thinkwork-cli 0.13.0 → 0.13.2

package/dist/plugins/catalog/src/contracts.ts

@@ -8,7 +8,6 @@
  *   - `skills`         — bundled skill folders seeded into the tenant catalog
  *   - `infrastructure` — a managed-app Terraform deployment
  *   - `ui-surface`     — declared or launchable UI identity
- *   - `auth-provider`  — declared/admin-configured login federation capability
  *
  * Capability declarations are catalog metadata, not install lifecycle
  * components. They let a plugin advertise channel contracts whose runtime is
@@ -34,7 +33,6 @@ export const PLUGIN_COMPONENT_TYPES = [
   "skills",
   "infrastructure",
   "ui-surface",
-  "auth-provider",
 ] as const;
 
 export type PluginComponentType = (typeof PLUGIN_COMPONENT_TYPES)[number];
@@ -294,59 +292,11 @@ export interface UiSurfaceLaunchMetadata {
   entitlementProductKey?: string;
 }
 
-export const AUTH_PROVIDER_KEYS = ["workos"] as const;
-
-export type AuthProviderKey = (typeof AUTH_PROVIDER_KEYS)[number];
-
-export const AUTH_PROVIDER_CONFIG_FIELD_STORAGE = [
-  "metadata",
-  "secret-ref",
-] as const;
-
-export type AuthProviderConfigFieldStorage =
-  (typeof AUTH_PROVIDER_CONFIG_FIELD_STORAGE)[number];
-
-export interface AuthProviderConfigField {
-  /** Operator-facing input key; values are never present in the manifest. */
-  key: string;
-  displayName: string;
-  required: boolean;
-  /**
-   * metadata: non-secret config such as issuer/client id.
-   * secret-ref: stored only as an operator-managed secret reference.
-   */
-  storage: AuthProviderConfigFieldStorage;
-}
-
-export interface AuthProviderPublicOption {
-  /**
-   * Public-safe option key. For the U1-approved fallback this is `sso`; do not
-   * use provider-specific Google/Microsoft keys unless routing evidence exists.
-   */
-  key: string;
-  displayName: string;
-  providerSpecific: boolean;
-  recommended?: boolean;
-}
-
-export interface AuthProviderComponent {
-  type: "auth-provider";
-  key: string;
-  displayName: string;
-  provider: AuthProviderKey;
-  settingsSurface: string;
-  /** Cognito IdP name the validated bridge will use; not a secret. */
-  cognitoIdentityProviderName: string;
-  configFields: AuthProviderConfigField[];
-  publicOptions: AuthProviderPublicOption[];
-}
-
 export type PluginComponent =
   | McpServerComponent
   | SkillsComponent
   | InfrastructureComponent
-  | UiSurfaceComponent
-  | AuthProviderComponent;
+  | UiSurfaceComponent;
 
 export interface EmailChannelProviderOption {
   key: EmailChannelProviderKey;
@@ -566,12 +516,6 @@ function validatePluginVersion(value: unknown, pluginKey: string): void {
       case "ui-surface":
         validateUiSurfaceComponent(component as UiSurfaceComponent, label);
         break;
-      case "auth-provider":
-        validateAuthProviderComponent(
-          component as AuthProviderComponent,
-          label,
-        );
-        break;
     }
   }
 
@@ -1443,131 +1387,10 @@ function validateUiSurfaceLaunchMetadata(
   }
 }
 
-function validateAuthProviderComponent(
-  component: Partial<AuthProviderComponent>,
-  label: string,
-): void {
-  const prefix = `${label}: auth-provider "${component.key}"`;
-  requireString(component.displayName, `${prefix}.displayName`);
-  if (
-    typeof component.provider !== "string" ||
-    !(AUTH_PROVIDER_KEYS as readonly string[]).includes(component.provider)
-  ) {
-    throw new PluginManifestError(
-      `${prefix}.provider "${String(component.provider)}" is not supported`,
-    );
-  }
-  requireString(component.settingsSurface, `${prefix}.settingsSurface`);
-  requireString(
-    component.cognitoIdentityProviderName,
-    `${prefix}.cognitoIdentityProviderName`,
-  );
-
-  if (
-    !Array.isArray(component.configFields) ||
-    component.configFields.length === 0
-  ) {
-    throw new PluginManifestError(
-      `${prefix}.configFields must be a non-empty array`,
-    );
-  }
-  const seenConfigKeys = new Set<string>();
-  for (const [index, field] of component.configFields.entries()) {
-    const fieldPrefix = `${prefix}.configFields[${index}]`;
-    if (!field || typeof field !== "object" || Array.isArray(field)) {
-      throw new PluginManifestError(`${fieldPrefix} must be an object`);
-    }
-    rejectManifestValueCarrier(
-      field as unknown as Record<string, unknown>,
-      fieldPrefix,
-    );
-    requireString(field.key, `${fieldPrefix}.key`);
-    if (!CREDENTIAL_KEY_RE.test(field.key)) {
-      throw new PluginManifestError(
-        `${fieldPrefix}.key "${field.key}" must match ${CREDENTIAL_KEY_RE.source}`,
-      );
-    }
-    if (seenConfigKeys.has(field.key)) {
-      throw new PluginManifestError(
-        `${prefix}.configFields declares duplicate key "${field.key}"`,
-      );
-    }
-    seenConfigKeys.add(field.key);
-    requireString(field.displayName, `${fieldPrefix}.displayName`);
-    if (typeof field.required !== "boolean") {
-      throw new PluginManifestError(
-        `${fieldPrefix}.required must be a boolean`,
-      );
-    }
-    if (
-      !(AUTH_PROVIDER_CONFIG_FIELD_STORAGE as readonly string[]).includes(
-        field.storage,
-      )
-    ) {
-      throw new PluginManifestError(
-        `${fieldPrefix}.storage must be one of ${AUTH_PROVIDER_CONFIG_FIELD_STORAGE.join(", ")}`,
-      );
-    }
-  }
-
-  if (
-    !Array.isArray(component.publicOptions) ||
-    component.publicOptions.length === 0
-  ) {
-    throw new PluginManifestError(
-      `${prefix}.publicOptions must be a non-empty array`,
-    );
-  }
-  const seenOptionKeys = new Set<string>();
-  let recommendedCount = 0;
-  for (const [index, option] of component.publicOptions.entries()) {
-    const optionPrefix = `${prefix}.publicOptions[${index}]`;
-    if (!option || typeof option !== "object" || Array.isArray(option)) {
-      throw new PluginManifestError(`${optionPrefix} must be an object`);
-    }
-    rejectManifestValueCarrier(
-      option as unknown as Record<string, unknown>,
-      optionPrefix,
-    );
-    requireString(option.key, `${optionPrefix}.key`);
-    if (!SLUG_RE.test(option.key)) {
-      throw new PluginManifestError(
-        `${optionPrefix}.key "${option.key}" must match ${SLUG_RE.source}`,
-      );
-    }
-    if (seenOptionKeys.has(option.key)) {
-      throw new PluginManifestError(
-        `${prefix}.publicOptions declares duplicate key "${option.key}"`,
-      );
-    }
-    seenOptionKeys.add(option.key);
-    requireString(option.displayName, `${optionPrefix}.displayName`);
-    if (typeof option.providerSpecific !== "boolean") {
-      throw new PluginManifestError(
-        `${optionPrefix}.providerSpecific must be a boolean`,
-      );
-    }
-    if (
-      option.recommended !== undefined &&
-      typeof option.recommended !== "boolean"
-    ) {
-      throw new PluginManifestError(
-        `${optionPrefix}.recommended must be a boolean`,
-      );
-    }
-    if (option.recommended === true) recommendedCount += 1;
-  }
-  if (recommendedCount !== 1) {
-    throw new PluginManifestError(
-      `${prefix}.publicOptions must declare exactly one recommended option`,
-    );
-  }
-}
-
 function rejectManifestValueCarrier(
   value: Record<string, unknown>,
   prefix: string,
-  context = "auth-provider manifests",
+  context = "plugin manifests",
 ): void {
   for (const key of ["value", "secret", "defaultValue", "currentValue"]) {
     if (Object.prototype.hasOwnProperty.call(value, key)) {

package/dist/plugins/catalog/src/registry/generated-first-party.ts

@@ -10,7 +10,6 @@ import { lastmilePluginPackage as rawLastmilePluginPackage } from "@thinkwork/pl
 import { n8nPluginPackage as rawN8nPluginPackage } from "@thinkwork/plugin-n8n";
 import { sendgridPluginPackage as rawSendgridPluginPackage } from "@thinkwork/plugin-sendgrid";
 import { twentyPluginPackage as rawTwentyPluginPackage } from "@thinkwork/plugin-twenty";
-import { workosAuthPluginPackage as rawWorkosAuthPluginPackage } from "@thinkwork/plugin-workos-auth";
 
 export const companyDataPluginPackage = defineFirstPartyPluginPackage(
   rawCompanyDataPluginPackage,
@@ -33,9 +32,6 @@ export const sendgridPluginPackage = defineFirstPartyPluginPackage(
 export const twentyPluginPackage = defineFirstPartyPluginPackage(
   rawTwentyPluginPackage,
 );
-export const workosAuthPluginPackage = defineFirstPartyPluginPackage(
-  rawWorkosAuthPluginPackage,
-);
 
 export const companyDataManifest = companyDataPluginPackage.manifest;
 export const companyEtlManifest = companyEtlPluginPackage.manifest;
@@ -44,7 +40,6 @@ export const lastmileManifest = lastmilePluginPackage.manifest;
 export const n8nManifest = n8nPluginPackage.manifest;
 export const sendgridManifest = sendgridPluginPackage.manifest;
 export const twentyManifest = twentyPluginPackage.manifest;
-export const workosAuthManifest = workosAuthPluginPackage.manifest;
 
 export const firstPartyPluginPackages = [
   companyDataPluginPackage,
@@ -54,7 +49,6 @@ export const firstPartyPluginPackages = [
   n8nPluginPackage,
   sendgridPluginPackage,
   twentyPluginPackage,
-  workosAuthPluginPackage,
 ] as const;
 
 /**