@xemahq/xema 0.13.0 → 0.15.0

package/dist/assets/core/distribution.lock.json

@@ -7,29 +7,40 @@
       "version": "0.0.1",
       "tier": "kernel",
       "target": "server",
-      "origin": "third-party",
+      "origin": "first-party",
       "mandatory": true,
-      "repo": "repos/xema-community",
-      "path": "repos/xema-community/biomes/kernel/contribution-test",
+      "installPolicy": "required",
+      "repo": "repos/xema-base",
+      "path": "repos/xema-base/biomes/kernel/contribution-test",
       "services": [],
+      "runtimeComponents": [],
+      "serviceDependencies": [],
       "displayName": "Contribution Protocol Test Biome",
       "packageName": "@xemahq/biomes-kernel-contribution-test",
       "requiresServerBiomes": [],
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "94f58aa4a354960cee143970c278f8f38b723d9ab8dc7d9020b15ccb2e3877ce"
+      "sourceManifestHash": "a5989a0adba0fae65f1cd3107b38896d1df9742ba35d0de670be7f10fa43aeb7",
+      "display": {
+        "icon": "flask-conical",
+        "category": "build",
+        "summary": "Synthetic kernel test biome exercising the XSI Contribution Protocol, capability resolution, and boundary enforcement."
+      }
     },
     {
       "id": "output-surface-control",
       "version": "1.0.0",
       "tier": "kernel",
       "target": "server",
-      "origin": "third-party",
+      "origin": "first-party",
       "mandatory": true,
-      "repo": "repos/xema-community",
-      "path": "repos/xema-community/biomes/kernel/output-surface-control",
+      "installPolicy": "required",
+      "repo": "repos/xema-base",
+      "path": "repos/xema-base/biomes/kernel/output-surface-control",
       "services": [],
+      "runtimeComponents": [],
+      "serviceDependencies": [],
       "displayName": "Output Surface Control",
       "packageName": "@xemahq/biomes-kernel-output-surface-control",
       "requiresServerBiomes": [
@@ -38,18 +49,26 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "2cfffd502ade3dbb4b7dd6bb4896d91a2d0216f4aeb33c5a5d299a4a4dd78a78"
+      "sourceManifestHash": "8c773b92dc42534da668a0857840810ad581066db735e27a8cdbdb750a0b10b9",
+      "display": {
+        "icon": "refresh-cw",
+        "category": "operate",
+        "summary": "Output-surface control tools: re-trigger the deterministic install-to-start pipeline over the workspace-proxy API."
+      }
     },
     {
       "id": "output-surface-inspector",
       "version": "1.0.0",
       "tier": "kernel",
       "target": "server",
-      "origin": "third-party",
+      "origin": "first-party",
       "mandatory": true,
-      "repo": "repos/xema-community",
-      "path": "repos/xema-community/biomes/kernel/output-surface-inspector",
+      "installPolicy": "required",
+      "repo": "repos/xema-base",
+      "path": "repos/xema-base/biomes/kernel/output-surface-inspector",
       "services": [],
+      "runtimeComponents": [],
+      "serviceDependencies": [],
       "displayName": "Output Surface Inspector",
       "packageName": "@xemahq/biomes-kernel-output-surface-inspector",
       "requiresServerBiomes": [
@@ -59,36 +78,52 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "35838895917078c07efd056eb8677e780b06c50d3ea397998b99642f212cf334"
+      "sourceManifestHash": "b6b0bfb9861229725e487a3d16f1f7d842fb5afeed545e7e43d3b7cc8abdd289",
+      "display": {
+        "icon": "search",
+        "category": "operate",
+        "summary": "Output-surface inspection: browser tool, inspector sub-agent, and bridge for read-only diagnosis of live pages."
+      }
     },
     {
       "id": "runtime",
       "version": "1.0.0",
       "tier": "kernel",
       "target": "server",
-      "origin": "third-party",
+      "origin": "first-party",
       "mandatory": true,
-      "repo": "repos/xema-community",
-      "path": "repos/xema-community/biomes/kernel/runtime",
+      "installPolicy": "required",
+      "repo": "repos/xema-base",
+      "path": "repos/xema-base/biomes/kernel/runtime",
       "services": [],
+      "runtimeComponents": [],
+      "serviceDependencies": [],
       "displayName": "Xema Runtime Kernel",
       "packageName": "@xemahq/biomes-kernel-runtime",
       "requiresServerBiomes": [],
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "850a64aa6ff549fd9f9f356c2aab2d407e9526b715db1ca62c936e26a1b100d2"
+      "sourceManifestHash": "ebdddca520537f13995e89d61db68613413ed967736c53346f20be27eddfcbe1",
+      "display": {
+        "icon": "box",
+        "category": "runtime",
+        "summary": "Kernel runtime baseline: base workspace manifests, custom OpenCode tools and plugins, and the canonical MCP catalog."
+      }
     },
     {
       "id": "studio-author",
       "version": "1.0.0",
       "tier": "kernel",
       "target": "server",
-      "origin": "third-party",
+      "origin": "first-party",
       "mandatory": true,
-      "repo": "repos/xema-community",
-      "path": "repos/xema-community/biomes/kernel/studio-author",
+      "installPolicy": "required",
+      "repo": "repos/xema-base",
+      "path": "repos/xema-base/biomes/kernel/studio-author",
       "services": [],
+      "runtimeComponents": [],
+      "serviceDependencies": [],
       "displayName": "Studio Author",
       "packageName": "@xemahq/biomes-kernel-studio-author",
       "requiresServerBiomes": [
@@ -98,18 +133,26 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "66984ccf8671e20fac0b881b4c39191a3b9c2aacfa0652a25df4317776fcbbd3"
+      "sourceManifestHash": "9c0a9522ef36140ce704d5be39ae44cde175b1addec90ba56d36970ace803f1e",
+      "display": {
+        "icon": "wand",
+        "category": "build",
+        "summary": "Authoring co-pilot for Agent Studio: workflow/spec authors and a build-with-an-agent profile that emits typed proposals."
+      }
     },
     {
       "id": "subagents",
       "version": "1.0.0",
       "tier": "kernel",
       "target": "server",
-      "origin": "third-party",
+      "origin": "first-party",
       "mandatory": true,
-      "repo": "repos/xema-community",
-      "path": "repos/xema-community/biomes/kernel/subagents",
+      "installPolicy": "required",
+      "repo": "repos/xema-base",
+      "path": "repos/xema-base/biomes/kernel/subagents",
       "services": [],
+      "runtimeComponents": [],
+      "serviceDependencies": [],
       "displayName": "Xema Universal Subagents",
       "packageName": "@xemahq/biomes-kernel-subagents",
       "requiresServerBiomes": [
@@ -118,27 +161,12 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "05cfb1d68fd7a868670e2115b0545987d0bc8b71bb27d09a1b0e3859d47d10da"
-    },
-    {
-      "id": "activity-feed",
-      "version": "0.1.0",
-      "tier": "system",
-      "target": "server",
-      "origin": "third-party",
-      "mandatory": false,
-      "repo": "repos/xema-platform",
-      "path": "repos/xema-platform/biomes/activity-feed",
-      "services": [
-        "activity-feed-api"
-      ],
-      "displayName": "Activity Feed",
-      "packageName": "@xemahq/biomes-activity-feed",
-      "requiresServerBiomes": [],
-      "optionalServerBiomes": [],
-      "audience": "org",
-      "storeListed": true,
-      "sourceManifestHash": "23f91e83b1ba9f93f500034f2de2ef743dc5aaae94d64ce491cbd7c2581e3aa0"
+      "sourceManifestHash": "c7d66ce06a303e40ae4901694c9617fab3645185752cce5f214cd29f9bed24c0",
+      "display": {
+        "icon": "users",
+        "category": "runtime",
+        "summary": "Canonical roster of platform subagents and gate-reviewers every install boots with, plus their MCP tool-profiles."
+      }
     },
     {
       "id": "activity-web",
@@ -147,101 +175,148 @@
       "target": "web",
       "origin": "third-party",
       "mandatory": false,
+      "installPolicy": "required",
       "repo": "submodules/xema-host-web",
       "path": "submodules/xema-host-web/biomes/system/activity-web",
       "services": [],
+      "runtimeComponents": [],
+      "serviceDependencies": [],
       "displayName": "Activity (Web)",
       "packageName": "@xemahq/biomes-system-activity-web",
-      "requiresServerBiomes": [],
+      "requiresServerBiomes": [
+        "activity-feed"
+      ],
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "dc55b894e982fcaf0316f3f5d6c7f6d36dda3d0b3b7ede31ec6286ab61538f93",
+      "sourceManifestHash": "4d6b17552fddcf41d9dfef1990939175d23270f1e3a756d05c7d8674cfec0716",
       "display": {
         "icon": "activity",
-        "category": "Observability",
+        "category": "observability",
         "summary": "Track activity and audit events."
       }
     },
-    {
-      "id": "app-runtime",
-      "version": "0.1.0",
-      "tier": "system",
-      "target": "server",
-      "origin": "third-party",
-      "mandatory": false,
-      "repo": "repos/xema-community",
-      "path": "repos/xema-community/biomes/app-runtime",
-      "services": [
-        "app-runtime-api"
-      ],
-      "displayName": "App Runtime",
-      "packageName": "@xemahq/biomes-app-runtime",
-      "requiresServerBiomes": [],
-      "optionalServerBiomes": [],
-      "audience": "org",
-      "storeListed": true,
-      "sourceManifestHash": "7c90c5dd84d3a30c7a4c9266f87aff381adf832361f72266aaa1d521f3fc21cb"
-    },
     {
       "id": "audit",
       "version": "0.1.0",
       "tier": "system",
       "target": "server",
-      "origin": "third-party",
+      "origin": "first-party",
       "mandatory": false,
-      "repo": "repos/xema-community",
-      "path": "repos/xema-community/biomes/audit",
+      "installPolicy": "required",
+      "repo": "repos/xema-base",
+      "path": "repos/xema-base/biomes/audit",
       "services": [
         "audit-log-api"
       ],
+      "runtimeComponents": [],
+      "serviceDependencies": [
+        {
+          "consumerService": "audit-log-api",
+          "requiredService": "identity-api",
+          "owner": {
+            "kind": "platform",
+            "source": {
+              "name": "identity-api",
+              "tier": "infra",
+              "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
+              "repo": "submodules/identity-api",
+              "path": "submodules/identity-api/package.json",
+              "sourceCommit": "2d6074f0d085f4bd86fc9741feb74ce9a338fba2",
+              "version": "0.0.2",
+              "sourceManifestHash": "d54fbabdc5cb36d593d05ed44f2482df82f5276bfa6cf5de2d3094b69770616d",
+              "imageKey": "identity-api"
+            }
+          }
+        }
+      ],
       "displayName": "Audit",
       "packageName": "@xemahq/biomes-audit",
       "requiresServerBiomes": [],
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "7a2940b6a998a97adcd0d9f4e576874c1ad9f052228dd468bb54c68461a4e616"
+      "sourceManifestHash": "ae8e4cfaf992108216fd653cd120b393acc95170ebbf38241b209c07c4c9f620",
+      "display": {
+        "icon": "scroll-text",
+        "category": "governance",
+        "summary": "Tamper-evident, append-only audit log of platform actions for compliance and forensics."
+      }
     },
     {
       "id": "authorization",
       "version": "0.1.0",
       "tier": "system",
       "target": "server",
-      "origin": "third-party",
+      "origin": "first-party",
       "mandatory": false,
-      "repo": "repos/xema-community",
-      "path": "repos/xema-community/biomes/authorization",
+      "installPolicy": "required",
+      "repo": "repos/xema-base",
+      "path": "repos/xema-base/biomes/authorization",
       "services": [
         "authorization-api"
       ],
+      "runtimeComponents": [],
+      "serviceDependencies": [
+        {
+          "consumerService": "authorization-api",
+          "requiredService": "identity-api",
+          "owner": {
+            "kind": "platform",
+            "source": {
+              "name": "identity-api",
+              "tier": "infra",
+              "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
+              "repo": "submodules/identity-api",
+              "path": "submodules/identity-api/package.json",
+              "sourceCommit": "2d6074f0d085f4bd86fc9741feb74ce9a338fba2",
+              "version": "0.0.2",
+              "sourceManifestHash": "d54fbabdc5cb36d593d05ed44f2482df82f5276bfa6cf5de2d3094b69770616d",
+              "imageKey": "identity-api"
+            }
+          }
+        }
+      ],
       "displayName": "Authorization",
       "packageName": "@xemahq/biomes-authorization",
       "requiresServerBiomes": [],
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "9a039da6affc3e3b9e192173e457ec93a808a17581953ee058de1faef35103f9"
+      "sourceManifestHash": "682f7b7a278848ad096bc7bbff4f97c30d775c08f49e07a45fff2c8c99b68aec",
+      "display": {
+        "icon": "shield",
+        "category": "identity",
+        "summary": "Policy decision point: resolves capability and scope grants for every actor/action pair (OpenFGA/OPA)."
+      }
     },
     {
       "id": "biome-adapter-host",
       "version": "0.1.0",
       "tier": "system",
       "target": "server",
-      "origin": "third-party",
+      "origin": "first-party",
       "mandatory": false,
-      "repo": "repos/xema-community",
-      "path": "repos/xema-community/biomes/biome-adapter-host",
-      "services": [
+      "installPolicy": "required",
+      "repo": "repos/xema-base",
+      "path": "repos/xema-base/biomes/biome-adapter-host",
+      "services": [],
+      "runtimeComponents": [
         "biome-adapter-host"
       ],
+      "serviceDependencies": [],
       "displayName": "Biome Adapter Host",
       "packageName": "@xemahq/biomes-biome-adapter-host",
       "requiresServerBiomes": [],
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "481c5eb38abbef047b74017dc4bc2c7b6e84e664b11c34afe35219ae80eacd34",
+      "sourceManifestHash": "f41386aa3872db1415809c555a2821493f1250c0109143d3fdc56edbcef7f49b",
+      "display": {
+        "icon": "puzzle",
+        "category": "connect",
+        "summary": "Adapter-SDK runtime: hosts integration adapter contributions shipped by other biomes."
+      },
       "launch": "per-installation"
     },
     {
@@ -249,40 +324,75 @@
       "version": "0.1.0",
       "tier": "system",
       "target": "server",
-      "origin": "third-party",
+      "origin": "first-party",
       "mandatory": false,
-      "repo": "repos/xema-community",
-      "path": "repos/xema-community/biomes/biome-fetcher",
+      "installPolicy": "required",
+      "repo": "repos/xema-base",
+      "path": "repos/xema-base/biomes/biome-fetcher",
       "services": [
         "biome-fetcher-api"
       ],
+      "runtimeComponents": [],
+      "serviceDependencies": [],
       "displayName": "Biome Fetcher",
       "packageName": "@xemahq/biomes-biome-fetcher",
       "requiresServerBiomes": [],
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "c12660f9197d5403ed9352d91287f13d16d2b55b50ea239d860f63f6e99789f3"
+      "sourceManifestHash": "c437de33591c813dd08e89ed90086aace6ea75c52abb28eaafe1896976056f25",
+      "display": {
+        "icon": "download",
+        "category": "build",
+        "summary": "Downloads and verifies biome bundles from registries, staging them for the biome-host installer."
+      }
     },
     {
       "id": "biome-host",
       "version": "0.1.0",
       "tier": "system",
       "target": "server",
-      "origin": "third-party",
+      "origin": "first-party",
       "mandatory": false,
-      "repo": "repos/xema-community",
-      "path": "repos/xema-community/biomes/biome-host",
+      "installPolicy": "required",
+      "repo": "repos/xema-base",
+      "path": "repos/xema-base/biomes/biome-host",
       "services": [
         "biome-host-api"
       ],
+      "runtimeComponents": [],
+      "serviceDependencies": [
+        {
+          "consumerService": "biome-host-api",
+          "requiredService": "identity-api",
+          "owner": {
+            "kind": "platform",
+            "source": {
+              "name": "identity-api",
+              "tier": "infra",
+              "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
+              "repo": "submodules/identity-api",
+              "path": "submodules/identity-api/package.json",
+              "sourceCommit": "2d6074f0d085f4bd86fc9741feb74ce9a338fba2",
+              "version": "0.0.2",
+              "sourceManifestHash": "d54fbabdc5cb36d593d05ed44f2482df82f5276bfa6cf5de2d3094b69770616d",
+              "imageKey": "identity-api"
+            }
+          }
+        }
+      ],
       "displayName": "Biome Host",
       "packageName": "@xemahq/biomes-biome-host",
       "requiresServerBiomes": [],
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "60e88d4cf2c714392324a50163adc05f28866a51160a7e561efa5d84d0ae926d"
+      "sourceManifestHash": "c42bf9a72f8c8b259ff34cc871c6246bf95f885caccf35abceaaf004129646d8",
+      "display": {
+        "icon": "package",
+        "category": "build",
+        "summary": "Biome installer and lifecycle manager: validates manifests, applies Helm sub-charts, tracks install state."
+      }
     },
     {
       "id": "capabilities-web",
@@ -291,19 +401,24 @@
       "target": "web",
       "origin": "third-party",
       "mandatory": false,
+      "installPolicy": "required",
       "repo": "submodules/xema-host-web",
       "path": "submodules/xema-host-web/biomes/system/capabilities-web",
       "services": [],
+      "runtimeComponents": [],
+      "serviceDependencies": [],
       "displayName": "Capabilities (Web)",
       "packageName": "@xemahq/biomes-system-capabilities-web",
-      "requiresServerBiomes": [],
+      "requiresServerBiomes": [
+        "capability-registry"
+      ],
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "503ecb752b4a7e520a1dc90e724b88898ddeac5c105d6945d27015979d12b8d6",
+      "sourceManifestHash": "7869ed122f9dbbce873ae581b6572c0834d6676f9bf1e1113fe9f79a24796932",
       "display": {
         "icon": "puzzle",
-        "category": "Platform",
+        "category": "platform",
         "summary": "Browse and govern platform capabilities."
       }
     },
@@ -312,40 +427,47 @@
       "version": "0.1.0",
       "tier": "system",
       "target": "server",
-      "origin": "third-party",
+      "origin": "first-party",
       "mandatory": false,
-      "repo": "repos/xema-community",
-      "path": "repos/xema-community/biomes/capability-registry",
+      "installPolicy": "required",
+      "repo": "repos/xema-base",
+      "path": "repos/xema-base/biomes/capability-registry",
       "services": [
         "capability-registry-api"
       ],
+      "runtimeComponents": [],
+      "serviceDependencies": [
+        {
+          "consumerService": "capability-registry-api",
+          "requiredService": "identity-api",
+          "owner": {
+            "kind": "platform",
+            "source": {
+              "name": "identity-api",
+              "tier": "infra",
+              "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
+              "repo": "submodules/identity-api",
+              "path": "submodules/identity-api/package.json",
+              "sourceCommit": "2d6074f0d085f4bd86fc9741feb74ce9a338fba2",
+              "version": "0.0.2",
+              "sourceManifestHash": "d54fbabdc5cb36d593d05ed44f2482df82f5276bfa6cf5de2d3094b69770616d",
+              "imageKey": "identity-api"
+            }
+          }
+        }
+      ],
       "displayName": "Capability Registry",
       "packageName": "@xemahq/biomes-capability-registry",
       "requiresServerBiomes": [],
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "ceeec52e1b6c6a81ceabad91101c318829aed6c8f6f2dee86ed76be894d3049c"
-    },
-    {
-      "id": "catalog",
-      "version": "0.1.0",
-      "tier": "system",
-      "target": "server",
-      "origin": "third-party",
-      "mandatory": false,
-      "repo": "repos/xema-platform",
-      "path": "repos/xema-platform/biomes/catalog",
-      "services": [
-        "catalog-api"
-      ],
-      "displayName": "Catalog",
-      "packageName": "@xemahq/biomes-catalog",
-      "requiresServerBiomes": [],
-      "optionalServerBiomes": [],
-      "audience": "org",
-      "storeListed": true,
-      "sourceManifestHash": "674d3ecff03c9047954939a9ae60da1f0a4b9a559b907a05682e87102115dea5"
+      "sourceManifestHash": "50063c0b95ffaf47d413423a34f47b36c6adb53c88d39e4101fa2f768840eb98",
+      "display": {
+        "icon": "list",
+        "category": "platform",
+        "summary": "Capability descriptor registry: authoritative source for every published capability ref and schema."
+      }
     },
     {
       "id": "concepts-web",
@@ -354,43 +476,28 @@
       "target": "web",
       "origin": "third-party",
       "mandatory": false,
+      "installPolicy": "required",
       "repo": "submodules/xema-host-web",
       "path": "submodules/xema-host-web/biomes/system/concepts-web",
       "services": [],
+      "runtimeComponents": [],
+      "serviceDependencies": [],
       "displayName": "Concepts (Web)",
       "packageName": "@xemahq/biomes-system-concepts-web",
-      "requiresServerBiomes": [],
+      "requiresServerBiomes": [
+        "object-registry"
+      ],
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": false,
-      "sourceManifestHash": "33c7c6d859430e92a45ad15ea0ca6b05f30923431ad10816652fa3e0c4710ea8",
+      "sourceManifestHash": "0316d68b5dcc765b60b86801729266660b2c5ba12ddb6c3c74d0802ecc4cabf0",
       "display": {
         "icon": "lightbulb",
-        "category": "Knowledge",
+        "category": "knowledge",
         "summary": "Manage shared concepts and definitions."
       },
       "systemSurface": true
     },
-    {
-      "id": "container-registry",
-      "version": "0.1.0",
-      "tier": "system",
-      "target": "server",
-      "origin": "third-party",
-      "mandatory": false,
-      "repo": "repos/xema-community",
-      "path": "repos/xema-community/biomes/container-registry",
-      "services": [
-        "container-registry-api"
-      ],
-      "displayName": "Container Registry",
-      "packageName": "@xemahq/biomes-container-registry",
-      "requiresServerBiomes": [],
-      "optionalServerBiomes": [],
-      "audience": "org",
-      "storeListed": true,
-      "sourceManifestHash": "8978958f738a605e6c73b22003139823fd85d072b7d1c831b9f27db9c8693988"
-    },
     {
       "id": "container-registry-web",
       "version": "0.1.0",
@@ -398,19 +505,24 @@
       "target": "web",
       "origin": "third-party",
       "mandatory": false,
+      "installPolicy": "required",
       "repo": "submodules/xema-host-web",
       "path": "submodules/xema-host-web/biomes/system/container-registry-web",
       "services": [],
+      "runtimeComponents": [],
+      "serviceDependencies": [],
       "displayName": "Container Registry (Web)",
       "packageName": "@xemahq/biomes-system-container-registry-web",
-      "requiresServerBiomes": [],
+      "requiresServerBiomes": [
+        "container-registry"
+      ],
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "5b42d251b77fb3c50bc89ddfb8df649c4f1830e7a04c077b811f11932a2c0428",
+      "sourceManifestHash": "f6890fa739789c73116440387f463e46f3076bdc3bd885c596323d9183243a91",
       "display": {
         "icon": "package",
-        "category": "Infrastructure",
+        "category": "infrastructure",
         "summary": "Manage container images."
       }
     },
@@ -421,19 +533,24 @@
       "target": "web",
       "origin": "third-party",
       "mandatory": false,
+      "installPolicy": "required",
       "repo": "submodules/xema-host-web",
       "path": "submodules/xema-host-web/biomes/system/environments-web",
       "services": [],
+      "runtimeComponents": [],
+      "serviceDependencies": [],
       "displayName": "Environments (Web)",
       "packageName": "@xemahq/biomes-system-environments-web",
-      "requiresServerBiomes": [],
+      "requiresServerBiomes": [
+        "app-platform"
+      ],
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "dbd76129bcefb6ce186cfdfa27f6553d40bbfc64e7b673ccd9a7e5e77d40f754",
+      "sourceManifestHash": "ded2fdd7ea7a26291ba6ec8799ab068cc254425704a07a5e88d431ec781620b1",
       "display": {
         "icon": "server",
-        "category": "Platform",
+        "category": "platform",
         "summary": "Manage execution environments."
       }
     },
@@ -444,19 +561,24 @@
       "target": "web",
       "origin": "third-party",
       "mandatory": false,
+      "installPolicy": "required",
       "repo": "submodules/xema-host-web",
       "path": "submodules/xema-host-web/biomes/system/gateway-routes-web",
       "services": [],
+      "runtimeComponents": [],
+      "serviceDependencies": [],
       "displayName": "Gateway Routes (Web)",
       "packageName": "@xemahq/biomes-system-gateway-routes-web",
-      "requiresServerBiomes": [],
+      "requiresServerBiomes": [
+        "public-gateway"
+      ],
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "ea0a80000989c2102ef46ffa76a3dae888f2102fe57d0223925815a1b1e2a5f2",
+      "sourceManifestHash": "7327953993c880d312937138212f05829c514d276bdbdf1e7e45c87396e3e7dd",
       "display": {
         "icon": "route",
-        "category": "Platform",
+        "category": "platform",
         "summary": "Configure public gateway routes."
       }
     },
@@ -467,19 +589,24 @@
       "target": "web",
       "origin": "third-party",
       "mandatory": false,
+      "installPolicy": "required",
       "repo": "submodules/xema-host-web",
       "path": "submodules/xema-host-web/biomes/system/grants-web",
       "services": [],
+      "runtimeComponents": [],
+      "serviceDependencies": [],
       "displayName": "Grants (Web)",
       "packageName": "@xemahq/biomes-system-grants-web",
-      "requiresServerBiomes": [],
+      "requiresServerBiomes": [
+        "authorization"
+      ],
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "4d20281fbd40e849fdd43c3a923b8cd6e24433341e9cef86de0e099ab7928712",
+      "sourceManifestHash": "d5792835fd73870c099af712fe3d642236ce1db2f42d506d3e63980cc5756efe",
       "display": {
         "icon": "key",
-        "category": "Security",
+        "category": "security",
         "summary": "Review and manage access grants."
       }
     },
@@ -490,19 +617,25 @@
       "target": "web",
       "origin": "third-party",
       "mandatory": false,
+      "installPolicy": "required",
       "repo": "submodules/xema-host-web",
       "path": "submodules/xema-host-web/biomes/system/mailops-web",
       "services": [],
+      "runtimeComponents": [],
+      "serviceDependencies": [],
       "displayName": "MailOps (Web)",
       "packageName": "@xemahq/biomes-system-mailops-web",
-      "requiresServerBiomes": [],
+      "requiresServerBiomes": [
+        "mailops",
+        "project-registry"
+      ],
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "004d250018880413e919454cd664e015c686d962a3606779274ded9285df9a1a",
+      "sourceManifestHash": "26e910253ea5dc9dbf0bec902e7bbc50d4a77357f96fd249b98a1fd1e926efc6",
       "display": {
         "icon": "mail",
-        "category": "Communication",
+        "category": "communication",
         "summary": "Run email-driven workflows."
       }
     },
@@ -511,20 +644,47 @@
       "version": "0.1.0",
       "tier": "system",
       "target": "server",
-      "origin": "third-party",
+      "origin": "first-party",
       "mandatory": false,
-      "repo": "repos/xema-community",
-      "path": "repos/xema-community/biomes/object-registry",
+      "installPolicy": "required",
+      "repo": "repos/xema-base",
+      "path": "repos/xema-base/biomes/object-registry",
       "services": [
         "object-registry-api"
       ],
+      "runtimeComponents": [],
+      "serviceDependencies": [
+        {
+          "consumerService": "object-registry-api",
+          "requiredService": "identity-api",
+          "owner": {
+            "kind": "platform",
+            "source": {
+              "name": "identity-api",
+              "tier": "infra",
+              "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
+              "repo": "submodules/identity-api",
+              "path": "submodules/identity-api/package.json",
+              "sourceCommit": "2d6074f0d085f4bd86fc9741feb74ce9a338fba2",
+              "version": "0.0.2",
+              "sourceManifestHash": "d54fbabdc5cb36d593d05ed44f2482df82f5276bfa6cf5de2d3094b69770616d",
+              "imageKey": "identity-api"
+            }
+          }
+        }
+      ],
       "displayName": "Object Registry",
       "packageName": "@xemahq/biomes-object-registry",
       "requiresServerBiomes": [],
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "3dcdaa7fbe6c349a6168472af6b885359e840f43c3055dad2305475c77582b14"
+      "sourceManifestHash": "647e3639506000511b3167251e5ef5eff036c5467ba73d77de8478ecef9c2a67",
+      "display": {
+        "icon": "link",
+        "category": "platform",
+        "summary": "XVFS object resolver: addresses every platform object (artifact, biome, capability) via a stable URI scheme."
+      }
     },
     {
       "id": "objects-web",
@@ -533,19 +693,24 @@
       "target": "web",
       "origin": "third-party",
       "mandatory": false,
+      "installPolicy": "required",
       "repo": "submodules/xema-host-web",
       "path": "submodules/xema-host-web/biomes/system/objects-web",
       "services": [],
+      "runtimeComponents": [],
+      "serviceDependencies": [],
       "displayName": "Objects (Web)",
       "packageName": "@xemahq/biomes-system-objects-web",
-      "requiresServerBiomes": [],
+      "requiresServerBiomes": [
+        "object-registry"
+      ],
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": false,
-      "sourceManifestHash": "43d4bfc41af8dcc701df7d6706820731b51b043791ff9322d04b5e173459e22c",
+      "sourceManifestHash": "5272b8900475f65eef807ba06f59b16a454831a19056e69b4f0c2f97e0067c90",
       "display": {
         "icon": "box",
-        "category": "Data",
+        "category": "data",
         "summary": "Browse Xema objects and registries."
       },
       "systemSurface": true
@@ -555,40 +720,93 @@
       "version": "0.1.0",
       "tier": "system",
       "target": "server",
-      "origin": "third-party",
+      "origin": "first-party",
       "mandatory": false,
-      "repo": "repos/xema-community",
-      "path": "repos/xema-community/biomes/opencode-runtime",
-      "services": [
+      "installPolicy": "required",
+      "repo": "repos/xema-base",
+      "path": "repos/xema-base/biomes/opencode-runtime",
+      "services": [],
+      "runtimeComponents": [
         "opencode-worker"
       ],
+      "serviceDependencies": [],
       "displayName": "Opencode Runtime",
       "packageName": "@xemahq/biomes-opencode-runtime",
       "requiresServerBiomes": [],
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "2d9b6472f826846dbbe970bda02f9d95302ee383f01979217501dc2cac8bf3f8"
+      "sourceManifestHash": "56811d637f26a33d8d197c6fe1fa9587619723d77e5c78240cfe792115d794e0",
+      "display": {
+        "icon": "bot",
+        "category": "runtime",
+        "summary": "OpenCode runtime executor: runs LLM agent sessions inside a per-allocation workspace."
+      }
     },
     {
       "id": "org-database-pool",
       "version": "0.1.0",
       "tier": "system",
       "target": "server",
-      "origin": "third-party",
+      "origin": "first-party",
       "mandatory": false,
-      "repo": "repos/xema-platform",
-      "path": "repos/xema-platform/biomes/org-database-pool",
+      "installPolicy": "required",
+      "repo": "repos/xema-base",
+      "path": "repos/xema-base/biomes/org-database-pool",
       "services": [
         "org-database-pool-api"
       ],
+      "runtimeComponents": [],
+      "serviceDependencies": [
+        {
+          "consumerService": "org-database-pool-api",
+          "requiredService": "event-hub-api",
+          "owner": {
+            "kind": "platform",
+            "source": {
+              "name": "event-hub-api",
+              "tier": "infra",
+              "repositoryUrl": "https://github.com/xema-dev/event-hub-api.git",
+              "repo": "submodules/event-hub-api",
+              "path": "submodules/event-hub-api/package.json",
+              "sourceCommit": "5d3706d83dcb81960eb0b722145ac3b8484117ef",
+              "version": "2.0.0",
+              "sourceManifestHash": "cdf8085b331d41ed1288856c7b8990df425fd0af66ca2feb65a1cd1f9d270840",
+              "imageKey": "event-hub-api"
+            }
+          }
+        },
+        {
+          "consumerService": "org-database-pool-api",
+          "requiredService": "identity-api",
+          "owner": {
+            "kind": "platform",
+            "source": {
+              "name": "identity-api",
+              "tier": "infra",
+              "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
+              "repo": "submodules/identity-api",
+              "path": "submodules/identity-api/package.json",
+              "sourceCommit": "2d6074f0d085f4bd86fc9741feb74ce9a338fba2",
+              "version": "0.0.2",
+              "sourceManifestHash": "d54fbabdc5cb36d593d05ed44f2482df82f5276bfa6cf5de2d3094b69770616d",
+              "imageKey": "identity-api"
+            }
+          }
+        }
+      ],
       "displayName": "Org Database Pool",
       "packageName": "@xemahq/biomes-org-database-pool",
       "requiresServerBiomes": [],
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "72a901ea53fda51576005e9297c4199d853254ef2da33eaf4b6cc71103342e1b"
+      "sourceManifestHash": "c548e026565e6d48848daa8296079c9f66e47bc466d52851b3fb8ddca2c48a7a",
+      "display": {
+        "icon": "database",
+        "category": "platform",
+        "summary": "Per-org database pool: issues per-tenant Postgres credentials and tracks per-org migration state."
+      }
     },
     {
       "id": "policies-web",
@@ -597,61 +815,101 @@
       "target": "web",
       "origin": "third-party",
       "mandatory": false,
+      "installPolicy": "required",
       "repo": "submodules/xema-host-web",
       "path": "submodules/xema-host-web/biomes/system/policies-web",
       "services": [],
+      "runtimeComponents": [],
+      "serviceDependencies": [],
       "displayName": "Policies (Web)",
       "packageName": "@xemahq/biomes-system-policies-web",
-      "requiresServerBiomes": [],
+      "requiresServerBiomes": [
+        "authorization"
+      ],
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "c7d91adcc0f721d977f5983214f8b8bb38e7f51eb6ed289ab5851dd44af7185e",
+      "sourceManifestHash": "b72d51b14be85d08a95e9b29972f44a55c1293a9bb873d99a5038097eba74ae5",
       "display": {
         "icon": "shield",
-        "category": "Security",
+        "category": "security",
         "summary": "Author and review policies."
       }
     },
     {
-      "id": "policy-distributor",
+      "id": "public-gateway",
       "version": "0.1.0",
       "tier": "system",
       "target": "server",
-      "origin": "third-party",
+      "origin": "first-party",
       "mandatory": false,
-      "repo": "repos/xema-community",
-      "path": "repos/xema-community/biomes/policy-distributor",
+      "installPolicy": "required",
+      "repo": "repos/xema-base",
+      "path": "repos/xema-base/biomes/public-gateway",
       "services": [
-        "policy-distributor-api"
+        "public-gateway-api"
       ],
-      "displayName": "Policy Distributor",
-      "packageName": "@xemahq/biomes-policy-distributor",
+      "runtimeComponents": [],
+      "serviceDependencies": [],
+      "displayName": "Public Gateway",
+      "packageName": "@xemahq/biomes-public-gateway",
       "requiresServerBiomes": [],
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "3c5f057cbc4b640e955ab924ca151cd72828023194c7f81820f6876f5e660ce4"
+      "sourceManifestHash": "9e9707ee3d7103588a105326def19ab721b0e79129b0aab45ca99b44c927b3a0",
+      "display": {
+        "icon": "globe",
+        "category": "connect",
+        "summary": "Public-facing HTTP gateway: streams preview pages, dispatches webhook ingress, terminates public routes."
+      }
     },
     {
-      "id": "public-gateway",
+      "id": "resource-governance",
       "version": "0.1.0",
       "tier": "system",
       "target": "server",
-      "origin": "third-party",
+      "origin": "first-party",
       "mandatory": false,
-      "repo": "repos/xema-community",
-      "path": "repos/xema-community/biomes/public-gateway",
+      "installPolicy": "required",
+      "repo": "repos/xema-base",
+      "path": "repos/xema-base/biomes/resource-governance",
       "services": [
-        "public-gateway-api"
+        "resource-governance-api"
       ],
-      "displayName": "Public Gateway",
-      "packageName": "@xemahq/biomes-public-gateway",
+      "runtimeComponents": [],
+      "serviceDependencies": [
+        {
+          "consumerService": "resource-governance-api",
+          "requiredService": "identity-api",
+          "owner": {
+            "kind": "platform",
+            "source": {
+              "name": "identity-api",
+              "tier": "infra",
+              "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
+              "repo": "submodules/identity-api",
+              "path": "submodules/identity-api/package.json",
+              "sourceCommit": "2d6074f0d085f4bd86fc9741feb74ce9a338fba2",
+              "version": "0.0.2",
+              "sourceManifestHash": "d54fbabdc5cb36d593d05ed44f2482df82f5276bfa6cf5de2d3094b69770616d",
+              "imageKey": "identity-api"
+            }
+          }
+        }
+      ],
+      "displayName": "Resource Governance",
+      "packageName": "@xemahq/biomes-resource-governance",
       "requiresServerBiomes": [],
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "fa42d234eeba192679e9f38f4371581f6fcd6c4eb3b3258c5bc9e7da3fbf8891"
+      "sourceManifestHash": "3ee0b8babd79474fcc6af07322683ae28f2df86d5d4abf17b8e93037eab9b1bb",
+      "display": {
+        "icon": "gauge",
+        "category": "governance",
+        "summary": "Authoritative resource inventory, consumption, source freshness, and cost-attribution inputs."
+      }
     },
     {
       "id": "runners-web",
@@ -660,19 +918,26 @@
       "target": "web",
       "origin": "third-party",
       "mandatory": false,
+      "installPolicy": "required",
       "repo": "submodules/xema-host-web",
       "path": "submodules/xema-host-web/biomes/system/runners-web",
       "services": [],
+      "runtimeComponents": [],
+      "serviceDependencies": [],
       "displayName": "Runners (Web)",
       "packageName": "@xemahq/biomes-system-runners-web",
-      "requiresServerBiomes": [],
+      "requiresServerBiomes": [
+        "biome-host",
+        "workload-runtime",
+        "xema-capability-router"
+      ],
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "35f4307ec06f129900b391c902c8b18449c1a1377bdf62b9cb0d50ef839dc1e7",
+      "sourceManifestHash": "75af46bcb086c75a907882c9117bb7279b58fdf70e117d7ef6731e91b7745d79",
       "display": {
         "icon": "cpu",
-        "category": "Infrastructure",
+        "category": "infrastructure",
         "summary": "Monitor and manage execution runners."
       }
     },
@@ -683,19 +948,24 @@
       "target": "web",
       "origin": "third-party",
       "mandatory": false,
+      "installPolicy": "required",
       "repo": "submodules/xema-host-web",
       "path": "submodules/xema-host-web/biomes/system/search-web",
       "services": [],
+      "runtimeComponents": [],
+      "serviceDependencies": [],
       "displayName": "Search (Web)",
       "packageName": "@xemahq/biomes-system-search-web",
-      "requiresServerBiomes": [],
+      "requiresServerBiomes": [
+        "search"
+      ],
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "9c4d3433c76572ac74ae408df911ed43cff33f54534bbd799766b18fc721ec5c",
+      "sourceManifestHash": "b233f5a3b421eb57f64f994b4b54777b605e0f165bd752b82142699ce3f9fad7",
       "display": {
         "icon": "search",
-        "category": "Platform",
+        "category": "platform",
         "summary": "Search across the platform."
       }
     },
@@ -706,19 +976,24 @@
       "target": "web",
       "origin": "third-party",
       "mandatory": false,
+      "installPolicy": "required",
       "repo": "submodules/xema-host-web",
       "path": "submodules/xema-host-web/biomes/system/service-registry-web",
       "services": [],
+      "runtimeComponents": [],
+      "serviceDependencies": [],
       "displayName": "Service Registry (Web)",
       "packageName": "@xemahq/biomes-system-service-registry-web",
-      "requiresServerBiomes": [],
+      "requiresServerBiomes": [
+        "biome-host"
+      ],
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "1e8a88d148b43fe3024d7b3de3a00c09495f9d56e9dc372f416504a56ef59d29",
+      "sourceManifestHash": "70d7c6c10e726ff72a559f680ba69aba08b3b6fd57c6a05ddd1f52dae77e8bfa",
       "display": {
         "icon": "network",
-        "category": "Platform",
+        "category": "platform",
         "summary": "Inspect the service registry."
       }
     },
@@ -727,20 +1002,47 @@
       "version": "0.1.0",
       "tier": "system",
       "target": "server",
-      "origin": "third-party",
+      "origin": "first-party",
       "mandatory": false,
-      "repo": "repos/xema-community",
-      "path": "repos/xema-community/biomes/space-registry",
+      "installPolicy": "required",
+      "repo": "repos/xema-base",
+      "path": "repos/xema-base/biomes/space-registry",
       "services": [
         "space-registry-api"
       ],
+      "runtimeComponents": [],
+      "serviceDependencies": [
+        {
+          "consumerService": "space-registry-api",
+          "requiredService": "identity-api",
+          "owner": {
+            "kind": "platform",
+            "source": {
+              "name": "identity-api",
+              "tier": "infra",
+              "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
+              "repo": "submodules/identity-api",
+              "path": "submodules/identity-api/package.json",
+              "sourceCommit": "2d6074f0d085f4bd86fc9741feb74ce9a338fba2",
+              "version": "0.0.2",
+              "sourceManifestHash": "d54fbabdc5cb36d593d05ed44f2482df82f5276bfa6cf5de2d3094b69770616d",
+              "imageKey": "identity-api"
+            }
+          }
+        }
+      ],
       "displayName": "Space Registry",
       "packageName": "@xemahq/biomes-space-registry",
       "requiresServerBiomes": [],
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "1e4a7b53d64247c769eaa7450d1734287d9cecab04fc651bf2abcc8a51854c3f"
+      "sourceManifestHash": "cefbffb40144eece7bfc18fa36d566bff0dbd93259a560d827d2434b16abcf52",
+      "display": {
+        "icon": "folder-tree",
+        "category": "governance",
+        "summary": "Authoritative Space ownership, hierarchy, and most-specific-wins data-classification resolution."
+      }
     },
     {
       "id": "spaces-web",
@@ -749,43 +1051,28 @@
       "target": "web",
       "origin": "third-party",
       "mandatory": false,
+      "installPolicy": "required",
       "repo": "submodules/xema-host-web",
       "path": "submodules/xema-host-web/biomes/system/spaces-web",
       "services": [],
+      "runtimeComponents": [],
+      "serviceDependencies": [],
       "displayName": "Spaces (Web)",
       "packageName": "@xemahq/biomes-system-spaces-web",
-      "requiresServerBiomes": [],
+      "requiresServerBiomes": [
+        "space-registry"
+      ],
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": false,
-      "sourceManifestHash": "e69655eb53188b985778ebf483acb845648dd44fae78eb23acb89e83ff854cbf",
+      "sourceManifestHash": "4d4ba4d7cdb728578f2dfafa1cb9a341b41b50f3b69d545947ae94bcdc8f076a",
       "display": {
         "icon": "layers",
-        "category": "Workspace",
+        "category": "workspace",
         "summary": "Organize work into spaces."
       },
       "systemSurface": true
     },
-    {
-      "id": "user-hub",
-      "version": "0.1.0",
-      "tier": "system",
-      "target": "server",
-      "origin": "third-party",
-      "mandatory": false,
-      "repo": "repos/xema-community",
-      "path": "repos/xema-community/biomes/user-hub",
-      "services": [
-        "user-hub-api"
-      ],
-      "displayName": "User Hub",
-      "packageName": "@xemahq/biomes-user-hub",
-      "requiresServerBiomes": [],
-      "optionalServerBiomes": [],
-      "audience": "org",
-      "storeListed": true,
-      "sourceManifestHash": "7c165b8b54c9d41759cf07c120185f90655245ad919358fb1e75f74d95cbc1ad"
-    },
     {
       "id": "user-hub-web",
       "version": "0.1.0",
@@ -793,19 +1080,24 @@
       "target": "web",
       "origin": "third-party",
       "mandatory": false,
+      "installPolicy": "required",
       "repo": "submodules/xema-host-web",
       "path": "submodules/xema-host-web/biomes/system/user-hub-web",
       "services": [],
+      "runtimeComponents": [],
+      "serviceDependencies": [],
       "displayName": "User Hub (Web)",
       "packageName": "@xemahq/biomes-system-user-hub-web",
-      "requiresServerBiomes": [],
+      "requiresServerBiomes": [
+        "user-hub"
+      ],
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "065a75aa23d071cfed2236b06af8c974e89cf5f916710e899a0679e8ac5f673d",
+      "sourceManifestHash": "a3f9673870a31da65c1d46bd3e3bd44d6ec74e4f81bd026b040cf6c9cc5958cd",
       "display": {
         "icon": "users",
-        "category": "Administration",
+        "category": "administration",
         "summary": "Manage users and organizations."
       }
     },
@@ -814,400 +1106,1649 @@
       "version": "0.1.0",
       "tier": "system",
       "target": "server",
-      "origin": "third-party",
+      "origin": "first-party",
       "mandatory": false,
-      "repo": "repos/xema-platform",
-      "path": "repos/xema-platform/biomes/workload-runtime",
+      "installPolicy": "required",
+      "repo": "repos/xema-base",
+      "path": "repos/xema-base/biomes/workload-runtime",
       "services": [
         "workload-runtime-api"
       ],
+      "runtimeComponents": [],
+      "serviceDependencies": [
+        {
+          "consumerService": "workload-runtime-api",
+          "requiredService": "identity-api",
+          "owner": {
+            "kind": "platform",
+            "source": {
+              "name": "identity-api",
+              "tier": "infra",
+              "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
+              "repo": "submodules/identity-api",
+              "path": "submodules/identity-api/package.json",
+              "sourceCommit": "2d6074f0d085f4bd86fc9741feb74ce9a338fba2",
+              "version": "0.0.2",
+              "sourceManifestHash": "d54fbabdc5cb36d593d05ed44f2482df82f5276bfa6cf5de2d3094b69770616d",
+              "imageKey": "identity-api"
+            }
+          }
+        }
+      ],
       "displayName": "Workload Runtime",
       "packageName": "@xemahq/biomes-workload-runtime",
       "requiresServerBiomes": [],
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "0f0c2b6c5045c0ef9603cd7e47c45e418cbc33159d75872907571786633c699e"
+      "sourceManifestHash": "e049195ba0ab4dc002d394514ae3325f23672a1b6f6e7b81a82d843b8b76cbb1",
+      "display": {
+        "icon": "server-cog",
+        "category": "runtime",
+        "summary": "Workload runtime control plane: dispatches and reconciles every per-allocation Kubernetes workload."
+      }
     },
     {
       "id": "workspace-storage-pool",
       "version": "0.1.0",
       "tier": "system",
       "target": "server",
-      "origin": "third-party",
+      "origin": "first-party",
       "mandatory": false,
-      "repo": "repos/xema-platform",
-      "path": "repos/xema-platform/biomes/workspace-storage-pool",
+      "installPolicy": "required",
+      "repo": "repos/xema-base",
+      "path": "repos/xema-base/biomes/workspace-storage-pool",
       "services": [
         "workspace-storage-pool-api"
       ],
+      "runtimeComponents": [],
+      "serviceDependencies": [
+        {
+          "consumerService": "workspace-storage-pool-api",
+          "requiredService": "identity-api",
+          "owner": {
+            "kind": "platform",
+            "source": {
+              "name": "identity-api",
+              "tier": "infra",
+              "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
+              "repo": "submodules/identity-api",
+              "path": "submodules/identity-api/package.json",
+              "sourceCommit": "2d6074f0d085f4bd86fc9741feb74ce9a338fba2",
+              "version": "0.0.2",
+              "sourceManifestHash": "d54fbabdc5cb36d593d05ed44f2482df82f5276bfa6cf5de2d3094b69770616d",
+              "imageKey": "identity-api"
+            }
+          }
+        }
+      ],
       "displayName": "Workspace Storage Pool",
       "packageName": "@xemahq/biomes-workspace-storage-pool",
       "requiresServerBiomes": [],
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "0a67bc171cd83ce98e39d305b0a484a5d5f6a5bac5d64dad0169f9bc3b49c045"
+      "sourceManifestHash": "39106bc8c52bdfb51bd219abcab974d0f70ce784335b5299fd2e4aa5c901d078",
+      "display": {
+        "icon": "hard-drive",
+        "category": "platform",
+        "summary": "Per-org workspace volume manager: allocates, snapshots, and reclaims persistent workspace storage."
+      }
     },
     {
-      "id": "xema-biome-runner",
+      "id": "xema-capability-router",
       "version": "0.1.0",
       "tier": "system",
       "target": "server",
-      "origin": "third-party",
+      "origin": "first-party",
       "mandatory": false,
-      "repo": "repos/xema-community",
-      "path": "repos/xema-community/biomes/xema-biome-runner",
+      "installPolicy": "required",
+      "repo": "repos/xema-base",
+      "path": "repos/xema-base/biomes/xema-capability-router",
       "services": [
-        "xema-biome-runner"
+        "xema-capability-router"
       ],
-      "displayName": "Xema Biome Runner",
-      "packageName": "@xemahq/biomes-xema-biome-runner",
+      "runtimeComponents": [],
+      "serviceDependencies": [
+        {
+          "consumerService": "xema-capability-router",
+          "requiredService": "identity-api",
+          "owner": {
+            "kind": "platform",
+            "source": {
+              "name": "identity-api",
+              "tier": "infra",
+              "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
+              "repo": "submodules/identity-api",
+              "path": "submodules/identity-api/package.json",
+              "sourceCommit": "2d6074f0d085f4bd86fc9741feb74ce9a338fba2",
+              "version": "0.0.2",
+              "sourceManifestHash": "d54fbabdc5cb36d593d05ed44f2482df82f5276bfa6cf5de2d3094b69770616d",
+              "imageKey": "identity-api"
+            }
+          }
+        }
+      ],
+      "displayName": "Xema Capability Router",
+      "packageName": "@xemahq/biomes-xema-capability-router",
       "requiresServerBiomes": [],
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "9b7f39a4e1153825bcdcf723e2bb70714b7e48d818033b5ac70395fd3e72a171"
+      "sourceManifestHash": "b0bd3ae93d98695f185768dc60fb345d29a27848fbf45e98ee2f9fa3a35bc2c7",
+      "display": {
+        "icon": "split",
+        "category": "platform",
+        "summary": "Capability dispatch router: resolves a capability invocation to the owning biome's API and endpoint."
+      }
     },
     {
-      "id": "xema-capability-router",
+      "id": "xema-platform-worker",
       "version": "0.1.0",
       "tier": "system",
       "target": "server",
-      "origin": "third-party",
+      "origin": "first-party",
       "mandatory": false,
-      "repo": "repos/xema-community",
-      "path": "repos/xema-community/biomes/xema-capability-router",
+      "installPolicy": "required",
+      "repo": "repos/xema-base",
+      "path": "repos/xema-base/biomes/xema-platform-worker",
       "services": [
-        "xema-capability-router"
-      ],
-      "displayName": "Xema Capability Router",
-      "packageName": "@xemahq/biomes-xema-capability-router",
-      "requiresServerBiomes": [],
-      "optionalServerBiomes": [],
-      "audience": "org",
-      "storeListed": true,
-      "sourceManifestHash": "3705f476fe95c9c3264f7706721eb67ff8f68b94329d4a988799002f092cac99"
-    },
-    {
-      "id": "xema-platform-worker",
-      "version": "0.1.0",
-      "tier": "system",
-      "target": "server",
-      "origin": "third-party",
-      "mandatory": false,
-      "repo": "repos/xema-platform",
-      "path": "repos/xema-platform/biomes/xema-platform-worker",
-      "services": [
-        "xema-platform-worker"
+        "xema-platform-worker"
       ],
+      "runtimeComponents": [],
+      "serviceDependencies": [],
       "displayName": "Xema Platform Worker",
       "packageName": "@xemahq/biomes-xema-platform-worker",
       "requiresServerBiomes": [],
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "f1cc7347b36cf86585faac833f644a131974669f08df69d76c468bbc2b0e622c"
+      "sourceManifestHash": "2f4c2d472017bee8da66191819aa9585cfe83c64ed4e8f2926fb880afd7676d2",
+      "display": {
+        "icon": "cpu",
+        "category": "runtime",
+        "summary": "Platform Temporal worker: executes kernel and system-biome workflows on the platform task queue."
+      }
     },
     {
       "id": "xema-shell",
       "version": "0.1.0",
       "tier": "system",
       "target": "server",
-      "origin": "third-party",
+      "origin": "first-party",
       "mandatory": false,
-      "repo": "repos/xema-community",
-      "path": "repos/xema-community/biomes/xema-shell",
+      "installPolicy": "required",
+      "repo": "repos/xema-base",
+      "path": "repos/xema-base/biomes/xema-shell",
       "services": [
         "xema-shell-api"
       ],
+      "runtimeComponents": [],
+      "serviceDependencies": [
+        {
+          "consumerService": "xema-shell-api",
+          "requiredService": "identity-api",
+          "owner": {
+            "kind": "platform",
+            "source": {
+              "name": "identity-api",
+              "tier": "infra",
+              "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
+              "repo": "submodules/identity-api",
+              "path": "submodules/identity-api/package.json",
+              "sourceCommit": "2d6074f0d085f4bd86fc9741feb74ce9a338fba2",
+              "version": "0.0.2",
+              "sourceManifestHash": "d54fbabdc5cb36d593d05ed44f2482df82f5276bfa6cf5de2d3094b69770616d",
+              "imageKey": "identity-api"
+            }
+          }
+        }
+      ],
       "displayName": "Xema Shell",
       "packageName": "@xemahq/biomes-xema-shell",
       "requiresServerBiomes": [],
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "cf43bca5231a4c810391020970678504f7e865b7e8a0ef2c02cc23d1b115ef51"
+      "sourceManifestHash": "afc59bc697a593a07f49fd196d952f106e9836aec62d7c73bc383e93eac6d651",
+      "display": {
+        "icon": "terminal",
+        "category": "runtime",
+        "summary": "Xema shell parser and runner: executes platform shell scripts inside session workspaces."
+      }
     },
     {
-      "id": "xema-store",
+      "id": "activity-feed",
       "version": "0.1.0",
-      "tier": "system",
+      "tier": "base",
       "target": "server",
-      "origin": "third-party",
+      "origin": "first-party",
       "mandatory": false,
-      "repo": "repos/xema-store-api",
-      "path": "repos/xema-store-api/biomes/xema-store",
+      "installPolicy": "default-selected",
+      "repo": "repos/xema-base",
+      "path": "repos/xema-base/biomes/activity-feed",
       "services": [
-        "xema-store-api"
+        "activity-feed-api"
       ],
-      "displayName": "Xema Store",
-      "packageName": "@xemahq/biomes-xema-store",
+      "runtimeComponents": [],
+      "serviceDependencies": [
+        {
+          "consumerService": "activity-feed-api",
+          "requiredService": "identity-api",
+          "owner": {
+            "kind": "platform",
+            "source": {
+              "name": "identity-api",
+              "tier": "infra",
+              "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
+              "repo": "submodules/identity-api",
+              "path": "submodules/identity-api/package.json",
+              "sourceCommit": "2d6074f0d085f4bd86fc9741feb74ce9a338fba2",
+              "version": "0.0.2",
+              "sourceManifestHash": "d54fbabdc5cb36d593d05ed44f2482df82f5276bfa6cf5de2d3094b69770616d",
+              "imageKey": "identity-api"
+            }
+          }
+        }
+      ],
+      "displayName": "Activity Feed",
+      "packageName": "@xemahq/biomes-activity-feed",
       "requiresServerBiomes": [],
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "f9f238beb7cf38c83b1caf6f3681c0d5dca999960dcce6ccedab7f532814e318"
+      "sourceManifestHash": "197327dce961d0e8509efc1e053ecbb315cd152acff476f9c27ad668b18660fd",
+      "display": {
+        "icon": "activity",
+        "category": "operate",
+        "summary": "Activity feed projector: materializes CloudEvent streams into per-actor and per-subject timelines."
+      }
     },
     {
       "id": "agent-runtime",
       "version": "0.1.0",
       "tier": "base",
       "target": "server",
-      "origin": "third-party",
+      "origin": "first-party",
       "mandatory": false,
-      "repo": "repos/xema-community",
-      "path": "repos/xema-community/biomes/agent-runtime",
+      "installPolicy": "default-selected",
+      "repo": "repos/xema-base",
+      "path": "repos/xema-base/biomes/agent-runtime",
       "services": [
         "agent-session-api",
         "artifact-store-api",
         "llm-registry-api",
-        "memory-api",
         "skill-registry-api"
       ],
+      "runtimeComponents": [],
+      "serviceDependencies": [
+        {
+          "consumerService": "agent-session-api",
+          "requiredService": "biome-host-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "biome-host",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/biome-host",
+            "version": "0.1.0",
+            "sourceManifestHash": "c42bf9a72f8c8b259ff34cc871c6246bf95f885caccf35abceaaf004129646d8"
+          }
+        },
+        {
+          "consumerService": "agent-session-api",
+          "requiredService": "identity-api",
+          "owner": {
+            "kind": "platform",
+            "source": {
+              "name": "identity-api",
+              "tier": "infra",
+              "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
+              "repo": "submodules/identity-api",
+              "path": "submodules/identity-api/package.json",
+              "sourceCommit": "2d6074f0d085f4bd86fc9741feb74ce9a338fba2",
+              "version": "0.0.2",
+              "sourceManifestHash": "d54fbabdc5cb36d593d05ed44f2482df82f5276bfa6cf5de2d3094b69770616d",
+              "imageKey": "identity-api"
+            }
+          }
+        },
+        {
+          "consumerService": "agent-session-api",
+          "requiredService": "object-registry-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "object-registry",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/object-registry",
+            "version": "0.1.0",
+            "sourceManifestHash": "647e3639506000511b3167251e5ef5eff036c5467ba73d77de8478ecef9c2a67"
+          }
+        },
+        {
+          "consumerService": "agent-session-api",
+          "requiredService": "org-database-pool-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "org-database-pool",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/org-database-pool",
+            "version": "0.1.0",
+            "sourceManifestHash": "c548e026565e6d48848daa8296079c9f66e47bc466d52851b3fb8ddca2c48a7a"
+          }
+        },
+        {
+          "consumerService": "agent-session-api",
+          "requiredService": "workload-runtime-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "workload-runtime",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/workload-runtime",
+            "version": "0.1.0",
+            "sourceManifestHash": "e049195ba0ab4dc002d394514ae3325f23672a1b6f6e7b81a82d843b8b76cbb1"
+          }
+        },
+        {
+          "consumerService": "agent-session-api",
+          "requiredService": "xema-capability-router",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "xema-capability-router",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/xema-capability-router",
+            "version": "0.1.0",
+            "sourceManifestHash": "b0bd3ae93d98695f185768dc60fb345d29a27848fbf45e98ee2f9fa3a35bc2c7"
+          }
+        },
+        {
+          "consumerService": "artifact-store-api",
+          "requiredService": "biome-host-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "biome-host",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/biome-host",
+            "version": "0.1.0",
+            "sourceManifestHash": "c42bf9a72f8c8b259ff34cc871c6246bf95f885caccf35abceaaf004129646d8"
+          }
+        },
+        {
+          "consumerService": "artifact-store-api",
+          "requiredService": "identity-api",
+          "owner": {
+            "kind": "platform",
+            "source": {
+              "name": "identity-api",
+              "tier": "infra",
+              "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
+              "repo": "submodules/identity-api",
+              "path": "submodules/identity-api/package.json",
+              "sourceCommit": "2d6074f0d085f4bd86fc9741feb74ce9a338fba2",
+              "version": "0.0.2",
+              "sourceManifestHash": "d54fbabdc5cb36d593d05ed44f2482df82f5276bfa6cf5de2d3094b69770616d",
+              "imageKey": "identity-api"
+            }
+          }
+        },
+        {
+          "consumerService": "llm-registry-api",
+          "requiredService": "biome-host-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "biome-host",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/biome-host",
+            "version": "0.1.0",
+            "sourceManifestHash": "c42bf9a72f8c8b259ff34cc871c6246bf95f885caccf35abceaaf004129646d8"
+          }
+        },
+        {
+          "consumerService": "llm-registry-api",
+          "requiredService": "identity-api",
+          "owner": {
+            "kind": "platform",
+            "source": {
+              "name": "identity-api",
+              "tier": "infra",
+              "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
+              "repo": "submodules/identity-api",
+              "path": "submodules/identity-api/package.json",
+              "sourceCommit": "2d6074f0d085f4bd86fc9741feb74ce9a338fba2",
+              "version": "0.0.2",
+              "sourceManifestHash": "d54fbabdc5cb36d593d05ed44f2482df82f5276bfa6cf5de2d3094b69770616d",
+              "imageKey": "identity-api"
+            }
+          }
+        },
+        {
+          "consumerService": "llm-registry-api",
+          "requiredService": "llm-gateway-api",
+          "owner": {
+            "kind": "platform",
+            "source": {
+              "name": "llm-gateway-api",
+              "tier": "infra",
+              "repositoryUrl": "https://github.com/xema-dev/llm-gateway-api.git",
+              "repo": "submodules/llm-gateway-api",
+              "path": "submodules/llm-gateway-api/package.json",
+              "sourceCommit": "decb41b3617648c20e67c0525bf82292066c18fc",
+              "version": "1.0.0",
+              "sourceManifestHash": "84c890b5dfb77b433fe4b28509c9c7b9a173a84d69be14fff3df154894c4a71d",
+              "imageKey": "llm-gateway-api"
+            }
+          }
+        },
+        {
+          "consumerService": "llm-registry-api",
+          "requiredService": "xema-capability-router",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "xema-capability-router",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/xema-capability-router",
+            "version": "0.1.0",
+            "sourceManifestHash": "b0bd3ae93d98695f185768dc60fb345d29a27848fbf45e98ee2f9fa3a35bc2c7"
+          }
+        },
+        {
+          "consumerService": "skill-registry-api",
+          "requiredService": "identity-api",
+          "owner": {
+            "kind": "platform",
+            "source": {
+              "name": "identity-api",
+              "tier": "infra",
+              "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
+              "repo": "submodules/identity-api",
+              "path": "submodules/identity-api/package.json",
+              "sourceCommit": "2d6074f0d085f4bd86fc9741feb74ce9a338fba2",
+              "version": "0.0.2",
+              "sourceManifestHash": "d54fbabdc5cb36d593d05ed44f2482df82f5276bfa6cf5de2d3094b69770616d",
+              "imageKey": "identity-api"
+            }
+          }
+        }
+      ],
       "displayName": "Agent Runtime",
       "packageName": "@xemahq/biomes-agent-runtime",
       "requiresServerBiomes": [],
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "344f1edd9dfdf57c24c29636808d2e12a63e96e0a4eda4a2ee328ee7c22219d7"
+      "sourceManifestHash": "4073187b54d5ebcaaa258c5f99ac52e52eba15a1ce3d641642389f7b4805f6ce",
+      "display": {
+        "icon": "bot",
+        "category": "runtime",
+        "summary": "Foundational agent-runtime primitives: agent sessions, skill catalog, LLM registry, and typed artifact storage."
+      }
+    },
+    {
+      "id": "app-platform",
+      "version": "0.1.0",
+      "tier": "base",
+      "target": "server",
+      "origin": "first-party",
+      "mandatory": false,
+      "installPolicy": "default-selected",
+      "repo": "repos/xema-base",
+      "path": "repos/xema-base/biomes/app-platform",
+      "services": [
+        "app-platform-api"
+      ],
+      "runtimeComponents": [],
+      "serviceDependencies": [
+        {
+          "consumerService": "app-platform-api",
+          "requiredService": "authorization-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "authorization",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/authorization",
+            "version": "0.1.0",
+            "sourceManifestHash": "682f7b7a278848ad096bc7bbff4f97c30d775c08f49e07a45fff2c8c99b68aec"
+          }
+        },
+        {
+          "consumerService": "app-platform-api",
+          "requiredService": "biome-host-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "biome-host",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/biome-host",
+            "version": "0.1.0",
+            "sourceManifestHash": "c42bf9a72f8c8b259ff34cc871c6246bf95f885caccf35abceaaf004129646d8"
+          }
+        },
+        {
+          "consumerService": "app-platform-api",
+          "requiredService": "identity-api",
+          "owner": {
+            "kind": "platform",
+            "source": {
+              "name": "identity-api",
+              "tier": "infra",
+              "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
+              "repo": "submodules/identity-api",
+              "path": "submodules/identity-api/package.json",
+              "sourceCommit": "2d6074f0d085f4bd86fc9741feb74ce9a338fba2",
+              "version": "0.0.2",
+              "sourceManifestHash": "d54fbabdc5cb36d593d05ed44f2482df82f5276bfa6cf5de2d3094b69770616d",
+              "imageKey": "identity-api"
+            }
+          }
+        },
+        {
+          "consumerService": "app-platform-api",
+          "requiredService": "object-registry-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "object-registry",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/object-registry",
+            "version": "0.1.0",
+            "sourceManifestHash": "647e3639506000511b3167251e5ef5eff036c5467ba73d77de8478ecef9c2a67"
+          }
+        }
+      ],
+      "displayName": "App Runtime",
+      "packageName": "@xemahq/biomes-app-platform",
+      "requiresServerBiomes": [],
+      "optionalServerBiomes": [],
+      "audience": "org",
+      "storeListed": true,
+      "sourceManifestHash": "57d2604a2d72a047a1d970c827bf5c252a82c5bafb2dadbdabef3efb75d44aeb",
+      "display": {
+        "icon": "app-window",
+        "category": "connect",
+        "summary": "App/portal runtime for external end-users: Apps, external auth (magic-link/OIDC), public ingress, delegated sessions."
+      }
     },
     {
       "id": "backlog",
       "version": "0.1.0",
       "tier": "base",
       "target": "server",
-      "origin": "third-party",
+      "origin": "first-party",
       "mandatory": false,
+      "installPolicy": "optional",
       "repo": "repos/xema-community",
       "path": "repos/xema-community/biomes/backlog",
       "services": [
         "backlog-api"
       ],
+      "runtimeComponents": [],
+      "serviceDependencies": [
+        {
+          "consumerService": "backlog-api",
+          "requiredService": "identity-api",
+          "owner": {
+            "kind": "platform",
+            "source": {
+              "name": "identity-api",
+              "tier": "infra",
+              "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
+              "repo": "submodules/identity-api",
+              "path": "submodules/identity-api/package.json",
+              "sourceCommit": "2d6074f0d085f4bd86fc9741feb74ce9a338fba2",
+              "version": "0.0.2",
+              "sourceManifestHash": "d54fbabdc5cb36d593d05ed44f2482df82f5276bfa6cf5de2d3094b69770616d",
+              "imageKey": "identity-api"
+            }
+          }
+        }
+      ],
       "displayName": "Backlog",
       "packageName": "@xemahq/biomes-backlog",
       "requiresServerBiomes": [],
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "7be13f88e41e4435b8b50032a0fee7a6ae5fca44a4b54819087aea52357882a7"
+      "sourceManifestHash": "3506d48be346877024235f850fc27c3abb16abb8db60f34fe1dabf9c57b1e708",
+      "display": {
+        "icon": "list",
+        "category": "operate",
+        "summary": "Work-item and backlog primitive — stores and syncs tracker issues and tasks that Xema workflows read and update."
+      }
+    },
+    {
+      "id": "canopy",
+      "version": "0.1.0",
+      "tier": "base",
+      "target": "server",
+      "origin": "first-party",
+      "mandatory": false,
+      "installPolicy": "default-selected",
+      "repo": "repos/xema-base",
+      "path": "repos/xema-base/biomes/canopy",
+      "services": [
+        "canopy-api"
+      ],
+      "runtimeComponents": [],
+      "serviceDependencies": [
+        {
+          "consumerService": "canopy-api",
+          "requiredService": "capability-registry-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "capability-registry",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/capability-registry",
+            "version": "0.1.0",
+            "sourceManifestHash": "50063c0b95ffaf47d413423a34f47b36c6adb53c88d39e4101fa2f768840eb98"
+          }
+        },
+        {
+          "consumerService": "canopy-api",
+          "requiredService": "identity-api",
+          "owner": {
+            "kind": "platform",
+            "source": {
+              "name": "identity-api",
+              "tier": "infra",
+              "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
+              "repo": "submodules/identity-api",
+              "path": "submodules/identity-api/package.json",
+              "sourceCommit": "2d6074f0d085f4bd86fc9741feb74ce9a338fba2",
+              "version": "0.0.2",
+              "sourceManifestHash": "d54fbabdc5cb36d593d05ed44f2482df82f5276bfa6cf5de2d3094b69770616d",
+              "imageKey": "identity-api"
+            }
+          }
+        },
+        {
+          "consumerService": "canopy-api",
+          "requiredService": "xema-capability-router",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "xema-capability-router",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/xema-capability-router",
+            "version": "0.1.0",
+            "sourceManifestHash": "b0bd3ae93d98695f185768dc60fb345d29a27848fbf45e98ee2f9fa3a35bc2c7"
+          }
+        }
+      ],
+      "displayName": "Canopy",
+      "packageName": "@xemahq/biomes-canopy",
+      "requiresServerBiomes": [],
+      "optionalServerBiomes": [],
+      "audience": "org",
+      "storeListed": true,
+      "sourceManifestHash": "0d2a8ccb8fcb68f290817451f5588bfd6756a970029337a2d539b87af0fb452b",
+      "display": {
+        "icon": "sparkles",
+        "category": "runtime",
+        "summary": "The universal Xema agent: one org-scoped conversation that can reach every capability of every installed biome."
+      }
+    },
+    {
+      "id": "connector-platform",
+      "version": "0.1.0",
+      "tier": "base",
+      "target": "server",
+      "origin": "first-party",
+      "mandatory": false,
+      "installPolicy": "default-selected",
+      "repo": "repos/xema-base",
+      "path": "repos/xema-base/biomes/connector-platform",
+      "services": [
+        "connector-gateway-api",
+        "credential-broker-api"
+      ],
+      "runtimeComponents": [],
+      "serviceDependencies": [
+        {
+          "consumerService": "connector-gateway-api",
+          "requiredService": "capability-registry-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "capability-registry",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/capability-registry",
+            "version": "0.1.0",
+            "sourceManifestHash": "50063c0b95ffaf47d413423a34f47b36c6adb53c88d39e4101fa2f768840eb98"
+          }
+        },
+        {
+          "consumerService": "connector-gateway-api",
+          "requiredService": "identity-api",
+          "owner": {
+            "kind": "platform",
+            "source": {
+              "name": "identity-api",
+              "tier": "infra",
+              "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
+              "repo": "submodules/identity-api",
+              "path": "submodules/identity-api/package.json",
+              "sourceCommit": "2d6074f0d085f4bd86fc9741feb74ce9a338fba2",
+              "version": "0.0.2",
+              "sourceManifestHash": "d54fbabdc5cb36d593d05ed44f2482df82f5276bfa6cf5de2d3094b69770616d",
+              "imageKey": "identity-api"
+            }
+          }
+        },
+        {
+          "consumerService": "credential-broker-api",
+          "requiredService": "identity-api",
+          "owner": {
+            "kind": "platform",
+            "source": {
+              "name": "identity-api",
+              "tier": "infra",
+              "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
+              "repo": "submodules/identity-api",
+              "path": "submodules/identity-api/package.json",
+              "sourceCommit": "2d6074f0d085f4bd86fc9741feb74ce9a338fba2",
+              "version": "0.0.2",
+              "sourceManifestHash": "d54fbabdc5cb36d593d05ed44f2482df82f5276bfa6cf5de2d3094b69770616d",
+              "imageKey": "identity-api"
+            }
+          }
+        },
+        {
+          "consumerService": "credential-broker-api",
+          "requiredService": "secrets-api",
+          "owner": {
+            "kind": "platform",
+            "source": {
+              "name": "secrets-api",
+              "tier": "infra",
+              "repositoryUrl": "https://github.com/xema-dev/secrets-api.git",
+              "repo": "submodules/secrets-api",
+              "path": "submodules/secrets-api/package.json",
+              "sourceCommit": "bcc6a3dfad5ded4c764ae1c029f6b619dff64e19",
+              "version": "1.0.0",
+              "sourceManifestHash": "1e9eff70ec3dc91b62ca69d32bc9e92c669e02ff305cacd25bb8e2b0be03858f",
+              "imageKey": "secrets-api"
+            }
+          }
+        }
+      ],
+      "displayName": "Connector Platform",
+      "packageName": "@xemahq/biomes-connector-platform",
+      "requiresServerBiomes": [],
+      "optionalServerBiomes": [],
+      "audience": "org",
+      "storeListed": true,
+      "sourceManifestHash": "89327f5171da372ea0013f02da021ac54a21d6a23c9b8d3d55951da6eef617c1",
+      "display": {
+        "icon": "plug",
+        "category": "connect",
+        "summary": "Generic connector ingress edge and credential broker; per-provider connector biomes consume its services."
+      }
+    },
+    {
+      "id": "container-registry",
+      "version": "0.1.0",
+      "tier": "base",
+      "target": "server",
+      "origin": "first-party",
+      "mandatory": false,
+      "installPolicy": "optional",
+      "repo": "repos/xema-base",
+      "path": "repos/xema-base/biomes/container-registry",
+      "services": [
+        "container-registry-api"
+      ],
+      "runtimeComponents": [],
+      "serviceDependencies": [
+        {
+          "consumerService": "container-registry-api",
+          "requiredService": "identity-api",
+          "owner": {
+            "kind": "platform",
+            "source": {
+              "name": "identity-api",
+              "tier": "infra",
+              "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
+              "repo": "submodules/identity-api",
+              "path": "submodules/identity-api/package.json",
+              "sourceCommit": "2d6074f0d085f4bd86fc9741feb74ce9a338fba2",
+              "version": "0.0.2",
+              "sourceManifestHash": "d54fbabdc5cb36d593d05ed44f2482df82f5276bfa6cf5de2d3094b69770616d",
+              "imageKey": "identity-api"
+            }
+          }
+        },
+        {
+          "consumerService": "container-registry-api",
+          "requiredService": "workload-runtime-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "workload-runtime",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/workload-runtime",
+            "version": "0.1.0",
+            "sourceManifestHash": "e049195ba0ab4dc002d394514ae3325f23672a1b6f6e7b81a82d843b8b76cbb1"
+          }
+        }
+      ],
+      "displayName": "Container Registry",
+      "packageName": "@xemahq/biomes-container-registry",
+      "requiresServerBiomes": [],
+      "optionalServerBiomes": [],
+      "audience": "org",
+      "storeListed": true,
+      "sourceManifestHash": "ec29d2bbf8be457492c9fa733ddaa95915e04f748903b2ad1b41bb2188b4d4ae",
+      "display": {
+        "icon": "container",
+        "category": "build",
+        "summary": "OCI image registry adapter and workspace-image baker: proxies push/pull and bakes custom worker images."
+      }
     },
     {
       "id": "control-plane",
       "version": "0.1.0",
       "tier": "base",
       "target": "server",
-      "origin": "third-party",
+      "origin": "first-party",
       "mandatory": false,
+      "installPolicy": "default-selected",
       "repo": "repos/xema-community",
       "path": "repos/xema-community/biomes/control-plane",
       "services": [
         "control-plane-api"
       ],
+      "runtimeComponents": [],
+      "serviceDependencies": [
+        {
+          "consumerService": "control-plane-api",
+          "requiredService": "authorization-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "authorization",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/authorization",
+            "version": "0.1.0",
+            "sourceManifestHash": "682f7b7a278848ad096bc7bbff4f97c30d775c08f49e07a45fff2c8c99b68aec"
+          }
+        },
+        {
+          "consumerService": "control-plane-api",
+          "requiredService": "biome-host-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "biome-host",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/biome-host",
+            "version": "0.1.0",
+            "sourceManifestHash": "c42bf9a72f8c8b259ff34cc871c6246bf95f885caccf35abceaaf004129646d8"
+          }
+        },
+        {
+          "consumerService": "control-plane-api",
+          "requiredService": "capability-registry-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "capability-registry",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/capability-registry",
+            "version": "0.1.0",
+            "sourceManifestHash": "50063c0b95ffaf47d413423a34f47b36c6adb53c88d39e4101fa2f768840eb98"
+          }
+        },
+        {
+          "consumerService": "control-plane-api",
+          "requiredService": "identity-api",
+          "owner": {
+            "kind": "platform",
+            "source": {
+              "name": "identity-api",
+              "tier": "infra",
+              "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
+              "repo": "submodules/identity-api",
+              "path": "submodules/identity-api/package.json",
+              "sourceCommit": "2d6074f0d085f4bd86fc9741feb74ce9a338fba2",
+              "version": "0.0.2",
+              "sourceManifestHash": "d54fbabdc5cb36d593d05ed44f2482df82f5276bfa6cf5de2d3094b69770616d",
+              "imageKey": "identity-api"
+            }
+          }
+        },
+        {
+          "consumerService": "control-plane-api",
+          "requiredService": "space-registry-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "space-registry",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/space-registry",
+            "version": "0.1.0",
+            "sourceManifestHash": "cefbffb40144eece7bfc18fa36d566bff0dbd93259a560d827d2434b16abcf52"
+          }
+        }
+      ],
       "displayName": "Control Plane",
       "packageName": "@xemahq/biomes-control-plane",
       "requiresServerBiomes": [],
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "08a6aa80d0428c7063699bf7d5eceeb336dd9348a671d671946c120f098be72c"
+      "sourceManifestHash": "c18a6f32ae5e561870b5e865d709092605ea3b1800aa1eac371e0a191cc89b35",
+      "display": {
+        "icon": "settings",
+        "category": "operate",
+        "summary": "Xema-as-Code control plane — the org-admin edge that applies declarative xema.yaml and Terraform provisioning across the platform registries."
+      }
     },
     {
       "id": "conversation-channels",
       "version": "0.1.0",
       "tier": "base",
       "target": "server",
-      "origin": "third-party",
+      "origin": "first-party",
       "mandatory": false,
+      "installPolicy": "optional",
       "repo": "repos/xema-community",
       "path": "repos/xema-community/biomes/conversation-channels",
       "services": [
         "channel-gateway-api"
       ],
+      "runtimeComponents": [],
+      "serviceDependencies": [
+        {
+          "consumerService": "channel-gateway-api",
+          "requiredService": "identity-api",
+          "owner": {
+            "kind": "platform",
+            "source": {
+              "name": "identity-api",
+              "tier": "infra",
+              "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
+              "repo": "submodules/identity-api",
+              "path": "submodules/identity-api/package.json",
+              "sourceCommit": "2d6074f0d085f4bd86fc9741feb74ce9a338fba2",
+              "version": "0.0.2",
+              "sourceManifestHash": "d54fbabdc5cb36d593d05ed44f2482df82f5276bfa6cf5de2d3094b69770616d",
+              "imageKey": "identity-api"
+            }
+          }
+        }
+      ],
       "displayName": "Conversation Channels",
       "packageName": "@xemahq/biomes-conversation-channels",
       "requiresServerBiomes": [],
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "40421b36a3aeaf894530b8cb2274e6375f06fa8559e7614776576d65d3b472be"
+      "sourceManifestHash": "4adf7d12ad7c1b7292e1ef192511f4c5e9faec399a336675baa3184e7e54260c",
+      "display": {
+        "icon": "message-circle",
+        "category": "connect",
+        "summary": "Conversation channels — bridges external chat channels (Telegram, Slack, …) to durable Xema agent sessions with coalesced replies."
+      }
     },
     {
       "id": "document-rendering",
       "version": "0.1.0",
       "tier": "base",
       "target": "server",
-      "origin": "third-party",
+      "origin": "first-party",
       "mandatory": false,
-      "repo": "repos/xema-platform",
-      "path": "repos/xema-platform/biomes/document-rendering",
+      "installPolicy": "optional",
+      "repo": "repos/xema-community",
+      "path": "repos/xema-community/biomes/document-rendering",
       "services": [
         "document-render-api"
       ],
+      "runtimeComponents": [],
+      "serviceDependencies": [
+        {
+          "consumerService": "document-render-api",
+          "requiredService": "capability-registry-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "capability-registry",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/capability-registry",
+            "version": "0.1.0",
+            "sourceManifestHash": "50063c0b95ffaf47d413423a34f47b36c6adb53c88d39e4101fa2f768840eb98"
+          }
+        },
+        {
+          "consumerService": "document-render-api",
+          "requiredService": "identity-api",
+          "owner": {
+            "kind": "platform",
+            "source": {
+              "name": "identity-api",
+              "tier": "infra",
+              "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
+              "repo": "submodules/identity-api",
+              "path": "submodules/identity-api/package.json",
+              "sourceCommit": "2d6074f0d085f4bd86fc9741feb74ce9a338fba2",
+              "version": "0.0.2",
+              "sourceManifestHash": "d54fbabdc5cb36d593d05ed44f2482df82f5276bfa6cf5de2d3094b69770616d",
+              "imageKey": "identity-api"
+            }
+          }
+        }
+      ],
       "displayName": "Document Rendering",
       "packageName": "@xemahq/biomes-document-rendering",
       "requiresServerBiomes": [],
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "f03816a9181f5bc8870baa7867a966437b9816e81c4c67a1df2e323d92fb427b"
+      "sourceManifestHash": "1b85ce0d004f4c424f88b4896a6fc81e7faf5fd36458db14a02b19ce23c9be8c",
+      "display": {
+        "icon": "file-text",
+        "category": "knowledge",
+        "summary": "Document rendering — generic primitive that materializes markdown/HTML/echarts into PDF/PNG artifacts for any biome."
+      }
     },
     {
-      "id": "integration-platform",
+      "id": "knowledge-base",
       "version": "0.1.0",
       "tier": "base",
       "target": "server",
-      "origin": "third-party",
+      "origin": "first-party",
       "mandatory": false,
-      "repo": "repos/xema-platform",
-      "path": "repos/xema-platform/biomes/integration-platform",
+      "installPolicy": "default-selected",
+      "repo": "repos/xema-base",
+      "path": "repos/xema-base/biomes/knowledge-base",
       "services": [
-        "connector-gateway-api",
-        "credential-broker-api"
+        "knowledge-base-api"
       ],
-      "displayName": "Integration Platform",
-      "packageName": "@xemahq/biomes-integration-platform",
+      "runtimeComponents": [],
+      "serviceDependencies": [
+        {
+          "consumerService": "knowledge-base-api",
+          "requiredService": "authorization-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "authorization",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/authorization",
+            "version": "0.1.0",
+            "sourceManifestHash": "682f7b7a278848ad096bc7bbff4f97c30d775c08f49e07a45fff2c8c99b68aec"
+          }
+        },
+        {
+          "consumerService": "knowledge-base-api",
+          "requiredService": "capability-registry-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "capability-registry",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/capability-registry",
+            "version": "0.1.0",
+            "sourceManifestHash": "50063c0b95ffaf47d413423a34f47b36c6adb53c88d39e4101fa2f768840eb98"
+          }
+        },
+        {
+          "consumerService": "knowledge-base-api",
+          "requiredService": "identity-api",
+          "owner": {
+            "kind": "platform",
+            "source": {
+              "name": "identity-api",
+              "tier": "infra",
+              "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
+              "repo": "submodules/identity-api",
+              "path": "submodules/identity-api/package.json",
+              "sourceCommit": "2d6074f0d085f4bd86fc9741feb74ce9a338fba2",
+              "version": "0.0.2",
+              "sourceManifestHash": "d54fbabdc5cb36d593d05ed44f2482df82f5276bfa6cf5de2d3094b69770616d",
+              "imageKey": "identity-api"
+            }
+          }
+        }
+      ],
+      "displayName": "Knowledge Base",
+      "packageName": "@xemahq/biomes-knowledge-base",
       "requiresServerBiomes": [],
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "bbbe34c2b7de0159f354f56b9abe61607f67ef41a4ac313dd9bd081d124f2071"
+      "sourceManifestHash": "df6f38d956fcaf2c1528d406ab93a09b7d5e1018f925db25b36772a26a06b603",
+      "display": {
+        "icon": "book-open",
+        "category": "knowledge",
+        "summary": "Knowledge base primitive: document storage plus semantic search consumed across tiers."
+      }
     },
     {
-      "id": "knowledge-base",
+      "id": "mcp-router",
       "version": "0.1.0",
       "tier": "base",
       "target": "server",
-      "origin": "third-party",
+      "origin": "first-party",
       "mandatory": false,
-      "repo": "repos/xema-community",
-      "path": "repos/xema-community/biomes/knowledge-base",
+      "installPolicy": "default-selected",
+      "repo": "repos/xema-base",
+      "path": "repos/xema-base/biomes/mcp-router",
       "services": [
-        "knowledge-base-api"
+        "mcp-gateway-api"
       ],
-      "displayName": "Knowledge Base",
-      "packageName": "@xemahq/biomes-knowledge-base",
+      "runtimeComponents": [],
+      "serviceDependencies": [
+        {
+          "consumerService": "mcp-gateway-api",
+          "requiredService": "biome-host-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "biome-host",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/biome-host",
+            "version": "0.1.0",
+            "sourceManifestHash": "c42bf9a72f8c8b259ff34cc871c6246bf95f885caccf35abceaaf004129646d8"
+          }
+        },
+        {
+          "consumerService": "mcp-gateway-api",
+          "requiredService": "identity-api",
+          "owner": {
+            "kind": "platform",
+            "source": {
+              "name": "identity-api",
+              "tier": "infra",
+              "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
+              "repo": "submodules/identity-api",
+              "path": "submodules/identity-api/package.json",
+              "sourceCommit": "2d6074f0d085f4bd86fc9741feb74ce9a338fba2",
+              "version": "0.0.2",
+              "sourceManifestHash": "d54fbabdc5cb36d593d05ed44f2482df82f5276bfa6cf5de2d3094b69770616d",
+              "imageKey": "identity-api"
+            }
+          }
+        },
+        {
+          "consumerService": "mcp-gateway-api",
+          "requiredService": "org-database-pool-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "org-database-pool",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/org-database-pool",
+            "version": "0.1.0",
+            "sourceManifestHash": "c548e026565e6d48848daa8296079c9f66e47bc466d52851b3fb8ddca2c48a7a"
+          }
+        }
+      ],
+      "displayName": "Mcp Router",
+      "packageName": "@xemahq/biomes-mcp-router",
       "requiresServerBiomes": [],
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "766263a26659a545af2942897efb33f0188a865e7584507b519794704656aaf8"
+      "sourceManifestHash": "8f6fb91c92e279368f9fd3b8103d6f6327e0affc05d5ba032d0a258511b61b29",
+      "display": {
+        "icon": "network",
+        "category": "connect",
+        "summary": "External MCP bridge: routes agent MCP tool calls to registered or biome-shipped MCP servers."
+      }
     },
     {
-      "id": "mcp-router",
+      "id": "policy-distributor",
       "version": "0.1.0",
       "tier": "base",
       "target": "server",
-      "origin": "third-party",
+      "origin": "first-party",
       "mandatory": false,
-      "repo": "repos/xema-community",
-      "path": "repos/xema-community/biomes/mcp-router",
+      "installPolicy": "default-selected",
+      "repo": "repos/xema-base",
+      "path": "repos/xema-base/biomes/policy-distributor",
       "services": [
-        "mcp-gateway-api"
+        "policy-distributor-api"
       ],
-      "displayName": "Mcp Router",
-      "packageName": "@xemahq/biomes-mcp-router",
+      "runtimeComponents": [],
+      "serviceDependencies": [
+        {
+          "consumerService": "policy-distributor-api",
+          "requiredService": "identity-api",
+          "owner": {
+            "kind": "platform",
+            "source": {
+              "name": "identity-api",
+              "tier": "infra",
+              "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
+              "repo": "submodules/identity-api",
+              "path": "submodules/identity-api/package.json",
+              "sourceCommit": "2d6074f0d085f4bd86fc9741feb74ce9a338fba2",
+              "version": "0.0.2",
+              "sourceManifestHash": "d54fbabdc5cb36d593d05ed44f2482df82f5276bfa6cf5de2d3094b69770616d",
+              "imageKey": "identity-api"
+            }
+          }
+        }
+      ],
+      "displayName": "Policy Distributor",
+      "packageName": "@xemahq/biomes-policy-distributor",
       "requiresServerBiomes": [],
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "c88d39d943a574794e2ad01873c7f98e01b684ce5b435ec19fea0866a3ceac2b"
+      "sourceManifestHash": "96a0b50128abae88a4bd73f20630117d03ea1134d73d5b1627755820d77f3b3b",
+      "display": {
+        "icon": "file-lock",
+        "category": "governance",
+        "summary": "Central OPA bundle distributor: serves signed, versioned policy bundles over the OPA Bundle Service protocol."
+      }
     },
     {
       "id": "project-registry",
       "version": "0.1.0",
       "tier": "base",
       "target": "server",
-      "origin": "third-party",
+      "origin": "first-party",
       "mandatory": false,
-      "repo": "repos/xema-community",
-      "path": "repos/xema-community/biomes/project-registry",
+      "installPolicy": "default-selected",
+      "repo": "repos/xema-base",
+      "path": "repos/xema-base/biomes/project-registry",
       "services": [
         "project-registry-api"
       ],
+      "runtimeComponents": [],
+      "serviceDependencies": [
+        {
+          "consumerService": "project-registry-api",
+          "requiredService": "identity-api",
+          "owner": {
+            "kind": "platform",
+            "source": {
+              "name": "identity-api",
+              "tier": "infra",
+              "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
+              "repo": "submodules/identity-api",
+              "path": "submodules/identity-api/package.json",
+              "sourceCommit": "2d6074f0d085f4bd86fc9741feb74ce9a338fba2",
+              "version": "0.0.2",
+              "sourceManifestHash": "d54fbabdc5cb36d593d05ed44f2482df82f5276bfa6cf5de2d3094b69770616d",
+              "imageKey": "identity-api"
+            }
+          }
+        }
+      ],
       "displayName": "Project Registry",
       "packageName": "@xemahq/biomes-project-registry",
       "requiresServerBiomes": [],
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "93624e28d15e360b7bd05cffa690f4d1112ef3681fd2ebbbf9683c3f4ebd49a6"
+      "sourceManifestHash": "4194c3a3d3cf876d0a12af7848604ccf3f9c093def9e7f51cf4e59394dca2229",
+      "display": {
+        "icon": "folders",
+        "category": "platform",
+        "summary": "Project and membership management: owns project identity, membership, and role assignment."
+      }
     },
     {
-      "id": "search",
+      "id": "user-hub",
       "version": "0.1.0",
       "tier": "base",
       "target": "server",
-      "origin": "third-party",
+      "origin": "first-party",
       "mandatory": false,
-      "repo": "repos/xema-platform",
-      "path": "repos/xema-platform/biomes/search",
+      "installPolicy": "default-selected",
+      "repo": "repos/xema-base",
+      "path": "repos/xema-base/biomes/user-hub",
       "services": [
-        "search-api"
+        "user-hub-api"
       ],
-      "displayName": "Search",
-      "packageName": "@xemahq/biomes-search",
+      "runtimeComponents": [],
+      "serviceDependencies": [
+        {
+          "consumerService": "user-hub-api",
+          "requiredService": "capability-registry-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "capability-registry",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/capability-registry",
+            "version": "0.1.0",
+            "sourceManifestHash": "50063c0b95ffaf47d413423a34f47b36c6adb53c88d39e4101fa2f768840eb98"
+          }
+        },
+        {
+          "consumerService": "user-hub-api",
+          "requiredService": "identity-api",
+          "owner": {
+            "kind": "platform",
+            "source": {
+              "name": "identity-api",
+              "tier": "infra",
+              "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
+              "repo": "submodules/identity-api",
+              "path": "submodules/identity-api/package.json",
+              "sourceCommit": "2d6074f0d085f4bd86fc9741feb74ce9a338fba2",
+              "version": "0.0.2",
+              "sourceManifestHash": "d54fbabdc5cb36d593d05ed44f2482df82f5276bfa6cf5de2d3094b69770616d",
+              "imageKey": "identity-api"
+            }
+          }
+        }
+      ],
+      "displayName": "User Hub",
+      "packageName": "@xemahq/biomes-user-hub",
       "requiresServerBiomes": [],
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "187a46e837d51ead9f7cd0e03cbae447c7b0b0c0f7a13dc3751dd5d8e1de97d5"
+      "sourceManifestHash": "f9985f6285a46b1b1dc989beabdcdc6be7a6f120c0e28e0d27643cb17a83ca40",
+      "display": {
+        "icon": "users",
+        "category": "identity",
+        "summary": "User profile, notification, and presence read-model aggregating Keycloak state into a canonical view."
+      }
+    },
+    {
+      "id": "web-access",
+      "version": "0.1.0",
+      "tier": "base",
+      "target": "server",
+      "origin": "first-party",
+      "mandatory": false,
+      "installPolicy": "default-selected",
+      "repo": "repos/xema-base",
+      "path": "repos/xema-base/biomes/web-access",
+      "services": [
+        "web-access-api"
+      ],
+      "runtimeComponents": [],
+      "serviceDependencies": [
+        {
+          "consumerService": "web-access-api",
+          "requiredService": "identity-api",
+          "owner": {
+            "kind": "platform",
+            "source": {
+              "name": "identity-api",
+              "tier": "infra",
+              "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
+              "repo": "submodules/identity-api",
+              "path": "submodules/identity-api/package.json",
+              "sourceCommit": "2d6074f0d085f4bd86fc9741feb74ce9a338fba2",
+              "version": "0.0.2",
+              "sourceManifestHash": "d54fbabdc5cb36d593d05ed44f2482df82f5276bfa6cf5de2d3094b69770616d",
+              "imageKey": "identity-api"
+            }
+          }
+        }
+      ],
+      "displayName": "Web Access",
+      "packageName": "@xemahq/biomes-web-access",
+      "requiresServerBiomes": [],
+      "optionalServerBiomes": [],
+      "audience": "org",
+      "storeListed": true,
+      "sourceManifestHash": "e651f71f8da96cb3af6db3b00bac90bd04e2d020de83099fe2b9cdefefc9705d",
+      "display": {
+        "icon": "globe",
+        "category": "runtime",
+        "summary": "Governed public-web access — the ONE audited door for fetching and searching the public internet."
+      }
     },
     {
       "id": "workflow-runtime",
       "version": "0.1.0",
       "tier": "base",
       "target": "server",
-      "origin": "third-party",
+      "origin": "first-party",
       "mandatory": false,
-      "repo": "repos/xema-community",
-      "path": "repos/xema-community/biomes/workflow-runtime",
+      "installPolicy": "default-selected",
+      "repo": "repos/xema-base",
+      "path": "repos/xema-base/biomes/workflow-runtime",
       "services": [
         "deliverable-specs-api",
         "workflow-engine-api",
         "workflow-runtime-worker"
       ],
+      "runtimeComponents": [],
+      "serviceDependencies": [
+        {
+          "consumerService": "deliverable-specs-api",
+          "requiredService": "biome-host-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "biome-host",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/biome-host",
+            "version": "0.1.0",
+            "sourceManifestHash": "c42bf9a72f8c8b259ff34cc871c6246bf95f885caccf35abceaaf004129646d8"
+          }
+        },
+        {
+          "consumerService": "deliverable-specs-api",
+          "requiredService": "identity-api",
+          "owner": {
+            "kind": "platform",
+            "source": {
+              "name": "identity-api",
+              "tier": "infra",
+              "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
+              "repo": "submodules/identity-api",
+              "path": "submodules/identity-api/package.json",
+              "sourceCommit": "2d6074f0d085f4bd86fc9741feb74ce9a338fba2",
+              "version": "0.0.2",
+              "sourceManifestHash": "d54fbabdc5cb36d593d05ed44f2482df82f5276bfa6cf5de2d3094b69770616d",
+              "imageKey": "identity-api"
+            }
+          }
+        },
+        {
+          "consumerService": "workflow-engine-api",
+          "requiredService": "biome-host-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "biome-host",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/biome-host",
+            "version": "0.1.0",
+            "sourceManifestHash": "c42bf9a72f8c8b259ff34cc871c6246bf95f885caccf35abceaaf004129646d8"
+          }
+        },
+        {
+          "consumerService": "workflow-engine-api",
+          "requiredService": "identity-api",
+          "owner": {
+            "kind": "platform",
+            "source": {
+              "name": "identity-api",
+              "tier": "infra",
+              "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
+              "repo": "submodules/identity-api",
+              "path": "submodules/identity-api/package.json",
+              "sourceCommit": "2d6074f0d085f4bd86fc9741feb74ce9a338fba2",
+              "version": "0.0.2",
+              "sourceManifestHash": "d54fbabdc5cb36d593d05ed44f2482df82f5276bfa6cf5de2d3094b69770616d",
+              "imageKey": "identity-api"
+            }
+          }
+        }
+      ],
       "displayName": "Workflow Runtime",
       "packageName": "@xemahq/biomes-workflow-runtime",
       "requiresServerBiomes": [],
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "67b083e207c8b37ba286219c9367b9bdb06a7e70765ff3ba11c58487ff3d2914"
+      "sourceManifestHash": "af58569c93396a38bfda2f83a92d9b6d846645dab70411ab7a905ef09aa547f0",
+      "display": {
+        "icon": "workflow",
+        "category": "runtime",
+        "summary": "Workflow primitive: DSL compilation, Temporal-driven workflow execution, and the typed deliverable-spec store."
+      }
     },
     {
       "id": "workspace-orchestrator",
       "version": "0.1.0",
       "tier": "base",
       "target": "server",
-      "origin": "third-party",
+      "origin": "first-party",
       "mandatory": false,
-      "repo": "repos/xema-platform",
-      "path": "repos/xema-platform/biomes/workspace-orchestrator",
+      "installPolicy": "default-selected",
+      "repo": "repos/xema-base",
+      "path": "repos/xema-base/biomes/workspace-orchestrator",
       "services": [
         "workspace-orchestrator-api"
       ],
+      "runtimeComponents": [],
+      "serviceDependencies": [
+        {
+          "consumerService": "workspace-orchestrator-api",
+          "requiredService": "biome-host-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "biome-host",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/biome-host",
+            "version": "0.1.0",
+            "sourceManifestHash": "c42bf9a72f8c8b259ff34cc871c6246bf95f885caccf35abceaaf004129646d8"
+          }
+        },
+        {
+          "consumerService": "workspace-orchestrator-api",
+          "requiredService": "identity-api",
+          "owner": {
+            "kind": "platform",
+            "source": {
+              "name": "identity-api",
+              "tier": "infra",
+              "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
+              "repo": "submodules/identity-api",
+              "path": "submodules/identity-api/package.json",
+              "sourceCommit": "2d6074f0d085f4bd86fc9741feb74ce9a338fba2",
+              "version": "0.0.2",
+              "sourceManifestHash": "d54fbabdc5cb36d593d05ed44f2482df82f5276bfa6cf5de2d3094b69770616d",
+              "imageKey": "identity-api"
+            }
+          }
+        },
+        {
+          "consumerService": "workspace-orchestrator-api",
+          "requiredService": "llm-gateway-api",
+          "owner": {
+            "kind": "platform",
+            "source": {
+              "name": "llm-gateway-api",
+              "tier": "infra",
+              "repositoryUrl": "https://github.com/xema-dev/llm-gateway-api.git",
+              "repo": "submodules/llm-gateway-api",
+              "path": "submodules/llm-gateway-api/package.json",
+              "sourceCommit": "decb41b3617648c20e67c0525bf82292066c18fc",
+              "version": "1.0.0",
+              "sourceManifestHash": "84c890b5dfb77b433fe4b28509c9c7b9a173a84d69be14fff3df154894c4a71d",
+              "imageKey": "llm-gateway-api"
+            }
+          }
+        },
+        {
+          "consumerService": "workspace-orchestrator-api",
+          "requiredService": "workload-runtime-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "workload-runtime",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/workload-runtime",
+            "version": "0.1.0",
+            "sourceManifestHash": "e049195ba0ab4dc002d394514ae3325f23672a1b6f6e7b81a82d843b8b76cbb1"
+          }
+        },
+        {
+          "consumerService": "workspace-orchestrator-api",
+          "requiredService": "workspace-storage-pool-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "workspace-storage-pool",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/workspace-storage-pool",
+            "version": "0.1.0",
+            "sourceManifestHash": "39106bc8c52bdfb51bd219abcab974d0f70ce784335b5299fd2e4aa5c901d078"
+          }
+        },
+        {
+          "consumerService": "workspace-orchestrator-api",
+          "requiredService": "xema-capability-router",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "xema-capability-router",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/xema-capability-router",
+            "version": "0.1.0",
+            "sourceManifestHash": "b0bd3ae93d98695f185768dc60fb345d29a27848fbf45e98ee2f9fa3a35bc2c7"
+          }
+        }
+      ],
       "displayName": "Workspace Orchestrator",
       "packageName": "@xemahq/biomes-workspace-orchestrator",
       "requiresServerBiomes": [],
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "39a039b3417b4c562dc61188901497d442a502003ec8cc119aa57ec25ca8de7d"
+      "sourceManifestHash": "ed0f84ddeecdc715f1f2c5f6270ad5f61ff438fdb665ab8a7f1ac57f825252fc",
+      "display": {
+        "icon": "layout-grid",
+        "category": "runtime",
+        "summary": "Per-session workspace lifecycle: creates, hibernates, and reaps workspace allocations."
+      }
     },
     {
       "id": "workspace-proxy",
       "version": "0.1.0",
       "tier": "base",
       "target": "server",
-      "origin": "third-party",
+      "origin": "first-party",
       "mandatory": false,
-      "repo": "repos/xema-community",
-      "path": "repos/xema-community/biomes/workspace-proxy",
+      "installPolicy": "default-selected",
+      "repo": "repos/xema-base",
+      "path": "repos/xema-base/biomes/workspace-proxy",
       "services": [
-        "workspace-materialization-api",
-        "workspace-proxy"
+        "workspace-materialization-api"
+      ],
+      "runtimeComponents": [],
+      "serviceDependencies": [
+        {
+          "consumerService": "workspace-materialization-api",
+          "requiredService": "identity-api",
+          "owner": {
+            "kind": "platform",
+            "source": {
+              "name": "identity-api",
+              "tier": "infra",
+              "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
+              "repo": "submodules/identity-api",
+              "path": "submodules/identity-api/package.json",
+              "sourceCommit": "2d6074f0d085f4bd86fc9741feb74ce9a338fba2",
+              "version": "0.0.2",
+              "sourceManifestHash": "d54fbabdc5cb36d593d05ed44f2482df82f5276bfa6cf5de2d3094b69770616d",
+              "imageKey": "identity-api"
+            }
+          }
+        }
       ],
       "displayName": "Workspace Proxy",
       "packageName": "@xemahq/biomes-workspace-proxy",
@@ -1215,10 +2756,423 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "4a3b6670a973fe73847ff47ede16a09fe43da0898118d612246aab325c87835e"
+      "sourceManifestHash": "fc9232929c2d6034b94995d87e2c7679fedb79f3110afa1887d18fc050aedd74",
+      "display": {
+        "icon": "route",
+        "category": "runtime",
+        "summary": "Per-allocation HTTP proxy: routes session and control-plane traffic into the workspace runtime worker."
+      }
+    },
+    {
+      "id": "xema-biome-runner",
+      "version": "0.1.0",
+      "tier": "base",
+      "target": "server",
+      "origin": "first-party",
+      "mandatory": false,
+      "installPolicy": "default-selected",
+      "repo": "repos/xema-base",
+      "path": "repos/xema-base/biomes/xema-biome-runner",
+      "services": [
+        "xema-biome-runner"
+      ],
+      "runtimeComponents": [],
+      "serviceDependencies": [],
+      "displayName": "Xema Biome Runner",
+      "packageName": "@xemahq/biomes-xema-biome-runner",
+      "requiresServerBiomes": [],
+      "optionalServerBiomes": [],
+      "audience": "org",
+      "storeListed": true,
+      "sourceManifestHash": "c170d7814b99fc8544c159cd33f0fc975263d00680c63653a23f3ecb8a5a10e6",
+      "display": {
+        "icon": "play",
+        "category": "runtime",
+        "summary": "Generic biome executor: in-process host for biome-shipped Temporal workflows, activities, and capabilities."
+      }
+    },
+    {
+      "id": "xema-store",
+      "version": "0.1.0",
+      "tier": "base",
+      "target": "server",
+      "origin": "third-party",
+      "mandatory": false,
+      "installPolicy": "default-selected",
+      "repo": "repos/xema-store-api",
+      "path": "repos/xema-store-api/biomes/xema-store",
+      "services": [
+        "xema-store-api"
+      ],
+      "serviceDatabases": {
+        "xema-store-api": "store"
+      },
+      "runtimeComponents": [],
+      "serviceDependencies": [
+        {
+          "consumerService": "xema-store-api",
+          "requiredService": "authorization-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "authorization",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/authorization",
+            "version": "0.1.0",
+            "sourceManifestHash": "682f7b7a278848ad096bc7bbff4f97c30d775c08f49e07a45fff2c8c99b68aec"
+          }
+        },
+        {
+          "consumerService": "xema-store-api",
+          "requiredService": "identity-api",
+          "owner": {
+            "kind": "platform",
+            "source": {
+              "name": "identity-api",
+              "tier": "infra",
+              "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
+              "repo": "submodules/identity-api",
+              "path": "submodules/identity-api/package.json",
+              "sourceCommit": "2d6074f0d085f4bd86fc9741feb74ce9a338fba2",
+              "version": "0.0.2",
+              "sourceManifestHash": "d54fbabdc5cb36d593d05ed44f2482df82f5276bfa6cf5de2d3094b69770616d",
+              "imageKey": "identity-api"
+            }
+          }
+        }
+      ],
+      "displayName": "Xema Store",
+      "packageName": "@xemahq/biomes-xema-store",
+      "requiresServerBiomes": [],
+      "optionalServerBiomes": [],
+      "audience": "org",
+      "storeListed": true,
+      "sourceManifestHash": "9447cb296dfcb1c2408e3c2f12d58983161e0002ccb51debe49f67076891a5e8",
+      "display": {
+        "icon": "store",
+        "category": "operate",
+        "summary": "Xema Store backend — the catalog/marketplace of installable biomes and apps, with listings, entitlements and install fulfillment."
+      }
+    },
+    {
+      "id": "mailops",
+      "version": "0.1.0",
+      "tier": "platform",
+      "target": "server",
+      "origin": "first-party",
+      "mandatory": false,
+      "installPolicy": "default-selected",
+      "repo": "repos/xema-cultivars",
+      "path": "repos/xema-cultivars/biomes/platform/mailops",
+      "services": [
+        "mailops-api"
+      ],
+      "runtimeComponents": [],
+      "serviceDependencies": [
+        {
+          "consumerService": "mailops-api",
+          "requiredService": "artifact-store-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "agent-runtime",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/agent-runtime",
+            "version": "0.1.0",
+            "sourceManifestHash": "4073187b54d5ebcaaa258c5f99ac52e52eba15a1ce3d641642389f7b4805f6ce"
+          }
+        },
+        {
+          "consumerService": "mailops-api",
+          "requiredService": "authorization-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "authorization",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/authorization",
+            "version": "0.1.0",
+            "sourceManifestHash": "682f7b7a278848ad096bc7bbff4f97c30d775c08f49e07a45fff2c8c99b68aec"
+          }
+        },
+        {
+          "consumerService": "mailops-api",
+          "requiredService": "capability-registry-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "capability-registry",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/capability-registry",
+            "version": "0.1.0",
+            "sourceManifestHash": "50063c0b95ffaf47d413423a34f47b36c6adb53c88d39e4101fa2f768840eb98"
+          }
+        },
+        {
+          "consumerService": "mailops-api",
+          "requiredService": "credential-broker-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "connector-platform",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/connector-platform",
+            "version": "0.1.0",
+            "sourceManifestHash": "89327f5171da372ea0013f02da021ac54a21d6a23c9b8d3d55951da6eef617c1"
+          }
+        },
+        {
+          "consumerService": "mailops-api",
+          "requiredService": "identity-api",
+          "owner": {
+            "kind": "platform",
+            "source": {
+              "name": "identity-api",
+              "tier": "infra",
+              "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
+              "repo": "submodules/identity-api",
+              "path": "submodules/identity-api/package.json",
+              "sourceCommit": "2d6074f0d085f4bd86fc9741feb74ce9a338fba2",
+              "version": "0.0.2",
+              "sourceManifestHash": "d54fbabdc5cb36d593d05ed44f2482df82f5276bfa6cf5de2d3094b69770616d",
+              "imageKey": "identity-api"
+            }
+          }
+        },
+        {
+          "consumerService": "mailops-api",
+          "requiredService": "workflow-engine-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "workflow-runtime",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/workflow-runtime",
+            "version": "0.1.0",
+            "sourceManifestHash": "af58569c93396a38bfda2f83a92d9b6d846645dab70411ab7a905ef09aa547f0"
+          }
+        },
+        {
+          "consumerService": "mailops-api",
+          "requiredService": "xema-capability-router",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "xema-capability-router",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/xema-capability-router",
+            "version": "0.1.0",
+            "sourceManifestHash": "b0bd3ae93d98695f185768dc60fb345d29a27848fbf45e98ee2f9fa3a35bc2c7"
+          }
+        }
+      ],
+      "displayName": "MailOps",
+      "packageName": "@xemahq/biomes-mailops",
+      "requiresServerBiomes": [],
+      "optionalServerBiomes": [],
+      "audience": "org",
+      "storeListed": true,
+      "sourceManifestHash": "1c4fb3494ad10ee01f13c3ca4796fd59be8d215b12e2909ff923bb6b13dc9906",
+      "display": {
+        "icon": "mail",
+        "category": "connect",
+        "summary": "Email as a workflow entrypoint — intake, understanding, routing, capability call-out and reply."
+      }
+    },
+    {
+      "id": "search",
+      "version": "0.1.0",
+      "tier": "platform",
+      "target": "server",
+      "origin": "first-party",
+      "mandatory": false,
+      "installPolicy": "default-selected",
+      "repo": "repos/xema-cultivars",
+      "path": "repos/xema-cultivars/biomes/platform/search",
+      "services": [
+        "search-api"
+      ],
+      "runtimeComponents": [],
+      "serviceDependencies": [
+        {
+          "consumerService": "search-api",
+          "requiredService": "capability-registry-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "capability-registry",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/capability-registry",
+            "version": "0.1.0",
+            "sourceManifestHash": "50063c0b95ffaf47d413423a34f47b36c6adb53c88d39e4101fa2f768840eb98"
+          }
+        },
+        {
+          "consumerService": "search-api",
+          "requiredService": "identity-api",
+          "owner": {
+            "kind": "platform",
+            "source": {
+              "name": "identity-api",
+              "tier": "infra",
+              "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
+              "repo": "submodules/identity-api",
+              "path": "submodules/identity-api/package.json",
+              "sourceCommit": "2d6074f0d085f4bd86fc9741feb74ce9a338fba2",
+              "version": "0.0.2",
+              "sourceManifestHash": "d54fbabdc5cb36d593d05ed44f2482df82f5276bfa6cf5de2d3094b69770616d",
+              "imageKey": "identity-api"
+            }
+          }
+        },
+        {
+          "consumerService": "search-api",
+          "requiredService": "llm-gateway-api",
+          "owner": {
+            "kind": "platform",
+            "source": {
+              "name": "llm-gateway-api",
+              "tier": "infra",
+              "repositoryUrl": "https://github.com/xema-dev/llm-gateway-api.git",
+              "repo": "submodules/llm-gateway-api",
+              "path": "submodules/llm-gateway-api/package.json",
+              "sourceCommit": "decb41b3617648c20e67c0525bf82292066c18fc",
+              "version": "1.0.0",
+              "sourceManifestHash": "84c890b5dfb77b433fe4b28509c9c7b9a173a84d69be14fff3df154894c4a71d",
+              "imageKey": "llm-gateway-api"
+            }
+          }
+        },
+        {
+          "consumerService": "search-api",
+          "requiredService": "llm-registry-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "agent-runtime",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/agent-runtime",
+            "version": "0.1.0",
+            "sourceManifestHash": "4073187b54d5ebcaaa258c5f99ac52e52eba15a1ce3d641642389f7b4805f6ce"
+          }
+        },
+        {
+          "consumerService": "search-api",
+          "requiredService": "project-registry-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "project-registry",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/project-registry",
+            "version": "0.1.0",
+            "sourceManifestHash": "4194c3a3d3cf876d0a12af7848604ccf3f9c093def9e7f51cf4e59394dca2229"
+          }
+        },
+        {
+          "consumerService": "search-api",
+          "requiredService": "xema-capability-router",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "xema-capability-router",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/xema-capability-router",
+            "version": "0.1.0",
+            "sourceManifestHash": "b0bd3ae93d98695f185768dc60fb345d29a27848fbf45e98ee2f9fa3a35bc2c7"
+          }
+        }
+      ],
+      "displayName": "Search",
+      "packageName": "@xemahq/biomes-search",
+      "requiresServerBiomes": [],
+      "optionalServerBiomes": [],
+      "audience": "org",
+      "storeListed": true,
+      "sourceManifestHash": "04cdeac9b56945066318f1c712f24fa72536b2fff919d9e538a117ba89cc3741",
+      "display": {
+        "icon": "search",
+        "category": "knowledge",
+        "summary": "Full-text and vector search facade over OpenSearch for cross-entity discovery."
+      }
     }
   ],
   "platformServices": [
+    {
+      "name": "billing-api",
+      "tier": "infra",
+      "source": {
+        "name": "billing-api",
+        "tier": "infra",
+        "repositoryUrl": "https://github.com/xema-dev/billing-api",
+        "repo": "submodules/billing-api",
+        "path": "submodules/billing-api/package.json",
+        "sourceCommit": "17f5c6d6ad1e86bfc5b76af5f91917d98f8935fb",
+        "version": "0.0.1",
+        "sourceManifestHash": "64b0f7e10adfa4e8cacd465185b81974c5f3e050278f19c953e8f2d860e816a5",
+        "imageKey": "billing-api"
+      }
+    },
+    {
+      "name": "event-hub-api",
+      "tier": "infra",
+      "source": {
+        "name": "event-hub-api",
+        "tier": "infra",
+        "repositoryUrl": "https://github.com/xema-dev/event-hub-api.git",
+        "repo": "submodules/event-hub-api",
+        "path": "submodules/event-hub-api/package.json",
+        "sourceCommit": "5d3706d83dcb81960eb0b722145ac3b8484117ef",
+        "version": "2.0.0",
+        "sourceManifestHash": "cdf8085b331d41ed1288856c7b8990df425fd0af66ca2feb65a1cd1f9d270840",
+        "imageKey": "event-hub-api"
+      }
+    },
+    {
+      "name": "identity-api",
+      "tier": "infra",
+      "source": {
+        "name": "identity-api",
+        "tier": "infra",
+        "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
+        "repo": "submodules/identity-api",
+        "path": "submodules/identity-api/package.json",
+        "sourceCommit": "2d6074f0d085f4bd86fc9741feb74ce9a338fba2",
+        "version": "0.0.2",
+        "sourceManifestHash": "d54fbabdc5cb36d593d05ed44f2482df82f5276bfa6cf5de2d3094b69770616d",
+        "imageKey": "identity-api"
+      }
+    },
+    {
+      "name": "llm-gateway-api",
+      "tier": "infra",
+      "source": {
+        "name": "llm-gateway-api",
+        "tier": "infra",
+        "repositoryUrl": "https://github.com/xema-dev/llm-gateway-api.git",
+        "repo": "submodules/llm-gateway-api",
+        "path": "submodules/llm-gateway-api/package.json",
+        "sourceCommit": "decb41b3617648c20e67c0525bf82292066c18fc",
+        "version": "1.0.0",
+        "sourceManifestHash": "84c890b5dfb77b433fe4b28509c9c7b9a173a84d69be14fff3df154894c4a71d",
+        "imageKey": "llm-gateway-api"
+      }
+    },
+    {
+      "name": "secrets-api",
+      "tier": "infra",
+      "source": {
+        "name": "secrets-api",
+        "tier": "infra",
+        "repositoryUrl": "https://github.com/xema-dev/secrets-api.git",
+        "repo": "submodules/secrets-api",
+        "path": "submodules/secrets-api/package.json",
+        "sourceCommit": "bcc6a3dfad5ded4c764ae1c029f6b619dff64e19",
+        "version": "1.0.0",
+        "sourceManifestHash": "1e9eff70ec3dc91b62ca69d32bc9e92c669e02ff305cacd25bb8e2b0be03858f",
+        "imageKey": "secrets-api"
+      }
+    },
     {
       "name": "xema-kernel-server",
       "tier": "kernel"
@@ -1231,15 +3185,108 @@
       "name": "opencode-image-prepuller",
       "tier": "platform"
     },
-    {
-      "name": "opencode-workers",
-      "tier": "platform"
-    },
     {
       "name": "xema-host-web",
       "tier": "edge"
     }
   ],
-  "resolvedAt": "2026-07-03T08:30:53.351Z",
-  "inputHash": "7497c41659189f69e17668b23d85e91194ff37994fef8ae0c45d7e0f05ea6173"
+  "capabilityDomainOwners": [
+    {
+      "domain": "agent",
+      "biomeId": "agent-runtime"
+    },
+    {
+      "domain": "agent-session",
+      "biomeId": "agent-runtime"
+    },
+    {
+      "domain": "app",
+      "biomeId": "app-forge"
+    },
+    {
+      "domain": "artifact",
+      "biomeId": "agent-runtime"
+    },
+    {
+      "domain": "biome",
+      "biomeId": "biome-host"
+    },
+    {
+      "domain": "connector",
+      "biomeId": "connector-platform"
+    },
+    {
+      "domain": "document",
+      "biomeId": "document-rendering"
+    },
+    {
+      "domain": "interactive-session",
+      "biomeId": "agent-runtime"
+    },
+    {
+      "domain": "kb",
+      "biomeId": "knowledge-base"
+    },
+    {
+      "domain": "mailops",
+      "biomeId": "mailops"
+    },
+    {
+      "domain": "mcp-tool",
+      "biomeId": "mcp-router"
+    },
+    {
+      "domain": "memory",
+      "biomeId": "memory"
+    },
+    {
+      "domain": "model",
+      "biomeId": "agent-runtime"
+    },
+    {
+      "domain": "model-resolution",
+      "biomeId": "agent-runtime"
+    },
+    {
+      "domain": "notification",
+      "biomeId": "user-hub"
+    },
+    {
+      "domain": "search",
+      "biomeId": "search"
+    },
+    {
+      "domain": "space",
+      "biomeId": "space-registry"
+    },
+    {
+      "domain": "store",
+      "biomeId": "xema-store"
+    },
+    {
+      "domain": "studio",
+      "biomeId": "studio-author"
+    },
+    {
+      "domain": "web",
+      "biomeId": "web-access"
+    },
+    {
+      "domain": "worker-runtime",
+      "biomeId": "workspace-orchestrator"
+    },
+    {
+      "domain": "workflow",
+      "biomeId": "workflow-runtime"
+    },
+    {
+      "domain": "workspace",
+      "biomeId": "workspace-orchestrator"
+    },
+    {
+      "domain": "xema-shell",
+      "biomeId": "xema-shell"
+    }
+  ],
+  "inputHash": "b23658d09c43bc861d26b08698501215b2fdbb993384551a7cf5504b5bcde17f"
 }