@synoikia/create-plugin 0.8.0 → 0.8.2

package/LICENSE

@@ -1,6 +1,6 @@
 MIT License
 
-Copyright (c) 2026 via-justa
+Copyright (c) 2026 The Synoikia Authors
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

package/README.md

@@ -1,6 +1,6 @@
 # @synoikia/create-plugin
 
-Create [Synoikia](https://github.com/via-justa/synoikia-core) plugin repositories and plugins, then build, check and publish them. Guide: [`docs/plugin-authoring.md`](https://github.com/via-justa/synoikia-core/blob/main/docs/plugin-authoring.md).
+Create [Synoikia](https://github.com/synoikia-org/synoikia-core) plugin repositories and plugins, then build, check and publish them. Guide: [`docs/plugin-authoring.md`](https://github.com/synoikia-org/synoikia-core/blob/main/docs/plugin-authoring.md).
 
 ```sh
 pnpm create @synoikia/plugin my-plugins [--repository owner/name] [--release] [--claude]

package/dist/repo.d.ts

@@ -1,4 +1,4 @@
-/** Builds a signed plugin repository (design §4.2–4.3): pack → (sign) → index → verify → publish, one
+/** Builds a signed plugin repository (ADR-0013): pack → (sign) → index → verify → publish, one
  * `<id>-v<version>` release per version and `index.json` on the `index` release; versions never change. */
 export interface RepoOptions {
     /** The repository root (holding `plugins/` and `minisign.pub`). */

package/package.json

@@ -1,11 +1,11 @@
 {
   "name": "@synoikia/create-plugin",
-  "version": "0.8.0",
+  "version": "0.8.2",
   "description": "Create Synoikia plugin repositories and plugins, then build, check and publish them",
   "license": "MIT",
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/via-justa/synoikia-core.git",
+    "url": "git+https://github.com/synoikia-org/synoikia-core.git",
     "directory": "packages/create-plugin"
   },
   "type": "module",
@@ -38,7 +38,7 @@
     "@synoikia/plugin-sdk": "^0.6.0"
   },
   "peerDependencies": {
-    "@synoikia/core": "^0.17.3"
+    "@synoikia/core": "^0.17.5"
   },
   "peerDependenciesMeta": {
     "@synoikia/core": {
@@ -49,7 +49,7 @@
     "@types/ws": "^8.18.1",
     "quickpickle": "1.11.2",
     "ws": "^8.22.0",
-    "@synoikia/core": "^0.17.3"
+    "@synoikia/core": "^0.17.5"
   },
   "scripts": {
     "build": "tsc -p tsconfig.build.json",

package/templates/repo/base/README.md

@@ -1,8 +1,8 @@
 # {{repoName}}
 
-Plugins for [Synoikia](https://github.com/via-justa/synoikia-core), the self-hosted MCP control plane.
+Plugins for [Synoikia](https://github.com/synoikia-org/synoikia-core), the self-hosted MCP control plane.
 
-A plugin only describes its upstream API: its operations, which ones read or write, which are destructive, and which fields hold secrets. Synoikia's core decides what is allowed and runs every call through its sandbox, permission gate, approvals, redaction and audit log. See the [plugin authoring guide](https://github.com/via-justa/synoikia-core/blob/main/docs/plugin-authoring.md).
+A plugin only describes its upstream API: its operations, which ones read or write, which are destructive, and which fields hold secrets. Synoikia's core decides what is allowed and runs every call through its sandbox, permission gate, approvals, redaction and audit log. See the [plugin authoring guide](https://github.com/synoikia-org/synoikia-core/blob/main/docs/plugin-authoring.md).
 
 ## Layout
 
@@ -37,7 +37,7 @@ Work on one plugin with `pnpm --filter ./plugins/<id> test`. The run must end wi
 
 Each plugin's `test` script runs `synoikia-plugin check` (manifest, `plugin.yaml`, versions) and `synoikia-plugin build` (the self-contained bundle, `plugin.yaml` validated and inlined). Then it runs the unit tests, core's compliance suite and the plugin's features.
 
-`test/compliance.yaml` is the profile that core's compliance suite certifies the plugin against. It names the reads, writes, rejects, a lock case for each locked operation, the secrets and the connection test. A change there is a security change. Review its diff like a `plugin.yaml` diff. The format is in the [plugin authoring guide](https://github.com/via-justa/synoikia-core/blob/main/docs/plugin-authoring.md) › The compliance suite.
+`test/compliance.yaml` is the profile that core's compliance suite certifies the plugin against. It names the reads, writes, rejects, a lock case for each locked operation, the secrets and the connection test. A change there is a security change. Review its diff like a `plugin.yaml` diff. The format is in the [plugin authoring guide](https://github.com/synoikia-org/synoikia-core/blob/main/docs/plugin-authoring.md) › The compliance suite.
 
 ## Adding a plugin
 

package/templates/repo/base/_github/dependabot.yml

@@ -0,0 +1,11 @@
+version: 2
+updates:
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: weekly
+    cooldown:
+      default-days: 7
+    groups:
+      actions:
+        patterns: ['*']

package/templates/repo/base/_github/workflows/ci.yml

@@ -12,9 +12,9 @@ jobs:
   check:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: pnpm/action-setup@v4
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+      - uses: pnpm/action-setup@ea17c68df8912ef543352723c149a84f56e3d413 # v6.1.0
+      - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         with:
           node-version-file: .nvmrc
           cache: pnpm
@@ -28,11 +28,11 @@ jobs:
   gitleaks:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           fetch-depth: 0
           persist-credentials: false
-      - uses: gitleaks/gitleaks-action@ff98106e4c7b2bc287b24eaf42907196329070c7 # v2.3.9
+      - uses: gitleaks/gitleaks-action@e0c47f4f8be36e29cdc102c57e68cb5cbf0e8d1e # v3.0.0
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           GITLEAKS_ENABLE_COMMENTS: false

package/templates/repo/base/package.json

@@ -29,6 +29,6 @@
     "prettier": "^3.6.2",
     "typescript": "~6.0.3",
     "typescript-eslint": "^8.70.1",
-    "vitest": "^5.0.2"
+    "vitest": "^5.0.5"
   }
 }

package/templates/repo/claude/CLAUDE.md

@@ -1,6 +1,6 @@
 # {{repoName}}
 
-Plugins for [Synoikia](https://github.com/via-justa/synoikia-core). Authoring guide: `https://github.com/via-justa/synoikia-core/blob/main/docs/plugin-authoring.md`.
+Plugins for [Synoikia](https://github.com/synoikia-org/synoikia-core). Authoring guide: `https://github.com/synoikia-org/synoikia-core/blob/main/docs/plugin-authoring.md`.
 
 The Synoikia skills, rules and hooks for this repository come from the `synoikia-plugin-dev` plugin of the [Synoikia dev kit](https://github.com/synoikia-org/synoikia-dev-kit). `.claude/settings.json` enables it, and a session start hook says when it is not loaded. `.claude/guard-paths.json` lists the files that the path guard protects.
 

package/templates/repo/release/_github/workflows/release.yml

@@ -19,12 +19,12 @@ jobs:
   release:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           # Nothing here pushes with git; keep the token out of .git/config while dev dependencies run.
           persist-credentials: false
-      - uses: pnpm/action-setup@v4
-      - uses: actions/setup-node@v4
+      - uses: pnpm/action-setup@ea17c68df8912ef543352723c149a84f56e3d413 # v6.1.0
+      - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         with:
           node-version-file: .nvmrc
           cache: pnpm