npm - @xemahq/xema - Versions diffs - 0.15.13 → 0.16.1 - Mend

@xemahq/xema 0.15.13 → 0.16.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (47) hide show

package/dist/assets/appliance-base/distribution.lock.json +1830 -702
package/dist/assets/appliance-base/images.lock.json +272 -313
package/dist/assets/appliance-lean/distribution.lock.json +1171 -447
package/dist/assets/appliance-lean/images.lock.json +218 -201
package/dist/assets/boot-graph.json +30 -11
package/dist/assets/cloud/distribution.lock.json +1872 -777
package/dist/assets/cloud/images.lock.json +284 -276
package/dist/assets/core/distribution.lock.json +1199 -473
package/dist/assets/core/images.lock.json +218 -196
package/dist/assets/distribution-assets.manifest.json +30 -30
package/dist/assets/minimal/distribution.lock.json +1089 -436
package/dist/assets/minimal/images.lock.json +183 -188
package/dist/assets/oss/distribution.lock.json +1851 -768
package/dist/assets/oss/images.lock.json +274 -315
package/dist/assets/starter/distribution.lock.json +1252 -514
package/dist/assets/starter/images.lock.json +223 -228
package/dist/commands/biome.js +1 -1
package/dist/commands/biome.js.map +1 -1
package/dist/runtime/biome-dev.d.ts.map +1 -1
package/dist/runtime/biome-dev.js +0 -5
package/dist/runtime/biome-dev.js.map +1 -1
package/dist/runtime/biome-scaffold-manifest.d.ts +3 -8
package/dist/runtime/biome-scaffold-manifest.d.ts.map +1 -1
package/dist/runtime/biome-scaffold-manifest.js +2 -9
package/dist/runtime/biome-scaffold-manifest.js.map +1 -1
package/dist/runtime/biome-scaffold.d.ts +3 -3
package/dist/runtime/biome-scaffold.d.ts.map +1 -1
package/dist/runtime/biome-scaffold.js.map +1 -1
package/dist/runtime/biome-validate.d.ts.map +1 -1
package/dist/runtime/biome-validate.js +28 -50
package/dist/runtime/biome-validate.js.map +1 -1
package/dist/runtime/distribution/available-biome.d.ts.map +1 -1
package/dist/runtime/distribution/available-biome.js +80 -14
package/dist/runtime/distribution/available-biome.js.map +1 -1
package/dist/runtime/distribution/compose.d.ts.map +1 -1
package/dist/runtime/distribution/compose.js +2 -9
package/dist/runtime/distribution/compose.js.map +1 -1
package/dist/runtime/platform-services.d.ts.map +1 -1
package/dist/runtime/platform-services.js +2 -2
package/dist/runtime/platform-services.js.map +1 -1
package/dist/runtime/sources/manifest-walk.d.ts +1 -0
package/dist/runtime/sources/manifest-walk.d.ts.map +1 -1
package/dist/runtime/sources/manifest-walk.js +9 -2
package/dist/runtime/sources/manifest-walk.js.map +1 -1
package/dist/runtime/waves.d.ts.map +1 -1
package/dist/runtime/waves.js.map +1 -1
package/package.json +5 -9

package/dist/assets/core/distribution.lock.json CHANGED Viewed

@@ -1,90 +1,7 @@
 {
-  "schemaVersion": 1,
+  "schemaVersion": 2,
   "distributionId": "core",
   "biomes": [
-    {
-      "id": "contribution-test",
-      "version": "0.0.1",
-      "tier": "kernel",
-      "target": "server",
-      "origin": "first-party",
-      "mandatory": true,
-      "installPolicy": "required",
-      "repo": "repos/xema-base",
-      "path": "repos/xema-base/biomes/kernel/contribution-test",
-      "services": [],
-      "runtimeComponents": [],
-      "serviceDependencies": [],
-      "displayName": "Contribution Protocol Test Biome",
-      "packageName": "@xemahq/biomes-kernel-contribution-test",
-      "requiresServerBiomes": [],
-      "optionalServerBiomes": [],
-      "audience": "org",
-      "storeListed": false,
-      "sourceManifestHash": "a5989a0adba0fae65f1cd3107b38896d1df9742ba35d0de670be7f10fa43aeb7",
-      "display": {
-        "icon": "flask-conical",
-        "category": "build",
-        "summary": "Synthetic kernel test biome exercising the XSI Contribution Protocol, capability resolution, and boundary enforcement."
-      }
-    },
-    {
-      "id": "output-surface-control",
-      "version": "1.0.0",
-      "tier": "kernel",
-      "target": "server",
-      "origin": "first-party",
-      "mandatory": true,
-      "installPolicy": "required",
-      "repo": "repos/xema-base",
-      "path": "repos/xema-base/biomes/kernel/output-surface-control",
-      "services": [],
-      "runtimeComponents": [],
-      "serviceDependencies": [],
-      "displayName": "Output Surface Control",
-      "packageName": "@xemahq/biomes-kernel-output-surface-control",
-      "requiresServerBiomes": [
-        "runtime"
-      ],
-      "optionalServerBiomes": [],
-      "audience": "org",
-      "storeListed": false,
-      "sourceManifestHash": "8c773b92dc42534da668a0857840810ad581066db735e27a8cdbdb750a0b10b9",
-      "display": {
-        "icon": "refresh-cw",
-        "category": "operate",
-        "summary": "Output-surface control tools: re-trigger the deterministic install-to-start pipeline over the workspace-proxy API."
-      }
-    },
-    {
-      "id": "output-surface-inspector",
-      "version": "1.0.0",
-      "tier": "kernel",
-      "target": "server",
-      "origin": "first-party",
-      "mandatory": true,
-      "installPolicy": "required",
-      "repo": "repos/xema-base",
-      "path": "repos/xema-base/biomes/kernel/output-surface-inspector",
-      "services": [],
-      "runtimeComponents": [],
-      "serviceDependencies": [],
-      "displayName": "Output Surface Inspector",
-      "packageName": "@xemahq/biomes-kernel-output-surface-inspector",
-      "requiresServerBiomes": [
-        "output-surface-control",
-        "runtime"
-      ],
-      "optionalServerBiomes": [],
-      "audience": "org",
-      "storeListed": false,
-      "sourceManifestHash": "b6b0bfb9861229725e487a3d16f1f7d842fb5afeed545e7e43d3b7cc8abdd289",
-      "display": {
-        "icon": "search",
-        "category": "operate",
-        "summary": "Output-surface inspection: browser tool, inspector sub-agent, and bridge for read-only diagnosis of live pages."
-      }
-    },
     {
       "id": "runtime",
       "version": "1.0.0",
@@ -96,7 +13,9 @@
       "repo": "repos/xema-base",
       "path": "repos/xema-base/biomes/kernel/runtime",
       "services": [],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [],
       "displayName": "Xema Runtime Kernel",
       "packageName": "@xemahq/biomes-kernel-runtime",
@@ -109,64 +28,9 @@
         "icon": "box",
         "category": "runtime",
         "summary": "Kernel runtime baseline: base workspace manifests, custom OpenCode tools and plugins, and the canonical MCP catalog."
-      }
-    },
-    {
-      "id": "studio-author",
-      "version": "1.0.0",
-      "tier": "kernel",
-      "target": "server",
-      "origin": "first-party",
-      "mandatory": true,
-      "installPolicy": "required",
-      "repo": "repos/xema-base",
-      "path": "repos/xema-base/biomes/kernel/studio-author",
-      "services": [],
-      "runtimeComponents": [],
-      "serviceDependencies": [],
-      "displayName": "Studio Author",
-      "packageName": "@xemahq/biomes-kernel-studio-author",
-      "requiresServerBiomes": [
-        "runtime",
-        "subagents"
-      ],
-      "optionalServerBiomes": [],
-      "audience": "org",
-      "storeListed": false,
-      "sourceManifestHash": "9c0a9522ef36140ce704d5be39ae44cde175b1addec90ba56d36970ace803f1e",
-      "display": {
-        "icon": "wand",
-        "category": "build",
-        "summary": "Authoring co-pilot for Agent Studio: workflow/spec authors and a build-with-an-agent profile that emits typed proposals."
-      }
-    },
-    {
-      "id": "subagents",
-      "version": "1.0.0",
-      "tier": "kernel",
-      "target": "server",
-      "origin": "first-party",
-      "mandatory": true,
-      "installPolicy": "required",
-      "repo": "repos/xema-base",
-      "path": "repos/xema-base/biomes/kernel/subagents",
-      "services": [],
-      "runtimeComponents": [],
-      "serviceDependencies": [],
-      "displayName": "Xema Universal Subagents",
-      "packageName": "@xemahq/biomes-kernel-subagents",
-      "requiresServerBiomes": [
-        "runtime"
-      ],
-      "optionalServerBiomes": [],
-      "audience": "org",
-      "storeListed": false,
-      "sourceManifestHash": "c7d66ce06a303e40ae4901694c9617fab3645185752cce5f214cd29f9bed24c0",
-      "display": {
-        "icon": "users",
-        "category": "runtime",
-        "summary": "Canonical roster of platform subagents and gate-reviewers every install boots with, plus their MCP tool-profiles."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "activity-web",
@@ -179,7 +43,9 @@
       "repo": "submodules/xema-host-web",
       "path": "submodules/xema-host-web/biomes/system/activity-web",
       "services": [],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [],
       "displayName": "Activity (Web)",
       "packageName": "@xemahq/biomes-system-activity-web",
@@ -189,12 +55,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "e6ca64b0c2e26a4a405a7ceea824050b31dd34dbe22ac4fcbc38134cecf26ba5",
+      "sourceManifestHash": "4243795eb988fd49f02f0ddf568d113f490e3dcf35cdcfc8aa1453e4956a685a",
       "display": {
         "icon": "activity",
         "category": "operate",
         "summary": "Track activity and audit events."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "audit",
@@ -209,7 +77,9 @@
       "services": [
         "audit-log-api"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
         {
           "consumerService": "audit-log-api",
@@ -222,9 +92,9 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
@@ -236,12 +106,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "47d7d7203aed8644e0d4b768b5e6781fa0e1bc5ca5e1cffa5e77df9a27e8f155",
+      "sourceManifestHash": "64c24fbe6a8394eee5ecdb0163bc88c2dd52f1e8bdbc0588810e5502b61f7128",
       "display": {
         "icon": "scroll-text",
         "category": "governance",
         "summary": "Tamper-evident, append-only audit log of platform actions for compliance and forensics."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "authorization",
@@ -256,7 +128,9 @@
       "services": [
         "authorization-api"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
         {
           "consumerService": "authorization-api",
@@ -269,12 +143,25 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
+        },
+        {
+          "consumerService": "authorization-api",
+          "requiredService": "resource-governance-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "resource-governance",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/resource-governance",
+            "version": "0.1.0",
+            "sourceManifestHash": "dd08d16a77d775af78133113d1bb3ae659adc8af1d56d4569ee6e27f7426c37c"
+          }
         }
       ],
       "displayName": "Authorization",
@@ -283,69 +170,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "757ad1901fbeaeb8e2ff20bf7f5aa381e03ae9a72c43ac9a88eabc1af92371a1",
+      "sourceManifestHash": "3687551f3883d53cba6c201ecb449d4aabb4005a9ccd1eb429732fb497c912d0",
       "display": {
         "icon": "shield",
         "category": "governance",
         "summary": "Policy decision point: resolves capability and scope grants for every actor/action pair (OpenFGA/OPA)."
-      }
-    },
-    {
-      "id": "biome-adapter-host",
-      "version": "0.1.0",
-      "tier": "system",
-      "target": "server",
-      "origin": "first-party",
-      "mandatory": false,
-      "installPolicy": "required",
-      "repo": "repos/xema-base",
-      "path": "repos/xema-base/biomes/biome-adapter-host",
-      "services": [],
-      "runtimeComponents": [
-        "biome-adapter-host"
-      ],
-      "serviceDependencies": [],
-      "displayName": "Biome Adapter Host",
-      "packageName": "@xemahq/biomes-biome-adapter-host",
-      "requiresServerBiomes": [],
-      "optionalServerBiomes": [],
-      "audience": "org",
-      "storeListed": true,
-      "sourceManifestHash": "0bc4a9a1653d2bcbd91cb6fdd252b955a652594d2fb7c0e2601655e36eb54c08",
-      "display": {
-        "icon": "puzzle",
-        "category": "connect",
-        "summary": "Adapter-SDK runtime: hosts integration adapter contributions shipped by other biomes."
       },
-      "launch": "per-installation"
-    },
-    {
-      "id": "biome-fetcher",
-      "version": "0.1.0",
-      "tier": "system",
-      "target": "server",
-      "origin": "first-party",
-      "mandatory": false,
-      "installPolicy": "required",
-      "repo": "repos/xema-base",
-      "path": "repos/xema-base/biomes/biome-fetcher",
-      "services": [
-        "biome-fetcher-api"
-      ],
-      "runtimeComponents": [],
-      "serviceDependencies": [],
-      "displayName": "Biome Fetcher",
-      "packageName": "@xemahq/biomes-biome-fetcher",
-      "requiresServerBiomes": [],
-      "optionalServerBiomes": [],
-      "audience": "org",
-      "storeListed": true,
-      "sourceManifestHash": "7cf92483d2880ce99165350cc6f0497ce34b3fbe78bbea6aa7580d770b2ef0f9",
-      "display": {
-        "icon": "download",
-        "category": "build",
-        "summary": "Downloads and verifies biome bundles from registries, staging them for the biome-host installer."
-      }
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "biome-host",
@@ -360,8 +192,36 @@
       "services": [
         "biome-host-api"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
+        {
+          "consumerService": "biome-host-api",
+          "requiredService": "authorization-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "authorization",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/authorization",
+            "version": "0.1.0",
+            "sourceManifestHash": "3687551f3883d53cba6c201ecb449d4aabb4005a9ccd1eb429732fb497c912d0"
+          }
+        },
+        {
+          "consumerService": "biome-host-api",
+          "requiredService": "decision-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "decision",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/decision",
+            "version": "0.1.0",
+            "sourceManifestHash": "1e3912bdd71f7a9753e7027773c45d107b35a1dacb6708547c042bb4c5cc0ed1"
+          }
+        },
         {
           "consumerService": "biome-host-api",
           "requiredService": "identity-api",
@@ -373,9 +233,9 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
@@ -387,12 +247,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "6e522468aff28ebd3f8989d63f061cf8ead477a37844f804ae8b0f434f0258ff",
+      "sourceManifestHash": "8183c2181ec479bbd2c1d68abb3574a2ec2c6b50926dcbb200ecb5d9eb256671",
       "display": {
         "icon": "package",
         "category": "build",
         "summary": "Biome installer and lifecycle manager: validates manifests, applies Helm sub-charts, tracks install state."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "capabilities-web",
@@ -405,7 +267,9 @@
       "repo": "submodules/xema-host-web",
       "path": "submodules/xema-host-web/biomes/system/capabilities-web",
       "services": [],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [],
       "displayName": "Capabilities (Web)",
       "packageName": "@xemahq/biomes-system-capabilities-web",
@@ -415,12 +279,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "9d074819f387ccd2d545e33dfc1d6a9f4b7db31612faabf17186e5d1a473a7d3",
+      "sourceManifestHash": "c06afc998c1cfae62cbe2ac659d39078eb1356dd9e40a9f442d2d061903e14ef",
       "display": {
         "icon": "puzzle",
         "category": "platform",
         "summary": "Browse and govern platform capabilities."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "capability-registry",
@@ -435,7 +301,9 @@
       "services": [
         "capability-registry-api"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
         {
           "consumerService": "capability-registry-api",
@@ -448,9 +316,9 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
@@ -467,7 +335,9 @@
         "icon": "list",
         "category": "platform",
         "summary": "Capability descriptor registry: authoritative source for every published capability ref and schema."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "concepts-web",
@@ -480,7 +350,9 @@
       "repo": "submodules/xema-host-web",
       "path": "submodules/xema-host-web/biomes/system/concepts-web",
       "services": [],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [],
       "displayName": "Concepts (Web)",
       "packageName": "@xemahq/biomes-system-concepts-web",
@@ -490,13 +362,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": false,
-      "sourceManifestHash": "b002ad3b5621c4d3850836c238b1af77cd52f5dfaba0025d061e10803c69fe2e",
+      "sourceManifestHash": "a842e01e7b38bf2cdecc46da59699c5dbf5bad9948dac5143367cf9e2c1b4a28",
       "display": {
         "icon": "lightbulb",
         "category": "knowledge",
         "summary": "Manage shared concepts and definitions."
       },
-      "systemSurface": true
+      "systemSurface": true,
+      "launch": "static"
     },
     {
       "id": "container-registry-web",
@@ -509,7 +382,9 @@
       "repo": "submodules/xema-host-web",
       "path": "submodules/xema-host-web/biomes/system/container-registry-web",
       "services": [],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [],
       "displayName": "Container Registry (Web)",
       "packageName": "@xemahq/biomes-system-container-registry-web",
@@ -519,12 +394,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "8512c2a97eeecf1195a52f8c487efa6779a51443d3e2942a0138fc867c2d1bca",
+      "sourceManifestHash": "33ea1e235dc558a71e49869e01f5acf2301df0d83c924a42a549aa0f0f94c43d",
       "display": {
         "icon": "package",
         "category": "platform",
         "summary": "Manage container images."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "decision",
@@ -539,7 +416,9 @@
       "services": [
         "decision-api"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
         {
           "consumerService": "decision-api",
@@ -551,7 +430,7 @@
             "repo": "repos/xema-base",
             "path": "repos/xema-base/biomes/authorization",
             "version": "0.1.0",
-            "sourceManifestHash": "757ad1901fbeaeb8e2ff20bf7f5aa381e03ae9a72c43ac9a88eabc1af92371a1"
+            "sourceManifestHash": "3687551f3883d53cba6c201ecb449d4aabb4005a9ccd1eb429732fb497c912d0"
           }
         },
         {
@@ -565,9 +444,9 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
@@ -579,12 +458,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "3e93781a626e400f7970ffb97e8ef0b49271caebb6b4ae278d9efbaad56fa127",
+      "sourceManifestHash": "1e3912bdd71f7a9753e7027773c45d107b35a1dacb6708547c042bb4c5cc0ed1",
       "display": {
         "icon": "gavel",
         "category": "operate",
         "summary": "The platform's one human-decision primitive: a durable ask with N answerable options, a derived lifecycle and a PDP-resolved audience."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "environments-web",
@@ -597,7 +478,9 @@
       "repo": "submodules/xema-host-web",
       "path": "submodules/xema-host-web/biomes/system/environments-web",
       "services": [],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [],
       "displayName": "Environments (Web)",
       "packageName": "@xemahq/biomes-system-environments-web",
@@ -607,12 +490,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "e1227ed5d257fb15ba083c948ed1e9c7aa84aeda88631e940e2dcbfa371d8075",
+      "sourceManifestHash": "cf854b4160465ba5c4e785ab9791d0c85a13f17586a1a3800c95e70839a83080",
       "display": {
         "icon": "server",
         "category": "platform",
         "summary": "Manage execution environments."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "gateway-routes-web",
@@ -625,7 +510,9 @@
       "repo": "submodules/xema-host-web",
       "path": "submodules/xema-host-web/biomes/system/gateway-routes-web",
       "services": [],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [],
       "displayName": "Gateway Routes (Web)",
       "packageName": "@xemahq/biomes-system-gateway-routes-web",
@@ -635,12 +522,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "4f4375a83e7bbfe5a5f85ed1ff55948a0408ee9b4d2d35206435c3e80e5bfb4b",
+      "sourceManifestHash": "d7e7e7c89354101e68be8111b8afacb0f5141acfcaf523ef6141e1d2bcfe9cbe",
       "display": {
         "icon": "route",
         "category": "platform",
         "summary": "Configure public gateway routes."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "grants-web",
@@ -653,7 +542,9 @@
       "repo": "submodules/xema-host-web",
       "path": "submodules/xema-host-web/biomes/system/grants-web",
       "services": [],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [],
       "displayName": "Grants (Web)",
       "packageName": "@xemahq/biomes-system-grants-web",
@@ -663,12 +554,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "15ddb0475d72c48baad54ce9cdac380950681939c9f6b8db244f558596a4bc9d",
+      "sourceManifestHash": "72d6de134598d129b53ea34c2522fd931dc47fb19ad8115b741eff178b9f8569",
       "display": {
         "icon": "key",
         "category": "governance",
         "summary": "Review and manage access grants."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "mailops-web",
@@ -681,11 +574,14 @@
       "repo": "submodules/xema-host-web",
       "path": "submodules/xema-host-web/biomes/system/mailops-web",
       "services": [],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [],
       "displayName": "MailOps (Web)",
       "packageName": "@xemahq/biomes-system-mailops-web",
       "requiresServerBiomes": [
+        "agent-runtime",
         "mailops",
         "project-registry",
         "workflow-runtime"
@@ -693,12 +589,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "e54d0d516229df0a1bc9cb0d865246ad4cbd247d4fb0567bd818b83954fe9a71",
+      "sourceManifestHash": "e71b0fa62af5261eaf1bbc92258f45b17975bd5b98ec204c86e13eb6994020d2",
       "display": {
         "icon": "mail",
         "category": "connect",
         "summary": "Run email-driven workflows."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "object-registry",
@@ -713,7 +611,9 @@
       "services": [
         "object-registry-api"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
         {
           "consumerService": "object-registry-api",
@@ -726,9 +626,9 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
@@ -745,7 +645,9 @@
         "icon": "link",
         "category": "platform",
         "summary": "XVFS object resolver: addresses every platform object (artifact, biome, capability) via a stable URI scheme."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "objects-web",
@@ -758,7 +660,9 @@
       "repo": "submodules/xema-host-web",
       "path": "submodules/xema-host-web/biomes/system/objects-web",
       "services": [],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [],
       "displayName": "Objects (Web)",
       "packageName": "@xemahq/biomes-system-objects-web",
@@ -768,13 +672,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": false,
-      "sourceManifestHash": "4fc671dc1f39fde79ade866b1b0a885bd65b3a0051cacc4b6a94620bffa11eaf",
+      "sourceManifestHash": "23d313f5d5bae4b1864c3ebd2409f6e495b939fad074db83bd4fe30d481caba1",
       "display": {
         "icon": "box",
         "category": "data",
         "summary": "Browse Xema objects and registries."
       },
-      "systemSurface": true
+      "systemSurface": true,
+      "launch": "static"
     },
     {
       "id": "opencode-runtime",
@@ -787,9 +692,11 @@
       "repo": "repos/xema-base",
       "path": "repos/xema-base/biomes/opencode-runtime",
       "services": [],
+      "serviceDatabases": {},
       "runtimeComponents": [
         "opencode-worker"
       ],
+      "hostModules": [],
       "serviceDependencies": [],
       "displayName": "Opencode Runtime",
       "packageName": "@xemahq/biomes-opencode-runtime",
@@ -802,7 +709,9 @@
         "icon": "bot",
         "category": "runtime",
         "summary": "OpenCode runtime executor: runs LLM agent sessions inside a per-allocation workspace."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "org-database-pool",
@@ -817,7 +726,9 @@
       "services": [
         "org-database-pool-api"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
         {
           "consumerService": "org-database-pool-api",
@@ -830,7 +741,7 @@
               "repositoryUrl": "https://github.com/xema-dev/event-hub-api.git",
               "repo": "submodules/event-hub-api",
               "path": "submodules/event-hub-api/package.json",
-              "sourceCommit": "8ff3acef9ca979948b2b1eb95c3964f97caf16b1",
+              "sourceCommit": "6bc36b61db3ef7c9384410c1a151dab4dd1bd559",
               "version": "2.0.0",
               "sourceManifestHash": "2e57d7356ed288b00e35f3ee4aa542cdbb1eb25d94a8fecbc2bda76cedd5f995",
               "imageKey": "event-hub-api"
@@ -848,12 +759,25 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
+        },
+        {
+          "consumerService": "org-database-pool-api",
+          "requiredService": "resource-governance-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "resource-governance",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/resource-governance",
+            "version": "0.1.0",
+            "sourceManifestHash": "dd08d16a77d775af78133113d1bb3ae659adc8af1d56d4569ee6e27f7426c37c"
+          }
         }
       ],
       "displayName": "Org Database Pool",
@@ -862,12 +786,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "4a9077cbda9fb20adf207682173a3df88398ff7288428b9a356213000c68997c",
+      "sourceManifestHash": "019abba8218c9dadb0be490d6c9f42c58e390c8a89dd0c0bfe631f3eb0210765",
       "display": {
         "icon": "database",
         "category": "platform",
         "summary": "Per-org database pool: issues per-tenant Postgres credentials and tracks per-org migration state."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "policies-web",
@@ -880,7 +806,9 @@
       "repo": "submodules/xema-host-web",
       "path": "submodules/xema-host-web/biomes/system/policies-web",
       "services": [],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [],
       "displayName": "Policies (Web)",
       "packageName": "@xemahq/biomes-system-policies-web",
@@ -890,12 +818,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "7b4f380be501bcf5042b08d1d97e12e813b617ac468c87fd1bf9449bcb93cff8",
+      "sourceManifestHash": "720f536934ca9e5a3f138fcdaf05b52416fb6e74548ce74f0c8917a8a5580e5e",
       "display": {
         "icon": "shield",
         "category": "governance",
         "summary": "Author and review policies."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "public-gateway",
@@ -910,20 +840,38 @@
       "services": [
         "public-gateway-api"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
-      "serviceDependencies": [],
+      "hostModules": [],
+      "serviceDependencies": [
+        {
+          "consumerService": "public-gateway-api",
+          "requiredService": "biome-host-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "biome-host",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/biome-host",
+            "version": "0.1.0",
+            "sourceManifestHash": "8183c2181ec479bbd2c1d68abb3574a2ec2c6b50926dcbb200ecb5d9eb256671"
+          }
+        }
+      ],
       "displayName": "Public Gateway",
       "packageName": "@xemahq/biomes-public-gateway",
       "requiresServerBiomes": [],
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "c12bdd52233605e5effa26a7b283281760988420b8929652606c78ed9bb460ad",
+      "sourceManifestHash": "67c87b76865552edf03521f292110ecb513f99f93ba2078bcdaac7b8ca9325b2",
       "display": {
         "icon": "globe",
         "category": "connect",
         "summary": "Public-facing HTTP gateway: streams preview pages, dispatches webhook ingress, terminates public routes."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "redis-pool",
@@ -938,7 +886,9 @@
       "services": [
         "redis-pool-api"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
         {
           "consumerService": "redis-pool-api",
@@ -951,7 +901,7 @@
               "repositoryUrl": "https://github.com/xema-dev/event-hub-api.git",
               "repo": "submodules/event-hub-api",
               "path": "submodules/event-hub-api/package.json",
-              "sourceCommit": "8ff3acef9ca979948b2b1eb95c3964f97caf16b1",
+              "sourceCommit": "6bc36b61db3ef7c9384410c1a151dab4dd1bd559",
               "version": "2.0.0",
               "sourceManifestHash": "2e57d7356ed288b00e35f3ee4aa542cdbb1eb25d94a8fecbc2bda76cedd5f995",
               "imageKey": "event-hub-api"
@@ -969,9 +919,9 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
@@ -983,12 +933,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "c46fffcdf97637a5dcde14c2fa81a7bb728f257ace02098e9fbbef9a9ee43aa0",
+      "sourceManifestHash": "b3602544220af514c79bf40cb535b2aebda4ca54a8c562ee4201ead37f4effaa",
       "display": {
         "icon": "database",
         "category": "platform",
         "summary": "Brokers the shared Redis/Valkey keyspace: per-(biome, org) namespaces with a server-enforced key prefix and short-lived Redis ACL credentials."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "resource-governance",
@@ -1003,8 +955,23 @@
       "services": [
         "resource-governance-api"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
+        {
+          "consumerService": "resource-governance-api",
+          "requiredService": "decision-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "decision",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/decision",
+            "version": "0.1.0",
+            "sourceManifestHash": "1e3912bdd71f7a9753e7027773c45d107b35a1dacb6708547c042bb4c5cc0ed1"
+          }
+        },
         {
           "consumerService": "resource-governance-api",
           "requiredService": "identity-api",
@@ -1016,9 +983,9 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
@@ -1030,12 +997,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "0ce251d10655f7a294862d434dea4b40a1b212525eaa95dca280b08e0edd2f44",
+      "sourceManifestHash": "dd08d16a77d775af78133113d1bb3ae659adc8af1d56d4569ee6e27f7426c37c",
       "display": {
         "icon": "gauge",
         "category": "governance",
         "summary": "Authoritative resource inventory, consumption, source freshness, and cost-attribution inputs."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "runners-web",
@@ -1048,7 +1017,9 @@
       "repo": "submodules/xema-host-web",
       "path": "submodules/xema-host-web/biomes/system/runners-web",
       "services": [],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [],
       "displayName": "Runners (Web)",
       "packageName": "@xemahq/biomes-system-runners-web",
@@ -1061,12 +1032,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "c56bb0d5eb00552d1aeceb4a7c4965fc3e32cb9f994639f5c97d64fa2f574bcb",
+      "sourceManifestHash": "469a04d8a7ff2e8dc55ab05fc4f6b874c46981a987d30393a469541f61b7cda3",
       "display": {
         "icon": "cpu",
         "category": "platform",
         "summary": "Monitor and manage execution runners."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "search-web",
@@ -1079,7 +1052,9 @@
       "repo": "submodules/xema-host-web",
       "path": "submodules/xema-host-web/biomes/system/search-web",
       "services": [],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [],
       "displayName": "Search (Web)",
       "packageName": "@xemahq/biomes-system-search-web",
@@ -1089,12 +1064,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "13e726cddbf11f1e47c62f44b28e9834f630c3c119ec976424e0f9afe54050a0",
+      "sourceManifestHash": "82c0a04f2ad3e6ba84a85e8d14e6dc4ed65c0581ca7ec168e066ebcf0da07944",
       "display": {
         "icon": "search",
         "category": "platform",
         "summary": "Search across the platform."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "service-registry-web",
@@ -1107,7 +1084,9 @@
       "repo": "submodules/xema-host-web",
       "path": "submodules/xema-host-web/biomes/system/service-registry-web",
       "services": [],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [],
       "displayName": "Service Registry (Web)",
       "packageName": "@xemahq/biomes-system-service-registry-web",
@@ -1117,12 +1096,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "989267e6eef302890d6e35e84c151438f584354b500a19649f7ea6133869a767",
+      "sourceManifestHash": "4e6de6c3d7fb2edd030b9d346833c7ce6e99aff3d2e46e40ef61670abc302839",
       "display": {
         "icon": "network",
         "category": "platform",
         "summary": "Inspect the service registry."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "space-registry",
@@ -1137,8 +1118,23 @@
       "services": [
         "space-registry-api"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
+        {
+          "consumerService": "space-registry-api",
+          "requiredService": "decision-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "decision",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/decision",
+            "version": "0.1.0",
+            "sourceManifestHash": "1e3912bdd71f7a9753e7027773c45d107b35a1dacb6708547c042bb4c5cc0ed1"
+          }
+        },
         {
           "consumerService": "space-registry-api",
           "requiredService": "identity-api",
@@ -1150,9 +1146,9 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
@@ -1164,12 +1160,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "2dfcb549315fefa787a0008f6d924847e41126842542786c7172391cc1cada9f",
+      "sourceManifestHash": "6a8f974d2d66f24346859066e3ea7b72c4a8b96546fea061277fa51b31b5449c",
       "display": {
         "icon": "folder-tree",
         "category": "governance",
-        "summary": "Authoritative Space ownership, hierarchy, and most-specific-wins data-classification resolution."
-      }
+        "summary": "Authoritative Space ownership declarations and join-based data-classification resolution."
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "spaces-web",
@@ -1182,7 +1180,9 @@
       "repo": "submodules/xema-host-web",
       "path": "submodules/xema-host-web/biomes/system/spaces-web",
       "services": [],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [],
       "displayName": "Spaces (Web)",
       "packageName": "@xemahq/biomes-system-spaces-web",
@@ -1194,13 +1194,122 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": false,
-      "sourceManifestHash": "d9297d1f16ab7faef0d8678522598286420f31ea7bff8fbc9033f499f93722a1",
+      "sourceManifestHash": "ca0317b58364d048e70ac47801fa4f74d57f4ddd3647f99e8e1186dbc2581629",
       "display": {
         "icon": "layers",
         "category": "platform",
         "summary": "Organize work into spaces."
       },
-      "systemSurface": true
+      "systemSurface": true,
+      "launch": "static"
+    },
+    {
+      "id": "template-registry",
+      "version": "0.1.0",
+      "tier": "system",
+      "target": "server",
+      "origin": "first-party",
+      "mandatory": false,
+      "installPolicy": "required",
+      "repo": "repos/xema-base",
+      "path": "repos/xema-base/biomes/template-registry",
+      "services": [
+        "template-registry-api"
+      ],
+      "serviceDatabases": {},
+      "runtimeComponents": [],
+      "hostModules": [],
+      "serviceDependencies": [
+        {
+          "consumerService": "template-registry-api",
+          "requiredService": "artifact-store-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "agent-runtime",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/agent-runtime",
+            "version": "0.1.0",
+            "sourceManifestHash": "5336acb3131601e721d6d54626c70d1cbbb8f424803f43e974a8ced764a9ffe9"
+          }
+        },
+        {
+          "consumerService": "template-registry-api",
+          "requiredService": "event-hub-api",
+          "owner": {
+            "kind": "platform",
+            "source": {
+              "name": "event-hub-api",
+              "tier": "infra",
+              "repositoryUrl": "https://github.com/xema-dev/event-hub-api.git",
+              "repo": "submodules/event-hub-api",
+              "path": "submodules/event-hub-api/package.json",
+              "sourceCommit": "6bc36b61db3ef7c9384410c1a151dab4dd1bd559",
+              "version": "2.0.0",
+              "sourceManifestHash": "2e57d7356ed288b00e35f3ee4aa542cdbb1eb25d94a8fecbc2bda76cedd5f995",
+              "imageKey": "event-hub-api"
+            }
+          }
+        },
+        {
+          "consumerService": "template-registry-api",
+          "requiredService": "identity-api",
+          "owner": {
+            "kind": "platform",
+            "source": {
+              "name": "identity-api",
+              "tier": "infra",
+              "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
+              "repo": "submodules/identity-api",
+              "path": "submodules/identity-api/package.json",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
+              "version": "0.0.2",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
+              "imageKey": "identity-api"
+            }
+          }
+        },
+        {
+          "consumerService": "template-registry-api",
+          "requiredService": "resource-governance-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "resource-governance",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/resource-governance",
+            "version": "0.1.0",
+            "sourceManifestHash": "dd08d16a77d775af78133113d1bb3ae659adc8af1d56d4569ee6e27f7426c37c"
+          }
+        },
+        {
+          "consumerService": "template-registry-api",
+          "requiredService": "xema-capability-router",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "xema-capability-router",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/xema-capability-router",
+            "version": "0.1.0",
+            "sourceManifestHash": "4ccc5c67859a6576a8e994d6a156bb5a3035c5ae1dedc3708d0f2da101cd564f"
+          }
+        }
+      ],
+      "displayName": "Template Registry",
+      "packageName": "@xemahq/biomes-template-registry",
+      "requiresServerBiomes": [],
+      "optionalServerBiomes": [],
+      "audience": "org",
+      "storeListed": true,
+      "sourceManifestHash": "4ad780ec6b56898c42c8025059d2c1d080b1d9c1e44c2db2f1e5f0790d462018",
+      "display": {
+        "icon": "layout-template",
+        "category": "platform",
+        "summary": "Authoritative Template and DesignSystem content, drafts, revisions, evaluations, and previews."
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "user-hub-web",
@@ -1213,7 +1322,9 @@
       "repo": "submodules/xema-host-web",
       "path": "submodules/xema-host-web/biomes/system/user-hub-web",
       "services": [],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [],
       "displayName": "User Hub (Web)",
       "packageName": "@xemahq/biomes-system-user-hub-web",
@@ -1223,12 +1334,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "9a524e6d6b6753d7ab73d6abf05fb25c65c240ffe8f9f6e3cbde22f333b83b01",
+      "sourceManifestHash": "4162422cfc654ae58368d4825e97857f3a1a7693cc4a09d88059961289c51eda",
       "display": {
         "icon": "users",
         "category": "administration",
         "summary": "Manage users and organizations."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "workload-runtime",
@@ -1243,7 +1356,9 @@
       "services": [
         "workload-runtime-api"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
         {
           "consumerService": "workload-runtime-api",
@@ -1256,12 +1371,25 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
+        },
+        {
+          "consumerService": "workload-runtime-api",
+          "requiredService": "public-gateway-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "public-gateway",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/public-gateway",
+            "version": "0.1.0",
+            "sourceManifestHash": "67c87b76865552edf03521f292110ecb513f99f93ba2078bcdaac7b8ca9325b2"
+          }
         }
       ],
       "displayName": "Workload Runtime",
@@ -1270,12 +1398,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "021012bff91a63be2f7981c8ba54fa4b1c1898349f2f3770484d475025913d86",
+      "sourceManifestHash": "cb34e70cc83af8018f6bf51b56818957e43a0c7ee637b2da6cab31562519cfb9",
       "display": {
         "icon": "server-cog",
         "category": "runtime",
         "summary": "Workload runtime control plane: dispatches and reconciles every per-allocation Kubernetes workload."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "workspace-storage-pool",
@@ -1290,7 +1420,9 @@
       "services": [
         "workspace-storage-pool-api"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
         {
           "consumerService": "workspace-storage-pool-api",
@@ -1303,9 +1435,9 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
@@ -1322,7 +1454,9 @@
         "icon": "hard-drive",
         "category": "platform",
         "summary": "Per-org workspace volume manager: allocates, snapshots, and reclaims persistent workspace storage."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "xema-capability-router",
@@ -1337,7 +1471,9 @@
       "services": [
         "xema-capability-router"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
         {
           "consumerService": "xema-capability-router",
@@ -1350,9 +1486,9 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
@@ -1364,12 +1500,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "39a08d58a36cc8c469740f1ce28eed1d72b1ec55fb3a2c40645020c533bcc1f9",
+      "sourceManifestHash": "4ccc5c67859a6576a8e994d6a156bb5a3035c5ae1dedc3708d0f2da101cd564f",
       "display": {
         "icon": "split",
         "category": "platform",
         "summary": "Capability dispatch router: resolves a capability invocation to the owning biome's API and endpoint."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "xema-platform-worker",
@@ -1384,7 +1522,9 @@
       "services": [
         "xema-platform-worker"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [],
       "displayName": "Xema Platform Worker",
       "packageName": "@xemahq/biomes-xema-platform-worker",
@@ -1397,54 +1537,9 @@
         "icon": "cpu",
         "category": "runtime",
         "summary": "Platform Temporal worker: executes kernel and system-biome workflows on the platform task queue."
-      }
-    },
-    {
-      "id": "xema-shell",
-      "version": "0.1.0",
-      "tier": "system",
-      "target": "server",
-      "origin": "first-party",
-      "mandatory": false,
-      "installPolicy": "required",
-      "repo": "repos/xema-base",
-      "path": "repos/xema-base/biomes/xema-shell",
-      "services": [
-        "xema-shell-api"
-      ],
-      "runtimeComponents": [],
-      "serviceDependencies": [
-        {
-          "consumerService": "xema-shell-api",
-          "requiredService": "identity-api",
-          "owner": {
-            "kind": "platform",
-            "source": {
-              "name": "identity-api",
-              "tier": "infra",
-              "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
-              "repo": "submodules/identity-api",
-              "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
-              "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
-              "imageKey": "identity-api"
-            }
-          }
-        }
-      ],
-      "displayName": "Xema Shell",
-      "packageName": "@xemahq/biomes-xema-shell",
-      "requiresServerBiomes": [],
-      "optionalServerBiomes": [],
-      "audience": "org",
-      "storeListed": true,
-      "sourceManifestHash": "c63106362062ebf93b05f266e5340a4ffe28322678cd9a63afe87aec3723e943",
-      "display": {
-        "icon": "terminal",
-        "category": "runtime",
-        "summary": "Xema shell parser and runner: executes platform shell scripts inside session workspaces."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "activity-feed",
@@ -1459,7 +1554,9 @@
       "services": [
         "activity-feed-api"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
         {
           "consumerService": "activity-feed-api",
@@ -1472,9 +1569,9 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
@@ -1486,12 +1583,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "1c8246ca4b24b76d8c5b75afbd5dfccc3ee1bb10cb8d7a42b6c51bd687a81af8",
+      "sourceManifestHash": "cf0b4e2af8d740bab0253fb5e13440b284fb23f2638be48a94dfa06d1ab81a4f",
       "display": {
         "icon": "activity",
         "category": "operate",
         "summary": "Activity feed projector: materializes CloudEvent streams into per-actor and per-subject timelines."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "agent-runtime",
@@ -1509,8 +1608,23 @@
         "llm-registry-api",
         "skill-registry-api"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
+        {
+          "consumerService": "agent-session-api",
+          "requiredService": "authorization-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "authorization",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/authorization",
+            "version": "0.1.0",
+            "sourceManifestHash": "3687551f3883d53cba6c201ecb449d4aabb4005a9ccd1eb429732fb497c912d0"
+          }
+        },
         {
           "consumerService": "agent-session-api",
           "requiredService": "biome-host-api",
@@ -1521,7 +1635,46 @@
             "repo": "repos/xema-base",
             "path": "repos/xema-base/biomes/biome-host",
             "version": "0.1.0",
-            "sourceManifestHash": "6e522468aff28ebd3f8989d63f061cf8ead477a37844f804ae8b0f434f0258ff"
+            "sourceManifestHash": "8183c2181ec479bbd2c1d68abb3574a2ec2c6b50926dcbb200ecb5d9eb256671"
+          }
+        },
+        {
+          "consumerService": "agent-session-api",
+          "requiredService": "capability-registry-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "capability-registry",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/capability-registry",
+            "version": "0.1.0",
+            "sourceManifestHash": "22d7b0a4cfd4ce0caba32995b71897b6152a01fb55ca1e3120e6ab02a7ff16ee"
+          }
+        },
+        {
+          "consumerService": "agent-session-api",
+          "requiredService": "credential-broker-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "connector-platform",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/connector-platform",
+            "version": "0.1.0",
+            "sourceManifestHash": "cd53a7f937c3a3e2ce4336c608e6dc5887fb1b30cdb3521b5a8079627376571e"
+          }
+        },
+        {
+          "consumerService": "agent-session-api",
+          "requiredService": "decision-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "decision",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/decision",
+            "version": "0.1.0",
+            "sourceManifestHash": "1e3912bdd71f7a9753e7027773c45d107b35a1dacb6708547c042bb4c5cc0ed1"
           }
         },
         {
@@ -1535,9 +1688,9 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
@@ -1565,7 +1718,33 @@
             "repo": "repos/xema-base",
             "path": "repos/xema-base/biomes/org-database-pool",
             "version": "0.1.0",
-            "sourceManifestHash": "4a9077cbda9fb20adf207682173a3df88398ff7288428b9a356213000c68997c"
+            "sourceManifestHash": "019abba8218c9dadb0be490d6c9f42c58e390c8a89dd0c0bfe631f3eb0210765"
+          }
+        },
+        {
+          "consumerService": "agent-session-api",
+          "requiredService": "public-gateway-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "public-gateway",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/public-gateway",
+            "version": "0.1.0",
+            "sourceManifestHash": "67c87b76865552edf03521f292110ecb513f99f93ba2078bcdaac7b8ca9325b2"
+          }
+        },
+        {
+          "consumerService": "agent-session-api",
+          "requiredService": "resource-governance-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "resource-governance",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/resource-governance",
+            "version": "0.1.0",
+            "sourceManifestHash": "dd08d16a77d775af78133113d1bb3ae659adc8af1d56d4569ee6e27f7426c37c"
           }
         },
         {
@@ -1578,7 +1757,20 @@
             "repo": "repos/xema-base",
             "path": "repos/xema-base/biomes/workload-runtime",
             "version": "0.1.0",
-            "sourceManifestHash": "021012bff91a63be2f7981c8ba54fa4b1c1898349f2f3770484d475025913d86"
+            "sourceManifestHash": "cb34e70cc83af8018f6bf51b56818957e43a0c7ee637b2da6cab31562519cfb9"
+          }
+        },
+        {
+          "consumerService": "agent-session-api",
+          "requiredService": "workspace-orchestrator-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "workspace-orchestrator",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/workspace-orchestrator",
+            "version": "0.1.0",
+            "sourceManifestHash": "f2aee41b0bd7f68b970a4357154d914fe8f810be4ae2b66bb7876ff2b4600a7a"
           }
         },
         {
@@ -1591,7 +1783,7 @@
             "repo": "repos/xema-base",
             "path": "repos/xema-base/biomes/xema-capability-router",
             "version": "0.1.0",
-            "sourceManifestHash": "39a08d58a36cc8c469740f1ce28eed1d72b1ec55fb3a2c40645020c533bcc1f9"
+            "sourceManifestHash": "4ccc5c67859a6576a8e994d6a156bb5a3035c5ae1dedc3708d0f2da101cd564f"
           }
         },
         {
@@ -1604,7 +1796,7 @@
             "repo": "repos/xema-base",
             "path": "repos/xema-base/biomes/biome-host",
             "version": "0.1.0",
-            "sourceManifestHash": "6e522468aff28ebd3f8989d63f061cf8ead477a37844f804ae8b0f434f0258ff"
+            "sourceManifestHash": "8183c2181ec479bbd2c1d68abb3574a2ec2c6b50926dcbb200ecb5d9eb256671"
           }
         },
         {
@@ -1618,9 +1810,9 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
@@ -1635,7 +1827,7 @@
             "repo": "repos/xema-base",
             "path": "repos/xema-base/biomes/biome-host",
             "version": "0.1.0",
-            "sourceManifestHash": "6e522468aff28ebd3f8989d63f061cf8ead477a37844f804ae8b0f434f0258ff"
+            "sourceManifestHash": "8183c2181ec479bbd2c1d68abb3574a2ec2c6b50926dcbb200ecb5d9eb256671"
           }
         },
         {
@@ -1649,9 +1841,9 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
@@ -1667,13 +1859,26 @@
               "repositoryUrl": "https://github.com/xema-dev/llm-gateway-api.git",
               "repo": "submodules/llm-gateway-api",
               "path": "submodules/llm-gateway-api/package.json",
-              "sourceCommit": "79e4da92d86f8a7dc7605a8eca6837006495ccf5",
+              "sourceCommit": "83db971a3bc72d5e0d633c8e96215de850dc7359",
               "version": "1.0.0",
               "sourceManifestHash": "a862e41a632f3aecf1d6037b842a70ca5be91c996a89a68bd8200068355f43b8",
               "imageKey": "llm-gateway-api"
             }
           }
         },
+        {
+          "consumerService": "llm-registry-api",
+          "requiredService": "resource-governance-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "resource-governance",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/resource-governance",
+            "version": "0.1.0",
+            "sourceManifestHash": "dd08d16a77d775af78133113d1bb3ae659adc8af1d56d4569ee6e27f7426c37c"
+          }
+        },
         {
           "consumerService": "llm-registry-api",
           "requiredService": "xema-capability-router",
@@ -1684,7 +1889,7 @@
             "repo": "repos/xema-base",
             "path": "repos/xema-base/biomes/xema-capability-router",
             "version": "0.1.0",
-            "sourceManifestHash": "39a08d58a36cc8c469740f1ce28eed1d72b1ec55fb3a2c40645020c533bcc1f9"
+            "sourceManifestHash": "4ccc5c67859a6576a8e994d6a156bb5a3035c5ae1dedc3708d0f2da101cd564f"
           }
         },
         {
@@ -1698,9 +1903,9 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
@@ -1712,12 +1917,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "a13807cf05146aca50ee7964e66af7844f0bcfd34e35352227944ec81997461f",
+      "sourceManifestHash": "5336acb3131601e721d6d54626c70d1cbbb8f424803f43e974a8ced764a9ffe9",
       "display": {
         "icon": "bot",
         "category": "runtime",
         "summary": "Foundational agent-runtime primitives: agent sessions, skill catalog, LLM registry, and typed artifact storage."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "app-platform",
@@ -1732,8 +1939,23 @@
       "services": [
         "app-platform-api"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
+        {
+          "consumerService": "app-platform-api",
+          "requiredService": "agent-session-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "agent-runtime",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/agent-runtime",
+            "version": "0.1.0",
+            "sourceManifestHash": "5336acb3131601e721d6d54626c70d1cbbb8f424803f43e974a8ced764a9ffe9"
+          }
+        },
         {
           "consumerService": "app-platform-api",
           "requiredService": "authorization-api",
@@ -1744,7 +1966,7 @@
             "repo": "repos/xema-base",
             "path": "repos/xema-base/biomes/authorization",
             "version": "0.1.0",
-            "sourceManifestHash": "757ad1901fbeaeb8e2ff20bf7f5aa381e03ae9a72c43ac9a88eabc1af92371a1"
+            "sourceManifestHash": "3687551f3883d53cba6c201ecb449d4aabb4005a9ccd1eb429732fb497c912d0"
           }
         },
         {
@@ -1757,7 +1979,7 @@
             "repo": "repos/xema-base",
             "path": "repos/xema-base/biomes/biome-host",
             "version": "0.1.0",
-            "sourceManifestHash": "6e522468aff28ebd3f8989d63f061cf8ead477a37844f804ae8b0f434f0258ff"
+            "sourceManifestHash": "8183c2181ec479bbd2c1d68abb3574a2ec2c6b50926dcbb200ecb5d9eb256671"
           }
         },
         {
@@ -1771,9 +1993,9 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
@@ -1798,12 +2020,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "ad83e92526cc2c94606512fccbac5f330135a3f59f969727059333a589aece6e",
+      "sourceManifestHash": "acb627746ce17b7b9753a13e5007841f95d1f29651e47a747ed7599dd17aa2b9",
       "display": {
         "icon": "app-window",
         "category": "connect",
         "summary": "App/portal runtime for external end-users: Apps, external auth (magic-link/OIDC), public ingress, delegated sessions."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "backlog",
@@ -1818,7 +2042,9 @@
       "services": [
         "backlog-api"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
         {
           "consumerService": "backlog-api",
@@ -1831,9 +2057,9 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
@@ -1850,7 +2076,73 @@
         "icon": "list",
         "category": "operate",
         "summary": "Work-item and backlog primitive — stores and syncs tracker issues and tasks that Xema workflows read and update."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
+    },
+    {
+      "id": "biome-adapter-host",
+      "version": "0.1.0",
+      "tier": "base",
+      "target": "server",
+      "origin": "first-party",
+      "mandatory": false,
+      "installPolicy": "default-selected",
+      "repo": "repos/xema-base",
+      "path": "repos/xema-base/biomes/biome-adapter-host",
+      "services": [],
+      "serviceDatabases": {},
+      "runtimeComponents": [
+        "biome-adapter-host"
+      ],
+      "hostModules": [],
+      "serviceDependencies": [],
+      "displayName": "Biome Adapter Host",
+      "packageName": "@xemahq/biomes-biome-adapter-host",
+      "requiresServerBiomes": [],
+      "optionalServerBiomes": [],
+      "audience": "org",
+      "storeListed": true,
+      "sourceManifestHash": "cddd250d2e4136c2b438272b98aff8a591556ffed296d57ea4ed7dbb97ae0b9b",
+      "display": {
+        "icon": "puzzle",
+        "category": "connect",
+        "summary": "Adapter-SDK runtime: hosts integration adapter contributions shipped by other biomes."
+      },
+      "systemSurface": false,
+      "launch": "per-installation"
+    },
+    {
+      "id": "biome-fetcher",
+      "version": "0.1.0",
+      "tier": "base",
+      "target": "server",
+      "origin": "first-party",
+      "mandatory": false,
+      "installPolicy": "default-selected",
+      "repo": "repos/xema-base",
+      "path": "repos/xema-base/biomes/biome-fetcher",
+      "services": [
+        "biome-fetcher-api"
+      ],
+      "serviceDatabases": {},
+      "runtimeComponents": [],
+      "hostModules": [],
+      "serviceDependencies": [],
+      "displayName": "Biome Fetcher",
+      "packageName": "@xemahq/biomes-biome-fetcher",
+      "requiresServerBiomes": [],
+      "optionalServerBiomes": [],
+      "audience": "org",
+      "storeListed": true,
+      "sourceManifestHash": "aaa2b6daf48f8e1635fc818782a199dd48ae40ed91d4fff2ff7fc1e0bbb33655",
+      "display": {
+        "icon": "download",
+        "category": "build",
+        "summary": "Downloads and verifies biome bundles from registries, staging them for the biome-host installer."
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "canopy",
@@ -1865,7 +2157,9 @@
       "services": [
         "canopy-api"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
         {
           "consumerService": "canopy-api",
@@ -1891,9 +2185,9 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
@@ -1908,7 +2202,7 @@
             "repo": "repos/xema-base",
             "path": "repos/xema-base/biomes/xema-capability-router",
             "version": "0.1.0",
-            "sourceManifestHash": "39a08d58a36cc8c469740f1ce28eed1d72b1ec55fb3a2c40645020c533bcc1f9"
+            "sourceManifestHash": "4ccc5c67859a6576a8e994d6a156bb5a3035c5ae1dedc3708d0f2da101cd564f"
           }
         }
       ],
@@ -1918,12 +2212,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "a88ef0b188ed5b303d8d8cf790a17b024ceb172a7a1616c339d8c88853ae9ce4",
+      "sourceManifestHash": "b4b85ad9d79bbfcd62e9b58a28853f998a3d2e69115321001e080d117bc02721",
       "display": {
         "icon": "sparkles",
         "category": "runtime",
         "summary": "The universal Xema agent: one org-scoped conversation that can reach every capability of every installed biome."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "connector-platform",
@@ -1939,8 +2235,23 @@
         "connector-gateway-api",
         "credential-broker-api"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
+        {
+          "consumerService": "connector-gateway-api",
+          "requiredService": "authorization-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "authorization",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/authorization",
+            "version": "0.1.0",
+            "sourceManifestHash": "3687551f3883d53cba6c201ecb449d4aabb4005a9ccd1eb429732fb497c912d0"
+          }
+        },
         {
           "consumerService": "connector-gateway-api",
           "requiredService": "capability-registry-api",
@@ -1954,6 +2265,19 @@
             "sourceManifestHash": "22d7b0a4cfd4ce0caba32995b71897b6152a01fb55ca1e3120e6ab02a7ff16ee"
           }
         },
+        {
+          "consumerService": "connector-gateway-api",
+          "requiredService": "decision-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "decision",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/decision",
+            "version": "0.1.0",
+            "sourceManifestHash": "1e3912bdd71f7a9753e7027773c45d107b35a1dacb6708547c042bb4c5cc0ed1"
+          }
+        },
         {
           "consumerService": "connector-gateway-api",
           "requiredService": "identity-api",
@@ -1965,9 +2289,9 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
@@ -1983,9 +2307,9 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
@@ -2001,7 +2325,7 @@
               "repositoryUrl": "https://github.com/xema-dev/secrets-api.git",
               "repo": "submodules/secrets-api",
               "path": "submodules/secrets-api/package.json",
-              "sourceCommit": "5cb3114aa9fee7eeed42aeeea0ddd2d5a1ed8722",
+              "sourceCommit": "34ae47ba5dad3bf8674eedf63851b0a161d1645b",
               "version": "1.0.0",
               "sourceManifestHash": "51d6db6fac73a58b167eb7615c371fc75dfdb13a294c22ddb98c18d99df620a7",
               "imageKey": "secrets-api"
@@ -2015,12 +2339,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "36862dd4bf78175095aab7fc39fcead6b0993cd48604b3a054e18132374fc9d0",
+      "sourceManifestHash": "cd53a7f937c3a3e2ce4336c608e6dc5887fb1b30cdb3521b5a8079627376571e",
       "display": {
         "icon": "plug",
         "category": "connect",
         "summary": "Generic connector ingress edge and credential broker; per-provider connector biomes consume its services."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "container-registry",
@@ -2035,7 +2361,9 @@
       "services": [
         "container-registry-api"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
         {
           "consumerService": "container-registry-api",
@@ -2048,9 +2376,9 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
@@ -2065,7 +2393,7 @@
             "repo": "repos/xema-base",
             "path": "repos/xema-base/biomes/workload-runtime",
             "version": "0.1.0",
-            "sourceManifestHash": "021012bff91a63be2f7981c8ba54fa4b1c1898349f2f3770484d475025913d86"
+            "sourceManifestHash": "cb34e70cc83af8018f6bf51b56818957e43a0c7ee637b2da6cab31562519cfb9"
           }
         }
       ],
@@ -2075,12 +2403,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "a81a72b151ae1ac8f4d423188db7d1185d55ef161a06ae067b4ad73f1da996a2",
+      "sourceManifestHash": "d0069f417878418767e547da75d78dd9b18624b93ac49ddd7785aaa611bfd583",
       "display": {
         "icon": "container",
         "category": "build",
         "summary": "OCI image registry adapter and workspace-image baker: proxies push/pull and bakes custom worker images."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "control-plane",
@@ -2095,7 +2425,9 @@
       "services": [
         "control-plane-api"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
         {
           "consumerService": "control-plane-api",
@@ -2107,7 +2439,7 @@
             "repo": "repos/xema-base",
             "path": "repos/xema-base/biomes/authorization",
             "version": "0.1.0",
-            "sourceManifestHash": "757ad1901fbeaeb8e2ff20bf7f5aa381e03ae9a72c43ac9a88eabc1af92371a1"
+            "sourceManifestHash": "3687551f3883d53cba6c201ecb449d4aabb4005a9ccd1eb429732fb497c912d0"
           }
         },
         {
@@ -2120,7 +2452,7 @@
             "repo": "repos/xema-base",
             "path": "repos/xema-base/biomes/biome-host",
             "version": "0.1.0",
-            "sourceManifestHash": "6e522468aff28ebd3f8989d63f061cf8ead477a37844f804ae8b0f434f0258ff"
+            "sourceManifestHash": "8183c2181ec479bbd2c1d68abb3574a2ec2c6b50926dcbb200ecb5d9eb256671"
           }
         },
         {
@@ -2147,9 +2479,9 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
@@ -2164,7 +2496,7 @@
             "repo": "repos/xema-base",
             "path": "repos/xema-base/biomes/space-registry",
             "version": "0.1.0",
-            "sourceManifestHash": "2dfcb549315fefa787a0008f6d924847e41126842542786c7172391cc1cada9f"
+            "sourceManifestHash": "6a8f974d2d66f24346859066e3ea7b72c4a8b96546fea061277fa51b31b5449c"
           }
         }
       ],
@@ -2174,12 +2506,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "3733fe4f1a23af4e4bbec6837b94f2933e10a5c2d75d2cfe8340cf32776b21ed",
+      "sourceManifestHash": "fd2c03b52fae21cce5ba73f746596f05c89da2b36619e2520bf29d596ad3957b",
       "display": {
         "icon": "settings",
         "category": "operate",
         "summary": "Xema-as-Code control plane — the org-admin edge that applies declarative xema.yaml and Terraform provisioning across the platform registries."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "conversation-channels",
@@ -2194,7 +2528,9 @@
       "services": [
         "channel-gateway-api"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
         {
           "consumerService": "channel-gateway-api",
@@ -2207,9 +2543,9 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
@@ -2221,12 +2557,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "99e7e12ca99e266b1b6048e5fe0be25ae97e2ee0afdc505c81399cc1f6b404c2",
+      "sourceManifestHash": "118de16bf727ac27e3dcf2273cd835a07e2d35ab58e4d89bf2bf4b325583a789",
       "display": {
         "icon": "message-circle",
         "category": "connect",
         "summary": "Conversation channels — bridges any installed conversation connector (Telegram, Slack, …) to durable Xema agent sessions with coalesced replies."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "document-rendering",
@@ -2241,7 +2579,9 @@
       "services": [
         "document-render-api"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
         {
           "consumerService": "document-render-api",
@@ -2267,12 +2607,25 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
+        },
+        {
+          "consumerService": "document-render-api",
+          "requiredService": "template-registry-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "template-registry",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/template-registry",
+            "version": "0.1.0",
+            "sourceManifestHash": "4ad780ec6b56898c42c8025059d2c1d080b1d9c1e44c2db2f1e5f0790d462018"
+          }
         }
       ],
       "displayName": "Document Rendering",
@@ -2281,12 +2634,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "aeb0ec45ba6a3b8fe4e36cd1e7dc3b9628f3e3e4eb43fcc0bcd7654bd0a4c888",
+      "sourceManifestHash": "f4842cb8b46ad94ec367890c5de4b3697262dba8e68bf5e54e389af9b4138cfe",
       "display": {
         "icon": "file-text",
         "category": "knowledge",
         "summary": "Document rendering — generic primitive that materializes markdown/HTML/echarts into PDF/PNG artifacts for any biome."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "knowledge-base",
@@ -2301,7 +2656,9 @@
       "services": [
         "knowledge-base-api"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
         {
           "consumerService": "knowledge-base-api",
@@ -2313,7 +2670,7 @@
             "repo": "repos/xema-base",
             "path": "repos/xema-base/biomes/authorization",
             "version": "0.1.0",
-            "sourceManifestHash": "757ad1901fbeaeb8e2ff20bf7f5aa381e03ae9a72c43ac9a88eabc1af92371a1"
+            "sourceManifestHash": "3687551f3883d53cba6c201ecb449d4aabb4005a9ccd1eb429732fb497c912d0"
           }
         },
         {
@@ -2340,12 +2697,25 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
+        },
+        {
+          "consumerService": "knowledge-base-api",
+          "requiredService": "public-gateway-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "public-gateway",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/public-gateway",
+            "version": "0.1.0",
+            "sourceManifestHash": "67c87b76865552edf03521f292110ecb513f99f93ba2078bcdaac7b8ca9325b2"
+          }
         }
       ],
       "displayName": "Knowledge Base",
@@ -2354,12 +2724,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "05352e300ab561ccd98189bb63012174d79b25f3f0a8c31aaecf04a123f903f0",
+      "sourceManifestHash": "69e14d6a7030a9ba6d3328b1368adb60ff1d08bbf9916817fa991b28927708d2",
       "display": {
         "icon": "book-open",
         "category": "knowledge",
         "summary": "Knowledge base primitive: document storage plus semantic search consumed across tiers."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "mcp-router",
@@ -2374,7 +2746,9 @@
       "services": [
         "mcp-gateway-api"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
         {
           "consumerService": "mcp-gateway-api",
@@ -2386,7 +2760,20 @@
             "repo": "repos/xema-base",
             "path": "repos/xema-base/biomes/biome-host",
             "version": "0.1.0",
-            "sourceManifestHash": "6e522468aff28ebd3f8989d63f061cf8ead477a37844f804ae8b0f434f0258ff"
+            "sourceManifestHash": "8183c2181ec479bbd2c1d68abb3574a2ec2c6b50926dcbb200ecb5d9eb256671"
+          }
+        },
+        {
+          "consumerService": "mcp-gateway-api",
+          "requiredService": "credential-broker-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "connector-platform",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/connector-platform",
+            "version": "0.1.0",
+            "sourceManifestHash": "cd53a7f937c3a3e2ce4336c608e6dc5887fb1b30cdb3521b5a8079627376571e"
           }
         },
         {
@@ -2400,9 +2787,9 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
@@ -2417,7 +2804,7 @@
             "repo": "repos/xema-base",
             "path": "repos/xema-base/biomes/org-database-pool",
             "version": "0.1.0",
-            "sourceManifestHash": "4a9077cbda9fb20adf207682173a3df88398ff7288428b9a356213000c68997c"
+            "sourceManifestHash": "019abba8218c9dadb0be490d6c9f42c58e390c8a89dd0c0bfe631f3eb0210765"
           }
         }
       ],
@@ -2427,12 +2814,79 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "65ccf9ef1e56529751c54547d4be240ae8d0464c2b746bf1439f3b97fa43272f",
+      "sourceManifestHash": "6cd86be9d18a5c3dfd53ea00ac111be322d8e2423260beee4a2a463360fe41bd",
       "display": {
         "icon": "network",
         "category": "connect",
         "summary": "External MCP bridge: routes agent MCP tool calls to registered or biome-shipped MCP servers."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
+    },
+    {
+      "id": "output-surface-control",
+      "version": "1.0.0",
+      "tier": "base",
+      "target": "server",
+      "origin": "first-party",
+      "mandatory": false,
+      "installPolicy": "default-selected",
+      "repo": "repos/xema-base",
+      "path": "repos/xema-base/biomes/kernel/output-surface-control",
+      "services": [],
+      "serviceDatabases": {},
+      "runtimeComponents": [],
+      "hostModules": [],
+      "serviceDependencies": [],
+      "displayName": "Output Surface Control",
+      "packageName": "@xemahq/biomes-kernel-output-surface-control",
+      "requiresServerBiomes": [
+        "runtime"
+      ],
+      "optionalServerBiomes": [],
+      "audience": "org",
+      "storeListed": false,
+      "sourceManifestHash": "c963d8f49323c402e322582e9e396c8a538b205c9ff8f363aca1400e6c65853d",
+      "display": {
+        "icon": "refresh-cw",
+        "category": "operate",
+        "summary": "Output-surface control tools: re-trigger the deterministic install-to-start pipeline over the workspace-proxy API."
+      },
+      "systemSurface": false,
+      "launch": "static"
+    },
+    {
+      "id": "output-surface-inspector",
+      "version": "1.0.0",
+      "tier": "base",
+      "target": "server",
+      "origin": "first-party",
+      "mandatory": false,
+      "installPolicy": "default-selected",
+      "repo": "repos/xema-base",
+      "path": "repos/xema-base/biomes/kernel/output-surface-inspector",
+      "services": [],
+      "serviceDatabases": {},
+      "runtimeComponents": [],
+      "hostModules": [],
+      "serviceDependencies": [],
+      "displayName": "Output Surface Inspector",
+      "packageName": "@xemahq/biomes-kernel-output-surface-inspector",
+      "requiresServerBiomes": [
+        "output-surface-control",
+        "runtime"
+      ],
+      "optionalServerBiomes": [],
+      "audience": "org",
+      "storeListed": false,
+      "sourceManifestHash": "e6998235405dfbfa682fa77b7074e4383e50387fad959db2f3822b05c55af932",
+      "display": {
+        "icon": "search",
+        "category": "operate",
+        "summary": "Output-surface inspection: browser tool, inspector sub-agent, and bridge for read-only diagnosis of live pages."
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "policy-distributor",
@@ -2447,7 +2901,9 @@
       "services": [
         "policy-distributor-api"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
         {
           "consumerService": "policy-distributor-api",
@@ -2460,9 +2916,9 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
@@ -2479,7 +2935,9 @@
         "icon": "file-lock",
         "category": "governance",
         "summary": "Central OPA bundle distributor: serves signed, versioned policy bundles over the OPA Bundle Service protocol."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "project-registry",
@@ -2494,7 +2952,9 @@
       "services": [
         "project-registry-api"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
         {
           "consumerService": "project-registry-api",
@@ -2507,9 +2967,9 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
@@ -2526,7 +2986,74 @@
         "icon": "folders",
         "category": "platform",
         "summary": "Project and membership management: owns project identity, membership, and role assignment."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
+    },
+    {
+      "id": "studio-author",
+      "version": "1.0.0",
+      "tier": "base",
+      "target": "server",
+      "origin": "first-party",
+      "mandatory": false,
+      "installPolicy": "default-selected",
+      "repo": "repos/xema-base",
+      "path": "repos/xema-base/biomes/kernel/studio-author",
+      "services": [],
+      "serviceDatabases": {},
+      "runtimeComponents": [],
+      "hostModules": [],
+      "serviceDependencies": [],
+      "displayName": "Studio Author",
+      "packageName": "@xemahq/biomes-kernel-studio-author",
+      "requiresServerBiomes": [
+        "runtime",
+        "subagents"
+      ],
+      "optionalServerBiomes": [],
+      "audience": "org",
+      "storeListed": false,
+      "sourceManifestHash": "862461feecc25209b9de3b689ee74f0a20434a506bd8b2de1ffe7702a417aad6",
+      "display": {
+        "icon": "wand",
+        "category": "build",
+        "summary": "Authoring co-pilot for Agent Studio: workflow/spec authors and a build-with-an-agent profile that emits typed proposals."
+      },
+      "systemSurface": false,
+      "launch": "static"
+    },
+    {
+      "id": "subagents",
+      "version": "1.0.0",
+      "tier": "base",
+      "target": "server",
+      "origin": "first-party",
+      "mandatory": false,
+      "installPolicy": "default-selected",
+      "repo": "repos/xema-base",
+      "path": "repos/xema-base/biomes/kernel/subagents",
+      "services": [],
+      "serviceDatabases": {},
+      "runtimeComponents": [],
+      "hostModules": [],
+      "serviceDependencies": [],
+      "displayName": "Xema Universal Subagents",
+      "packageName": "@xemahq/biomes-kernel-subagents",
+      "requiresServerBiomes": [
+        "runtime"
+      ],
+      "optionalServerBiomes": [],
+      "audience": "org",
+      "storeListed": false,
+      "sourceManifestHash": "033135a9948495a19b38e1602269a8f76559da0eed9a88952d09d8303434a8cf",
+      "display": {
+        "icon": "users",
+        "category": "runtime",
+        "summary": "Canonical base roster of platform subagents and gate-reviewers, plus their MCP tool-profiles."
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "user-hub",
@@ -2541,7 +3068,9 @@
       "services": [
         "user-hub-api"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
         {
           "consumerService": "user-hub-api",
@@ -2567,9 +3096,9 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
@@ -2581,12 +3110,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "62c69a87b5f86c1b6d34f44606e9d7a57215263e234a4fd39e5ee079352eef37",
+      "sourceManifestHash": "66f7f1fd7344bda4dace03ada814b899ed823877f6fb30d8e0ea16383c37cb26",
       "display": {
         "icon": "users",
         "category": "governance",
         "summary": "User profile, notification, and presence read-model aggregating Keycloak state into a canonical view."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "web-access",
@@ -2601,7 +3132,9 @@
       "services": [
         "web-access-api"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
         {
           "consumerService": "web-access-api",
@@ -2614,9 +3147,9 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
@@ -2633,7 +3166,9 @@
         "icon": "globe",
         "category": "runtime",
         "summary": "Governed public-web access — the ONE audited door for fetching and searching the public internet."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "workflow-runtime",
@@ -2650,7 +3185,9 @@
         "workflow-engine-api",
         "workflow-runtime-worker"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
         {
           "consumerService": "deliverable-specs-api",
@@ -2662,7 +3199,7 @@
             "repo": "repos/xema-base",
             "path": "repos/xema-base/biomes/biome-host",
             "version": "0.1.0",
-            "sourceManifestHash": "6e522468aff28ebd3f8989d63f061cf8ead477a37844f804ae8b0f434f0258ff"
+            "sourceManifestHash": "8183c2181ec479bbd2c1d68abb3574a2ec2c6b50926dcbb200ecb5d9eb256671"
           }
         },
         {
@@ -2676,13 +3213,26 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
         },
+        {
+          "consumerService": "deliverable-specs-api",
+          "requiredService": "resource-governance-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "resource-governance",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/resource-governance",
+            "version": "0.1.0",
+            "sourceManifestHash": "dd08d16a77d775af78133113d1bb3ae659adc8af1d56d4569ee6e27f7426c37c"
+          }
+        },
         {
           "consumerService": "workflow-engine-api",
           "requiredService": "biome-host-api",
@@ -2693,7 +3243,20 @@
             "repo": "repos/xema-base",
             "path": "repos/xema-base/biomes/biome-host",
             "version": "0.1.0",
-            "sourceManifestHash": "6e522468aff28ebd3f8989d63f061cf8ead477a37844f804ae8b0f434f0258ff"
+            "sourceManifestHash": "8183c2181ec479bbd2c1d68abb3574a2ec2c6b50926dcbb200ecb5d9eb256671"
+          }
+        },
+        {
+          "consumerService": "workflow-engine-api",
+          "requiredService": "deliverable-specs-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "workflow-runtime",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/workflow-runtime",
+            "version": "0.1.0",
+            "sourceManifestHash": "f7d826adb9e76e1e71a68868b1e1e0615a467c9d1661b1af767541b9a978dd00"
           }
         },
         {
@@ -2707,12 +3270,25 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
+        },
+        {
+          "consumerService": "workflow-engine-api",
+          "requiredService": "resource-governance-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "resource-governance",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/resource-governance",
+            "version": "0.1.0",
+            "sourceManifestHash": "dd08d16a77d775af78133113d1bb3ae659adc8af1d56d4569ee6e27f7426c37c"
+          }
         }
       ],
       "displayName": "Workflow Runtime",
@@ -2721,12 +3297,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "21f6e8eb656f1a5e73e1980401e56c34eee55964bace21db87d065e2f690cb06",
+      "sourceManifestHash": "f7d826adb9e76e1e71a68868b1e1e0615a467c9d1661b1af767541b9a978dd00",
       "display": {
         "icon": "workflow",
         "category": "runtime",
         "summary": "Workflow primitive: DSL compilation, Temporal-driven workflow execution, and the typed deliverable-spec store."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "workspace-orchestrator",
@@ -2741,7 +3319,9 @@
       "services": [
         "workspace-orchestrator-api"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
         {
           "consumerService": "workspace-orchestrator-api",
@@ -2753,7 +3333,7 @@
             "repo": "repos/xema-base",
             "path": "repos/xema-base/biomes/biome-host",
             "version": "0.1.0",
-            "sourceManifestHash": "6e522468aff28ebd3f8989d63f061cf8ead477a37844f804ae8b0f434f0258ff"
+            "sourceManifestHash": "8183c2181ec479bbd2c1d68abb3574a2ec2c6b50926dcbb200ecb5d9eb256671"
           }
         },
         {
@@ -2767,9 +3347,9 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
@@ -2785,13 +3365,26 @@
               "repositoryUrl": "https://github.com/xema-dev/llm-gateway-api.git",
               "repo": "submodules/llm-gateway-api",
               "path": "submodules/llm-gateway-api/package.json",
-              "sourceCommit": "79e4da92d86f8a7dc7605a8eca6837006495ccf5",
+              "sourceCommit": "83db971a3bc72d5e0d633c8e96215de850dc7359",
               "version": "1.0.0",
               "sourceManifestHash": "a862e41a632f3aecf1d6037b842a70ca5be91c996a89a68bd8200068355f43b8",
               "imageKey": "llm-gateway-api"
             }
           }
         },
+        {
+          "consumerService": "workspace-orchestrator-api",
+          "requiredService": "resource-governance-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "resource-governance",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/resource-governance",
+            "version": "0.1.0",
+            "sourceManifestHash": "dd08d16a77d775af78133113d1bb3ae659adc8af1d56d4569ee6e27f7426c37c"
+          }
+        },
         {
           "consumerService": "workspace-orchestrator-api",
           "requiredService": "workload-runtime-api",
@@ -2802,7 +3395,7 @@
             "repo": "repos/xema-base",
             "path": "repos/xema-base/biomes/workload-runtime",
             "version": "0.1.0",
-            "sourceManifestHash": "021012bff91a63be2f7981c8ba54fa4b1c1898349f2f3770484d475025913d86"
+            "sourceManifestHash": "cb34e70cc83af8018f6bf51b56818957e43a0c7ee637b2da6cab31562519cfb9"
           }
         },
         {
@@ -2828,7 +3421,7 @@
             "repo": "repos/xema-base",
             "path": "repos/xema-base/biomes/xema-capability-router",
             "version": "0.1.0",
-            "sourceManifestHash": "39a08d58a36cc8c469740f1ce28eed1d72b1ec55fb3a2c40645020c533bcc1f9"
+            "sourceManifestHash": "4ccc5c67859a6576a8e994d6a156bb5a3035c5ae1dedc3708d0f2da101cd564f"
           }
         }
       ],
@@ -2838,12 +3431,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "5c311b32be20adb044ad1687cb97d8c38f2e3885664d54063ea866261f85fe58",
+      "sourceManifestHash": "f2aee41b0bd7f68b970a4357154d914fe8f810be4ae2b66bb7876ff2b4600a7a",
       "display": {
         "icon": "layout-grid",
         "category": "runtime",
         "summary": "Per-session workspace lifecycle: creates, hibernates, and reaps workspace allocations."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "workspace-proxy",
@@ -2858,7 +3453,9 @@
       "services": [
         "workspace-materialization-api"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
         {
           "consumerService": "workspace-materialization-api",
@@ -2871,9 +3468,9 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
@@ -2890,7 +3487,9 @@
         "icon": "route",
         "category": "runtime",
         "summary": "Per-allocation HTTP proxy: routes session and control-plane traffic into the workspace runtime worker."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "xema-biome-runner",
@@ -2905,7 +3504,9 @@
       "services": [
         "xema-biome-runner"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [],
       "displayName": "Xema Biome Runner",
       "packageName": "@xemahq/biomes-xema-biome-runner",
@@ -2918,7 +3519,60 @@
         "icon": "play",
         "category": "runtime",
         "summary": "Generic biome executor: in-process host for biome-shipped Temporal workflows, activities, and capabilities."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
+    },
+    {
+      "id": "xema-shell",
+      "version": "0.1.0",
+      "tier": "base",
+      "target": "server",
+      "origin": "first-party",
+      "mandatory": false,
+      "installPolicy": "default-selected",
+      "repo": "repos/xema-base",
+      "path": "repos/xema-base/biomes/xema-shell",
+      "services": [
+        "xema-shell-api"
+      ],
+      "serviceDatabases": {},
+      "runtimeComponents": [],
+      "hostModules": [],
+      "serviceDependencies": [
+        {
+          "consumerService": "xema-shell-api",
+          "requiredService": "identity-api",
+          "owner": {
+            "kind": "platform",
+            "source": {
+              "name": "identity-api",
+              "tier": "infra",
+              "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
+              "repo": "submodules/identity-api",
+              "path": "submodules/identity-api/package.json",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
+              "version": "0.0.2",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
+              "imageKey": "identity-api"
+            }
+          }
+        }
+      ],
+      "displayName": "Xema Shell",
+      "packageName": "@xemahq/biomes-xema-shell",
+      "requiresServerBiomes": [],
+      "optionalServerBiomes": [],
+      "audience": "org",
+      "storeListed": true,
+      "sourceManifestHash": "80d843d3537c281c6241094f6f4c358afffd40d73d92b9672e9e58d5d123e85f",
+      "display": {
+        "icon": "terminal",
+        "category": "runtime",
+        "summary": "Xema OS shell: the `xema …` command surface, XVFS path resolution, and the concept object slice."
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "xema-store",
@@ -2937,6 +3591,7 @@
         "xema-store-api": "store"
       },
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
         {
           "consumerService": "xema-store-api",
@@ -2948,7 +3603,7 @@
             "repo": "repos/xema-base",
             "path": "repos/xema-base/biomes/authorization",
             "version": "0.1.0",
-            "sourceManifestHash": "757ad1901fbeaeb8e2ff20bf7f5aa381e03ae9a72c43ac9a88eabc1af92371a1"
+            "sourceManifestHash": "3687551f3883d53cba6c201ecb449d4aabb4005a9ccd1eb429732fb497c912d0"
           }
         },
         {
@@ -2961,7 +3616,7 @@
             "repo": "repos/xema-base",
             "path": "repos/xema-base/biomes/decision",
             "version": "0.1.0",
-            "sourceManifestHash": "3e93781a626e400f7970ffb97e8ef0b49271caebb6b4ae278d9efbaad56fa127"
+            "sourceManifestHash": "1e3912bdd71f7a9753e7027773c45d107b35a1dacb6708547c042bb4c5cc0ed1"
           }
         },
         {
@@ -2975,12 +3630,25 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
+        },
+        {
+          "consumerService": "xema-store-api",
+          "requiredService": "resource-governance-api",
+          "owner": {
+            "kind": "biome",
+            "biomeId": "resource-governance",
+            "target": "server",
+            "repo": "repos/xema-base",
+            "path": "repos/xema-base/biomes/resource-governance",
+            "version": "0.1.0",
+            "sourceManifestHash": "dd08d16a77d775af78133113d1bb3ae659adc8af1d56d4569ee6e27f7426c37c"
+          }
         }
       ],
       "displayName": "Xema Store",
@@ -2989,12 +3657,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "b80c11d43ec7c2944ac29e2b435011d7fb4bdd0c9a932e0f8bce9aae89ff91d5",
+      "sourceManifestHash": "a2cb3e261f98d893cf246ed3b0cea62d076317d66fef8dcb8173fee7fc27a5ec",
       "display": {
         "icon": "store",
         "category": "operate",
         "summary": "Xema Store backend — the catalog/marketplace of installable biomes and apps, with listings, entitlements and install fulfillment."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "mailops",
@@ -3009,7 +3679,9 @@
       "services": [
         "mailops-api"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
         {
           "consumerService": "mailops-api",
@@ -3021,7 +3693,7 @@
             "repo": "repos/xema-base",
             "path": "repos/xema-base/biomes/agent-runtime",
             "version": "0.1.0",
-            "sourceManifestHash": "a13807cf05146aca50ee7964e66af7844f0bcfd34e35352227944ec81997461f"
+            "sourceManifestHash": "5336acb3131601e721d6d54626c70d1cbbb8f424803f43e974a8ced764a9ffe9"
           }
         },
         {
@@ -3034,7 +3706,7 @@
             "repo": "repos/xema-base",
             "path": "repos/xema-base/biomes/authorization",
             "version": "0.1.0",
-            "sourceManifestHash": "757ad1901fbeaeb8e2ff20bf7f5aa381e03ae9a72c43ac9a88eabc1af92371a1"
+            "sourceManifestHash": "3687551f3883d53cba6c201ecb449d4aabb4005a9ccd1eb429732fb497c912d0"
           }
         },
         {
@@ -3060,7 +3732,7 @@
             "repo": "repos/xema-base",
             "path": "repos/xema-base/biomes/connector-platform",
             "version": "0.1.0",
-            "sourceManifestHash": "36862dd4bf78175095aab7fc39fcead6b0993cd48604b3a054e18132374fc9d0"
+            "sourceManifestHash": "cd53a7f937c3a3e2ce4336c608e6dc5887fb1b30cdb3521b5a8079627376571e"
           }
         },
         {
@@ -3073,7 +3745,7 @@
             "repo": "repos/xema-base",
             "path": "repos/xema-base/biomes/connector-platform",
             "version": "0.1.0",
-            "sourceManifestHash": "36862dd4bf78175095aab7fc39fcead6b0993cd48604b3a054e18132374fc9d0"
+            "sourceManifestHash": "cd53a7f937c3a3e2ce4336c608e6dc5887fb1b30cdb3521b5a8079627376571e"
           }
         },
         {
@@ -3087,9 +3759,9 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
@@ -3104,7 +3776,7 @@
             "repo": "repos/xema-base",
             "path": "repos/xema-base/biomes/workflow-runtime",
             "version": "0.1.0",
-            "sourceManifestHash": "21f6e8eb656f1a5e73e1980401e56c34eee55964bace21db87d065e2f690cb06"
+            "sourceManifestHash": "f7d826adb9e76e1e71a68868b1e1e0615a467c9d1661b1af767541b9a978dd00"
           }
         },
         {
@@ -3117,7 +3789,7 @@
             "repo": "repos/xema-base",
             "path": "repos/xema-base/biomes/xema-capability-router",
             "version": "0.1.0",
-            "sourceManifestHash": "39a08d58a36cc8c469740f1ce28eed1d72b1ec55fb3a2c40645020c533bcc1f9"
+            "sourceManifestHash": "4ccc5c67859a6576a8e994d6a156bb5a3035c5ae1dedc3708d0f2da101cd564f"
           }
         }
       ],
@@ -3127,12 +3799,14 @@
       "optionalServerBiomes": [],
       "audience": "org",
       "storeListed": true,
-      "sourceManifestHash": "6fe5b908a01770ca23f86a1ffa478f6c51351b59edadc9167fe74979b36b8db5",
+      "sourceManifestHash": "59dd126a854e2e6bded840f7250ac1cc023266a9749bc33d42ad8f548f614640",
       "display": {
         "icon": "mail",
         "category": "connect",
         "summary": "Email as a workflow entrypoint — intake, understanding, routing, capability call-out and reply."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     },
     {
       "id": "search",
@@ -3147,7 +3821,9 @@
       "services": [
         "search-api"
       ],
+      "serviceDatabases": {},
       "runtimeComponents": [],
+      "hostModules": [],
       "serviceDependencies": [
         {
           "consumerService": "search-api",
@@ -3173,9 +3849,9 @@
               "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
               "repo": "submodules/identity-api",
               "path": "submodules/identity-api/package.json",
-              "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+              "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
               "version": "0.0.2",
-              "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+              "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
               "imageKey": "identity-api"
             }
           }
@@ -3191,7 +3867,7 @@
               "repositoryUrl": "https://github.com/xema-dev/llm-gateway-api.git",
               "repo": "submodules/llm-gateway-api",
               "path": "submodules/llm-gateway-api/package.json",
-              "sourceCommit": "79e4da92d86f8a7dc7605a8eca6837006495ccf5",
+              "sourceCommit": "83db971a3bc72d5e0d633c8e96215de850dc7359",
               "version": "1.0.0",
               "sourceManifestHash": "a862e41a632f3aecf1d6037b842a70ca5be91c996a89a68bd8200068355f43b8",
               "imageKey": "llm-gateway-api"
@@ -3208,7 +3884,7 @@
             "repo": "repos/xema-base",
             "path": "repos/xema-base/biomes/agent-runtime",
             "version": "0.1.0",
-            "sourceManifestHash": "a13807cf05146aca50ee7964e66af7844f0bcfd34e35352227944ec81997461f"
+            "sourceManifestHash": "5336acb3131601e721d6d54626c70d1cbbb8f424803f43e974a8ced764a9ffe9"
           }
         },
         {
@@ -3234,7 +3910,7 @@
             "repo": "repos/xema-base",
             "path": "repos/xema-base/biomes/xema-capability-router",
             "version": "0.1.0",
-            "sourceManifestHash": "39a08d58a36cc8c469740f1ce28eed1d72b1ec55fb3a2c40645020c533bcc1f9"
+            "sourceManifestHash": "4ccc5c67859a6576a8e994d6a156bb5a3035c5ae1dedc3708d0f2da101cd564f"
           }
         }
       ],
@@ -3249,7 +3925,9 @@
         "icon": "search",
         "category": "knowledge",
         "summary": "Full-text and vector search facade over OpenSearch for cross-entity discovery."
-      }
+      },
+      "systemSurface": false,
+      "launch": "static"
     }
   ],
   "platformServices": [
@@ -3262,7 +3940,7 @@
         "repositoryUrl": "https://github.com/xema-dev/billing-api",
         "repo": "submodules/billing-api",
         "path": "submodules/billing-api/package.json",
-        "sourceCommit": "05373db8df238dcc33c65bf818d06eb71ac3b5ec",
+        "sourceCommit": "c3cdb18b44f5d100ed959d6ff43170a162346f89",
         "version": "0.0.1",
         "sourceManifestHash": "bffedc40a8eb621172ffc81dbc9e602e92cb0af7d35e704e83622c5bb06eb654",
         "imageKey": "billing-api"
@@ -3277,7 +3955,7 @@
         "repositoryUrl": "https://github.com/xema-dev/event-hub-api.git",
         "repo": "submodules/event-hub-api",
         "path": "submodules/event-hub-api/package.json",
-        "sourceCommit": "8ff3acef9ca979948b2b1eb95c3964f97caf16b1",
+        "sourceCommit": "6bc36b61db3ef7c9384410c1a151dab4dd1bd559",
         "version": "2.0.0",
         "sourceManifestHash": "2e57d7356ed288b00e35f3ee4aa542cdbb1eb25d94a8fecbc2bda76cedd5f995",
         "imageKey": "event-hub-api"
@@ -3292,9 +3970,9 @@
         "repositoryUrl": "https://github.com/xema-dev/identity-api.git",
         "repo": "submodules/identity-api",
         "path": "submodules/identity-api/package.json",
-        "sourceCommit": "aeed57a5f01d50d0f4e9dff7c61967240a33ea4d",
+        "sourceCommit": "5bca87e39c536159b91c58d4e8a30d8df2f12ca4",
         "version": "0.0.2",
-        "sourceManifestHash": "240f19853364d56b71c89c5a7d15da4ce24d8423bdc22677a87603e0bac378ca",
+        "sourceManifestHash": "f0acc5e81bb3b00f98e1fde709e9dc24903bdf2ce5bdc6eeec0d5b9338bf5c1b",
         "imageKey": "identity-api"
       }
     },
@@ -3307,7 +3985,7 @@
         "repositoryUrl": "https://github.com/xema-dev/llm-gateway-api.git",
         "repo": "submodules/llm-gateway-api",
         "path": "submodules/llm-gateway-api/package.json",
-        "sourceCommit": "79e4da92d86f8a7dc7605a8eca6837006495ccf5",
+        "sourceCommit": "83db971a3bc72d5e0d633c8e96215de850dc7359",
         "version": "1.0.0",
         "sourceManifestHash": "a862e41a632f3aecf1d6037b842a70ca5be91c996a89a68bd8200068355f43b8",
         "imageKey": "llm-gateway-api"
@@ -3322,7 +4000,7 @@
         "repositoryUrl": "https://github.com/xema-dev/secrets-api.git",
         "repo": "submodules/secrets-api",
         "path": "submodules/secrets-api/package.json",
-        "sourceCommit": "5cb3114aa9fee7eeed42aeeea0ddd2d5a1ed8722",
+        "sourceCommit": "34ae47ba5dad3bf8674eedf63851b0a161d1645b",
         "version": "1.0.0",
         "sourceManifestHash": "51d6db6fac73a58b167eb7615c371fc75dfdb13a294c22ddb98c18d99df620a7",
         "imageKey": "secrets-api"
@@ -3330,19 +4008,63 @@
     },
     {
       "name": "xema-kernel-server",
-      "tier": "kernel"
+      "tier": "kernel",
+      "source": {
+        "name": "xema-kernel-server",
+        "tier": "kernel",
+        "repositoryUrl": "https://github.com/xema-dev/xema-base.git",
+        "repo": "repos/xema-base",
+        "path": "repos/xema-base/kernel/xema-kernel-server/package.json",
+        "sourceCommit": "b29524fbad5baa50f68005ed266a62c886cce69e",
+        "version": "0.1.0",
+        "sourceManifestHash": "d84b71fafcbee7cdfe7f3b329a02578228bb008f4352788786869eaada86fce4",
+        "imageKey": "xema-kernel-server"
+      }
     },
     {
       "name": "docs-api",
-      "tier": "platform"
+      "tier": "platform",
+      "source": {
+        "name": "docs-api",
+        "tier": "platform",
+        "repositoryUrl": "https://github.com/xema-dev/xema-docs.git",
+        "repo": "repos/xema-docs",
+        "path": "repos/xema-docs/package.json",
+        "sourceCommit": "653663d3dfd88a32be922cfb0ac111808adbec97",
+        "version": "0.0.1",
+        "sourceManifestHash": "10770a77153a2549a3e1af1142e3c52f1125f9b7a178937f1c05f76ce88e7cbc",
+        "imageKey": "docs-api"
+      }
     },
     {
       "name": "opencode-image-prepuller",
-      "tier": "platform"
+      "tier": "platform",
+      "source": {
+        "name": "opencode-image-prepuller",
+        "tier": "platform",
+        "repositoryUrl": "https://github.com/xema-dev/xema-base.git",
+        "repo": "repos/xema-base",
+        "path": "repos/xema-base/biomes/opencode-runtime/xema-biome.json",
+        "sourceCommit": "b29524fbad5baa50f68005ed266a62c886cce69e",
+        "version": "0.1.0",
+        "sourceManifestHash": "4b38bba65e002f24e26ef4572ffa0e123da6cb0cdf0cd2fa5b2582e969abeb94",
+        "imageKey": "opencode-worker"
+      }
     },
     {
       "name": "xema-host-web",
-      "tier": "edge"
+      "tier": "edge",
+      "source": {
+        "name": "xema-host-web",
+        "tier": "edge",
+        "repositoryUrl": "https://github.com/xema-dev/xema-host-web.git",
+        "repo": "submodules/xema-host-web",
+        "path": "submodules/xema-host-web/package.json",
+        "sourceCommit": "0c61f431abc8543fe9475535640f339311083966",
+        "version": "2.2.0",
+        "sourceManifestHash": "30300d6cf87a55727209e9a9580500aaf9094659a4043481c74b33deb3163005",
+        "imageKey": "xema-host-web"
+      }
     }
   ],
   "capabilityDomainOwners": [
@@ -3422,6 +4144,10 @@
       "domain": "studio",
       "biomeId": "studio-author"
     },
+    {
+      "domain": "template",
+      "biomeId": "template-registry"
+    },
     {
       "domain": "web",
       "biomeId": "web-access"
@@ -3443,5 +4169,5 @@
       "biomeId": "xema-shell"
     }
   ],
-  "inputHash": "dea99fb5d288dbbb873bbb2d70cae30b2b645ae8d4a5c2896f2d36ba9d26670a"
+  "inputHash": "5b680861bd74426e6237143e05dec90eaeb8cfe6138c1c61445de3ee2099f71e"
 }