thinkwork-cli 0.13.1 → 1.0.0

package/dist/plugins/catalog/src/__tests__/catalog.test.ts

@@ -14,7 +14,7 @@ import {
   type SignedPluginCatalogDocument,
 } from "../catalog";
 import type { PluginManifest } from "../contracts";
-import { lastmileManifest, n8nManifest } from "../registry";
+import { n8nManifest, twentyManifest } from "../registry";
 
 function keyPair() {
   const pair = generateKeyPairSync("ed25519");
@@ -36,7 +36,7 @@ function clone<T>(value: T): T {
 
 function signedDocument(privateKeyPem: string): SignedPluginCatalogDocument {
   const catalog = buildPluginCatalog({
-    manifests: [lastmileManifest],
+    manifests: [twentyManifest],
     generatedAt: "2026-06-12T00:00:00.000Z",
     source: {
       repository: "thinkwork-ai/thinkwork",
@@ -53,19 +53,19 @@ function signedDocument(privateKeyPem: string): SignedPluginCatalogDocument {
 
 describe("buildPluginCatalog", () => {
   it("builds an entry per manifest with per-version payload digests", () => {
-    const catalog = buildPluginCatalog({ manifests: [lastmileManifest] });
+    const catalog = buildPluginCatalog({ manifests: [twentyManifest] });
     expect(catalog.schemaVersion).toBe(PLUGIN_CATALOG_SCHEMA_VERSION);
     expect(catalog.plugins).toHaveLength(1);
     const entry = catalog.plugins[0];
-    expect(entry.pluginKey).toBe("lastmile");
+    expect(entry.pluginKey).toBe("twenty");
     expect(entry.versions[0].version).toBe("0.1.0");
     expect(entry.versions[0].payloadSha256).toMatch(/^[a-f0-9]{64}$/);
-    expect(entry.versions[0].payload).toEqual(lastmileManifest.versions[0]);
+    expect(entry.versions[0].payload).toEqual(twentyManifest.versions[0]);
   });
 
   it("optionally signs GitHub source provenance", () => {
     const catalog = buildPluginCatalog({
-      manifests: [lastmileManifest],
+      manifests: [twentyManifest],
       generatedAt: "2026-06-12T00:00:00.000Z",
       source: {
         repository: "thinkwork-ai/thinkwork",
@@ -82,7 +82,7 @@ describe("buildPluginCatalog", () => {
 
   it("keeps source provenance optional for bundled fallback catalogs", () => {
     const catalog = buildPluginCatalog({
-      manifests: [lastmileManifest],
+      manifests: [twentyManifest],
       generatedAt: "2026-06-12T00:00:00.000Z",
     });
     expect(catalog.source).toBeUndefined();
@@ -90,41 +90,41 @@ describe("buildPluginCatalog", () => {
 
   it("rejects duplicate plugin keys in a catalog", () => {
     expect(() =>
-      buildPluginCatalog({ manifests: [lastmileManifest, lastmileManifest] }),
-    ).toThrow(/Duplicate plugin key in catalog: lastmile/);
+      buildPluginCatalog({ manifests: [twentyManifest, twentyManifest] }),
+    ).toThrow(/Duplicate plugin key in catalog: twenty/);
   });
 
   it("sorts catalog plugins alphabetically by display name", () => {
     const catalog = buildPluginCatalog({
-      manifests: [n8nManifest, lastmileManifest],
+      manifests: [twentyManifest, n8nManifest],
     });
 
     expect(catalog.plugins.map((plugin) => plugin.displayName)).toEqual([
-      "LastMile",
       "n8n",
+      "Twenty CRM",
     ]);
   });
 
   it("preserves premium metadata on catalog entries", () => {
     const premiumManifest: PluginManifest = {
-      ...lastmileManifest,
+      ...twentyManifest,
       premium: {
-        entitlementProductKey: "lastmile-premium",
+        entitlementProductKey: "twenty-premium",
         installKeyRequired: true,
         installKeyPrompt: "Enter the install key.",
       },
     };
     const catalog = buildPluginCatalog({ manifests: [premiumManifest] });
-    expect(catalog.plugins[0].pluginKey).toBe("lastmile");
+    expect(catalog.plugins[0].pluginKey).toBe("twenty");
     expect(catalog.plugins[0].premium).toEqual({
-      entitlementProductKey: "lastmile-premium",
+      entitlementProductKey: "twenty-premium",
       installKeyRequired: true,
       installKeyPrompt: "Enter the install key.",
     });
   });
 
   it("rejects invalid manifests", () => {
-    const bad = clone(lastmileManifest);
+    const bad = clone(twentyManifest);
     bad.versions[0].version = "not-semver";
     expect(() => buildPluginCatalog({ manifests: [bad] })).toThrow(
       /not valid semver/,
@@ -134,7 +134,7 @@ describe("buildPluginCatalog", () => {
   it("rejects invalid source provenance shape", () => {
     expect(() =>
       buildPluginCatalog({
-        manifests: [lastmileManifest],
+        manifests: [twentyManifest],
         source: {
           repository: "not-owner-name",
           ref: "main",
@@ -144,7 +144,7 @@ describe("buildPluginCatalog", () => {
     ).toThrow(/owner\/name/);
     expect(() =>
       buildPluginCatalog({
-        manifests: [lastmileManifest],
+        manifests: [twentyManifest],
         source: {
           repository: "thinkwork-ai/thinkwork",
           ref: "main",
@@ -163,7 +163,7 @@ describe("sign → verify round-trip", () => {
       document,
       trustedPublicKeyPem: keys.publicKeyPem,
     });
-    expect(verified.plugins[0].pluginKey).toBe("lastmile");
+    expect(verified.plugins[0].pluginKey).toBe("twenty");
     expect(verified.source).toEqual({
       repository: "thinkwork-ai/thinkwork",
       ref: "main",
@@ -194,8 +194,8 @@ describe("verification fails closed", () => {
     const document = signedDocument(keys.privateKeyPem);
     const tampered = clone(document);
     const component = tampered.catalog.plugins[0].versions[0].payload
-      .components[0] as { endpointUrl?: string };
-    component.endpointUrl = "https://evil.example.invalid/mcp";
+      .components[0] as { displayName?: string };
+    component.displayName = "Tampered CRM";
     expect(() =>
       verifyPluginCatalog({
         document: tampered,

package/dist/plugins/catalog/src/__tests__/contracts.test.ts

@@ -6,14 +6,91 @@ import {
   type PluginManifest,
   type PluginVersion,
 } from "../contracts";
-import { lastmileManifest } from "../registry";
+
+/**
+ * Local fixture manifest exercising the richest contract surface: three
+ * OAuth MCP servers plus a bundled skill. (Shape preserved from the
+ * retired LastMile catalog entry, THINK-334 U6.)
+ */
+const FIXTURE_AUTH_DOMAIN = "https://fixture-auth.example.invalid";
+const FIXTURE_MCP_BASE = "https://fixture-mcp.example.invalid";
+
+const fixtureManifest = {
+  pluginKey: "fixture-crm",
+  displayName: "Fixture CRM",
+  description:
+    "Contract-test fixture plugin with CRM, task, and routing MCP servers.",
+  versions: [
+    {
+      version: "0.1.0",
+      requiredOauthScopes: ["openid", "email", "profile", "offline_access"],
+      components: [
+        {
+          type: "mcp-server",
+          key: "crm",
+          displayName: "Fixture CRM",
+          description: "Customer accounts and sales opportunities.",
+          endpointUrl: `${FIXTURE_MCP_BASE}/crm`,
+          auth: {
+            mode: "oauth",
+            authDomain: FIXTURE_AUTH_DOMAIN,
+            resourceIndicator: `${FIXTURE_MCP_BASE}/crm`,
+          },
+        },
+        {
+          type: "mcp-server",
+          key: "tasks",
+          displayName: "Fixture Tasks",
+          description: "Work orders and task assignments.",
+          endpointUrl: `${FIXTURE_MCP_BASE}/tasks`,
+          auth: {
+            mode: "oauth",
+            authDomain: FIXTURE_AUTH_DOMAIN,
+            resourceIndicator: `${FIXTURE_MCP_BASE}/tasks`,
+          },
+        },
+        {
+          type: "mcp-server",
+          key: "routing",
+          displayName: "Fixture Routing",
+          description: "Route planning and technician dispatch.",
+          endpointUrl: `${FIXTURE_MCP_BASE}/routing`,
+          auth: {
+            mode: "oauth",
+            authDomain: FIXTURE_AUTH_DOMAIN,
+            resourceIndicator: `${FIXTURE_MCP_BASE}/routing`,
+          },
+        },
+        {
+          type: "skills",
+          key: "skills",
+          skills: [
+            {
+              slug: "fixture-crm--crm-basics",
+              skillMd: [
+                "---",
+                "name: fixture-crm--crm-basics",
+                "description: Fixture skill for contract validation tests.",
+                "---",
+                "",
+                "# Fixture CRM basics",
+                "",
+                "Work CRM requests through the fixture MCP tools.",
+              ].join("\n"),
+            },
+          ],
+        },
+      ],
+    },
+  ],
+} as unknown as PluginManifest;
 
 function clone<T>(value: T): T {
   return JSON.parse(JSON.stringify(value)) as T;
 }
 
 function manifest(mutate?: (manifest: PluginManifest) => void): PluginManifest {
-  const copy = clone(lastmileManifest);
+  const copy = clone(fixtureManifest);
   mutate?.(copy);
   return copy;
 }
@@ -23,9 +100,9 @@ function version(m: PluginManifest): PluginVersion {
 }
 
 describe("validatePluginManifest", () => {
-  it("validates the LastMile manifest (three OAuth MCP servers + skills)", () => {
-    const validated = validatePluginManifest(lastmileManifest);
-    expect(validated.pluginKey).toBe("lastmile");
+  it("validates the fixture manifest (three OAuth MCP servers + skills)", () => {
+    const validated = validatePluginManifest(fixtureManifest);
+    expect(validated.pluginKey).toBe("fixture-crm");
     const components = validated.versions[0].components;
     expect(
       components.filter((component) => component.type === "mcp-server"),
@@ -38,7 +115,7 @@ describe("validatePluginManifest", () => {
 
   it("rejects non-object input", () => {
     expect(() => validatePluginManifest(null)).toThrow(PluginManifestError);
-    expect(() => validatePluginManifest("lastmile")).toThrow(
+    expect(() => validatePluginManifest("fixture-crm")).toThrow(
       PluginManifestError,
     );
   });
@@ -52,13 +129,13 @@ describe("validatePluginManifest", () => {
   it("validates premium metadata for key-gated plugins", () => {
     const ok = manifest((m) => {
       m.premium = {
-        entitlementProductKey: "lastmile",
+        entitlementProductKey: "fixture-crm",
         installKeyRequired: true,
         installKeyPrompt: "Enter the install key provided by ThinkWork.",
       };
     });
     expect(validatePluginManifest(ok).premium).toEqual({
-      entitlementProductKey: "lastmile",
+      entitlementProductKey: "fixture-crm",
       installKeyRequired: true,
       installKeyPrompt: "Enter the install key provided by ThinkWork.",
     });
@@ -67,7 +144,7 @@ describe("validatePluginManifest", () => {
   it("rejects premium metadata without a true install-key requirement", () => {
     const bad = manifest((m) => {
       m.premium = {
-        entitlementProductKey: "lastmile",
+        entitlementProductKey: "fixture-crm",
         installKeyRequired: true,
         installKeyPrompt: "Enter the install key provided by ThinkWork.",
       };
@@ -82,7 +159,7 @@ describe("validatePluginManifest", () => {
   it("rejects premium metadata without an entitlement product key", () => {
     const bad = manifest((m) => {
       m.premium = {
-        entitlementProductKey: "lastmile",
+        entitlementProductKey: "fixture-crm",
         installKeyRequired: true,
         installKeyPrompt: "Enter the install key provided by ThinkWork.",
       };
@@ -116,7 +193,7 @@ describe("validatePluginManifest", () => {
       (component) => component.type === "skills",
     );
     if (skills?.type !== "skills") throw new Error("missing skills component");
-    skills.skills[0].slug = "lastmile/crm-basics";
+    skills.skills[0].slug = "fixture-crm/crm-basics";
     expect(() => validatePluginManifest(bad)).toThrow(/skill slug/);
   });
 
@@ -648,18 +725,18 @@ describe("validatePluginManifest", () => {
         {
           type: "ui-surface",
           key: "dashboard",
-          displayName: "LastMile dashboard",
+          displayName: "Fixture CRM dashboard",
           intendedMount: "settings.plugins.detail.tab",
           launch: {
             schemaVersion: 1,
             type: "app",
-            appKey: "lastmile-dashboard",
+            appKey: "fixture-crm-dashboard",
             routeSegment: "dashboard",
             mount: "main-shell",
             runtime: "trusted-bundled-react",
             description: "Account engagement dashboard.",
             icon: "layout-dashboard",
-            entitlementProductKey: "lastmile",
+            entitlementProductKey: "fixture-crm",
           },
         },
       );
@@ -672,7 +749,7 @@ describe("validatePluginManifest", () => {
       m.versions[0].components.push({
         type: "ui-surface",
         key: "settings",
-        displayName: "LastMile settings",
+        displayName: "Fixture CRM settings",
         intendedMount: "settings.plugins.detail.tab",
       });
     });
@@ -683,7 +760,7 @@ describe("validatePluginManifest", () => {
     expect(surface).toMatchObject({
       type: "ui-surface",
       key: "settings",
-      displayName: "LastMile settings",
+      displayName: "Fixture CRM settings",
       intendedMount: "settings.plugins.detail.tab",
     });
     expect(surface?.type === "ui-surface" ? surface.launch : undefined).toBe(
@@ -691,75 +768,6 @@ describe("validatePluginManifest", () => {
     );
   });
 
-  it("validates auth-provider components", () => {
-    const ok = manifest((m) => {
-      m.versions[0].components.push({
-        type: "auth-provider",
-        key: "workos-auth",
-        displayName: "WorkOS Cognito federation",
-        provider: "workos",
-        settingsSurface: "settings.plugins.workos-auth",
-        cognitoIdentityProviderName: "WorkOSAuth",
-        configFields: [
-          {
-            key: "issuerUrl",
-            displayName: "WorkOS issuer URL",
-            required: true,
-            storage: "metadata",
-          },
-          {
-            key: "clientSecret",
-            displayName: "WorkOS client secret",
-            required: true,
-            storage: "secret-ref",
-          },
-        ],
-        publicOptions: [
-          {
-            key: "sso",
-            displayName: "Continue with SSO",
-            providerSpecific: false,
-            recommended: true,
-          },
-        ],
-      });
-    });
-    expect(() => validatePluginManifest(ok)).not.toThrow();
-  });
-
-  it("rejects auth-provider config fields that expose values in the manifest", () => {
-    const bad = manifest((m) => {
-      m.versions[0].components.push({
-        type: "auth-provider",
-        key: "workos-auth",
-        displayName: "WorkOS Cognito federation",
-        provider: "workos",
-        settingsSurface: "settings.plugins.workos-auth",
-        cognitoIdentityProviderName: "WorkOSAuth",
-        configFields: [
-          {
-            key: "clientSecret",
-            displayName: "WorkOS client secret",
-            required: true,
-            storage: "secret-ref",
-            value: "do-not-ship",
-          } as never,
-        ],
-        publicOptions: [
-          {
-            key: "sso",
-            displayName: "Continue with SSO",
-            providerSpecific: false,
-            recommended: true,
-          },
-        ],
-      });
-    });
-    expect(() => validatePluginManifest(bad)).toThrow(
-      /value is not allowed in auth-provider manifests/,
-    );
-  });
-
   it("validates an email-channel capability with Resend, SendGrid, and SES providers", () => {
     const ok = manifest((m) => {
       m.versions[0].capabilities = [
@@ -834,7 +842,7 @@ describe("validatePluginManifest", () => {
       m.versions[0].components.push({
         type: "ui-surface",
         key: "dashboard",
-        displayName: "LastMile dashboard",
+        displayName: "Fixture CRM dashboard",
         intendedMount: "",
       });
     });
@@ -847,7 +855,7 @@ describe("validatePluginManifest", () => {
       {
         schemaVersion: 2,
         type: "app",
-        appKey: "lastmile-dashboard",
+        appKey: "fixture-crm-dashboard",
         routeSegment: "dashboard",
         mount: "main-shell",
         runtime: "trusted-bundled-react",
@@ -855,7 +863,7 @@ describe("validatePluginManifest", () => {
       {
         schemaVersion: 1,
         type: "widget",
-        appKey: "lastmile-dashboard",
+        appKey: "fixture-crm-dashboard",
         routeSegment: "dashboard",
         mount: "main-shell",
         runtime: "trusted-bundled-react",
@@ -863,7 +871,7 @@ describe("validatePluginManifest", () => {
       {
         schemaVersion: 1,
         type: "app",
-        appKey: "LastMile",
+        appKey: "Fixture_CRM",
         routeSegment: "dashboard",
         mount: "main-shell",
         runtime: "trusted-bundled-react",
@@ -871,7 +879,7 @@ describe("validatePluginManifest", () => {
       {
         schemaVersion: 1,
         type: "app",
-        appKey: "lastmile-dashboard",
+        appKey: "fixture-crm-dashboard",
         routeSegment: "/dashboard",
         mount: "main-shell",
         runtime: "trusted-bundled-react",
@@ -879,7 +887,7 @@ describe("validatePluginManifest", () => {
       {
         schemaVersion: 1,
         type: "app",
-        appKey: "lastmile-dashboard",
+        appKey: "fixture-crm-dashboard",
         routeSegment: "dashboard",
         mount: "settings",
         runtime: "trusted-bundled-react",
@@ -887,7 +895,7 @@ describe("validatePluginManifest", () => {
       {
         schemaVersion: 1,
         type: "app",
-        appKey: "lastmile-dashboard",
+        appKey: "fixture-crm-dashboard",
         routeSegment: "dashboard",
         mount: "main-shell",
         runtime: "remote-url",
@@ -895,7 +903,7 @@ describe("validatePluginManifest", () => {
       {
         schemaVersion: 1,
         type: "app",
-        appKey: "lastmile-dashboard",
+        appKey: "fixture-crm-dashboard",
         routeSegment: "dashboard",
         mount: "main-shell",
         runtime: "trusted-bundled-react",
@@ -906,7 +914,7 @@ describe("validatePluginManifest", () => {
         m.versions[0].components.push({
           type: "ui-surface",
           key: "dashboard",
-          displayName: "LastMile dashboard",
+          displayName: "Fixture CRM dashboard",
           intendedMount: "settings.plugins.detail.tab",
           launch,
         } as never);

package/dist/plugins/catalog/src/__tests__/plugin-package.test.ts

@@ -13,14 +13,10 @@ import {
 describe("first-party plugin packages", () => {
   it("registers n8n from its root plugin package boundary", () => {
     expect(firstPartyPluginPackages.map((entry) => entry.packageKey)).toEqual([
-      "company-data",
-      "company-etl",
       "email-channel",
-      "lastmile",
       "n8n",
       "sendgrid",
       "twenty",
-      "workos-auth",
     ]);
 
     expect(n8nPluginPackage.sourceRoot).toBe("plugins/n8n");
@@ -46,17 +42,20 @@ describe("first-party plugin packages", () => {
 
   it("publishes every first-party plugin manifest through the catalog aggregate", () => {
     expect(allPluginManifests.map((manifest) => manifest.pluginKey)).toEqual([
-      "lastmile",
       "n8n",
       "email-channel",
       "sendgrid",
-      "company-data",
-      "company-etl",
       "twenty",
-      "workos-auth",
     ]);
   });
 
+  it("no longer publishes the superseded data plugins (THINK-334 U6)", () => {
+    const keys = allPluginManifests.map((manifest) => manifest.pluginKey);
+    expect(keys).not.toContain("lastmile");
+    expect(keys).not.toContain("company-data");
+    expect(keys).not.toContain("company-etl");
+  });
+
   it("rejects package descriptors whose source root does not match the key", () => {
     expect(() =>
       defineFirstPartyPluginPackage({

package/dist/plugins/catalog/src/__tests__/plugin-registry.test.ts

@@ -18,26 +18,11 @@ describe("generated first-party plugin registry", () => {
         exportName: entry.exportName,
       })),
     ).toEqual([
-      {
-        packageKey: "company-data",
-        packageName: "@thinkwork/plugin-company-data",
-        exportName: "companyDataPluginPackage",
-      },
-      {
-        packageKey: "company-etl",
-        packageName: "@thinkwork/plugin-company-etl",
-        exportName: "companyEtlPluginPackage",
-      },
       {
         packageKey: "email-channel",
         packageName: "@thinkwork/plugin-email-channel",
         exportName: "emailChannelPluginPackage",
       },
-      {
-        packageKey: "lastmile",
-        packageName: "@thinkwork/plugin-lastmile",
-        exportName: "lastmilePluginPackage",
-      },
       {
         packageKey: "n8n",
         packageName: "@thinkwork/plugin-n8n",
@@ -53,11 +38,6 @@ describe("generated first-party plugin registry", () => {
         packageName: "@thinkwork/plugin-twenty",
         exportName: "twentyPluginPackage",
       },
-      {
-        packageKey: "workos-auth",
-        packageName: "@thinkwork/plugin-workos-auth",
-        exportName: "workosAuthPluginPackage",
-      },
     ]);
   });