Bug type

Regression (worked before, now fails)

Summary

When using zalouser with dmPolicy: "allowlist" and groupPolicy: "allowlist", I want to allow exactly one Zalo group while keeping DMs restricted. In practice, only the allowlisted user can trigger replies in that group; other members in the same group get no response. I also see a possibly related inconsistency where openclaw status reports Zalo Personal: WARN — Not authenticated (no saved Zalo session) even though the bot is actively receiving and replying in Zalo group chat.

Steps to reproduce

1. Configure zalouser so that:

• DMs are restricted to one allowlisted user
• group access is set to allowlist
• exactly one Zalo group is allowlisted
• that group requires mention to trigger replies

Example:

"zalouser": {
"dmPolicy": "allowlist",
"enabled": true,
"groupPolicy": "allowlist",
"allowFrom": [
"<USER_A_ID>"
],
"groups": {
"<GROUP_ID>": {
"allow": true,
"requireMention": true
}
}
}

2. Restart the OpenClaw gateway.
3. In the allowlisted Zalo group, have the allowlisted user (<USER_A_ID>) mention the bot and send a normal message.
4. Confirm that the bot replies.
5. In the same allowlisted Zalo group, have another member (<USER_B_ID>) mention the bot and send a normal non-command message.
6. Observe that the bot does not reply.
7. Additional checks already performed:

• temporarily set requireMention: false and tested again
• tested with a normal non-/ message
• confirmed the actual group id via:

openclaw directory groups list --channel zalouser

• confirmed the gateway resolves the configured group correctly in logs

Expected behavior

Any member of the allowlisted group should be able to trigger the bot according to the group settings, while DMs remain restricted to the allowlisted DM user(s).

Actual behavior

Only the DM-allowlisted user can trigger replies in the allowlisted group. Other members of the same group do not get any response.

OpenClaw version

2026.3.7

Operating system

macOS 26.3.1 (arm64)

Install method

No response

Logs, screenshots, and evidence

Impact and severity

No response

Additional information

No response