create-openclaw-bot 5.6.8 → 5.6.10

package/README.md

@@ -3,7 +3,7 @@
 # 🦞 OpenClaw Setup
 
 <p align="center">
-  <a href="https://github.com/tuanminhhole/openclaw-setup/releases"><img src="https://img.shields.io/badge/RELEASE-v5.5.0-0EA5E9?style=for-the-badge" alt="Version 5.5.0" /></a>
+  <a href="https://github.com/tuanminhhole/openclaw-setup/releases"><img src="https://img.shields.io/badge/RELEASE-v5.6.10-0EA5E9?style=for-the-badge" alt="Version 5.6.9" /></a>
   <a href="https://github.com/tuanminhhole/openclaw-setup?tab=MIT-1-ov-file"><img src="https://img.shields.io/badge/LICENSE-MIT-success?style=for-the-badge" alt="MIT License" /></a>
   <a href="https://www.npmjs.com/package/create-openclaw-bot"><img src="https://img.shields.io/npm/v/create-openclaw-bot?style=for-the-badge&label=CLI&color=2563EB&logo=npm&logoColor=white" alt="NPM Version" /></a>
   <a href="https://github.com/tuanminhhole/openclaw-setup/stargazers"><img src="https://img.shields.io/github/stars/tuanminhhole/openclaw-setup?style=for-the-badge&color=eab308&logo=github&logoColor=white" alt="GitHub Stars" /></a>
@@ -24,24 +24,23 @@ An interactive **CLI tool** and **Setup Wizard** to deploy your own free AI Bot
 
 ---
 
-## 🆕 What's new in v5.6.0
-
-- 🧠 **Memory & Dreaming enabled by default** — Long-term Memory skill is now pre-selected for all new installations. The `memory-core` plugin with `dreaming.enabled: true` is auto-injected into `openclaw.json`, and `DREAMS.md` is seeded in every workspace.
-- 🤝 **Relay plugin card auto-shows** — When selecting Telegram multi-bot (≥2 bots), the Relay plugin card appears with an "Auto-enabled" badge and locked checkbox. Switching back to 1 bot hides it.
-- 🔑 **Relay trigger keywords in TEAMS.md** — `TEAMS.md` now documents all relay trigger keywords (question/task/reminder patterns) from the v5.0.9 relay plugin, helping bots understand and coordinate cross-bot communication.
-- 🌍 **Proper Vietnamese diacritics** — All workspace `.md` files now use proper UTF-8 Vietnamese with full diacritics, eliminating mojibake.
-- 👍 **Tool-based reaction** — `TOOLS.md` mandates bots call the `react` action with 👍 before replying, replacing unreliable gateway auto-ack.
-
-<details>
-<summary><b>Previous: What's new in v5.5.0</b></summary>
-
-- 📦 **OpenClaw 2026.4.14** — Bumped from 2026.4.5. Includes the new experimental Dreaming memory system, active-memory improvements, Telegram approval button deadlock fix, and WebSocket keepalive stability.
-- 📄 **Modular workspace docs** — Multi-bot deployments now generate `TEAM.md` and `RELAY.md` as separate files.
-- 🔐 **Full security rules everywhere** — All `AGENTS.md` files now include the complete 4-section security ruleset.
-- 🗑️ **Removed `.yaml` agent files** — OpenClaw Core reads config exclusively from `openclaw.json`.
-- 🤖 **Anti-hallucination handoff** — Relay-variant `AGENTS.md` now mandates tool-first `react` actions.
-- 🏗️ **Scaffold-based generation** — Both Wizard and CLI now call shared scaffold builders.
-
+## 🆕 What's new in v5.6.10
+
+- 🔧 **OpenAI Codex provider fix** — Updated Codex model registry to match OpenAI's current API. Removed 6 deprecated models, retained 4 active ones: `gpt-5.4`, `gpt-5.3-codex`, `gpt-5.2`, `gpt-5.4-mini`.
+- 🔀 **9Router API mode switch** — Switched from `openai-completions` to `openai-responses` to align with OpenAI's Responses API.
+- 🩹 **Auto-patch 9Router** — New `patch-9router.js` automatically patches 9Router source files on setup, upgrade, and before every launch to stay compatible with Codex API changes.
+- 🎯 **Direct Codex model targeting** — 9Router config now exposes individual Codex models alongside `smart-route` so users can pick a specific model.
+- 💬 **Zalo Personal group config** — Added `defaultAccount`, `groupAllowFrom`, `historyLimit`, wildcard group config and `autoReply` for better out-of-the-box group handling.
+
+<details>
+<summary><b>Previous: What's new in v5.6.0</b></summary>
+
+- 🧠 **Memory & Dreaming enabled by default** — Long-term Memory skill is now pre-selected for all new installations. The `memory-core` plugin with `dreaming.enabled: true` is auto-injected into `openclaw.json`, and `DREAMS.md` is seeded in every workspace.
+- 🤝 **Relay plugin card auto-shows** — When selecting Telegram multi-bot (≥2 bots), the Relay plugin card appears with an "Auto-enabled" badge and locked checkbox. Switching back to 1 bot hides it.
+- 🔑 **Relay trigger keywords in TEAMS.md** — `TEAMS.md` now documents all relay trigger keywords (question/task/reminder patterns) from the v5.0.9 relay plugin, helping bots understand and coordinate cross-bot communication.
+- 🌍 **Proper Vietnamese diacritics** — All workspace `.md` files now use proper UTF-8 Vietnamese with full diacritics, eliminating mojibake.
+- 👍 **Tool-based reaction** — `TOOLS.md` mandates bots call the `react` action with 👍 before replying, replacing unreliable gateway auto-ack.
+
 </details>
 
 ---

package/README.vi.md

@@ -3,7 +3,7 @@
 # 🦞 OpenClaw Setup
 
 <p align="center">
-  <a href="https://github.com/tuanminhhole/openclaw-setup/releases"><img src="https://img.shields.io/badge/RELEASE-v5.5.0-0EA5E9?style=for-the-badge" alt="Version 5.5.0" /></a>
+  <a href="https://github.com/tuanminhhole/openclaw-setup/releases"><img src="https://img.shields.io/badge/RELEASE-v5.6.10-0EA5E9?style=for-the-badge" alt="Version 5.6.9" /></a>
   <a href="https://github.com/tuanminhhole/openclaw-setup?tab=MIT-1-ov-file"><img src="https://img.shields.io/badge/LICENSE-MIT-success?style=for-the-badge" alt="MIT License" /></a>
   <a href="https://www.npmjs.com/package/create-openclaw-bot"><img src="https://img.shields.io/npm/v/create-openclaw-bot?style=for-the-badge&label=CLI&color=2563EB&logo=npm&logoColor=white" alt="NPM Version" /></a>
   <a href="https://github.com/tuanminhhole/openclaw-setup/stargazers"><img src="https://img.shields.io/github/stars/tuanminhhole/openclaw-setup?style=for-the-badge&color=eab308&logo=github&logoColor=white" alt="GitHub Stars" /></a>
@@ -24,24 +24,23 @@ Công cụ **CLI tương tác** và **Setup Wizard** để tự triển khai Bot
 
 ---
 
-## 🆕 Có gì mới trong v5.6.0
-
-- 🧠 **Memory & Dreaming bật mặc định** — Long-term Memory skill giờ được bật sẵn cho mọi cài đặt mới. Plugin `memory-core` với `dreaming.enabled: true` được inject tự động vào `openclaw.json`, `DREAMS.md` được tạo sẵn trong workspace.
-- 🤝 **Card Relay plugin tự động hiển thị** — Khi chọn Telegram multi-bot (≥2 bots), card Relay plugin hiện ra với badge "Tự động bật" và checkbox bị khóa. Chuyển về 1 bot sẽ ẩn card.
-- 🔑 **Từ khóa relay trong TEAMS.md** — `TEAMS.md` giờ liệt kê đầy đủ từ khóa kích hoạt relay (hỏi/giao việc/nhắc nhở) từ plugin v5.0.9, giúp bot hiểu và phối hợp tốt hơn.
-- 🌍 **Tiếng Việt có dấu chuẩn** — Tất cả file `.md` workspace giờ dùng UTF-8 chuẩn với dấu tiếng Việt đầy đủ, hết lỗi mojibake.
-- 👍 **Tool-based reaction** — `TOOLS.md` bắt buộc bot gọi action `react` thả 👍 trước khi trả lời, thay vì dùng gateway auto-ack không ổn định.
-
-<details>
-<summary><b>Trước đó: Có gì mới ở v5.5.0</b></summary>
-
-- 📦 **OpenClaw 2026.4.14** — Nâng từ 2026.4.5. Bao gồm hệ thống Dreaming, cải thiện active-memory, sửa deadlock nút approve Telegram, ổn định WebSocket keepalive.
-- 📄 **Tách file workspace docs** — Multi-bot giờ sinh `TEAM.md` và `RELAY.md` thành file riêng.
-- 🔐 **Quy tắc bảo mật đầy đủ mọi nơi** — Tất cả `AGENTS.md` giờ có đủ 4 section bảo mật.
-- 🗑️ **Xóa file `.yaml` agent** — OpenClaw Core chỉ đọc từ `openclaw.json`.
-- 🤖 **Chống ảo giác handoff** — `AGENTS.md` relay bắt buộc `react` action.
-- 🏗️ **Scaffold-based generation** — Cả Wizard lẫn CLI gọi chung scaffold builders.
-
+## 🆕 Có gì mới trong v5.6.10
+
+- 🔧 **Sửa provider OpenAI Codex** — Cập nhật registry model Codex phù hợp API hiện tại của OpenAI. Loại 6 model đã dừng, giữ 4 model đang hoạt động: `gpt-5.4`, `gpt-5.3-codex`, `gpt-5.2`, `gpt-5.4-mini`.
+- 🔀 **Chuyển chế độ API 9Router** — Đổi từ `openai-completions` sang `openai-responses` cho khớp với Responses API mới của OpenAI.
+- 🩹 **Tự động patch 9Router** — Script `patch-9router.js` mới tự vá source files 9Router khi setup, upgrade và trước mỗi lần khởi động để tương thích thay đổi API Codex.
+- 🎯 **Chọn model Codex trực tiếp** — Config 9Router giờ hiển thị từng model Codex bên cạnh `smart-route` để người dùng có thể chọn model cụ thể.
+- 💬 **Config nhóm Zalo Personal** — Bổ sung `defaultAccount`, `groupAllowFrom`, `historyLimit`, wildcard group config và `autoReply` để xử lý nhóm tốt hơn ngay từ đầu.
+
+<details>
+<summary><b>Trước đó: Có gì mới ở v5.6.0</b></summary>
+
+- 🧠 **Memory & Dreaming bật mặc định** — Long-term Memory skill giờ được bật sẵn cho mọi cài đặt mới. Plugin `memory-core` với `dreaming.enabled: true` được inject tự động vào `openclaw.json`, `DREAMS.md` được tạo sẵn trong workspace.
+- 🤝 **Card Relay plugin tự động hiển thị** — Khi chọn Telegram multi-bot (≥2 bots), card Relay plugin hiện ra với badge "Tự động bật" và checkbox bị khóa. Chuyển về 1 bot sẽ ẩn card.
+- 🔑 **Từ khóa relay trong TEAMS.md** — `TEAMS.md` giờ liệt kê đầy đủ từ khóa kích hoạt relay (hỏi/giao việc/nhắc nhở) từ plugin v5.0.9, giúp bot hiểu và phối hợp tốt hơn.
+- 🌍 **Tiếng Việt có dấu chuẩn** — Tất cả file `.md` workspace giờ dùng UTF-8 chuẩn với dấu tiếng Việt đầy đủ, hết lỗi mojibake.
+- 👍 **Tool-based reaction** — `TOOLS.md` bắt buộc bot gọi action `react` thả 👍 trước khi trả lời, thay vì dùng gateway auto-ack không ổn định.
+
 </details>
 
 ---

package/dist/cli.js

@@ -20,18 +20,25 @@ function loadSharedModule(modulePath, globalName) {
   return globalThis[globalName] || loaded || {};
 }
 
-const {
-  OPENCLAW_NPM_SPEC,
-  OPENCLAW_RUNTIME_PACKAGES,
-  TELEGRAM_RELAY_PLUGIN_SPEC,
-  TELEGRAM_SETUP_GUIDE_FILENAME,
-  buildRelayPluginInstallCommand,
-  buildTelegramPostInstallChecklist,
-} = loadSharedModule('./setup/shared/common-gen.js', '__openclawCommon');
-
-const {
-  buildDockerArtifacts,
-} = loadSharedModule('./setup/shared/docker-gen.js', '__openclawDockerGen');
+const {
+  OPENCLAW_NPM_SPEC,
+  OPENCLAW_RUNTIME_PACKAGES,
+  NINE_ROUTER_PROXY_API_KEY,
+  NINE_ROUTER_API_BASE_URL,
+  SMART_ROUTE_PROVIDER_MODELS,
+  SMART_ROUTE_PROVIDER_ORDER,
+  TELEGRAM_RELAY_PLUGIN_SPEC,
+  TELEGRAM_SETUP_GUIDE_FILENAME,
+  buildRelayPluginInstallCommand,
+  buildTelegramPostInstallChecklist,
+  get9RouterBaseUrl,
+  build9RouterProviderConfig,
+} = loadSharedModule('./setup/shared/common-gen.js', '__openclawCommon');
+
+const {
+  buildDockerArtifacts,
+  build9RouterPatchScript,
+} = loadSharedModule('./setup/shared/docker-gen.js', '__openclawDockerGen');
 
 const {
   buildWorkspaceFileMap,
@@ -195,47 +202,30 @@ function resolveNative9RouterDesktopLaunch() {
 
 function build9RouterSmartRouteSyncScript(dbPath) {
   const safeDbPath = JSON.stringify(dbPath);
+  const safeRouterBaseUrl = JSON.stringify(NINE_ROUTER_API_BASE_URL);
+  const safeModelPriority = JSON.stringify(SMART_ROUTE_PROVIDER_MODELS);
+  const safeProviderOrder = JSON.stringify(SMART_ROUTE_PROVIDER_ORDER);
   return `function bootstrap() {
   const fs = require('fs');
   const path = require('path');
   const dbPath = ${safeDbPath};
-  const ROUTER='http://localhost:20128';
-  const MODEL_PRIORITY = {
-    codex: ['cx/gpt-5.4', 'cx/gpt-5.3-codex', 'cx/gpt-5.3-codex-high', 'cx/gpt-5.2-codex', 'cx/gpt-5.2', 'cx/gpt-5.1-codex-max', 'cx/gpt-5.1-codex', 'cx/gpt-5.1', 'cx/gpt-5-codex'],
-    'claude-code': ['cc/claude-opus-4-6', 'cc/claude-sonnet-4-6', 'cc/claude-opus-4-5-20251101', 'cc/claude-sonnet-4-5-20250929', 'cc/claude-haiku-4-5-20251001'],
-    github: ['gh/gpt-5.4', 'gh/gpt-5.3-codex', 'gh/gpt-5.2-codex', 'gh/gpt-5.2', 'gh/gpt-5.1-codex-max', 'gh/gpt-5.1-codex', 'gh/gpt-5.1', 'gh/gpt-5', 'gh/gpt-4.1', 'gh/gpt-4o', 'gh/claude-opus-4.6', 'gh/claude-sonnet-4.6', 'gh/claude-sonnet-4.5', 'gh/claude-opus-4.5', 'gh/claude-haiku-4.5', 'gh/gemini-3-pro-preview', 'gh/gemini-3-flash-preview', 'gh/gemini-2.5-pro'],
-    cursor: ['cu/default', 'cu/claude-4.6-opus-max', 'cu/claude-4.5-opus-high-thinking', 'cu/claude-4.5-sonnet-thinking', 'cu/claude-4.5-sonnet', 'cu/gpt-5.3-codex', 'cu/gpt-5.2-codex', 'cu/gemini-3-flash-preview'],
-    kilo: ['kc/anthropic/claude-sonnet-4-20250514', 'kc/anthropic/claude-opus-4-20250514', 'kc/google/gemini-2.5-pro', 'kc/google/gemini-2.5-flash', 'kc/openai/gpt-4.1', 'kc/deepseek/deepseek-chat'],
-    cline: ['cl/anthropic/claude-sonnet-4.6', 'cl/anthropic/claude-opus-4.6', 'cl/openai/gpt-5.3-codex', 'cl/openai/gpt-5.4', 'cl/google/gemini-3.1-pro-preview'],
-    'gemini-cli': ['gc/gemini-3-flash-preview', 'gc/gemini-3-pro-preview'],
-    iflow: ['if/qwen3-coder-plus', 'if/kimi-k2', 'if/kimi-k2-thinking', 'if/glm-4.7', 'if/deepseek-r1', 'if/deepseek-v3.2', 'if/deepseek-v3', 'if/qwen3-max', 'if/qwen3-235b', 'if/iflow-rome-30ba3b'],
-    qwen: ['qw/qwen3-coder-plus', 'qw/qwen3-coder-flash', 'qw/vision-model', 'qw/coder-model'],
-    kiro: ['kr/claude-sonnet-4.5', 'kr/claude-haiku-4.5', 'kr/deepseek-3.2', 'kr/deepseek-3.1', 'kr/qwen3-coder-next'],
-    ollama: ['ollama/gemma4:e2b', 'ollama/gemma4:e4b', 'ollama/gemma4:26b', 'ollama/gemma4:31b', 'ollama/qwen3.5', 'ollama/kimi-k2.5', 'ollama/glm-5', 'ollama/glm-4.7-flash', 'ollama/minimax-m2.5', 'ollama/gpt-oss:120b'],
-    'kimi-coding': ['kmc/kimi-k2.5', 'kmc/kimi-k2.5-thinking', 'kmc/kimi-latest'],
-    glm: ['glm/glm-5.1', 'glm/glm-5', 'glm/glm-4.7'],
-    'glm-cn': ['glm/glm-5.1', 'glm/glm-5', 'glm/glm-4.7'],
-    minimax: ['minimax/MiniMax-M2.7', 'minimax/MiniMax-M2.5', 'minimax/MiniMax-M2.1'],
-    kimi: ['kimi/kimi-k2.5', 'kimi/kimi-k2.5-thinking', 'kimi/kimi-latest'],
-    deepseek: ['deepseek/deepseek-chat', 'deepseek/deepseek-reasoner'],
-    xai: ['xai/grok-4', 'xai/grok-4-fast-reasoning', 'xai/grok-code-fast-1'],
-    mistral: ['mistral/mistral-large-latest', 'mistral/codestral-latest'],
-    groq: ['groq/llama-3.3-70b-versatile', 'groq/openai/gpt-oss-120b'],
-    cerebras: ['cerebras/gpt-oss-120b'],
-    alicode: ['alicode/qwen3.5-plus', 'alicode/qwen3-coder-plus'],
-    openai: ['openai/gpt-4o', 'openai/gpt-4.1'],
-    anthropic: ['anthropic/claude-sonnet-4', 'anthropic/claude-haiku-3.5'],
-    gemini: ['gemini/gemini-2.5-flash', 'gemini/gemini-2.5-pro'],
-  };
-  const sync = async () => {
-    try {
-      const response = await fetch(ROUTER + '/api/providers');
-      if (!response.ok) return;
-      const payload = await response.json();
-      const a = (payload.connections || [])
-        .filter((item) => item && item.provider && item.isActive !== false && !item.disabled)
-        .map((item) => item.provider);
-      let db = {};
+  const ROUTER=${safeRouterBaseUrl};
+  const MODEL_PRIORITY=${safeModelPriority};
+  const PREF=${safeProviderOrder};
+  const sync = async () => {
+    try {
+      const response = await fetch(ROUTER + '/api/providers');
+      if (!response.ok) return;
+      const payload = await response.json();
+      const rawConnections = Array.isArray(payload.connections)
+        ? payload.connections
+        : Array.isArray(payload.providerConnections)
+          ? payload.providerConnections
+          : [];
+      const a = [...new Set(rawConnections
+        .filter((item) => item && item.provider && item.isActive !== false && !item.disabled)
+        .map((item) => item.provider))];
+      let db = {};
       try {
         db = JSON.parse(fs.readFileSync(dbPath, 'utf8'));
       } catch {}
@@ -249,11 +239,12 @@ function build9RouterSmartRouteSyncScript(dbPath) {
           console.log('Removed smart-route (no active providers)');
         }
       };
-      if (!a.length) {
-        removeSmartRoute();
-        return;
-      }
-      const m = a.flatMap((provider) => MODEL_PRIORITY[provider] || []);
+      if (!a.length) {
+        removeSmartRoute();
+        return;
+      }
+      a.sort((x, y) => (PREF.indexOf(x) === -1 ? 99 : PREF.indexOf(x)) - (PREF.indexOf(y) === -1 ? 99 : PREF.indexOf(y)));
+      const m = a.flatMap((provider) => MODEL_PRIORITY[provider] || []);
       if (!m.length) {
         removeSmartRoute();
         return;
@@ -450,15 +441,69 @@ function resolveCommandOnPath(command) {
   }
 }
 
-async function writeNative9RouterSyncScript(projectDir) {
-  const syncScriptPath = path.join(projectDir, '.openclaw', '9router-smart-route-sync.js');
-  await fs.ensureDir(path.dirname(syncScriptPath));
-  // Use native home data dir so sync script writes to same place 9router binary reads from
-  const nativeDataDir = getNative9RouterDataDir();
-  await fs.ensureDir(nativeDataDir);
-  await fs.writeFile(syncScriptPath, build9RouterSmartRouteSyncScript(path.join(nativeDataDir, 'db.json')));
-  return syncScriptPath;
-}
+async function writeNative9RouterSyncScript(projectDir) {
+  const syncScriptPath = path.join(projectDir, '.openclaw', '9router-smart-route-sync.js');
+  await fs.ensureDir(path.dirname(syncScriptPath));
+  // Use native home data dir so sync script writes to same place 9router binary reads from
+  const nativeDataDir = getNative9RouterDataDir();
+  await fs.ensureDir(nativeDataDir);
+  await fs.writeFile(syncScriptPath, build9RouterSmartRouteSyncScript(path.join(nativeDataDir, 'db.json')));
+  return syncScriptPath;
+}
+
+async function writeNative9RouterPatchScript(projectDir) {
+  const patchScriptPath = path.join(projectDir, '.openclaw', 'patch-9router.js');
+  await fs.ensureDir(path.dirname(patchScriptPath));
+  await fs.writeFile(patchScriptPath, build9RouterPatchScript());
+  return patchScriptPath;
+}
+
+async function patchProject9RouterOpenClawConfig(projectDir) {
+  const configPath = path.join(projectDir, '.openclaw', 'openclaw.json');
+  if (!await fs.pathExists(configPath)) return false;
+  const config = await fs.readJson(configPath);
+  const provider = config?.models?.providers?.['9router'];
+  if (!provider) return false;
+  provider.baseUrl = get9RouterBaseUrl(detectProjectDeployMode(projectDir));
+  provider.apiKey = NINE_ROUTER_PROXY_API_KEY;
+  provider.api = 'openai-completions';
+  provider.models = build9RouterProviderConfig(provider.baseUrl).models;
+  await fs.writeJson(configPath, config, { spaces: 2 });
+  return true;
+}
+
+async function patchProjectDocker9Router(projectDir) {
+  const dockerDir = path.join(projectDir, 'docker', 'openclaw');
+  const composePath = path.join(dockerDir, 'docker-compose.yml');
+  if (!await fs.pathExists(composePath)) return false;
+
+  await fs.ensureDir(dockerDir);
+  await fs.writeFile(path.join(dockerDir, 'sync.js'), build9RouterSmartRouteSyncScript('/root/.9router/db.json'));
+  await fs.writeFile(path.join(dockerDir, 'patch-9router.js'), build9RouterPatchScript());
+  let compose = await fs.readFile(composePath, 'utf8');
+  compose = compose.replace(
+    /node -e "require\('fs'\)\.writeFileSync\('\/tmp\/sync\.js',Buffer\.from\('[^']*','base64'\)\.toString\(\)\)"/,
+    "cp /opt/sync.js /tmp/sync.js"
+  );
+  compose = compose.replace(
+    /(npm install -g [^\n]+\n)/,
+    `$1        cp /opt/patch-9router.js /tmp/patch-9router.js\n`
+  );
+  if (!compose.includes('node /tmp/patch-9router.js || true')) {
+    compose = compose.replace(
+      /(\s*node \/tmp\/sync\.js > \/tmp\/sync\.log 2>&1 &\n)/,
+      `        node /tmp/patch-9router.js || true\n$1`
+    );
+  }
+  if (!compose.includes('./sync.js:/opt/sync.js:ro')) {
+    compose = compose.replace(
+      /(\s*-\s*9router-data:\/root\/\.9router\s*\n)/,
+      `$1      - ./sync.js:/opt/sync.js:ro\n      - ./patch-9router.js:/opt/patch-9router.js:ro\n`
+    );
+  }
+  await fs.writeFile(composePath, compose, 'utf8');
+  return true;
+}
 
 function getGatewayAllowedOrigins(port) {
   const normalizedPort = Number(port) || 18791;
@@ -881,8 +926,26 @@ async function runUpgradeCommand() {
       isVi: false,
     }));
   }
-
-  console.log(chalk.green('\nUpgrade artifacts refreshed successfully.'));
+
+  if (is9Router) {
+    await writeNative9RouterPatchScript(projectDir);
+    await patchProject9RouterOpenClawConfig(projectDir);
+    if (deployMode === 'docker') {
+      await patchProjectDocker9Router(projectDir);
+    } else {
+      await writeNative9RouterSyncScript(projectDir);
+      try {
+        execFileSync(process.execPath, [path.join(projectDir, '.openclaw', 'patch-9router.js')], {
+          cwd: projectDir,
+          stdio: 'ignore',
+        });
+      } catch {
+        // Best effort: start scripts also retry the patch before launch.
+      }
+    }
+  }
+
+  console.log(chalk.green('\nUpgrade artifacts refreshed successfully.'));
   if (deployMode === 'docker') {
     console.log(chalk.white(`   Next: cd ${path.join(projectDir, 'docker', 'openclaw')} && docker compose up -d --build`));
   } else {
@@ -892,6 +955,7 @@ async function runUpgradeCommand() {
 
 function startNative9RouterPm2({ isVi, projectDir, appName, syncScriptPath }) {
   const routerAppName = `${appName}-9router`;
+  const syncAppName = `${appName}-9router-sync`;
   const routerLaunch = resolveNative9RouterDesktopLaunch();
   const normalizedProjectDir = projectDir.replace(/\\/g, '/');
   const normalizedSyncScriptPath = syncScriptPath ? syncScriptPath.replace(/\\/g, '/') : '';
@@ -921,7 +985,6 @@ function startNative9RouterPm2({ isVi, projectDir, appName, syncScriptPath }) {
     env: { ...process.env, ...routerLaunch.env }
   });
   if (syncScriptPath) {
-    const syncAppName = `${appName}-9router-sync`;
     try {
       execSync(`pm2 delete ${syncAppName}`, {
         cwd: projectDir,
@@ -2152,13 +2215,13 @@ async function main() {
   } else if (providerKey === '9router') {
     authProfilesJson = {
       version: 1,
-      profiles: {
-        '9router-proxy': {
-          provider: '9router',
-          type: 'api_key',
-          key: 'sk-no-key',
-        },
-      },
+        profiles: {
+          '9router-proxy': {
+            provider: '9router',
+            type: 'api_key',
+            key: NINE_ROUTER_PROXY_API_KEY,
+          },
+        },
       order: { '9router': ['9router-proxy'] },
     };
   }
@@ -2230,21 +2293,14 @@ async function main() {
           model: { primary: modelsPrimary, fallbacks: [] },
         })),
       },
-      ...(providerKey === '9router' ? {
-        models: {
-          mode: 'merge',
-          providers: {
-            '9router': {
-              baseUrl: deployMode === 'native' ? 'http://localhost:20128/v1' : 'http://9router:20128/v1',
-              apiKey: 'sk-no-key',
-              api: 'openai-completions',
-              models: [
-                { id: 'smart-route', name: 'Smart Proxy (Auto Route)', contextWindow: 200000, maxTokens: 8192 },
-              ],
-            },
-          },
-        },
-      } : provider.isLocal ? {
+      ...(providerKey === '9router' ? {
+        models: {
+          mode: 'merge',
+          providers: {
+            '9router': build9RouterProviderConfig(get9RouterBaseUrl(deployMode)),
+          },
+        },
+      } : provider.isLocal ? {
         models: {
           mode: 'merge',
           providers: {
@@ -2299,9 +2355,9 @@ async function main() {
       sharedConfig.skills = { entries: skillEntries };
     }
 
-    await fs.writeJson(path.join(rootClawDir, 'openclaw.json'), sharedConfig, { spaces: 2 });
-    await fs.writeFile(
-      path.join(projectDir, TELEGRAM_SETUP_GUIDE_FILENAME),
+    await fs.writeJson(path.join(rootClawDir, 'openclaw.json'), sharedConfig, { spaces: 2 });
+    await fs.writeFile(
+      path.join(projectDir, TELEGRAM_SETUP_GUIDE_FILENAME),
       buildTelegramPostInstallChecklist({ isVi, bots, groupId }),
       'utf8',
     );
@@ -2436,21 +2492,14 @@ async function main() {
           model: { primary: modelsPrimary, fallbacks: [] }
         }]
       },
-      ...(providerKey === '9router' ? {
-        models: {
-          mode: 'merge',
-          providers: {
-            '9router': {
-              baseUrl: deployMode === 'native' ? 'http://localhost:20128/v1' : 'http://9router:20128/v1',
-              apiKey: 'sk-no-key',
-              api: 'openai-completions',
-              models: [
-                { id: 'smart-route', name: 'Smart Proxy (Auto Route)', contextWindow: 200000, maxTokens: 8192 }
-              ]
-            }
-          }
-        }
-      } : provider.isLocal ? {
+      ...(providerKey === '9router' ? {
+        models: {
+          mode: 'merge',
+          providers: {
+            '9router': build9RouterProviderConfig(get9RouterBaseUrl(deployMode))
+          }
+        }
+      } : provider.isLocal ? {
         models: {
           mode: 'merge',
           providers: {
@@ -2521,19 +2570,30 @@ async function main() {
         };
       }
       botConfig.channels['telegram'] = telegramConfig;
-    } else if (hasZaloPersonal(channelKey)) {
-      botConfig.channels['zalouser'] = {
-        enabled: true,
-        dmPolicy: 'open',
-        allowFrom: ['*']
-      };
+    } else if (hasZaloPersonal(channelKey)) {
+      botConfig.channels['zalouser'] = {
+        enabled: true,
+        defaultAccount: 'default',
+        dmPolicy: 'open',
+        allowFrom: ['*'],
+        groupPolicy: 'allowlist',
+        groupAllowFrom: ['*'],
+        historyLimit: 50,
+        groups: {
+          '*': {
+            enabled: true,
+            requireMention: false,
+          },
+        },
+        autoReply: true,
+      };
     } else if (channelKey === 'zalo-bot') {
       botConfig.channels['zalo'] = { enabled: true, provider: 'official_account' };
     }
 
-    await fs.writeJson(path.join(loopBotDir, '.openclaw', 'openclaw.json'), botConfig, { spaces: 2 });
-    
-    // ── Workspace files: use shared writeWorkspaceFiles() ──────────────────────
+    await fs.writeJson(path.join(loopBotDir, '.openclaw', 'openclaw.json'), botConfig, { spaces: 2 });
+
+    // ── Workspace files: use shared writeWorkspaceFiles() ──────────────────────
     const dockerWorkspaceDir = path.join(loopBotDir, '.openclaw', loopWorkspaceDir);
     const dockerOwnAliases = [loopBotName, bots[bIndex]?.slashCmd || '', `bot ${bIndex + 1}`].filter(Boolean);
     const dockerOtherAgents = teamRoster
@@ -2744,10 +2804,19 @@ async function main() {
       }
     }
 
-    let native9RouterSyncScriptPath = null;
-    if (providerKey === '9router') {
-      native9RouterSyncScriptPath = await writeNative9RouterSyncScript(projectDir);
-    }
+    let native9RouterSyncScriptPath = null;
+    if (providerKey === '9router') {
+      await writeNative9RouterPatchScript(projectDir);
+      native9RouterSyncScriptPath = await writeNative9RouterSyncScript(projectDir);
+      try {
+        execFileSync(process.execPath, [path.join(projectDir, '.openclaw', 'patch-9router.js')], {
+          cwd: projectDir,
+          stdio: 'ignore',
+        });
+      } catch {
+        // Start scripts retry this patch before launching 9router.
+      }
+    }
 
     await ensureProjectRuntimeDirs(projectDir, isVi);
 
@@ -2817,10 +2886,10 @@ async function main() {
           cwd: projectDir,
           env: getProjectRuntimeEnv(projectDir, native9RouterLaunch.env)
         }).unref();
-        const routerHealth = await waitFor9RouterApiReady();
-        if (native9RouterSyncScriptPath) {
-          spawnBackgroundProcess(process.execPath, [native9RouterSyncScriptPath], {
-            cwd: projectDir
+        const routerHealth = await waitFor9RouterApiReady();
+        if (native9RouterSyncScriptPath) {
+          spawnBackgroundProcess(process.execPath, [native9RouterSyncScriptPath], {
+            cwd: projectDir
           }).unref();
         }
         console.log(chalk.gray(isVi

package/dist/setup/data/channels.js

@@ -65,15 +65,26 @@
       channelConfig: {
         zalouser: {
           enabled: true,
+          defaultAccount: 'default',
           accounts: {
             default: {
               dmPolicy: 'open',
               allowFrom: ['*'],
               groupPolicy: 'allowlist',
+              groupAllowFrom: ['*'],
             },
           },
           dmPolicy: 'open',
+          allowFrom: ['*'],
           groupPolicy: 'allowlist',
+          groupAllowFrom: ['*'],
+          historyLimit: 50,
+          groups: {
+            '*': {
+              enabled: true,
+              requireMention: false,
+            },
+          },
         },
       },
       pluginInstall: '@openclaw/zalouser',
@@ -161,4 +172,3 @@
 - ❌ DO NOT run containers with --privileged
 - ✅ Limit exposed ports (only 38789)`,
   };
-