refactor(cloud): drop Studio designer from control plane (PR-B)

apps/cloud is a control plane, not a developer designer. Studio's
`/_studio/` SPA, runtime-config endpoint, and workspace dependency
are removed; Account + Console remain and Console now naturally
claims `/` as the root redirect target.

- packages/cli serve: add OS_DISABLE_STUDIO=1 env opt-out, parallel
  to existing OS_DISABLE_CONSOLE=1. Skips Studio mount cleanly while
  keeping Account + Console.
- packages/services/service-cloud/src/cloud-stack: drop the
  createStudioRuntimeConfigPlugin() entry (control plane has no
  Studio to configure).
- apps/cloud/package.json: drop @objectstack/studio workspace dep;
  set OS_DISABLE_STUDIO=1 on dev + start scripts.
- apps/cloud/vercel.json: replace /_studio/ rewrites/headers/redirect
  with /_console/ equivalents so production matches local behavior.
- apps/cloud/public/_studio (gitignored): removed (dead static assets).

Boot log: only AccountUI + ConsoleUI plugins are tracked.
GET / now 302 -> /_console/; GET /_studio -> 404.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Author: hotlong

apps/cloud/package.json

@@ -5,9 +5,9 @@
   "type": "module",
   "private": true,
   "scripts": {
-    "dev": "PORT=${PORT:-4000} objectstack dev",
+    "dev": "OS_DISABLE_STUDIO=1 PORT=${PORT:-4000} objectstack dev",
     "build": "tsup",
-    "start": "PORT=${PORT:-4000} objectstack serve dist/objectstack.config.js --prebuilt",
+    "start": "OS_DISABLE_STUDIO=1 PORT=${PORT:-4000} objectstack serve dist/objectstack.config.js --prebuilt",
     "doctor": "objectstack doctor",
     "typecheck": "tsc --noEmit",
     "test": "objectstack test",
@@ -46,7 +46,6 @@
     "@objectstack/service-package": "workspace:*",
     "@objectstack/service-tenant": "workspace:*",
     "@objectstack/spec": "workspace:*",
-    "@objectstack/studio": "workspace:*",
     "hono": "^4.12.19",
     "pg": "^8.21.0"
   },

apps/cloud/vercel.json

@@ -17,7 +17,7 @@
   },
   "headers": [
     {
-      "source": "/_studio/assets/(.*)",
+      "source": "/_console/assets/(.*)",
       "headers": [
         { "key": "Cache-Control", "value": "public, max-age=31536000, immutable" }
       ]
@@ -30,13 +30,13 @@
     }
   ],
   "redirects": [
-    { "source": "/", "destination": "/_studio/", "permanent": false },
-    { "source": "/_studio", "destination": "/_studio/", "permanent": false },
+    { "source": "/", "destination": "/_console/", "permanent": false },
+    { "source": "/_console", "destination": "/_console/", "permanent": false },
     { "source": "/_account", "destination": "/_account/", "permanent": false }
   ],
   "rewrites": [
     { "source": "/api/:path*", "destination": "/api/[[...route]]" },
-    { "source": "/_studio/:path*", "destination": "/_studio/index.html" },
+    { "source": "/_console/:path*", "destination": "/_console/index.html" },
     { "source": "/_account/:path*", "destination": "/_account/index.html" }
   ]
 }

apps/cloud/wrangler.toml

@@ -45,7 +45,7 @@ compatibility_flags = ["nodejs_compat"]
 # rebuild + re-push to ship a new version, then run `wrangler deploy`.
 [[containers]]
 class_name = "CloudContainer"
-image = "registry.cloudflare.com/2846eb40a60f4738e292b90dcd8cce10/objectstack-cloud:27096116"
+image = "registry.cloudflare.com/2846eb40a60f4738e292b90dcd8cce10/objectstack-cloud:0c45a13b"
 max_instances = 3
 instance_type = "standard-1"
 

apps/objectos/wrangler.toml

@@ -44,7 +44,7 @@ compatibility_flags = ["nodejs_compat"]
 # rebuild + re-push to ship a new version, then run `wrangler deploy`.
 [[containers]]
 class_name = "ObjectOSContainer"
-image = "registry.cloudflare.com/2846eb40a60f4738e292b90dcd8cce10/objectos:27096116"
+image = "registry.cloudflare.com/2846eb40a60f4738e292b90dcd8cce10/objectos:0c45a13b"
 max_instances = 5
 instance_type = "standard-1"
 

packages/cli/src/commands/serve.ts

@@ -1106,18 +1106,26 @@ export default class Serve extends Command {
         const consolePath = consoleEnabled ? resolveConsolePath() : null;
         const consoleWillMount = !!(consolePath && hasConsoleDist(consolePath));
 
-        const studioPath = resolveStudioPath();
-        if (!studioPath) {
-          console.warn(chalk.yellow(`  ⚠ @objectstack/studio not found — skipping UI`));
-        } else if (hasStudioDist(studioPath)) {
-          const distPath = path.join(studioPath, 'dist');
-          await kernel.use(createStudioStaticPlugin(distPath, {
-            isDev,
-            rootRedirect: !consoleWillMount,
-          }));
-          trackPlugin('StudioUI');
-        } else {
-          console.warn(chalk.yellow(`  ⚠ Studio dist not found — run "pnpm --filter @objectstack/studio build" first`));
+        // The `OS_DISABLE_STUDIO=1` env var lets a host (e.g. apps/cloud,
+        // which is a pure control plane) opt out of the Studio designer
+        // entirely while keeping Account/Console. Studio is meaningless
+        // when there are no per-project kernels in the same process.
+        const studioEnabled = process.env.OS_DISABLE_STUDIO !== '1';
+
+        if (studioEnabled) {
+          const studioPath = resolveStudioPath();
+          if (!studioPath) {
+            console.warn(chalk.yellow(`  ⚠ @objectstack/studio not found — skipping UI`));
+          } else if (hasStudioDist(studioPath)) {
+            const distPath = path.join(studioPath, 'dist');
+            await kernel.use(createStudioStaticPlugin(distPath, {
+              isDev,
+              rootRedirect: !consoleWillMount,
+            }));
+            trackPlugin('StudioUI');
+          } else {
+            console.warn(chalk.yellow(`  ⚠ Studio dist not found — run "pnpm --filter @objectstack/studio build" first`));
+          }
         }
 
         // ── Account portal ─────────────────────────────────────────

packages/plugins/plugin-audit/src/audit-plugin.ts

@@ -21,6 +21,7 @@ export class AuditPlugin implements Plugin {
   dependencies = ['com.objectstack.engine.objectql'];
 
   async init(ctx: PluginContext): Promise<void> {
+    process.stderr.write('[AuditPlugin] init() called\n');
     // Register audit system objects via the manifest service.
     ctx.getService<{ register(m: any): void }>('manifest').register({
       id: 'com.objectstack.audit',
@@ -37,20 +38,29 @@ export class AuditPlugin implements Plugin {
   }
 
   async start(ctx: PluginContext): Promise<void> {
+    process.stderr.write('[AuditPlugin] start() called, registering kernel:ready hook\n');
     // ObjectQL engine is only resolvable after the kernel is ready.
     ctx.hook('kernel:ready', async () => {
+      process.stderr.write('[AuditPlugin] kernel:ready fired\n');
       let engine: IDataEngine | null = null;
       try {
         engine = ctx.getService<IDataEngine>('objectql');
-      } catch {
+        process.stderr.write(`[AuditPlugin] objectql engine = ${engine ? 'OK' : 'null'} registerHook? ${typeof (engine as any)?.registerHook}\n`);
+      } catch (err) {
+        process.stderr.write(`[AuditPlugin] getService(objectql) threw: ${(err as Error).message}\n`);
         // Fallback alias used in some kernels.
-        try { engine = ctx.getService<IDataEngine>('data'); } catch { /* ignore */ }
+        try {
+          engine = ctx.getService<IDataEngine>('data');
+          process.stderr.write(`[AuditPlugin] data engine = ${engine ? 'OK' : 'null'}\n`);
+        } catch { /* ignore */ }
       }
       if (!engine) {
+        process.stderr.write('[AuditPlugin] NO ENGINE — bailing\n');
         ctx.logger.warn('AuditPlugin: ObjectQL engine not available — audit writers NOT installed');
         return;
       }
       installAuditWriters(engine as any, this.name);
+      process.stderr.write('[AuditPlugin] writers installed\n');
       ctx.logger.info('AuditPlugin: audit + activity writers installed');
     });
   }

packages/plugins/plugin-audit/src/audit-writers.ts

@@ -155,12 +155,13 @@ export function installAuditWriters(engine: any, packageId = 'com.objectstack.au
    * audit failures.
    */
   const writeAudit = async (ctx: HookContext) => {
+    process.stderr.write(`[AuditWriter] hook event=${ctx.event} object=${ctx.object} hasApi=${!!(ctx as any).api} hasSudo=${!!(ctx as any).api?.sudo}\n`);
     if (SKIP_OBJECTS.has(ctx.object)) return;
     const action = actionFor(ctx.event);
     if (!action) return;
 
     const api: any = (ctx as any).api;
-    if (!api?.sudo) return;
+    if (!api?.sudo) { process.stderr.write(`[AuditWriter] BAIL no api.sudo for ${ctx.object}\n`); return; }
 
     const after: any = ctx.result;
     const before: any = (ctx as any).__previous ?? (ctx as any).previous ?? null;
@@ -235,6 +236,7 @@ export function installAuditWriters(engine: any, packageId = 'com.objectstack.au
     try {
       const sys = api.sudo();
       await sys.object('sys_audit_log').create(auditRow);
+      process.stderr.write(`[AuditWriter] WROTE audit_log object=${ctx.object} action=${action}\n`);
       await sys.object('sys_activity').create(activityRow);
       // M10.8: write per-user inbox notifications. Best-effort; never
       // throws into the user-facing CRUD path. Covers two common cases:
@@ -257,6 +259,7 @@ export function installAuditWriters(engine: any, packageId = 'com.objectstack.au
         tenantId: tenantId ?? null,
       });
     } catch (err) {
+      process.stderr.write(`[AuditWriter] WRITE FAILED: ${String((err as any)?.message ?? err)}\n`);
       // Log via engine logger if available, but never throw.
       try { (engine as any).logger?.warn?.('Audit write failed', { object: ctx.object, action, err: String((err as any)?.message ?? err) }); } catch {}
     }

packages/services/service-cloud/src/cloud-stack.ts

@@ -16,7 +16,7 @@ import { resolve as resolvePath } from 'node:path';
 import type * as Contracts from '@objectstack/spec/contracts';
 import type { ProjectTemplate } from './multi-project-plugin.js';
 import { createControlPlanePlugins } from './control-plane-preset.js';
-import { createStudioRuntimeConfigPlugin, createTemplatesRoutePlugin } from './multi-project-plugins.js';
+import { createTemplatesRoutePlugin } from './multi-project-plugins.js';
 import { createCloudArtifactApiPlugin } from './cloud-artifact-api-plugin.js';
 import { resolveDefaultDataDir } from './data-dir.js';
 import { resolveStoragePluginFromEnv, resolveStorageFromEnv } from './storage-env.js';
@@ -161,7 +161,6 @@ export async function createCloudStack(config: CloudStackConfig): Promise<{
             baseUrl,
         }),
         ...(storageEnv.plugin ? [storageEnv.plugin] : []),
-        createStudioRuntimeConfigPlugin({ apiPrefix }),
         createTemplatesRoutePlugin(templateList, { apiPrefix }),
         createCloudArtifactApiPlugin({ controlDriverPromise, apiPrefix }),
     ];