@xemahq/xema 0.13.0 → 0.14.0

package/xema.config.example.yaml

@@ -3,7 +3,7 @@
 #
 # Every value shown is the default; delete what you don't override.
 
-edition: oss                     # which distribution edition to launch
+edition: oss # which distribution edition to launch
 
 # ── backing infrastructure (BYO model) ───────────────────────────────────────
 # mode ∈ managed | external | disabled
@@ -11,36 +11,40 @@ edition: oss                     # which distribution edition to launch
 #   external — you already run it; give the URL (launcher health-probes it)
 #   disabled — not run (only allowed for optional components)
 infra:
-  postgres:    { mode: managed }                 # mandatory
-  redis:       { mode: managed }                 # mandatory
-  etcd:        { mode: managed }                 # mandatory (service discovery)
-  keycloak:    { mode: managed }                 # mandatory (identity)
-  objectStore: { mode: managed }                 # mandatory (blobs/artifacts)
-  search:      { mode: managed }                 # optional (full-text / vectors)
-  fga:         { mode: managed }                 # optional (authorization ReBAC)
-  git:         { mode: disabled }                # optional (SCM integration)
-  temporal:    { mode: managed }                 # optional (durable workflows)
+  postgres: { mode: managed } # mandatory
+  redis: { mode: managed } # mandatory
+  etcd: { mode: managed } # mandatory (service discovery)
+  keycloak: { mode: managed } # mandatory (identity)
+  objectStore: { mode: managed } # mandatory (blobs/artifacts)
+  search: { mode: managed } # optional (full-text / vectors)
+  fga: { mode: managed } # optional (authorization ReBAC)
+  git: { mode: disabled } # optional (SCM integration)
+  temporal: { mode: managed } # optional (durable workflows)
   # Example BYO:
+  # postgres: { mode: external, url: postgresql://xema@db.example.com:5432, secretRef: postgres-password }
   # keycloak: { mode: external, url: https://sso.example.com/realms/xema, realm: xema }
-  # objectStore: { mode: external, url: https://s3.example.com, secretRef: my-s3 }
+  # objectStore: { mode: external, url: https://s3.example.com }
 
 # ── application services ─────────────────────────────────────────────────────
 app:
-  substrate: container           # container | native | helm
-  processModel: distributed      # distributed (microservices, etcd discovery) — the only supported model
-  include: [ all ]               # all | tier names (kernel/system/base/platform) | service names
-  exclude: []                    # service names to drop
-  features: []                   # curated capability bundles (union with include)
+  substrate: container # container | native | helm
+  processModel: distributed # distributed (microservices, etcd discovery) — the only supported model
+  include: default # default (skips distribution-optional biomes) | all | list of tier names (kernel/system/base/platform/edge) and/or service names
+  exclude: [] # service names to drop
+  features: [] # curated capability bundles (union with include)
   web:
-    enabled: false               # start the host-shell frontend (or use `xema up --web`)
+    enabled: false # start the host-shell frontend (or use `xema up --web`)
 
 # ── persistence ──────────────────────────────────────────────────────────────
 state:
   workspaces:
-    driver: docker_local         # docker_local (container) | host_path (native)
+    driver: docker_local # docker_local (container) | host_path (native)
 
 # ── secrets the launcher must obtain (never dev-defaulted in production) ──────
 secrets:
   OPENCODE_SERVER_PASSWORD: { from: prompt }
+  # postgres-password: { from: env, env: XEMA_POSTGRES_PASSWORD }
+  # S3_ACCESS_KEY_ID: { from: env }
+  # S3_SECRET_ACCESS_KEY: { from: env }
   # DELEGATED_SESSION_JWT_PRIVATE_KEY: { from: file, path: ./keys/session.pem }
   # LLM_PROVIDER_ANTHROPIC_API_KEY: { from: env }