feat(cli): auto-wire marketplace from @objectstack/cloud-connection when a cloud URL resolves

[os-zhuang]

What

The framework CLI (objectstack serve/dev/start) auto-wires the marketplace again — MarketplaceProxyPlugin + MarketplaceInstallLocalPlugin + the same-origin cloud-connection surface + RuntimeConfigPlugin (single-env, installLocal: true) — gated on resolveCloudUrl() being truthy. Imported from the open @objectstack/cloud-connection package.

Why

• ADR-0006 Phase 4 removed the CLI's marketplace plugins because they were duplicate copies living in @objectstack/runtime.
• ADR-0008 then open-sourced the canonical client into the Apache-2.0 @objectstack/cloud-connection package (framework-side).
• After 0008 there is no longer a cloud-only copy to duplicate, so the CLI can wire the single canonical open implementation without crossing the open-core boundary. The serve.ts comment claiming the canonical impl is cloud-only (@objectstack/objectos-runtime) was stale.

The concrete bug this fixes

objectstack start empty-boot (OS_BOOT_EMPTY=1) advertises "boot an empty kernel against your marketplace" — but with no config and no artifact, there is no host to carry the marketplace wiring, so the only place it can come from is the CLI itself. Post-ADR-0006 the CLI mounted nothing, so empty-boot was silently marketless. This restores it.

Behavior

Scenario	Result
OS_CLOUD_URL resolves	proxy + install-local + cloud-connection + runtime-config mounted; Browse Marketplace + Installed Apps nav reappear (plugins self-register their Setup nav bundles)
OS_CLOUD_URL=off / unset	nothing mounts — vanilla marketplace-less objectstack dev preserved
Runtime/host-kernel mode	skipped (the cloud objectos-stack wires its own proxy on the host kernel; detected via ObjectOSEnvironmentPlugin, mirroring the existing AuthPlugin guard — avoids double-mount)

Changes

• packages/cli/package.json — add @objectstack/cloud-connection: workspace:*
• packages/cli/src/commands/serve.ts — conditional wiring block (replaces the ADR-0006 "REMOVED" comment)
• .changeset/cli-marketplace-autowire.md — minor

Verification

• tsc -p tsconfig.build.json (real typecheck with declarations) — 53/53 pass, no errors in the changed block.
• Lint not runnable locally (no eslint binary in repo node_modules); code mirrors the existing 5c/5d auto-inject blocks.

🤖 Generated with Claude Code

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
spec	Building	Preview, Comment	Jun 17, 2026 5:51am

[github-actions]

📓 Docs Drift Check

This PR changes 1 package(s): @objectstack/cli.

15 hand-written doc(s) reference the affected code and may need an implementation-accuracy re-verification:

• content/docs/concepts/cloud-artifact-api.mdx (via packages/cli)
• content/docs/concepts/implementation-status.mdx (via @objectstack/cli)
• content/docs/concepts/packages.mdx (via @objectstack/cli)
• content/docs/getting-started/cli.mdx (via @objectstack/cli)
• content/docs/getting-started/quick-start.mdx (via @objectstack/cli)
• content/docs/guides/authentication.mdx (via @objectstack/cli)
• content/docs/guides/client-sdk.mdx (via @objectstack/cli)
• content/docs/guides/hook-bodies.mdx (via packages/cli)
• content/docs/guides/packages.mdx (via @objectstack/cli)
• content/docs/guides/project-scoping.mdx (via @objectstack/cli)
• content/docs/guides/runtime-services/data-service.mdx (via packages/cli)
• content/docs/guides/runtime-services/index.mdx (via packages/cli)
• content/docs/guides/skills.mdx (via packages/cli)
• content/docs/protocol/objectos/plugin-spec.mdx (via @objectstack/cli)
• content/docs/protocol/objectos/realtime-protocol.mdx (via @objectstack/cli)

Advisory only. To re-verify, run the docs-accuracy-audit workflow scoped to these files:
node scripts/docs-audit/affected-docs.mjs origin/main → pass the list as args.docs.