Implement workspace evolution, migrations, and runtime continuity

Enable evolution by default for source-backed workspaces. Add stable
conformance ownership, semantic-major review, candidate typechecking,
and durable fenced cutover with explicit migrations and forward recovery.

Independently supervise package runtimes so unchanged resource owners keep
their processes and connections across cutover. Add scoped invocation
authority, resource sessions, and typed callback rebinding.

Wire opaque object references through generated bindings and RPCs. Add
canonical relationship sets, keyed maps, and ordered lists with scoped
transactional mutations, revision checks, and inverse consistency. Support
planned cascade deletion, protection, tombstones, and lifecycle foundations.

Add journaled structural edits, package/function/migration scaffolding,
managed repository creation, and resumable bottom-up dependency pin
publication. Document lifetime boundaries, revision pinning, prototype
compatibility policy, commands, and deferred work.

Validate with 210 tests, user-systemd process/connection continuity,
generated-package TypeScript checks, and Nix host/protocol checks.
TTL handoff, physical reclamation, general multi-step migrations, and
root-systemd migration isolation acceptance remain deferred.

dist/camino/api_pb.d.ts

@@ -542,6 +542,78 @@ export type DisconnectEdgeResponse = Message<"camino.DisconnectEdgeResponse"> &
  * Use `create(DisconnectEdgeResponseSchema)` to create a new message.
  */
 export declare const DisconnectEdgeResponseSchema: GenMessage<DisconnectEdgeResponse>;
+/**
+ * @generated from message camino.CollectionEntry
+ */
+export type CollectionEntry = Message<"camino.CollectionEntry"> & {
+    /**
+     * Existing entry identity to preserve; empty allocates a new canonical edge.
+     *
+     * @generated from field: string edge_id = 1;
+     */
+    edgeId: string;
+    /**
+     * @generated from field: string target_object_id = 2;
+     */
+    targetObjectId: string;
+    /**
+     * @generated from field: camino.Value key = 3;
+     */
+    key?: Value | undefined;
+};
+/**
+ * Describes the message camino.CollectionEntry.
+ * Use `create(CollectionEntrySchema)` to create a new message.
+ */
+export declare const CollectionEntrySchema: GenMessage<CollectionEntry>;
+/**
+ * @generated from message camino.ReadCollectionResponse
+ */
+export type ReadCollectionResponse = Message<"camino.ReadCollectionResponse"> & {
+    /**
+     * @generated from field: uint64 revision = 1;
+     */
+    revision: bigint;
+    /**
+     * @generated from field: repeated camino.CollectionEntry entries = 2;
+     */
+    entries: CollectionEntry[];
+};
+/**
+ * Describes the message camino.ReadCollectionResponse.
+ * Use `create(ReadCollectionResponseSchema)` to create a new message.
+ */
+export declare const ReadCollectionResponseSchema: GenMessage<ReadCollectionResponse>;
+/**
+ * @generated from message camino.ReplaceCollectionRequest
+ */
+export type ReplaceCollectionRequest = Message<"camino.ReplaceCollectionRequest"> & {
+    /**
+     * @generated from field: string object_id = 1;
+     */
+    objectId: string;
+    /**
+     * @generated from field: string edge_type_id = 2;
+     */
+    edgeTypeId: string;
+    /**
+     * @generated from field: string projection_id = 3;
+     */
+    projectionId: string;
+    /**
+     * @generated from field: uint64 expected_revision = 4;
+     */
+    expectedRevision: bigint;
+    /**
+     * @generated from field: repeated camino.CollectionEntry entries = 5;
+     */
+    entries: CollectionEntry[];
+};
+/**
+ * Describes the message camino.ReplaceCollectionRequest.
+ * Use `create(ReplaceCollectionRequestSchema)` to create a new message.
+ */
+export declare const ReplaceCollectionRequestSchema: GenMessage<ReplaceCollectionRequest>;
 /**
  * @generated from message camino.ListOpsRequest
  */
@@ -586,6 +658,12 @@ export type WatchObjectRequest = Message<"camino.WatchObjectRequest"> & {
      * @generated from field: bool include_snapshot = 3;
      */
     includeSnapshot: boolean;
+    /**
+     * Managed runtimes must watch only their injected attachments.
+     *
+     * @generated from field: repeated string attachment_ids = 4;
+     */
+    attachmentIds: string[];
 };
 /**
  * Describes the message camino.WatchObjectRequest.
@@ -696,6 +774,14 @@ export type CaminoEdge = Message<"camino.CaminoEdge"> & {
      * @generated from field: string created_at = 9;
      */
     createdAt: string;
+    /**
+     * @generated from field: string first_key_json = 10;
+     */
+    firstKeyJson: string;
+    /**
+     * @generated from field: string second_key_json = 11;
+     */
+    secondKeyJson: string;
 };
 /**
  * Describes the message camino.CaminoEdge.
@@ -824,6 +910,22 @@ export declare const CaminoService: GenService<{
         input: typeof DisconnectEdgeRequestSchema;
         output: typeof DisconnectEdgeResponseSchema;
     };
+    /**
+     * @generated from rpc camino.CaminoService.ReadCollection
+     */
+    readCollection: {
+        methodKind: "unary";
+        input: typeof ResolveEdgeRequestSchema;
+        output: typeof ReadCollectionResponseSchema;
+    };
+    /**
+     * @generated from rpc camino.CaminoService.ReplaceCollection
+     */
+    replaceCollection: {
+        methodKind: "unary";
+        input: typeof ReplaceCollectionRequestSchema;
+        output: typeof ReadCollectionResponseSchema;
+    };
     /**
      * @generated from rpc camino.CaminoService.ListOps
      */