create-openclaw-bot 5.7.6 → 5.7.8

package/README.md

@@ -3,7 +3,7 @@
 # 🦞 OpenClaw Setup
 
 <p align="center">
-  <a href="https://github.com/tuanminhhole/openclaw-setup/releases"><img src="https://img.shields.io/badge/RELEASE-v5.7.6-0EA5E9?style=for-the-badge" alt="Version 5.7.6" /></a>
+  <a href="https://github.com/tuanminhhole/openclaw-setup/releases"><img src="https://img.shields.io/badge/RELEASE-v5.7.8-0EA5E9?style=for-the-badge" alt="Version 5.7.8" /></a>
   <a href="https://github.com/tuanminhhole/openclaw-setup?tab=MIT-1-ov-file"><img src="https://img.shields.io/badge/LICENSE-MIT-success?style=for-the-badge" alt="MIT License" /></a>
   <a href="https://www.npmjs.com/package/create-openclaw-bot"><img src="https://img.shields.io/npm/v/create-openclaw-bot?style=for-the-badge&label=CLI&color=2563EB&logo=npm&logoColor=white" alt="NPM Version" /></a>
   <a href="https://github.com/tuanminhhole/openclaw-setup/stargazers"><img src="https://img.shields.io/github/stars/tuanminhhole/openclaw-setup?style=for-the-badge&color=eab308&logo=github&logoColor=white" alt="GitHub Stars" /></a>
@@ -24,19 +24,18 @@ An interactive **CLI tool** and **Setup Wizard** to deploy your own free AI Bot
 
 ---
 
-## 🆕 What's new in v5.7.5
+## 🆕 What's new in v5.7.8
 
-- 🐛 **Hotfix: CLI crash on all platforms** — Fixed `ReferenceError: channelKey is not defined` that caused the CLI to crash immediately after completing the setup wizard on every platform (Telegram, Zalo). The `writeWorkspaceFiles()` function now correctly receives `channelKey` as an explicit parameter.
-- 🔤 **Fix: Vietnamese text encoding** — Restored proper UTF-8 encoding integrity in `cli.src.js` to prevent double-encoding of Vietnamese characters from Windows tools.
+- 🧹 **Zalo Mod Plugin Cleanup** — Removed auto-injection of `zalo-mod` into generated configs. The plugin now must be installed manually via ClawHub, eliminating persistent installation loops and Docker permission conflicts.
+- 🔧 **Cleaner Docker Build** — `openclaw-zalo-mod` is no longer baked into the Docker image during build or runtime entrypoint, reducing image size and startup errors.
+- 📝 **Standardized Release Workflow** — Added `.agent/workflows/update.md` as the canonical release checklist for this repo.
 
 <details>
-<summary><b>Previous: What's new in v5.7.2</b></summary>
+<summary><b>Previous: What's new in v5.7.7</b></summary>
 
-- 🏗️ **Centralized config architecture** — All `openclaw.json`, `.env`, and `exec-approvals.json` generation now flows through a single `bot-config-gen.js` module. Both the Web Wizard and CLI share the same builder, eliminating config drift between surfaces.
-- 🔄 **Rolling `@latest` versioning** — Installation scripts now use `openclaw@latest` instead of pinned versions, ensuring users always get the newest release without waiting for a setup update.
-- 🧪 **Comprehensive test matrix** — Added 422 new matrix tests covering all OS × Deploy × Channel × Bot Count combinations, plus Wizard IIFE sandbox evaluation and CLI structural validation.
-- 🐛 **Removed `autoReply` bug** — The `autoReply: true` field that caused gateway startup crashes on Zalo Personal has been permanently removed from all generators.
-- 💬 **Standardized Zalo Personal config** — Zalo Personal (`zalouser`) channel now uses production-matching config with `groups`, `groupPolicy`, `historyLimit`, and proper `bindings`.
+- 🛠️ **Infrastructure & Zalo Bot Stabilization** — Automatically pins `openclaw@2026.4.15` across all deployment scripts, eliminating gateway crashes caused by version mismatch when installing Zalo Personal.
+- 📦 **Docker Volume & Gateway Deadlock Optimization** — Redesigned the `.openclaw` mount mechanism and implemented `tmpfs` for `plugin-runtime-deps`, preventing I/O lock conditions on Windows/WSL2.
+- 🔄 **9Router Smart-Sync** — Automatically detects and syncs models (Gemini, Claude, GPT) from active AI providers directly into the `smart-route` combination every time the system starts up.
 
 ## </details>
 

package/README.vi.md

@@ -3,7 +3,7 @@
 # 🦞 OpenClaw Setup
 
 <p align="center">
-  <a href="https://github.com/tuanminhhole/openclaw-setup/releases"><img src="https://img.shields.io/badge/RELEASE-v5.7.6-0EA5E9?style=for-the-badge" alt="Version 5.7.6" /></a>
+  <a href="https://github.com/tuanminhhole/openclaw-setup/releases"><img src="https://img.shields.io/badge/RELEASE-v5.7.8-0EA5E9?style=for-the-badge" alt="Version 5.7.8" /></a>
   <a href="https://github.com/tuanminhhole/openclaw-setup?tab=MIT-1-ov-file"><img src="https://img.shields.io/badge/LICENSE-MIT-success?style=for-the-badge" alt="MIT License" /></a>
   <a href="https://www.npmjs.com/package/create-openclaw-bot"><img src="https://img.shields.io/npm/v/create-openclaw-bot?style=for-the-badge&label=CLI&color=2563EB&logo=npm&logoColor=white" alt="NPM Version" /></a>
   <a href="https://github.com/tuanminhhole/openclaw-setup/stargazers"><img src="https://img.shields.io/github/stars/tuanminhhole/openclaw-setup?style=for-the-badge&color=eab308&logo=github&logoColor=white" alt="GitHub Stars" /></a>
@@ -24,19 +24,18 @@ Công cụ **CLI tương tác** và **Setup Wizard** để tự triển khai Bot
 
 ---
 
-## 🆕 Có gì mới trong v5.7.5
+## 🆕 Có gì mới trong v5.7.8
 
-- 🐛 **Hotfix: CLI crash trên mọi nền tảng** — Sửa lỗi `ReferenceError: channelKey is not defined` khiến CLI crash ngay sau khi hoàn thành wizard trên mọi nền tảng (Telegram, Zalo). Hàm `writeWorkspaceFiles()` giờ nhận `channelKey` như một tham số tường minh.
-- 🔤 **Sửa: Encoding tiếng Việt trong CLI** — Khôi phục tính toàn vẹn UTF-8 trong `cli.src.js`, ngăn double-encoding ký tự tiếng Việt do công cụ Windows gây ra.
+- 🧹 **Dọn dẹp Plugin Zalo Mod** — Gỡ bỏ auto-inject `zalo-mod` khỏi config được generate. Plugin giờ phải cài thủ công qua ClawHub, loại bỏ vòng lặp cài đặt liên tục và xung đột quyền trong Docker.
+- 🔧 **Docker Build Sạch Hơn** — `openclaw-zalo-mod` không còn được nhúng vào Docker image khi build hoặc trong entrypoint runtime, giảm kích thước image và lỗi khởi động.
+- 📝 **Chuẩn Hóa Workflow Release** — Thêm `.agent/workflows/update.md` làm checklist release chuẩn cho repo này.
 
 <details>
-<summary><b>Trước đó: Có gì mới ở v5.7.2</b></summary>
+<summary><b>Trước đó: Có gì mới ở v5.7.7</b></summary>
 
-- 🏗️ **Kiến trúc config tập trung** — Toàn bộ logic tạo `openclaw.json`, `.env`, và `exec-approvals.json` giờ chạy qua module duy nhất `bot-config-gen.js`. Cả Web Wizard và CLI dùng chung cùng một builder, loại bỏ sai lệch config giữa 2 bề mặt.
-- 🔄 **Phiên bản rolling `@latest`** — Script cài đặt giờ dùng `openclaw@latest` thay vì version cố định, đảm bảo người dùng luôn nhận bản mới nhất.
-- 🧪 **Bộ test matrix toàn diện** — Thêm 422 test mới phủ tất cả tổ hợp OS × Deploy × Channel × Số bot, kèm sandbox Wizard IIFE và kiểm tra cấu trúc CLI.
-- 🐛 **Xóa lỗi `autoReply`** — Trường `autoReply: true` gây crash gateway khi khởi động Zalo Personal đã bị loại bỏ vĩnh viễn khỏi mọi generator.
-- 💬 **Chuẩn hóa config Zalo Personal** — Kênh Zalo Personal (`zalouser`) giờ dùng config khớp production với `groups`, `groupPolicy`, `historyLimit`, và `bindings` đúng.
+- 🛠️ **Ổn Định Infrastructure & Zalo Bot** — Tự động ghim `openclaw@2026.4.15` cho mọi nền tảng, loại bỏ hoàn toàn các lỗi crash do lệch version khi cài Zalo Personal.
+- 📦 **Tối Ưu Docker Volume & Gateway Deadlock** — Thiết kế lại cơ chế mount thư mục `.openclaw` và triển khai `tmpfs` cho `plugin-runtime-deps`, triệt để ngăn chặn tình trạng I/O lock trên Windows/WSL2.
+- 🔄 **9Router Smart-Sync** — Tự động nhận diện và đồng bộ danh sách models (Gemini, Claude, GPT) từ các AI provider đang kích hoạt trực tiếp vào combo `smart-route` mỗi khi khởi động hệ thống.
 
 ## </details>
 

package/dist/cli.js

@@ -488,14 +488,18 @@ async function patchProjectDocker9Router(projectDir) {
   await fs.writeFile(path.join(dockerDir, 'sync.js'), build9RouterSmartRouteSyncScript('/root/.9router/db.json'));
   await fs.writeFile(path.join(dockerDir, 'patch-9router.js'), build9RouterPatchScript());
   let compose = await fs.readFile(composePath, 'utf8');
-  compose = compose.replace(
-    /node -e "require\('fs'\)\.writeFileSync\('\/tmp\/sync\.js',Buffer\.from\('[^']*','base64'\)\.toString\(\)\)"/,
-    "cp /opt/sync.js /tmp/sync.js"
-  );
-  compose = compose.replace(
-    /(npm install -g [^\n]+\n)/,
-    `$1        cp /opt/patch-9router.js /tmp/patch-9router.js\n`
-  );
+  compose = compose.replace(
+    /node -e "require\('fs'\)\.writeFileSync\('\/tmp\/sync\.js',Buffer\.from\('[^']*','base64'\)\.toString\(\)\)"/,
+    "cp /opt/sync.js /tmp/sync.js"
+  );
+  compose = compose.replace(
+    /\s*node -e "require\('fs'\)\.writeFileSync\('\/tmp\/patch-9router\.js',Buffer\.from\('[^']*','base64'\)\.toString\(\)\)"\n/,
+    ''
+  );
+  compose = compose.replace(
+    /(npm install -g [^\n]+\n)/,
+    `$1        cp /opt/patch-9router.js /tmp/patch-9router.js\n`
+  );
   if (!compose.includes('node /tmp/patch-9router.js || true')) {
     compose = compose.replace(
       /(\s*node \/tmp\/sync\.js > \/tmp\/sync\.log 2>&1 &\n)/,
@@ -2158,20 +2162,16 @@ async function main() {
   
   
   // ── Docker artifacts: Dockerfile + docker-compose via shared buildDockerArtifacts() ──────
-  const skillSlugs = SKILLS
-    .filter(s => selectedSkills.includes(s.value) && s.slug)
-    .map(s => s.slug);
-  const skillInstallCmd = skillSlugs.length > 0
-    ? skillSlugs.map(s => `openclaw skills install ${s} 2>/dev/null || true`).join(' && ')
-    : '';
+  const skillSlugs = SKILLS
+    .filter(s => selectedSkills.includes(s.value) && s.slug)
+    .map(s => s.slug);
+  const skillInstallCmd = skillSlugs.length > 0
+    ? skillSlugs.map(s => `ensure_skill ${s}`).join('\n')
+    : '';
   const relayInstallCmd = (isMultiBot && channelKey === 'telegram')
     ? buildRelayPluginInstallCommand('openclaw')
     : '';
-  const zaloModInstallCmd = hasZaloPersonal(channelKey)
-    ? 'openclaw plugins install openclaw-zalo-mod 2>/dev/null || true'
-    : '';
-  const socatBridge = hasBrowserDesktop ? 'socat TCP-LISTEN:9222,fork,reuseaddr TCP:host.docker.internal:9222 &' : '';
-  const deviceApproveLoop = 'while true; do sleep 5; openclaw devices approve --latest 2>/dev/null || true; done >/dev/null 2>&1 &';
+  const deviceApproveLoop = 'while true; do sleep 5; openclaw devices approve --latest 2>/dev/null || true; done >/dev/null 2>&1 &';
 
   // buildDockerArtifacts joins runtimeCommandParts with spaces, then appends 'openclaw gateway run'
   // Each part should be a standalone command fragment (no trailing &&)
@@ -2183,14 +2183,12 @@ async function main() {
     isMultiBot,
     hasBrowser: hasBrowserDesktop || hasBrowserServer,
     selectedModel: modelsPrimary,
-    agentId,
-    runtimeCommandParts: [
-      skillInstallCmd ? skillInstallCmd + ' &&' : '',
-      relayInstallCmd ? relayInstallCmd + ' &&' : '',
-      zaloModInstallCmd ? zaloModInstallCmd + ' &&' : '',
-      socatBridge,
-      deviceApproveLoop,
-    ].filter(Boolean),
+    agentId,
+    runtimeCommandParts: [
+      relayInstallCmd,
+      skillInstallCmd,
+      deviceApproveLoop,
+    ].filter(Boolean),
     volumeMount: '../..:/root/project',
     singleComposeName: `oc-${agentId}`,
     multiComposeName: 'oc-multibot',

package/dist/setup/shared/bot-config-gen.js

@@ -261,6 +261,14 @@
       channels.zalouser = {
         enabled: true,
         defaultAccount: 'default',
+        accounts: {
+          default: {
+            dmPolicy: 'open',
+            allowFrom: ['*'],
+            groupPolicy: 'allowlist',
+            groupAllowFrom: ['*'],
+          },
+        },
         dmPolicy: 'open',
         allowFrom: ['*'],
         groupPolicy: 'allowlist',
@@ -297,21 +305,9 @@
 
     const allow = ['memory-core'];
 
-    // zalo-mod plugin for Zalo Personal
+    // Zalo Personal channel is native; install openclaw-zalo-mod manually via ClawHub when needed.
     if (isZaloPersonal(channelKey)) {
-      allow.push('zalo-mod', 'zalouser');
-      entries['zalo-mod'] = {
-        enabled: true,
-        config: {
-          botName: botName,
-          groupNames: {},
-          zaloDisplayNames: [botName],
-          welcomeEnabled: true,
-          spamRepeatN: 3,
-          spamWindowSeconds: 300,
-        },
-      };
-      entries.zalouser = { enabled: true };
+      allow.push('zalouser');
     }
 
     const plugins = { entries };

package/dist/setup/shared/common-gen.js

@@ -1,6 +1,6 @@
 // @ts-nocheck
 (function (root) {
-  const OPENCLAW_NPM_SPEC = 'openclaw@latest';
+  const OPENCLAW_NPM_SPEC = 'openclaw@2026.4.15';
   const OPENCLAW_RUNTIME_PACKAGES = 'grammy @grammyjs/runner @grammyjs/transformer-throttler @buape/carbon @larksuiteoapi/node-sdk @slack/web-api';
   const NINE_ROUTER_NPM_SPEC = '9router@latest';
   const NINE_ROUTER_PORT = 20128;

package/dist/setup/shared/docker-gen.js

@@ -39,11 +39,26 @@ const sync = async () => {
     if (!res.ok) { console.log('[sync-combo] API not ready, retrying...'); return; }
     const d = await res.json();
     const rawConnections = Array.isArray(d.connections) ? d.connections : Array.isArray(d.providerConnections) ? d.providerConnections : [];
-    const a = [...new Set(rawConnections.filter(c => c && c.provider && c.isActive !== false && !c.disabled).map(c => c.provider))];
-    if (!a.length) { removeSmartRoute(); return; }
+    const activeConns = rawConnections.filter(c => c && c.provider && c.isActive !== false && !c.disabled);
+    const a = [...new Set(activeConns.map(c => c.provider))];
+    if (!a.length) { console.log('[sync-combo] No active providers reported; keeping existing smart-route'); return; }
     a.sort((x, y) => (PREF.indexOf(x) === -1 ? 99 : PREF.indexOf(x)) - (PREF.indexOf(y) === -1 ? 99 : PREF.indexOf(y)));
-    const m = a.flatMap(pv => PM[pv] || []);
-    if (!m.length) { removeSmartRoute(); return; }
+    const m = [];
+    for (const pv of a) {
+      if (PM[pv]) m.push(...PM[pv]);
+      const conns = activeConns.filter(c => c.provider === pv);
+      for (const c of conns) {
+        if (Array.isArray(c.models)) {
+          for (const mdl of c.models) {
+            const mdlId = typeof mdl === 'string' ? mdl : mdl.id;
+            if (mdlId && !m.includes(mdlId) && !m.includes(pv + '/' + mdlId)) {
+               m.push(pv + '/' + mdlId);
+            }
+          }
+        }
+      }
+    }
+    if (!m.length) { console.log('[sync-combo] No mapped models for active providers; keeping existing smart-route'); return; }
     const c = { id: 'smart-route', name: 'smart-route', alias: 'smart-route', models: m };
     const i = db.combos.findIndex(x => x.id === 'smart-route');
     if (i >= 0) {
@@ -155,7 +170,7 @@ if(touched){console.log('[patch-9router] Applied Codex compatibility patch.');}e
       dockerfilePlugins = [],
       dockerfileSkillInstallMode = 'none',
       runtimeCommandParts = [],
-      volumeMount = '../..:/root/project',
+      volumeMount = '../../.openclaw:/root/project/.openclaw\\n      - ../../:/mnt/project',
       singleComposeName = 'oc-bot',
       multiComposeName = 'oc-multibot',
       singleAppContainerName = 'openclaw-bot',
@@ -191,50 +206,50 @@ if(touched){console.log('[patch-9router] Applied Codex compatibility patch.');}e
       : '';
     const patchLine = `RUN node -e "const fs=require('fs');const path=require('path');const dir='/usr/local/lib/node_modules/openclaw/dist';const from='\\t\\t\\t\\t\\tonAgentRunStart: (runId) => {';const to='\\t\\t\\t\\t\\ttimeoutOverrideSeconds: Math.max(1, Math.ceil(timeoutMs / 1e3)),\\n\\t\\t\\t\\t\\tonAgentRunStart: (runId) => {';const files=fs.readdirSync(dir).filter(n=>/\\.js$/.test(n));let patched=0;for(const file of files){const p=path.join(dir,file);let s='';try{s=fs.readFileSync(p,'utf8');}catch{continue;}if(s.includes(to)||!s.includes(from))continue;s=s.replace(from,to);fs.writeFileSync(p,s);patched++;}if(!patched){process.exit(0);}"`;
     
-    // Dynamic runtime configuration: backup config before any first-run install, restore after.
-    // Missing plugin install may touch openclaw.json, so preserve critical fields.
+    // Dynamic runtime configuration: backup config before any first-run install, restore after.
+    // Missing plugin install may touch openclaw.json, so preserve critical fields.
     const backupConfigScript = `const fs=require('fs'),path=require('path'),p=path.join(process.cwd(),'.openclaw','openclaw.json'),b=p.replace('openclaw.json','.openclaw-config-backup.json');if(fs.existsSync(p)){fs.copyFileSync(p,b);}`;
     const backupConfigB64 = encodeBase64Utf8(backupConfigScript);
 
     const restoreConfigScript = `const fs=require('fs'),os=require('os'),path=require('path'),p=path.join(process.cwd(),'.openclaw','openclaw.json'),b=p.replace('openclaw.json','.openclaw-config-backup.json');if(fs.existsSync(p)&&fs.existsSync(b)){const c=JSON.parse(fs.readFileSync(p,'utf8'));const bk=JSON.parse(fs.readFileSync(b,'utf8'));const keep=['agents','channels','bindings','commands','models','browser','skills'];for(const k of keep){if(bk[k]&&!c[k])c[k]=bk[k];}const a=new Set(['http://localhost:18791','http://127.0.0.1:18791','http://0.0.0.0:18791']);for(const entries of Object.values(os.networkInterfaces()||{})){for(const entry of entries||[]){if(!entry||entry.internal||entry.family!=='IPv4'||!entry.address)continue;a.add('http://'+entry.address+':18791');}}c.tools=Object.assign({},c.tools,{profile:'full',exec:{host:'gateway',security:'full',ask:'off'}});c.gateway=Object.assign({},c.gateway,{port:18791,bind:'custom',customBindHost:'0.0.0.0',mode:c.gateway?.mode||bk.gateway?.mode||'local',controlUi:Object.assign({},c.gateway?.controlUi,{allowedOrigins:Array.from(a).filter(Boolean)})});fs.writeFileSync(p,JSON.stringify(c,null,2));fs.unlinkSync(b);}`;
     const restoreConfigB64 = encodeBase64Utf8(restoreConfigScript);
 
-    const runtimeParts = runtimeCommandParts.filter(Boolean);
-    const runtimePrelude = [
-      'export OPENCLAW_HOME="${OPENCLAW_HOME:-$PWD/.openclaw}"',
-      'export OPENCLAW_STATE_DIR="${OPENCLAW_STATE_DIR:-$OPENCLAW_HOME}"',
-      'mkdir -p "$OPENCLAW_HOME" "$OPENCLAW_STATE_DIR"',
-      'if [ "$OPENCLAW_STATE_DIR" != "$OPENCLAW_HOME" ]; then',
-      '  for path in "$OPENCLAW_HOME"/*; do',
-      '    [ -e "$path" ] || continue',
-      '    name="$(basename "$path")"',
-      '    [ "$name" = "plugin-runtime-deps" ] && continue',
-      '    [ "$name" = "logs" ] && continue',
-      '    [ -e "$OPENCLAW_STATE_DIR/$name" ] || ln -s "$path" "$OPENCLAW_STATE_DIR/$name"',
-      '  done',
-      'fi',
-      'ensure_plugin() {',
-      '  id="$1"',
-      '  spec="$2"',
-      '  if [ -d "$OPENCLAW_HOME/extensions/$id" ]; then',
-      '    echo "[entrypoint] plugin $id already installed"',
-      '    return 0',
-      '  fi',
-      '  echo "[entrypoint] plugin $id missing; installing $spec"',
-      '  openclaw plugins install "$spec" 2>/dev/null || echo "[entrypoint] warning: failed to install plugin $spec"',
-      '}',
-      'ensure_skill() {',
-      '  id="$1"',
-      '  if find "$OPENCLAW_HOME" -maxdepth 4 -type d -path "*/skills/$id" -print -quit 2>/dev/null | grep -q .; then',
-      '    echo "[entrypoint] skill $id already installed"',
-      '    return 0',
-      '  fi',
-      '  echo "[entrypoint] skill $id missing; installing"',
-      '  openclaw skills install "$id" 2>/dev/null || echo "[entrypoint] warning: failed to install skill $id"',
-      '}',
-      'echo "[entrypoint] ensuring runtime assets, then starting gateway"',
-    ];
-    runtimeParts.unshift(...runtimePrelude);
+    const runtimeParts = runtimeCommandParts.filter(Boolean);
+    const runtimePrelude = [
+      'export OPENCLAW_HOME="${OPENCLAW_HOME:-$PWD/.openclaw}"',
+      'export OPENCLAW_STATE_DIR="${OPENCLAW_STATE_DIR:-$OPENCLAW_HOME}"',
+      'mkdir -p "$OPENCLAW_HOME" "$OPENCLAW_STATE_DIR"',
+      'if [ "$OPENCLAW_STATE_DIR" != "$OPENCLAW_HOME" ]; then',
+      '  for path in "$OPENCLAW_HOME"/*; do',
+      '    [ -e "$path" ] || continue',
+      '    name="$(basename "$path")"',
+      '    [ "$name" = "plugin-runtime-deps" ] && continue',
+      '    [ "$name" = "logs" ] && continue',
+      '    [ -e "$OPENCLAW_STATE_DIR/$name" ] || ln -s "$path" "$OPENCLAW_STATE_DIR/$name"',
+      '  done',
+      'fi',
+      'ensure_plugin() {',
+      '  id="$1"',
+      '  spec="$2"',
+      '  if [ -d "$OPENCLAW_HOME/extensions/$id" ]; then',
+      '    echo "[entrypoint] plugin $id already installed"',
+      '    return 0',
+      '  fi',
+      '  echo "[entrypoint] plugin $id missing; installing $spec"',
+      '  openclaw plugins install "$spec" 2>/dev/null || echo "[entrypoint] warning: failed to install plugin $spec"',
+      '}',
+      'ensure_skill() {',
+      '  id="$1"',
+      '  if find "$OPENCLAW_HOME" -maxdepth 4 -type d -path "*/skills/$id" -print -quit 2>/dev/null | grep -q .; then',
+      '    echo "[entrypoint] skill $id already installed"',
+      '    return 0',
+      '  fi',
+      '  echo "[entrypoint] skill $id missing; installing"',
+      '  openclaw skills install "$id" 2>/dev/null || echo "[entrypoint] warning: failed to install skill $id"',
+      '}',
+      'echo "[entrypoint] ensuring runtime assets, then starting gateway"',
+    ];
+    runtimeParts.unshift(...runtimePrelude);
     // Backup config BEFORE plugin installs (runtimeCommandParts may contain plugin install commands)
     runtimeParts.unshift(`node -e 'eval(Buffer.from("${backupConfigB64}","base64").toString())'`);
     // Restore config AFTER plugin installs (which may clobber openclaw.json)
@@ -253,7 +268,7 @@ RUN apt-get update && apt-get install -y git curl${browserAptExtra} && rm -rf /v
 ${browserInstallLines}
 ARG OPENCLAW_VER="${openClawNpmSpec}"
 ARG CACHE_BUST=""
-RUN npm install -g ${openClawNpmSpec} ${openClawRuntimePackages}${skillLines}${pluginLines}
+RUN echo "CACHE_BUST=$CACHE_BUST" && npm install -g $OPENCLAW_VER ${openClawRuntimePackages}${skillLines}${pluginLines}
 ${patchLine}
 RUN node -e "require('fs').writeFileSync('/usr/local/bin/openclaw-entrypoint.sh', Buffer.from('${runtimeScriptB64}','base64').toString())" && chmod +x /usr/local/bin/openclaw-entrypoint.sh
 WORKDIR /root/project
@@ -264,12 +279,12 @@ CMD ["/bin/sh", "/usr/local/bin/openclaw-entrypoint.sh"]`;
 
     const syncScript = build9RouterSmartRouteSyncScript('/root/.9router/db.json');
     const syncScriptBase64 = encodeBase64Utf8(syncScript);
-    const patchScript = build9RouterPatchScript();
+const patchScript = build9RouterPatchScript();
     const patchScriptBase64 = encodeBase64Utf8(patchScript);
     const docker9RouterEntrypointScript = build9RouterComposeEntrypointScript(syncScriptBase64, patchScriptBase64);
     const extraHostsBlock = `    extra_hosts:\n      - "host.docker.internal:host-gateway"`;
 
-    const appEnvironmentBlock = '    environment:\n      - OPENCLAW_HOME=/root/project/.openclaw\n      - OPENCLAW_STATE_DIR=/root/project/.openclaw\n';
+    const appEnvironmentBlock = '    environment:\n      - OPENCLAW_HOME=/root/project/.openclaw\n      - OPENCLAW_STATE_DIR=/root/project/.openclaw\n      - OPENCLAW_ALLOW_INSECURE_PRIVATE_WS=1\n    tmpfs:\n      - /root/project/.openclaw/plugin-runtime-deps\n';
 
     let compose;
     if (isMultiBot) {
@@ -462,7 +477,7 @@ ${appEnvironmentBlock}${plainSingleExtraHosts ? `${extraHostsBlock}\n` : ''}
       - "18791:18791"`;
     }
 
-    return {
+    return {
       dockerfile,
       compose,
       syncScript,

package/dist/setup.js

@@ -619,7 +619,7 @@
   // ── Shared runtime constants, relay helpers, auth profile builders (setup/shared/common-gen.js) 
 // @ts-nocheck
 (function (root) {
-  const OPENCLAW_NPM_SPEC = 'openclaw@latest';
+  const OPENCLAW_NPM_SPEC = 'openclaw@2026.4.15';
   const OPENCLAW_RUNTIME_PACKAGES = 'grammy @grammyjs/runner @grammyjs/transformer-throttler @buape/carbon @larksuiteoapi/node-sdk @slack/web-api';
   const NINE_ROUTER_NPM_SPEC = '9router@latest';
   const NINE_ROUTER_PORT = 20128;
@@ -1699,6 +1699,14 @@ if (typeof exports !== 'undefined' && workspaceRoot.__openclawWorkspace) {
       channels.zalouser = {
         enabled: true,
         defaultAccount: 'default',
+        accounts: {
+          default: {
+            dmPolicy: 'open',
+            allowFrom: ['*'],
+            groupPolicy: 'allowlist',
+            groupAllowFrom: ['*'],
+          },
+        },
         dmPolicy: 'open',
         allowFrom: ['*'],
         groupPolicy: 'allowlist',
@@ -1735,21 +1743,9 @@ if (typeof exports !== 'undefined' && workspaceRoot.__openclawWorkspace) {
 
     const allow = ['memory-core'];
 
-    // zalo-mod plugin for Zalo Personal
+    // Zalo Personal channel is native; install openclaw-zalo-mod manually via ClawHub when needed.
     if (isZaloPersonal(channelKey)) {
-      allow.push('zalo-mod', 'zalouser');
-      entries['zalo-mod'] = {
-        enabled: true,
-        config: {
-          botName: botName,
-          groupNames: {},
-          zaloDisplayNames: [botName],
-          welcomeEnabled: true,
-          spamRepeatN: 3,
-          spamWindowSeconds: 300,
-        },
-      };
-      entries.zalouser = { enabled: true };
+      allow.push('zalouser');
     }
 
     const plugins = { entries };
@@ -2513,11 +2509,26 @@ const sync = async () => {
     if (!res.ok) { console.log('[sync-combo] API not ready, retrying...'); return; }
     const d = await res.json();
     const rawConnections = Array.isArray(d.connections) ? d.connections : Array.isArray(d.providerConnections) ? d.providerConnections : [];
-    const a = [...new Set(rawConnections.filter(c => c && c.provider && c.isActive !== false && !c.disabled).map(c => c.provider))];
-    if (!a.length) { removeSmartRoute(); return; }
+    const activeConns = rawConnections.filter(c => c && c.provider && c.isActive !== false && !c.disabled);
+    const a = [...new Set(activeConns.map(c => c.provider))];
+    if (!a.length) { console.log('[sync-combo] No active providers reported; keeping existing smart-route'); return; }
     a.sort((x, y) => (PREF.indexOf(x) === -1 ? 99 : PREF.indexOf(x)) - (PREF.indexOf(y) === -1 ? 99 : PREF.indexOf(y)));
-    const m = a.flatMap(pv => PM[pv] || []);
-    if (!m.length) { removeSmartRoute(); return; }
+    const m = [];
+    for (const pv of a) {
+      if (PM[pv]) m.push(...PM[pv]);
+      const conns = activeConns.filter(c => c.provider === pv);
+      for (const c of conns) {
+        if (Array.isArray(c.models)) {
+          for (const mdl of c.models) {
+            const mdlId = typeof mdl === 'string' ? mdl : mdl.id;
+            if (mdlId && !m.includes(mdlId) && !m.includes(pv + '/' + mdlId)) {
+               m.push(pv + '/' + mdlId);
+            }
+          }
+        }
+      }
+    }
+    if (!m.length) { console.log('[sync-combo] No mapped models for active providers; keeping existing smart-route'); return; }
     const c = { id: 'smart-route', name: 'smart-route', alias: 'smart-route', models: m };
     const i = db.combos.findIndex(x => x.id === 'smart-route');
     if (i >= 0) {
@@ -2629,7 +2640,7 @@ if(touched){console.log('[patch-9router] Applied Codex compatibility patch.');}e
       dockerfilePlugins = [],
       dockerfileSkillInstallMode = 'none',
       runtimeCommandParts = [],
-      volumeMount = '../..:/root/project',
+      volumeMount = '../../.openclaw:/root/project/.openclaw\\n      - ../../:/mnt/project',
       singleComposeName = 'oc-bot',
       multiComposeName = 'oc-multibot',
       singleAppContainerName = 'openclaw-bot',
@@ -2727,7 +2738,7 @@ RUN apt-get update && apt-get install -y git curl${browserAptExtra} && rm -rf /v
 ${browserInstallLines}
 ARG OPENCLAW_VER="${openClawNpmSpec}"
 ARG CACHE_BUST=""
-RUN npm install -g ${openClawNpmSpec} ${openClawRuntimePackages}${skillLines}${pluginLines}
+RUN echo "CACHE_BUST=$CACHE_BUST" && npm install -g $OPENCLAW_VER ${openClawRuntimePackages}${skillLines}${pluginLines}
 ${patchLine}
 RUN node -e "require('fs').writeFileSync('/usr/local/bin/openclaw-entrypoint.sh', Buffer.from('${runtimeScriptB64}','base64').toString())" && chmod +x /usr/local/bin/openclaw-entrypoint.sh
 WORKDIR /root/project
@@ -2738,12 +2749,12 @@ CMD ["/bin/sh", "/usr/local/bin/openclaw-entrypoint.sh"]`;
 
     const syncScript = build9RouterSmartRouteSyncScript('/root/.9router/db.json');
     const syncScriptBase64 = encodeBase64Utf8(syncScript);
-    const patchScript = build9RouterPatchScript();
+const patchScript = build9RouterPatchScript();
     const patchScriptBase64 = encodeBase64Utf8(patchScript);
     const docker9RouterEntrypointScript = build9RouterComposeEntrypointScript(syncScriptBase64, patchScriptBase64);
     const extraHostsBlock = `    extra_hosts:\n      - "host.docker.internal:host-gateway"`;
 
-    const appEnvironmentBlock = '    environment:\n      - OPENCLAW_HOME=/root/project/.openclaw\n      - OPENCLAW_STATE_DIR=/root/project/.openclaw\n';
+    const appEnvironmentBlock = '    environment:\n      - OPENCLAW_HOME=/root/project/.openclaw\n      - OPENCLAW_STATE_DIR=/root/project/.openclaw\n      - OPENCLAW_ALLOW_INSECURE_PRIVATE_WS=1\n    tmpfs:\n      - /root/project/.openclaw/plugin-runtime-deps\n';
 
     let compose;
     if (isMultiBot) {
@@ -2996,7 +3007,6 @@ function buildNativeScriptCtx(options) {
     const p = PLUGINS.find((x) => x.id === pid);
     if (p) allPlugins.push(p.package);
   });
-  if (ch && ch.hasZaloPersonal) allPlugins.push('openclaw-zalo-mod');
   if (isMultiBot && state.channel === 'telegram') allPlugins.push(relayPluginSpec);
   const uniquePlugins = [...new Set(allPlugins)];
   const pluginCmd = uniquePlugins.length > 0 ? uniquePlugins.map(function(pkg) { return 'call npm exec -- openclaw plugins install ' + pkg + ' || echo [WARN] Plugin ' + pkg + ' cai dat that bai (co the do rate limit). Ban co the cai thu cong sau.'; }).join('\r\n') : '';
@@ -3963,7 +3973,7 @@ function generateWinBat(ctx) {
     'echo [1/5] Kiem tra Node.js...',
     'where node >nul 2>&1 || (echo ERROR: Node.js chua cai! Tai tai: https://nodejs.org && pause && exit /b 1)',
     'echo [2/5] Cai OpenClaw CLI...',
-    `call npm install -g openclaw@latest ${openClawRuntimePackages} || goto :fail`,
+    `call npm install -g ${OPENCLAW_NPM_SPEC} ${openClawRuntimePackages} || goto :fail`,
     'echo [OK] OpenClaw da duoc cai dat thanh cong.',
   ];
 
@@ -4153,7 +4163,7 @@ function generateMacOsSh(ctx) {
     'grep -Fqx \'export PATH="$HOME/.local/bin:$PATH"\' "$HOME/.zshrc" 2>/dev/null || echo \'export PATH="$HOME/.local/bin:$PATH"\' >> "$HOME/.zshrc"',
     'grep -Fqx \'export PATH="$HOME/.local/bin:$PATH"\' "$HOME/.profile" 2>/dev/null || echo \'export PATH="$HOME/.local/bin:$PATH"\' >> "$HOME/.profile"',
     '# Install openclaw (user-local first, sudo fallback)',
-      `npm install -g openclaw@latest ${openClawRuntimePackages} || sudo npm install -g openclaw@latest ${openClawRuntimePackages}`,
+      `npm install -g ${OPENCLAW_NPM_SPEC} ${openClawRuntimePackages} || sudo npm install -g ${OPENCLAW_NPM_SPEC} ${openClawRuntimePackages}`,
     ];
     providerLines(sh, 'sh');
     if (pluginCmd) sh.push(pluginCmd);
@@ -4219,7 +4229,7 @@ function generateVpsSh(ctx) {
     'export DATA_DIR="$PROJECT_DIR/.9router"',
     'grep -Fqx \'export PATH="$HOME/.local/bin:$PATH"\' "$HOME/.bashrc" 2>/dev/null || echo \'export PATH="$HOME/.local/bin:$PATH"\' >> "$HOME/.bashrc"',
     'grep -Fqx \'export PATH="$HOME/.local/bin:$PATH"\' "$HOME/.profile" 2>/dev/null || echo \'export PATH="$HOME/.local/bin:$PATH"\' >> "$HOME/.profile"',
-    `npm install -g openclaw@latest ${openClawRuntimePackages} pm2@latest`,
+    `npm install -g ${OPENCLAW_NPM_SPEC} ${openClawRuntimePackages} pm2@latest`,
   ];
   providerLines(vps, 'sh');
   if (pluginCmd) vps.push(pluginCmd);
@@ -4342,7 +4352,7 @@ function generateLinuxSh(ctx) {
     'export DATA_DIR="$PROJECT_DIR/.9router"',
     'grep -Fqx \'export PATH="$HOME/.local/bin:$PATH"\' "$HOME/.bashrc" 2>/dev/null || echo \'export PATH="$HOME/.local/bin:$PATH"\' >> "$HOME/.bashrc"',
     'grep -Fqx \'export PATH="$HOME/.local/bin:$PATH"\' "$HOME/.profile" 2>/dev/null || echo \'export PATH="$HOME/.local/bin:$PATH"\' >> "$HOME/.profile"',
-    `npm install -g openclaw@latest ${openClawRuntimePackages}`,
+    `npm install -g ${OPENCLAW_NPM_SPEC} ${openClawRuntimePackages}`,
   ];
   providerLines(lnx, 'sh');
   if (pluginCmd) lnx.push(pluginCmd);
@@ -5832,7 +5842,6 @@ Write-Host "Chrome se tu dong bat Debug Mode moi khi ban dang nhap Windows (dela
       };
       clawConfig.plugins = {
         entries: {
-          ...(ch.hasZaloPersonal ? { 'zalo-mod': { enabled: true, config: {} } } : {}),
           'memory-core': {
             config: { dreaming: { enabled: state.config.skills.includes('memory') } },
           },
@@ -5846,9 +5855,6 @@ Write-Host "Chrome se tu dong bat Debug Mode moi khi ban dang nhap Windows (dela
         if (!plugin || plugin.hidden) return;
         pluginEntries[plugin.package || pid] = { enabled: true };
       });
-      if (ch.hasZaloPersonal) {
-        pluginEntries['zalo-mod'] = { enabled: true, config: {} };
-      }
       pluginEntries['memory-core'] = {
         config: { dreaming: { enabled: state.config.skills.includes('memory') } },
       };
@@ -5888,7 +5894,6 @@ model:
     // 3. Dockerfile + docker-compose.yml
     const allPlugins = [];
     if (ch.pluginInstall) allPlugins.push(ch.pluginInstall);
-    if (ch.hasZaloPersonal) allPlugins.push('openclaw-zalo-mod');
     state.config.plugins.forEach((pid) => {
       const plug = PLUGINS.find((p) => p.id === pid);
       if (plug) allPlugins.push(plug.package);
@@ -5904,7 +5909,6 @@ model:
     const relayPluginInstallCmd = isMultiBot ? buildRelayPluginInstallCommand('openclaw') : '';
     const pluginRuntimeSpecs = allPlugins.filter((p) => p && p !== '@openclaw/zalouser');
     const pluginIdForSpec = (spec) => {
-      if (String(spec).includes('zalo-mod')) return 'zalo-mod';
       return String(spec).replace(/^@openclaw\//, '').replace(/^openclaw-/, '');
     };
     const pluginInstallCmd = [
@@ -5925,7 +5929,6 @@ model:
       dockerfileSkillInstallMode: 'build',
       runtimeCommandParts: [
         pluginInstallCmd,
-        hasBrowser ? 'socat TCP-LISTEN:9222,fork,reuseaddr TCP:host.docker.internal:9222 &' : '',
         'while true; do sleep 5; openclaw devices approve --latest 2>/dev/null || true; done >/dev/null 2>&1 &'
       ],
       plainSingleExtraHosts: true,
@@ -6561,7 +6564,7 @@ fi
           : 'Ubuntu / VPS: The script auto-installs Node.js 20 LTS, OpenClaw CLI, and PM2 to keep the bot running after reboot.');
       }
       steps.push(_isVi ? '✅ Kiểm tra Node.js (cài tự động trên Ubuntu/VPS nếu chưa có)' : '✅ Check Node.js (auto-install on Ubuntu/VPS if missing)');
-      steps.push(_isVi ? '📦 Cài OpenClaw CLI (<code>npm install -g openclaw@latest</code>)' : '📦 Install OpenClaw CLI (<code>npm install -g openclaw@latest</code>)');
+      steps.push(_isVi ? `📦 Cài OpenClaw CLI (<code>npm install -g ${common.OPENCLAW_NPM_SPEC}</code>)` : `📦 Install OpenClaw CLI (<code>npm install -g ${common.OPENCLAW_NPM_SPEC}</code>)`);
       if (_is9Router) {
         steps.push(_isVi ? '🔀 Cài 9Router (<code>npm install -g 9router</code>) và khởi động tự động' : '🔀 Install 9Router (<code>npm install -g 9router</code>) and start automatically');
       } else if (_isOllama) {

package/package.json

@@ -1,39 +1,39 @@
-{
-  "name": "create-openclaw-bot",
-  "version": "5.7.6",
-  "description": "Interactive CLI installer for OpenClaw Bot",
-  "main": "dist/cli.js",
-  "bin": {
-    "create-openclaw-bot": "./dist/cli.js"
-  },
-  "files": [
-    "dist"
-  ],
-  "scripts": {
-    "build": "node src/build.mjs --deploy",
-    "dev": "node src/build.mjs --deploy --watch",
-    "test": "node src/tests/smoke-cli-logic.mjs && node src/tests/test-generation.mjs && node src/tests/test-matrix.mjs",
-    "bump": "node src/bump-version.mjs"
-  },
-  "keywords": [
-    "openclaw",
-    "cli",
-    "bot",
-    "zalo",
-    "telegram",
-    "ai"
-  ],
-  "author": "tuanminhhole",
-  "license": "MIT",
-  "dependencies": {
-    "@inquirer/prompts": "^4.3.1",
-    "chalk": "^5.3.0",
-    "fs-extra": "^11.2.0"
-  },
-  "bundleDependencies": [
-    "@inquirer/prompts",
-    "chalk",
-    "fs-extra"
-  ],
-  "type": "module"
-}
+{
+  "name": "create-openclaw-bot",
+  "version": "5.7.8",
+  "description": "Interactive CLI installer for OpenClaw Bot",
+  "main": "dist/cli.js",
+  "bin": {
+    "create-openclaw-bot": "./dist/cli.js"
+  },
+  "files": [
+    "dist"
+  ],
+  "scripts": {
+    "build": "node src/build.mjs --deploy",
+    "dev": "node src/build.mjs --deploy --watch",
+    "test": "node src/tests/smoke-cli-logic.mjs && node src/tests/test-generation.mjs && node src/tests/test-matrix.mjs",
+    "bump": "node src/bump-version.mjs"
+  },
+  "keywords": [
+    "openclaw",
+    "cli",
+    "bot",
+    "zalo",
+    "telegram",
+    "ai"
+  ],
+  "author": "tuanminhhole",
+  "license": "MIT",
+  "dependencies": {
+    "@inquirer/prompts": "^4.3.1",
+    "chalk": "^5.3.0",
+    "fs-extra": "^11.2.0"
+  },
+  "bundleDependencies": [
+    "@inquirer/prompts",
+    "chalk",
+    "fs-extra"
+  ],
+  "type": "module"
+}