Upgrade @objectstack to 2.0.4, add local dev server for auth testing by Copilot · Pull Request #36 · objectstack-ai/mobile

Copilot · 2026-02-10T15:59:45Z

Upgrade all @objectstack packages to latest and scaffold a local ObjectStack server with authentication, per the protocol authentication guide.

Package upgrades

@objectstack/client, @objectstack/client-react: ^2.0.1 → ^2.0.4

Server test environment

New devDependencies for running a local ObjectStack server with in-memory storage:

@objectstack/core, plugin-hono-server, plugin-auth, objectql, driver-memory, tsx
server/dev.ts — Boots ObjectKernel + HonoServerPlugin + AuthPlugin on port 3000 with InMemoryDriver (zero external deps)
server/test-auth.ts — Smoke test: register → logout → login → session via ObjectStackClient

pnpm server:dev    # start local server
pnpm server:test   # run auth flow against it

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

protocol.objectstack.ai
- Triggering command: /home/REDACTED/work/_temp/ghcca-node/node/bin/node /home/REDACTED/work/_temp/ghcca-node/node/bin/node --enable-source-maps /home/REDACTED/work/_temp/copilot-developer-action-main/dist/index.js (dns block)

If you need me to access, download, or install something from one of these locations, you can either:

Configure Actions setup steps to set up my environment, which run before the firewall is enabled
Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.

- Upgrade @objectstack/client and @objectstack/client-react from ^2.0.1 to ^2.0.4 - Add server-side devDependencies: @objectstack/core, plugin-hono-server, plugin-auth, objectql, driver-memory, tsx - Create server/dev.ts following the authentication guide - Create server/test-auth.ts for auth flow smoke testing - Add server:dev and server:test npm scripts Co-authored-by: hotlong <50353452+hotlong@users.noreply.github.com>

Copilot

Pull request overview

Upgrades the mobile app’s ObjectStack SDK dependencies and adds a lightweight local ObjectStack dev server + auth smoke test to validate the authentication flow during development.

Changes:

Bumped @objectstack/client and @objectstack/client-react to ^2.0.4.
Added a local ObjectStack dev server (server/dev.ts) using in-memory storage + auth plugin.
Added an auth smoke-test script (server/test-auth.ts) and corresponding pnpm scripts.

Reviewed changes

Copilot reviewed 3 out of 4 changed files in this pull request and generated 5 comments.

File	Description
server/dev.ts	New local ObjectStack dev server bootstrapping kernel + Hono server + auth plugin.
server/test-auth.ts	New auth flow smoke test (register → logout → login → session).
package.json	Adds `server:dev` / `server:test` scripts and devDependencies for the local server.
pnpm-lock.yaml	Lockfile updates for ObjectStack upgrades and new server-related dependencies (incl. `tsx`).

Files not reviewed (1)

pnpm-lock.yaml: Language not supported

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Copilot · 2026-02-10T16:23:03Z

server/test-auth.ts

+  const reg = await client.auth.register({
+    email: "test@example.com",
+    password: "SecurePassword123!",
+    name: "Test User",
+  });
+
+  if (reg.data?.user) {
+    console.log("   ✅ Registered:", reg.data.user.email);
+  }
+
+  // 2. Logout
+  console.log("🚪 Logging out…");
+  await client.auth.logout();
+  console.log("   ✅ Logged out");
+
+  // 3. Login
+  console.log("🔐 Logging in…");
+  const login = await client.auth.login({
+    type: "email",
+    email: "test@example.com",
+    password: "SecurePassword123!",
+  });
+
+  if (login.data?.user) {
+    console.log("   ✅ Logged in:", login.data.user.email);
+  }
+
+  // 4. Session
+  console.log("👤 Getting session…");
+  const session = await client.auth.me();
+
+  if (session.data?.user) {
+    console.log("   ✅ Session user:", session.data.user.email);
+  }
+
+  console.log("\n✨ All authentication tests passed!\n");
+}


testAuthFlow() always prints "All authentication tests passed" even if reg/login/session don't contain a user (the if blocks only log on success but never fail on missing data). Consider asserting expected success (e.g., throw when the response indicates an error or when data.user is missing) so this smoke test can't silently pass on partial failures.

Copilot · 2026-02-10T16:23:03Z

server/test-auth.ts

+  const reg = await client.auth.register({
+    email: "test@example.com",
+    password: "SecurePassword123!",
+    name: "Test User",
+  });


This smoke test uses a fixed email/password (test@example.com). Running it multiple times against the same long-lived dev server can become stateful/non-deterministic (e.g., the account may already exist, or multiple accounts could be created depending on server behavior). Consider generating a unique email per run (timestamp/UUID) or adding a cleanup step so repeated runs are reliable.

Copilot · 2026-02-10T16:23:04Z

server/test-auth.ts

+}
+
+testAuthFlow().catch((err) => {
+  console.error("\n❌ Auth test failed:", err.message);


The catch handler assumes err is an Error (err.message). If a non-Error value is thrown/rejected, this will log undefined and lose useful debugging info. Consider logging err directly (or normalizing to an Error) before accessing .message.

Suggested change

console.error("\n❌ Auth test failed:", err.message);

const message = err instanceof Error ? err.message : String(err);

console.error("\n❌ Auth test failed:", message);

Copilot · 2026-02-10T16:23:04Z

server/dev.ts

+    new AuthPlugin({
+      secret: AUTH_SECRET,
+      baseUrl: `http://localhost:${PORT}`,
+    })
+  );


AuthPlugin is configured with baseUrl: http://localhost:${PORT}. If the server is accessed via a different hostname/IP (e.g., device on LAN, 127.0.0.1 vs localhost, reverse proxy), auth cookie/session behavior can break due to baseUrl mismatch. Consider deriving baseUrl from an env var (e.g., BASE_URL) with a localhost default, and log the effective baseUrl on startup.

Copilot · 2026-02-10T16:23:04Z

server/dev.ts

+  process.on("SIGINT", async () => {
+    console.log("\n🛑 Shutting down…");
+    await kernel.shutdown();
+    process.exit(0);
+  });


The SIGINT handler is async and awaits kernel.shutdown(), but any shutdown error will become an unhandled rejection (and process.exit(0) will still run if an exception isn't caught). Consider wrapping the shutdown in try/catch, setting a non-zero exit code on failure, and ensuring shutdown is only invoked once.

Initial plan

6d404fa

Copilot AI assigned Copilot and hotlong Feb 10, 2026

Copilot started work on behalf of hotlong February 10, 2026 16:03 View session

Copilot AI changed the title ~~[WIP] Update to latest version and set up server testing environment~~ Upgrade @objectstack to 2.0.4, add local dev server for auth testing Feb 10, 2026

Copilot AI requested a review from hotlong February 10, 2026 16:15

Copilot finished work on behalf of hotlong February 10, 2026 16:15

hotlong marked this pull request as ready for review February 10, 2026 16:19

Copilot AI review requested due to automatic review settings February 10, 2026 16:19

Copilot started reviewing on behalf of hotlong February 10, 2026 16:19 View session

Copilot AI reviewed Feb 10, 2026

View reviewed changes

hotlong merged commit 618d633 into main Feb 10, 2026
7 checks passed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Upgrade @objectstack to 2.0.4, add local dev server for auth testing#36

Upgrade @objectstack to 2.0.4, add local dev server for auth testing#36
hotlong merged 2 commits intomainfrom
copilot/upgrade-to-latest-version

Copilot AI commented Feb 10, 2026 •

edited

Loading

Uh oh!

Copilot AI left a comment

Uh oh!

Copilot AI Feb 10, 2026

Uh oh!

Copilot AI Feb 10, 2026

Uh oh!

Copilot AI Feb 10, 2026

Uh oh!

Copilot AI Feb 10, 2026

Uh oh!

Copilot AI Feb 10, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

	console.error("\n❌ Auth test failed:", err.message);
	const message = err instanceof Error ? err.message : String(err);
	console.error("\n❌ Auth test failed:", message);

Conversation

Copilot AI commented Feb 10, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Package upgrades

Server test environment

I tried to connect to the following addresses, but was blocked by firewall rules:

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Copilot AI Feb 10, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Feb 10, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Feb 10, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Feb 10, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Feb 10, 2026

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Copilot AI commented Feb 10, 2026 •

edited

Loading