Add AuthPlugin to demo/mock environment to restore Setup App menu

- Import and register AuthPlugin in createKernel.ts before SetupPlugin
- Provide mock auth config for demo environment (secret + baseUrl)
- Ensure correct plugin order to avoid 'sys' namespace collision
- Remove duplicate setupAppConfig registration from browser.ts, server.ts, and test files
- Replace setupAppConfig with AuthPlugin + SetupPlugin in console config
- All i18n tests pass successfully

Agent-Logs-Url: https://github.com/objectstack-ai/objectui/sessions/ad7046f8-9652-4470-b9fa-c1dbdb78ab9a

Co-authored-by: xuyushun441-sys <255036401+xuyushun441-sys@users.noreply.github.com>

Author: Claude

apps/console/objectstack.config.ts

@@ -4,7 +4,7 @@ const require = createRequire(import.meta.url);
 // @ts-ignore
 globalThis.require = require;
 
-import { sharedConfig, appConfigs, setupAppConfig } from './objectstack.shared';
+import { sharedConfig, appConfigs } from './objectstack.shared';
 
 // @ts-ignore
 import * as MSWPluginPkg from '@objectstack/plugin-msw';
@@ -13,6 +13,10 @@ import * as ObjectQLPluginPkg from '@objectstack/objectql';
 // @ts-ignore
 import * as HonoServerPluginPkg from '@objectstack/plugin-hono-server';
 // @ts-ignore
+import * as AuthPluginPkg from '@objectstack/plugin-auth';
+// @ts-ignore
+import * as SetupPluginPkg from '@objectstack/plugin-setup';
+// @ts-ignore
 import * as DriverMemoryPkg from '@objectstack/driver-memory';
 // @ts-ignore
 import * as RuntimePkg from '@objectstack/runtime';
@@ -25,6 +29,8 @@ const InMemoryDriver = DriverMemoryPkg.InMemoryDriver || (DriverMemoryPkg as any
 const DriverPlugin = RuntimePkg.DriverPlugin || (RuntimePkg as any).default?.DriverPlugin || (RuntimePkg as any).default;
 const AppPlugin = RuntimePkg.AppPlugin || (RuntimePkg as any).default?.AppPlugin || (RuntimePkg as any).default;
 const HonoServerPlugin = HonoServerPluginPkg.HonoServerPlugin || (HonoServerPluginPkg as any).default?.HonoServerPlugin || (HonoServerPluginPkg as any).default;
+const AuthPlugin = AuthPluginPkg.AuthPlugin || (AuthPluginPkg as any).default?.AuthPlugin || (AuthPluginPkg as any).default;
+const SetupPlugin = SetupPluginPkg.SetupPlugin || (SetupPluginPkg as any).default?.SetupPlugin || (SetupPluginPkg as any).default;
 const createMemoryI18n = CorePkg.createMemoryI18n || (CorePkg as any).default?.createMemoryI18n;
 
 import { ConsolePlugin } from './plugin';
@@ -70,15 +76,23 @@ class MemoryI18nPlugin {
  *
  * MemoryI18nPlugin MUST come before AppPlugin so that the i18n service
  * exists when AppPlugin.start() → loadTranslations() runs.
+ *
+ * AuthPlugin before SetupPlugin: both use namespace 'sys', and the
+ * ObjectQL registry requires the package that owns objects (AuthPlugin →
+ * com.objectstack.system) to register first.
  */
 const plugins: any[] = [
     new MemoryI18nPlugin(),
     new ObjectQLPlugin(),
     new DriverPlugin(new InMemoryDriver(), 'memory'),
     // Each example stack loaded as an independent AppPlugin
     ...appConfigs.map((config: any) => new AppPlugin(config)),
-    // Setup App registered via AppPlugin so ObjectQLPlugin discovers it
-    new AppPlugin(setupAppConfig),
+    // Auth & Setup plugins (replaces setupAppConfig)
+    new AuthPlugin({
+      secret: process.env.AUTH_SECRET || 'objectui-server-secret',
+      baseUrl: process.env.BASE_URL || 'http://localhost:3000',
+    }),
+    new SetupPlugin(),
     new HonoServerPlugin({ port: 3000 }),
     new ConsolePlugin(),
 ];

apps/console/src/__tests__/i18n-translations.test.ts

@@ -13,7 +13,7 @@ import { describe, it, expect, beforeAll, afterAll } from 'vitest';
 import { setupServer } from 'msw/node';
 import { createKernel, type KernelResult } from '../mocks/createKernel';
 import { createAuthHandlers } from '../mocks/authHandlers';
-import { appConfigs, setupAppConfig } from '../../objectstack.shared';
+import { appConfigs } from '../../objectstack.shared';
 import { crmLocales } from '@object-ui/example-crm';
 
 // Expected values from the CRM i18n bundles — avoid hard-coding in assertions
@@ -26,7 +26,8 @@ describe('i18n translations pipeline', () => {
 
   beforeAll(async () => {
     result = await createKernel({
-      appConfigs: [...appConfigs, setupAppConfig],
+      // SetupPlugin is registered in createKernel, so no need for setupAppConfig here
+      appConfigs: [...appConfigs],
       persistence: false,
       mswOptions: {
         enableBrowser: false,

apps/console/src/mocks/browser.ts

@@ -16,7 +16,7 @@ import { setupWorker } from 'msw/browser';
 import { ObjectKernel } from '@objectstack/runtime';
 import { InMemoryDriver } from '@objectstack/driver-memory';
 import type { MSWPlugin } from '@objectstack/plugin-msw';
-import { appConfigs, setupAppConfig, customReportsConfig } from '../../objectstack.shared';
+import { appConfigs, customReportsConfig } from '../../objectstack.shared';
 import { createKernel } from './createKernel';
 import { createAuthHandlers } from './authHandlers';
 
@@ -43,7 +43,8 @@ export async function startMockServer() {
   if (import.meta.env.DEV) console.log('[MSW] Starting ObjectStack Runtime (Browser Mode)...');
 
   const result = await createKernel({
-    appConfigs: [...appConfigs, setupAppConfig, customReportsConfig],
+    // SetupPlugin is registered in createKernel, so no need for setupAppConfig here
+    appConfigs: [...appConfigs, customReportsConfig],
     mswOptions: {
       enableBrowser: false,
       baseUrl: '/api/v1',

apps/console/src/mocks/createKernel.ts

@@ -17,6 +17,7 @@ import { ObjectQLPlugin } from '@objectstack/objectql';
 import { InMemoryDriver, MemoryAnalyticsService } from '@objectstack/driver-memory';
 import { MSWPlugin } from '@objectstack/plugin-msw';
 import type { MSWPluginOptions } from '@objectstack/plugin-msw';
+import { AuthPlugin } from '@objectstack/plugin-auth';
 import { SetupPlugin } from '@objectstack/plugin-setup';
 import type { Cube } from '@objectstack/spec/data';
 import { http, HttpResponse } from 'msw';
@@ -317,6 +318,15 @@ export async function createKernel(options: KernelOptions): Promise<KernelResult
   for (const config of configs) {
     await kernel.use(new AppPlugin(config));
   }
+  // AuthPlugin before SetupPlugin: both use namespace 'sys', and the
+  // ObjectQL registry requires the package that owns objects (AuthPlugin →
+  // com.objectstack.system) to register first.
+  await kernel.use(new AuthPlugin({
+    secret: 'objectui-demo-secret',
+    baseUrl: 'http://localhost:5173', // Vite dev server default
+  }) as unknown as Plugin);
+  // SetupPlugin registers setupNav during init and the merged Setup app
+  // during start. Must come after AuthPlugin to avoid sys namespace collision.
   await kernel.use(new SetupPlugin() as unknown as Plugin);
 
   // Register MemoryAnalyticsService so that HttpDispatcher can serve

apps/console/src/mocks/server.ts

@@ -16,7 +16,7 @@ import { ObjectKernel } from '@objectstack/runtime';
 import { InMemoryDriver } from '@objectstack/driver-memory';
 import { setupServer } from 'msw/node';
 import type { MSWPlugin } from '@objectstack/plugin-msw';
-import { appConfigs, setupAppConfig, customReportsConfig } from '../../objectstack.shared';
+import { appConfigs, customReportsConfig } from '../../objectstack.shared';
 import { createKernel } from './createKernel';
 import { createAuthHandlers } from './authHandlers';
 
@@ -34,7 +34,8 @@ export async function startMockServer() {
   console.log('[MSW] Starting ObjectStack Runtime (Test Mode)...');
 
   const result = await createKernel({
-    appConfigs: [...appConfigs, setupAppConfig, customReportsConfig],
+    // SetupPlugin is registered in createKernel, so no need for setupAppConfig here
+    appConfigs: [...appConfigs, customReportsConfig],
     persistence: false,
     mswOptions: {
       enableBrowser: false,