@seekrit/openclaw-plugin 0.2.0 → 0.3.0

package/README.md

@@ -20,16 +20,25 @@ Full guide: **<https://seekrit.dev/docs/guides/ai-agents/openclaw>**
 
 ## What this package is
 
-A manifest and a resolver — no runtime code, no tools, no channels, and no
-capability prompts at install time. OpenClaw reads
-`secretProviderIntegrations` out of `openclaw.plugin.json` without executing
-anything, and spawns `seekrit-secret-ref-resolver.js` when it needs values.
+A manifest and a resolver — no tools, no channels, and no capability prompts at
+install time. OpenClaw reads `secretProviderIntegrations` out of
+`openclaw.plugin.json` and spawns `seekrit-secret-ref-resolver.js` when it needs
+values.
 
 The resolver is a stdio bridge onto `seekrit openclaw resolve`, so the protocol
 has exactly one implementation. Decryption happens in a short-lived child
 process that exits when the batch is answered: the gateway never holds a token,
 a data key, or a plaintext, and the seekrit API never sees one either.
 
+`index.js` is a runtime entrypoint that **registers nothing**. It exists only
+because ClawHub classifies any package carrying an `openclaw.plugin.json` as a
+*code plugin* and won't publish one without an `openclaw.extensions` entry — a
+manifest-only plugin has no category in the registry today. The gateway
+therefore imports one inert module of ours at startup. That doesn't move the
+boundary that matters, since decryption still happens in the child process, but
+it does mean "OpenClaw executes none of our code in-process" is no longer
+strictly true, and it seemed better to say so than to drop the claim quietly.
+
 ## Ids
 
 Two shapes, mirroring `op://vault/item/field`:

package/index.js

@@ -0,0 +1,60 @@
+/**
+ * The plugin's runtime entrypoint.
+ *
+ * It registers nothing, and that is deliberate. Everything this plugin does
+ * lives in `openclaw.plugin.json`: OpenClaw reads `secretProviderIntegrations`
+ * out of the manifest without executing anything, and spawns
+ * `seekrit-secret-ref-resolver.js` as a short-lived child process when it needs
+ * values. There is no in-process work to do.
+ *
+ * This file exists because ClawHub classifies any package carrying an
+ * `openclaw.plugin.json` (and no `.claude-plugin`/`.codex-plugin`/`.cursor-plugin`
+ * bundle marker) as a *code plugin*, and refuses to publish one that doesn't
+ * declare `openclaw.extensions` — a manifest-only plugin has no category in the
+ * registry today. See `extractCodePluginArtifacts` in
+ * openclaw/clawhub `convex/lib/packageRegistry.ts`.
+ *
+ * The trade that makes: the gateway now imports this module at startup, where
+ * before it imported nothing of ours. The boundary that actually matters is
+ * unchanged — decryption still happens in a child process that exits when the
+ * batch is answered, so the gateway still never holds a token, a data key, or a
+ * plaintext. But "OpenClaw runs none of our code in-process" is no longer true,
+ * and the README says so rather than quietly dropping the claim.
+ *
+ * Keep `register` empty. Anything added here runs inside the gateway with the
+ * gateway's privileges, which is the thing this design was avoiding. If a CLI
+ * surface is ever wanted, weigh it against that.
+ *
+ * Written as plain JS with no imports on purpose: `definePluginEntry` from
+ * `openclaw/plugin-sdk/plugin-entry` is a shaping helper that returns exactly
+ * this object literal, and importing it would put a dependency on the host
+ * runtime into a package that currently has none.
+ */
+
+/** Mirrors `emptyPluginConfigSchema()` — this plugin accepts no config keys. */
+function emptyConfigSchema() {
+  return {
+    safeParse(value) {
+      if (value === undefined) return { success: true, data: undefined };
+      if (!value || typeof value !== "object" || Array.isArray(value)) {
+        return { success: false, error: { issues: [{ message: "expected config object" }] } };
+      }
+      if (Object.keys(value).length > 0) {
+        return { success: false, error: { issues: [{ message: "config must be empty" }] } };
+      }
+      return { success: true, data: value };
+    },
+    jsonSchema: { type: "object", additionalProperties: false, properties: {} },
+  };
+}
+
+export default {
+  id: "seekrit",
+  name: "seekrit",
+  description:
+    "Resolve OpenClaw exec SecretRefs from seekrit — end-to-end encrypted secrets, decrypted locally by a short-lived child process.",
+  configSchema: emptyConfigSchema(),
+  register() {
+    // Intentionally empty — see the note above.
+  },
+};

package/package.json

@@ -1,12 +1,13 @@
 {
   "name": "@seekrit/openclaw-plugin",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "description": "seekrit for OpenClaw — resolve exec SecretRefs from end-to-end encrypted secrets, so the gateway config holds no plaintext and the seekrit API never sees one.",
   "type": "module",
   "publishConfig": {
     "access": "public"
   },
   "files": [
+    "index.js",
     "openclaw.plugin.json",
     "seekrit-secret-ref-resolver.js",
     "README.md"
@@ -24,6 +25,20 @@
     "zero-knowledge"
   ],
   "homepage": "https://seekrit.dev/docs/guides/ai-agents/openclaw",
+  "openclaw": {
+    "extensions": [
+      "./index.js"
+    ],
+    "compat": {
+      "pluginApi": ">=2026.5.28"
+    },
+    "build": {
+      "openclawVersion": "2026.7.1"
+    },
+    "install": {
+      "npmSpec": "@seekrit/openclaw-plugin"
+    }
+  },
   "license": "MIT",
   "dependencies": {
     "@seekrit/cli": "^1.1.0"