@xemahq/xema 0.2.3 → 0.3.0

package/dist/runtime/sources/resolver.d.ts

@@ -0,0 +1,15 @@
+import { type LockIndex } from '../roster';
+import { CredentialResolver } from './credentials';
+import { SourceKind, type SourceSpec } from './schema';
+import type { SourceResolveContext } from './types';
+export declare function composeSourceIndex(base: LockIndex, sources: readonly SourceSpec[], ctx: SourceResolveContext): LockIndex;
+export interface SourceStatus {
+    readonly name: string;
+    readonly kind: SourceKind;
+    readonly detail: string;
+    readonly tokenEnv?: string;
+    readonly tokenPresent: boolean;
+    readonly launchTime: boolean;
+}
+export declare function describeSources(sources: readonly SourceSpec[], credentials?: CredentialResolver): SourceStatus[];
+//# sourceMappingURL=resolver.d.ts.map

package/dist/runtime/sources/resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolver.d.ts","sourceRoot":"","sources":["../../../src/runtime/sources/resolver.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,KAAK,SAAS,EAAE,MAAM,WAAW,CAAC;AACzD,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAInD,OAAO,EAAE,UAAU,EAAE,KAAK,UAAU,EAAE,MAAM,UAAU,CAAC;AAEvD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,SAAS,CAAC;AAepD,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,SAAS,EACf,OAAO,EAAE,SAAS,UAAU,EAAE,EAC9B,GAAG,EAAE,oBAAoB,GACxB,SAAS,CAqBX;AAsBD,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAE1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAExB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAE3B,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAE/B,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;CAC9B;AAGD,wBAAgB,eAAe,CAC7B,OAAO,EAAE,SAAS,UAAU,EAAE,EAC9B,WAAW,GAAE,kBAA6C,GACzD,YAAY,EAAE,CAahB"}

package/dist/runtime/sources/resolver.js

@@ -0,0 +1,75 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.composeSourceIndex = composeSourceIndex;
+exports.describeSources = describeSources;
+const roster_1 = require("../roster");
+const credentials_1 = require("./credentials");
+const distribution_1 = require("./kinds/distribution");
+const git_1 = require("./kinds/git");
+const workspace_1 = require("./kinds/workspace");
+const schema_1 = require("./schema");
+function composeSourceIndex(base, sources, ctx) {
+    const workspace = [];
+    const other = [];
+    for (const spec of sources) {
+        (spec.kind === schema_1.SourceKind.Workspace ? workspace : other).push(spec);
+    }
+    let index = base;
+    for (const spec of [...other].reverse()) {
+        const contrib = resolveOne(spec, ctx);
+        if (contrib !== null) {
+            index = (0, roster_1.mergeIndices)(index, contrib);
+        }
+    }
+    for (const spec of [...workspace].reverse()) {
+        const contrib = resolveOne(spec, ctx);
+        if (contrib !== null) {
+            index = (0, roster_1.mergeIndices)(index, contrib);
+        }
+    }
+    return index;
+}
+function resolveOne(spec, ctx) {
+    switch (spec.kind) {
+        case schema_1.SourceKind.Workspace:
+            return (0, workspace_1.resolveWorkspaceSource)(spec, ctx);
+        case schema_1.SourceKind.Distribution:
+            return (0, distribution_1.resolveDistributionSource)(spec, ctx);
+        case schema_1.SourceKind.Git:
+            return (0, git_1.resolveGitSource)(spec, ctx);
+        case schema_1.SourceKind.Npm:
+        case schema_1.SourceKind.Oci:
+            ctx.log?.(`source "${spec.name}" (${spec.kind}): install-time source — install it into a running ` +
+                `platform with \`xema biome install\`; it does not boot directly from \`xema up\`.`);
+            return null;
+    }
+}
+function describeSources(sources, credentials = new credentials_1.CredentialResolver()) {
+    return sources.map((spec) => {
+        const tokenEnv = 'authTokenEnv' in spec ? spec.authTokenEnv : undefined;
+        const launchTime = spec.kind !== schema_1.SourceKind.Npm && spec.kind !== schema_1.SourceKind.Oci;
+        return {
+            name: spec.name,
+            kind: spec.kind,
+            detail: detailFor(spec),
+            ...(tokenEnv !== undefined ? { tokenEnv } : {}),
+            tokenPresent: credentials.has(tokenEnv),
+            launchTime,
+        };
+    });
+}
+function detailFor(spec) {
+    switch (spec.kind) {
+        case schema_1.SourceKind.Workspace:
+            return spec.root ?? '(auto-detected monorepo root)';
+        case schema_1.SourceKind.Distribution:
+            return `edition ${spec.edition}${spec.ref ? ` @ ${spec.ref}` : ''}`;
+        case schema_1.SourceKind.Git:
+            return `${spec.url}${spec.ref ? `@${spec.ref}` : ''}`;
+        case schema_1.SourceKind.Npm:
+            return spec.registryUrl ?? 'https://registry.npmjs.org';
+        case schema_1.SourceKind.Oci:
+            return spec.registry;
+    }
+}
+//# sourceMappingURL=resolver.js.map

package/dist/runtime/sources/resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolver.js","sourceRoot":"","sources":["../../../src/runtime/sources/resolver.ts"],"names":[],"mappings":";;AAsBA,gDAyBC;AAoCD,0CAgBC;AAnGD,sCAAyD;AACzD,+CAAmD;AACnD,uDAAiE;AACjE,qCAA+C;AAC/C,iDAA2D;AAC3D,qCAAuD;AAiBvD,SAAgB,kBAAkB,CAChC,IAAe,EACf,OAA8B,EAC9B,GAAyB;IAEzB,MAAM,SAAS,GAAiB,EAAE,CAAC;IACnC,MAAM,KAAK,GAAiB,EAAE,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,CAAC,IAAI,CAAC,IAAI,KAAK,mBAAU,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtE,CAAC;IAED,IAAI,KAAK,GAAG,IAAI,CAAC;IACjB,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;QACxC,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACtC,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,KAAK,GAAG,IAAA,qBAAY,EAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,SAAS,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;QAC5C,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACtC,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,KAAK,GAAG,IAAA,qBAAY,EAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAGD,SAAS,UAAU,CAAC,IAAgB,EAAE,GAAyB;IAC7D,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,KAAK,mBAAU,CAAC,SAAS;YACvB,OAAO,IAAA,kCAAsB,EAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC3C,KAAK,mBAAU,CAAC,YAAY;YAC1B,OAAO,IAAA,wCAAyB,EAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC9C,KAAK,mBAAU,CAAC,GAAG;YACjB,OAAO,IAAA,sBAAgB,EAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACrC,KAAK,mBAAU,CAAC,GAAG,CAAC;QACpB,KAAK,mBAAU,CAAC,GAAG;YACjB,GAAG,CAAC,GAAG,EAAE,CACP,WAAW,IAAI,CAAC,IAAI,MAAM,IAAI,CAAC,IAAI,qDAAqD;gBACtF,mFAAmF,CACtF,CAAC;YACF,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC;AAiBD,SAAgB,eAAe,CAC7B,OAA8B,EAC9B,cAAkC,IAAI,gCAAkB,EAAE;IAE1D,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QAC1B,MAAM,QAAQ,GAAG,cAAc,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;QACxE,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,KAAK,mBAAU,CAAC,GAAG,IAAI,IAAI,CAAC,IAAI,KAAK,mBAAU,CAAC,GAAG,CAAC;QAChF,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC;YACvB,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/C,YAAY,EAAE,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC;YACvC,UAAU;SACX,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,SAAS,CAAC,IAAgB;IACjC,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,KAAK,mBAAU,CAAC,SAAS;YACvB,OAAO,IAAI,CAAC,IAAI,IAAI,+BAA+B,CAAC;QACtD,KAAK,mBAAU,CAAC,YAAY;YAC1B,OAAO,WAAW,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACtE,KAAK,mBAAU,CAAC,GAAG;YACjB,OAAO,GAAG,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACxD,KAAK,mBAAU,CAAC,GAAG;YACjB,OAAO,IAAI,CAAC,WAAW,IAAI,4BAA4B,CAAC;QAC1D,KAAK,mBAAU,CAAC,GAAG;YACjB,OAAO,IAAI,CAAC,QAAQ,CAAC;IACzB,CAAC;AACH,CAAC"}

package/dist/runtime/sources/schema.d.ts

@@ -0,0 +1,101 @@
+import { z } from 'zod';
+export declare enum SourceKind {
+    Workspace = "workspace",
+    Distribution = "distribution",
+    Npm = "npm",
+    Oci = "oci",
+    Git = "git"
+}
+export declare const WorkspaceSourceSchema: z.ZodObject<{
+    kind: z.ZodLiteral<SourceKind.Workspace>;
+    root: z.ZodOptional<z.ZodString>;
+    name: z.ZodString;
+}, z.core.$strict>;
+export type WorkspaceSource = z.infer<typeof WorkspaceSourceSchema>;
+export declare const DistributionSourceSchema: z.ZodObject<{
+    kind: z.ZodLiteral<SourceKind.Distribution>;
+    edition: z.ZodString;
+    ref: z.ZodOptional<z.ZodString>;
+    name: z.ZodString;
+}, z.core.$strict>;
+export type DistributionSource = z.infer<typeof DistributionSourceSchema>;
+export declare const NpmSourceSchema: z.ZodObject<{
+    kind: z.ZodLiteral<SourceKind.Npm>;
+    registryUrl: z.ZodOptional<z.ZodString>;
+    scope: z.ZodOptional<z.ZodString>;
+    authTokenEnv: z.ZodOptional<z.ZodString>;
+    name: z.ZodString;
+}, z.core.$strict>;
+export type NpmSource = z.infer<typeof NpmSourceSchema>;
+export declare const OciSourceSchema: z.ZodObject<{
+    kind: z.ZodLiteral<SourceKind.Oci>;
+    registry: z.ZodString;
+    authTokenEnv: z.ZodOptional<z.ZodString>;
+    name: z.ZodString;
+}, z.core.$strict>;
+export type OciSource = z.infer<typeof OciSourceSchema>;
+export declare const GitSourceSchema: z.ZodObject<{
+    kind: z.ZodLiteral<SourceKind.Git>;
+    url: z.ZodString;
+    ref: z.ZodOptional<z.ZodString>;
+    authTokenEnv: z.ZodOptional<z.ZodString>;
+    name: z.ZodString;
+}, z.core.$strict>;
+export type GitSource = z.infer<typeof GitSourceSchema>;
+export declare const SourceSpecSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    kind: z.ZodLiteral<SourceKind.Workspace>;
+    root: z.ZodOptional<z.ZodString>;
+    name: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<SourceKind.Distribution>;
+    edition: z.ZodString;
+    ref: z.ZodOptional<z.ZodString>;
+    name: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<SourceKind.Npm>;
+    registryUrl: z.ZodOptional<z.ZodString>;
+    scope: z.ZodOptional<z.ZodString>;
+    authTokenEnv: z.ZodOptional<z.ZodString>;
+    name: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<SourceKind.Oci>;
+    registry: z.ZodString;
+    authTokenEnv: z.ZodOptional<z.ZodString>;
+    name: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<SourceKind.Git>;
+    url: z.ZodString;
+    ref: z.ZodOptional<z.ZodString>;
+    authTokenEnv: z.ZodOptional<z.ZodString>;
+    name: z.ZodString;
+}, z.core.$strict>], "kind">;
+export type SourceSpec = z.infer<typeof SourceSpecSchema>;
+export declare const SourcesConfigSchema: z.ZodDefault<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+    kind: z.ZodLiteral<SourceKind.Workspace>;
+    root: z.ZodOptional<z.ZodString>;
+    name: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<SourceKind.Distribution>;
+    edition: z.ZodString;
+    ref: z.ZodOptional<z.ZodString>;
+    name: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<SourceKind.Npm>;
+    registryUrl: z.ZodOptional<z.ZodString>;
+    scope: z.ZodOptional<z.ZodString>;
+    authTokenEnv: z.ZodOptional<z.ZodString>;
+    name: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<SourceKind.Oci>;
+    registry: z.ZodString;
+    authTokenEnv: z.ZodOptional<z.ZodString>;
+    name: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<SourceKind.Git>;
+    url: z.ZodString;
+    ref: z.ZodOptional<z.ZodString>;
+    authTokenEnv: z.ZodOptional<z.ZodString>;
+    name: z.ZodString;
+}, z.core.$strict>], "kind">>>;
+export type SourcesConfig = z.infer<typeof SourcesConfigSchema>;
+//# sourceMappingURL=schema.d.ts.map

package/dist/runtime/sources/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../src/runtime/sources/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAyBxB,oBAAY,UAAU;IAEpB,SAAS,cAAc;IAEvB,YAAY,iBAAiB;IAE7B,GAAG,QAAQ;IAEX,GAAG,QAAQ;IAEX,GAAG,QAAQ;CACZ;AAeD,eAAO,MAAM,qBAAqB;;;;kBAMvB,CAAC;AACZ,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAQpE,eAAO,MAAM,wBAAwB;;;;;kBAO1B,CAAC;AACZ,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAQ1E,eAAO,MAAM,eAAe;;;;;;kBAWjB,CAAC;AACZ,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAGxD,eAAO,MAAM,eAAe;;;;;kBAOjB,CAAC;AACZ,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAQxD,eAAO,MAAM,eAAe;;;;;;kBAQjB,CAAC;AACZ,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAExD,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;4BAM3B,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAQ1D,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;8BAAwC,CAAC;AACzE,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC"}

package/dist/runtime/sources/schema.js

@@ -0,0 +1,71 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SourcesConfigSchema = exports.SourceSpecSchema = exports.GitSourceSchema = exports.OciSourceSchema = exports.NpmSourceSchema = exports.DistributionSourceSchema = exports.WorkspaceSourceSchema = exports.SourceKind = void 0;
+const zod_1 = require("zod");
+var SourceKind;
+(function (SourceKind) {
+    SourceKind["Workspace"] = "workspace";
+    SourceKind["Distribution"] = "distribution";
+    SourceKind["Npm"] = "npm";
+    SourceKind["Oci"] = "oci";
+    SourceKind["Git"] = "git";
+})(SourceKind || (exports.SourceKind = SourceKind = {}));
+const SourceBaseSchema = {
+    name: zod_1.z
+        .string()
+        .min(1)
+        .regex(/^[a-z][a-z0-9-]*$/, 'source name must be lowercase kebab-case'),
+};
+exports.WorkspaceSourceSchema = zod_1.z
+    .object({
+    ...SourceBaseSchema,
+    kind: zod_1.z.literal(SourceKind.Workspace),
+    root: zod_1.z.string().min(1).optional(),
+})
+    .strict();
+exports.DistributionSourceSchema = zod_1.z
+    .object({
+    ...SourceBaseSchema,
+    kind: zod_1.z.literal(SourceKind.Distribution),
+    edition: zod_1.z.string().min(1),
+    ref: zod_1.z.string().min(1).optional(),
+})
+    .strict();
+exports.NpmSourceSchema = zod_1.z
+    .object({
+    ...SourceBaseSchema,
+    kind: zod_1.z.literal(SourceKind.Npm),
+    registryUrl: zod_1.z.string().url().optional(),
+    scope: zod_1.z
+        .string()
+        .regex(/^@[a-z0-9][a-z0-9-]*$/, 'scope must look like @scope')
+        .optional(),
+    authTokenEnv: zod_1.z.string().min(1).optional(),
+})
+    .strict();
+exports.OciSourceSchema = zod_1.z
+    .object({
+    ...SourceBaseSchema,
+    kind: zod_1.z.literal(SourceKind.Oci),
+    registry: zod_1.z.string().min(1),
+    authTokenEnv: zod_1.z.string().min(1).optional(),
+})
+    .strict();
+exports.GitSourceSchema = zod_1.z
+    .object({
+    ...SourceBaseSchema,
+    kind: zod_1.z.literal(SourceKind.Git),
+    url: zod_1.z.string().regex(/^https?:\/\//, 'git url must be http(s)'),
+    ref: zod_1.z.string().min(1).optional(),
+    authTokenEnv: zod_1.z.string().min(1).optional(),
+})
+    .strict();
+exports.SourceSpecSchema = zod_1.z.discriminatedUnion('kind', [
+    exports.WorkspaceSourceSchema,
+    exports.DistributionSourceSchema,
+    exports.NpmSourceSchema,
+    exports.OciSourceSchema,
+    exports.GitSourceSchema,
+]);
+exports.SourcesConfigSchema = zod_1.z.array(exports.SourceSpecSchema).default([]);
+//# sourceMappingURL=schema.js.map

package/dist/runtime/sources/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../../src/runtime/sources/schema.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AAyBxB,IAAY,UAWX;AAXD,WAAY,UAAU;IAEpB,qCAAuB,CAAA;IAEvB,2CAA6B,CAAA;IAE7B,yBAAW,CAAA;IAEX,yBAAW,CAAA;IAEX,yBAAW,CAAA;AACb,CAAC,EAXW,UAAU,0BAAV,UAAU,QAWrB;AAGD,MAAM,gBAAgB,GAAG;IACvB,IAAI,EAAE,OAAC;SACJ,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,KAAK,CAAC,mBAAmB,EAAE,0CAA0C,CAAC;CAC1E,CAAC;AAOW,QAAA,qBAAqB,GAAG,OAAC;KACnC,MAAM,CAAC;IACN,GAAG,gBAAgB;IACnB,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC;IACrC,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACnC,CAAC;KACD,MAAM,EAAE,CAAC;AASC,QAAA,wBAAwB,GAAG,OAAC;KACtC,MAAM,CAAC;IACN,GAAG,gBAAgB;IACnB,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC;IACxC,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAClC,CAAC;KACD,MAAM,EAAE,CAAC;AASC,QAAA,eAAe,GAAG,OAAC;KAC7B,MAAM,CAAC;IACN,GAAG,gBAAgB;IACnB,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;IAC/B,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACxC,KAAK,EAAE,OAAC;SACL,MAAM,EAAE;SACR,KAAK,CAAC,uBAAuB,EAAE,6BAA6B,CAAC;SAC7D,QAAQ,EAAE;IACb,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC3C,CAAC;KACD,MAAM,EAAE,CAAC;AAIC,QAAA,eAAe,GAAG,OAAC;KAC7B,MAAM,CAAC;IACN,GAAG,gBAAgB;IACnB,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;IAC/B,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC3C,CAAC;KACD,MAAM,EAAE,CAAC;AASC,QAAA,eAAe,GAAG,OAAC;KAC7B,MAAM,CAAC;IACN,GAAG,gBAAgB;IACnB,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;IAC/B,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,cAAc,EAAE,yBAAyB,CAAC;IAChE,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACjC,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC3C,CAAC;KACD,MAAM,EAAE,CAAC;AAGC,QAAA,gBAAgB,GAAG,OAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAC3D,6BAAqB;IACrB,gCAAwB;IACxB,uBAAe;IACf,uBAAe;IACf,uBAAe;CAChB,CAAC,CAAC;AASU,QAAA,mBAAmB,GAAG,OAAC,CAAC,KAAK,CAAC,wBAAgB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC"}

package/dist/runtime/sources/types.d.ts

@@ -0,0 +1,10 @@
+import type { CredentialResolver } from './credentials';
+import type { LockIndex } from '../roster';
+export interface SourceResolveContext {
+    readonly edition: string;
+    readonly usesImages: boolean;
+    readonly credentials: CredentialResolver;
+    readonly log?: (line: string) => void;
+}
+export type KindResolver<TSpec> = (spec: TSpec, ctx: SourceResolveContext) => LockIndex | null;
+//# sourceMappingURL=types.d.ts.map

package/dist/runtime/sources/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/runtime/sources/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACxD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAM3C,MAAM,WAAW,oBAAoB;IAEnC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAEzB,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAE7B,QAAQ,CAAC,WAAW,EAAE,kBAAkB,CAAC;IAEzC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CACvC;AASD,MAAM,MAAM,YAAY,CAAC,KAAK,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,oBAAoB,KAAK,SAAS,GAAG,IAAI,CAAC"}

package/dist/runtime/sources/types.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/dist/runtime/sources/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/runtime/sources/types.ts"],"names":[],"mappings":""}

package/dist/runtime/waves.d.ts

@@ -5,6 +5,7 @@ export interface Wave {
     readonly tier: string;
     readonly members: readonly RosterEntry[];
 }
+export declare function bootGraphHardClosure(seed: readonly string[], bootGraph: BootGraph, exists: (name: string) => boolean): string[];
 export declare function deriveWaves(roster: readonly RosterEntry[], bootGraph?: BootGraph): Wave[];
 export declare function findWaveOrderViolations(waves: readonly Wave[], bootGraph: BootGraph): Array<{
     service: string;

package/dist/runtime/waves.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"waves.d.ts","sourceRoot":"","sources":["../../src/runtime/waves.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAY5C,MAAM,WAAW,IAAI;IACnB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,SAAS,WAAW,EAAE,CAAC;CAC1C;AAYD,wBAAgB,WAAW,CAAC,MAAM,EAAE,SAAS,WAAW,EAAE,EAAE,SAAS,CAAC,EAAE,SAAS,GAAG,IAAI,EAAE,CA8BzF;AAQD,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,SAAS,IAAI,EAAE,EACtB,SAAS,EAAE,SAAS,GACnB,KAAK,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,CAAC,CA2CzF"}
+{"version":3,"file":"waves.d.ts","sourceRoot":"","sources":["../../src/runtime/waves.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAY5C,MAAM,WAAW,IAAI;IACnB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,SAAS,WAAW,EAAE,CAAC;CAC1C;AAUD,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,SAAS,EAAE,SAAS,EACpB,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,GAChC,MAAM,EAAE,CAiBV;AAYD,wBAAgB,WAAW,CAAC,MAAM,EAAE,SAAS,WAAW,EAAE,EAAE,SAAS,CAAC,EAAE,SAAS,GAAG,IAAI,EAAE,CA8BzF;AAQD,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,SAAS,IAAI,EAAE,EACtB,SAAS,EAAE,SAAS,GACnB,KAAK,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,CAAC,CA2CzF"}

package/dist/runtime/waves.js

@@ -1,7 +1,26 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.bootGraphHardClosure = bootGraphHardClosure;
 exports.deriveWaves = deriveWaves;
 exports.findWaveOrderViolations = findWaveOrderViolations;
+function bootGraphHardClosure(seed, bootGraph, exists) {
+    const out = new Set(seed.filter(exists));
+    const queue = [...out];
+    while (queue.length > 0) {
+        const svc = queue.shift();
+        if (svc === undefined) {
+            break;
+        }
+        const node = bootGraph.services.get(svc);
+        for (const req of node?.startupRequires ?? []) {
+            if (exists(req) && !out.has(req)) {
+                out.add(req);
+                queue.push(req);
+            }
+        }
+    }
+    return [...out];
+}
 const DEFAULT_TIER_RANK = {
     kernel: 0,
     system: 1,

package/dist/runtime/waves.js.map

@@ -1 +1 @@
-{"version":3,"file":"waves.js","sourceRoot":"","sources":["../../src/runtime/waves.ts"],"names":[],"mappings":";;AA6BA,kCA8BC;AAQD,0DA8CC;AA7FD,MAAM,iBAAiB,GAAqC;IAC1D,MAAM,EAAE,CAAC;IACT,MAAM,EAAE,CAAC;IACT,IAAI,EAAE,CAAC;IACP,QAAQ,EAAE,CAAC;IACX,IAAI,EAAE,CAAC;CACR,CAAC;AAGF,SAAgB,WAAW,CAAC,MAA8B,EAAE,SAAqB;IAC/E,MAAM,IAAI,GAAG,CAAC,IAAY,EAAU,EAAE;QACpC,MAAM,SAAS,GAAG,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YAClC,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,WAAW,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;YACpC,OAAO,WAAW,CAAC;QACrB,CAAC;QAED,OAAO,MAAM,CAAC,gBAAgB,CAAC;IACjC,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,IAAI,GAAG,EAAyB,CAAC;IAChD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IAED,MAAM,YAAY,GAAG,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1E,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QACxC,KAAK;QACL,IAAI;QACJ,OAAO,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;KACvF,CAAC,CAAC,CAAC;AACN,CAAC;AAQD,SAAgB,uBAAuB,CACrC,KAAsB,EACtB,SAAoB;IAEpB,MAAM,aAAa,GAAG,IAAI,GAAG,EAAkB,CAAC;IAChD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAC7B,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,IAAY,EAAU,EAAE,CACpC,OAAO,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC;IAE9F,MAAM,UAAU,GAKX,EAAE,CAAC;IACR,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAC7B,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC5C,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,SAAS;YACX,CAAC;YACD,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;gBAEvC,IAAI,SAAS,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;oBACrC,SAAS;gBACX,CAAC;gBACD,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACvC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;oBAC1B,SAAS;gBACX,CAAC;gBACD,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;oBACrC,UAAU,CAAC,IAAI,CAAC;wBACd,OAAO,EAAE,CAAC,CAAC,IAAI;wBACf,QAAQ,EAAE,GAAG;wBACb,WAAW,EAAE,IAAI,CAAC,IAAI;wBACtB,YAAY,EAAE,OAAO;qBACtB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC"}
+{"version":3,"file":"waves.js","sourceRoot":"","sources":["../../src/runtime/waves.ts"],"names":[],"mappings":";;AA2BA,oDAqBC;AAYD,kCA8BC;AAQD,0DA8CC;AArHD,SAAgB,oBAAoB,CAClC,IAAuB,EACvB,SAAoB,EACpB,MAAiC;IAEjC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAS,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IACjD,MAAM,KAAK,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC;IACvB,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC;QAC1B,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,MAAM;QACR,CAAC;QACD,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACzC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,eAAe,IAAI,EAAE,EAAE,CAAC;YAC9C,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBACjC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACb,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC;AAClB,CAAC;AAGD,MAAM,iBAAiB,GAAqC;IAC1D,MAAM,EAAE,CAAC;IACT,MAAM,EAAE,CAAC;IACT,IAAI,EAAE,CAAC;IACP,QAAQ,EAAE,CAAC;IACX,IAAI,EAAE,CAAC;CACR,CAAC;AAGF,SAAgB,WAAW,CAAC,MAA8B,EAAE,SAAqB;IAC/E,MAAM,IAAI,GAAG,CAAC,IAAY,EAAU,EAAE;QACpC,MAAM,SAAS,GAAG,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YAClC,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,WAAW,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;YACpC,OAAO,WAAW,CAAC;QACrB,CAAC;QAED,OAAO,MAAM,CAAC,gBAAgB,CAAC;IACjC,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,IAAI,GAAG,EAAyB,CAAC;IAChD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IAED,MAAM,YAAY,GAAG,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1E,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QACxC,KAAK;QACL,IAAI;QACJ,OAAO,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;KACvF,CAAC,CAAC,CAAC;AACN,CAAC;AAQD,SAAgB,uBAAuB,CACrC,KAAsB,EACtB,SAAoB;IAEpB,MAAM,aAAa,GAAG,IAAI,GAAG,EAAkB,CAAC;IAChD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAC7B,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,IAAY,EAAU,EAAE,CACpC,OAAO,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC;IAE9F,MAAM,UAAU,GAKX,EAAE,CAAC;IACR,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAC7B,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC5C,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,SAAS;YACX,CAAC;YACD,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;gBAEvC,IAAI,SAAS,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;oBACrC,SAAS;gBACX,CAAC;gBACD,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACvC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;oBAC1B,SAAS;gBACX,CAAC;gBACD,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;oBACrC,UAAU,CAAC,IAAI,CAAC;wBACd,OAAO,EAAE,CAAC,CAAC,IAAI;wBACf,QAAQ,EAAE,GAAG;wBACb,WAAW,EAAE,IAAI,CAAC,IAAI;wBACtB,YAAY,EAAE,OAAO;qBACtB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC"}

package/examples/06-biome-sources.yaml

@@ -0,0 +1,51 @@
+# Biome Source Registry — pull biomes from many origins (community, cultivars,
+# a client's private registry/git, third-party) with per-source auth, while
+# keeping local dev publish-free.
+#   Run: cp examples/06-biome-sources.yaml xema.config.yaml && xema dev
+#   Check sources + token presence first:  xema doctor --sources
+#
+# Precedence (highest wins):  workspace  >  other sources (declared order)  >  base
+# So a `workspace` source (local working tree) ALWAYS wins in a monorepo — your
+# edits run with NO publish (constraint C1). Tokens are referenced by env-var
+# NAME, never inlined; export them or put them in ~/.xema/credentials.env.
+edition: oss
+app:
+  substrate: native              # workspace + git sources are source, not images
+  include: [ all ]
+
+sources:
+  # 1. WORKSPACE — local working-tree dirs. In a monorepo checkout this wins
+  #    over every remote source, so `xema dev` runs your edits without a publish.
+  #    `root` defaults to the auto-detected monorepo root.
+  - name: workspace
+    kind: workspace
+
+  # 2. DISTRIBUTION — a pinned edition lock (e.g. a cultivars edition). With no
+  #    `ref` it reads the vendored/monorepo lock; a local path `ref` reads
+  #    <ref>/<edition>/{distribution.lock,images.lock}.json.
+  - name: cultivars
+    kind: distribution
+    edition: cultivars
+
+  # 3. GIT — a client's OWN biome repo (one biome at the root or many nested —
+  #    both are discovered by walking for xema-biome.json). Private repos name
+  #    the env var holding their token; omit authTokenEnv for a public clone.
+  - name: acme-biomes
+    kind: git
+    url: https://github.com/acme/xema-biomes.git
+    ref: v2.1.0
+    authTokenEnv: GIT_TOKEN_ACME       # export GIT_TOKEN_ACME=... (never inlined)
+
+  # 4. NPM — biome packages from any registry. INSTALL-TIME: these install into a
+  #    running platform via `xema biome install` (the biome-fetcher path); they
+  #    are not booted directly by `xema up`. Shown here for completeness.
+  - name: acme-npm
+    kind: npm
+    registryUrl: https://npm.pkg.github.com
+    scope: "@acme-biomes"
+    authTokenEnv: NPM_TOKEN_ACME
+
+infra:
+  postgres: { mode: external, url: postgresql://postgres:postgres@127.0.0.1:5432 }
+  redis:    { mode: external, url: redis://127.0.0.1:6379 }
+  keycloak: { mode: external, url: http://127.0.0.1:8180, realm: xema }

package/package.json

@@ -1,6 +1,7 @@
 {
   "name": "@xemahq/xema",
-  "version": "0.2.3",
+  "version": "0.3.0",
+  "license": "Apache-2.0",
   "description": "Xema OS global CLI (plan v4.3 §6 Phase J). Single binary day-0 onboarding: `npm i -g @xemahq/xema && xema dev` boots the whole stack; `xema biome scaffold` / `install` / `publish` / `lint` author and ship biomes; `xema run <capability>` invokes through the local capability-router. Multi-platform: works without pnpm or any monorepo clone.",
   "type": "commonjs",
   "main": "dist/cli.js",
@@ -26,6 +27,7 @@
     "commander": "^12.1.0",
     "reflect-metadata": "0.2.2",
     "rxjs": "7.8.2",
+    "tsx": "^4.19.2",
     "yaml": "^2.6.1",
     "zod": "^4.3.6"
   },
@@ -50,7 +52,8 @@
       "dist/**/*.js"
     ],
     "assets": [
-      "dist/**/*.json"
+      "dist/**/*.json",
+      "package.json"
     ],
     "targets": [
       "node20-macos-arm64",

package/dist/dev/dev-orchestrator.d.ts

@@ -1,7 +0,0 @@
-export interface DevOrchestratorOptions {
-    readonly kernelPort?: number | undefined;
-    readonly routerPort?: number | undefined;
-    readonly skipPreflight?: boolean | undefined;
-}
-export declare function runDevOrchestrator(opts?: DevOrchestratorOptions): Promise<void>;
-//# sourceMappingURL=dev-orchestrator.d.ts.map

package/dist/dev/dev-orchestrator.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"dev-orchestrator.d.ts","sourceRoot":"","sources":["../../src/dev/dev-orchestrator.ts"],"names":[],"mappings":"AAmMA,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAMzC,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CAC9C;AAsBD,wBAAsB,kBAAkB,CACtC,IAAI,GAAE,sBAA2B,GAChC,OAAO,CAAC,IAAI,CAAC,CA6Xf"}