mirror of
https://github.com/openclaw/openclaw.git
synced 2026-08-27 04:47:03 -06:00
Peter Steinberger
87b56458a1
* feat(plugin-sdk): add in-process hook agent dispatch seam * feat(plugins): add imap inbound email trigger plugin * fix(imap): coalesce sweep wakeups and drop test-only gate exports * docs(imap): fix agents bindings command invocation * fix(gateway): guard optional bound context in plugin hook dispatch Post-rebase drift made resolveBoundGatewayContext possibly-undefined; the plugin hook dispatch path invoked it unconditionally. Use the optional-call guard consistent with sibling runtime accessors. * fix(imap): bump mailparser to 3.9.16 off vulnerable deepmerge-ts mailparser 3.9.15 pinned html-to-text@10.0.0 -> deepmerge-ts@7.1.6 (GHSA HIGH, stack exhaustion, <8.0.0). 3.9.16 pins html-to-text@10.0.1 -> deepmerge-ts@8.0.2, clearing the production audit gate. * refactor(gateway): extract plugin hooks runtime to keep server-plugins under max-lines The dispatchHookAgentTurn seam pushed server-plugins.ts to 702 effective lines (cap 700). Extract createGatewayHooksRuntime into the sibling runtime-helpers module, mirroring createGatewayNodesRuntime/createGatewaySubagentRuntime; no suppression added. * docs(secrets): register imap plugin password in secretref credential matrix The bundled imap plugin declares a secretInput (accounts.*.password); regenerate the user-supplied credentials matrix and surface list so the target-registry docs sync test stays green.