@xemahq/xema 0.1.5 → 0.2.1

package/xema.config.example.yaml

@@ -0,0 +1,46 @@
+# Xema launcher topology — copy to `xema.config.yaml` and edit.
+# Docs: https://xema.dev  |  CLI: `xema up`, `xema down`, `xema status`, `xema logs`.
+#
+# Every value shown is the default; delete what you don't override.
+
+edition: oss                     # which distribution edition to launch
+
+# ── backing infrastructure (BYO model) ───────────────────────────────────────
+# mode ∈ managed | external | disabled
+#   managed  — the launcher starts + owns it (and its data volume)
+#   external — you already run it; give the URL (launcher health-probes it)
+#   disabled — not run (only allowed for optional components)
+infra:
+  postgres:    { mode: managed }                 # mandatory
+  redis:       { mode: managed }                 # mandatory
+  etcd:        { mode: managed }                 # mandatory (service discovery)
+  keycloak:    { mode: managed }                 # mandatory (identity)
+  objectStore: { mode: managed }                 # mandatory (blobs/artifacts)
+  search:      { mode: managed }                 # optional (full-text / vectors)
+  fga:         { mode: managed }                 # optional (authorization ReBAC)
+  git:         { mode: disabled }                # optional (SCM integration)
+  temporal:    { mode: managed }                 # optional (durable workflows)
+  # Example BYO:
+  # keycloak: { mode: external, url: https://sso.example.com/realms/xema, realm: xema }
+  # objectStore: { mode: external, url: https://s3.example.com, secretRef: my-s3 }
+
+# ── application services ─────────────────────────────────────────────────────
+app:
+  substrate: container           # container | native | helm
+  processModel: distributed      # distributed (microservices) | monolith (native-only: 1 process, SQLite, no etcd)
+  include: [ all ]               # all | tier names (kernel/system/base/platform) | service names
+  exclude: []                    # service names to drop
+  features: []                   # curated capability bundles (union with include)
+  web:
+    enabled: false               # start the host-shell frontend (or use `xema up --web`)
+
+# ── persistence ──────────────────────────────────────────────────────────────
+state:
+  workspaces:
+    driver: docker_local         # docker_local (container) | host_path (native)
+
+# ── secrets the launcher must obtain (never dev-defaulted in production) ──────
+secrets:
+  OPENCODE_SERVER_PASSWORD: { from: prompt }
+  # DELEGATED_SESSION_JWT_PRIVATE_KEY: { from: file, path: ./keys/session.pem }
+  # LLM_PROVIDER_ANTHROPIC_API_KEY: { from: env }