Merge pull request #255 from objectstack-ai/copilot/prioritize-3-0-upgrade

Author: hotlong

ROADMAP.md

@@ -30,7 +30,7 @@ The integration of **@object-ui** (6 packages at v2.0.0) marks a strategic shift
 
 ## Current State (February 2026)
 
-### Server — ✅ Complete (14 Plugins)
+### Server — ✅ Complete (15 Plugins)
 
 | Plugin | Package | Status |
 |--------|---------|:------:|
@@ -39,6 +39,7 @@ The integration of **@object-ui** (6 packages at v2.0.0) marks a strategic shift
 | Automation | `@objectos/automation` | ✅ |
 | Browser Runtime | `@objectos/browser` | ✅ |
 | Cache | `@objectos/cache` | ✅ |
+| **GraphQL** | **`@objectos/graphql`** | **✅** |
 | i18n | `@objectos/i18n` | ✅ |
 | Jobs | `@objectos/jobs` | ✅ |
 | Metrics | `@objectos/metrics` | ✅ |
@@ -330,9 +331,9 @@ Complete GraphQL API alongside existing REST endpoints.
 
 | # | Task | Priority | Status |
 |---|------|:--------:|:------:|
-| O.1.1 | GraphQL schema generation from ObjectStack metadata | 🔴 | ⬜ |
-| O.1.2 | Query resolvers with permission enforcement | 🔴 | ⬜ |
-| O.1.3 | Mutation resolvers with audit logging | 🔴 | ⬜ |
+| O.1.1 | GraphQL schema generation from ObjectStack metadata | 🔴 | ✅ |
+| O.1.2 | Query resolvers with permission enforcement | 🔴 | ✅ |
+| O.1.3 | Mutation resolvers with audit logging | 🔴 | ✅ |
 | O.1.4 | Subscription support via WebSocket | 🟡 | ⬜ |
 | O.1.5 | DataLoader pattern for N+1 prevention | 🟡 | ⬜ |
 | O.1.6 | GraphQL Playground / Explorer integration | 🟢 | ⬜ |

objectstack.config.ts

@@ -23,6 +23,7 @@ import { StoragePlugin } from '@objectos/storage';
 import { TelemetryPlugin } from '@objectos/telemetry';
 import { UIPlugin } from '@objectos/ui';
 import { WorkflowPlugin } from '@objectos/workflow';
+import { GraphQLPlugin } from '@objectos/graphql';
 import { resolve } from 'path';
 
 // ─── Example App Bundles ─────────────────────────────────────────
@@ -102,6 +103,9 @@ export default defineStack({
     new UIPlugin(),
     // createRealtimePlugin(),
 
+    // GraphQL Layer (Phase O.1)
+    new GraphQLPlugin(),
+
     // Example Apps
     new AppPlugin(CrmApp),
     new AppPlugin(TodoApp),

package.json

@@ -82,6 +82,7 @@
     "@objectstack/plugin-auth": "3.0.0",
     "@objectos/automation": "workspace:*",
     "@objectos/cache": "workspace:*",
+    "@objectos/graphql": "workspace:*",
     "@objectos/i18n": "workspace:*",
     "@objectos/jobs": "workspace:*",
     "@objectos/metrics": "workspace:*",

packages/graphql/jest.config.cjs

@@ -0,0 +1,14 @@
+module.exports = {
+  preset: 'ts-jest/presets/default-esm',
+  testEnvironment: 'node',
+  extensionsToTreatAsEsm: ['.ts'],
+  moduleNameMapper: {
+    '^(\\.{1,2}/.*)\\.js$': '$1',
+  },
+  transform: {
+    '^.+\\.ts$': ['ts-jest', { useESM: true }],
+  },
+  roots: ['<rootDir>/test'],
+  testMatch: ['**/*.test.ts'],
+  collectCoverageFrom: ['src/**/*.ts', '!src/**/*.d.ts']
+};

packages/graphql/package.json

@@ -0,0 +1,26 @@
+{
+  "name": "@objectos/graphql",
+  "version": "0.1.0",
+  "type": "module",
+  "license": "AGPL-3.0",
+  "description": "GraphQL API layer for ObjectOS — auto-generates schema from ObjectStack metadata with permission enforcement and audit logging",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "scripts": {
+    "build": "tsup src/index.ts --format esm,cjs --clean && tsc --emitDeclarationOnly --declaration",
+    "test": "jest --forceExit --passWithNoTests"
+  },
+  "dependencies": {
+    "@objectstack/runtime": "^3.0.0",
+    "@objectstack/spec": "3.0.0",
+    "graphql": "^16.10.0"
+  },
+  "devDependencies": {
+    "@types/jest": "^30.0.0",
+    "@types/node": "^25.2.0",
+    "jest": "^30.2.0",
+    "ts-jest": "^29.4.6",
+    "tsup": "^8.5.1",
+    "typescript": "^5.9.3"
+  }
+}

packages/graphql/src/index.ts

@@ -0,0 +1,25 @@
+/**
+ * @objectos/graphql — GraphQL API Layer for ObjectOS
+ *
+ * Auto-generates a GraphQL schema from ObjectStack metadata with:
+ * - RBAC permission enforcement on every query/mutation
+ * - Audit logging for all data mutations
+ * - Paginated list queries with filtering and sorting
+ * - GraphQL Playground for development
+ */
+
+export { GraphQLPlugin } from './plugin.js';
+export { generateSchema, toPascalCase } from './schema-generator.js';
+export { createResolverCallbacks } from './resolvers.js';
+export type {
+  GraphQLConfig,
+  ResolvedGraphQLConfig,
+  GraphQLResolverContext,
+  ObjectDef,
+  ObjectFieldDef,
+  PaginatedResult,
+  PluginHealthReport,
+  PluginCapabilityManifest,
+  PluginSecurityManifest,
+  PluginStartupResult,
+} from './types.js';