@xemahq/xema 0.59.1 → 0.60.1

package/dist/runtime/config/launch-config.d.ts

@@ -0,0 +1,60 @@
+import { type LaunchConfig } from './launch-schema';
+import { type SourceSpec } from '../sources/schema';
+export declare enum LaunchConfigOrigin {
+    Flag = "flag",
+    Env = "env",
+    File = "file",
+    Default = "default"
+}
+export declare const LAUNCH_ENV: {
+    readonly biomeHostUrl: "XEMA_BIOME_HOST_URL";
+    readonly npmRegistry: "XEMA_NPM_REGISTRY";
+    readonly ociRegistry: "XEMA_OCI_REGISTRY";
+    readonly seed: "XEMA_SEED";
+    readonly tokenEnv: "XEMA_TOKEN_ENV";
+    readonly orgId: "XEMA_ORG_ID";
+};
+export declare const LAUNCH_FLAGS: {
+    readonly biomeHostUrl: "--biome-host-url";
+    readonly npmRegistry: "--npm-registry";
+    readonly ociRegistry: "--oci-registry";
+    readonly seed: "--seed";
+    readonly tokenEnv: "--token-env";
+    readonly orgId: "--org-id";
+};
+export declare const LAUNCH_DEFAULTS: {
+    readonly seed: false;
+};
+export interface LaunchFlags {
+    readonly biomeHostUrl?: string;
+    readonly npmRegistry?: string;
+    readonly ociRegistry?: string;
+    readonly seed?: boolean;
+    readonly tokenEnv?: string;
+    readonly orgId?: string;
+}
+export type LaunchEnv = Readonly<Record<string, string | undefined>>;
+export interface ResolvedLaunchValue<T> {
+    readonly value: T;
+    readonly origin: LaunchConfigOrigin;
+}
+export interface ResolvedLaunchConfig {
+    readonly biomeHostUrl: ResolvedLaunchValue<string> | undefined;
+    readonly npmRegistry: ResolvedLaunchValue<string> | undefined;
+    readonly ociRegistry: ResolvedLaunchValue<string> | undefined;
+    readonly seed: ResolvedLaunchValue<boolean>;
+    readonly tokenEnv: ResolvedLaunchValue<string> | undefined;
+    readonly orgId: ResolvedLaunchValue<string> | undefined;
+    readonly sources: readonly SourceSpec[];
+}
+export interface LaunchConfigDocument {
+    readonly launch?: LaunchConfig | undefined;
+    readonly sources: readonly SourceSpec[];
+}
+export interface ResolveLaunchConfigInput {
+    readonly flags: LaunchFlags;
+    readonly env: LaunchEnv;
+    readonly document: LaunchConfigDocument | undefined;
+}
+export declare function resolveLaunchConfig(input: ResolveLaunchConfigInput): ResolvedLaunchConfig;
+//# sourceMappingURL=launch-config.d.ts.map

package/dist/runtime/config/launch-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"launch-config.d.ts","sourceRoot":"","sources":["../../../src/runtime/config/launch-config.ts"],"names":[],"mappings":"AAEA,OAAO,EAIL,KAAK,YAAY,EAClB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAGL,KAAK,UAAU,EAChB,MAAM,mBAAmB,CAAC;AAI3B,oBAAY,kBAAkB;IAC5B,IAAI,SAAS;IACb,GAAG,QAAQ;IACX,IAAI,SAAS;IACb,OAAO,YAAY;CACpB;AAGD,eAAO,MAAM,UAAU;;;;;;;CAOb,CAAC;AAGX,eAAO,MAAM,YAAY;;;;;;;CAOf,CAAC;AASX,eAAO,MAAM,eAAe;;CAA2B,CAAC;AAGxD,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC;AAErE,MAAM,WAAW,mBAAmB,CAAC,CAAC;IACpC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;IAClB,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;CACrC;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,YAAY,EAAE,mBAAmB,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC;IAC/D,QAAQ,CAAC,WAAW,EAAE,mBAAmB,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC;IAC9D,QAAQ,CAAC,WAAW,EAAE,mBAAmB,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC;IAC9D,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC5C,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC;IAC3D,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC;IAExD,QAAQ,CAAC,OAAO,EAAE,SAAS,UAAU,EAAE,CAAC;CACzC;AAGD,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,GAAG,SAAS,CAAC;IAC3C,QAAQ,CAAC,OAAO,EAAE,SAAS,UAAU,EAAE,CAAC;CACzC;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAE5B,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC;IAExB,QAAQ,CAAC,QAAQ,EAAE,oBAAoB,GAAG,SAAS,CAAC;CACrD;AA+GD,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,wBAAwB,GAC9B,oBAAoB,CAUtB"}

package/dist/runtime/config/launch-config.js

@@ -0,0 +1,123 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LAUNCH_DEFAULTS = exports.LAUNCH_FLAGS = exports.LAUNCH_ENV = exports.LaunchConfigOrigin = void 0;
+exports.resolveLaunchConfig = resolveLaunchConfig;
+const launch_schema_1 = require("./launch-schema");
+const schema_1 = require("../sources/schema");
+var LaunchConfigOrigin;
+(function (LaunchConfigOrigin) {
+    LaunchConfigOrigin["Flag"] = "flag";
+    LaunchConfigOrigin["Env"] = "env";
+    LaunchConfigOrigin["File"] = "file";
+    LaunchConfigOrigin["Default"] = "default";
+})(LaunchConfigOrigin || (exports.LaunchConfigOrigin = LaunchConfigOrigin = {}));
+exports.LAUNCH_ENV = {
+    biomeHostUrl: 'XEMA_BIOME_HOST_URL',
+    npmRegistry: 'XEMA_NPM_REGISTRY',
+    ociRegistry: 'XEMA_OCI_REGISTRY',
+    seed: 'XEMA_SEED',
+    tokenEnv: 'XEMA_TOKEN_ENV',
+    orgId: 'XEMA_ORG_ID',
+};
+exports.LAUNCH_FLAGS = {
+    biomeHostUrl: '--biome-host-url',
+    npmRegistry: '--npm-registry',
+    ociRegistry: '--oci-registry',
+    seed: '--seed',
+    tokenEnv: '--token-env',
+    orgId: '--org-id',
+};
+exports.LAUNCH_DEFAULTS = { seed: false };
+const STRING_SETTINGS = {
+    biomeHostUrl: launch_schema_1.BiomeHostUrlSchema,
+    npmRegistry: schema_1.CredentialFreeHttpUrlSchema,
+    ociRegistry: schema_1.OciRegistrySchema,
+    tokenEnv: launch_schema_1.EnvVarNameSchema,
+    orgId: launch_schema_1.OrgIdSchema,
+};
+const SEED_TRUE = new Set(['1', 'true']);
+const SEED_FALSE = new Set(['0', 'false']);
+function envValue(env, name) {
+    const value = env[name];
+    return value === undefined || value.length === 0 ? undefined : value;
+}
+function parseString(schema, value, label) {
+    const result = schema.safeParse(value);
+    if (!result.success) {
+        throw new Error(`Invalid ${label}: ${result.error.issues.map((i) => i.message).join('; ')}`);
+    }
+    return result.data;
+}
+function fileValue(launch, key) {
+    switch (key) {
+        case 'biomeHostUrl':
+            return launch?.biomeHostUrl;
+        case 'npmRegistry':
+            return launch?.registries?.npm;
+        case 'ociRegistry':
+            return launch?.registries?.oci;
+        case 'tokenEnv':
+            return launch?.auth?.tokenEnv;
+        case 'orgId':
+            return launch?.auth?.orgId;
+    }
+}
+function resolveString(key, input) {
+    const schema = STRING_SETTINGS[key];
+    const flag = input.flags[key];
+    if (flag !== undefined) {
+        return {
+            value: parseString(schema, flag, exports.LAUNCH_FLAGS[key]),
+            origin: LaunchConfigOrigin.Flag,
+        };
+    }
+    const envName = exports.LAUNCH_ENV[key];
+    const env = envValue(input.env, envName);
+    if (env !== undefined) {
+        return {
+            value: parseString(schema, env, envName),
+            origin: LaunchConfigOrigin.Env,
+        };
+    }
+    const file = fileValue(input.document?.launch, key);
+    if (file !== undefined) {
+        return { value: file, origin: LaunchConfigOrigin.File };
+    }
+    return undefined;
+}
+function parseSeedEnv(raw) {
+    const value = raw.trim().toLowerCase();
+    if (SEED_TRUE.has(value)) {
+        return true;
+    }
+    if (SEED_FALSE.has(value)) {
+        return false;
+    }
+    throw new Error(`Invalid ${exports.LAUNCH_ENV.seed}: expected 1, true, 0 or false, got "${raw}".`);
+}
+function resolveSeed(input) {
+    if (input.flags.seed !== undefined) {
+        return { value: input.flags.seed, origin: LaunchConfigOrigin.Flag };
+    }
+    const env = envValue(input.env, exports.LAUNCH_ENV.seed);
+    if (env !== undefined) {
+        return { value: parseSeedEnv(env), origin: LaunchConfigOrigin.Env };
+    }
+    const file = input.document?.launch?.seed;
+    if (file !== undefined) {
+        return { value: file, origin: LaunchConfigOrigin.File };
+    }
+    return { value: exports.LAUNCH_DEFAULTS.seed, origin: LaunchConfigOrigin.Default };
+}
+function resolveLaunchConfig(input) {
+    return {
+        biomeHostUrl: resolveString('biomeHostUrl', input),
+        npmRegistry: resolveString('npmRegistry', input),
+        ociRegistry: resolveString('ociRegistry', input),
+        seed: resolveSeed(input),
+        tokenEnv: resolveString('tokenEnv', input),
+        orgId: resolveString('orgId', input),
+        sources: input.document?.sources ?? [],
+    };
+}
+//# sourceMappingURL=launch-config.js.map

package/dist/runtime/config/launch-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"launch-config.js","sourceRoot":"","sources":["../../../src/runtime/config/launch-config.ts"],"names":[],"mappings":";;;AA2MA,kDAYC;AArND,mDAKyB;AACzB,8CAI2B;AAI3B,IAAY,kBAKX;AALD,WAAY,kBAAkB;IAC5B,mCAAa,CAAA;IACb,iCAAW,CAAA;IACX,mCAAa,CAAA;IACb,yCAAmB,CAAA;AACrB,CAAC,EALW,kBAAkB,kCAAlB,kBAAkB,QAK7B;AAGY,QAAA,UAAU,GAAG;IACxB,YAAY,EAAE,qBAAqB;IACnC,WAAW,EAAE,mBAAmB;IAChC,WAAW,EAAE,mBAAmB;IAChC,IAAI,EAAE,WAAW;IACjB,QAAQ,EAAE,gBAAgB;IAC1B,KAAK,EAAE,aAAa;CACZ,CAAC;AAGE,QAAA,YAAY,GAAG;IAC1B,YAAY,EAAE,kBAAkB;IAChC,WAAW,EAAE,gBAAgB;IAC7B,WAAW,EAAE,gBAAgB;IAC7B,IAAI,EAAE,QAAQ;IACd,QAAQ,EAAE,aAAa;IACvB,KAAK,EAAE,UAAU;CACT,CAAC;AASE,QAAA,eAAe,GAAG,EAAE,IAAI,EAAE,KAAK,EAAW,CAAC;AA8CxD,MAAM,eAAe,GAAmD;IACtE,YAAY,EAAE,kCAAkB;IAChC,WAAW,EAAE,oCAA2B;IACxC,WAAW,EAAE,0BAAiB;IAC9B,QAAQ,EAAE,gCAAgB;IAC1B,KAAK,EAAE,2BAAW;CACnB,CAAC;AAEF,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;AACzC,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;AAG3C,SAAS,QAAQ,CAAC,GAAc,EAAE,IAAY;IAC5C,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;IACxB,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC;AACvE,CAAC;AAED,SAAS,WAAW,CAClB,MAAyB,EACzB,KAAa,EACb,KAAa;IAEb,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CACb,WAAW,KAAK,KAAK,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC5E,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED,SAAS,SAAS,CAAC,MAAgC,EAAE,GAAc;IACjE,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,cAAc;YACjB,OAAO,MAAM,EAAE,YAAY,CAAC;QAC9B,KAAK,aAAa;YAChB,OAAO,MAAM,EAAE,UAAU,EAAE,GAAG,CAAC;QACjC,KAAK,aAAa;YAChB,OAAO,MAAM,EAAE,UAAU,EAAE,GAAG,CAAC;QACjC,KAAK,UAAU;YACb,OAAO,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC;QAChC,KAAK,OAAO;YACV,OAAO,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC;IAC/B,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CACpB,GAAc,EACd,KAA+B;IAE/B,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO;YACL,KAAK,EAAE,WAAW,CAAC,MAAM,EAAE,IAAI,EAAE,oBAAY,CAAC,GAAG,CAAC,CAAC;YACnD,MAAM,EAAE,kBAAkB,CAAC,IAAI;SAChC,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,kBAAU,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACzC,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,OAAO;YACL,KAAK,EAAE,WAAW,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC;YACxC,MAAM,EAAE,kBAAkB,CAAC,GAAG;SAC/B,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IACpD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,kBAAkB,CAAC,IAAI,EAAE,CAAC;IAC1D,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,YAAY,CAAC,GAAW;IAC/B,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACvC,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,IAAI,KAAK,CACb,WAAW,kBAAU,CAAC,IAAI,wCAAwC,GAAG,IAAI,CAC1E,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,KAA+B;IAClD,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACnC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,kBAAkB,CAAC,IAAI,EAAE,CAAC;IACtE,CAAC;IACD,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,kBAAU,CAAC,IAAI,CAAC,CAAC;IACjD,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,OAAO,EAAE,KAAK,EAAE,YAAY,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,kBAAkB,CAAC,GAAG,EAAE,CAAC;IACtE,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC;IAC1C,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,kBAAkB,CAAC,IAAI,EAAE,CAAC;IAC1D,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,uBAAe,CAAC,IAAI,EAAE,MAAM,EAAE,kBAAkB,CAAC,OAAO,EAAE,CAAC;AAC7E,CAAC;AAQD,SAAgB,mBAAmB,CACjC,KAA+B;IAE/B,OAAO;QACL,YAAY,EAAE,aAAa,CAAC,cAAc,EAAE,KAAK,CAAC;QAClD,WAAW,EAAE,aAAa,CAAC,aAAa,EAAE,KAAK,CAAC;QAChD,WAAW,EAAE,aAAa,CAAC,aAAa,EAAE,KAAK,CAAC;QAChD,IAAI,EAAE,WAAW,CAAC,KAAK,CAAC;QACxB,QAAQ,EAAE,aAAa,CAAC,UAAU,EAAE,KAAK,CAAC;QAC1C,KAAK,EAAE,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC;QACpC,OAAO,EAAE,KAAK,CAAC,QAAQ,EAAE,OAAO,IAAI,EAAE;KACvC,CAAC;AACJ,CAAC"}

package/dist/runtime/config/launch-schema.d.ts

@@ -0,0 +1,18 @@
+import { z } from 'zod';
+export declare const EnvVarNameSchema: z.ZodString;
+export declare const BiomeHostUrlSchema: z.ZodString;
+export declare const OrgIdSchema: z.ZodString;
+export declare const LaunchConfigSchema: z.ZodObject<{
+    biomeHostUrl: z.ZodOptional<z.ZodString>;
+    registries: z.ZodOptional<z.ZodObject<{
+        npm: z.ZodOptional<z.ZodString>;
+        oci: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
+    seed: z.ZodOptional<z.ZodBoolean>;
+    auth: z.ZodOptional<z.ZodObject<{
+        tokenEnv: z.ZodOptional<z.ZodString>;
+        orgId: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type LaunchConfig = z.infer<typeof LaunchConfigSchema>;
+//# sourceMappingURL=launch-schema.d.ts.map

package/dist/runtime/config/launch-schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"launch-schema.d.ts","sourceRoot":"","sources":["../../../src/runtime/config/launch-schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAQxB,eAAO,MAAM,gBAAgB,aAE+C,CAAC;AAE7E,eAAO,MAAM,kBAAkB,aAAmB,CAAC;AACnD,eAAO,MAAM,WAAW,aAAoB,CAAC;AAO7C,eAAO,MAAM,kBAAkB;;;;;;;;;;;kBAmBpB,CAAC;AACZ,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC"}

package/dist/runtime/config/launch-schema.js

@@ -0,0 +1,31 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LaunchConfigSchema = exports.OrgIdSchema = exports.BiomeHostUrlSchema = exports.EnvVarNameSchema = void 0;
+const zod_1 = require("zod");
+const schema_1 = require("../sources/schema");
+exports.EnvVarNameSchema = zod_1.z
+    .string()
+    .regex(/^[A-Za-z_][A-Za-z0-9_]*$/, 'must be an environment variable NAME');
+exports.BiomeHostUrlSchema = zod_1.z.string().url();
+exports.OrgIdSchema = zod_1.z.string().min(1);
+exports.LaunchConfigSchema = zod_1.z
+    .object({
+    biomeHostUrl: exports.BiomeHostUrlSchema.optional(),
+    registries: zod_1.z
+        .object({
+        npm: schema_1.CredentialFreeHttpUrlSchema.optional(),
+        oci: schema_1.OciRegistrySchema.optional(),
+    })
+        .strict()
+        .optional(),
+    seed: zod_1.z.boolean().optional(),
+    auth: zod_1.z
+        .object({
+        tokenEnv: exports.EnvVarNameSchema.optional(),
+        orgId: exports.OrgIdSchema.optional(),
+    })
+        .strict()
+        .optional(),
+})
+    .strict();
+//# sourceMappingURL=launch-schema.js.map

package/dist/runtime/config/launch-schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"launch-schema.js","sourceRoot":"","sources":["../../../src/runtime/config/launch-schema.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AAExB,8CAG2B;AAGd,QAAA,gBAAgB,GAAG,OAAC;KAC9B,MAAM,EAAE;KACR,KAAK,CAAC,0BAA0B,EAAE,sCAAsC,CAAC,CAAC;AAEhE,QAAA,kBAAkB,GAAG,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC;AACtC,QAAA,WAAW,GAAG,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAOhC,QAAA,kBAAkB,GAAG,OAAC;KAChC,MAAM,CAAC;IACN,YAAY,EAAE,0BAAkB,CAAC,QAAQ,EAAE;IAC3C,UAAU,EAAE,OAAC;SACV,MAAM,CAAC;QACN,GAAG,EAAE,oCAA2B,CAAC,QAAQ,EAAE;QAC3C,GAAG,EAAE,0BAAiB,CAAC,QAAQ,EAAE;KAClC,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,EAAE;IACb,IAAI,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC5B,IAAI,EAAE,OAAC;SACJ,MAAM,CAAC;QACN,QAAQ,EAAE,wBAAgB,CAAC,QAAQ,EAAE;QACrC,KAAK,EAAE,mBAAW,CAAC,QAAQ,EAAE;KAC9B,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,EAAE;CACd,CAAC;KACD,MAAM,EAAE,CAAC"}

package/dist/runtime/config/loader.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"loader.d.ts","sourceRoot":"","sources":["../../../src/runtime/config/loader.ts"],"names":[],"mappings":"AAMA,OAAO,EAGL,KAAK,gBAAgB,EACtB,MAAM,UAAU,CAAC;AAiBlB,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAExB,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;CACvC;AAID,wBAAgB,cAAc,CAAC,IAAI,GAAE,iBAAsB,GAAG,YAAY,CA0CzE"}
+{"version":3,"file":"loader.d.ts","sourceRoot":"","sources":["../../../src/runtime/config/loader.ts"],"names":[],"mappings":"AAKA,OAAO,EAGL,KAAK,gBAAgB,EACtB,MAAM,UAAU,CAAC;AAiBlB,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAExB,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;CACvC;AAED,wBAAgB,cAAc,CAAC,IAAI,GAAE,iBAAsB,GAAG,YAAY,CA0CzE"}

package/dist/runtime/config/loader.js

@@ -2,15 +2,14 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.loadXemaConfig = loadXemaConfig;
 const node_fs_1 = require("node:fs");
-const node_os_1 = require("node:os");
 const node_path_1 = require("node:path");
-const yaml_1 = require("yaml");
+const config_document_1 = require("./config-document");
+const config_paths_1 = require("./config-paths");
 const schema_1 = require("./schema");
 const sources_config_1 = require("./sources-config");
-const globalConfigPath = () => (0, node_path_1.join)((0, node_os_1.homedir)(), '.xema', 'config.yaml');
 function loadXemaConfig(opts = {}) {
     const cwd = opts.cwd ?? process.cwd();
-    const globalPath = globalConfigPath();
+    const globalPath = config_paths_1.USER_CONFIG_FILE;
     if (opts.explicit) {
         const explicitPath = (0, node_path_1.isAbsolute)(opts.explicit)
             ? opts.explicit
@@ -60,15 +59,6 @@ function withGlobalSources(primary, globalPath, primaryPath) {
     return { ...primary, sources: [...primary.sources, ...additions] };
 }
 function readConfigFile(path) {
-    const text = (0, node_fs_1.readFileSync)(path, 'utf8');
-    let raw;
-    try {
-        raw = (0, yaml_1.parse)(text);
-    }
-    catch (err) {
-        const message = err instanceof Error ? err.message : String(err);
-        throw new Error(`Failed to parse ${path} as YAML: ${message}`);
-    }
-    return (0, schema_1.parseXemaConfig)(raw);
+    return (0, schema_1.parseXemaConfig)((0, config_document_1.readConfigDocument)(path).document);
 }
 //# sourceMappingURL=loader.js.map

package/dist/runtime/config/loader.js.map

@@ -1 +1 @@
-{"version":3,"file":"loader.js","sourceRoot":"","sources":["../../../src/runtime/config/loader.ts"],"names":[],"mappings":";;AAyCA,wCA0CC;AAnFD,qCAAiE;AACjE,qCAAkC;AAClC,yCAAsD;AAEtD,+BAA0C;AAE1C,qCAIkB;AAClB,qDAA+C;AA4B/C,MAAM,gBAAgB,GAAG,GAAW,EAAE,CAAC,IAAA,gBAAI,EAAC,IAAA,iBAAO,GAAE,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC;AAE/E,SAAgB,cAAc,CAAC,OAA0B,EAAE;IACzD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACtC,MAAM,UAAU,GAAG,gBAAgB,EAAE,CAAC;IAEtC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,MAAM,YAAY,GAAG,IAAA,sBAAU,EAAC,IAAI,CAAC,QAAQ,CAAC;YAC5C,CAAC,CAAC,IAAI,CAAC,QAAQ;YACf,CAAC,CAAC,IAAA,mBAAO,EAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAChC,IAAI,CAAC,IAAA,oBAAU,EAAC,YAAY,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,iCAAiC,YAAY,EAAE,CAAC,CAAC;QACnE,CAAC;QACD,OAAO;YACL,MAAM,EAAE,iBAAiB,CACvB,cAAc,CAAC,YAAY,CAAC,EAC5B,UAAU,EACV,YAAY,CACb;YACD,MAAM,EAAE,YAAY;YACpB,oBAAoB,EAAE,IAAA,sBAAY,EAAC,YAAY,CAAC;SACjD,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,CAAC,IAAA,gBAAI,EAAC,GAAG,EAAE,kBAAkB,CAAC,EAAE,UAAU,CAAC,CAAC;IAC/D,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,IAAI,IAAA,oBAAU,EAAC,IAAI,CAAC,EAAE,CAAC;YACrB,OAAO;gBACL,MAAM,EAAE,iBAAiB,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC;gBACjE,MAAM,EAAE,IAAI;gBACZ,oBAAoB,EAAE,IAAA,sBAAY,EAAC,IAAI,CAAC;aACzC,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO;QACL,MAAM,EAAE,iBAAiB,CACvB,EAAE,GAAG,gCAAuB,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,EAC5D,UAAU,EACV,SAAS,CACV;QACD,MAAM,EAAE,YAAY;QACpB,oBAAoB,EAAE,IAAA,sBAAY,EAAC,IAAA,mBAAO,EAAC,GAAG,CAAC,CAAC;KACjD,CAAC;AACJ,CAAC;AAQD,SAAS,iBAAiB,CACxB,OAAyB,EACzB,UAAkB,EAClB,WAA+B;IAE/B,IACE,WAAW,KAAK,SAAS;QACzB,IAAA,mBAAO,EAAC,WAAW,CAAC,KAAK,IAAA,mBAAO,EAAC,UAAU,CAAC,EAC5C,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,IAAI,CAAC,IAAA,oBAAU,EAAC,UAAU,CAAC,EAAE,CAAC;QAC5B,OAAO,OAAO,CAAC;IACjB,CAAC;IAKD,MAAM,aAAa,GAAG,IAAA,4BAAW,EAAC,UAAU,CAAC,CAAC;IAC9C,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACzD,MAAM,SAAS,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACjE,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,OAAO,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC,OAAO,EAAE,GAAG,SAAS,CAAC,EAAE,CAAC;AACrE,CAAC;AAED,SAAS,cAAc,CAAC,IAAY;IAClC,MAAM,IAAI,GAAG,IAAA,sBAAY,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACxC,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,IAAA,YAAS,EAAC,IAAI,CAAY,CAAC;IACnC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,mBAAmB,IAAI,aAAa,OAAO,EAAE,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,IAAA,wBAAe,EAAC,GAAG,CAAC,CAAC;AAC9B,CAAC"}
+{"version":3,"file":"loader.js","sourceRoot":"","sources":["../../../src/runtime/config/loader.ts"],"names":[],"mappings":";;AAsCA,wCA0CC;AAhFD,qCAAmD;AACnD,yCAAsD;AAEtD,uDAAuD;AACvD,iDAAkD;AAClD,qCAIkB;AAClB,qDAA+C;AA4B/C,SAAgB,cAAc,CAAC,OAA0B,EAAE;IACzD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACtC,MAAM,UAAU,GAAG,+BAAgB,CAAC;IAEpC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,MAAM,YAAY,GAAG,IAAA,sBAAU,EAAC,IAAI,CAAC,QAAQ,CAAC;YAC5C,CAAC,CAAC,IAAI,CAAC,QAAQ;YACf,CAAC,CAAC,IAAA,mBAAO,EAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAChC,IAAI,CAAC,IAAA,oBAAU,EAAC,YAAY,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,iCAAiC,YAAY,EAAE,CAAC,CAAC;QACnE,CAAC;QACD,OAAO;YACL,MAAM,EAAE,iBAAiB,CACvB,cAAc,CAAC,YAAY,CAAC,EAC5B,UAAU,EACV,YAAY,CACb;YACD,MAAM,EAAE,YAAY;YACpB,oBAAoB,EAAE,IAAA,sBAAY,EAAC,YAAY,CAAC;SACjD,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,CAAC,IAAA,gBAAI,EAAC,GAAG,EAAE,kBAAkB,CAAC,EAAE,UAAU,CAAC,CAAC;IAC/D,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,IAAI,IAAA,oBAAU,EAAC,IAAI,CAAC,EAAE,CAAC;YACrB,OAAO;gBACL,MAAM,EAAE,iBAAiB,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC;gBACjE,MAAM,EAAE,IAAI;gBACZ,oBAAoB,EAAE,IAAA,sBAAY,EAAC,IAAI,CAAC;aACzC,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO;QACL,MAAM,EAAE,iBAAiB,CACvB,EAAE,GAAG,gCAAuB,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,EAC5D,UAAU,EACV,SAAS,CACV;QACD,MAAM,EAAE,YAAY;QACpB,oBAAoB,EAAE,IAAA,sBAAY,EAAC,IAAA,mBAAO,EAAC,GAAG,CAAC,CAAC;KACjD,CAAC;AACJ,CAAC;AAQD,SAAS,iBAAiB,CACxB,OAAyB,EACzB,UAAkB,EAClB,WAA+B;IAE/B,IACE,WAAW,KAAK,SAAS;QACzB,IAAA,mBAAO,EAAC,WAAW,CAAC,KAAK,IAAA,mBAAO,EAAC,UAAU,CAAC,EAC5C,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,IAAI,CAAC,IAAA,oBAAU,EAAC,UAAU,CAAC,EAAE,CAAC;QAC5B,OAAO,OAAO,CAAC;IACjB,CAAC;IAKD,MAAM,aAAa,GAAG,IAAA,4BAAW,EAAC,UAAU,CAAC,CAAC;IAC9C,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACzD,MAAM,SAAS,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACjE,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,OAAO,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC,OAAO,EAAE,GAAG,SAAS,CAAC,EAAE,CAAC;AACrE,CAAC;AAED,SAAS,cAAc,CAAC,IAAY;IAClC,OAAO,IAAA,wBAAe,EAAC,IAAA,oCAAkB,EAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC;AAC5D,CAAC"}

package/dist/runtime/config/schema.d.ts

@@ -26,11 +26,6 @@ export declare enum WorkspaceDriver {
     DockerLocal = "docker_local",
     HostPath = "host_path"
 }
-export declare enum SecretSource {
-    Prompt = "prompt",
-    Env = "env",
-    File = "file"
-}
 export declare enum LaunchAllowedTiers {
     Byok = "byok",
     Both = "both",
@@ -46,7 +41,7 @@ declare const InfraComponentConfigSchema: z.ZodObject<{
     url: z.ZodOptional<z.ZodString>;
     realm: z.ZodOptional<z.ZodString>;
     bucketPrefix: z.ZodOptional<z.ZodString>;
-    secretRef: z.ZodOptional<z.ZodString>;
+    passwordEnv: z.ZodOptional<z.ZodString>;
     persist: z.ZodOptional<z.ZodObject<{
         path: z.ZodOptional<z.ZodString>;
     }, z.core.$strict>>;
@@ -74,12 +69,6 @@ declare const StateConfigSchema: z.ZodObject<{
     }, z.core.$strict>>;
 }, z.core.$strict>;
 export type StateConfig = z.infer<typeof StateConfigSchema>;
-declare const SecretConfigSchema: z.ZodObject<{
-    from: z.ZodEnum<typeof SecretSource>;
-    path: z.ZodOptional<z.ZodString>;
-    env: z.ZodOptional<z.ZodString>;
-}, z.core.$strict>;
-export type SecretConfig = z.infer<typeof SecretConfigSchema>;
 declare const CliConfigSchema: z.ZodObject<{
     devMode: z.ZodOptional<z.ZodBoolean>;
 }, z.core.$strict>;
@@ -91,13 +80,14 @@ declare const PolicyConfigSchema: z.ZodObject<{
 export type PolicyConfig = z.infer<typeof PolicyConfigSchema>;
 export declare function resolveDefaultAllowedTiers(policy: PolicyConfig | undefined): CredentialPolicyAllowedTiers;
 export declare const XemaConfigSchema: z.ZodObject<{
+    version: z.ZodDefault<z.ZodLiteral<3>>;
     infra: z.ZodDefault<z.ZodObject<{
         postgres: z.ZodOptional<z.ZodObject<{
             mode: z.ZodEnum<typeof InfraMode>;
             url: z.ZodOptional<z.ZodString>;
             realm: z.ZodOptional<z.ZodString>;
             bucketPrefix: z.ZodOptional<z.ZodString>;
-            secretRef: z.ZodOptional<z.ZodString>;
+            passwordEnv: z.ZodOptional<z.ZodString>;
             persist: z.ZodOptional<z.ZodObject<{
                 path: z.ZodOptional<z.ZodString>;
             }, z.core.$strict>>;
@@ -107,7 +97,7 @@ export declare const XemaConfigSchema: z.ZodObject<{
             url: z.ZodOptional<z.ZodString>;
             realm: z.ZodOptional<z.ZodString>;
             bucketPrefix: z.ZodOptional<z.ZodString>;
-            secretRef: z.ZodOptional<z.ZodString>;
+            passwordEnv: z.ZodOptional<z.ZodString>;
             persist: z.ZodOptional<z.ZodObject<{
                 path: z.ZodOptional<z.ZodString>;
             }, z.core.$strict>>;
@@ -117,7 +107,7 @@ export declare const XemaConfigSchema: z.ZodObject<{
             url: z.ZodOptional<z.ZodString>;
             realm: z.ZodOptional<z.ZodString>;
             bucketPrefix: z.ZodOptional<z.ZodString>;
-            secretRef: z.ZodOptional<z.ZodString>;
+            passwordEnv: z.ZodOptional<z.ZodString>;
             persist: z.ZodOptional<z.ZodObject<{
                 path: z.ZodOptional<z.ZodString>;
             }, z.core.$strict>>;
@@ -127,7 +117,7 @@ export declare const XemaConfigSchema: z.ZodObject<{
             url: z.ZodOptional<z.ZodString>;
             realm: z.ZodOptional<z.ZodString>;
             bucketPrefix: z.ZodOptional<z.ZodString>;
-            secretRef: z.ZodOptional<z.ZodString>;
+            passwordEnv: z.ZodOptional<z.ZodString>;
             persist: z.ZodOptional<z.ZodObject<{
                 path: z.ZodOptional<z.ZodString>;
             }, z.core.$strict>>;
@@ -137,7 +127,7 @@ export declare const XemaConfigSchema: z.ZodObject<{
             url: z.ZodOptional<z.ZodString>;
             realm: z.ZodOptional<z.ZodString>;
             bucketPrefix: z.ZodOptional<z.ZodString>;
-            secretRef: z.ZodOptional<z.ZodString>;
+            passwordEnv: z.ZodOptional<z.ZodString>;
             persist: z.ZodOptional<z.ZodObject<{
                 path: z.ZodOptional<z.ZodString>;
             }, z.core.$strict>>;
@@ -147,7 +137,7 @@ export declare const XemaConfigSchema: z.ZodObject<{
             url: z.ZodOptional<z.ZodString>;
             realm: z.ZodOptional<z.ZodString>;
             bucketPrefix: z.ZodOptional<z.ZodString>;
-            secretRef: z.ZodOptional<z.ZodString>;
+            passwordEnv: z.ZodOptional<z.ZodString>;
             persist: z.ZodOptional<z.ZodObject<{
                 path: z.ZodOptional<z.ZodString>;
             }, z.core.$strict>>;
@@ -157,7 +147,7 @@ export declare const XemaConfigSchema: z.ZodObject<{
             url: z.ZodOptional<z.ZodString>;
             realm: z.ZodOptional<z.ZodString>;
             bucketPrefix: z.ZodOptional<z.ZodString>;
-            secretRef: z.ZodOptional<z.ZodString>;
+            passwordEnv: z.ZodOptional<z.ZodString>;
             persist: z.ZodOptional<z.ZodObject<{
                 path: z.ZodOptional<z.ZodString>;
             }, z.core.$strict>>;
@@ -167,7 +157,7 @@ export declare const XemaConfigSchema: z.ZodObject<{
             url: z.ZodOptional<z.ZodString>;
             realm: z.ZodOptional<z.ZodString>;
             bucketPrefix: z.ZodOptional<z.ZodString>;
-            secretRef: z.ZodOptional<z.ZodString>;
+            passwordEnv: z.ZodOptional<z.ZodString>;
             persist: z.ZodOptional<z.ZodObject<{
                 path: z.ZodOptional<z.ZodString>;
             }, z.core.$strict>>;
@@ -193,11 +183,6 @@ export declare const XemaConfigSchema: z.ZodObject<{
             path: z.ZodOptional<z.ZodString>;
         }, z.core.$strict>>;
     }, z.core.$strict>>;
-    secrets: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
-        from: z.ZodEnum<typeof SecretSource>;
-        path: z.ZodOptional<z.ZodString>;
-        env: z.ZodOptional<z.ZodString>;
-    }, z.core.$strict>>>;
     sources: z.ZodDefault<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
         kind: z.ZodLiteral<import("../sources/schema").SourceKind.Workspace>;
         root: z.ZodOptional<z.ZodString>;
@@ -232,16 +217,29 @@ export declare const XemaConfigSchema: z.ZodObject<{
     policy: z.ZodOptional<z.ZodObject<{
         allowedTiers: z.ZodOptional<z.ZodEnum<typeof LaunchAllowedTiers> & z.ZodType<LaunchAllowedTiers.Byok | LaunchAllowedTiers.Both, LaunchAllowedTiers, z.core.$ZodTypeInternals<LaunchAllowedTiers.Byok | LaunchAllowedTiers.Both, LaunchAllowedTiers>>>;
     }, z.core.$strict>>;
+    launch: z.ZodOptional<z.ZodObject<{
+        biomeHostUrl: z.ZodOptional<z.ZodString>;
+        registries: z.ZodOptional<z.ZodObject<{
+            npm: z.ZodOptional<z.ZodString>;
+            oci: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>>;
+        seed: z.ZodOptional<z.ZodBoolean>;
+        auth: z.ZodOptional<z.ZodObject<{
+            tokenEnv: z.ZodOptional<z.ZodString>;
+            orgId: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>>;
     edition: z.ZodString;
 }, z.core.$strict>;
 export declare const EditionlessConfigSchema: z.ZodObject<{
+    version: z.ZodDefault<z.ZodLiteral<3>>;
     infra: z.ZodDefault<z.ZodObject<{
         postgres: z.ZodOptional<z.ZodObject<{
             mode: z.ZodEnum<typeof InfraMode>;
             url: z.ZodOptional<z.ZodString>;
             realm: z.ZodOptional<z.ZodString>;
             bucketPrefix: z.ZodOptional<z.ZodString>;
-            secretRef: z.ZodOptional<z.ZodString>;
+            passwordEnv: z.ZodOptional<z.ZodString>;
             persist: z.ZodOptional<z.ZodObject<{
                 path: z.ZodOptional<z.ZodString>;
             }, z.core.$strict>>;
@@ -251,7 +249,7 @@ export declare const EditionlessConfigSchema: z.ZodObject<{
             url: z.ZodOptional<z.ZodString>;
             realm: z.ZodOptional<z.ZodString>;
             bucketPrefix: z.ZodOptional<z.ZodString>;
-            secretRef: z.ZodOptional<z.ZodString>;
+            passwordEnv: z.ZodOptional<z.ZodString>;
             persist: z.ZodOptional<z.ZodObject<{
                 path: z.ZodOptional<z.ZodString>;
             }, z.core.$strict>>;
@@ -261,7 +259,7 @@ export declare const EditionlessConfigSchema: z.ZodObject<{
             url: z.ZodOptional<z.ZodString>;
             realm: z.ZodOptional<z.ZodString>;
             bucketPrefix: z.ZodOptional<z.ZodString>;
-            secretRef: z.ZodOptional<z.ZodString>;
+            passwordEnv: z.ZodOptional<z.ZodString>;
             persist: z.ZodOptional<z.ZodObject<{
                 path: z.ZodOptional<z.ZodString>;
             }, z.core.$strict>>;
@@ -271,7 +269,7 @@ export declare const EditionlessConfigSchema: z.ZodObject<{
             url: z.ZodOptional<z.ZodString>;
             realm: z.ZodOptional<z.ZodString>;
             bucketPrefix: z.ZodOptional<z.ZodString>;
-            secretRef: z.ZodOptional<z.ZodString>;
+            passwordEnv: z.ZodOptional<z.ZodString>;
             persist: z.ZodOptional<z.ZodObject<{
                 path: z.ZodOptional<z.ZodString>;
             }, z.core.$strict>>;
@@ -281,7 +279,7 @@ export declare const EditionlessConfigSchema: z.ZodObject<{
             url: z.ZodOptional<z.ZodString>;
             realm: z.ZodOptional<z.ZodString>;
             bucketPrefix: z.ZodOptional<z.ZodString>;
-            secretRef: z.ZodOptional<z.ZodString>;
+            passwordEnv: z.ZodOptional<z.ZodString>;
             persist: z.ZodOptional<z.ZodObject<{
                 path: z.ZodOptional<z.ZodString>;
             }, z.core.$strict>>;
@@ -291,7 +289,7 @@ export declare const EditionlessConfigSchema: z.ZodObject<{
             url: z.ZodOptional<z.ZodString>;
             realm: z.ZodOptional<z.ZodString>;
             bucketPrefix: z.ZodOptional<z.ZodString>;
-            secretRef: z.ZodOptional<z.ZodString>;
+            passwordEnv: z.ZodOptional<z.ZodString>;
             persist: z.ZodOptional<z.ZodObject<{
                 path: z.ZodOptional<z.ZodString>;
             }, z.core.$strict>>;
@@ -301,7 +299,7 @@ export declare const EditionlessConfigSchema: z.ZodObject<{
             url: z.ZodOptional<z.ZodString>;
             realm: z.ZodOptional<z.ZodString>;
             bucketPrefix: z.ZodOptional<z.ZodString>;
-            secretRef: z.ZodOptional<z.ZodString>;
+            passwordEnv: z.ZodOptional<z.ZodString>;
             persist: z.ZodOptional<z.ZodObject<{
                 path: z.ZodOptional<z.ZodString>;
             }, z.core.$strict>>;
@@ -311,7 +309,7 @@ export declare const EditionlessConfigSchema: z.ZodObject<{
             url: z.ZodOptional<z.ZodString>;
             realm: z.ZodOptional<z.ZodString>;
             bucketPrefix: z.ZodOptional<z.ZodString>;
-            secretRef: z.ZodOptional<z.ZodString>;
+            passwordEnv: z.ZodOptional<z.ZodString>;
             persist: z.ZodOptional<z.ZodObject<{
                 path: z.ZodOptional<z.ZodString>;
             }, z.core.$strict>>;
@@ -337,11 +335,6 @@ export declare const EditionlessConfigSchema: z.ZodObject<{
             path: z.ZodOptional<z.ZodString>;
         }, z.core.$strict>>;
     }, z.core.$strict>>;
-    secrets: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
-        from: z.ZodEnum<typeof SecretSource>;
-        path: z.ZodOptional<z.ZodString>;
-        env: z.ZodOptional<z.ZodString>;
-    }, z.core.$strict>>>;
     sources: z.ZodDefault<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
         kind: z.ZodLiteral<import("../sources/schema").SourceKind.Workspace>;
         root: z.ZodOptional<z.ZodString>;
@@ -376,6 +369,18 @@ export declare const EditionlessConfigSchema: z.ZodObject<{
     policy: z.ZodOptional<z.ZodObject<{
         allowedTiers: z.ZodOptional<z.ZodEnum<typeof LaunchAllowedTiers> & z.ZodType<LaunchAllowedTiers.Byok | LaunchAllowedTiers.Both, LaunchAllowedTiers, z.core.$ZodTypeInternals<LaunchAllowedTiers.Byok | LaunchAllowedTiers.Both, LaunchAllowedTiers>>>;
     }, z.core.$strict>>;
+    launch: z.ZodOptional<z.ZodObject<{
+        biomeHostUrl: z.ZodOptional<z.ZodString>;
+        registries: z.ZodOptional<z.ZodObject<{
+            npm: z.ZodOptional<z.ZodString>;
+            oci: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>>;
+        seed: z.ZodOptional<z.ZodBoolean>;
+        auth: z.ZodOptional<z.ZodObject<{
+            tokenEnv: z.ZodOptional<z.ZodString>;
+            orgId: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>>;
 }, z.core.$strict>;
 export type XemaConfig = z.infer<typeof XemaConfigSchema>;
 export type LoadedXemaConfig = Omit<XemaConfig, 'edition'> & {

package/dist/runtime/config/schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../src/runtime/config/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAcxB,oBAAY,SAAS;IAEnB,OAAO,YAAY;IAEnB,QAAQ,aAAa;IAMrB,QAAQ,aAAa;CACtB;AAGD,oBAAY,SAAS;IACnB,SAAS,cAAc;IACvB,MAAM,WAAW;IAEjB,IAAI,SAAS;CACd;AASD,oBAAY,YAAY;IACtB,WAAW,gBAAgB;CAC5B;AAGD,oBAAY,cAAc;IACxB,QAAQ,aAAa;IACrB,KAAK,UAAU;IACf,IAAI,SAAS;IACb,QAAQ,aAAa;IACrB,WAAW,gBAAgB;IAC3B,GAAG,QAAQ;IACX,GAAG,QAAQ;IACX,QAAQ,aAAa;CACtB;AAGD,oBAAY,eAAe;IAEzB,WAAW,iBAAiB;IAE5B,QAAQ,cAAc;CACvB;AAGD,oBAAY,YAAY;IACtB,MAAM,WAAW;IACjB,GAAG,QAAQ;IACX,IAAI,SAAS;CACd;AAWD,oBAAY,kBAAkB;IAM5B,IAAI,SAAS;IAKb,IAAI,SAAS;IAMb,WAAW,iBAAiB;CAC7B;AAQD,oBAAY,4BAA4B;IACtC,QAAQ,cAAc;IACtB,WAAW,iBAAiB;IAC5B,IAAI,SAAS;CACd;AAgBD,QAAA,MAAM,0BAA0B;;;;;;;;;kBASrB,CAAC;AACZ,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AA+E9E,QAAA,MAAM,eAAe;;;;;;;;;;kBAeV,CAAC;AACZ,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAExD,QAAA,MAAM,iBAAiB;;;;;;;;kBAcZ,CAAC;AACZ,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D,QAAA,MAAM,kBAAkB;;;;kBA6BpB,CAAC;AACL,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAY9D,QAAA,MAAM,eAAe;;kBAIV,CAAC;AACZ,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAYxD,eAAO,MAAM,wBAAwB,0NAIjC,CAAC;AAEL,QAAA,MAAM,kBAAkB;;kBAIb,CAAC;AACZ,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAQ9D,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,YAAY,GAAG,SAAS,GAC/B,4BAA4B,CAG9B;AAqCD,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAKlB,CAAC;AAOZ,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAAqC,CAAC;AAE1E,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAG1D,MAAM,MAAM,gBAAgB,GAAG,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,GAAG;IAC3D,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;CACtC,CAAC;AAEF,eAAO,MAAM,uBAAuB,sFACiD,CAAC;AAGtF,wBAAgB,WAAW,CACzB,MAAM,EAAE,gBAAgB,EACxB,QAAQ,CAAC,EAAE,MAAM,GAChB,UAAU,CAMZ;AAGD,wBAAgB,eAAe,CAAC,GAAG,EAAE,OAAO,GAAG,UAAU,CAUxD"}
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../src/runtime/config/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAiBxB,oBAAY,SAAS;IAEnB,OAAO,YAAY;IAEnB,QAAQ,aAAa;IAMrB,QAAQ,aAAa;CACtB;AAGD,oBAAY,SAAS;IACnB,SAAS,cAAc;IACvB,MAAM,WAAW;IAEjB,IAAI,SAAS;CACd;AASD,oBAAY,YAAY;IACtB,WAAW,gBAAgB;CAC5B;AAGD,oBAAY,cAAc;IACxB,QAAQ,aAAa;IACrB,KAAK,UAAU;IACf,IAAI,SAAS;IACb,QAAQ,aAAa;IACrB,WAAW,gBAAgB;IAC3B,GAAG,QAAQ;IACX,GAAG,QAAQ;IACX,QAAQ,aAAa;CACtB;AAGD,oBAAY,eAAe;IAEzB,WAAW,iBAAiB;IAE5B,QAAQ,cAAc;CACvB;AAWD,oBAAY,kBAAkB;IAM5B,IAAI,SAAS;IAKb,IAAI,SAAS;IAMb,WAAW,iBAAiB;CAC7B;AAQD,oBAAY,4BAA4B;IACtC,QAAQ,cAAc;IACtB,WAAW,iBAAiB;IAC5B,IAAI,SAAS;CACd;AAkBD,QAAA,MAAM,0BAA0B;;;;;;;;;kBAarB,CAAC;AACZ,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AA+E9E,QAAA,MAAM,eAAe;;;;;;;;;;kBAeV,CAAC;AACZ,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAExD,QAAA,MAAM,iBAAiB;;;;;;;;kBAcZ,CAAC;AACZ,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAY5D,QAAA,MAAM,eAAe;;kBAIV,CAAC;AACZ,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAYxD,eAAO,MAAM,wBAAwB,0NAIjC,CAAC;AAEL,QAAA,MAAM,kBAAkB;;kBAIb,CAAC;AACZ,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAQ9D,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,YAAY,GAAG,SAAS,GAC/B,4BAA4B,CAG9B;AAwCD,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAKlB,CAAC;AAOZ,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAAqC,CAAC;AAE1E,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAG1D,MAAM,MAAM,gBAAgB,GAAG,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,GAAG;IAC3D,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;CACtC,CAAC;AAEF,eAAO,MAAM,uBAAuB,sFACiD,CAAC;AAGtF,wBAAgB,WAAW,CACzB,MAAM,EAAE,gBAAgB,EACxB,QAAQ,CAAC,EAAE,MAAM,GAChB,UAAU,CAMZ;AAGD,wBAAgB,eAAe,CAAC,GAAG,EAAE,OAAO,GAAG,UAAU,CAUxD"}