Context
workflow#758 Layer 3 pilot landed across 5 plugin repos (all merged 2026-05-23 21:04-21:05Z):
| Plugin |
PR |
Merge SHA |
Variant |
| workflow-plugin-digitalocean |
#165 |
0568b5b01e |
IaC; canonical reference |
| workflow-plugin-aws |
#26 |
52f2af5fa7 |
IaC; per-repo ldflag var path variance |
| workflow-plugin-gcp |
#19 |
641555b664 |
IaC; renamed provider.ProviderVersion → provider.Version |
| workflow-plugin-azure |
#22 |
7b02379e46 |
IaC |
| workflow-plugin-github |
#19 |
925e7bfafc |
non-IaC (sdk.Serve + WithBuildVersion); needed nested capabilities block |
Template is mechanical (6-file migration per repo). Per-repo variance observed:
- Version-var name varies:
internal.Version, provider.Version, provider.ProviderVersion
- main.go path varies:
cmd/plugin/main.go, cmd/workflow-plugin-<name>/main.go
- Non-IaC plugins use
sdk.Serve + WithBuildVersion, not IaCServeOptions.BuildVersion
- Some repos may need their
plugin.json.capabilities restructured from flat top-level fields into a nested object (validate-contract Check 2 demands it)
- Test files that asserted committed-version-vs-download-URL invariants need retire/rewrite (sentinel breaks the invariant; tarball verify replaces it via
--release-dir gate)
Remaining 56 repos to migrate
workflow-plugin-admin
workflow-plugin-agent
workflow-plugin-analytics
workflow-plugin-approval
workflow-plugin-audit
workflow-plugin-audit-chain
workflow-plugin-audit-chain-docs
workflow-plugin-auth
workflow-plugin-authz
workflow-plugin-authz-ui
workflow-plugin-bento
workflow-plugin-botdetect
workflow-plugin-broker
workflow-plugin-ci-generator
workflow-plugin-cicd
workflow-plugin-crm
workflow-plugin-data-engineering
workflow-plugin-datadog
workflow-plugin-discord
workflow-plugin-dnd
workflow-plugin-economy
workflow-plugin-erp
workflow-plugin-eventbus
workflow-plugin-gitlab
workflow-plugin-infra
workflow-plugin-launchdarkly
workflow-plugin-marketplace
workflow-plugin-messaging-core
workflow-plugin-migrations
workflow-plugin-moderation
workflow-plugin-monday
workflow-plugin-okta
workflow-plugin-openlms
workflow-plugin-payments
workflow-plugin-payments-docs
workflow-plugin-platform
workflow-plugin-rooms
workflow-plugin-salesforce
workflow-plugin-security
workflow-plugin-security-scanner
workflow-plugin-slack
workflow-plugin-sso
workflow-plugin-steam
workflow-plugin-supply-chain
workflow-plugin-teams
workflow-plugin-template
workflow-plugin-template-private
workflow-plugin-tofu
workflow-plugin-tournament
workflow-plugin-turnio
workflow-plugin-twilio
workflow-plugin-vectorstore
workflow-plugin-websocket
workflow-plugin-worldengine
workflow-plugin-worldsim
workflow-plugin-ws-auth
Plan
Authorization to dispatch parallel sub-agents (worktree-isolated per repo) to apply the canonical Task 3 template (see PR #165 in workflow-plugin-digitalocean). Each agent: pre-flight audit + 6-file edit + push + PR + monitor + admin-merge. Wall-time estimate: ~1 hour with 5-10 agents in parallel.
Reference
Context
workflow#758 Layer 3 pilot landed across 5 plugin repos (all merged 2026-05-23 21:04-21:05Z):
provider.ProviderVersion→provider.VersionTemplate is mechanical (6-file migration per repo). Per-repo variance observed:
internal.Version,provider.Version,provider.ProviderVersioncmd/plugin/main.go,cmd/workflow-plugin-<name>/main.gosdk.Serve+WithBuildVersion, notIaCServeOptions.BuildVersionplugin.json.capabilitiesrestructured from flat top-level fields into a nested object (validate-contract Check 2 demands it)--release-dirgate)Remaining 56 repos to migrate
Plan
Authorization to dispatch parallel sub-agents (worktree-isolated per repo) to apply the canonical Task 3 template (see PR #165 in workflow-plugin-digitalocean). Each agent: pre-flight audit + 6-file edit + push + PR + monitor + admin-merge. Wall-time estimate: ~1 hour with 5-10 agents in parallel.
Reference
workflow/docs/plans/2026-05-23-plugin-version-discipline-design.mdworkflow/docs/plans/2026-05-23-plugin-version-discipline.mdworkflow/docs/PLUGIN_RELEASE_GATES.md