feat(editor): wire the Bones structural X-ray plugin into the standalone editor

[wass08]

What

Registers @pascal-app/plugin-bones (the engineering X-ray: framing, girders, rafters, foundations) in the standalone editor app, mirroring how trees / mint / streetscape are already wired.

Net diff vs main is 4 files / 13 lines — the 19 commits on this branch are almost entirely chore: bump plugin-bones to <sha> churn, since the plugin itself lives in pascalorg/plugin-bones. Squash merge.

• apps/editor/lib/bootstrap.ts — extendPluginDiscovery(async () => [bonesPlugin]) + registerEditorHostPanel({ ...bonesHostPanel, defaultInstalled: false })
• apps/editor/next.config.ts — adds @pascal-app/plugin-bones to transpilePackages
• apps/editor/package.json — pins github:pascalorg/plugin-bones#a480fd81
• bun.lock

Opt-in by design

Bones ships uninstalled (defaultInstalled: false). Users enable it per scene from the Plugins panel — an engineering X-ray is a specialist view, not a default.

Why this PR exists

private-editor #340 already shipped the hosted side, but it pinned the editor submodule directly at this branch's head (d323bff2) rather than at a commit on editor main. That left main without the wiring and the private-repo pin pointing at unreviewed, never-CI'd code — this is the first CI run these changes have ever had.

Once this squash-merges, private-editor needs a follow-up submodule bump to the new main SHA, since the squash orphans d323bff2.

---

Note

Low Risk
Small, additive plugin wiring with no changes to auth, persistence, or core editor logic; Bones is opt-in by default.

Overview
Wires @pascal-app/plugin-bones into the standalone editor the same way trees, mint, and streetscape already are.

Bootstrap extends plugin discovery with bonesPlugin and registers bonesHostPanel with defaultInstalled: false, so the engineering X-ray stays off until a user enables it per scene from the Plugins panel.

Build/deps: pins the GitHub package in apps/editor/package.json, adds it to Next transpilePackages, and updates bun.lock.

^{Reviewed by Cursor Bugbot for commit 56362c5. Bugbot is set up for automated code reviews on this repo. Configure here.}

[cursor]

Cursor Bugbot has reviewed your changes using high effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

Want reviews to match your repository better? Bugbot Learning can learn team-specific rules from PR activity. A team admin can enable Learning in the Cursor dashboard.

^{Reviewed by Cursor Bugbot for commit d323bff. Configure here.}

[cursor]

Bones missing Tailwind source scan

Medium Severity

Bones is registered like trees, mint, and streetscape, but apps/editor/app/globals.css never adds a Tailwind v4 @source for @pascal-app/plugin-bones. Those other plugins are scanned from node_modules/.../src, so utility classes in the Bones host panel and renderers are likely omitted from generated CSS. After install, the engineering X-ray UI can render unstyled.

 

^{Reviewed by Cursor Bugbot for commit d323bff. Configure here.}