chore: version packages

[github-actions]

This PR was opened by the Changesets release GitHub action. When you're ready to do a release, you can merge this and the packages will be published to npm automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to main, this PR will be updated.

Releases

@objectstack/cli@4.1.0

Minor Changes

• 96fb108: Artifact-first boot: objectstack start (and objectstack serve) now boot directly from a compiled dist/objectstack.json when no objectstack.config.ts is present.

  • @objectstack/runtime exports createDefaultHostConfig() and resolveDefaultArtifactPath() — a standalone-only default host that wraps createStandaloneStack() and surfaces the artifact's requires / objects / manifest. No dependency on @objectstack/service-cloud.
  • objectstack start accepts OS_ARTIFACT_PATH as a file path or an http(s):// URL. New flags --artifact, --database, --database-driver, --database-auth-token, --auth-secret, --project-id, --port let you specify all runtime conditions on the command line (each overrides the matching env var).
  • objectstack dev accepts the same runtime-override flags. When --artifact is supplied, the auto-compile step is skipped and the dev server boots the supplied artifact directly — no objectstack.config.ts required in cwd.
  • objectstack start no longer mounts Studio / Account / Console by default — those are dev/admin surfaces. Pass --ui to opt back in.
  • objectstack serve falls back to the default host config when the config file is missing but an artifact is resolvable.
  • apps/objectos (cloud / multi-project) is unchanged.

• 8cbc768: CLI no longer hard-depends on @objectstack/service-cloud. The control plane
  (apps/cloud + @objectstack/service-cloud) and tenant runtime (apps/objectos)
  have been split into a private companion repo objectstack-ai/cloud. Framework
  remains pure open-core.

  User impact:

  • os serve --mode=cloud keeps working in cloud-aware distributions — the CLI
    loads @objectstack/service-cloud via dynamic import() with try/catch and
    surfaces a clear "install the cloud distribution" hint when absent.
  • Root pnpm dev / pnpm start / pnpm doctor scripts in this repo are
    removed (they were thin filters of @objectstack/objectos, which no longer
    lives here). For a runnable local stack, use one of the examples
    (pnpm --filter @example/app-crm dev).

Patch Changes

• Updated dependencies [2108c30]
• Updated dependencies [96fb108]
• Updated dependencies [23db640]
• Updated dependencies [5683206]
• Updated dependencies [70db902]
• Updated dependencies [70db902]
• Updated dependencies [d3b455f]
• Updated dependencies [0cc0374]
• Updated dependencies [5b878d9]
• Updated dependencies [f0b3972]
• Updated dependencies [0e63f2f]
  • @objectstack/spec@4.1.0
  • @objectstack/runtime@4.1.0
  • @objectstack/driver-sql@4.1.0
  • @objectstack/objectql@4.1.0
  • @objectstack/plugin-security@4.1.0
  • @objectstack/client@4.1.0
  • @objectstack/core@4.1.0
  • @objectstack/driver-memory@4.1.0
  • @objectstack/driver-mongodb@4.1.0
  • @objectstack/driver-turso@4.1.0
  • @objectstack/plugin-approvals@4.0.1
  • @objectstack/plugin-audit@4.1.0
  • @objectstack/plugin-auth@4.1.0
  • @objectstack/plugin-email@4.0.1
  • @objectstack/plugin-hono-server@4.1.0
  • @objectstack/plugin-mcp-server@4.1.0
  • @objectstack/plugin-reports@4.0.1
  • @objectstack/plugin-sharing@4.0.1
  • @objectstack/rest@4.1.0
  • @objectstack/service-ai@4.1.0
  • @objectstack/service-analytics@4.1.0
  • @objectstack/service-automation@4.1.0
  • @objectstack/service-cache@4.1.0
  • @objectstack/service-feed@4.1.0
  • @objectstack/service-job@4.1.0
  • @objectstack/service-package@4.1.0
  • @objectstack/service-queue@4.1.0
  • @objectstack/service-realtime@4.1.0
  • @objectstack/service-settings@0.1.1
  • @objectstack/service-storage@4.1.0

@objectstack/metadata@4.1.0

Minor Changes

• 1234920: v3.1 — Runtime controls & read-through cache.

  • Generic LRUCache (lazy TTL, promote-on-get, size cap, hits/misses/hitRate stats) wired into DatabaseLoader.{load,loadMany,list,stat} with write invalidation. Configured via cache.databaseLoader.
  • MetadataPluginConfig.bootstrap modes: eager (default), lazy, artifact-only. artifact-only requires artifactSource.mode = 'local-file'.
  • MetadataManagerConfig.persistence two-axis write gates: writable (gates register()) and overlayWritable (gates saveOverlay()). Both default true; either becomes a throw under validation.throwOnError.
  • Single-source schema discipline: canonical MetadataManagerConfigSchema / MetadataFallbackStrategySchema live in kernel/metadata-loader.zod.ts and are re-exported from system/metadata-persistence.zod.ts.

Patch Changes

• Updated dependencies [2108c30]
• Updated dependencies [23db640]
  • @objectstack/spec@4.1.0
  • @objectstack/core@4.1.0
  • @objectstack/platform-objects@4.1.0
  • @objectstack/types@4.1.0

@objectstack/objectql@4.1.0

Minor Changes

• f0b3972: Driver-level tenant isolation for objects with organization_id.

  SqlDriver now auto-applies a WHERE organization_id = :tenantId predicate on every read/update/delete and auto-injects the column on insert when the caller passes options.tenantId and the object schema declares an organization_id field. bulkCreate, bulkDelete, updateMany, deleteMany, count and aggregate are all scoped.

  ObjectQL's engine now threads ExecutionContext.tenantId into the driver options for every CRUD entry point (including expandRelatedRecords), so a tenant-scoped session can no longer cross tenants — even through lookup expansion or count fallbacks.

  Backward compatible: callers that omit tenantId (system tasks, seed scripts) keep getting unscoped behaviour. Explicit organization_id on an insert row always wins over the contextual tenantId so admin tooling can still target a specific tenant.

  13 new tests in sql-driver-tenant-scope.test.ts verify cross-tenant find/findOne/update/delete/count/bulkCreate/updateMany/deleteMany isolation, the unscoped admin path, and that global objects (no organization_id) are not scoped.

Patch Changes

• 5683206: Document the tenant-isolation bypass on raw execute() (both SqlDriver.execute() and engine.execute()). The behaviour is unchanged — execute() has always passed commands through verbatim — but the JSDoc now spells out the security contract so callers know they must inline WHERE organization_id = ? themselves or restrict raw execution to genuinely global statements (migrations, control-plane tables).

• 0e63f2f: Declarative tenant scoping + audit warn for missing tenantId.

  SqlDriver now reads obj.tenancy.tenantField first when picking the tenant column for an object, falling back to the implicit organization_id detection so legacy objects keep working without a spec migration. Set tenancy: { enabled: true, strategy: 'shared', tenantField: 'workspace_id' } on any object to use a custom column.

  Writes (create, update, delete, bulkCreate, bulkDelete, updateMany, deleteMany, upsert) that target a tenant-scoped object without options.tenantId now emit one [tenant-audit] warning per {object}:{op} so missing-context bugs surface in CI/logs instead of silently writing globally. The engine auto-silences when ExecutionContext.isSystem === true (boot-time seeds, kernel mirrors). Callers can opt out per-call with options.bypassTenantAudit = true or globally with OS_TENANT_AUDIT=0.

  Driver README now documents the full scope/bypass matrix and the audit warning.

  Three new tests cover the declared-tenant-field path, the audit throttle, and the bypass flag.

• Updated dependencies [2108c30]

• Updated dependencies [23db640]

  • @objectstack/spec@4.1.0
  • @objectstack/core@4.1.0
  • @objectstack/formula@4.1.0
  • @objectstack/types@4.1.0

@objectstack/driver-sql@4.1.0

Minor Changes

• 0cc0374: feat(driver-sql): tenant-isolated auto_number sequences backed by a persistent counter table

  Breaking nothing; new behaviour is opt-in via object schema.

  The SQL driver now generates auto_number / autonumber field values via a
  dedicated _objectstack_sequences table keyed by
  (object, tenant_id, field) instead of scanning the data table for the
  current MAX on every insert.

  Highlights:

  • Tenant isolation. Objects with an organization_id field get a
    separate counter per organization. Two tenants creating contracts at
    the same time both legitimately observe CTR-0001, CTR-0002, … in
    their own namespaces — they no longer interleave or skip numbers.
  • Tenant resolution. Source order: row[organization_id] →
    DriverOptions.tenantId → __global__ sentinel for org-less objects
    (e.g. setup-side singletons share one counter).
  • Bootstrap from existing data. On the first reservation in a new
    (object, tenant, field) tuple, the driver seeds last_value from the
    current per-tenant MAX so legacy/seeded records keep their position
    and downstream inserts pick up monotonically (gaps are tolerated).
  • Atomic increment. Each reservation runs in a transaction with
    SELECT … FOR UPDATE (where the dialect supports it) and a single
    UPDATE of last_value. Tested with 25 concurrent inserts in one
    tenant producing 25 distinct sequence values.
  • Caller overrides honoured. A row that already has an explicit
    value for the auto_number field is left untouched, and the sequence
    bootstrap respects that value so future reservations advance past it.
  • Dual spelling. Both type: 'auto_number' (snake) and
    type: 'autonumber' (the spec factory output) are recognised.

  Migration notes:

  • The first time the driver handles an auto_number insert, it creates
    the _objectstack_sequences table automatically — no manual DDL.
  • Pre-existing data is not renumbered. Gaps introduced by older
    cross-tenant logic (where a tenant's number could "jump" because it
    inherited another tenant's MAX) remain in place; subsequent inserts
    continue from MAX + 1 in the affected tenant.

• 5b878d9: Generate auto_number / autonumber field values on insert. The driver
  parses the field's format template (e.g. CTR-{0000}) to extract the
  prefix and pad-width, then scans existing rows with the same prefix and
  emits prefix + padded(maxN + 1) for any row that omits the field.

  Note: per-call MAX+1 — not atomic across concurrent writers. Fine for
  seed-data and low-write demo loads; production deployments should layer
  a dedicated sequence table.

• f0b3972: Driver-level tenant isolation for objects with organization_id.

  SqlDriver now auto-applies a WHERE organization_id = :tenantId predicate on every read/update/delete and auto-injects the column on insert when the caller passes options.tenantId and the object schema declares an organization_id field. bulkCreate, bulkDelete, updateMany, deleteMany, count and aggregate are all scoped.

  ObjectQL's engine now threads ExecutionContext.tenantId into the driver options for every CRUD entry point (including expandRelatedRecords), so a tenant-scoped session can no longer cross tenants — even through lookup expansion or count fallbacks.

  Backward compatible: callers that omit tenantId (system tasks, seed scripts) keep getting unscoped behaviour. Explicit organization_id on an insert row always wins over the contextual tenantId so admin tooling can still target a specific tenant.

  13 new tests in sql-driver-tenant-scope.test.ts verify cross-tenant find/findOne/update/delete/count/bulkCreate/updateMany/deleteMany isolation, the unscoped admin path, and that global objects (no organization_id) are not scoped.

• 0e63f2f: Declarative tenant scoping + audit warn for missing tenantId.

  SqlDriver now reads obj.tenancy.tenantField first when picking the tenant column for an object, falling back to the implicit organization_id detection so legacy objects keep working without a spec migration. Set tenancy: { enabled: true, strategy: 'shared', tenantField: 'workspace_id' } on any object to use a custom column.

  Writes (create, update, delete, bulkCreate, bulkDelete, updateMany, deleteMany, upsert) that target a tenant-scoped object without options.tenantId now emit one [tenant-audit] warning per {object}:{op} so missing-context bugs surface in CI/logs instead of silently writing globally. The engine auto-silences when ExecutionContext.isSystem === true (boot-time seeds, kernel mirrors). Callers can opt out per-call with options.bypassTenantAudit = true or globally with OS_TENANT_AUDIT=0.

  Driver README now documents the full scope/bypass matrix and the audit warning.

  Three new tests cover the declared-tenant-field path, the audit throttle, and the bypass flag.

Patch Changes

• 5683206: Document the tenant-isolation bypass on raw execute() (both SqlDriver.execute() and engine.execute()). The behaviour is unchanged — execute() has always passed commands through verbatim — but the JSDoc now spells out the security contract so callers know they must inline WHERE organization_id = ? themselves or restrict raw execution to genuinely global statements (migrations, control-plane tables).
• Updated dependencies [2108c30]
• Updated dependencies [23db640]
  • @objectstack/spec@4.1.0
  • @objectstack/core@4.1.0

@objectstack/plugin-security@4.1.0

Minor Changes

• d3b455f: Add server-side Field-Level Security write enforcement. Client-side
  ObjectForm / inline-grid already hides non-editable fields, but the
  SecurityPlugin middleware previously only enforced FLS on read
  (maskResults on find/findOne). Insert and update operations could
  target any field — a hand-crafted POST bypassed FLS entirely.

  The middleware now runs FieldMasker.detectForbiddenWrites on every
  insert / update payload (single record or bulk array) and throws
  PermissionDeniedError (HTTP 403) when the payload references a field
  the caller is not permitted to edit. The offending field list is
  exposed via details.forbiddenFields for actionable client error UI.

  Allow-list semantics: only fields explicitly enumerated in a
  permission set's fields map are constrained. System operations
  (ExecutionContext.isSystem) continue to bypass the check.

  Why throw vs. silently stripping: silent strip hides the boundary
  from honest clients (partial-save confusion) AND gives probing clients
  no signal that the field exists. Throwing makes the boundary
  observable in both directions.

  Also exposes FieldMasker.detectForbiddenWrites(data, fieldPermissions)
  as a standalone helper for callers that want to do the check
  out-of-band (e.g., adapters that strip-then-warn instead of fail-closed).

Patch Changes

• Updated dependencies [2108c30]
• Updated dependencies [23db640]
  • @objectstack/spec@4.1.0
  • @objectstack/core@4.1.0
  • @objectstack/platform-objects@4.1.0

@objectstack/runtime@4.1.0

Minor Changes

• 96fb108: Artifact-first boot: objectstack start (and objectstack serve) now boot directly from a compiled dist/objectstack.json when no objectstack.config.ts is present.

  • @objectstack/runtime exports createDefaultHostConfig() and resolveDefaultArtifactPath() — a standalone-only default host that wraps createStandaloneStack() and surfaces the artifact's requires / objects / manifest. No dependency on @objectstack/service-cloud.
  • objectstack start accepts OS_ARTIFACT_PATH as a file path or an http(s):// URL. New flags --artifact, --database, --database-driver, --database-auth-token, --auth-secret, --project-id, --port let you specify all runtime conditions on the command line (each overrides the matching env var).
  • objectstack dev accepts the same runtime-override flags. When --artifact is supplied, the auto-compile step is skipped and the dev server boots the supplied artifact directly — no objectstack.config.ts required in cwd.
  • objectstack start no longer mounts Studio / Account / Console by default — those are dev/admin surfaces. Pass --ui to opt back in.
  • objectstack serve falls back to the default host config when the config file is missing but an artifact is resolvable.
  • apps/objectos (cloud / multi-project) is unchanged.

• 70db902: Add production observability primitives. createDispatcherPlugin now
  exposes an observability config that auto-instruments every mounted
  route with:

  • Request-id propagation: X-Request-Id echo + req.requestId (honors
    incoming header when well-formed, mints req_<uuid> otherwise).
  • http_requests_total{method,route,status} counter.
  • http_request_duration_ms{method,route} histogram.
  • http_request_errors_total{method,route} counter.
  • Error reporter call for 5xx (4xx are intentionally tracked via
    metrics only, not reported, to keep APM signal:noise high).

  All defaults are no-op (zero overhead). Hosts plug their own
  MetricsRegistry (Prometheus / OTel) and ErrorReporter (Sentry /
  Datadog) — see docs/OBSERVABILITY.md for adapter recipes and the
  go-live checklist.

  Standalone primitives also exported for adapter-layer use:
  extractRequestId, resolveRequestId, parseTraceparent,
  formatTraceparent, InMemoryMetricsRegistry,
  InMemoryErrorReporter, instrumentRouteHandler.

• 70db902: Add production HTTP hardening primitives. createDispatcherPlugin now
  sends conservative security response headers by default
  (CSP / X-Content-Type-Options / X-Frame-Options / Referrer-Policy /
  Permissions-Policy / Cross-Origin-Resource-Policy). HSTS is opt-in.

  Caller can disable with securityHeaders: false (e.g., when an upstream
  reverse proxy already injects them) or customize per-header via
  SecurityHeadersOptions.

  Also exports a standalone token-bucket RateLimiter with a pluggable
  RateLimitStore interface (in-memory default; trivially backed by
  Redis) and curated DEFAULT_RATE_LIMITS for auth / write / read buckets.
  The limiter is NOT auto-wired into the dispatcher — adapter-layer
  wire-up (Fastify / Hono / Express) is recommended for proper IP/key
  extraction; see docs/HARDENING.md for recipes.

Patch Changes

• Updated dependencies [2108c30]
• Updated dependencies [23db640]
• Updated dependencies [d3b455f]
  • @objectstack/spec@4.1.0
  • @objectstack/plugin-security@4.1.0
  • @objectstack/core@4.1.0
  • @objectstack/formula@4.1.0
  • @objectstack/plugin-auth@4.1.0
  • @objectstack/rest@4.1.0
  • @objectstack/service-i18n@4.1.0
  • @objectstack/types@4.1.0

@objectstack/spec@4.1.0

Minor Changes

• 23db640: record:highlights now accepts richer field items.

  Each entry in fields may be either a bare field name (backward compatible) or an object { name, label?, icon?, type? } that lets the schema override the displayed label, attach a Lucide icon, or force a specific cell renderer without editing the underlying object metadata. Useful when the same field appears in multiple highlight strips with different framing (e.g. "Annual Revenue" vs "ARR") or when you want a tiny icon for status-like fields.

Patch Changes

• 2108c30: ActionParamSchema.required now defaults to false (was effectively undefined). Functionally equivalent for existing consumers (which check truthiness), but makes the parsed object shape complete and unblocks downstream type narrowing. Fixes pre-existing failing test action.test.ts > should accept minimal action parameter.

@objectstack/studio@4.1.0

Patch Changes

• Updated dependencies [2108c30]
• Updated dependencies [96fb108]
• Updated dependencies [23db640]
• Updated dependencies [1234920]
• Updated dependencies [5683206]
• Updated dependencies [70db902]
• Updated dependencies [70db902]
• Updated dependencies [d3b455f]
• Updated dependencies [f0b3972]
• Updated dependencies [0e63f2f]
  • @objectstack/spec@4.1.0
  • @objectstack/runtime@4.1.0
  • @objectstack/metadata@4.1.0
  • @objectstack/objectql@4.1.0
  • @objectstack/plugin-security@4.1.0
  • @objectstack/client@4.1.0
  • @objectstack/client-react@4.1.0
  • @objectstack/platform-objects@4.1.0
  • @objectstack/driver-memory@4.1.0
  • @objectstack/driver-turso@4.1.0
  • @objectstack/plugin-audit@4.1.0
  • @objectstack/plugin-auth@4.1.0
  • @objectstack/plugin-msw@4.1.0
  • @objectstack/service-ai@4.1.0
  • @objectstack/service-analytics@4.1.0
  • @objectstack/service-automation@4.1.0
  • @objectstack/service-feed@4.1.0
  • @objectstack/hono@4.1.0
  • @objectstack/service-tenant@4.1.0

@objectstack/hono@4.1.0

Patch Changes

• @objectstack/plugin-hono-server@4.1.0

@objectstack/client@4.1.0

Patch Changes

• Updated dependencies [2108c30]
• Updated dependencies [23db640]
  • @objectstack/spec@4.1.0
  • @objectstack/core@4.1.0

@objectstack/client-react@4.1.0

Patch Changes

• Updated dependencies [2108c30]
• Updated dependencies [23db640]
  • @objectstack/spec@4.1.0
  • @objectstack/client@4.1.0
  • @objectstack/core@4.1.0

@objectstack/core@4.1.0

Patch Changes

• Updated dependencies [2108c30]
• Updated dependencies [23db640]
  • @objectstack/spec@4.1.0

@objectstack/formula@4.1.0

Patch Changes

• Updated dependencies [2108c30]
• Updated dependencies [23db640]
  • @objectstack/spec@4.1.0

@objectstack/platform-objects@4.1.0

Patch Changes

• Updated dependencies [2108c30]
• Updated dependencies [23db640]
  • @objectstack/spec@4.1.0

@objectstack/driver-memory@4.1.0

Patch Changes

• Updated dependencies [2108c30]
• Updated dependencies [23db640]
  • @objectstack/spec@4.1.0
  • @objectstack/core@4.1.0

@objectstack/driver-mongodb@4.1.0

Patch Changes

• Updated dependencies [2108c30]
• Updated dependencies [23db640]
  • @objectstack/spec@4.1.0
  • @objectstack/core@4.1.0

@objectstack/driver-turso@4.1.0

Patch Changes

• Updated dependencies [2108c30]
• Updated dependencies [23db640]
• Updated dependencies [5683206]
• Updated dependencies [0cc0374]
• Updated dependencies [5b878d9]
• Updated dependencies [f0b3972]
• Updated dependencies [0e63f2f]
  • @objectstack/spec@4.1.0
  • @objectstack/driver-sql@4.1.0
  • @objectstack/core@4.1.0

@objectstack/plugin-approvals@4.0.1

Patch Changes

• Updated dependencies [2108c30]
• Updated dependencies [23db640]
  • @objectstack/spec@4.1.0
  • @objectstack/core@4.1.0
  • @objectstack/formula@4.1.0
  • @objectstack/platform-objects@4.1.0

@objectstack/plugin-audit@4.1.0

Patch Changes

• Updated dependencies [2108c30]
• Updated dependencies [23db640]
  • @objectstack/spec@4.1.0
  • @objectstack/core@4.1.0
  • @objectstack/platform-objects@4.1.0

@objectstack/plugin-auth@4.1.0

Patch Changes

• Updated dependencies [2108c30]
• Updated dependencies [23db640]
  • @objectstack/spec@4.1.0
  • @objectstack/core@4.1.0
  • @objectstack/platform-objects@4.1.0

@objectstack/plugin-dev@4.1.0

Patch Changes

• Updated dependencies [2108c30]
• Updated dependencies [23db640]
  • @objectstack/spec@4.1.0
  • @objectstack/core@4.1.0

@objectstack/plugin-email@4.0.1

Patch Changes

• Updated dependencies [2108c30]
• Updated dependencies [23db640]
  • @objectstack/spec@4.1.0
  • @objectstack/core@4.1.0
  • @objectstack/platform-objects@4.1.0

@objectstack/plugin-hono-server@4.1.0

Patch Changes

• Updated dependencies [2108c30]
• Updated dependencies [23db640]
  • @objectstack/spec@4.1.0
  • @objectstack/core@4.1.0

@objectstack/plugin-mcp-server@4.1.0

Patch Changes

• Updated dependencies [2108c30]
• Updated dependencies [23db640]
  • @objectstack/spec@4.1.0
  • @objectstack/core@4.1.0

@objectstack/plugin-msw@4.1.0

Patch Changes

• Updated dependencies [2108c30]
• Updated dependencies [23db640]
• Updated dependencies [5683206]
• Updated dependencies [f0b3972]
• Updated dependencies [0e63f2f]
  • @objectstack/spec@4.1.0
  • @objectstack/objectql@4.1.0
  • @objectstack/core@4.1.0
  • @objectstack/types@4.1.0

@objectstack/plugin-reports@4.0.1

Patch Changes

• Updated dependencies [2108c30]
• Updated dependencies [23db640]
  • @objectstack/spec@4.1.0
  • @objectstack/core@4.1.0
  • @objectstack/platform-objects@4.1.0

@objectstack/plugin-sharing@4.0.1

Patch Changes

• Updated dependencies [2108c30]
• Updated dependencies [23db640]
• Updated dependencies [5683206]
• Updated dependencies [f0b3972]
• Updated dependencies [0e63f2f]
  • @objectstack/spec@4.1.0
  • @objectstack/objectql@4.1.0
  • @objectstack/core@4.1.0
  • @objectstack/platform-objects@4.1.0

@objectstack/plugin-webhooks@4.0.1

Patch Changes

• Updated dependencies [2108c30]
• Updated dependencies [23db640]
  • @objectstack/spec@4.1.0
  • @objectstack/core@4.1.0

@objectstack/rest@4.1.0

Patch Changes

• Updated dependencies [2108c30]
• Updated dependencies [23db640]
  • @objectstack/spec@4.1.0
  • @objectstack/core@4.1.0
  • @objectstack/service-package@4.1.0

@objectstack/service-ai@4.1.0

Patch Changes

• Updated dependencies [2108c30]
• Updated dependencies [23db640]
  • @objectstack/spec@4.1.0
  • @objectstack/core@4.1.0

@objectstack/service-analytics@4.1.0

Patch Changes

• Updated dependencies [2108c30]
• Updated dependencies [23db640]
  • @objectstack/spec@4.1.0
  • @objectstack/core@4.1.0

@objectstack/service-automation@4.1.0

Patch Changes

• Updated dependencies [2108c30]
• Updated dependencies [23db640]
  • @objectstack/spec@4.1.0
  • @objectstack/core@4.1.0
  • @objectstack/formula@4.1.0

@objectstack/service-cache@4.1.0

Patch Changes

• Updated dependencies [2108c30]
• Updated dependencies [23db640]
  • @objectstack/spec@4.1.0
  • @objectstack/core@4.1.0

@objectstack/service-feed@4.1.0

Patch Changes

• Updated dependencies [2108c30]
• Updated dependencies [23db640]
  • @objectstack/spec@4.1.0
  • @objectstack/core@4.1.0

@objectstack/service-i18n@4.1.0

Patch Changes

• Updated dependencies [2108c30]
• Updated dependencies [23db640]
  • @objectstack/spec@4.1.0
  • @objectstack/core@4.1.0

@objectstack/service-job@4.1.0

Patch Changes

• Updated dependencies [2108c30]
• Updated dependencies [23db640]
  • @objectstack/spec@4.1.0
  • @objectstack/core@4.1.0
  • @objectstack/platform-objects@4.1.0

@objectstack/service-package@4.1.0

Patch Changes

• Updated dependencies [2108c30]
• Updated dependencies [23db640]
  • @objectstack/spec@4.1.0
  • @objectstack/core@4.1.0

@objectstack/service-queue@4.1.0

Patch Changes

• Updated dependencies [2108c30]
• Updated dependencies [23db640]
  • @objectstack/spec@4.1.0
  • @objectstack/core@4.1.0
  • @objectstack/platform-objects@4.1.0

@objectstack/service-realtime@4.1.0

Patch Changes

• Updated dependencies [2108c30]
• Updated dependencies [23db640]
  • @objectstack/spec@4.1.0
  • @objectstack/core@4.1.0
  • @objectstack/platform-objects@4.1.0

@objectstack/service-settings@0.1.1

Patch Changes

• Updated dependencies [2108c30]
• Updated dependencies [23db640]
  • @objectstack/spec@4.1.0
  • @objectstack/core@4.1.0
  • @objectstack/platform-objects@4.1.0

@objectstack/service-storage@4.1.0

Patch Changes

• Updated dependencies [2108c30]
• Updated dependencies [23db640]
  • @objectstack/spec@4.1.0
  • @objectstack/core@4.1.0

@objectstack/service-tenant@4.1.0

Patch Changes

• Updated dependencies [2108c30]
• Updated dependencies [23db640]
  • @objectstack/spec@4.1.0
  • @objectstack/core@4.1.0
  • @objectstack/platform-objects@4.1.0
  • @objectstack/driver-turso@4.1.0

@objectstack/types@4.1.0

Patch Changes

• Updated dependencies [2108c30]
• Updated dependencies [23db640]
  • @objectstack/spec@4.1.0

@objectstack/express@4.1.0

@objectstack/fastify@4.1.0

@objectstack/nestjs@4.1.0

@objectstack/nextjs@4.1.0

@objectstack/nuxt@4.1.0

@objectstack/sveltekit@4.1.0

create-objectstack@4.1.0

objectstack-vscode@4.1.0

@objectstack/account@4.0.6

Patch Changes

• f41466a: Trim the first-run /setup page. Removed the optional teammate-invite section, the manually-edited org slug field, the large shield banner and the footer note. The form is now 4 fields (name + org name on one row, then email + password) with concise copy — the new owner can invite teammates from the dashboard after first login.
• Updated dependencies [2108c30]
• Updated dependencies [23db640]
  • @objectstack/spec@4.1.0
  • @objectstack/client@4.1.0
  • @objectstack/client-react@4.1.0

@objectstack/example-crm@4.0.6

Patch Changes

• fcc54fd: chore(example-crm): cull duplicate/low-value reports

  Remove three reports from the CRM example that didn't pass the
  "Report vs. Dashboard" value test:

  • LeadsBySourceReport (single-dim count by lead_source) — fully
    redundant with the sales dashboard's "Lead Source" pie tile.
  • ContactsByAccountReport — really a Contact List View grouped by
    account, not a report.
  • TasksByOwnerReport — single-dim count, not navigated anywhere.

  Remaining 10 reports keep full shape coverage: summary (2), matrix (4),
  joined (2), multi-pane (1) plus a chartful summary.

• Updated dependencies [2108c30]

• Updated dependencies [96fb108]

• Updated dependencies [23db640]

• Updated dependencies [70db902]

• Updated dependencies [70db902]

  • @objectstack/spec@4.1.0
  • @objectstack/runtime@4.1.0
  • @objectstack/driver-mongodb@4.1.0
  • @objectstack/service-analytics@4.1.0
  • @objectstack/service-automation@4.1.0

@example/app-todo@4.0.6

Patch Changes

• Updated dependencies [2108c30]
• Updated dependencies [96fb108]
• Updated dependencies [23db640]
• Updated dependencies [5683206]
• Updated dependencies [70db902]
• Updated dependencies [70db902]
• Updated dependencies [f0b3972]
• Updated dependencies [0e63f2f]
  • @objectstack/spec@4.1.0
  • @objectstack/runtime@4.1.0
  • @objectstack/objectql@4.1.0
  • @objectstack/client@4.1.0
  • @objectstack/driver-memory@4.1.0

@objectstack/docs@4.1.0

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
objectstack-cloud	Error		May 21, 2026 1:42pm
objectstack-objectos	Ready	Preview, Comment	May 21, 2026 1:42pm
spec	Ready	Preview, Comment	May 21, 2026 1:42pm