fix: scope extension runtime deps to plugin manifests

extensions/bluebubbles/package.json

@@ -3,6 +3,9 @@
   "version": "2026.3.2",
   "description": "OpenClaw BlueBubbles channel plugin",
   "type": "module",
+  "dependencies": {
+    "zod": "^4.3.6"
+  },
   "openclaw": {
     "extensions": [
       "./index.ts"

extensions/irc/package.json

@@ -3,6 +3,9 @@
   "version": "2026.3.2",
   "description": "OpenClaw IRC channel plugin",
   "type": "module",
+  "dependencies": {
+    "zod": "^4.3.6"
+  },
   "openclaw": {
     "extensions": [
       "./index.ts"

extensions/llm-task/package.json

@@ -4,6 +4,10 @@
   "private": true,
   "description": "OpenClaw JSON-only LLM task plugin",
   "type": "module",
+  "dependencies": {
+    "@sinclair/typebox": "0.34.48",
+    "ajv": "^8.18.0"
+  },
   "openclaw": {
     "extensions": [
       "./index.ts"

extensions/lobster/package.json

@@ -3,6 +3,9 @@
   "version": "2026.3.2",
   "description": "Lobster workflow tool plugin (typed pipelines + resumable approvals)",
   "type": "module",
+  "dependencies": {
+    "@sinclair/typebox": "0.34.48"
+  },
   "openclaw": {
     "extensions": [
       "./index.ts"

extensions/matrix/package.json

@@ -4,6 +4,7 @@
   "description": "OpenClaw Matrix channel plugin",
   "type": "module",
   "dependencies": {
+    "@mariozechner/pi-agent-core": "0.55.3",
     "@matrix-org/matrix-sdk-crypto-nodejs": "^0.4.0",
     "@vector-im/matrix-bot-sdk": "0.8.0-element.3",
     "markdown-it": "14.1.1",

extensions/mattermost/package.json

@@ -3,6 +3,10 @@
   "version": "2026.3.2",
   "description": "OpenClaw Mattermost channel plugin",
   "type": "module",
+  "dependencies": {
+    "ws": "^8.19.0",
+    "zod": "^4.3.6"
+  },
   "openclaw": {
     "extensions": [
       "./index.ts"

extensions/nextcloud-talk/package.json

@@ -3,6 +3,9 @@
   "version": "2026.3.2",
   "description": "OpenClaw Nextcloud Talk channel plugin",
   "type": "module",
+  "dependencies": {
+    "zod": "^4.3.6"
+  },
   "openclaw": {
     "extensions": [
       "./index.ts"

extensions/tlon/package.json

@@ -7,7 +7,8 @@
     "@tloncorp/api": "github:tloncorp/api-beta#7eede1c1a756977b09f96aa14a92e2b06318ae87",
     "@tloncorp/tlon-skill": "0.1.9",
     "@urbit/aura": "^3.0.0",
-    "@urbit/http-api": "^3.0.0"
+    "@urbit/http-api": "^3.0.0",
+    "zod": "^4.3.6"
   },
   "openclaw": {
     "extensions": [

extensions/voice-call/package.json

@@ -5,6 +5,7 @@
   "type": "module",
   "dependencies": {
     "@sinclair/typebox": "0.34.48",
+    "commander": "^14.0.3",
     "ws": "^8.19.0",
     "zod": "^4.3.6"
   },

extensions/zalo/package.json

@@ -4,7 +4,8 @@
   "description": "OpenClaw Zalo channel plugin",
   "type": "module",
   "dependencies": {
-    "undici": "7.22.0"
+    "undici": "7.22.0",
+    "zod": "^4.3.6"
   },
   "openclaw": {
     "extensions": [

extensions/zalouser/package.json

@@ -5,7 +5,8 @@
   "type": "module",
   "dependencies": {
     "@sinclair/typebox": "0.34.48",
-    "zca-js": "2.1.1"
+    "zca-js": "2.1.1",
+    "zod": "^4.3.6"
   },
   "openclaw": {
     "extensions": [