From ddf2840a7f2567009e8615ffa5fbcd2f86957e6d Mon Sep 17 00:00:00 2001
From: Jon Langevin <codingsloth@pm.me>
Date: Sun, 24 May 2026 17:18:20 -0400
Subject: [PATCH] chore: post-release cleanup (workflow#767 followup)

- fix release.yml Publish-step: already uses gh release edit (no getReleaseByTag fix needed)
- remove sync-plugin-version.yml (deprecated per workflow#758 ldflag pattern)
- populate plugin.json.capabilities (validate-contract --for-publish gate fix)
---
 .github/workflows/sync-plugin-version.yml | 59 -----------------------
 plugin.json                               | 36 +++++++++++++-
 2 files changed, 35 insertions(+), 60 deletions(-)
 delete mode 100644 .github/workflows/sync-plugin-version.yml

diff --git a/.github/workflows/sync-plugin-version.yml b/.github/workflows/sync-plugin-version.yml
deleted file mode 100644
index f74f8a9..0000000
--- a/.github/workflows/sync-plugin-version.yml
+++ /dev/null
@@ -1,59 +0,0 @@
-name: Sync plugin.json version
-on:
-  push:
-    tags: ['v*']
-permissions:
-  contents: write
-  pull-requests: write
-jobs:
-  sync:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-        with:
-          ref: main
-          fetch-depth: 0
-          token: ${{ secrets.GITHUB_TOKEN }}
-      - name: Compute target version from tag
-        id: ver
-        run: |
-          TAG="${GITHUB_REF_NAME}"
-          VERSION="${TAG#v}"
-          echo "version=$VERSION" >> $GITHUB_OUTPUT
-          echo "tag=$TAG" >> $GITHUB_OUTPUT
-      - name: Update plugin.json
-        run: |
-          if [ ! -f plugin.json ]; then echo "no plugin.json; skipping"; exit 0; fi
-          CURRENT=$(python3 -c "import json; print(json.load(open('plugin.json')).get('version',''))")
-          TARGET="${{ steps.ver.outputs.version }}"
-          if [ "$CURRENT" = "$TARGET" ]; then
-            echo "plugin.json already at $TARGET; no action"
-            exit 0
-          fi
-          python3 -c "
-          import json
-          p = json.load(open('plugin.json'))
-          p['version'] = '$TARGET'
-          json.dump(p, open('plugin.json', 'w'), indent=2)
-          open('plugin.json', 'a').write('\n')
-          "
-      - name: Open sync PR if plugin.json changed
-        run: |
-          if git diff --quiet plugin.json; then
-            echo "no changes"
-            exit 0
-          fi
-          BRANCH="chore/sync-plugin-version-${{ steps.ver.outputs.tag }}"
-          git config user.email "github-actions[bot]@users.noreply.github.com"
-          git config user.name "github-actions[bot]"
-          git checkout -b "$BRANCH"
-          git add plugin.json
-          git commit -m "chore: sync plugin.json version to ${{ steps.ver.outputs.tag }}"
-          git push origin "$BRANCH"
-          gh pr create \
-            --base main \
-            --head "$BRANCH" \
-            --title "chore: sync plugin.json version to ${{ steps.ver.outputs.tag }}" \
-            --body "Triggered by release ${{ steps.ver.outputs.tag }}. Auto-sync to prevent drift. Closes workflow-registry#37."
-        env:
-          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
diff --git a/plugin.json b/plugin.json
index 9260b23..52e2355 100644
--- a/plugin.json
+++ b/plugin.json
@@ -69,5 +69,39 @@
     "step.auth_oauth_userinfo",
     "step.auth_credential_list",
     "step.auth_credential_revoke"
-  ]
+  ],
+  "capabilities": {
+    "configProvider": false,
+    "moduleTypes": [
+      "auth.credential"
+    ],
+    "stepTypes": [
+      "step.auth_passkey_begin_register",
+      "step.auth_passkey_finish_register",
+      "step.auth_passkey_begin_login",
+      "step.auth_passkey_finish_login",
+      "step.auth_totp_generate_secret",
+      "step.auth_totp_verify",
+      "step.auth_totp_recovery_codes",
+      "step.auth_magic_link_generate",
+      "step.auth_magic_link_verify",
+      "step.auth_magic_link_send",
+      "step.auth_password_hash",
+      "step.auth_password_verify",
+      "step.auth_challenge_generate",
+      "step.auth_challenge_verify",
+      "step.auth_normalize_phone",
+      "step.auth_methods_policy",
+      "step.auth_policy_gate",
+      "step.auth_methods_response",
+      "step.auth_policy_audit",
+      "step.auth_oauth_provider_config",
+      "step.auth_oauth_start",
+      "step.auth_oauth_exchange",
+      "step.auth_oauth_userinfo",
+      "step.auth_credential_list",
+      "step.auth_credential_revoke"
+    ],
+    "triggerTypes": []
+  }
 }