
+read -rp "Type YES to confirm full removal: " CONFIRM
+if [ "$CONFIRM" != "YES" ]; then echo "Cancelled."; exit 0; fi
+
+echo "[1/4] Stopping openclaw and 9router processes..."
+pkill -f "openclaw gateway run" 2>/dev/null || true
+pkill -f "9router.*20128"       2>/dev/null || true
+pkill -f "9router-smart-route"  2>/dev/null || true
+pkill -f "\$PROJECT_DIR"         2>/dev/null || true
+for port in 18791 20128; do
+  pid=$(lsof -ti tcp:\$port 2>/dev/null || true)
+  [ -n "\$pid" ] && kill -9 \$pid 2>/dev/null || true
+done
+
+echo "[2/4] Uninstalling npm packages..."
+npm uninstall -g openclaw 9router grammy @grammyjs/runner @grammyjs/transformer-throttler @buape/carbon @larksuiteoapi/node-sdk @slack/web-api 2>/dev/null || true
+sudo npm uninstall -g openclaw 9router 2>/dev/null || true
+
+echo "[3/4] Removing project directory..."
+[ -d "\$PROJECT_DIR" ] && rm -rf "\$PROJECT_DIR" && echo "   OK: Deleted \$PROJECT_DIR" || echo "   INFO: Not found."
+
+echo "[4/4] Checking home-level .9router / .openclaw..."
+for dir in "\$HOME/.9router" "\$HOME/.openclaw"; do
+  if [ -d "\$dir" ]; then
+    read -rp "Delete \$dir ? [YES/no]: " CLEAN
+    [ "\$CLEAN" = "YES" ] && rm -rf "\$dir" && echo "   OK: Deleted \$dir" || echo "   Kept: \$dir"
+  fi
+done
+
+echo ""
+echo "============================================================"
+echo "  Uninstall complete! Re-install: run setup script or npx create-openclaw-bot"
+echo "============================================================"
+`
+      };
+    }
+
+    // ── Docker macOS/Linux/VPS .sh ─────────────────────────────────────────────
+    if (isDocker) {
+      return {
+        name: 'uninstall-openclaw-docker.sh',
+        content: `#!/usr/bin/env bash
+# ====== OpenClaw Uninstaller — Docker ======
+set -e
+PROJECT_DIR="${absUnix}"
+DOCKER_DIR="$PROJECT_DIR/docker/openclaw"
+
+echo ""
+echo "============================================================"
+echo "  OpenClaw Uninstaller — Docker"
+echo "  Project: $PROJECT_DIR"
+echo "============================================================"
+echo ""
+read -rp "Type YES to confirm full removal: " CONFIRM
+if [ "$CONFIRM" != "YES" ]; then echo "Cancelled."; exit 0; fi
+
+echo "[1/3] Stopping Docker containers and removing volumes..."
+if [ -d "\$DOCKER_DIR" ] && command -v docker &>/dev/null; then
+  cd "\$DOCKER_DIR"
+  docker compose down --volumes --remove-orphans 2>/dev/null || docker-compose down --volumes --remove-orphans 2>/dev/null || true
+fi
+
+echo "[2/3] Removing project directory..."
+[ -d "\$PROJECT_DIR" ] && rm -rf "\$PROJECT_DIR" && echo "   OK: Deleted \$PROJECT_DIR" || echo "   INFO: Not found."
+
+echo "[3/3] Checking home-level .openclaw..."
+if [ -d "\$HOME/.openclaw" ]; then
+  read -rp "Delete \$HOME/.openclaw? [YES/no]: " CLEAN
+  [ "\$CLEAN" = "YES" ] && rm -rf "\$HOME/.openclaw" && echo "   OK." || echo "   Kept."
+fi
+
+echo ""
+echo "============================================================"
+echo "  Uninstall complete! Re-install: npx create-openclaw-bot@latest"
+echo "============================================================"
+`
+      };
+    }
+
+    return null;
+  }
+
+  function _triggerDownload(filename, content, mimeType) {
+    const blob = new Blob([content], { type: mimeType || 'text/plain;charset=utf-8' });
+    const url = URL.createObjectURL(blob);
+    const a = document.createElement('a');
+    a.href = url; a.download = filename; a.style.display = 'none';
+    document.body.appendChild(a); a.click();
+    setTimeout(() => { document.body.removeChild(a); URL.revokeObjectURL(url); }, 1500);
+  }
+
   window.downloadNativeScript = function() {
     // Regenerate output first so the downloaded script always matches the latest wizard state.
     generateOutput();
     const script = window._nativeScript;
     if (!script) return;
-    const blob = new Blob([script.content], { type: 'text/plain;charset=utf-8' });
-    const url = URL.createObjectURL(blob);
-    const a = document.createElement('a');
-    a.href = url; a.download = script.name; a.style.display = 'none';
-    document.body.appendChild(a); a.click();
-    setTimeout(() => { document.body.removeChild(a); URL.revokeObjectURL(url); }, 1000);
+    _triggerDownload(script.name, script.content, 'text/plain;charset=utf-8');
+    // Also download the matching uninstall script right after
+    const uninstall = generateUninstallScript();
+    if (uninstall) {
+      setTimeout(() => _triggerDownload(uninstall.name, uninstall.content, 'text/plain;charset=utf-8'), 600);
+    }
   };
 
   // ========== Generate Windows Auto Setup .bat ==========
@@ -4244,10 +4867,23 @@ New-Item -ItemType Directory -Force -Path "$projectDir" | Out-Null
     // [3/4] Docker build
     ps += `# [3/4] Docker build
 Write-Host "[3/4] ${isVi ? 'Build Docker image (co the mat vai phut)...' : 'Building Docker image (may take a few minutes)...'}" -ForegroundColor Yellow
+\$dockerExe = \$null
+try { \$dockerExe = (Get-Command 'docker' -ErrorAction Stop).Source } catch {}
+if (-not \$dockerExe) {
+    Write-Host "  ${isVi ? 'Khong tim thay Docker. Tai Docker Desktop tai: https://www.docker.com/products/docker-desktop' : 'Docker not found. Download Docker Desktop at: https://www.docker.com/products/docker-desktop'}" -ForegroundColor Red
+    Read-Host "Press Enter to exit"
+    exit 1
+}
+& \$dockerExe info 2>&1 | Out-Null
+if (\$LASTEXITCODE -ne 0) {
+    Write-Host "  ${isVi ? 'Docker Desktop chua chay. Mo Docker Desktop roi thu lai.' : 'Docker Desktop is not running. Start Docker Desktop, then re-run this script.'}" -ForegroundColor Red
+    Read-Host "Press Enter to exit"
+    exit 1
+}
 Set-Location "$projectDir\\docker\\openclaw"
-docker compose build
-if ($LASTEXITCODE -ne 0) {
-    Write-Host "  ❌ ${isVi ? 'Docker build that bai. Docker Desktop da chay chua?' : 'Docker build failed. Is Docker Desktop running?'}" -ForegroundColor Red
+& \$dockerExe compose build
+if (\$LASTEXITCODE -ne 0) {
+    Write-Host "  ❌ ${isVi ? 'Docker build that bai. Xem log phia tren.' : 'Docker build failed. Check the log above.'}" -ForegroundColor Red
     Read-Host "${isVi ? 'Nhan Enter de thoat' : 'Press Enter to exit'}"
     exit 1
 }
@@ -4258,7 +4894,7 @@ Write-Host "  ✅ ${isVi ? 'Docker image da build' : 'Docker image built'}" -For
     // [4/4] Docker up
     ps += `# [4/4] Start bot
 Write-Host "[4/4] ${isVi ? 'Khoi dong bot...' : 'Starting bot...'}" -ForegroundColor Yellow
-docker compose up -d
+& \$dockerExe compose up -d
 Write-Host "  ✅ ${isVi ? 'Bot dang chay!' : 'Bot is running!'}" -ForegroundColor Green
 
 Write-Host ""
@@ -4270,8 +4906,8 @@ Write-Host "  🎉 ${isVi ? 'Setup hoan tat!' : 'Setup complete!'}" -ForegroundC
     if (is9Router) {
       ps += `Write-Host "  ${isVi ? 'Mo http://localhost:30128/dashboard de login OAuth' : 'Open http://localhost:30128/dashboard to login OAuth'}" -ForegroundColor White\n`;
     }
-    if (state.channel === 'zalo-personal') {
-      ps += `Write-Host "  ${isVi ? 'Chay: docker compose exec -it ai-bot openclaw channels login --channel zalouser --verbose' : 'Run: docker compose exec -it ai-bot openclaw channels login --channel zalouser --verbose'}" -ForegroundColor White\n`;
+    if (state.channel === 'zalo-personal' || state.channel === 'telegram+zalo-personal') {
+      ps += `Write-Host "  ${isVi ? 'Chay: docker compose exec -it ai-bot openclaw channels login --channel zalouser --instance default --verbose' : 'Run: docker compose exec -it ai-bot openclaw channels login --channel zalouser --instance default --verbose'}" -ForegroundColor White\n`;
       ps += `Write-Host "  ${isVi ? 'QR se nam tai /tmp/openclaw/openclaw-zalouser-qr-default.png' : 'QR will be written to /tmp/openclaw/openclaw-zalouser-qr-default.png'}" -ForegroundColor DarkGray\n`;
       ps += `Write-Host "  ${isVi ? 'Copy QR ra ngoai: docker compose cp ai-bot:/tmp/openclaw/openclaw-zalouser-qr-default.png ./zalo-login-qr.png' : 'Copy the QR out: docker compose cp ai-bot:/tmp/openclaw/openclaw-zalouser-qr-default.png ./zalo-login-qr.png'}" -ForegroundColor DarkGray\n`;
     }
@@ -4452,7 +5088,7 @@ echo ""
 
   function generateZaloOnboardGuide() {
     const lang = document.getElementById('cfg-language')?.value || 'vi';
-    setOutput('out-zalo-onboard-cmd', `docker compose exec -it ai-bot openclaw channels login --channel zalouser --verbose`);
+    setOutput('out-zalo-onboard-cmd', `docker compose exec -it ai-bot openclaw channels login --channel zalouser --instance default --verbose`);
 
     if (lang === 'vi') {
       setOutput('out-zalo-onboard-guide', `┌─────────────────────────────────────────────────────┐
@@ -4524,6 +5160,18 @@ echo ""
       zip.file(path, content);
     });
 
+    // Include the native setup script (if native mode)
+    const nativeScript = window._nativeScript;
+    if (nativeScript && nativeScript.name && nativeScript.content) {
+      zip.file(nativeScript.name, nativeScript.content);
+    }
+
+    // Include the matching uninstall script
+    const uninstall = generateUninstallScript();
+    if (uninstall && uninstall.name && uninstall.content) {
+      zip.file(uninstall.name, uninstall.content);
+    }
+
     const blob = await zip.generateAsync({ type: 'blob' });
     const url = URL.createObjectURL(blob);
     const a = document.createElement('a');