feat(app-host): load all kernel plugins to match studio configuration

[Claude]

app-host was missing several kernel plugins when deployed to Vercel, resulting in incomplete functionality compared to studio. This adds all kernel plugins that studio uses to ensure feature parity in production deployments.

Changes

• Added missing plugin dependencies to package.json:

  • @objectstack/plugin-audit, @objectstack/plugin-security, @objectstack/plugin-setup
  • @objectstack/service-ai, @objectstack/service-analytics, @objectstack/service-automation, @objectstack/service-feed

• Registered all kernel plugins in server/index.ts matching studio's configuration:

  • SetupPlugin (navigation service, loads before other plugins)
  • SecurityPlugin, AuditPlugin (RBAC, permissions, audit logging)
  • FeedServicePlugin, MetadataPlugin (activity feeds, metadata management)
  • AIServicePlugin, AutomationServicePlugin, AnalyticsServicePlugin

• Added broker shim to bridge HttpDispatcher → ObjectQL engine:

  • Copied create-broker-shim.ts from studio
  • Attached before kernel.bootstrap() with post-bootstrap validation
  • Required for simplified kernel setup without full message broker

• Reordered plugin loading for correct initialization:

  • Apps load first (provide object schemas)
  • SetupPlugin loads early (other plugins depend on navigation service)
  • Auth and service plugins follow

// Before: Only ObjectQLPlugin, DriverPlugin, AuthPlugin, and AppPlugins
await kernel.use(new ObjectQLPlugin());
await kernel.use(new DriverPlugin(tursoDriver));
await kernel.use(new AuthPlugin({ ... }));
await kernel.use(new AppPlugin(CrmApp));

// After: Full plugin stack matching studio
await kernel.use(new ObjectQLPlugin());
await kernel.use(new DriverPlugin(tursoDriver));
await kernel.use(new AppPlugin(CrmApp));
await kernel.use(new SetupPlugin());
await kernel.use(new AuthPlugin({ ... }));
await kernel.use(new SecurityPlugin());
await kernel.use(new AuditPlugin());
await kernel.use(new FeedServicePlugin());
await kernel.use(new MetadataPlugin({ watch: false }));
await kernel.use(new AIServicePlugin());
await kernel.use(new AutomationServicePlugin());
await kernel.use(new AnalyticsServicePlugin());
(kernel as any).broker = createBrokerShim(kernel);
await kernel.bootstrap();

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
objectstack-demo	Ready	Preview, Comment	Apr 14, 2026 7:33am
objectstack-play	Ready	Preview, Comment	Apr 14, 2026 7:33am
spec	Ready	Preview, Comment	Apr 14, 2026 7:33am

[xuyushun441-sys]

@claude[agent]  ERR_PNPM_OUTDATED_LOCKFILE  Cannot install with "frozen-lockfile" because pnpm-lock.yaml is not up to date with /examples/app-host/package.json

[Claude]

@claude[agent]  ERR_PNPM_OUTDATED_LOCKFILE  Cannot install with "frozen-lockfile" because pnpm-lock.yaml is not up to date with /examples/app-host/package.json

Fixed in 62b3cc7. The lockfile has been updated to include the new kernel plugin dependencies added to app-host.