@nevermined-io/openclaw-plugin 1.6.0 → 1.8.0

package/README.md

@@ -14,7 +14,7 @@ This plugin is published from the [`nevermined-io/payments`](https://github.com/
 | **Security policy** | https://github.com/nevermined-io/payments/security/policy |
 | **Issue tracker** | https://github.com/nevermined-io/payments/issues |
 
-> ✅ **Official ClawHub listing.** The official skill lives at [`clawhub.ai/nevermined/nevermined-payments`](https://clawhub.ai/nevermined/nevermined-payments) under the `@nevermined` org publisher. Treat any other ClawHub publisher as a third-party mirror until further notice. The canonical npm package is [`@nevermined-io/openclaw-plugin`](https://www.npmjs.com/package/@nevermined-io/openclaw-plugin).
+> ✅ **Official ClawHub listing.** The official skill lives at [`clawhub.ai/nevermined-io/nevermined`](https://clawhub.ai/nevermined-io/nevermined) under the `nevermined-io` org publisher. Treat any other ClawHub publisher as a third-party mirror until further notice. The canonical npm package is [`@nevermined-io/openclaw-plugin`](https://www.npmjs.com/package/@nevermined-io/openclaw-plugin).
 >
 > 🔐 **Never log payment tokens.** x402 access tokens (the `payment-signature` header) are bearer credentials. Treat them like API keys: redact them in any debug output, log pipeline, or telemetry exporter (pino, winston, OpenTelemetry, etc.).
 

package/openclaw.plugin.json

@@ -1,7 +1,7 @@
 {
   "id": "openclaw-plugin",
   "name": "@nevermined-io/openclaw-plugin",
-  "version": "1.6.0",
+  "version": "1.8.0",
   "license": "Apache-2.0",
   "description": "Official Nevermined plugin for OpenClaw — AI-agent payments, x402 access tokens, and gateway tools.",
   "author": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nevermined-io/openclaw-plugin",
-  "version": "1.6.0",
+  "version": "1.8.0",
   "description": "OpenClaw plugin for Nevermined — exposes subscriber and builder tools as gateway methods",
   "type": "module",
   "main": "./dist/index.js",

package/skills/nevermined/SKILL.md

@@ -50,7 +50,7 @@ metadata:
 
 This plugin provides gateway tools for interacting with Nevermined AI agent payments. Supports both crypto (on-chain) and fiat (credit card) payment flows.
 
-> **Official source.** This skill is published from [`nevermined-io/payments`](https://github.com/nevermined-io/payments) (subdirectory `openclaw/`) by Nevermined AG, mirrored to ClawHub at [`clawhub.ai/nevermined/nevermined-payments`](https://clawhub.ai/nevermined/nevermined-payments) under the `@nevermined` org publisher. The npm package is [`@nevermined-io/openclaw-plugin`](https://www.npmjs.com/package/@nevermined-io/openclaw-plugin) (Apache-2.0).
+> **Official source.** This skill is published from [`nevermined-io/payments`](https://github.com/nevermined-io/payments) (subdirectory `openclaw/`) by Nevermined AG, mirrored to ClawHub at [`clawhub.ai/nevermined-io/nevermined`](https://clawhub.ai/nevermined-io/nevermined) under the `nevermined-io` org publisher. The npm package is [`@nevermined-io/openclaw-plugin`](https://www.npmjs.com/package/@nevermined-io/openclaw-plugin) (Apache-2.0).
 >
 > **Never log payment tokens.** x402 access tokens (the `payment-signature` header) are bearer credentials. Redact them in any debug or telemetry output.
 
@@ -63,6 +63,12 @@ Authenticate with Nevermined via browser login. Opens a browser window to obtain
 ### `/nvm_logout`
 Log out from Nevermined and remove the stored API key.
 
+## API versioning
+
+Every Nevermined-backend call this plugin makes goes through the `@nevermined-io/payments` SDK, which **pins the backend API version** (the platform `MAJOR.MINOR`) via the `Nevermined-Version` header automatically — so OpenClaw-orchestrated agents keep getting a stable wire shape across platform releases without any per-call work. The pinned version is the one the bundled SDK release was built and tested against; it moves only when the plugin upgrades its SDK dependency.
+
+If an agent makes a **direct** REST call to the Nevermined API (outside these tools), send `Nevermined-Version: <MAJOR.MINOR>`, default it to the `current` from `GET /api/v1/meta/versions`, and never silently change a key's stored pin. See <https://docs.nevermined.app/docs/development-guide/api-versioning>.
+
 ## Subscriber Tools
 
 ### `nevermined_checkBalance`