feat!: upgrade ObjectStack platform 14.7 → 16.0.0-rc.1 (spec 16)

[os-zhuang]

What

Upgrades the ObjectStack platform 14.7 → 16.0.0-rc.1 (crossing the entire 15.x line). App → 2.2.0, manifest specVersion → ^16.0.0-rc.1. All 11 @objectstack/* packages pinned to the exact RC.

Rebased onto current main, so the agent visibility removal (#449) is already present upstream and is a no-op here.

Breaking / behavioural changes migrated

• Drop ai from stack requires. ObjectStack 11.3.0 (ADR-0025 S2) removed @objectstack/service-ai from the open edition (AI runtime is cloud-only; last open-registry version is 10.3.0). Under 16, requires: ['ai'] is fail-fast — serve hard-aborts boot when the package is absent, so objectstack start/dev broke with [AI] required but @objectstack/service-ai is not installed. The AI metadata (2 agents + skills) still validates and ships in the artifact; a local open-edition boot simply omits the AI service. (Never caught before because verify never boots.)

Dashboard fixes (found by rendering the app, not by verify)

• dateRange picker crashed widgets on objects without the bound field. ObjectStack 15 (framework#2501) wired dashboard filters into every widget's analytics query. Executive/CRM bind dateRange to close_date, which only crm_opportunity has → widgets on crm_account/crm_contact/crm_lead/crm_product failed with SqliteError: no such column: close_date. Opted them out via filterBindings: { dateRange: false } (5 on executive, 1 on crm). Sales (all-opportunity) and Service (dateRange: created_date, which crm_case has) needed no change.
• Removed dead dashboard header buttons. Export PDF / Schedule Email / Customize / New-record / /reports/* links pointed at actions and routes that were never implemented (did nothing on click). Removed header.actions from all 4 dashboards + the orphaned action-label translations from all 4 locale bundles.

Verification

• validate + typecheck + build + vitest (17/17) green.
• Server boots (38 plugins); all 4 dashboards render with live seeded data and zero analytics/console errors (logged in as seed admin, loaded each dashboard).

Notes

• Install under Node 22 (.nvmrc) — a transitive nanoid@6 engines.node + engine-strict=true reject the odd-numbered Node 25.
• Follow-up platform issues filed upstream for the two runtime-only failure classes this upgrade surfaced: Validate dashboard filter field-existence at build time (extend ADR-0021) objectstack#3365 (dashboard filter field validation), #3366 (capability provider preflight), #3367 (dead action/route refs).

🤖 Generated with Claude Code