Files

T

Charles Bochet 5a2523f533 chore(apps): bump vitest to 3.2.6 in twenty-apps projects (GHSA-5xrq-8626-4rwp) (#21336 )

Resolves the **vitest Critical** Dependabot alerts
(`GHSA-5xrq-8626-4rwp`, vitest `< 3.2.6`) — #1422–#1433.

Each `packages/twenty-apps/*` project is an **independent yarn project**
with its own `package.json` + `yarn.lock` (not part of the root
workspace). 12 of them declared `vitest: ^3.1.1` and locked an older
3.2.x. This bumps the range to `^3.2.6` and refreshes each lockfile to
**3.2.6** (latest 3.x, published 2026-06-01).

Projects updated: `community/github-connector`,
`examples/{hello-world,postcard}`,
`internal/{exa,people-data-labs,self-hosting,twenty-discord,twenty-fireflies,twenty-for-twenty,twenty-linear,twenty-partners,twenty-slack}`.

- Dev-scope only (test runner); no runtime impact.
- The **root workspace already uses vitest 4.x** (≥ the fix) and is
intentionally untouched.
- Verified: no `vitest < 3.2.6` remains in any `twenty-apps` lockfile.

2026-06-08 19:36:42 +02:00

public

feat(app): infrastructure for pre-installed apps (#19973 )

2026-04-23 21:59:00 +02:00

src

feat(apps): split AI tool and workflow action triggers in LogicFunction manifest (#20208 )

2026-05-05 14:56:09 +02:00

.gitignore

feat(app): infrastructure for pre-installed apps (#19973 )

2026-04-23 21:59:00 +02:00

.nvmrc

feat(app): infrastructure for pre-installed apps (#19973 )

2026-04-23 21:59:00 +02:00

.oxlintrc.json

feat(app): infrastructure for pre-installed apps (#19973 )

2026-04-23 21:59:00 +02:00

.yarnrc.yml

feat(app): infrastructure for pre-installed apps (#19973 )

2026-04-23 21:59:00 +02:00

package.json

chore(apps): bump vitest to 3.2.6 in twenty-apps projects (GHSA-5xrq-8626-4rwp) (#21336 )

2026-06-08 19:36:42 +02:00

README.md

feat(app): infrastructure for pre-installed apps (#19973 )

2026-04-23 21:59:00 +02:00

tsconfig.json

feat(app): infrastructure for pre-installed apps (#19973 )

2026-04-23 21:59:00 +02:00

yarn.lock

chore(apps): bump vitest to 3.2.6 in twenty-apps projects (GHSA-5xrq-8626-4rwp) (#21336 )

2026-06-08 19:36:42 +02:00

README.md

twenty-exa

Exposes Exa structured web search to Twenty AI agents (chat + workflow agents + MCP) as the app_exa_web_search tool.

Installation

Register the app on the Twenty server once (admin API / UI): twenty-exa from npm.
Set isPreInstalled=true on the registration so it's installed on every new workspace. Existing workspaces can be backfilled via the install-pre-installed-apps CLI command.
Set the EXA_API_KEY server variable on the registration to your Exa API key. The value is injected into every logic function execution — no per-workspace configuration needed.

Billing

The handler calls Twenty's generic app billing endpoint (POST /app/billing/charge) using the application access token injected into the execution env. Pricing mirrors Exa's auto-search tier: $0.007 base (10 results) + $0.001 per additional result.