refactor(app): share application components and request services

docs/APPLICATION.md

@@ -172,3 +172,27 @@ existing environment variables remain the default configuration. Model choices
 come from server configuration. Keep secret keys in the server adapter.
 Tool schemas, model defaults and cost estimates are unchanged. Unknown model
 IDs retain the existing conservative estimate until their rates are registered.
+
+### Composing the existing application components
+
+`application/scene`, `application/controls`, `application/data` and
+`application/tools` expose the existing globe, controls, catalog and tools as
+separate constructors. Pass these to `createApplication`; use its `signal` and
+`defer` for ownership. The compatibility catalog is still page-scoped: construct
+one application per page. Controls, actions and renderers use the same layer
+instances. Configure sources with `application/sources` before registration or
+state restoration, and release them after the consumers stop.
+
+`application/services` accepts boundary, terrain, regional-context, weather and
+summary services. `application/requests` supplies the existing HTTP protocols
+with configurable endpoints and a scoped transport. Changing an endpoint works
+only for a compatible protocol; another protocol supplies a service adapter.
+Cancellation discards late response bodies, and replacing a source invalidates
+its pending results. Source disposal does not silently reinstate a default.
+
+`ui/composition` supplies the default engines to the shell. Applications can
+supply a HUD implementation or request policy through control services. The
+shared chrome owns the welcome/loading transition; standalone composition adds
+Provider Settings. `build/html` expands an allowlist of component markers from
+`src/ui/templates`; unknown names cannot read arbitrary filesystem paths. The
+standalone document expands to the same markup as before this extraction.

docs/CODE-BOUNDARIES.md

@@ -385,3 +385,9 @@ also checks scene ownership after asynchronous work, so late results cannot
 replace a newer selection. Supplied tilesets are caller-owned; factory-created
 tilesets and provider caches are controller-owned. Construct a fresh controller
 for a new viewer or configuration lifetime.
+
+The application-components group assembles the existing page-scoped catalog and
+its engines. Its explicit module graph includes the smaller layer/UI groups;
+those independent groups retain their narrower gates. Source adapters and
+request services enter through construction, without replacing global fetch.
+The Node build group also owns the allowlisted static HTML template assembler.

docs/CURRENT-STATE.md

@@ -1,5 +1,7 @@
 # God's Eye View Current State
 
+Application composition now uses shared scene/control/catalog/tool constructors and allowlisted HTML component templates. The standalone entry supplies settings and the default sources. Terrain, boundaries, weather, regional context and summaries use configurable services; renderer/action owners remain page-scoped. Annotation proximity guards remain on by default and allow distant targets only for explicit navigation.
+
 Voice controls compose a supplied action runner and connection controller.
 Realtime token and SDP requests live in a configurable backend, with independent
 transports and cancellation through response parsing. Stop and application