@xemahq/xema-service-nest 0.2.7 → 0.3.0

package/dist/index.d.ts

@@ -5,4 +5,5 @@ export { applyXemaServiceMiddleware } from './lib/apply-xema-service-middleware'
 export { type ConfigureAuthMiddlewareOptions } from '@xemahq/platform-common';
 export { validateBiomeServiceDescriptor, BiomeServiceDescriptorError, type BiomeServiceDescriptor, } from './lib/biome-service-descriptor';
 export { ServiceKind } from '@xemahq/xema-decorators';
+export { IdentityBootstrapModule, IdentityBootstrapService, type IdentityBootstrapModuleAsyncOptions, type IdentityBootstrapConfig, } from '@xemahq/identity-client';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EACL,iBAAiB,EACjB,KAAK,wBAAwB,GAC9B,MAAM,2BAA2B,CAAC;AAKnC,OAAO,EACL,oBAAoB,EACpB,KAAK,2BAA2B,GACjC,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,KAAK,uBAAuB,EAC5B,KAAK,qBAAqB,EAC1B,YAAY,EACZ,yBAAyB,EACzB,yBAAyB,GAC1B,MAAM,2BAA2B,CAAC;AAGnC,OAAO,EAAE,0BAA0B,EAAE,MAAM,qCAAqC,CAAC;AACjF,OAAO,EAAE,KAAK,8BAA8B,EAAE,MAAM,yBAAyB,CAAC;AAG9E,OAAO,EACL,8BAA8B,EAC9B,2BAA2B,EAC3B,KAAK,sBAAsB,GAC5B,MAAM,gCAAgC,CAAC;AAIxC,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EACL,iBAAiB,EACjB,KAAK,wBAAwB,GAC9B,MAAM,2BAA2B,CAAC;AAKnC,OAAO,EACL,oBAAoB,EACpB,KAAK,2BAA2B,GACjC,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,KAAK,uBAAuB,EAC5B,KAAK,qBAAqB,EAC1B,YAAY,EACZ,yBAAyB,EACzB,yBAAyB,GAC1B,MAAM,2BAA2B,CAAC;AAGnC,OAAO,EAAE,0BAA0B,EAAE,MAAM,qCAAqC,CAAC;AACjF,OAAO,EAAE,KAAK,8BAA8B,EAAE,MAAM,yBAAyB,CAAC;AAG9E,OAAO,EACL,8BAA8B,EAC9B,2BAA2B,EAC3B,KAAK,sBAAsB,GAC5B,MAAM,gCAAgC,CAAC;AAIxC,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAStD,OAAO,EACL,uBAAuB,EACvB,wBAAwB,EACxB,KAAK,mCAAmC,EACxC,KAAK,uBAAuB,GAC7B,MAAM,yBAAyB,CAAC"}

package/dist/index.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.ServiceKind = exports.BiomeServiceDescriptorError = exports.validateBiomeServiceDescriptor = exports.applyXemaServiceMiddleware = exports.DEFAULT_SWAGGER_JSON_PATH = exports.DEFAULT_SWAGGER_DOCS_PATH = exports.DEFAULT_PORT = exports.bootstrapXemaService = exports.XemaServiceModule = void 0;
+exports.IdentityBootstrapService = exports.IdentityBootstrapModule = exports.ServiceKind = exports.BiomeServiceDescriptorError = exports.validateBiomeServiceDescriptor = exports.applyXemaServiceMiddleware = exports.DEFAULT_SWAGGER_JSON_PATH = exports.DEFAULT_SWAGGER_DOCS_PATH = exports.DEFAULT_PORT = exports.bootstrapXemaService = exports.XemaServiceModule = void 0;
 var xema_service_module_1 = require("./lib/xema-service-module");
 Object.defineProperty(exports, "XemaServiceModule", { enumerable: true, get: function () { return xema_service_module_1.XemaServiceModule; } });
 var bootstrap_xema_service_1 = require("./lib/bootstrap-xema-service");
@@ -16,4 +16,7 @@ Object.defineProperty(exports, "validateBiomeServiceDescriptor", { enumerable: t
 Object.defineProperty(exports, "BiomeServiceDescriptorError", { enumerable: true, get: function () { return biome_service_descriptor_1.BiomeServiceDescriptorError; } });
 var xema_decorators_1 = require("@xemahq/xema-decorators");
 Object.defineProperty(exports, "ServiceKind", { enumerable: true, get: function () { return xema_decorators_1.ServiceKind; } });
+var identity_client_1 = require("@xemahq/identity-client");
+Object.defineProperty(exports, "IdentityBootstrapModule", { enumerable: true, get: function () { return identity_client_1.IdentityBootstrapModule; } });
+Object.defineProperty(exports, "IdentityBootstrapService", { enumerable: true, get: function () { return identity_client_1.IdentityBootstrapService; } });
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AACA,iEAGmC;AAFjC,wHAAA,iBAAiB,OAAA;AAOnB,uEAGsC;AAFpC,8HAAA,oBAAoB,OAAA;AAGtB,iEAMmC;AAHjC,mHAAA,YAAY,OAAA;AACZ,gIAAA,yBAAyB,OAAA;AACzB,gIAAA,yBAAyB,OAAA;AAI3B,qFAAiF;AAAxE,2IAAA,0BAA0B,OAAA;AAInC,2EAIwC;AAHtC,0IAAA,8BAA8B,OAAA;AAC9B,uIAAA,2BAA2B,OAAA;AAM7B,2DAAsD;AAA7C,8GAAA,WAAW,OAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AACA,iEAGmC;AAFjC,wHAAA,iBAAiB,OAAA;AAOnB,uEAGsC;AAFpC,8HAAA,oBAAoB,OAAA;AAGtB,iEAMmC;AAHjC,mHAAA,YAAY,OAAA;AACZ,gIAAA,yBAAyB,OAAA;AACzB,gIAAA,yBAAyB,OAAA;AAI3B,qFAAiF;AAAxE,2IAAA,0BAA0B,OAAA;AAInC,2EAIwC;AAHtC,0IAAA,8BAA8B,OAAA;AAC9B,uIAAA,2BAA2B,OAAA;AAM7B,2DAAsD;AAA7C,8GAAA,WAAW,OAAA;AASpB,2DAKiC;AAJ/B,0HAAA,uBAAuB,OAAA;AACvB,2HAAA,wBAAwB,OAAA"}

package/dist/lib/bootstrap-xema-service.d.ts

@@ -10,6 +10,7 @@ export interface BootstrapXemaServiceOptions {
     readonly swaggerVersion?: string;
     readonly port?: number | string;
     readonly swagger?: boolean | BootstrapSwaggerOptions;
+    readonly composeDatabaseUrlFromEnv?: boolean;
     readonly registerGlobalExceptionFilter?: boolean;
     readonly registerResponseEnvelopeInterceptor?: boolean;
     readonly configureApp?: (app: NestExpressApplication) => void | Promise<void>;

package/dist/lib/bootstrap-xema-service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bootstrap-xema-service.d.ts","sourceRoot":"","sources":["../../src/lib/bootstrap-xema-service.ts"],"names":[],"mappings":"AAUA,OAAO,EAML,KAAK,uBAAuB,EAC7B,MAAM,uBAAuB,CAAC;AAE/B,OAAO,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAC7D,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAOvE,MAAM,WAAW,2BAA2B;IAE1C,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAMlC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAE7B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAE9B,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IAOpC,QAAQ,CAAC,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAK7C,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IAKjC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAOhC,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,GAAG,uBAAuB,CAAC;IAOrD,QAAQ,CAAC,6BAA6B,CAAC,EAAE,OAAO,CAAC;IAQjD,QAAQ,CAAC,mCAAmC,CAAC,EAAE,OAAO,CAAC;IAQvD,QAAQ,CAAC,YAAY,CAAC,EAAE,CACtB,GAAG,EAAE,sBAAsB,KACxB,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3B;AAsCD,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,2BAA2B,GACnC,OAAO,CAAC,gBAAgB,CAAC,CA+D3B"}
+{"version":3,"file":"bootstrap-xema-service.d.ts","sourceRoot":"","sources":["../../src/lib/bootstrap-xema-service.ts"],"names":[],"mappings":"AAWA,OAAO,EAML,KAAK,uBAAuB,EAC7B,MAAM,uBAAuB,CAAC;AAE/B,OAAO,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAC7D,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAOvE,MAAM,WAAW,2BAA2B;IAE1C,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAMlC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAE7B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAE9B,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IAOpC,QAAQ,CAAC,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAK7C,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IAKjC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAOhC,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,GAAG,uBAAuB,CAAC;IAYrD,QAAQ,CAAC,yBAAyB,CAAC,EAAE,OAAO,CAAC;IAO7C,QAAQ,CAAC,6BAA6B,CAAC,EAAE,OAAO,CAAC;IAQjD,QAAQ,CAAC,mCAAmC,CAAC,EAAE,OAAO,CAAC;IAQvD,QAAQ,CAAC,YAAY,CAAC,EAAE,CACtB,GAAG,EAAE,sBAAsB,KACxB,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3B;AAsCD,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,2BAA2B,GACnC,OAAO,CAAC,gBAAgB,CAAC,CA2E3B"}

package/dist/lib/bootstrap-xema-service.js

@@ -8,6 +8,12 @@ const bootstrap_swagger_1 = require("./bootstrap-swagger");
 const bootstrap_internals_1 = require("./bootstrap-internals");
 async function bootstrapXemaService(options) {
     const logger = new common_1.Logger('bootstrapXemaService');
+    if (options.composeDatabaseUrlFromEnv !== false && !process.env.DATABASE_URL) {
+        const composed = (0, platform_common_1.composeBiomeDatabaseUrlFromEnv)();
+        if (composed) {
+            process.env.DATABASE_URL = composed;
+        }
+    }
     (0, bootstrap_internals_1.validateRequiredEnv)(options.requiredEnvVars ?? []);
     const app = await core_1.NestFactory.create(options.appModule, { cors: (0, platform_common_1.getCorsConfig)(process.env.CORS_ALLOWED_ORIGINS) });
     (0, platform_common_1.applyStandardBodyParsers)(app);

package/dist/lib/bootstrap-xema-service.js.map

@@ -1 +1 @@
-{"version":3,"file":"bootstrap-xema-service.js","sourceRoot":"","sources":["../../src/lib/bootstrap-xema-service.ts"],"names":[],"mappings":";;AA+HA,oDAiEC;AAhMD,2CAAwD;AACxD,uCAA2C;AAC3C,6DAKiC;AAEjC,2DAA2D;AAC3D,+DAO+B;AA8GxB,KAAK,UAAU,oBAAoB,CACxC,OAAoC;IAEpC,MAAM,MAAM,GAAG,IAAI,eAAM,CAAC,sBAAsB,CAAC,CAAC;IAGlD,IAAA,yCAAmB,EAAC,OAAO,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC;IAGnD,MAAM,GAAG,GAAG,MAAM,kBAAW,CAAC,MAAM,CAClC,OAAO,CAAC,SAAS,EACjB,EAAE,IAAI,EAAE,IAAA,+BAAa,EAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,EAAE,CAC1D,CAAC;IAGF,IAAA,0CAAwB,EAAC,GAAG,CAAC,CAAC;IAG9B,GAAG,CAAC,cAAc,CAChB,IAAI,uBAAc,CAAC;QACjB,SAAS,EAAE,IAAI;QACf,oBAAoB,EAAE,IAAI;QAC1B,SAAS,EAAE,IAAI;KAChB,CAAC,CACH,CAAC;IAGF,IAAI,OAAO,CAAC,6BAA6B,KAAK,KAAK,EAAE,CAAC;QACpD,GAAG,CAAC,gBAAgB,CAAC,IAAI,uCAAqB,EAAE,CAAC,CAAC;IACpD,CAAC;IAID,IAAI,OAAO,CAAC,mCAAmC,KAAK,IAAI,EAAE,CAAC;QACzD,GAAG,CAAC,qBAAqB,CAAC,IAAI,6CAA2B,EAAE,CAAC,CAAC;IAC/D,CAAC;IAGD,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;QACzB,MAAM,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;IAClC,CAAC;IAGD,MAAM,aAAa,GAAG,IAAA,0CAAoB,EAAC;QACzC,OAAO,EAAE,IAAA,sCAAgB,EAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,yCAAmB,CAAC,CAAC;QAC5E,KAAK,EAAE,OAAO,CAAC,YAAY;QAC3B,WAAW,EAAE,OAAO,CAAC,kBAAkB;QACvC,OAAO,EAAE,OAAO,CAAC,cAAc,IAAI,OAAO;QAC1C,aAAa,EAAE,OAAO,CAAC,OAAO;QAC9B,GAAG,EAAE;YACH,aAAa,EAAE,OAAO,CAAC,GAAG,CAAC,uBAAuB;YAClD,iBAAiB,EAAE,OAAO,CAAC,GAAG,CAAC,2BAA2B;YAC1D,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB;SAC9C;KACF,CAAC,CAAC;IACH,IAAI,aAAa,EAAE,CAAC;QAClB,IAAA,wCAAoB,EAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IAC3C,CAAC;IAGD,MAAM,IAAI,GAAG,IAAA,iCAAW,EAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACzD,MAAM,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACvB,MAAM,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,WAAW,sBAAsB,IAAI,EAAE,CAAC,CAAC;IAE/D,OAAO,GAAG,CAAC;AACb,CAAC"}
+{"version":3,"file":"bootstrap-xema-service.js","sourceRoot":"","sources":["../../src/lib/bootstrap-xema-service.ts"],"names":[],"mappings":";;AA4IA,oDA6EC;AAzND,2CAAwD;AACxD,uCAA2C;AAC3C,6DAMiC;AAEjC,2DAA2D;AAC3D,+DAO+B;AA0HxB,KAAK,UAAU,oBAAoB,CACxC,OAAoC;IAEpC,MAAM,MAAM,GAAG,IAAI,eAAM,CAAC,sBAAsB,CAAC,CAAC;IAOlD,IAAI,OAAO,CAAC,yBAAyB,KAAK,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC;QAC7E,MAAM,QAAQ,GAAG,IAAA,gDAA8B,GAAE,CAAC;QAClD,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,CAAC,GAAG,CAAC,YAAY,GAAG,QAAQ,CAAC;QACtC,CAAC;IACH,CAAC;IAGD,IAAA,yCAAmB,EAAC,OAAO,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC;IAGnD,MAAM,GAAG,GAAG,MAAM,kBAAW,CAAC,MAAM,CAClC,OAAO,CAAC,SAAS,EACjB,EAAE,IAAI,EAAE,IAAA,+BAAa,EAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,EAAE,CAC1D,CAAC;IAGF,IAAA,0CAAwB,EAAC,GAAG,CAAC,CAAC;IAG9B,GAAG,CAAC,cAAc,CAChB,IAAI,uBAAc,CAAC;QACjB,SAAS,EAAE,IAAI;QACf,oBAAoB,EAAE,IAAI;QAC1B,SAAS,EAAE,IAAI;KAChB,CAAC,CACH,CAAC;IAGF,IAAI,OAAO,CAAC,6BAA6B,KAAK,KAAK,EAAE,CAAC;QACpD,GAAG,CAAC,gBAAgB,CAAC,IAAI,uCAAqB,EAAE,CAAC,CAAC;IACpD,CAAC;IAID,IAAI,OAAO,CAAC,mCAAmC,KAAK,IAAI,EAAE,CAAC;QACzD,GAAG,CAAC,qBAAqB,CAAC,IAAI,6CAA2B,EAAE,CAAC,CAAC;IAC/D,CAAC;IAGD,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;QACzB,MAAM,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;IAClC,CAAC;IAGD,MAAM,aAAa,GAAG,IAAA,0CAAoB,EAAC;QACzC,OAAO,EAAE,IAAA,sCAAgB,EAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,yCAAmB,CAAC,CAAC;QAC5E,KAAK,EAAE,OAAO,CAAC,YAAY;QAC3B,WAAW,EAAE,OAAO,CAAC,kBAAkB;QACvC,OAAO,EAAE,OAAO,CAAC,cAAc,IAAI,OAAO;QAC1C,aAAa,EAAE,OAAO,CAAC,OAAO;QAC9B,GAAG,EAAE;YACH,aAAa,EAAE,OAAO,CAAC,GAAG,CAAC,uBAAuB;YAClD,iBAAiB,EAAE,OAAO,CAAC,GAAG,CAAC,2BAA2B;YAC1D,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB;SAC9C;KACF,CAAC,CAAC;IACH,IAAI,aAAa,EAAE,CAAC;QAClB,IAAA,wCAAoB,EAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IAC3C,CAAC;IAGD,MAAM,IAAI,GAAG,IAAA,iCAAW,EAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACzD,MAAM,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACvB,MAAM,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,WAAW,sBAAsB,IAAI,EAAE,CAAC,CAAC;IAE/D,OAAO,GAAG,CAAC;AACb,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xemahq/xema-service-nest",
-  "version": "0.2.7",
+  "version": "0.3.0",
   "description": "Xema platform service-bootstrap SDK. `XemaServiceModule.forBiome(descriptor)` composes the full platform service stack — Service Registry, Identity bootstrap, Auth (JWT verification + request context), and the Xema runtime route/capability scanner — behind a single call, so a biome API is auth-correct in ~5 lines and never re-wires authentication.",
   "keywords": [
     "xema",

package/src/index.ts

@@ -33,3 +33,17 @@ export {
 // Re-export `ServiceKind` so a generated bootstrap constant can name its kind
 // without a second import from `@xemahq/xema-decorators`.
 export { ServiceKind } from '@xemahq/xema-decorators';
+
+// Re-export the identity-bootstrap module + service from the one-call bootstrap
+// surface. `XemaServiceModule.forBiome` already wires `IdentityBootstrapModule`
+// internally, but a biome that needs to reference the module (e.g. to wire it
+// into a feature sub-module) or inject `IdentityBootstrapService` (to mint a
+// service bearer for a bespoke client) would otherwise reach into the deeper
+// `@xemahq/identity-client` path. Surfacing them here keeps the bootstrap SDK
+// the single import a platform-correct biome service needs.
+export {
+  IdentityBootstrapModule,
+  IdentityBootstrapService,
+  type IdentityBootstrapModuleAsyncOptions,
+  type IdentityBootstrapConfig,
+} from '@xemahq/identity-client';

package/src/lib/bootstrap-xema-service.ts

@@ -2,6 +2,7 @@ import { Logger, ValidationPipe } from '@nestjs/common';
 import { NestFactory } from '@nestjs/core';
 import {
   applyStandardBodyParsers,
+  composeBiomeDatabaseUrlFromEnv,
   getCorsConfig,
   GlobalExceptionFilter,
   ResponseEnvelopeInterceptor,
@@ -62,6 +63,18 @@ export interface BootstrapXemaServiceOptions {
    * `SWAGGER_ENABLED=false` env kill-switch.
    */
   readonly swagger?: boolean | BootstrapSwaggerOptions;
+  /**
+   * Compose `process.env.DATABASE_URL` from the standard `DB_*` env contract
+   * (via `composeBiomeDatabaseUrlFromEnv`) before the app is created, when
+   * `DATABASE_URL` is not already set. Defaults to `true` — this inlines the
+   * local `ensureDatabaseUrl()` shim ~36 DB-using services hand-roll in their
+   * `main.ts`. It is behavior-preserving:
+   *   • if `DATABASE_URL` is already set, it is a no-op (explicit URL wins);
+   *   • if the `DB_*` parts are incomplete it composes nothing (returns null),
+   *     so a non-DB service or one with an explicit URL is unaffected.
+   * Set `false` only for a service that must NOT derive its URL from `DB_*`.
+   */
+  readonly composeDatabaseUrlFromEnv?: boolean;
   /**
    * Auto-register the platform `GlobalExceptionFilter` as a global filter.
    * Defaults to `true` — adopting `bootstrapXemaService` fixes the audit gap
@@ -130,6 +143,18 @@ export async function bootstrapXemaService(
 ): Promise<INestApplication> {
   const logger = new Logger('bootstrapXemaService');
 
+  // 0. Compose DATABASE_URL from the DB_* env contract when not already set.
+  // Replaces the per-service local `ensureDatabaseUrl()` shim. Must run BEFORE
+  // env validation + app creation so a service that lists DATABASE_URL in
+  // `requiredEnvVars` (and supplies only DB_* parts) still passes, and Prisma
+  // sees the composed URL at module construction.
+  if (options.composeDatabaseUrlFromEnv !== false && !process.env.DATABASE_URL) {
+    const composed = composeBiomeDatabaseUrlFromEnv();
+    if (composed) {
+      process.env.DATABASE_URL = composed;
+    }
+  }
+
   // 1. Fail-fast env validation BEFORE any framework work.
   validateRequiredEnv(options.requiredEnvVars ?? []);