Merge pull request #5 from Clawdi-AI/chore/remove-builtin-clawdi-plugin

chore(store): remove built-in Clawdi plugin listing

Author: kingsleydon

v2/README.md

@@ -2,6 +2,9 @@
 
 This is the independent Store root for Agent Plugins 1.0.0 packages. It does
 not change or share validation with the legacy `agents/` and `skills/` Stores.
+Clawdi's first-party Skill and MCP capabilities are built into its Cloud/runtime
+projection, not distributed as an installable Agent Plugin, and therefore do
+not appear in this Store catalog.
 
 ## Package layout
 
@@ -68,9 +71,9 @@ Store validation accepts all three standard transports independently of a
 runtime's connection capabilities. `compatibility.runtimes` names intended
 install targets; it is not a transport capability matrix or proof that every
 component can run there. Installers and runtimes must gate unsupported
-`streamable-http`, legacy `sse`, and secret-binding behavior without treating
-the portable package as invalid. In particular, this Store contract does not
-claim Hermes support for `sse` or `configuration.secretSlots`.
+`streamable-http` and legacy `sse` behavior without treating the portable
+package as invalid. In particular, this Store contract does not claim Hermes
+support for `sse`.
 
 ## Clawdi extension
 
@@ -80,20 +83,16 @@ claim Hermes support for `sse` or `configuration.secretSlots`.
 - `display` requires `name`, `category`, and `languages`; `icon` is an optional
   in-package `./` file. The Store requires the standard top-level `keywords`
   field for search and discovery instead of duplicating tags in the extension.
-- `configuration.secretSlots` maps slot IDs to `label`, `description`,
-  `required`, and one or more MCP bindings. Bindings target an existing stdio
-  environment key or remote header and may add a bounded, non-secret header
-  prefix.
 - `compatibility` may list only `openclaw` and `hermes` runtimes and bare
   `executables`. If either list is present, it must not be empty.
 
 Secret values, trust or review state, featured ranking, install counts,
-arbitrary settings, install hooks, OAuth registration, and dependency
-installers are not author-controlled extension data. Literal credential-bearing
-MCP environment or header values are rejected; declare credentials as secret
-slots only for targets that implement this Clawdi extension. Agent Plugins
-1.0.0 defines no portable `secretRefs` field; authentication can instead remain
-entirely client-managed.
+arbitrary settings, configuration, install hooks, OAuth registration, and
+dependency installers are not author-controlled extension data. Values
+committed in standard MCP `env` or `headers` fields must be public and
+non-secret. For protected remote MCP servers, standard MCP Authorization is
+performed by the MCP client and managed by its host/runtime, not declared as
+Store package authentication metadata.
 
 ## Generated Store index
 
@@ -111,26 +110,27 @@ declared `runtimes`; `path` and optional `icon`; the `sha256-tree-v1` `digest`;
 `hasConfiguration`; and a closed `components` summary. `components.skills`
 contains exact Skill names, while `components.mcpServers` maps exact server
 names to declared `stdio`, `streamable-http`, or `sse` transports. It contains
-no Skill bodies or descriptions and no MCP URLs, headers, commands, or config
-bindings. Catalog-facing human strings and array items cannot contain ASCII
-control characters or DEL.
+no Skill bodies or descriptions and no MCP URLs, headers, commands, or
+configuration data. Catalog-facing human strings and array items cannot
+contain ASCII control characters or DEL.
 
-`hasConfiguration` is derived only from the presence of
-`extensions["ai.clawdi"].configuration`; it never copies secret slot bindings
-or values. The current Clawdi native adapter must not offer entries with
-`hasConfiguration: true` until it supports that object.
+`hasConfiguration` is retained for catalog schema compatibility and is always
+`false`. Packages cannot declare `extensions["ai.clawdi"].configuration`.
 
 The index contains no Git commit. `path` is resolved relative to the directory
-containing `v2/catalog.json`, so `./plugins/clawdi` selects
-`v2/plugins/clawdi` in the same snapshot. A consumer resolves an external Store
-commit, verifies `digest`, and binds the install to that commit plus digest. The
-index exposes one current published version per plugin; it is not a
-multi-version registry. Existing installs remain pinned to their original
-commit and digest after a newer version replaces the listing.
+containing `v2/catalog.json`, so `./plugins/example-plugin` selects
+`v2/plugins/example-plugin` in the same snapshot. A consumer resolves an
+external Store commit, verifies `digest`, and binds the install to that commit
+plus digest. The index exposes one current published version per plugin; it is
+not a multi-version registry. Existing installs remain pinned to their original
+commit and digest after a newer version replaces or removes the listing; the
+package bytes remain fetchable from that historical commit.
 
 CI rejects generated-file drift. Its separate baseline check also rejects a
 version regression or a changed digest for a `name` and `version` already
-present in the baseline catalog; changed package bytes require a newer version.
+present in both catalogs; changed package bytes require a newer version. A
+removed listing is intentionally absent from that comparison because it does
+not change the package identity at its historical commit.
 
 ## Validation and digest
 
@@ -182,4 +182,5 @@ explicitly Clawdi-owned.
 - [MCP schema 1.0.0](https://agent-plugins.org/schemas/1.0.0/mcp.schema.json)
 - [Loading and discovery](https://agent-plugins.org/client-implementers/loading-and-discovery.md)
 - [MCP runtime](https://agent-plugins.org/client-implementers/mcp-runtime.md)
+- [MCP Authorization](https://modelcontextprotocol.io/specification/2026-07-28/basic/authorization)
 - [Agent Skills specification](https://agentskills.io/specification.md)

v2/SECURITY.md

@@ -3,9 +3,9 @@
 Never commit credentials, private keys, cookies, session data, populated local
 profiles, or generated databases and logs. Secret values belong in
 client-managed storage, not `plugin.json`, `mcp.json`, Skill content, or package
-assets. Targets that implement the Clawdi extension may inject them through
-`extensions["ai.clawdi"].configuration.secretSlots`; the extension is not a
-portable Agent Plugins credential-reference mechanism.
+assets. Values committed in standard MCP `env` and `headers` fields must be
+public and non-secret. Protected remote MCP authorization is performed by the
+MCP client and managed by its host/runtime.
 
 Review bundled executables and dependencies before publishing. Plugin packages
 cannot declare installers, install hooks, OAuth registration, trust state, or

v2/catalog.json

@@ -1,37 +1,4 @@
 {
-  "plugins": [
-    {
-      "category": "productivity",
-      "components": {
-        "mcpServers": {
-          "clawdi": "streamable-http"
-        },
-        "skills": [
-          "clawdi"
-        ]
-      },
-      "description": "Clawdi Cloud memory, session, project, Vault metadata, and connected-service tools.",
-      "digest": "sha256-tree-v1:6a9c13c187de7f8a2b9e59e3a9e1ef25b39e07ad6687f92d2d6dcaf2c12a27d3",
-      "displayName": "Clawdi",
-      "hasConfiguration": false,
-      "keywords": [
-        "clawdi",
-        "memory",
-        "sessions",
-        "connectors"
-      ],
-      "languages": [
-        "en"
-      ],
-      "name": "clawdi",
-      "path": "./plugins/clawdi",
-      "publisher": "Clawdi",
-      "runtimes": [
-        "openclaw",
-        "hermes"
-      ],
-      "version": "1.0.0"
-    }
-  ],
+  "plugins": [],
   "schemaVersion": 1
 }

v2/plugins/README.md

@@ -3,15 +3,8 @@
 Each immediate child directory is an Agent Plugins 1.0.0 package. The v2 Store
 validator ignores this README and treats every other entry as a plugin package.
 
-`clawdi@1.0.0` is the first-party Clawdi package. Its package, Skill, MCP server,
-and `X-Clawdi-Agent-Plugin` marker use the canonical name `clawdi`. The package
-contains no credential configuration; Hosted
-authentication is applied through the existing explicit egress profile
-contract. Its canonical package identity is
-`sha256-tree-v1:6a9c13c187de7f8a2b9e59e3a9e1ef25b39e07ad6687f92d2d6dcaf2c12a27d3`.
-
-Hosted activation must reference an exact commit in the public
-`https://github.com/Clawdi-AI/store` repository containing these bytes. A
-private review commit or mutable ref is not a deployable source identity.
-The generated Store index intentionally omits that commit; consumers bind it
-from the externally resolved snapshot.
+Clawdi's first-party Skill and MCP capabilities are built into its Cloud/runtime
+projection and are not installable Agent Plugin packages. Protected remote MCP
+servers use standard MCP Authorization through the MCP client; authorization
+and credentials are managed by the host/runtime rather than portable Store
+package metadata.

v2/plugins/clawdi/mcp.json

@@ -96,7 +96,7 @@ def _catalog_entry(report: PluginReport) -> dict[str, Any]:
         "keywords": list(manifest["keywords"]),
         "languages": list(display["languages"]),
         "runtimes": list(compatibility.get("runtimes", [])),
-        "hasConfiguration": "configuration" in extension,
+        "hasConfiguration": False,
         "path": f"./plugins/{report.key}",
         "digest": f"{DIGEST_PREFIX}{report.digest}",
         "components": {
@@ -268,8 +268,8 @@ def validate_catalog(catalog: Any) -> list[str]:
                     f"{context}.runtimes contains unsupported values: "
                     + ", ".join(sorted(unknown_runtimes))
                 )
-        if type(entry.get("hasConfiguration")) is not bool:
-            errors.append(f"{context}.hasConfiguration must be a boolean")
+        if entry.get("hasConfiguration") is not False:
+            errors.append(f"{context}.hasConfiguration must equal false")
         components = entry.get("components")
         if not isinstance(components, dict):
             errors.append(f"{context}.components must be an object")