[murrlincoln]

Description

Prepares the ChatGPT package for OpenAI submission as 0.0.2.

• ChatGPT ships MCP-only skills. build_chatgpt selects only the shared router and coinbase-mcp, omits coinbase-mcp/references/x402.md, and uses its own src/plugins/chatgpt/README.md. /mcp/chatgpt exposes no CLI or x402 tools.
• New builder rule. A distribution can omit listed skill files and drop source lines marked <!-- omit: <distribution> -->. Omissions are whole files or whole lines only, never rewritten text. Portable, Claude and Codex still copy skills byte-for-byte. Links to unselected skills or omitted files fail the build. CONTRIBUTING and README are updated to match.
• Source markers. The router's CLI row and the coinbase-mcp x402 row are marked omit: chatgpt.
• Shared skill description. The coinbase-mcp description now says "paid research where the server exposes it" instead of naming x402. Frontmatter can't carry a line marker, so this changes the description in all distributions.
• ChatGPT listing. x402 is removed from the description, long description and keywords. The starter prompt is replaced with portfolio review, rebalancing, and scaling in with limit orders.
• Version. Every distribution is bumped to 0.0.2, since the build enforces matching versions. CHANGELOG is updated.

Change type

• Harness integration or metadata
• Skill workflow
• Bug fix
• Documentation
• Breaking change (describe migration)

Validation

• python3 -m unittest discover -s tests: 38 tests pass. That includes 5 new tests for omissions, markers, links to omitted files, invalid omissions, and checking that the ChatGPT package has no CLI or x402 content.

• python3 scripts/build-distributions.py dist builds all four packages at 0.0.2.

  • The ChatGPT package contains coinbase and coinbase-mcp and no mention of x402.
  • The Claude, portable and Codex packages still include coinbase-cli and both x402 guides.

• check-jsonschema passes on the portable and ChatGPT manifests. ruff check and ruff format --check are clean.

• Not run: loading the plugin in ChatGPT and an authenticated OAuth smoke test.

• Generated portable manifest and MCP config validate against the vendored Agent Plugins schemas

• Package paths and skill references remain inside each generated plugin root

• Marketplace, skills, MCP, and icon paths are valid

• Exactly one canonical skill library; generated copies are not committed

• Claude compatibility metadata/endpoint and marketplace sources agree with the portable package

• Tool schemas, authorization, and retry behavior reviewed (unchanged)

• README and changelog updated; versions consistent

• No unapproved disclosures or sensitive data

• Signed commits

Release considerations

The skills still describe portfolio transfers, which /mcp/chatgpt doesn't expose. They could be marked omit: chatgpt in a follow-up. This PR doesn't publish anything or submit a listing.

[cb-heimdall]

✅ Heimdall Review Status

Requirement	Status	More Info
Reviews	✅ 1/1	Denominator calculation Show calculation 1 if user is bot 0 1 if user is external 0 2 if repo is sensitive 0 From .codeflow.yml 1 Additional review requirements Show calculation Max 0 0 From CODEOWNERS 0 Global minimum 0 Max 1 1 1 if commit is unverified 0 Sum 1