feat: add plugin-auth to app-host for Vercel deployment

Co-authored-by: hotlong <50353452+hotlong@users.noreply.github.com>

Author: Copilot

examples/app-host/objectstack.config.ts

@@ -4,6 +4,7 @@ import { defineStack } from '@objectstack/spec';
 import { AppPlugin, DriverPlugin } from '@objectstack/runtime';
 import { ObjectQLPlugin } from '@objectstack/objectql';
 import { InMemoryDriver } from '@objectstack/driver-memory';
+import { AuthPlugin } from '@objectstack/plugin-auth';
 import CrmApp from '../app-crm/objectstack.config';
 import TodoApp from '../app-todo/objectstack.config';
 import BiPluginManifest from '../plugin-bi/objectstack.config';
@@ -12,6 +13,15 @@ import BiPluginManifest from '../plugin-bi/objectstack.config';
 // This project acts as a "Platform Server" that loads multiple apps and plugins.
 // It effectively replaces the manual composition in `src/index.ts`.
 
+// Shared authentication plugin — reads secrets from environment variables so the
+// same config works both locally and on Vercel (where VERCEL_URL is injected).
+const authPlugin = new AuthPlugin({
+  secret: process.env.AUTH_SECRET ?? 'dev-secret-please-change-in-production-min-32-chars',
+  baseUrl: process.env.NEXT_PUBLIC_BASE_URL ?? (process.env.VERCEL_URL
+    ? `https://${process.env.VERCEL_URL}`
+    : 'http://localhost:3000'),
+});
+
 export default defineStack({
   manifest: {
     id: 'app-host',
@@ -27,6 +37,8 @@ export default defineStack({
     new ObjectQLPlugin(),
     // Register Default Driver (Memory)
     new DriverPlugin(new InMemoryDriver()),
+    // Authentication — required for production (Vercel) deployments
+    authPlugin,
     // Wrap Manifests/Stacks in AppPlugin adapter
     new AppPlugin(CrmApp),
     new AppPlugin(TodoApp),
@@ -90,6 +102,7 @@ export const PreviewHostExample = defineStack({
   plugins: [
     new ObjectQLPlugin(),
     new DriverPlugin(new InMemoryDriver()),
+    authPlugin,
     new AppPlugin(CrmApp),
     new AppPlugin(TodoApp),
     new AppPlugin(BiPluginManifest)

examples/app-host/package.json

@@ -19,6 +19,7 @@
     "@objectstack/metadata": "workspace:*",
     "@objectstack/objectql": "workspace:*",
     "@example/plugin-bi": "workspace:*",
+    "@objectstack/plugin-auth": "workspace:*",
     "@objectstack/plugin-hono-server": "workspace:*",
     "@objectstack/runtime": "workspace:*",
     "@objectstack/spec": "workspace:*"

examples/app-host/vercel.json

@@ -0,0 +1,10 @@
+{
+  "$schema": "https://openapi.vercel.sh/vercel.json",
+  "installCommand": "cd ../.. && pnpm install",
+  "buildCommand": "cd ../.. && pnpm turbo run build --filter=@example/app-host",
+  "outputDirectory": "dist",
+  "env": {
+    "AUTH_SECRET": "@auth_secret",
+    "VERCEL_URL": "@vercel_url"
+  }
+}