npm - @xemahq/xema - Versions diffs - 0.15.13 → 0.16.1 - Mend

@xemahq/xema 0.15.13 → 0.16.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (47) hide show

package/dist/assets/appliance-base/distribution.lock.json +1830 -702
package/dist/assets/appliance-base/images.lock.json +272 -313
package/dist/assets/appliance-lean/distribution.lock.json +1171 -447
package/dist/assets/appliance-lean/images.lock.json +218 -201
package/dist/assets/boot-graph.json +30 -11
package/dist/assets/cloud/distribution.lock.json +1872 -777
package/dist/assets/cloud/images.lock.json +284 -276
package/dist/assets/core/distribution.lock.json +1199 -473
package/dist/assets/core/images.lock.json +218 -196
package/dist/assets/distribution-assets.manifest.json +30 -30
package/dist/assets/minimal/distribution.lock.json +1089 -436
package/dist/assets/minimal/images.lock.json +183 -188
package/dist/assets/oss/distribution.lock.json +1851 -768
package/dist/assets/oss/images.lock.json +274 -315
package/dist/assets/starter/distribution.lock.json +1252 -514
package/dist/assets/starter/images.lock.json +223 -228
package/dist/commands/biome.js +1 -1
package/dist/commands/biome.js.map +1 -1
package/dist/runtime/biome-dev.d.ts.map +1 -1
package/dist/runtime/biome-dev.js +0 -5
package/dist/runtime/biome-dev.js.map +1 -1
package/dist/runtime/biome-scaffold-manifest.d.ts +3 -8
package/dist/runtime/biome-scaffold-manifest.d.ts.map +1 -1
package/dist/runtime/biome-scaffold-manifest.js +2 -9
package/dist/runtime/biome-scaffold-manifest.js.map +1 -1
package/dist/runtime/biome-scaffold.d.ts +3 -3
package/dist/runtime/biome-scaffold.d.ts.map +1 -1
package/dist/runtime/biome-scaffold.js.map +1 -1
package/dist/runtime/biome-validate.d.ts.map +1 -1
package/dist/runtime/biome-validate.js +28 -50
package/dist/runtime/biome-validate.js.map +1 -1
package/dist/runtime/distribution/available-biome.d.ts.map +1 -1
package/dist/runtime/distribution/available-biome.js +80 -14
package/dist/runtime/distribution/available-biome.js.map +1 -1
package/dist/runtime/distribution/compose.d.ts.map +1 -1
package/dist/runtime/distribution/compose.js +2 -9
package/dist/runtime/distribution/compose.js.map +1 -1
package/dist/runtime/platform-services.d.ts.map +1 -1
package/dist/runtime/platform-services.js +2 -2
package/dist/runtime/platform-services.js.map +1 -1
package/dist/runtime/sources/manifest-walk.d.ts +1 -0
package/dist/runtime/sources/manifest-walk.d.ts.map +1 -1
package/dist/runtime/sources/manifest-walk.js +9 -2
package/dist/runtime/sources/manifest-walk.js.map +1 -1
package/dist/runtime/waves.d.ts.map +1 -1
package/dist/runtime/waves.js.map +1 -1
package/package.json +5 -9

package/dist/assets/minimal/distribution.lock.json CHANGED Viewed

@@ -1,90 +1,7 @@
 {
-  "schemaVersion": 1,
+  "schemaVersion": 2,
   "distributionId": "minimal",
   "biomes": [
-    {
-      "id": "contribution-test",
-      "version": "0.0.1",
-      "tier": "kernel",
-      "target": "server",
-      "origin": "first-party",
-      "mandatory": true,
-      "installPolicy": "required",
-      "repo": "repos/xema-base",
-      "path": "repos/xema-base/biomes/kernel/contribution-test",
-      "services": [],
-      "runtimeComponents": [],
-      "serviceDependencies": [],
-      "displayName": "Contribution Protocol Test Biome",
-      "packageName": "@xemahq/biomes-kernel-contribution-test",
-      "requiresServerBiomes": [],
-      "optionalServerBiomes": [],
-      "audience": "org",
-      "storeListed": false,
-      "sourceManifestHash": "a5989a0adba0fae65f1cd3107b38896d1df9742ba35d0de670be7f10fa43aeb7",
-      "display": {
-        "icon": "flask-conical",
-        "category": "build",
-        "summary": "Synthetic kernel test biome exercising the XSI Contribution Protocol, capability resolution, and boundary enforcement."
-      }
-    },
-    {
-      "id": "output-surface-control",
-      "version": "1.0.0",
-      "tier": "kernel",
-      "target": "server",
-      "origin": "first-party",
-      "mandatory": true,
-      "installPolicy": "required",
-      "repo": "repos/xema-base",
-      "path": "repos/xema-base/biomes/kernel/output-surface-control",
-      "services": [],
-      "runtimeComponents": [],
-      "serviceDependencies": [],
-      "displayName": "Output Surface Control",
-      "packageName": "@xemahq/biomes-kernel-output-surface-control",
-      "requiresServerBiomes": [
-        "runtime"
-      ],
-      "optionalServerBiomes": [],
-      "audience": "org",
-      "storeListed": false,
-      "sourceManifestHash": "8c773b92dc42534da668a0857840810ad581066db735e27a8cdbdb750a0b10b9",
-      "display": {
-        "icon": "refresh-cw",
-        "category": "operate",
-        "summary": "Output-surface control tools: re-trigger the deterministic install-to-start pipeline over the workspace-proxy API."
-      }
-    },
-    {
-      "id": "output-surface-inspector",
-      "version": "1.0.0",
-      "tier": "kernel",
-      "target": "server",
-      "origin": "first-party",
-      "mandatory": true,
-      "installPolicy": "required",
-      "repo": "repos/xema-base",
-      "path": "repos/xema-base/biomes/kernel/output-surface-inspector",
-      "services": [],
-      "runtimeComponents": [],
-      "serviceDependencies": [],
-      "displayName": "Output Surface Inspector",
-      "packageName": "@xemahq/biomes-kernel-output-surface-inspector",
-      "requiresServerBiomes": [
-        "output-surface-control",
-        "runtime"
-      ],
-      "optionalServerBiomes": [],
-      "audience": "org",
-      "storeListed": false,
-      "sourceManifestHash": "b6b0bfb9861229725e487a3d16f1f7d842fb5afeed545e7e43d3b7cc8abdd289",
-      "display": {
-        "icon": "search",
-        "category": "operate",
-        "summary": "Output-surface inspection: browser tool, inspector sub-agent, and bridge for read-only diagnosis of live pages."
-      }
-    },
     {
       "id": "runtime",
       "version": "1.0.0",
@@ -96,7 +13,9 @@
       "repo": "repos/xema-base",
       "path": "repos/xema-base/biomes/kernel/runtime",
       "services": [],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [],
       "displayName": "Xema Runtime Kernel",
       "packageName": "@xemahq/biomes-kernel-runtime",
@@ -109,64 +28,9 @@
         "icon": "box",
         "category": "runtime",
         "summary": "Kernel runtime baseline: base workspace manifests, custom OpenCode tools and plugins, and the canonical MCP catalog."
-      }
-    },
-    {
-      "id": "studio-author",
-      "version": "1.0.0",
-      "tier": "kernel",
-      "target": "server",
-      "origin": "first-party",
-      "mandatory": true,
-      "installPolicy": "required",
-      "repo": "repos/xema-base",
-      "path": "repos/xema-base/biomes/kernel/studio-author",
-      "services": [],
-      "runtimeComponents": [],
-      "serviceDependencies": [],
-      "displayName": "Studio Author",
-      "packageName": "@xemahq/biomes-kernel-studio-author",
-      "requiresServerBiomes": [
-        "runtime",
-        "subagents"
-      ],
-      "optionalServerBiomes": [],
-      "audience": "org",
-      "storeListed": false,
-      "sourceManifestHash": "9c0a9522ef36140ce704d5be39ae44cde175b1addec90ba56d36970ace803f1e",
-      "display": {
-        "icon": "wand",
-        "category": "build",
-        "summary": "Authoring co-pilot for Agent Studio: workflow/spec authors and a build-with-an-agent profile that emits typed proposals."
-      }
-    },
-    {
-      "id": "subagents",
-      "version": "1.0.0",
-      "tier": "kernel",
-      "target": "server",
-      "origin": "first-party",
-      "mandatory": true,
-      "installPolicy": "required",
-      "repo": "repos/xema-base",
-      "path": "repos/xema-base/biomes/kernel/subagents",
-      "services": [],
-      "runtimeComponents": [],
-      "serviceDependencies": [],
-      "displayName": "Xema Universal Subagents",
-      "packageName": "@xemahq/biomes-kernel-subagents",
-      "requiresServerBiomes": [
-        "runtime"
-      ],
-      "optionalServerBiomes": [],
-      "audience": "org",
-      "storeListed": false,
-      "sourceManifestHash": "c7d66ce06a303e40ae4901694c9617fab3645185752cce5f214cd29f9bed24c0",
-      "display": {
-        "icon": "users",
-        "category": "runtime",
-        "summary": "Canonical roster of platform subagents and gate-reviewers every install boots with, plus their MCP tool-profiles."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "audit",
@@ -181,7 +45,9 @@
       "services": [
         "audit-log-api"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
         {
           "consumerService": "audit-log-api",
@@ -194,9 +60,9 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
@@ -208,12 +74,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "47d7d7203aed8644e0d4b768b5e6781fa0e1bc5ca5e1cffa5e77df9a27e8f155",
+      "sourceManifestHash": "64c24fbe6a8394eee5ecdb0163bc88c2dd52f1e8bdbc0588810e5502b61f7128",
       "display": {
         "icon": "scroll-text",
         "category": "governance",
         "summary": "Tamper-evident, append-only audit log of platform actions for compliance and forensics."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "authorization",
@@ -228,7 +96,9 @@
       "services": [
         "authorization-api"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
         {
           "consumerService": "authorization-api",
@@ -241,12 +111,25 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
+        },
+        {
+          "consumerService": "authorization-api",
+          "requiredService": "resource-governance-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "resource-governance",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/resource-governance",
+            "version": "0.1.0",
+            "sourceManifestHash": "dd08d16a77d775af78133113d1bb3ae659adc8af1d56d4569ee6e27f7426c37c"
+          }
         }
       ],
       "displayName": "Authorization",
@@ -255,69 +138,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "757ad1901fbeaeb8e2ff20bf7f5aa381e03ae9a72c43ac9a88eabc1af92371a1",
+      "sourceManifestHash": "3687551f3883d53cba6c201ecb449d4aabb4005a9ccd1eb429732fb497c912d0",
       "display": {
         "icon": "shield",
         "category": "governance",
         "summary": "Policy decision point: resolves capability and scope grants for every actor/action pair (OpenFGA/OPA)."
-      }
-    },
-    {
-      "id": "biome-adapter-host",
-      "version": "0.1.0",
-      "tier": "system",
-      "target": "server",
-      "origin": "first-party",
-      "mandatory": false,
-      "installPolicy": "required",
-      "repo": "repos/xema-base",
-      "path": "repos/xema-base/biomes/biome-adapter-host",
-      "services": [],
-      "runtimeComponents": [
-        "biome-adapter-host"
-      ],
-      "serviceDependencies": [],
-      "displayName": "Biome Adapter Host",
-      "packageName": "@xemahq/biomes-biome-adapter-host",
-      "requiresServerBiomes": [],
-      "optionalServerBiomes": [],
-      "audience": "org",
-      "storeListed": true,
-      "sourceManifestHash": "0bc4a9a1653d2bcbd91cb6fdd252b955a652594d2fb7c0e2601655e36eb54c08",
-      "display": {
-        "icon": "puzzle",
-        "category": "connect",
-        "summary": "Adapter-SDK runtime: hosts integration adapter contributions shipped by other biomes."
       },
-      "launch": "per-installation"
-    },
-    {
-      "id": "biome-fetcher",
-      "version": "0.1.0",
-      "tier": "system",
-      "target": "server",
-      "origin": "first-party",
-      "mandatory": false,
-      "installPolicy": "required",
-      "repo": "repos/xema-base",
-      "path": "repos/xema-base/biomes/biome-fetcher",
-      "services": [
-        "biome-fetcher-api"
-      ],
-      "runtimeComponents": [],
-      "serviceDependencies": [],
-      "displayName": "Biome Fetcher",
-      "packageName": "@xemahq/biomes-biome-fetcher",
-      "requiresServerBiomes": [],
-      "optionalServerBiomes": [],
-      "audience": "org",
-      "storeListed": true,
-      "sourceManifestHash": "7cf92483d2880ce99165350cc6f0497ce34b3fbe78bbea6aa7580d770b2ef0f9",
-      "display": {
-        "icon": "download",
-        "category": "build",
-        "summary": "Downloads and verifies biome bundles from registries, staging them for the biome-host installer."
-      }
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "biome-host",
@@ -332,8 +160,36 @@
       "services": [
         "biome-host-api"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
+        {
+          "consumerService": "biome-host-api",
+          "requiredService": "authorization-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "authorization",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/authorization",
+            "version": "0.1.0",
+            "sourceManifestHash": "3687551f3883d53cba6c201ecb449d4aabb4005a9ccd1eb429732fb497c912d0"
+          }
+        },
+        {
+          "consumerService": "biome-host-api",
+          "requiredService": "decision-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "decision",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/decision",
+            "version": "0.1.0",
+            "sourceManifestHash": "1e3912bdd71f7a9753e7027773c45d107b35a1dacb6708547c042bb4c5cc0ed1"
+          }
+        },
         {
           "consumerService": "biome-host-api",
           "requiredService": "identity-api",
@@ -345,9 +201,9 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
@@ -359,12 +215,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "6e522468aff28ebd3f8989d63f061cf8ead477a37844f804ae8b0f434f0258ff",
+      "sourceManifestHash": "8183c2181ec479bbd2c1d68abb3574a2ec2c6b50926dcbb200ecb5d9eb256671",
       "display": {
         "icon": "package",
         "category": "build",
         "summary": "Biome installer and lifecycle manager: validates manifests, applies Helm sub-charts, tracks install state."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "capabilities-web",
@@ -377,7 +235,9 @@
       "repo": "submodules/xema-host-web",
       "path": "submodules/xema-host-web/biomes/system/capabilities-web",
       "services": [],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [],
       "displayName": "Capabilities (Web)",
       "packageName": "@xemahq/biomes-system-capabilities-web",
@@ -387,12 +247,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "9d074819f387ccd2d545e33dfc1d6a9f4b7db31612faabf17186e5d1a473a7d3",
+      "sourceManifestHash": "c06afc998c1cfae62cbe2ac659d39078eb1356dd9e40a9f442d2d061903e14ef",
       "display": {
         "icon": "puzzle",
         "category": "platform",
         "summary": "Browse and govern platform capabilities."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "capability-registry",
@@ -407,7 +269,9 @@
       "services": [
         "capability-registry-api"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
         {
           "consumerService": "capability-registry-api",
@@ -420,9 +284,9 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
@@ -439,7 +303,9 @@
         "icon": "list",
         "category": "platform",
         "summary": "Capability descriptor registry: authoritative source for every published capability ref and schema."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "concepts-web",
@@ -452,7 +318,9 @@
       "repo": "submodules/xema-host-web",
       "path": "submodules/xema-host-web/biomes/system/concepts-web",
       "services": [],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [],
       "displayName": "Concepts (Web)",
       "packageName": "@xemahq/biomes-system-concepts-web",
@@ -462,13 +330,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": false,
-      "sourceManifestHash": "b002ad3b5621c4d3850836c238b1af77cd52f5dfaba0025d061e10803c69fe2e",
+      "sourceManifestHash": "a842e01e7b38bf2cdecc46da59699c5dbf5bad9948dac5143367cf9e2c1b4a28",
       "display": {
         "icon": "lightbulb",
         "category": "knowledge",
         "summary": "Manage shared concepts and definitions."
       },
-      "systemSurface": true
+      "systemSurface": true,
+      "launch": "static"
     },
     {
       "id": "decision",
@@ -483,7 +352,9 @@
       "services": [
         "decision-api"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
         {
           "consumerService": "decision-api",
@@ -495,7 +366,7 @@
             "repo": "repos/xema-base",
             "path": "repos/xema-base/biomes/authorization",
             "version": "0.1.0",
-            "sourceManifestHash": "757ad1901fbeaeb8e2ff20bf7f5aa381e03ae9a72c43ac9a88eabc1af92371a1"
+            "sourceManifestHash": "3687551f3883d53cba6c201ecb449d4aabb4005a9ccd1eb429732fb497c912d0"
           }
         },
         {
@@ -509,9 +380,9 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
@@ -523,12 +394,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "3e93781a626e400f7970ffb97e8ef0b49271caebb6b4ae278d9efbaad56fa127",
+      "sourceManifestHash": "1e3912bdd71f7a9753e7027773c45d107b35a1dacb6708547c042bb4c5cc0ed1",
       "display": {
         "icon": "gavel",
         "category": "operate",
         "summary": "The platform's one human-decision primitive: a durable ask with N answerable options, a derived lifecycle and a PDP-resolved audience."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "environments-web",
@@ -541,7 +414,9 @@
       "repo": "submodules/xema-host-web",
       "path": "submodules/xema-host-web/biomes/system/environments-web",
       "services": [],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [],
       "displayName": "Environments (Web)",
       "packageName": "@xemahq/biomes-system-environments-web",
@@ -551,12 +426,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "e1227ed5d257fb15ba083c948ed1e9c7aa84aeda88631e940e2dcbfa371d8075",
+      "sourceManifestHash": "cf854b4160465ba5c4e785ab9791d0c85a13f17586a1a3800c95e70839a83080",
       "display": {
         "icon": "server",
         "category": "platform",
         "summary": "Manage execution environments."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "gateway-routes-web",
@@ -569,7 +446,9 @@
       "repo": "submodules/xema-host-web",
       "path": "submodules/xema-host-web/biomes/system/gateway-routes-web",
       "services": [],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [],
       "displayName": "Gateway Routes (Web)",
       "packageName": "@xemahq/biomes-system-gateway-routes-web",
@@ -579,12 +458,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "4f4375a83e7bbfe5a5f85ed1ff55948a0408ee9b4d2d35206435c3e80e5bfb4b",
+      "sourceManifestHash": "d7e7e7c89354101e68be8111b8afacb0f5141acfcaf523ef6141e1d2bcfe9cbe",
       "display": {
         "icon": "route",
         "category": "platform",
         "summary": "Configure public gateway routes."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "grants-web",
@@ -597,7 +478,9 @@
       "repo": "submodules/xema-host-web",
       "path": "submodules/xema-host-web/biomes/system/grants-web",
       "services": [],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [],
       "displayName": "Grants (Web)",
       "packageName": "@xemahq/biomes-system-grants-web",
@@ -607,12 +490,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "15ddb0475d72c48baad54ce9cdac380950681939c9f6b8db244f558596a4bc9d",
+      "sourceManifestHash": "72d6de134598d129b53ea34c2522fd931dc47fb19ad8115b741eff178b9f8569",
       "display": {
         "icon": "key",
         "category": "governance",
         "summary": "Review and manage access grants."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "mailops-web",
@@ -625,11 +510,14 @@
       "repo": "submodules/xema-host-web",
       "path": "submodules/xema-host-web/biomes/system/mailops-web",
       "services": [],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [],
       "displayName": "MailOps (Web)",
       "packageName": "@xemahq/biomes-system-mailops-web",
       "requiresServerBiomes": [
+        "agent-runtime",
         "mailops",
         "project-registry",
         "workflow-runtime"
@@ -637,12 +525,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "e54d0d516229df0a1bc9cb0d865246ad4cbd247d4fb0567bd818b83954fe9a71",
+      "sourceManifestHash": "e71b0fa62af5261eaf1bbc92258f45b17975bd5b98ec204c86e13eb6994020d2",
       "display": {
         "icon": "mail",
         "category": "connect",
         "summary": "Run email-driven workflows."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "object-registry",
@@ -657,7 +547,9 @@
       "services": [
         "object-registry-api"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
         {
           "consumerService": "object-registry-api",
@@ -670,9 +562,9 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
@@ -689,7 +581,9 @@
         "icon": "link",
         "category": "platform",
         "summary": "XVFS object resolver: addresses every platform object (artifact, biome, capability) via a stable URI scheme."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "objects-web",
@@ -702,7 +596,9 @@
       "repo": "submodules/xema-host-web",
       "path": "submodules/xema-host-web/biomes/system/objects-web",
       "services": [],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [],
       "displayName": "Objects (Web)",
       "packageName": "@xemahq/biomes-system-objects-web",
@@ -712,13 +608,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": false,
-      "sourceManifestHash": "4fc671dc1f39fde79ade866b1b0a885bd65b3a0051cacc4b6a94620bffa11eaf",
+      "sourceManifestHash": "23d313f5d5bae4b1864c3ebd2409f6e495b939fad074db83bd4fe30d481caba1",
       "display": {
         "icon": "box",
         "category": "data",
         "summary": "Browse Xema objects and registries."
       },
-      "systemSurface": true
+      "systemSurface": true,
+      "launch": "static"
     },
     {
       "id": "opencode-runtime",
@@ -731,9 +628,11 @@
       "repo": "repos/xema-base",
       "path": "repos/xema-base/biomes/opencode-runtime",
       "services": [],
+      "serviceDatabases": {},
       "runtimeComponents": [
         "opencode-worker"
       ],
+      "hostModules": [],
       "serviceDependencies": [],
       "displayName": "Opencode Runtime",
       "packageName": "@xemahq/biomes-opencode-runtime",
@@ -746,7 +645,9 @@
         "icon": "bot",
         "category": "runtime",
         "summary": "OpenCode runtime executor: runs LLM agent sessions inside a per-allocation workspace."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "org-database-pool",
@@ -761,7 +662,9 @@
       "services": [
         "org-database-pool-api"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
         {
           "consumerService": "org-database-pool-api",
@@ -774,7 +677,7 @@
               "repositoryUrl": "https://github.com/xema-dev/event-hub-api.git",
               "repo": "submodules/event-hub-api",
               "path": "submodules/event-hub-api/package.json",
-              "sourceCommit": "8ff3acef9ca979948b2b1eb95c3964f97caf16b1",
+              "sourceCommit": "6bc36b61db3ef7c9384410c1a151dab4dd1bd559",
               "version": "2.0.0",
               "sourceManifestHash": "2e57d7356ed288b00e35f3ee4aa542cdbb1eb25d94a8fecbc2bda76cedd5f995",
               "imageKey": "event-hub-api"
@@ -792,12 +695,25 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
+        },
+        {
+          "consumerService": "org-database-pool-api",
+          "requiredService": "resource-governance-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "resource-governance",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/resource-governance",
+            "version": "0.1.0",
+            "sourceManifestHash": "dd08d16a77d775af78133113d1bb3ae659adc8af1d56d4569ee6e27f7426c37c"
+          }
         }
       ],
       "displayName": "Org Database Pool",
@@ -806,12 +722,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "4a9077cbda9fb20adf207682173a3df88398ff7288428b9a356213000c68997c",
+      "sourceManifestHash": "019abba8218c9dadb0be490d6c9f42c58e390c8a89dd0c0bfe631f3eb0210765",
       "display": {
         "icon": "database",
         "category": "platform",
         "summary": "Per-org database pool: issues per-tenant Postgres credentials and tracks per-org migration state."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "policies-web",
@@ -824,7 +742,9 @@
       "repo": "submodules/xema-host-web",
       "path": "submodules/xema-host-web/biomes/system/policies-web",
       "services": [],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [],
       "displayName": "Policies (Web)",
       "packageName": "@xemahq/biomes-system-policies-web",
@@ -834,12 +754,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "7b4f380be501bcf5042b08d1d97e12e813b617ac468c87fd1bf9449bcb93cff8",
+      "sourceManifestHash": "720f536934ca9e5a3f138fcdaf05b52416fb6e74548ce74f0c8917a8a5580e5e",
       "display": {
         "icon": "shield",
         "category": "governance",
         "summary": "Author and review policies."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "public-gateway",
@@ -854,20 +776,38 @@
       "services": [
         "public-gateway-api"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
-      "serviceDependencies": [],
-      "displayName": "Public Gateway",
-      "packageName": "@xemahq/biomes-public-gateway",
-      "requiresServerBiomes": [],
-      "optionalServerBiomes": [],
-      "audience": "org",
-      "storeListed": true,
-      "sourceManifestHash": "c12bdd52233605e5effa26a7b283281760988420b8929652606c78ed9bb460ad",
+      "hostModules": [],
+      "serviceDependencies": [
+        {
+          "consumerService": "public-gateway-api",
+          "requiredService": "biome-host-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "biome-host",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/biome-host",
+            "version": "0.1.0",
+            "sourceManifestHash": "8183c2181ec479bbd2c1d68abb3574a2ec2c6b50926dcbb200ecb5d9eb256671"
+          }
+        }
+      ],
+      "displayName": "Public Gateway",
+      "packageName": "@xemahq/biomes-public-gateway",
+      "requiresServerBiomes": [],
+      "optionalServerBiomes": [],
+      "audience": "org",
+      "storeListed": true,
+      "sourceManifestHash": "67c87b76865552edf03521f292110ecb513f99f93ba2078bcdaac7b8ca9325b2",
       "display": {
         "icon": "globe",
         "category": "connect",
         "summary": "Public-facing HTTP gateway: streams preview pages, dispatches webhook ingress, terminates public routes."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "redis-pool",
@@ -882,7 +822,9 @@
       "services": [
         "redis-pool-api"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
         {
           "consumerService": "redis-pool-api",
@@ -895,7 +837,7 @@
               "repositoryUrl": "https://github.com/xema-dev/event-hub-api.git",
               "repo": "submodules/event-hub-api",
               "path": "submodules/event-hub-api/package.json",
-              "sourceCommit": "8ff3acef9ca979948b2b1eb95c3964f97caf16b1",
+              "sourceCommit": "6bc36b61db3ef7c9384410c1a151dab4dd1bd559",
               "version": "2.0.0",
               "sourceManifestHash": "2e57d7356ed288b00e35f3ee4aa542cdbb1eb25d94a8fecbc2bda76cedd5f995",
               "imageKey": "event-hub-api"
@@ -913,9 +855,9 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
@@ -927,12 +869,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "c46fffcdf97637a5dcde14c2fa81a7bb728f257ace02098e9fbbef9a9ee43aa0",
+      "sourceManifestHash": "b3602544220af514c79bf40cb535b2aebda4ca54a8c562ee4201ead37f4effaa",
       "display": {
         "icon": "database",
         "category": "platform",
         "summary": "Brokers the shared Redis/Valkey keyspace: per-(biome, org) namespaces with a server-enforced key prefix and short-lived Redis ACL credentials."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "resource-governance",
@@ -947,8 +891,23 @@
       "services": [
         "resource-governance-api"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
+        {
+          "consumerService": "resource-governance-api",
+          "requiredService": "decision-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "decision",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/decision",
+            "version": "0.1.0",
+            "sourceManifestHash": "1e3912bdd71f7a9753e7027773c45d107b35a1dacb6708547c042bb4c5cc0ed1"
+          }
+        },
         {
           "consumerService": "resource-governance-api",
           "requiredService": "identity-api",
@@ -960,9 +919,9 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
@@ -974,12 +933,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "0ce251d10655f7a294862d434dea4b40a1b212525eaa95dca280b08e0edd2f44",
+      "sourceManifestHash": "dd08d16a77d775af78133113d1bb3ae659adc8af1d56d4569ee6e27f7426c37c",
       "display": {
         "icon": "gauge",
         "category": "governance",
         "summary": "Authoritative resource inventory, consumption, source freshness, and cost-attribution inputs."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "runners-web",
@@ -992,7 +953,9 @@
       "repo": "submodules/xema-host-web",
       "path": "submodules/xema-host-web/biomes/system/runners-web",
       "services": [],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [],
       "displayName": "Runners (Web)",
       "packageName": "@xemahq/biomes-system-runners-web",
@@ -1005,12 +968,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "c56bb0d5eb00552d1aeceb4a7c4965fc3e32cb9f994639f5c97d64fa2f574bcb",
+      "sourceManifestHash": "469a04d8a7ff2e8dc55ab05fc4f6b874c46981a987d30393a469541f61b7cda3",
       "display": {
         "icon": "cpu",
         "category": "platform",
         "summary": "Monitor and manage execution runners."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "search-web",
@@ -1023,7 +988,9 @@
       "repo": "submodules/xema-host-web",
       "path": "submodules/xema-host-web/biomes/system/search-web",
       "services": [],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [],
       "displayName": "Search (Web)",
       "packageName": "@xemahq/biomes-system-search-web",
@@ -1033,12 +1000,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "13e726cddbf11f1e47c62f44b28e9834f630c3c119ec976424e0f9afe54050a0",
+      "sourceManifestHash": "82c0a04f2ad3e6ba84a85e8d14e6dc4ed65c0581ca7ec168e066ebcf0da07944",
       "display": {
         "icon": "search",
         "category": "platform",
         "summary": "Search across the platform."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "service-registry-web",
@@ -1051,7 +1020,9 @@
       "repo": "submodules/xema-host-web",
       "path": "submodules/xema-host-web/biomes/system/service-registry-web",
       "services": [],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [],
       "displayName": "Service Registry (Web)",
       "packageName": "@xemahq/biomes-system-service-registry-web",
@@ -1061,12 +1032,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "989267e6eef302890d6e35e84c151438f584354b500a19649f7ea6133869a767",
+      "sourceManifestHash": "4e6de6c3d7fb2edd030b9d346833c7ce6e99aff3d2e46e40ef61670abc302839",
       "display": {
         "icon": "network",
         "category": "platform",
         "summary": "Inspect the service registry."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "space-registry",
@@ -1081,8 +1054,23 @@
       "services": [
         "space-registry-api"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
+        {
+          "consumerService": "space-registry-api",
+          "requiredService": "decision-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "decision",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/decision",
+            "version": "0.1.0",
+            "sourceManifestHash": "1e3912bdd71f7a9753e7027773c45d107b35a1dacb6708547c042bb4c5cc0ed1"
+          }
+        },
         {
           "consumerService": "space-registry-api",
           "requiredService": "identity-api",
@@ -1094,9 +1082,9 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
@@ -1108,12 +1096,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "2dfcb549315fefa787a0008f6d924847e41126842542786c7172391cc1cada9f",
+      "sourceManifestHash": "6a8f974d2d66f24346859066e3ea7b72c4a8b96546fea061277fa51b31b5449c",
       "display": {
         "icon": "folder-tree",
         "category": "governance",
-        "summary": "Authoritative Space ownership, hierarchy, and most-specific-wins data-classification resolution."
-      }
+        "summary": "Authoritative Space ownership declarations and join-based data-classification resolution."
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "spaces-web",
@@ -1126,7 +1116,9 @@
       "repo": "submodules/xema-host-web",
       "path": "submodules/xema-host-web/biomes/system/spaces-web",
       "services": [],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [],
       "displayName": "Spaces (Web)",
       "packageName": "@xemahq/biomes-system-spaces-web",
@@ -1138,13 +1130,122 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": false,
-      "sourceManifestHash": "d9297d1f16ab7faef0d8678522598286420f31ea7bff8fbc9033f499f93722a1",
+      "sourceManifestHash": "ca0317b58364d048e70ac47801fa4f74d57f4ddd3647f99e8e1186dbc2581629",
       "display": {
         "icon": "layers",
         "category": "platform",
         "summary": "Organize work into spaces."
       },
-      "systemSurface": true
+      "systemSurface": true,
+      "launch": "static"
+    },
+    {
+      "id": "template-registry",
+      "version": "0.1.0",
+      "tier": "system",
+      "target": "server",
+      "origin": "first-party",
+      "mandatory": false,
+      "installPolicy": "required",
+      "repo": "repos/xema-base",
+      "path": "repos/xema-base/biomes/template-registry",
+      "services": [
+        "template-registry-api"
+      ],
+      "serviceDatabases": {},
+      "runtimeComponents": [],
+      "hostModules": [],
+      "serviceDependencies": [
+        {
+          "consumerService": "template-registry-api",
+          "requiredService": "artifact-store-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "agent-runtime",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/agent-runtime",
+            "version": "0.1.0",
+            "sourceManifestHash": "5336acb3131601e721d6d54626c70d1cbbb8f424803f43e974a8ced764a9ffe9"
+          }
+        },
+        {
+          "consumerService": "template-registry-api",
+          "requiredService": "event-hub-api",
+          "owner": {
+            "kind": "platform",
+            "source": {
+              "name": "event-hub-api",
+              "tier": "infra",
+              "repositoryUrl": "https://github.com/xema-dev/event-hub-api.git",
+              "repo": "submodules/event-hub-api",
+              "path": "submodules/event-hub-api/package.json",
+              "sourceCommit": "6bc36b61db3ef7c9384410c1a151dab4dd1bd559",
+              "version": "2.0.0",
+              "sourceManifestHash": "2e57d7356ed288b00e35f3ee4aa542cdbb1eb25d94a8fecbc2bda76cedd5f995",
+              "imageKey": "event-hub-api"
+            }
+          }
+        },
+        {
+          "consumerService": "template-registry-api",
+          "requiredService": "identity-api",
+          "owner": {
+            "kind": "platform",
+            "source": {
+              "name": "identity-api",
+              "tier": "infra",
+              "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
+              "repo": "submodules/identity-api",
+              "path": "submodules/identity-api/package.json",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
+              "version": "0.0.2",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
+              "imageKey": "identity-api"
+            }
+          }
+        },
+        {
+          "consumerService": "template-registry-api",
+          "requiredService": "resource-governance-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "resource-governance",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/resource-governance",
+            "version": "0.1.0",
+            "sourceManifestHash": "dd08d16a77d775af78133113d1bb3ae659adc8af1d56d4569ee6e27f7426c37c"
+          }
+        },
+        {
+          "consumerService": "template-registry-api",
+          "requiredService": "xema-capability-router",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "xema-capability-router",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/xema-capability-router",
+            "version": "0.1.0",
+            "sourceManifestHash": "4ccc5c67859a6576a8e994d6a156bb5a3035c5ae1dedc3708d0f2da101cd564f"
+          }
+        }
+      ],
+      "displayName": "Template Registry",
+      "packageName": "@xemahq/biomes-template-registry",
+      "requiresServerBiomes": [],
+      "optionalServerBiomes": [],
+      "audience": "org",
+      "storeListed": true,
+      "sourceManifestHash": "4ad780ec6b56898c42c8025059d2c1d080b1d9c1e44c2db2f1e5f0790d462018",
+      "display": {
+        "icon": "layout-template",
+        "category": "platform",
+        "summary": "Authoritative Template and DesignSystem content, drafts, revisions, evaluations, and previews."
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "workload-runtime",
@@ -1159,7 +1260,9 @@
       "services": [
         "workload-runtime-api"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
         {
           "consumerService": "workload-runtime-api",
@@ -1172,12 +1275,25 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
+        },
+        {
+          "consumerService": "workload-runtime-api",
+          "requiredService": "public-gateway-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "public-gateway",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/public-gateway",
+            "version": "0.1.0",
+            "sourceManifestHash": "67c87b76865552edf03521f292110ecb513f99f93ba2078bcdaac7b8ca9325b2"
+          }
         }
       ],
       "displayName": "Workload Runtime",
@@ -1186,12 +1302,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "021012bff91a63be2f7981c8ba54fa4b1c1898349f2f3770484d475025913d86",
+      "sourceManifestHash": "cb34e70cc83af8018f6bf51b56818957e43a0c7ee637b2da6cab31562519cfb9",
       "display": {
         "icon": "server-cog",
         "category": "runtime",
         "summary": "Workload runtime control plane: dispatches and reconciles every per-allocation Kubernetes workload."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "workspace-storage-pool",
@@ -1206,7 +1324,9 @@
       "services": [
         "workspace-storage-pool-api"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
         {
           "consumerService": "workspace-storage-pool-api",
@@ -1219,9 +1339,9 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
@@ -1238,7 +1358,9 @@
         "icon": "hard-drive",
         "category": "platform",
         "summary": "Per-org workspace volume manager: allocates, snapshots, and reclaims persistent workspace storage."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "xema-capability-router",
@@ -1253,7 +1375,9 @@
       "services": [
         "xema-capability-router"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
         {
           "consumerService": "xema-capability-router",
@@ -1266,9 +1390,9 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
@@ -1280,12 +1404,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "39a08d58a36cc8c469740f1ce28eed1d72b1ec55fb3a2c40645020c533bcc1f9",
+      "sourceManifestHash": "4ccc5c67859a6576a8e994d6a156bb5a3035c5ae1dedc3708d0f2da101cd564f",
       "display": {
         "icon": "split",
         "category": "platform",
         "summary": "Capability dispatch router: resolves a capability invocation to the owning biome's API and endpoint."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "xema-platform-worker",
@@ -1300,7 +1426,9 @@
       "services": [
         "xema-platform-worker"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [],
       "displayName": "Xema Platform Worker",
       "packageName": "@xemahq/biomes-xema-platform-worker",
@@ -1313,54 +1441,9 @@
         "icon": "cpu",
         "category": "runtime",
         "summary": "Platform Temporal worker: executes kernel and system-biome workflows on the platform task queue."
-      }
-    },
-    {
-      "id": "xema-shell",
-      "version": "0.1.0",
-      "tier": "system",
-      "target": "server",
-      "origin": "first-party",
-      "mandatory": false,
-      "installPolicy": "required",
-      "repo": "repos/xema-base",
-      "path": "repos/xema-base/biomes/xema-shell",
-      "services": [
-        "xema-shell-api"
-      ],
-      "runtimeComponents": [],
-      "serviceDependencies": [
-        {
-          "consumerService": "xema-shell-api",
-          "requiredService": "identity-api",
-          "owner": {
-            "kind": "platform",
-            "source": {
-              "name": "identity-api",
-              "tier": "infra",
-              "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
-              "repo": "submodules/identity-api",
-              "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
-              "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
-              "imageKey": "identity-api"
-            }
-          }
-        }
-      ],
-      "displayName": "Xema Shell",
-      "packageName": "@xemahq/biomes-xema-shell",
-      "requiresServerBiomes": [],
-      "optionalServerBiomes": [],
-      "audience": "org",
-      "storeListed": true,
-      "sourceManifestHash": "c63106362062ebf93b05f266e5340a4ffe28322678cd9a63afe87aec3723e943",
-      "display": {
-        "icon": "terminal",
-        "category": "runtime",
-        "summary": "Xema shell parser and runner: executes platform shell scripts inside session workspaces."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "agent-runtime",
@@ -1378,8 +1461,23 @@
         "llm-registry-api",
         "skill-registry-api"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
+        {
+          "consumerService": "agent-session-api",
+          "requiredService": "authorization-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "authorization",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/authorization",
+            "version": "0.1.0",
+            "sourceManifestHash": "3687551f3883d53cba6c201ecb449d4aabb4005a9ccd1eb429732fb497c912d0"
+          }
+        },
         {
           "consumerService": "agent-session-api",
           "requiredService": "biome-host-api",
@@ -1390,7 +1488,46 @@
             "repo": "repos/xema-base",
             "path": "repos/xema-base/biomes/biome-host",
             "version": "0.1.0",
-            "sourceManifestHash": "6e522468aff28ebd3f8989d63f061cf8ead477a37844f804ae8b0f434f0258ff"
+            "sourceManifestHash": "8183c2181ec479bbd2c1d68abb3574a2ec2c6b50926dcbb200ecb5d9eb256671"
+          }
+        },
+        {
+          "consumerService": "agent-session-api",
+          "requiredService": "capability-registry-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "capability-registry",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/capability-registry",
+            "version": "0.1.0",
+            "sourceManifestHash": "22d7b0a4cfd4ce0caba32995b71897b6152a01fb55ca1e3120e6ab02a7ff16ee"
+          }
+        },
+        {
+          "consumerService": "agent-session-api",
+          "requiredService": "credential-broker-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "connector-platform",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/connector-platform",
+            "version": "0.1.0",
+            "sourceManifestHash": "cd53a7f937c3a3e2ce4336c608e6dc5887fb1b30cdb3521b5a8079627376571e"
+          }
+        },
+        {
+          "consumerService": "agent-session-api",
+          "requiredService": "decision-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "decision",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/decision",
+            "version": "0.1.0",
+            "sourceManifestHash": "1e3912bdd71f7a9753e7027773c45d107b35a1dacb6708547c042bb4c5cc0ed1"
           }
         },
         {
@@ -1404,9 +1541,9 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
@@ -1434,7 +1571,33 @@
             "repo": "repos/xema-base",
             "path": "repos/xema-base/biomes/org-database-pool",
             "version": "0.1.0",
-            "sourceManifestHash": "4a9077cbda9fb20adf207682173a3df88398ff7288428b9a356213000c68997c"
+            "sourceManifestHash": "019abba8218c9dadb0be490d6c9f42c58e390c8a89dd0c0bfe631f3eb0210765"
+          }
+        },
+        {
+          "consumerService": "agent-session-api",
+          "requiredService": "public-gateway-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "public-gateway",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/public-gateway",
+            "version": "0.1.0",
+            "sourceManifestHash": "67c87b76865552edf03521f292110ecb513f99f93ba2078bcdaac7b8ca9325b2"
+          }
+        },
+        {
+          "consumerService": "agent-session-api",
+          "requiredService": "resource-governance-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "resource-governance",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/resource-governance",
+            "version": "0.1.0",
+            "sourceManifestHash": "dd08d16a77d775af78133113d1bb3ae659adc8af1d56d4569ee6e27f7426c37c"
           }
         },
         {
@@ -1447,7 +1610,20 @@
             "repo": "repos/xema-base",
             "path": "repos/xema-base/biomes/workload-runtime",
             "version": "0.1.0",
-            "sourceManifestHash": "021012bff91a63be2f7981c8ba54fa4b1c1898349f2f3770484d475025913d86"
+            "sourceManifestHash": "cb34e70cc83af8018f6bf51b56818957e43a0c7ee637b2da6cab31562519cfb9"
+          }
+        },
+        {
+          "consumerService": "agent-session-api",
+          "requiredService": "workspace-orchestrator-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "workspace-orchestrator",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/workspace-orchestrator",
+            "version": "0.1.0",
+            "sourceManifestHash": "f2aee41b0bd7f68b970a4357154d914fe8f810be4ae2b66bb7876ff2b4600a7a"
           }
         },
         {
@@ -1460,7 +1636,7 @@
             "repo": "repos/xema-base",
             "path": "repos/xema-base/biomes/xema-capability-router",
             "version": "0.1.0",
-            "sourceManifestHash": "39a08d58a36cc8c469740f1ce28eed1d72b1ec55fb3a2c40645020c533bcc1f9"
+            "sourceManifestHash": "4ccc5c67859a6576a8e994d6a156bb5a3035c5ae1dedc3708d0f2da101cd564f"
           }
         },
         {
@@ -1473,7 +1649,7 @@
             "repo": "repos/xema-base",
             "path": "repos/xema-base/biomes/biome-host",
             "version": "0.1.0",
-            "sourceManifestHash": "6e522468aff28ebd3f8989d63f061cf8ead477a37844f804ae8b0f434f0258ff"
+            "sourceManifestHash": "8183c2181ec479bbd2c1d68abb3574a2ec2c6b50926dcbb200ecb5d9eb256671"
           }
         },
         {
@@ -1487,9 +1663,9 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
@@ -1504,7 +1680,7 @@
             "repo": "repos/xema-base",
             "path": "repos/xema-base/biomes/biome-host",
             "version": "0.1.0",
-            "sourceManifestHash": "6e522468aff28ebd3f8989d63f061cf8ead477a37844f804ae8b0f434f0258ff"
+            "sourceManifestHash": "8183c2181ec479bbd2c1d68abb3574a2ec2c6b50926dcbb200ecb5d9eb256671"
           }
         },
         {
@@ -1518,9 +1694,9 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
@@ -1536,13 +1712,26 @@
               "repositoryUrl": "https://github.com/xema-dev/llm-gateway-api.git",
               "repo": "submodules/llm-gateway-api",
               "path": "submodules/llm-gateway-api/package.json",
-              "sourceCommit": "79e4da92d86f8a7dc7605a8eca6837006495ccf5",
+              "sourceCommit": "83db971a3bc72d5e0d633c8e96215de850dc7359",
               "version": "1.0.0",
               "sourceManifestHash": "a862e41a632f3aecf1d6037b842a70ca5be91c996a89a68bd8200068355f43b8",
               "imageKey": "llm-gateway-api"
             }
           }
         },
+        {
+          "consumerService": "llm-registry-api",
+          "requiredService": "resource-governance-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "resource-governance",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/resource-governance",
+            "version": "0.1.0",
+            "sourceManifestHash": "dd08d16a77d775af78133113d1bb3ae659adc8af1d56d4569ee6e27f7426c37c"
+          }
+        },
         {
           "consumerService": "llm-registry-api",
           "requiredService": "xema-capability-router",
@@ -1553,7 +1742,7 @@
             "repo": "repos/xema-base",
             "path": "repos/xema-base/biomes/xema-capability-router",
             "version": "0.1.0",
-            "sourceManifestHash": "39a08d58a36cc8c469740f1ce28eed1d72b1ec55fb3a2c40645020c533bcc1f9"
+            "sourceManifestHash": "4ccc5c67859a6576a8e994d6a156bb5a3035c5ae1dedc3708d0f2da101cd564f"
           }
         },
         {
@@ -1567,9 +1756,9 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
@@ -1581,12 +1770,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "a13807cf05146aca50ee7964e66af7844f0bcfd34e35352227944ec81997461f",
+      "sourceManifestHash": "5336acb3131601e721d6d54626c70d1cbbb8f424803f43e974a8ced764a9ffe9",
       "display": {
         "icon": "bot",
         "category": "runtime",
         "summary": "Foundational agent-runtime primitives: agent sessions, skill catalog, LLM registry, and typed artifact storage."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "app-platform",
@@ -1601,8 +1792,23 @@
       "services": [
         "app-platform-api"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
+        {
+          "consumerService": "app-platform-api",
+          "requiredService": "agent-session-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "agent-runtime",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/agent-runtime",
+            "version": "0.1.0",
+            "sourceManifestHash": "5336acb3131601e721d6d54626c70d1cbbb8f424803f43e974a8ced764a9ffe9"
+          }
+        },
         {
           "consumerService": "app-platform-api",
           "requiredService": "authorization-api",
@@ -1613,7 +1819,7 @@
             "repo": "repos/xema-base",
             "path": "repos/xema-base/biomes/authorization",
             "version": "0.1.0",
-            "sourceManifestHash": "757ad1901fbeaeb8e2ff20bf7f5aa381e03ae9a72c43ac9a88eabc1af92371a1"
+            "sourceManifestHash": "3687551f3883d53cba6c201ecb449d4aabb4005a9ccd1eb429732fb497c912d0"
           }
         },
         {
@@ -1626,7 +1832,7 @@
             "repo": "repos/xema-base",
             "path": "repos/xema-base/biomes/biome-host",
             "version": "0.1.0",
-            "sourceManifestHash": "6e522468aff28ebd3f8989d63f061cf8ead477a37844f804ae8b0f434f0258ff"
+            "sourceManifestHash": "8183c2181ec479bbd2c1d68abb3574a2ec2c6b50926dcbb200ecb5d9eb256671"
           }
         },
         {
@@ -1640,9 +1846,9 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
@@ -1667,12 +1873,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "ad83e92526cc2c94606512fccbac5f330135a3f59f969727059333a589aece6e",
+      "sourceManifestHash": "acb627746ce17b7b9753a13e5007841f95d1f29651e47a747ed7599dd17aa2b9",
       "display": {
         "icon": "app-window",
         "category": "connect",
         "summary": "App/portal runtime for external end-users: Apps, external auth (magic-link/OIDC), public ingress, delegated sessions."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "backlog",
@@ -1687,7 +1895,9 @@
       "services": [
         "backlog-api"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
         {
           "consumerService": "backlog-api",
@@ -1700,9 +1910,9 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
@@ -1719,7 +1929,73 @@
         "icon": "list",
         "category": "operate",
         "summary": "Work-item and backlog primitive — stores and syncs tracker issues and tasks that Xema workflows read and update."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
+    },
+    {
+      "id": "biome-adapter-host",
+      "version": "0.1.0",
+      "tier": "base",
+      "target": "server",
+      "origin": "first-party",
+      "mandatory": false,
+      "installPolicy": "default-selected",
+      "repo": "repos/xema-base",
+      "path": "repos/xema-base/biomes/biome-adapter-host",
+      "services": [],
+      "serviceDatabases": {},
+      "runtimeComponents": [
+        "biome-adapter-host"
+      ],
+      "hostModules": [],
+      "serviceDependencies": [],
+      "displayName": "Biome Adapter Host",
+      "packageName": "@xemahq/biomes-biome-adapter-host",
+      "requiresServerBiomes": [],
+      "optionalServerBiomes": [],
+      "audience": "org",
+      "storeListed": true,
+      "sourceManifestHash": "cddd250d2e4136c2b438272b98aff8a591556ffed296d57ea4ed7dbb97ae0b9b",
+      "display": {
+        "icon": "puzzle",
+        "category": "connect",
+        "summary": "Adapter-SDK runtime: hosts integration adapter contributions shipped by other biomes."
+      },
+      "systemSurface": false,
+      "launch": "per-installation"
+    },
+    {
+      "id": "biome-fetcher",
+      "version": "0.1.0",
+      "tier": "base",
+      "target": "server",
+      "origin": "first-party",
+      "mandatory": false,
+      "installPolicy": "default-selected",
+      "repo": "repos/xema-base",
+      "path": "repos/xema-base/biomes/biome-fetcher",
+      "services": [
+        "biome-fetcher-api"
+      ],
+      "serviceDatabases": {},
+      "runtimeComponents": [],
+      "hostModules": [],
+      "serviceDependencies": [],
+      "displayName": "Biome Fetcher",
+      "packageName": "@xemahq/biomes-biome-fetcher",
+      "requiresServerBiomes": [],
+      "optionalServerBiomes": [],
+      "audience": "org",
+      "storeListed": true,
+      "sourceManifestHash": "aaa2b6daf48f8e1635fc818782a199dd48ae40ed91d4fff2ff7fc1e0bbb33655",
+      "display": {
+        "icon": "download",
+        "category": "build",
+        "summary": "Downloads and verifies biome bundles from registries, staging them for the biome-host installer."
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "canopy",
@@ -1734,7 +2010,9 @@
       "services": [
         "canopy-api"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
         {
           "consumerService": "canopy-api",
@@ -1760,9 +2038,9 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
@@ -1777,7 +2055,7 @@
             "repo": "repos/xema-base",
             "path": "repos/xema-base/biomes/xema-capability-router",
             "version": "0.1.0",
-            "sourceManifestHash": "39a08d58a36cc8c469740f1ce28eed1d72b1ec55fb3a2c40645020c533bcc1f9"
+            "sourceManifestHash": "4ccc5c67859a6576a8e994d6a156bb5a3035c5ae1dedc3708d0f2da101cd564f"
           }
         }
       ],
@@ -1787,12 +2065,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "a88ef0b188ed5b303d8d8cf790a17b024ceb172a7a1616c339d8c88853ae9ce4",
+      "sourceManifestHash": "b4b85ad9d79bbfcd62e9b58a28853f998a3d2e69115321001e080d117bc02721",
       "display": {
         "icon": "sparkles",
         "category": "runtime",
         "summary": "The universal Xema agent: one org-scoped conversation that can reach every capability of every installed biome."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "connector-platform",
@@ -1808,8 +2088,23 @@
         "connector-gateway-api",
         "credential-broker-api"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
+        {
+          "consumerService": "connector-gateway-api",
+          "requiredService": "authorization-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "authorization",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/authorization",
+            "version": "0.1.0",
+            "sourceManifestHash": "3687551f3883d53cba6c201ecb449d4aabb4005a9ccd1eb429732fb497c912d0"
+          }
+        },
         {
           "consumerService": "connector-gateway-api",
           "requiredService": "capability-registry-api",
@@ -1823,6 +2118,19 @@
             "sourceManifestHash": "22d7b0a4cfd4ce0caba32995b71897b6152a01fb55ca1e3120e6ab02a7ff16ee"
           }
         },
+        {
+          "consumerService": "connector-gateway-api",
+          "requiredService": "decision-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "decision",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/decision",
+            "version": "0.1.0",
+            "sourceManifestHash": "1e3912bdd71f7a9753e7027773c45d107b35a1dacb6708547c042bb4c5cc0ed1"
+          }
+        },
         {
           "consumerService": "connector-gateway-api",
           "requiredService": "identity-api",
@@ -1834,9 +2142,9 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
@@ -1852,9 +2160,9 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
@@ -1870,7 +2178,7 @@
               "repositoryUrl": "https://github.com/xema-dev/secrets-api.git",
               "repo": "submodules/secrets-api",
               "path": "submodules/secrets-api/package.json",
-              "sourceCommit": "5cb3114aa9fee7eeed42aeeea0ddd2d5a1ed8722",
+              "sourceCommit": "34ae47ba5dad3bf8674eedf63851b0a161d1645b",
               "version": "1.0.0",
               "sourceManifestHash": "51d6db6fac73a58b167eb7615c371fc75dfdb13a294c22ddb98c18d99df620a7",
               "imageKey": "secrets-api"
@@ -1884,12 +2192,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "36862dd4bf78175095aab7fc39fcead6b0993cd48604b3a054e18132374fc9d0",
+      "sourceManifestHash": "cd53a7f937c3a3e2ce4336c608e6dc5887fb1b30cdb3521b5a8079627376571e",
       "display": {
         "icon": "plug",
         "category": "connect",
         "summary": "Generic connector ingress edge and credential broker; per-provider connector biomes consume its services."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "container-registry",
@@ -1904,7 +2214,9 @@
       "services": [
         "container-registry-api"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
         {
           "consumerService": "container-registry-api",
@@ -1917,9 +2229,9 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
@@ -1934,7 +2246,7 @@
             "repo": "repos/xema-base",
             "path": "repos/xema-base/biomes/workload-runtime",
             "version": "0.1.0",
-            "sourceManifestHash": "021012bff91a63be2f7981c8ba54fa4b1c1898349f2f3770484d475025913d86"
+            "sourceManifestHash": "cb34e70cc83af8018f6bf51b56818957e43a0c7ee637b2da6cab31562519cfb9"
           }
         }
       ],
@@ -1944,12 +2256,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "a81a72b151ae1ac8f4d423188db7d1185d55ef161a06ae067b4ad73f1da996a2",
+      "sourceManifestHash": "d0069f417878418767e547da75d78dd9b18624b93ac49ddd7785aaa611bfd583",
       "display": {
         "icon": "container",
         "category": "build",
         "summary": "OCI image registry adapter and workspace-image baker: proxies push/pull and bakes custom worker images."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "knowledge-base",
@@ -1964,7 +2278,9 @@
       "services": [
         "knowledge-base-api"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
         {
           "consumerService": "knowledge-base-api",
@@ -1976,7 +2292,7 @@
             "repo": "repos/xema-base",
             "path": "repos/xema-base/biomes/authorization",
             "version": "0.1.0",
-            "sourceManifestHash": "757ad1901fbeaeb8e2ff20bf7f5aa381e03ae9a72c43ac9a88eabc1af92371a1"
+            "sourceManifestHash": "3687551f3883d53cba6c201ecb449d4aabb4005a9ccd1eb429732fb497c912d0"
           }
         },
         {
@@ -2003,12 +2319,25 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
+        },
+        {
+          "consumerService": "knowledge-base-api",
+          "requiredService": "public-gateway-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "public-gateway",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/public-gateway",
+            "version": "0.1.0",
+            "sourceManifestHash": "67c87b76865552edf03521f292110ecb513f99f93ba2078bcdaac7b8ca9325b2"
+          }
         }
       ],
       "displayName": "Knowledge Base",
@@ -2017,12 +2346,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "05352e300ab561ccd98189bb63012174d79b25f3f0a8c31aaecf04a123f903f0",
+      "sourceManifestHash": "69e14d6a7030a9ba6d3328b1368adb60ff1d08bbf9916817fa991b28927708d2",
       "display": {
         "icon": "book-open",
         "category": "knowledge",
         "summary": "Knowledge base primitive: document storage plus semantic search consumed across tiers."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "mcp-router",
@@ -2037,7 +2368,9 @@
       "services": [
         "mcp-gateway-api"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
         {
           "consumerService": "mcp-gateway-api",
@@ -2049,7 +2382,20 @@
             "repo": "repos/xema-base",
             "path": "repos/xema-base/biomes/biome-host",
             "version": "0.1.0",
-            "sourceManifestHash": "6e522468aff28ebd3f8989d63f061cf8ead477a37844f804ae8b0f434f0258ff"
+            "sourceManifestHash": "8183c2181ec479bbd2c1d68abb3574a2ec2c6b50926dcbb200ecb5d9eb256671"
+          }
+        },
+        {
+          "consumerService": "mcp-gateway-api",
+          "requiredService": "credential-broker-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "connector-platform",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/connector-platform",
+            "version": "0.1.0",
+            "sourceManifestHash": "cd53a7f937c3a3e2ce4336c608e6dc5887fb1b30cdb3521b5a8079627376571e"
           }
         },
         {
@@ -2063,9 +2409,9 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
@@ -2080,7 +2426,7 @@
             "repo": "repos/xema-base",
             "path": "repos/xema-base/biomes/org-database-pool",
             "version": "0.1.0",
-            "sourceManifestHash": "4a9077cbda9fb20adf207682173a3df88398ff7288428b9a356213000c68997c"
+            "sourceManifestHash": "019abba8218c9dadb0be490d6c9f42c58e390c8a89dd0c0bfe631f3eb0210765"
           }
         }
       ],
@@ -2090,12 +2436,79 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "65ccf9ef1e56529751c54547d4be240ae8d0464c2b746bf1439f3b97fa43272f",
+      "sourceManifestHash": "6cd86be9d18a5c3dfd53ea00ac111be322d8e2423260beee4a2a463360fe41bd",
       "display": {
         "icon": "network",
         "category": "connect",
         "summary": "External MCP bridge: routes agent MCP tool calls to registered or biome-shipped MCP servers."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
+    },
+    {
+      "id": "output-surface-control",
+      "version": "1.0.0",
+      "tier": "base",
+      "target": "server",
+      "origin": "first-party",
+      "mandatory": false,
+      "installPolicy": "default-selected",
+      "repo": "repos/xema-base",
+      "path": "repos/xema-base/biomes/kernel/output-surface-control",
+      "services": [],
+      "serviceDatabases": {},
+      "runtimeComponents": [],
+      "hostModules": [],
+      "serviceDependencies": [],
+      "displayName": "Output Surface Control",
+      "packageName": "@xemahq/biomes-kernel-output-surface-control",
+      "requiresServerBiomes": [
+        "runtime"
+      ],
+      "optionalServerBiomes": [],
+      "audience": "org",
+      "storeListed": false,
+      "sourceManifestHash": "c963d8f49323c402e322582e9e396c8a538b205c9ff8f363aca1400e6c65853d",
+      "display": {
+        "icon": "refresh-cw",
+        "category": "operate",
+        "summary": "Output-surface control tools: re-trigger the deterministic install-to-start pipeline over the workspace-proxy API."
+      },
+      "systemSurface": false,
+      "launch": "static"
+    },
+    {
+      "id": "output-surface-inspector",
+      "version": "1.0.0",
+      "tier": "base",
+      "target": "server",
+      "origin": "first-party",
+      "mandatory": false,
+      "installPolicy": "default-selected",
+      "repo": "repos/xema-base",
+      "path": "repos/xema-base/biomes/kernel/output-surface-inspector",
+      "services": [],
+      "serviceDatabases": {},
+      "runtimeComponents": [],
+      "hostModules": [],
+      "serviceDependencies": [],
+      "displayName": "Output Surface Inspector",
+      "packageName": "@xemahq/biomes-kernel-output-surface-inspector",
+      "requiresServerBiomes": [
+        "output-surface-control",
+        "runtime"
+      ],
+      "optionalServerBiomes": [],
+      "audience": "org",
+      "storeListed": false,
+      "sourceManifestHash": "e6998235405dfbfa682fa77b7074e4383e50387fad959db2f3822b05c55af932",
+      "display": {
+        "icon": "search",
+        "category": "operate",
+        "summary": "Output-surface inspection: browser tool, inspector sub-agent, and bridge for read-only diagnosis of live pages."
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "project-registry",
@@ -2110,7 +2523,9 @@
       "services": [
         "project-registry-api"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
         {
           "consumerService": "project-registry-api",
@@ -2123,9 +2538,9 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
@@ -2142,7 +2557,74 @@
         "icon": "folders",
         "category": "platform",
         "summary": "Project and membership management: owns project identity, membership, and role assignment."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
+    },
+    {
+      "id": "studio-author",
+      "version": "1.0.0",
+      "tier": "base",
+      "target": "server",
+      "origin": "first-party",
+      "mandatory": false,
+      "installPolicy": "default-selected",
+      "repo": "repos/xema-base",
+      "path": "repos/xema-base/biomes/kernel/studio-author",
+      "services": [],
+      "serviceDatabases": {},
+      "runtimeComponents": [],
+      "hostModules": [],
+      "serviceDependencies": [],
+      "displayName": "Studio Author",
+      "packageName": "@xemahq/biomes-kernel-studio-author",
+      "requiresServerBiomes": [
+        "runtime",
+        "subagents"
+      ],
+      "optionalServerBiomes": [],
+      "audience": "org",
+      "storeListed": false,
+      "sourceManifestHash": "862461feecc25209b9de3b689ee74f0a20434a506bd8b2de1ffe7702a417aad6",
+      "display": {
+        "icon": "wand",
+        "category": "build",
+        "summary": "Authoring co-pilot for Agent Studio: workflow/spec authors and a build-with-an-agent profile that emits typed proposals."
+      },
+      "systemSurface": false,
+      "launch": "static"
+    },
+    {
+      "id": "subagents",
+      "version": "1.0.0",
+      "tier": "base",
+      "target": "server",
+      "origin": "first-party",
+      "mandatory": false,
+      "installPolicy": "default-selected",
+      "repo": "repos/xema-base",
+      "path": "repos/xema-base/biomes/kernel/subagents",
+      "services": [],
+      "serviceDatabases": {},
+      "runtimeComponents": [],
+      "hostModules": [],
+      "serviceDependencies": [],
+      "displayName": "Xema Universal Subagents",
+      "packageName": "@xemahq/biomes-kernel-subagents",
+      "requiresServerBiomes": [
+        "runtime"
+      ],
+      "optionalServerBiomes": [],
+      "audience": "org",
+      "storeListed": false,
+      "sourceManifestHash": "033135a9948495a19b38e1602269a8f76559da0eed9a88952d09d8303434a8cf",
+      "display": {
+        "icon": "users",
+        "category": "runtime",
+        "summary": "Canonical base roster of platform subagents and gate-reviewers, plus their MCP tool-profiles."
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "web-access",
@@ -2157,7 +2639,9 @@
       "services": [
         "web-access-api"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
         {
           "consumerService": "web-access-api",
@@ -2170,9 +2654,9 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
@@ -2189,7 +2673,9 @@
         "icon": "globe",
         "category": "runtime",
         "summary": "Governed public-web access — the ONE audited door for fetching and searching the public internet."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "workflow-runtime",
@@ -2206,7 +2692,9 @@
         "workflow-engine-api",
         "workflow-runtime-worker"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
         {
           "consumerService": "deliverable-specs-api",
@@ -2218,7 +2706,7 @@
             "repo": "repos/xema-base",
             "path": "repos/xema-base/biomes/biome-host",
             "version": "0.1.0",
-            "sourceManifestHash": "6e522468aff28ebd3f8989d63f061cf8ead477a37844f804ae8b0f434f0258ff"
+            "sourceManifestHash": "8183c2181ec479bbd2c1d68abb3574a2ec2c6b50926dcbb200ecb5d9eb256671"
           }
         },
         {
@@ -2232,13 +2720,26 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
         },
+        {
+          "consumerService": "deliverable-specs-api",
+          "requiredService": "resource-governance-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "resource-governance",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/resource-governance",
+            "version": "0.1.0",
+            "sourceManifestHash": "dd08d16a77d775af78133113d1bb3ae659adc8af1d56d4569ee6e27f7426c37c"
+          }
+        },
         {
           "consumerService": "workflow-engine-api",
           "requiredService": "biome-host-api",
@@ -2249,7 +2750,20 @@
             "repo": "repos/xema-base",
             "path": "repos/xema-base/biomes/biome-host",
             "version": "0.1.0",
-            "sourceManifestHash": "6e522468aff28ebd3f8989d63f061cf8ead477a37844f804ae8b0f434f0258ff"
+            "sourceManifestHash": "8183c2181ec479bbd2c1d68abb3574a2ec2c6b50926dcbb200ecb5d9eb256671"
+          }
+        },
+        {
+          "consumerService": "workflow-engine-api",
+          "requiredService": "deliverable-specs-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "workflow-runtime",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/workflow-runtime",
+            "version": "0.1.0",
+            "sourceManifestHash": "f7d826adb9e76e1e71a68868b1e1e0615a467c9d1661b1af767541b9a978dd00"
           }
         },
         {
@@ -2263,12 +2777,25 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
+        },
+        {
+          "consumerService": "workflow-engine-api",
+          "requiredService": "resource-governance-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "resource-governance",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/resource-governance",
+            "version": "0.1.0",
+            "sourceManifestHash": "dd08d16a77d775af78133113d1bb3ae659adc8af1d56d4569ee6e27f7426c37c"
+          }
         }
       ],
       "displayName": "Workflow Runtime",
@@ -2277,12 +2804,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "21f6e8eb656f1a5e73e1980401e56c34eee55964bace21db87d065e2f690cb06",
+      "sourceManifestHash": "f7d826adb9e76e1e71a68868b1e1e0615a467c9d1661b1af767541b9a978dd00",
       "display": {
         "icon": "workflow",
         "category": "runtime",
         "summary": "Workflow primitive: DSL compilation, Temporal-driven workflow execution, and the typed deliverable-spec store."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "workspace-orchestrator",
@@ -2297,7 +2826,9 @@
       "services": [
         "workspace-orchestrator-api"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
         {
           "consumerService": "workspace-orchestrator-api",
@@ -2309,7 +2840,7 @@
             "repo": "repos/xema-base",
             "path": "repos/xema-base/biomes/biome-host",
             "version": "0.1.0",
-            "sourceManifestHash": "6e522468aff28ebd3f8989d63f061cf8ead477a37844f804ae8b0f434f0258ff"
+            "sourceManifestHash": "8183c2181ec479bbd2c1d68abb3574a2ec2c6b50926dcbb200ecb5d9eb256671"
           }
         },
         {
@@ -2323,9 +2854,9 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
@@ -2341,13 +2872,26 @@
               "repositoryUrl": "https://github.com/xema-dev/llm-gateway-api.git",
               "repo": "submodules/llm-gateway-api",
               "path": "submodules/llm-gateway-api/package.json",
-              "sourceCommit": "79e4da92d86f8a7dc7605a8eca6837006495ccf5",
+              "sourceCommit": "83db971a3bc72d5e0d633c8e96215de850dc7359",
               "version": "1.0.0",
               "sourceManifestHash": "a862e41a632f3aecf1d6037b842a70ca5be91c996a89a68bd8200068355f43b8",
               "imageKey": "llm-gateway-api"
             }
           }
         },
+        {
+          "consumerService": "workspace-orchestrator-api",
+          "requiredService": "resource-governance-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "resource-governance",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/resource-governance",
+            "version": "0.1.0",
+            "sourceManifestHash": "dd08d16a77d775af78133113d1bb3ae659adc8af1d56d4569ee6e27f7426c37c"
+          }
+        },
         {
           "consumerService": "workspace-orchestrator-api",
           "requiredService": "workload-runtime-api",
@@ -2358,7 +2902,7 @@
             "repo": "repos/xema-base",
             "path": "repos/xema-base/biomes/workload-runtime",
             "version": "0.1.0",
-            "sourceManifestHash": "021012bff91a63be2f7981c8ba54fa4b1c1898349f2f3770484d475025913d86"
+            "sourceManifestHash": "cb34e70cc83af8018f6bf51b56818957e43a0c7ee637b2da6cab31562519cfb9"
           }
         },
         {
@@ -2384,7 +2928,7 @@
             "repo": "repos/xema-base",
             "path": "repos/xema-base/biomes/xema-capability-router",
             "version": "0.1.0",
-            "sourceManifestHash": "39a08d58a36cc8c469740f1ce28eed1d72b1ec55fb3a2c40645020c533bcc1f9"
+            "sourceManifestHash": "4ccc5c67859a6576a8e994d6a156bb5a3035c5ae1dedc3708d0f2da101cd564f"
           }
         }
       ],
@@ -2394,12 +2938,65 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "5c311b32be20adb044ad1687cb97d8c38f2e3885664d54063ea866261f85fe58",
+      "sourceManifestHash": "f2aee41b0bd7f68b970a4357154d914fe8f810be4ae2b66bb7876ff2b4600a7a",
       "display": {
         "icon": "layout-grid",
         "category": "runtime",
         "summary": "Per-session workspace lifecycle: creates, hibernates, and reaps workspace allocations."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
+    },
+    {
+      "id": "xema-shell",
+      "version": "0.1.0",
+      "tier": "base",
+      "target": "server",
+      "origin": "first-party",
+      "mandatory": false,
+      "installPolicy": "default-selected",
+      "repo": "repos/xema-base",
+      "path": "repos/xema-base/biomes/xema-shell",
+      "services": [
+        "xema-shell-api"
+      ],
+      "serviceDatabases": {},
+      "runtimeComponents": [],
+      "hostModules": [],
+      "serviceDependencies": [
+        {
+          "consumerService": "xema-shell-api",
+          "requiredService": "identity-api",
+          "owner": {
+            "kind": "platform",
+            "source": {
+              "name": "identity-api",
+              "tier": "infra",
+              "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
+              "repo": "submodules/identity-api",
+              "path": "submodules/identity-api/package.json",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
+              "version": "0.0.2",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
+              "imageKey": "identity-api"
+            }
+          }
+        }
+      ],
+      "displayName": "Xema Shell",
+      "packageName": "@xemahq/biomes-xema-shell",
+      "requiresServerBiomes": [],
+      "optionalServerBiomes": [],
+      "audience": "org",
+      "storeListed": true,
+      "sourceManifestHash": "80d843d3537c281c6241094f6f4c358afffd40d73d92b9672e9e58d5d123e85f",
+      "display": {
+        "icon": "terminal",
+        "category": "runtime",
+        "summary": "Xema OS shell: the `xema …` command surface, XVFS path resolution, and the concept object slice."
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "mailops",
@@ -2414,7 +3011,9 @@
       "services": [
         "mailops-api"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
         {
           "consumerService": "mailops-api",
@@ -2426,7 +3025,7 @@
             "repo": "repos/xema-base",
             "path": "repos/xema-base/biomes/agent-runtime",
             "version": "0.1.0",
-            "sourceManifestHash": "a13807cf05146aca50ee7964e66af7844f0bcfd34e35352227944ec81997461f"
+            "sourceManifestHash": "5336acb3131601e721d6d54626c70d1cbbb8f424803f43e974a8ced764a9ffe9"
           }
         },
         {
@@ -2439,7 +3038,7 @@
             "repo": "repos/xema-base",
             "path": "repos/xema-base/biomes/authorization",
             "version": "0.1.0",
-            "sourceManifestHash": "757ad1901fbeaeb8e2ff20bf7f5aa381e03ae9a72c43ac9a88eabc1af92371a1"
+            "sourceManifestHash": "3687551f3883d53cba6c201ecb449d4aabb4005a9ccd1eb429732fb497c912d0"
           }
         },
         {
@@ -2465,7 +3064,7 @@
             "repo": "repos/xema-base",
             "path": "repos/xema-base/biomes/connector-platform",
             "version": "0.1.0",
-            "sourceManifestHash": "36862dd4bf78175095aab7fc39fcead6b0993cd48604b3a054e18132374fc9d0"
+            "sourceManifestHash": "cd53a7f937c3a3e2ce4336c608e6dc5887fb1b30cdb3521b5a8079627376571e"
           }
         },
         {
@@ -2478,7 +3077,7 @@
             "repo": "repos/xema-base",
             "path": "repos/xema-base/biomes/connector-platform",
             "version": "0.1.0",
-            "sourceManifestHash": "36862dd4bf78175095aab7fc39fcead6b0993cd48604b3a054e18132374fc9d0"
+            "sourceManifestHash": "cd53a7f937c3a3e2ce4336c608e6dc5887fb1b30cdb3521b5a8079627376571e"
           }
         },
         {
@@ -2492,9 +3091,9 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
@@ -2509,7 +3108,7 @@
             "repo": "repos/xema-base",
             "path": "repos/xema-base/biomes/workflow-runtime",
             "version": "0.1.0",
-            "sourceManifestHash": "21f6e8eb656f1a5e73e1980401e56c34eee55964bace21db87d065e2f690cb06"
+            "sourceManifestHash": "f7d826adb9e76e1e71a68868b1e1e0615a467c9d1661b1af767541b9a978dd00"
           }
         },
         {
@@ -2522,7 +3121,7 @@
             "repo": "repos/xema-base",
             "path": "repos/xema-base/biomes/xema-capability-router",
             "version": "0.1.0",
-            "sourceManifestHash": "39a08d58a36cc8c469740f1ce28eed1d72b1ec55fb3a2c40645020c533bcc1f9"
+            "sourceManifestHash": "4ccc5c67859a6576a8e994d6a156bb5a3035c5ae1dedc3708d0f2da101cd564f"
           }
         }
       ],
@@ -2532,12 +3131,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "6fe5b908a01770ca23f86a1ffa478f6c51351b59edadc9167fe74979b36b8db5",
+      "sourceManifestHash": "59dd126a854e2e6bded840f7250ac1cc023266a9749bc33d42ad8f548f614640",
       "display": {
         "icon": "mail",
         "category": "connect",
         "summary": "Email as a workflow entrypoint — intake, understanding, routing, capability call-out and reply."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "search",
@@ -2552,7 +3153,9 @@
       "services": [
         "search-api"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
         {
           "consumerService": "search-api",
@@ -2578,9 +3181,9 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
@@ -2596,7 +3199,7 @@
               "repositoryUrl": "https://github.com/xema-dev/llm-gateway-api.git",
               "repo": "submodules/llm-gateway-api",
               "path": "submodules/llm-gateway-api/package.json",
-              "sourceCommit": "79e4da92d86f8a7dc7605a8eca6837006495ccf5",
+              "sourceCommit": "83db971a3bc72d5e0d633c8e96215de850dc7359",
               "version": "1.0.0",
               "sourceManifestHash": "a862e41a632f3aecf1d6037b842a70ca5be91c996a89a68bd8200068355f43b8",
               "imageKey": "llm-gateway-api"
@@ -2613,7 +3216,7 @@
             "repo": "repos/xema-base",
             "path": "repos/xema-base/biomes/agent-runtime",
             "version": "0.1.0",
-            "sourceManifestHash": "a13807cf05146aca50ee7964e66af7844f0bcfd34e35352227944ec81997461f"
+            "sourceManifestHash": "5336acb3131601e721d6d54626c70d1cbbb8f424803f43e974a8ced764a9ffe9"
           }
         },
         {
@@ -2639,7 +3242,7 @@
             "repo": "repos/xema-base",
             "path": "repos/xema-base/biomes/xema-capability-router",
             "version": "0.1.0",
-            "sourceManifestHash": "39a08d58a36cc8c469740f1ce28eed1d72b1ec55fb3a2c40645020c533bcc1f9"
+            "sourceManifestHash": "4ccc5c67859a6576a8e994d6a156bb5a3035c5ae1dedc3708d0f2da101cd564f"
           }
         }
       ],
@@ -2654,7 +3257,9 @@
         "icon": "search",
         "category": "knowledge",
         "summary": "Full-text and vector search facade over OpenSearch for cross-entity discovery."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     }
   ],
   "platformServices": [
@@ -2667,7 +3272,7 @@
         "repositoryUrl": "https://github.com/xema-dev/event-hub-api.git",
         "repo": "submodules/event-hub-api",
         "path": "submodules/event-hub-api/package.json",
-        "sourceCommit": "8ff3acef9ca979948b2b1eb95c3964f97caf16b1",
+        "sourceCommit": "6bc36b61db3ef7c9384410c1a151dab4dd1bd559",
         "version": "2.0.0",
         "sourceManifestHash": "2e57d7356ed288b00e35f3ee4aa542cdbb1eb25d94a8fecbc2bda76cedd5f995",
         "imageKey": "event-hub-api"
@@ -2682,9 +3287,9 @@
         "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
         "repo": "submodules/identity-api",
         "path": "submodules/identity-api/package.json",
-        "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+        "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
         "version": "0.0.2",
-        "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+        "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
         "imageKey": "identity-api"
       }
     },
@@ -2697,7 +3302,7 @@
         "repositoryUrl": "https://github.com/xema-dev/llm-gateway-api.git",
         "repo": "submodules/llm-gateway-api",
         "path": "submodules/llm-gateway-api/package.json",
-        "sourceCommit": "79e4da92d86f8a7dc7605a8eca6837006495ccf5",
+        "sourceCommit": "83db971a3bc72d5e0d633c8e96215de850dc7359",
         "version": "1.0.0",
         "sourceManifestHash": "a862e41a632f3aecf1d6037b842a70ca5be91c996a89a68bd8200068355f43b8",
         "imageKey": "llm-gateway-api"
@@ -2712,7 +3317,7 @@
         "repositoryUrl": "https://github.com/xema-dev/secrets-api.git",
         "repo": "submodules/secrets-api",
         "path": "submodules/secrets-api/package.json",
-        "sourceCommit": "5cb3114aa9fee7eeed42aeeea0ddd2d5a1ed8722",
+        "sourceCommit": "34ae47ba5dad3bf8674eedf63851b0a161d1645b",
         "version": "1.0.0",
         "sourceManifestHash": "51d6db6fac73a58b167eb7615c371fc75dfdb13a294c22ddb98c18d99df620a7",
         "imageKey": "secrets-api"
@@ -2720,19 +3325,63 @@
     },
     {
       "name": "xema-kernel-server",
-      "tier": "kernel"
+      "tier": "kernel",
+      "source": {
+        "name": "xema-kernel-server",
+        "tier": "kernel",
+        "repositoryUrl": "https://github.com/xema-dev/xema-base.git",
+        "repo": "repos/xema-base",
+        "path": "repos/xema-base/kernel/xema-kernel-server/package.json",
+        "sourceCommit": "b29524fbad5baa50f68005ed266a62c886cce69e",
+        "version": "0.1.0",
+        "sourceManifestHash": "d84b71fafcbee7cdfe7f3b329a02578228bb008f4352788786869eaada86fce4",
+        "imageKey": "xema-kernel-server"
+      }
     },
     {
       "name": "docs-api",
-      "tier": "platform"
+      "tier": "platform",
+      "source": {
+        "name": "docs-api",
+        "tier": "platform",
+        "repositoryUrl": "https://github.com/xema-dev/xema-docs.git",
+        "repo": "repos/xema-docs",
+        "path": "repos/xema-docs/package.json",
+        "sourceCommit": "653663d3dfd88a32be922cfb0ac111808adbec97",
+        "version": "0.0.1",
+        "sourceManifestHash": "10770a77153a2549a3e1af1142e3c52f1125f9b7a178937f1c05f76ce88e7cbc",
+        "imageKey": "docs-api"
+      }
     },
     {
       "name": "opencode-image-prepuller",
-      "tier": "platform"
+      "tier": "platform",
+      "source": {
+        "name": "opencode-image-prepuller",
+        "tier": "platform",
+        "repositoryUrl": "https://github.com/xema-dev/xema-base.git",
+        "repo": "repos/xema-base",
+        "path": "repos/xema-base/biomes/opencode-runtime/xema-biome.json",
+        "sourceCommit": "b29524fbad5baa50f68005ed266a62c886cce69e",
+        "version": "0.1.0",
+        "sourceManifestHash": "4b38bba65e002f24e26ef4572ffa0e123da6cb0cdf0cd2fa5b2582e969abeb94",
+        "imageKey": "opencode-worker"
+      }
     },
     {
       "name": "xema-host-web",
-      "tier": "edge"
+      "tier": "edge",
+      "source": {
+        "name": "xema-host-web",
+        "tier": "edge",
+        "repositoryUrl": "https://github.com/xema-dev/xema-host-web.git",
+        "repo": "submodules/xema-host-web",
+        "path": "submodules/xema-host-web/package.json",
+        "sourceCommit": "0c61f431abc8543fe9475535640f339311083966",
+        "version": "2.2.0",
+        "sourceManifestHash": "30300d6cf87a55727209e9a9580500aaf9094659a4043481c74b33deb3163005",
+        "imageKey": "xema-host-web"
+      }
     }
   ],
   "capabilityDomainOwners": [
@@ -2812,6 +3461,10 @@
       "domain": "studio",
       "biomeId": "studio-author"
     },
+    {
+      "domain": "template",
+      "biomeId": "template-registry"
+    },
     {
       "domain": "web",
       "biomeId": "web-access"
@@ -2833,5 +3486,5 @@
       "biomeId": "xema-shell"
     }
   ],
-  "inputHash": "f737b23539dd683d831be2047acf5c0d2bbb85901e90d3b1cd940e28c0fecf63"
+  "inputHash": "a096c99b22bc8380d6dae8c89a91b408015ed7476ecb4ad2e875fc7c6df13e60"
 }