@braidhq/server 0.1.0 → 0.2.1

package/dist/authMode.d.ts

@@ -0,0 +1,39 @@
+import type { UserId } from '@braidhq/schema';
+import type { AccessPolicy } from './infrastructure/auth/AccessPolicy.js';
+import type { UserRegistryFile } from './infrastructure/users/UserRegistryFile.js';
+export declare const LOCAL_USER_ID: string & import("zod").$brand<"UserId">;
+export interface AuthContext {
+    readonly userRegistry: UserRegistryFile;
+    readonly accessPolicy: AccessPolicy;
+}
+/**
+ * How a deployment resolves identity.
+ * The one axis that separates a trusted local install,
+ * from an authenticated remote server.
+ *
+ * Two separate axes, not one nullable field.
+ * `defaultPrincipal` is the identity axis, the implicit user for an
+ * unauthenticated request, and the owner a workspace falls back to,
+ * or null when there is no implicit user.
+ * `requiresAuth` is the policy axis, whether a caller must present a valid
+ * Bearer token. The middleware reads this, never the principal's null-ness.
+ *
+ * Stateless behaviour behind an interface, so a const object per mode,
+ * the idiomatic strategy form when there is no constructor dependency.
+ */
+export interface AuthMode {
+    readonly defaultPrincipal: UserId | null;
+    readonly requiresAuth: boolean;
+    provision: (context: AuthContext) => Promise<void>;
+}
+/**
+ * A local desktop or sidecar. One implicit user owns everything,
+ * so provision seeds that `local-user` admin account, idempotently.
+ */
+export declare const localTrust: AuthMode;
+/**
+ * A remote server. Real users authenticate against an allowlist,
+ * so provision back-fills `approvedEmails` from the roster, idempotently.
+ */
+export declare const authenticated: AuthMode;
+//# sourceMappingURL=authMode.d.ts.map

package/dist/authMode.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authMode.d.ts","sourceRoot":"","sources":["../src/authMode.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAa,MAAM,EAAE,MAAM,iBAAiB,CAAA;AACxD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAA;AACzE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,4CAA4C,CAAA;AAKlF,eAAO,MAAM,aAAa,yCAAmC,CAAA;AAE7D,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,YAAY,EAAE,gBAAgB,CAAA;IACvC,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAA;CACpC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAA;IACxC,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAA;IAE9B,SAAS,EAAE,CAAC,OAAO,EAAE,WAAW,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;CACnD;AAED;;;GAGG;AACH,eAAO,MAAM,UAAU,EAAE,QAaxB,CAAA;AAED;;;GAGG;AACH,eAAO,MAAM,aAAa,EAAE,QAS3B,CAAA"}

package/dist/authMode.js

@@ -0,0 +1,50 @@
+import { userInfo } from 'node:os';
+import process from 'node:process';
+import { UserId as UserIdSchema } from '@braidhq/schema';
+export const LOCAL_USER_ID = UserIdSchema.parse('local-user');
+/**
+ * A local desktop or sidecar. One implicit user owns everything,
+ * so provision seeds that `local-user` admin account, idempotently.
+ */
+export const localTrust = {
+    defaultPrincipal: LOCAL_USER_ID,
+    requiresAuth: false,
+    async provision({ userRegistry }) {
+        if (await userRegistry.get(LOCAL_USER_ID))
+            return;
+        await userRegistry.create({
+            id: LOCAL_USER_ID,
+            displayName: osUsername(),
+            serverRole: 'admin',
+            createdAt: new Date().toISOString(),
+        });
+    },
+};
+/**
+ * A remote server. Real users authenticate against an allowlist,
+ * so provision back-fills `approvedEmails` from the roster, idempotently.
+ */
+export const authenticated = {
+    defaultPrincipal: null,
+    requiresAuth: true,
+    async provision({ userRegistry, accessPolicy }) {
+        for (const user of await userRegistry.list()) {
+            if (user.email)
+                await accessPolicy.approveEmail(user.email);
+        }
+    },
+};
+// Default display name from the OS account.
+// Some sandboxed environments throw on userInfo(), so fall through.
+function osUsername() {
+    try {
+        const info = userInfo();
+        if (info.username && info.username.length > 0)
+            return info.username;
+    }
+    catch {
+        // The userInfo lookup can throw, fall through to the env vars below.
+    }
+    return process.env.USER ?? process.env.USERNAME ?? 'local';
+}
+//# sourceMappingURL=authMode.js.map

package/dist/authMode.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authMode.js","sourceRoot":"","sources":["../src/authMode.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AAClC,OAAO,OAAO,MAAM,cAAc,CAAA;AAClC,OAAO,EAAE,MAAM,IAAI,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAExD,MAAM,CAAC,MAAM,aAAa,GAAG,YAAY,CAAC,KAAK,CAAC,YAAY,CAAC,CAAA;AA6B7D;;;GAGG;AACH,MAAM,CAAC,MAAM,UAAU,GAAa;IAClC,gBAAgB,EAAE,aAAa;IAC/B,YAAY,EAAE,KAAK;IACnB,KAAK,CAAC,SAAS,CAAC,EAAE,YAAY,EAAE;QAC9B,IAAI,MAAM,YAAY,CAAC,GAAG,CAAC,aAAa,CAAC;YACvC,OAAM;QACR,MAAM,YAAY,CAAC,MAAM,CAAC;YACxB,EAAE,EAAE,aAAa;YACjB,WAAW,EAAE,UAAU,EAAE;YACzB,UAAU,EAAE,OAAO;YACnB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAe;SACjD,CAAC,CAAA;IACJ,CAAC;CACF,CAAA;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,aAAa,GAAa;IACrC,gBAAgB,EAAE,IAAI;IACtB,YAAY,EAAE,IAAI;IAClB,KAAK,CAAC,SAAS,CAAC,EAAE,YAAY,EAAE,YAAY,EAAE;QAC5C,KAAK,MAAM,IAAI,IAAI,MAAM,YAAY,CAAC,IAAI,EAAE,EAAE,CAAC;YAC7C,IAAI,IAAI,CAAC,KAAK;gBACZ,MAAM,YAAY,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC/C,CAAC;IACH,CAAC;CACF,CAAA;AAED,4CAA4C;AAC5C,oEAAoE;AACpE,SAAS,UAAU;IACjB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,QAAQ,EAAE,CAAA;QACvB,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;YAC3C,OAAO,IAAI,CAAC,QAAQ,CAAA;IACxB,CAAC;IACD,MAAM,CAAC;QACL,qEAAqE;IACvE,CAAC;IACD,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,OAAO,CAAA;AAC5D,CAAC"}

package/dist/composeApp.d.ts

@@ -0,0 +1,80 @@
+import type { BatchPlanRepository, ClarificationRepository, Clock, ModelRepository, ModelSerializer, ProposalRepository, ReactorCycleRepository, RunRepository, SkillRegistry, SkillRunner, SourceUnitDigest, SourceUnitObservationRepository, UnitLister, UserDirectory, WorkspaceBootstrapService, WorkspaceEventBus, WorkspaceHistory, WorkspaceRepository } from '@braidhq/core';
+import type { AbsolutePath } from '@braidhq/schema';
+import type { AuthMode } from './authMode.js';
+import type { AccessPolicy } from './infrastructure/auth/AccessPolicy.js';
+import type { SessionStore } from './infrastructure/auth/SessionStore.js';
+import type { GoogleOAuth } from './infrastructure/oauth/GoogleOAuth.js';
+import type { SecretStore } from './infrastructure/secrets/SecretStore.js';
+import type { UserRegistryFile } from './infrastructure/users/UserRegistryFile.js';
+import type { WorkspaceRegistryFile } from './infrastructure/workspace/WorkspaceRegistryFile.js';
+import { BatchService, HistoryService, HITLService, ModelService, ModelValidationService, PluginRegistry, ReactorService, SourceLoaderRunner, SourceUnitObservationService, WorkspaceService } from '@braidhq/core';
+/**
+ * The assembled application, what routes and middleware consume.
+ * A required field is always present.
+ * An optional field is a capability slot,
+ * absent under in-memory or test wiring, filled by `composeFsApp`.
+ */
+export interface AppDependencies {
+    workspaceService: WorkspaceService;
+    hitlService: HITLService;
+    modelService: ModelService;
+    modelValidationService: ModelValidationService;
+    sourceLoaderRunner: SourceLoaderRunner;
+    sourceUnitObservationService: SourceUnitObservationService;
+    historyService?: HistoryService;
+    batchService?: BatchService;
+    reactorService?: ReactorService;
+    modelRepository: ModelRepository;
+    workspaceRepository: WorkspaceRepository;
+    proposalRepository: ProposalRepository;
+    clarificationRepository: ClarificationRepository;
+    runRepository: RunRepository;
+    reactorCycleRepository: ReactorCycleRepository;
+    unitLister?: UnitLister;
+    sourceUnitDigest?: SourceUnitDigest;
+    skillRegistry: SkillRegistry | undefined;
+    skillRunner: SkillRunner | undefined;
+    eventBus: WorkspaceEventBus;
+    pluginRegistry: PluginRegistry;
+    clock: Clock;
+    workspacesRoot: AbsolutePath;
+    bootstrap?: WorkspaceBootstrapService;
+    authMode: AuthMode;
+    userRegistry?: UserRegistryFile;
+    workspaceRegistry?: WorkspaceRegistryFile;
+    sessionStore?: SessionStore;
+    accessPolicy?: AccessPolicy;
+    secretStore?: SecretStore;
+    googleOAuth?: GoogleOAuth;
+    studioUrl?: string;
+}
+/**
+ * Every field is optional, an unset one falls to an in-memory default.
+ * `composeFsApp` passes the fs, git, and vendor adapters through here.
+ */
+export interface ComposeOptions {
+    clock?: Clock;
+    eventBus?: WorkspaceEventBus;
+    pluginRegistry?: PluginRegistry;
+    modelRepository?: ModelRepository;
+    workspaceRepository?: WorkspaceRepository;
+    proposalRepository?: ProposalRepository;
+    clarificationRepository?: ClarificationRepository;
+    runRepository?: RunRepository;
+    reactorCycleRepository?: ReactorCycleRepository;
+    sourceUnitObservationRepository?: SourceUnitObservationRepository;
+    batchPlanRepository?: BatchPlanRepository;
+    unitLister?: UnitLister;
+    sourceUnitDigest?: SourceUnitDigest;
+    reactorToken?: () => Promise<string | undefined>;
+    skillRegistry?: SkillRegistry;
+    skillRunner?: SkillRunner;
+    history?: WorkspaceHistory;
+    modelSerializer?: ModelSerializer;
+    bootstrap?: WorkspaceBootstrapService;
+    userDirectory?: UserDirectory;
+    authMode?: AuthMode;
+    workspacesRoot?: AbsolutePath;
+}
+export declare function composeApp(options?: ComposeOptions): AppDependencies;
+//# sourceMappingURL=composeApp.d.ts.map

package/dist/composeApp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"composeApp.d.ts","sourceRoot":"","sources":["../src/composeApp.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,mBAAmB,EACnB,uBAAuB,EACvB,KAAK,EACL,eAAe,EACf,eAAe,EACf,kBAAkB,EAClB,sBAAsB,EACtB,aAAa,EACb,aAAa,EACb,WAAW,EACX,gBAAgB,EAChB,+BAA+B,EAC/B,UAAU,EACV,aAAa,EACb,yBAAyB,EACzB,iBAAiB,EACjB,gBAAgB,EAChB,mBAAmB,EACpB,MAAM,eAAe,CAAA;AACtB,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AACnD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AAC7C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAA;AACzE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAA;AACzE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uCAAuC,CAAA;AACxE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,yCAAyC,CAAA;AAC1E,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,4CAA4C,CAAA;AAClF,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,qDAAqD,CAAA;AAGhG,OAAO,EACL,YAAY,EAEZ,cAAc,EACd,WAAW,EACX,YAAY,EACZ,sBAAsB,EACtB,cAAc,EACd,cAAc,EACd,kBAAkB,EAClB,4BAA4B,EAI5B,gBAAgB,EACjB,MAAM,eAAe,CAAA;AAatB;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAE9B,gBAAgB,EAAE,gBAAgB,CAAA;IAClC,WAAW,EAAE,WAAW,CAAA;IACxB,YAAY,EAAE,YAAY,CAAA;IAC1B,sBAAsB,EAAE,sBAAsB,CAAA;IAC9C,kBAAkB,EAAE,kBAAkB,CAAA;IACtC,4BAA4B,EAAE,4BAA4B,CAAA;IAG1D,cAAc,CAAC,EAAE,cAAc,CAAA;IAC/B,YAAY,CAAC,EAAE,YAAY,CAAA;IAE3B,cAAc,CAAC,EAAE,cAAc,CAAA;IAG/B,eAAe,EAAE,eAAe,CAAA;IAChC,mBAAmB,EAAE,mBAAmB,CAAA;IACxC,kBAAkB,EAAE,kBAAkB,CAAA;IACtC,uBAAuB,EAAE,uBAAuB,CAAA;IAChD,aAAa,EAAE,aAAa,CAAA;IAE5B,sBAAsB,EAAE,sBAAsB,CAAA;IAI9C,UAAU,CAAC,EAAE,UAAU,CAAA;IACvB,gBAAgB,CAAC,EAAE,gBAAgB,CAAA;IAGnC,aAAa,EAAE,aAAa,GAAG,SAAS,CAAA;IACxC,WAAW,EAAE,WAAW,GAAG,SAAS,CAAA;IAGpC,QAAQ,EAAE,iBAAiB,CAAA;IAC3B,cAAc,EAAE,cAAc,CAAA;IAC9B,KAAK,EAAE,KAAK,CAAA;IAIZ,cAAc,EAAE,YAAY,CAAA;IAC5B,SAAS,CAAC,EAAE,yBAAyB,CAAA;IAMrC,QAAQ,EAAE,QAAQ,CAAA;IAKlB,YAAY,CAAC,EAAE,gBAAgB,CAAA;IAC/B,iBAAiB,CAAC,EAAE,qBAAqB,CAAA;IACzC,YAAY,CAAC,EAAE,YAAY,CAAA;IAC3B,YAAY,CAAC,EAAE,YAAY,CAAA;IAE3B,WAAW,CAAC,EAAE,WAAW,CAAA;IAGzB,WAAW,CAAC,EAAE,WAAW,CAAA;IAGzB,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED;;;GAGG;AACH,MAAM,WAAW,cAAc;IAE7B,KAAK,CAAC,EAAE,KAAK,CAAA;IAGb,QAAQ,CAAC,EAAE,iBAAiB,CAAA;IAC5B,cAAc,CAAC,EAAE,cAAc,CAAA;IAG/B,eAAe,CAAC,EAAE,eAAe,CAAA;IACjC,mBAAmB,CAAC,EAAE,mBAAmB,CAAA;IACzC,kBAAkB,CAAC,EAAE,kBAAkB,CAAA;IACvC,uBAAuB,CAAC,EAAE,uBAAuB,CAAA;IACjD,aAAa,CAAC,EAAE,aAAa,CAAA;IAE7B,sBAAsB,CAAC,EAAE,sBAAsB,CAAA;IAC/C,+BAA+B,CAAC,EAAE,+BAA+B,CAAA;IACjE,mBAAmB,CAAC,EAAE,mBAAmB,CAAA;IAKzC,UAAU,CAAC,EAAE,UAAU,CAAA;IACvB,gBAAgB,CAAC,EAAE,gBAAgB,CAAA;IAGnC,YAAY,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAA;IAGhD,aAAa,CAAC,EAAE,aAAa,CAAA;IAC7B,WAAW,CAAC,EAAE,WAAW,CAAA;IAIzB,OAAO,CAAC,EAAE,gBAAgB,CAAA;IAC1B,eAAe,CAAC,EAAE,eAAe,CAAA;IACjC,SAAS,CAAC,EAAE,yBAAyB,CAAA;IAErC,aAAa,CAAC,EAAE,aAAa,CAAA;IAG7B,QAAQ,CAAC,EAAE,QAAQ,CAAA;IAEnB,cAAc,CAAC,EAAE,YAAY,CAAA;CAC9B;AAED,wBAAgB,UAAU,CAAC,OAAO,GAAE,cAAmB,GAAG,eAAe,CAgIxE"}

package/dist/composeApp.js

@@ -0,0 +1,137 @@
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { BatchService, createLogger, HistoryService, HITLService, ModelService, ModelValidationService, PluginRegistry, ReactorService, SourceLoaderRunner, SourceUnitObservationService, SystemClock, SystemScheduler, WorkspaceLock, WorkspaceService, } from '@braidhq/core';
+import { InMemoryClarificationRepository, InMemoryModelRepository, InMemoryProposalRepository, InMemoryReactorCycleRepository, InMemorySourceUnitObservationRepository, InMemoryWorkspaceEventBus, InMemoryWorkspaceRepository, NoopRunRepository, } from '@braidhq/core/in-memory';
+import { localTrust } from './authMode.js';
+export function composeApp(options = {}) {
+    const clock = options.clock ?? new SystemClock();
+    const proposalRepository = options.proposalRepository ?? new InMemoryProposalRepository();
+    const clarificationRepository = options.clarificationRepository ?? new InMemoryClarificationRepository();
+    const modelRepository = options.modelRepository ?? new InMemoryModelRepository();
+    const workspaceRepository = options.workspaceRepository ?? new InMemoryWorkspaceRepository();
+    const pluginRegistry = options.pluginRegistry ?? new PluginRegistry();
+    const eventBus = options.eventBus ?? new InMemoryWorkspaceEventBus();
+    const workspaceService = new WorkspaceService({ workspaceRepository, pluginRegistry });
+    const modelService = new ModelService({ modelRepository });
+    const modelValidationService = new ModelValidationService({ pluginRegistry });
+    const sourceLoaderRunner = new SourceLoaderRunner({ pluginRegistry, clock, eventBus });
+    // Shared lock domain so HITL mutations and history restore exclude each other.
+    const workspaceLock = new WorkspaceLock();
+    const hitlService = new HITLService({
+        proposalRepository,
+        clarificationRepository,
+        modelRepository,
+        modelValidationService,
+        workspaceService,
+        clock,
+        eventBus,
+        workspaceLock,
+        ...(options.history ? { history: options.history } : {}),
+        ...(options.modelSerializer ? { modelSerializer: options.modelSerializer } : {}),
+        ...(options.userDirectory ? { userDirectory: options.userDirectory } : {}),
+    });
+    const historyService = options.history && options.bootstrap
+        ? new HistoryService({
+            history: options.history,
+            workspaceService,
+            workspaceLock,
+            bootstrap: options.bootstrap,
+            runRepository: options.runRepository ?? new NoopRunRepository(),
+            ...(options.skillRunner ? { skillRunner: options.skillRunner } : {}),
+            ...(options.userDirectory ? { userDirectory: options.userDirectory } : {}),
+            eventBus,
+            clock,
+        })
+        : undefined;
+    const sourceUnitObservationRepository = options.sourceUnitObservationRepository ?? new InMemorySourceUnitObservationRepository();
+    const sourceUnitDigest = options.sourceUnitDigest ?? new FailingSourceUnitDigest();
+    const sourceUnitObservationService = new SourceUnitObservationService({
+        repository: sourceUnitObservationRepository,
+        digest: sourceUnitDigest,
+        workspaceService,
+        clock,
+    });
+    // Batch needs SkillRunner, HistoryService, BatchPlanRepository, and a lister.
+    // Without them there is no batch surface.
+    const batchService = historyService && options.skillRunner && options.batchPlanRepository && options.unitLister
+        ? new BatchService({
+            workspaceService,
+            skillRunner: options.skillRunner,
+            proposalRepository,
+            clarificationRepository,
+            historyService,
+            hitlService,
+            batchPlanRepository: options.batchPlanRepository,
+            unitLister: options.unitLister,
+            pluginRegistry,
+            eventBus,
+            workspaceLock,
+            clock,
+            sourceUnitObservationService,
+        })
+        : undefined;
+    // Reactor shares Batch's dependency footprint of skillRunner, unitLister,
+    // and sourceUnitObservationService, plus the event bus.
+    // We construct it whenever those are present.
+    // The service stays inert until something calls `start(workspaceId)`.
+    // `composeFsApp` drives start on workspaces,
+    // whose ProductManifest.reactor.enabled is true.
+    const reactorCycleRepository = options.reactorCycleRepository ?? new InMemoryReactorCycleRepository();
+    const reactorService = options.skillRunner && options.unitLister && sourceUnitDigest && !(sourceUnitDigest instanceof FailingSourceUnitDigest)
+        ? new ReactorService({
+            eventBus,
+            workspaceService,
+            pluginRegistry,
+            skillRunner: options.skillRunner,
+            sourceUnitObservationService,
+            unitLister: options.unitLister,
+            ...(options.reactorToken ? { reactorToken: options.reactorToken } : {}),
+            digest: sourceUnitDigest,
+            reactorCycleRepository,
+            workspaceLock,
+            clock,
+            logger: createLogger('reactor'),
+            scheduler: new SystemScheduler(),
+        })
+        : undefined;
+    return {
+        workspaceService,
+        hitlService,
+        ...(historyService ? { historyService } : {}),
+        ...(batchService ? { batchService } : {}),
+        ...(reactorService ? { reactorService } : {}),
+        reactorCycleRepository,
+        ...(options.unitLister ? { unitLister: options.unitLister } : {}),
+        ...(options.sourceUnitDigest ? { sourceUnitDigest: options.sourceUnitDigest } : {}),
+        ...(options.bootstrap ? { bootstrap: options.bootstrap } : {}),
+        sourceUnitObservationService,
+        modelService,
+        modelValidationService,
+        sourceLoaderRunner,
+        eventBus,
+        pluginRegistry,
+        proposalRepository,
+        clarificationRepository,
+        modelRepository,
+        workspaceRepository,
+        skillRegistry: options.skillRegistry,
+        skillRunner: options.skillRunner,
+        runRepository: options.runRepository ?? new NoopRunRepository(),
+        workspacesRoot: options.workspacesRoot ?? join(tmpdir(), 'braid-workspaces'),
+        // `composeApp` is the test and in-memory composition entry.
+        // It defaults to local trust, the local-user fallback,
+        // so a test that wires a sessionStore still resolves a caller.
+        authMode: options.authMode ?? localTrust,
+        clock,
+    };
+}
+// Default `SourceUnitDigest` for in-memory `composeApp()` callers. Any call throws.
+// Production must wire a real impl via `composeFsApp` or pass one explicitly.
+// Tests that don't exercise observations stay happy,
+// because the digest is never reached.
+class FailingSourceUnitDigest {
+    async computeSha() {
+        throw new Error('SourceUnitDigest is not wired. Pass `sourceUnitDigest` to composeApp() (composeFsApp does this automatically).');
+    }
+}
+//# sourceMappingURL=composeApp.js.map

package/dist/composeApp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"composeApp.js","sourceRoot":"","sources":["../src/composeApp.ts"],"names":[],"mappings":"AA4BA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAChC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,cAAc,EACd,WAAW,EACX,YAAY,EACZ,sBAAsB,EACtB,cAAc,EACd,cAAc,EACd,kBAAkB,EAClB,4BAA4B,EAC5B,WAAW,EACX,eAAe,EACf,aAAa,EACb,gBAAgB,GACjB,MAAM,eAAe,CAAA;AACtB,OAAO,EACL,+BAA+B,EAC/B,uBAAuB,EACvB,0BAA0B,EAC1B,8BAA8B,EAC9B,uCAAuC,EACvC,yBAAyB,EACzB,2BAA2B,EAC3B,iBAAiB,GAClB,MAAM,yBAAyB,CAAA;AAChC,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAA;AA4H1C,MAAM,UAAU,UAAU,CAAC,UAA0B,EAAE;IACrD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,IAAI,WAAW,EAAE,CAAA;IAChD,MAAM,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,IAAI,IAAI,0BAA0B,EAAE,CAAA;IACzF,MAAM,uBAAuB,GAAG,OAAO,CAAC,uBAAuB,IAAI,IAAI,+BAA+B,EAAE,CAAA;IACxG,MAAM,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,IAAI,uBAAuB,EAAE,CAAA;IAChF,MAAM,mBAAmB,GAAG,OAAO,CAAC,mBAAmB,IAAI,IAAI,2BAA2B,EAAE,CAAA;IAC5F,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,IAAI,cAAc,EAAE,CAAA;IAErE,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,IAAI,yBAAyB,EAAE,CAAA;IACpE,MAAM,gBAAgB,GAAG,IAAI,gBAAgB,CAAC,EAAE,mBAAmB,EAAE,cAAc,EAAE,CAAC,CAAA;IACtF,MAAM,YAAY,GAAG,IAAI,YAAY,CAAC,EAAE,eAAe,EAAE,CAAC,CAAA;IAC1D,MAAM,sBAAsB,GAAG,IAAI,sBAAsB,CAAC,EAAE,cAAc,EAAE,CAAC,CAAA;IAC7E,MAAM,kBAAkB,GAAG,IAAI,kBAAkB,CAAC,EAAE,cAAc,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAA;IACtF,+EAA+E;IAC/E,MAAM,aAAa,GAAG,IAAI,aAAa,EAAE,CAAA;IACzC,MAAM,WAAW,GAAG,IAAI,WAAW,CAAC;QAClC,kBAAkB;QAClB,uBAAuB;QACvB,eAAe;QACf,sBAAsB;QACtB,gBAAgB;QAChB,KAAK;QACL,QAAQ;QACR,aAAa;QACb,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChF,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC3E,CAAC,CAAA;IAEF,MAAM,cAAc,GAAG,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,SAAS;QACzD,CAAC,CAAC,IAAI,cAAc,CAAC;YACnB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,gBAAgB;YAChB,aAAa;YACb,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,aAAa,EAAE,OAAO,CAAC,aAAa,IAAI,IAAI,iBAAiB,EAAE;YAC/D,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpE,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1E,QAAQ;YACR,KAAK;SACN,CAAC;QACF,CAAC,CAAC,SAAS,CAAA;IAEb,MAAM,+BAA+B,GAAG,OAAO,CAAC,+BAA+B,IAAI,IAAI,uCAAuC,EAAE,CAAA;IAChI,MAAM,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,IAAI,IAAI,uBAAuB,EAAE,CAAA;IAClF,MAAM,4BAA4B,GAAG,IAAI,4BAA4B,CAAC;QACpE,UAAU,EAAE,+BAA+B;QAC3C,MAAM,EAAE,gBAAgB;QACxB,gBAAgB;QAChB,KAAK;KACN,CAAC,CAAA;IAEF,8EAA8E;IAC9E,0CAA0C;IAC1C,MAAM,YAAY,GAAG,cAAc,IAAI,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,mBAAmB,IAAI,OAAO,CAAC,UAAU;QAC7G,CAAC,CAAC,IAAI,YAAY,CAAC;YACjB,gBAAgB;YAChB,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,kBAAkB;YAClB,uBAAuB;YACvB,cAAc;YACd,WAAW;YACX,mBAAmB,EAAE,OAAO,CAAC,mBAAmB;YAChD,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,cAAc;YACd,QAAQ;YACR,aAAa;YACb,KAAK;YACL,4BAA4B;SAC7B,CAAC;QACF,CAAC,CAAC,SAAS,CAAA;IAEb,0EAA0E;IAC1E,wDAAwD;IACxD,8CAA8C;IAC9C,sEAAsE;IACtE,6CAA6C;IAC7C,iDAAiD;IACjD,MAAM,sBAAsB,GACxB,OAAO,CAAC,sBAAsB,IAAI,IAAI,8BAA8B,EAAE,CAAA;IAC1E,MAAM,cAAc,GAAG,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,UAAU,IAAI,gBAAgB,IAAI,CAAC,CAAC,gBAAgB,YAAY,uBAAuB,CAAC;QAC5I,CAAC,CAAC,IAAI,cAAc,CAAC;YACnB,QAAQ;YACR,gBAAgB;YAChB,cAAc;YACd,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,4BAA4B;YAC5B,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvE,MAAM,EAAE,gBAAgB;YACxB,sBAAsB;YACtB,aAAa;YACb,KAAK;YACL,MAAM,EAAE,YAAY,CAAC,SAAS,CAAC;YAC/B,SAAS,EAAE,IAAI,eAAe,EAAE;SACjC,CAAC;QACF,CAAC,CAAC,SAAS,CAAA;IAEb,OAAO;QACL,gBAAgB;QAChB,WAAW;QACX,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7C,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7C,sBAAsB;QACtB,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnF,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,4BAA4B;QAC5B,YAAY;QACZ,sBAAsB;QACtB,kBAAkB;QAClB,QAAQ;QACR,cAAc;QACd,kBAAkB;QAClB,uBAAuB;QACvB,eAAe;QACf,mBAAmB;QACnB,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,aAAa,EAAE,OAAO,CAAC,aAAa,IAAI,IAAI,iBAAiB,EAAE;QAC/D,cAAc,EAAE,OAAO,CAAC,cAAc,IAAK,IAAI,CAAC,MAAM,EAAE,EAAE,kBAAkB,CAAkB;QAC9F,4DAA4D;QAC5D,uDAAuD;QACvD,+DAA+D;QAC/D,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,UAAU;QACxC,KAAK;KACN,CAAA;AACH,CAAC;AAED,oFAAoF;AACpF,8EAA8E;AAC9E,qDAAqD;AACrD,uCAAuC;AACvC,MAAM,uBAAuB;IAC3B,KAAK,CAAC,UAAU;QACd,MAAM,IAAI,KAAK,CACb,gHAAgH,CACjH,CAAA;IACH,CAAC;CACF"}

package/dist/composeFsApp.d.ts

@@ -0,0 +1,27 @@
+import type { AgentPlugin, OntologyPlugin, SourceLoaderPlugin, StoragePlugin } from '@braidhq/core';
+import type { AgentEffort, StorageKind } from '@braidhq/schema';
+import type { AppDependencies } from './composeApp.js';
+import { AgentKind } from '@braidhq/schema';
+export interface ComposeFsOptions {
+    readonly braidHome?: string;
+    readonly apiUrl?: string;
+    readonly storageKind?: StorageKind;
+    readonly agentKind?: AgentKind;
+    readonly agentModel?: string;
+    readonly agentEffort?: AgentEffort;
+    readonly extraStoragePlugins?: readonly StoragePlugin[];
+    readonly extraOntologyPlugins?: readonly OntologyPlugin[];
+    readonly extraSourceLoaderPlugins?: readonly SourceLoaderPlugin[];
+    readonly extraAgentPlugins?: readonly AgentPlugin[];
+}
+/**
+ * Opinionated production composition, the coding preset.
+ * Filesystem-persists workspaces, proposals, and clarifications,
+ * and bundles Kuzu storage, the DDD ontology, the git, github, and drive
+ * loaders, and the claude-code agent.
+ *
+ * To run a different plugin set, either pass `extraXxxPlugins` and flip
+ * `storageKind` or `agentKind`, or call `composeApp` with your own registry.
+ */
+export declare function composeFsApp(options?: ComposeFsOptions): Promise<AppDependencies>;
+//# sourceMappingURL=composeFsApp.d.ts.map

package/dist/composeFsApp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"composeFsApp.d.ts","sourceRoot":"","sources":["../src/composeFsApp.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,cAAc,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AACnG,OAAO,KAAK,EAAwC,WAAW,EAAE,WAAW,EAAe,MAAM,iBAAiB,CAAA;AAClH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAA;AAgBtD,OAAO,EAAW,SAAS,EAAoC,MAAM,iBAAiB,CAAA;AAyCtF,MAAM,WAAW,gBAAgB;IAI/B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IAIxB,QAAQ,CAAC,WAAW,CAAC,EAAE,WAAW,CAAA;IAClC,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,CAAA;IAC9B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,WAAW,CAAC,EAAE,WAAW,CAAA;IAKlC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,SAAS,aAAa,EAAE,CAAA;IACvD,QAAQ,CAAC,oBAAoB,CAAC,EAAE,SAAS,cAAc,EAAE,CAAA;IACzD,QAAQ,CAAC,wBAAwB,CAAC,EAAE,SAAS,kBAAkB,EAAE,CAAA;IACjE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,WAAW,EAAE,CAAA;CACpD;AAED;;;;;;;;GAQG;AACH,wBAAsB,YAAY,CAAC,OAAO,GAAE,gBAAqB,GAAG,OAAO,CAAC,eAAe,CAAC,CAqR3F"}