docs: Console auth feasibility evaluation with @objectstack/client + better-auth

[Copilot]

Evaluate whether @objectstack/client + better-auth can deliver a complete ObjectStack Console from login to full usage. Scanned all 35 packages and the existing console app to produce a gap analysis and implementation plan.

CONSOLE_AUTH_PLAN.md (new)

• Capability scan: 17 production-ready capabilities (CRUD, forms, grids, dashboards, permissions, tenancy, i18n, workflow, AI) — all business UI is done
• Gap analysis: 11 missing auth capabilities (login page, session management, route guards, token injection, system object UIs)
• @objectstack/client: ✅ Fully sufficient — token param + custom fetch wrapper enables dynamic Bearer injection from any auth provider
• better-auth: ✅ Strong fit — TypeScript-first, React hooks, organization/RBAC plugins map directly to existing @object-ui/tenant and @object-ui/permissions
• Architecture: New @object-ui/auth package wrapping better-auth, with AuthProvider → useAuth → AuthGuard API
• Estimated effort: ~29 workdays across 3 phases (auth foundation → console integration → system admin)

Key integration pattern:

const adapter = new ObjectStackAdapter({
  baseUrl: '/api/v1',
  fetch: async (input, init) => {
    const session = await authClient.getSession();
    const headers = new Headers(init?.headers);
    if (session?.token) headers.set('Authorization', `Bearer ${session.token}`);
    return fetch(input, { ...init, headers });
  },
});

ROADMAP.md (updated)

• Added Authentication & Console Gaps (P0) to current status
• Added Q1 §1.5 Console Authentication System — 6-week, 3-phase plan with 15 tasks
• Updated Q2 §2.3 System Objects to reference Q1 auth groundwork
• Added plan doc to reference documents

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

• www.better-auth.com
  • Triggering command: /home/REDACTED/work/_temp/ghcca-node/node/bin/node /home/REDACTED/work/_temp/ghcca-node/node/bin/node --enable-source-maps /home/REDACTED/work/_temp/copilot-developer-action-main/dist/index.js (dns block)
• www.npmjs.com
  • Triggering command: /home/REDACTED/work/_temp/ghcca-node/node/bin/node /home/REDACTED/work/_temp/ghcca-node/node/bin/node --enable-source-maps /home/REDACTED/work/_temp/copilot-developer-action-main/dist/index.js (dns block)

If you need me to access, download, or install something from one of these locations, you can either:

• Configure Actions setup steps to set up my environment, which run before the firewall is enabled
• Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

---

💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
objectui	Ready	Preview, Comment	Feb 10, 2026 2:46am
objectui-console	Ready	Preview, Comment	Feb 10, 2026 2:46am
objectui-storybook	Ready	Preview, Comment	Feb 10, 2026 2:46am

[Copilot]

Pull request overview

Adds planning documentation to evaluate and outline an authentication approach for the Console using @objectstack/client with better-auth, and updates the project roadmap to track the resulting P0 gaps and a proposed delivery timeline.

Changes:

• Added a new feasibility/gap-analysis plan doc for Console authentication and full login-to-usage flow.
• Updated ROADMAP.md with an “Authentication & Console Gaps (P0)” section and a Q1 “Console Authentication System” initiative, plus cross-references into Q2 System Objects work.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 2 comments.

File	Description
ROADMAP.md	Adds auth-related P0 gaps and a 6-week phased plan; updates Q2 system objects section to reference Q1 groundwork; links the new plan doc.
CONSOLE_AUTH_PLAN.md	New detailed feasibility evaluation + gap analysis + proposed @object-ui/auth package/API and phased implementation plan.

[Copilot]

This document is written primarily in Chinese, but the repo has an English-only documentation rule (see .github/copilot-instructions.md Rule #-1). Please translate the entire doc (headings, tables, prose) to English so it matches the rest of the codebase and is accessible to all contributors.

[Copilot]

The roadmap lists “Internationalization: No built-in i18n support” as a current P0 gap, but this same document later states @object-ui/i18n is created and integrated (Q1 §1.2). Please reconcile these statements (e.g., clarify what’s still missing, or remove/update the gap) to avoid misleading status reporting.

Suggested change

	- ⚠️ Internationalization: No built-in i18n support
	- ⚠️ Internationalization: @object-ui/i18n implemented but not yet production-ready (missing docs, test coverage, and default locale management)