@objectstack/runtime 6.9.0 → 7.0.0

package/dist/index.cjs

@@ -1294,7 +1294,15 @@ var init_app_plugin = __esm({
     AppPlugin = class {
       constructor(bundle, projectContext) {
         this.type = "app";
+        /** When true, init/start become no-ops — env has no app payload. */
+        this.empty = false;
         this.init = async (ctx) => {
+          if (this.empty) {
+            ctx.logger.debug("[AppPlugin] empty env \u2014 no app payload, skipping init", {
+              pluginName: this.name
+            });
+            return;
+          }
           const sys = this.bundle.manifest || this.bundle;
           const appId = sys.id || sys.name;
           ctx.logger.info("Registering App Service", {
@@ -1309,6 +1317,12 @@ var init_app_plugin = __esm({
           ctx.getService("manifest").register(servicePayload);
         };
         this.start = async (ctx) => {
+          if (this.empty) {
+            ctx.logger.debug("[AppPlugin] empty env \u2014 no app payload, skipping start", {
+              pluginName: this.name
+            });
+            return;
+          }
           const sys = this.bundle.manifest || this.bundle;
           const appId = sys.id || sys.name;
           let ql;
@@ -1604,47 +1618,64 @@ var init_app_plugin = __esm({
             if (multiTenant) {
               ctx.logger.info("[Seeder] multi-tenant mode \u2014 skipping inline seed; per-org replay will run on sys_organization insert");
             } else {
-              try {
-                const metadata = ctx.getService("metadata");
-                if (metadata) {
-                  const seedLoader = new SeedLoaderService(ql, metadata, ctx.logger);
-                  const { SeedLoaderRequestSchema } = await import("@objectstack/spec/data");
-                  const request = SeedLoaderRequestSchema.parse({
-                    datasets: normalizedDatasets,
-                    config: { defaultMode: "upsert", multiPass: true }
-                  });
-                  const result = await seedLoader.load(request);
-                  ctx.logger.info("[Seeder] Seed loading complete", {
-                    inserted: result.summary.totalInserted,
-                    updated: result.summary.totalUpdated,
-                    errors: result.errors.length
-                  });
-                } else {
-                  ctx.logger.debug("[Seeder] No metadata service; using basic insert fallback");
+              const seedBudgetMs = Number(process.env.OS_INLINE_SEED_BUDGET_MS ?? 8e3);
+              const seedPromise = (async () => {
+                try {
+                  const metadata = ctx.getService("metadata");
+                  if (metadata) {
+                    const seedLoader = new SeedLoaderService(ql, metadata, ctx.logger);
+                    const { SeedLoaderRequestSchema } = await import("@objectstack/spec/data");
+                    const request = SeedLoaderRequestSchema.parse({
+                      datasets: normalizedDatasets,
+                      config: { defaultMode: "upsert", multiPass: true }
+                    });
+                    const result = await seedLoader.load(request);
+                    ctx.logger.info("[Seeder] Seed loading complete", {
+                      inserted: result.summary.totalInserted,
+                      updated: result.summary.totalUpdated,
+                      errors: result.errors.length
+                    });
+                  } else {
+                    ctx.logger.debug("[Seeder] No metadata service; using basic insert fallback");
+                    for (const dataset of normalizedDatasets) {
+                      ctx.logger.info(`[Seeder] Seeding ${dataset.records.length} records for ${dataset.object}`);
+                      for (const record of dataset.records) {
+                        try {
+                          await ql.insert(dataset.object, record, { context: { isSystem: true } });
+                        } catch (err) {
+                          ctx.logger.warn(`[Seeder] Failed to insert ${dataset.object} record:`, { error: err.message });
+                        }
+                      }
+                    }
+                    ctx.logger.info("[Seeder] Data seeding complete.");
+                  }
+                } catch (err) {
+                  ctx.logger.warn("[Seeder] SeedLoaderService failed, falling back to basic insert", { error: err.message });
                   for (const dataset of normalizedDatasets) {
-                    ctx.logger.info(`[Seeder] Seeding ${dataset.records.length} records for ${dataset.object}`);
                     for (const record of dataset.records) {
                       try {
                         await ql.insert(dataset.object, record, { context: { isSystem: true } });
-                      } catch (err) {
-                        ctx.logger.warn(`[Seeder] Failed to insert ${dataset.object} record:`, { error: err.message });
+                      } catch (insertErr) {
+                        ctx.logger.warn(`[Seeder] Failed to insert ${dataset.object} record:`, { error: insertErr.message });
                       }
                     }
                   }
-                  ctx.logger.info("[Seeder] Data seeding complete.");
+                  ctx.logger.info("[Seeder] Data seeding complete (fallback).");
                 }
-              } catch (err) {
-                ctx.logger.warn("[Seeder] SeedLoaderService failed, falling back to basic insert", { error: err.message });
-                for (const dataset of normalizedDatasets) {
-                  for (const record of dataset.records) {
-                    try {
-                      await ql.insert(dataset.object, record, { context: { isSystem: true } });
-                    } catch (insertErr) {
-                      ctx.logger.warn(`[Seeder] Failed to insert ${dataset.object} record:`, { error: insertErr.message });
-                    }
-                  }
-                }
-                ctx.logger.info("[Seeder] Data seeding complete (fallback).");
+              })();
+              let timer;
+              const budget = new Promise((resolve2) => {
+                timer = setTimeout(() => resolve2("budget"), seedBudgetMs);
+              });
+              const winner = await Promise.race([seedPromise.then(() => "done"), budget]);
+              if (timer) clearTimeout(timer);
+              if (winner === "budget") {
+                ctx.logger.warn(
+                  `[Seeder] Inline seed exceeded ${seedBudgetMs}ms budget for ${appId}; continuing in background to avoid blocking kernel start.`
+                );
+                seedPromise.catch((err) => {
+                  ctx.logger.warn("[Seeder] Background seed failed after budget", { appId, error: err?.message ?? String(err) });
+                });
               }
             }
           }
@@ -1658,6 +1689,38 @@ var init_app_plugin = __esm({
         const sys = bundle?.manifest || bundle;
         const appId = sys?.id || sys?.name;
         if (!appId) {
+          const APP_CATEGORY_KEYS = [
+            "objects",
+            "views",
+            "apps",
+            "pages",
+            "dashboards",
+            "reports",
+            "flows",
+            "workflows",
+            "triggers",
+            "agents",
+            "tools",
+            "skills",
+            "actions",
+            "permissions",
+            "roles",
+            "profiles",
+            "translations",
+            "sharingRules",
+            "ragPipelines",
+            "data"
+          ];
+          const hasAppPayload = APP_CATEGORY_KEYS.some((k) => {
+            const v = (bundle && bundle[k]) ?? (sys && sys[k]);
+            return Array.isArray(v) && v.length > 0;
+          });
+          if (!hasAppPayload) {
+            this.empty = true;
+            const envSlug = projectContext?.environmentId ? projectContext.environmentId.slice(0, 8) : "empty";
+            this.name = `plugin.app.empty-${envSlug}`;
+            return;
+          }
           const bundleKeys = bundle && typeof bundle === "object" ? Object.keys(bundle).slice(0, 20).join(",") : typeof bundle;
           const sysKeys = sys && typeof sys === "object" ? Object.keys(sys).slice(0, 20).join(",") : typeof sys;
           const ctxHint = projectContext ? ` projectContext=${JSON.stringify({
@@ -1666,7 +1729,7 @@ var init_app_plugin = __esm({
             source: projectContext.source
           })}` : "";
           throw new Error(
-            `[AppPlugin] bundle is missing manifest.id and manifest.name \u2014 cannot register as a plugin. bundleKeys=[${bundleKeys}] sysKeys=[${sysKeys}]${ctxHint}`
+            `[AppPlugin] bundle has app payload but no manifest.id / manifest.name \u2014 cannot register as a plugin. bundleKeys=[${bundleKeys}] sysKeys=[${sysKeys}]${ctxHint}`
           );
         }
         this.name = `plugin.app.${appId}`;
@@ -2283,7 +2346,7 @@ function resolveObjectStackHome() {
 var StandaloneStackConfigSchema = import_zod.z.object({
   databaseUrl: import_zod.z.string().optional(),
   databaseAuthToken: import_zod.z.string().optional(),
-  databaseDriver: import_zod.z.enum(["sqlite", "sqlite-wasm", "turso", "memory", "postgres", "mongodb"]).optional(),
+  databaseDriver: import_zod.z.enum(["sqlite", "sqlite-wasm", "memory", "postgres", "mongodb"]).optional(),
   environmentId: import_zod.z.string().optional(),
   artifactPath: import_zod.z.string().optional(),
   /**
@@ -2301,7 +2364,6 @@ var StandaloneStackConfigSchema = import_zod.z.object({
 });
 function detectDriverFromUrl(dbUrl) {
   if (/^memory:\/\//i.test(dbUrl)) return "memory";
-  if (/^(libsql|https?):\/\//i.test(dbUrl)) return "turso";
   if (/^(postgres(ql)?|pg):\/\//i.test(dbUrl)) return "postgres";
   if (/^mongodb(\+srv)?:\/\//i.test(dbUrl)) return "mongodb";
   if (/^wasm-sqlite:\/\//i.test(dbUrl)) return "sqlite-wasm";
@@ -2309,7 +2371,7 @@ function detectDriverFromUrl(dbUrl) {
   if (/^file:/i.test(dbUrl)) return "sqlite";
   if (!/^[a-z][a-z0-9+.-]*:\/\//i.test(dbUrl)) return "sqlite";
   throw new Error(
-    `[StandaloneStack] Unsupported database URL scheme: ${dbUrl}. Supported schemes: memory://, libsql://, https://, postgres://, pg://, mongodb://, mongodb+srv://, file:`
+    `[StandaloneStack] Unsupported database URL scheme: ${dbUrl}. Supported schemes: memory://, postgres://, pg://, mongodb://, mongodb+srv://, file:`
   );
 }
 async function createStandaloneStack(config) {
@@ -2323,25 +2385,12 @@ async function createStandaloneStack(config) {
   const artifactPathInput = cfg.artifactPath ?? process.env.OS_ARTIFACT_PATH ?? (0, import_node_path2.resolve)(cwd, "dist/objectstack.json");
   const artifactPath = isHttpUrl(artifactPathInput) ? artifactPathInput : artifactPathInput.startsWith("/") ? artifactPathInput : (0, import_node_path2.resolve)(cwd, artifactPathInput);
   const dbUrl = cfg.databaseUrl ?? process.env.OS_DATABASE_URL?.trim() ?? process.env.TURSO_DATABASE_URL?.trim() ?? (process.env.OS_HOME?.trim() ? `file:${(0, import_node_path2.resolve)(resolveObjectStackHome(), "data/standalone.db")}` : cfg.projectRoot ? `file:${(0, import_node_path2.resolve)(cfg.projectRoot, ".objectstack/data/standalone.db")}` : `file:${(0, import_node_path2.resolve)(resolveObjectStackHome(), "data/standalone.db")}`);
-  const dbAuthToken = cfg.databaseAuthToken ?? process.env.OS_DATABASE_AUTH_TOKEN?.trim() ?? process.env.TURSO_AUTH_TOKEN?.trim();
   const explicitDriver = cfg.databaseDriver ?? process.env.OS_DATABASE_DRIVER?.trim();
   const dbDriver = explicitDriver ?? detectDriverFromUrl(dbUrl);
   let driverPlugin;
   if (dbDriver === "memory") {
     const { InMemoryDriver } = await import("@objectstack/driver-memory");
     driverPlugin = new DriverPlugin2(new InMemoryDriver());
-  } else if (dbDriver === "turso") {
-    let TursoDriver;
-    try {
-      ({ TursoDriver } = await import("@objectstack/driver-turso"));
-    } catch (err) {
-      throw new Error(
-        `[StandaloneStack] libsql/turso URL detected ("${dbUrl}") but @objectstack/driver-turso is not installed. Install it with: npm install @objectstack/driver-turso  (or use a file: URL to default to better-sqlite3). (${err?.message ?? err})`
-      );
-    }
-    driverPlugin = new DriverPlugin2(
-      new TursoDriver({ url: dbUrl, authToken: dbAuthToken })
-    );
   } else if (dbDriver === "postgres") {
     const { SqlDriver } = await import("@objectstack/driver-sql");
     driverPlugin = new DriverPlugin2(
@@ -4082,7 +4131,7 @@ var _HttpDispatcher = class _HttpDispatcher {
           return {
             handled: true,
             response: this.error(
-              "No ObjectQL driver is registered. Register at least one DriverPlugin (e.g. InMemoryDriver or TursoDriver).",
+              "No ObjectQL driver is registered. Register at least one DriverPlugin (e.g. InMemoryDriver or SqlDriver).",
               503
             )
           };
@@ -7574,6 +7623,27 @@ function extractRuntimeFromMetadata(metadata) {
 }
 async function createDriver(driverType, databaseUrl, authToken) {
   switch (driverType) {
+    case "libsql":
+    case "turso": {
+      let TursoDriver;
+      try {
+        ({ TursoDriver } = await import("@objectstack/driver-turso"));
+      } catch (primaryErr) {
+        try {
+          const { createRequire } = await import("module");
+          const path = await import("path");
+          const url = await import("url");
+          const hostRequire = createRequire(path.join(process.cwd(), "noop.js"));
+          const resolved = hostRequire.resolve("@objectstack/driver-turso");
+          ({ TursoDriver } = await import(url.pathToFileURL(resolved).href));
+        } catch (fallbackErr) {
+          throw new Error(
+            `[ArtifactEnvironmentRegistry] libsql/turso driver requested but @objectstack/driver-turso is not resolvable. Install it from the cloud monorepo (cloud/packages/driver-turso) or via npm. (primary: ${primaryErr?.message ?? primaryErr}; fallback: ${fallbackErr?.message ?? fallbackErr})`
+          );
+        }
+      }
+      return new TursoDriver({ url: databaseUrl, authToken });
+    }
     case "memory": {
       const { InMemoryDriver } = await import("@objectstack/driver-memory");
       const dbName = databaseUrl.replace(/^memory:\/\//, "").trim();
@@ -7592,18 +7662,6 @@ async function createDriver(driverType, databaseUrl, authToken) {
         useNullAsDefault: true
       });
     }
-    case "libsql":
-    case "turso": {
-      let TursoDriver;
-      try {
-        ({ TursoDriver } = await import("@objectstack/driver-turso"));
-      } catch (err) {
-        throw new Error(
-          `[ArtifactEnvironmentRegistry] libsql/turso driver requested but @objectstack/driver-turso is not installed. Install it with: npm install @objectstack/driver-turso. (${err?.message ?? err})`
-        );
-      }
-      return new TursoDriver({ url: databaseUrl, authToken });
-    }
     case "postgres":
     case "postgresql":
     case "pg": {
@@ -7879,9 +7937,20 @@ var ArtifactKernelFactory = class {
       this.logger.warn?.("[ArtifactKernelFactory] OS_AUTH_SECRET not set \u2014 per-project AuthPlugin skipped (auth endpoints will return 404)", { environmentId });
     }
     try {
-      const { SecurityPlugin } = await import("@objectstack/plugin-security");
       const multiTenant = String(process.env.OS_MULTI_TENANT ?? "false").toLowerCase() !== "false";
-      await kernel.use(new SecurityPlugin({ multiTenant }));
+      if (multiTenant) {
+        try {
+          const { OrgScopingPlugin } = await import("@objectstack/plugin-org-scoping");
+          await kernel.use(new OrgScopingPlugin());
+        } catch (err) {
+          this.logger.warn?.("[ArtifactKernelFactory] OrgScopingPlugin not registered (multi-tenant disabled)", {
+            environmentId,
+            error: err?.message
+          });
+        }
+      }
+      const { SecurityPlugin } = await import("@objectstack/plugin-security");
+      await kernel.use(new SecurityPlugin());
     } catch (err) {
       this.logger.warn?.("[ArtifactKernelFactory] SecurityPlugin not registered", {
         environmentId,
@@ -8407,6 +8476,40 @@ function resolveCloudUrl(explicit) {
 
 // src/cloud/marketplace-proxy-plugin.ts
 var MARKETPLACE_PREFIX = "/api/v1/marketplace";
+var DEFAULT_LRU_MAX = 200;
+var LIST_TTL_MS = 30 * 60 * 1e3;
+var PACKAGE_TTL_MS = 2 * 60 * 60 * 1e3;
+var VERSION_TTL_MS = 24 * 60 * 60 * 1e3;
+function ttlForPath(pathname) {
+  if (/\/packages\/[^/]+\/versions\//.test(pathname)) return VERSION_TTL_MS;
+  if (/\/packages\/[^/]+/.test(pathname)) return PACKAGE_TTL_MS;
+  return LIST_TTL_MS;
+}
+var LruTtlCache = class {
+  constructor(max) {
+    this.max = max;
+    this.map = /* @__PURE__ */ new Map();
+  }
+  get(key) {
+    const entry = this.map.get(key);
+    if (!entry) return void 0;
+    this.map.delete(key);
+    this.map.set(key, entry);
+    return entry;
+  }
+  set(key, entry) {
+    if (this.map.has(key)) this.map.delete(key);
+    this.map.set(key, entry);
+    while (this.map.size > this.max) {
+      const oldest = this.map.keys().next().value;
+      if (oldest === void 0) break;
+      this.map.delete(oldest);
+    }
+  }
+  clear() {
+    this.map.clear();
+  }
+};
 var MarketplaceProxyPlugin = class _MarketplaceProxyPlugin {
   constructor(config = {}) {
     this.name = "com.objectstack.runtime.marketplace-proxy";
@@ -8428,6 +8531,7 @@ var MarketplaceProxyPlugin = class _MarketplaceProxyPlugin {
         }
         const rawApp = httpServer.getRawApp();
         const cloudUrl = this.cloudUrl;
+        const cache = this.cache;
         const handler = async (c, next) => {
           if (!cloudUrl) {
             return c.json({
@@ -8454,24 +8558,51 @@ var MarketplaceProxyPlugin = class _MarketplaceProxyPlugin {
                 }
               }, 405);
             }
-            const resp = await fetch(target, {
-              method,
-              headers: {
-                // Strip the inbound Host header — fetch will set
-                // it to the cloud host. Forward only the
-                // identifying headers cloud might log.
-                "Accept": c.req.header("accept") ?? "application/json",
-                "User-Agent": `objectos-marketplace-proxy/${_MarketplaceProxyPlugin.prototype.version ?? "1.0.0"}`
+            const accept = c.req.header("accept") ?? "application/json";
+            const acceptLang = c.req.header("accept-language") ?? "";
+            const cacheKey = `${incomingUrl.pathname}${incomingUrl.search}|al=${acceptLang}|a=${accept}`;
+            const reqCacheCtl = (c.req.header("cache-control") ?? "").toLowerCase();
+            const bypass = !cache || reqCacheCtl.includes("no-cache") || reqCacheCtl.includes("no-store");
+            const now = Date.now();
+            if (cache && !bypass) {
+              const hit = cache.get(cacheKey);
+              if (hit && hit.expiresAt > now) {
+                return buildCachedResponse(hit, method, "HIT");
               }
-            });
-            const headers = new Headers();
-            const passthroughHeaders = ["content-type", "cache-control", "etag", "last-modified"];
-            for (const h of passthroughHeaders) {
-              const v = resp.headers.get(h);
-              if (v) headers.set(h, v);
+              if (hit) {
+                const revalHeaders = {
+                  "Accept": accept,
+                  "User-Agent": `objectos-marketplace-proxy/${_MarketplaceProxyPlugin.prototype.version ?? "1.0.0"}`
+                };
+                if (acceptLang) revalHeaders["Accept-Language"] = acceptLang;
+                if (hit.etag) revalHeaders["If-None-Match"] = hit.etag;
+                if (hit.lastModified) revalHeaders["If-Modified-Since"] = hit.lastModified;
+                const revalResp = await fetch(target, { method: "GET", headers: revalHeaders });
+                if (revalResp.status === 304) {
+                  hit.expiresAt = now + hit.ttlMs;
+                  const newEtag = revalResp.headers.get("etag");
+                  const newLm = revalResp.headers.get("last-modified");
+                  if (newEtag) hit.etag = newEtag;
+                  if (newLm) hit.lastModified = newLm;
+                  cache.set(cacheKey, hit);
+                  return buildCachedResponse(hit, method, "REVALIDATED");
+                }
+                return await consumeAndMaybeCache(revalResp, cacheKey, incomingUrl.pathname, method, cache);
+              }
+            }
+            const reqHeaders = {
+              // Strip the inbound Host header — fetch will set
+              // it to the cloud host. Forward only the
+              // identifying headers cloud might log.
+              "Accept": accept,
+              "User-Agent": `objectos-marketplace-proxy/${_MarketplaceProxyPlugin.prototype.version ?? "1.0.0"}`
+            };
+            if (acceptLang) reqHeaders["Accept-Language"] = acceptLang;
+            const resp = await fetch(target, { method: "GET", headers: reqHeaders });
+            if (bypass || !cache) {
+              return await passthroughResponse(resp, method, bypass ? "BYPASS" : "MISS");
             }
-            const body = await resp.arrayBuffer();
-            return new Response(body, { status: resp.status, headers });
+            return await consumeAndMaybeCache(resp, cacheKey, incomingUrl.pathname, method, cache);
           } catch (err) {
             const errObj = err instanceof Error ? err : new Error(err?.message ?? String(err));
             ctx.logger?.error?.("[MarketplaceProxyPlugin] proxy failed", errObj);
@@ -8494,12 +8625,67 @@ var MarketplaceProxyPlugin = class _MarketplaceProxyPlugin {
             }
           }
         }
-        ctx.logger?.info?.(`[MarketplaceProxyPlugin] mounted at ${MARKETPLACE_PREFIX}/* \u2192 ${cloudUrl || "(unconfigured)"}`);
+        ctx.logger?.info?.(`[MarketplaceProxyPlugin] mounted at ${MARKETPLACE_PREFIX}/* \u2192 ${cloudUrl || "(unconfigured)"} (cache=${this.cache ? "on" : "off"})`);
       });
     };
     this.cloudUrl = resolveCloudUrl(config.controlPlaneUrl);
+    const envFlag = (process.env.OS_MARKETPLACE_CACHE ?? "").trim().toLowerCase();
+    const envDisabled = ["off", "false", "0", "no", "disable", "disabled"].includes(envFlag);
+    const disabled = config.cacheDisabled ?? envDisabled;
+    this.cache = disabled ? null : new LruTtlCache(Math.max(8, config.cacheMaxEntries ?? DEFAULT_LRU_MAX));
   }
 };
+var PASSTHROUGH_HEADERS = ["content-type", "cache-control", "etag", "last-modified", "vary"];
+function collectHeaders(src) {
+  const out = {};
+  for (const h of PASSTHROUGH_HEADERS) {
+    const v = src.headers.get(h);
+    if (v) out[h] = v;
+  }
+  return out;
+}
+function buildCachedResponse(entry, method, xCache) {
+  const headers = new Headers(entry.headers);
+  headers.set("X-Cache", xCache);
+  const ageSec = Math.max(0, Math.floor((entry.expiresAt - entry.ttlMs - Date.now()) / -1e3));
+  headers.set("Age", String(Math.max(0, ageSec)));
+  const body = method === "HEAD" ? null : entry.body;
+  return new Response(body, { status: entry.status, headers });
+}
+async function passthroughResponse(resp, method, xCache) {
+  const headers = new Headers(collectHeaders(resp));
+  headers.set("X-Cache", xCache);
+  if (method === "HEAD") {
+    try {
+      await resp.arrayBuffer();
+    } catch {
+    }
+    return new Response(null, { status: resp.status, headers });
+  }
+  const body = await resp.arrayBuffer();
+  return new Response(body, { status: resp.status, headers });
+}
+async function consumeAndMaybeCache(resp, key, pathname, method, cache) {
+  const body = await resp.arrayBuffer();
+  const headers = collectHeaders(resp);
+  if (resp.status >= 200 && resp.status < 300) {
+    const ttlMs = ttlForPath(pathname);
+    const entry = {
+      status: resp.status,
+      body,
+      headers,
+      etag: resp.headers.get("etag") ?? void 0,
+      lastModified: resp.headers.get("last-modified") ?? void 0,
+      expiresAt: Date.now() + ttlMs,
+      ttlMs
+    };
+    cache.set(key, entry);
+  }
+  const respHeaders = new Headers(headers);
+  respHeaders.set("X-Cache", "MISS");
+  const outBody = method === "HEAD" ? null : body;
+  return new Response(outBody, { status: resp.status, headers: respHeaders });
+}
 
 // src/cloud/runtime-config-plugin.ts
 var RuntimeConfigPlugin = class {
@@ -8537,12 +8723,14 @@ var RuntimeConfigPlugin = class {
           let defaultEnvironmentId;
           let defaultOrgId;
           let resolvedSingleEnv = this.singleEnvironment;
-          if (envRegistry && host && typeof envRegistry.resolveHostname === "function") {
+          const resolveFn = typeof envRegistry?.resolveByHostname === "function" ? envRegistry.resolveByHostname.bind(envRegistry) : typeof envRegistry?.resolveHostname === "function" ? envRegistry.resolveHostname.bind(envRegistry) : null;
+          if (resolveFn && host) {
             try {
-              const resolved = await envRegistry.resolveHostname(host);
+              const resolved = await resolveFn(host);
               if (resolved?.environmentId) {
-                defaultEnvironmentId = resolved.environmentId;
-                if (resolved.organizationId) defaultOrgId = String(resolved.organizationId);
+                defaultEnvironmentId = String(resolved.environmentId);
+                const orgId = resolved.organizationId ?? resolved.organization_id;
+                if (orgId) defaultOrgId = String(orgId);
                 resolvedSingleEnv = true;
               }
             } catch {
@@ -8553,7 +8741,11 @@ var RuntimeConfigPlugin = class {
             singleEnvironment: resolvedSingleEnv,
             defaultOrgId,
             defaultEnvironmentId,
-            features
+            features,
+            branding: {
+              productName: this.productName,
+              productShortName: this.productShortName
+            }
           });
         };
         rawApp.get("/api/v1/runtime/config", handler);
@@ -8570,6 +8762,10 @@ var RuntimeConfigPlugin = class {
     this.cloudUrl = config.controlPlaneUrl === "" ? "" : resolveCloudUrl(config.controlPlaneUrl) ?? "";
     this.installLocal = !!config.installLocal;
     this.singleEnvironment = !!config.singleEnvironment;
+    const envName = (typeof process !== "undefined" ? process.env?.OS_PRODUCT_NAME : void 0)?.trim();
+    const envShort = (typeof process !== "undefined" ? process.env?.OS_PRODUCT_SHORT_NAME : void 0)?.trim();
+    this.productName = (config.productName ?? envName ?? "ObjectOS").trim() || "ObjectOS";
+    this.productShortName = (config.productShortName ?? envShort ?? this.productName).trim() || this.productName;
   }
 };
 
@@ -8859,9 +9055,15 @@ var MarketplaceInstallLocalPlugin = class {
         const postHandler = async (c) => this.handleInstall(c, ctx);
         const getHandler = async (c) => this.handleList(c);
         const deleteHandler = async (c) => this.handleUninstall(c, ctx);
+        const reseedHandler = async (c) => this.handleReseed(c, ctx);
+        const purgeHandler = async (c) => this.handlePurge(c, ctx);
         if (typeof rawApp.post === "function") rawApp.post(ROUTE_BASE, postHandler);
         if (typeof rawApp.get === "function") rawApp.get(ROUTE_BASE, getHandler);
         if (typeof rawApp.delete === "function") rawApp.delete(`${ROUTE_BASE}/:manifestId`, deleteHandler);
+        if (typeof rawApp.post === "function") {
+          rawApp.post(`${ROUTE_BASE}/:manifestId/reseed-sample-data`, reseedHandler);
+          rawApp.post(`${ROUTE_BASE}/:manifestId/purge-sample-data`, purgeHandler);
+        }
         ctx.logger?.info?.(`[MarketplaceInstallLocal] mounted at ${ROUTE_BASE} (storage: ${this.storageDir})`);
       });
     };
@@ -8958,7 +9160,8 @@ var MarketplaceInstallLocalPlugin = class {
         version,
         manifest,
         installedAt: (/* @__PURE__ */ new Date()).toISOString(),
-        installedBy: userId
+        installedBy: userId,
+        withSampleData: false
       };
       try {
         (0, import_node_fs3.mkdirSync)(this.storageDir, { recursive: true });
@@ -8985,6 +9188,13 @@ var MarketplaceInstallLocalPlugin = class {
         ctx.logger?.warn?.(`[MarketplaceInstallLocal] syncSchemas failed for ${manifestId}: ${err?.message ?? err}`);
       }
       const seededSummary = await this.applySideEffects(ctx, manifest, { seedNow: true, c });
+      if (seededSummary.seeded.mode === "inline" && (seededSummary.seeded.inserted ?? 0) + (seededSummary.seeded.updated ?? 0) > 0) {
+        entry.withSampleData = true;
+        try {
+          (0, import_node_fs3.writeFileSync)((0, import_node_path6.join)(this.storageDir, safeFilename(manifestId)), JSON.stringify(entry, null, 2), "utf8");
+        } catch {
+        }
+      }
       return c.json({
         success: true,
         data: {
@@ -9011,7 +9221,8 @@ var MarketplaceInstallLocalPlugin = class {
             manifestId: e.manifestId,
             version: e.version,
             installedAt: e.installedAt,
-            installedBy: e.installedBy
+            installedBy: e.installedBy,
+            withSampleData: e.withSampleData ?? false
           })),
           total: entries.length,
           storageDir: this.storageDir
@@ -9076,6 +9287,145 @@ var MarketplaceInstallLocalPlugin = class {
      * dev / single-tenant runtimes. Stricter checks can be layered on
      * via a middleware in cloud-hosted multi-tenant deployments.
      */
+    /**
+     * POST /api/v1/marketplace/install-local/:manifestId/reseed-sample-data
+     *
+     * Re-runs SeedLoaderService against the cached manifest's `data` arrays.
+     * Idempotent (upsert by id). Useful when:
+     *   • The user installed an app and skipped sample data
+     *   • A purge was undone
+     *   • The user wants a clean baseline back after editing demo rows
+     *
+     * Multi-tenant: requires an active organization on the session (same
+     * rule as install seed path).
+     */
+    this.handleReseed = async (c, ctx) => {
+      const userId = await this.requireAuthenticatedUser(c, ctx);
+      if (!userId) {
+        return c.json({ success: false, error: { code: "unauthorized", message: "Authentication required." } }, 401);
+      }
+      const manifestId = String(c.req.param?.("manifestId") ?? c.req.params?.manifestId ?? "").trim();
+      if (!manifestId) {
+        return c.json({ success: false, error: { code: "bad_request", message: "manifestId path param required." } }, 400);
+      }
+      const file = (0, import_node_path6.join)(this.storageDir, safeFilename(manifestId));
+      if (!(0, import_node_fs3.existsSync)(file)) {
+        return c.json({ success: false, error: { code: "not_found", message: `No marketplace install for ${manifestId}.` } }, 404);
+      }
+      let entry;
+      try {
+        entry = JSON.parse((0, import_node_fs3.readFileSync)(file, "utf8"));
+      } catch (err) {
+        return c.json({ success: false, error: { code: "storage_failed", message: `Failed to read manifest cache: ${err?.message ?? err}` } }, 500);
+      }
+      const summary = await this.applySideEffects(ctx, entry.manifest, { seedNow: true, c });
+      if (summary.seeded.mode === "skipped") {
+        return c.json({
+          success: false,
+          error: {
+            code: "reseed_skipped",
+            message: `Reseed did not run: ${summary.seeded.reason ?? "unknown reason"}`
+          }
+        }, 400);
+      }
+      try {
+        entry.withSampleData = true;
+        (0, import_node_fs3.writeFileSync)(file, JSON.stringify(entry, null, 2), "utf8");
+      } catch {
+      }
+      return c.json({
+        success: true,
+        data: {
+          manifestId,
+          inserted: summary.seeded.inserted ?? 0,
+          updated: summary.seeded.updated ?? 0,
+          errors: summary.seeded.errors ?? 0,
+          withSampleData: true
+        }
+      }, 200);
+    };
+    /**
+     * POST /api/v1/marketplace/install-local/:manifestId/purge-sample-data
+     *
+     * Deletes every record whose id is declared in the cached manifest's
+     * seed datasets. Uses the `driver` service directly to bypass ACL /
+     * lifecycle hooks (same pattern as cloud purge). User-created records
+     * are never touched — only ids declared in the package's bundled
+     * datasets are removed. Already-deleted rows count as `skipped`.
+     */
+    this.handlePurge = async (c, ctx) => {
+      const userId = await this.requireAuthenticatedUser(c, ctx);
+      if (!userId) {
+        return c.json({ success: false, error: { code: "unauthorized", message: "Authentication required." } }, 401);
+      }
+      const manifestId = String(c.req.param?.("manifestId") ?? c.req.params?.manifestId ?? "").trim();
+      if (!manifestId) {
+        return c.json({ success: false, error: { code: "bad_request", message: "manifestId path param required." } }, 400);
+      }
+      const file = (0, import_node_path6.join)(this.storageDir, safeFilename(manifestId));
+      if (!(0, import_node_fs3.existsSync)(file)) {
+        return c.json({ success: false, error: { code: "not_found", message: `No marketplace install for ${manifestId}.` } }, 404);
+      }
+      let entry;
+      try {
+        entry = JSON.parse((0, import_node_fs3.readFileSync)(file, "utf8"));
+      } catch (err) {
+        return c.json({ success: false, error: { code: "storage_failed", message: `Failed to read manifest cache: ${err?.message ?? err}` } }, 500);
+      }
+      const datasets = Array.isArray(entry.manifest?.data) ? entry.manifest.data.filter((d) => d && d.object && Array.isArray(d.records)) : [];
+      if (datasets.length === 0) {
+        return c.json({
+          success: false,
+          error: { code: "nothing_to_purge", message: "This package declares no seed datasets." }
+        }, 400);
+      }
+      let driver;
+      try {
+        driver = ctx.getService("driver");
+      } catch {
+      }
+      if (!driver || typeof driver.delete !== "function") {
+        return c.json({
+          success: false,
+          error: { code: "driver_missing", message: "driver service unavailable \u2014 cannot purge." }
+        }, 500);
+      }
+      let deleted = 0;
+      let skipped = 0;
+      let errors = 0;
+      for (const ds of datasets) {
+        const object = String(ds.object);
+        for (const rec of ds.records) {
+          const id = rec?.id;
+          if (id === void 0 || id === null || id === "") {
+            skipped++;
+            continue;
+          }
+          try {
+            const r = await driver.delete(object, id);
+            if (r === false || r === 0 || r?.deleted === 0) skipped++;
+            else deleted++;
+          } catch (err) {
+            const msg = String(err?.message ?? err);
+            if (/not.?found|no row/i.test(msg)) skipped++;
+            else {
+              errors++;
+              ctx.logger?.warn?.(`[MarketplaceInstallLocal] purge ${object}#${id}: ${msg}`);
+            }
+          }
+        }
+      }
+      try {
+        entry.withSampleData = false;
+        (0, import_node_fs3.writeFileSync)(file, JSON.stringify(entry, null, 2), "utf8");
+      } catch {
+      }
+      ctx.logger?.info?.(`[MarketplaceInstallLocal] purged ${manifestId}: deleted=${deleted} skipped=${skipped} errors=${errors}`);
+      return c.json({
+        success: true,
+        data: { manifestId, deleted, skipped, errors, withSampleData: false }
+      }, 200);
+    };
     /**
      * Replicate the start-time side-effects that AppPlugin runs for
      * statically-declared apps but the `manifest` service does NOT: