feat(apps): split platform apps into one-app packages (ADR-0048) (#1813)

* feat(apps): scaffold @objectstack/studio app package (ADR-0048, boot-neutral)

ADR-0048 "one app per package": Studio becomes its own ObjectStack package
(`com.objectstack.studio`, namespace `studio`) so `/apps/<packageId>` resolves
unambiguously instead of being lost inside plugin-auth's multi-app manifest.

This commit is intentionally boot-neutral:
- New package `packages/apps/studio` with a thin `StudioAppPlugin` that registers
  the Studio manifest; STUDIO_APP is still imported from platform-objects
  (transitional) and the package is NOT yet wired into the dev/serve plugin set.
- Adds `packages/apps/*` to the pnpm workspace globs and `@objectstack/studio`
  to the changeset fixed group.

Boot path (dev-plugin/serve.ts) and plugin-auth's manifest are untouched, so
`os dev`/`os serve` behaviour is unchanged. The boot-path switch (wire the new
package, drop the app from plugin-auth, move the AppSchema in) lands separately
so it can be verified against a live boot.

Builds clean (tsup CJS/ESM/DTS).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* feat(apps): scaffold @objectstack/setup app package (ADR-0048, boot-neutral)

Mirrors @objectstack/studio: Setup becomes its own package
(`com.objectstack.setup`, namespace `setup`) carrying SETUP_APP and its baseline
SETUP_NAV_CONTRIBUTIONS. Boot-neutral (transitional import from platform-objects;
not yet wired into dev/serve). Added to the changeset fixed group. Builds clean.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* feat(apps): reclaim @objectstack/account for console Account app; drop dead SPA (ADR-0048)

Removes the deprecated standalone account-portal SPA (apps/account) and reclaims
the @objectstack/account name for the console Account app as its own package
(`com.objectstack.account`, namespace `account`). Boot-neutral skeleton (mirrors
studio/setup): thin AccountAppPlugin, transitional import from platform-objects,
not yet wired into dev/serve. CLI's vestigial workspace dep now resolves to the
reclaimed package (no code imported the old SPA). Builds clean.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* feat(apps): wire Setup/Studio/Account app packages into dev+serve; drop from plugin-auth (ADR-0048)

⚠️ BOOT-CRITICAL — verify with a live `os dev` (and `os serve`) boot before merge.

Completes the ADR-0048 app split:
- plugin-auth's manifest no longer registers `apps: [SETUP_APP, STUDIO_APP,
  ACCOUNT_APP]` nor `navigationContributions: SETUP_NAV_CONTRIBUTIONS`; it keeps
  only the auth objects + their detail pages.
- dev-plugin.ts and cli `serve.ts` now register the three new app packages
  (best-effort dynamic import, skipped if not installed) right after AuthPlugin,
  so each app publishes under its own package id (com.objectstack.{setup,studio,
  account}) and `/apps/<packageId>` resolves unambiguously.
- plugin-dev + cli declare the three app packages as workspace deps.

The AppSchemas still physically live in @objectstack/platform-objects/apps
(the new packages import them); moving the definitions in is a later non-behavioral
cleanup. Verified statically: all packages build, plugin-dev/cli typecheck clean,
plugin-auth (114) + platform-objects (55) tests pass. NOT runtime-boot-verified.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* fix(apps): app plugins depend on AuthPlugin by plugin name, not package id (ADR-0048)

Live `os dev` boot surfaced: `Dependency 'com.objectstack.plugin-auth' not found
for plugin 'com.objectstack.setup'`. The kernel matches plugin `dependencies` by
plugin NAME — AuthPlugin's name is `com.objectstack.auth`, while its package id is
`com.objectstack.plugin-auth`. Point the class-level dependency at the plugin name
(`com.objectstack.auth`); the manifest-level dependency stays the package id.

Adds packages/cli/src/adr-0048-app-split.test.ts: boots a real ObjectQL engine,
runs each app plugin's start(), asserts setup/studio/account register under their
own package ids and coexist.

VERIFIED end-to-end: `os dev` (app-showcase) boots clean and /api/v1/meta/app
reports setup→com.objectstack.setup, studio→com.objectstack.studio,
account→com.objectstack.account (previously all com.objectstack.plugin-auth).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Jack Zhuang <277994282+os-zhuang@users.noreply.github.com>
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: 3 people

.changeset/adr-0048-split-account-app.md

@@ -0,0 +1,12 @@
+---
+"@objectstack/account": minor
+---
+
+feat(apps): reclaim `@objectstack/account` for the console Account app (ADR-0048)
+
+Removes the deprecated standalone account-portal SPA (`apps/account`) and
+reclaims the `@objectstack/account` name for the console Account app as its own
+ObjectStack package (`com.objectstack.account`, namespace `account`) per
+ADR-0048 "one app per package". Boot-neutral skeleton (transitional import from
+platform-objects; not yet wired into the dev/serve plugin set — that switch
+lands in a follow-up verified against a live `os dev` boot).

.changeset/adr-0048-split-setup-app.md

@@ -0,0 +1,12 @@
+---
+"@objectstack/setup": minor
+---
+
+feat(apps): extract Setup into its own `@objectstack/setup` app package (ADR-0048)
+
+ADR-0048 "one app per package": Setup gets a distinct package id
+(`com.objectstack.setup`) and namespace (`setup`), carrying both `SETUP_APP` and
+its baseline `SETUP_NAV_CONTRIBUTIONS`, so `/apps/<packageId>` resolves
+unambiguously. Boot-neutral skeleton (transitional import from platform-objects;
+not yet wired into the dev/serve plugin set — that switch lands in a follow-up
+verified against a live `os dev` boot).

.changeset/adr-0048-split-studio-app.md

@@ -0,0 +1,16 @@
+---
+"@objectstack/studio": minor
+---
+
+feat(apps): extract Studio into its own `@objectstack/studio` app package (ADR-0048)
+
+ADR-0048 "one app per package": Studio gets a distinct package id
+(`com.objectstack.studio`) and namespace (`studio`) so `/apps/<packageId>`
+resolves unambiguously instead of being lost inside a multi-app package.
+
+This change adds the package skeleton (`packages/apps/studio`) with a thin
+registration plugin. Transitional: `STUDIO_APP` is still imported from
+`@objectstack/platform-objects/apps`, and the package is not yet wired into the
+dev/serve plugin set — that boot-path switch (and dropping the app from
+`plugin-auth`'s manifest) lands in a follow-up so it can be verified against a
+live `os dev` boot.

.changeset/config.json

@@ -24,6 +24,8 @@
       "@objectstack/observability",
       "@objectstack/formula",
       "@objectstack/platform-objects",
+      "@objectstack/studio",
+      "@objectstack/setup",
       "@objectstack/runtime",
       "@objectstack/rest",
       "@objectstack/driver-memory",