thinkwork-cli 0.12.11 → 0.12.15

package/dist/plugins/catalog/src/index.ts

@@ -0,0 +1,4 @@
+export * from "./contracts";
+export * from "./catalog";
+export * from "./plugin-package";
+export * from "./registry";

package/dist/plugins/catalog/src/plugin-package.ts

@@ -0,0 +1,171 @@
+import {
+  SLUG_RE,
+  validatePluginManifest,
+  type PluginManifest,
+} from "./contracts";
+
+export const PLUGIN_PACKAGE_SOURCE_KINDS = [
+  "manifest",
+  "skills",
+  "terraform",
+  "deployment",
+  "runtime",
+  "api",
+  "web",
+  "smoke",
+  "docs",
+  "tests",
+] as const;
+
+export type PluginPackageSourceKind =
+  (typeof PLUGIN_PACKAGE_SOURCE_KINDS)[number];
+
+export interface PluginPackageOwnedSource {
+  /** Source category this plugin package owns. */
+  kind: PluginPackageSourceKind;
+  /** Repo-relative path. Must be inside the plugin source root. */
+  path: string;
+  /** Human-readable summary of what the path owns. */
+  description: string;
+}
+
+export interface PluginPackageCompatibilityLink {
+  /** Repo-relative legacy path outside the plugin package. */
+  path: string;
+  /** Why this path has not moved yet. */
+  reason: string;
+  /** Removal gate, usually the implementation unit or release pass. */
+  removal: string;
+}
+
+export interface FirstPartyPluginPackage {
+  /**
+   * Stable package key. This should match the owning folder name under
+   * `plugins/<packageKey>/` and the manifest's `pluginKey`.
+   */
+  packageKey: string;
+  /** Repo-relative path to the plugin package root. */
+  sourceRoot: `plugins/${string}`;
+  /** Published catalog manifest owned by this plugin package. */
+  manifest: PluginManifest;
+  /** Package-owned source descriptors used by docs, builders, and enforcement. */
+  ownedSources: readonly PluginPackageOwnedSource[];
+  /** Temporary legacy paths that still carry plugin-specific source. */
+  compatibilityLinks: readonly PluginPackageCompatibilityLink[];
+}
+
+export interface FirstPartyPluginPackageInput {
+  packageKey: string;
+  sourceRoot: `plugins/${string}`;
+  manifest: unknown;
+  ownedSources?: readonly PluginPackageOwnedSource[];
+  compatibilityLinks?: readonly PluginPackageCompatibilityLink[];
+}
+
+export class PluginPackageError extends Error {
+  constructor(message: string) {
+    super(message);
+    this.name = "PluginPackageError";
+  }
+}
+
+export function defineFirstPartyPluginPackage(
+  value: FirstPartyPluginPackageInput,
+): FirstPartyPluginPackage {
+  if (!value || typeof value !== "object" || Array.isArray(value)) {
+    throw new PluginPackageError("Plugin package must be an object");
+  }
+  requireString(value.packageKey, "packageKey");
+  if (!SLUG_RE.test(value.packageKey)) {
+    throw new PluginPackageError(
+      `packageKey "${value.packageKey}" must match ${SLUG_RE.source}`,
+    );
+  }
+  requireString(value.sourceRoot, "sourceRoot");
+  if (value.sourceRoot !== `plugins/${value.packageKey}`) {
+    throw new PluginPackageError(
+      `plugin package ${value.packageKey}: sourceRoot must be plugins/${value.packageKey}`,
+    );
+  }
+
+  const manifest = validatePluginManifest(value.manifest);
+  if (manifest.pluginKey !== value.packageKey) {
+    throw new PluginPackageError(
+      `plugin package ${value.packageKey}: manifest pluginKey must match packageKey`,
+    );
+  }
+
+  const ownedSources = validateOwnedSources(value, value.packageKey);
+  const compatibilityLinks = validateCompatibilityLinks(
+    value,
+    value.packageKey,
+  );
+
+  return { ...value, manifest, ownedSources, compatibilityLinks };
+}
+
+function requireString(value: unknown, label: string): asserts value is string {
+  if (typeof value !== "string" || value.trim().length === 0) {
+    throw new PluginPackageError(`${label} must be a non-empty string`);
+  }
+}
+
+function validateOwnedSources(
+  value: FirstPartyPluginPackageInput,
+  packageKey: string,
+): PluginPackageOwnedSource[] {
+  if (value.ownedSources === undefined) return [];
+  if (!Array.isArray(value.ownedSources)) {
+    throw new PluginPackageError(
+      `plugin package ${packageKey}: ownedSources must be an array`,
+    );
+  }
+
+  return value.ownedSources.map((source, index) => {
+    const prefix = `plugin package ${packageKey}: ownedSources[${index}]`;
+    if (!source || typeof source !== "object" || Array.isArray(source)) {
+      throw new PluginPackageError(`${prefix} must be an object`);
+    }
+    if (!PLUGIN_PACKAGE_SOURCE_KINDS.includes(source.kind)) {
+      throw new PluginPackageError(
+        `${prefix}.kind must be one of ${PLUGIN_PACKAGE_SOURCE_KINDS.join(", ")}`,
+      );
+    }
+    requireString(source.path, `${prefix}.path`);
+    requireString(source.description, `${prefix}.description`);
+    if (!source.path.startsWith(`${value.sourceRoot}/`)) {
+      throw new PluginPackageError(
+        `${prefix}.path must live under ${value.sourceRoot}/`,
+      );
+    }
+    return source;
+  });
+}
+
+function validateCompatibilityLinks(
+  value: FirstPartyPluginPackageInput,
+  packageKey: string,
+): PluginPackageCompatibilityLink[] {
+  if (value.compatibilityLinks === undefined) return [];
+  if (!Array.isArray(value.compatibilityLinks)) {
+    throw new PluginPackageError(
+      `plugin package ${packageKey}: compatibilityLinks must be an array`,
+    );
+  }
+
+  return value.compatibilityLinks.map((link, index) => {
+    const prefix = `plugin package ${packageKey}: compatibilityLinks[${index}]`;
+    if (!link || typeof link !== "object" || Array.isArray(link)) {
+      throw new PluginPackageError(`${prefix} must be an object`);
+    }
+    requireString(link.path, `${prefix}.path`);
+    requireString(link.reason, `${prefix}.reason`);
+    requireString(link.removal, `${prefix}.removal`);
+    if (link.path.startsWith(`${value.sourceRoot}/`)) {
+      throw new PluginPackageError(
+        `${prefix}.path should describe legacy source outside ${value.sourceRoot}/`,
+      );
+    }
+    return link;
+  });
+}

package/dist/plugins/catalog/src/registry/generated-first-party.ts

@@ -0,0 +1,76 @@
+// Generated by plugins/catalog/scripts/generate-plugin-registry.ts.
+// Do not edit by hand. Update plugins/*/package.json, then run:
+//   pnpm --filter @thinkwork/plugin-catalog generate:plugins
+
+import { defineFirstPartyPluginPackage } from "../plugin-package";
+import { companyBrainPluginPackage as rawCompanyBrainPluginPackage } from "@thinkwork/plugin-company-brain";
+import { companyDataPluginPackage as rawCompanyDataPluginPackage } from "@thinkwork/plugin-company-data";
+import { companyEtlPluginPackage as rawCompanyEtlPluginPackage } from "@thinkwork/plugin-company-etl";
+import { emailChannelPluginPackage as rawEmailChannelPluginPackage } from "@thinkwork/plugin-email-channel";
+import { lastmilePluginPackage as rawLastmilePluginPackage } from "@thinkwork/plugin-lastmile";
+import { n8nPluginPackage as rawN8nPluginPackage } from "@thinkwork/plugin-n8n";
+import { sendgridPluginPackage as rawSendgridPluginPackage } from "@thinkwork/plugin-sendgrid";
+import { twentyPluginPackage as rawTwentyPluginPackage } from "@thinkwork/plugin-twenty";
+import { workosAuthPluginPackage as rawWorkosAuthPluginPackage } from "@thinkwork/plugin-workos-auth";
+
+export const companyBrainPluginPackage = defineFirstPartyPluginPackage(
+  rawCompanyBrainPluginPackage,
+);
+export const companyDataPluginPackage = defineFirstPartyPluginPackage(
+  rawCompanyDataPluginPackage,
+);
+export const companyEtlPluginPackage = defineFirstPartyPluginPackage(
+  rawCompanyEtlPluginPackage,
+);
+export const emailChannelPluginPackage = defineFirstPartyPluginPackage(
+  rawEmailChannelPluginPackage,
+);
+export const lastmilePluginPackage = defineFirstPartyPluginPackage(
+  rawLastmilePluginPackage,
+);
+export const n8nPluginPackage = defineFirstPartyPluginPackage(
+  rawN8nPluginPackage,
+);
+export const sendgridPluginPackage = defineFirstPartyPluginPackage(
+  rawSendgridPluginPackage,
+);
+export const twentyPluginPackage = defineFirstPartyPluginPackage(
+  rawTwentyPluginPackage,
+);
+export const workosAuthPluginPackage = defineFirstPartyPluginPackage(
+  rawWorkosAuthPluginPackage,
+);
+
+export const companyBrainManifest = companyBrainPluginPackage.manifest;
+export const companyDataManifest = companyDataPluginPackage.manifest;
+export const companyEtlManifest = companyEtlPluginPackage.manifest;
+export const emailChannelManifest = emailChannelPluginPackage.manifest;
+export const lastmileManifest = lastmilePluginPackage.manifest;
+export const n8nManifest = n8nPluginPackage.manifest;
+export const sendgridManifest = sendgridPluginPackage.manifest;
+export const twentyManifest = twentyPluginPackage.manifest;
+export const workosAuthManifest = workosAuthPluginPackage.manifest;
+
+export const firstPartyPluginPackages = [
+  companyBrainPluginPackage,
+  companyDataPluginPackage,
+  companyEtlPluginPackage,
+  emailChannelPluginPackage,
+  lastmilePluginPackage,
+  n8nPluginPackage,
+  sendgridPluginPackage,
+  twentyPluginPackage,
+  workosAuthPluginPackage,
+] as const;
+
+/**
+ * Every repo-authored manifest published to the catalog.
+ */
+export const allPluginManifests = firstPartyPluginPackages
+  .map((pluginPackage) => pluginPackage.manifest)
+  .sort((a, b) => {
+    const byName = a.displayName.localeCompare(b.displayName, undefined, {
+      sensitivity: "base",
+    });
+    return byName === 0 ? a.pluginKey.localeCompare(b.pluginKey) : byName;
+  });

package/dist/plugins/catalog/src/registry/index.ts

@@ -0,0 +1 @@
+export * from "./generated-first-party";

package/dist/plugins/catalog/tsconfig.json

@@ -0,0 +1,8 @@
+{
+  "extends": "../../tsconfig.base.json",
+  "compilerOptions": {
+    "outDir": "./dist",
+    "rootDir": "."
+  },
+  "include": ["./**/*.ts"]
+}

package/dist/plugins/company-brain/README.md

@@ -0,0 +1,37 @@
+# Company Brain Plugin
+
+Company Brain is a first-party premium application plugin package for the
+THNK-31 `plugins/<plugin-key>/` source boundary. Company Brain is the
+customer-facing product; Cognee is the internal Brain substrate adapter and
+should appear only in deployment evidence, logs, Terraform/runtime paths, or
+implementation notes.
+
+## Package Contract
+
+- `package.json` exposes `@thinkwork/plugin-company-brain`.
+- `src/index.ts` exports `companyBrainPluginPackage` with owned source
+  descriptors and compatibility links.
+- `src/manifest.ts` owns the Company Brain catalog manifest.
+- `src/deployment/cognee-managed-app.ts` owns the internal substrate
+  managed-app deployment adapter.
+- `terraform/cognee/` owns the internal substrate Terraform module.
+- `runtime/cognee/Dockerfile` owns the internal substrate runtime image source.
+- `src/api/` owns Company Brain migration helpers, context-engine provider,
+  internal substrate client, and cluster identity utilities.
+- `smoke/` owns Company Brain entitlement, operations, context engine, and
+  internal substrate smoke scripts.
+- `test/manifest.test.ts` keeps Company Brain premium entitlement,
+  infrastructure, and customer-facing copy contracts aligned.
+
+## Temporary Compatibility Links
+
+No active plugin-specific compatibility source remains outside
+`plugins/company-brain/`. The legacy `/settings/applications/cognee` URL is a
+shared web redirect to the Company Brain plugin detail page.
+
+## Verification
+
+```bash
+pnpm --filter @thinkwork/plugin-company-brain test
+pnpm --filter @thinkwork/plugin-company-brain typecheck
+```

package/dist/plugins/company-brain/package.json

@@ -0,0 +1,33 @@
+{
+  "name": "@thinkwork/plugin-company-brain",
+  "version": "0.0.0",
+  "private": true,
+  "type": "module",
+  "main": "./src/index.ts",
+  "exports": {
+    ".": "./src/index.ts",
+    "./manifest": "./src/manifest.ts",
+    "./api/cognee-client": "./src/api/cognee-client.ts",
+    "./api/cognee-memory-scope": "./src/api/cognee-memory-scope.ts",
+    "./api/cognee-cluster-identity": "./src/api/cognee-cluster-identity.ts",
+    "./api/context-engine-provider": "./src/api/context-engine-provider.ts",
+    "./api/migration": "./src/api/migration.ts",
+    "./deployment/cognee-managed-app": "./src/deployment/cognee-managed-app.ts"
+  },
+  "scripts": {
+    "build": "tsc --build",
+    "typecheck": "tsc --noEmit",
+    "test": "vitest run"
+  },
+  "dependencies": {
+    "@thinkwork/database-pg": "workspace:*",
+    "drizzle-orm": "^0.39.0",
+    "graphql": "^16.10.0"
+  },
+  "devDependencies": {
+    "@thinkwork/deployment-runner": "workspace:*",
+    "@thinkwork/plugin-catalog": "workspace:*",
+    "typescript": "^5.5.0",
+    "vitest": "^2.0.0"
+  }
+}

package/dist/plugins/company-brain/runtime/cognee/Dockerfile

@@ -0,0 +1,11 @@
+ARG COGNEE_BASE_IMAGE=cognee/cognee@sha256:5ce7e4052b1d16738d1e24476d64847fcb5b1666631b642651e8ccce414046f8
+FROM ${COGNEE_BASE_IMAGE}
+
+# LiteLLM's Bedrock Converse adapter imports boto3 at extraction time. Cognee's
+# PATH points at the uv-built runtime venv, which intentionally omits pip, so
+# install the dependency into the venv import path with the system Python that
+# remains in the final image.
+RUN /usr/local/bin/python -m pip install \
+      --no-cache-dir \
+      --target /app/.venv/lib/python3.12/site-packages \
+      "boto3>=1.34.0"