Update documentation for @objectstack/spec v0.4.1

Co-authored-by: hotlong <50353452+hotlong@users.noreply.github.com>

Author: Copilot

docs/SPEC_REFACTORING.md

@@ -2,7 +2,10 @@
 
 ## Overview
 
-This document describes the refactoring of ObjectOS to align with the [@objectstack/spec](https://github.com/objectstack-ai/spec) protocol version 0.3.3.
+This document describes the alignment of ObjectOS with the [@objectstack/spec](https://github.com/objectstack-ai/spec) protocol.
+
+**Current Version:** v0.4.1 (Updated: 2026-01-27)  
+**Previous Version:** v0.3.3
 
 ## What is @objectstack/spec?
 
@@ -24,31 +27,34 @@ The specification is organized into five namespaces:
 - `Query` (AST), `Driver` (Interface), `Datasource`
 - `Permission`, `Sharing`, `Flow`
 
-### 2. Kernel Protocol (`@objectstack/spec/kernel`)
-*Plugin System & Runtime*
-- `Manifest` - Plugin configuration
+### 2. System Protocol (`@objectstack/spec/system`) 
+*Plugin System, Runtime Infrastructure & Security*
+- `Manifest` - Plugin configuration with contribution points
 - `Plugin` - Lifecycle hooks (onInstall, onEnable, onDisable, onUninstall)
-- `Context` - Runtime context available to plugins
+- `Context` - Runtime context available to plugins (KernelContext, PluginContextData)
 - `Logger` - Structured logging
-
-### 3. System Protocol (`@objectstack/spec/system`)
-*Runtime Infrastructure & Security*
 - `Audit` - Audit logging and event tracking
 - `Events` - Event bus and handlers
 - `Job` - Scheduled jobs and background tasks
-- `Translation` - I18n support
 
-### 4. UI Protocol (`@objectstack/spec/ui`)
+**Note:** In v0.4.1, the Kernel Protocol was merged into the System Protocol for better organization.
+
+### 3. UI Protocol (`@objectstack/spec/ui`)
 *Presentation & Interaction*
 - `App`, `Page`, `View` (Grid/Kanban)
 - `Dashboard` (Widgets), `Report`
 - `Action` (Triggers)
 
-### 5. API Protocol (`@objectstack/spec/api`)
+### 4. API Protocol (`@objectstack/spec/api`)
 *Connectivity & Contracts*
 - `Contract` (DTOs), `Endpoint` (Gateway)
 - `Discovery` (Metadata), `Realtime` (Socket)
 
+### 5. Auth Protocol (`@objectstack/spec/auth`)
+*Authentication & Authorization*
+- `User`, `Session`, `Role`
+- `Permission`, `Token`
+
 ## Changes Made
 
 ### 1. Dependencies

packages/kernel/CHANGELOG.md

@@ -1,5 +1,58 @@
 # @objectos/kernel
 
+## 0.2.1 (2026-01-27)
+
+### Minor Changes
+
+- **Protocol Upgrade**: Upgraded to @objectstack/spec v0.4.1
+  - Updated all imports from `@objectstack/spec/kernel` to `@objectstack/spec/system`
+  - Plugin manifest schema updated to use `objects` glob patterns instead of inline `definitions`
+  - Added support for `contributes` section for extension points (actions, events, field types, etc.)
+  - Improved namespace organization following the new protocol structure
+
+### Breaking Changes
+
+- **Manifest Schema**: The plugin manifest structure has changed in v0.4.1
+  - `definitions.objects` is no longer supported
+  - Use `objects: ['./objects/*.object.yml']` glob patterns to reference object files
+  - Use `contributes` section to register actions, events, and other extension points
+
+### Migration Guide
+
+If you have existing plugins, update your manifest from:
+
+```typescript
+// Old (v0.3.3)
+const manifest = {
+  id: 'com.example.plugin',
+  version: '1.0.0',
+  type: 'plugin',
+  name: 'My Plugin',
+  definitions: {
+    objects: {
+      my_object: { /* inline definition */ }
+    }
+  }
+};
+```
+
+To:
+
+```typescript
+// New (v0.4.1)
+const manifest = {
+  id: 'com.example.plugin',
+  version: '1.0.0',
+  type: 'plugin',
+  name: 'My Plugin',
+  objects: ['./objects/*.object.yml'], // Reference files with glob patterns
+  contributes: {
+    actions: [{ name: 'myAction', label: 'My Action' }],
+    events: ['my_object.created']
+  }
+};
+```
+
 ## 0.2.0 (2026-01-17)
 
 ### Minor Changes

packages/kernel/README.md

@@ -6,7 +6,7 @@ The core runtime engine for ObjectOS - a metadata-driven platform built on the [
 
 `@objectos/kernel` is the execution engine that powers ObjectOS. It extends ObjectQL with application-specific capabilities, providing:
 
-- **Spec-Compliant Types**: Built on `@objectstack/spec` for protocol consistency
+- **Spec-Compliant Types**: Built on `@objectstack/spec` v0.4.1 for protocol consistency
 - **Metadata Processing**: Parse and validate object definitions, apps, and data files
 - **Plugin Lifecycle**: Standardized hooks (onInstall, onEnable, onDisable, onUninstall)
 - **Permission Enforcement**: Apply role-based access control and field-level security
@@ -15,11 +15,11 @@ The core runtime engine for ObjectOS - a metadata-driven platform built on the [
 
 ## Protocol Compliance
 
-This package implements the **@objectstack/spec** protocol:
+This package implements the **@objectstack/spec v0.4.1** protocol:
 
-- **Kernel Protocol** (`@objectstack/spec/kernel`): Plugin lifecycle, manifests, context
+- **System Protocol** (`@objectstack/spec/system`): Plugin lifecycle, manifests, context, kernel infrastructure
 - **Data Protocol** (`@objectstack/spec/data`): Object schemas, fields, queries
-- **System Protocol** (`@objectstack/spec/system`): Audit, events, jobs
+- **API Protocol** (`@objectstack/spec/api`): REST/GraphQL contracts, endpoints, discovery
 
 All TypeScript types are imported from the spec to ensure consistency across the ecosystem.
 
@@ -28,7 +28,7 @@ import type {
   PluginDefinition,
   PluginContextData,
   ObjectStackManifest 
-} from '@objectstack/spec/kernel';
+} from '@objectstack/spec/system';
 
 import type { 
   ServiceObject,