npm - @xemahq/xema - Versions diffs - 0.15.13 → 0.16.1 - Mend

@xemahq/xema 0.15.13 → 0.16.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (47) hide show

package/dist/assets/appliance-base/distribution.lock.json +1830 -702
package/dist/assets/appliance-base/images.lock.json +272 -313
package/dist/assets/appliance-lean/distribution.lock.json +1171 -447
package/dist/assets/appliance-lean/images.lock.json +218 -201
package/dist/assets/boot-graph.json +30 -11
package/dist/assets/cloud/distribution.lock.json +1872 -777
package/dist/assets/cloud/images.lock.json +284 -276
package/dist/assets/core/distribution.lock.json +1199 -473
package/dist/assets/core/images.lock.json +218 -196
package/dist/assets/distribution-assets.manifest.json +30 -30
package/dist/assets/minimal/distribution.lock.json +1089 -436
package/dist/assets/minimal/images.lock.json +183 -188
package/dist/assets/oss/distribution.lock.json +1851 -768
package/dist/assets/oss/images.lock.json +274 -315
package/dist/assets/starter/distribution.lock.json +1252 -514
package/dist/assets/starter/images.lock.json +223 -228
package/dist/commands/biome.js +1 -1
package/dist/commands/biome.js.map +1 -1
package/dist/runtime/biome-dev.d.ts.map +1 -1
package/dist/runtime/biome-dev.js +0 -5
package/dist/runtime/biome-dev.js.map +1 -1
package/dist/runtime/biome-scaffold-manifest.d.ts +3 -8
package/dist/runtime/biome-scaffold-manifest.d.ts.map +1 -1
package/dist/runtime/biome-scaffold-manifest.js +2 -9
package/dist/runtime/biome-scaffold-manifest.js.map +1 -1
package/dist/runtime/biome-scaffold.d.ts +3 -3
package/dist/runtime/biome-scaffold.d.ts.map +1 -1
package/dist/runtime/biome-scaffold.js.map +1 -1
package/dist/runtime/biome-validate.d.ts.map +1 -1
package/dist/runtime/biome-validate.js +28 -50
package/dist/runtime/biome-validate.js.map +1 -1
package/dist/runtime/distribution/available-biome.d.ts.map +1 -1
package/dist/runtime/distribution/available-biome.js +80 -14
package/dist/runtime/distribution/available-biome.js.map +1 -1
package/dist/runtime/distribution/compose.d.ts.map +1 -1
package/dist/runtime/distribution/compose.js +2 -9
package/dist/runtime/distribution/compose.js.map +1 -1
package/dist/runtime/platform-services.d.ts.map +1 -1
package/dist/runtime/platform-services.js +2 -2
package/dist/runtime/platform-services.js.map +1 -1
package/dist/runtime/sources/manifest-walk.d.ts +1 -0
package/dist/runtime/sources/manifest-walk.d.ts.map +1 -1
package/dist/runtime/sources/manifest-walk.js +9 -2
package/dist/runtime/sources/manifest-walk.js.map +1 -1
package/dist/runtime/waves.d.ts.map +1 -1
package/dist/runtime/waves.js.map +1 -1
package/package.json +5 -9

package/dist/assets/appliance-lean/distribution.lock.json CHANGED Viewed

@@ -1,90 +1,7 @@
 {
-  "schemaVersion": 1,
+  "schemaVersion": 2,
   "distributionId": "appliance-lean",
   "biomes": [
-    {
-      "id": "contribution-test",
-      "version": "0.0.1",
-      "tier": "kernel",
-      "target": "server",
-      "origin": "first-party",
-      "mandatory": true,
-      "installPolicy": "required",
-      "repo": "repos/xema-base",
-      "path": "repos/xema-base/biomes/kernel/contribution-test",
-      "services": [],
-      "runtimeComponents": [],
-      "serviceDependencies": [],
-      "displayName": "Contribution Protocol Test Biome",
-      "packageName": "@xemahq/biomes-kernel-contribution-test",
-      "requiresServerBiomes": [],
-      "optionalServerBiomes": [],
-      "audience": "org",
-      "storeListed": false,
-      "sourceManifestHash": "a5989a0adba0fae65f1cd3107b38896d1df9742ba35d0de670be7f10fa43aeb7",
-      "display": {
-        "icon": "flask-conical",
-        "category": "build",
-        "summary": "Synthetic kernel test biome exercising the XSI Contribution Protocol, capability resolution, and boundary enforcement."
-      }
-    },
-    {
-      "id": "output-surface-control",
-      "version": "1.0.0",
-      "tier": "kernel",
-      "target": "server",
-      "origin": "first-party",
-      "mandatory": true,
-      "installPolicy": "required",
-      "repo": "repos/xema-base",
-      "path": "repos/xema-base/biomes/kernel/output-surface-control",
-      "services": [],
-      "runtimeComponents": [],
-      "serviceDependencies": [],
-      "displayName": "Output Surface Control",
-      "packageName": "@xemahq/biomes-kernel-output-surface-control",
-      "requiresServerBiomes": [
-        "runtime"
-      ],
-      "optionalServerBiomes": [],
-      "audience": "org",
-      "storeListed": false,
-      "sourceManifestHash": "8c773b92dc42534da668a0857840810ad581066db735e27a8cdbdb750a0b10b9",
-      "display": {
-        "icon": "refresh-cw",
-        "category": "operate",
-        "summary": "Output-surface control tools: re-trigger the deterministic install-to-start pipeline over the workspace-proxy API."
-      }
-    },
-    {
-      "id": "output-surface-inspector",
-      "version": "1.0.0",
-      "tier": "kernel",
-      "target": "server",
-      "origin": "first-party",
-      "mandatory": true,
-      "installPolicy": "required",
-      "repo": "repos/xema-base",
-      "path": "repos/xema-base/biomes/kernel/output-surface-inspector",
-      "services": [],
-      "runtimeComponents": [],
-      "serviceDependencies": [],
-      "displayName": "Output Surface Inspector",
-      "packageName": "@xemahq/biomes-kernel-output-surface-inspector",
-      "requiresServerBiomes": [
-        "output-surface-control",
-        "runtime"
-      ],
-      "optionalServerBiomes": [],
-      "audience": "org",
-      "storeListed": false,
-      "sourceManifestHash": "b6b0bfb9861229725e487a3d16f1f7d842fb5afeed545e7e43d3b7cc8abdd289",
-      "display": {
-        "icon": "search",
-        "category": "operate",
-        "summary": "Output-surface inspection: browser tool, inspector sub-agent, and bridge for read-only diagnosis of live pages."
-      }
-    },
     {
       "id": "runtime",
       "version": "1.0.0",
@@ -96,7 +13,9 @@
       "repo": "repos/xema-base",
       "path": "repos/xema-base/biomes/kernel/runtime",
       "services": [],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [],
       "displayName": "Xema Runtime Kernel",
       "packageName": "@xemahq/biomes-kernel-runtime",
@@ -109,64 +28,9 @@
         "icon": "box",
         "category": "runtime",
         "summary": "Kernel runtime baseline: base workspace manifests, custom OpenCode tools and plugins, and the canonical MCP catalog."
-      }
-    },
-    {
-      "id": "studio-author",
-      "version": "1.0.0",
-      "tier": "kernel",
-      "target": "server",
-      "origin": "first-party",
-      "mandatory": true,
-      "installPolicy": "required",
-      "repo": "repos/xema-base",
-      "path": "repos/xema-base/biomes/kernel/studio-author",
-      "services": [],
-      "runtimeComponents": [],
-      "serviceDependencies": [],
-      "displayName": "Studio Author",
-      "packageName": "@xemahq/biomes-kernel-studio-author",
-      "requiresServerBiomes": [
-        "runtime",
-        "subagents"
-      ],
-      "optionalServerBiomes": [],
-      "audience": "org",
-      "storeListed": false,
-      "sourceManifestHash": "9c0a9522ef36140ce704d5be39ae44cde175b1addec90ba56d36970ace803f1e",
-      "display": {
-        "icon": "wand",
-        "category": "build",
-        "summary": "Authoring co-pilot for Agent Studio: workflow/spec authors and a build-with-an-agent profile that emits typed proposals."
-      }
-    },
-    {
-      "id": "subagents",
-      "version": "1.0.0",
-      "tier": "kernel",
-      "target": "server",
-      "origin": "first-party",
-      "mandatory": true,
-      "installPolicy": "required",
-      "repo": "repos/xema-base",
-      "path": "repos/xema-base/biomes/kernel/subagents",
-      "services": [],
-      "runtimeComponents": [],
-      "serviceDependencies": [],
-      "displayName": "Xema Universal Subagents",
-      "packageName": "@xemahq/biomes-kernel-subagents",
-      "requiresServerBiomes": [
-        "runtime"
-      ],
-      "optionalServerBiomes": [],
-      "audience": "org",
-      "storeListed": false,
-      "sourceManifestHash": "c7d66ce06a303e40ae4901694c9617fab3645185752cce5f214cd29f9bed24c0",
-      "display": {
-        "icon": "users",
-        "category": "runtime",
-        "summary": "Canonical roster of platform subagents and gate-reviewers every install boots with, plus their MCP tool-profiles."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "activity-web",
@@ -179,7 +43,9 @@
       "repo": "submodules/xema-host-web",
       "path": "submodules/xema-host-web/biomes/system/activity-web",
       "services": [],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [],
       "displayName": "Activity (Web)",
       "packageName": "@xemahq/biomes-system-activity-web",
@@ -189,12 +55,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "e6ca64b0c2e26a4a405a7ceea824050b31dd34dbe22ac4fcbc38134cecf26ba5",
+      "sourceManifestHash": "4243795eb988fd49f02f0ddf568d113f490e3dcf35cdcfc8aa1453e4956a685a",
       "display": {
         "icon": "activity",
         "category": "operate",
         "summary": "Track activity and audit events."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "audit",
@@ -209,7 +77,9 @@
       "services": [
         "audit-log-api"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
         {
           "consumerService": "audit-log-api",
@@ -222,9 +92,9 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
@@ -236,12 +106,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "47d7d7203aed8644e0d4b768b5e6781fa0e1bc5ca5e1cffa5e77df9a27e8f155",
+      "sourceManifestHash": "64c24fbe6a8394eee5ecdb0163bc88c2dd52f1e8bdbc0588810e5502b61f7128",
       "display": {
         "icon": "scroll-text",
         "category": "governance",
         "summary": "Tamper-evident, append-only audit log of platform actions for compliance and forensics."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "authorization",
@@ -256,7 +128,9 @@
       "services": [
         "authorization-api"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
         {
           "consumerService": "authorization-api",
@@ -269,12 +143,25 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
+        },
+        {
+          "consumerService": "authorization-api",
+          "requiredService": "resource-governance-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "resource-governance",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/resource-governance",
+            "version": "0.1.0",
+            "sourceManifestHash": "dd08d16a77d775af78133113d1bb3ae659adc8af1d56d4569ee6e27f7426c37c"
+          }
         }
       ],
       "displayName": "Authorization",
@@ -283,69 +170,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "757ad1901fbeaeb8e2ff20bf7f5aa381e03ae9a72c43ac9a88eabc1af92371a1",
+      "sourceManifestHash": "3687551f3883d53cba6c201ecb449d4aabb4005a9ccd1eb429732fb497c912d0",
       "display": {
         "icon": "shield",
         "category": "governance",
         "summary": "Policy decision point: resolves capability and scope grants for every actor/action pair (OpenFGA/OPA)."
-      }
-    },
-    {
-      "id": "biome-adapter-host",
-      "version": "0.1.0",
-      "tier": "system",
-      "target": "server",
-      "origin": "first-party",
-      "mandatory": false,
-      "installPolicy": "required",
-      "repo": "repos/xema-base",
-      "path": "repos/xema-base/biomes/biome-adapter-host",
-      "services": [],
-      "runtimeComponents": [
-        "biome-adapter-host"
-      ],
-      "serviceDependencies": [],
-      "displayName": "Biome Adapter Host",
-      "packageName": "@xemahq/biomes-biome-adapter-host",
-      "requiresServerBiomes": [],
-      "optionalServerBiomes": [],
-      "audience": "org",
-      "storeListed": true,
-      "sourceManifestHash": "0bc4a9a1653d2bcbd91cb6fdd252b955a652594d2fb7c0e2601655e36eb54c08",
-      "display": {
-        "icon": "puzzle",
-        "category": "connect",
-        "summary": "Adapter-SDK runtime: hosts integration adapter contributions shipped by other biomes."
       },
-      "launch": "per-installation"
-    },
-    {
-      "id": "biome-fetcher",
-      "version": "0.1.0",
-      "tier": "system",
-      "target": "server",
-      "origin": "first-party",
-      "mandatory": false,
-      "installPolicy": "required",
-      "repo": "repos/xema-base",
-      "path": "repos/xema-base/biomes/biome-fetcher",
-      "services": [
-        "biome-fetcher-api"
-      ],
-      "runtimeComponents": [],
-      "serviceDependencies": [],
-      "displayName": "Biome Fetcher",
-      "packageName": "@xemahq/biomes-biome-fetcher",
-      "requiresServerBiomes": [],
-      "optionalServerBiomes": [],
-      "audience": "org",
-      "storeListed": true,
-      "sourceManifestHash": "7cf92483d2880ce99165350cc6f0497ce34b3fbe78bbea6aa7580d770b2ef0f9",
-      "display": {
-        "icon": "download",
-        "category": "build",
-        "summary": "Downloads and verifies biome bundles from registries, staging them for the biome-host installer."
-      }
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "biome-host",
@@ -360,8 +192,36 @@
       "services": [
         "biome-host-api"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
+        {
+          "consumerService": "biome-host-api",
+          "requiredService": "authorization-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "authorization",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/authorization",
+            "version": "0.1.0",
+            "sourceManifestHash": "3687551f3883d53cba6c201ecb449d4aabb4005a9ccd1eb429732fb497c912d0"
+          }
+        },
+        {
+          "consumerService": "biome-host-api",
+          "requiredService": "decision-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "decision",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/decision",
+            "version": "0.1.0",
+            "sourceManifestHash": "1e3912bdd71f7a9753e7027773c45d107b35a1dacb6708547c042bb4c5cc0ed1"
+          }
+        },
         {
           "consumerService": "biome-host-api",
           "requiredService": "identity-api",
@@ -373,9 +233,9 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
@@ -387,12 +247,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "6e522468aff28ebd3f8989d63f061cf8ead477a37844f804ae8b0f434f0258ff",
+      "sourceManifestHash": "8183c2181ec479bbd2c1d68abb3574a2ec2c6b50926dcbb200ecb5d9eb256671",
       "display": {
         "icon": "package",
         "category": "build",
         "summary": "Biome installer and lifecycle manager: validates manifests, applies Helm sub-charts, tracks install state."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "capabilities-web",
@@ -405,7 +267,9 @@
       "repo": "submodules/xema-host-web",
       "path": "submodules/xema-host-web/biomes/system/capabilities-web",
       "services": [],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [],
       "displayName": "Capabilities (Web)",
       "packageName": "@xemahq/biomes-system-capabilities-web",
@@ -415,12 +279,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "9d074819f387ccd2d545e33dfc1d6a9f4b7db31612faabf17186e5d1a473a7d3",
+      "sourceManifestHash": "c06afc998c1cfae62cbe2ac659d39078eb1356dd9e40a9f442d2d061903e14ef",
       "display": {
         "icon": "puzzle",
         "category": "platform",
         "summary": "Browse and govern platform capabilities."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "capability-registry",
@@ -435,7 +301,9 @@
       "services": [
         "capability-registry-api"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
         {
           "consumerService": "capability-registry-api",
@@ -448,9 +316,9 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
@@ -467,7 +335,9 @@
         "icon": "list",
         "category": "platform",
         "summary": "Capability descriptor registry: authoritative source for every published capability ref and schema."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "concepts-web",
@@ -480,7 +350,9 @@
       "repo": "submodules/xema-host-web",
       "path": "submodules/xema-host-web/biomes/system/concepts-web",
       "services": [],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [],
       "displayName": "Concepts (Web)",
       "packageName": "@xemahq/biomes-system-concepts-web",
@@ -490,13 +362,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": false,
-      "sourceManifestHash": "b002ad3b5621c4d3850836c238b1af77cd52f5dfaba0025d061e10803c69fe2e",
+      "sourceManifestHash": "a842e01e7b38bf2cdecc46da59699c5dbf5bad9948dac5143367cf9e2c1b4a28",
       "display": {
         "icon": "lightbulb",
         "category": "knowledge",
         "summary": "Manage shared concepts and definitions."
       },
-      "systemSurface": true
+      "systemSurface": true,
+      "launch": "static"
     },
     {
       "id": "container-registry-web",
@@ -509,7 +382,9 @@
       "repo": "submodules/xema-host-web",
       "path": "submodules/xema-host-web/biomes/system/container-registry-web",
       "services": [],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [],
       "displayName": "Container Registry (Web)",
       "packageName": "@xemahq/biomes-system-container-registry-web",
@@ -519,12 +394,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "8512c2a97eeecf1195a52f8c487efa6779a51443d3e2942a0138fc867c2d1bca",
+      "sourceManifestHash": "33ea1e235dc558a71e49869e01f5acf2301df0d83c924a42a549aa0f0f94c43d",
       "display": {
         "icon": "package",
         "category": "platform",
         "summary": "Manage container images."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "decision",
@@ -539,7 +416,9 @@
       "services": [
         "decision-api"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
         {
           "consumerService": "decision-api",
@@ -551,7 +430,7 @@
             "repo": "repos/xema-base",
             "path": "repos/xema-base/biomes/authorization",
             "version": "0.1.0",
-            "sourceManifestHash": "757ad1901fbeaeb8e2ff20bf7f5aa381e03ae9a72c43ac9a88eabc1af92371a1"
+            "sourceManifestHash": "3687551f3883d53cba6c201ecb449d4aabb4005a9ccd1eb429732fb497c912d0"
           }
         },
         {
@@ -565,9 +444,9 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
@@ -579,12 +458,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "3e93781a626e400f7970ffb97e8ef0b49271caebb6b4ae278d9efbaad56fa127",
+      "sourceManifestHash": "1e3912bdd71f7a9753e7027773c45d107b35a1dacb6708547c042bb4c5cc0ed1",
       "display": {
         "icon": "gavel",
         "category": "operate",
         "summary": "The platform's one human-decision primitive: a durable ask with N answerable options, a derived lifecycle and a PDP-resolved audience."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "environments-web",
@@ -597,7 +478,9 @@
       "repo": "submodules/xema-host-web",
       "path": "submodules/xema-host-web/biomes/system/environments-web",
       "services": [],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [],
       "displayName": "Environments (Web)",
       "packageName": "@xemahq/biomes-system-environments-web",
@@ -607,12 +490,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "e1227ed5d257fb15ba083c948ed1e9c7aa84aeda88631e940e2dcbfa371d8075",
+      "sourceManifestHash": "cf854b4160465ba5c4e785ab9791d0c85a13f17586a1a3800c95e70839a83080",
       "display": {
         "icon": "server",
         "category": "platform",
         "summary": "Manage execution environments."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "gateway-routes-web",
@@ -625,7 +510,9 @@
       "repo": "submodules/xema-host-web",
       "path": "submodules/xema-host-web/biomes/system/gateway-routes-web",
       "services": [],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [],
       "displayName": "Gateway Routes (Web)",
       "packageName": "@xemahq/biomes-system-gateway-routes-web",
@@ -635,12 +522,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "4f4375a83e7bbfe5a5f85ed1ff55948a0408ee9b4d2d35206435c3e80e5bfb4b",
+      "sourceManifestHash": "d7e7e7c89354101e68be8111b8afacb0f5141acfcaf523ef6141e1d2bcfe9cbe",
       "display": {
         "icon": "route",
         "category": "platform",
         "summary": "Configure public gateway routes."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "grants-web",
@@ -653,7 +542,9 @@
       "repo": "submodules/xema-host-web",
       "path": "submodules/xema-host-web/biomes/system/grants-web",
       "services": [],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [],
       "displayName": "Grants (Web)",
       "packageName": "@xemahq/biomes-system-grants-web",
@@ -663,12 +554,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "15ddb0475d72c48baad54ce9cdac380950681939c9f6b8db244f558596a4bc9d",
+      "sourceManifestHash": "72d6de134598d129b53ea34c2522fd931dc47fb19ad8115b741eff178b9f8569",
       "display": {
         "icon": "key",
         "category": "governance",
         "summary": "Review and manage access grants."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "mailops-web",
@@ -681,11 +574,14 @@
       "repo": "submodules/xema-host-web",
       "path": "submodules/xema-host-web/biomes/system/mailops-web",
       "services": [],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [],
       "displayName": "MailOps (Web)",
       "packageName": "@xemahq/biomes-system-mailops-web",
       "requiresServerBiomes": [
+        "agent-runtime",
         "mailops",
         "project-registry",
         "workflow-runtime"
@@ -693,12 +589,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "e54d0d516229df0a1bc9cb0d865246ad4cbd247d4fb0567bd818b83954fe9a71",
+      "sourceManifestHash": "e71b0fa62af5261eaf1bbc92258f45b17975bd5b98ec204c86e13eb6994020d2",
       "display": {
         "icon": "mail",
         "category": "connect",
         "summary": "Run email-driven workflows."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "object-registry",
@@ -713,7 +611,9 @@
       "services": [
         "object-registry-api"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
         {
           "consumerService": "object-registry-api",
@@ -726,9 +626,9 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
@@ -745,7 +645,9 @@
         "icon": "link",
         "category": "platform",
         "summary": "XVFS object resolver: addresses every platform object (artifact, biome, capability) via a stable URI scheme."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "objects-web",
@@ -758,7 +660,9 @@
       "repo": "submodules/xema-host-web",
       "path": "submodules/xema-host-web/biomes/system/objects-web",
       "services": [],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [],
       "displayName": "Objects (Web)",
       "packageName": "@xemahq/biomes-system-objects-web",
@@ -768,13 +672,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": false,
-      "sourceManifestHash": "4fc671dc1f39fde79ade866b1b0a885bd65b3a0051cacc4b6a94620bffa11eaf",
+      "sourceManifestHash": "23d313f5d5bae4b1864c3ebd2409f6e495b939fad074db83bd4fe30d481caba1",
       "display": {
         "icon": "box",
         "category": "data",
         "summary": "Browse Xema objects and registries."
       },
-      "systemSurface": true
+      "systemSurface": true,
+      "launch": "static"
     },
     {
       "id": "opencode-runtime",
@@ -787,9 +692,11 @@
       "repo": "repos/xema-base",
       "path": "repos/xema-base/biomes/opencode-runtime",
       "services": [],
+      "serviceDatabases": {},
       "runtimeComponents": [
         "opencode-worker"
       ],
+      "hostModules": [],
       "serviceDependencies": [],
       "displayName": "Opencode Runtime",
       "packageName": "@xemahq/biomes-opencode-runtime",
@@ -802,7 +709,9 @@
         "icon": "bot",
         "category": "runtime",
         "summary": "OpenCode runtime executor: runs LLM agent sessions inside a per-allocation workspace."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "org-database-pool",
@@ -817,7 +726,9 @@
       "services": [
         "org-database-pool-api"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
         {
           "consumerService": "org-database-pool-api",
@@ -830,7 +741,7 @@
               "repositoryUrl": "https://github.com/xema-dev/event-hub-api.git",
               "repo": "submodules/event-hub-api",
               "path": "submodules/event-hub-api/package.json",
-              "sourceCommit": "8ff3acef9ca979948b2b1eb95c3964f97caf16b1",
+              "sourceCommit": "6bc36b61db3ef7c9384410c1a151dab4dd1bd559",
               "version": "2.0.0",
               "sourceManifestHash": "2e57d7356ed288b00e35f3ee4aa542cdbb1eb25d94a8fecbc2bda76cedd5f995",
               "imageKey": "event-hub-api"
@@ -848,12 +759,25 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
+        },
+        {
+          "consumerService": "org-database-pool-api",
+          "requiredService": "resource-governance-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "resource-governance",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/resource-governance",
+            "version": "0.1.0",
+            "sourceManifestHash": "dd08d16a77d775af78133113d1bb3ae659adc8af1d56d4569ee6e27f7426c37c"
+          }
         }
       ],
       "displayName": "Org Database Pool",
@@ -862,12 +786,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "4a9077cbda9fb20adf207682173a3df88398ff7288428b9a356213000c68997c",
+      "sourceManifestHash": "019abba8218c9dadb0be490d6c9f42c58e390c8a89dd0c0bfe631f3eb0210765",
       "display": {
         "icon": "database",
         "category": "platform",
         "summary": "Per-org database pool: issues per-tenant Postgres credentials and tracks per-org migration state."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "policies-web",
@@ -880,7 +806,9 @@
       "repo": "submodules/xema-host-web",
       "path": "submodules/xema-host-web/biomes/system/policies-web",
       "services": [],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [],
       "displayName": "Policies (Web)",
       "packageName": "@xemahq/biomes-system-policies-web",
@@ -890,12 +818,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "7b4f380be501bcf5042b08d1d97e12e813b617ac468c87fd1bf9449bcb93cff8",
+      "sourceManifestHash": "720f536934ca9e5a3f138fcdaf05b52416fb6e74548ce74f0c8917a8a5580e5e",
       "display": {
         "icon": "shield",
         "category": "governance",
         "summary": "Author and review policies."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "public-gateway",
@@ -910,20 +840,38 @@
       "services": [
         "public-gateway-api"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
-      "serviceDependencies": [],
-      "displayName": "Public Gateway",
-      "packageName": "@xemahq/biomes-public-gateway",
+      "hostModules": [],
+      "serviceDependencies": [
+        {
+          "consumerService": "public-gateway-api",
+          "requiredService": "biome-host-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "biome-host",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/biome-host",
+            "version": "0.1.0",
+            "sourceManifestHash": "8183c2181ec479bbd2c1d68abb3574a2ec2c6b50926dcbb200ecb5d9eb256671"
+          }
+        }
+      ],
+      "displayName": "Public Gateway",
+      "packageName": "@xemahq/biomes-public-gateway",
       "requiresServerBiomes": [],
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "c12bdd52233605e5effa26a7b283281760988420b8929652606c78ed9bb460ad",
+      "sourceManifestHash": "67c87b76865552edf03521f292110ecb513f99f93ba2078bcdaac7b8ca9325b2",
       "display": {
         "icon": "globe",
         "category": "connect",
         "summary": "Public-facing HTTP gateway: streams preview pages, dispatches webhook ingress, terminates public routes."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "redis-pool",
@@ -938,7 +886,9 @@
       "services": [
         "redis-pool-api"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
         {
           "consumerService": "redis-pool-api",
@@ -951,7 +901,7 @@
               "repositoryUrl": "https://github.com/xema-dev/event-hub-api.git",
               "repo": "submodules/event-hub-api",
               "path": "submodules/event-hub-api/package.json",
-              "sourceCommit": "8ff3acef9ca979948b2b1eb95c3964f97caf16b1",
+              "sourceCommit": "6bc36b61db3ef7c9384410c1a151dab4dd1bd559",
               "version": "2.0.0",
               "sourceManifestHash": "2e57d7356ed288b00e35f3ee4aa542cdbb1eb25d94a8fecbc2bda76cedd5f995",
               "imageKey": "event-hub-api"
@@ -969,9 +919,9 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
@@ -983,12 +933,78 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "c46fffcdf97637a5dcde14c2fa81a7bb728f257ace02098e9fbbef9a9ee43aa0",
+      "sourceManifestHash": "b3602544220af514c79bf40cb535b2aebda4ca54a8c562ee4201ead37f4effaa",
       "display": {
         "icon": "database",
         "category": "platform",
         "summary": "Brokers the shared Redis/Valkey keyspace: per-(biome, org) namespaces with a server-enforced key prefix and short-lived Redis ACL credentials."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
+    },
+    {
+      "id": "resource-governance",
+      "version": "0.1.0",
+      "tier": "system",
+      "target": "server",
+      "origin": "first-party",
+      "mandatory": false,
+      "installPolicy": "required",
+      "repo": "repos/xema-base",
+      "path": "repos/xema-base/biomes/resource-governance",
+      "services": [
+        "resource-governance-api"
+      ],
+      "serviceDatabases": {},
+      "runtimeComponents": [],
+      "hostModules": [],
+      "serviceDependencies": [
+        {
+          "consumerService": "resource-governance-api",
+          "requiredService": "decision-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "decision",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/decision",
+            "version": "0.1.0",
+            "sourceManifestHash": "1e3912bdd71f7a9753e7027773c45d107b35a1dacb6708547c042bb4c5cc0ed1"
+          }
+        },
+        {
+          "consumerService": "resource-governance-api",
+          "requiredService": "identity-api",
+          "owner": {
+            "kind": "platform",
+            "source": {
+              "name": "identity-api",
+              "tier": "infra",
+              "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
+              "repo": "submodules/identity-api",
+              "path": "submodules/identity-api/package.json",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
+              "version": "0.0.2",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
+              "imageKey": "identity-api"
+            }
+          }
+        }
+      ],
+      "displayName": "Resource Governance",
+      "packageName": "@xemahq/biomes-resource-governance",
+      "requiresServerBiomes": [],
+      "optionalServerBiomes": [],
+      "audience": "org",
+      "storeListed": true,
+      "sourceManifestHash": "dd08d16a77d775af78133113d1bb3ae659adc8af1d56d4569ee6e27f7426c37c",
+      "display": {
+        "icon": "gauge",
+        "category": "governance",
+        "summary": "Authoritative resource inventory, consumption, source freshness, and cost-attribution inputs."
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "runners-web",
@@ -1001,7 +1017,9 @@
       "repo": "submodules/xema-host-web",
       "path": "submodules/xema-host-web/biomes/system/runners-web",
       "services": [],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [],
       "displayName": "Runners (Web)",
       "packageName": "@xemahq/biomes-system-runners-web",
@@ -1014,12 +1032,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "c56bb0d5eb00552d1aeceb4a7c4965fc3e32cb9f994639f5c97d64fa2f574bcb",
+      "sourceManifestHash": "469a04d8a7ff2e8dc55ab05fc4f6b874c46981a987d30393a469541f61b7cda3",
       "display": {
         "icon": "cpu",
         "category": "platform",
         "summary": "Monitor and manage execution runners."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "search-web",
@@ -1032,7 +1052,9 @@
       "repo": "submodules/xema-host-web",
       "path": "submodules/xema-host-web/biomes/system/search-web",
       "services": [],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [],
       "displayName": "Search (Web)",
       "packageName": "@xemahq/biomes-system-search-web",
@@ -1042,12 +1064,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "13e726cddbf11f1e47c62f44b28e9834f630c3c119ec976424e0f9afe54050a0",
+      "sourceManifestHash": "82c0a04f2ad3e6ba84a85e8d14e6dc4ed65c0581ca7ec168e066ebcf0da07944",
       "display": {
         "icon": "search",
         "category": "platform",
         "summary": "Search across the platform."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "service-registry-web",
@@ -1060,7 +1084,9 @@
       "repo": "submodules/xema-host-web",
       "path": "submodules/xema-host-web/biomes/system/service-registry-web",
       "services": [],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [],
       "displayName": "Service Registry (Web)",
       "packageName": "@xemahq/biomes-system-service-registry-web",
@@ -1070,12 +1096,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "989267e6eef302890d6e35e84c151438f584354b500a19649f7ea6133869a767",
+      "sourceManifestHash": "4e6de6c3d7fb2edd030b9d346833c7ce6e99aff3d2e46e40ef61670abc302839",
       "display": {
         "icon": "network",
         "category": "platform",
         "summary": "Inspect the service registry."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "space-registry",
@@ -1090,8 +1118,23 @@
       "services": [
         "space-registry-api"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
+        {
+          "consumerService": "space-registry-api",
+          "requiredService": "decision-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "decision",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/decision",
+            "version": "0.1.0",
+            "sourceManifestHash": "1e3912bdd71f7a9753e7027773c45d107b35a1dacb6708547c042bb4c5cc0ed1"
+          }
+        },
         {
           "consumerService": "space-registry-api",
           "requiredService": "identity-api",
@@ -1103,9 +1146,9 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
@@ -1117,12 +1160,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "2dfcb549315fefa787a0008f6d924847e41126842542786c7172391cc1cada9f",
+      "sourceManifestHash": "6a8f974d2d66f24346859066e3ea7b72c4a8b96546fea061277fa51b31b5449c",
       "display": {
         "icon": "folder-tree",
         "category": "governance",
-        "summary": "Authoritative Space ownership, hierarchy, and most-specific-wins data-classification resolution."
-      }
+        "summary": "Authoritative Space ownership declarations and join-based data-classification resolution."
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "spaces-web",
@@ -1135,7 +1180,9 @@
       "repo": "submodules/xema-host-web",
       "path": "submodules/xema-host-web/biomes/system/spaces-web",
       "services": [],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [],
       "displayName": "Spaces (Web)",
       "packageName": "@xemahq/biomes-system-spaces-web",
@@ -1147,13 +1194,122 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": false,
-      "sourceManifestHash": "d9297d1f16ab7faef0d8678522598286420f31ea7bff8fbc9033f499f93722a1",
+      "sourceManifestHash": "ca0317b58364d048e70ac47801fa4f74d57f4ddd3647f99e8e1186dbc2581629",
       "display": {
         "icon": "layers",
         "category": "platform",
         "summary": "Organize work into spaces."
       },
-      "systemSurface": true
+      "systemSurface": true,
+      "launch": "static"
+    },
+    {
+      "id": "template-registry",
+      "version": "0.1.0",
+      "tier": "system",
+      "target": "server",
+      "origin": "first-party",
+      "mandatory": false,
+      "installPolicy": "required",
+      "repo": "repos/xema-base",
+      "path": "repos/xema-base/biomes/template-registry",
+      "services": [
+        "template-registry-api"
+      ],
+      "serviceDatabases": {},
+      "runtimeComponents": [],
+      "hostModules": [],
+      "serviceDependencies": [
+        {
+          "consumerService": "template-registry-api",
+          "requiredService": "artifact-store-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "agent-runtime",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/agent-runtime",
+            "version": "0.1.0",
+            "sourceManifestHash": "5336acb3131601e721d6d54626c70d1cbbb8f424803f43e974a8ced764a9ffe9"
+          }
+        },
+        {
+          "consumerService": "template-registry-api",
+          "requiredService": "event-hub-api",
+          "owner": {
+            "kind": "platform",
+            "source": {
+              "name": "event-hub-api",
+              "tier": "infra",
+              "repositoryUrl": "https://github.com/xema-dev/event-hub-api.git",
+              "repo": "submodules/event-hub-api",
+              "path": "submodules/event-hub-api/package.json",
+              "sourceCommit": "6bc36b61db3ef7c9384410c1a151dab4dd1bd559",
+              "version": "2.0.0",
+              "sourceManifestHash": "2e57d7356ed288b00e35f3ee4aa542cdbb1eb25d94a8fecbc2bda76cedd5f995",
+              "imageKey": "event-hub-api"
+            }
+          }
+        },
+        {
+          "consumerService": "template-registry-api",
+          "requiredService": "identity-api",
+          "owner": {
+            "kind": "platform",
+            "source": {
+              "name": "identity-api",
+              "tier": "infra",
+              "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
+              "repo": "submodules/identity-api",
+              "path": "submodules/identity-api/package.json",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
+              "version": "0.0.2",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
+              "imageKey": "identity-api"
+            }
+          }
+        },
+        {
+          "consumerService": "template-registry-api",
+          "requiredService": "resource-governance-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "resource-governance",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/resource-governance",
+            "version": "0.1.0",
+            "sourceManifestHash": "dd08d16a77d775af78133113d1bb3ae659adc8af1d56d4569ee6e27f7426c37c"
+          }
+        },
+        {
+          "consumerService": "template-registry-api",
+          "requiredService": "xema-capability-router",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "xema-capability-router",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/xema-capability-router",
+            "version": "0.1.0",
+            "sourceManifestHash": "4ccc5c67859a6576a8e994d6a156bb5a3035c5ae1dedc3708d0f2da101cd564f"
+          }
+        }
+      ],
+      "displayName": "Template Registry",
+      "packageName": "@xemahq/biomes-template-registry",
+      "requiresServerBiomes": [],
+      "optionalServerBiomes": [],
+      "audience": "org",
+      "storeListed": true,
+      "sourceManifestHash": "4ad780ec6b56898c42c8025059d2c1d080b1d9c1e44c2db2f1e5f0790d462018",
+      "display": {
+        "icon": "layout-template",
+        "category": "platform",
+        "summary": "Authoritative Template and DesignSystem content, drafts, revisions, evaluations, and previews."
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "workload-runtime",
@@ -1168,7 +1324,9 @@
       "services": [
         "workload-runtime-api"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
         {
           "consumerService": "workload-runtime-api",
@@ -1181,12 +1339,25 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
+        },
+        {
+          "consumerService": "workload-runtime-api",
+          "requiredService": "public-gateway-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "public-gateway",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/public-gateway",
+            "version": "0.1.0",
+            "sourceManifestHash": "67c87b76865552edf03521f292110ecb513f99f93ba2078bcdaac7b8ca9325b2"
+          }
         }
       ],
       "displayName": "Workload Runtime",
@@ -1195,12 +1366,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "021012bff91a63be2f7981c8ba54fa4b1c1898349f2f3770484d475025913d86",
+      "sourceManifestHash": "cb34e70cc83af8018f6bf51b56818957e43a0c7ee637b2da6cab31562519cfb9",
       "display": {
         "icon": "server-cog",
         "category": "runtime",
         "summary": "Workload runtime control plane: dispatches and reconciles every per-allocation Kubernetes workload."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "workspace-storage-pool",
@@ -1215,7 +1388,9 @@
       "services": [
         "workspace-storage-pool-api"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
         {
           "consumerService": "workspace-storage-pool-api",
@@ -1228,9 +1403,9 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
@@ -1247,7 +1422,9 @@
         "icon": "hard-drive",
         "category": "platform",
         "summary": "Per-org workspace volume manager: allocates, snapshots, and reclaims persistent workspace storage."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "xema-capability-router",
@@ -1262,7 +1439,9 @@
       "services": [
         "xema-capability-router"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
         {
           "consumerService": "xema-capability-router",
@@ -1275,9 +1454,9 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
@@ -1289,12 +1468,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "39a08d58a36cc8c469740f1ce28eed1d72b1ec55fb3a2c40645020c533bcc1f9",
+      "sourceManifestHash": "4ccc5c67859a6576a8e994d6a156bb5a3035c5ae1dedc3708d0f2da101cd564f",
       "display": {
         "icon": "split",
         "category": "platform",
         "summary": "Capability dispatch router: resolves a capability invocation to the owning biome's API and endpoint."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "xema-platform-worker",
@@ -1309,7 +1490,9 @@
       "services": [
         "xema-platform-worker"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [],
       "displayName": "Xema Platform Worker",
       "packageName": "@xemahq/biomes-xema-platform-worker",
@@ -1322,54 +1505,9 @@
         "icon": "cpu",
         "category": "runtime",
         "summary": "Platform Temporal worker: executes kernel and system-biome workflows on the platform task queue."
-      }
-    },
-    {
-      "id": "xema-shell",
-      "version": "0.1.0",
-      "tier": "system",
-      "target": "server",
-      "origin": "first-party",
-      "mandatory": false,
-      "installPolicy": "required",
-      "repo": "repos/xema-base",
-      "path": "repos/xema-base/biomes/xema-shell",
-      "services": [
-        "xema-shell-api"
-      ],
-      "runtimeComponents": [],
-      "serviceDependencies": [
-        {
-          "consumerService": "xema-shell-api",
-          "requiredService": "identity-api",
-          "owner": {
-            "kind": "platform",
-            "source": {
-              "name": "identity-api",
-              "tier": "infra",
-              "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
-              "repo": "submodules/identity-api",
-              "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
-              "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
-              "imageKey": "identity-api"
-            }
-          }
-        }
-      ],
-      "displayName": "Xema Shell",
-      "packageName": "@xemahq/biomes-xema-shell",
-      "requiresServerBiomes": [],
-      "optionalServerBiomes": [],
-      "audience": "org",
-      "storeListed": true,
-      "sourceManifestHash": "c63106362062ebf93b05f266e5340a4ffe28322678cd9a63afe87aec3723e943",
-      "display": {
-        "icon": "terminal",
-        "category": "runtime",
-        "summary": "Xema shell parser and runner: executes platform shell scripts inside session workspaces."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "activity-feed",
@@ -1384,7 +1522,9 @@
       "services": [
         "activity-feed-api"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
         {
           "consumerService": "activity-feed-api",
@@ -1397,9 +1537,9 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
@@ -1411,12 +1551,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "1c8246ca4b24b76d8c5b75afbd5dfccc3ee1bb10cb8d7a42b6c51bd687a81af8",
+      "sourceManifestHash": "cf0b4e2af8d740bab0253fb5e13440b284fb23f2638be48a94dfa06d1ab81a4f",
       "display": {
         "icon": "activity",
         "category": "operate",
         "summary": "Activity feed projector: materializes CloudEvent streams into per-actor and per-subject timelines."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "agent-runtime",
@@ -1434,8 +1576,23 @@
         "llm-registry-api",
         "skill-registry-api"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
+        {
+          "consumerService": "agent-session-api",
+          "requiredService": "authorization-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "authorization",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/authorization",
+            "version": "0.1.0",
+            "sourceManifestHash": "3687551f3883d53cba6c201ecb449d4aabb4005a9ccd1eb429732fb497c912d0"
+          }
+        },
         {
           "consumerService": "agent-session-api",
           "requiredService": "biome-host-api",
@@ -1446,7 +1603,46 @@
             "repo": "repos/xema-base",
             "path": "repos/xema-base/biomes/biome-host",
             "version": "0.1.0",
-            "sourceManifestHash": "6e522468aff28ebd3f8989d63f061cf8ead477a37844f804ae8b0f434f0258ff"
+            "sourceManifestHash": "8183c2181ec479bbd2c1d68abb3574a2ec2c6b50926dcbb200ecb5d9eb256671"
+          }
+        },
+        {
+          "consumerService": "agent-session-api",
+          "requiredService": "capability-registry-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "capability-registry",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/capability-registry",
+            "version": "0.1.0",
+            "sourceManifestHash": "22d7b0a4cfd4ce0caba32995b71897b6152a01fb55ca1e3120e6ab02a7ff16ee"
+          }
+        },
+        {
+          "consumerService": "agent-session-api",
+          "requiredService": "credential-broker-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "connector-platform",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/connector-platform",
+            "version": "0.1.0",
+            "sourceManifestHash": "cd53a7f937c3a3e2ce4336c608e6dc5887fb1b30cdb3521b5a8079627376571e"
+          }
+        },
+        {
+          "consumerService": "agent-session-api",
+          "requiredService": "decision-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "decision",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/decision",
+            "version": "0.1.0",
+            "sourceManifestHash": "1e3912bdd71f7a9753e7027773c45d107b35a1dacb6708547c042bb4c5cc0ed1"
           }
         },
         {
@@ -1460,9 +1656,9 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
@@ -1490,7 +1686,33 @@
             "repo": "repos/xema-base",
             "path": "repos/xema-base/biomes/org-database-pool",
             "version": "0.1.0",
-            "sourceManifestHash": "4a9077cbda9fb20adf207682173a3df88398ff7288428b9a356213000c68997c"
+            "sourceManifestHash": "019abba8218c9dadb0be490d6c9f42c58e390c8a89dd0c0bfe631f3eb0210765"
+          }
+        },
+        {
+          "consumerService": "agent-session-api",
+          "requiredService": "public-gateway-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "public-gateway",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/public-gateway",
+            "version": "0.1.0",
+            "sourceManifestHash": "67c87b76865552edf03521f292110ecb513f99f93ba2078bcdaac7b8ca9325b2"
+          }
+        },
+        {
+          "consumerService": "agent-session-api",
+          "requiredService": "resource-governance-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "resource-governance",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/resource-governance",
+            "version": "0.1.0",
+            "sourceManifestHash": "dd08d16a77d775af78133113d1bb3ae659adc8af1d56d4569ee6e27f7426c37c"
           }
         },
         {
@@ -1503,7 +1725,20 @@
             "repo": "repos/xema-base",
             "path": "repos/xema-base/biomes/workload-runtime",
             "version": "0.1.0",
-            "sourceManifestHash": "021012bff91a63be2f7981c8ba54fa4b1c1898349f2f3770484d475025913d86"
+            "sourceManifestHash": "cb34e70cc83af8018f6bf51b56818957e43a0c7ee637b2da6cab31562519cfb9"
+          }
+        },
+        {
+          "consumerService": "agent-session-api",
+          "requiredService": "workspace-orchestrator-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "workspace-orchestrator",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/workspace-orchestrator",
+            "version": "0.1.0",
+            "sourceManifestHash": "f2aee41b0bd7f68b970a4357154d914fe8f810be4ae2b66bb7876ff2b4600a7a"
           }
         },
         {
@@ -1516,7 +1751,7 @@
             "repo": "repos/xema-base",
             "path": "repos/xema-base/biomes/xema-capability-router",
             "version": "0.1.0",
-            "sourceManifestHash": "39a08d58a36cc8c469740f1ce28eed1d72b1ec55fb3a2c40645020c533bcc1f9"
+            "sourceManifestHash": "4ccc5c67859a6576a8e994d6a156bb5a3035c5ae1dedc3708d0f2da101cd564f"
           }
         },
         {
@@ -1529,7 +1764,7 @@
             "repo": "repos/xema-base",
             "path": "repos/xema-base/biomes/biome-host",
             "version": "0.1.0",
-            "sourceManifestHash": "6e522468aff28ebd3f8989d63f061cf8ead477a37844f804ae8b0f434f0258ff"
+            "sourceManifestHash": "8183c2181ec479bbd2c1d68abb3574a2ec2c6b50926dcbb200ecb5d9eb256671"
           }
         },
         {
@@ -1543,9 +1778,9 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
@@ -1560,7 +1795,7 @@
             "repo": "repos/xema-base",
             "path": "repos/xema-base/biomes/biome-host",
             "version": "0.1.0",
-            "sourceManifestHash": "6e522468aff28ebd3f8989d63f061cf8ead477a37844f804ae8b0f434f0258ff"
+            "sourceManifestHash": "8183c2181ec479bbd2c1d68abb3574a2ec2c6b50926dcbb200ecb5d9eb256671"
           }
         },
         {
@@ -1574,9 +1809,9 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
@@ -1592,13 +1827,26 @@
               "repositoryUrl": "https://github.com/xema-dev/llm-gateway-api.git",
               "repo": "submodules/llm-gateway-api",
               "path": "submodules/llm-gateway-api/package.json",
-              "sourceCommit": "79e4da92d86f8a7dc7605a8eca6837006495ccf5",
+              "sourceCommit": "83db971a3bc72d5e0d633c8e96215de850dc7359",
               "version": "1.0.0",
               "sourceManifestHash": "a862e41a632f3aecf1d6037b842a70ca5be91c996a89a68bd8200068355f43b8",
               "imageKey": "llm-gateway-api"
             }
           }
         },
+        {
+          "consumerService": "llm-registry-api",
+          "requiredService": "resource-governance-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "resource-governance",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/resource-governance",
+            "version": "0.1.0",
+            "sourceManifestHash": "dd08d16a77d775af78133113d1bb3ae659adc8af1d56d4569ee6e27f7426c37c"
+          }
+        },
         {
           "consumerService": "llm-registry-api",
           "requiredService": "xema-capability-router",
@@ -1609,7 +1857,7 @@
             "repo": "repos/xema-base",
             "path": "repos/xema-base/biomes/xema-capability-router",
             "version": "0.1.0",
-            "sourceManifestHash": "39a08d58a36cc8c469740f1ce28eed1d72b1ec55fb3a2c40645020c533bcc1f9"
+            "sourceManifestHash": "4ccc5c67859a6576a8e994d6a156bb5a3035c5ae1dedc3708d0f2da101cd564f"
           }
         },
         {
@@ -1623,9 +1871,9 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
@@ -1637,12 +1885,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "a13807cf05146aca50ee7964e66af7844f0bcfd34e35352227944ec81997461f",
+      "sourceManifestHash": "5336acb3131601e721d6d54626c70d1cbbb8f424803f43e974a8ced764a9ffe9",
       "display": {
         "icon": "bot",
         "category": "runtime",
         "summary": "Foundational agent-runtime primitives: agent sessions, skill catalog, LLM registry, and typed artifact storage."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "app-platform",
@@ -1657,8 +1907,23 @@
       "services": [
         "app-platform-api"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
+        {
+          "consumerService": "app-platform-api",
+          "requiredService": "agent-session-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "agent-runtime",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/agent-runtime",
+            "version": "0.1.0",
+            "sourceManifestHash": "5336acb3131601e721d6d54626c70d1cbbb8f424803f43e974a8ced764a9ffe9"
+          }
+        },
         {
           "consumerService": "app-platform-api",
           "requiredService": "authorization-api",
@@ -1669,7 +1934,7 @@
             "repo": "repos/xema-base",
             "path": "repos/xema-base/biomes/authorization",
             "version": "0.1.0",
-            "sourceManifestHash": "757ad1901fbeaeb8e2ff20bf7f5aa381e03ae9a72c43ac9a88eabc1af92371a1"
+            "sourceManifestHash": "3687551f3883d53cba6c201ecb449d4aabb4005a9ccd1eb429732fb497c912d0"
           }
         },
         {
@@ -1682,7 +1947,7 @@
             "repo": "repos/xema-base",
             "path": "repos/xema-base/biomes/biome-host",
             "version": "0.1.0",
-            "sourceManifestHash": "6e522468aff28ebd3f8989d63f061cf8ead477a37844f804ae8b0f434f0258ff"
+            "sourceManifestHash": "8183c2181ec479bbd2c1d68abb3574a2ec2c6b50926dcbb200ecb5d9eb256671"
           }
         },
         {
@@ -1696,9 +1961,9 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
@@ -1723,12 +1988,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "ad83e92526cc2c94606512fccbac5f330135a3f59f969727059333a589aece6e",
+      "sourceManifestHash": "acb627746ce17b7b9753a13e5007841f95d1f29651e47a747ed7599dd17aa2b9",
       "display": {
         "icon": "app-window",
         "category": "connect",
         "summary": "App/portal runtime for external end-users: Apps, external auth (magic-link/OIDC), public ingress, delegated sessions."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "backlog",
@@ -1743,7 +2010,9 @@
       "services": [
         "backlog-api"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
         {
           "consumerService": "backlog-api",
@@ -1756,9 +2025,9 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
@@ -1775,7 +2044,73 @@
         "icon": "list",
         "category": "operate",
         "summary": "Work-item and backlog primitive — stores and syncs tracker issues and tasks that Xema workflows read and update."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
+    },
+    {
+      "id": "biome-adapter-host",
+      "version": "0.1.0",
+      "tier": "base",
+      "target": "server",
+      "origin": "first-party",
+      "mandatory": false,
+      "installPolicy": "default-selected",
+      "repo": "repos/xema-base",
+      "path": "repos/xema-base/biomes/biome-adapter-host",
+      "services": [],
+      "serviceDatabases": {},
+      "runtimeComponents": [
+        "biome-adapter-host"
+      ],
+      "hostModules": [],
+      "serviceDependencies": [],
+      "displayName": "Biome Adapter Host",
+      "packageName": "@xemahq/biomes-biome-adapter-host",
+      "requiresServerBiomes": [],
+      "optionalServerBiomes": [],
+      "audience": "org",
+      "storeListed": true,
+      "sourceManifestHash": "cddd250d2e4136c2b438272b98aff8a591556ffed296d57ea4ed7dbb97ae0b9b",
+      "display": {
+        "icon": "puzzle",
+        "category": "connect",
+        "summary": "Adapter-SDK runtime: hosts integration adapter contributions shipped by other biomes."
+      },
+      "systemSurface": false,
+      "launch": "per-installation"
+    },
+    {
+      "id": "biome-fetcher",
+      "version": "0.1.0",
+      "tier": "base",
+      "target": "server",
+      "origin": "first-party",
+      "mandatory": false,
+      "installPolicy": "default-selected",
+      "repo": "repos/xema-base",
+      "path": "repos/xema-base/biomes/biome-fetcher",
+      "services": [
+        "biome-fetcher-api"
+      ],
+      "serviceDatabases": {},
+      "runtimeComponents": [],
+      "hostModules": [],
+      "serviceDependencies": [],
+      "displayName": "Biome Fetcher",
+      "packageName": "@xemahq/biomes-biome-fetcher",
+      "requiresServerBiomes": [],
+      "optionalServerBiomes": [],
+      "audience": "org",
+      "storeListed": true,
+      "sourceManifestHash": "aaa2b6daf48f8e1635fc818782a199dd48ae40ed91d4fff2ff7fc1e0bbb33655",
+      "display": {
+        "icon": "download",
+        "category": "build",
+        "summary": "Downloads and verifies biome bundles from registries, staging them for the biome-host installer."
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "canopy",
@@ -1790,7 +2125,9 @@
       "services": [
         "canopy-api"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
         {
           "consumerService": "canopy-api",
@@ -1816,9 +2153,9 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
@@ -1833,7 +2170,7 @@
             "repo": "repos/xema-base",
             "path": "repos/xema-base/biomes/xema-capability-router",
             "version": "0.1.0",
-            "sourceManifestHash": "39a08d58a36cc8c469740f1ce28eed1d72b1ec55fb3a2c40645020c533bcc1f9"
+            "sourceManifestHash": "4ccc5c67859a6576a8e994d6a156bb5a3035c5ae1dedc3708d0f2da101cd564f"
           }
         }
       ],
@@ -1843,12 +2180,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "a88ef0b188ed5b303d8d8cf790a17b024ceb172a7a1616c339d8c88853ae9ce4",
+      "sourceManifestHash": "b4b85ad9d79bbfcd62e9b58a28853f998a3d2e69115321001e080d117bc02721",
       "display": {
         "icon": "sparkles",
         "category": "runtime",
         "summary": "The universal Xema agent: one org-scoped conversation that can reach every capability of every installed biome."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "connector-platform",
@@ -1864,19 +2203,47 @@
         "connector-gateway-api",
         "credential-broker-api"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
         {
           "consumerService": "connector-gateway-api",
-          "requiredService": "capability-registry-api",
+          "requiredService": "authorization-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "authorization",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/authorization",
+            "version": "0.1.0",
+            "sourceManifestHash": "3687551f3883d53cba6c201ecb449d4aabb4005a9ccd1eb429732fb497c912d0"
+          }
+        },
+        {
+          "consumerService": "connector-gateway-api",
+          "requiredService": "capability-registry-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "capability-registry",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/capability-registry",
+            "version": "0.1.0",
+            "sourceManifestHash": "22d7b0a4cfd4ce0caba32995b71897b6152a01fb55ca1e3120e6ab02a7ff16ee"
+          }
+        },
+        {
+          "consumerService": "connector-gateway-api",
+          "requiredService": "decision-api",
           "owner": {
             "kind": "biome",
-            "biomeId": "capability-registry",
+            "biomeId": "decision",
             "target": "server",
             "repo": "repos/xema-base",
-            "path": "repos/xema-base/biomes/capability-registry",
+            "path": "repos/xema-base/biomes/decision",
             "version": "0.1.0",
-            "sourceManifestHash": "22d7b0a4cfd4ce0caba32995b71897b6152a01fb55ca1e3120e6ab02a7ff16ee"
+            "sourceManifestHash": "1e3912bdd71f7a9753e7027773c45d107b35a1dacb6708547c042bb4c5cc0ed1"
           }
         },
         {
@@ -1890,9 +2257,9 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
@@ -1908,9 +2275,9 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
@@ -1926,7 +2293,7 @@
               "repositoryUrl": "https://github.com/xema-dev/secrets-api.git",
               "repo": "submodules/secrets-api",
               "path": "submodules/secrets-api/package.json",
-              "sourceCommit": "5cb3114aa9fee7eeed42aeeea0ddd2d5a1ed8722",
+              "sourceCommit": "34ae47ba5dad3bf8674eedf63851b0a161d1645b",
               "version": "1.0.0",
               "sourceManifestHash": "51d6db6fac73a58b167eb7615c371fc75dfdb13a294c22ddb98c18d99df620a7",
               "imageKey": "secrets-api"
@@ -1940,12 +2307,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "36862dd4bf78175095aab7fc39fcead6b0993cd48604b3a054e18132374fc9d0",
+      "sourceManifestHash": "cd53a7f937c3a3e2ce4336c608e6dc5887fb1b30cdb3521b5a8079627376571e",
       "display": {
         "icon": "plug",
         "category": "connect",
         "summary": "Generic connector ingress edge and credential broker; per-provider connector biomes consume its services."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "container-registry",
@@ -1960,7 +2329,9 @@
       "services": [
         "container-registry-api"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
         {
           "consumerService": "container-registry-api",
@@ -1973,9 +2344,9 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
@@ -1990,7 +2361,7 @@
             "repo": "repos/xema-base",
             "path": "repos/xema-base/biomes/workload-runtime",
             "version": "0.1.0",
-            "sourceManifestHash": "021012bff91a63be2f7981c8ba54fa4b1c1898349f2f3770484d475025913d86"
+            "sourceManifestHash": "cb34e70cc83af8018f6bf51b56818957e43a0c7ee637b2da6cab31562519cfb9"
           }
         }
       ],
@@ -2000,12 +2371,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "a81a72b151ae1ac8f4d423188db7d1185d55ef161a06ae067b4ad73f1da996a2",
+      "sourceManifestHash": "d0069f417878418767e547da75d78dd9b18624b93ac49ddd7785aaa611bfd583",
       "display": {
         "icon": "container",
         "category": "build",
         "summary": "OCI image registry adapter and workspace-image baker: proxies push/pull and bakes custom worker images."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "knowledge-base",
@@ -2020,7 +2393,9 @@
       "services": [
         "knowledge-base-api"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
         {
           "consumerService": "knowledge-base-api",
@@ -2032,7 +2407,7 @@
             "repo": "repos/xema-base",
             "path": "repos/xema-base/biomes/authorization",
             "version": "0.1.0",
-            "sourceManifestHash": "757ad1901fbeaeb8e2ff20bf7f5aa381e03ae9a72c43ac9a88eabc1af92371a1"
+            "sourceManifestHash": "3687551f3883d53cba6c201ecb449d4aabb4005a9ccd1eb429732fb497c912d0"
           }
         },
         {
@@ -2059,12 +2434,25 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
+        },
+        {
+          "consumerService": "knowledge-base-api",
+          "requiredService": "public-gateway-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "public-gateway",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/public-gateway",
+            "version": "0.1.0",
+            "sourceManifestHash": "67c87b76865552edf03521f292110ecb513f99f93ba2078bcdaac7b8ca9325b2"
+          }
         }
       ],
       "displayName": "Knowledge Base",
@@ -2073,12 +2461,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "05352e300ab561ccd98189bb63012174d79b25f3f0a8c31aaecf04a123f903f0",
+      "sourceManifestHash": "69e14d6a7030a9ba6d3328b1368adb60ff1d08bbf9916817fa991b28927708d2",
       "display": {
         "icon": "book-open",
         "category": "knowledge",
         "summary": "Knowledge base primitive: document storage plus semantic search consumed across tiers."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "mcp-router",
@@ -2093,7 +2483,9 @@
       "services": [
         "mcp-gateway-api"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
         {
           "consumerService": "mcp-gateway-api",
@@ -2105,7 +2497,20 @@
             "repo": "repos/xema-base",
             "path": "repos/xema-base/biomes/biome-host",
             "version": "0.1.0",
-            "sourceManifestHash": "6e522468aff28ebd3f8989d63f061cf8ead477a37844f804ae8b0f434f0258ff"
+            "sourceManifestHash": "8183c2181ec479bbd2c1d68abb3574a2ec2c6b50926dcbb200ecb5d9eb256671"
+          }
+        },
+        {
+          "consumerService": "mcp-gateway-api",
+          "requiredService": "credential-broker-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "connector-platform",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/connector-platform",
+            "version": "0.1.0",
+            "sourceManifestHash": "cd53a7f937c3a3e2ce4336c608e6dc5887fb1b30cdb3521b5a8079627376571e"
           }
         },
         {
@@ -2119,9 +2524,9 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
@@ -2136,7 +2541,7 @@
             "repo": "repos/xema-base",
             "path": "repos/xema-base/biomes/org-database-pool",
             "version": "0.1.0",
-            "sourceManifestHash": "4a9077cbda9fb20adf207682173a3df88398ff7288428b9a356213000c68997c"
+            "sourceManifestHash": "019abba8218c9dadb0be490d6c9f42c58e390c8a89dd0c0bfe631f3eb0210765"
           }
         }
       ],
@@ -2146,12 +2551,79 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "65ccf9ef1e56529751c54547d4be240ae8d0464c2b746bf1439f3b97fa43272f",
+      "sourceManifestHash": "6cd86be9d18a5c3dfd53ea00ac111be322d8e2423260beee4a2a463360fe41bd",
       "display": {
         "icon": "network",
         "category": "connect",
         "summary": "External MCP bridge: routes agent MCP tool calls to registered or biome-shipped MCP servers."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
+    },
+    {
+      "id": "output-surface-control",
+      "version": "1.0.0",
+      "tier": "base",
+      "target": "server",
+      "origin": "first-party",
+      "mandatory": false,
+      "installPolicy": "default-selected",
+      "repo": "repos/xema-base",
+      "path": "repos/xema-base/biomes/kernel/output-surface-control",
+      "services": [],
+      "serviceDatabases": {},
+      "runtimeComponents": [],
+      "hostModules": [],
+      "serviceDependencies": [],
+      "displayName": "Output Surface Control",
+      "packageName": "@xemahq/biomes-kernel-output-surface-control",
+      "requiresServerBiomes": [
+        "runtime"
+      ],
+      "optionalServerBiomes": [],
+      "audience": "org",
+      "storeListed": false,
+      "sourceManifestHash": "c963d8f49323c402e322582e9e396c8a538b205c9ff8f363aca1400e6c65853d",
+      "display": {
+        "icon": "refresh-cw",
+        "category": "operate",
+        "summary": "Output-surface control tools: re-trigger the deterministic install-to-start pipeline over the workspace-proxy API."
+      },
+      "systemSurface": false,
+      "launch": "static"
+    },
+    {
+      "id": "output-surface-inspector",
+      "version": "1.0.0",
+      "tier": "base",
+      "target": "server",
+      "origin": "first-party",
+      "mandatory": false,
+      "installPolicy": "default-selected",
+      "repo": "repos/xema-base",
+      "path": "repos/xema-base/biomes/kernel/output-surface-inspector",
+      "services": [],
+      "serviceDatabases": {},
+      "runtimeComponents": [],
+      "hostModules": [],
+      "serviceDependencies": [],
+      "displayName": "Output Surface Inspector",
+      "packageName": "@xemahq/biomes-kernel-output-surface-inspector",
+      "requiresServerBiomes": [
+        "output-surface-control",
+        "runtime"
+      ],
+      "optionalServerBiomes": [],
+      "audience": "org",
+      "storeListed": false,
+      "sourceManifestHash": "e6998235405dfbfa682fa77b7074e4383e50387fad959db2f3822b05c55af932",
+      "display": {
+        "icon": "search",
+        "category": "operate",
+        "summary": "Output-surface inspection: browser tool, inspector sub-agent, and bridge for read-only diagnosis of live pages."
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "policy-distributor",
@@ -2166,7 +2638,9 @@
       "services": [
         "policy-distributor-api"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
         {
           "consumerService": "policy-distributor-api",
@@ -2179,9 +2653,9 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
@@ -2198,7 +2672,9 @@
         "icon": "file-lock",
         "category": "governance",
         "summary": "Central OPA bundle distributor: serves signed, versioned policy bundles over the OPA Bundle Service protocol."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "project-registry",
@@ -2213,7 +2689,9 @@
       "services": [
         "project-registry-api"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
         {
           "consumerService": "project-registry-api",
@@ -2226,9 +2704,9 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
@@ -2245,7 +2723,74 @@
         "icon": "folders",
         "category": "platform",
         "summary": "Project and membership management: owns project identity, membership, and role assignment."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
+    },
+    {
+      "id": "studio-author",
+      "version": "1.0.0",
+      "tier": "base",
+      "target": "server",
+      "origin": "first-party",
+      "mandatory": false,
+      "installPolicy": "default-selected",
+      "repo": "repos/xema-base",
+      "path": "repos/xema-base/biomes/kernel/studio-author",
+      "services": [],
+      "serviceDatabases": {},
+      "runtimeComponents": [],
+      "hostModules": [],
+      "serviceDependencies": [],
+      "displayName": "Studio Author",
+      "packageName": "@xemahq/biomes-kernel-studio-author",
+      "requiresServerBiomes": [
+        "runtime",
+        "subagents"
+      ],
+      "optionalServerBiomes": [],
+      "audience": "org",
+      "storeListed": false,
+      "sourceManifestHash": "862461feecc25209b9de3b689ee74f0a20434a506bd8b2de1ffe7702a417aad6",
+      "display": {
+        "icon": "wand",
+        "category": "build",
+        "summary": "Authoring co-pilot for Agent Studio: workflow/spec authors and a build-with-an-agent profile that emits typed proposals."
+      },
+      "systemSurface": false,
+      "launch": "static"
+    },
+    {
+      "id": "subagents",
+      "version": "1.0.0",
+      "tier": "base",
+      "target": "server",
+      "origin": "first-party",
+      "mandatory": false,
+      "installPolicy": "default-selected",
+      "repo": "repos/xema-base",
+      "path": "repos/xema-base/biomes/kernel/subagents",
+      "services": [],
+      "serviceDatabases": {},
+      "runtimeComponents": [],
+      "hostModules": [],
+      "serviceDependencies": [],
+      "displayName": "Xema Universal Subagents",
+      "packageName": "@xemahq/biomes-kernel-subagents",
+      "requiresServerBiomes": [
+        "runtime"
+      ],
+      "optionalServerBiomes": [],
+      "audience": "org",
+      "storeListed": false,
+      "sourceManifestHash": "033135a9948495a19b38e1602269a8f76559da0eed9a88952d09d8303434a8cf",
+      "display": {
+        "icon": "users",
+        "category": "runtime",
+        "summary": "Canonical base roster of platform subagents and gate-reviewers, plus their MCP tool-profiles."
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "web-access",
@@ -2260,7 +2805,9 @@
       "services": [
         "web-access-api"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
         {
           "consumerService": "web-access-api",
@@ -2273,9 +2820,9 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
@@ -2292,7 +2839,9 @@
         "icon": "globe",
         "category": "runtime",
         "summary": "Governed public-web access — the ONE audited door for fetching and searching the public internet."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "workflow-runtime",
@@ -2309,7 +2858,9 @@
         "workflow-engine-api",
         "workflow-runtime-worker"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
         {
           "consumerService": "deliverable-specs-api",
@@ -2321,7 +2872,7 @@
             "repo": "repos/xema-base",
             "path": "repos/xema-base/biomes/biome-host",
             "version": "0.1.0",
-            "sourceManifestHash": "6e522468aff28ebd3f8989d63f061cf8ead477a37844f804ae8b0f434f0258ff"
+            "sourceManifestHash": "8183c2181ec479bbd2c1d68abb3574a2ec2c6b50926dcbb200ecb5d9eb256671"
           }
         },
         {
@@ -2335,13 +2886,26 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
         },
+        {
+          "consumerService": "deliverable-specs-api",
+          "requiredService": "resource-governance-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "resource-governance",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/resource-governance",
+            "version": "0.1.0",
+            "sourceManifestHash": "dd08d16a77d775af78133113d1bb3ae659adc8af1d56d4569ee6e27f7426c37c"
+          }
+        },
         {
           "consumerService": "workflow-engine-api",
           "requiredService": "biome-host-api",
@@ -2352,7 +2916,20 @@
             "repo": "repos/xema-base",
             "path": "repos/xema-base/biomes/biome-host",
             "version": "0.1.0",
-            "sourceManifestHash": "6e522468aff28ebd3f8989d63f061cf8ead477a37844f804ae8b0f434f0258ff"
+            "sourceManifestHash": "8183c2181ec479bbd2c1d68abb3574a2ec2c6b50926dcbb200ecb5d9eb256671"
+          }
+        },
+        {
+          "consumerService": "workflow-engine-api",
+          "requiredService": "deliverable-specs-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "workflow-runtime",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/workflow-runtime",
+            "version": "0.1.0",
+            "sourceManifestHash": "f7d826adb9e76e1e71a68868b1e1e0615a467c9d1661b1af767541b9a978dd00"
           }
         },
         {
@@ -2366,12 +2943,25 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
+        },
+        {
+          "consumerService": "workflow-engine-api",
+          "requiredService": "resource-governance-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "resource-governance",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/resource-governance",
+            "version": "0.1.0",
+            "sourceManifestHash": "dd08d16a77d775af78133113d1bb3ae659adc8af1d56d4569ee6e27f7426c37c"
+          }
         }
       ],
       "displayName": "Workflow Runtime",
@@ -2380,12 +2970,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "21f6e8eb656f1a5e73e1980401e56c34eee55964bace21db87d065e2f690cb06",
+      "sourceManifestHash": "f7d826adb9e76e1e71a68868b1e1e0615a467c9d1661b1af767541b9a978dd00",
       "display": {
         "icon": "workflow",
         "category": "runtime",
         "summary": "Workflow primitive: DSL compilation, Temporal-driven workflow execution, and the typed deliverable-spec store."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "workspace-orchestrator",
@@ -2400,7 +2992,9 @@
       "services": [
         "workspace-orchestrator-api"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
         {
           "consumerService": "workspace-orchestrator-api",
@@ -2412,7 +3006,7 @@
             "repo": "repos/xema-base",
             "path": "repos/xema-base/biomes/biome-host",
             "version": "0.1.0",
-            "sourceManifestHash": "6e522468aff28ebd3f8989d63f061cf8ead477a37844f804ae8b0f434f0258ff"
+            "sourceManifestHash": "8183c2181ec479bbd2c1d68abb3574a2ec2c6b50926dcbb200ecb5d9eb256671"
           }
         },
         {
@@ -2426,9 +3020,9 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
@@ -2444,13 +3038,26 @@
               "repositoryUrl": "https://github.com/xema-dev/llm-gateway-api.git",
               "repo": "submodules/llm-gateway-api",
               "path": "submodules/llm-gateway-api/package.json",
-              "sourceCommit": "79e4da92d86f8a7dc7605a8eca6837006495ccf5",
+              "sourceCommit": "83db971a3bc72d5e0d633c8e96215de850dc7359",
               "version": "1.0.0",
               "sourceManifestHash": "a862e41a632f3aecf1d6037b842a70ca5be91c996a89a68bd8200068355f43b8",
               "imageKey": "llm-gateway-api"
             }
           }
         },
+        {
+          "consumerService": "workspace-orchestrator-api",
+          "requiredService": "resource-governance-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "resource-governance",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/resource-governance",
+            "version": "0.1.0",
+            "sourceManifestHash": "dd08d16a77d775af78133113d1bb3ae659adc8af1d56d4569ee6e27f7426c37c"
+          }
+        },
         {
           "consumerService": "workspace-orchestrator-api",
           "requiredService": "workload-runtime-api",
@@ -2461,7 +3068,7 @@
             "repo": "repos/xema-base",
             "path": "repos/xema-base/biomes/workload-runtime",
             "version": "0.1.0",
-            "sourceManifestHash": "021012bff91a63be2f7981c8ba54fa4b1c1898349f2f3770484d475025913d86"
+            "sourceManifestHash": "cb34e70cc83af8018f6bf51b56818957e43a0c7ee637b2da6cab31562519cfb9"
           }
         },
         {
@@ -2487,7 +3094,7 @@
             "repo": "repos/xema-base",
             "path": "repos/xema-base/biomes/xema-capability-router",
             "version": "0.1.0",
-            "sourceManifestHash": "39a08d58a36cc8c469740f1ce28eed1d72b1ec55fb3a2c40645020c533bcc1f9"
+            "sourceManifestHash": "4ccc5c67859a6576a8e994d6a156bb5a3035c5ae1dedc3708d0f2da101cd564f"
           }
         }
       ],
@@ -2497,12 +3104,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "5c311b32be20adb044ad1687cb97d8c38f2e3885664d54063ea866261f85fe58",
+      "sourceManifestHash": "f2aee41b0bd7f68b970a4357154d914fe8f810be4ae2b66bb7876ff2b4600a7a",
       "display": {
         "icon": "layout-grid",
         "category": "runtime",
         "summary": "Per-session workspace lifecycle: creates, hibernates, and reaps workspace allocations."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "workspace-proxy",
@@ -2517,7 +3126,9 @@
       "services": [
         "workspace-materialization-api"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
         {
           "consumerService": "workspace-materialization-api",
@@ -2530,9 +3141,9 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
@@ -2549,7 +3160,9 @@
         "icon": "route",
         "category": "runtime",
         "summary": "Per-allocation HTTP proxy: routes session and control-plane traffic into the workspace runtime worker."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "xema-biome-runner",
@@ -2564,7 +3177,9 @@
       "services": [
         "xema-biome-runner"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [],
       "displayName": "Xema Biome Runner",
       "packageName": "@xemahq/biomes-xema-biome-runner",
@@ -2577,7 +3192,60 @@
         "icon": "play",
         "category": "runtime",
         "summary": "Generic biome executor: in-process host for biome-shipped Temporal workflows, activities, and capabilities."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
+    },
+    {
+      "id": "xema-shell",
+      "version": "0.1.0",
+      "tier": "base",
+      "target": "server",
+      "origin": "first-party",
+      "mandatory": false,
+      "installPolicy": "default-selected",
+      "repo": "repos/xema-base",
+      "path": "repos/xema-base/biomes/xema-shell",
+      "services": [
+        "xema-shell-api"
+      ],
+      "serviceDatabases": {},
+      "runtimeComponents": [],
+      "hostModules": [],
+      "serviceDependencies": [
+        {
+          "consumerService": "xema-shell-api",
+          "requiredService": "identity-api",
+          "owner": {
+            "kind": "platform",
+            "source": {
+              "name": "identity-api",
+              "tier": "infra",
+              "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
+              "repo": "submodules/identity-api",
+              "path": "submodules/identity-api/package.json",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
+              "version": "0.0.2",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
+              "imageKey": "identity-api"
+            }
+          }
+        }
+      ],
+      "displayName": "Xema Shell",
+      "packageName": "@xemahq/biomes-xema-shell",
+      "requiresServerBiomes": [],
+      "optionalServerBiomes": [],
+      "audience": "org",
+      "storeListed": true,
+      "sourceManifestHash": "80d843d3537c281c6241094f6f4c358afffd40d73d92b9672e9e58d5d123e85f",
+      "display": {
+        "icon": "terminal",
+        "category": "runtime",
+        "summary": "Xema OS shell: the `xema …` command surface, XVFS path resolution, and the concept object slice."
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "mailops",
@@ -2592,7 +3260,9 @@
       "services": [
         "mailops-api"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
         {
           "consumerService": "mailops-api",
@@ -2604,7 +3274,7 @@
             "repo": "repos/xema-base",
             "path": "repos/xema-base/biomes/agent-runtime",
             "version": "0.1.0",
-            "sourceManifestHash": "a13807cf05146aca50ee7964e66af7844f0bcfd34e35352227944ec81997461f"
+            "sourceManifestHash": "5336acb3131601e721d6d54626c70d1cbbb8f424803f43e974a8ced764a9ffe9"
           }
         },
         {
@@ -2617,7 +3287,7 @@
             "repo": "repos/xema-base",
             "path": "repos/xema-base/biomes/authorization",
             "version": "0.1.0",
-            "sourceManifestHash": "757ad1901fbeaeb8e2ff20bf7f5aa381e03ae9a72c43ac9a88eabc1af92371a1"
+            "sourceManifestHash": "3687551f3883d53cba6c201ecb449d4aabb4005a9ccd1eb429732fb497c912d0"
           }
         },
         {
@@ -2643,7 +3313,7 @@
             "repo": "repos/xema-base",
             "path": "repos/xema-base/biomes/connector-platform",
             "version": "0.1.0",
-            "sourceManifestHash": "36862dd4bf78175095aab7fc39fcead6b0993cd48604b3a054e18132374fc9d0"
+            "sourceManifestHash": "cd53a7f937c3a3e2ce4336c608e6dc5887fb1b30cdb3521b5a8079627376571e"
           }
         },
         {
@@ -2656,7 +3326,7 @@
             "repo": "repos/xema-base",
             "path": "repos/xema-base/biomes/connector-platform",
             "version": "0.1.0",
-            "sourceManifestHash": "36862dd4bf78175095aab7fc39fcead6b0993cd48604b3a054e18132374fc9d0"
+            "sourceManifestHash": "cd53a7f937c3a3e2ce4336c608e6dc5887fb1b30cdb3521b5a8079627376571e"
           }
         },
         {
@@ -2670,9 +3340,9 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
@@ -2687,7 +3357,7 @@
             "repo": "repos/xema-base",
             "path": "repos/xema-base/biomes/workflow-runtime",
             "version": "0.1.0",
-            "sourceManifestHash": "21f6e8eb656f1a5e73e1980401e56c34eee55964bace21db87d065e2f690cb06"
+            "sourceManifestHash": "f7d826adb9e76e1e71a68868b1e1e0615a467c9d1661b1af767541b9a978dd00"
           }
         },
         {
@@ -2700,7 +3370,7 @@
             "repo": "repos/xema-base",
             "path": "repos/xema-base/biomes/xema-capability-router",
             "version": "0.1.0",
-            "sourceManifestHash": "39a08d58a36cc8c469740f1ce28eed1d72b1ec55fb3a2c40645020c533bcc1f9"
+            "sourceManifestHash": "4ccc5c67859a6576a8e994d6a156bb5a3035c5ae1dedc3708d0f2da101cd564f"
           }
         }
       ],
@@ -2710,12 +3380,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "6fe5b908a01770ca23f86a1ffa478f6c51351b59edadc9167fe74979b36b8db5",
+      "sourceManifestHash": "59dd126a854e2e6bded840f7250ac1cc023266a9749bc33d42ad8f548f614640",
       "display": {
         "icon": "mail",
         "category": "connect",
         "summary": "Email as a workflow entrypoint — intake, understanding, routing, capability call-out and reply."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "search",
@@ -2730,7 +3402,9 @@
       "services": [
         "search-api"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
         {
           "consumerService": "search-api",
@@ -2756,9 +3430,9 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
@@ -2774,7 +3448,7 @@
               "repositoryUrl": "https://github.com/xema-dev/llm-gateway-api.git",
               "repo": "submodules/llm-gateway-api",
               "path": "submodules/llm-gateway-api/package.json",
-              "sourceCommit": "79e4da92d86f8a7dc7605a8eca6837006495ccf5",
+              "sourceCommit": "83db971a3bc72d5e0d633c8e96215de850dc7359",
               "version": "1.0.0",
               "sourceManifestHash": "a862e41a632f3aecf1d6037b842a70ca5be91c996a89a68bd8200068355f43b8",
               "imageKey": "llm-gateway-api"
@@ -2791,7 +3465,7 @@
             "repo": "repos/xema-base",
             "path": "repos/xema-base/biomes/agent-runtime",
             "version": "0.1.0",
-            "sourceManifestHash": "a13807cf05146aca50ee7964e66af7844f0bcfd34e35352227944ec81997461f"
+            "sourceManifestHash": "5336acb3131601e721d6d54626c70d1cbbb8f424803f43e974a8ced764a9ffe9"
           }
         },
         {
@@ -2817,7 +3491,7 @@
             "repo": "repos/xema-base",
             "path": "repos/xema-base/biomes/xema-capability-router",
             "version": "0.1.0",
-            "sourceManifestHash": "39a08d58a36cc8c469740f1ce28eed1d72b1ec55fb3a2c40645020c533bcc1f9"
+            "sourceManifestHash": "4ccc5c67859a6576a8e994d6a156bb5a3035c5ae1dedc3708d0f2da101cd564f"
           }
         }
       ],
@@ -2832,7 +3506,9 @@
         "icon": "search",
         "category": "knowledge",
         "summary": "Full-text and vector search facade over OpenSearch for cross-entity discovery."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     }
   ],
   "platformServices": [
@@ -2845,7 +3521,7 @@
         "repositoryUrl": "https://github.com/xema-dev/event-hub-api.git",
         "repo": "submodules/event-hub-api",
         "path": "submodules/event-hub-api/package.json",
-        "sourceCommit": "8ff3acef9ca979948b2b1eb95c3964f97caf16b1",
+        "sourceCommit": "6bc36b61db3ef7c9384410c1a151dab4dd1bd559",
         "version": "2.0.0",
         "sourceManifestHash": "2e57d7356ed288b00e35f3ee4aa542cdbb1eb25d94a8fecbc2bda76cedd5f995",
         "imageKey": "event-hub-api"
@@ -2860,9 +3536,9 @@
         "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
         "repo": "submodules/identity-api",
         "path": "submodules/identity-api/package.json",
-        "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+        "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
         "version": "0.0.2",
-        "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+        "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
         "imageKey": "identity-api"
       }
     },
@@ -2875,7 +3551,7 @@
         "repositoryUrl": "https://github.com/xema-dev/llm-gateway-api.git",
         "repo": "submodules/llm-gateway-api",
         "path": "submodules/llm-gateway-api/package.json",
-        "sourceCommit": "79e4da92d86f8a7dc7605a8eca6837006495ccf5",
+        "sourceCommit": "83db971a3bc72d5e0d633c8e96215de850dc7359",
         "version": "1.0.0",
         "sourceManifestHash": "a862e41a632f3aecf1d6037b842a70ca5be91c996a89a68bd8200068355f43b8",
         "imageKey": "llm-gateway-api"
@@ -2890,7 +3566,7 @@
         "repositoryUrl": "https://github.com/xema-dev/secrets-api.git",
         "repo": "submodules/secrets-api",
         "path": "submodules/secrets-api/package.json",
-        "sourceCommit": "5cb3114aa9fee7eeed42aeeea0ddd2d5a1ed8722",
+        "sourceCommit": "34ae47ba5dad3bf8674eedf63851b0a161d1645b",
         "version": "1.0.0",
         "sourceManifestHash": "51d6db6fac73a58b167eb7615c371fc75dfdb13a294c22ddb98c18d99df620a7",
         "imageKey": "secrets-api"
@@ -2898,19 +3574,63 @@
     },
     {
       "name": "xema-kernel-server",
-      "tier": "kernel"
+      "tier": "kernel",
+      "source": {
+        "name": "xema-kernel-server",
+        "tier": "kernel",
+        "repositoryUrl": "https://github.com/xema-dev/xema-base.git",
+        "repo": "repos/xema-base",
+        "path": "repos/xema-base/kernel/xema-kernel-server/package.json",
+        "sourceCommit": "b29524fbad5baa50f68005ed266a62c886cce69e",
+        "version": "0.1.0",
+        "sourceManifestHash": "d84b71fafcbee7cdfe7f3b329a02578228bb008f4352788786869eaada86fce4",
+        "imageKey": "xema-kernel-server"
+      }
     },
     {
       "name": "docs-api",
-      "tier": "platform"
+      "tier": "platform",
+      "source": {
+        "name": "docs-api",
+        "tier": "platform",
+        "repositoryUrl": "https://github.com/xema-dev/xema-docs.git",
+        "repo": "repos/xema-docs",
+        "path": "repos/xema-docs/package.json",
+        "sourceCommit": "653663d3dfd88a32be922cfb0ac111808adbec97",
+        "version": "0.0.1",
+        "sourceManifestHash": "10770a77153a2549a3e1af1142e3c52f1125f9b7a178937f1c05f76ce88e7cbc",
+        "imageKey": "docs-api"
+      }
     },
     {
       "name": "opencode-image-prepuller",
-      "tier": "platform"
+      "tier": "platform",
+      "source": {
+        "name": "opencode-image-prepuller",
+        "tier": "platform",
+        "repositoryUrl": "https://github.com/xema-dev/xema-base.git",
+        "repo": "repos/xema-base",
+        "path": "repos/xema-base/biomes/opencode-runtime/xema-biome.json",
+        "sourceCommit": "b29524fbad5baa50f68005ed266a62c886cce69e",
+        "version": "0.1.0",
+        "sourceManifestHash": "4b38bba65e002f24e26ef4572ffa0e123da6cb0cdf0cd2fa5b2582e969abeb94",
+        "imageKey": "opencode-worker"
+      }
     },
     {
       "name": "xema-host-web",
-      "tier": "edge"
+      "tier": "edge",
+      "source": {
+        "name": "xema-host-web",
+        "tier": "edge",
+        "repositoryUrl": "https://github.com/xema-dev/xema-host-web.git",
+        "repo": "submodules/xema-host-web",
+        "path": "submodules/xema-host-web/package.json",
+        "sourceCommit": "0c61f431abc8543fe9475535640f339311083966",
+        "version": "2.2.0",
+        "sourceManifestHash": "30300d6cf87a55727209e9a9580500aaf9094659a4043481c74b33deb3163005",
+        "imageKey": "xema-host-web"
+      }
     }
   ],
   "capabilityDomainOwners": [
@@ -2990,6 +3710,10 @@
       "domain": "studio",
       "biomeId": "studio-author"
     },
+    {
+      "domain": "template",
+      "biomeId": "template-registry"
+    },
     {
       "domain": "web",
       "biomeId": "web-access"
@@ -3011,5 +3735,5 @@
       "biomeId": "xema-shell"
     }
   ],
-  "inputHash": "4c31b374a83013f1f375ce030f45605b0a3ba6c4a27a48efaae64167ea85b621"
+  "inputHash": "6b50936d5d1f493b493e524642a083ebf9e87c11c0beacf94538a35a626d8b98"
 }