@braidhq/server 0.0.1 → 0.1.0

package/dist/composeFs.js

@@ -1,41 +1,101 @@
+import { spawn } from 'node:child_process';
 import { homedir } from 'node:os';
 import { join } from 'node:path';
 import process from 'node:process';
-import { builtinSkillsRoot, EvidenceValidator, InMemoryWorkspaceEventBus, NotFoundError, OntologyTypeValidator, OrphanEdgeValidator, PluginRegistry, StructuralValidator, } from '@braidhq/core';
+import { fileURLToPath } from 'node:url';
+import { claudeCodeAgentPlugin } from '@braidhq/agent-claude-code';
+import { builtinSkillsRoot, createLogger, NotFoundError, PluginRegistry, ValidationError, WorkspaceBootstrap, } from '@braidhq/core';
+import { InMemoryWorkspaceEventBus } from '@braidhq/core/testing';
 import { dddOntology } from '@braidhq/ontology-ddd';
-import { GoogleDriveLoader } from '@braidhq/source-loader-gdrive';
-import { GitLoader } from '@braidhq/source-loader-git';
-import { KuzuModelRepository } from '@braidhq/storage-kuzu';
+import { AgentId, AgentKind, StorageKind as StorageKindSchema } from '@braidhq/schema';
+import { createGoogleDriveLoader } from '@braidhq/source-loader-gdrive';
+import { gitLoader } from '@braidhq/source-loader-git';
+import { createGithubLoader } from '@braidhq/source-loader-github';
+import { kuzuStoragePlugin } from '@braidhq/storage-kuzu';
 import { composeApp } from './composition.js';
-import { ClaudeCodeAgentBinding } from './infrastructure/agent/ClaudeCodeAgentBinding.js';
 import { SubprocessSkillRunner } from './infrastructure/agent/SubprocessSkillRunner.js';
+import { AccessPolicy } from './infrastructure/auth/AccessPolicy.js';
+import { ensureApprovedEmails } from './infrastructure/auth/ensureApprovedEmails.js';
+import { SessionStore } from './infrastructure/auth/SessionStore.js';
+import { parseBoolEnv } from './infrastructure/env.js';
+import { FsBatchPlanRepository } from './infrastructure/fs/FsBatchPlanRepository.js';
 import { FsClarifyTicketRepository } from './infrastructure/fs/FsClarifyTicketRepository.js';
 import { FsDecisionRepository } from './infrastructure/fs/FsDecisionRepository.js';
+import { FsGraphSerializer } from './infrastructure/fs/FsGraphSerializer.js';
 import { FsProposalRepository } from './infrastructure/fs/FsProposalRepository.js';
 import { FsRunRepository } from './infrastructure/fs/FsRunRepository.js';
 import { FsSkillRegistry } from './infrastructure/fs/FsSkillRegistry.js';
+import { FsSourceUnitDigest } from './infrastructure/fs/FsSourceUnitDigest.js';
+import { FsSourceUnitStateRepository } from './infrastructure/fs/FsSourceUnitStateRepository.js';
 import { FsWorkspaceRepository } from './infrastructure/fs/FsWorkspaceRepository.js';
+import { listIntentItems } from './infrastructure/fs/intentScan.js';
+import { discoverCanonicalWorkspaces } from './infrastructure/fs/WorkspaceDiscovery.js';
 import { WorkspaceRegistryFile } from './infrastructure/fs/WorkspaceRegistryFile.js';
+import { GitWorkspaceHistory } from './infrastructure/git/GitWorkspaceHistory.js';
 import { GoogleOAuth } from './infrastructure/oauth/GoogleOAuth.js';
 import { FsSecretStore } from './infrastructure/secrets/SecretStore.js';
+import { ensureLocalUser } from './infrastructure/users/ensureLocalUser.js';
+import { ensureWorkspaceOwners } from './infrastructure/users/ensureWorkspaceOwners.js';
+import { UserDirectoryFromRegistry } from './infrastructure/users/UserDirectoryFromRegistry.js';
+import { UserRegistryFile } from './infrastructure/users/UserRegistryFile.js';
 /**
- * Production composition root: real filesystem persistence for workspaces /
- * proposals / clarify / decisions, built-in skills loaded from `@braidhq/core`,
- * Claude Code subprocess agent. Model storage uses Kuzu (embedded, zero-infra)
- * per workspace at `<workspace>/.braid/model.kuzu`.
+ * Opinionated production composition: real filesystem persistence for
+ * workspaces / proposals / clarify / decisions, built-in skills loaded
+ * from `@braidhq/core`, and a batteries-included plugin bundle (Kuzu
+ * storage / DDD ontology / Git+GDrive source loaders / Claude Code
+ * agent).
+ *
+ * To run with a different plugin set, either:
+ *  1. Pass `extraXxxPlugins` to add alongside defaults + flip `storageKind`
+ *     / `agentKind` to pick a different active one, OR
+ *  2. Call `composeApp` directly with a `pluginRegistry` you built yourself.
  */
-export function composeFsApp(options = {}) {
+export async function composeFsApp(options = {}) {
     const braidHome = options.braidHome ?? process.env.BRAID_HOME ?? join(homedir(), '.braid');
     const apiUrl = options.apiUrl ?? 'http://localhost:4321';
     const secretStore = new FsSecretStore(join(braidHome, 'secrets'));
     const googleClientId = process.env.BRAID_GOOGLE_CLIENT_ID;
     const googleClientSecret = process.env.BRAID_GOOGLE_CLIENT_SECRET;
     const googleRedirect = process.env.BRAID_GOOGLE_REDIRECT_URI ?? `${apiUrl}/oauth/google/callback`;
+    const googleLoginRedirect = process.env.BRAID_GOOGLE_LOGIN_REDIRECT_URI ?? `${apiUrl}/auth/google/callback`;
     const googleOAuth = googleClientId && googleClientSecret
-        ? new GoogleOAuth({ clientId: googleClientId, clientSecret: googleClientSecret, redirectUri: googleRedirect })
+        ? new GoogleOAuth({
+            clientId: googleClientId,
+            clientSecret: googleClientSecret,
+            redirectUri: googleRedirect,
+            loginRedirectUri: googleLoginRedirect,
+        })
         : undefined;
     const registry = new WorkspaceRegistryFile(join(braidHome, 'workspaces.json'));
     const workspaceRepository = new FsWorkspaceRepository({ registry });
+    // Server-side user roster. Distinct from any workspace's git history:
+    // Auth and ACL belong to the host, not to the product knowledge a
+    // workspace records. Single-user local installs get a `local-user`
+    // bootstrapped here so `userIdMiddleware`'s default actually resolves.
+    const userRegistry = new UserRegistryFile(join(braidHome, 'users.json'));
+    await ensureLocalUser(userRegistry);
+    // Phase B auth. Both files live next to `users.json` under `${BRAID_HOME}`;
+    // never inside a workspace because access control is host state, not
+    // workspace artifact. AccessPolicy reads env at construct time so a
+    // running server doesn't need to be restarted when env changes mid-flight
+    // — but production deployments do restart on config changes, which is
+    // why this is fine to read once.
+    const sessionStore = new SessionStore(join(braidHome, 'sessions.json'));
+    const accessPolicyConfig = {};
+    const allowedDomains = parseCsv(process.env.BRAID_ALLOWED_DOMAINS);
+    if (allowedDomains)
+        accessPolicyConfig.allowedDomains = allowedDomains;
+    const allowedEmails = parseCsv(process.env.BRAID_ALLOWED_EMAILS);
+    if (allowedEmails)
+        accessPolicyConfig.allowedEmails = allowedEmails;
+    const adminEmails = parseCsv(process.env.BRAID_ADMIN_EMAILS);
+    if (adminEmails)
+        accessPolicyConfig.adminEmails = adminEmails;
+    const accessPolicy = new AccessPolicy(join(braidHome, 'access.json'), accessPolicyConfig);
+    // Back-fill approvedEmails for any pre-existing user accounts so the
+    // dynamic allowlist matches the user roster on boot.
+    await ensureApprovedEmails(userRegistry, accessPolicy);
+    const studioUrl = process.env.BRAID_STUDIO_URL ?? 'http://localhost:5173';
     const workspaceRoots = async () => {
         const workspaces = await workspaceRepository.list();
         return new Map(workspaces.map(ws => [ws.id, ws.rootPath]));
@@ -43,59 +103,77 @@ export function composeFsApp(options = {}) {
     const proposalRepository = new FsProposalRepository({ workspaceRoots });
     const clarifyRepository = new FsClarifyTicketRepository({ workspaceRoots });
     const decisionRepository = new FsDecisionRepository({ workspaceRoots });
-    const modelRepository = new KuzuModelRepository({
-        resolveDbPath: async (workspaceId) => {
+    // Plugin registration. Defaults bundle first, then extras, so a caller
+    // that passes (e.g.) `extraOntologyPlugins: [c4]` ends up with both ddd
+    // and c4 registered; the active one is chosen per-workspace via
+    // PRODUCT.md.ontologyId.
+    const pluginRegistry = new PluginRegistry();
+    pluginRegistry.register(kuzuStoragePlugin);
+    for (const plugin of options.extraStoragePlugins ?? [])
+        pluginRegistry.register(plugin);
+    pluginRegistry.register(dddOntology);
+    for (const plugin of options.extraOntologyPlugins ?? [])
+        pluginRegistry.register(plugin);
+    pluginRegistry.register(gitLoader);
+    pluginRegistry.register(createGithubLoader());
+    for (const plugin of options.extraSourceLoaderPlugins ?? [])
+        pluginRegistry.register(plugin);
+    pluginRegistry.register(claudeCodeAgentPlugin);
+    for (const plugin of options.extraAgentPlugins ?? [])
+        pluginRegistry.register(plugin);
+    // The gdrive loader is always registered so a workspace declaring a
+    // `kind: gdrive` source doesn't crash at plugin lookup. If OAuth env
+    // vars aren't configured, the token resolver throws an actionable
+    // error at ingest time so the user knows exactly what to set.
+    const oauth = googleOAuth;
+    pluginRegistry.register(createGoogleDriveLoader({
+        resolveAccessToken: async ({ workspaceId, sourceId }) => {
+            if (!oauth) {
+                throw new ValidationError(`Google Drive source "${sourceId}" cannot be loaded: set BRAID_GOOGLE_CLIENT_ID and BRAID_GOOGLE_CLIENT_SECRET on the server, restart, then re-sync.`);
+            }
+            const key = `${workspaceId}--${sourceId}`;
+            const stored = await secretStore.read('oauth-google', key);
+            if (!stored) {
+                throw new NotFoundError(`Google Drive source "${sourceId}" on workspace "${workspaceId}" is not connected. `
+                    + `Authorise via POST /oauth/google/start.`);
+            }
+            // 60-second skew so we don't hand out a token about to expire mid-request.
+            const stillValidUntil = new Date(stored.expiresAt).getTime() - 60_000;
+            if (Date.now() < stillValidUntil)
+                return stored.accessToken;
+            const refreshed = await oauth.refreshAccessToken(stored.refreshToken);
+            await secretStore.write('oauth-google', key, {
+                ...stored,
+                accessToken: refreshed.accessToken,
+                expiresAt: refreshed.expiresAt,
+            });
+            return refreshed.accessToken;
+        },
+    }));
+    // Resolve the active storage plugin and ask it for a ModelRepository.
+    const storageKind = StorageKindSchema.parse(options.storageKind ?? process.env.BRAID_STORAGE_KIND ?? 'kuzu');
+    const modelRepository = await pluginRegistry.requireStoragePlugin(storageKind).createModelRepository({ kind: storageKind, config: {} }, {
+        workspaceRootPath: braidHome,
+        logger: { info: () => { }, warn: () => { }, error: () => { } },
+        resolveWorkspaceRoot: async (workspaceId) => {
             const roots = await workspaceRoots();
             const root = roots.get(workspaceId);
             if (!root)
                 throw new NotFoundError(`Workspace "${workspaceId}" not registered`);
-            return join(root, '.braid', 'model.kuzu');
+            return root;
         },
     });
-    const agentBinding = new ClaudeCodeAgentBinding({
-        id: 'claude-default',
-        kind: 'claude-code',
+    // Resolve the active agent plugin and build its binding.
+    const agentKind = AgentKind.parse(options.agentKind ?? 'claude-code');
+    const agentBinding = pluginRegistry.requireAgentPlugin(agentKind).createBinding({
+        id: AgentId.parse('default'),
+        kind: agentKind,
         model: options.agentModel ?? 'opus',
         effort: options.agentEffort ?? 'high',
         extraArgs: [],
         env: {},
     });
     const runRepository = new FsRunRepository();
-    const pluginRegistry = new PluginRegistry();
-    pluginRegistry.register(dddOntology);
-    pluginRegistry.register(new EvidenceValidator());
-    pluginRegistry.register(new OrphanEdgeValidator());
-    pluginRegistry.register(new OntologyTypeValidator(dddOntology));
-    pluginRegistry.register(new StructuralValidator(dddOntology));
-    pluginRegistry.register(new GitLoader());
-    if (googleOAuth) {
-        // GoogleDriveLoader requires OAuth to be configured. We resolve the
-        // access token per (workspaceId, sourceId): read stored tokens from
-        // the secret store, refresh if expired, persist the rotated access
-        // token, hand the bearer to the loader.
-        const oauth = googleOAuth;
-        pluginRegistry.register(new GoogleDriveLoader({
-            resolveAccessToken: async ({ workspaceId, sourceId }) => {
-                const key = `${workspaceId}--${sourceId}`;
-                const stored = await secretStore.read('oauth-google', key);
-                if (!stored) {
-                    throw new NotFoundError(`Google Drive source "${sourceId}" on workspace "${workspaceId}" is not connected. `
-                        + `Authorise via POST /oauth/google/start.`);
-                }
-                // 60-second skew so we don't hand out a token about to expire mid-request.
-                const stillValidUntil = new Date(stored.expiresAt).getTime() - 60_000;
-                if (Date.now() < stillValidUntil)
-                    return stored.accessToken;
-                const refreshed = await oauth.refreshAccessToken(stored.refreshToken);
-                await secretStore.write('oauth-google', key, {
-                    ...stored,
-                    accessToken: refreshed.accessToken,
-                    expiresAt: refreshed.expiresAt,
-                });
-                return refreshed.accessToken;
-            },
-        }));
-    }
     // Built after pluginRegistry is populated so plugin-shipped SKILL.md
     // files mount under the `plugin` skill origin alongside builtins.
     const skillRegistry = new FsSkillRegistry({
@@ -103,16 +181,51 @@ export function composeFsApp(options = {}) {
         pluginRegistry,
     });
     const eventBus = new InMemoryWorkspaceEventBus();
+    // Built-in braid-core MCP gateway: each spawned skill gets a stdio
+    // entry that runs `uvx openapi-mcp-gateway` with --transport stdio.
+    // The gateway lifecycle tracks the claude subprocess; no separate
+    // long-running server. Requires `uv` to be installed on PATH; if it
+    // isn't, skip the entry silently — skills with
+    // `requiredMcpServers: ['braid-core']` will surface as not-ready
+    // via SkillManifest.readinessIssuesFor, with a clear pointer.
+    const uvxBin = await detectUvx();
+    if (!uvxBin) {
+        console.warn('[braid] `uv` not found on PATH; the built-in braid-core MCP gateway will not be available. '
+            + 'Install via `brew install uv` or https://docs.astral.sh/uv/ to enable.');
+    }
+    // Build the list of reference dirs symlinked into every skill session:
+    //   - builtin `shared/` from @braidhq/core (Proposal / Clarify / Validator
+    //     format docs, content conventions, drift-detection guidance)
+    //   - whatever each registered plugin contributes (e.g. ontology-ddd's
+    //     concept doc). Plugin contributions resolve `URL` -> absolute path.
+    const pluginReferenceDirs = pluginRegistry.pluginReferenceDirs().map((ref) => {
+        const dir = typeof ref.directory === 'string' ? ref.directory : fileURLToPath(ref.directory);
+        return { name: ref.name, path: dir };
+    });
     const skillRunner = new SubprocessSkillRunner({
         skillRegistry,
         agentBinding,
         apiUrl,
         runRepository,
         eventBus,
+        ...(uvxBin
+            ? { coreGateway: { specUrl: `${apiUrl}/openapi.json`, uvxBin } }
+            : {}),
         referenceDirs: [
             { name: 'shared', path: join(builtinSkillsRoot, 'shared') },
+            ...pluginReferenceDirs,
         ],
     });
+    // Shared by WorkspaceBootstrap (boot reconciliation) and HITLService (per-mutation commits).
+    const history = new GitWorkspaceHistory();
+    const graphSerializer = new FsGraphSerializer();
+    const bootstrap = new WorkspaceBootstrap({
+        history,
+        serializer: graphSerializer,
+        modelRepository,
+    });
+    const workspacesRoot = join(braidHome, 'workspaces');
+    const userDirectory = new UserDirectoryFromRegistry(userRegistry);
     const deps = composeApp({
         workspaceRepository,
         proposalRepository,
@@ -124,11 +237,80 @@ export function composeFsApp(options = {}) {
         runRepository,
         pluginRegistry,
         eventBus,
+        workspacesRoot,
+        history,
+        graphSerializer,
+        bootstrap,
+        batchPlanRepository: new FsBatchPlanRepository(),
+        intentLister: listIntentItems,
+        sourceUnitStateRepository: new FsSourceUnitStateRepository({ workspaceRoots }),
+        sourceUnitDigest: new FsSourceUnitDigest(),
+        userDirectory,
     });
+    // Pick up workspaces that exist on disk but aren't in the registry:
+    // CLI-created ones, scaffold-orphans, copies-from-another-machine.
+    // Registry add is idempotent so this is safe to run on every boot.
+    await discoverCanonicalWorkspaces(workspacesRoot, deps.workspaceService);
+    // Phase C migration: stamp `local-user` as owner of any workspace
+    // whose members[] is still empty (pre-Phase-C registry entries,
+    // freshly discovered workspaces). Owner promotion via `/members`
+    // routes can rewrite this later.
+    await ensureWorkspaceOwners(registry);
+    // Per-workspace failures are logged and tolerated so one bad dir doesn't block boot.
+    const bootstrapLog = createLogger('server').child({ mod: 'workspace-bootstrap' });
+    for (const workspace of await deps.workspaceService.list()) {
+        try {
+            await bootstrap.ensure(workspace);
+            // Mark any batch plan left running by a previous process as failed so
+            // the UI doesn't show a phantom spinner. Safe to call even when there
+            // is no plan or when the plan is already terminal.
+            await deps.batchService?.reconcileAfterBoot(workspace.id);
+        }
+        catch (err) {
+            bootstrapLog.warn({ err, workspaceId: workspace.id }, 'workspace bootstrap failed; skipping');
+        }
+    }
+    // Local trust is the default; production deployments opt into the
+    // Bearer-token gate by setting `BRAID_LOCAL_TRUST=false`. We deliberately
+    // DON'T flip the default just because Google OAuth env vars are
+    // present — those same creds are also used by the Drive source
+    // loader for ingest, so a local dev workspace pulling from Drive
+    // would otherwise get pushed into the Login flow on every reload.
+    const localTrust = parseBoolEnv(process.env.BRAID_LOCAL_TRUST, true);
     return {
         ...deps,
+        bootstrap,
         secretStore,
+        userRegistry,
+        workspaceRegistry: registry,
+        sessionStore,
+        accessPolicy,
+        studioUrl,
+        localTrust,
         ...(googleOAuth ? { googleOAuth } : {}),
     };
 }
+function parseCsv(input) {
+    if (!input)
+        return undefined;
+    const parts = input.split(',').map(s => s.trim()).filter(s => s.length > 0);
+    return parts.length > 0 ? parts : undefined;
+}
+/**
+ * Resolve the `uvx` binary path by running `uvx --version`. Returns
+ * `'uvx'` when the call succeeds (we let `PATH` resolve it at spawn
+ * time so we don't bake an absolute path into mcp-config), or
+ * `undefined` when `uv` isn't installed. Honours `BRAID_UVX_BIN` for
+ * pinning a specific binary (uv in a non-PATH location, or tests
+ * that want to inject a stub).
+ */
+async function detectUvx() {
+    const pinned = process.env.BRAID_UVX_BIN;
+    const command = pinned && pinned.length > 0 ? pinned : 'uvx';
+    return await new Promise((resolve) => {
+        const child = spawn(command, ['--version'], { stdio: 'ignore' });
+        child.once('error', () => resolve(undefined));
+        child.once('exit', code => resolve(code === 0 ? command : undefined));
+    });
+}
 //# sourceMappingURL=composeFs.js.map

package/dist/composeFs.js.map

@@ -1 +1 @@
-{"version":3,"file":"composeFs.js","sourceRoot":"","sources":["../src/composeFs.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,OAAO,MAAM,cAAc,CAAA;AAClC,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,yBAAyB,EACzB,aAAa,EACb,qBAAqB,EACrB,mBAAmB,EACnB,cAAc,EACd,mBAAmB,GACpB,MAAM,eAAe,CAAA;AACtB,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAA;AACjE,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAA;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAA;AAC3D,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAC7C,OAAO,EAAE,sBAAsB,EAAE,MAAM,kDAAkD,CAAA;AACzF,OAAO,EAAE,qBAAqB,EAAE,MAAM,iDAAiD,CAAA;AACvF,OAAO,EAAE,yBAAyB,EAAE,MAAM,kDAAkD,CAAA;AAC5F,OAAO,EAAE,oBAAoB,EAAE,MAAM,6CAA6C,CAAA;AAClF,OAAO,EAAE,oBAAoB,EAAE,MAAM,6CAA6C,CAAA;AAClF,OAAO,EAAE,eAAe,EAAE,MAAM,wCAAwC,CAAA;AACxE,OAAO,EAAE,eAAe,EAAE,MAAM,wCAAwC,CAAA;AACxE,OAAO,EAAE,qBAAqB,EAAE,MAAM,8CAA8C,CAAA;AACpF,OAAO,EAAE,qBAAqB,EAAE,MAAM,8CAA8C,CAAA;AACpF,OAAO,EAAE,WAAW,EAAE,MAAM,uCAAuC,CAAA;AACnE,OAAO,EAAE,aAAa,EAAE,MAAM,yCAAyC,CAAA;AAavE;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,UAA4B,EAAE;IACzD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAA;IAC1F,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,uBAAuB,CAAA;IAExD,MAAM,WAAW,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAA;IAEjE,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAA;IACzD,MAAM,kBAAkB,GAAG,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAA;IACjE,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,IAAI,GAAG,MAAM,wBAAwB,CAAA;IACjG,MAAM,WAAW,GAAG,cAAc,IAAI,kBAAkB;QACtD,CAAC,CAAC,IAAI,WAAW,CAAC,EAAE,QAAQ,EAAE,cAAc,EAAE,YAAY,EAAE,kBAAkB,EAAE,WAAW,EAAE,cAAc,EAAE,CAAC;QAC9G,CAAC,CAAC,SAAS,CAAA;IAEb,MAAM,QAAQ,GAAG,IAAI,qBAAqB,CAAC,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC,CAAA;IAC9E,MAAM,mBAAmB,GAAG,IAAI,qBAAqB,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAA;IACnE,MAAM,cAAc,GAAG,KAAK,IAAqD,EAAE;QACjF,MAAM,UAAU,GAAG,MAAM,mBAAmB,CAAC,IAAI,EAAE,CAAA;QACnD,OAAO,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAA;IAC5D,CAAC,CAAA;IAED,MAAM,kBAAkB,GAAG,IAAI,oBAAoB,CAAC,EAAE,cAAc,EAAE,CAAC,CAAA;IACvE,MAAM,iBAAiB,GAAG,IAAI,yBAAyB,CAAC,EAAE,cAAc,EAAE,CAAC,CAAA;IAC3E,MAAM,kBAAkB,GAAG,IAAI,oBAAoB,CAAC,EAAE,cAAc,EAAE,CAAC,CAAA;IAEvE,MAAM,eAAe,GAAG,IAAI,mBAAmB,CAAC;QAC9C,aAAa,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE;YACnC,MAAM,KAAK,GAAG,MAAM,cAAc,EAAE,CAAA;YACpC,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;YACnC,IAAI,CAAC,IAAI;gBACP,MAAM,IAAI,aAAa,CAAC,cAAc,WAAW,kBAAkB,CAAC,CAAA;YACtE,OAAO,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAA;QAC3C,CAAC;KACF,CAAC,CAAA;IAEF,MAAM,YAAY,GAAG,IAAI,sBAAsB,CAAC;QAC9C,EAAE,EAAE,gBAA2B;QAC/B,IAAI,EAAE,aAA0B;QAChC,KAAK,EAAE,OAAO,CAAC,UAAU,IAAI,MAAM;QACnC,MAAM,EAAE,OAAO,CAAC,WAAW,IAAI,MAAM;QACrC,SAAS,EAAE,EAAE;QACb,GAAG,EAAE,EAAE;KACR,CAAC,CAAA;IAEF,MAAM,aAAa,GAAG,IAAI,eAAe,EAAE,CAAA;IAE3C,MAAM,cAAc,GAAG,IAAI,cAAc,EAAE,CAAA;IAC3C,cAAc,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;IACpC,cAAc,CAAC,QAAQ,CAAC,IAAI,iBAAiB,EAAE,CAAC,CAAA;IAChD,cAAc,CAAC,QAAQ,CAAC,IAAI,mBAAmB,EAAE,CAAC,CAAA;IAClD,cAAc,CAAC,QAAQ,CAAC,IAAI,qBAAqB,CAAC,WAAW,CAAC,CAAC,CAAA;IAC/D,cAAc,CAAC,QAAQ,CAAC,IAAI,mBAAmB,CAAC,WAAW,CAAC,CAAC,CAAA;IAC7D,cAAc,CAAC,QAAQ,CAAC,IAAI,SAAS,EAAE,CAAC,CAAA;IAExC,IAAI,WAAW,EAAE,CAAC;QAChB,oEAAoE;QACpE,oEAAoE;QACpE,mEAAmE;QACnE,wCAAwC;QACxC,MAAM,KAAK,GAAG,WAAW,CAAA;QACzB,cAAc,CAAC,QAAQ,CAAC,IAAI,iBAAiB,CAAC;YAC5C,kBAAkB,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,EAAE,EAAE;gBACtD,MAAM,GAAG,GAAG,GAAG,WAAW,KAAK,QAAQ,EAAE,CAAA;gBACzC,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,IAAI,CAIlC,cAAc,EAAE,GAAG,CAAC,CAAA;gBACvB,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,MAAM,IAAI,aAAa,CACrB,wBAAwB,QAAQ,mBAAmB,WAAW,sBAAsB;0BAClF,yCAAyC,CAC5C,CAAA;gBACH,CAAC;gBACD,2EAA2E;gBAC3E,MAAM,eAAe,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,GAAG,MAAM,CAAA;gBACrE,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,eAAe;oBAC9B,OAAO,MAAM,CAAC,WAAW,CAAA;gBAC3B,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,kBAAkB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAA;gBACrE,MAAM,WAAW,CAAC,KAAK,CAAC,cAAc,EAAE,GAAG,EAAE;oBAC3C,GAAG,MAAM;oBACT,WAAW,EAAE,SAAS,CAAC,WAAW;oBAClC,SAAS,EAAE,SAAS,CAAC,SAAS;iBAC/B,CAAC,CAAA;gBACF,OAAO,SAAS,CAAC,WAAW,CAAA;YAC9B,CAAC;SACF,CAAC,CAAC,CAAA;IACL,CAAC;IAED,qEAAqE;IACrE,kEAAkE;IAClE,MAAM,aAAa,GAAG,IAAI,eAAe,CAAC;QACxC,iBAAiB,EAAE,iBAAiC;QACpD,cAAc;KACf,CAAC,CAAA;IAEF,MAAM,QAAQ,GAAG,IAAI,yBAAyB,EAAE,CAAA;IAChD,MAAM,WAAW,GAAG,IAAI,qBAAqB,CAAC;QAC5C,aAAa;QACb,YAAY;QACZ,MAAM;QACN,aAAa;QACb,QAAQ;QACR,aAAa,EAAE;YACb,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,iBAAiB,EAAE,QAAQ,CAAiB,EAAE;SAC5E;KACF,CAAC,CAAA;IAEF,MAAM,IAAI,GAAG,UAAU,CAAC;QACtB,mBAAmB;QACnB,kBAAkB;QAClB,iBAAiB;QACjB,kBAAkB;QAClB,eAAe;QACf,aAAa;QACb,WAAW;QACX,aAAa;QACb,cAAc;QACd,QAAQ;KACT,CAAC,CAAA;IACF,OAAO;QACL,GAAG,IAAI;QACP,WAAW;QACX,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxC,CAAA;AACH,CAAC"}
+{"version":3,"file":"composeFs.js","sourceRoot":"","sources":["../src/composeFs.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAA;AAC1C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,OAAO,MAAM,cAAc,CAAA;AAClC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AACxC,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAA;AAClE,OAAO,EACL,iBAAiB,EACjB,YAAY,EACZ,aAAa,EACb,cAAc,EACd,eAAe,EACf,kBAAkB,GACnB,MAAM,eAAe,CAAA;AACtB,OAAO,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAA;AACjE,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AACnD,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,IAAI,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AACtF,OAAO,EAAE,uBAAuB,EAAE,MAAM,+BAA+B,CAAA;AACvE,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAA;AACtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAA;AAClE,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAA;AACzD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAC7C,OAAO,EAAE,qBAAqB,EAAE,MAAM,iDAAiD,CAAA;AACvF,OAAO,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAA;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,+CAA+C,CAAA;AACpF,OAAO,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAA;AACpE,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAA;AACtD,OAAO,EAAE,qBAAqB,EAAE,MAAM,8CAA8C,CAAA;AACpF,OAAO,EAAE,yBAAyB,EAAE,MAAM,kDAAkD,CAAA;AAC5F,OAAO,EAAE,oBAAoB,EAAE,MAAM,6CAA6C,CAAA;AAClF,OAAO,EAAE,iBAAiB,EAAE,MAAM,0CAA0C,CAAA;AAC5E,OAAO,EAAE,oBAAoB,EAAE,MAAM,6CAA6C,CAAA;AAClF,OAAO,EAAE,eAAe,EAAE,MAAM,wCAAwC,CAAA;AACxE,OAAO,EAAE,eAAe,EAAE,MAAM,wCAAwC,CAAA;AACxE,OAAO,EAAE,kBAAkB,EAAE,MAAM,2CAA2C,CAAA;AAC9E,OAAO,EAAE,2BAA2B,EAAE,MAAM,oDAAoD,CAAA;AAChG,OAAO,EAAE,qBAAqB,EAAE,MAAM,8CAA8C,CAAA;AACpF,OAAO,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAA;AACnE,OAAO,EAAE,2BAA2B,EAAE,MAAM,2CAA2C,CAAA;AACvF,OAAO,EAAE,qBAAqB,EAAE,MAAM,8CAA8C,CAAA;AACpF,OAAO,EAAE,mBAAmB,EAAE,MAAM,6CAA6C,CAAA;AACjF,OAAO,EAAE,WAAW,EAAE,MAAM,uCAAuC,CAAA;AACnE,OAAO,EAAE,aAAa,EAAE,MAAM,yCAAyC,CAAA;AACvE,OAAO,EAAE,eAAe,EAAE,MAAM,2CAA2C,CAAA;AAC3E,OAAO,EAAE,qBAAqB,EAAE,MAAM,iDAAiD,CAAA;AACvF,OAAO,EAAE,yBAAyB,EAAE,MAAM,qDAAqD,CAAA;AAC/F,OAAO,EAAE,gBAAgB,EAAE,MAAM,4CAA4C,CAAA;AAyC7E;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,UAA4B,EAAE;IAC/D,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAA;IAC1F,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,uBAAuB,CAAA;IAExD,MAAM,WAAW,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAA;IAEjE,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAA;IACzD,MAAM,kBAAkB,GAAG,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAA;IACjE,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,IAAI,GAAG,MAAM,wBAAwB,CAAA;IACjG,MAAM,mBAAmB,GAAG,OAAO,CAAC,GAAG,CAAC,+BAA+B,IAAI,GAAG,MAAM,uBAAuB,CAAA;IAC3G,MAAM,WAAW,GAAG,cAAc,IAAI,kBAAkB;QACtD,CAAC,CAAC,IAAI,WAAW,CAAC;YAChB,QAAQ,EAAE,cAAc;YACxB,YAAY,EAAE,kBAAkB;YAChC,WAAW,EAAE,cAAc;YAC3B,gBAAgB,EAAE,mBAAmB;SACtC,CAAC;QACF,CAAC,CAAC,SAAS,CAAA;IAEb,MAAM,QAAQ,GAAG,IAAI,qBAAqB,CAAC,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC,CAAA;IAC9E,MAAM,mBAAmB,GAAG,IAAI,qBAAqB,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAA;IAEnE,sEAAsE;IACtE,kEAAkE;IAClE,mEAAmE;IACnE,uEAAuE;IACvE,MAAM,YAAY,GAAG,IAAI,gBAAgB,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,CAAA;IACxE,MAAM,eAAe,CAAC,YAAY,CAAC,CAAA;IAEnC,4EAA4E;IAC5E,qEAAqE;IACrE,oEAAoE;IACpE,0EAA0E;IAC1E,sEAAsE;IACtE,iCAAiC;IACjC,MAAM,YAAY,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC,CAAA;IACvE,MAAM,kBAAkB,GAIpB,EAAE,CAAA;IACN,MAAM,cAAc,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAA;IAClE,IAAI,cAAc;QAChB,kBAAkB,CAAC,cAAc,GAAG,cAAc,CAAA;IACpD,MAAM,aAAa,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAA;IAChE,IAAI,aAAa;QACf,kBAAkB,CAAC,aAAa,GAAG,aAAa,CAAA;IAClD,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAA;IAC5D,IAAI,WAAW;QACb,kBAAkB,CAAC,WAAW,GAAG,WAAW,CAAA;IAC9C,MAAM,YAAY,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,EAAE,kBAAkB,CAAC,CAAA;IACzF,qEAAqE;IACrE,qDAAqD;IACrD,MAAM,oBAAoB,CAAC,YAAY,EAAE,YAAY,CAAC,CAAA;IACtD,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,uBAAuB,CAAA;IACzE,MAAM,cAAc,GAAG,KAAK,IAAqD,EAAE;QACjF,MAAM,UAAU,GAAG,MAAM,mBAAmB,CAAC,IAAI,EAAE,CAAA;QACnD,OAAO,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAA;IAC5D,CAAC,CAAA;IAED,MAAM,kBAAkB,GAAG,IAAI,oBAAoB,CAAC,EAAE,cAAc,EAAE,CAAC,CAAA;IACvE,MAAM,iBAAiB,GAAG,IAAI,yBAAyB,CAAC,EAAE,cAAc,EAAE,CAAC,CAAA;IAC3E,MAAM,kBAAkB,GAAG,IAAI,oBAAoB,CAAC,EAAE,cAAc,EAAE,CAAC,CAAA;IAEvE,uEAAuE;IACvE,wEAAwE;IACxE,gEAAgE;IAChE,yBAAyB;IACzB,MAAM,cAAc,GAAG,IAAI,cAAc,EAAE,CAAA;IAC3C,cAAc,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAA;IAC1C,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,mBAAmB,IAAI,EAAE;QACpD,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;IAEjC,cAAc,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;IACpC,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,oBAAoB,IAAI,EAAE;QACrD,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;IAEjC,cAAc,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAA;IAClC,cAAc,CAAC,QAAQ,CAAC,kBAAkB,EAAE,CAAC,CAAA;IAC7C,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,wBAAwB,IAAI,EAAE;QACzD,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;IAEjC,cAAc,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAA;IAC9C,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,iBAAiB,IAAI,EAAE;QAClD,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;IAEjC,oEAAoE;IACpE,qEAAqE;IACrE,kEAAkE;IAClE,8DAA8D;IAC9D,MAAM,KAAK,GAAG,WAAW,CAAA;IACzB,cAAc,CAAC,QAAQ,CAAC,uBAAuB,CAAC;QAC9C,kBAAkB,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,EAAE,EAAE;YACtD,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,IAAI,eAAe,CACvB,wBAAwB,QAAQ,qHAAqH,CACtJ,CAAA;YACH,CAAC;YACD,MAAM,GAAG,GAAG,GAAG,WAAW,KAAK,QAAQ,EAAE,CAAA;YACzC,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,IAAI,CAIlC,cAAc,EAAE,GAAG,CAAC,CAAA;YACvB,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,IAAI,aAAa,CACrB,wBAAwB,QAAQ,mBAAmB,WAAW,sBAAsB;sBAClF,yCAAyC,CAC5C,CAAA;YACH,CAAC;YACD,2EAA2E;YAC3E,MAAM,eAAe,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,GAAG,MAAM,CAAA;YACrE,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,eAAe;gBAC9B,OAAO,MAAM,CAAC,WAAW,CAAA;YAC3B,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,kBAAkB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAA;YACrE,MAAM,WAAW,CAAC,KAAK,CAAC,cAAc,EAAE,GAAG,EAAE;gBAC3C,GAAG,MAAM;gBACT,WAAW,EAAE,SAAS,CAAC,WAAW;gBAClC,SAAS,EAAE,SAAS,CAAC,SAAS;aAC/B,CAAC,CAAA;YACF,OAAO,SAAS,CAAC,WAAW,CAAA;QAC9B,CAAC;KACF,CAAC,CAAC,CAAA;IAEH,sEAAsE;IACtE,MAAM,WAAW,GAAG,iBAAiB,CAAC,KAAK,CACzC,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,MAAM,CAChE,CAAA;IACD,MAAM,eAAe,GAAG,MAAM,cAAc,CAAC,oBAAoB,CAAC,WAAW,CAAC,CAAC,qBAAqB,CAClG,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,EACjC;QACE,iBAAiB,EAAE,SAAS;QAC5B,MAAM,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE;QAC3D,oBAAoB,EAAE,KAAK,EAAE,WAAwB,EAAE,EAAE;YACvD,MAAM,KAAK,GAAG,MAAM,cAAc,EAAE,CAAA;YACpC,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;YACnC,IAAI,CAAC,IAAI;gBACP,MAAM,IAAI,aAAa,CAAC,cAAc,WAAW,kBAAkB,CAAC,CAAA;YACtE,OAAO,IAAI,CAAA;QACb,CAAC;KACF,CACF,CAAA;IAED,yDAAyD;IACzD,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,IAAI,aAAa,CAAC,CAAA;IACrE,MAAM,YAAY,GAAG,cAAc,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC,aAAa,CAAC;QAC9E,EAAE,EAAE,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC;QAC5B,IAAI,EAAE,SAAS;QACf,KAAK,EAAE,OAAO,CAAC,UAAU,IAAI,MAAM;QACnC,MAAM,EAAE,OAAO,CAAC,WAAW,IAAI,MAAM;QACrC,SAAS,EAAE,EAAE;QACb,GAAG,EAAE,EAAE;KACR,CAAC,CAAA;IAEF,MAAM,aAAa,GAAG,IAAI,eAAe,EAAE,CAAA;IAE3C,qEAAqE;IACrE,kEAAkE;IAClE,MAAM,aAAa,GAAG,IAAI,eAAe,CAAC;QACxC,iBAAiB,EAAE,iBAAiC;QACpD,cAAc;KACf,CAAC,CAAA;IAEF,MAAM,QAAQ,GAAG,IAAI,yBAAyB,EAAE,CAAA;IAChD,mEAAmE;IACnE,oEAAoE;IACpE,kEAAkE;IAClE,oEAAoE;IACpE,+CAA+C;IAC/C,iEAAiE;IACjE,8DAA8D;IAC9D,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAA;IAChC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,CAAC,IAAI,CACV,6FAA6F;cAC3F,wEAAwE,CAC3E,CAAA;IACH,CAAC;IACD,uEAAuE;IACvE,2EAA2E;IAC3E,kEAAkE;IAClE,uEAAuE;IACvE,yEAAyE;IACzE,MAAM,mBAAmB,GAAG,cAAc,CAAC,mBAAmB,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QAC3E,MAAM,GAAG,GAAG,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QAC5F,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,GAAmB,EAAE,CAAA;IACtD,CAAC,CAAC,CAAA;IACF,MAAM,WAAW,GAAG,IAAI,qBAAqB,CAAC;QAC5C,aAAa;QACb,YAAY;QACZ,MAAM;QACN,aAAa;QACb,QAAQ;QACR,GAAG,CAAC,MAAM;YACR,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,OAAO,EAAE,GAAG,MAAM,eAAe,EAAE,MAAM,EAAE,EAAE;YAChE,CAAC,CAAC,EAAE,CAAC;QACP,aAAa,EAAE;YACb,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,iBAAiB,EAAE,QAAQ,CAAiB,EAAE;YAC3E,GAAG,mBAAmB;SACvB;KACF,CAAC,CAAA;IAEF,6FAA6F;IAC7F,MAAM,OAAO,GAAG,IAAI,mBAAmB,EAAE,CAAA;IACzC,MAAM,eAAe,GAAG,IAAI,iBAAiB,EAAE,CAAA;IAC/C,MAAM,SAAS,GAAG,IAAI,kBAAkB,CAAC;QACvC,OAAO;QACP,UAAU,EAAE,eAAe;QAC3B,eAAe;KAChB,CAAC,CAAA;IAEF,MAAM,cAAc,GAAG,IAAI,CAAC,SAAS,EAAE,YAAY,CAAiB,CAAA;IACpE,MAAM,aAAa,GAAG,IAAI,yBAAyB,CAAC,YAAY,CAAC,CAAA;IACjE,MAAM,IAAI,GAAG,UAAU,CAAC;QACtB,mBAAmB;QACnB,kBAAkB;QAClB,iBAAiB;QACjB,kBAAkB;QAClB,eAAe;QACf,aAAa;QACb,WAAW;QACX,aAAa;QACb,cAAc;QACd,QAAQ;QACR,cAAc;QACd,OAAO;QACP,eAAe;QACf,SAAS;QACT,mBAAmB,EAAE,IAAI,qBAAqB,EAAE;QAChD,YAAY,EAAE,eAAe;QAC7B,yBAAyB,EAAE,IAAI,2BAA2B,CAAC,EAAE,cAAc,EAAE,CAAC;QAC9E,gBAAgB,EAAE,IAAI,kBAAkB,EAAE;QAC1C,aAAa;KACd,CAAC,CAAA;IAEF,oEAAoE;IACpE,mEAAmE;IACnE,mEAAmE;IACnE,MAAM,2BAA2B,CAAC,cAAc,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAA;IAExE,kEAAkE;IAClE,gEAAgE;IAChE,iEAAiE;IACjE,iCAAiC;IACjC,MAAM,qBAAqB,CAAC,QAAQ,CAAC,CAAA;IAErC,qFAAqF;IACrF,MAAM,YAAY,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,qBAAqB,EAAE,CAAC,CAAA;IACjF,KAAK,MAAM,SAAS,IAAI,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,EAAE,CAAC;QAC3D,IAAI,CAAC;YACH,MAAM,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;YACjC,sEAAsE;YACtE,sEAAsE;YACtE,mDAAmD;YACnD,MAAM,IAAI,CAAC,YAAY,EAAE,kBAAkB,CAAC,SAAS,CAAC,EAAE,CAAC,CAAA;QAC3D,CAAC;QACD,OAAO,GAAG,EAAE,CAAC;YACX,YAAY,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,WAAW,EAAE,SAAS,CAAC,EAAE,EAAE,EAAE,sCAAsC,CAAC,CAAA;QAC/F,CAAC;IACH,CAAC;IAED,kEAAkE;IAClE,0EAA0E;IAC1E,gEAAgE;IAChE,+DAA+D;IAC/D,iEAAiE;IACjE,kEAAkE;IAClE,MAAM,UAAU,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAA;IAEpE,OAAO;QACL,GAAG,IAAI;QACP,SAAS;QACT,WAAW;QACX,YAAY;QACZ,iBAAiB,EAAE,QAAQ;QAC3B,YAAY;QACZ,YAAY;QACZ,SAAS;QACT,UAAU;QACV,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxC,CAAA;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,KAAyB;IACzC,IAAI,CAAC,KAAK;QACR,OAAO,SAAS,CAAA;IAClB,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IAC3E,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;AAC7C,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,SAAS;IACtB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAA;IACxC,MAAM,OAAO,GAAG,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAA;IAC5D,OAAO,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QACnC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAA;QAChE,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAA;QAC7C,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAA;IACvE,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/dist/composition.d.ts

@@ -1,10 +1,18 @@
-import type { ClarifyTicketRepository, Clock, DecisionRepository, ModelRepository, ProposalRepository, RunRepository, SkillRegistry, SkillRunner, WorkspaceEventBus, WorkspaceRepository } from '@braidhq/core';
+import type { BatchPlanRepository, ClarifyTicketRepository, Clock, DecisionRepository, GraphSerializer, IntentLister, ModelRepository, ProposalRepository, RunRepository, SkillRegistry, SkillRunner, SourceUnitDigest, SourceUnitStateRepository, UserDirectory, WorkspaceBootstrap, WorkspaceEventBus, WorkspaceHistory, WorkspaceRepository } from '@braidhq/core';
+import type { AbsolutePath } from '@braidhq/schema';
+import type { AccessPolicy } from './infrastructure/auth/AccessPolicy.js';
+import type { SessionStore } from './infrastructure/auth/SessionStore.js';
+import type { WorkspaceRegistryFile } from './infrastructure/fs/WorkspaceRegistryFile.js';
 import type { GoogleOAuth } from './infrastructure/oauth/GoogleOAuth.js';
 import type { SecretStore } from './infrastructure/secrets/SecretStore.js';
-import { HITLService, ModelService, PluginRegistry, SourceLoaderRunner, ValidationService, WorkspaceService } from '@braidhq/core';
+import type { UserRegistryFile } from './infrastructure/users/UserRegistryFile.js';
+import { BatchService, HistoryService, HITLService, ModelService, PluginRegistry, SourceLoaderRunner, SourceUnitStateService, ValidationService, WorkspaceService } from '@braidhq/core';
 export interface AppDependencies {
     workspaceService: WorkspaceService;
     hitlService: HITLService;
+    historyService?: HistoryService;
+    batchService?: BatchService;
+    sourceUnitStateService: SourceUnitStateService;
     modelService: ModelService;
     validationService: ValidationService;
     sourceLoaderRunner: SourceLoaderRunner;
@@ -18,6 +26,12 @@ export interface AppDependencies {
     skillRegistry: SkillRegistry | undefined;
     skillRunner: SkillRunner | undefined;
     runRepository: RunRepository;
+    /**
+     * Parent directory under which name-based workspaces are scaffolded.
+     * `POST /workspaces/scaffold { name }` resolves to `<workspacesRoot>/<name>`.
+     */
+    workspacesRoot: AbsolutePath;
+    bootstrap?: WorkspaceBootstrap;
     /** OAuth secret storage (file-based; pluggable for hosted deployments). */
     secretStore?: SecretStore;
     /**
@@ -25,6 +39,45 @@ export interface AppDependencies {
      *  respond with 503 in that case.
      */
     googleOAuth?: GoogleOAuth;
+    /**
+     * Server-side user roster (Phase A scaffolding). When absent the
+     * `/users` route is not mounted; routes that read `c.get('userId')`
+     * still work because `userIdMiddleware` falls back to `local-user`.
+     */
+    userRegistry?: UserRegistryFile;
+    /**
+     * Server-side workspace registry — backs the Phase C membership
+     * model. Required to mount `workspaceAccessMiddleware` and the
+     * `/workspaces/:id/members` routes; absent in pure in-memory tests
+     * that don't need member-gating.
+     */
+    workspaceRegistry?: WorkspaceRegistryFile;
+    /**
+     * Phase B: Bearer-token session backing. Required to mount `/auth/*`
+     * and the auth middleware. Absent in tests that want the pre-Phase-A
+     * trusted-network shape (no auth gate).
+     */
+    sessionStore?: SessionStore;
+    /**
+     * Phase B: Gate-1 allowlist + invite list. Paired with `sessionStore`
+     * to mount `/auth/*`.
+     */
+    accessPolicy?: AccessPolicy;
+    /**
+     * Phase B: URL the Studio bundle is served from. OAuth callback
+     * redirects here with `#token=...` so the SPA can capture the
+     * session. Defaults to the Vite dev origin in `composeFsApp`.
+     */
+    studioUrl?: string;
+    /**
+     * Phase B: when true (default in tests / local dev where Google
+     * OAuth isn't configured), the auth middleware lets every request
+     * through and `userIdMiddleware`'s fallback (`local-user`) takes
+     * over. composeFs computes this from the presence of Google OAuth
+     * env vars; production remote deployments end up with `false` and
+     * an enforced Bearer-token gate.
+     */
+    localTrust: boolean;
     clock: Clock;
 }
 export interface ComposeOptions {
@@ -38,12 +91,43 @@ export interface ComposeOptions {
     skillRegistry?: SkillRegistry;
     skillRunner?: SkillRunner;
     runRepository?: RunRepository;
+    /**
+     * Parent dir for name-based scaffold. composeFsApp sets this to
+     * `<braidHome>/workspaces`; tests using composeApp directly can leave
+     * it at the default unless they exercise the scaffold endpoint.
+     */
+    workspacesRoot?: AbsolutePath;
     /**
      * Pre-created event bus. Pass the same instance you wired into
      * `SubprocessSkillRunner` so subscribers see runner events. Defaults
      * to a fresh `InMemoryWorkspaceEventBus` for tests / in-memory boot.
      */
     eventBus?: WorkspaceEventBus;
+    history?: WorkspaceHistory;
+    graphSerializer?: GraphSerializer;
+    bootstrap?: WorkspaceBootstrap;
+    batchPlanRepository?: BatchPlanRepository;
+    intentLister?: IntentLister;
+    /**
+     * Persistence for `SourceUnitState`. Defaults to an in-memory impl
+     * so unit tests of unrelated services keep working without wiring;
+     * `composeFsApp` swaps in the fs-backed repo.
+     */
+    sourceUnitStateRepository?: SourceUnitStateRepository;
+    /**
+     * Content fingerprinter for source units. Required for batch / reactor
+     * / manual extract to record observations. Without it the
+     * `SourceUnitStateService` falls back to a no-op stub digest that
+     * throws on use, which is fine for tests that don't exercise observation
+     * recording but would break production batches.
+     */
+    sourceUnitDigest?: SourceUnitDigest;
+    /**
+     * Optional read-only user lookup used by HITLService / HistoryService
+     * to snapshot displayName + email into the git author when committing.
+     * Tests skip this so the existing `Author: <userId>` shape is preserved.
+     */
+    userDirectory?: UserDirectory;
 }
 export declare function composeApp(options?: ComposeOptions): AppDependencies;
 //# sourceMappingURL=composition.d.ts.map

package/dist/composition.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"composition.d.ts","sourceRoot":"","sources":["../src/composition.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,uBAAuB,EACvB,KAAK,EACL,kBAAkB,EAClB,eAAe,EACf,kBAAkB,EAClB,aAAa,EACb,aAAa,EACb,WAAW,EACX,iBAAiB,EACjB,mBAAmB,EACpB,MAAM,eAAe,CAAA;AACtB,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uCAAuC,CAAA;AACxE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,yCAAyC,CAAA;AAC1E,OAAO,EACL,WAAW,EAOX,YAAY,EAEZ,cAAc,EACd,kBAAkB,EAElB,iBAAiB,EACjB,gBAAgB,EACjB,MAAM,eAAe,CAAA;AAEtB,MAAM,WAAW,eAAe;IAC9B,gBAAgB,EAAE,gBAAgB,CAAA;IAClC,WAAW,EAAE,WAAW,CAAA;IACxB,YAAY,EAAE,YAAY,CAAA;IAC1B,iBAAiB,EAAE,iBAAiB,CAAA;IACpC,kBAAkB,EAAE,kBAAkB,CAAA;IACtC,QAAQ,EAAE,iBAAiB,CAAA;IAC3B,cAAc,EAAE,cAAc,CAAA;IAC9B,kBAAkB,EAAE,kBAAkB,CAAA;IACtC,iBAAiB,EAAE,uBAAuB,CAAA;IAC1C,kBAAkB,EAAE,kBAAkB,CAAA;IACtC,eAAe,EAAE,eAAe,CAAA;IAChC,mBAAmB,EAAE,mBAAmB,CAAA;IACxC,aAAa,EAAE,aAAa,GAAG,SAAS,CAAA;IACxC,WAAW,EAAE,WAAW,GAAG,SAAS,CAAA;IACpC,aAAa,EAAE,aAAa,CAAA;IAC5B,2EAA2E;IAC3E,WAAW,CAAC,EAAE,WAAW,CAAA;IACzB;;;OAGG;IACH,WAAW,CAAC,EAAE,WAAW,CAAA;IACzB,KAAK,EAAE,KAAK,CAAA;CACb;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,CAAC,EAAE,KAAK,CAAA;IACb,kBAAkB,CAAC,EAAE,kBAAkB,CAAA;IACvC,iBAAiB,CAAC,EAAE,uBAAuB,CAAA;IAC3C,kBAAkB,CAAC,EAAE,kBAAkB,CAAA;IACvC,eAAe,CAAC,EAAE,eAAe,CAAA;IACjC,mBAAmB,CAAC,EAAE,mBAAmB,CAAA;IACzC,cAAc,CAAC,EAAE,cAAc,CAAA;IAC/B,aAAa,CAAC,EAAE,aAAa,CAAA;IAC7B,WAAW,CAAC,EAAE,WAAW,CAAA;IACzB,aAAa,CAAC,EAAE,aAAa,CAAA;IAC7B;;;;OAIG;IACH,QAAQ,CAAC,EAAE,iBAAiB,CAAA;CAC7B;AAED,wBAAgB,UAAU,CAAC,OAAO,GAAE,cAAmB,GAAG,eAAe,CA0CxE"}
+{"version":3,"file":"composition.d.ts","sourceRoot":"","sources":["../src/composition.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,mBAAmB,EACnB,uBAAuB,EACvB,KAAK,EACL,kBAAkB,EAClB,eAAe,EACf,YAAY,EACZ,eAAe,EACf,kBAAkB,EAClB,aAAa,EACb,aAAa,EACb,WAAW,EACX,gBAAgB,EAChB,yBAAyB,EACzB,aAAa,EACb,kBAAkB,EAClB,iBAAiB,EACjB,gBAAgB,EAChB,mBAAmB,EACpB,MAAM,eAAe,CAAA;AACtB,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AACnD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAA;AACzE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAA;AACzE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,8CAA8C,CAAA;AACzF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uCAAuC,CAAA;AACxE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,yCAAyC,CAAA;AAC1E,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,4CAA4C,CAAA;AAGlF,OAAO,EACL,YAAY,EACZ,cAAc,EACd,WAAW,EACX,YAAY,EAEZ,cAAc,EACd,kBAAkB,EAClB,sBAAsB,EAEtB,iBAAiB,EACjB,gBAAgB,EACjB,MAAM,eAAe,CAAA;AAYtB,MAAM,WAAW,eAAe;IAC9B,gBAAgB,EAAE,gBAAgB,CAAA;IAClC,WAAW,EAAE,WAAW,CAAA;IACxB,cAAc,CAAC,EAAE,cAAc,CAAA;IAC/B,YAAY,CAAC,EAAE,YAAY,CAAA;IAC3B,sBAAsB,EAAE,sBAAsB,CAAA;IAC9C,YAAY,EAAE,YAAY,CAAA;IAC1B,iBAAiB,EAAE,iBAAiB,CAAA;IACpC,kBAAkB,EAAE,kBAAkB,CAAA;IACtC,QAAQ,EAAE,iBAAiB,CAAA;IAC3B,cAAc,EAAE,cAAc,CAAA;IAC9B,kBAAkB,EAAE,kBAAkB,CAAA;IACtC,iBAAiB,EAAE,uBAAuB,CAAA;IAC1C,kBAAkB,EAAE,kBAAkB,CAAA;IACtC,eAAe,EAAE,eAAe,CAAA;IAChC,mBAAmB,EAAE,mBAAmB,CAAA;IACxC,aAAa,EAAE,aAAa,GAAG,SAAS,CAAA;IACxC,WAAW,EAAE,WAAW,GAAG,SAAS,CAAA;IACpC,aAAa,EAAE,aAAa,CAAA;IAC5B;;;OAGG;IACH,cAAc,EAAE,YAAY,CAAA;IAC5B,SAAS,CAAC,EAAE,kBAAkB,CAAA;IAC9B,2EAA2E;IAC3E,WAAW,CAAC,EAAE,WAAW,CAAA;IACzB;;;OAGG;IACH,WAAW,CAAC,EAAE,WAAW,CAAA;IACzB;;;;OAIG;IACH,YAAY,CAAC,EAAE,gBAAgB,CAAA;IAC/B;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,qBAAqB,CAAA;IACzC;;;;OAIG;IACH,YAAY,CAAC,EAAE,YAAY,CAAA;IAC3B;;;OAGG;IACH,YAAY,CAAC,EAAE,YAAY,CAAA;IAC3B;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB;;;;;;;OAOG;IACH,UAAU,EAAE,OAAO,CAAA;IACnB,KAAK,EAAE,KAAK,CAAA;CACb;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,CAAC,EAAE,KAAK,CAAA;IACb,kBAAkB,CAAC,EAAE,kBAAkB,CAAA;IACvC,iBAAiB,CAAC,EAAE,uBAAuB,CAAA;IAC3C,kBAAkB,CAAC,EAAE,kBAAkB,CAAA;IACvC,eAAe,CAAC,EAAE,eAAe,CAAA;IACjC,mBAAmB,CAAC,EAAE,mBAAmB,CAAA;IACzC,cAAc,CAAC,EAAE,cAAc,CAAA;IAC/B,aAAa,CAAC,EAAE,aAAa,CAAA;IAC7B,WAAW,CAAC,EAAE,WAAW,CAAA;IACzB,aAAa,CAAC,EAAE,aAAa,CAAA;IAC7B;;;;OAIG;IACH,cAAc,CAAC,EAAE,YAAY,CAAA;IAC7B;;;;OAIG;IACH,QAAQ,CAAC,EAAE,iBAAiB,CAAA;IAE5B,OAAO,CAAC,EAAE,gBAAgB,CAAA;IAC1B,eAAe,CAAC,EAAE,eAAe,CAAA;IACjC,SAAS,CAAC,EAAE,kBAAkB,CAAA;IAC9B,mBAAmB,CAAC,EAAE,mBAAmB,CAAA;IACzC,YAAY,CAAC,EAAE,YAAY,CAAA;IAC3B;;;;OAIG;IACH,yBAAyB,CAAC,EAAE,yBAAyB,CAAA;IACrD;;;;;;OAMG;IACH,gBAAgB,CAAC,EAAE,gBAAgB,CAAA;IACnC;;;;OAIG;IACH,aAAa,CAAC,EAAE,aAAa,CAAA;CAC9B;AAED,wBAAgB,UAAU,CAAC,OAAO,GAAE,cAAmB,GAAG,eAAe,CAqGxE"}

package/dist/composition.js

@@ -1,4 +1,7 @@
-import { HITLService, InMemoryClarifyTicketRepository, InMemoryDecisionRepository, InMemoryModelRepository, InMemoryProposalRepository, InMemoryWorkspaceEventBus, InMemoryWorkspaceRepository, ModelService, noopRunRepository, PluginRegistry, SourceLoaderRunner, SystemClock, ValidationService, WorkspaceService, } from '@braidhq/core';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { BatchService, HistoryService, HITLService, ModelService, PerWorkspaceLock, PluginRegistry, SourceLoaderRunner, SourceUnitStateService, SystemClock, ValidationService, WorkspaceService, } from '@braidhq/core';
+import { InMemoryClarifyTicketRepository, InMemoryDecisionRepository, InMemoryModelRepository, InMemoryProposalRepository, InMemorySourceUnitStateRepository, InMemoryWorkspaceEventBus, InMemoryWorkspaceRepository, noopRunRepository, } from '@braidhq/core/testing';
 export function composeApp(options = {}) {
     const clock = options.clock ?? new SystemClock();
     const proposalRepository = options.proposalRepository ?? new InMemoryProposalRepository();
@@ -12,18 +15,68 @@ export function composeApp(options = {}) {
     const modelService = new ModelService({ modelRepository });
     const validationService = new ValidationService({ pluginRegistry });
     const sourceLoaderRunner = new SourceLoaderRunner({ pluginRegistry, clock, eventBus });
+    // Shared lock domain so HITL mutations and history restore exclude each other.
+    const workspaceLock = new PerWorkspaceLock();
     const hitlService = new HITLService({
         proposalRepository,
         clarifyRepository,
         decisionRepository,
         modelRepository,
         validationService,
+        workspaceService,
         clock,
         eventBus,
+        workspaceLock,
+        ...(options.history ? { history: options.history } : {}),
+        ...(options.graphSerializer ? { graphSerializer: options.graphSerializer } : {}),
+        ...(options.userDirectory ? { userDirectory: options.userDirectory } : {}),
     });
+    const historyService = options.history && options.bootstrap
+        ? new HistoryService({
+            history: options.history,
+            workspaceService,
+            workspaceLock,
+            bootstrap: options.bootstrap,
+            runRepository: options.runRepository ?? noopRunRepository,
+            ...(options.skillRunner ? { skillRunner: options.skillRunner } : {}),
+            ...(options.userDirectory ? { userDirectory: options.userDirectory } : {}),
+            eventBus,
+            clock,
+        })
+        : undefined;
+    const sourceUnitStateRepository = options.sourceUnitStateRepository ?? new InMemorySourceUnitStateRepository();
+    const sourceUnitDigest = options.sourceUnitDigest ?? new FailingSourceUnitDigest();
+    const sourceUnitStateService = new SourceUnitStateService({
+        repository: sourceUnitStateRepository,
+        digest: sourceUnitDigest,
+        workspaceService,
+        clock,
+    });
+    // Batch needs SkillRunner + HistoryService + BatchPlanRepository + intent lister; otherwise no batch surface.
+    const batchService = historyService && options.skillRunner && options.batchPlanRepository && options.intentLister
+        ? new BatchService({
+            workspaceService,
+            skillRunner: options.skillRunner,
+            proposalRepository,
+            clarifyRepository,
+            historyService,
+            hitlService,
+            batchPlanRepository: options.batchPlanRepository,
+            intentLister: options.intentLister,
+            pluginRegistry,
+            eventBus,
+            workspaceLock,
+            clock,
+            sourceUnitStateService,
+        })
+        : undefined;
     return {
         workspaceService,
         hitlService,
+        ...(historyService ? { historyService } : {}),
+        ...(batchService ? { batchService } : {}),
+        ...(options.bootstrap ? { bootstrap: options.bootstrap } : {}),
+        sourceUnitStateService,
         modelService,
         validationService,
         sourceLoaderRunner,
@@ -37,7 +90,24 @@ export function composeApp(options = {}) {
         skillRegistry: options.skillRegistry,
         skillRunner: options.skillRunner,
         runRepository: options.runRepository ?? noopRunRepository,
+        workspacesRoot: options.workspacesRoot ?? join(tmpdir(), 'braid-workspaces'),
+        // `composeApp` is the test / in-memory composition entry. It never
+        // wires sessionStore, so the auth middleware in `createApp` is
+        // skipped anyway — but explicit `localTrust: true` keeps the
+        // contract honest if a test does happen to pass sessionStore.
+        localTrust: true,
         clock,
     };
 }
+/**
+ * Default `SourceUnitDigest` for in-memory `composeApp()` callers. Any
+ * call throws — production must wire a real impl via `composeFsApp` or
+ * pass one explicitly; tests that don't exercise observations stay
+ * happy because the digest is never reached.
+ */
+class FailingSourceUnitDigest {
+    async computeSha() {
+        throw new Error('SourceUnitDigest is not wired. Pass `sourceUnitDigest` to composeApp() (composeFsApp does this automatically).');
+    }
+}
 //# sourceMappingURL=composition.js.map