test(cli): pin the package-owned readers on a two-package config, and enumerate every top-level read

- normalized-call-sites.test.ts gains a second table: every read of a
  package-owned key (the key set derived in stack-collections.ts) off a
  stack-named receiver in src, classified resolved (with evidence present in
  the code) or top-level on purpose (with the reason).
- serve-package-declared-capabilities.test.ts boots os serve on two-package
  configs: requires, the requires narrowing, analyticsCubes, the flow count and
  tiers, with the one-package control.
- package-owned-readers.test.ts and package-owned-command-readers.test.ts pin
  os generate, os doctor, os diff and os migrate meta against their
  one-package controls; the migrate plan provider case joins its existing file.

Claude-Session: https://claude.ai/code/session_01RWZbGvPFcRKvUqASZtunCU
Co-Authored-By: Claude <noreply@anthropic.com>

Author: claude

packages/cli/src/utils/schema-migrate.requires-providers.integration.test.ts

@@ -5,6 +5,7 @@ import { mkdtempSync, writeFileSync, rmSync } from 'node:fs';
 import { tmpdir } from 'node:os';
 import { join } from 'node:path';
 import { bootSchemaStack } from './schema-migrate.js';
+import { linkSpec } from '../../test/helpers/define-stack-fixture.js';
 
 /**
  * #21732 — `os migrate plan` / `apply` boot a config whose plugins hard-depend
@@ -93,3 +94,79 @@ describe('os migrate plan/apply resolve the requires-supplied provider a plugin
     }
   }, 60_000);
 });
+
+/**
+ * #22288 — the same boot when `requires` is declared by ONE PACKAGE of a
+ * multi-package config, not at its top level.
+ *
+ * `composeStacks([a, b], { manifest: 'preserve' })` carries `requires` only in
+ * the body of the package that declared it. The composition read the top level
+ * alone, so the token was never searched and the kernel refused the order —
+ * measured through the door on `6729e107`: `os migrate plan` exited 1 with
+ * `Dependency 'com.objectstack.service-automation' not found for plugin …`,
+ * while the same definitions in one `defineStack` planned and exited 0. It now
+ * reads the tokens by `os serve`'s rule (`stackDeclaredCapabilities`).
+ */
+describe('os migrate plan/apply resolve a provider a PACKAGE requires (#22288)', () => {
+  let dir: string;
+  const savedEnv: Record<string, string | undefined> = {};
+
+  beforeAll(() => {
+    dir = mkdtempSync(join(tmpdir(), 'os-22288-'));
+    writeFileSync(
+      join(dir, 'objectstack.config.ts'),
+      [
+        "import { defineStack, composeStacks } from '@objectstack/spec';",
+        'class DependentConnector {',
+        "  name = 'com.example.os22288.connector';",
+        "  dependencies = ['com.objectstack.service-automation'];",
+        '  async init(ctx: any) {',
+        "    ctx.getService('automation').registerConnectorProvider('os22288', () => ({}));",
+        '  }',
+        "  async start() { throw new Error('a host start() must not run under os migrate'); }",
+        '}',
+        // The SERVICE package declares the capability; the APP package carries
+        // the plugin that hard-depends on its provider.
+        'const svc = defineStack({',
+        "  manifest: { id: 'com.example.os22288.svc', name: 'svc', namespace: 'osa', version: '0.0.0', type: 'module' },",
+        "  requires: ['automation'],",
+        "  objects: [{ name: 'osa_thing', label: 'Thing', fields: { title: { type: 'text', label: 'Title' } } }],",
+        '} as any);',
+        'const app = defineStack({',
+        "  manifest: { id: 'com.example.os22288.app', name: 'app', namespace: 'osb', version: '0.0.0', type: 'app' },",
+        "  objects: [{ name: 'osb_other', label: 'Other', fields: { title: { type: 'text', label: 'Title' } } }],",
+        '  plugins: [new DependentConnector()],',
+        '} as any);',
+        "export default composeStacks([svc, app], { manifest: 'preserve' });",
+        '',
+      ].join('\n'),
+    );
+    linkSpec(dir);
+    savedEnv.OS_ARTIFACT_PATH = process.env.OS_ARTIFACT_PATH;
+    process.env.OS_ARTIFACT_PATH = join(dir, 'dist', 'objectstack.json');
+  });
+
+  afterAll(() => {
+    if (savedEnv.OS_ARTIFACT_PATH === undefined) delete process.env.OS_ARTIFACT_PATH;
+    else process.env.OS_ARTIFACT_PATH = savedEnv.OS_ARTIFACT_PATH;
+    try { rmSync(dir, { recursive: true, force: true }); } catch { /* ignore */ }
+  });
+
+  it('boots and orders the dependent plugin after the provider the package declared', async () => {
+    const boot = await bootSchemaStack({
+      jsonOutput: false,
+      databaseUrl: `file:${join(dir, 'plan.db')}`,
+      deferSchemaDdl: true,
+      composeHostStack: true,
+      projectRoot: dir,
+    });
+    try {
+      expect(boot.kernel.getService('automation').getConnectorProvider('os22288')).toBeTypeOf('function');
+      expect(boot.composition.notes.join(' ')).toContain(
+        "Composed AutomationServicePlugin for `requires: ['automation']`",
+      );
+    } finally {
+      await boot.shutdown();
+    }
+  }, 60_000);
+});