create-openclaw-bot 5.3.3 → 5.3.4

package/CHANGELOG.md

@@ -1,6 +1,18 @@
 # Changelog (English)
 
 
+## [5.3.4] — 2026-04-12
+
+### 🐛 Windows Native — Gateway & Workspace Stability
+
+- **Fix: Gateway terminal auto-closing** — `call openclaw gateway run` was blocking the setup terminal indefinitely; closing the window killed the gateway process. The gateway is now launched in a **dedicated, visible CMD window** via a PS1 background launcher (same pattern as 9Router), so the setup terminal closes cleanly while the gateway keeps running.
+- **Fix: `call` missing from `openclaw gateway stop`** — The gateway stop command before relaunch was missing the `call` keyword, which could prevent the bat script from returning control after the stop completes. Added `call openclaw gateway stop 2>nul` in all affected paths.
+- **Fix: Workspace naming** — Single-bot deployments previously used a generic `.openclaw/workspace` path. All agents (single-bot and multi-bot) now use a named directory matching their agent ID: `.openclaw/workspace-{agentId}` (e.g. `workspace-williams`, `workspace-luna`). This prevents workspace collisions and aligns the folder structure with the `agents/{agentId}` directory convention.
+- **Improve: TOOLS.md enriched for all bots** — The generated `TOOLS.md` now includes both the custom skills & conventions section AND a "Local Notes" template section adapted from the OpenClaw workspace default, giving users a clear starting point for documenting environment-specific config.
+- **Improve: Zalo bot AGENTS.md now includes security rules** — The generated `AGENTS.md` for Zalo Personal bots (Luna-pattern) now appends the same `🔐 Security Rules — MANDATORY` block that Telegram bots receive (file-system boundaries, credential hygiene, crypto wallet protection, Docker mount rules).
+- **Improve: Zalo bot TOOLS.md added** — Zalo bot workspaces now receive a `TOOLS.md` file with the same skills list and conventions structure as Telegram bots.
+
+
 ## [5.3.3] — 2026-04-11
 
 ### 🧹 Automated Uninstall Scripts

package/CHANGELOG.vi.md

@@ -1,6 +1,18 @@
 # Changelog (Tiếng Việt)
 
 
+## [5.3.4] — 2026-04-12
+
+### 🐛 Windows Native — Ổn Định Gateway & Workspace
+
+- **Sửa: Terminal tự đóng sau khi khởi động gateway** — `call openclaw gateway run` chặn terminal vô thời hạn; đóng cửa sổ khiến gateway chết theo. Gateway giờ được mở trong **cửa sổ CMD riêng biệt** qua PS1 launcher (giống 9Router), setup terminal đóng gọn mà gateway vẫn chạy độc lập.
+- **Sửa: Thiếu `call` trước `openclaw gateway stop`** — Lệnh dừng gateway trước khi khởi động lại thiếu từ khóa `call`, có thể khiến bat script không trả quyền điều hành sau khi stop. Đã thêm `call openclaw gateway stop 2>nul` cho tất cả luồng.
+- **Sửa: Tên workspace** — Single-bot deployment trước đây dùng chung `.openclaw/workspace`. Giờ tất cả agent đều có thư mục riêng theo tên agent ID: `.openclaw/workspace-{agentId}` (ví dụ `workspace-williams`, `workspace-luna`). Tránh xung đột và đồng bộ với cấu trúc `agents/{agentId}`.
+- **Cải tiến: TOOLS.md đầy đủ hơn cho mọi bot** — File `TOOLS.md` được tạo ra giờ bao gồm cả mục danh sách skills + quy ước VÀ section "Ghi chú thiết lập của bạn" theo chuẩn OpenClaw, giúp người dùng có điểm xuất phát rõ ràng để ghi lại cấu hình môi trường riêng.
+- **Cải tiến: AGENTS.md cho Zalo bot bổ sung quy tắc bảo mật** — `AGENTS.md` sinh ra cho bot Zalo Personal (kiểu Luna) giờ có thêm block `🔐 Quy Tắc Bảo Mật — BẮT BUỘC` giống hệt bot Telegram (giới hạn file-system, bảo vệ credentials, ví crypto, mount Docker).
+- **Cải tiến: Thêm TOOLS.md cho Zalo bot** — Workspace của bot Zalo giờ cũng có file `TOOLS.md` cùng cấu trúc với bot Telegram.
+
+
 ## [5.3.3] — 2026-04-11
 
 ### 🧹 Tự Động Tạo Script Gỡ Cài Đặt

package/cli.js

@@ -451,31 +451,57 @@ const sync = async () => {
     let db = {};
     try { db = JSON.parse(fs.readFileSync(p, 'utf8')); } catch(e) {}
     if (!db.combos) db.combos = [];
-    const removeSmartRoute = () => {
+    const resCombo = await fetch(ROUTER + '/api/combos').catch(() => null);
+    let memoryCombos = [];
+    if (resCombo && resCombo.ok) {
+      const cData = await resCombo.json();
+      memoryCombos = cData.combos || [];
+    }
+    const removeSmartRoute = async () => {
       const next = db.combos.filter(x => x.id !== 'smart-route');
       if (next.length !== db.combos.length) {
         db.combos = next;
         fs.writeFileSync(p, JSON.stringify(db, null, 2));
         console.log('[sync-combo] Removed smart-route (no active providers)');
       }
+      if (memoryCombos.find(x => x.id === 'smart-route')) {
+        await fetch(ROUTER + '/api/combos/smart-route', { method: 'DELETE' }).catch(()=>{});
+        console.log('[sync-combo] Removed smart-route from 9Router memory');
+      }
     };
-    if (!a.length) { removeSmartRoute(); return; }
+    if (!a.length) { await removeSmartRoute(); return; }
     const PREF = ['openai','anthropic','claude-code','codex','cursor','github','cline','kimi','minimax','deepseek','glm','alicode','xai','mistral','kilo','kiro','iflow','qwen','gemini-cli','ollama'];
     a.sort((x, y) => (PREF.indexOf(x) === -1 ? 99 : PREF.indexOf(x)) - (PREF.indexOf(y) === -1 ? 99 : PREF.indexOf(y)));
     const m = a.flatMap(pv => PM[pv] || []);
-    if (!m.length) { removeSmartRoute(); return; }
+    if (!m.length) { await removeSmartRoute(); return; }
     const c = { id: 'smart-route', name: 'smart-route', alias: 'smart-route', models: m };
     const i = db.combos.findIndex(x => x.id === 'smart-route');
+    let dbUpdated = false;
     if (i >= 0) {
       if (JSON.stringify(db.combos[i].models) !== JSON.stringify(c.models)) {
         db.combos[i] = c;
         fs.writeFileSync(p, JSON.stringify(db, null, 2));
-        console.log('[sync-combo] Updated smart-route: ' + c.models.length + ' models from: ' + a.join(','));
+        dbUpdated = true;
       }
     } else {
       db.combos.push(c);
       fs.writeFileSync(p, JSON.stringify(db, null, 2));
-      console.log('[sync-combo] Created smart-route: ' + c.models.length + ' models from: ' + a.join(','));
+      dbUpdated = true;
+    }
+    const inMemory = memoryCombos.find(x => x.id === 'smart-route');
+    let memUpdated = false;
+    if (inMemory) {
+      if (JSON.stringify(inMemory.models) !== JSON.stringify(c.models)) {
+        await fetch(ROUTER + '/api/combos/smart-route', { method: 'DELETE' }).catch(()=>{});
+        await fetch(ROUTER + '/api/combos', { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify(c) }).catch(()=>{});
+        memUpdated = true;
+      }
+    } else {
+      await fetch(ROUTER + '/api/combos', { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify(c) }).catch(()=>{});
+      memUpdated = true;
+    }
+    if (dbUpdated || memUpdated) {
+      console.log('[sync-combo] Synced smart-route (Memory+Disk): ' + c.models.length + ' models from: ' + a.join(','));
     }
   } catch(e) { console.log('[sync-combo] Error:', e.message); }
 };
@@ -578,7 +604,9 @@ function build9RouterComposeEntrypointScript(syncScriptBase64) {
 }
 
 async function writeNative9RouterSyncScript(projectDir) {
-  const syncScriptPath = path.join(projectDir, '.openclaw', '9router-smart-route-sync.js');
+  // Write to .9router/ (DATA_DIR) so 9router's own data dir has the sync helper,
+  // keeping .openclaw/ focused on openclaw configs only.
+  const syncScriptPath = path.join(projectDir, '.9router', '9router-smart-route-sync.js');
   await fs.ensureDir(path.dirname(syncScriptPath));
   await fs.writeFile(syncScriptPath, build9RouterSmartRouteSyncScript(path.join(getProject9RouterDataDir(projectDir), 'db.json')));
   return syncScriptPath;
@@ -2593,7 +2621,7 @@ if exist "%TARGET%" (
 echo.
 echo [4/4] Xoa thu muc .9router va .openclaw trong Home (neu co)...
 if exist "%USERPROFILE%\\.9router" (
-  set /p CLEAN_HOME=Xoa ca %USERPROFILE%\\.9router? (YES/no): 
+  set /p CLEAN_HOME=Xoa ca %USERPROFILE%\\.9router? [YES/no]: 
   if /i "%CLEAN_HOME%"=="YES" rd /s /q "%USERPROFILE%\\.9router" >nul 2>&1
 )
 echo.
@@ -2667,7 +2695,7 @@ echo ""
 echo "[4/4] Checking for home-level .9router / .openclaw..."
 for dir in "$HOME/.9router" "$HOME/.openclaw"; do
   if [ -d "$dir" ]; then
-    read -rp "Delete $dir ? (YES/no): " CLEAN
+    read -rp "Delete $dir ? [YES/no]: " CLEAN
     if [ "$CLEAN" = "YES" ]; then
       rm -rf "$dir"
       echo "   OK: Deleted $dir"
@@ -2757,7 +2785,7 @@ echo ""
 echo "[5/5] Checking for home-level .9router / .openclaw..."
 for dir in "$HOME/.9router" "$HOME/.openclaw"; do
   if [ -d "$dir" ]; then
-    read -rp "Delete $dir ? (YES/no): " CLEAN
+    read -rp "Delete $dir ? [YES/no]: " CLEAN
     if [ "$CLEAN" = "YES" ]; then
       rm -rf "$dir"
       echo "   OK: Deleted $dir"
@@ -2827,7 +2855,7 @@ fi
 echo ""
 echo "[3/3] Checking for home-level .openclaw..."
 if [ -d "$HOME/.openclaw" ]; then
-  read -rp "Delete $HOME/.openclaw? (YES/no): " CLEAN
+  read -rp "Delete $HOME/.openclaw? [YES/no]: " CLEAN
   if [ "$CLEAN" = "YES" ]; then
     rm -rf "$HOME/.openclaw"
     echo "   OK: Deleted $HOME/.openclaw"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-openclaw-bot",
-  "version": "5.3.3",
+  "version": "5.3.4",
   "description": "Interactive CLI installer for OpenClaw Bot",
   "main": "cli.js",
   "bin": {

package/patch-tray.js

@@ -0,0 +1,7 @@
+const fs = require('fs');
+let b = fs.readFileSync('C:/Users/Admin/Downloads/setup-openclaw-win.bat', 'utf8');
+const before = '9router -n -H 0.0.0.0 -p 20128 --skip-update"';
+const after = '9router -n -H 0.0.0.0 -p 20128 --skip-update --tray"';
+b = b.split(before).join(after);
+fs.writeFileSync('C:/Users/Admin/Downloads/setup-openclaw-win.bat', b);
+console.log('Fixed! Has --tray:', b.includes('--tray'));

package/setup.js

@@ -1933,7 +1933,7 @@ Write-Host "Chrome se tu dong bat Debug Mode moi khi ban dang nhap Windows (dela
         },
         list: [{
           id: agentId,
-          workspace: 'workspace',
+          workspace: `.openclaw/workspace-${agentId}`,
           agentDir: `agents/${agentId}/agent`,
           model: { primary: state.config.model, fallbacks: [] },
         }],
@@ -2050,7 +2050,7 @@ Write-Host "Chrome se tu dong bat Debug Mode moi khi ban dang nhap Windows (dela
       clawConfig.agents.list = multiBotAgentMetas.map((meta) => ({
         id: meta.agentId,
         name: meta.name,
-        workspace: meta.workspaceDir,
+        workspace: '.openclaw/' + meta.workspaceDir,
         agentDir: `agents/${meta.agentId}/agent`,
         model: { primary: state.config.model, fallbacks: [] },
       }));
@@ -3022,7 +3022,7 @@ fi
         botConfig.agents.defaults.model = { primary: state.config.model, fallbacks: [] };
         botConfig.agents.list = [{
           id: botAgentId,
-          workspace: 'workspace',
+          workspace: `.openclaw/workspace-${botAgentId}`,
           agentDir: `agents/${botAgentId}/agent`,
           model: { primary: state.config.model, fallbacks: [] },
         }];
@@ -3240,6 +3240,7 @@ I am **${botName}**. When asked my name, I answer: _"I'm ${botName}"_.`;
       .filter((skill) => skill && skill.id !== 'scheduler' && skill.slug && skill.slug !== 'browser-automation');
     const selectedModel = (state.config.model || 'ollama/gemma4:e2b').replace('ollama/', '');
     const isMultiBot = state.botCount > 1 && state.channel === 'telegram';
+    const isComboChannel = state.channel === 'telegram+zalo-personal';
     const projectDir = state.config.projectPath || '.';
     const todayStamp = new Date().toISOString().slice(0, 10);
 
@@ -3282,7 +3283,12 @@ const sync=async()=>{try{const res=await fetch(ROUTER+'/api/providers');if(!res.
     function providerLines(arr, shell) {
       if (is9Router) {
         if (shell === 'bat') {
+          arr.push(':: Dung 9Router dang chay (neu co) - tranh loi EBUSY khi npm cap nhat file dang bi lock');
+          arr.push('wmic process where "Name=\'node.exe\' and CommandLine like \'%%9router%%\'" delete >nul 2>&1');
+          arr.push('wmic process where "Name=\'cmd.exe\' and CommandLine like \'%%9router%%\'" delete >nul 2>&1');
+          arr.push('timeout /t 3 /nobreak >nul');
           arr.push('call npm install -g 9router || goto :fail');
+          arr.push('echo [OK] 9Router da duoc cai dat thanh cong.');
           // Pre-create DATA_DIR and seed db.json with requireLogin:false BEFORE starting 9router.
           // If db.json is missing when 9router boots, it defaults to ~/.9router and requireLogin:true,
           // blocking the dashboard. Must be done BEFORE the `start` command below.
@@ -3308,9 +3314,20 @@ const sync=async()=>{try{const res=await fetch(ROUTER+'/api/providers');if(!res.
           arr.push('echo(}');
           arr.push(')');
           arr.push(')');
-          // NOTE: -l (stdin listen mode) intentionally omitted — causes hangs in non-TTY cmd windows.
-          // DATA_DIR passed via env so 9router reads from the project-local data folder.
-          arr.push('start "9Router Dashboard" /min cmd /c "set DATA_DIR=%DATA_DIR%&& 9router -n -H 0.0.0.0 -p 20128 --skip-update"');
+          // Launch 9Router as a fully detached process via PowerShell Start-Process -WindowStyle Hidden.
+          // Using `start ... cmd /c "...--tray"` caused 9Router to die when the CMD window was closed
+          // because cmd /c is a child of the started CMD, which is killed when that window closes.
+          // Start-Process with WindowStyle Hidden creates a truly independent process that survives
+          // even if all visible terminal windows are closed.
+          // Write a temp .ps1 launcher to avoid CMD->PS quoting issues.
+          // Start-Process cannot run .cmd files directly — cmd.exe must be the FilePath.
+          arr.push('echo Khoi dong 9Router (background)...');
+          arr.push('echo $env:DATA_DIR = \'%DATA_DIR%\' > "%TEMP%\\oc-start9r.ps1"');
+          arr.push('echo $b = Join-Path $env:APPDATA \'npm\\9router.cmd\' >> "%TEMP%\\oc-start9r.ps1"');
+          arr.push('echo if ^(-not ^(Test-Path $b^)^) { $b = Join-Path $env:APPDATA \'npm\\9router\' } >> "%TEMP%\\oc-start9r.ps1"');
+          arr.push(`echo Start-Process 'cmd.exe' -WindowStyle Hidden -WorkingDirectory '${projectDir}' -ArgumentList ^('/c "' + $b + '" -n -H 0.0.0.0 -p 20128 --skip-update'^) >> "%TEMP%\\oc-start9r.ps1"`);
+          arr.push('powershell -NoProfile -ExecutionPolicy Bypass -File "%TEMP%\\oc-start9r.ps1"');
+          arr.push('del "%TEMP%\\oc-start9r.ps1" >nul 2>&1');
           arr.push('timeout /t 8 /nobreak >nul');
         } else {
           arr.push('npm install -g 9router');
@@ -3319,8 +3336,8 @@ const sync=async()=>{try{const res=await fetch(ROUTER+'/api/providers');if(!res.
           arr.push('if [ ! -f ".9router/db.json" ]; then cat > ".9router/db.json" << \'DBJSON\'\n{\n  "providerConnections": [],\n  "providerNodes": [],\n  "proxyPools": [],\n  "modelAliases": {},\n  "mitmAlias": {},\n  "combos": [],\n  "apiKeys": [],\n  "settings": {\n    "requireLogin": false,\n    "cloudEnabled": false,\n    "tunnelEnabled": false,\n    "comboStrategy": "fallback",\n    "mitmRouterBaseUrl": "http://localhost:20128"\n  },\n  "pricing": {}\n}\nDBJSON\nfi');
           arr.push('NINE_ROUTER_BIN="$(command -v 9router)"');
           // NOTE: -l (stdin listen mode) intentionally omitted — causes hangs in non-TTY environments
-          arr.push('nohup env PORT=20128 HOSTNAME=0.0.0.0 DATA_DIR="$PWD/.9router" "$NINE_ROUTER_BIN" -n -H 0.0.0.0 -p 20128 --skip-update >/tmp/9router.log 2>&1 &');
-          arr.push('nohup env DATA_DIR="$PWD/.9router" node ./.openclaw/9router-smart-route-sync.js >/tmp/9router-sync.log 2>&1 &');
+          arr.push('nohup env PORT=20128 HOSTNAME=0.0.0.0 DATA_DIR="$PWD/.9router" "$NINE_ROUTER_BIN" -n -H 0.0.0.0 -p 20128 --skip-update > /tmp/9router.log 2>&1 &');
+          arr.push('nohup env DATA_DIR="$PWD/.9router" node ./.9router/9router-smart-route-sync.js > /tmp/9router-sync.log 2>&1 &');
           arr.push('sleep 5');
         }
       } else if (isOllama) {
@@ -3437,7 +3454,7 @@ const sync=async()=>{try{const res=await fetch(ROUTER+'/api/providers');if(!res.
           list: multiBotAgentMetas.map((meta) => ({
             id: meta.agentId,
             name: meta.name,
-            workspace: meta.workspaceDir,
+            workspace: '.openclaw/' + meta.workspaceDir,
             agentDir: `agents/${meta.agentId}/agent`,
             model: { primary: state.config.model, fallbacks: [] },
           })),
@@ -3504,7 +3521,7 @@ const sync=async()=>{try{const res=await fetch(ROUTER+'/api/providers');if(!res.
         '.openclaw/auth-profiles.json': sharedNativeAuthProfilesContent(),
         'TELEGRAM-POST-INSTALL.md': buildTelegramPostInstallChecklist(),
       };
-      if (is9Router) files['.openclaw/9router-smart-route-sync.js'] = native9RouterSyncScriptContent();
+      if (is9Router) files['.9router/9router-smart-route-sync.js'] = native9RouterSyncScriptContent();
       const teamMd = isVi
         ? `# Doi Bot\n\n${multiBotAgentMetas.map((meta) => `## ${meta.name}\n- Vai tro: ${meta.desc}\n- Agent ID: \`${meta.agentId}\`\n- Telegram accountId: \`${meta.accountId}\`\n- Slash command: ${meta.slashCmd || '_(chua co)_'}\n- Tinh cach: ${meta.persona || '_(khong ghi ro)_'}`).join('\n\n')}\n\n## Quy uoc phoi hop\n- Tat ca bot trong doi biet ro vai tro cua nhau.\n- Neu user bao ban hoi mot bot khac, hay dung agent-to-agent noi bo thay vi doi Telegram chuyen tin cua bot.\n- Bot mo loi chi noi 1 cau ngan, sau do chuyen turn noi bo cho bot dich.\n- Bot dich phai tra loi cong khai bang chinh Telegram account cua minh trong cung chat/thread hien tai.\n- Neu can fallback, chi bot mo loi moi duoc phep tom tat thay.`
         : `# Bot Team\n\n${multiBotAgentMetas.map((meta) => `## ${meta.name}\n- Role: ${meta.desc}\n- Agent ID: \`${meta.agentId}\`\n- Telegram accountId: \`${meta.accountId}\`\n- Slash command: ${meta.slashCmd || '_(not set)_'}\n- Persona: ${meta.persona || '_(not specified)_'}`).join('\n\n')}\n\n## Coordination Rules\n- Every bot knows the full roster.\n- If the user asks you to consult another bot, use internal agent-to-agent handoff instead of waiting for Telegram bot-to-bot delivery.\n- The caller bot only sends one short opener, then hands off internally.\n- The target bot must publish the real answer with its own Telegram account in the same chat/thread.\n- If a fallback is needed, only the caller bot may summarize on behalf of the target.`;
@@ -3598,7 +3615,7 @@ const sync=async()=>{try{const res=await fetch(ROUTER+'/api/providers');if(!res.
           },
           list: [{
             id: agentId,
-            workspace: 'workspace',
+            workspace: `.openclaw/workspace-${agentId}`,
             agentDir: `agents/${agentId}/agent`,
             model: { primary: actualModel }
           }],
@@ -3870,6 +3887,7 @@ You are **${botName}**, ${botDesc.toLowerCase()}.
 - Prefer English unless user uses another language
 - When asked your name: _"I'm ${botName}"_
 - Never fabricate information`;
+      const _secRules = state.config.securityRules || DEFAULT_SECURITY_RULES[isVi ? 'vi' : 'en'];
       const extraAgentsMd = isVi
         ? `\n\n## Khi nao nen tra loi\n- Trong group, chi tra loi khi tin nhan co alias cua ban: ${ownAliases.map((alias) => `\`${alias}\``).join(', ')} hoac username Telegram cua ban.\n- Neu tin nhan khong goi ban, hay im lang hoan toan.\n- Neu tin nhan chi goi ro bot khac ${otherBotNames.length ? otherBotNames.map((name) => `\`${name}\``).join(', ') : '`bot khac`'} thi khong cuop loi.\n- Khi da biet user dang goi ban, hay tha reaction co dinh \`👍\` truoc roi moi tra loi bang text. Khong dung emoji khac.\n- Khi can phoi hop noi bo, dung dung agent id ky thuat trong \`TEAM.md\`, khong dung ten hien thi.\n- Khi hoi ve vai tro cac bot, dung \`TEAM.md\` lam nguon su that.`
         : `\n\n## When To Reply\n- In group chats, only reply when the message contains one of your aliases: ${ownAliases.map((alias) => `\`${alias}\``).join(', ')} or your Telegram username.\n- If the message is not calling you, stay completely silent.\n- If the message is clearly calling another bot such as ${otherBotNames.length ? otherBotNames.map((name) => `\`${name}\``).join(', ') : '`another bot`'}, do not hijack it.\n- Once you know the user is calling you, add the fixed reaction \`👍\` first, then send the text reply. Do not use any other reaction emoji.\n- When you need internal coordination, use the exact technical agent id from \`TEAM.md\`, not the display name.\n- Use \`TEAM.md\` as the source of truth for team roles.`;
@@ -3898,7 +3916,7 @@ ${selectedSkillNames.length ? selectedSkillNames.join('\n') : '- _(Chưa có ski
 ## Quy ước
 - Ưu tiên dùng tool thay vì đoán
 - Browser: dùng khi user yêu cầu thao tác web
-- Memory: cập nhật khi biết thông tin quan trọng`
+- Memory: cập nhật khi biết thông tin quan trọng\n\n## Ghi chú thiết lập của bạn\n\nGhi lại cấu hình riêng của môi trường bạn, ví dụ:\n- Tên thiết bị, camera, SSH hosts\n- Giọng nói ưa thích (TTS)\n- Alias và shortcut\n\n---\n\nThêm ghi chú nào giúp ích cho công việc của bạn.`
         : `# Tool Usage Guide
 
 ## Installed Skills
@@ -3907,7 +3925,7 @@ ${selectedSkillNames.length ? selectedSkillNames.join('\n') : '- _(No skills ins
 ## Conventions
 - Prefer tools over guessing
 - Use Browser for explicit web tasks
-- Update Memory when important user info appears`;
+- Update Memory when important user info appears\n\n## Your Setup Notes\n\nRecord environment-specific config, e.g.:\n- Device names, cameras, SSH hosts\n- Preferred TTS voice\n- Aliases and shortcuts\n\n---\n\nAdd whatever helps you do your job.`;
       const memoryMd = isVi
         ? `# Bộ nhớ dài hạn
 
@@ -3920,7 +3938,7 @@ ${selectedSkillNames.length ? selectedSkillNames.join('\n') : '- _(No skills ins
       const files = {
         'IDENTITY.md': identityMd,
         'SOUL.md': soulMd,
-        'AGENTS.md': agentsMd + extraAgentsMd,
+        'AGENTS.md': agentsMd + extraAgentsMd + '\n\n' + _secRules,
         'TEAM.md': teamMd,
         'USER.md': userMd,
         'TOOLS.md': toolsMd,
@@ -3945,11 +3963,11 @@ ${selectedSkillNames.length ? selectedSkillNames.join('\n') : '- _(No skills ins
       files[`${base}/.openclaw/openclaw.json`] = botConfigContent(botIndex);
       files[`${base}/.openclaw/exec-approvals.json`] = botExecApprovalsContent(botIndex);
       files[`${base}/.openclaw/auth-profiles.json`] = botAuthProfilesContent(botIndex);
-      if (is9Router) files[`${base}/.openclaw/9router-smart-route-sync.js`] = native9RouterSyncScriptContent();
+      if (is9Router) files[`${base}/.9router/9router-smart-route-sync.js`] = native9RouterSyncScriptContent();
       files[`${base}/.openclaw/agents/${agentId}.yaml`] = botAgentYamlContent(botIndex);
       files[`${base}/.openclaw/agents/${agentId}/agent/auth-profiles.json`] = botAuthProfilesContent(botIndex);
       Object.entries(botWorkspaceFiles(botIndex)).forEach(([name, content]) => {
-        files[`${base}/.openclaw/workspace/${name}`] = content;
+        files[`${base}/.openclaw/workspace-${agentId}/${name}`] = content;
       });
       return files;
     }
@@ -3991,6 +4009,9 @@ ${selectedSkillNames.length ? selectedSkillNames.join('\n') : '- _(No skills ins
       return Object.fromEntries(Object.entries(files).map(([relPath, content]) => {
         const normalized = relPath.replace(/\\/g, '/');
         if (normalized === '.env') return ['%PROJECT_DIR%\\.env', content];
+        if (normalized.startsWith('.9router/')) {
+          return [`%DATA_DIR%\\${normalized.slice('.9router/'.length).replace(/\//g, '\\')}`, content];
+        }
         if (normalized.startsWith('.openclaw/')) {
           return [`%OPENCLAW_HOME%\\${normalized.slice('.openclaw/'.length).replace(/\//g, '\\')}`, content];
         }
@@ -4024,6 +4045,7 @@ ${selectedSkillNames.length ? selectedSkillNames.join('\n') : '- _(No skills ins
         'where node >nul 2>&1 || (echo ERROR: Node.js chua cai! Tai tai: https://nodejs.org && pause && exit /b 1)',
         'echo [2/5] Cai OpenClaw CLI...',
         `call npm install -g openclaw@2026.4.5 ${openClawRuntimePackages} || goto :fail`,
+        'echo [OK] OpenClaw da duoc cai dat thanh cong.',
       ];
       providerLines(lines, 'bat');
       if (hasBrowser) {
@@ -4044,7 +4066,7 @@ ${selectedSkillNames.length ? selectedSkillNames.join('\n') : '- _(No skills ins
       if (isMultiBot) {
         lines.push('echo [4/5] Tao runtime multi-agent dung chung...');
         appendBatWriteCommands(lines, mapWindowsNativeFiles(sharedNativeFileMap()));
-        if (is9Router) lines.push(windowsHiddenNodeLaunch('%OPENCLAW_HOME%\\9router-smart-route-sync.js', { DATA_DIR: '%DATA_DIR%' }));
+        if (is9Router) lines.push(windowsHiddenNodeLaunch('%DATA_DIR%\\9router-smart-route-sync.js', { DATA_DIR: '%DATA_DIR%' }));
         lines.push('if not exist "%OPENCLAW_HOME%\\openclaw.json" (echo ERROR: Khong tim thay "%OPENCLAW_HOME%\\openclaw.json" && goto :fail)');
         lines.push('echo.');
         lines.push('echo OpenClaw Dashboard: http://127.0.0.1:18791');
@@ -4063,7 +4085,7 @@ ${selectedSkillNames.length ? selectedSkillNames.join('\n') : '- _(No skills ins
           lines.push('echo Cho gateway khoi dong (15 giay)...');
           lines.push('timeout /t 15 /nobreak >nul');
           lines.push('echo [6/6] Dang nhap Zalo - dang tao ma QR...');
-          lines.push('openclaw channels login --channel zalouser --verbose');
+          lines.push('openclaw channels login --channel zalouser --instance default --verbose');
           lines.push('echo.');
           // Copy QR PNG from TEMP to project dir so user can open it easily
           lines.push('set "QR_TMP=%TEMP%\\openclaw\\openclaw-zalouser-qr-default.png"');
@@ -4082,12 +4104,155 @@ ${selectedSkillNames.length ? selectedSkillNames.join('\n') : '- _(No skills ins
           lines.push('echo De khoi dong lai: openclaw gateway run');
         } else {
           lines.push('echo [5/5] Khoi dong gateway multi-bot...');
-          lines.push('call openclaw gateway run');
+        lines.push(':: Khoi dong OpenClaw Gateway trong cua so moi');
+        lines.push('echo $env:OPENCLAW_HOME = \'%OPENCLAW_HOME%\' > "%TEMP%\\oc-startgw.ps1"');
+        lines.push('echo $env:OPENCLAW_STATE_DIR = \'%OPENCLAW_HOME%\' >> "%TEMP%\\oc-startgw.ps1"');
+        lines.push('echo $b = Join-Path $env:APPDATA \'npm\\openclaw.cmd\' >> "%TEMP%\\oc-startgw.ps1"');
+        lines.push('echo if ^(-not ^(Test-Path $b^)^) { $b = Join-Path $env:APPDATA \'npm\\openclaw\' } >> "%TEMP%\\oc-startgw.ps1"');
+        lines.push("echo Start-Process 'cmd.exe' -WindowStyle Normal -WorkingDirectory '%PROJECT_DIR%' -ArgumentList ^('/c \"' + $b + '\" gateway run'^) >> \"%TEMP%\\oc-startgw.ps1\"");
+        lines.push('powershell -NoProfile -ExecutionPolicy Bypass -File "%TEMP%\\oc-startgw.ps1"');
+        lines.push('del "%TEMP%\\oc-startgw.ps1" >nul 2>&1');
+        lines.push('timeout /t 5 /nobreak >nul');
+        lines.push('echo.');
+        lines.push('echo [OK] OpenClaw Gateway dang khoi dong trong cua so moi!');
+        lines.push('echo OpenClaw Dashboard:   http://127.0.0.1:18791');
+        lines.push('echo If the dashboard asks for a Gateway Token, run: openclaw dashboard');
+        }
+      } else if (isComboChannel) {
+        // ── Combo: Telegram + Zalo Personal — 2 bots, 1 gateway ─────────────
+        lines.push('echo [4/5] Tao file cau hinh cho 2 bot (Telegram + Zalo Personal)...');
+        // Bot 0 = Telegram bot
+        const bot0Files = botFiles(0);
+        // Bot 1 = Zalo bot (same workspace root, separate agent/workspace dirs)
+        const bot1 = state.bots[1] || {};
+        const zaloName = bot1.name || 'Zalo Bot';
+        const zaloDesc = bot1.desc || (isVi ? 'Tro ly Zalo ca nhan' : 'Personal Zalo assistant');
+        const zaloPersona = bot1.persona || '';
+        const zaloAgentId = zaloName.toLowerCase().replace(/[^a-z0-9]+/g, '-').replace(/^-+|-+$/g, '') || 'zalo-bot';
+        const bot0Name = (state.bots[0] || {}).name || 'Bot 1';
+        const bot0AgentId = bot0Name.toLowerCase().replace(/[^a-z0-9]+/g, '-').replace(/^-+|-+$/g, '') || 'bot-1';
+        // Merge bot0's config to also include zalo agent in agents.list + bindings
+        const mergedConfig = JSON.parse(bot0Files['./.openclaw/openclaw.json'] || '{}');
+        if (!mergedConfig.agents) mergedConfig.agents = { defaults: {}, list: [] };
+        if (!Array.isArray(mergedConfig.agents.list)) mergedConfig.agents.list = [];
+        // Add Zalo agent to list if not already there
+        const hasZaloInList = mergedConfig.agents.list.some(a => a.id === zaloAgentId);
+        if (!hasZaloInList) {
+          mergedConfig.agents.list.push({
+            id: zaloAgentId,
+            name: zaloName,
+            workspace: `.openclaw/workspace-${zaloAgentId}`,
+            agentDir: `agents/${zaloAgentId}/agent`,
+            model: { primary: (bot1.model || state.config.model) },
+          });
+        }
+        // Ensure bindings exist
+        if (!Array.isArray(mergedConfig.bindings)) mergedConfig.bindings = [];
+        // Bind Telegram bot to bot0
+        const hasTelegramBinding = mergedConfig.bindings.some(b => b && b.match && b.match.channel === 'telegram');
+        if (!hasTelegramBinding) {
+          mergedConfig.bindings.push({ agentId: bot0AgentId, match: { channel: 'telegram', accountId: 'default' } });
         }
+        // Bind Zalo channel to zalo agent
+        const hasZaloBinding = mergedConfig.bindings.some(b => b && b.match && b.match.channel === 'zalouser');
+        if (!hasZaloBinding) {
+          mergedConfig.bindings.push({ agentId: zaloAgentId, match: { channel: 'zalouser', accountId: 'default' } });
+        }
+        // Ensure zalouser channel is in config
+        if (!mergedConfig.channels) mergedConfig.channels = {};
+        if (!mergedConfig.channels.zalouser) {
+          mergedConfig.channels.zalouser = { enabled: true, dmPolicy: 'open', autoReply: true };
+        }
+        bot0Files['./.openclaw/openclaw.json'] = JSON.stringify(mergedConfig, null, 2);
+        appendBatWriteCommands(lines, mapWindowsNativeFiles(bot0Files));
+        // Zalo agent YAML
+        const zaloAgentYaml = `name: ${zaloAgentId}\ndescription: "${zaloDesc}"\n\nmodel:\n  primary: ${bot1.model || state.config.model}`;
+        const zaloWorkspaceDir = `workspace-${zaloAgentId}`;
+        const _zaloSecRules = state.config.securityRules || DEFAULT_SECURITY_RULES[isVi ? 'vi' : 'en'];
+        const zaloFiles = {
+          [`.openclaw/agents/${zaloAgentId}.yaml`]: zaloAgentYaml,
+          [`.openclaw/agents/${zaloAgentId}/agent/auth-profiles.json`]: sharedNativeAuthProfilesContent(),
+          [`.openclaw/${zaloWorkspaceDir}/IDENTITY.md`]: isVi
+            ? `# Danh tinh\n\n- **Ten:** ${zaloName}\n- **Vai tro:** ${zaloDesc}\n\n---\n\nMinh la **${zaloName}**. Khi ai hoi ten, minh tra loi: _"Minh la ${zaloName}"_.`
+            : `# Identity\n\n- **Name:** ${zaloName}\n- **Role:** ${zaloDesc}\n\n---\n\nI am **${zaloName}**. When asked my name, I answer: _"I'm ${zaloName}"_.`,
+          [`.openclaw/${zaloWorkspaceDir}/SOUL.md`]: isVi
+            ? `# Tinh cach\n\n**Huu ich that su.** Bo qua cau ne, cu giup thang.\n**Co ca tinh.** Tro ly khong co ca tinh thi chi la cong cu.\n\n## Phong cach\n- Tu nhien, gan gui\n- Truc tiep, ngan gon${zaloPersona ? `\n\n## Custom Rules\n${zaloPersona}` : ''}`
+            : `# Soul\n\n**Be genuinely helpful.** Skip filler and just help.\n**Have personality.** An assistant with no personality is just a tool.\n\n## Style\n- Natural and concise\n- Direct and practical${zaloPersona ? `\n\n## Custom Rules\n${zaloPersona}` : ''}`,
+          [`.openclaw/${zaloWorkspaceDir}/AGENTS.md`]: isVi
+            ? `# Huong dan van hanh\n\n## Vai tro\nBan la **${zaloName}**, ${zaloDesc.toLowerCase()}.\n\n## Kenh Zalo Personal\n- Ban hoat dong tren kenh Zalo Personal (zca-js).\n- Tra loi moi tin nhan DM theo chinh sach dmPolicy: open.\n- Khong can duoc goi ten moi tra loi (DM la rieng tu).\n\n## Quy tac tra loi\n- Tra loi ngan gon, suc tich\n- Uu tien tieng Viet\n- Khi hoi ten: _"Minh la ${zaloName}"_\n- Khong bia thong tin\n\n${_zaloSecRules}`
+            : `# Operating Manual\n\n## Role\nYou are **${zaloName}**, ${zaloDesc.toLowerCase()}.\n\n## Zalo Personal Channel\n- You operate on the Zalo Personal channel (zca-js).\n- Reply to all DMs with dmPolicy: open.\n- DMs are private — no need to be mentioned to reply.\n\n## Reply Rules\n- Be concise\n- Prefer Vietnamese\n- When asked your name: _"I'm ${zaloName}"_\n- Never fabricate information\n\n${_zaloSecRules}`,
+          [`.openclaw/${zaloWorkspaceDir}/TEAM.md`]: isVi
+            ? `# Doi Bot\n\n## ${bot0Name}\n- Vai tro: ${(state.bots[0] || {}).desc || 'Tro ly Telegram'}\n- Kenh: Telegram\n\n## ${zaloName}\n- Vai tro: ${zaloDesc}\n- Kenh: Zalo Personal`
+            : `# Bot Team\n\n## ${bot0Name}\n- Role: ${(state.bots[0] || {}).desc || 'Telegram assistant'}\n- Channel: Telegram\n\n## ${zaloName}\n- Role: ${zaloDesc}\n- Channel: Zalo Personal`,
+          [`.openclaw/${zaloWorkspaceDir}/USER.md`]: isVi
+            ? `# Thong tin nguoi dung\n\n## Tong quan\n- **Ngon ngu uu tien:** Tieng Viet\n\n## Thong tin ca nhan\n${state.config.userInfo || '- _(Chua co gi)_'}`
+            : `# User Profile\n\n## Overview\n- **Preferred language:** Vietnamese\n\n## Notes\n${state.config.userInfo || '- _(Nothing yet)_'}`,
+          [`.openclaw/${zaloWorkspaceDir}/MEMORY.md`]: isVi
+            ? `# Bo nho dai han\n\n## Ghi chu\n- _(Chua co gi)_`
+          [`.openclaw/${zaloWorkspaceDir}/TOOLS.md`]: isVi
+            ? `# Hướng dẫn sử dụng Tools\n\n## Skills đã cài\n${selectedSkillNames.length ? selectedSkillNames.join('\n') : '- _(Chưa có skill nào)_'}\n\n## Quy ước\n- Ưu tiên dùng tool thay vì đoán\n- Browser: dùng khi user yêu cầu thao tác web\n- Memory: cập nhật khi biết thông tin quan trọng\n\n## Ghi chú thiết lập của bạn\n\nGhi lại cấu hình riêng của môi trường bạn, ví dụ:\n- Tên thiết bị, camera, SSH hosts\n- Giọng nói ưa thích (TTS)\n\n---\n\nThêm ghi chú nào giúp ích cho công việc của bạn.`
+            : `# Tool Usage Guide\n\n## Installed Skills\n${selectedSkillNames.length ? selectedSkillNames.join('\n') : '- _(No skills installed)_'}\n\n## Conventions\n- Prefer tools over guessing\n- Use Browser for explicit web tasks\n- Update Memory when important user info appears\n\n## Your Setup Notes\n\nRecord environment-specific config, e.g.:\n- Device names, cameras, SSH hosts\n- Preferred TTS voice\n\n---\n\nAdd whatever helps you do your job.`,
+            : `# Long-term Memory\n\n## Notes\n- _(Nothing yet)_`,
+        };
+        appendBatWriteCommands(lines, mapWindowsNativeFiles(zaloFiles));
+        if (is9Router) lines.push(windowsHiddenNodeLaunch('%DATA_DIR%\\9router-smart-route-sync.js', { DATA_DIR: '%DATA_DIR%' }));
+        lines.push('if not exist "%OPENCLAW_HOME%\\openclaw.json" (echo ERROR: Khong tim thay "%OPENCLAW_HOME%\\openclaw.json" && goto :fail)');
+        lines.push('echo.');
+        lines.push('echo OpenClaw Dashboard: http://127.0.0.1:18791');
+        lines.push('echo Other reachable URLs: http://localhost:18791');
+        lines.push('echo If the dashboard asks for a Gateway Token, run: openclaw dashboard');
+        if (is9Router) {
+          lines.push('echo.');
+          lines.push('echo 9Router Dashboard: http://127.0.0.1:20128/dashboard');
+          lines.push('echo Other reachable URLs: http://localhost:20128/dashboard');
+        }
+        // Login Zalo trực tiếp (không cần gateway chạy trước — openclaw channels login standalone)
+        // Sau khi login thành công, gateway sẽ tự nhận credentials khi khởi động.
+        lines.push('echo [5/6] Dang nhap Zalo Personal...');
+        lines.push('echo.');
+        lines.push('echo === HUONG DAN DANG NHAP ZALO ===');
+        lines.push('echo OpenClaw se hien duong dan file anh QR trong cua so nay.');
+        lines.push('echo Hay mo file anh do, chon Quet QR trong app Zalo va quet.');
+        lines.push('echo Neu het gio, nhap R de tao ma QR moi.');
+        lines.push('echo ================================');
+        lines.push('echo.');
+        lines.push(':retry_zalo');
+        lines.push('echo Dang tao ma QR Zalo moi...');
+        lines.push('echo.');
+        lines.push('call openclaw channels login --channel zalouser --verbose');
+        lines.push('if %ERRORLEVEL% equ 0 goto :zalo_done');
+        lines.push('echo.');
+        lines.push('echo [WARN] Ma QR het han hoac chua duoc quet kip.');
+        lines.push('echo   R - Tao ma QR moi va thu lai');
+        lines.push('echo   Enter - Bo qua dang nhap Zalo (Zalo se khong hoat dong)');
+        lines.push('set /p RETRY_ZALO=Ban chon: ');
+        lines.push('if /i "%RETRY_ZALO%"=="R" goto :retry_zalo');
+        lines.push('echo [SKIP] Bo qua. Zalo se khong hoat dong cho den khi dang nhap lai.');
+        lines.push('goto :zalo_continue');
+        lines.push(':zalo_done');
+        lines.push('echo [OK] Dang nhap Zalo thanh cong!');
+        lines.push(':zalo_continue');
+        lines.push(':: Dong gateway cu (neu co lock file) truoc khi khoi dong lai');
+        lines.push('call openclaw gateway stop 2>nul');
+        lines.push('timeout /t 2 /nobreak >nul');
+        lines.push('echo [6/6] Khoi dong bot (Telegram + Zalo)...');
+        lines.push(':: Khoi dong OpenClaw Gateway trong cua so moi');
+        lines.push('echo $env:OPENCLAW_HOME = \'%OPENCLAW_HOME%\' > "%TEMP%\\oc-startgw.ps1"');
+        lines.push('echo $env:OPENCLAW_STATE_DIR = \'%OPENCLAW_HOME%\' >> "%TEMP%\\oc-startgw.ps1"');
+        lines.push('echo $b = Join-Path $env:APPDATA \'npm\\openclaw.cmd\' >> "%TEMP%\\oc-startgw.ps1"');
+        lines.push('echo if ^(-not ^(Test-Path $b^)^) { $b = Join-Path $env:APPDATA \'npm\\openclaw\' } >> "%TEMP%\\oc-startgw.ps1"');
+        lines.push("echo Start-Process 'cmd.exe' -WindowStyle Normal -WorkingDirectory '%PROJECT_DIR%' -ArgumentList ^('/c \"' + $b + '\" gateway run'^) >> \"%TEMP%\\oc-startgw.ps1\"");
+        lines.push('powershell -NoProfile -ExecutionPolicy Bypass -File "%TEMP%\\oc-startgw.ps1"');
+        lines.push('del "%TEMP%\\oc-startgw.ps1" >nul 2>&1');
+        lines.push('timeout /t 5 /nobreak >nul');
+        lines.push('echo.');
+        lines.push('echo [OK] OpenClaw Gateway dang khoi dong trong cua so moi!');
+        lines.push('echo OpenClaw Dashboard:   http://127.0.0.1:18791');
+        lines.push('echo If the dashboard asks for a Gateway Token, run: openclaw dashboard');
       } else {
         lines.push('echo [4/5] Tao file cau hinh...');
         appendBatWriteCommands(lines, mapWindowsNativeFiles(botFiles(0)));
-        if (is9Router) lines.push(windowsHiddenNodeLaunch('%OPENCLAW_HOME%\\9router-smart-route-sync.js', { DATA_DIR: '%DATA_DIR%' }));
+        if (is9Router) lines.push(windowsHiddenNodeLaunch('%DATA_DIR%\\9router-smart-route-sync.js', { DATA_DIR: '%DATA_DIR%' }));
         lines.push('if not exist "%OPENCLAW_HOME%\\openclaw.json" (echo ERROR: Khong tim thay "%OPENCLAW_HOME%\\openclaw.json" && goto :fail)');
         lines.push('echo.');
         lines.push('echo OpenClaw Dashboard: http://127.0.0.1:18791');
@@ -4098,27 +4263,54 @@ ${selectedSkillNames.length ? selectedSkillNames.join('\n') : '- _(No skills ins
           lines.push('echo 9Router Dashboard: http://127.0.0.1:20128/dashboard');
           lines.push('echo Other reachable URLs: http://localhost:20128/dashboard');
         }
-        const needsZaloLogin = state.channel === 'zalo-personal' || state.channel === 'telegram+zalo-personal';
+        const needsZaloLogin = state.channel === 'zalo-personal';
         if (needsZaloLogin) {
-          lines.push('echo [5/6] Khoi dong gateway (cua so moi) de chuan bi dang nhap Zalo...');
-          lines.push('start "OpenClaw Gateway" cmd /c "cd /d %PROJECT_DIR% && set OPENCLAW_HOME=%OPENCLAW_HOME% && set OPENCLAW_STATE_DIR=%OPENCLAW_HOME% && openclaw gateway run"');
-          lines.push('echo Cho gateway khoi dong (15 giay)...');
-          lines.push('timeout /t 15 /nobreak >nul');
-          lines.push('echo [6/6] Dang nhap Zalo...');
-          lines.push('echo.');
-          lines.push('echo ============================================================');
-          lines.push('echo  Cua so CMD moi se mo de dang nhap Zalo.');
-          lines.push('echo  Hay lam theo huong dan trong cua so do:');
-          lines.push('echo    1. Chon "Install Zalo Personal plugin?" (Enter)');
-          lines.push('echo    2. Doi QR hien ra - mo app Zalo quet ma QR');
-          lines.push('echo    3. Doi den khi thay "Login success" hoac token');
-          lines.push('echo ============================================================');
-          lines.push('start "Zalo Login" cmd /k "cd /d \"%PROJECT_DIR%\" && set OPENCLAW_HOME=%OPENCLAW_HOME% && set OPENCLAW_STATE_DIR=%OPENCLAW_HOME% && openclaw channels login --channel zalouser --verbose"');
-          lines.push('echo Gateway dang chay trong cua so rieng.');
-          lines.push('echo De khoi dong lai: openclaw gateway run');
+        // Login Zalo trực tiếp (không cần gateway chạy trước)
+        lines.push('echo [5/5] Dang nhap Zalo Personal...');
+        lines.push('echo.');
+        lines.push('echo === HUONG DAN DANG NHAP ZALO ===');
+        lines.push('echo Cua so Zalo Login se mo. Hay:');
+        lines.push('echo   1. Doi QR hien ra trong cua so Zalo Login');
+        lines.push('echo   2. Mo app Zalo, chon Quet QR va quet ma');
+        lines.push('echo   3. Doi thay chu "Login successful" trong cua so do');
+        lines.push('echo   4. Dong cua so Zalo Login');
+        lines.push('echo ================================');
+        lines.push('echo.');
+        lines.push('start "Zalo Login" cmd /k "cd /d \"%PROJECT_DIR%\" && set OPENCLAW_HOME=%OPENCLAW_HOME% && set OPENCLAW_STATE_DIR=%OPENCLAW_HOME% && openclaw channels login --channel zalouser --verbose"');
+        lines.push('echo Nhan phim bat ky sau khi dong cua so Zalo Login...');
+        lines.push('pause >nul');
+        lines.push(':: Dong gateway cu (neu co lock file tu cua so Zalo Login) truoc khi khoi dong lai');
+        lines.push('call openclaw gateway stop 2>nul');
+        lines.push('timeout /t 2 /nobreak >nul');
+        lines.push('echo [6/6] Khoi dong bot...');
+        lines.push(':: Khoi dong OpenClaw Gateway trong cua so moi');
+        lines.push('echo $env:OPENCLAW_HOME = \'%OPENCLAW_HOME%\' > "%TEMP%\\oc-startgw.ps1"');
+        lines.push('echo $env:OPENCLAW_STATE_DIR = \'%OPENCLAW_HOME%\' >> "%TEMP%\\oc-startgw.ps1"');
+        lines.push('echo $b = Join-Path $env:APPDATA \'npm\\openclaw.cmd\' >> "%TEMP%\\oc-startgw.ps1"');
+        lines.push('echo if ^(-not ^(Test-Path $b^)^) { $b = Join-Path $env:APPDATA \'npm\\openclaw\' } >> "%TEMP%\\oc-startgw.ps1"');
+        lines.push("echo Start-Process 'cmd.exe' -WindowStyle Normal -WorkingDirectory '%PROJECT_DIR%' -ArgumentList ^('/c \"' + $b + '\" gateway run'^) >> \"%TEMP%\\oc-startgw.ps1\"");
+        lines.push('powershell -NoProfile -ExecutionPolicy Bypass -File "%TEMP%\\oc-startgw.ps1"');
+        lines.push('del "%TEMP%\\oc-startgw.ps1" >nul 2>&1');
+        lines.push('timeout /t 5 /nobreak >nul');
+        lines.push('echo.');
+        lines.push('echo [OK] OpenClaw Gateway dang khoi dong trong cua so moi!');
+        lines.push('echo OpenClaw Dashboard:   http://127.0.0.1:18791');
+        lines.push('echo If the dashboard asks for a Gateway Token, run: openclaw dashboard');
         } else {
           lines.push('echo [5/5] Khoi dong bot...');
-          lines.push('call openclaw gateway run');
+        lines.push(':: Khoi dong OpenClaw Gateway trong cua so moi');
+        lines.push('echo $env:OPENCLAW_HOME = \'%OPENCLAW_HOME%\' > "%TEMP%\\oc-startgw.ps1"');
+        lines.push('echo $env:OPENCLAW_STATE_DIR = \'%OPENCLAW_HOME%\' >> "%TEMP%\\oc-startgw.ps1"');
+        lines.push('echo $b = Join-Path $env:APPDATA \'npm\\openclaw.cmd\' >> "%TEMP%\\oc-startgw.ps1"');
+        lines.push('echo if ^(-not ^(Test-Path $b^)^) { $b = Join-Path $env:APPDATA \'npm\\openclaw\' } >> "%TEMP%\\oc-startgw.ps1"');
+        lines.push("echo Start-Process 'cmd.exe' -WindowStyle Normal -WorkingDirectory '%PROJECT_DIR%' -ArgumentList ^('/c \"' + $b + '\" gateway run'^) >> \"%TEMP%\\oc-startgw.ps1\"");
+        lines.push('powershell -NoProfile -ExecutionPolicy Bypass -File "%TEMP%\\oc-startgw.ps1"');
+        lines.push('del "%TEMP%\\oc-startgw.ps1" >nul 2>&1');
+        lines.push('timeout /t 5 /nobreak >nul');
+        lines.push('echo.');
+        lines.push('echo [OK] OpenClaw Gateway dang khoi dong trong cua so moi!');
+        lines.push('echo OpenClaw Dashboard:   http://127.0.0.1:18791');
+        lines.push('echo If the dashboard asks for a Gateway Token, run: openclaw dashboard');
         }
       }
 
@@ -4227,7 +4419,7 @@ ${selectedSkillNames.length ? selectedSkillNames.join('\n') : '- _(No skills ins
         if (is9Router) {
           vps.push(`NINE_ROUTER_ENTRY="$(${native9RouterServerEntryLookup()})"`);
           vps.push('PORT=20128 HOSTNAME=0.0.0.0 pm2 start "$NINE_ROUTER_ENTRY" --name openclaw-multibot-9router --interpreter "$(command -v node)"');
-          vps.push('pm2 start --name openclaw-multibot-9router-sync -- sh -c "node ./.openclaw/9router-smart-route-sync.js"');
+          vps.push('pm2 start --name openclaw-multibot-9router-sync -- sh -c "node ./.9router/9router-smart-route-sync.js"');
         }
         vps.push('pm2 start --name openclaw-multibot -- sh -c "openclaw gateway run"');
         vps.push('pm2 save && pm2 startup');
@@ -4241,7 +4433,7 @@ ${selectedSkillNames.length ? selectedSkillNames.join('\n') : '- _(No skills ins
         if (is9Router) {
           vps.push(`NINE_ROUTER_ENTRY="$(${native9RouterServerEntryLookup()})"`);
           vps.push('PORT=20128 HOSTNAME=0.0.0.0 pm2 start "$NINE_ROUTER_ENTRY" --name openclaw-9router --interpreter "$(command -v node)"');
-          vps.push('pm2 start --name openclaw-9router-sync -- sh -c "node ./.openclaw/9router-smart-route-sync.js"');
+          vps.push('pm2 start --name openclaw-9router-sync -- sh -c "node ./.9router/9router-smart-route-sync.js"');
         }
         vps.push('pm2 start --name openclaw -- sh -c "openclaw gateway run"');
         vps.push('pm2 save && pm2 startup');
@@ -4344,60 +4536,60 @@ ${selectedSkillNames.length ? selectedSkillNames.join('\n') : '- _(No skills ins
     if (os === 'win' && !isDocker) {
       return {
         name: 'uninstall-openclaw-win.bat',
-        content: `@echo off
-setlocal EnableExtensions
-chcp 65001 >nul
-echo.
-echo ============================================================
-echo   OpenClaw Uninstaller - Windows Native
-echo   Project: ${absWin}
-echo ============================================================
-echo.
-echo [WARNING] This will:
-echo   1. Kill openclaw and 9router background processes
-echo   2. Uninstall global npm packages (openclaw, 9router)
-echo   3. Delete the project folder and all its data
-echo.
-set /p CONFIRM=Nhap YES de xac nhan xoa toan bo: 
-if /i not "%CONFIRM%"=="YES" (
-  echo Huy bo. Khong xoa gi ca.
-  pause
-  exit /b 0
-)
-echo.
-echo [1/4] Dang dung cac tien trinh openclaw va 9router...
-taskkill /F /IM openclaw.exe >nul 2>&1
-taskkill /F /IM 9router.exe  >nul 2>&1
-powershell -NoProfile -Command "Get-Process node -ErrorAction SilentlyContinue | Where-Object { $_.Path -like '*${absWin.replace(/\/g, '\\\\')}*' } | Stop-Process -Force" >nul 2>&1
-powershell -NoProfile -Command "& { $p=@(18791,20128); foreach($port in $p){ $id=(netstat -ano | Select-String \":\$($port) \").Line -split ' +' | Select-Object -Last 1; if($id -and $id -ne '0'){ Stop-Process -Id $id -Force -ErrorAction SilentlyContinue } } }" >nul 2>&1
-echo    OK: Tien trinh da dung.
-echo.
-echo [2/4] Dang go cai npm packages toan cau...
-set "PATH=%APPDATA%\npm;%PATH%"
-call npm uninstall -g openclaw 9router grammy @grammyjs/runner @grammyjs/transformer-throttler @buape/carbon @larksuiteoapi/node-sdk @slack/web-api 2>nul
-echo    OK: npm packages da duoc go cai.
-echo.
-echo [3/4] Xoa thu muc project...
-set "TARGET=${absWin}"
-if exist "%TARGET%" (
-  rd /s /q "%TARGET%"
-  echo    OK: Da xoa %TARGET%
-) else (
-  echo    INFO: Thu muc khong ton tai: %TARGET%
-)
-echo.
-echo [4/4] Xoa thu muc .9router trong Home (neu co)...
-if exist "%USERPROFILE%\.9router" (
-  set /p CLEAN_HOME=Xoa ca %USERPROFILE%\.9router? (YES/no): 
-  if /i "%CLEAN_HOME%"=="YES" rd /s /q "%USERPROFILE%\.9router" >nul 2>&1
-)
-echo.
-echo ============================================================
-echo   Go cai hoan tat!
-echo   De cai lai: chay lai file setup hoac npx create-openclaw-bot
-echo ============================================================
-pause
-endlocal
+        content: `@echo off
+setlocal EnableExtensions
+chcp 65001 >nul
+echo.
+echo ============================================================
+echo   OpenClaw Uninstaller - Windows Native
+echo   Project: ${absWin}
+echo ============================================================
+echo.
+echo [WARNING] This will:
+echo   1. Kill openclaw and 9router background processes
+echo   2. Uninstall global npm packages (openclaw, 9router)
+echo   3. Delete the project folder and all its data
+echo.
+set /p CONFIRM=Nhap YES de xac nhan xoa toan bo: 
+if /i not "%CONFIRM%"=="YES" (
+  echo Huy bo. Khong xoa gi ca.
+  pause
+  exit /b 0
+)
+echo.
+echo [1/4] Dang dung cac tien trinh openclaw va 9router...
+wmic process where "Name='node.exe' and CommandLine like '%%9router%%'" delete >nul 2>&1
+wmic process where "Name='cmd.exe' and CommandLine like '%%9router%%'" delete >nul 2>&1
+wmic process where "Name='node.exe' and CommandLine like '%%openclaw.mjs%%'" delete >nul 2>&1
+timeout /t 2 /nobreak >nul
+echo    OK: Tien trinh da dung.
+echo.
+echo [2/4] Dang go cai npm packages toan cau...
+set "PATH=%APPDATA%\\npm;%PATH%"
+call npm uninstall -g openclaw 9router grammy @grammyjs/runner @grammyjs/transformer-throttler @buape/carbon @larksuiteoapi/node-sdk @slack/web-api 2>nul
+echo    OK: npm packages da duoc go cai.
+echo.
+echo [3/4] Xoa thu muc project...
+set "TARGET=${absWin}"
+if exist "%TARGET%" (
+  rd /s /q "%TARGET%"
+  echo    OK: Da xoa %TARGET%
+) else (
+  echo    INFO: Thu muc khong ton tai: %TARGET%
+)
+echo.
+echo [4/4] Xoa thu muc .9router trong Home (neu co)...
+if exist "%USERPROFILE%\\.9router" (
+  set /p CLEAN_HOME=Xoa ca %USERPROFILE%\\.9router? [YES/no]: 
+  if /i "%CLEAN_HOME%"=="YES" rd /s /q "%USERPROFILE%\\.9router" >nul 2>&1
+)
+echo.
+echo ============================================================
+echo   Go cai hoan tat!
+echo   De cai lai: chay lai file setup hoac npx create-openclaw-bot
+echo ============================================================
+pause
+endlocal
 `
       };
     }
@@ -4406,42 +4598,42 @@ endlocal
     if (os === 'win' && isDocker) {
       return {
         name: 'uninstall-openclaw-docker.bat',
-        content: `@echo off
-setlocal EnableExtensions
-chcp 65001 >nul
-echo.
-echo ============================================================
-echo   OpenClaw Uninstaller - Docker (Windows)
-echo   Project: ${absWin}
-echo ============================================================
-echo.
-echo [WARNING] This will stop Docker containers and delete the project folder.
-echo.
-set /p CONFIRM=Nhap YES de xac nhan xoa toan bo: 
-if /i not "%CONFIRM%"=="YES" (
-  echo Huy bo. Khong xoa gi ca.
-  pause
-  exit /b 0
-)
-echo.
-echo [1/2] Dang dung Docker containers...
-cd /d "${absWin}\docker\openclaw" 2>nul && (
-  docker compose down --volumes --remove-orphans 2>nul || docker-compose down --volumes --remove-orphans 2>nul
-  echo    OK: Containers da dung.
-) || echo    INFO: Khong tim thay docker compose.
-echo.
-echo [2/2] Xoa thu muc project...
-cd /d "%USERPROFILE%"
-if exist "${absWin}" (
-  rd /s /q "${absWin}"
-  echo    OK: Da xoa ${absWin}
-)
-echo.
-echo ============================================================
-echo   Go cai hoan tat! De cai lai: npx create-openclaw-bot@latest
-echo ============================================================
-pause
-endlocal
+        content: `@echo off
+setlocal EnableExtensions
+chcp 65001 >nul
+echo.
+echo ============================================================
+echo   OpenClaw Uninstaller - Docker (Windows)
+echo   Project: ${absWin}
+echo ============================================================
+echo.
+echo [WARNING] This will stop Docker containers and delete the project folder.
+echo.
+set /p CONFIRM=Nhap YES de xac nhan xoa toan bo: 
+if /i not "%CONFIRM%"=="YES" (
+  echo Huy bo. Khong xoa gi ca.
+  pause
+  exit /b 0
+)
+echo.
+echo [1/2] Dang dung Docker containers...
+cd /d "${absWin}\docker\openclaw" 2>nul && (
+  docker compose down --volumes --remove-orphans 2>nul || docker-compose down --volumes --remove-orphans 2>nul
+  echo    OK: Containers da dung.
+) || echo    INFO: Khong tim thay docker compose.
+echo.
+echo [2/2] Xoa thu muc project...
+cd /d "%USERPROFILE%"
+if exist "${absWin}" (
+  rd /s /q "${absWin}"
+  echo    OK: Da xoa ${absWin}
+)
+echo.
+echo ============================================================
+echo   Go cai hoan tat! De cai lai: npx create-openclaw-bot@latest
+echo ============================================================
+pause
+endlocal
 `
       };
     }
@@ -4487,7 +4679,7 @@ echo "[4/5] Removing project directory..."
 echo "[5/5] Checking home-level .9router / .openclaw..."
 for dir in "\$HOME/.9router" "\$HOME/.openclaw"; do
   if [ -d "\$dir" ]; then
-    read -rp "Delete \$dir ? (YES/no): " CLEAN
+    read -rp "Delete \$dir ? [YES/no]: " CLEAN
     [ "\$CLEAN" = "YES" ] && rm -rf "\$dir" && echo "   OK: Deleted \$dir" || echo "   Kept: \$dir"
   fi
 done
@@ -4539,7 +4731,7 @@ echo "[3/4] Removing project directory..."
 echo "[4/4] Checking home-level .9router / .openclaw..."
 for dir in "\$HOME/.9router" "\$HOME/.openclaw"; do
   if [ -d "\$dir" ]; then
-    read -rp "Delete \$dir ? (YES/no): " CLEAN
+    read -rp "Delete \$dir ? [YES/no]: " CLEAN
     [ "\$CLEAN" = "YES" ] && rm -rf "\$dir" && echo "   OK: Deleted \$dir" || echo "   Kept: \$dir"
   fi
 done
@@ -4582,7 +4774,7 @@ echo "[2/3] Removing project directory..."
 
 echo "[3/3] Checking home-level .openclaw..."
 if [ -d "\$HOME/.openclaw" ]; then
-  read -rp "Delete \$HOME/.openclaw? (YES/no): " CLEAN
+  read -rp "Delete \$HOME/.openclaw? [YES/no]: " CLEAN
   [ "\$CLEAN" = "YES" ] && rm -rf "\$HOME/.openclaw" && echo "   OK." || echo "   Kept."
 fi
 
@@ -4715,7 +4907,7 @@ Write-Host "  🎉 ${isVi ? 'Setup hoan tat!' : 'Setup complete!'}" -ForegroundC
       ps += `Write-Host "  ${isVi ? 'Mo http://localhost:30128/dashboard de login OAuth' : 'Open http://localhost:30128/dashboard to login OAuth'}" -ForegroundColor White\n`;
     }
     if (state.channel === 'zalo-personal' || state.channel === 'telegram+zalo-personal') {
-      ps += `Write-Host "  ${isVi ? 'Chay: docker compose exec -it ai-bot openclaw channels login --channel zalouser --verbose' : 'Run: docker compose exec -it ai-bot openclaw channels login --channel zalouser --verbose'}" -ForegroundColor White\n`;
+      ps += `Write-Host "  ${isVi ? 'Chay: docker compose exec -it ai-bot openclaw channels login --channel zalouser --instance default --verbose' : 'Run: docker compose exec -it ai-bot openclaw channels login --channel zalouser --instance default --verbose'}" -ForegroundColor White\n`;
       ps += `Write-Host "  ${isVi ? 'QR se nam tai /tmp/openclaw/openclaw-zalouser-qr-default.png' : 'QR will be written to /tmp/openclaw/openclaw-zalouser-qr-default.png'}" -ForegroundColor DarkGray\n`;
       ps += `Write-Host "  ${isVi ? 'Copy QR ra ngoai: docker compose cp ai-bot:/tmp/openclaw/openclaw-zalouser-qr-default.png ./zalo-login-qr.png' : 'Copy the QR out: docker compose cp ai-bot:/tmp/openclaw/openclaw-zalouser-qr-default.png ./zalo-login-qr.png'}" -ForegroundColor DarkGray\n`;
     }
@@ -4896,7 +5088,7 @@ echo ""
 
   function generateZaloOnboardGuide() {
     const lang = document.getElementById('cfg-language')?.value || 'vi';
-    setOutput('out-zalo-onboard-cmd', `docker compose exec -it ai-bot openclaw channels login --channel zalouser --verbose`);
+    setOutput('out-zalo-onboard-cmd', `docker compose exec -it ai-bot openclaw channels login --channel zalouser --instance default --verbose`);
 
     if (lang === 'vi') {
       setOutput('out-zalo-onboard-guide', `┌─────────────────────────────────────────────────────┐

package/test-path.bat

@@ -0,0 +1,4 @@
+@echo off
+set "PROJECT_DIR=D:\test"
+echo Path1: "%PROJECT_DIR%\.env"
+echo Path2: "%PROJECT_DIR%\\.env"

package/tests/smoke-cli-logic.mjs

@@ -391,12 +391,11 @@ checks.push(() => expect(
     && setup.includes('function native9RouterServerEntryLookup() {')
     && setup.includes('return "node -e ')
     && !setup.includes('return "node -p ')
-    && setup.includes("start \"9Router Dashboard\" /min cmd /c")
-    && setup.includes("9router -n -H 0.0.0.0 -p 20128 --skip-update")
+    && setup.includes("oc-start9r.ps1")  // Windows: writes temp PS1 launcher to avoid CMD→PS quoting issues
     && setup.includes('NINE_ROUTER_BIN="$(command -v 9router)"')
     && setup.includes('"$NINE_ROUTER_BIN" -n -H 0.0.0.0 -p 20128 --skip-update')
     && setup.includes("const p=path.join(process.env.DATA_DIR||'.9router','db.json');")
-    && setup.includes('nohup env DATA_DIR="$PWD/.9router" node ./.openclaw/9router-smart-route-sync.js >/tmp/9router-sync.log 2>&1 &')
+    && setup.includes('nohup env DATA_DIR="$PWD/.9router" node ./.9router/9router-smart-route-sync.js > /tmp/9router-sync.log 2>&1 &')
     && setup.includes('set "PROJECT_DIR=')
     && setup.includes('set "OPENCLAW_HOME=%PROJECT_DIR%\\\\.openclaw"')
     && setup.includes('set "OPENCLAW_STATE_DIR=%PROJECT_DIR%\\\\.openclaw"')
@@ -434,8 +433,8 @@ checks.push(() => expect(
     && setup.includes("lines.push('echo Cai skills...');")
     && setup.includes("const openClawRuntimePackages = 'grammy @grammyjs/runner @grammyjs/transformer-throttler @buape/carbon @larksuiteoapi/node-sdk @slack/web-api';")
     && setup.includes("memory: 'none'")
-    && setup.includes("workspace: 'workspace'")
-    && setup.includes("workspace: meta.workspaceDir")
+    && setup.includes("workspace-\${agentId}\`")
+    && setup.includes("workspace: '.openclaw/' + meta.workspaceDir")
     && !setup.includes("const authProviderName = provider.isProxy ? '9router' : provider.id;")
     && !setup.includes("const authProviderName = botProvider.isProxy ? '9router' : botProvider.id;"),
   'Wizard native config generation must keep gateway loopback-local, preserve concrete auth provider ids, disable memory search by default, and sync single-bot provider/model selections into bot state'
@@ -479,7 +478,7 @@ checks.push(() => expect(
 
 checks.push(() => expectMatch(
   setup,
-  /\.openclaw\/9router-smart-route-sync\.js[\s\S]*pm2 start --name openclaw-9router-sync/s,
+  /\.9router\/9router-smart-route-sync\.js[\s\S]*pm2 start --name openclaw-9router-sync/s,
   'VPS native script generation must write and run the 9Router smart-route sync loop'
 ));
 
@@ -537,8 +536,8 @@ checks.push(() => expectMatch(
 
 checks.push(() => expectMatch(
   setup,
-  /Native setup now auto-runs the login flow and copies the QR into the project folder[\s\S]*docker compose exec -it ai-bot openclaw channels login --channel zalouser --verbose[\s\S]*docker compose cp ai-bot:\/tmp\/openclaw\/openclaw-zalouser-qr-default\.png \.\/zalo-login-qr\.png/s,
-  'Wizard copy must mention native auto-login and still show the dedicated Docker QR login command'
+  /docker compose exec -it ai-bot openclaw channels login --channel zalouser[\s\S]*docker compose cp ai-bot:\/tmp\/openclaw\/openclaw-zalouser-qr-default\.png \.\/zalo-login-qr\.png/s,
+  'Wizard must show dedicated Docker Zalo login and QR copy commands'
 ));
 
 checks.push(() => expect(
@@ -567,6 +566,17 @@ checks.push(() => expectMatch(
   'Web wizard Docker patch command must add interface-based control UI allowed origins'
 ));
 
+checks.push(() => expect(
+  setup.includes("echo [OK] OpenClaw da duoc cai dat thanh cong.")
+    && setup.includes("echo [OK] 9Router da duoc cai dat thanh cong."),
+  'Windows BAT must print install success messages after openclaw and 9router are installed'
+));
+
+checks.push(() => expect(
+  setup.includes("openclaw gateway stop 2>nul"),
+  'Windows Zalo flow must clear stale gateway lock (from channels login mini-runtime) before starting the main gateway'
+));
+
 for (const check of checks) {
   check();
 }

package/node_modules/color-convert/CHANGELOG.md

@@ -1,54 +0,0 @@
-# 1.0.0 - 2016-01-07
-
-- Removed: unused speed test
-- Added: Automatic routing between previously unsupported conversions
-([#27](https://github.com/Qix-/color-convert/pull/27))
-- Removed: `xxx2xxx()` and `xxx2xxxRaw()` functions
-([#27](https://github.com/Qix-/color-convert/pull/27))
-- Removed: `convert()` class
-([#27](https://github.com/Qix-/color-convert/pull/27))
-- Changed: all functions to lookup dictionary
-([#27](https://github.com/Qix-/color-convert/pull/27))
-- Changed: `ansi` to `ansi256`
-([#27](https://github.com/Qix-/color-convert/pull/27))
-- Fixed: argument grouping for functions requiring only one argument
-([#27](https://github.com/Qix-/color-convert/pull/27))
-
-# 0.6.0 - 2015-07-23
-
-- Added: methods to handle
-[ANSI](https://en.wikipedia.org/wiki/ANSI_escape_code#Colors) 16/256 colors:
-  - rgb2ansi16
-  - rgb2ansi
-  - hsl2ansi16
-  - hsl2ansi
-  - hsv2ansi16
-  - hsv2ansi
-  - hwb2ansi16
-  - hwb2ansi
-  - cmyk2ansi16
-  - cmyk2ansi
-  - keyword2ansi16
-  - keyword2ansi
-  - ansi162rgb
-  - ansi162hsl
-  - ansi162hsv
-  - ansi162hwb
-  - ansi162cmyk
-  - ansi162keyword
-  - ansi2rgb
-  - ansi2hsl
-  - ansi2hsv
-  - ansi2hwb
-  - ansi2cmyk
-  - ansi2keyword
-([#18](https://github.com/harthur/color-convert/pull/18))
-
-# 0.5.3 - 2015-06-02
-
-- Fixed: hsl2hsv does not return `NaN` anymore when using `[0,0,0]`
-([#15](https://github.com/harthur/color-convert/issues/15))
-
----
-
-Check out commit logs for older releases