chore(deps): bump @objectstack/spec from 0.8.2 to 4.0.1

[dependabot]

Bumps @objectstack/spec from 0.8.2 to 4.0.1.

Release notes

Sourced from @​objectstack/spec's releases.

@​objectstack/spec@​4.0.1

@​objectstack/spec

4.0.0

Minor Changes

• f08ffc3: Fix discovery API endpoint routing and protocol consistency.

  Discovery route standardization:

  • All adapters (Express, Fastify, Hono, NestJS, Next.js, Nuxt, SvelteKit) now mount the discovery endpoint at {prefix}/discovery instead of {prefix} root.
  • .well-known/objectstack redirects now point to {prefix}/discovery.
  • Client connect() fallback URL changed from /api/v1 to /api/v1/discovery.
  • Runtime dispatcher handles both /discovery (standard) and / (legacy) for backward compatibility.

  Schema & route alignment:

  • Added storage (service: file-storage) and feed (service: data) routes to DEFAULT_DISPATCHER_ROUTES.
  • Added feed and discovery fields to ApiRoutesSchema.
  • Unified GetDiscoveryResponseSchema with DiscoverySchema as single source of truth.
  • Client getRoute('feed') fallback updated from /api/v1/data to /api/v1/feed.

  Type safety:

  • Extracted ApiRouteType from ApiRoutes keys for type-safe client route resolution.
  • Removed as any type casting in client route access.

• e0b0a78: Deprecate DataEngineQueryOptions in favor of QueryAST-aligned EngineQueryOptions.

  Engine, Protocol, and Client now use standard QueryAST parameter names:

  • filter → where
  • select → fields
  • sort → orderBy
  • skip → offset
  • populate → expand
  • top → limit

  The old DataEngine* schemas and types are preserved with @deprecated markers for backward compatibility.

3.3.1

Minor Changes

• AI Agent/Skill/Tool metadata protocol refactoring (aligned with Salesforce Agentforce, Microsoft Copilot Studio, ServiceNow Now Assist)
  • Tool as first-class metadata (src/ai/tool.zod.ts): ToolSchema, ToolCategorySchema, defineTool() factory. Fields: name, label, description, category, parameters (JSON Schema), outputSchema, objectName, requiresConfirmation, permissions, active, builtIn.
  • Skill as ability group (src/ai/skill.zod.ts): SkillSchema, SkillTriggerConditionSchema, defineSkill() factory. Fields: name, label, description, instructions, tools (tool name references), triggerPhrases, triggerConditions, permissions, active.
  • Agent protocol updated: Added skills: string[] for Agent→Skill→Tool architecture; existing tools retained as backward-compatible fallback. Added permissions: string[] for access control.
  • Metadata registry: tool and skill registered as first-class metadata types in MetadataTypeSchema and DEFAULT_METADATA_TYPE_REGISTRY (domain: ai, filePatterns: **/*.tool.ts, **/*.skill.ts, etc.)

... (truncated)

Changelog

Sourced from @​objectstack/spec's changelog.

[4.0.1] — 2026-03-31

Fixed

• Version Alignment Patch — Unified all package versions to 4.0.1. Previously, @objectstack/driver-sql and @objectstack/driver-turso were at 3.3.2, example packages were at 3.0.26, and the root monorepo was at 3.0.8 while all other @objectstack/* packages were at 4.0.0. All packages now share a single, consistent version number aligned with the changeset fixed group configuration.

Added

• @objectstack/service-realtime — sys_presence System Object — Registers the sys_presence system object in the service-realtime package as the canonical Presence domain object. Fields align with the PresenceStateSchema protocol definition (user_id, session_id, status, last_seen, current_location, device, custom_status, metadata). RealtimeServicePlugin now auto-registers the object via the app.com.objectstack.service.realtime service convention. Added SystemObjectName.PRESENCE constant ('sys_presence') to @objectstack/spec/system.
• @objectstack/service-ai — Data Chatbot: Tool Call Loop & Agent Runtime — Implements an Airtable Copilot-style data conversation Chatbot with full-stack support:
  • AIService.chatWithTools() — automatic multi-round LLM ↔ tool call loop with maxIterations safety limit, parallel tool execution, and forced final response
  • AIResult.toolCalls — new field on the AI result contract so adapters can return tool call requests from the LLM
  • ChatWithToolsOptions — new contract interface extending AIRequestOptions
  • 5 built-in data tools: list_objects, describe_object, query_records, get_record, aggregate_data — with parameter schemas, limit capping (max 200), and error handling
  • registerDataTools(registry, context) — factory to register all data tools against IDataEngine + IMetadataService
  • AgentRuntime — loads agent metadata, builds system prompts from instructions + UI context (objectName, recordId, viewName), resolves agent tool references against the ToolRegistry
  • buildAgentRoutes() — new POST /api/v1/ai/agents/:agentName/chat route with agent lookup, active-check, context injection, and chatWithTools integration
  • DATA_CHAT_AGENT — built-in data_chat agent spec with role, instructions, guardrails, planning config, and tool declarations
  • AIServicePlugin auto-registers data tools and data_chat agent when IDataEngine + IMetadataService are available in the kernel
  • 42 new test cases covering tool call loop, data tools, agent runtime, agent routes, and agent spec validation
• @objectstack/service-ai — ObjectQL-backed persistent ConversationService — New ObjectQLConversationService implements IAIConversationService using IDataEngine for durable conversation and message storage across service restarts:
  • ai_conversations and ai_messages system object definitions (namespace ai)
  • Full CRUD: create, get, list (with userId/agentId/limit/cursor filters), addMessage (with toolCalls/toolCallId support), and delete (cascade)
  • AIServicePlugin auto-detects IDataEngine in the kernel service registry and uses ObjectQLConversationService when available, falling back to InMemoryConversationService for dev/test environments
  • AIServicePluginOptions.conversationService allows explicit override

... (truncated)

Commits

• 27d40a4 Merge pull request #1026 from objectstack-ai/copilot/fix-ci-build-test-errors...
• a6bed27 fix: add missing Field.json() helper to resolve service-realtime build error
• f327fbf Initial plan
• 643cc78 Merge pull request #1025 from objectstack-ai/copilot/update-package-version-n...
• 5520250 Merge pull request #1022 from objectstack-ai/copilot/refactor-service-ai-auth...
• d4eca39 fix: address all PR review feedback
• c1baf9a chore: unify all package versions to 4.0.1
• 43f3424 Initial plan
• 647a2ee 删除 align-driver-versions.md
• 63d9c43 Merge pull request #1020 from objectstack-ai/copilot/add-sys-presence-to-serv...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: automated. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[dependabot]

Superseded by #42.