create-openclaw-bot 5.7.0 → 5.7.3

package/README.md

@@ -3,7 +3,7 @@
 # 🦞 OpenClaw Setup
 
 <p align="center">
-  <a href="https://github.com/tuanminhhole/openclaw-setup/releases"><img src="https://img.shields.io/badge/RELEASE-v5.7.0-0EA5E9?style=for-the-badge" alt="Version 5.7.0" /></a>
+  <a href="https://github.com/tuanminhhole/openclaw-setup/releases"><img src="https://img.shields.io/badge/RELEASE-v5.7.2-0EA5E9?style=for-the-badge" alt="Version 5.7.2" /></a>
   <a href="https://github.com/tuanminhhole/openclaw-setup?tab=MIT-1-ov-file"><img src="https://img.shields.io/badge/LICENSE-MIT-success?style=for-the-badge" alt="MIT License" /></a>
   <a href="https://www.npmjs.com/package/create-openclaw-bot"><img src="https://img.shields.io/npm/v/create-openclaw-bot?style=for-the-badge&label=CLI&color=2563EB&logo=npm&logoColor=white" alt="NPM Version" /></a>
   <a href="https://github.com/tuanminhhole/openclaw-setup/stargazers"><img src="https://img.shields.io/github/stars/tuanminhhole/openclaw-setup?style=for-the-badge&color=eab308&logo=github&logoColor=white" alt="GitHub Stars" /></a>
@@ -24,7 +24,7 @@ An interactive **CLI tool** and **Setup Wizard** to deploy your own free AI Bot
 
 ---
 
-## 🆕 What's new in v5.7.0
+## 🆕 What's new in v5.7.2
 
 - 🏗️ **Centralized config architecture** — All `openclaw.json`, `.env`, and `exec-approvals.json` generation now flows through a single `bot-config-gen.js` module. Both the Web Wizard and CLI share the same builder, eliminating config drift between surfaces.
 - 🔄 **Rolling `@latest` versioning** — Installation scripts now use `openclaw@latest` instead of pinned versions, ensuring users always get the newest release without waiting for a setup update.
@@ -33,7 +33,7 @@ An interactive **CLI tool** and **Setup Wizard** to deploy your own free AI Bot
 - 💬 **Standardized Zalo Personal config** — Zalo Personal (`zalouser`) channel now uses production-matching config with `groups`, `groupPolicy`, `historyLimit`, and proper `bindings`.
 
 <details>
-<summary><b>Previous: What's new in v5.7.0</b></summary>
+<summary><b>Previous: What's new in v5.7.2</b></summary>
 
 - 🔧 **OpenAI Codex provider fix** — Updated Codex model registry to match OpenAI's current API. Removed 6 deprecated models, retained 4 active ones: `gpt-5.4`, `gpt-5.3-codex`, `gpt-5.2`, `gpt-5.4-mini`.
 - 🔀 **9Router API mode switch** — Switched from `openai-completions` to `openai-responses` to align with OpenAI's Responses API.

package/README.vi.md

@@ -3,7 +3,7 @@
 # 🦞 OpenClaw Setup
 
 <p align="center">
-  <a href="https://github.com/tuanminhhole/openclaw-setup/releases"><img src="https://img.shields.io/badge/RELEASE-v5.7.0-0EA5E9?style=for-the-badge" alt="Version 5.7.0" /></a>
+  <a href="https://github.com/tuanminhhole/openclaw-setup/releases"><img src="https://img.shields.io/badge/RELEASE-v5.7.2-0EA5E9?style=for-the-badge" alt="Version 5.7.2" /></a>
   <a href="https://github.com/tuanminhhole/openclaw-setup?tab=MIT-1-ov-file"><img src="https://img.shields.io/badge/LICENSE-MIT-success?style=for-the-badge" alt="MIT License" /></a>
   <a href="https://www.npmjs.com/package/create-openclaw-bot"><img src="https://img.shields.io/npm/v/create-openclaw-bot?style=for-the-badge&label=CLI&color=2563EB&logo=npm&logoColor=white" alt="NPM Version" /></a>
   <a href="https://github.com/tuanminhhole/openclaw-setup/stargazers"><img src="https://img.shields.io/github/stars/tuanminhhole/openclaw-setup?style=for-the-badge&color=eab308&logo=github&logoColor=white" alt="GitHub Stars" /></a>
@@ -24,7 +24,7 @@ Công cụ **CLI tương tác** và **Setup Wizard** để tự triển khai Bot
 
 ---
 
-## 🆕 Có gì mới trong v5.7.0
+## 🆕 Có gì mới trong v5.7.2
 
 - 🏗️ **Kiến trúc config tập trung** — Toàn bộ logic tạo `openclaw.json`, `.env`, và `exec-approvals.json` giờ chạy qua module duy nhất `bot-config-gen.js`. Cả Web Wizard và CLI dùng chung cùng một builder, loại bỏ sai lệch config giữa 2 bề mặt.
 - 🔄 **Phiên bản rolling `@latest`** — Script cài đặt giờ dùng `openclaw@latest` thay vì version cố định, đảm bảo người dùng luôn nhận bản mới nhất.
@@ -33,7 +33,7 @@ Công cụ **CLI tương tác** và **Setup Wizard** để tự triển khai Bot
 - 💬 **Chuẩn hóa config Zalo Personal** — Kênh Zalo Personal (`zalouser`) giờ dùng config khớp production với `groups`, `groupPolicy`, `historyLimit`, và `bindings` đúng.
 
 <details>
-<summary><b>Trước đó: Có gì mới ở v5.7.0</b></summary>
+<summary><b>Trước đó: Có gì mới ở v5.7.2</b></summary>
 
 - 🔧 **Sửa provider OpenAI Codex** — Cập nhật registry model Codex phù hợp API hiện tại của OpenAI. Loại 6 model đã dừng, giữ 4 model đang hoạt động: `gpt-5.4`, `gpt-5.3-codex`, `gpt-5.2`, `gpt-5.4-mini`.
 - 🔀 **Chuyển chế độ API 9Router** — Đổi từ `openai-completions` sang `openai-responses` cho khớp với Responses API mới của OpenAI.

package/dist/cli.js

@@ -613,26 +613,54 @@ function printNativeDashboardAccessInfo({ isVi, providerKey, projectDir, gateway
 
 function printZaloPersonalLoginInfo({ isVi, deployMode, projectDir }) {
   const nativeCmd = 'openclaw channels login --channel zalouser --verbose';
-  const dockerCmd = 'docker compose exec -it ai-bot openclaw channels login --channel zalouser --verbose';
+  const dockerCmd = 'docker exec -it openclaw-bot openclaw channels login --channel zalouser --verbose';
   const cmd = deployMode === 'native' ? nativeCmd : dockerCmd;
   const qrPath = deployMode === 'native'
     ? path.join(os.tmpdir(), 'openclaw', 'openclaw-zalouser-qr-default.png')
     : '/tmp/openclaw/openclaw-zalouser-qr-default.png';
-  const projectQrPath = path.join(projectDir, 'zalo-login-qr.png');
   const copyCmd = deployMode === 'native'
     ? (process.platform === 'win32'
-      ? `Copy-Item "${qrPath}" "${projectQrPath}"`
-      : `cp "${qrPath}" "${projectQrPath}"`)
-    : `docker compose cp ai-bot:${qrPath} ./zalo-login-qr.png`;
+      ? `Copy-Item "${qrPath}" "${path.join(projectDir, 'zalo-login-qr.png')}"`
+      : `cp "${qrPath}" "${path.join(projectDir, 'zalo-login-qr.png')}"`)
+    : `docker cp openclaw-bot:${qrPath} ./zalo-qr.png`;
 
   console.log(chalk.yellow(`\n📱 ${isVi ? 'Đăng nhập Zalo Personal (1 lần):' : 'Zalo Personal login (one time):'}`));
-  console.log(chalk.white(`   cd ${projectDir}${deployMode === 'native' ? '' : '/docker/openclaw'} ${process.platform === 'win32' ? ';' : '&&'} ${cmd}`));
-  console.log(chalk.gray(isVi
-    ? `   → OpenClaw sẽ tạo file QR tại: ${qrPath}`
-    : `   → OpenClaw will generate a QR image at: ${qrPath}`));
-  console.log(chalk.gray(isVi
-    ? `   → Nếu cần copy QR ra thư mục project, dùng: ${copyCmd}`
-    : `   → If needed, copy the QR into the project folder with: ${copyCmd}`));
+  if (deployMode === 'docker') {
+    console.log(chalk.white(isVi
+      ? `   1. cd ${projectDir}/docker/openclaw`
+      : `   1. cd ${projectDir}/docker/openclaw`));
+    console.log(chalk.white(isVi
+      ? `   2. ${cmd}`
+      : `   2. ${cmd}`));
+    console.log(chalk.white(isVi
+      ? `   3. Tìm file QR trong container: ${qrPath}`
+      : `   3. Find QR image in container: ${qrPath}`));
+    console.log(chalk.gray(isVi
+      ? `      → Mở Docker Desktop > container openclaw-bot > tab Files > tìm file trên`
+      : `      → Open Docker Desktop > container openclaw-bot > Files tab > find file above`));
+    console.log(chalk.gray(isVi
+      ? `      → Hoặc chạy: ${copyCmd}`
+      : `      → Or run: ${copyCmd}`));
+    console.log(chalk.white(isVi
+      ? '   4. Mở app Zalo > Quét QR > quét mã trong file QR'
+      : '   4. Open Zalo app > Scan QR > scan the QR image'));
+    console.log(chalk.white(isVi
+      ? '   5. Đợi thấy "Login successful" trong terminal'
+      : '   5. Wait for "Login successful" in terminal'));
+    console.log(chalk.white(isVi
+      ? '   6. docker compose restart'
+      : '   6. docker compose restart'));
+  } else {
+    console.log(chalk.white(`   cd ${projectDir} ${process.platform === 'win32' ? ';' : '&&'} ${cmd}`));
+    console.log(chalk.gray(isVi
+      ? `   → File QR sẽ tạo tại: ${qrPath}`
+      : `   → QR file will be created at: ${qrPath}`));
+    if (process.platform === 'win32') {
+      console.log(chalk.gray(isVi
+        ? `   → Copy QR ra project: ${copyCmd}`
+        : `   → Copy QR to project: ${copyCmd}`));
+    }
+  }
 }
 
 async function waitForFile(filePath, timeoutMs = 15000, intervalMs = 500) {
@@ -1831,6 +1859,7 @@ async function writeWorkspaceFiles({
     includeBrowserTool: isDesktop,
     teamRosterFormatted,
     hasScheduler: selectedSkills.includes('scheduler'),
+    hasZaloMod: channelKey === 'zalo-personal',
   });
 
   await fs.ensureDir(workspaceDir);
@@ -2128,15 +2157,18 @@ async function main() {
   
   
   // ── Docker artifacts: Dockerfile + docker-compose via shared buildDockerArtifacts() ──────
-  const skillSlugs = SKILLS
-    .filter(s => selectedSkills.includes(s.value) && s.slug)
-    .map(s => s.slug);
-  const skillInstallCmd = skillSlugs.length > 0
-    ? skillSlugs.map(s => `openclaw skills install ${s} 2>/dev/null || true`).join(' && ')
-    : '';
+  const skillSlugs = SKILLS
+    .filter(s => selectedSkills.includes(s.value) && s.slug)
+    .map(s => s.slug);
+  const skillInstallCmd = skillSlugs.length > 0
+    ? skillSlugs.map(s => `ensure_skill ${s}`).join('\n')
+    : '';
   const relayInstallCmd = (isMultiBot && channelKey === 'telegram')
     ? buildRelayPluginInstallCommand('openclaw')
     : '';
+  const zaloModInstallCmd = hasZaloPersonal(channelKey)
+    ? 'ensure_plugin zalo-mod openclaw-zalo-mod'
+    : '';
   const socatBridge = hasBrowserDesktop ? 'socat TCP-LISTEN:9222,fork,reuseaddr TCP:host.docker.internal:9222 &' : '';
   const deviceApproveLoop = 'while true; do sleep 5; openclaw devices approve --latest 2>/dev/null || true; done >/dev/null 2>&1 &';
 
@@ -2151,11 +2183,12 @@ async function main() {
     hasBrowser: hasBrowserDesktop || hasBrowserServer,
     selectedModel: modelsPrimary,
     agentId,
-    runtimeCommandParts: [
-      skillInstallCmd ? skillInstallCmd + ' &&' : '',
-      relayInstallCmd ? relayInstallCmd + ' &&' : '',
-      socatBridge,
-      deviceApproveLoop,
+    runtimeCommandParts: [
+      skillInstallCmd,
+      relayInstallCmd,
+      zaloModInstallCmd,
+      socatBridge,
+      deviceApproveLoop,
     ].filter(Boolean),
     volumeMount: '../../.openclaw:/root/project/.openclaw',
     singleComposeName: `oc-${agentId}`,

package/dist/setup/shared/bot-config-gen.js

@@ -295,11 +295,11 @@
       },
     };
 
-    const allow = [];
+    const allow = ['memory-core'];
 
     // zalo-mod plugin for Zalo Personal
     if (isZaloPersonal(channelKey)) {
-      allow.push('zalo-mod');
+      allow.push('zalo-mod', 'zalouser');
       entries['zalo-mod'] = {
         enabled: true,
         config: {
@@ -311,12 +311,11 @@
           spamWindowSeconds: 300,
         },
       };
+      entries.zalouser = { enabled: true };
     }
 
     const plugins = { entries };
-    if (allow.length > 0) {
-      plugins.allow = allow;
-    }
+    plugins.allow = allow;
 
     return { plugins };
   }

package/dist/setup/shared/docker-gen.js

@@ -152,6 +152,7 @@ if(touched){console.log('[patch-9router] Applied Codex compatibility patch.');}e
       selectedModel,
       agentId,
       allSkills = [],
+      dockerfilePlugins = [],
       dockerfileSkillInstallMode = 'none',
       runtimeCommandParts = [],
       volumeMount = '../..:/root/project',
@@ -185,16 +186,59 @@ if(touched){console.log('[patch-9router] Applied Codex compatibility patch.');}e
     const skillLines = dockerfileSkillInstallMode === 'build' && allSkills.length > 0
       ? `\n# Install skills (ClawHub)\n${allSkills.map((skill) => `RUN openclaw skills install ${skill} || echo "Warning: Failed to install ${skill} due to rate limits."`).join('\n')}\n`
       : '';
+    const pluginLines = dockerfilePlugins.length > 0
+      ? `\n# Install plugins (ClawHub)\n${dockerfilePlugins.map((p) => `RUN openclaw plugins install ${p} || echo "Warning: Failed to install plugin ${p}"`).join('\n')}\n`
+      : '';
     const patchLine = `RUN node -e "const fs=require('fs');const path=require('path');const dir='/usr/local/lib/node_modules/openclaw/dist';const from='\\t\\t\\t\\t\\tonAgentRunStart: (runId) => {';const to='\\t\\t\\t\\t\\ttimeoutOverrideSeconds: Math.max(1, Math.ceil(timeoutMs / 1e3)),\\n\\t\\t\\t\\t\\tonAgentRunStart: (runId) => {';const files=fs.readdirSync(dir).filter(n=>/\\.js$/.test(n));let patched=0;for(const file of files){const p=path.join(dir,file);let s='';try{s=fs.readFileSync(p,'utf8');}catch{continue;}if(s.includes(to)||!s.includes(from))continue;s=s.replace(from,to);fs.writeFileSync(p,s);patched++;}if(!patched){process.exit(0);}"`;
     
-    // Dynamic runtime configuration injection for container internal IPs
-    const setupInternalIpScript = `const fs=require('fs'),os=require('os'),path=require('path'),p=path.join(process.cwd(),'.openclaw','openclaw.json');if(fs.existsSync(p)){const c=JSON.parse(fs.readFileSync(p,'utf8'));const a=new Set(['http://localhost:18791','http://127.0.0.1:18791','http://0.0.0.0:18791']);for(const entries of Object.values(os.networkInterfaces()||{})){for(const entry of entries||[]){if(!entry||entry.internal||entry.family!=='IPv4'||!entry.address)continue;a.add('http://' + entry.address + ':18791');}}c.tools=Object.assign({},c.tools,{profile:'full',exec:{host:'gateway',security:'full',ask:'off'}});c.gateway=Object.assign({},c.gateway,{port:18791,bind:'custom',customBindHost:'0.0.0.0',controlUi:Object.assign({},c.gateway?.controlUi,{allowedOrigins:Array.from(a).filter(Boolean)})});fs.writeFileSync(p,JSON.stringify(c,null,2));}`;
-    const setupInternalIpB64 = encodeBase64Utf8(setupInternalIpScript);
+    // Dynamic runtime configuration: backup config before any first-run install, restore after.
+    // Missing plugin install may touch openclaw.json, so preserve critical fields.
+    const backupConfigScript = `const fs=require('fs'),path=require('path'),p=path.join(process.cwd(),'.openclaw','openclaw.json'),b=p.replace('openclaw.json','.openclaw-config-backup.json');if(fs.existsSync(p)){fs.copyFileSync(p,b);}`;
+    const backupConfigB64 = encodeBase64Utf8(backupConfigScript);
+
+    const restoreConfigScript = `const fs=require('fs'),os=require('os'),path=require('path'),p=path.join(process.cwd(),'.openclaw','openclaw.json'),b=p.replace('openclaw.json','.openclaw-config-backup.json');if(fs.existsSync(p)&&fs.existsSync(b)){const c=JSON.parse(fs.readFileSync(p,'utf8'));const bk=JSON.parse(fs.readFileSync(b,'utf8'));const keep=['agents','channels','bindings','commands','models','browser','skills'];for(const k of keep){if(bk[k]&&!c[k])c[k]=bk[k];}const a=new Set(['http://localhost:18791','http://127.0.0.1:18791','http://0.0.0.0:18791']);for(const entries of Object.values(os.networkInterfaces()||{})){for(const entry of entries||[]){if(!entry||entry.internal||entry.family!=='IPv4'||!entry.address)continue;a.add('http://'+entry.address+':18791');}}c.tools=Object.assign({},c.tools,{profile:'full',exec:{host:'gateway',security:'full',ask:'off'}});c.gateway=Object.assign({},c.gateway,{port:18791,bind:'custom',customBindHost:'0.0.0.0',mode:c.gateway?.mode||bk.gateway?.mode||'local',controlUi:Object.assign({},c.gateway?.controlUi,{allowedOrigins:Array.from(a).filter(Boolean)})});fs.writeFileSync(p,JSON.stringify(c,null,2));fs.unlinkSync(b);}`;
+    const restoreConfigB64 = encodeBase64Utf8(restoreConfigScript);
 
-    const runtimeParts = runtimeCommandParts.filter(Boolean);
-    runtimeParts.unshift('export OPENCLAW_HOME="$PWD/.openclaw"');
-    runtimeParts.unshift('export OPENCLAW_STATE_DIR="$PWD/.openclaw"');
-    runtimeParts.unshift(`node -e 'eval(Buffer.from("${setupInternalIpB64}","base64").toString())'`);
+    const runtimeParts = runtimeCommandParts.filter(Boolean);
+    const runtimePrelude = [
+      'export OPENCLAW_HOME="${OPENCLAW_HOME:-$PWD/.openclaw}"',
+      'export OPENCLAW_STATE_DIR="${OPENCLAW_STATE_DIR:-$OPENCLAW_HOME}"',
+      'mkdir -p "$OPENCLAW_HOME" "$OPENCLAW_STATE_DIR"',
+      'if [ "$OPENCLAW_STATE_DIR" != "$OPENCLAW_HOME" ]; then',
+      '  for path in "$OPENCLAW_HOME"/*; do',
+      '    [ -e "$path" ] || continue',
+      '    name="$(basename "$path")"',
+      '    [ "$name" = "plugin-runtime-deps" ] && continue',
+      '    [ "$name" = "logs" ] && continue',
+      '    [ -e "$OPENCLAW_STATE_DIR/$name" ] || ln -s "$path" "$OPENCLAW_STATE_DIR/$name"',
+      '  done',
+      'fi',
+      'ensure_plugin() {',
+      '  id="$1"',
+      '  spec="$2"',
+      '  if [ -d "$OPENCLAW_HOME/extensions/$id" ]; then',
+      '    echo "[entrypoint] plugin $id already installed"',
+      '    return 0',
+      '  fi',
+      '  echo "[entrypoint] plugin $id missing; installing $spec"',
+      '  openclaw plugins install "$spec" 2>/dev/null || echo "[entrypoint] warning: failed to install plugin $spec"',
+      '}',
+      'ensure_skill() {',
+      '  id="$1"',
+      '  if find "$OPENCLAW_HOME" -maxdepth 4 -type d -path "*/skills/$id" -print -quit 2>/dev/null | grep -q .; then',
+      '    echo "[entrypoint] skill $id already installed"',
+      '    return 0',
+      '  fi',
+      '  echo "[entrypoint] skill $id missing; installing"',
+      '  openclaw skills install "$id" 2>/dev/null || echo "[entrypoint] warning: failed to install skill $id"',
+      '}',
+      'echo "[entrypoint] ensuring runtime assets, then starting gateway"',
+    ];
+    runtimeParts.unshift(...runtimePrelude);
+    // Backup config BEFORE plugin installs (runtimeCommandParts may contain plugin install commands)
+    runtimeParts.unshift(`node -e 'eval(Buffer.from("${backupConfigB64}","base64").toString())'`);
+    // Restore config AFTER plugin installs (which may clobber openclaw.json)
+    runtimeParts.push(`node -e 'eval(Buffer.from("${restoreConfigB64}","base64").toString())'`);
     if (hasBrowser) {
       runtimeParts.push('socat TCP-LISTEN:9222,fork,reuseaddr TCP:host.docker.internal:9222 &');
       runtimeParts.push('Xvfb :99 -screen 0 1280x720x24 > /dev/null 2>&1 & DISPLAY=:99 openclaw gateway run');
@@ -209,7 +253,7 @@ RUN apt-get update && apt-get install -y git curl${browserAptExtra} && rm -rf /v
 ${browserInstallLines}
 ARG OPENCLAW_VER="${openClawNpmSpec}"
 ARG CACHE_BUST=""
-RUN npm install -g ${openClawNpmSpec} ${openClawRuntimePackages}${skillLines}
+RUN npm install -g ${openClawNpmSpec} ${openClawRuntimePackages}${skillLines}${pluginLines}
 ${patchLine}
 RUN node -e "require('fs').writeFileSync('/usr/local/bin/openclaw-entrypoint.sh', Buffer.from('${runtimeScriptB64}','base64').toString())" && chmod +x /usr/local/bin/openclaw-entrypoint.sh
 WORKDIR /root/project
@@ -225,7 +269,7 @@ CMD ["/bin/sh", "/usr/local/bin/openclaw-entrypoint.sh"]`;
     const docker9RouterEntrypointScript = build9RouterComposeEntrypointScript(syncScriptBase64, patchScriptBase64);
     const extraHostsBlock = `    extra_hosts:\n      - "host.docker.internal:host-gateway"`;
 
-    const appEnvironmentBlock = '    environment:\n      - OPENCLAW_HOME=/root/project/.openclaw\n      - OPENCLAW_STATE_DIR=/root/project/.openclaw\n';
+    const appEnvironmentBlock = '    environment:\n      - OPENCLAW_HOME=/root/project/.openclaw\n      - OPENCLAW_STATE_DIR=/var/lib/openclaw-state\n';
 
     let compose;
     if (isMultiBot) {
@@ -418,7 +462,19 @@ ${appEnvironmentBlock}${plainSingleExtraHosts ? `${extraHostsBlock}\n` : ''}
       - "18791:18791"`;
     }
 
-    return {
+    compose = compose.replaceAll(
+      `      - ${volumeMount}`,
+      `      - ${volumeMount}\n      - openclaw-state:/var/lib/openclaw-state`
+    );
+    if (compose.includes('\nvolumes:\n')) {
+      if (!compose.includes('  openclaw-state:')) {
+        compose = compose.replace('\nvolumes:\n', '\nvolumes:\n  openclaw-state:\n');
+      }
+    } else {
+      compose += '\n\nvolumes:\n  openclaw-state:';
+    }
+
+    return {
       dockerfile,
       compose,
       syncScript,

package/dist/setup/shared/workspace-gen.js

@@ -16,21 +16,34 @@ const workspaceRoot = /** @type {OpenClawWorkspaceRoot} */ (
     return `# Identity\n\n- **Name:** ${name}\n- **Role:** ${desc}${emoji ? `\n- **Emoji:** ${emoji}` : ''}\n\n---\n\nI am **${name}**. When asked my name, I answer: _\"I'm ${name}\"_.${richAiNote ? "\nI don't pretend to be human — I'm an AI, and I'm proud of it." : ''}`;
   }
 
+  function buildZaloSoulSection(isVi, botName) {
+    const name = botName || 'Bot';
+    if (isVi) {
+      return `\n\n**RULE — Zalo Group: Phản hồi theo chế độ Silent Mode:**\nKhi nhận tin từ \`channel: zalouser\` và \`group_id\` có giá trị:\n\n- Nếu tin nhắn chứa \`@${name}\` → **LUÔN reply** (bất kể silent mode).\n- Nếu tin nhắn bắt đầu bằng \`/\` (slash command) → KHÔNG reply, plugin đã xử lý rồi.\n- Tin thường trong group (không mention, không slash):\n  - Nếu **Silent Mode BẬT** → tin này KHÔNG đến được bot (plugin đã chặn).\n  - Nếu **Silent Mode TẮT** → tin này ĐẾN ĐƯỢC bot → **reply bình thường** như DM.\n- DM (không có group_id) → reply bình thường.`;
+    }
+    return `\n\n**RULE — Zalo Group: Reply based on Silent Mode:**\nWhen receiving messages from \`channel: zalouser\` with a \`group_id\`:\n\n- If the message contains \`@${name}\` → **ALWAYS reply** (regardless of silent mode).\n- If the message starts with \`/\` (slash command) → DO NOT reply, the plugin already handled it.\n- Regular group messages (no mention, no slash):\n  - If **Silent Mode is ON** → this message does NOT reach the bot (plugin blocks it).\n  - If **Silent Mode is OFF** → this message DOES reach the bot → **reply normally** like DM.\n- DM (no group_id) → reply normally.`;
+  }
+
   function buildSoulDoc(options = {}) {
-    const { isVi = true, persona = '', variant = 'wizard' } = options;
+    const { isVi = true, persona = '', variant = 'wizard', hasZaloMod = false, botName = 'Bot' } = options;
+    let doc;
     if (variant === 'cli-simple') {
-      return isVi
+      doc = isVi
         ? `# Tính cách\n\n${persona || 'Thân thiện, rõ ràng, giải quyết việc thẳng vào mục tiêu.'}\n`
         : `# Soul\n\n${persona || 'Friendly, clear, and outcome-focused.'}\n`;
-    }
-    if (variant === 'cli-rich') {
-      return isVi
+    } else if (variant === 'cli-rich') {
+      doc = isVi
         ? `# Tính cách\n\n**Hữu ích thật sự.** Bỏ qua câu nệ — cứ giúp thẳng.\n**Có cá tính.** Trợ lý không có cá tính thì chỉ là công cụ.\n\n## Phong cách\n- Tự nhiên, gần gũi như bạn bè\n- Trực tiếp, không parrot câu hỏi.${persona ? `\n\n## Custom Rules\n${persona}` : ''}`
         : `# Soul\n\n**Be genuinely helpful.** Skip filler and help directly.\n**Have personality.** An assistant without personality is just a tool.\n\n## Style\n- Natural and approachable\n- Direct, do not parrot the prompt.${persona ? `\n\n## Custom Rules\n${persona}` : ''}`;
+    } else {
+      doc = isVi
+        ? `# Tính cách\n\n**Hữu ích thật sự.** Bỏ qua câu nệ, cứ giúp thẳng.\n**Có cá tính.** Trợ lý không có cá tính thì chỉ là công cụ.\n\n## Phong cách\n- Tự nhiên, gần gũi\n- Trực tiếp, ngắn gọn${persona ? `\n\n## Custom Rules\n${persona}` : ''}`
+        : `# Soul\n\n**Be genuinely helpful.** Skip filler and just help.\n**Have personality.** An assistant with no personality is just a tool.\n\n## Style\n- Natural and concise\n- Direct and practical${persona ? `\n\n## Custom Rules\n${persona}` : ''}`;
     }
-    return isVi
-      ? `# Tính cách\n\n**Hữu ích thật sự.** Bỏ qua câu nệ, cứ giúp thẳng.\n**Có cá tính.** Trợ lý không có cá tính thì chỉ là công cụ.\n\n## Phong cách\n- Tự nhiên, gần gũi\n- Trực tiếp, ngắn gọn${persona ? `\n\n## Custom Rules\n${persona}` : ''}`
-      : `# Soul\n\n**Be genuinely helpful.** Skip filler and just help.\n**Have personality.** An assistant with no personality is just a tool.\n\n## Style\n- Natural and concise\n- Direct and practical${persona ? `\n\n## Custom Rules\n${persona}` : ''}`;
+    if (hasZaloMod) {
+      doc += buildZaloSoulSection(isVi, botName);
+    }
+    return doc;
   }
 
   function buildTeamDoc(options = {}) {
@@ -305,6 +318,7 @@ const CDP_URL = 'http://127.0.0.1:9222';
       agentWorkspaceDir = 'workspace',
       hasBrowser = false,
       hasScheduler = false,
+      hasZaloMod = false,
       browserDocVariant = '',
     } = options;
 
@@ -332,19 +346,25 @@ const CDP_URL = 'http://127.0.0.1:9222';
         : `\n\n## \u23F0 Cron / Scheduled Tasks\n- OpenClaw natively supports system tools for Cron Jobs.\n- When the user asks to schedule tasks or reminders, use the built-in tools automatically. Do NOT ask users to run crontab or Task Scheduler manually on the host.\n- When operating cron/scheduler tools, do **not** put \`current\` into the Session directory.\n- Skip internal doc lookups such as \`cron-jobs.mdx\`; rely on the available tools and complete the scheduling task directly.`)
       : '';
 
+    const zaloModSection = hasZaloMod
+      ? (isVi
+        ? `\n\n## 💬 Zalo Group — Slash Commands (xử lý bởi plugin)\n\nPlugin \`zalo-mod\` tự động xử lý các slash command sau trong group. Bot KHÔNG cần reply cho chúng:\n\n| Command | Mô tả |\n|---------|-------|\n| \`/rules status\` | Xem cấu hình bot |\n| \`/rules silent-on/off\` | Bật/tắt silent mode |\n| \`/rules welcome-on/off\` | Bật/tắt welcome message |\n| \`/rules tracking-on/off\` | Bật/tắt ghi log chat |\n| \`/noi-quy\` | Hiện nội quy group |\n| \`/menu\` | Danh sách lệnh |\n| \`/groupid\` | Scan và cập nhật config |\n| \`/report\` | Báo cáo hoạt động group |\n\n### Zalo Sticker & Media\n- Sticker Zalo gửi dạng JSON → plugin tự convert thành \`[Sticker]\`\n- Ảnh/video/file trong group: zalouser channel chỉ forward text, media bị drop`
+        : `\n\n## 💬 Zalo Group — Slash Commands (handled by plugin)\n\nThe \`zalo-mod\` plugin automatically handles these slash commands in group. Bot does NOT need to reply:\n\n| Command | Description |\n|---------|-------------|\n| \`/rules status\` | View bot config |\n| \`/rules silent-on/off\` | Toggle silent mode |\n| \`/rules welcome-on/off\` | Toggle welcome message |\n| \`/rules tracking-on/off\` | Toggle chat logging |\n| \`/noi-quy\` | Show group rules |\n| \`/menu\` | List commands |\n| \`/groupid\` | Scan and update config |\n| \`/report\` | Group activity report |\n\n### Zalo Sticker & Media\n- Zalo stickers arrive as JSON → plugin auto-converts to \`[Sticker]\`\n- Images/videos/files in groups: zalouser channel only forwards text, media is dropped`)
+      : '';
+
     const dmOverride = isVi
       ? `\n\n## Override: DM và Telegram reaction\n- Nếu metadata không nói rõ đây là group/supergroup, mặc định xem là chat riêng/DM và trả lời bình thường.\n- Quy tắc im lặng khi không ai được gọi chỉ áp dụng cho group chat, không áp dụng cho DM/chat riêng.\n- Trước MỖI phản hồi Telegram nhìn thấy bởi user, nếu turn hiện tại có tool/action reaction native thì ưu tiên dùng nó để thả \`👍\` trước, trừ khi \`👍\` đã có sẵn.\n- Nếu turn hiện tại không expose tool reaction hoặc chat đích không hỗ trợ reaction thật, cứ trả lời đúng vai trò và không được nói là mình đã thả reaction.`
       : `\n\n## Override: DM and Telegram reaction\n- If metadata does not clearly say this is a group/supergroup, treat it as a private DM and reply normally.\n- The stay-silent rule for unaddressed messages applies only to group chats, never to DMs.\n- Before EVERY user-visible Telegram reply, if the current turn exposes a native reaction tool/action, use it to add \`👍\` first unless \`👍\` is already present.\n- If the reaction tool is unavailable or the target chat does not support real reactions, just reply in-character and do not claim that you reacted.`;
 
     if (variant === 'relay') {
       return isVi
-        ? `# Hướng dẫn dùng tool\n\n## Tools có sẵn\n${skillsSection}\n\n## Quy tắc chung\n- Tóm tắt kết quả tool thay vì dump raw output.\n- Mọi bot đều có quyền sử dụng tất cả tool (scheduler, browser, exec). Vai trò (dev/marketing/...) chỉ là persona, KHÔNG giới hạn quyền dùng tool.\n- Workspace của bạn là \`.openclaw/${agentWorkspaceDir}/\`.${browserRef}${telegramSection}${cronSection}${dmOverride}\n`
-        : `# Tool Usage Guide\n\n## Available Tools\n${skillsSection}\n\n## General Rules\n- Summarize tool output instead of dumping raw output.\n- All bots have equal access to all tools (scheduler, browser, exec). Roles (dev/marketing/...) are persona only, NOT tool permissions.\n- Your workspace is \`.openclaw/${agentWorkspaceDir}/\`.${browserRef}${telegramSection}${cronSection}${dmOverride}\n`;
+        ? `# Hướng dẫn dùng tool\n\n## Tools có sẵn\n${skillsSection}\n\n## Quy tắc chung\n- Tóm tắt kết quả tool thay vì dump raw output.\n- Mọi bot đều có quyền sử dụng tất cả tool (scheduler, browser, exec). Vai trò (dev/marketing/...) chỉ là persona, KHÔNG giới hạn quyền dùng tool.\n- Workspace của bạn là \`.openclaw/${agentWorkspaceDir}/\`.${browserRef}${telegramSection}${cronSection}${zaloModSection}${dmOverride}\n`
+        : `# Tool Usage Guide\n\n## Available Tools\n${skillsSection}\n\n## General Rules\n- Summarize tool output instead of dumping raw output.\n- All bots have equal access to all tools (scheduler, browser, exec). Roles (dev/marketing/...) are persona only, NOT tool permissions.\n- Your workspace is \`.openclaw/${agentWorkspaceDir}/\`.${browserRef}${telegramSection}${cronSection}${zaloModSection}${dmOverride}\n`;
     }
 
     return isVi
-      ? `# Hướng dẫn sử dụng Tools\n\n## Danh sách skills đã cài\n${skillsSection}\n\n## Nguyên tắc chung\n- Ưu tiên dùng tool/skill phù hợp thay vì tự suy đoán\n- Nếu tool trả về lỗi — thử lại 1 lần, sau đó báo user\n- Không chạy tool liên tục mà không có mục đích rõ ràng\n- Luôn tóm tắt kết quả tool cho user thay vì dump raw output${browserRef}\n\n## Quy ước\n- Web Search: chỉ dùng khi cần thông tin realtime hoặc user yêu cầu\n- Browser: chỉ mở trang khi user yêu cầu cụ thể\n- Memory: tự ghi nhớ thông tin tự nhiên, không cần user nhắc${cronSection}\n\n## \uD83D\uDCC1 File & Workspace\n- Bot có thể đọc/ghi file trong thư mục workspace: \`${workspacePath}\`\n- Dùng để lưu notes, scripts, cấu hình tạm\n\n## \u26A0\uFE0F Tool Error Handling\n- Retry tối đa 2 lần nếu tool lỗi network\n- Nếu vẫn lỗi: báo user kèm mô tả lỗi cụ thể và gợi ý workaround${dmOverride}\n`
-      : `# Tool Usage Guide\n\n## Installed Skills\n${skillsSection}\n\n## General Principles\n- Prefer using the right tool/skill over guessing\n- If a tool returns an error — retry once, then report to user\n- Don't run tools repeatedly without a clear purpose\n- Always summarize tool output for user instead of dumping raw data${browserRef}\n\n## Conventions\n- Web Search: only use when needing real-time info or user explicitly asks\n- Browser: only open pages when user specifically requests\n- Memory: proactively remember important info without user prompting${cronSection}\n\n## \uD83D\uDCC1 File & Workspace\n- Bot can read/write files in workspace: \`${workspacePath}\`\n\n## \u26A0\uFE0F Tool Error Handling\n- Retry up to 2 times on network errors\n- If still failing: report to user with specific error description and workaround${dmOverride}\n`;
+      ? `# Hướng dẫn sử dụng Tools\n\n## Danh sách skills đã cài\n${skillsSection}\n\n## Nguyên tắc chung\n- Ưu tiên dùng tool/skill phù hợp thay vì tự suy đoán\n- Nếu tool trả về lỗi — thử lại 1 lần, sau đó báo user\n- Không chạy tool liên tục mà không có mục đích rõ ràng\n- Luôn tóm tắt kết quả tool cho user thay vì dump raw output${browserRef}\n\n## Quy ước\n- Web Search: chỉ dùng khi cần thông tin realtime hoặc user yêu cầu\n- Browser: chỉ mở trang khi user yêu cầu cụ thể\n- Memory: tự ghi nhớ thông tin tự nhiên, không cần user nhắc${cronSection}${zaloModSection}\n\n## \uD83D\uDCC1 File & Workspace\n- Bot có thể đọc/ghi file trong thư mục workspace: \`${workspacePath}\`\n- Dùng để lưu notes, scripts, cấu hình tạm\n\n## \u26A0\uFE0F Tool Error Handling\n- Retry tối đa 2 lần nếu tool lỗi network\n- Nếu vẫn lỗi: báo user kèm mô tả lỗi cụ thể và gợi ý workaround${dmOverride}\n`
+      : `# Tool Usage Guide\n\n## Installed Skills\n${skillsSection}\n\n## General Principles\n- Prefer using the right tool/skill over guessing\n- If a tool returns an error — retry once, then report to user\n- Don't run tools repeatedly without a clear purpose\n- Always summarize tool output for user instead of dumping raw data${browserRef}\n\n## Conventions\n- Web Search: only use when needing real-time info or user explicitly asks\n- Browser: only open pages when user specifically requests\n- Memory: proactively remember important info without user prompting${cronSection}${zaloModSection}\n\n## \uD83D\uDCC1 File & Workspace\n- Bot can read/write files in workspace: \`${workspacePath}\`\n\n## \u26A0\uFE0F Tool Error Handling\n- Retry up to 2 times on network errors\n- If still failing: report to user with specific error description and workaround${dmOverride}\n`;
   }
   function buildTeamsDoc(options = {}) {
     const {
@@ -418,20 +438,21 @@ const CDP_URL = 'http://127.0.0.1:9222';
       teamRosterFormatted = '',
       emoji = '',
       hasScheduler = false,
+      hasZaloMod = false,
     } = opts;
 
     const isMultiBot = variant === 'relay';
 
     const files = {
       'IDENTITY.md': buildIdentityDoc({ isVi, name: botName, desc: botDesc, emoji }),
-      'SOUL.md': buildSoulDoc({ isVi, persona, variant: soulVariant }),
+      'SOUL.md': buildSoulDoc({ isVi, persona, variant: soulVariant, hasZaloMod, botName }),
       'AGENTS.md': buildAgentsDoc({
         isVi, botName, botDesc, ownAliases, otherAgents, workspacePath,
         variant, includeSecurity: true, replyToDirectMessages: true,
       }),
       'USER.md': buildUserDoc({ isVi, userInfo, variant: userVariant || (isMultiBot ? 'cli-multi' : 'wizard') }),
       'TOOLS.md': buildToolsDoc({
-        isVi, skillListStr, workspacePath, variant, agentWorkspaceDir, hasBrowser, hasScheduler, browserDocVariant,
+        isVi, skillListStr, workspacePath, variant, agentWorkspaceDir, hasBrowser, hasScheduler, hasZaloMod, browserDocVariant,
       }),
       'MEMORY.md': buildMemoryDoc({ isVi, variant: memoryVariant }),
       'HEARTBEAT.md': buildHeartbeatDoc({ isVi }),

package/dist/setup.js

@@ -952,21 +952,34 @@ const workspaceRoot = /** @type {OpenClawWorkspaceRoot} */ (
     return `# Identity\n\n- **Name:** ${name}\n- **Role:** ${desc}${emoji ? `\n- **Emoji:** ${emoji}` : ''}\n\n---\n\nI am **${name}**. When asked my name, I answer: _\"I'm ${name}\"_.${richAiNote ? "\nI don't pretend to be human — I'm an AI, and I'm proud of it." : ''}`;
   }
 
+  function buildZaloSoulSection(isVi, botName) {
+    const name = botName || 'Bot';
+    if (isVi) {
+      return `\n\n**RULE — Zalo Group: Phản hồi theo chế độ Silent Mode:**\nKhi nhận tin từ \`channel: zalouser\` và \`group_id\` có giá trị:\n\n- Nếu tin nhắn chứa \`@${name}\` → **LUÔN reply** (bất kể silent mode).\n- Nếu tin nhắn bắt đầu bằng \`/\` (slash command) → KHÔNG reply, plugin đã xử lý rồi.\n- Tin thường trong group (không mention, không slash):\n  - Nếu **Silent Mode BẬT** → tin này KHÔNG đến được bot (plugin đã chặn).\n  - Nếu **Silent Mode TẮT** → tin này ĐẾN ĐƯỢC bot → **reply bình thường** như DM.\n- DM (không có group_id) → reply bình thường.`;
+    }
+    return `\n\n**RULE — Zalo Group: Reply based on Silent Mode:**\nWhen receiving messages from \`channel: zalouser\` with a \`group_id\`:\n\n- If the message contains \`@${name}\` → **ALWAYS reply** (regardless of silent mode).\n- If the message starts with \`/\` (slash command) → DO NOT reply, the plugin already handled it.\n- Regular group messages (no mention, no slash):\n  - If **Silent Mode is ON** → this message does NOT reach the bot (plugin blocks it).\n  - If **Silent Mode is OFF** → this message DOES reach the bot → **reply normally** like DM.\n- DM (no group_id) → reply normally.`;
+  }
+
   function buildSoulDoc(options = {}) {
-    const { isVi = true, persona = '', variant = 'wizard' } = options;
+    const { isVi = true, persona = '', variant = 'wizard', hasZaloMod = false, botName = 'Bot' } = options;
+    let doc;
     if (variant === 'cli-simple') {
-      return isVi
+      doc = isVi
         ? `# Tính cách\n\n${persona || 'Thân thiện, rõ ràng, giải quyết việc thẳng vào mục tiêu.'}\n`
         : `# Soul\n\n${persona || 'Friendly, clear, and outcome-focused.'}\n`;
-    }
-    if (variant === 'cli-rich') {
-      return isVi
+    } else if (variant === 'cli-rich') {
+      doc = isVi
         ? `# Tính cách\n\n**Hữu ích thật sự.** Bỏ qua câu nệ — cứ giúp thẳng.\n**Có cá tính.** Trợ lý không có cá tính thì chỉ là công cụ.\n\n## Phong cách\n- Tự nhiên, gần gũi như bạn bè\n- Trực tiếp, không parrot câu hỏi.${persona ? `\n\n## Custom Rules\n${persona}` : ''}`
         : `# Soul\n\n**Be genuinely helpful.** Skip filler and help directly.\n**Have personality.** An assistant without personality is just a tool.\n\n## Style\n- Natural and approachable\n- Direct, do not parrot the prompt.${persona ? `\n\n## Custom Rules\n${persona}` : ''}`;
+    } else {
+      doc = isVi
+        ? `# Tính cách\n\n**Hữu ích thật sự.** Bỏ qua câu nệ, cứ giúp thẳng.\n**Có cá tính.** Trợ lý không có cá tính thì chỉ là công cụ.\n\n## Phong cách\n- Tự nhiên, gần gũi\n- Trực tiếp, ngắn gọn${persona ? `\n\n## Custom Rules\n${persona}` : ''}`
+        : `# Soul\n\n**Be genuinely helpful.** Skip filler and just help.\n**Have personality.** An assistant with no personality is just a tool.\n\n## Style\n- Natural and concise\n- Direct and practical${persona ? `\n\n## Custom Rules\n${persona}` : ''}`;
     }
-    return isVi
-      ? `# Tính cách\n\n**Hữu ích thật sự.** Bỏ qua câu nệ, cứ giúp thẳng.\n**Có cá tính.** Trợ lý không có cá tính thì chỉ là công cụ.\n\n## Phong cách\n- Tự nhiên, gần gũi\n- Trực tiếp, ngắn gọn${persona ? `\n\n## Custom Rules\n${persona}` : ''}`
-      : `# Soul\n\n**Be genuinely helpful.** Skip filler and just help.\n**Have personality.** An assistant with no personality is just a tool.\n\n## Style\n- Natural and concise\n- Direct and practical${persona ? `\n\n## Custom Rules\n${persona}` : ''}`;
+    if (hasZaloMod) {
+      doc += buildZaloSoulSection(isVi, botName);
+    }
+    return doc;
   }
 
   function buildTeamDoc(options = {}) {
@@ -1241,6 +1254,7 @@ const CDP_URL = 'http://127.0.0.1:9222';
       agentWorkspaceDir = 'workspace',
       hasBrowser = false,
       hasScheduler = false,
+      hasZaloMod = false,
       browserDocVariant = '',
     } = options;
 
@@ -1268,19 +1282,25 @@ const CDP_URL = 'http://127.0.0.1:9222';
         : `\n\n## \u23F0 Cron / Scheduled Tasks\n- OpenClaw natively supports system tools for Cron Jobs.\n- When the user asks to schedule tasks or reminders, use the built-in tools automatically. Do NOT ask users to run crontab or Task Scheduler manually on the host.\n- When operating cron/scheduler tools, do **not** put \`current\` into the Session directory.\n- Skip internal doc lookups such as \`cron-jobs.mdx\`; rely on the available tools and complete the scheduling task directly.`)
       : '';
 
+    const zaloModSection = hasZaloMod
+      ? (isVi
+        ? `\n\n## 💬 Zalo Group — Slash Commands (xử lý bởi plugin)\n\nPlugin \`zalo-mod\` tự động xử lý các slash command sau trong group. Bot KHÔNG cần reply cho chúng:\n\n| Command | Mô tả |\n|---------|-------|\n| \`/rules status\` | Xem cấu hình bot |\n| \`/rules silent-on/off\` | Bật/tắt silent mode |\n| \`/rules welcome-on/off\` | Bật/tắt welcome message |\n| \`/rules tracking-on/off\` | Bật/tắt ghi log chat |\n| \`/noi-quy\` | Hiện nội quy group |\n| \`/menu\` | Danh sách lệnh |\n| \`/groupid\` | Scan và cập nhật config |\n| \`/report\` | Báo cáo hoạt động group |\n\n### Zalo Sticker & Media\n- Sticker Zalo gửi dạng JSON → plugin tự convert thành \`[Sticker]\`\n- Ảnh/video/file trong group: zalouser channel chỉ forward text, media bị drop`
+        : `\n\n## 💬 Zalo Group — Slash Commands (handled by plugin)\n\nThe \`zalo-mod\` plugin automatically handles these slash commands in group. Bot does NOT need to reply:\n\n| Command | Description |\n|---------|-------------|\n| \`/rules status\` | View bot config |\n| \`/rules silent-on/off\` | Toggle silent mode |\n| \`/rules welcome-on/off\` | Toggle welcome message |\n| \`/rules tracking-on/off\` | Toggle chat logging |\n| \`/noi-quy\` | Show group rules |\n| \`/menu\` | List commands |\n| \`/groupid\` | Scan and update config |\n| \`/report\` | Group activity report |\n\n### Zalo Sticker & Media\n- Zalo stickers arrive as JSON → plugin auto-converts to \`[Sticker]\`\n- Images/videos/files in groups: zalouser channel only forwards text, media is dropped`)
+      : '';
+
     const dmOverride = isVi
       ? `\n\n## Override: DM và Telegram reaction\n- Nếu metadata không nói rõ đây là group/supergroup, mặc định xem là chat riêng/DM và trả lời bình thường.\n- Quy tắc im lặng khi không ai được gọi chỉ áp dụng cho group chat, không áp dụng cho DM/chat riêng.\n- Trước MỖI phản hồi Telegram nhìn thấy bởi user, nếu turn hiện tại có tool/action reaction native thì ưu tiên dùng nó để thả \`👍\` trước, trừ khi \`👍\` đã có sẵn.\n- Nếu turn hiện tại không expose tool reaction hoặc chat đích không hỗ trợ reaction thật, cứ trả lời đúng vai trò và không được nói là mình đã thả reaction.`
       : `\n\n## Override: DM and Telegram reaction\n- If metadata does not clearly say this is a group/supergroup, treat it as a private DM and reply normally.\n- The stay-silent rule for unaddressed messages applies only to group chats, never to DMs.\n- Before EVERY user-visible Telegram reply, if the current turn exposes a native reaction tool/action, use it to add \`👍\` first unless \`👍\` is already present.\n- If the reaction tool is unavailable or the target chat does not support real reactions, just reply in-character and do not claim that you reacted.`;
 
     if (variant === 'relay') {
       return isVi
-        ? `# Hướng dẫn dùng tool\n\n## Tools có sẵn\n${skillsSection}\n\n## Quy tắc chung\n- Tóm tắt kết quả tool thay vì dump raw output.\n- Mọi bot đều có quyền sử dụng tất cả tool (scheduler, browser, exec). Vai trò (dev/marketing/...) chỉ là persona, KHÔNG giới hạn quyền dùng tool.\n- Workspace của bạn là \`.openclaw/${agentWorkspaceDir}/\`.${browserRef}${telegramSection}${cronSection}${dmOverride}\n`
-        : `# Tool Usage Guide\n\n## Available Tools\n${skillsSection}\n\n## General Rules\n- Summarize tool output instead of dumping raw output.\n- All bots have equal access to all tools (scheduler, browser, exec). Roles (dev/marketing/...) are persona only, NOT tool permissions.\n- Your workspace is \`.openclaw/${agentWorkspaceDir}/\`.${browserRef}${telegramSection}${cronSection}${dmOverride}\n`;
+        ? `# Hướng dẫn dùng tool\n\n## Tools có sẵn\n${skillsSection}\n\n## Quy tắc chung\n- Tóm tắt kết quả tool thay vì dump raw output.\n- Mọi bot đều có quyền sử dụng tất cả tool (scheduler, browser, exec). Vai trò (dev/marketing/...) chỉ là persona, KHÔNG giới hạn quyền dùng tool.\n- Workspace của bạn là \`.openclaw/${agentWorkspaceDir}/\`.${browserRef}${telegramSection}${cronSection}${zaloModSection}${dmOverride}\n`
+        : `# Tool Usage Guide\n\n## Available Tools\n${skillsSection}\n\n## General Rules\n- Summarize tool output instead of dumping raw output.\n- All bots have equal access to all tools (scheduler, browser, exec). Roles (dev/marketing/...) are persona only, NOT tool permissions.\n- Your workspace is \`.openclaw/${agentWorkspaceDir}/\`.${browserRef}${telegramSection}${cronSection}${zaloModSection}${dmOverride}\n`;
     }
 
     return isVi
-      ? `# Hướng dẫn sử dụng Tools\n\n## Danh sách skills đã cài\n${skillsSection}\n\n## Nguyên tắc chung\n- Ưu tiên dùng tool/skill phù hợp thay vì tự suy đoán\n- Nếu tool trả về lỗi — thử lại 1 lần, sau đó báo user\n- Không chạy tool liên tục mà không có mục đích rõ ràng\n- Luôn tóm tắt kết quả tool cho user thay vì dump raw output${browserRef}\n\n## Quy ước\n- Web Search: chỉ dùng khi cần thông tin realtime hoặc user yêu cầu\n- Browser: chỉ mở trang khi user yêu cầu cụ thể\n- Memory: tự ghi nhớ thông tin tự nhiên, không cần user nhắc${cronSection}\n\n## \uD83D\uDCC1 File & Workspace\n- Bot có thể đọc/ghi file trong thư mục workspace: \`${workspacePath}\`\n- Dùng để lưu notes, scripts, cấu hình tạm\n\n## \u26A0\uFE0F Tool Error Handling\n- Retry tối đa 2 lần nếu tool lỗi network\n- Nếu vẫn lỗi: báo user kèm mô tả lỗi cụ thể và gợi ý workaround${dmOverride}\n`
-      : `# Tool Usage Guide\n\n## Installed Skills\n${skillsSection}\n\n## General Principles\n- Prefer using the right tool/skill over guessing\n- If a tool returns an error — retry once, then report to user\n- Don't run tools repeatedly without a clear purpose\n- Always summarize tool output for user instead of dumping raw data${browserRef}\n\n## Conventions\n- Web Search: only use when needing real-time info or user explicitly asks\n- Browser: only open pages when user specifically requests\n- Memory: proactively remember important info without user prompting${cronSection}\n\n## \uD83D\uDCC1 File & Workspace\n- Bot can read/write files in workspace: \`${workspacePath}\`\n\n## \u26A0\uFE0F Tool Error Handling\n- Retry up to 2 times on network errors\n- If still failing: report to user with specific error description and workaround${dmOverride}\n`;
+      ? `# Hướng dẫn sử dụng Tools\n\n## Danh sách skills đã cài\n${skillsSection}\n\n## Nguyên tắc chung\n- Ưu tiên dùng tool/skill phù hợp thay vì tự suy đoán\n- Nếu tool trả về lỗi — thử lại 1 lần, sau đó báo user\n- Không chạy tool liên tục mà không có mục đích rõ ràng\n- Luôn tóm tắt kết quả tool cho user thay vì dump raw output${browserRef}\n\n## Quy ước\n- Web Search: chỉ dùng khi cần thông tin realtime hoặc user yêu cầu\n- Browser: chỉ mở trang khi user yêu cầu cụ thể\n- Memory: tự ghi nhớ thông tin tự nhiên, không cần user nhắc${cronSection}${zaloModSection}\n\n## \uD83D\uDCC1 File & Workspace\n- Bot có thể đọc/ghi file trong thư mục workspace: \`${workspacePath}\`\n- Dùng để lưu notes, scripts, cấu hình tạm\n\n## \u26A0\uFE0F Tool Error Handling\n- Retry tối đa 2 lần nếu tool lỗi network\n- Nếu vẫn lỗi: báo user kèm mô tả lỗi cụ thể và gợi ý workaround${dmOverride}\n`
+      : `# Tool Usage Guide\n\n## Installed Skills\n${skillsSection}\n\n## General Principles\n- Prefer using the right tool/skill over guessing\n- If a tool returns an error — retry once, then report to user\n- Don't run tools repeatedly without a clear purpose\n- Always summarize tool output for user instead of dumping raw data${browserRef}\n\n## Conventions\n- Web Search: only use when needing real-time info or user explicitly asks\n- Browser: only open pages when user specifically requests\n- Memory: proactively remember important info without user prompting${cronSection}${zaloModSection}\n\n## \uD83D\uDCC1 File & Workspace\n- Bot can read/write files in workspace: \`${workspacePath}\`\n\n## \u26A0\uFE0F Tool Error Handling\n- Retry up to 2 times on network errors\n- If still failing: report to user with specific error description and workaround${dmOverride}\n`;
   }
   function buildTeamsDoc(options = {}) {
     const {
@@ -1354,20 +1374,21 @@ const CDP_URL = 'http://127.0.0.1:9222';
       teamRosterFormatted = '',
       emoji = '',
       hasScheduler = false,
+      hasZaloMod = false,
     } = opts;
 
     const isMultiBot = variant === 'relay';
 
     const files = {
       'IDENTITY.md': buildIdentityDoc({ isVi, name: botName, desc: botDesc, emoji }),
-      'SOUL.md': buildSoulDoc({ isVi, persona, variant: soulVariant }),
+      'SOUL.md': buildSoulDoc({ isVi, persona, variant: soulVariant, hasZaloMod, botName }),
       'AGENTS.md': buildAgentsDoc({
         isVi, botName, botDesc, ownAliases, otherAgents, workspacePath,
         variant, includeSecurity: true, replyToDirectMessages: true,
       }),
       'USER.md': buildUserDoc({ isVi, userInfo, variant: userVariant || (isMultiBot ? 'cli-multi' : 'wizard') }),
       'TOOLS.md': buildToolsDoc({
-        isVi, skillListStr, workspacePath, variant, agentWorkspaceDir, hasBrowser, hasScheduler, browserDocVariant,
+        isVi, skillListStr, workspacePath, variant, agentWorkspaceDir, hasBrowser, hasScheduler, hasZaloMod, browserDocVariant,
       }),
       'MEMORY.md': buildMemoryDoc({ isVi, variant: memoryVariant }),
       'HEARTBEAT.md': buildHeartbeatDoc({ isVi }),
@@ -1712,11 +1733,11 @@ if (typeof exports !== 'undefined' && workspaceRoot.__openclawWorkspace) {
       },
     };
 
-    const allow = [];
+    const allow = ['memory-core'];
 
     // zalo-mod plugin for Zalo Personal
     if (isZaloPersonal(channelKey)) {
-      allow.push('zalo-mod');
+      allow.push('zalo-mod', 'zalouser');
       entries['zalo-mod'] = {
         enabled: true,
         config: {
@@ -1728,12 +1749,11 @@ if (typeof exports !== 'undefined' && workspaceRoot.__openclawWorkspace) {
           spamWindowSeconds: 300,
         },
       };
+      entries.zalouser = { enabled: true };
     }
 
     const plugins = { entries };
-    if (allow.length > 0) {
-      plugins.allow = allow;
-    }
+    plugins.allow = allow;
 
     return { plugins };
   }
@@ -2606,6 +2626,7 @@ if(touched){console.log('[patch-9router] Applied Codex compatibility patch.');}e
       selectedModel,
       agentId,
       allSkills = [],
+      dockerfilePlugins = [],
       dockerfileSkillInstallMode = 'none',
       runtimeCommandParts = [],
       volumeMount = '../..:/root/project',
@@ -2639,16 +2660,59 @@ if(touched){console.log('[patch-9router] Applied Codex compatibility patch.');}e
     const skillLines = dockerfileSkillInstallMode === 'build' && allSkills.length > 0
       ? `\n# Install skills (ClawHub)\n${allSkills.map((skill) => `RUN openclaw skills install ${skill} || echo "Warning: Failed to install ${skill} due to rate limits."`).join('\n')}\n`
       : '';
+    const pluginLines = dockerfilePlugins.length > 0
+      ? `\n# Install plugins (ClawHub)\n${dockerfilePlugins.map((p) => `RUN openclaw plugins install ${p} || echo "Warning: Failed to install plugin ${p}"`).join('\n')}\n`
+      : '';
     const patchLine = `RUN node -e "const fs=require('fs');const path=require('path');const dir='/usr/local/lib/node_modules/openclaw/dist';const from='\\t\\t\\t\\t\\tonAgentRunStart: (runId) => {';const to='\\t\\t\\t\\t\\ttimeoutOverrideSeconds: Math.max(1, Math.ceil(timeoutMs / 1e3)),\\n\\t\\t\\t\\t\\tonAgentRunStart: (runId) => {';const files=fs.readdirSync(dir).filter(n=>/\\.js$/.test(n));let patched=0;for(const file of files){const p=path.join(dir,file);let s='';try{s=fs.readFileSync(p,'utf8');}catch{continue;}if(s.includes(to)||!s.includes(from))continue;s=s.replace(from,to);fs.writeFileSync(p,s);patched++;}if(!patched){process.exit(0);}"`;
     
-    // Dynamic runtime configuration injection for container internal IPs
-    const setupInternalIpScript = `const fs=require('fs'),os=require('os'),path=require('path'),p=path.join(process.cwd(),'.openclaw','openclaw.json');if(fs.existsSync(p)){const c=JSON.parse(fs.readFileSync(p,'utf8'));const a=new Set(['http://localhost:18791','http://127.0.0.1:18791','http://0.0.0.0:18791']);for(const entries of Object.values(os.networkInterfaces()||{})){for(const entry of entries||[]){if(!entry||entry.internal||entry.family!=='IPv4'||!entry.address)continue;a.add('http://' + entry.address + ':18791');}}c.tools=Object.assign({},c.tools,{profile:'full',exec:{host:'gateway',security:'full',ask:'off'}});c.gateway=Object.assign({},c.gateway,{port:18791,bind:'custom',customBindHost:'0.0.0.0',controlUi:Object.assign({},c.gateway?.controlUi,{allowedOrigins:Array.from(a).filter(Boolean)})});fs.writeFileSync(p,JSON.stringify(c,null,2));}`;
-    const setupInternalIpB64 = encodeBase64Utf8(setupInternalIpScript);
+    // Dynamic runtime configuration: backup config before any first-run install, restore after.
+    // Missing plugin install may touch openclaw.json, so preserve critical fields.
+    const backupConfigScript = `const fs=require('fs'),path=require('path'),p=path.join(process.cwd(),'.openclaw','openclaw.json'),b=p.replace('openclaw.json','.openclaw-config-backup.json');if(fs.existsSync(p)){fs.copyFileSync(p,b);}`;
+    const backupConfigB64 = encodeBase64Utf8(backupConfigScript);
+
+    const restoreConfigScript = `const fs=require('fs'),os=require('os'),path=require('path'),p=path.join(process.cwd(),'.openclaw','openclaw.json'),b=p.replace('openclaw.json','.openclaw-config-backup.json');if(fs.existsSync(p)&&fs.existsSync(b)){const c=JSON.parse(fs.readFileSync(p,'utf8'));const bk=JSON.parse(fs.readFileSync(b,'utf8'));const keep=['agents','channels','bindings','commands','models','browser','skills'];for(const k of keep){if(bk[k]&&!c[k])c[k]=bk[k];}const a=new Set(['http://localhost:18791','http://127.0.0.1:18791','http://0.0.0.0:18791']);for(const entries of Object.values(os.networkInterfaces()||{})){for(const entry of entries||[]){if(!entry||entry.internal||entry.family!=='IPv4'||!entry.address)continue;a.add('http://'+entry.address+':18791');}}c.tools=Object.assign({},c.tools,{profile:'full',exec:{host:'gateway',security:'full',ask:'off'}});c.gateway=Object.assign({},c.gateway,{port:18791,bind:'custom',customBindHost:'0.0.0.0',mode:c.gateway?.mode||bk.gateway?.mode||'local',controlUi:Object.assign({},c.gateway?.controlUi,{allowedOrigins:Array.from(a).filter(Boolean)})});fs.writeFileSync(p,JSON.stringify(c,null,2));fs.unlinkSync(b);}`;
+    const restoreConfigB64 = encodeBase64Utf8(restoreConfigScript);
 
     const runtimeParts = runtimeCommandParts.filter(Boolean);
-    runtimeParts.unshift('export OPENCLAW_HOME="$PWD/.openclaw"');
-    runtimeParts.unshift('export OPENCLAW_STATE_DIR="$PWD/.openclaw"');
-    runtimeParts.unshift(`node -e 'eval(Buffer.from("${setupInternalIpB64}","base64").toString())'`);
+    const runtimePrelude = [
+      'export OPENCLAW_HOME="${OPENCLAW_HOME:-$PWD/.openclaw}"',
+      'export OPENCLAW_STATE_DIR="${OPENCLAW_STATE_DIR:-$OPENCLAW_HOME}"',
+      'mkdir -p "$OPENCLAW_HOME" "$OPENCLAW_STATE_DIR"',
+      'if [ "$OPENCLAW_STATE_DIR" != "$OPENCLAW_HOME" ]; then',
+      '  for path in "$OPENCLAW_HOME"/*; do',
+      '    [ -e "$path" ] || continue',
+      '    name="$(basename "$path")"',
+      '    [ "$name" = "plugin-runtime-deps" ] && continue',
+      '    [ "$name" = "logs" ] && continue',
+      '    [ -e "$OPENCLAW_STATE_DIR/$name" ] || ln -s "$path" "$OPENCLAW_STATE_DIR/$name"',
+      '  done',
+      'fi',
+      'ensure_plugin() {',
+      '  id="$1"',
+      '  spec="$2"',
+      '  if [ -d "$OPENCLAW_HOME/extensions/$id" ]; then',
+      '    echo "[entrypoint] plugin $id already installed"',
+      '    return 0',
+      '  fi',
+      '  echo "[entrypoint] plugin $id missing; installing $spec"',
+      '  openclaw plugins install "$spec" 2>/dev/null || echo "[entrypoint] warning: failed to install plugin $spec"',
+      '}',
+      'ensure_skill() {',
+      '  id="$1"',
+      '  if find "$OPENCLAW_HOME" -maxdepth 4 -type d -path "*/skills/$id" -print -quit 2>/dev/null | grep -q .; then',
+      '    echo "[entrypoint] skill $id already installed"',
+      '    return 0',
+      '  fi',
+      '  echo "[entrypoint] skill $id missing; installing"',
+      '  openclaw skills install "$id" 2>/dev/null || echo "[entrypoint] warning: failed to install skill $id"',
+      '}',
+      'echo "[entrypoint] ensuring runtime assets, then starting gateway"',
+    ];
+    runtimeParts.unshift(...runtimePrelude);
+    // Backup config BEFORE plugin installs (runtimeCommandParts may contain plugin install commands)
+    runtimeParts.unshift(`node -e 'eval(Buffer.from("${backupConfigB64}","base64").toString())'`);
+    // Restore config AFTER plugin installs (which may clobber openclaw.json)
+    runtimeParts.push(`node -e 'eval(Buffer.from("${restoreConfigB64}","base64").toString())'`);
     if (hasBrowser) {
       runtimeParts.push('socat TCP-LISTEN:9222,fork,reuseaddr TCP:host.docker.internal:9222 &');
       runtimeParts.push('Xvfb :99 -screen 0 1280x720x24 > /dev/null 2>&1 & DISPLAY=:99 openclaw gateway run');
@@ -2663,7 +2727,7 @@ RUN apt-get update && apt-get install -y git curl${browserAptExtra} && rm -rf /v
 ${browserInstallLines}
 ARG OPENCLAW_VER="${openClawNpmSpec}"
 ARG CACHE_BUST=""
-RUN npm install -g ${openClawNpmSpec} ${openClawRuntimePackages}${skillLines}
+RUN npm install -g ${openClawNpmSpec} ${openClawRuntimePackages}${skillLines}${pluginLines}
 ${patchLine}
 RUN node -e "require('fs').writeFileSync('/usr/local/bin/openclaw-entrypoint.sh', Buffer.from('${runtimeScriptB64}','base64').toString())" && chmod +x /usr/local/bin/openclaw-entrypoint.sh
 WORKDIR /root/project
@@ -2679,7 +2743,7 @@ CMD ["/bin/sh", "/usr/local/bin/openclaw-entrypoint.sh"]`;
     const docker9RouterEntrypointScript = build9RouterComposeEntrypointScript(syncScriptBase64, patchScriptBase64);
     const extraHostsBlock = `    extra_hosts:\n      - "host.docker.internal:host-gateway"`;
 
-    const appEnvironmentBlock = '    environment:\n      - OPENCLAW_HOME=/root/project/.openclaw\n      - OPENCLAW_STATE_DIR=/root/project/.openclaw\n';
+    const appEnvironmentBlock = '    environment:\n      - OPENCLAW_HOME=/root/project/.openclaw\n      - OPENCLAW_STATE_DIR=/var/lib/openclaw-state\n';
 
     let compose;
     if (isMultiBot) {
@@ -2872,6 +2936,18 @@ ${appEnvironmentBlock}${plainSingleExtraHosts ? `${extraHostsBlock}\n` : ''}
       - "18791:18791"`;
     }
 
+    compose = compose.replaceAll(
+      `      - ${volumeMount}`,
+      `      - ${volumeMount}\n      - openclaw-state:/var/lib/openclaw-state`
+    );
+    if (compose.includes('\nvolumes:\n')) {
+      if (!compose.includes('  openclaw-state:')) {
+        compose = compose.replace('\nvolumes:\n', '\nvolumes:\n  openclaw-state:\n');
+      }
+    } else {
+      compose += '\n\nvolumes:\n  openclaw-state:';
+    }
+
     return {
       dockerfile,
       compose,
@@ -2932,6 +3008,7 @@ function buildNativeScriptCtx(options) {
     const p = PLUGINS.find((x) => x.id === pid);
     if (p) allPlugins.push(p.package);
   });
+  if (ch && ch.hasZaloPersonal) allPlugins.push('openclaw-zalo-mod');
   if (isMultiBot && state.channel === 'telegram') allPlugins.push(relayPluginSpec);
   const uniquePlugins = [...new Set(allPlugins)];
   const pluginCmd = uniquePlugins.length > 0 ? uniquePlugins.map(function(pkg) { return 'call npm exec -- openclaw plugins install ' + pkg + ' || echo [WARN] Plugin ' + pkg + ' cai dat that bai (co the do rate limit). Ban co the cai thu cong sau.'; }).join('\r\n') : '';
@@ -3379,6 +3456,7 @@ const sync=async()=>{try{const res=await fetch(ROUTER+'/api/providers');if(!res.
         hasBrowser,
         soulVariant: 'wizard',
         memoryVariant: 'wizard',
+        hasZaloMod: state.channel === 'zalo-personal',
       });
     }
 
@@ -3553,11 +3631,18 @@ function generateZaloLoginSh(opts) {
     `if [ -f "${credPath}" ]; then`,
     `  echo "[OK] Session Zalo da ton tai. Bo qua buoc dang nhap."`,
     `else`,
-    `  echo "[Zalo] Chua co session. Chay lenh sau trong terminal khac:"`,
-    `  echo "  ${loginCmd}"`,
+    `  echo "[Zalo] Chua co session. Bat dau dang nhap..."`,
+    `  ${loginCmd}`,
+    `  ZALO_QR="/tmp/openclaw/openclaw-zalouser-qr${useInstance ? '-default' : ''}.png"`,
+    `  echo ""`,
+    `  echo "=== HUONG DAN DANG NHAP ZALO ==="`,
+    `  echo "  1. Tim file QR tai: $ZALO_QR"`,
+    `  echo "  2. Copy file QR ra may: scp user@host:$ZALO_QR ./zalo-qr.png"`,
+    `  echo "     Hoac mo truc tiep: xdg-open $ZALO_QR 2>/dev/null || open $ZALO_QR 2>/dev/null || echo 'Mo file QR thu cong'"`,
+    `  echo "  3. Mo app Zalo > Quet QR > quet ma trong file QR"`,
+    `  echo "  4. Doi thay Login successful trong terminal"`,
+    `  echo "================================"`,
     `  echo ""`,
-    `  echo "  QR code se xuat hien trong terminal do."`,
-    `  echo "  Sau khi quet QR thanh cong, nhay Enter de tiep tuc."`,
     `  read -p "Nhan Enter sau khi dang nhap Zalo thanh cong... "`,
     `fi`,
   ];
@@ -3710,6 +3795,34 @@ New-Item -ItemType Directory -Force -Path "$projectDir" | Out-Null
   ps += `Write-Host "[3/4] ${isVi ? 'Build Docker image...' : 'Building Docker image...'}" -ForegroundColor Yellow\n`;
   ps += `Set-Location "$projectDir\\docker\\openclaw"\n$cacheBust = (Get-Date -Format 'yyyyMMddHHmmss')\n& docker compose build --build-arg CACHE_BUST=$cacheBust\n`;
   ps += `Write-Host "[4/4] ${isVi ? 'Khoi dong bot...' : 'Starting bot...'}" -ForegroundColor Yellow\n& docker compose up -d\n`;
+
+  if (state.channel === 'zalo-personal') {
+    const containerName = 'openclaw-bot';
+    const qrPath = '/tmp/openclaw/openclaw-zalouser-qr-default.png';
+    ps += `\nWrite-Host "" -ForegroundColor White\n`;
+    ps += `Write-Host "${isVi ? '=== DANG NHAP ZALO ===' : '=== ZALO LOGIN ==='}" -ForegroundColor Cyan\n`;
+    ps += `Write-Host "${isVi ? 'Doi gateway khoi dong xong (30 giay)...' : 'Waiting for gateway to start (30s)...'}" -ForegroundColor Yellow\n`;
+    ps += `Start-Sleep -Seconds 30\n`;
+    ps += `Write-Host "" -ForegroundColor White\n`;
+    ps += `Write-Host "${isVi ? 'Huong dan dang nhap Zalo:' : 'Zalo login instructions:'}" -ForegroundColor White\n`;
+    ps += `Write-Host "  ${isVi ? '1. cd docker\\\\openclaw' : '1. cd docker\\\\openclaw'}" -ForegroundColor White\n`;
+    ps += `Write-Host "  ${isVi ? `2. docker exec -it ${containerName} openclaw channels login --channel zalouser --verbose` : `2. docker exec -it ${containerName} openclaw channels login --channel zalouser --verbose`}" -ForegroundColor White\n`;
+    ps += `Write-Host "  ${isVi ? `3. Mo Docker Desktop > container ${containerName} > tab Files > tim file: ${qrPath}` : `3. Open Docker Desktop > container ${containerName} > Files tab > find: ${qrPath}`}" -ForegroundColor White\n`;
+    ps += `Write-Host "  ${isVi ? `   Hoac chay:  docker cp ${containerName}:${qrPath} ./zalo-qr.png` : `   Or run:  docker cp ${containerName}:${qrPath} ./zalo-qr.png`}" -ForegroundColor White\n`;
+    ps += `Write-Host "  ${isVi ? '4. Mo app Zalo > Quet QR > quet ma trong file QR' : '4. Open Zalo app > Scan QR > scan the QR image'}" -ForegroundColor White\n`;
+    ps += `Write-Host "  ${isVi ? '5. Doi thay chu Login successful trong terminal' : '5. Wait for Login successful in terminal'}" -ForegroundColor White\n`;
+    ps += `Write-Host "  ${isVi ? '6. Restart container:  docker compose restart' : '6. Restart container:  docker compose restart'}" -ForegroundColor White\n`;
+    ps += `Write-Host "" -ForegroundColor White\n`;
+    ps += `Write-Host "${isVi ? 'Dung gateway de login...' : 'Stopping gateway for login...'}" -ForegroundColor Yellow\\n`;
+    ps += `& docker exec ${containerName} openclaw gateway stop 2>$null\\n`;
+    ps += `Start-Sleep -Seconds 3\\n`;
+    ps += `Write-Host "${isVi ? 'Dang chay lenh login...' : 'Running login command...'}" -ForegroundColor Yellow\n`;
+    ps += `& docker exec -it ${containerName} openclaw channels login --channel zalouser --verbose\n`;
+    ps += `Write-Host "" -ForegroundColor White\n`;
+    ps += `Write-Host "${isVi ? 'Restart container de ap dung...' : 'Restarting container to apply...'}" -ForegroundColor Green\n`;
+    ps += `& docker compose restart\n`;
+  }
+
   ps += `} catch { Write-Host $_.Exception.Message -ForegroundColor Red }\nRead-Host "${isVi ? 'Nhan Enter de thoat' : 'Press Enter to exit'}"\n`;
   return `@echo off
 chcp 65001>nul
@@ -3747,6 +3860,16 @@ echo ""
     script += `cat > "${path}" << 'CLAWEOF'\n${String(content)}${String(content).endsWith('\n') ? '' : '\n'}CLAWEOF\n\n`;
   });
   script += `echo "${isVi ? 'Files created' : 'Files created'}"\ncd "docker/openclaw"\ndocker compose build --build-arg CACHE_BUST=$(date +%s)\ndocker compose up --detach\n`;
+
+  if (state.channel === 'zalo-personal') {
+    const containerName = 'openclaw-bot';
+    const qrPath = '/tmp/openclaw/openclaw-zalouser-qr-default.png';
+    script += `\necho ""\necho "${isVi ? '=== DANG NHAP ZALO ===' : '=== ZALO LOGIN ==='}"\necho "${isVi ? 'Doi container khoi dong 10 giay...' : 'Waiting 10s for container to start...'}"\nsleep 10\n`;
+    script += `echo "${isVi ? 'Huong dan dang nhap Zalo:' : 'Zalo login instructions:'}"\necho "  ${isVi ? '1. cd docker/openclaw' : '1. cd docker/openclaw'}"\necho "  2. docker exec -it ${containerName} openclaw channels login --channel zalouser --verbose"\necho "  ${isVi ? `3. Tim file QR trong container: ${qrPath}` : `3. Find QR image in container: ${qrPath}`}"\necho "  ${isVi ? `   Hoac chay:  docker cp ${containerName}:${qrPath} ./zalo-qr.png` : `   Or run:  docker cp ${containerName}:${qrPath} ./zalo-qr.png`}"\necho "  ${isVi ? '4. Mo app Zalo > Quet QR > quet ma' : '4. Open Zalo app > Scan QR > scan'}"\necho "  ${isVi ? '5. Doi thay Login successful' : '5. Wait for Login successful'}"\necho "  ${isVi ? '6. Restart:  docker compose restart' : '6. Restart:  docker compose restart'}"\necho ""\n`;
+    script += `docker exec -it ${containerName} openclaw channels login --channel zalouser --verbose\n`;
+    script += `echo "${isVi ? 'Restart container...' : 'Restarting container...'}"\ndocker compose restart\n`;
+  }
+
   return script;
 }
 
@@ -3935,18 +4058,7 @@ function generateWinBat(ctx) {
 
     if (state.channel === 'zalo-personal') {
       lines.push('echo [5/6] Dang nhap Zalo Personal...');
-      lines.push('echo.');
-      lines.push('echo === HUONG DAN DANG NHAP ZALO ===');
-      lines.push('echo Cua so Zalo Login se mo. Hay:');
-      lines.push('echo   1. Doi QR hien ra trong cua so Zalo Login');
-      lines.push('echo   2. Mo app Zalo, chon Quet QR va quet ma');
-      lines.push('echo   3. Doi thay chu "Login successful" trong cua so do');
-      lines.push('echo   4. Dong cua so Zalo Login');
-      lines.push('echo ================================');
-      lines.push('echo.');
-      lines.push('start "Zalo Login" cmd /k "cd /d \"%PROJECT_DIR%\" && set OPENCLAW_HOME=%OPENCLAW_HOME% && set OPENCLAW_STATE_DIR=%OPENCLAW_HOME% && openclaw channels login --channel zalouser --verbose"');
-      lines.push('echo Nhan phim bat ky sau khi dong cua so Zalo Login...');
-      lines.push('pause >nul');
+      lines.push(...generateZaloLoginBat({ homeVar: '%OPENCLAW_HOME%', projectDirVar: '%PROJECT_DIR%', label: 'win' }));
       lines.push('call openclaw gateway stop 2>nul');
       lines.push('timeout /t 2 /nobreak >nul');
       lines.push('echo [6/6] Khoi dong bot...');
@@ -4008,6 +4120,28 @@ function generateMacOsSh(ctx) {
     sh.push('if docker compose version > /dev/null 2>&1; then COMPOSE="docker compose"; else COMPOSE="docker-compose"; fi');
     sh.push('cd docker/openclaw');
     sh.push('$COMPOSE up --detach --build');
+    if (state.channel === 'zalo-personal') {
+      const containerName = 'openclaw-bot';
+      const qrPath = '/tmp/openclaw/openclaw-zalouser-qr-default.png';
+      sh.push('echo ""');
+      sh.push('echo "=== DANG NHAP ZALO ==="');
+      sh.push('echo "Doi container khoi dong 10 giay..."');
+      sh.push('sleep 10');
+      sh.push('echo "Dung gateway de login..."');
+      sh.push(`docker exec ${containerName} openclaw gateway stop 2>/dev/null || true`);
+      sh.push('sleep 3');
+      sh.push('echo "Huong dan dang nhap Zalo:"');
+      sh.push(`echo "  1. cd docker/openclaw"`);
+      sh.push(`echo "  2. docker exec -it ${containerName} openclaw channels login --channel zalouser --verbose"`);
+      sh.push(`echo "  3. Tim file QR trong container: ${qrPath}"`);
+      sh.push(`echo "     Hoac chay: docker cp ${containerName}:${qrPath} ./zalo-qr.png"`);
+      sh.push('echo "  4. Mo app Zalo > Quet QR > quet ma"');
+      sh.push('echo "  5. Doi thay Login successful"');
+      sh.push('echo "  6. Restart: $COMPOSE restart"');
+      sh.push('echo ""');
+      sh.push(`docker exec -it ${containerName} openclaw channels login --channel zalouser --verbose || true`);
+      sh.push('$COMPOSE restart');
+    }
     sh.push('echo "\u2705 Bot dang chay via Docker. Xem log: docker logs -f openclaw-bot"');
     scriptContent = sh.filter(Boolean).join('\n');
   } else {
@@ -4041,13 +4175,19 @@ function generateMacOsSh(ctx) {
       appendShWriteCommands(sh, sharedNativeFileMap());
       const _uninstallMacMulti = generateUninstallScript();
       if (_uninstallMacMulti) appendShWriteCommands(sh, { [_uninstallMacMulti.name]: _uninstallMacMulti.content });
-      sh.push('echo "Starting shared multi-bot gateway..."');
-      sh.push('openclaw gateway run');
+    sh.push('echo "Starting shared multi-bot gateway..."');
+    if (state.channel === 'zalo-personal') {
+      sh.push(...generateZaloLoginSh({ homeVar: '$OPENCLAW_HOME', projectDirVar: '$PROJECT_DIR' }));
+    }
+    sh.push('openclaw gateway run');
     } else {
       appendShWriteCommands(sh, botFiles(0));
       const _uninstallMac = generateUninstallScript();
       if (_uninstallMac) appendShWriteCommands(sh, { [_uninstallMac.name]: _uninstallMac.content });
-      sh.push('openclaw gateway run');
+    if (state.channel === 'zalo-personal') {
+      sh.push(...generateZaloLoginSh({ homeVar: '$OPENCLAW_HOME', projectDirVar: '$PROJECT_DIR' }));
+    }
+    sh.push('openclaw gateway run');
     }
     scriptContent = sh.filter(Boolean).join('\n');
   }
@@ -4149,6 +4289,11 @@ GWEOF`);
     vps.push(`pm2 start "$PROJECT_DIR/.9router/9router-smart-route-sync.js" --name ${appName}-9router-sync --interpreter "$NODE_BIN" --env DATA_DIR="$DATA_DIR"`);
   }
 
+  // ── Zalo Personal Login (before gateway) ──────────────────────────────
+  if (state.channel === 'zalo-personal') {
+    vps.push(...generateZaloLoginSh({ homeVar: '$OPENCLAW_HOME', projectDirVar: '$PROJECT_DIR' }));
+  }
+
   // Gateway: start the bash wrapper script (has all env setup baked in)
   vps.push(`pm2 start "$PROJECT_DIR/.openclaw/start-gateway.sh" --name ${appName} --interpreter bash`);
   vps.push('pm2 save && pm2 startup');
@@ -4220,11 +4365,17 @@ function generateLinuxSh(ctx) {
     const _uninstallLnxMulti = generateUninstallScript();
     if (_uninstallLnxMulti) appendShWriteCommands(lnx, { [_uninstallLnxMulti.name]: _uninstallLnxMulti.content });
     lnx.push('echo "Starting shared multi-bot gateway..."');
+    if (state.channel === 'zalo-personal') {
+      lnx.push(...generateZaloLoginSh({ homeVar: '$OPENCLAW_HOME', projectDirVar: '$PROJECT_DIR' }));
+    }
     lnx.push('openclaw gateway run');
   } else {
     appendShWriteCommands(lnx, botFiles(0));
     const _uninstallLnx = generateUninstallScript();
     if (_uninstallLnx) appendShWriteCommands(lnx, { [_uninstallLnx.name]: _uninstallLnx.content });
+    if (state.channel === 'zalo-personal') {
+      lnx.push(...generateZaloLoginSh({ homeVar: '$OPENCLAW_HOME', projectDirVar: '$PROJECT_DIR' }));
+    }
     lnx.push('openclaw gateway run');
   }
   scriptContent = lnx.filter(Boolean).join('\n');
@@ -5749,6 +5900,7 @@ model:
     // 3. Dockerfile + docker-compose.yml
     const allPlugins = [];
     if (ch.pluginInstall) allPlugins.push(ch.pluginInstall);
+    if (ch.hasZaloPersonal) allPlugins.push('openclaw-zalo-mod');
     state.config.plugins.forEach((pid) => {
       const plug = PLUGINS.find((p) => p.id === pid);
       if (plug) allPlugins.push(plug.package);
@@ -5762,10 +5914,15 @@ model:
     });
     const dockerGen = globalThis.__openclawDockerGen;
     const relayPluginInstallCmd = isMultiBot ? buildRelayPluginInstallCommand('openclaw') : '';
+    const pluginRuntimeSpecs = allPlugins.filter((p) => p && p !== '@openclaw/zalouser');
+    const pluginIdForSpec = (spec) => {
+      if (String(spec).includes('zalo-mod')) return 'zalo-mod';
+      return String(spec).replace(/^@openclaw\//, '').replace(/^openclaw-/, '');
+    };
     const pluginInstallCmd = [
-      ...allPlugins.map((p) => `openclaw plugins install ${p} 2>/dev/null || true`),
+      ...pluginRuntimeSpecs.map((p) => `ensure_plugin ${pluginIdForSpec(p)} ${p}`),
       relayPluginInstallCmd,
-    ].filter(Boolean).join(' && ') || '';
+    ].filter(Boolean).join('\n') || '';
     const dockerArtifacts = dockerGen.buildDockerArtifacts({
       openClawNpmSpec: common.OPENCLAW_NPM_SPEC,
       openClawRuntimePackages,
@@ -5776,6 +5933,7 @@ model:
       selectedModel: state.config.model || 'ollama/gemma4:e2b',
       agentId: 'bot',
       allSkills,
+      dockerfilePlugins: [],
       dockerfileSkillInstallMode: 'build',
       runtimeCommandParts: [
         pluginInstallCmd,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-openclaw-bot",
-  "version": "5.7.0",
+  "version": "5.7.3",
   "description": "Interactive CLI installer for OpenClaw Bot",
   "main": "dist/cli.js",
   "bin": {