@xemahq/xema 0.17.0 → 0.18.1

package/examples/03-byo-infra.yaml

@@ -19,7 +19,6 @@ infra:
     { mode: external, url: https://s3.corp.internal, bucketPrefix: xema- }
   redis: { mode: managed }
   etcd: { mode: managed }
-  search: { mode: managed }
   temporal: { mode: disabled } # this install doesn't use durable workflows
 secrets:
   corp-postgres-password: { from: env, env: XEMA_POSTGRES_PASSWORD }

package/examples/04-subset-knowledge.yaml

@@ -14,4 +14,3 @@ infra:
   etcd:        { mode: managed }
   keycloak:    { mode: managed }
   objectStore: { mode: managed }
-  search:      { mode: managed }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xemahq/xema",
-  "version": "0.17.0",
+  "version": "0.18.1",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/xema-dev/xema-cli.git",
@@ -35,21 +35,21 @@
     "access": "public"
   },
   "dependencies": {
-    "@nestjs/common": "11.1.18",
-    "@nestjs/core": "11.1.18",
-    "@nestjs/platform-express": "11.1.28",
-    "@xemahq/biome-sdk": "^13.6.0",
+    "@nestjs/common": "^11.1.18",
+    "@nestjs/core": "^11.1.18",
+    "@nestjs/platform-express": "^11.1.28",
+    "@xemahq/biome-sdk": "^16.0.0",
     "@xemahq/biome-supply-chain": "^0.3.0",
-    "@xemahq/distribution-resolver": "^0.2.0",
-    "@xemahq/dsl": "0.12.0",
-    "@xemahq/identity-client": "0.9.6",
-    "@xemahq/kernel-contracts": "^34.2.0",
-    "@xemahq/kernel-state-runtime": "^0.4.0",
-    "@xemahq/license-verifier": "^0.1.1",
-    "@xemahq/service-registry-nest": "^0.8.6",
+    "@xemahq/distribution-resolver": "^0.4.1",
+    "@xemahq/dsl": "^0.20.0",
+    "@xemahq/identity-client": "^0.9.6",
+    "@xemahq/contracts": "^0.16.0",
+    "@xemahq/kernel-state-runtime": "^0.6.1",
+    "@xemahq/license-verifier": "^0.2.0",
+    "@xemahq/service-registry-nest": "^0.11.2",
     "commander": "^12.1.0",
-    "reflect-metadata": "0.2.2",
-    "rxjs": "7.8.2",
+    "reflect-metadata": "^0.2.2",
+    "rxjs": "^7.8.2",
     "tsx": "^4.19.2",
     "yaml": "^2.6.1",
     "zod": "^4.3.6"
@@ -57,7 +57,8 @@
   "devDependencies": {
     "@types/jest": "^30.0.0",
     "@types/node": "25.2.3",
-    "@xemahq/eslint-config": "0.2.0",
+    "@xemahq/biome-host-api-client": "^0.3.29",
+    "@xemahq/eslint-config": "^0.5.0",
     "eslint": "^9.39.4",
     "jest": "^30.3.0",
     "prettier": "3.6.2",

package/xema.config.example.yaml

@@ -16,7 +16,6 @@ infra:
   etcd: { mode: managed } # mandatory (service discovery)
   keycloak: { mode: managed } # mandatory (identity)
   objectStore: { mode: managed } # mandatory (blobs/artifacts)
-  search: { mode: managed } # optional (full-text / vectors)
   fga: { mode: managed } # optional (authorization ReBAC)
   git: { mode: disabled } # optional (SCM integration)
   temporal: { mode: managed } # optional (durable workflows)

package/dist/dev/opa-policies.d.ts

@@ -1,3 +0,0 @@
-import type { RosterEntry } from '../runtime/roster';
-export declare function ensureOpaPolicies(roster: readonly RosterEntry[], monorepoRoot: string, log: (message: string) => void): Promise<void>;
-//# sourceMappingURL=opa-policies.d.ts.map

package/dist/dev/opa-policies.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"opa-policies.d.ts","sourceRoot":"","sources":["../../src/dev/opa-policies.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAmBrD,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,SAAS,WAAW,EAAE,EAC9B,YAAY,EAAE,MAAM,EACpB,GAAG,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,GAC7B,OAAO,CAAC,IAAI,CAAC,CA+Cf"}

package/dist/dev/opa-policies.js

@@ -1,64 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.ensureOpaPolicies = ensureOpaPolicies;
-const node_child_process_1 = require("node:child_process");
-const node_fs_1 = require("node:fs");
-const node_path_1 = require("node:path");
-const OPA_IMAGE = 'openpolicyagent/opa:latest';
-const POLICY_ENTRYPOINT = 'xema/policy/decision';
-async function ensureOpaPolicies(roster, monorepoRoot, log) {
-    const authz = roster.find((entry) => entry.name === 'authorization-api');
-    if (authz?.servicePath === undefined || authz.sourceRoot !== undefined) {
-        return;
-    }
-    const policiesDir = (0, node_path_1.join)(monorepoRoot, authz.servicePath, 'policies');
-    const rego = (0, node_path_1.join)(policiesDir, 'xema.rego');
-    const distDir = (0, node_path_1.join)(policiesDir, 'dist');
-    const wasm = (0, node_path_1.join)(distDir, 'policy.wasm');
-    if ((0, node_fs_1.existsSync)(wasm) || !(0, node_fs_1.existsSync)(rego)) {
-        return;
-    }
-    log('opa      : building authorization-api policy.wasm (embedded mode) …');
-    try {
-        (0, node_fs_1.mkdirSync)(distDir, { recursive: true });
-        await run('docker', [
-            'run',
-            '--rm',
-            '-v',
-            `${policiesDir}:/w`,
-            '-w',
-            '/w',
-            OPA_IMAGE,
-            'build',
-            '-t',
-            'wasm',
-            '-e',
-            POLICY_ENTRYPOINT,
-            'xema.rego',
-            '-o',
-            '/w/dist/bundle.tar.gz',
-        ]);
-        await run('tar', ['-xzf', (0, node_path_1.join)(distDir, 'bundle.tar.gz'), '-C', distDir]);
-        if (!(0, node_fs_1.existsSync)(wasm)) {
-            throw new Error('opa build did not produce policy.wasm');
-        }
-        log('opa      : policy.wasm built.');
-    }
-    catch (err) {
-        log(`opa      : WARN could not build policy.wasm (${err instanceof Error ? err.message : String(err)}) — authorization-api embedded OPA will fail; the rest of the roster boots.`);
-    }
-}
-function run(cmd, args) {
-    return new Promise((resolve, reject) => {
-        const child = (0, node_child_process_1.spawn)(cmd, args, { stdio: 'ignore' });
-        child.once('error', reject);
-        child.once('exit', (code) => {
-            if (code === 0) {
-                resolve();
-                return;
-            }
-            reject(new Error(`${cmd} exited with code ${String(code)}`));
-        });
-    });
-}
-//# sourceMappingURL=opa-policies.js.map

package/dist/dev/opa-policies.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"opa-policies.js","sourceRoot":"","sources":["../../src/dev/opa-policies.ts"],"names":[],"mappings":";;AAuBA,8CAmDC;AA1ED,2DAA2C;AAC3C,qCAAgD;AAChD,yCAAiC;AAKjC,MAAM,SAAS,GAAG,4BAA4B,CAAC;AAE/C,MAAM,iBAAiB,GAAG,sBAAsB,CAAC;AAc1C,KAAK,UAAU,iBAAiB,CACrC,MAA8B,EAC9B,YAAoB,EACpB,GAA8B;IAE9B,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,mBAAmB,CAAC,CAAC;IACzE,IAAI,KAAK,EAAE,WAAW,KAAK,SAAS,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACvE,OAAO;IACT,CAAC;IACD,MAAM,WAAW,GAAG,IAAA,gBAAI,EAAC,YAAY,EAAE,KAAK,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;IACtE,MAAM,IAAI,GAAG,IAAA,gBAAI,EAAC,WAAW,EAAE,WAAW,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAG,IAAA,gBAAI,EAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAG,IAAA,gBAAI,EAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IAC1C,IAAI,IAAA,oBAAU,EAAC,IAAI,CAAC,IAAI,CAAC,IAAA,oBAAU,EAAC,IAAI,CAAC,EAAE,CAAC;QAC1C,OAAO;IACT,CAAC;IAED,GAAG,CAAC,qEAAqE,CAAC,CAAC;IAC3E,IAAI,CAAC;QACH,IAAA,mBAAS,EAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACxC,MAAM,GAAG,CAAC,QAAQ,EAAE;YAClB,KAAK;YACL,MAAM;YACN,IAAI;YACJ,GAAG,WAAW,KAAK;YACnB,IAAI;YACJ,IAAI;YACJ,SAAS;YACT,OAAO;YACP,IAAI;YACJ,MAAM;YACN,IAAI;YACJ,iBAAiB;YACjB,WAAW;YACX,IAAI;YACJ,uBAAuB;SACxB,CAAC,CAAC;QAGH,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,IAAA,gBAAI,EAAC,OAAO,EAAE,eAAe,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;QAC1E,IAAI,CAAC,IAAA,oBAAU,EAAC,IAAI,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC3D,CAAC;QACD,GAAG,CAAC,+BAA+B,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CACD,gDACE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CACjD,6EAA6E,CAC9E,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,GAAG,CAAC,GAAW,EAAE,IAAuB;IAC/C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,IAAA,0BAAK,EAAC,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QACpD,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC5B,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YAC1B,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;gBACf,OAAO,EAAE,CAAC;gBACV,OAAO;YACT,CAAC;YACD,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,GAAG,qBAAqB,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QAC/D,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}