feat(server): declare marketplace + Console SPA deps for the self-host runtime (ADR-0020 T1) (#27)

Make @objectos/server a complete open-source self-host runtime distribution by
pinning the Console SPA and marketplace client as explicit dependencies:

  - @objectstack/console          ^10.2.0  — the /_console/ SPA
  - @objectstack/cloud-connection ^10.2.0  — marketplace browse/install,
    cloud-connection, runtime-config

The objectstack CLI already auto-provisions both on top of the standalone stack
for every entry point (Docker, dev, and the ObjectOS One desktop — all route
through `objectstack serve`): it injects the marketplace + cloud-connection +
runtime-config plugins from @objectstack/cloud-connection (gated on
resolveCloudUrl(); OS_CLOUD_URL=off -> fully offline) and serves the
@objectstack/console SPA at /_console/. So objectstack.config.ts stays a bare
standalone stack; a doc note records why explicit wiring is omitted (it would
double-mount) and the ADR-0006 Phase 4 caveat.

Verified: online -> SPA renders in-browser (no console errors) + marketplace API
returns the live catalog + runtime-config served; offline (OS_CLOUD_URL=off) ->
marketplace plugins unmounted, SPA still served, zero outbound cloud calls.

Co-authored-by: Jack Zhuang <277994282+os-zhuang@users.noreply.github.com>
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>

Author: 3 people

apps/objectos/objectstack.config.ts

@@ -23,9 +23,19 @@
  *   OS_BUSINESS_DB_URL  — Per-project business database (legacy: OS_DATABASE_URL;
  *                         default: file-backed sqlite under the ObjectStack home)
  *
- * Artifact hot-reload follows `NODE_ENV` (on outside production). Enterprise
- * plugins live in ../../packages/* and can be appended to the returned
- * plugin manifest below.
+ * Artifact hot-reload follows `NODE_ENV` (on outside production).
+ *
+ * NOTE — marketplace + Console SPA are intentionally NOT wired here. The
+ * `objectstack` CLI (dev / serve / start, which every entry point — Docker and
+ * the ObjectOS One desktop via one.mjs — routes through) auto-provisions them
+ * on top of this standalone stack: it injects marketplace browse/install +
+ * cloud-connection + runtime-config from `@objectstack/cloud-connection`
+ * (gated on `resolveCloudUrl()`; `OS_CLOUD_URL=off` → fully offline, nothing
+ * mounts) and serves the `@objectstack/console` SPA at `/_console/`. Both
+ * packages are declared as dependencies so this distribution pins their
+ * versions. Re-adding them to `plugins` below would double-mount; only wire
+ * them explicitly here if a future framework drops the CLI auto-injection
+ * (ADR-0006 Phase 4).
  */
 
 import { createStandaloneStack } from '@objectstack/runtime';

apps/objectos/package.json

@@ -14,6 +14,8 @@
   },
   "dependencies": {
     "@objectstack/cli": "^10.2.0",
+    "@objectstack/cloud-connection": "^10.2.0",
+    "@objectstack/console": "^10.2.0",
     "@objectstack/core": "^10.2.0",
     "@objectstack/driver-memory": "^10.2.0",
     "@objectstack/driver-sql": "^10.2.0",