Publish camino-package-runtime from 61cb9aa5a580c2846d426464228c7d1082b7021a

Enable evolution by default for source-backed workspaces. Add stable
conformance ownership, semantic-major review, candidate typechecking,
and durable fenced cutover with explicit migrations and forward recovery.

Independently supervise package runtimes so unchanged resource owners keep
their processes and connections across cutover. Add scoped invocation
authority, resource sessions, and typed callback rebinding.

Wire opaque object references through generated bindings and RPCs. Add
canonical relationship sets, keyed maps, and ordered lists with scoped
transactional mutations, revision checks, and inverse consistency. Support
planned cascade deletion, protection, tombstones, and lifecycle foundations.

Add journaled structural edits, package/function/migration scaffolding,
managed repository creation, and resumable bottom-up dependency pin
publication. Document lifetime boundaries, revision pinning, prototype
compatibility policy, commands, and deferred work.

Validate with 210 tests, user-systemd process/connection continuity,
generated-package TypeScript checks, and Nix host/protocol checks.
TTL handoff, physical reclamation, general multi-step migrations, and
root-systemd migration isolation acceptance remain deferred.

.gitignore

@@ -0,0 +1 @@
+.yarn/install-state.gz

.quixos-subtree-source.json

@@ -1,7 +1,7 @@
 {
   "version": 1,
-  "sourceRepo": "https://gitea-external.egads.tutti.syntaxblitz.net/quixos/quixos.git",
-  "sourceCommit": "d3e9e4b0f6d083d578dc7ce36e0f169023603116",
+  "sourceRepo": "https://gitea-external.egads.tutti.syntaxblitz.net/quixos/quixos",
+  "sourceCommit": "61cb9aa5a580c2846d426464228c7d1082b7021a",
   "sourcePath": "quixos-instance/packages/camino-package-runtime",
   "exportName": "camino-package-runtime",
   "mirrorRemote": "https://gitea-external.egads.tutti.syntaxblitz.net/quixos/camino-package-runtime.git"

.yarnrc.yml

@@ -1,5 +1,5 @@
 approvedGitRepositories:
-  - https://gitea-external.egads.tutti.syntaxblitz.net/quixos/*
+  - "https://gitea-external.egads.tutti.syntaxblitz.net/quixos/*"
 
 enableScripts: true
 
@@ -9,6 +9,20 @@ individualNixPackaging: true
 
 nodeLinker: node-modules
 
+supportedArchitectures:
+  os:
+    - current
+    - linux
+  cpu:
+    - current
+    - x64
+    - arm64
+  libc:
+    - current
+    - glibc
+
+npmMinimalAgeGate: 0
+
 plugins:
   - checksum: 271de9a785321a37c564b8e2a6b5cd689850b20572d5fee8ec0a6b8e7a5d4cfb59e533524af2b4a537e00da12828abd062eaec6978556e3dd9149a020db2591b
     path: .yarn/plugins/yarn-plugin-nixify.cjs

dist/bindings.d.ts

@@ -0,0 +1,82 @@
+import { type Value } from "./camino/api_pb.js";
+import { type RuntimeHandler, type DerivedHandler } from "./index.js";
+export type { QxObjectRef } from "./references.js";
+declare const watchBrand: unique symbol;
+export type QxWatchHandle = string & {
+    readonly [watchBrand]: true;
+};
+export type MessageBinding<T> = {
+    encode(value: T): Value;
+    decode(value: Value): T;
+};
+export type BindingValue<B> = B extends MessageBinding<infer T> ? T : never;
+export type QxHandler<C, O> = (context: C) => O | Promise<O>;
+export type QxDerived<C, O> = {
+    kind: "derived";
+    get: QxHandler<C, O>;
+};
+export type QxSession<C> = {
+    id: string;
+    run<T>(work: (context: C) => Promise<T>): Promise<T>;
+    close(): Promise<void>;
+};
+export type QxContextLifecycle<C> = {
+    signal?: AbortSignal;
+    openSession?: () => Promise<QxSession<C>>;
+};
+export declare const qxDerived: <C, O>(get: QxHandler<C, O>) => QxDerived<C, O>;
+/** Versioned binding ABI. This mirrors the language-neutral value IR. */
+export type QxValueType = {
+    kind: "builtin";
+    name: "unit" | "watch-handle";
+} | {
+    kind: "scalar";
+    name: string;
+} | {
+    kind: "message";
+    descriptorId: string;
+} | {
+    kind: "record";
+    fields: Record<string, QxValueType>;
+} | {
+    kind: "object-ref";
+    expectation: unknown;
+} | {
+    kind: "optional" | "list";
+    value: QxValueType;
+};
+export type QxOperationSpec = {
+    id: string;
+    inputType: QxValueType;
+    outputType: QxValueType;
+};
+export type QxPortSpec = {
+    kind: "state";
+    id: string;
+    valueType: QxValueType;
+    primitives: string[];
+} | {
+    kind: "edge";
+    id: string;
+    primitives: string[];
+} | {
+    kind: "interface";
+    id: string;
+    operations: Record<string, QxOperationSpec>;
+} | {
+    kind: "constructor";
+    id: string;
+    inputType: QxValueType;
+};
+export type QxHandlerSpec = {
+    inputType: QxValueType;
+    outputType: QxValueType;
+    eventType?: QxValueType;
+    ports: Record<string, QxPortSpec>;
+};
+export type QxMessages = Record<string, MessageBinding<any>>;
+export declare const decodeQxValue: (type: QxValueType, value: Value | undefined, messages: QxMessages) => any;
+export declare const encodeQxValue: (type: QxValueType, value: any, messages: QxMessages) => Value;
+/** The sole unchecked cast connects generated contracts to the dynamic RPC runtime. */
+export declare const bindQxHandler: <C, O>(spec: QxHandlerSpec, handler: QxHandler<C, O> | QxDerived<C, O>, messages: QxMessages) => RuntimeHandler | DerivedHandler;
+//# sourceMappingURL=bindings.d.ts.map

dist/bindings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bindings.d.ts","sourceRoot":"","sources":["../src/bindings.ts"],"names":[],"mappings":"AACA,OAAO,EAAkC,KAAK,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAChF,OAAO,EACgB,KAAK,cAAc,EAAE,KAAK,cAAc,EAAE,MAAM,YAAY,CAAC;AAEpF,YAAY,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAEnD,OAAO,CAAC,MAAM,UAAU,EAAE,OAAO,MAAM,CAAC;AACxC,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG;IAAE,QAAQ,CAAC,CAAC,UAAU,CAAC,EAAE,IAAI,CAAA;CAAE,CAAC;AACrE,MAAM,MAAM,cAAc,CAAC,CAAC,IAAI;IAAE,MAAM,CAAC,KAAK,EAAE,CAAC,GAAG,KAAK,CAAC;IAAC,MAAM,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,CAAA;CAAE,CAAC;AACrF,MAAM,MAAM,YAAY,CAAC,CAAC,IAAI,CAAC,SAAS,cAAc,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;AAC5E,MAAM,MAAM,SAAS,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;AAC7D,MAAM,MAAM,SAAS,CAAC,CAAC,EAAE,CAAC,IAAI;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,GAAG,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;CAAE,CAAC;AACxE,MAAM,MAAM,SAAS,CAAC,CAAC,IAAI;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAAC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CAAC,CAAC;AACtH,MAAM,MAAM,kBAAkB,CAAC,CAAC,IAAI;IAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAA;CAAC,CAAC;AACtG,eAAO,MAAM,SAAS,GAAI,CAAC,EAAE,CAAC,OAAO,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,KAAG,SAAS,CAAC,CAAC,EAAE,CAAC,CAA+B,CAAC;AAErG,yEAAyE;AACzE,MAAM,MAAM,WAAW,GACnB;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,IAAI,EAAE,MAAM,GAAG,cAAc,CAAA;CAAE,GAClD;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAChC;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GACzC;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;CAAE,GACvD;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,WAAW,EAAE,OAAO,CAAA;CAAE,GAC5C;IAAE,IAAI,EAAE,UAAU,GAAG,MAAM,CAAC;IAAC,KAAK,EAAE,WAAW,CAAA;CAAE,CAAC;AACtD,MAAM,MAAM,eAAe,GAAG;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,WAAW,CAAC;IAAC,UAAU,EAAE,WAAW,CAAA;CAAE,CAAC;AAC9F,MAAM,MAAM,UAAU,GAClB;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,WAAW,CAAC;IAAC,UAAU,EAAE,MAAM,EAAE,CAAA;CAAE,GAC3E;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,EAAE,CAAA;CAAE,GAClD;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAA;CAAE,GAC9E;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,WAAW,CAAA;CAAE,CAAC;AAChE,MAAM,MAAM,aAAa,GAAG;IAC1B,SAAS,EAAE,WAAW,CAAC;IAAC,UAAU,EAAE,WAAW,CAAC;IAAC,SAAS,CAAC,EAAE,WAAW,CAAC;IACzE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;CACnC,CAAC;AACF,MAAM,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC;AAG7D,eAAO,MAAM,aAAa,SAAU,WAAW,SAAS,KAAK,GAAG,SAAS,YAAY,UAAU,KAAG,GAqCjG,CAAC;AAOF,eAAO,MAAM,aAAa,SAAU,WAAW,SAAS,GAAG,YAAY,UAAU,KAAG,KAqBnF,CAAC;AAiBF,uFAAuF;AACvF,eAAO,MAAM,aAAa,GAAI,CAAC,EAAE,CAAC,QAC1B,aAAa,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,YAAY,UAAU,KACpF,cAAc,GAAG,cAyCnB,CAAC"}

dist/bindings.js

@@ -0,0 +1,151 @@
+import { create } from "@bufbuild/protobuf";
+import { ValueSchema, ObjectValueSchema } from "./camino/api_pb.js";
+import { derived, jsToProtoValue, liveValue, protoValueToJs } from "./index.js";
+import { assertReferenceFree, referenceToWire } from "./references.js";
+export const qxDerived = (get) => ({ kind: "derived", get });
+// Conversion belongs at the binding boundary. It does not add orchestrator validation.
+export const decodeQxValue = (type, value, messages) => {
+    if (type.kind === "builtin" && type.name === "unit")
+        return null;
+    if (type.kind === "optional" && !value)
+        return null;
+    if (!value)
+        throw new Error("Missing QX wire value");
+    if (type.kind === "record") {
+        if (value.kind.case !== "objectValue")
+            throw new Error("Expected QX record");
+        const fields = value.kind.value.fields;
+        if (Object.keys(fields).some((name) => !Object.hasOwn(type.fields, name)))
+            throw new Error("Unexpected QX record field");
+        return Object.fromEntries(Object.entries(type.fields).map(([name, field]) => [name, decodeQxValue(field, fields[name], messages)]));
+    }
+    if (type.kind === "optional")
+        return value.kind.case === "nullValue" ? null : decodeQxValue(type.value, value, messages);
+    if (type.kind === "list") {
+        if (value.kind.case !== "listValue")
+            throw new Error("Expected QX list");
+        return value.kind.value.values.map((entry) => decodeQxValue(type.value, entry, messages));
+    }
+    if (type.kind === "message") {
+        assertReferenceFree(protoValueToJs(value));
+        const decoded = requireMessage(messages, type.descriptorId).decode(value);
+        assertReferenceFree(decoded);
+        return decoded;
+    }
+    if (type.kind === "object-ref") {
+        if (value.kind.case !== "refValue")
+            throw new Error("Expected a declared RPC object reference");
+        return protoValueToJs(value);
+    }
+    if (value.kind.case === "refValue")
+        throw new Error("Reference supplied to a non-reference value");
+    if (type.kind === "scalar") {
+        if (type.name === "int64" || type.name === "uint64") {
+            if (value.kind.case !== "integerValue")
+                throw new Error("Expected QX integer");
+            return BigInt(value.kind.value);
+        }
+        if (type.name === "bytes") {
+            if (value.kind.case !== "bytesValue")
+                throw new Error("Expected QX bytes");
+            return value.kind.value;
+        }
+    }
+    return protoValueToJs(value);
+};
+const requireMessage = (messages, id) => {
+    const binding = messages[id];
+    if (!binding)
+        throw new Error(`Missing message binding ${id}`);
+    return binding;
+};
+export const encodeQxValue = (type, value, messages) => {
+    if (type.kind === "builtin" && type.name === "unit")
+        return jsToProtoValue(null);
+    if (type.kind === "record") {
+        if (!value || typeof value !== "object" || Array.isArray(value))
+            throw new Error("Expected QX record");
+        if (Object.keys(value).some((name) => !Object.hasOwn(type.fields, name)))
+            throw new Error("Unexpected QX record field");
+        const fields = Object.fromEntries(Object.entries(type.fields).map(([name, field]) => {
+            if (!Object.hasOwn(value, name) && field.kind !== "optional")
+                throw new Error(`Missing QX record field ${name}`);
+            return [name, encodeQxValue(field, value[name] ?? (field.kind === "optional" ? null : value[name]), messages)];
+        }));
+        return create(ValueSchema, { kind: { case: "objectValue", value: create(ObjectValueSchema, { fields }) } });
+    }
+    if (type.kind === "optional")
+        return value === null ? jsToProtoValue(null) : encodeQxValue(type.value, value, messages);
+    if (type.kind === "list")
+        return jsToProtoValue(value.map((entry) => liveValue(encodeQxValue(type.value, entry, messages))));
+    if (type.kind === "object-ref") {
+        referenceToWire(value);
+        return jsToProtoValue(value);
+    }
+    assertReferenceFree(value);
+    if (type.kind === "message") {
+        const encoded = requireMessage(messages, type.descriptorId).encode(value);
+        assertReferenceFree(protoValueToJs(encoded));
+        return encoded;
+    }
+    return jsToProtoValue(value);
+};
+const inputValue = (context, type) => {
+    if (type.kind === "message" || type.kind === "record")
+        return create(ValueSchema, { kind: { case: "objectValue",
+                value: create(ObjectValueSchema, { fields: context.inputProto }) } });
+    return context.inputProto.value;
+};
+const inputFields = (type, value, messages) => {
+    if (type.kind === "builtin" && type.name === "unit")
+        return {};
+    const encoded = encodeQxValue(type, value, messages);
+    if (type.kind === "message" || type.kind === "record") {
+        if (encoded.kind.case !== "objectValue")
+            throw new Error("Message inputs must encode an object value");
+        return Object.fromEntries(Object.entries(encoded.kind.value.fields).map(([key, entry]) => [key, liveValue(entry)]));
+    }
+    return { value: liveValue(encoded) };
+};
+/** The sole unchecked cast connects generated contracts to the dynamic RPC runtime. */
+export const bindQxHandler = (spec, handler, messages) => {
+    const bindContext = (raw) => {
+        const ports = Object.fromEntries(Object.entries(spec.ports).map(([name, port]) => {
+            switch (port.kind) {
+                case "state": {
+                    const state = raw.state(port.id);
+                    return [name, {
+                            ...(port.primitives.includes("read") ? { get: async () => decodeQxValue(port.valueType, (await state.live()).$quixosValue, messages) } : {}),
+                            ...(port.primitives.includes("write") ? { set: async (value) => state.set(liveValue(encodeQxValue(port.valueType, value, messages))) } : {}),
+                        }];
+                }
+                case "edge": {
+                    const edge = raw.edge(port.id);
+                    return [name, { ...Object.fromEntries(port.primitives.map((primitive) => [primitive, edge[primitive]])),
+                            ...(port.primitives.includes("resolve") ? { collection: edge.collection } : {}),
+                            ...(port.primitives.includes("resolve") && port.primitives.includes("connect") && port.primitives.includes("disconnect") ? { replace: edge.replace } : {}) }];
+                }
+                case "interface": {
+                    const target = raw.interface(port.id);
+                    return [name, Object.fromEntries(Object.entries(port.operations).map(([name, operation]) => [name,
+                            async (input) => decodeQxValue(operation.outputType, (await target.live(operation.id, inputFields(operation.inputType, input, messages))).$quixosValue, messages),
+                        ]))];
+                }
+                case "constructor": return [name, { construct: (input) => raw.constructor(port.id).construct(inputFields(port.inputType, input, messages)) }];
+            }
+        }));
+        return { objectId: raw.objectId, signal: raw.signal,
+            ...(raw.openSession ? { openSession: async () => {
+                    const session = await raw.openSession();
+                    return { id: session.id, close: () => session.close(),
+                        run: (work) => session.run((next) => work(bindContext(next))) };
+                } } : {}),
+            input: decodeQxValue(spec.inputType, inputValue(raw, spec.inputType), messages), ports };
+    };
+    const execute = async (raw) => {
+        const context = bindContext(raw);
+        const value = await (typeof handler === "function" ? handler(context) : handler.get(context));
+        return liveValue(encodeQxValue(spec.eventType ?? spec.outputType, value, messages));
+    };
+    return typeof handler === "function" ? execute : derived(execute);
+};

dist/camino/api_pb.d.ts

@@ -0,0 +1,946 @@
+import type { GenFile, GenMessage, GenService } from "@bufbuild/protobuf/codegenv2";
+import type { PersistencePlan } from "./schema_pb.js";
+import type { Message } from "@bufbuild/protobuf";
+/**
+ * Describes the file camino/api.proto.
+ */
+export declare const file_camino_api: GenFile;
+/**
+ * @generated from message camino.NullValue
+ */
+export type NullValue = Message<"camino.NullValue"> & {};
+/**
+ * Describes the message camino.NullValue.
+ * Use `create(NullValueSchema)` to create a new message.
+ */
+export declare const NullValueSchema: GenMessage<NullValue>;
+/**
+ * @generated from message camino.ObjectValue
+ */
+export type ObjectValue = Message<"camino.ObjectValue"> & {
+    /**
+     * @generated from field: map<string, camino.Value> fields = 1;
+     */
+    fields: {
+        [key: string]: Value;
+    };
+};
+/**
+ * Describes the message camino.ObjectValue.
+ * Use `create(ObjectValueSchema)` to create a new message.
+ */
+export declare const ObjectValueSchema: GenMessage<ObjectValue>;
+/**
+ * @generated from message camino.ListValue
+ */
+export type ListValue = Message<"camino.ListValue"> & {
+    /**
+     * @generated from field: repeated camino.Value values = 1;
+     */
+    values: Value[];
+};
+/**
+ * Describes the message camino.ListValue.
+ * Use `create(ListValueSchema)` to create a new message.
+ */
+export declare const ListValueSchema: GenMessage<ListValue>;
+/**
+ * @generated from message camino.RefValue
+ */
+export type RefValue = Message<"camino.RefValue"> & {
+    /**
+     * @generated from field: string object_id = 1;
+     */
+    objectId: string;
+};
+/**
+ * Describes the message camino.RefValue.
+ * Use `create(RefValueSchema)` to create a new message.
+ */
+export declare const RefValueSchema: GenMessage<RefValue>;
+/**
+ * @generated from message camino.CrdtValue
+ */
+export type CrdtValue = Message<"camino.CrdtValue"> & {
+    /**
+     * @generated from field: string type = 1;
+     */
+    type: string;
+    /**
+     * @generated from field: string encoding = 2;
+     */
+    encoding: string;
+    /**
+     * @generated from field: bytes payload = 3;
+     */
+    payload: Uint8Array;
+};
+/**
+ * Describes the message camino.CrdtValue.
+ * Use `create(CrdtValueSchema)` to create a new message.
+ */
+export declare const CrdtValueSchema: GenMessage<CrdtValue>;
+/**
+ * @generated from message camino.StateValueSource
+ */
+export type StateValueSource = Message<"camino.StateValueSource"> & {
+    /**
+     * @generated from field: string object_id = 1;
+     */
+    objectId: string;
+    /**
+     * @generated from field: string slot_id = 2;
+     */
+    slotId: string;
+    /**
+     * @generated from field: string value_type_json = 3;
+     */
+    valueTypeJson: string;
+    /**
+     * @generated from field: string storage_policy_json = 4;
+     */
+    storagePolicyJson: string;
+    /**
+     * @generated from field: uint64 revision = 5;
+     */
+    revision: bigint;
+    /**
+     * CRDT-backed state is still read as its materialized Value. The snapshot
+     * travels with the writable source identity so a client can retain and
+     * advance a local replica without exposing the document to package code.
+     *
+     * @generated from field: camino.CrdtValue crdt_snapshot = 6;
+     */
+    crdtSnapshot?: CrdtValue | undefined;
+};
+/**
+ * Describes the message camino.StateValueSource.
+ * Use `create(StateValueSourceSchema)` to create a new message.
+ */
+export declare const StateValueSourceSchema: GenMessage<StateValueSource>;
+/**
+ * @generated from message camino.ValueSource
+ */
+export type ValueSource = Message<"camino.ValueSource"> & {
+    /**
+     * @generated from field: camino.StateValueSource state = 1;
+     */
+    state?: StateValueSource | undefined;
+};
+/**
+ * Describes the message camino.ValueSource.
+ * Use `create(ValueSourceSchema)` to create a new message.
+ */
+export declare const ValueSourceSchema: GenMessage<ValueSource>;
+/**
+ * @generated from message camino.Value
+ */
+export type Value = Message<"camino.Value"> & {
+    /**
+     * @generated from oneof camino.Value.kind
+     */
+    kind: {
+        /**
+         * @generated from field: camino.NullValue null_value = 1;
+         */
+        value: NullValue;
+        case: "nullValue";
+    } | {
+        /**
+         * @generated from field: bool bool_value = 2;
+         */
+        value: boolean;
+        case: "boolValue";
+    } | {
+        /**
+         * @generated from field: double number_value = 3;
+         */
+        value: number;
+        case: "numberValue";
+    } | {
+        /**
+         * @generated from field: string string_value = 4;
+         */
+        value: string;
+        case: "stringValue";
+    } | {
+        /**
+         * @generated from field: string integer_value = 5;
+         */
+        value: string;
+        case: "integerValue";
+    } | {
+        /**
+         * @generated from field: bytes bytes_value = 6;
+         */
+        value: Uint8Array;
+        case: "bytesValue";
+    } | {
+        /**
+         * @generated from field: camino.ObjectValue object_value = 7;
+         */
+        value: ObjectValue;
+        case: "objectValue";
+    } | {
+        /**
+         * @generated from field: camino.ListValue list_value = 8;
+         */
+        value: ListValue;
+        case: "listValue";
+    } | {
+        /**
+         * @generated from field: camino.RefValue ref_value = 9;
+         */
+        value: RefValue;
+        case: "refValue";
+    } | {
+        /**
+         * @generated from field: camino.CrdtValue crdt_value = 10;
+         */
+        value: CrdtValue;
+        case: "crdtValue";
+    } | {
+        case: undefined;
+        value?: undefined;
+    };
+    /**
+     * @generated from field: camino.ValueSource source = 11;
+     */
+    source?: ValueSource | undefined;
+};
+/**
+ * Describes the message camino.Value.
+ * Use `create(ValueSchema)` to create a new message.
+ */
+export declare const ValueSchema: GenMessage<Value>;
+/**
+ * @generated from message camino.InstallPersistencePlanRequest
+ */
+export type InstallPersistencePlanRequest = Message<"camino.InstallPersistencePlanRequest"> & {
+    /**
+     * @generated from field: camino.PersistencePlan plan = 1;
+     */
+    plan?: PersistencePlan | undefined;
+};
+/**
+ * Describes the message camino.InstallPersistencePlanRequest.
+ * Use `create(InstallPersistencePlanRequestSchema)` to create a new message.
+ */
+export declare const InstallPersistencePlanRequestSchema: GenMessage<InstallPersistencePlanRequest>;
+/**
+ * @generated from message camino.InstallPersistencePlanResponse
+ */
+export type InstallPersistencePlanResponse = Message<"camino.InstallPersistencePlanResponse"> & {
+    /**
+     * @generated from field: camino.PersistencePlan plan = 1;
+     */
+    plan?: PersistencePlan | undefined;
+};
+/**
+ * Describes the message camino.InstallPersistencePlanResponse.
+ * Use `create(InstallPersistencePlanResponseSchema)` to create a new message.
+ */
+export declare const InstallPersistencePlanResponseSchema: GenMessage<InstallPersistencePlanResponse>;
+/**
+ * @generated from message camino.GetPersistencePlanRequest
+ */
+export type GetPersistencePlanRequest = Message<"camino.GetPersistencePlanRequest"> & {};
+/**
+ * Describes the message camino.GetPersistencePlanRequest.
+ * Use `create(GetPersistencePlanRequestSchema)` to create a new message.
+ */
+export declare const GetPersistencePlanRequestSchema: GenMessage<GetPersistencePlanRequest>;
+/**
+ * @generated from message camino.GetPersistencePlanResponse
+ */
+export type GetPersistencePlanResponse = Message<"camino.GetPersistencePlanResponse"> & {
+    /**
+     * @generated from field: camino.PersistencePlan plan = 1;
+     */
+    plan?: PersistencePlan | undefined;
+};
+/**
+ * Describes the message camino.GetPersistencePlanResponse.
+ * Use `create(GetPersistencePlanResponseSchema)` to create a new message.
+ */
+export declare const GetPersistencePlanResponseSchema: GenMessage<GetPersistencePlanResponse>;
+/**
+ * @generated from message camino.CreateObjectRequest
+ */
+export type CreateObjectRequest = Message<"camino.CreateObjectRequest"> & {
+    /**
+     * @generated from field: string atom_id = 1;
+     */
+    atomId: string;
+    /**
+     * @generated from field: map<string, camino.Value> initial_state = 2;
+     */
+    initialState: {
+        [key: string]: Value;
+    };
+};
+/**
+ * Describes the message camino.CreateObjectRequest.
+ * Use `create(CreateObjectRequestSchema)` to create a new message.
+ */
+export declare const CreateObjectRequestSchema: GenMessage<CreateObjectRequest>;
+/**
+ * @generated from message camino.CreateObjectResponse
+ */
+export type CreateObjectResponse = Message<"camino.CreateObjectResponse"> & {
+    /**
+     * @generated from field: camino.CaminoObject object = 1;
+     */
+    object?: CaminoObject | undefined;
+};
+/**
+ * Describes the message camino.CreateObjectResponse.
+ * Use `create(CreateObjectResponseSchema)` to create a new message.
+ */
+export declare const CreateObjectResponseSchema: GenMessage<CreateObjectResponse>;
+/**
+ * @generated from message camino.GetObjectRequest
+ */
+export type GetObjectRequest = Message<"camino.GetObjectRequest"> & {
+    /**
+     * @generated from field: string object_id = 1;
+     */
+    objectId: string;
+};
+/**
+ * Describes the message camino.GetObjectRequest.
+ * Use `create(GetObjectRequestSchema)` to create a new message.
+ */
+export declare const GetObjectRequestSchema: GenMessage<GetObjectRequest>;
+/**
+ * @generated from message camino.GetObjectResponse
+ */
+export type GetObjectResponse = Message<"camino.GetObjectResponse"> & {
+    /**
+     * @generated from field: camino.CaminoObject object = 1;
+     */
+    object?: CaminoObject | undefined;
+};
+/**
+ * Describes the message camino.GetObjectResponse.
+ * Use `create(GetObjectResponseSchema)` to create a new message.
+ */
+export declare const GetObjectResponseSchema: GenMessage<GetObjectResponse>;
+/**
+ * @generated from message camino.ListObjectsRequest
+ */
+export type ListObjectsRequest = Message<"camino.ListObjectsRequest"> & {
+    /**
+     * @generated from field: string atom_id = 1;
+     */
+    atomId: string;
+};
+/**
+ * Describes the message camino.ListObjectsRequest.
+ * Use `create(ListObjectsRequestSchema)` to create a new message.
+ */
+export declare const ListObjectsRequestSchema: GenMessage<ListObjectsRequest>;
+/**
+ * @generated from message camino.ListObjectsResponse
+ */
+export type ListObjectsResponse = Message<"camino.ListObjectsResponse"> & {
+    /**
+     * @generated from field: repeated camino.CaminoObject objects = 1;
+     */
+    objects: CaminoObject[];
+};
+/**
+ * Describes the message camino.ListObjectsResponse.
+ * Use `create(ListObjectsResponseSchema)` to create a new message.
+ */
+export declare const ListObjectsResponseSchema: GenMessage<ListObjectsResponse>;
+/**
+ * @generated from message camino.ReadStateRequest
+ */
+export type ReadStateRequest = Message<"camino.ReadStateRequest"> & {
+    /**
+     * @generated from field: string object_id = 1;
+     */
+    objectId: string;
+    /**
+     * @generated from field: string slot_id = 2;
+     */
+    slotId: string;
+};
+/**
+ * Describes the message camino.ReadStateRequest.
+ * Use `create(ReadStateRequestSchema)` to create a new message.
+ */
+export declare const ReadStateRequestSchema: GenMessage<ReadStateRequest>;
+/**
+ * @generated from message camino.ReadStateResponse
+ */
+export type ReadStateResponse = Message<"camino.ReadStateResponse"> & {
+    /**
+     * @generated from field: camino.Value value = 1;
+     */
+    value?: Value | undefined;
+};
+/**
+ * Describes the message camino.ReadStateResponse.
+ * Use `create(ReadStateResponseSchema)` to create a new message.
+ */
+export declare const ReadStateResponseSchema: GenMessage<ReadStateResponse>;
+/**
+ * @generated from message camino.WriteStateRequest
+ */
+export type WriteStateRequest = Message<"camino.WriteStateRequest"> & {
+    /**
+     * @generated from field: string object_id = 1;
+     */
+    objectId: string;
+    /**
+     * @generated from field: string slot_id = 2;
+     */
+    slotId: string;
+    /**
+     * @generated from field: camino.Value value = 3;
+     */
+    value?: Value | undefined;
+    /**
+     * @generated from field: string client_mutation_id = 4;
+     */
+    clientMutationId: string;
+};
+/**
+ * Describes the message camino.WriteStateRequest.
+ * Use `create(WriteStateRequestSchema)` to create a new message.
+ */
+export declare const WriteStateRequestSchema: GenMessage<WriteStateRequest>;
+/**
+ * @generated from message camino.WriteStateResponse
+ */
+export type WriteStateResponse = Message<"camino.WriteStateResponse"> & {
+    /**
+     * @generated from field: camino.Value value = 1;
+     */
+    value?: Value | undefined;
+    /**
+     * @generated from field: camino.CaminoObject object = 2;
+     */
+    object?: CaminoObject | undefined;
+};
+/**
+ * Describes the message camino.WriteStateResponse.
+ * Use `create(WriteStateResponseSchema)` to create a new message.
+ */
+export declare const WriteStateResponseSchema: GenMessage<WriteStateResponse>;
+/**
+ * @generated from message camino.ConnectEdgeRequest
+ */
+export type ConnectEdgeRequest = Message<"camino.ConnectEdgeRequest"> & {
+    /**
+     * @generated from field: string edge_type_id = 1;
+     */
+    edgeTypeId: string;
+    /**
+     * @generated from field: string projection_id = 2;
+     */
+    projectionId: string;
+    /**
+     * @generated from field: string object_id = 3;
+     */
+    objectId: string;
+    /**
+     * @generated from field: string target_object_id = 4;
+     */
+    targetObjectId: string;
+    /**
+     * @generated from field: optional int32 ordinal = 5;
+     */
+    ordinal?: number | undefined;
+    /**
+     * @generated from field: optional int32 target_ordinal = 6;
+     */
+    targetOrdinal?: number | undefined;
+};
+/**
+ * Describes the message camino.ConnectEdgeRequest.
+ * Use `create(ConnectEdgeRequestSchema)` to create a new message.
+ */
+export declare const ConnectEdgeRequestSchema: GenMessage<ConnectEdgeRequest>;
+/**
+ * @generated from message camino.ConnectEdgeResponse
+ */
+export type ConnectEdgeResponse = Message<"camino.ConnectEdgeResponse"> & {
+    /**
+     * @generated from field: camino.CaminoEdge edge = 1;
+     */
+    edge?: CaminoEdge | undefined;
+};
+/**
+ * Describes the message camino.ConnectEdgeResponse.
+ * Use `create(ConnectEdgeResponseSchema)` to create a new message.
+ */
+export declare const ConnectEdgeResponseSchema: GenMessage<ConnectEdgeResponse>;
+/**
+ * @generated from message camino.ResolveEdgeRequest
+ */
+export type ResolveEdgeRequest = Message<"camino.ResolveEdgeRequest"> & {
+    /**
+     * @generated from field: string object_id = 1;
+     */
+    objectId: string;
+    /**
+     * @generated from field: string edge_type_id = 2;
+     */
+    edgeTypeId: string;
+    /**
+     * @generated from field: string projection_id = 3;
+     */
+    projectionId: string;
+};
+/**
+ * Describes the message camino.ResolveEdgeRequest.
+ * Use `create(ResolveEdgeRequestSchema)` to create a new message.
+ */
+export declare const ResolveEdgeRequestSchema: GenMessage<ResolveEdgeRequest>;
+/**
+ * @generated from message camino.ResolveEdgeResponse
+ */
+export type ResolveEdgeResponse = Message<"camino.ResolveEdgeResponse"> & {
+    /**
+     * @generated from field: repeated camino.CaminoEdge edges = 1;
+     */
+    edges: CaminoEdge[];
+};
+/**
+ * Describes the message camino.ResolveEdgeResponse.
+ * Use `create(ResolveEdgeResponseSchema)` to create a new message.
+ */
+export declare const ResolveEdgeResponseSchema: GenMessage<ResolveEdgeResponse>;
+/**
+ * @generated from message camino.DisconnectEdgeRequest
+ */
+export type DisconnectEdgeRequest = Message<"camino.DisconnectEdgeRequest"> & {
+    /**
+     * @generated from field: string edge_id = 1;
+     */
+    edgeId: string;
+};
+/**
+ * Describes the message camino.DisconnectEdgeRequest.
+ * Use `create(DisconnectEdgeRequestSchema)` to create a new message.
+ */
+export declare const DisconnectEdgeRequestSchema: GenMessage<DisconnectEdgeRequest>;
+/**
+ * @generated from message camino.DisconnectEdgeResponse
+ */
+export type DisconnectEdgeResponse = Message<"camino.DisconnectEdgeResponse"> & {
+    /**
+     * @generated from field: string edge_id = 1;
+     */
+    edgeId: string;
+};
+/**
+ * Describes the message camino.DisconnectEdgeResponse.
+ * Use `create(DisconnectEdgeResponseSchema)` to create a new message.
+ */
+export declare const DisconnectEdgeResponseSchema: GenMessage<DisconnectEdgeResponse>;
+/**
+ * @generated from message camino.CollectionEntry
+ */
+export type CollectionEntry = Message<"camino.CollectionEntry"> & {
+    /**
+     * Existing entry identity to preserve; empty allocates a new canonical edge.
+     *
+     * @generated from field: string edge_id = 1;
+     */
+    edgeId: string;
+    /**
+     * @generated from field: string target_object_id = 2;
+     */
+    targetObjectId: string;
+    /**
+     * @generated from field: camino.Value key = 3;
+     */
+    key?: Value | undefined;
+};
+/**
+ * Describes the message camino.CollectionEntry.
+ * Use `create(CollectionEntrySchema)` to create a new message.
+ */
+export declare const CollectionEntrySchema: GenMessage<CollectionEntry>;
+/**
+ * @generated from message camino.ReadCollectionResponse
+ */
+export type ReadCollectionResponse = Message<"camino.ReadCollectionResponse"> & {
+    /**
+     * @generated from field: uint64 revision = 1;
+     */
+    revision: bigint;
+    /**
+     * @generated from field: repeated camino.CollectionEntry entries = 2;
+     */
+    entries: CollectionEntry[];
+};
+/**
+ * Describes the message camino.ReadCollectionResponse.
+ * Use `create(ReadCollectionResponseSchema)` to create a new message.
+ */
+export declare const ReadCollectionResponseSchema: GenMessage<ReadCollectionResponse>;
+/**
+ * @generated from message camino.ReplaceCollectionRequest
+ */
+export type ReplaceCollectionRequest = Message<"camino.ReplaceCollectionRequest"> & {
+    /**
+     * @generated from field: string object_id = 1;
+     */
+    objectId: string;
+    /**
+     * @generated from field: string edge_type_id = 2;
+     */
+    edgeTypeId: string;
+    /**
+     * @generated from field: string projection_id = 3;
+     */
+    projectionId: string;
+    /**
+     * @generated from field: uint64 expected_revision = 4;
+     */
+    expectedRevision: bigint;
+    /**
+     * @generated from field: repeated camino.CollectionEntry entries = 5;
+     */
+    entries: CollectionEntry[];
+};
+/**
+ * Describes the message camino.ReplaceCollectionRequest.
+ * Use `create(ReplaceCollectionRequestSchema)` to create a new message.
+ */
+export declare const ReplaceCollectionRequestSchema: GenMessage<ReplaceCollectionRequest>;
+/**
+ * @generated from message camino.ListOpsRequest
+ */
+export type ListOpsRequest = Message<"camino.ListOpsRequest"> & {
+    /**
+     * @generated from field: string object_id = 1;
+     */
+    objectId: string;
+};
+/**
+ * Describes the message camino.ListOpsRequest.
+ * Use `create(ListOpsRequestSchema)` to create a new message.
+ */
+export declare const ListOpsRequestSchema: GenMessage<ListOpsRequest>;
+/**
+ * @generated from message camino.ListOpsResponse
+ */
+export type ListOpsResponse = Message<"camino.ListOpsResponse"> & {
+    /**
+     * @generated from field: repeated camino.CaminoOp ops = 1;
+     */
+    ops: CaminoOp[];
+};
+/**
+ * Describes the message camino.ListOpsResponse.
+ * Use `create(ListOpsResponseSchema)` to create a new message.
+ */
+export declare const ListOpsResponseSchema: GenMessage<ListOpsResponse>;
+/**
+ * @generated from message camino.WatchObjectRequest
+ */
+export type WatchObjectRequest = Message<"camino.WatchObjectRequest"> & {
+    /**
+     * @generated from field: string object_id = 1;
+     */
+    objectId: string;
+    /**
+     * @generated from field: string after_op_id = 2;
+     */
+    afterOpId: string;
+    /**
+     * @generated from field: bool include_snapshot = 3;
+     */
+    includeSnapshot: boolean;
+    /**
+     * Managed runtimes must watch only their injected attachments.
+     *
+     * @generated from field: repeated string attachment_ids = 4;
+     */
+    attachmentIds: string[];
+};
+/**
+ * Describes the message camino.WatchObjectRequest.
+ * Use `create(WatchObjectRequestSchema)` to create a new message.
+ */
+export declare const WatchObjectRequestSchema: GenMessage<WatchObjectRequest>;
+/**
+ * @generated from message camino.WatchObjectEvent
+ */
+export type WatchObjectEvent = Message<"camino.WatchObjectEvent"> & {
+    /**
+     * @generated from field: string object_id = 1;
+     */
+    objectId: string;
+    /**
+     * @generated from field: camino.CaminoObject snapshot = 2;
+     */
+    snapshot?: CaminoObject | undefined;
+    /**
+     * @generated from field: camino.CaminoOp op = 3;
+     */
+    op?: CaminoOp | undefined;
+};
+/**
+ * Describes the message camino.WatchObjectEvent.
+ * Use `create(WatchObjectEventSchema)` to create a new message.
+ */
+export declare const WatchObjectEventSchema: GenMessage<WatchObjectEvent>;
+/**
+ * @generated from message camino.CaminoObject
+ */
+export type CaminoObject = Message<"camino.CaminoObject"> & {
+    /**
+     * @generated from field: string id = 1;
+     */
+    id: string;
+    /**
+     * @generated from field: string atom_id = 2;
+     */
+    atomId: string;
+    /**
+     * @generated from field: string workspace_revision_id = 3;
+     */
+    workspaceRevisionId: string;
+    /**
+     * @generated from field: string created_at = 4;
+     */
+    createdAt: string;
+    /**
+     * @generated from field: string updated_at = 5;
+     */
+    updatedAt: string;
+    /**
+     * @generated from field: map<string, camino.Value> state = 6;
+     */
+    state: {
+        [key: string]: Value;
+    };
+    /**
+     * @generated from field: map<string, uint64> state_revisions = 7;
+     */
+    stateRevisions: {
+        [key: string]: bigint;
+    };
+};
+/**
+ * Describes the message camino.CaminoObject.
+ * Use `create(CaminoObjectSchema)` to create a new message.
+ */
+export declare const CaminoObjectSchema: GenMessage<CaminoObject>;
+/**
+ * @generated from message camino.CaminoEdge
+ */
+export type CaminoEdge = Message<"camino.CaminoEdge"> & {
+    /**
+     * @generated from field: string id = 1;
+     */
+    id: string;
+    /**
+     * @generated from field: string edge_type_id = 2;
+     */
+    edgeTypeId: string;
+    /**
+     * @generated from field: string first_object_id = 3;
+     */
+    firstObjectId: string;
+    /**
+     * @generated from field: string second_object_id = 4;
+     */
+    secondObjectId: string;
+    /**
+     * @generated from field: string first_projection_id = 5;
+     */
+    firstProjectionId: string;
+    /**
+     * @generated from field: string second_projection_id = 6;
+     */
+    secondProjectionId: string;
+    /**
+     * @generated from field: optional int32 first_ordinal = 7;
+     */
+    firstOrdinal?: number | undefined;
+    /**
+     * @generated from field: optional int32 second_ordinal = 8;
+     */
+    secondOrdinal?: number | undefined;
+    /**
+     * @generated from field: string created_at = 9;
+     */
+    createdAt: string;
+    /**
+     * @generated from field: string first_key_json = 10;
+     */
+    firstKeyJson: string;
+    /**
+     * @generated from field: string second_key_json = 11;
+     */
+    secondKeyJson: string;
+};
+/**
+ * Describes the message camino.CaminoEdge.
+ * Use `create(CaminoEdgeSchema)` to create a new message.
+ */
+export declare const CaminoEdgeSchema: GenMessage<CaminoEdge>;
+/**
+ * @generated from message camino.CaminoOp
+ */
+export type CaminoOp = Message<"camino.CaminoOp"> & {
+    /**
+     * @generated from field: string id = 1;
+     */
+    id: string;
+    /**
+     * @generated from field: string object_id = 2;
+     */
+    objectId: string;
+    /**
+     * @generated from field: string op_kind = 3;
+     */
+    opKind: string;
+    /**
+     * @generated from field: camino.Value payload = 4;
+     */
+    payload?: Value | undefined;
+    /**
+     * @generated from field: string actor = 5;
+     */
+    actor: string;
+    /**
+     * @generated from field: string created_at = 6;
+     */
+    createdAt: string;
+    /**
+     * @generated from field: string client_mutation_id = 7;
+     */
+    clientMutationId: string;
+};
+/**
+ * Describes the message camino.CaminoOp.
+ * Use `create(CaminoOpSchema)` to create a new message.
+ */
+export declare const CaminoOpSchema: GenMessage<CaminoOp>;
+/**
+ * @generated from service camino.CaminoService
+ */
+export declare const CaminoService: GenService<{
+    /**
+     * @generated from rpc camino.CaminoService.InstallPersistencePlan
+     */
+    installPersistencePlan: {
+        methodKind: "unary";
+        input: typeof InstallPersistencePlanRequestSchema;
+        output: typeof InstallPersistencePlanResponseSchema;
+    };
+    /**
+     * @generated from rpc camino.CaminoService.GetPersistencePlan
+     */
+    getPersistencePlan: {
+        methodKind: "unary";
+        input: typeof GetPersistencePlanRequestSchema;
+        output: typeof GetPersistencePlanResponseSchema;
+    };
+    /**
+     * @generated from rpc camino.CaminoService.CreateObject
+     */
+    createObject: {
+        methodKind: "unary";
+        input: typeof CreateObjectRequestSchema;
+        output: typeof CreateObjectResponseSchema;
+    };
+    /**
+     * @generated from rpc camino.CaminoService.GetObject
+     */
+    getObject: {
+        methodKind: "unary";
+        input: typeof GetObjectRequestSchema;
+        output: typeof GetObjectResponseSchema;
+    };
+    /**
+     * @generated from rpc camino.CaminoService.ListObjects
+     */
+    listObjects: {
+        methodKind: "unary";
+        input: typeof ListObjectsRequestSchema;
+        output: typeof ListObjectsResponseSchema;
+    };
+    /**
+     * @generated from rpc camino.CaminoService.ReadState
+     */
+    readState: {
+        methodKind: "unary";
+        input: typeof ReadStateRequestSchema;
+        output: typeof ReadStateResponseSchema;
+    };
+    /**
+     * @generated from rpc camino.CaminoService.WriteState
+     */
+    writeState: {
+        methodKind: "unary";
+        input: typeof WriteStateRequestSchema;
+        output: typeof WriteStateResponseSchema;
+    };
+    /**
+     * @generated from rpc camino.CaminoService.ConnectEdge
+     */
+    connectEdge: {
+        methodKind: "unary";
+        input: typeof ConnectEdgeRequestSchema;
+        output: typeof ConnectEdgeResponseSchema;
+    };
+    /**
+     * @generated from rpc camino.CaminoService.ResolveEdge
+     */
+    resolveEdge: {
+        methodKind: "unary";
+        input: typeof ResolveEdgeRequestSchema;
+        output: typeof ResolveEdgeResponseSchema;
+    };
+    /**
+     * @generated from rpc camino.CaminoService.DisconnectEdge
+     */
+    disconnectEdge: {
+        methodKind: "unary";
+        input: typeof DisconnectEdgeRequestSchema;
+        output: typeof DisconnectEdgeResponseSchema;
+    };
+    /**
+     * @generated from rpc camino.CaminoService.ReadCollection
+     */
+    readCollection: {
+        methodKind: "unary";
+        input: typeof ResolveEdgeRequestSchema;
+        output: typeof ReadCollectionResponseSchema;
+    };
+    /**
+     * @generated from rpc camino.CaminoService.ReplaceCollection
+     */
+    replaceCollection: {
+        methodKind: "unary";
+        input: typeof ReplaceCollectionRequestSchema;
+        output: typeof ReadCollectionResponseSchema;
+    };
+    /**
+     * @generated from rpc camino.CaminoService.ListOps
+     */
+    listOps: {
+        methodKind: "unary";
+        input: typeof ListOpsRequestSchema;
+        output: typeof ListOpsResponseSchema;
+    };
+    /**
+     * @generated from rpc camino.CaminoService.WatchObject
+     */
+    watchObject: {
+        methodKind: "server_streaming";
+        input: typeof WatchObjectRequestSchema;
+        output: typeof WatchObjectEventSchema;
+    };
+}>;
+//# sourceMappingURL=api_pb.d.ts.map

dist/camino/schema_pb.d.ts

@@ -0,0 +1,262 @@
+import type { GenEnum, GenFile, GenMessage } from "@bufbuild/protobuf/codegenv2";
+import type { Message } from "@bufbuild/protobuf";
+/**
+ * Describes the file camino/schema.proto.
+ */
+export declare const file_camino_schema: GenFile;
+/**
+ * @generated from message camino.AtomDefinition
+ */
+export type AtomDefinition = Message<"camino.AtomDefinition"> & {
+    /**
+     * @generated from field: string atom_id = 1;
+     */
+    atomId: string;
+    /**
+     * @generated from field: string display_name = 2;
+     */
+    displayName: string;
+};
+/**
+ * Describes the message camino.AtomDefinition.
+ * Use `create(AtomDefinitionSchema)` to create a new message.
+ */
+export declare const AtomDefinitionSchema: GenMessage<AtomDefinition>;
+/**
+ * @generated from message camino.AtomConformance
+ */
+export type AtomConformance = Message<"camino.AtomConformance"> & {
+    /**
+     * @generated from field: string atom_id = 1;
+     */
+    atomId: string;
+    /**
+     * @generated from field: string interface_revision_id = 2;
+     */
+    interfaceRevisionId: string;
+    /**
+     * @generated from field: string conformance_id = 3;
+     */
+    conformanceId: string;
+};
+/**
+ * Describes the message camino.AtomConformance.
+ * Use `create(AtomConformanceSchema)` to create a new message.
+ */
+export declare const AtomConformanceSchema: GenMessage<AtomConformance>;
+/**
+ * @generated from message camino.StateAttachment
+ */
+export type StateAttachment = Message<"camino.StateAttachment"> & {
+    /**
+     * @generated from field: string slot_id = 1;
+     */
+    slotId: string;
+    /**
+     * @generated from field: string attached_atom_id = 2;
+     */
+    attachedAtomId: string;
+    /**
+     * @generated from field: string display_name = 3;
+     */
+    displayName: string;
+    /**
+     * @generated from field: string value_type_json = 4;
+     */
+    valueTypeJson: string;
+    /**
+     * @generated from field: string storage_policy_json = 5;
+     */
+    storagePolicyJson: string;
+    /**
+     * @generated from field: string default_value_json = 6;
+     */
+    defaultValueJson: string;
+    /**
+     * @generated from field: string owner_conformance_id = 7;
+     */
+    ownerConformanceId: string;
+};
+/**
+ * Describes the message camino.StateAttachment.
+ * Use `create(StateAttachmentSchema)` to create a new message.
+ */
+export declare const StateAttachmentSchema: GenMessage<StateAttachment>;
+/**
+ * @generated from message camino.EndpointConstraint
+ */
+export type EndpointConstraint = Message<"camino.EndpointConstraint"> & {
+    /**
+     * @generated from oneof camino.EndpointConstraint.kind
+     */
+    kind: {
+        /**
+         * @generated from field: string atom_id = 1;
+         */
+        value: string;
+        case: "atomId";
+    } | {
+        /**
+         * @generated from field: string interface_revision_id = 2;
+         */
+        value: string;
+        case: "interfaceRevisionId";
+    } | {
+        case: undefined;
+        value?: undefined;
+    };
+};
+/**
+ * Describes the message camino.EndpointConstraint.
+ * Use `create(EndpointConstraintSchema)` to create a new message.
+ */
+export declare const EndpointConstraintSchema: GenMessage<EndpointConstraint>;
+/**
+ * @generated from message camino.EdgeEndpoint
+ */
+export type EdgeEndpoint = Message<"camino.EdgeEndpoint"> & {
+    /**
+     * @generated from field: string projection_id = 1;
+     */
+    projectionId: string;
+    /**
+     * @generated from field: string display_name = 2;
+     */
+    displayName: string;
+    /**
+     * @generated from field: camino.EndpointConstraint constraint = 3;
+     */
+    constraint?: EndpointConstraint | undefined;
+    /**
+     * @generated from field: camino.Cardinality cardinality = 4;
+     */
+    cardinality: Cardinality;
+    /**
+     * @generated from field: bool ordered = 5;
+     */
+    ordered: boolean;
+    /**
+     * Empty means restrict. Direction is the endpoint being deleted.
+     *
+     * @generated from field: string on_delete = 6;
+     */
+    onDelete: string;
+    /**
+     * @generated from field: bool retain_other = 7;
+     */
+    retainOther: boolean;
+    /**
+     * Empty for sets/lists, otherwise string, boolean, or int64 map keys.
+     *
+     * @generated from field: string key_type = 8;
+     */
+    keyType: string;
+    /**
+     * Explicit read-only dependency injection traversal, not mutation authority.
+     *
+     * @generated from field: bool public_traversal = 9;
+     */
+    publicTraversal: boolean;
+};
+/**
+ * Describes the message camino.EdgeEndpoint.
+ * Use `create(EdgeEndpointSchema)` to create a new message.
+ */
+export declare const EdgeEndpointSchema: GenMessage<EdgeEndpoint>;
+/**
+ * @generated from message camino.EdgeAttachment
+ */
+export type EdgeAttachment = Message<"camino.EdgeAttachment"> & {
+    /**
+     * @generated from field: string edge_type_id = 1;
+     */
+    edgeTypeId: string;
+    /**
+     * @generated from field: string display_name = 2;
+     */
+    displayName: string;
+    /**
+     * @generated from field: camino.EdgeEndpoint first = 3;
+     */
+    first?: EdgeEndpoint | undefined;
+    /**
+     * @generated from field: camino.EdgeEndpoint second = 4;
+     */
+    second?: EdgeEndpoint | undefined;
+    /**
+     * @generated from field: string owner_conformance_id = 5;
+     */
+    ownerConformanceId: string;
+};
+/**
+ * Describes the message camino.EdgeAttachment.
+ * Use `create(EdgeAttachmentSchema)` to create a new message.
+ */
+export declare const EdgeAttachmentSchema: GenMessage<EdgeAttachment>;
+/**
+ * Camino consumes this persistence-only projection of a checked workspace.
+ * Interfaces, operation bindings, packages, and constructors stay in orch.
+ *
+ * @generated from message camino.PersistencePlan
+ */
+export type PersistencePlan = Message<"camino.PersistencePlan"> & {
+    /**
+     * @generated from field: string workspace_id = 1;
+     */
+    workspaceId: string;
+    /**
+     * @generated from field: string workspace_revision_id = 2;
+     */
+    workspaceRevisionId: string;
+    /**
+     * @generated from field: repeated camino.AtomDefinition atoms = 3;
+     */
+    atoms: AtomDefinition[];
+    /**
+     * @generated from field: repeated camino.AtomConformance conformances = 4;
+     */
+    conformances: AtomConformance[];
+    /**
+     * @generated from field: repeated camino.StateAttachment states = 5;
+     */
+    states: StateAttachment[];
+    /**
+     * @generated from field: repeated camino.EdgeAttachment edges = 6;
+     */
+    edges: EdgeAttachment[];
+};
+/**
+ * Describes the message camino.PersistencePlan.
+ * Use `create(PersistencePlanSchema)` to create a new message.
+ */
+export declare const PersistencePlanSchema: GenMessage<PersistencePlan>;
+/**
+ * @generated from enum camino.Cardinality
+ */
+export declare enum Cardinality {
+    /**
+     * @generated from enum value: CARDINALITY_UNSPECIFIED = 0;
+     */
+    CARDINALITY_UNSPECIFIED = 0,
+    /**
+     * @generated from enum value: OPTIONAL_ONE = 1;
+     */
+    OPTIONAL_ONE = 1,
+    /**
+     * @generated from enum value: EXACTLY_ONE = 2;
+     */
+    EXACTLY_ONE = 2,
+    /**
+     * @generated from enum value: MANY = 3;
+     */
+    MANY = 3,
+    /**
+     * @generated from enum value: MANY_UNIQUE = 4;
+     */
+    MANY_UNIQUE = 4
+}
+/**
+ * Describes the enum camino.Cardinality.
+ */
+export declare const CardinalitySchema: GenEnum<Cardinality>;
+//# sourceMappingURL=schema_pb.d.ts.map

dist/camino/schema_pb.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema_pb.d.ts","sourceRoot":"","sources":["../../src/camino/schema_pb.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAEjF,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAElD;;GAEG;AACH,eAAO,MAAM,kBAAkB,EAAE,OACulD,CAAC;AAEznD;;GAEG;AACH,MAAM,MAAM,cAAc,GAAG,OAAO,CAAC,uBAAuB,CAAC,GAAG;IAC9D;;OAEG;IACH,MAAM,EAAE,MAAM,CAAC;IAEf;;OAEG;IACH,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,oBAAoB,EAAE,UAAU,CAAC,cAAc,CACxB,CAAC;AAErC;;GAEG;AACH,MAAM,MAAM,eAAe,GAAG,OAAO,CAAC,wBAAwB,CAAC,GAAG;IAChE;;OAEG;IACH,MAAM,EAAE,MAAM,CAAC;IAEf;;OAEG;IACH,mBAAmB,EAAE,MAAM,CAAC;IAE5B;;OAEG;IACH,aAAa,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,qBAAqB,EAAE,UAAU,CAAC,eAAe,CAC1B,CAAC;AAErC;;GAEG;AACH,MAAM,MAAM,eAAe,GAAG,OAAO,CAAC,wBAAwB,CAAC,GAAG;IAChE;;OAEG;IACH,MAAM,EAAE,MAAM,CAAC;IAEf;;OAEG;IACH,cAAc,EAAE,MAAM,CAAC;IAEvB;;OAEG;IACH,WAAW,EAAE,MAAM,CAAC;IAEpB;;OAEG;IACH,aAAa,EAAE,MAAM,CAAC;IAEtB;;OAEG;IACH,iBAAiB,EAAE,MAAM,CAAC;IAE1B;;OAEG;IACH,gBAAgB,EAAE,MAAM,CAAC;IAEzB;;OAEG;IACH,kBAAkB,EAAE,MAAM,CAAC;CAC5B,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,qBAAqB,EAAE,UAAU,CAAC,eAAe,CAC1B,CAAC;AAErC;;GAEG;AACH,MAAM,MAAM,kBAAkB,GAAG,OAAO,CAAC,2BAA2B,CAAC,GAAG;IACtE;;OAEG;IACH,IAAI,EAAE;QACJ;;WAEG;QACH,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,EAAE,QAAQ,CAAC;KAChB,GAAG;QACF;;WAEG;QACH,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,EAAE,qBAAqB,CAAC;KAC7B,GAAG;QAAE,IAAI,EAAE,SAAS,CAAC;QAAC,KAAK,CAAC,EAAE,SAAS,CAAA;KAAE,CAAC;CAC5C,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,wBAAwB,EAAE,UAAU,CAAC,kBAAkB,CAChC,CAAC;AAErC;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG,OAAO,CAAC,qBAAqB,CAAC,GAAG;IAC1D;;OAEG;IACH,YAAY,EAAE,MAAM,CAAC;IAErB;;OAEG;IACH,WAAW,EAAE,MAAM,CAAC;IAEpB;;OAEG;IACH,UAAU,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAC;IAE5C;;OAEG;IACH,WAAW,EAAE,WAAW,CAAC;IAEzB;;OAEG;IACH,OAAO,EAAE,OAAO,CAAC;IAEjB;;;;OAIG;IACH,QAAQ,EAAE,MAAM,CAAC;IAEjB;;OAEG;IACH,WAAW,EAAE,OAAO,CAAC;IAErB;;;;OAIG;IACH,OAAO,EAAE,MAAM,CAAC;IAEhB;;;;OAIG;IACH,eAAe,EAAE,OAAO,CAAC;CAC1B,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,kBAAkB,EAAE,UAAU,CAAC,YAAY,CACpB,CAAC;AAErC;;GAEG;AACH,MAAM,MAAM,cAAc,GAAG,OAAO,CAAC,uBAAuB,CAAC,GAAG;IAC9D;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IAEnB;;OAEG;IACH,WAAW,EAAE,MAAM,CAAC;IAEpB;;OAEG;IACH,KAAK,CAAC,EAAE,YAAY,GAAG,SAAS,CAAC;IAEjC;;OAEG;IACH,MAAM,CAAC,EAAE,YAAY,GAAG,SAAS,CAAC;IAElC;;OAEG;IACH,kBAAkB,EAAE,MAAM,CAAC;CAC5B,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,oBAAoB,EAAE,UAAU,CAAC,cAAc,CACxB,CAAC;AAErC;;;;;GAKG;AACH,MAAM,MAAM,eAAe,GAAG,OAAO,CAAC,wBAAwB,CAAC,GAAG;IAChE;;OAEG;IACH,WAAW,EAAE,MAAM,CAAC;IAEpB;;OAEG;IACH,mBAAmB,EAAE,MAAM,CAAC;IAE5B;;OAEG;IACH,KAAK,EAAE,cAAc,EAAE,CAAC;IAExB;;OAEG;IACH,YAAY,EAAE,eAAe,EAAE,CAAC;IAEhC;;OAEG;IACH,MAAM,EAAE,eAAe,EAAE,CAAC;IAE1B;;OAEG;IACH,KAAK,EAAE,cAAc,EAAE,CAAC;CACzB,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,qBAAqB,EAAE,UAAU,CAAC,eAAe,CAC1B,CAAC;AAErC;;GAEG;AACH,oBAAY,WAAW;IACrB;;OAEG;IACH,uBAAuB,IAAI;IAE3B;;OAEG;IACH,YAAY,IAAI;IAEhB;;OAEG;IACH,WAAW,IAAI;IAEf;;OAEG;IACH,IAAI,IAAI;IAER;;OAEG;IACH,WAAW,IAAI;CAChB;AAED;;GAEG;AACH,eAAO,MAAM,iBAAiB,EAAE,OAAO,CAAC,WAAW,CAClB,CAAC"}

dist/camino/schema_pb.js

@@ -0,0 +1,73 @@
+// @generated by protoc-gen-es v2.12.1 with parameter "target=ts,import_extension=js"
+// @generated from file camino/schema.proto (package camino, syntax proto3)
+/* eslint-disable */
+import { enumDesc, fileDesc, messageDesc } from "@bufbuild/protobuf/codegenv2";
+/**
+ * Describes the file camino/schema.proto.
+ */
+export const file_camino_schema = /*@__PURE__*/ fileDesc("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");
+/**
+ * Describes the message camino.AtomDefinition.
+ * Use `create(AtomDefinitionSchema)` to create a new message.
+ */
+export const AtomDefinitionSchema = /*@__PURE__*/ messageDesc(file_camino_schema, 0);
+/**
+ * Describes the message camino.AtomConformance.
+ * Use `create(AtomConformanceSchema)` to create a new message.
+ */
+export const AtomConformanceSchema = /*@__PURE__*/ messageDesc(file_camino_schema, 1);
+/**
+ * Describes the message camino.StateAttachment.
+ * Use `create(StateAttachmentSchema)` to create a new message.
+ */
+export const StateAttachmentSchema = /*@__PURE__*/ messageDesc(file_camino_schema, 2);
+/**
+ * Describes the message camino.EndpointConstraint.
+ * Use `create(EndpointConstraintSchema)` to create a new message.
+ */
+export const EndpointConstraintSchema = /*@__PURE__*/ messageDesc(file_camino_schema, 3);
+/**
+ * Describes the message camino.EdgeEndpoint.
+ * Use `create(EdgeEndpointSchema)` to create a new message.
+ */
+export const EdgeEndpointSchema = /*@__PURE__*/ messageDesc(file_camino_schema, 4);
+/**
+ * Describes the message camino.EdgeAttachment.
+ * Use `create(EdgeAttachmentSchema)` to create a new message.
+ */
+export const EdgeAttachmentSchema = /*@__PURE__*/ messageDesc(file_camino_schema, 5);
+/**
+ * Describes the message camino.PersistencePlan.
+ * Use `create(PersistencePlanSchema)` to create a new message.
+ */
+export const PersistencePlanSchema = /*@__PURE__*/ messageDesc(file_camino_schema, 6);
+/**
+ * @generated from enum camino.Cardinality
+ */
+export var Cardinality;
+(function (Cardinality) {
+    /**
+     * @generated from enum value: CARDINALITY_UNSPECIFIED = 0;
+     */
+    Cardinality[Cardinality["CARDINALITY_UNSPECIFIED"] = 0] = "CARDINALITY_UNSPECIFIED";
+    /**
+     * @generated from enum value: OPTIONAL_ONE = 1;
+     */
+    Cardinality[Cardinality["OPTIONAL_ONE"] = 1] = "OPTIONAL_ONE";
+    /**
+     * @generated from enum value: EXACTLY_ONE = 2;
+     */
+    Cardinality[Cardinality["EXACTLY_ONE"] = 2] = "EXACTLY_ONE";
+    /**
+     * @generated from enum value: MANY = 3;
+     */
+    Cardinality[Cardinality["MANY"] = 3] = "MANY";
+    /**
+     * @generated from enum value: MANY_UNIQUE = 4;
+     */
+    Cardinality[Cardinality["MANY_UNIQUE"] = 4] = "MANY_UNIQUE";
+})(Cardinality || (Cardinality = {}));
+/**
+ * Describes the enum camino.Cardinality.
+ */
+export const CardinalitySchema = /*@__PURE__*/ enumDesc(file_camino_schema, 0);

dist/index.d.ts

@@ -0,0 +1,110 @@
+import http from "node:http";
+import { type QxObjectRef } from "./references.js";
+export * from "./bindings.js";
+export { relationshipMap, relationshipList, relationshipSet } from "./relationships.js";
+export { createMigrationContext, migrationObjectId, serveMigration, type MigrationContext, type MigrationInput, type MigrationOutput, type MigrationEdge } from "./migration.js";
+import { type Client, type ConnectRouter } from "@connectrpc/connect";
+import { CaminoService, type Value } from "./camino/api_pb.js";
+import { OrchestratorRuntime } from "./quixos/orch_pb.js";
+export type CaminoClient = Client<typeof CaminoService>;
+export type OrchClient = Client<typeof OrchestratorRuntime>;
+export type RuntimeDependency = {
+    kind: "state";
+    objectId: string;
+    attachmentId: string;
+} | {
+    kind: "edge";
+    objectId: string;
+    attachmentId: string;
+    projectionId: string;
+};
+export declare const objectRef: (reference: QxObjectRef) => QxObjectRef<string>;
+export declare const liveValue: (value: Value) => {
+    $quixosValue: Value;
+};
+export declare const jsToProtoValue: (value: unknown) => Value;
+export declare const protoValueToJs: (value: Value | undefined) => unknown;
+export declare const protoFieldsToJs: (fields: Record<string, Value>) => {
+    [k: string]: unknown;
+};
+export type StatePort<T = unknown> = {
+    slotId: string;
+    get(): Promise<T>;
+    live(): Promise<ReturnType<typeof liveValue>>;
+    set(value: T): Promise<void>;
+};
+export type EdgePort = {
+    edgeTypeId: string;
+    projectionId: string;
+    resolve(): Promise<QxObjectRef[]>;
+    connect(target: QxObjectRef): Promise<void>;
+    disconnect(target: QxObjectRef): Promise<void>;
+    collection(): Promise<RelationshipCollection>;
+    replace(entries: RelationshipEntry[], expectedRevision: bigint): Promise<RelationshipCollection>;
+};
+export type RelationshipEntry<T extends QxObjectRef = QxObjectRef> = {
+    edgeId?: string;
+    target: T;
+    key?: string | boolean | bigint;
+};
+export type RelationshipCollection<T extends QxObjectRef = QxObjectRef> = {
+    revision: bigint;
+    entries: RelationshipEntry<T>[];
+};
+export type InterfacePort = {
+    objectId: QxObjectRef;
+    interfaceRevisionId: string;
+    invoke(operationId: string, input?: Record<string, unknown>): Promise<unknown>;
+    live(operationId: string, input?: Record<string, unknown>): Promise<ReturnType<typeof liveValue>>;
+};
+export type ConstructorPort = {
+    atomId: string;
+    construct(input?: Record<string, unknown>): Promise<QxObjectRef>;
+};
+export type RuntimePort = StatePort | EdgePort | InterfacePort | ConstructorPort;
+export type RuntimeContext = {
+    /** Cooperative cancellation. Completion is acknowledged only after the handler returns. */
+    signal?: AbortSignal;
+    openSession?: () => Promise<RuntimeSession>;
+    objectId: QxObjectRef;
+    input: Record<string, unknown>;
+    inputProto: Record<string, Value>;
+    ports: ReadonlyMap<string, RuntimePort>;
+    state<T = unknown>(portId: string): StatePort<T>;
+    edge(portId: string): EdgePort;
+    interface(portId: string): InterfacePort;
+    constructor(portId: string): ConstructorPort;
+};
+export type RuntimeSession = {
+    id: string;
+    run<T>(work: (context: RuntimeContext) => Promise<T>): Promise<T>;
+    /** Close the external resource first, then close its host retention/session. */
+    close(): Promise<void>;
+};
+export declare class RuntimeAuthorityError extends Error {
+    readonly retryable: boolean;
+    constructor(message: string);
+}
+export declare const createRuntimeContext: (camino: CaminoClient, orch: OrchClient, request: RuntimeRequest) => RuntimeContext;
+export type RuntimeHandler = (context: RuntimeContext) => unknown | Promise<unknown>;
+export type DerivedHandler = {
+    kind: "derived";
+    get: RuntimeHandler;
+};
+export declare const derived: (get: RuntimeHandler) => DerivedHandler;
+export declare const createPackageRuntimeRoutes: (config: {
+    packageRevisionId: string;
+    exports: Record<string, RuntimeHandler | DerivedHandler>;
+    caminoUrl?: string;
+    orchUrl?: string;
+}) => (router: ConnectRouter) => ConnectRouter;
+export declare const servePackageRuntime: (config: {
+    packageRevisionId: string;
+    exports: Record<string, RuntimeHandler | DerivedHandler>;
+}) => http.Server<typeof http.IncomingMessage, typeof http.ServerResponse>;
+type RuntimeRequest = {
+    objectId: string;
+    input: Record<string, Value>;
+    dependencies: import("./quixos/refs_pb.js").InjectedDependency[];
+};
+//# sourceMappingURL=index.d.ts.map

dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B,OAAO,EAA8E,KAAK,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC/H,cAAc,eAAe,CAAC;AAC9B,OAAO,EAAC,eAAe,EAAE,gBAAgB,EAAE,eAAe,EAAC,MAAM,oBAAoB,CAAC;AAGtF,OAAO,EAAC,sBAAsB,EAAE,iBAAiB,EAAE,cAAc,EAAE,KAAK,gBAAgB,EAAE,KAAK,cAAc,EAAE,KAAK,eAAe,EAAE,KAAK,aAAa,EAAC,MAAM,gBAAgB,CAAC;AAE/K,OAAO,EAAoC,KAAK,MAAM,EAAE,KAAK,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAExG,OAAO,EACL,aAAa,EAOb,KAAK,KAAK,EACX,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAU1D,MAAM,MAAM,YAAY,GAAG,MAAM,CAAC,OAAO,aAAa,CAAC,CAAC;AACxD,MAAM,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAE5D,MAAM,MAAM,iBAAiB,GACzB;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GACzD;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,CAAC;AA+BnF,eAAO,MAAM,SAAS,cAAe,WAAW,wBAAsD,CAAC;AACvG,eAAO,MAAM,SAAS,UAAW,KAAK;IAAQ,YAAY;CAAU,CAAC;AAErE,eAAO,MAAM,cAAc,UAAW,OAAO,KAAG,KAiC/C,CAAC;AAEF,eAAO,MAAM,cAAc,UAAW,KAAK,GAAG,SAAS,KAAG,OAoBzD,CAAC;AAEF,eAAO,MAAM,eAAe,WAAY,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC;;CACmC,CAAC;AAEjG,MAAM,MAAM,SAAS,CAAC,CAAC,GAAG,OAAO,IAAI;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC;IAClB,IAAI,IAAI,OAAO,CAAC,UAAU,CAAC,OAAO,SAAS,CAAC,CAAC,CAAC;IAC9C,GAAG,CAAC,KAAK,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9B,CAAC;AACF,MAAM,MAAM,QAAQ,GAAG;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IAClC,OAAO,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5C,UAAU,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/C,UAAU,IAAI,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAC9C,OAAO,CAAC,OAAO,EAAE,iBAAiB,EAAE,EAAE,gBAAgB,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;CAClG,CAAC;AACF,MAAM,MAAM,iBAAiB,CAAC,CAAC,SAAS,WAAW,GAAG,WAAW,IAAI;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,CAAC,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,MAAM,CAAA;CAAC,CAAC;AACnI,MAAM,MAAM,sBAAsB,CAAC,CAAC,SAAS,WAAW,GAAG,WAAW,IAAI;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC,CAAC,EAAE,CAAA;CAAC,CAAC;AAC9H,MAAM,MAAM,aAAa,GAAG;IAC1B,QAAQ,EAAE,WAAW,CAAC;IACtB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/E,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,SAAS,CAAC,CAAC,CAAC;CACnG,CAAC;AACF,MAAM,MAAM,eAAe,GAAG;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;CAClE,CAAC;AACF,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,QAAQ,GAAG,aAAa,GAAG,eAAe,CAAC;AAEjF,MAAM,MAAM,cAAc,GAAG;IAC3B,2FAA2F;IAC3F,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,OAAO,CAAC,cAAc,CAAC,CAAC;IAC5C,QAAQ,EAAE,WAAW,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAClC,KAAK,EAAE,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACxC,KAAK,CAAC,CAAC,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;IACjD,IAAI,CAAC,MAAM,EAAE,MAAM,GAAG,QAAQ,CAAC;IAC/B,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,aAAa,CAAC;IACzC,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,eAAe,CAAC;CAC9C,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE,cAAc,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAClE,gFAAgF;IAChF,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB,CAAC;AACF,qBAAa,qBAAsB,SAAQ,KAAK;IAC9C,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,YAAY,OAAO,EAAE,MAAM,EAAyH;CACrJ;AAOD,eAAO,MAAM,oBAAoB,WACvB,YAAY,QACd,UAAU,WACP,cAAc,KACtB,cA8IF,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,EAAE,cAAc,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;AACrF,MAAM,MAAM,cAAc,GAAG;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,GAAG,EAAE,cAAc,CAAA;CAAE,CAAC;AACtE,eAAO,MAAM,OAAO,QAAS,cAAc,KAAG,cAA4C,CAAC;AAyB3F,eAAO,MAAM,0BAA0B,WAAY;IACjD,iBAAiB,EAAE,MAAM,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,GAAG,cAAc,CAAC,CAAC;IACzD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,cA8FiB,aAAa,kBA2L9B,CAAC;AAEF,eAAO,MAAM,mBAAmB,WAAY;IAC1C,iBAAiB,EAAE,MAAM,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,GAAG,cAAc,CAAC,CAAC;CAC1D,yEAaA,CAAC;AACF,KAAK,cAAc,GAAG;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC7B,YAAY,EAAE,OAAO,qBAAqB,EAAE,kBAAkB,EAAE,CAAC;CAClE,CAAC"}

dist/index.js

@@ -0,0 +1,566 @@
+import http from "node:http";
+import { readFileSync } from "node:fs";
+import { createInvocationRegistry } from "./invocations.js";
+import { isObjectReference, referenceFromWire, referenceToWire, assertReferenceFree } from "./references.js";
+export * from "./bindings.js";
+export { relationshipMap, relationshipList, relationshipSet } from "./relationships.js";
+import { AsyncLocalStorage } from "node:async_hooks";
+import { createHmac, randomBytes, randomUUID, timingSafeEqual } from "node:crypto";
+export { createMigrationContext, migrationObjectId, serveMigration } from "./migration.js";
+import { create, equals } from "@bufbuild/protobuf";
+import { Code, ConnectError, createClient } from "@connectrpc/connect";
+import { connectNodeAdapter, createConnectTransport } from "@connectrpc/connect-node";
+import { CaminoService, CrdtValueSchema, ListValueSchema, NullValueSchema, ObjectValueSchema, RefValueSchema, ValueSchema, } from "./camino/api_pb.js";
+import { OrchestratorRuntime } from "./quixos/orch_pb.js";
+import { DerivedDependencySchema, HandshakeResponseSchema, InvokeResponseSchema, PackageRuntime, WatchEventSchema, } from "./quixos/runtime_pb.js";
+import { CapabilityRefSchema } from "./quixos/refs_pb.js";
+const dependencyKey = (dependency) => `${dependency.kind}:${dependency.objectId}:${dependency.attachmentId}:${dependency.kind === "edge" ? dependency.projectionId : ""}`;
+const dependencyScope = new AsyncLocalStorage();
+const recordDependency = async (dependency) => {
+    const scope = dependencyScope.getStore();
+    if (!scope)
+        return;
+    const key = `${dependency.kind}:${dependency.objectId}:${dependency.attachmentId}:${dependency.kind === "edge" ? dependency.projectionId : ""}`;
+    scope.dependencies.set(key, dependency);
+    await scope.observe?.(dependency);
+};
+const bytesToBase64 = (value) => Buffer.from(value).toString("base64");
+const base64ToBytes = (value) => Buffer.from(value, "base64");
+const isRecord = (value) => Boolean(value) && typeof value === "object" && !Array.isArray(value);
+const isWrappedValue = (value) => isRecord(value) && "$quixosValue" in value &&
+    isRecord(value.$quixosValue) && value.$quixosValue.$typeName === "camino.Value";
+export const objectRef = (reference) => { referenceToWire(reference); return reference; };
+export const liveValue = (value) => ({ $quixosValue: value });
+export const jsToProtoValue = (value) => {
+    if (isObjectReference(value))
+        return create(ValueSchema, { kind: { case: "refValue", value: create(RefValueSchema, { objectId: referenceToWire(value) }) } });
+    if (isWrappedValue(value))
+        return value.$quixosValue;
+    if (value === null || value === undefined) {
+        return create(ValueSchema, { kind: { case: "nullValue", value: create(NullValueSchema, {}) } });
+    }
+    if (typeof value === "boolean")
+        return create(ValueSchema, { kind: { case: "boolValue", value } });
+    if (typeof value === "number")
+        return create(ValueSchema, { kind: { case: "numberValue", value } });
+    if (typeof value === "bigint")
+        return create(ValueSchema, { kind: { case: "integerValue", value: String(value) } });
+    if (typeof value === "string")
+        return create(ValueSchema, { kind: { case: "stringValue", value } });
+    if (value instanceof Uint8Array)
+        return create(ValueSchema, { kind: { case: "bytesValue", value } });
+    if (Array.isArray(value)) {
+        return create(ValueSchema, {
+            kind: { case: "listValue", value: create(ListValueSchema, { values: value.map(jsToProtoValue) }) },
+        });
+    }
+    if (isRecord(value) && "$quixosRef" in value)
+        throw new Error("Raw ID wrappers are not object references");
+    if (isRecord(value) && typeof value.$quixosCrdtType === "string" &&
+        typeof value.$quixosCrdtPayload === "string") {
+        return create(ValueSchema, {
+            kind: { case: "crdtValue", value: create(CrdtValueSchema, {
+                    type: value.$quixosCrdtType,
+                    encoding: typeof value.$quixosCrdtEncoding === "string" ? value.$quixosCrdtEncoding : "base64",
+                    payload: base64ToBytes(value.$quixosCrdtPayload),
+                }) },
+        });
+    }
+    if (!isRecord(value))
+        throw new Error(`Unsupported runtime value ${typeof value}`);
+    return create(ValueSchema, {
+        kind: { case: "objectValue", value: create(ObjectValueSchema, {
+                fields: Object.fromEntries(Object.entries(value).map(([key, entry]) => [key, jsToProtoValue(entry)])),
+            }) },
+    });
+};
+export const protoValueToJs = (value) => {
+    switch (value?.kind.case) {
+        case "nullValue":
+        case undefined: return null;
+        case "boolValue":
+        case "numberValue":
+        case "stringValue":
+        case "integerValue": return value.kind.value;
+        case "bytesValue": return bytesToBase64(value.kind.value);
+        case "refValue": return referenceFromWire(value.kind.value.objectId);
+        case "listValue": return value.kind.value.values.map(protoValueToJs);
+        case "objectValue": return Object.fromEntries(Object.entries(value.kind.value.fields).map(([key, entry]) => [key, protoValueToJs(entry)]));
+        case "crdtValue": return {
+            $quixosCrdtType: value.kind.value.type,
+            $quixosCrdtEncoding: value.kind.value.encoding,
+            $quixosCrdtPayload: bytesToBase64(value.kind.value.payload),
+        };
+    }
+};
+export const protoFieldsToJs = (fields) => Object.fromEntries(Object.entries(fields).map(([key, value]) => [key, protoValueToJs(value)]));
+export class RuntimeAuthorityError extends Error {
+    retryable;
+    constructor(message) { super(message); this.name = "RuntimeAuthorityError"; this.retryable = /WORKSPACE_FENCED|STALE_EPOCH/.test(message); }
+}
+const targetForEdge = (edge, projectionId) => edge.firstProjectionId === projectionId ? edge.secondObjectId : edge.firstObjectId;
+export const createRuntimeContext = (camino, orch, request) => {
+    const ports = new Map();
+    for (const dependency of request.dependencies) {
+        switch (dependency.binding.case) {
+            case "stateSlotId": {
+                const slotId = dependency.binding.value;
+                const dependencyObjectId = dependency.objectId || request.objectId;
+                const state = {
+                    slotId,
+                    async get() {
+                        await recordDependency({ kind: "state", objectId: dependencyObjectId, attachmentId: slotId });
+                        return protoValueToJs((await camino.readState({ objectId: dependencyObjectId, slotId })).value);
+                    },
+                    async live() {
+                        await recordDependency({ kind: "state", objectId: dependencyObjectId, attachmentId: slotId });
+                        const value = await camino.readState({ objectId: dependencyObjectId, slotId });
+                        if (!value.value)
+                            throw new Error(`State ${slotId} returned no value`);
+                        return liveValue(value.value);
+                    },
+                    async set(value) {
+                        assertReferenceFree(isWrappedValue(value) ? protoValueToJs(value.$quixosValue) : value);
+                        await camino.writeState({ objectId: dependencyObjectId, slotId, value: jsToProtoValue(value) });
+                    },
+                };
+                ports.set(dependency.portId, state);
+                break;
+            }
+            case "edge": {
+                const { edgeTypeId, projectionId } = dependency.binding.value;
+                const dependencyObjectId = dependency.objectId || request.objectId;
+                const collectionResult = (response) => ({ revision: response.revision,
+                    entries: response.entries.map((entry) => ({ edgeId: entry.edgeId, target: referenceFromWire(entry.targetObjectId),
+                        ...(entry.key ? { key: entry.key.kind.case === "integerValue" ? BigInt(entry.key.kind.value) : protoValueToJs(entry.key) } : {}) })) });
+                const edge = {
+                    edgeTypeId,
+                    projectionId,
+                    async collection() {
+                        await recordDependency({ kind: "edge", objectId: dependencyObjectId, attachmentId: edgeTypeId, projectionId });
+                        return collectionResult(await camino.readCollection({ objectId: dependencyObjectId, edgeTypeId, projectionId }));
+                    },
+                    async replace(entries, expectedRevision) {
+                        return collectionResult(await camino.replaceCollection({ objectId: dependencyObjectId, edgeTypeId, projectionId, expectedRevision,
+                            entries: entries.map((entry) => {
+                                assertReferenceFree(entry.key);
+                                return { edgeId: entry.edgeId ?? "", targetObjectId: referenceToWire(entry.target), key: entry.key === undefined ? undefined : jsToProtoValue(entry.key) };
+                            }) }));
+                    },
+                    async resolve() {
+                        await recordDependency({ kind: "edge", objectId: dependencyObjectId, attachmentId: edgeTypeId, projectionId });
+                        const result = await camino.resolveEdge({ objectId: dependencyObjectId, edgeTypeId, projectionId });
+                        return result.edges.map((entry) => referenceFromWire(targetForEdge(entry, projectionId)));
+                    },
+                    async connect(target) {
+                        const targetObjectId = referenceToWire(target);
+                        await camino.connectEdge({ objectId: dependencyObjectId, edgeTypeId, projectionId, targetObjectId });
+                    },
+                    async disconnect(target) {
+                        const targetObjectId = referenceToWire(target);
+                        const result = await camino.resolveEdge({ objectId: dependencyObjectId, edgeTypeId, projectionId });
+                        for (const entry of result.edges) {
+                            if (targetForEdge(entry, projectionId) === targetObjectId)
+                                await camino.disconnectEdge({ edgeId: entry.id });
+                        }
+                    },
+                };
+                ports.set(dependency.portId, edge);
+                break;
+            }
+            case "interfaceRevisionId": {
+                const interfaceRevisionId = dependency.binding.value;
+                const dependencyObjectId = dependency.objectId || request.objectId;
+                const invoke = async (operationId, input) => {
+                    const response = await orch.invokeCapability({
+                        capability: create(CapabilityRefSchema, { interfaceRevisionId, operationId }),
+                        objectId: dependencyObjectId,
+                        input: Object.fromEntries(Object.entries(input).map(([key, value]) => [key, jsToProtoValue(value)])),
+                    });
+                    if (!response.ok)
+                        throw new Error(response.error || `Capability ${operationId} failed`);
+                    for (const dependency of response.dependencies) {
+                        if (dependency.kind === "state") {
+                            await recordDependency({
+                                kind: "state",
+                                objectId: dependency.objectId,
+                                attachmentId: dependency.attachmentId,
+                            });
+                        }
+                        else if (dependency.kind === "edge") {
+                            await recordDependency({
+                                kind: "edge",
+                                objectId: dependency.objectId,
+                                attachmentId: dependency.attachmentId,
+                                projectionId: dependency.projectionId,
+                            });
+                        }
+                    }
+                    return response.result;
+                };
+                const capability = {
+                    objectId: referenceFromWire(dependencyObjectId),
+                    interfaceRevisionId,
+                    async invoke(operationId, input = {}) {
+                        return protoValueToJs(await invoke(operationId, input));
+                    },
+                    async live(operationId, input = {}) {
+                        const value = await invoke(operationId, input);
+                        if (!value)
+                            throw new Error(`Capability ${operationId} returned no value`);
+                        return liveValue(value);
+                    },
+                };
+                ports.set(dependency.portId, capability);
+                break;
+            }
+            case "constructorAtomId": {
+                const atomId = dependency.binding.value;
+                const constructor = {
+                    atomId,
+                    async construct(input = {}) {
+                        const response = await orch.constructObject({
+                            atomId,
+                            input: Object.fromEntries(Object.entries(input).map(([key, value]) => [key, jsToProtoValue(value)])),
+                        });
+                        if (!response.object)
+                            throw new Error(`Constructor ${atomId} returned no object`);
+                        return referenceFromWire(response.object.id);
+                    },
+                };
+                ports.set(dependency.portId, constructor);
+            }
+        }
+    }
+    const requirePort = (portId, kind) => {
+        const port = ports.get(portId);
+        if (!port || !(kind in port))
+            throw new Error(`Missing ${kind} dependency port ${portId}`);
+        return port;
+    };
+    return {
+        objectId: referenceFromWire(request.objectId),
+        input: protoFieldsToJs(request.input),
+        inputProto: request.input,
+        ports,
+        state: (portId) => requirePort(portId, "slotId"),
+        edge: (portId) => requirePort(portId, "edgeTypeId"),
+        interface: (portId) => requirePort(portId, "interfaceRevisionId"),
+        constructor: (portId) => requirePort(portId, "atomId"),
+    };
+};
+export const derived = (get) => ({ kind: "derived", get });
+const isDerived = (handler) => typeof handler === "object" && handler.kind === "derived";
+const evaluate = async (handler, context, observe) => {
+    const dependencies = new Map();
+    const result = await dependencyScope.run({ dependencies, observe }, () => isDerived(handler) ? handler.get(context) : handler(context));
+    return { value: jsToProtoValue(result), dependencies: [...dependencies.values()] };
+};
+const protoDependencies = (dependencies) => dependencies.map((entry) => create(DerivedDependencySchema, {
+    kind: entry.kind,
+    objectId: entry.objectId,
+    attachmentId: entry.attachmentId,
+    projectionId: entry.kind === "edge" ? entry.projectionId : "",
+}));
+export const createPackageRuntimeRoutes = (config) => {
+    const invocations = createInvocationRegistry();
+    const headers = {};
+    const processToken = process.env.CAMINO_RUNTIME_AUTH_TOKEN ?? (process.env.CAMINO_RUNTIME_AUTH_TOKEN_FILE
+        ? readFileSync(process.env.CAMINO_RUNTIME_AUTH_TOKEN_FILE, "utf8").trim() : "");
+    if (processToken) {
+        headers["x-camino-runtime-token"] = processToken;
+    }
+    else if (process.env.CAMINO_RUNTIME_AUTH_REQUIRED === "1") {
+        throw new Error("CAMINO_RUNTIME_AUTH_TOKEN is required");
+    }
+    const camino = createClient(CaminoService, createConnectTransport({
+        baseUrl: config.caminoUrl ?? process.env.CAMINO_URL ?? "http://127.0.0.1:7310",
+        httpVersion: "1.1",
+        interceptors: headers["x-camino-runtime-token"] ? [
+            (next) => async (request) => {
+                request.header.set("x-camino-runtime-token", headers["x-camino-runtime-token"]);
+                return await next(request);
+            },
+        ] : [],
+    }));
+    const orch = createClient(OrchestratorRuntime, createConnectTransport({
+        baseUrl: config.orchUrl ?? process.env.QUIXOS_ORCH_URL ?? "http://127.0.0.1:7311",
+        httpVersion: "1.1",
+    }));
+    const authenticateInstance = (header) => {
+        if (!process.env.QUIXOS_RUNTIME_INSTANCE_ID)
+            return; // standalone development ABI
+        const supplied = Buffer.from(header.get("x-quixos-instance-token") ?? "");
+        const expected = Buffer.from(processToken);
+        if (!expected.length || supplied.length !== expected.length || !timingSafeEqual(supplied, expected)) {
+            throw new ConnectError("Invalid runtime instance credential", Code.Unauthenticated);
+        }
+    };
+    const clientsFor = (request) => {
+        const context = request.context;
+        if (process.env.QUIXOS_RUNTIME_INSTANCE_ID && (!context?.grant || context.instanceId !== process.env.QUIXOS_RUNTIME_INSTANCE_ID || !context.workspaceEpoch)) {
+            throw new ConnectError("Managed invocation requires an exact instance and epoch grant", Code.Unauthenticated);
+        }
+        if (!context?.grant)
+            return { camino, orch };
+        const transport = (url) => createConnectTransport({ baseUrl: url, httpVersion: "1.1", interceptors: [(next) => async (call) => {
+                    call.header.set("x-quixos-invocation-grant", context.grant);
+                    call.header.set("x-camino-runtime-token", processToken);
+                    return next(call);
+                }] });
+        return {
+            camino: createClient(CaminoService, transport(config.caminoUrl ?? process.env.CAMINO_URL ?? "http://127.0.0.1:7310")),
+            orch: createClient(OrchestratorRuntime, transport(config.orchUrl ?? process.env.QUIXOS_ORCH_URL ?? "http://127.0.0.1:7311")),
+        };
+    };
+    const runtimeControl = async (operation, input) => {
+        const response = await fetch(`${config.caminoUrl ?? process.env.CAMINO_URL ?? "http://127.0.0.1:7310"}/__runtime/${operation}`, {
+            method: "POST", headers: { "content-type": "application/json", "x-camino-runtime-token": processToken }, body: JSON.stringify(input), signal: AbortSignal.timeout(10_000),
+        });
+        const value = await response.json();
+        if (!response.ok)
+            throw new RuntimeAuthorityError(value.error ?? "Runtime authority request failed");
+        return value;
+    };
+    const attachSessions = (runtimeContext, request) => {
+        if (!request.context?.grant || !request.context.ownerConformanceId)
+            return;
+        runtimeContext.openSession = async () => {
+            const ownerId = request.context.ownerConformanceId;
+            const registration = { grant: request.context.grant, objectId: request.objectId, ownerId,
+                sessionId: `session:${randomBytes(16).toString("hex")}`, token: randomBytes(32).toString("base64url") };
+            const register = () => runtimeControl("register-session", registration);
+            const registered = await register().catch((error) => {
+                // Retry a transport/lost-response failure with exactly the same identity.
+                // Admission/authority errors are definitive and must not be retried here.
+                if (error instanceof RuntimeAuthorityError)
+                    throw error;
+                return register();
+            });
+            let closed = false;
+            return {
+                id: registered.sessionId,
+                async run(work) {
+                    if (closed)
+                        throw new RuntimeAuthorityError("SESSION_CLOSED");
+                    // Acquisition happens before user code. A fence failure can be retried
+                    // by the caller without replaying a side-effecting callback.
+                    const grant = await runtimeControl("acquire-session", registered);
+                    const execution = invocations.begin(grant.invocationId);
+                    const sessionRequest = { ...request, context: { grant: grant.grant, instanceId: grant.instanceId, workspaceEpoch: grant.epoch } };
+                    const clients = clientsFor(sessionRequest);
+                    const context = createRuntimeContext(clients.camino, clients.orch, sessionRequest);
+                    context.signal = execution.signal;
+                    try {
+                        return await work(context);
+                    }
+                    finally {
+                        execution.finish();
+                        await runtimeControl("complete-invocation", { invocationId: grant.invocationId }).catch((error) => console.error("Session completion will be reconciled by the host", error));
+                    }
+                },
+                async close() { await runtimeControl("close-session", registered); closed = true; },
+            };
+        };
+    };
+    return (router) => router.service(PackageRuntime, {
+        handshake: (request) => create(HandshakeResponseSchema, {
+            packageRevisionId: config.packageRevisionId,
+            runtimeProtocolVersion: "quixos-capabilities-v1",
+            exportIds: Object.keys(config.exports),
+            capabilities: ["invocation-completion-v1", "instance-authentication-v1", "epoch-grants-v1"],
+            instanceId: process.env.QUIXOS_RUNTIME_INSTANCE_ID ?? "",
+            authenticationProof: request.nonce && processToken ? createHmac("sha256", processToken)
+                .update(JSON.stringify([request.nonce, process.env.QUIXOS_RUNTIME_INSTANCE_ID ?? "", config.packageRevisionId]))
+                .digest("hex") : "",
+        }),
+        getInvocationStatus: (request, context) => {
+            authenticateInstance(context.requestHeader);
+            return invocations.status(request.invocationId);
+        },
+        cancelInvocation: (request, context) => {
+            authenticateInstance(context.requestHeader);
+            return invocations.cancel(request.invocationId);
+        },
+        invoke: async (request, context) => {
+            authenticateInstance(context.requestHeader);
+            const { camino, orch } = clientsFor(request);
+            const exportId = request.export?.exportId;
+            const handler = exportId ? config.exports[exportId] : undefined;
+            if (!handler)
+                throw new ConnectError(`Unknown export ${exportId ?? ""}`, Code.NotFound);
+            const execution = invocations.begin(request.invocationId || (process.env.QUIXOS_RUNTIME_INSTANCE_ID ? "" : randomUUID()));
+            try {
+                const runtimeContext = createRuntimeContext(camino, orch, request);
+                attachSessions(runtimeContext, request);
+                runtimeContext.signal = AbortSignal.any([context.signal, execution.signal]);
+                const result = await evaluate(handler, runtimeContext);
+                execution.finish();
+                return create(InvokeResponseSchema, {
+                    ok: true,
+                    result: result.value,
+                    dependencies: protoDependencies(result.dependencies),
+                });
+            }
+            catch (error) {
+                execution.finish(true);
+                return create(InvokeResponseSchema, {
+                    ok: false,
+                    error: error instanceof Error ? error.message : String(error),
+                });
+            }
+        },
+        watch: async function* (request, context) {
+            authenticateInstance(context.requestHeader);
+            const { camino, orch } = clientsFor(request);
+            const exportId = request.export?.exportId;
+            const handler = exportId ? config.exports[exportId] : undefined;
+            if (!handler || !isDerived(handler)) {
+                throw new ConnectError(`Export ${exportId ?? ""} is not derived`, Code.FailedPrecondition);
+            }
+            const execution = invocations.begin(request.invocationId || (process.env.QUIXOS_RUNTIME_INSTANCE_ID ? "" : randomUUID()));
+            const signal = AbortSignal.any([context.signal, execution.signal]);
+            try {
+                const watchId = `watch:${randomUUID()}`;
+                const runtimeContext = createRuntimeContext(camino, orch, request);
+                attachSessions(runtimeContext, request);
+                runtimeContext.signal = signal;
+                const subscriptions = new Map();
+                const establishing = new Map();
+                let subscriptionEpoch = 0;
+                const ensureSubscription = async (dependency) => {
+                    const key = dependencyKey(dependency);
+                    if (subscriptions.has(key))
+                        return;
+                    const pending = establishing.get(key);
+                    if (pending)
+                        return await pending;
+                    const establish = (async () => {
+                        const controller = new AbortController();
+                        const stream = camino.watchObject({ objectId: dependency.objectId, includeSnapshot: true, attachmentIds: request.context?.grant ? [dependency.attachmentId] : [] }, { signal: controller.signal })[Symbol.asyncIterator]();
+                        try {
+                            // Camino subscribes before producing the snapshot, so once this
+                            // resolves the following state/edge read cannot race the stream.
+                            const snapshot = await stream.next();
+                            if (snapshot.done)
+                                throw new Error(`Dependency stream ${key} ended during setup`);
+                            const waitNext = () => stream.next().then((result) => ({ key, done: Boolean(result.done) }), (error) => ({ key, done: true, error }));
+                            const subscription = {
+                                dependency,
+                                controller,
+                                waitNext,
+                                next: Promise.resolve({ key, done: false }),
+                            };
+                            subscription.next = waitNext();
+                            subscriptions.set(key, subscription);
+                            subscriptionEpoch += 1;
+                        }
+                        catch (error) {
+                            controller.abort();
+                            throw error;
+                        }
+                    })();
+                    establishing.set(key, establish);
+                    try {
+                        await establish;
+                    }
+                    finally {
+                        establishing.delete(key);
+                    }
+                };
+                const abortAll = () => {
+                    for (const subscription of subscriptions.values()) {
+                        subscription.controller.abort();
+                    }
+                };
+                signal.addEventListener("abort", abortAll, { once: true });
+                const evaluateWithStableSubscriptions = async () => {
+                    // A direct state/edge port records its dependency before reading it,
+                    // but a nested interface invocation can only report its transitive
+                    // dependencies after that invocation returns. Once a new dependency
+                    // stream is established, evaluate again so every read contributing to
+                    // the emitted value happened after its stream became live.
+                    for (let pass = 0; pass < 32; pass += 1) {
+                        const before = subscriptionEpoch;
+                        const result = await evaluate(handler, runtimeContext, ensureSubscription);
+                        if (subscriptionEpoch === before)
+                            return result;
+                    }
+                    throw new Error("Derived dependency discovery did not stabilize after 32 passes");
+                };
+                try {
+                    let current = await evaluateWithStableSubscriptions();
+                    yield create(WatchEventSchema, {
+                        watchId,
+                        value: current.value,
+                        dependencies: protoDependencies(current.dependencies),
+                        initial: true,
+                    });
+                    const abort = new Promise((resolve) => {
+                        if (signal.aborted)
+                            resolve("abort");
+                        else
+                            signal.addEventListener("abort", () => resolve("abort"), { once: true });
+                    });
+                    while (!signal.aborted) {
+                        if (subscriptions.size === 0) {
+                            await abort;
+                            break;
+                        }
+                        const outcome = await Promise.race([
+                            ...[...subscriptions.values()].map((entry) => entry.next),
+                            abort,
+                        ]);
+                        if (outcome === "abort")
+                            break;
+                        const subscription = subscriptions.get(outcome.key);
+                        if (!subscription)
+                            continue;
+                        if (outcome.error)
+                            throw outcome.error;
+                        if (outcome.done)
+                            throw new Error(`Dependency stream ${outcome.key} ended unexpectedly`);
+                        subscription.next = subscription.waitNext();
+                        const updated = await evaluateWithStableSubscriptions();
+                        const active = new Set(updated.dependencies.map(dependencyKey));
+                        for (const [key, entry] of subscriptions) {
+                            if (!active.has(key)) {
+                                entry.controller.abort();
+                                subscriptions.delete(key);
+                            }
+                        }
+                        if (!equals(ValueSchema, current.value, updated.value)) {
+                            yield create(WatchEventSchema, {
+                                watchId,
+                                value: updated.value,
+                                dependencies: protoDependencies(updated.dependencies),
+                            });
+                        }
+                        current = updated;
+                    }
+                }
+                finally {
+                    signal.removeEventListener("abort", abortAll);
+                    abortAll();
+                }
+            }
+            finally {
+                execution.finish();
+            }
+        },
+    });
+};
+export const servePackageRuntime = (config) => {
+    const host = process.env.QUIXOS_RUNTIME_HOST ?? "127.0.0.1";
+    const port = Number(process.env.QUIXOS_RUNTIME_PORT ?? "0");
+    const handler = connectNodeAdapter({ routes: createPackageRuntimeRoutes(config) });
+    const server = http.createServer((request, response) => void handler(request, response));
+    server.listen(port, host, () => console.log(`${config.packageRevisionId} listening on ${host}:${port}`));
+    const shutdown = () => {
+        server.close(() => process.exit(0));
+        server.closeAllConnections();
+    };
+    process.on("SIGTERM", shutdown);
+    process.on("SIGINT", shutdown);
+    return server;
+};

dist/invocations.d.ts

@@ -0,0 +1,16 @@
+/** Execution completion, not HTTP disconnection, is the drain boundary. */
+export declare const createInvocationRegistry: () => {
+    begin(id: string): {
+        signal: AbortSignal;
+        finish(failed?: boolean): void;
+    };
+    status(id: string): {
+        invocationId: string;
+        state: string;
+    };
+    cancel(id: string): {
+        invocationId: string;
+        state: string;
+    };
+};
+//# sourceMappingURL=invocations.d.ts.map

dist/invocations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"invocations.d.ts","sourceRoot":"","sources":["../src/invocations.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,eAAO,MAAM,wBAAwB;IAGjC,KAAK,KAAK,MAAM;QAOL,MAAM;QAA2B,MAAM;;IAElD,MAAM,KAAK,MAAM;QAAa,YAAY;QAAM,KAAK;;IACrD,MAAM,KAAK,MAAM;;;;CASpB,CAAC"}

dist/invocations.js

@@ -0,0 +1,26 @@
+/** Execution completion, not HTTP disconnection, is the drain boundary. */
+export const createInvocationRegistry = () => {
+    const entries = new Map();
+    return {
+        begin(id) {
+            if (!id || entries.has(id))
+                throw new Error("Invocation ID is missing or already used; invocations are never replayed implicitly");
+            // Completed identities remain until process retirement. A bounded process
+            // may reject new work; it must not evict and accidentally replay a call.
+            if (entries.size >= 100_000)
+                throw new Error("Invocation registry full; explicit runtime retirement required");
+            const entry = { state: "running", controller: new AbortController() };
+            entries.set(id, entry);
+            return { signal: entry.controller.signal, finish(failed = false) { entry.state = failed ? "failed" : "completed"; } };
+        },
+        status(id) { return { invocationId: id, state: entries.get(id)?.state ?? "unknown" }; },
+        cancel(id) {
+            const entry = entries.get(id);
+            if (entry && ["running", "cancellation-requested"].includes(entry.state)) {
+                entry.state = "cancellation-requested";
+                entry.controller.abort();
+            }
+            return this.status(id);
+        },
+    };
+};

dist/migration.d.ts

@@ -0,0 +1,72 @@
+export type MigrationInput = {
+    schemaVersion: 1;
+    executionId: string;
+    exportId: string;
+    ports: {
+        name: string;
+        binding: string;
+        view: "old" | "new";
+        access: ("read" | "write" | "create" | "edge")[];
+        atomId?: string;
+        attachedAtomId?: string;
+        defaultValue?: unknown;
+        states?: {
+            objectId: string;
+            value: unknown;
+        }[];
+        edges?: MigrationEdge[];
+    }[];
+};
+export type MigrationEdge = {
+    id: string;
+    edgeTypeId: string;
+    firstObjectId: string;
+    secondObjectId: string;
+    firstProjectionId: string;
+    secondProjectionId: string;
+    firstOrdinal?: number;
+    secondOrdinal?: number;
+    firstKeyJson?: string;
+    secondKeyJson?: string;
+};
+export type MigrationOutput = {
+    schemaVersion: 1;
+    executionId: string;
+    writes: {
+        port: string;
+        objectId: string;
+        value: unknown;
+    }[];
+    creates: {
+        port: string;
+        logicalKey: string;
+        objectId: string;
+    }[];
+    edgeReplacements: {
+        port: string;
+        edges: MigrationEdge[];
+    }[];
+};
+export type MigrationContext = {
+    enumerate(port: string): {
+        objectId: string;
+        value: unknown;
+    }[];
+    read(port: string, objectId: string): unknown;
+    write(port: string, objectId: string, value: unknown): void;
+    create(port: string, logicalKey: string): string;
+    edges(port: string): MigrationEdge[];
+    replaceEdges(port: string, edges: MigrationEdge[]): void;
+};
+export declare const migrationObjectId: (executionId: string, port: string, logicalKey: string) => string;
+/** No ordinary RuntimeContext or network/database clients are supplied here.
+ * Process isolation belongs to the host, not this convenience API. */
+export declare const createMigrationContext: (input: MigrationInput) => {
+    context: MigrationContext;
+    result: () => MigrationOutput;
+};
+/** Entrypoint for an immutable package's dedicated bin/migrate executable.
+ * stdout is protocol-only; send diagnostics to stderr. The host independently
+ * validates every write, helper identity, contract, and completion receipt. */
+export declare const serveMigration: (exports: Record<string, (context: MigrationContext) => void | Promise<void>>) => Promise<void>;
+//# sourceMappingURL=migration.d.ts.map

dist/migration.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"migration.d.ts","sourceRoot":"","sources":["../src/migration.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,cAAc,GAAG;IAC3B,aAAa,EAAE,CAAC,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IACxD,KAAK,EAAE;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,KAAK,GAAG,KAAK,CAAC;QAAC,MAAM,EAAE,CAAC,MAAM,GAAG,OAAO,GAAG,QAAQ,GAAG,MAAM,CAAC,EAAE,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAC5H,cAAc,CAAC,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,OAAO,CAAC;QAChD,MAAM,CAAC,EAAE;YAAC,QAAQ,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,OAAO,CAAA;SAAC,EAAE,CAAC;QAAC,KAAK,CAAC,EAAE,aAAa,EAAE,CAAA;KAAC,EAAE,CAAC;CAC7E,CAAC;AACF,MAAM,MAAM,aAAa,GAAG;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAAC,iBAAiB,EAAE,MAAM,CAAC;IAAC,kBAAkB,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,CAAA;CAAC,CAAC;AACjQ,MAAM,MAAM,eAAe,GAAG;IAAC,aAAa,EAAE,CAAC,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IACnE,MAAM,EAAE;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,OAAO,CAAA;KAAC,EAAE,CAAC;IAC3D,OAAO,EAAE;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAC,EAAE,CAAC;IAChE,gBAAgB,EAAE;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,aAAa,EAAE,CAAA;KAAC,EAAE,CAAA;CAAC,CAAC;AAC9D,MAAM,MAAM,gBAAgB,GAAG;IAC7B,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,OAAO,CAAA;KAAC,EAAE,CAAC;IAC9D,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;IAC9C,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,IAAI,CAAC;IAC5D,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAAC;IACjD,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,aAAa,EAAE,CAAC;IACrC,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,GAAG,IAAI,CAAC;CAC1D,CAAC;AACF,eAAO,MAAM,iBAAiB,gBAAiB,MAAM,QAAQ,MAAM,cAAc,MAAM,WACwB,CAAC;AAEhH;sEACsE;AACtE,eAAO,MAAM,sBAAsB,UAAW,cAAc;;;CAgD3D,CAAC;AAEF;;+EAE+E;AAC/E,eAAO,MAAM,cAAc,YAAmB,MAAM,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,gBAAgB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,kBAehH,CAAC"}

dist/migration.js

@@ -0,0 +1,93 @@
+import { createHash } from "node:crypto";
+export const migrationObjectId = (executionId, port, logicalKey) => `obj:migration:${createHash("sha256").update(JSON.stringify([executionId, port, logicalKey])).digest("hex")}`;
+/** No ordinary RuntimeContext or network/database clients are supplied here.
+ * Process isolation belongs to the host, not this convenience API. */
+export const createMigrationContext = (input) => {
+    if (input.schemaVersion !== 1 || !input.executionId || new Set(input.ports.map((entry) => entry.name)).size !== input.ports.length)
+        throw new Error("Invalid migration input");
+    const output = { schemaVersion: 1, executionId: input.executionId, writes: [], creates: [], edgeReplacements: [] };
+    const port = (name, access) => {
+        const selected = input.ports.find((entry) => entry.name === name);
+        if (!selected?.access.includes(access) || (selected.view === "old" && access !== "read"))
+            throw new Error(`Migration port ${name} does not grant ${access}`);
+        return selected;
+    };
+    const context = {
+        enumerate(name) {
+            const selected = port(name, "read"), states = structuredClone(selected.states ?? []);
+            if (selected.view === "new" && Object.hasOwn(selected, "defaultValue"))
+                for (const helper of output.creates) {
+                    if (input.ports.find((entry) => entry.name === helper.port)?.atomId === selected.attachedAtomId && !states.some((entry) => entry.objectId === helper.objectId))
+                        states.push({ objectId: helper.objectId, value: structuredClone(selected.defaultValue) });
+                }
+            if (selected.view === "new")
+                for (const write of output.writes) {
+                    if (input.ports.find((entry) => entry.name === write.port)?.binding !== selected.binding)
+                        continue;
+                    const existing = states.findIndex((entry) => entry.objectId === write.objectId), entry = { objectId: write.objectId, value: structuredClone(write.value) };
+                    if (existing < 0)
+                        states.push(entry);
+                    else
+                        states[existing] = entry;
+                }
+            return states.sort((a, b) => a.objectId < b.objectId ? -1 : a.objectId > b.objectId ? 1 : 0);
+        },
+        read(name, objectId) { return context.enumerate(name).find((entry) => entry.objectId === objectId)?.value; },
+        write(name, objectId, value) {
+            port(name, "write");
+            const previous = output.writes.findIndex((entry) => entry.port === name && entry.objectId === objectId);
+            const entry = { port: name, objectId, value: structuredClone(value) };
+            if (previous < 0)
+                output.writes.push(entry);
+            else
+                output.writes[previous] = entry;
+        },
+        create(name, logicalKey) {
+            port(name, "create");
+            if (!logicalKey || logicalKey.length > 1024)
+                throw new Error("Migration creation requires a bounded stable logical key");
+            const objectId = migrationObjectId(input.executionId, name, logicalKey);
+            if (!output.creates.some((entry) => entry.objectId === objectId))
+                output.creates.push({ port: name, logicalKey, objectId });
+            return objectId;
+        },
+        edges(name) {
+            const selected = port(name, "read");
+            const replacement = selected.view === "new" ? output.edgeReplacements.find((entry) => input.ports.find((candidate) => candidate.name === entry.port)?.binding === selected.binding) : undefined;
+            return structuredClone(replacement?.edges ?? selected.edges ?? []);
+        },
+        replaceEdges(name, edges) {
+            port(name, "edge");
+            const previous = output.edgeReplacements.findIndex((entry) => entry.port === name);
+            const entry = { port: name, edges: structuredClone(edges) };
+            if (previous < 0)
+                output.edgeReplacements.push(entry);
+            else
+                output.edgeReplacements[previous] = entry;
+        },
+    };
+    return { context, result: () => structuredClone(output) };
+};
+/** Entrypoint for an immutable package's dedicated bin/migrate executable.
+ * stdout is protocol-only; send diagnostics to stderr. The host independently
+ * validates every write, helper identity, contract, and completion receipt. */
+export const serveMigration = async (exports) => {
+    const chunks = [];
+    let bytes = 0;
+    for await (const chunk of process.stdin) {
+        bytes += chunk.length;
+        if (bytes > 16 * 1024 * 1024)
+            throw new Error("Migration input exceeds 16 MiB");
+        chunks.push(Buffer.from(chunk));
+    }
+    const input = JSON.parse(Buffer.concat(chunks).toString("utf8"));
+    const implementation = Object.hasOwn(exports, input.exportId) ? exports[input.exportId] : undefined;
+    if (!implementation)
+        throw new Error("Unknown migration export");
+    const execution = createMigrationContext(input);
+    await implementation(execution.context);
+    const result = JSON.stringify(execution.result());
+    if (Buffer.byteLength(result) > 16 * 1024 * 1024)
+        throw new Error("Migration output exceeds 16 MiB");
+    process.stdout.write(`${result}\n`);
+};

dist/quixos/orch_pb.d.ts

@@ -0,0 +1,529 @@
+import type { GenFile, GenMessage, GenService } from "@bufbuild/protobuf/codegenv2";
+import type { CaminoObject, Value } from "../camino/api_pb.js";
+import type { PackageDescriptor } from "./package_pb.js";
+import type { CapabilityRef, PackageExportRef } from "./refs_pb.js";
+import type { DerivedDependency } from "./runtime_pb.js";
+import type { Message } from "@bufbuild/protobuf";
+/**
+ * Describes the file quixos/orch.proto.
+ */
+export declare const file_quixos_orch: GenFile;
+/**
+ * @generated from message quixos.orch.ConstructObjectRequest
+ */
+export type ConstructObjectRequest = Message<"quixos.orch.ConstructObjectRequest"> & {
+    /**
+     * @generated from field: string atom_id = 1;
+     */
+    atomId: string;
+    /**
+     * @generated from field: map<string, camino.Value> input = 2;
+     */
+    input: {
+        [key: string]: Value;
+    };
+};
+/**
+ * Describes the message quixos.orch.ConstructObjectRequest.
+ * Use `create(ConstructObjectRequestSchema)` to create a new message.
+ */
+export declare const ConstructObjectRequestSchema: GenMessage<ConstructObjectRequest>;
+/**
+ * @generated from message quixos.orch.ConstructObjectResponse
+ */
+export type ConstructObjectResponse = Message<"quixos.orch.ConstructObjectResponse"> & {
+    /**
+     * @generated from field: camino.CaminoObject object = 1;
+     */
+    object?: CaminoObject | undefined;
+};
+/**
+ * Describes the message quixos.orch.ConstructObjectResponse.
+ * Use `create(ConstructObjectResponseSchema)` to create a new message.
+ */
+export declare const ConstructObjectResponseSchema: GenMessage<ConstructObjectResponse>;
+/**
+ * @generated from message quixos.orch.ResolveOrConstructRelatedObjectRequest
+ */
+export type ResolveOrConstructRelatedObjectRequest = Message<"quixos.orch.ResolveOrConstructRelatedObjectRequest"> & {
+    /**
+     * @generated from field: string object_id = 1;
+     */
+    objectId: string;
+    /**
+     * @generated from field: string interface_revision_id = 2;
+     */
+    interfaceRevisionId: string;
+    /**
+     * @generated from field: string member_id = 3;
+     */
+    memberId: string;
+};
+/**
+ * Describes the message quixos.orch.ResolveOrConstructRelatedObjectRequest.
+ * Use `create(ResolveOrConstructRelatedObjectRequestSchema)` to create a new message.
+ */
+export declare const ResolveOrConstructRelatedObjectRequestSchema: GenMessage<ResolveOrConstructRelatedObjectRequest>;
+/**
+ * @generated from message quixos.orch.ResolveOrConstructRelatedObjectResponse
+ */
+export type ResolveOrConstructRelatedObjectResponse = Message<"quixos.orch.ResolveOrConstructRelatedObjectResponse"> & {
+    /**
+     * @generated from field: camino.CaminoObject object = 1;
+     */
+    object?: CaminoObject | undefined;
+    /**
+     * @generated from field: bool constructed = 2;
+     */
+    constructed: boolean;
+};
+/**
+ * Describes the message quixos.orch.ResolveOrConstructRelatedObjectResponse.
+ * Use `create(ResolveOrConstructRelatedObjectResponseSchema)` to create a new message.
+ */
+export declare const ResolveOrConstructRelatedObjectResponseSchema: GenMessage<ResolveOrConstructRelatedObjectResponse>;
+/**
+ * @generated from message quixos.orch.InvokeCapabilityRequest
+ */
+export type InvokeCapabilityRequest = Message<"quixos.orch.InvokeCapabilityRequest"> & {
+    /**
+     * @generated from field: quixos.CapabilityRef capability = 1;
+     */
+    capability?: CapabilityRef | undefined;
+    /**
+     * @generated from field: string object_id = 2;
+     */
+    objectId: string;
+    /**
+     * @generated from field: map<string, camino.Value> input = 3;
+     */
+    input: {
+        [key: string]: Value;
+    };
+    /**
+     * Identifies one logical client mutation across the capability and Camino
+     * layers so a live-value controller can recognize its own confirmation.
+     *
+     * @generated from field: string client_mutation_id = 4;
+     */
+    clientMutationId: string;
+};
+/**
+ * Describes the message quixos.orch.InvokeCapabilityRequest.
+ * Use `create(InvokeCapabilityRequestSchema)` to create a new message.
+ */
+export declare const InvokeCapabilityRequestSchema: GenMessage<InvokeCapabilityRequest>;
+/**
+ * @generated from message quixos.orch.InvokeCapabilityResponse
+ */
+export type InvokeCapabilityResponse = Message<"quixos.orch.InvokeCapabilityResponse"> & {
+    /**
+     * @generated from field: string invocation_id = 1;
+     */
+    invocationId: string;
+    /**
+     * @generated from field: quixos.orch.Activation activation = 2;
+     */
+    activation?: Activation | undefined;
+    /**
+     * @generated from field: bool ok = 3;
+     */
+    ok: boolean;
+    /**
+     * @generated from field: camino.Value result = 4;
+     */
+    result?: Value | undefined;
+    /**
+     * @generated from field: string error = 5;
+     */
+    error: string;
+    /**
+     * @generated from field: repeated quixos.runtime.DerivedDependency dependencies = 6;
+     */
+    dependencies: DerivedDependency[];
+};
+/**
+ * Describes the message quixos.orch.InvokeCapabilityResponse.
+ * Use `create(InvokeCapabilityResponseSchema)` to create a new message.
+ */
+export declare const InvokeCapabilityResponseSchema: GenMessage<InvokeCapabilityResponse>;
+/**
+ * @generated from message quixos.orch.WatchCapabilityRequest
+ */
+export type WatchCapabilityRequest = Message<"quixos.orch.WatchCapabilityRequest"> & {
+    /**
+     * @generated from field: quixos.CapabilityRef capability = 1;
+     */
+    capability?: CapabilityRef | undefined;
+    /**
+     * @generated from field: string object_id = 2;
+     */
+    objectId: string;
+    /**
+     * @generated from field: map<string, camino.Value> input = 3;
+     */
+    input: {
+        [key: string]: Value;
+    };
+};
+/**
+ * Describes the message quixos.orch.WatchCapabilityRequest.
+ * Use `create(WatchCapabilityRequestSchema)` to create a new message.
+ */
+export declare const WatchCapabilityRequestSchema: GenMessage<WatchCapabilityRequest>;
+/**
+ * @generated from message quixos.orch.WatchCapabilityEvent
+ */
+export type WatchCapabilityEvent = Message<"quixos.orch.WatchCapabilityEvent"> & {
+    /**
+     * @generated from field: string invocation_id = 1;
+     */
+    invocationId: string;
+    /**
+     * @generated from field: quixos.orch.Activation activation = 2;
+     */
+    activation?: Activation | undefined;
+    /**
+     * @generated from field: string watch_id = 3;
+     */
+    watchId: string;
+    /**
+     * @generated from field: camino.Value value = 4;
+     */
+    value?: Value | undefined;
+    /**
+     * @generated from field: repeated quixos.runtime.DerivedDependency dependencies = 5;
+     */
+    dependencies: DerivedDependency[];
+    /**
+     * @generated from field: string error = 6;
+     */
+    error: string;
+    /**
+     * @generated from field: bool initial = 7;
+     */
+    initial: boolean;
+};
+/**
+ * Describes the message quixos.orch.WatchCapabilityEvent.
+ * Use `create(WatchCapabilityEventSchema)` to create a new message.
+ */
+export declare const WatchCapabilityEventSchema: GenMessage<WatchCapabilityEvent>;
+/**
+ * @generated from message quixos.orch.GetWorkspaceRequest
+ */
+export type GetWorkspaceRequest = Message<"quixos.orch.GetWorkspaceRequest"> & {};
+/**
+ * Describes the message quixos.orch.GetWorkspaceRequest.
+ * Use `create(GetWorkspaceRequestSchema)` to create a new message.
+ */
+export declare const GetWorkspaceRequestSchema: GenMessage<GetWorkspaceRequest>;
+/**
+ * @generated from message quixos.orch.GetWorkspaceResponse
+ */
+export type GetWorkspaceResponse = Message<"quixos.orch.GetWorkspaceResponse"> & {
+    /**
+     * @generated from field: string workspace_id = 1;
+     */
+    workspaceId: string;
+    /**
+     * @generated from field: string workspace_revision_id = 2;
+     */
+    workspaceRevisionId: string;
+    /**
+     * @generated from field: string source_root_commit = 3;
+     */
+    sourceRootCommit: string;
+};
+/**
+ * Describes the message quixos.orch.GetWorkspaceResponse.
+ * Use `create(GetWorkspaceResponseSchema)` to create a new message.
+ */
+export declare const GetWorkspaceResponseSchema: GenMessage<GetWorkspaceResponse>;
+/**
+ * @generated from message quixos.orch.ListActivationsRequest
+ */
+export type ListActivationsRequest = Message<"quixos.orch.ListActivationsRequest"> & {};
+/**
+ * Describes the message quixos.orch.ListActivationsRequest.
+ * Use `create(ListActivationsRequestSchema)` to create a new message.
+ */
+export declare const ListActivationsRequestSchema: GenMessage<ListActivationsRequest>;
+/**
+ * @generated from message quixos.orch.ListPackageDescriptorsRequest
+ */
+export type ListPackageDescriptorsRequest = Message<"quixos.orch.ListPackageDescriptorsRequest"> & {};
+/**
+ * Describes the message quixos.orch.ListPackageDescriptorsRequest.
+ * Use `create(ListPackageDescriptorsRequestSchema)` to create a new message.
+ */
+export declare const ListPackageDescriptorsRequestSchema: GenMessage<ListPackageDescriptorsRequest>;
+/**
+ * @generated from message quixos.orch.ListPackageDescriptorsResponse
+ */
+export type ListPackageDescriptorsResponse = Message<"quixos.orch.ListPackageDescriptorsResponse"> & {
+    /**
+     * @generated from field: repeated quixos.PackageDescriptor descriptors = 1;
+     */
+    descriptors: PackageDescriptor[];
+};
+/**
+ * Describes the message quixos.orch.ListPackageDescriptorsResponse.
+ * Use `create(ListPackageDescriptorsResponseSchema)` to create a new message.
+ */
+export declare const ListPackageDescriptorsResponseSchema: GenMessage<ListPackageDescriptorsResponse>;
+/**
+ * @generated from message quixos.orch.ListPackageRuntimesRequest
+ */
+export type ListPackageRuntimesRequest = Message<"quixos.orch.ListPackageRuntimesRequest"> & {};
+/**
+ * Describes the message quixos.orch.ListPackageRuntimesRequest.
+ * Use `create(ListPackageRuntimesRequestSchema)` to create a new message.
+ */
+export declare const ListPackageRuntimesRequestSchema: GenMessage<ListPackageRuntimesRequest>;
+/**
+ * @generated from message quixos.orch.ListPackageRuntimesResponse
+ */
+export type ListPackageRuntimesResponse = Message<"quixos.orch.ListPackageRuntimesResponse"> & {
+    /**
+     * @generated from field: repeated quixos.orch.PackageRuntimeStatus runtimes = 1;
+     */
+    runtimes: PackageRuntimeStatus[];
+};
+/**
+ * Describes the message quixos.orch.ListPackageRuntimesResponse.
+ * Use `create(ListPackageRuntimesResponseSchema)` to create a new message.
+ */
+export declare const ListPackageRuntimesResponseSchema: GenMessage<ListPackageRuntimesResponse>;
+/**
+ * @generated from message quixos.orch.ListActivationsResponse
+ */
+export type ListActivationsResponse = Message<"quixos.orch.ListActivationsResponse"> & {
+    /**
+     * @generated from field: repeated quixos.orch.Activation activations = 1;
+     */
+    activations: Activation[];
+};
+/**
+ * Describes the message quixos.orch.ListActivationsResponse.
+ * Use `create(ListActivationsResponseSchema)` to create a new message.
+ */
+export declare const ListActivationsResponseSchema: GenMessage<ListActivationsResponse>;
+/**
+ * @generated from message quixos.orch.CloseActivationRequest
+ */
+export type CloseActivationRequest = Message<"quixos.orch.CloseActivationRequest"> & {
+    /**
+     * @generated from field: string activation_id = 1;
+     */
+    activationId: string;
+    /**
+     * @generated from field: string reason = 2;
+     */
+    reason: string;
+};
+/**
+ * Describes the message quixos.orch.CloseActivationRequest.
+ * Use `create(CloseActivationRequestSchema)` to create a new message.
+ */
+export declare const CloseActivationRequestSchema: GenMessage<CloseActivationRequest>;
+/**
+ * @generated from message quixos.orch.CloseActivationResponse
+ */
+export type CloseActivationResponse = Message<"quixos.orch.CloseActivationResponse"> & {
+    /**
+     * @generated from field: quixos.orch.Activation activation = 1;
+     */
+    activation?: Activation | undefined;
+};
+/**
+ * Describes the message quixos.orch.CloseActivationResponse.
+ * Use `create(CloseActivationResponseSchema)` to create a new message.
+ */
+export declare const CloseActivationResponseSchema: GenMessage<CloseActivationResponse>;
+/**
+ * @generated from message quixos.orch.Activation
+ */
+export type Activation = Message<"quixos.orch.Activation"> & {
+    /**
+     * @generated from field: string activation_id = 1;
+     */
+    activationId: string;
+    /**
+     * @generated from field: quixos.PackageExportRef export = 2;
+     */
+    export?: PackageExportRef | undefined;
+    /**
+     * @generated from field: string object_id = 3;
+     */
+    objectId: string;
+    /**
+     * @generated from field: string state = 4;
+     */
+    state: string;
+    /**
+     * @generated from field: uint32 demand = 5;
+     */
+    demand: number;
+    /**
+     * @generated from field: string opened_at = 6;
+     */
+    openedAt: string;
+    /**
+     * @generated from field: string last_used_at = 7;
+     */
+    lastUsedAt: string;
+    /**
+     * @generated from field: string idle_deadline_at = 8;
+     */
+    idleDeadlineAt: string;
+    /**
+     * @generated from field: string closed_at = 9;
+     */
+    closedAt: string;
+    /**
+     * @generated from field: string close_reason = 10;
+     */
+    closeReason: string;
+};
+/**
+ * Describes the message quixos.orch.Activation.
+ * Use `create(ActivationSchema)` to create a new message.
+ */
+export declare const ActivationSchema: GenMessage<Activation>;
+/**
+ * @generated from message quixos.orch.PackageRuntimeStatus
+ */
+export type PackageRuntimeStatus = Message<"quixos.orch.PackageRuntimeStatus"> & {
+    /**
+     * @generated from field: string runtime_key = 1;
+     */
+    runtimeKey: string;
+    /**
+     * @generated from field: string package_revision_id = 2;
+     */
+    packageRevisionId: string;
+    /**
+     * @generated from field: string source_repository = 3;
+     */
+    sourceRepository: string;
+    /**
+     * @generated from field: string source_commit = 4;
+     */
+    sourceCommit: string;
+    /**
+     * @generated from field: string build_target = 5;
+     */
+    buildTarget: string;
+    /**
+     * @generated from field: string server_path = 6;
+     */
+    serverPath: string;
+    /**
+     * @generated from field: uint32 pid = 7;
+     */
+    pid: number;
+    /**
+     * @generated from field: string state = 8;
+     */
+    state: string;
+    /**
+     * @generated from field: string started_at = 9;
+     */
+    startedAt: string;
+    /**
+     * @generated from field: string last_handshake_at = 10;
+     */
+    lastHandshakeAt: string;
+    /**
+     * @generated from field: string runtime_protocol_version = 11;
+     */
+    runtimeProtocolVersion: string;
+    /**
+     * @generated from field: uint32 advertised_export_count = 12;
+     */
+    advertisedExportCount: number;
+};
+/**
+ * Describes the message quixos.orch.PackageRuntimeStatus.
+ * Use `create(PackageRuntimeStatusSchema)` to create a new message.
+ */
+export declare const PackageRuntimeStatusSchema: GenMessage<PackageRuntimeStatus>;
+/**
+ * @generated from service quixos.orch.OrchestratorRuntime
+ */
+export declare const OrchestratorRuntime: GenService<{
+    /**
+     * @generated from rpc quixos.orch.OrchestratorRuntime.InvokeCapability
+     */
+    invokeCapability: {
+        methodKind: "unary";
+        input: typeof InvokeCapabilityRequestSchema;
+        output: typeof InvokeCapabilityResponseSchema;
+    };
+    /**
+     * @generated from rpc quixos.orch.OrchestratorRuntime.WatchCapability
+     */
+    watchCapability: {
+        methodKind: "server_streaming";
+        input: typeof WatchCapabilityRequestSchema;
+        output: typeof WatchCapabilityEventSchema;
+    };
+    /**
+     * @generated from rpc quixos.orch.OrchestratorRuntime.ConstructObject
+     */
+    constructObject: {
+        methodKind: "unary";
+        input: typeof ConstructObjectRequestSchema;
+        output: typeof ConstructObjectResponseSchema;
+    };
+    /**
+     * @generated from rpc quixos.orch.OrchestratorRuntime.ResolveOrConstructRelatedObject
+     */
+    resolveOrConstructRelatedObject: {
+        methodKind: "unary";
+        input: typeof ResolveOrConstructRelatedObjectRequestSchema;
+        output: typeof ResolveOrConstructRelatedObjectResponseSchema;
+    };
+    /**
+     * @generated from rpc quixos.orch.OrchestratorRuntime.GetWorkspace
+     */
+    getWorkspace: {
+        methodKind: "unary";
+        input: typeof GetWorkspaceRequestSchema;
+        output: typeof GetWorkspaceResponseSchema;
+    };
+    /**
+     * @generated from rpc quixos.orch.OrchestratorRuntime.ListPackageDescriptors
+     */
+    listPackageDescriptors: {
+        methodKind: "unary";
+        input: typeof ListPackageDescriptorsRequestSchema;
+        output: typeof ListPackageDescriptorsResponseSchema;
+    };
+    /**
+     * @generated from rpc quixos.orch.OrchestratorRuntime.ListPackageRuntimes
+     */
+    listPackageRuntimes: {
+        methodKind: "unary";
+        input: typeof ListPackageRuntimesRequestSchema;
+        output: typeof ListPackageRuntimesResponseSchema;
+    };
+    /**
+     * @generated from rpc quixos.orch.OrchestratorRuntime.ListActivations
+     */
+    listActivations: {
+        methodKind: "unary";
+        input: typeof ListActivationsRequestSchema;
+        output: typeof ListActivationsResponseSchema;
+    };
+    /**
+     * @generated from rpc quixos.orch.OrchestratorRuntime.CloseActivation
+     */
+    closeActivation: {
+        methodKind: "unary";
+        input: typeof CloseActivationRequestSchema;
+        output: typeof CloseActivationResponseSchema;
+    };
+}>;
+//# sourceMappingURL=orch_pb.d.ts.map

dist/quixos/orch_pb.js

@@ -0,0 +1,116 @@
+// @generated by protoc-gen-es v2.12.1 with parameter "target=ts,import_extension=js"
+// @generated from file quixos/orch.proto (package quixos.orch, syntax proto3)
+/* eslint-disable */
+import { fileDesc, messageDesc, serviceDesc } from "@bufbuild/protobuf/codegenv2";
+import { file_camino_api } from "../camino/api_pb.js";
+import { file_quixos_package } from "./package_pb.js";
+import { file_quixos_refs } from "./refs_pb.js";
+import { file_quixos_runtime } from "./runtime_pb.js";
+/**
+ * Describes the file quixos/orch.proto.
+ */
+export const file_quixos_orch = /*@__PURE__*/ fileDesc("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", [file_camino_api, file_quixos_package, file_quixos_refs, file_quixos_runtime]);
+/**
+ * Describes the message quixos.orch.ConstructObjectRequest.
+ * Use `create(ConstructObjectRequestSchema)` to create a new message.
+ */
+export const ConstructObjectRequestSchema = /*@__PURE__*/ messageDesc(file_quixos_orch, 0);
+/**
+ * Describes the message quixos.orch.ConstructObjectResponse.
+ * Use `create(ConstructObjectResponseSchema)` to create a new message.
+ */
+export const ConstructObjectResponseSchema = /*@__PURE__*/ messageDesc(file_quixos_orch, 1);
+/**
+ * Describes the message quixos.orch.ResolveOrConstructRelatedObjectRequest.
+ * Use `create(ResolveOrConstructRelatedObjectRequestSchema)` to create a new message.
+ */
+export const ResolveOrConstructRelatedObjectRequestSchema = /*@__PURE__*/ messageDesc(file_quixos_orch, 2);
+/**
+ * Describes the message quixos.orch.ResolveOrConstructRelatedObjectResponse.
+ * Use `create(ResolveOrConstructRelatedObjectResponseSchema)` to create a new message.
+ */
+export const ResolveOrConstructRelatedObjectResponseSchema = /*@__PURE__*/ messageDesc(file_quixos_orch, 3);
+/**
+ * Describes the message quixos.orch.InvokeCapabilityRequest.
+ * Use `create(InvokeCapabilityRequestSchema)` to create a new message.
+ */
+export const InvokeCapabilityRequestSchema = /*@__PURE__*/ messageDesc(file_quixos_orch, 4);
+/**
+ * Describes the message quixos.orch.InvokeCapabilityResponse.
+ * Use `create(InvokeCapabilityResponseSchema)` to create a new message.
+ */
+export const InvokeCapabilityResponseSchema = /*@__PURE__*/ messageDesc(file_quixos_orch, 5);
+/**
+ * Describes the message quixos.orch.WatchCapabilityRequest.
+ * Use `create(WatchCapabilityRequestSchema)` to create a new message.
+ */
+export const WatchCapabilityRequestSchema = /*@__PURE__*/ messageDesc(file_quixos_orch, 6);
+/**
+ * Describes the message quixos.orch.WatchCapabilityEvent.
+ * Use `create(WatchCapabilityEventSchema)` to create a new message.
+ */
+export const WatchCapabilityEventSchema = /*@__PURE__*/ messageDesc(file_quixos_orch, 7);
+/**
+ * Describes the message quixos.orch.GetWorkspaceRequest.
+ * Use `create(GetWorkspaceRequestSchema)` to create a new message.
+ */
+export const GetWorkspaceRequestSchema = /*@__PURE__*/ messageDesc(file_quixos_orch, 8);
+/**
+ * Describes the message quixos.orch.GetWorkspaceResponse.
+ * Use `create(GetWorkspaceResponseSchema)` to create a new message.
+ */
+export const GetWorkspaceResponseSchema = /*@__PURE__*/ messageDesc(file_quixos_orch, 9);
+/**
+ * Describes the message quixos.orch.ListActivationsRequest.
+ * Use `create(ListActivationsRequestSchema)` to create a new message.
+ */
+export const ListActivationsRequestSchema = /*@__PURE__*/ messageDesc(file_quixos_orch, 10);
+/**
+ * Describes the message quixos.orch.ListPackageDescriptorsRequest.
+ * Use `create(ListPackageDescriptorsRequestSchema)` to create a new message.
+ */
+export const ListPackageDescriptorsRequestSchema = /*@__PURE__*/ messageDesc(file_quixos_orch, 11);
+/**
+ * Describes the message quixos.orch.ListPackageDescriptorsResponse.
+ * Use `create(ListPackageDescriptorsResponseSchema)` to create a new message.
+ */
+export const ListPackageDescriptorsResponseSchema = /*@__PURE__*/ messageDesc(file_quixos_orch, 12);
+/**
+ * Describes the message quixos.orch.ListPackageRuntimesRequest.
+ * Use `create(ListPackageRuntimesRequestSchema)` to create a new message.
+ */
+export const ListPackageRuntimesRequestSchema = /*@__PURE__*/ messageDesc(file_quixos_orch, 13);
+/**
+ * Describes the message quixos.orch.ListPackageRuntimesResponse.
+ * Use `create(ListPackageRuntimesResponseSchema)` to create a new message.
+ */
+export const ListPackageRuntimesResponseSchema = /*@__PURE__*/ messageDesc(file_quixos_orch, 14);
+/**
+ * Describes the message quixos.orch.ListActivationsResponse.
+ * Use `create(ListActivationsResponseSchema)` to create a new message.
+ */
+export const ListActivationsResponseSchema = /*@__PURE__*/ messageDesc(file_quixos_orch, 15);
+/**
+ * Describes the message quixos.orch.CloseActivationRequest.
+ * Use `create(CloseActivationRequestSchema)` to create a new message.
+ */
+export const CloseActivationRequestSchema = /*@__PURE__*/ messageDesc(file_quixos_orch, 16);
+/**
+ * Describes the message quixos.orch.CloseActivationResponse.
+ * Use `create(CloseActivationResponseSchema)` to create a new message.
+ */
+export const CloseActivationResponseSchema = /*@__PURE__*/ messageDesc(file_quixos_orch, 17);
+/**
+ * Describes the message quixos.orch.Activation.
+ * Use `create(ActivationSchema)` to create a new message.
+ */
+export const ActivationSchema = /*@__PURE__*/ messageDesc(file_quixos_orch, 18);
+/**
+ * Describes the message quixos.orch.PackageRuntimeStatus.
+ * Use `create(PackageRuntimeStatusSchema)` to create a new message.
+ */
+export const PackageRuntimeStatusSchema = /*@__PURE__*/ messageDesc(file_quixos_orch, 19);
+/**
+ * @generated from service quixos.orch.OrchestratorRuntime
+ */
+export const OrchestratorRuntime = /*@__PURE__*/ serviceDesc(file_quixos_orch, 0);

dist/quixos/package_pb.d.ts

@@ -0,0 +1,51 @@
+import type { GenFile, GenMessage } from "@bufbuild/protobuf/codegenv2";
+import type { Message } from "@bufbuild/protobuf";
+/**
+ * Describes the file quixos/package.proto.
+ */
+export declare const file_quixos_package: GenFile;
+/**
+ * @generated from message quixos.PackageDescriptor
+ */
+export type PackageDescriptor = Message<"quixos.PackageDescriptor"> & {
+    /**
+     * @generated from field: string package_id = 1;
+     */
+    packageId: string;
+    /**
+     * @generated from field: string package_revision_id = 2;
+     */
+    packageRevisionId: string;
+    /**
+     * @generated from field: string runtime_protocol_version = 3;
+     */
+    runtimeProtocolVersion: string;
+    /**
+     * @generated from field: repeated quixos.RuntimeExport exports = 4;
+     */
+    exports: RuntimeExport[];
+};
+/**
+ * Describes the message quixos.PackageDescriptor.
+ * Use `create(PackageDescriptorSchema)` to create a new message.
+ */
+export declare const PackageDescriptorSchema: GenMessage<PackageDescriptor>;
+/**
+ * @generated from message quixos.RuntimeExport
+ */
+export type RuntimeExport = Message<"quixos.RuntimeExport"> & {
+    /**
+     * @generated from field: string export_id = 1;
+     */
+    exportId: string;
+    /**
+     * @generated from field: string runtime_symbol = 2;
+     */
+    runtimeSymbol: string;
+};
+/**
+ * Describes the message quixos.RuntimeExport.
+ * Use `create(RuntimeExportSchema)` to create a new message.
+ */
+export declare const RuntimeExportSchema: GenMessage<RuntimeExport>;
+//# sourceMappingURL=package_pb.d.ts.map

dist/quixos/package_pb.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"package_pb.d.ts","sourceRoot":"","sources":["../../src/quixos/package_pb.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAExE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAElD;;GAEG;AACH,eAAO,MAAM,mBAAmB,EAAE,OACgT,CAAC;AAEnV;;GAEG;AACH,MAAM,MAAM,iBAAiB,GAAG,OAAO,CAAC,0BAA0B,CAAC,GAAG;IACpE;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC;IAElB;;OAEG;IACH,iBAAiB,EAAE,MAAM,CAAC;IAE1B;;OAEG;IACH,sBAAsB,EAAE,MAAM,CAAC;IAE/B;;OAEG;IACH,OAAO,EAAE,aAAa,EAAE,CAAC;CAC1B,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,uBAAuB,EAAE,UAAU,CAAC,iBAAiB,CAC7B,CAAC;AAEtC;;GAEG;AACH,MAAM,MAAM,aAAa,GAAG,OAAO,CAAC,sBAAsB,CAAC,GAAG;IAC5D;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC;IAEjB;;OAEG;IACH,aAAa,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,mBAAmB,EAAE,UAAU,CAAC,aAAa,CACrB,CAAC"}

dist/quixos/package_pb.js

@@ -0,0 +1,18 @@
+// @generated by protoc-gen-es v2.12.1 with parameter "target=ts,import_extension=js"
+// @generated from file quixos/package.proto (package quixos, syntax proto3)
+/* eslint-disable */
+import { fileDesc, messageDesc } from "@bufbuild/protobuf/codegenv2";
+/**
+ * Describes the file quixos/package.proto.
+ */
+export const file_quixos_package = /*@__PURE__*/ fileDesc("ChRxdWl4b3MvcGFja2FnZS5wcm90bxIGcXVpeG9zIo4BChFQYWNrYWdlRGVzY3JpcHRvchISCgpwYWNrYWdlX2lkGAEgASgJEhsKE3BhY2thZ2VfcmV2aXNpb25faWQYAiABKAkSIAoYcnVudGltZV9wcm90b2NvbF92ZXJzaW9uGAMgASgJEiYKB2V4cG9ydHMYBCADKAsyFS5xdWl4b3MuUnVudGltZUV4cG9ydCI6Cg1SdW50aW1lRXhwb3J0EhEKCWV4cG9ydF9pZBgBIAEoCRIWCg5ydW50aW1lX3N5bWJvbBgCIAEoCWIGcHJvdG8z");
+/**
+ * Describes the message quixos.PackageDescriptor.
+ * Use `create(PackageDescriptorSchema)` to create a new message.
+ */
+export const PackageDescriptorSchema = /*@__PURE__*/ messageDesc(file_quixos_package, 0);
+/**
+ * Describes the message quixos.RuntimeExport.
+ * Use `create(RuntimeExportSchema)` to create a new message.
+ */
+export const RuntimeExportSchema = /*@__PURE__*/ messageDesc(file_quixos_package, 1);

dist/quixos/refs_pb.d.ts

@@ -0,0 +1,113 @@
+import type { GenFile, GenMessage } from "@bufbuild/protobuf/codegenv2";
+import type { Message } from "@bufbuild/protobuf";
+/**
+ * Describes the file quixos/refs.proto.
+ */
+export declare const file_quixos_refs: GenFile;
+/**
+ * @generated from message quixos.CapabilityRef
+ */
+export type CapabilityRef = Message<"quixos.CapabilityRef"> & {
+    /**
+     * @generated from field: string interface_revision_id = 1;
+     */
+    interfaceRevisionId: string;
+    /**
+     * @generated from field: string operation_id = 2;
+     */
+    operationId: string;
+};
+/**
+ * Describes the message quixos.CapabilityRef.
+ * Use `create(CapabilityRefSchema)` to create a new message.
+ */
+export declare const CapabilityRefSchema: GenMessage<CapabilityRef>;
+/**
+ * @generated from message quixos.PackageExportRef
+ */
+export type PackageExportRef = Message<"quixos.PackageExportRef"> & {
+    /**
+     * @generated from field: string package_revision_id = 1;
+     */
+    packageRevisionId: string;
+    /**
+     * @generated from field: string export_id = 2;
+     */
+    exportId: string;
+};
+/**
+ * Describes the message quixos.PackageExportRef.
+ * Use `create(PackageExportRefSchema)` to create a new message.
+ */
+export declare const PackageExportRefSchema: GenMessage<PackageExportRef>;
+/**
+ * @generated from message quixos.InjectedDependency
+ */
+export type InjectedDependency = Message<"quixos.InjectedDependency"> & {
+    /**
+     * @generated from field: string port_id = 1;
+     */
+    portId: string;
+    /**
+     * @generated from oneof quixos.InjectedDependency.binding
+     */
+    binding: {
+        /**
+         * @generated from field: string state_slot_id = 2;
+         */
+        value: string;
+        case: "stateSlotId";
+    } | {
+        /**
+         * @generated from field: quixos.EdgeDependency edge = 3;
+         */
+        value: EdgeDependency;
+        case: "edge";
+    } | {
+        /**
+         * @generated from field: string interface_revision_id = 4;
+         */
+        value: string;
+        case: "interfaceRevisionId";
+    } | {
+        /**
+         * @generated from field: string constructor_atom_id = 5;
+         */
+        value: string;
+        case: "constructorAtomId";
+    } | {
+        case: undefined;
+        value?: undefined;
+    };
+    /**
+     * Defaults to the invocation receiver. A checked dependency traversal can
+     * select a related object explicitly before the package runtime starts.
+     *
+     * @generated from field: string object_id = 6;
+     */
+    objectId: string;
+};
+/**
+ * Describes the message quixos.InjectedDependency.
+ * Use `create(InjectedDependencySchema)` to create a new message.
+ */
+export declare const InjectedDependencySchema: GenMessage<InjectedDependency>;
+/**
+ * @generated from message quixos.EdgeDependency
+ */
+export type EdgeDependency = Message<"quixos.EdgeDependency"> & {
+    /**
+     * @generated from field: string edge_type_id = 1;
+     */
+    edgeTypeId: string;
+    /**
+     * @generated from field: string projection_id = 2;
+     */
+    projectionId: string;
+};
+/**
+ * Describes the message quixos.EdgeDependency.
+ * Use `create(EdgeDependencySchema)` to create a new message.
+ */
+export declare const EdgeDependencySchema: GenMessage<EdgeDependency>;
+//# sourceMappingURL=refs_pb.d.ts.map

dist/quixos/refs_pb.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"refs_pb.d.ts","sourceRoot":"","sources":["../../src/quixos/refs_pb.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAExE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAElD;;GAEG;AACH,eAAO,MAAM,gBAAgB,EAAE,OACmjB,CAAC;AAEnlB;;GAEG;AACH,MAAM,MAAM,aAAa,GAAG,OAAO,CAAC,sBAAsB,CAAC,GAAG;IAC5D;;OAEG;IACH,mBAAmB,EAAE,MAAM,CAAC;IAE5B;;OAEG;IACH,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,mBAAmB,EAAE,UAAU,CAAC,aAAa,CACxB,CAAC;AAEnC;;GAEG;AACH,MAAM,MAAM,gBAAgB,GAAG,OAAO,CAAC,yBAAyB,CAAC,GAAG;IAClE;;OAEG;IACH,iBAAiB,EAAE,MAAM,CAAC;IAE1B;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,sBAAsB,EAAE,UAAU,CAAC,gBAAgB,CAC9B,CAAC;AAEnC;;GAEG;AACH,MAAM,MAAM,kBAAkB,GAAG,OAAO,CAAC,2BAA2B,CAAC,GAAG;IACtE;;OAEG;IACH,MAAM,EAAE,MAAM,CAAC;IAEf;;OAEG;IACH,OAAO,EAAE;QACP;;WAEG;QACH,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,EAAE,aAAa,CAAC;KACrB,GAAG;QACF;;WAEG;QACH,KAAK,EAAE,cAAc,CAAC;QACtB,IAAI,EAAE,MAAM,CAAC;KACd,GAAG;QACF;;WAEG;QACH,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,EAAE,qBAAqB,CAAC;KAC7B,GAAG;QACF;;WAEG;QACH,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,EAAE,mBAAmB,CAAC;KAC3B,GAAG;QAAE,IAAI,EAAE,SAAS,CAAC;QAAC,KAAK,CAAC,EAAE,SAAS,CAAA;KAAE,CAAC;IAE3C;;;;;OAKG;IACH,QAAQ,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,wBAAwB,EAAE,UAAU,CAAC,kBAAkB,CAClC,CAAC;AAEnC;;GAEG;AACH,MAAM,MAAM,cAAc,GAAG,OAAO,CAAC,uBAAuB,CAAC,GAAG;IAC9D;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IAEnB;;OAEG;IACH,YAAY,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,oBAAoB,EAAE,UAAU,CAAC,cAAc,CAC1B,CAAC"}

dist/quixos/refs_pb.js

@@ -0,0 +1,28 @@
+// @generated by protoc-gen-es v2.12.1 with parameter "target=ts,import_extension=js"
+// @generated from file quixos/refs.proto (package quixos, syntax proto3)
+/* eslint-disable */
+import { fileDesc, messageDesc } from "@bufbuild/protobuf/codegenv2";
+/**
+ * Describes the file quixos/refs.proto.
+ */
+export const file_quixos_refs = /*@__PURE__*/ fileDesc("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");
+/**
+ * Describes the message quixos.CapabilityRef.
+ * Use `create(CapabilityRefSchema)` to create a new message.
+ */
+export const CapabilityRefSchema = /*@__PURE__*/ messageDesc(file_quixos_refs, 0);
+/**
+ * Describes the message quixos.PackageExportRef.
+ * Use `create(PackageExportRefSchema)` to create a new message.
+ */
+export const PackageExportRefSchema = /*@__PURE__*/ messageDesc(file_quixos_refs, 1);
+/**
+ * Describes the message quixos.InjectedDependency.
+ * Use `create(InjectedDependencySchema)` to create a new message.
+ */
+export const InjectedDependencySchema = /*@__PURE__*/ messageDesc(file_quixos_refs, 2);
+/**
+ * Describes the message quixos.EdgeDependency.
+ * Use `create(EdgeDependencySchema)` to create a new message.
+ */
+export const EdgeDependencySchema = /*@__PURE__*/ messageDesc(file_quixos_refs, 3);

dist/quixos/runtime_pb.d.ts

@@ -0,0 +1,330 @@
+import type { GenFile, GenMessage, GenService } from "@bufbuild/protobuf/codegenv2";
+import type { Value } from "../camino/api_pb.js";
+import type { InjectedDependency, PackageExportRef } from "./refs_pb.js";
+import type { Message } from "@bufbuild/protobuf";
+/**
+ * Describes the file quixos/runtime.proto.
+ */
+export declare const file_quixos_runtime: GenFile;
+/**
+ * @generated from message quixos.runtime.HandshakeRequest
+ */
+export type HandshakeRequest = Message<"quixos.runtime.HandshakeRequest"> & {
+    /**
+     * @generated from field: string orch_protocol_version = 1;
+     */
+    orchProtocolVersion: string;
+    /**
+     * @generated from field: string nonce = 2;
+     */
+    nonce: string;
+};
+/**
+ * Describes the message quixos.runtime.HandshakeRequest.
+ * Use `create(HandshakeRequestSchema)` to create a new message.
+ */
+export declare const HandshakeRequestSchema: GenMessage<HandshakeRequest>;
+/**
+ * @generated from message quixos.runtime.HandshakeResponse
+ */
+export type HandshakeResponse = Message<"quixos.runtime.HandshakeResponse"> & {
+    /**
+     * @generated from field: string package_revision_id = 1;
+     */
+    packageRevisionId: string;
+    /**
+     * @generated from field: string runtime_protocol_version = 2;
+     */
+    runtimeProtocolVersion: string;
+    /**
+     * @generated from field: repeated string export_ids = 3;
+     */
+    exportIds: string[];
+    /**
+     * @generated from field: string instance_id = 4;
+     */
+    instanceId: string;
+    /**
+     * @generated from field: string authentication_proof = 5;
+     */
+    authenticationProof: string;
+    /**
+     * @generated from field: repeated string capabilities = 6;
+     */
+    capabilities: string[];
+};
+/**
+ * Describes the message quixos.runtime.HandshakeResponse.
+ * Use `create(HandshakeResponseSchema)` to create a new message.
+ */
+export declare const HandshakeResponseSchema: GenMessage<HandshakeResponse>;
+/**
+ * @generated from message quixos.runtime.InvocationContext
+ */
+export type InvocationContext = Message<"quixos.runtime.InvocationContext"> & {
+    /**
+     * @generated from field: string workspace_epoch = 1;
+     */
+    workspaceEpoch: string;
+    /**
+     * @generated from field: string instance_id = 2;
+     */
+    instanceId: string;
+    /**
+     * @generated from field: string binding_digest = 3;
+     */
+    bindingDigest: string;
+    /**
+     * @generated from field: string grant = 4;
+     */
+    grant: string;
+    /**
+     * @generated from field: string session_id = 5;
+     */
+    sessionId: string;
+    /**
+     * Host-selected owner; packages must not invent workspace-local ownership.
+     *
+     * @generated from field: string owner_conformance_id = 6;
+     */
+    ownerConformanceId: string;
+};
+/**
+ * Describes the message quixos.runtime.InvocationContext.
+ * Use `create(InvocationContextSchema)` to create a new message.
+ */
+export declare const InvocationContextSchema: GenMessage<InvocationContext>;
+/**
+ * @generated from message quixos.runtime.InvocationControlRequest
+ */
+export type InvocationControlRequest = Message<"quixos.runtime.InvocationControlRequest"> & {
+    /**
+     * @generated from field: string invocation_id = 1;
+     */
+    invocationId: string;
+};
+/**
+ * Describes the message quixos.runtime.InvocationControlRequest.
+ * Use `create(InvocationControlRequestSchema)` to create a new message.
+ */
+export declare const InvocationControlRequestSchema: GenMessage<InvocationControlRequest>;
+/**
+ * @generated from message quixos.runtime.InvocationStatus
+ */
+export type InvocationStatus = Message<"quixos.runtime.InvocationStatus"> & {
+    /**
+     * @generated from field: string invocation_id = 1;
+     */
+    invocationId: string;
+    /**
+     * unknown, running, cancellation-requested, completed, failed
+     *
+     * @generated from field: string state = 2;
+     */
+    state: string;
+};
+/**
+ * Describes the message quixos.runtime.InvocationStatus.
+ * Use `create(InvocationStatusSchema)` to create a new message.
+ */
+export declare const InvocationStatusSchema: GenMessage<InvocationStatus>;
+/**
+ * @generated from message quixos.runtime.InvokeRequest
+ */
+export type InvokeRequest = Message<"quixos.runtime.InvokeRequest"> & {
+    /**
+     * @generated from field: string invocation_id = 1;
+     */
+    invocationId: string;
+    /**
+     * @generated from field: quixos.PackageExportRef export = 2;
+     */
+    export?: PackageExportRef | undefined;
+    /**
+     * @generated from field: string object_id = 3;
+     */
+    objectId: string;
+    /**
+     * @generated from field: map<string, camino.Value> input = 4;
+     */
+    input: {
+        [key: string]: Value;
+    };
+    /**
+     * @generated from field: repeated quixos.InjectedDependency dependencies = 5;
+     */
+    dependencies: InjectedDependency[];
+    /**
+     * @generated from field: quixos.runtime.InvocationContext context = 6;
+     */
+    context?: InvocationContext | undefined;
+};
+/**
+ * Describes the message quixos.runtime.InvokeRequest.
+ * Use `create(InvokeRequestSchema)` to create a new message.
+ */
+export declare const InvokeRequestSchema: GenMessage<InvokeRequest>;
+/**
+ * @generated from message quixos.runtime.InvokeResponse
+ */
+export type InvokeResponse = Message<"quixos.runtime.InvokeResponse"> & {
+    /**
+     * @generated from field: bool ok = 1;
+     */
+    ok: boolean;
+    /**
+     * @generated from field: camino.Value result = 2;
+     */
+    result?: Value | undefined;
+    /**
+     * @generated from field: string error = 3;
+     */
+    error: string;
+    /**
+     * @generated from field: repeated quixos.runtime.DerivedDependency dependencies = 4;
+     */
+    dependencies: DerivedDependency[];
+};
+/**
+ * Describes the message quixos.runtime.InvokeResponse.
+ * Use `create(InvokeResponseSchema)` to create a new message.
+ */
+export declare const InvokeResponseSchema: GenMessage<InvokeResponse>;
+/**
+ * @generated from message quixos.runtime.WatchRequest
+ */
+export type WatchRequest = Message<"quixos.runtime.WatchRequest"> & {
+    /**
+     * @generated from field: string invocation_id = 1;
+     */
+    invocationId: string;
+    /**
+     * @generated from field: quixos.PackageExportRef export = 2;
+     */
+    export?: PackageExportRef | undefined;
+    /**
+     * @generated from field: string object_id = 3;
+     */
+    objectId: string;
+    /**
+     * @generated from field: map<string, camino.Value> input = 4;
+     */
+    input: {
+        [key: string]: Value;
+    };
+    /**
+     * @generated from field: repeated quixos.InjectedDependency dependencies = 5;
+     */
+    dependencies: InjectedDependency[];
+    /**
+     * @generated from field: quixos.runtime.InvocationContext context = 6;
+     */
+    context?: InvocationContext | undefined;
+};
+/**
+ * Describes the message quixos.runtime.WatchRequest.
+ * Use `create(WatchRequestSchema)` to create a new message.
+ */
+export declare const WatchRequestSchema: GenMessage<WatchRequest>;
+/**
+ * @generated from message quixos.runtime.DerivedDependency
+ */
+export type DerivedDependency = Message<"quixos.runtime.DerivedDependency"> & {
+    /**
+     * @generated from field: string kind = 1;
+     */
+    kind: string;
+    /**
+     * @generated from field: string object_id = 2;
+     */
+    objectId: string;
+    /**
+     * @generated from field: string attachment_id = 3;
+     */
+    attachmentId: string;
+    /**
+     * @generated from field: string projection_id = 4;
+     */
+    projectionId: string;
+};
+/**
+ * Describes the message quixos.runtime.DerivedDependency.
+ * Use `create(DerivedDependencySchema)` to create a new message.
+ */
+export declare const DerivedDependencySchema: GenMessage<DerivedDependency>;
+/**
+ * @generated from message quixos.runtime.WatchEvent
+ */
+export type WatchEvent = Message<"quixos.runtime.WatchEvent"> & {
+    /**
+     * @generated from field: string watch_id = 1;
+     */
+    watchId: string;
+    /**
+     * @generated from field: camino.Value value = 2;
+     */
+    value?: Value | undefined;
+    /**
+     * @generated from field: repeated quixos.runtime.DerivedDependency dependencies = 3;
+     */
+    dependencies: DerivedDependency[];
+    /**
+     * @generated from field: string error = 4;
+     */
+    error: string;
+    /**
+     * @generated from field: bool initial = 5;
+     */
+    initial: boolean;
+};
+/**
+ * Describes the message quixos.runtime.WatchEvent.
+ * Use `create(WatchEventSchema)` to create a new message.
+ */
+export declare const WatchEventSchema: GenMessage<WatchEvent>;
+/**
+ * @generated from service quixos.runtime.PackageRuntime
+ */
+export declare const PackageRuntime: GenService<{
+    /**
+     * @generated from rpc quixos.runtime.PackageRuntime.Handshake
+     */
+    handshake: {
+        methodKind: "unary";
+        input: typeof HandshakeRequestSchema;
+        output: typeof HandshakeResponseSchema;
+    };
+    /**
+     * @generated from rpc quixos.runtime.PackageRuntime.Invoke
+     */
+    invoke: {
+        methodKind: "unary";
+        input: typeof InvokeRequestSchema;
+        output: typeof InvokeResponseSchema;
+    };
+    /**
+     * @generated from rpc quixos.runtime.PackageRuntime.Watch
+     */
+    watch: {
+        methodKind: "server_streaming";
+        input: typeof WatchRequestSchema;
+        output: typeof WatchEventSchema;
+    };
+    /**
+     * @generated from rpc quixos.runtime.PackageRuntime.GetInvocationStatus
+     */
+    getInvocationStatus: {
+        methodKind: "unary";
+        input: typeof InvocationControlRequestSchema;
+        output: typeof InvocationStatusSchema;
+    };
+    /**
+     * @generated from rpc quixos.runtime.PackageRuntime.CancelInvocation
+     */
+    cancelInvocation: {
+        methodKind: "unary";
+        input: typeof InvocationControlRequestSchema;
+        output: typeof InvocationStatusSchema;
+    };
+}>;
+//# sourceMappingURL=runtime_pb.d.ts.map

dist/quixos/runtime_pb.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime_pb.d.ts","sourceRoot":"","sources":["../../src/quixos/runtime_pb.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAEpF,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAC;AAEjD,OAAO,KAAK,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAEzE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAElD;;GAEG;AACH,eAAO,MAAM,mBAAmB,EAAE,OACypF,CAAC;AAE5rF;;GAEG;AACH,MAAM,MAAM,gBAAgB,GAAG,OAAO,CAAC,iCAAiC,CAAC,GAAG;IAC1E;;OAEG;IACH,mBAAmB,EAAE,MAAM,CAAC;IAE5B;;OAEG;IACH,KAAK,EAAE,MAAM,CAAC;CACf,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,sBAAsB,EAAE,UAAU,CAAC,gBAAgB,CAC3B,CAAC;AAEtC;;GAEG;AACH,MAAM,MAAM,iBAAiB,GAAG,OAAO,CAAC,kCAAkC,CAAC,GAAG;IAC5E;;OAEG;IACH,iBAAiB,EAAE,MAAM,CAAC;IAE1B;;OAEG;IACH,sBAAsB,EAAE,MAAM,CAAC;IAE/B;;OAEG;IACH,SAAS,EAAE,MAAM,EAAE,CAAC;IAEpB;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IAEnB;;OAEG;IACH,mBAAmB,EAAE,MAAM,CAAC;IAE5B;;OAEG;IACH,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,uBAAuB,EAAE,UAAU,CAAC,iBAAiB,CAC7B,CAAC;AAEtC;;GAEG;AACH,MAAM,MAAM,iBAAiB,GAAG,OAAO,CAAC,kCAAkC,CAAC,GAAG;IAC5E;;OAEG;IACH,cAAc,EAAE,MAAM,CAAC;IAEvB;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IAEnB;;OAEG;IACH,aAAa,EAAE,MAAM,CAAC;IAEtB;;OAEG;IACH,KAAK,EAAE,MAAM,CAAC;IAEd;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC;IAElB;;;;OAIG;IACH,kBAAkB,EAAE,MAAM,CAAC;CAC5B,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,uBAAuB,EAAE,UAAU,CAAC,iBAAiB,CAC7B,CAAC;AAEtC;;GAEG;AACH,MAAM,MAAM,wBAAwB,GAAG,OAAO,CAAC,yCAAyC,CAAC,GAAG;IAC1F;;OAEG;IACH,YAAY,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,8BAA8B,EAAE,UAAU,CAAC,wBAAwB,CAC3C,CAAC;AAEtC;;GAEG;AACH,MAAM,MAAM,gBAAgB,GAAG,OAAO,CAAC,iCAAiC,CAAC,GAAG;IAC1E;;OAEG;IACH,YAAY,EAAE,MAAM,CAAC;IAErB;;;;OAIG;IACH,KAAK,EAAE,MAAM,CAAC;CACf,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,sBAAsB,EAAE,UAAU,CAAC,gBAAgB,CAC3B,CAAC;AAEtC;;GAEG;AACH,MAAM,MAAM,aAAa,GAAG,OAAO,CAAC,8BAA8B,CAAC,GAAG;IACpE;;OAEG;IACH,YAAY,EAAE,MAAM,CAAC;IAErB;;OAEG;IACH,MAAM,CAAC,EAAE,gBAAgB,GAAG,SAAS,CAAC;IAEtC;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC;IAEjB;;OAEG;IACH,KAAK,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,KAAK,CAAA;KAAE,CAAC;IAEhC;;OAEG;IACH,YAAY,EAAE,kBAAkB,EAAE,CAAC;IAEnC;;OAEG;IACH,OAAO,CAAC,EAAE,iBAAiB,GAAG,SAAS,CAAC;CACzC,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,mBAAmB,EAAE,UAAU,CAAC,aAAa,CACrB,CAAC;AAEtC;;GAEG;AACH,MAAM,MAAM,cAAc,GAAG,OAAO,CAAC,+BAA+B,CAAC,GAAG;IACtE;;OAEG;IACH,EAAE,EAAE,OAAO,CAAC;IAEZ;;OAEG;IACH,MAAM,CAAC,EAAE,KAAK,GAAG,SAAS,CAAC;IAE3B;;OAEG;IACH,KAAK,EAAE,MAAM,CAAC;IAEd;;OAEG;IACH,YAAY,EAAE,iBAAiB,EAAE,CAAC;CACnC,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,oBAAoB,EAAE,UAAU,CAAC,cAAc,CACvB,CAAC;AAEtC;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG,OAAO,CAAC,6BAA6B,CAAC,GAAG;IAClE;;OAEG;IACH,YAAY,EAAE,MAAM,CAAC;IAErB;;OAEG;IACH,MAAM,CAAC,EAAE,gBAAgB,GAAG,SAAS,CAAC;IAEtC;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC;IAEjB;;OAEG;IACH,KAAK,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,KAAK,CAAA;KAAE,CAAC;IAEhC;;OAEG;IACH,YAAY,EAAE,kBAAkB,EAAE,CAAC;IAEnC;;OAEG;IACH,OAAO,CAAC,EAAE,iBAAiB,GAAG,SAAS,CAAC;CACzC,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,kBAAkB,EAAE,UAAU,CAAC,YAAY,CACnB,CAAC;AAEtC;;GAEG;AACH,MAAM,MAAM,iBAAiB,GAAG,OAAO,CAAC,kCAAkC,CAAC,GAAG;IAC5E;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;IAEb;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC;IAEjB;;OAEG;IACH,YAAY,EAAE,MAAM,CAAC;IAErB;;OAEG;IACH,YAAY,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,uBAAuB,EAAE,UAAU,CAAC,iBAAiB,CAC7B,CAAC;AAEtC;;GAEG;AACH,MAAM,MAAM,UAAU,GAAG,OAAO,CAAC,2BAA2B,CAAC,GAAG;IAC9D;;OAEG;IACH,OAAO,EAAE,MAAM,CAAC;IAEhB;;OAEG;IACH,KAAK,CAAC,EAAE,KAAK,GAAG,SAAS,CAAC;IAE1B;;OAEG;IACH,YAAY,EAAE,iBAAiB,EAAE,CAAC;IAElC;;OAEG;IACH,KAAK,EAAE,MAAM,CAAC;IAEd;;OAEG;IACH,OAAO,EAAE,OAAO,CAAC;CAClB,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,gBAAgB,EAAE,UAAU,CAAC,UAAU,CACf,CAAC;AAEtC;;GAEG;AACH,eAAO,MAAM,cAAc,EAAE,UAAU,CAAC;IACtC;;OAEG;IACH,SAAS,EAAE;QACT,UAAU,EAAE,OAAO,CAAC;QACpB,KAAK,EAAE,OAAO,sBAAsB,CAAC;QACrC,MAAM,EAAE,OAAO,uBAAuB,CAAC;KACxC,CAAC;IACF;;OAEG;IACH,MAAM,EAAE;QACN,UAAU,EAAE,OAAO,CAAC;QACpB,KAAK,EAAE,OAAO,mBAAmB,CAAC;QAClC,MAAM,EAAE,OAAO,oBAAoB,CAAC;KACrC,CAAC;IACF;;OAEG;IACH,KAAK,EAAE;QACL,UAAU,EAAE,kBAAkB,CAAC;QAC/B,KAAK,EAAE,OAAO,kBAAkB,CAAC;QACjC,MAAM,EAAE,OAAO,gBAAgB,CAAC;KACjC,CAAC;IACF;;OAEG;IACH,mBAAmB,EAAE;QACnB,UAAU,EAAE,OAAO,CAAC;QACpB,KAAK,EAAE,OAAO,8BAA8B,CAAC;QAC7C,MAAM,EAAE,OAAO,sBAAsB,CAAC;KACvC,CAAC;IACF;;OAEG;IACH,gBAAgB,EAAE;QAChB,UAAU,EAAE,OAAO,CAAC;QACpB,KAAK,EAAE,OAAO,8BAA8B,CAAC;QAC7C,MAAM,EAAE,OAAO,sBAAsB,CAAC;KACvC,CAAC;CACH,CACoC,CAAC"}

dist/quixos/runtime_pb.js

@@ -0,0 +1,64 @@
+// @generated by protoc-gen-es v2.12.1 with parameter "target=ts,import_extension=js"
+// @generated from file quixos/runtime.proto (package quixos.runtime, syntax proto3)
+/* eslint-disable */
+import { fileDesc, messageDesc, serviceDesc } from "@bufbuild/protobuf/codegenv2";
+import { file_camino_api } from "../camino/api_pb.js";
+import { file_quixos_refs } from "./refs_pb.js";
+/**
+ * Describes the file quixos/runtime.proto.
+ */
+export const file_quixos_runtime = /*@__PURE__*/ fileDesc("ChRxdWl4b3MvcnVudGltZS5wcm90bxIOcXVpeG9zLnJ1bnRpbWUiQAoQSGFuZHNoYWtlUmVxdWVzdBIdChVvcmNoX3Byb3RvY29sX3ZlcnNpb24YASABKAkSDQoFbm9uY2UYAiABKAkirwEKEUhhbmRzaGFrZVJlc3BvbnNlEhsKE3BhY2thZ2VfcmV2aXNpb25faWQYASABKAkSIAoYcnVudGltZV9wcm90b2NvbF92ZXJzaW9uGAIgASgJEhIKCmV4cG9ydF9pZHMYAyADKAkSEwoLaW5zdGFuY2VfaWQYBCABKAkSHAoUYXV0aGVudGljYXRpb25fcHJvb2YYBSABKAkSFAoMY2FwYWJpbGl0aWVzGAYgAygJIpoBChFJbnZvY2F0aW9uQ29udGV4dBIXCg93b3Jrc3BhY2VfZXBvY2gYASABKAkSEwoLaW5zdGFuY2VfaWQYAiABKAkSFgoOYmluZGluZ19kaWdlc3QYAyABKAkSDQoFZ3JhbnQYBCABKAkSEgoKc2Vzc2lvbl9pZBgFIAEoCRIcChRvd25lcl9jb25mb3JtYW5jZV9pZBgGIAEoCSIxChhJbnZvY2F0aW9uQ29udHJvbFJlcXVlc3QSFQoNaW52b2NhdGlvbl9pZBgBIAEoCSI4ChBJbnZvY2F0aW9uU3RhdHVzEhUKDWludm9jYXRpb25faWQYASABKAkSDQoFc3RhdGUYAiABKAkivwIKDUludm9rZVJlcXVlc3QSFQoNaW52b2NhdGlvbl9pZBgBIAEoCRIoCgZleHBvcnQYAiABKAsyGC5xdWl4b3MuUGFja2FnZUV4cG9ydFJlZhIRCglvYmplY3RfaWQYAyABKAkSNwoFaW5wdXQYBCADKAsyKC5xdWl4b3MucnVudGltZS5JbnZva2VSZXF1ZXN0LklucHV0RW50cnkSMAoMZGVwZW5kZW5jaWVzGAUgAygLMhoucXVpeG9zLkluamVjdGVkRGVwZW5kZW5jeRIyCgdjb250ZXh0GAYgASgLMiEucXVpeG9zLnJ1bnRpbWUuSW52b2NhdGlvbkNvbnRleHQaOwoKSW5wdXRFbnRyeRILCgNrZXkYASABKAkSHAoFdmFsdWUYAiABKAsyDS5jYW1pbm8uVmFsdWU6AjgBIoMBCg5JbnZva2VSZXNwb25zZRIKCgJvaxgBIAEoCBIdCgZyZXN1bHQYAiABKAsyDS5jYW1pbm8uVmFsdWUSDQoFZXJyb3IYAyABKAkSNwoMZGVwZW5kZW5jaWVzGAQgAygLMiEucXVpeG9zLnJ1bnRpbWUuRGVyaXZlZERlcGVuZGVuY3kivQIKDFdhdGNoUmVxdWVzdBIVCg1pbnZvY2F0aW9uX2lkGAEgASgJEigKBmV4cG9ydBgCIAEoCzIYLnF1aXhvcy5QYWNrYWdlRXhwb3J0UmVmEhEKCW9iamVjdF9pZBgDIAEoCRI2CgVpbnB1dBgEIAMoCzInLnF1aXhvcy5ydW50aW1lLldhdGNoUmVxdWVzdC5JbnB1dEVudHJ5EjAKDGRlcGVuZGVuY2llcxgFIAMoCzIaLnF1aXhvcy5JbmplY3RlZERlcGVuZGVuY3kSMgoHY29udGV4dBgGIAEoCzIhLnF1aXhvcy5ydW50aW1lLkludm9jYXRpb25Db250ZXh0GjsKCklucHV0RW50cnkSCwoDa2V5GAEgASgJEhwKBXZhbHVlGAIgASgLMg0uY2FtaW5vLlZhbHVlOgI4ASJiChFEZXJpdmVkRGVwZW5kZW5jeRIMCgRraW5kGAEgASgJEhEKCW9iamVjdF9pZBgCIAEoCRIVCg1hdHRhY2htZW50X2lkGAMgASgJEhUKDXByb2plY3Rpb25faWQYBCABKAkilQEKCldhdGNoRXZlbnQSEAoId2F0Y2hfaWQYASABKAkSHAoFdmFsdWUYAiABKAsyDS5jYW1pbm8uVmFsdWUSNwoMZGVwZW5kZW5jaWVzGAMgAygLMiEucXVpeG9zLnJ1bnRpbWUuRGVyaXZlZERlcGVuZGVuY3kSDQoFZXJyb3IYBCABKAkSDwoHaW5pdGlhbBgFIAEoCDKzAwoOUGFja2FnZVJ1bnRpbWUSUAoJSGFuZHNoYWtlEiAucXVpeG9zLnJ1bnRpbWUuSGFuZHNoYWtlUmVxdWVzdBohLnF1aXhvcy5ydW50aW1lLkhhbmRzaGFrZVJlc3BvbnNlEkcKBkludm9rZRIdLnF1aXhvcy5ydW50aW1lLkludm9rZVJlcXVlc3QaHi5xdWl4b3MucnVudGltZS5JbnZva2VSZXNwb25zZRJDCgVXYXRjaBIcLnF1aXhvcy5ydW50aW1lLldhdGNoUmVxdWVzdBoaLnF1aXhvcy5ydW50aW1lLldhdGNoRXZlbnQwARJhChNHZXRJbnZvY2F0aW9uU3RhdHVzEigucXVpeG9zLnJ1bnRpbWUuSW52b2NhdGlvbkNvbnRyb2xSZXF1ZXN0GiAucXVpeG9zLnJ1bnRpbWUuSW52b2NhdGlvblN0YXR1cxJeChBDYW5jZWxJbnZvY2F0aW9uEigucXVpeG9zLnJ1bnRpbWUuSW52b2NhdGlvbkNvbnRyb2xSZXF1ZXN0GiAucXVpeG9zLnJ1bnRpbWUuSW52b2NhdGlvblN0YXR1c2IGcHJvdG8z", [file_camino_api, file_quixos_refs]);
+/**
+ * Describes the message quixos.runtime.HandshakeRequest.
+ * Use `create(HandshakeRequestSchema)` to create a new message.
+ */
+export const HandshakeRequestSchema = /*@__PURE__*/ messageDesc(file_quixos_runtime, 0);
+/**
+ * Describes the message quixos.runtime.HandshakeResponse.
+ * Use `create(HandshakeResponseSchema)` to create a new message.
+ */
+export const HandshakeResponseSchema = /*@__PURE__*/ messageDesc(file_quixos_runtime, 1);
+/**
+ * Describes the message quixos.runtime.InvocationContext.
+ * Use `create(InvocationContextSchema)` to create a new message.
+ */
+export const InvocationContextSchema = /*@__PURE__*/ messageDesc(file_quixos_runtime, 2);
+/**
+ * Describes the message quixos.runtime.InvocationControlRequest.
+ * Use `create(InvocationControlRequestSchema)` to create a new message.
+ */
+export const InvocationControlRequestSchema = /*@__PURE__*/ messageDesc(file_quixos_runtime, 3);
+/**
+ * Describes the message quixos.runtime.InvocationStatus.
+ * Use `create(InvocationStatusSchema)` to create a new message.
+ */
+export const InvocationStatusSchema = /*@__PURE__*/ messageDesc(file_quixos_runtime, 4);
+/**
+ * Describes the message quixos.runtime.InvokeRequest.
+ * Use `create(InvokeRequestSchema)` to create a new message.
+ */
+export const InvokeRequestSchema = /*@__PURE__*/ messageDesc(file_quixos_runtime, 5);
+/**
+ * Describes the message quixos.runtime.InvokeResponse.
+ * Use `create(InvokeResponseSchema)` to create a new message.
+ */
+export const InvokeResponseSchema = /*@__PURE__*/ messageDesc(file_quixos_runtime, 6);
+/**
+ * Describes the message quixos.runtime.WatchRequest.
+ * Use `create(WatchRequestSchema)` to create a new message.
+ */
+export const WatchRequestSchema = /*@__PURE__*/ messageDesc(file_quixos_runtime, 7);
+/**
+ * Describes the message quixos.runtime.DerivedDependency.
+ * Use `create(DerivedDependencySchema)` to create a new message.
+ */
+export const DerivedDependencySchema = /*@__PURE__*/ messageDesc(file_quixos_runtime, 8);
+/**
+ * Describes the message quixos.runtime.WatchEvent.
+ * Use `create(WatchEventSchema)` to create a new message.
+ */
+export const WatchEventSchema = /*@__PURE__*/ messageDesc(file_quixos_runtime, 9);
+/**
+ * @generated from service quixos.runtime.PackageRuntime
+ */
+export const PackageRuntime = /*@__PURE__*/ serviceDesc(file_quixos_runtime, 0);

dist/references.d.ts

@@ -0,0 +1,14 @@
+declare const referenceBrand: unique symbol;
+export interface QxObjectRef<Identity extends string = string> {
+    readonly [referenceBrand]: {
+        readonly [K in Identity]: true;
+    };
+    equals(other: QxObjectRef<string>): boolean;
+}
+export declare const isObjectReference: (value: unknown) => value is QxObjectRef;
+/** Internal transport boundary; intentionally not exported from the SDK entry. */
+export declare const referenceFromWire: (id: string) => QxObjectRef;
+export declare const referenceToWire: (value: unknown) => string;
+export declare const assertReferenceFree: (value: unknown, seen?: Set<object>) => void;
+export {};
+//# sourceMappingURL=references.d.ts.map

dist/references.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"references.d.ts","sourceRoot":"","sources":["../src/references.ts"],"names":[],"mappings":"AAGA,OAAO,CAAC,MAAM,cAAc,EAAE,OAAO,MAAM,CAAC;AAC5C,MAAM,WAAW,WAAW,CAAC,QAAQ,SAAS,MAAM,GAAG,MAAM;IAC3D,QAAQ,CAAC,CAAC,cAAc,CAAC,EAAE;QAAC,QAAQ,EAAE,CAAC,IAAI,QAAQ,GAAG,IAAI;KAAC,CAAC;IAC5D,MAAM,CAAC,KAAK,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC;CAC7C;AAQD,eAAO,MAAM,iBAAiB,UAAW,OAAO,KAAG,KAAK,IAAI,WACU,CAAC;AAEvE,kFAAkF;AAClF,eAAO,MAAM,iBAAiB,OAAQ,MAAM,KAAG,WAG9C,CAAC;AACF,eAAO,MAAM,eAAe,UAAW,OAAO,KAAG,MAGhD,CAAC;AACF,eAAO,MAAM,mBAAmB,UAAW,OAAO,yBAA6B,IAO9E,CAAC"}

dist/references.js

@@ -0,0 +1,35 @@
+/** Opaque runtime identity. The wire codec, never ordinary package state, owns
+ * the raw ID. These handles do not themselves confer authority or a lease. */
+const identities = new WeakMap();
+class Reference {
+    constructor(id) { identities.set(this, id); Object.freeze(this); }
+    equals(other) { return isObjectReference(other) && identities.get(this) === identities.get(other); }
+    toJSON() { throw new Error("Object references cannot be serialized into ordinary data"); }
+    toString() { throw new Error("Object references cannot be coerced to strings"); }
+    [Symbol.toPrimitive]() { throw new Error("Object references cannot be coerced to scalar values"); }
+}
+export const isObjectReference = (value) => typeof value === "object" && value !== null && identities.has(value);
+/** Internal transport boundary; intentionally not exported from the SDK entry. */
+export const referenceFromWire = (id) => {
+    if (typeof id !== "string" || !id)
+        throw new Error("Missing object reference identity");
+    return new Reference(id);
+};
+export const referenceToWire = (value) => {
+    if (!isObjectReference(value))
+        throw new Error("Expected an opaque object reference, not a raw ID");
+    return identities.get(value);
+};
+export const assertReferenceFree = (value, seen = new Set()) => {
+    if (!value || typeof value !== "object")
+        return;
+    if (isObjectReference(value))
+        throw new Error("Managed references belong in declared RPC references or graph relationships, not ordinary state/messages");
+    if (seen.has(value))
+        throw new Error("Cyclic ordinary data");
+    seen.add(value);
+    if (!(value instanceof Uint8Array))
+        for (const child of Object.values(value))
+            assertReferenceFree(child, seen);
+    seen.delete(value);
+};

dist/relationships.d.ts

@@ -0,0 +1,30 @@
+import type { QxObjectRef } from "./references.js";
+import type { RelationshipCollection, RelationshipEntry } from "./index.js";
+type Key = string | boolean | bigint;
+type Port<T extends QxObjectRef> = {
+    collection(): Promise<RelationshipCollection<T>>;
+    replace(entries: RelationshipEntry<T>[], expectedRevision: bigint): Promise<RelationshipCollection<T>>;
+};
+/** Helpers never retry a failed CAS or silently overwrite concurrent edits. */
+export declare const relationshipMap: <T extends QxObjectRef, K extends Key = Key>(port: Port<T>) => {
+    read: () => Promise<RelationshipCollection<T>>;
+    get(key: K): Promise<{
+        revision: bigint;
+        value: T | undefined;
+    }>;
+    set(key: K, target: T, expectedRevision: bigint): Promise<RelationshipCollection<T>>;
+    delete(key: K, expectedRevision: bigint): Promise<RelationshipCollection<T>>;
+};
+export declare const relationshipList: <T extends QxObjectRef>(port: Port<T>) => {
+    read: () => Promise<RelationshipCollection<T>>;
+    insert(index: number, target: T, expectedRevision: bigint): Promise<RelationshipCollection<T>>;
+    move(edgeId: string, index: number, expectedRevision: bigint): Promise<RelationshipCollection<T>>;
+    delete(edgeId: string, expectedRevision: bigint): Promise<RelationshipCollection<T>>;
+};
+export declare const relationshipSet: <T extends QxObjectRef>(port: Port<T>) => {
+    read: () => Promise<RelationshipCollection<T>>;
+    add(target: T, expectedRevision: bigint): Promise<RelationshipCollection<T>>;
+    delete(target: T, expectedRevision: bigint): Promise<RelationshipCollection<T>>;
+};
+export {};
+//# sourceMappingURL=relationships.d.ts.map

dist/relationships.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"relationships.d.ts","sourceRoot":"","sources":["../src/relationships.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAC,WAAW,EAAC,MAAM,iBAAiB,CAAC;AACjD,OAAO,KAAK,EAAC,sBAAsB,EAAE,iBAAiB,EAAC,MAAM,YAAY,CAAC;AAC1E,KAAK,GAAG,GAAG,MAAM,GAAG,OAAO,GAAG,MAAM,CAAC;AACrC,KAAK,IAAI,CAAC,CAAC,SAAS,WAAW,IAAI;IAAC,UAAU,IAAI,OAAO,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,CAAC;IAAC,OAAO,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC,CAAC,EAAE,EAAE,gBAAgB,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,CAAA;CAAC,CAAC;AAM9L,+EAA+E;AAC/E,eAAO,MAAM,eAAe,GAAI,CAAC,SAAS,WAAW,EAAE,CAAC,SAAS,GAAG,GAAG,GAAG,QAAQ,IAAI,CAAC,CAAC,CAAC;IACvF,IAAI;IACE,GAAG,MAAM,CAAC;;;;IACV,GAAG,MAAM,CAAC,UAAU,CAAC,oBAAoB,MAAM;IAO/C,MAAM,MAAM,CAAC,oBAAoB,MAAM;CAI7C,CAAC;AACH,eAAO,MAAM,gBAAgB,GAAI,CAAC,SAAS,WAAW,QAAQ,IAAI,CAAC,CAAC,CAAC;IACnE,IAAI;IACE,MAAM,QAAQ,MAAM,UAAU,CAAC,oBAAoB,MAAM;IAMzD,IAAI,SAAS,MAAM,SAAS,MAAM,oBAAoB,MAAM;IAQ5D,MAAM,SAAS,MAAM,oBAAoB,MAAM;CAKrD,CAAC;AACH,eAAO,MAAM,eAAe,GAAI,CAAC,SAAS,WAAW,QAAQ,IAAI,CAAC,CAAC,CAAC;IAClE,IAAI;IACE,GAAG,SAAS,CAAC,oBAAoB,MAAM;IAKvC,MAAM,SAAS,CAAC,oBAAoB,MAAM;CAIhD,CAAC"}

dist/relationships.js

@@ -0,0 +1,60 @@
+const checked = async (port, revision) => {
+    const snapshot = await port.collection();
+    if (snapshot.revision !== revision)
+        throw new Error("STALE_COLLECTION_REVISION");
+    return snapshot;
+};
+/** Helpers never retry a failed CAS or silently overwrite concurrent edits. */
+export const relationshipMap = (port) => ({
+    read: () => port.collection(),
+    async get(key) { const snapshot = await port.collection(); return { revision: snapshot.revision, value: snapshot.entries.find((entry) => entry.key === key)?.target }; },
+    async set(key, target, expectedRevision) {
+        const snapshot = await checked(port, expectedRevision);
+        const entries = snapshot.entries.filter((entry) => entry.key !== key);
+        const existing = snapshot.entries.find((entry) => entry.key === key && entry.target.equals(target));
+        entries.push(existing ?? { key, target });
+        return port.replace(entries, expectedRevision);
+    },
+    async delete(key, expectedRevision) {
+        const snapshot = await checked(port, expectedRevision);
+        return port.replace(snapshot.entries.filter((entry) => entry.key !== key), expectedRevision);
+    },
+});
+export const relationshipList = (port) => ({
+    read: () => port.collection(),
+    async insert(index, target, expectedRevision) {
+        const snapshot = await checked(port, expectedRevision);
+        if (!Number.isSafeInteger(index) || index < 0 || index > snapshot.entries.length)
+            throw new Error("List index out of bounds");
+        snapshot.entries.splice(index, 0, { target });
+        return port.replace(snapshot.entries, expectedRevision);
+    },
+    async move(edgeId, index, expectedRevision) {
+        const snapshot = await checked(port, expectedRevision);
+        const prior = snapshot.entries.findIndex((entry) => entry.edgeId === edgeId);
+        if (prior < 0 || !Number.isSafeInteger(index) || index < 0 || index >= snapshot.entries.length)
+            throw new Error("Unknown list entry or invalid index");
+        const [entry] = snapshot.entries.splice(prior, 1);
+        snapshot.entries.splice(index, 0, entry);
+        return port.replace(snapshot.entries, expectedRevision);
+    },
+    async delete(edgeId, expectedRevision) {
+        const snapshot = await checked(port, expectedRevision);
+        if (!snapshot.entries.some((entry) => entry.edgeId === edgeId))
+            throw new Error("Unknown list entry");
+        return port.replace(snapshot.entries.filter((entry) => entry.edgeId !== edgeId), expectedRevision);
+    },
+});
+export const relationshipSet = (port) => ({
+    read: () => port.collection(),
+    async add(target, expectedRevision) {
+        const snapshot = await checked(port, expectedRevision);
+        if (snapshot.entries.some((entry) => entry.target.equals(target)))
+            return snapshot;
+        return port.replace([...snapshot.entries, { target }], expectedRevision);
+    },
+    async delete(target, expectedRevision) {
+        const snapshot = await checked(port, expectedRevision);
+        return port.replace(snapshot.entries.filter((entry) => !entry.target.equals(target)), expectedRevision);
+    },
+});

flake.lock

@@ -74,17 +74,17 @@
         "nixpkgs": "nixpkgs_2"
       },
       "locked": {
-        "lastModified": 1783890039,
-        "narHash": "sha256-5R7WV6KCSYwQ9SmjmIvRovPjG551icfYa7XHBz68sYA=",
-        "ref": "refs/heads/exported",
-        "rev": "a287ab31330222d7dcd517c640a5de89f48bc4d0",
-        "revCount": 4,
+        "lastModified": 1789328055,
+        "narHash": "sha256-tZVGOpDnT80j3roNQXpCxw8BxNZxqVutclxr49Vhg4w=",
+        "ref": "refs/tags/quixos-reachability/9867bf4552c09ee71ebeefe08e652fd870894130",
+        "rev": "9867bf4552c09ee71ebeefe08e652fd870894130",
+        "revCount": 45,
         "type": "git",
         "url": "https://gitea-external.egads.tutti.syntaxblitz.net/quixos/quixos-protocol.git"
       },
       "original": {
-        "ref": "refs/heads/exported",
-        "rev": "a287ab31330222d7dcd517c640a5de89f48bc4d0",
+        "ref": "refs/tags/quixos-reachability/9867bf4552c09ee71ebeefe08e652fd870894130",
+        "rev": "9867bf4552c09ee71ebeefe08e652fd870894130",
         "type": "git",
         "url": "https://gitea-external.egads.tutti.syntaxblitz.net/quixos/quixos-protocol.git"
       }
@@ -92,17 +92,17 @@
     "quixosNixHelpers": {
       "flake": false,
       "locked": {
-        "lastModified": 1783886666,
-        "narHash": "sha256-y52TlYwH9RBzzyhpkY/eB21t85BE84idpsg8618MIHg=",
-        "ref": "refs/heads/exported",
-        "rev": "81e55657d9ce0ba092cffd69ee15179ea02aa598",
-        "revCount": 2,
+        "lastModified": 1788574090,
+        "narHash": "sha256-bSgc0LS2Ub01fnE14VqazdZzFuVPl4sykmA2d1l4kDs=",
+        "ref": "refs/tags/quixos-reachability/7177130c0365f2fa58ea4877366e1c5d17db4c01",
+        "rev": "7177130c0365f2fa58ea4877366e1c5d17db4c01",
+        "revCount": 4,
         "type": "git",
         "url": "https://gitea-external.egads.tutti.syntaxblitz.net/quixos/quixos-nix-helpers.git"
       },
       "original": {
-        "ref": "refs/heads/exported",
-        "rev": "81e55657d9ce0ba092cffd69ee15179ea02aa598",
+        "ref": "refs/tags/quixos-reachability/7177130c0365f2fa58ea4877366e1c5d17db4c01",
+        "rev": "7177130c0365f2fa58ea4877366e1c5d17db4c01",
         "type": "git",
         "url": "https://gitea-external.egads.tutti.syntaxblitz.net/quixos/quixos-nix-helpers.git"
       }

flake.nix

@@ -4,9 +4,9 @@
   inputs = {
     nixpkgs.url = "github:NixOS/nixpkgs/nixos-unstable";
     flake-utils.url = "github:numtide/flake-utils";
-    quixos-protocol.url = "git+https://gitea-external.egads.tutti.syntaxblitz.net/quixos/quixos-protocol.git?ref=refs/heads/exported&rev=a287ab31330222d7dcd517c640a5de89f48bc4d0";
+    quixos-protocol.url = "git+https://gitea-external.egads.tutti.syntaxblitz.net/quixos/quixos-protocol.git?ref=refs/tags/quixos-reachability/9867bf4552c09ee71ebeefe08e652fd870894130&rev=9867bf4552c09ee71ebeefe08e652fd870894130";
     quixosNixHelpers = {
-      url = "git+https://gitea-external.egads.tutti.syntaxblitz.net/quixos/quixos-nix-helpers.git?ref=refs/heads/exported&rev=81e55657d9ce0ba092cffd69ee15179ea02aa598";
+      url = "git+https://gitea-external.egads.tutti.syntaxblitz.net/quixos/quixos-nix-helpers.git?ref=refs/tags/quixos-reachability/7177130c0365f2fa58ea4877366e1c5d17db4c01&rev=7177130c0365f2fa58ea4877366e1c5d17db4c01";
       flake = false;
     };
   };
@@ -14,8 +14,7 @@
   outputs = inputs@{ nixpkgs, flake-utils, quixosNixHelpers, ... }:
     let
       quixosHelpers = import "${quixosNixHelpers}/quixos-package-helpers.nix";
-    in
-    quixosHelpers.mkCaminoTsYarnNixifyFlake {
+      packageOutputs = quixosHelpers.mkCaminoTsYarnNixifyFlake {
         inherit inputs nixpkgs flake-utils;
         packageRoot = ./.;
         sourceName = "quixos-camino-package-runtime-source";
@@ -33,4 +32,18 @@
           export QUIXOS_PROTO_PATH="${pkgs.protobuf}/include:${inputs.quixos-protocol.packages.${system}.default}/proto''${QUIXOS_PROTO_PATH:+:$QUIXOS_PROTO_PATH}"
         '';
       };
+    in
+    packageOutputs // flake-utils.lib.eachDefaultSystem (system:
+      let
+        pkgs = import nixpkgs { inherit system; };
+        builtPackage = packageOutputs.packages.${system}.default;
+      in
+      {
+        checks.dist-current = pkgs.runCommand "camino-package-runtime-dist-current" { } ''
+          diff --recursive --unified \
+            ${./dist} \
+            ${builtPackage}/libexec/-quixos-camino-package-runtime/dist
+          touch "$out"
+        '';
+      });
 }

package.json

@@ -2,18 +2,21 @@
   "name": "@quixos/camino-package-runtime",
   "version": "0.1.0",
   "private": true,
-  "packageManager": "yarn@4.14.1",
+  "packageManager": "yarn@4.18.0",
   "type": "module",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
   "exports": {
     ".": {
-      "types": "./src/index.ts",
-      "default": "./src/index.ts"
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
     }
   },
   "scripts": {
-    "build": "yarn generate && tsc -p tsconfig.json",
-    "generate": "rm -rf src/camino src/quixos && protoc --es_out=src --es_opt=target=ts,import_extension=js --proto_path=$QUIXOS_PROTO_PATH quixos/refs.proto quixos/runtime.proto camino/schema.proto camino/api.proto",
-    "typecheck": "yarn generate && tsc --noEmit"
+    "build": "rm -rf dist && yarn generate && tsc -p tsconfig.json",
+    "generate": "rm -rf src/camino src/quixos && protoc --experimental_allow_proto3_optional --es_out=src --es_opt=target=ts,import_extension=js --proto_path=$QUIXOS_PROTO_PATH quixos/refs.proto quixos/runtime.proto quixos/orch.proto quixos/package.proto camino/schema.proto camino/api.proto",
+    "typecheck": "yarn generate && tsc --noEmit",
+    "test": "yarn build && node --test test/*.test.mjs"
   },
   "dependencies": {
     "@bufbuild/protobuf": "^2.12.1",
@@ -23,6 +26,6 @@
   "devDependencies": {
     "@bufbuild/protoc-gen-es": "^2.12.1",
     "@types/node": "^24",
-    "typescript": "^5.9.3"
+    "typescript": "^7.0.2"
   }
 }

src/bindings.ts

@@ -0,0 +1,165 @@
+import { create } from "@bufbuild/protobuf";
+import { ValueSchema, ObjectValueSchema, type Value } from "./camino/api_pb.js";
+import { derived, jsToProtoValue, liveValue, protoValueToJs,
+  type RuntimeContext, type RuntimeHandler, type DerivedHandler } from "./index.js";
+
+export type { QxObjectRef } from "./references.js";
+import { assertReferenceFree, referenceToWire } from "./references.js";
+declare const watchBrand: unique symbol;
+export type QxWatchHandle = string & { readonly [watchBrand]: true };
+export type MessageBinding<T> = { encode(value: T): Value; decode(value: Value): T };
+export type BindingValue<B> = B extends MessageBinding<infer T> ? T : never;
+export type QxHandler<C, O> = (context: C) => O | Promise<O>;
+export type QxDerived<C, O> = { kind: "derived"; get: QxHandler<C, O> };
+export type QxSession<C> = {id: string; run<T>(work: (context: C) => Promise<T>): Promise<T>; close(): Promise<void>};
+export type QxContextLifecycle<C> = {signal?: AbortSignal; openSession?: () => Promise<QxSession<C>>};
+export const qxDerived = <C, O>(get: QxHandler<C, O>): QxDerived<C, O> => ({ kind: "derived", get });
+
+/** Versioned binding ABI. This mirrors the language-neutral value IR. */
+export type QxValueType =
+  | { kind: "builtin"; name: "unit" | "watch-handle" }
+  | { kind: "scalar"; name: string }
+  | { kind: "message"; descriptorId: string }
+  | { kind: "record"; fields: Record<string, QxValueType> }
+  | { kind: "object-ref"; expectation: unknown }
+  | { kind: "optional" | "list"; value: QxValueType };
+export type QxOperationSpec = { id: string; inputType: QxValueType; outputType: QxValueType };
+export type QxPortSpec =
+  | { kind: "state"; id: string; valueType: QxValueType; primitives: string[] }
+  | { kind: "edge"; id: string; primitives: string[] }
+  | { kind: "interface"; id: string; operations: Record<string, QxOperationSpec> }
+  | { kind: "constructor"; id: string; inputType: QxValueType };
+export type QxHandlerSpec = {
+  inputType: QxValueType; outputType: QxValueType; eventType?: QxValueType;
+  ports: Record<string, QxPortSpec>;
+};
+export type QxMessages = Record<string, MessageBinding<any>>;
+
+// Conversion belongs at the binding boundary. It does not add orchestrator validation.
+export const decodeQxValue = (type: QxValueType, value: Value | undefined, messages: QxMessages): any => {
+  if (type.kind === "builtin" && type.name === "unit") return null;
+  if (type.kind === "optional" && !value) return null;
+  if (!value) throw new Error("Missing QX wire value");
+  if (type.kind === "record") {
+    if (value.kind.case !== "objectValue") throw new Error("Expected QX record");
+    const fields = value.kind.value.fields;
+    if (Object.keys(fields).some((name) => !Object.hasOwn(type.fields, name))) throw new Error("Unexpected QX record field");
+    return Object.fromEntries(Object.entries(type.fields).map(([name, field]) => [name, decodeQxValue(field, fields[name], messages)]));
+  }
+  if (type.kind === "optional") return value.kind.case === "nullValue" ? null : decodeQxValue(type.value, value, messages);
+  if (type.kind === "list") {
+    if (value.kind.case !== "listValue") throw new Error("Expected QX list");
+    return value.kind.value.values.map((entry) => decodeQxValue(type.value, entry, messages));
+  }
+  if (type.kind === "message") {
+    assertReferenceFree(protoValueToJs(value));
+    const decoded = requireMessage(messages, type.descriptorId).decode(value);
+    assertReferenceFree(decoded);
+    return decoded;
+  }
+  if (type.kind === "object-ref") {
+    if (value.kind.case !== "refValue") throw new Error("Expected a declared RPC object reference");
+    return protoValueToJs(value);
+  }
+  if (value.kind.case === "refValue") throw new Error("Reference supplied to a non-reference value");
+  if (type.kind === "scalar") {
+    if (type.name === "int64" || type.name === "uint64") {
+      if (value.kind.case !== "integerValue") throw new Error("Expected QX integer");
+      return BigInt(value.kind.value);
+    }
+    if (type.name === "bytes") {
+      if (value.kind.case !== "bytesValue") throw new Error("Expected QX bytes");
+      return value.kind.value;
+    }
+  }
+  return protoValueToJs(value);
+};
+
+const requireMessage = (messages: QxMessages, id: string) => {
+  const binding = messages[id];
+  if (!binding) throw new Error(`Missing message binding ${id}`);
+  return binding;
+};
+export const encodeQxValue = (type: QxValueType, value: any, messages: QxMessages): Value => {
+  if (type.kind === "builtin" && type.name === "unit") return jsToProtoValue(null);
+  if (type.kind === "record") {
+    if (!value || typeof value !== "object" || Array.isArray(value)) throw new Error("Expected QX record");
+    if (Object.keys(value).some((name) => !Object.hasOwn(type.fields, name))) throw new Error("Unexpected QX record field");
+    const fields = Object.fromEntries(Object.entries(type.fields).map(([name, field]) => {
+      if (!Object.hasOwn(value, name) && field.kind !== "optional") throw new Error(`Missing QX record field ${name}`);
+      return [name, encodeQxValue(field, value[name] ?? (field.kind === "optional" ? null : value[name]), messages)];
+    }));
+    return create(ValueSchema, {kind: {case: "objectValue", value: create(ObjectValueSchema, {fields})}});
+  }
+  if (type.kind === "optional") return value === null ? jsToProtoValue(null) : encodeQxValue(type.value, value, messages);
+  if (type.kind === "list") return jsToProtoValue(value.map((entry: unknown) => liveValue(encodeQxValue(type.value, entry, messages))));
+  if (type.kind === "object-ref") { referenceToWire(value); return jsToProtoValue(value); }
+  assertReferenceFree(value);
+  if (type.kind === "message") {
+    const encoded = requireMessage(messages, type.descriptorId).encode(value);
+    assertReferenceFree(protoValueToJs(encoded));
+    return encoded;
+  }
+  return jsToProtoValue(value);
+};
+
+const inputValue = (context: RuntimeContext, type: QxValueType) => {
+  if (type.kind === "message" || type.kind === "record") return create(ValueSchema, { kind: { case: "objectValue",
+    value: create(ObjectValueSchema, { fields: context.inputProto }) } });
+  return context.inputProto.value;
+};
+const inputFields = (type: QxValueType, value: unknown, messages: QxMessages): Record<string, unknown> => {
+  if (type.kind === "builtin" && type.name === "unit") return {};
+  const encoded = encodeQxValue(type, value, messages);
+  if (type.kind === "message" || type.kind === "record") {
+    if (encoded.kind.case !== "objectValue") throw new Error("Message inputs must encode an object value");
+    return Object.fromEntries(Object.entries(encoded.kind.value.fields).map(([key, entry]) => [key, liveValue(entry)]));
+  }
+  return { value: liveValue(encoded) };
+};
+
+/** The sole unchecked cast connects generated contracts to the dynamic RPC runtime. */
+export const bindQxHandler = <C, O>(
+  spec: QxHandlerSpec, handler: QxHandler<C, O> | QxDerived<C, O>, messages: QxMessages,
+): RuntimeHandler | DerivedHandler => {
+  const bindContext = (raw: RuntimeContext): C => {
+    const ports = Object.fromEntries(Object.entries(spec.ports).map(([name, port]) => {
+      switch (port.kind) {
+        case "state": {
+          const state = raw.state(port.id);
+          return [name, {
+            ...(port.primitives.includes("read") ? { get: async () => decodeQxValue(port.valueType, (await state.live()).$quixosValue, messages) } : {}),
+            ...(port.primitives.includes("write") ? { set: async (value: unknown) => state.set(liveValue(encodeQxValue(port.valueType, value, messages))) } : {}),
+          }];
+        }
+        case "edge": {
+          const edge = raw.edge(port.id);
+          return [name, {...Object.fromEntries(port.primitives.map((primitive) => [primitive, edge[primitive as "resolve" | "connect" | "disconnect"]])),
+            ...(port.primitives.includes("resolve") ? {collection: edge.collection} : {}),
+            ...(port.primitives.includes("resolve") && port.primitives.includes("connect") && port.primitives.includes("disconnect") ? {replace: edge.replace} : {})}];
+        }
+        case "interface": {
+          const target = raw.interface(port.id);
+          return [name, Object.fromEntries(Object.entries(port.operations).map(([name, operation]) => [name,
+            async (input: unknown) => decodeQxValue(operation.outputType,
+              (await target.live(operation.id, inputFields(operation.inputType, input, messages))).$quixosValue, messages),
+          ]))];
+        }
+        case "constructor": return [name, { construct: (input: unknown) => raw.constructor(port.id).construct(inputFields(port.inputType, input, messages)) }];
+      }
+    }));
+    return { objectId: raw.objectId, signal: raw.signal,
+      ...(raw.openSession ? {openSession: async () => {
+        const session = await raw.openSession!();
+        return {id: session.id, close: () => session.close(),
+          run: <T>(work: (context: C) => Promise<T>) => session.run((next) => work(bindContext(next)))};
+      }} : {}),
+      input: decodeQxValue(spec.inputType, inputValue(raw, spec.inputType), messages), ports } as C;
+  };
+  const execute = async (raw: RuntimeContext) => {
+    const context = bindContext(raw);
+    const value = await (typeof handler === "function" ? handler(context) : handler.get(context));
+    return liveValue(encodeQxValue(spec.eventType ?? spec.outputType, value, messages));
+  };
+  return typeof handler === "function" ? execute : derived(execute);
+};

src/camino/schema_pb.ts

@@ -4,573 +4,283 @@
 
 import type { GenEnum, GenFile, GenMessage } from "@bufbuild/protobuf/codegenv2";
 import { enumDesc, fileDesc, messageDesc } from "@bufbuild/protobuf/codegenv2";
-import type { FunctionRef } from "../quixos/refs_pb.js";
-import { file_quixos_refs } from "../quixos/refs_pb.js";
 import type { Message } from "@bufbuild/protobuf";
 
 /**
  * Describes the file camino/schema.proto.
  */
 export const file_camino_schema: GenFile = /*@__PURE__*/
-  fileDesc("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", [file_quixos_refs]);
+  fileDesc("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");
 
 /**
- * @generated from message camino.SymbolRef
+ * @generated from message camino.AtomDefinition
  */
-export type SymbolRef = Message<"camino.SymbolRef"> & {
+export type AtomDefinition = Message<"camino.AtomDefinition"> & {
   /**
-   * @generated from field: string namespace = 1;
+   * @generated from field: string atom_id = 1;
    */
-  namespace: string;
+  atomId: string;
 
   /**
-   * @generated from field: string name = 2;
+   * @generated from field: string display_name = 2;
    */
-  name: string;
-
-  /**
-   * @generated from field: string version = 3;
-   */
-  version: string;
-
-  /**
-   * @generated from field: string hash = 4;
-   */
-  hash: string;
+  displayName: string;
 };
 
 /**
- * Describes the message camino.SymbolRef.
- * Use `create(SymbolRefSchema)` to create a new message.
+ * Describes the message camino.AtomDefinition.
+ * Use `create(AtomDefinitionSchema)` to create a new message.
  */
-export const SymbolRefSchema: GenMessage<SymbolRef> = /*@__PURE__*/
+export const AtomDefinitionSchema: GenMessage<AtomDefinition> = /*@__PURE__*/
   messageDesc(file_camino_schema, 0);
 
 /**
- * @generated from message camino.Ref
+ * @generated from message camino.AtomConformance
  */
-export type Ref = Message<"camino.Ref"> & {
+export type AtomConformance = Message<"camino.AtomConformance"> & {
   /**
-   * @generated from field: string object_id = 1;
+   * @generated from field: string atom_id = 1;
    */
-  objectId: string;
+  atomId: string;
+
+  /**
+   * @generated from field: string interface_revision_id = 2;
+   */
+  interfaceRevisionId: string;
+
+  /**
+   * @generated from field: string conformance_id = 3;
+   */
+  conformanceId: string;
 };
 
 /**
- * Describes the message camino.Ref.
- * Use `create(RefSchema)` to create a new message.
+ * Describes the message camino.AtomConformance.
+ * Use `create(AtomConformanceSchema)` to create a new message.
  */
-export const RefSchema: GenMessage<Ref> = /*@__PURE__*/
+export const AtomConformanceSchema: GenMessage<AtomConformance> = /*@__PURE__*/
   messageDesc(file_camino_schema, 1);
 
 /**
- * @generated from message camino.CustomField
+ * @generated from message camino.StateAttachment
  */
-export type CustomField = Message<"camino.CustomField"> & {
+export type StateAttachment = Message<"camino.StateAttachment"> & {
+  /**
+   * @generated from field: string slot_id = 1;
+   */
+  slotId: string;
+
+  /**
+   * @generated from field: string attached_atom_id = 2;
+   */
+  attachedAtomId: string;
+
+  /**
+   * @generated from field: string display_name = 3;
+   */
+  displayName: string;
+
+  /**
+   * @generated from field: string value_type_json = 4;
+   */
+  valueTypeJson: string;
+
+  /**
+   * @generated from field: string storage_policy_json = 5;
+   */
+  storagePolicyJson: string;
+
+  /**
+   * @generated from field: string default_value_json = 6;
+   */
+  defaultValueJson: string;
+
+  /**
+   * @generated from field: string owner_conformance_id = 7;
+   */
+  ownerConformanceId: string;
 };
 
 /**
- * Describes the message camino.CustomField.
- * Use `create(CustomFieldSchema)` to create a new message.
+ * Describes the message camino.StateAttachment.
+ * Use `create(StateAttachmentSchema)` to create a new message.
  */
-export const CustomFieldSchema: GenMessage<CustomField> = /*@__PURE__*/
+export const StateAttachmentSchema: GenMessage<StateAttachment> = /*@__PURE__*/
   messageDesc(file_camino_schema, 2);
 
 /**
- * @generated from message camino.WatchStartResult
+ * @generated from message camino.EndpointConstraint
  */
-export type WatchStartResult = Message<"camino.WatchStartResult"> & {
+export type EndpointConstraint = Message<"camino.EndpointConstraint"> & {
   /**
-   * @generated from field: string watch_id = 1;
+   * @generated from oneof camino.EndpointConstraint.kind
    */
-  watchId: string;
+  kind: {
+    /**
+     * @generated from field: string atom_id = 1;
+     */
+    value: string;
+    case: "atomId";
+  } | {
+    /**
+     * @generated from field: string interface_revision_id = 2;
+     */
+    value: string;
+    case: "interfaceRevisionId";
+  } | { case: undefined; value?: undefined };
 };
 
 /**
- * Describes the message camino.WatchStartResult.
- * Use `create(WatchStartResultSchema)` to create a new message.
+ * Describes the message camino.EndpointConstraint.
+ * Use `create(EndpointConstraintSchema)` to create a new message.
  */
-export const WatchStartResultSchema: GenMessage<WatchStartResult> = /*@__PURE__*/
+export const EndpointConstraintSchema: GenMessage<EndpointConstraint> = /*@__PURE__*/
   messageDesc(file_camino_schema, 3);
 
 /**
- * @generated from message camino.WatchStopRequest
+ * @generated from message camino.EdgeEndpoint
  */
-export type WatchStopRequest = Message<"camino.WatchStopRequest"> & {
+export type EdgeEndpoint = Message<"camino.EdgeEndpoint"> & {
   /**
-   * @generated from field: string watch_id = 1;
+   * @generated from field: string projection_id = 1;
    */
-  watchId: string;
-};
-
-/**
- * Describes the message camino.WatchStopRequest.
- * Use `create(WatchStopRequestSchema)` to create a new message.
- */
-export const WatchStopRequestSchema: GenMessage<WatchStopRequest> = /*@__PURE__*/
-  messageDesc(file_camino_schema, 4);
-
-/**
- * @generated from message camino.WatchStopResult
- */
-export type WatchStopResult = Message<"camino.WatchStopResult"> & {
-};
-
-/**
- * Describes the message camino.WatchStopResult.
- * Use `create(WatchStopResultSchema)` to create a new message.
- */
-export const WatchStopResultSchema: GenMessage<WatchStopResult> = /*@__PURE__*/
-  messageDesc(file_camino_schema, 5);
-
-/**
- * @generated from message camino.CrdtText
- */
-export type CrdtText = Message<"camino.CrdtText"> & {
-  /**
-   * @generated from field: bytes payload = 1;
-   */
-  payload: Uint8Array;
-};
-
-/**
- * Describes the message camino.CrdtText.
- * Use `create(CrdtTextSchema)` to create a new message.
- */
-export const CrdtTextSchema: GenMessage<CrdtText> = /*@__PURE__*/
-  messageDesc(file_camino_schema, 6);
-
-/**
- * @generated from message camino.CrdtRichText
- */
-export type CrdtRichText = Message<"camino.CrdtRichText"> & {
-  /**
-   * @generated from field: bytes payload = 1;
-   */
-  payload: Uint8Array;
-};
-
-/**
- * Describes the message camino.CrdtRichText.
- * Use `create(CrdtRichTextSchema)` to create a new message.
- */
-export const CrdtRichTextSchema: GenMessage<CrdtRichText> = /*@__PURE__*/
-  messageDesc(file_camino_schema, 7);
-
-/**
- * @generated from message camino.CrdtJson
- */
-export type CrdtJson = Message<"camino.CrdtJson"> & {
-  /**
-   * @generated from field: bytes payload = 1;
-   */
-  payload: Uint8Array;
-};
-
-/**
- * Describes the message camino.CrdtJson.
- * Use `create(CrdtJsonSchema)` to create a new message.
- */
-export const CrdtJsonSchema: GenMessage<CrdtJson> = /*@__PURE__*/
-  messageDesc(file_camino_schema, 8);
-
-/**
- * @generated from message camino.ClassSchema
- */
-export type ClassSchema = Message<"camino.ClassSchema"> & {
-  /**
-   * @generated from field: camino.SymbolRef id = 1;
-   */
-  id?: SymbolRef | undefined;
+  projectionId: string;
 
   /**
-   * @generated from field: uint32 version = 2;
+   * @generated from field: string display_name = 2;
    */
-  version: number;
+  displayName: string;
 
   /**
-   * @generated from field: repeated camino.FieldSchema fields = 3;
+   * @generated from field: camino.EndpointConstraint constraint = 3;
    */
-  fields: FieldSchema[];
+  constraint?: EndpointConstraint | undefined;
 
   /**
-   * @generated from field: repeated camino.EdgeSchema edges = 4;
-   */
-  edges: EdgeSchema[];
-
-  /**
-   * @generated from field: repeated camino.MethodSchema methods = 5;
-   */
-  methods: MethodSchema[];
-
-  /**
-   * @generated from field: repeated camino.MigrationSpec migrations = 6;
-   */
-  migrations: MigrationSpec[];
-
-  /**
-   * @generated from field: string source_file = 7;
-   */
-  sourceFile: string;
-
-  /**
-   * @generated from field: string proto_message = 8;
-   */
-  protoMessage: string;
-
-  /**
-   * @generated from field: repeated camino.OperationServiceSchema operation_services = 9;
-   */
-  operationServices: OperationServiceSchema[];
-};
-
-/**
- * Describes the message camino.ClassSchema.
- * Use `create(ClassSchemaSchema)` to create a new message.
- */
-export const ClassSchemaSchema: GenMessage<ClassSchema> = /*@__PURE__*/
-  messageDesc(file_camino_schema, 9);
-
-/**
- * @generated from message camino.FieldSchema
- */
-export type FieldSchema = Message<"camino.FieldSchema"> & {
-  /**
-   * @generated from field: string name = 1;
-   */
-  name: string;
-
-  /**
-   * @generated from field: uint32 tag = 2;
-   */
-  tag: number;
-
-  /**
-   * @generated from field: camino.TypeRef type = 3;
-   */
-  type?: TypeRef | undefined;
-
-  /**
-   * @generated from field: camino.ConflictStrategy conflict = 4;
-   */
-  conflict: ConflictStrategy;
-
-  /**
-   * @generated from field: bool repeated = 5;
-   */
-  repeated: boolean;
-
-  /**
-   * @generated from field: bool optional = 6;
-   */
-  optional: boolean;
-
-  /**
-   * @generated from field: camino.FieldStorage storage = 7;
-   */
-  storage?: FieldStorage | undefined;
-
-  /**
-   * @generated from field: camino.FieldOps ops = 8;
-   */
-  ops?: FieldOps | undefined;
-};
-
-/**
- * Describes the message camino.FieldSchema.
- * Use `create(FieldSchemaSchema)` to create a new message.
- */
-export const FieldSchemaSchema: GenMessage<FieldSchema> = /*@__PURE__*/
-  messageDesc(file_camino_schema, 10);
-
-/**
- * @generated from message camino.FieldStorage
- */
-export type FieldStorage = Message<"camino.FieldStorage"> & {
-  /**
-   * @generated from field: camino.FieldStorageKind kind = 1;
-   */
-  kind: FieldStorageKind;
-
-  /**
-   * @generated from field: quixos.FunctionRef resolver = 2;
-   */
-  resolver?: FunctionRef | undefined;
-
-  /**
-   * @generated from field: bool cache = 3;
-   */
-  cache: boolean;
-};
-
-/**
- * Describes the message camino.FieldStorage.
- * Use `create(FieldStorageSchema)` to create a new message.
- */
-export const FieldStorageSchema: GenMessage<FieldStorage> = /*@__PURE__*/
-  messageDesc(file_camino_schema, 11);
-
-/**
- * @generated from message camino.TypeRef
- */
-export type TypeRef = Message<"camino.TypeRef"> & {
-  /**
-   * @generated from field: string proto_type = 1;
-   */
-  protoType: string;
-
-  /**
-   * @generated from field: camino.SymbolRef symbol = 2;
-   */
-  symbol?: SymbolRef | undefined;
-};
-
-/**
- * Describes the message camino.TypeRef.
- * Use `create(TypeRefSchema)` to create a new message.
- */
-export const TypeRefSchema: GenMessage<TypeRef> = /*@__PURE__*/
-  messageDesc(file_camino_schema, 12);
-
-/**
- * @generated from message camino.FieldOps
- */
-export type FieldOps = Message<"camino.FieldOps"> & {
-  /**
-   * @generated from field: camino.FieldImplementation implementation = 1;
-   */
-  implementation: FieldImplementation;
-
-  /**
-   * @generated from field: string service = 2;
-   */
-  service: string;
-};
-
-/**
- * Describes the message camino.FieldOps.
- * Use `create(FieldOpsSchema)` to create a new message.
- */
-export const FieldOpsSchema: GenMessage<FieldOps> = /*@__PURE__*/
-  messageDesc(file_camino_schema, 13);
-
-/**
- * @generated from message camino.EdgeSchema
- */
-export type EdgeSchema = Message<"camino.EdgeSchema"> & {
-  /**
-   * @generated from field: camino.SymbolRef id = 1;
-   */
-  id?: SymbolRef | undefined;
-
-  /**
-   * @generated from field: string source_field = 2;
-   */
-  sourceField: string;
-
-  /**
-   * @generated from field: camino.SymbolRef from_class = 3;
-   */
-  fromClass?: SymbolRef | undefined;
-
-  /**
-   * @generated from field: camino.SymbolRef to_class = 4;
-   */
-  toClass?: SymbolRef | undefined;
-
-  /**
-   * @generated from field: camino.Cardinality cardinality = 5;
+   * @generated from field: camino.Cardinality cardinality = 4;
    */
   cardinality: Cardinality;
 
   /**
-   * @generated from field: string inverse = 6;
+   * @generated from field: bool ordered = 5;
    */
-  inverse: string;
+  ordered: boolean;
 
   /**
-   * @generated from field: repeated camino.FieldSchema fields = 7;
+   * Empty means restrict. Direction is the endpoint being deleted.
+   *
+   * @generated from field: string on_delete = 6;
    */
-  fields: FieldSchema[];
+  onDelete: string;
+
+  /**
+   * @generated from field: bool retain_other = 7;
+   */
+  retainOther: boolean;
+
+  /**
+   * Empty for sets/lists, otherwise string, boolean, or int64 map keys.
+   *
+   * @generated from field: string key_type = 8;
+   */
+  keyType: string;
+
+  /**
+   * Explicit read-only dependency injection traversal, not mutation authority.
+   *
+   * @generated from field: bool public_traversal = 9;
+   */
+  publicTraversal: boolean;
 };
 
 /**
- * Describes the message camino.EdgeSchema.
- * Use `create(EdgeSchemaSchema)` to create a new message.
+ * Describes the message camino.EdgeEndpoint.
+ * Use `create(EdgeEndpointSchema)` to create a new message.
  */
-export const EdgeSchemaSchema: GenMessage<EdgeSchema> = /*@__PURE__*/
-  messageDesc(file_camino_schema, 14);
+export const EdgeEndpointSchema: GenMessage<EdgeEndpoint> = /*@__PURE__*/
+  messageDesc(file_camino_schema, 4);
 
 /**
- * @generated from message camino.MethodSchema
+ * @generated from message camino.EdgeAttachment
  */
-export type MethodSchema = Message<"camino.MethodSchema"> & {
+export type EdgeAttachment = Message<"camino.EdgeAttachment"> & {
   /**
-   * @generated from field: string name = 1;
+   * @generated from field: string edge_type_id = 1;
    */
-  name: string;
+  edgeTypeId: string;
 
   /**
-   * @generated from field: quixos.FunctionRef function = 2;
+   * @generated from field: string display_name = 2;
    */
-  function?: FunctionRef | undefined;
+  displayName: string;
+
+  /**
+   * @generated from field: camino.EdgeEndpoint first = 3;
+   */
+  first?: EdgeEndpoint | undefined;
+
+  /**
+   * @generated from field: camino.EdgeEndpoint second = 4;
+   */
+  second?: EdgeEndpoint | undefined;
+
+  /**
+   * @generated from field: string owner_conformance_id = 5;
+   */
+  ownerConformanceId: string;
 };
 
 /**
- * Describes the message camino.MethodSchema.
- * Use `create(MethodSchemaSchema)` to create a new message.
+ * Describes the message camino.EdgeAttachment.
+ * Use `create(EdgeAttachmentSchema)` to create a new message.
  */
-export const MethodSchemaSchema: GenMessage<MethodSchema> = /*@__PURE__*/
-  messageDesc(file_camino_schema, 15);
+export const EdgeAttachmentSchema: GenMessage<EdgeAttachment> = /*@__PURE__*/
+  messageDesc(file_camino_schema, 5);
 
 /**
- * @generated from message camino.MigrationSpec
+ * Camino consumes this persistence-only projection of a checked workspace.
+ * Interfaces, operation bindings, packages, and constructors stay in orch.
+ *
+ * @generated from message camino.PersistencePlan
  */
-export type MigrationSpec = Message<"camino.MigrationSpec"> & {
+export type PersistencePlan = Message<"camino.PersistencePlan"> & {
   /**
-   * @generated from field: uint32 from_version = 1;
+   * @generated from field: string workspace_id = 1;
    */
-  fromVersion: number;
+  workspaceId: string;
 
   /**
-   * @generated from field: uint32 to_version = 2;
+   * @generated from field: string workspace_revision_id = 2;
    */
-  toVersion: number;
+  workspaceRevisionId: string;
 
   /**
-   * @generated from field: quixos.FunctionRef function = 3;
+   * @generated from field: repeated camino.AtomDefinition atoms = 3;
    */
-  function?: FunctionRef | undefined;
+  atoms: AtomDefinition[];
+
+  /**
+   * @generated from field: repeated camino.AtomConformance conformances = 4;
+   */
+  conformances: AtomConformance[];
+
+  /**
+   * @generated from field: repeated camino.StateAttachment states = 5;
+   */
+  states: StateAttachment[];
+
+  /**
+   * @generated from field: repeated camino.EdgeAttachment edges = 6;
+   */
+  edges: EdgeAttachment[];
 };
 
 /**
- * Describes the message camino.MigrationSpec.
- * Use `create(MigrationSpecSchema)` to create a new message.
+ * Describes the message camino.PersistencePlan.
+ * Use `create(PersistencePlanSchema)` to create a new message.
  */
-export const MigrationSpecSchema: GenMessage<MigrationSpec> = /*@__PURE__*/
-  messageDesc(file_camino_schema, 16);
-
-/**
- * @generated from message camino.OperationSchema
- */
-export type OperationSchema = Message<"camino.OperationSchema"> & {
-  /**
-   * @generated from field: string name = 1;
-   */
-  name: string;
-
-  /**
-   * @generated from field: camino.TypeRef input_type = 2;
-   */
-  inputType?: TypeRef | undefined;
-
-  /**
-   * @generated from field: camino.TypeRef output_type = 3;
-   */
-  outputType?: TypeRef | undefined;
-
-  /**
-   * @generated from field: quixos.FunctionRef function = 4;
-   */
-  function?: FunctionRef | undefined;
-};
-
-/**
- * Describes the message camino.OperationSchema.
- * Use `create(OperationSchemaSchema)` to create a new message.
- */
-export const OperationSchemaSchema: GenMessage<OperationSchema> = /*@__PURE__*/
-  messageDesc(file_camino_schema, 17);
-
-/**
- * @generated from message camino.OperationServiceSchema
- */
-export type OperationServiceSchema = Message<"camino.OperationServiceSchema"> & {
-  /**
-   * @generated from field: string name = 1;
-   */
-  name: string;
-
-  /**
-   * @generated from field: string full_name = 2;
-   */
-  fullName: string;
-
-  /**
-   * @generated from field: repeated camino.OperationSchema operations = 3;
-   */
-  operations: OperationSchema[];
-};
-
-/**
- * Describes the message camino.OperationServiceSchema.
- * Use `create(OperationServiceSchemaSchema)` to create a new message.
- */
-export const OperationServiceSchemaSchema: GenMessage<OperationServiceSchema> = /*@__PURE__*/
-  messageDesc(file_camino_schema, 18);
-
-/**
- * @generated from message camino.DocRefDeclaration
- */
-export type DocRefDeclaration = Message<"camino.DocRefDeclaration"> & {
-  /**
-   * @generated from field: string local_name = 1;
-   */
-  localName: string;
-
-  /**
-   * @generated from field: camino.SymbolRef type = 2;
-   */
-  type?: SymbolRef | undefined;
-
-  /**
-   * @generated from field: camino.SymbolRef target_class = 3;
-   */
-  targetClass?: SymbolRef | undefined;
-
-  /**
-   * @generated from field: camino.DocRefStrength strength = 4;
-   */
-  strength: DocRefStrength;
-};
-
-/**
- * Describes the message camino.DocRefDeclaration.
- * Use `create(DocRefDeclarationSchema)` to create a new message.
- */
-export const DocRefDeclarationSchema: GenMessage<DocRefDeclaration> = /*@__PURE__*/
-  messageDesc(file_camino_schema, 19);
-
-/**
- * @generated from enum camino.ConflictStrategy
- */
-export enum ConflictStrategy {
-  /**
-   * @generated from enum value: CONFLICT_STRATEGY_UNSPECIFIED = 0;
-   */
-  CONFLICT_STRATEGY_UNSPECIFIED = 0,
-
-  /**
-   * @generated from enum value: REPLACE = 1;
-   */
-  REPLACE = 1,
-
-  /**
-   * @generated from enum value: PRESERVE_CONFLICTS = 2;
-   */
-  PRESERVE_CONFLICTS = 2,
-
-  /**
-   * @generated from enum value: CRDT = 3;
-   */
-  CRDT = 3,
-}
-
-/**
- * Describes the enum camino.ConflictStrategy.
- */
-export const ConflictStrategySchema: GenEnum<ConflictStrategy> = /*@__PURE__*/
-  enumDesc(file_camino_schema, 0);
+export const PersistencePlanSchema: GenMessage<PersistencePlan> = /*@__PURE__*/
+  messageDesc(file_camino_schema, 6);
 
 /**
  * @generated from enum camino.Cardinality
@@ -600,99 +310,11 @@ export enum Cardinality {
    * @generated from enum value: MANY_UNIQUE = 4;
    */
   MANY_UNIQUE = 4,
-
-  /**
-   * @generated from enum value: MANY_ORDERED = 5;
-   */
-  MANY_ORDERED = 5,
 }
 
 /**
  * Describes the enum camino.Cardinality.
  */
 export const CardinalitySchema: GenEnum<Cardinality> = /*@__PURE__*/
-  enumDesc(file_camino_schema, 1);
-
-/**
- * @generated from enum camino.DocRefStrength
- */
-export enum DocRefStrength {
-  /**
-   * @generated from enum value: DOC_REF_STRENGTH_UNSPECIFIED = 0;
-   */
-  DOC_REF_STRENGTH_UNSPECIFIED = 0,
-
-  /**
-   * @generated from enum value: SOFT_REF = 1;
-   */
-  SOFT_REF = 1,
-
-  /**
-   * @generated from enum value: PROJECTED_EDGE = 2;
-   */
-  PROJECTED_EDGE = 2,
-}
-
-/**
- * Describes the enum camino.DocRefStrength.
- */
-export const DocRefStrengthSchema: GenEnum<DocRefStrength> = /*@__PURE__*/
-  enumDesc(file_camino_schema, 2);
-
-/**
- * @generated from enum camino.FieldStorageKind
- */
-export enum FieldStorageKind {
-  /**
-   * @generated from enum value: FIELD_STORAGE_KIND_UNSPECIFIED = 0;
-   */
-  FIELD_STORAGE_KIND_UNSPECIFIED = 0,
-
-  /**
-   * @generated from enum value: STORED = 1;
-   */
-  STORED = 1,
-
-  /**
-   * @generated from enum value: DERIVED = 2;
-   */
-  DERIVED = 2,
-
-  /**
-   * @generated from enum value: LAZY = 3;
-   */
-  LAZY = 3,
-
-  /**
-   * @generated from enum value: EXTERNAL = 4;
-   */
-  EXTERNAL = 4,
-}
-
-/**
- * Describes the enum camino.FieldStorageKind.
- */
-export const FieldStorageKindSchema: GenEnum<FieldStorageKind> = /*@__PURE__*/
-  enumDesc(file_camino_schema, 3);
-
-/**
- * @generated from enum camino.FieldImplementation
- */
-export enum FieldImplementation {
-  /**
-   * @generated from enum value: FIELD_IMPLEMENTATION_UNSPECIFIED = 0;
-   */
-  FIELD_IMPLEMENTATION_UNSPECIFIED = 0,
-
-  /**
-   * @generated from enum value: SERVICE = 1;
-   */
-  SERVICE = 1,
-}
-
-/**
- * Describes the enum camino.FieldImplementation.
- */
-export const FieldImplementationSchema: GenEnum<FieldImplementation> = /*@__PURE__*/
-  enumDesc(file_camino_schema, 4);
+  enumDesc(file_camino_schema, 0);
 

src/invocations.ts

@@ -0,0 +1,24 @@
+/** Execution completion, not HTTP disconnection, is the drain boundary. */
+export const createInvocationRegistry = () => {
+  const entries = new Map<string, { state: string; controller: AbortController }>();
+  return {
+    begin(id: string) {
+      if (!id || entries.has(id)) throw new Error("Invocation ID is missing or already used; invocations are never replayed implicitly");
+      // Completed identities remain until process retirement. A bounded process
+      // may reject new work; it must not evict and accidentally replay a call.
+      if (entries.size >= 100_000) throw new Error("Invocation registry full; explicit runtime retirement required");
+      const entry = { state: "running", controller: new AbortController() };
+      entries.set(id, entry);
+      return { signal: entry.controller.signal, finish(failed = false) { entry.state = failed ? "failed" : "completed"; } };
+    },
+    status(id: string) { return { invocationId: id, state: entries.get(id)?.state ?? "unknown" }; },
+    cancel(id: string) {
+      const entry = entries.get(id);
+      if (entry && ["running", "cancellation-requested"].includes(entry.state)) {
+        entry.state = "cancellation-requested";
+        entry.controller.abort();
+      }
+      return this.status(id);
+    },
+  };
+};

src/migration.ts

@@ -0,0 +1,95 @@
+import {createHash} from "node:crypto";
+
+export type MigrationInput = {
+  schemaVersion: 1; executionId: string; exportId: string;
+  ports: {name: string; binding: string; view: "old" | "new"; access: ("read" | "write" | "create" | "edge")[]; atomId?: string;
+    attachedAtomId?: string; defaultValue?: unknown;
+    states?: {objectId: string; value: unknown}[]; edges?: MigrationEdge[]}[];
+};
+export type MigrationEdge = {id: string; edgeTypeId: string; firstObjectId: string; secondObjectId: string; firstProjectionId: string; secondProjectionId: string; firstOrdinal?: number; secondOrdinal?: number; firstKeyJson?: string; secondKeyJson?: string};
+export type MigrationOutput = {schemaVersion: 1; executionId: string;
+  writes: {port: string; objectId: string; value: unknown}[];
+  creates: {port: string; logicalKey: string; objectId: string}[];
+  edgeReplacements: {port: string; edges: MigrationEdge[]}[]};
+export type MigrationContext = {
+  enumerate(port: string): {objectId: string; value: unknown}[];
+  read(port: string, objectId: string): unknown;
+  write(port: string, objectId: string, value: unknown): void;
+  create(port: string, logicalKey: string): string;
+  edges(port: string): MigrationEdge[];
+  replaceEdges(port: string, edges: MigrationEdge[]): void;
+};
+export const migrationObjectId = (executionId: string, port: string, logicalKey: string) =>
+  `obj:migration:${createHash("sha256").update(JSON.stringify([executionId, port, logicalKey])).digest("hex")}`;
+
+/** No ordinary RuntimeContext or network/database clients are supplied here.
+ * Process isolation belongs to the host, not this convenience API. */
+export const createMigrationContext = (input: MigrationInput) => {
+  if (input.schemaVersion !== 1 || !input.executionId || new Set(input.ports.map((entry) => entry.name)).size !== input.ports.length) throw new Error("Invalid migration input");
+  const output: MigrationOutput = {schemaVersion: 1, executionId: input.executionId, writes: [], creates: [], edgeReplacements: []};
+  const port = (name: string, access: string) => {
+    const selected = input.ports.find((entry) => entry.name === name);
+    if (!selected?.access.includes(access as "read") || (selected.view === "old" && access !== "read")) throw new Error(`Migration port ${name} does not grant ${access}`);
+    return selected;
+  };
+  const context: MigrationContext = {
+    enumerate(name) {
+      const selected = port(name, "read"), states = structuredClone(selected.states ?? []);
+      if (selected.view === "new" && Object.hasOwn(selected, "defaultValue")) for (const helper of output.creates) {
+        if (input.ports.find((entry) => entry.name === helper.port)?.atomId === selected.attachedAtomId && !states.some((entry) => entry.objectId === helper.objectId)) states.push({objectId: helper.objectId, value: structuredClone(selected.defaultValue)});
+      }
+      if (selected.view === "new") for (const write of output.writes) {
+        if (input.ports.find((entry) => entry.name === write.port)?.binding !== selected.binding) continue;
+        const existing = states.findIndex((entry) => entry.objectId === write.objectId), entry = {objectId: write.objectId, value: structuredClone(write.value)};
+        if (existing < 0) states.push(entry); else states[existing] = entry;
+      }
+      return states.sort((a, b) => a.objectId < b.objectId ? -1 : a.objectId > b.objectId ? 1 : 0);
+    },
+    read(name, objectId) {return context.enumerate(name).find((entry) => entry.objectId === objectId)?.value;},
+    write(name, objectId, value) {
+      port(name, "write");
+      const previous = output.writes.findIndex((entry) => entry.port === name && entry.objectId === objectId);
+      const entry = {port: name, objectId, value: structuredClone(value)};
+      if (previous < 0) output.writes.push(entry); else output.writes[previous] = entry;
+    },
+    create(name, logicalKey) {
+      port(name, "create");
+      if (!logicalKey || logicalKey.length > 1024) throw new Error("Migration creation requires a bounded stable logical key");
+      const objectId = migrationObjectId(input.executionId, name, logicalKey);
+      if (!output.creates.some((entry) => entry.objectId === objectId)) output.creates.push({port: name, logicalKey, objectId});
+      return objectId;
+    },
+    edges(name) {
+      const selected = port(name, "read");
+      const replacement = selected.view === "new" ? output.edgeReplacements.find((entry) => input.ports.find((candidate) => candidate.name === entry.port)?.binding === selected.binding) : undefined;
+      return structuredClone(replacement?.edges ?? selected.edges ?? []);
+    },
+    replaceEdges(name, edges) {
+      port(name, "edge");
+      const previous = output.edgeReplacements.findIndex((entry) => entry.port === name);
+      const entry = {port: name, edges: structuredClone(edges)};
+      if (previous < 0) output.edgeReplacements.push(entry); else output.edgeReplacements[previous] = entry;
+    },
+  };
+  return {context, result: () => structuredClone(output)};
+};
+
+/** Entrypoint for an immutable package's dedicated bin/migrate executable.
+ * stdout is protocol-only; send diagnostics to stderr. The host independently
+ * validates every write, helper identity, contract, and completion receipt. */
+export const serveMigration = async (exports: Record<string, (context: MigrationContext) => void | Promise<void>>) => {
+  const chunks: Buffer[] = []; let bytes = 0;
+  for await (const chunk of process.stdin) {
+    bytes += chunk.length;
+    if (bytes > 16 * 1024 * 1024) throw new Error("Migration input exceeds 16 MiB");
+    chunks.push(Buffer.from(chunk));
+  }
+  const input = JSON.parse(Buffer.concat(chunks).toString("utf8")) as MigrationInput;
+  const implementation = Object.hasOwn(exports, input.exportId) ? exports[input.exportId] : undefined;
+  if (!implementation) throw new Error("Unknown migration export");
+  const execution = createMigrationContext(input);
+  await implementation(execution.context);
+  const result = JSON.stringify(execution.result());
+  if (Buffer.byteLength(result) > 16 * 1024 * 1024) throw new Error("Migration output exceeds 16 MiB");
+  process.stdout.write(`${result}\n`);
+};

src/quixos/orch_pb.ts

@@ -0,0 +1,643 @@
+// @generated by protoc-gen-es v2.12.1 with parameter "target=ts,import_extension=js"
+// @generated from file quixos/orch.proto (package quixos.orch, syntax proto3)
+/* eslint-disable */
+
+import type { GenFile, GenMessage, GenService } from "@bufbuild/protobuf/codegenv2";
+import { fileDesc, messageDesc, serviceDesc } from "@bufbuild/protobuf/codegenv2";
+import type { CaminoObject, Value } from "../camino/api_pb.js";
+import { file_camino_api } from "../camino/api_pb.js";
+import type { PackageDescriptor } from "./package_pb.js";
+import { file_quixos_package } from "./package_pb.js";
+import type { CapabilityRef, PackageExportRef } from "./refs_pb.js";
+import { file_quixos_refs } from "./refs_pb.js";
+import type { DerivedDependency } from "./runtime_pb.js";
+import { file_quixos_runtime } from "./runtime_pb.js";
+import type { Message } from "@bufbuild/protobuf";
+
+/**
+ * Describes the file quixos/orch.proto.
+ */
+export const file_quixos_orch: GenFile = /*@__PURE__*/
+  fileDesc("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", [file_camino_api, file_quixos_package, file_quixos_refs, file_quixos_runtime]);
+
+/**
+ * @generated from message quixos.orch.ConstructObjectRequest
+ */
+export type ConstructObjectRequest = Message<"quixos.orch.ConstructObjectRequest"> & {
+  /**
+   * @generated from field: string atom_id = 1;
+   */
+  atomId: string;
+
+  /**
+   * @generated from field: map<string, camino.Value> input = 2;
+   */
+  input: { [key: string]: Value };
+};
+
+/**
+ * Describes the message quixos.orch.ConstructObjectRequest.
+ * Use `create(ConstructObjectRequestSchema)` to create a new message.
+ */
+export const ConstructObjectRequestSchema: GenMessage<ConstructObjectRequest> = /*@__PURE__*/
+  messageDesc(file_quixos_orch, 0);
+
+/**
+ * @generated from message quixos.orch.ConstructObjectResponse
+ */
+export type ConstructObjectResponse = Message<"quixos.orch.ConstructObjectResponse"> & {
+  /**
+   * @generated from field: camino.CaminoObject object = 1;
+   */
+  object?: CaminoObject | undefined;
+};
+
+/**
+ * Describes the message quixos.orch.ConstructObjectResponse.
+ * Use `create(ConstructObjectResponseSchema)` to create a new message.
+ */
+export const ConstructObjectResponseSchema: GenMessage<ConstructObjectResponse> = /*@__PURE__*/
+  messageDesc(file_quixos_orch, 1);
+
+/**
+ * @generated from message quixos.orch.ResolveOrConstructRelatedObjectRequest
+ */
+export type ResolveOrConstructRelatedObjectRequest = Message<"quixos.orch.ResolveOrConstructRelatedObjectRequest"> & {
+  /**
+   * @generated from field: string object_id = 1;
+   */
+  objectId: string;
+
+  /**
+   * @generated from field: string interface_revision_id = 2;
+   */
+  interfaceRevisionId: string;
+
+  /**
+   * @generated from field: string member_id = 3;
+   */
+  memberId: string;
+};
+
+/**
+ * Describes the message quixos.orch.ResolveOrConstructRelatedObjectRequest.
+ * Use `create(ResolveOrConstructRelatedObjectRequestSchema)` to create a new message.
+ */
+export const ResolveOrConstructRelatedObjectRequestSchema: GenMessage<ResolveOrConstructRelatedObjectRequest> = /*@__PURE__*/
+  messageDesc(file_quixos_orch, 2);
+
+/**
+ * @generated from message quixos.orch.ResolveOrConstructRelatedObjectResponse
+ */
+export type ResolveOrConstructRelatedObjectResponse = Message<"quixos.orch.ResolveOrConstructRelatedObjectResponse"> & {
+  /**
+   * @generated from field: camino.CaminoObject object = 1;
+   */
+  object?: CaminoObject | undefined;
+
+  /**
+   * @generated from field: bool constructed = 2;
+   */
+  constructed: boolean;
+};
+
+/**
+ * Describes the message quixos.orch.ResolveOrConstructRelatedObjectResponse.
+ * Use `create(ResolveOrConstructRelatedObjectResponseSchema)` to create a new message.
+ */
+export const ResolveOrConstructRelatedObjectResponseSchema: GenMessage<ResolveOrConstructRelatedObjectResponse> = /*@__PURE__*/
+  messageDesc(file_quixos_orch, 3);
+
+/**
+ * @generated from message quixos.orch.InvokeCapabilityRequest
+ */
+export type InvokeCapabilityRequest = Message<"quixos.orch.InvokeCapabilityRequest"> & {
+  /**
+   * @generated from field: quixos.CapabilityRef capability = 1;
+   */
+  capability?: CapabilityRef | undefined;
+
+  /**
+   * @generated from field: string object_id = 2;
+   */
+  objectId: string;
+
+  /**
+   * @generated from field: map<string, camino.Value> input = 3;
+   */
+  input: { [key: string]: Value };
+
+  /**
+   * Identifies one logical client mutation across the capability and Camino
+   * layers so a live-value controller can recognize its own confirmation.
+   *
+   * @generated from field: string client_mutation_id = 4;
+   */
+  clientMutationId: string;
+};
+
+/**
+ * Describes the message quixos.orch.InvokeCapabilityRequest.
+ * Use `create(InvokeCapabilityRequestSchema)` to create a new message.
+ */
+export const InvokeCapabilityRequestSchema: GenMessage<InvokeCapabilityRequest> = /*@__PURE__*/
+  messageDesc(file_quixos_orch, 4);
+
+/**
+ * @generated from message quixos.orch.InvokeCapabilityResponse
+ */
+export type InvokeCapabilityResponse = Message<"quixos.orch.InvokeCapabilityResponse"> & {
+  /**
+   * @generated from field: string invocation_id = 1;
+   */
+  invocationId: string;
+
+  /**
+   * @generated from field: quixos.orch.Activation activation = 2;
+   */
+  activation?: Activation | undefined;
+
+  /**
+   * @generated from field: bool ok = 3;
+   */
+  ok: boolean;
+
+  /**
+   * @generated from field: camino.Value result = 4;
+   */
+  result?: Value | undefined;
+
+  /**
+   * @generated from field: string error = 5;
+   */
+  error: string;
+
+  /**
+   * @generated from field: repeated quixos.runtime.DerivedDependency dependencies = 6;
+   */
+  dependencies: DerivedDependency[];
+};
+
+/**
+ * Describes the message quixos.orch.InvokeCapabilityResponse.
+ * Use `create(InvokeCapabilityResponseSchema)` to create a new message.
+ */
+export const InvokeCapabilityResponseSchema: GenMessage<InvokeCapabilityResponse> = /*@__PURE__*/
+  messageDesc(file_quixos_orch, 5);
+
+/**
+ * @generated from message quixos.orch.WatchCapabilityRequest
+ */
+export type WatchCapabilityRequest = Message<"quixos.orch.WatchCapabilityRequest"> & {
+  /**
+   * @generated from field: quixos.CapabilityRef capability = 1;
+   */
+  capability?: CapabilityRef | undefined;
+
+  /**
+   * @generated from field: string object_id = 2;
+   */
+  objectId: string;
+
+  /**
+   * @generated from field: map<string, camino.Value> input = 3;
+   */
+  input: { [key: string]: Value };
+};
+
+/**
+ * Describes the message quixos.orch.WatchCapabilityRequest.
+ * Use `create(WatchCapabilityRequestSchema)` to create a new message.
+ */
+export const WatchCapabilityRequestSchema: GenMessage<WatchCapabilityRequest> = /*@__PURE__*/
+  messageDesc(file_quixos_orch, 6);
+
+/**
+ * @generated from message quixos.orch.WatchCapabilityEvent
+ */
+export type WatchCapabilityEvent = Message<"quixos.orch.WatchCapabilityEvent"> & {
+  /**
+   * @generated from field: string invocation_id = 1;
+   */
+  invocationId: string;
+
+  /**
+   * @generated from field: quixos.orch.Activation activation = 2;
+   */
+  activation?: Activation | undefined;
+
+  /**
+   * @generated from field: string watch_id = 3;
+   */
+  watchId: string;
+
+  /**
+   * @generated from field: camino.Value value = 4;
+   */
+  value?: Value | undefined;
+
+  /**
+   * @generated from field: repeated quixos.runtime.DerivedDependency dependencies = 5;
+   */
+  dependencies: DerivedDependency[];
+
+  /**
+   * @generated from field: string error = 6;
+   */
+  error: string;
+
+  /**
+   * @generated from field: bool initial = 7;
+   */
+  initial: boolean;
+};
+
+/**
+ * Describes the message quixos.orch.WatchCapabilityEvent.
+ * Use `create(WatchCapabilityEventSchema)` to create a new message.
+ */
+export const WatchCapabilityEventSchema: GenMessage<WatchCapabilityEvent> = /*@__PURE__*/
+  messageDesc(file_quixos_orch, 7);
+
+/**
+ * @generated from message quixos.orch.GetWorkspaceRequest
+ */
+export type GetWorkspaceRequest = Message<"quixos.orch.GetWorkspaceRequest"> & {
+};
+
+/**
+ * Describes the message quixos.orch.GetWorkspaceRequest.
+ * Use `create(GetWorkspaceRequestSchema)` to create a new message.
+ */
+export const GetWorkspaceRequestSchema: GenMessage<GetWorkspaceRequest> = /*@__PURE__*/
+  messageDesc(file_quixos_orch, 8);
+
+/**
+ * @generated from message quixos.orch.GetWorkspaceResponse
+ */
+export type GetWorkspaceResponse = Message<"quixos.orch.GetWorkspaceResponse"> & {
+  /**
+   * @generated from field: string workspace_id = 1;
+   */
+  workspaceId: string;
+
+  /**
+   * @generated from field: string workspace_revision_id = 2;
+   */
+  workspaceRevisionId: string;
+
+  /**
+   * @generated from field: string source_root_commit = 3;
+   */
+  sourceRootCommit: string;
+};
+
+/**
+ * Describes the message quixos.orch.GetWorkspaceResponse.
+ * Use `create(GetWorkspaceResponseSchema)` to create a new message.
+ */
+export const GetWorkspaceResponseSchema: GenMessage<GetWorkspaceResponse> = /*@__PURE__*/
+  messageDesc(file_quixos_orch, 9);
+
+/**
+ * @generated from message quixos.orch.ListActivationsRequest
+ */
+export type ListActivationsRequest = Message<"quixos.orch.ListActivationsRequest"> & {
+};
+
+/**
+ * Describes the message quixos.orch.ListActivationsRequest.
+ * Use `create(ListActivationsRequestSchema)` to create a new message.
+ */
+export const ListActivationsRequestSchema: GenMessage<ListActivationsRequest> = /*@__PURE__*/
+  messageDesc(file_quixos_orch, 10);
+
+/**
+ * @generated from message quixos.orch.ListPackageDescriptorsRequest
+ */
+export type ListPackageDescriptorsRequest = Message<"quixos.orch.ListPackageDescriptorsRequest"> & {
+};
+
+/**
+ * Describes the message quixos.orch.ListPackageDescriptorsRequest.
+ * Use `create(ListPackageDescriptorsRequestSchema)` to create a new message.
+ */
+export const ListPackageDescriptorsRequestSchema: GenMessage<ListPackageDescriptorsRequest> = /*@__PURE__*/
+  messageDesc(file_quixos_orch, 11);
+
+/**
+ * @generated from message quixos.orch.ListPackageDescriptorsResponse
+ */
+export type ListPackageDescriptorsResponse = Message<"quixos.orch.ListPackageDescriptorsResponse"> & {
+  /**
+   * @generated from field: repeated quixos.PackageDescriptor descriptors = 1;
+   */
+  descriptors: PackageDescriptor[];
+};
+
+/**
+ * Describes the message quixos.orch.ListPackageDescriptorsResponse.
+ * Use `create(ListPackageDescriptorsResponseSchema)` to create a new message.
+ */
+export const ListPackageDescriptorsResponseSchema: GenMessage<ListPackageDescriptorsResponse> = /*@__PURE__*/
+  messageDesc(file_quixos_orch, 12);
+
+/**
+ * @generated from message quixos.orch.ListPackageRuntimesRequest
+ */
+export type ListPackageRuntimesRequest = Message<"quixos.orch.ListPackageRuntimesRequest"> & {
+};
+
+/**
+ * Describes the message quixos.orch.ListPackageRuntimesRequest.
+ * Use `create(ListPackageRuntimesRequestSchema)` to create a new message.
+ */
+export const ListPackageRuntimesRequestSchema: GenMessage<ListPackageRuntimesRequest> = /*@__PURE__*/
+  messageDesc(file_quixos_orch, 13);
+
+/**
+ * @generated from message quixos.orch.ListPackageRuntimesResponse
+ */
+export type ListPackageRuntimesResponse = Message<"quixos.orch.ListPackageRuntimesResponse"> & {
+  /**
+   * @generated from field: repeated quixos.orch.PackageRuntimeStatus runtimes = 1;
+   */
+  runtimes: PackageRuntimeStatus[];
+};
+
+/**
+ * Describes the message quixos.orch.ListPackageRuntimesResponse.
+ * Use `create(ListPackageRuntimesResponseSchema)` to create a new message.
+ */
+export const ListPackageRuntimesResponseSchema: GenMessage<ListPackageRuntimesResponse> = /*@__PURE__*/
+  messageDesc(file_quixos_orch, 14);
+
+/**
+ * @generated from message quixos.orch.ListActivationsResponse
+ */
+export type ListActivationsResponse = Message<"quixos.orch.ListActivationsResponse"> & {
+  /**
+   * @generated from field: repeated quixos.orch.Activation activations = 1;
+   */
+  activations: Activation[];
+};
+
+/**
+ * Describes the message quixos.orch.ListActivationsResponse.
+ * Use `create(ListActivationsResponseSchema)` to create a new message.
+ */
+export const ListActivationsResponseSchema: GenMessage<ListActivationsResponse> = /*@__PURE__*/
+  messageDesc(file_quixos_orch, 15);
+
+/**
+ * @generated from message quixos.orch.CloseActivationRequest
+ */
+export type CloseActivationRequest = Message<"quixos.orch.CloseActivationRequest"> & {
+  /**
+   * @generated from field: string activation_id = 1;
+   */
+  activationId: string;
+
+  /**
+   * @generated from field: string reason = 2;
+   */
+  reason: string;
+};
+
+/**
+ * Describes the message quixos.orch.CloseActivationRequest.
+ * Use `create(CloseActivationRequestSchema)` to create a new message.
+ */
+export const CloseActivationRequestSchema: GenMessage<CloseActivationRequest> = /*@__PURE__*/
+  messageDesc(file_quixos_orch, 16);
+
+/**
+ * @generated from message quixos.orch.CloseActivationResponse
+ */
+export type CloseActivationResponse = Message<"quixos.orch.CloseActivationResponse"> & {
+  /**
+   * @generated from field: quixos.orch.Activation activation = 1;
+   */
+  activation?: Activation | undefined;
+};
+
+/**
+ * Describes the message quixos.orch.CloseActivationResponse.
+ * Use `create(CloseActivationResponseSchema)` to create a new message.
+ */
+export const CloseActivationResponseSchema: GenMessage<CloseActivationResponse> = /*@__PURE__*/
+  messageDesc(file_quixos_orch, 17);
+
+/**
+ * @generated from message quixos.orch.Activation
+ */
+export type Activation = Message<"quixos.orch.Activation"> & {
+  /**
+   * @generated from field: string activation_id = 1;
+   */
+  activationId: string;
+
+  /**
+   * @generated from field: quixos.PackageExportRef export = 2;
+   */
+  export?: PackageExportRef | undefined;
+
+  /**
+   * @generated from field: string object_id = 3;
+   */
+  objectId: string;
+
+  /**
+   * @generated from field: string state = 4;
+   */
+  state: string;
+
+  /**
+   * @generated from field: uint32 demand = 5;
+   */
+  demand: number;
+
+  /**
+   * @generated from field: string opened_at = 6;
+   */
+  openedAt: string;
+
+  /**
+   * @generated from field: string last_used_at = 7;
+   */
+  lastUsedAt: string;
+
+  /**
+   * @generated from field: string idle_deadline_at = 8;
+   */
+  idleDeadlineAt: string;
+
+  /**
+   * @generated from field: string closed_at = 9;
+   */
+  closedAt: string;
+
+  /**
+   * @generated from field: string close_reason = 10;
+   */
+  closeReason: string;
+};
+
+/**
+ * Describes the message quixos.orch.Activation.
+ * Use `create(ActivationSchema)` to create a new message.
+ */
+export const ActivationSchema: GenMessage<Activation> = /*@__PURE__*/
+  messageDesc(file_quixos_orch, 18);
+
+/**
+ * @generated from message quixos.orch.PackageRuntimeStatus
+ */
+export type PackageRuntimeStatus = Message<"quixos.orch.PackageRuntimeStatus"> & {
+  /**
+   * @generated from field: string runtime_key = 1;
+   */
+  runtimeKey: string;
+
+  /**
+   * @generated from field: string package_revision_id = 2;
+   */
+  packageRevisionId: string;
+
+  /**
+   * @generated from field: string source_repository = 3;
+   */
+  sourceRepository: string;
+
+  /**
+   * @generated from field: string source_commit = 4;
+   */
+  sourceCommit: string;
+
+  /**
+   * @generated from field: string build_target = 5;
+   */
+  buildTarget: string;
+
+  /**
+   * @generated from field: string server_path = 6;
+   */
+  serverPath: string;
+
+  /**
+   * @generated from field: uint32 pid = 7;
+   */
+  pid: number;
+
+  /**
+   * @generated from field: string state = 8;
+   */
+  state: string;
+
+  /**
+   * @generated from field: string started_at = 9;
+   */
+  startedAt: string;
+
+  /**
+   * @generated from field: string last_handshake_at = 10;
+   */
+  lastHandshakeAt: string;
+
+  /**
+   * @generated from field: string runtime_protocol_version = 11;
+   */
+  runtimeProtocolVersion: string;
+
+  /**
+   * @generated from field: uint32 advertised_export_count = 12;
+   */
+  advertisedExportCount: number;
+};
+
+/**
+ * Describes the message quixos.orch.PackageRuntimeStatus.
+ * Use `create(PackageRuntimeStatusSchema)` to create a new message.
+ */
+export const PackageRuntimeStatusSchema: GenMessage<PackageRuntimeStatus> = /*@__PURE__*/
+  messageDesc(file_quixos_orch, 19);
+
+/**
+ * @generated from service quixos.orch.OrchestratorRuntime
+ */
+export const OrchestratorRuntime: GenService<{
+  /**
+   * @generated from rpc quixos.orch.OrchestratorRuntime.InvokeCapability
+   */
+  invokeCapability: {
+    methodKind: "unary";
+    input: typeof InvokeCapabilityRequestSchema;
+    output: typeof InvokeCapabilityResponseSchema;
+  },
+  /**
+   * @generated from rpc quixos.orch.OrchestratorRuntime.WatchCapability
+   */
+  watchCapability: {
+    methodKind: "server_streaming";
+    input: typeof WatchCapabilityRequestSchema;
+    output: typeof WatchCapabilityEventSchema;
+  },
+  /**
+   * @generated from rpc quixos.orch.OrchestratorRuntime.ConstructObject
+   */
+  constructObject: {
+    methodKind: "unary";
+    input: typeof ConstructObjectRequestSchema;
+    output: typeof ConstructObjectResponseSchema;
+  },
+  /**
+   * @generated from rpc quixos.orch.OrchestratorRuntime.ResolveOrConstructRelatedObject
+   */
+  resolveOrConstructRelatedObject: {
+    methodKind: "unary";
+    input: typeof ResolveOrConstructRelatedObjectRequestSchema;
+    output: typeof ResolveOrConstructRelatedObjectResponseSchema;
+  },
+  /**
+   * @generated from rpc quixos.orch.OrchestratorRuntime.GetWorkspace
+   */
+  getWorkspace: {
+    methodKind: "unary";
+    input: typeof GetWorkspaceRequestSchema;
+    output: typeof GetWorkspaceResponseSchema;
+  },
+  /**
+   * @generated from rpc quixos.orch.OrchestratorRuntime.ListPackageDescriptors
+   */
+  listPackageDescriptors: {
+    methodKind: "unary";
+    input: typeof ListPackageDescriptorsRequestSchema;
+    output: typeof ListPackageDescriptorsResponseSchema;
+  },
+  /**
+   * @generated from rpc quixos.orch.OrchestratorRuntime.ListPackageRuntimes
+   */
+  listPackageRuntimes: {
+    methodKind: "unary";
+    input: typeof ListPackageRuntimesRequestSchema;
+    output: typeof ListPackageRuntimesResponseSchema;
+  },
+  /**
+   * @generated from rpc quixos.orch.OrchestratorRuntime.ListActivations
+   */
+  listActivations: {
+    methodKind: "unary";
+    input: typeof ListActivationsRequestSchema;
+    output: typeof ListActivationsResponseSchema;
+  },
+  /**
+   * @generated from rpc quixos.orch.OrchestratorRuntime.CloseActivation
+   */
+  closeActivation: {
+    methodKind: "unary";
+    input: typeof CloseActivationRequestSchema;
+    output: typeof CloseActivationResponseSchema;
+  },
+}> = /*@__PURE__*/
+  serviceDesc(file_quixos_orch, 0);
+

src/quixos/package_pb.ts

@@ -0,0 +1,68 @@
+// @generated by protoc-gen-es v2.12.1 with parameter "target=ts,import_extension=js"
+// @generated from file quixos/package.proto (package quixos, syntax proto3)
+/* eslint-disable */
+
+import type { GenFile, GenMessage } from "@bufbuild/protobuf/codegenv2";
+import { fileDesc, messageDesc } from "@bufbuild/protobuf/codegenv2";
+import type { Message } from "@bufbuild/protobuf";
+
+/**
+ * Describes the file quixos/package.proto.
+ */
+export const file_quixos_package: GenFile = /*@__PURE__*/
+  fileDesc("ChRxdWl4b3MvcGFja2FnZS5wcm90bxIGcXVpeG9zIo4BChFQYWNrYWdlRGVzY3JpcHRvchISCgpwYWNrYWdlX2lkGAEgASgJEhsKE3BhY2thZ2VfcmV2aXNpb25faWQYAiABKAkSIAoYcnVudGltZV9wcm90b2NvbF92ZXJzaW9uGAMgASgJEiYKB2V4cG9ydHMYBCADKAsyFS5xdWl4b3MuUnVudGltZUV4cG9ydCI6Cg1SdW50aW1lRXhwb3J0EhEKCWV4cG9ydF9pZBgBIAEoCRIWCg5ydW50aW1lX3N5bWJvbBgCIAEoCWIGcHJvdG8z");
+
+/**
+ * @generated from message quixos.PackageDescriptor
+ */
+export type PackageDescriptor = Message<"quixos.PackageDescriptor"> & {
+  /**
+   * @generated from field: string package_id = 1;
+   */
+  packageId: string;
+
+  /**
+   * @generated from field: string package_revision_id = 2;
+   */
+  packageRevisionId: string;
+
+  /**
+   * @generated from field: string runtime_protocol_version = 3;
+   */
+  runtimeProtocolVersion: string;
+
+  /**
+   * @generated from field: repeated quixos.RuntimeExport exports = 4;
+   */
+  exports: RuntimeExport[];
+};
+
+/**
+ * Describes the message quixos.PackageDescriptor.
+ * Use `create(PackageDescriptorSchema)` to create a new message.
+ */
+export const PackageDescriptorSchema: GenMessage<PackageDescriptor> = /*@__PURE__*/
+  messageDesc(file_quixos_package, 0);
+
+/**
+ * @generated from message quixos.RuntimeExport
+ */
+export type RuntimeExport = Message<"quixos.RuntimeExport"> & {
+  /**
+   * @generated from field: string export_id = 1;
+   */
+  exportId: string;
+
+  /**
+   * @generated from field: string runtime_symbol = 2;
+   */
+  runtimeSymbol: string;
+};
+
+/**
+ * Describes the message quixos.RuntimeExport.
+ * Use `create(RuntimeExportSchema)` to create a new message.
+ */
+export const RuntimeExportSchema: GenMessage<RuntimeExport> = /*@__PURE__*/
+  messageDesc(file_quixos_package, 1);
+

src/quixos/refs_pb.ts

@@ -10,42 +10,125 @@ import type { Message } from "@bufbuild/protobuf";
  * Describes the file quixos/refs.proto.
  */
 export const file_quixos_refs: GenFile = /*@__PURE__*/
-  fileDesc("ChFxdWl4b3MvcmVmcy5wcm90bxIGcXVpeG9zInYKC0Z1bmN0aW9uUmVmEhkKEXBhY2thZ2VfbmFtZXNwYWNlGAEgASgJEhQKDHBhY2thZ2VfbmFtZRgCIAEoCRIOCgZzeW1ib2wYAyABKAkSEwoLdmVyc2lvbl9yZWYYBCABKAkSEQoJb3BlcmF0aW9uGAUgASgJYgZwcm90bzM");
+  fileDesc("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");
 
 /**
- * @generated from message quixos.FunctionRef
+ * @generated from message quixos.CapabilityRef
  */
-export type FunctionRef = Message<"quixos.FunctionRef"> & {
+export type CapabilityRef = Message<"quixos.CapabilityRef"> & {
   /**
-   * @generated from field: string package_namespace = 1;
+   * @generated from field: string interface_revision_id = 1;
    */
-  packageNamespace: string;
+  interfaceRevisionId: string;
 
   /**
-   * @generated from field: string package_name = 2;
+   * @generated from field: string operation_id = 2;
    */
-  packageName: string;
-
-  /**
-   * @generated from field: string symbol = 3;
-   */
-  symbol: string;
-
-  /**
-   * @generated from field: string version_ref = 4;
-   */
-  versionRef: string;
-
-  /**
-   * @generated from field: string operation = 5;
-   */
-  operation: string;
+  operationId: string;
 };
 
 /**
- * Describes the message quixos.FunctionRef.
- * Use `create(FunctionRefSchema)` to create a new message.
+ * Describes the message quixos.CapabilityRef.
+ * Use `create(CapabilityRefSchema)` to create a new message.
  */
-export const FunctionRefSchema: GenMessage<FunctionRef> = /*@__PURE__*/
+export const CapabilityRefSchema: GenMessage<CapabilityRef> = /*@__PURE__*/
   messageDesc(file_quixos_refs, 0);
 
+/**
+ * @generated from message quixos.PackageExportRef
+ */
+export type PackageExportRef = Message<"quixos.PackageExportRef"> & {
+  /**
+   * @generated from field: string package_revision_id = 1;
+   */
+  packageRevisionId: string;
+
+  /**
+   * @generated from field: string export_id = 2;
+   */
+  exportId: string;
+};
+
+/**
+ * Describes the message quixos.PackageExportRef.
+ * Use `create(PackageExportRefSchema)` to create a new message.
+ */
+export const PackageExportRefSchema: GenMessage<PackageExportRef> = /*@__PURE__*/
+  messageDesc(file_quixos_refs, 1);
+
+/**
+ * @generated from message quixos.InjectedDependency
+ */
+export type InjectedDependency = Message<"quixos.InjectedDependency"> & {
+  /**
+   * @generated from field: string port_id = 1;
+   */
+  portId: string;
+
+  /**
+   * @generated from oneof quixos.InjectedDependency.binding
+   */
+  binding: {
+    /**
+     * @generated from field: string state_slot_id = 2;
+     */
+    value: string;
+    case: "stateSlotId";
+  } | {
+    /**
+     * @generated from field: quixos.EdgeDependency edge = 3;
+     */
+    value: EdgeDependency;
+    case: "edge";
+  } | {
+    /**
+     * @generated from field: string interface_revision_id = 4;
+     */
+    value: string;
+    case: "interfaceRevisionId";
+  } | {
+    /**
+     * @generated from field: string constructor_atom_id = 5;
+     */
+    value: string;
+    case: "constructorAtomId";
+  } | { case: undefined; value?: undefined };
+
+  /**
+   * Defaults to the invocation receiver. A checked dependency traversal can
+   * select a related object explicitly before the package runtime starts.
+   *
+   * @generated from field: string object_id = 6;
+   */
+  objectId: string;
+};
+
+/**
+ * Describes the message quixos.InjectedDependency.
+ * Use `create(InjectedDependencySchema)` to create a new message.
+ */
+export const InjectedDependencySchema: GenMessage<InjectedDependency> = /*@__PURE__*/
+  messageDesc(file_quixos_refs, 2);
+
+/**
+ * @generated from message quixos.EdgeDependency
+ */
+export type EdgeDependency = Message<"quixos.EdgeDependency"> & {
+  /**
+   * @generated from field: string edge_type_id = 1;
+   */
+  edgeTypeId: string;
+
+  /**
+   * @generated from field: string projection_id = 2;
+   */
+  projectionId: string;
+};
+
+/**
+ * Describes the message quixos.EdgeDependency.
+ * Use `create(EdgeDependencySchema)` to create a new message.
+ */
+export const EdgeDependencySchema: GenMessage<EdgeDependency> = /*@__PURE__*/
+  messageDesc(file_quixos_refs, 3);
+

src/quixos/runtime_pb.ts

@@ -6,7 +6,7 @@ import type { GenFile, GenMessage, GenService } from "@bufbuild/protobuf/codegen
 import { fileDesc, messageDesc, serviceDesc } from "@bufbuild/protobuf/codegenv2";
 import type { Value } from "../camino/api_pb.js";
 import { file_camino_api } from "../camino/api_pb.js";
-import type { FunctionRef } from "./refs_pb.js";
+import type { InjectedDependency, PackageExportRef } from "./refs_pb.js";
 import { file_quixos_refs } from "./refs_pb.js";
 import type { Message } from "@bufbuild/protobuf";
 
@@ -14,7 +14,7 @@ import type { Message } from "@bufbuild/protobuf";
  * Describes the file quixos/runtime.proto.
  */
 export const file_quixos_runtime: GenFile = /*@__PURE__*/
-  fileDesc("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", [file_camino_api, file_quixos_refs]);
+  fileDesc("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", [file_camino_api, file_quixos_refs]);
 
 /**
  * @generated from message quixos.runtime.HandshakeRequest
@@ -24,6 +24,11 @@ export type HandshakeRequest = Message<"quixos.runtime.HandshakeRequest"> & {
    * @generated from field: string orch_protocol_version = 1;
    */
   orchProtocolVersion: string;
+
+  /**
+   * @generated from field: string nonce = 2;
+   */
+  nonce: string;
 };
 
 /**
@@ -38,24 +43,34 @@ export const HandshakeRequestSchema: GenMessage<HandshakeRequest> = /*@__PURE__*
  */
 export type HandshakeResponse = Message<"quixos.runtime.HandshakeResponse"> & {
   /**
-   * @generated from field: string package_namespace = 1;
+   * @generated from field: string package_revision_id = 1;
    */
-  packageNamespace: string;
+  packageRevisionId: string;
 
   /**
-   * @generated from field: string package_name = 2;
-   */
-  packageName: string;
-
-  /**
-   * @generated from field: string runtime_protocol_version = 3;
+   * @generated from field: string runtime_protocol_version = 2;
    */
   runtimeProtocolVersion: string;
 
   /**
-   * @generated from field: repeated quixos.FunctionRef functions = 4;
+   * @generated from field: repeated string export_ids = 3;
    */
-  functions: FunctionRef[];
+  exportIds: string[];
+
+  /**
+   * @generated from field: string instance_id = 4;
+   */
+  instanceId: string;
+
+  /**
+   * @generated from field: string authentication_proof = 5;
+   */
+  authenticationProof: string;
+
+  /**
+   * @generated from field: repeated string capabilities = 6;
+   */
+  capabilities: string[];
 };
 
 /**
@@ -65,6 +80,91 @@ export type HandshakeResponse = Message<"quixos.runtime.HandshakeResponse"> & {
 export const HandshakeResponseSchema: GenMessage<HandshakeResponse> = /*@__PURE__*/
   messageDesc(file_quixos_runtime, 1);
 
+/**
+ * @generated from message quixos.runtime.InvocationContext
+ */
+export type InvocationContext = Message<"quixos.runtime.InvocationContext"> & {
+  /**
+   * @generated from field: string workspace_epoch = 1;
+   */
+  workspaceEpoch: string;
+
+  /**
+   * @generated from field: string instance_id = 2;
+   */
+  instanceId: string;
+
+  /**
+   * @generated from field: string binding_digest = 3;
+   */
+  bindingDigest: string;
+
+  /**
+   * @generated from field: string grant = 4;
+   */
+  grant: string;
+
+  /**
+   * @generated from field: string session_id = 5;
+   */
+  sessionId: string;
+
+  /**
+   * Host-selected owner; packages must not invent workspace-local ownership.
+   *
+   * @generated from field: string owner_conformance_id = 6;
+   */
+  ownerConformanceId: string;
+};
+
+/**
+ * Describes the message quixos.runtime.InvocationContext.
+ * Use `create(InvocationContextSchema)` to create a new message.
+ */
+export const InvocationContextSchema: GenMessage<InvocationContext> = /*@__PURE__*/
+  messageDesc(file_quixos_runtime, 2);
+
+/**
+ * @generated from message quixos.runtime.InvocationControlRequest
+ */
+export type InvocationControlRequest = Message<"quixos.runtime.InvocationControlRequest"> & {
+  /**
+   * @generated from field: string invocation_id = 1;
+   */
+  invocationId: string;
+};
+
+/**
+ * Describes the message quixos.runtime.InvocationControlRequest.
+ * Use `create(InvocationControlRequestSchema)` to create a new message.
+ */
+export const InvocationControlRequestSchema: GenMessage<InvocationControlRequest> = /*@__PURE__*/
+  messageDesc(file_quixos_runtime, 3);
+
+/**
+ * @generated from message quixos.runtime.InvocationStatus
+ */
+export type InvocationStatus = Message<"quixos.runtime.InvocationStatus"> & {
+  /**
+   * @generated from field: string invocation_id = 1;
+   */
+  invocationId: string;
+
+  /**
+   * unknown, running, cancellation-requested, completed, failed
+   *
+   * @generated from field: string state = 2;
+   */
+  state: string;
+};
+
+/**
+ * Describes the message quixos.runtime.InvocationStatus.
+ * Use `create(InvocationStatusSchema)` to create a new message.
+ */
+export const InvocationStatusSchema: GenMessage<InvocationStatus> = /*@__PURE__*/
+  messageDesc(file_quixos_runtime, 4);
+
 /**
  * @generated from message quixos.runtime.InvokeRequest
  */
@@ -75,9 +175,9 @@ export type InvokeRequest = Message<"quixos.runtime.InvokeRequest"> & {
   invocationId: string;
 
   /**
-   * @generated from field: quixos.FunctionRef function = 2;
+   * @generated from field: quixos.PackageExportRef export = 2;
    */
-  function?: FunctionRef | undefined;
+  export?: PackageExportRef | undefined;
 
   /**
    * @generated from field: string object_id = 3;
@@ -88,6 +188,16 @@ export type InvokeRequest = Message<"quixos.runtime.InvokeRequest"> & {
    * @generated from field: map<string, camino.Value> input = 4;
    */
   input: { [key: string]: Value };
+
+  /**
+   * @generated from field: repeated quixos.InjectedDependency dependencies = 5;
+   */
+  dependencies: InjectedDependency[];
+
+  /**
+   * @generated from field: quixos.runtime.InvocationContext context = 6;
+   */
+  context?: InvocationContext | undefined;
 };
 
 /**
@@ -95,7 +205,7 @@ export type InvokeRequest = Message<"quixos.runtime.InvokeRequest"> & {
  * Use `create(InvokeRequestSchema)` to create a new message.
  */
 export const InvokeRequestSchema: GenMessage<InvokeRequest> = /*@__PURE__*/
-  messageDesc(file_quixos_runtime, 2);
+  messageDesc(file_quixos_runtime, 5);
 
 /**
  * @generated from message quixos.runtime.InvokeResponse
@@ -115,6 +225,11 @@ export type InvokeResponse = Message<"quixos.runtime.InvokeResponse"> & {
    * @generated from field: string error = 3;
    */
   error: string;
+
+  /**
+   * @generated from field: repeated quixos.runtime.DerivedDependency dependencies = 4;
+   */
+  dependencies: DerivedDependency[];
 };
 
 /**
@@ -122,7 +237,7 @@ export type InvokeResponse = Message<"quixos.runtime.InvokeResponse"> & {
  * Use `create(InvokeResponseSchema)` to create a new message.
  */
 export const InvokeResponseSchema: GenMessage<InvokeResponse> = /*@__PURE__*/
-  messageDesc(file_quixos_runtime, 3);
+  messageDesc(file_quixos_runtime, 6);
 
 /**
  * @generated from message quixos.runtime.WatchRequest
@@ -134,9 +249,9 @@ export type WatchRequest = Message<"quixos.runtime.WatchRequest"> & {
   invocationId: string;
 
   /**
-   * @generated from field: quixos.FunctionRef function = 2;
+   * @generated from field: quixos.PackageExportRef export = 2;
    */
-  function?: FunctionRef | undefined;
+  export?: PackageExportRef | undefined;
 
   /**
    * @generated from field: string object_id = 3;
@@ -147,6 +262,16 @@ export type WatchRequest = Message<"quixos.runtime.WatchRequest"> & {
    * @generated from field: map<string, camino.Value> input = 4;
    */
   input: { [key: string]: Value };
+
+  /**
+   * @generated from field: repeated quixos.InjectedDependency dependencies = 5;
+   */
+  dependencies: InjectedDependency[];
+
+  /**
+   * @generated from field: quixos.runtime.InvocationContext context = 6;
+   */
+  context?: InvocationContext | undefined;
 };
 
 /**
@@ -154,7 +279,7 @@ export type WatchRequest = Message<"quixos.runtime.WatchRequest"> & {
  * Use `create(WatchRequestSchema)` to create a new message.
  */
 export const WatchRequestSchema: GenMessage<WatchRequest> = /*@__PURE__*/
-  messageDesc(file_quixos_runtime, 4);
+  messageDesc(file_quixos_runtime, 7);
 
 /**
  * @generated from message quixos.runtime.DerivedDependency
@@ -171,14 +296,14 @@ export type DerivedDependency = Message<"quixos.runtime.DerivedDependency"> & {
   objectId: string;
 
   /**
-   * @generated from field: string field_name = 3;
+   * @generated from field: string attachment_id = 3;
    */
-  fieldName: string;
+  attachmentId: string;
 
   /**
-   * @generated from field: string source_field = 4;
+   * @generated from field: string projection_id = 4;
    */
-  sourceField: string;
+  projectionId: string;
 };
 
 /**
@@ -186,7 +311,7 @@ export type DerivedDependency = Message<"quixos.runtime.DerivedDependency"> & {
  * Use `create(DerivedDependencySchema)` to create a new message.
  */
 export const DerivedDependencySchema: GenMessage<DerivedDependency> = /*@__PURE__*/
-  messageDesc(file_quixos_runtime, 5);
+  messageDesc(file_quixos_runtime, 8);
 
 /**
  * @generated from message quixos.runtime.WatchEvent
@@ -223,7 +348,7 @@ export type WatchEvent = Message<"quixos.runtime.WatchEvent"> & {
  * Use `create(WatchEventSchema)` to create a new message.
  */
 export const WatchEventSchema: GenMessage<WatchEvent> = /*@__PURE__*/
-  messageDesc(file_quixos_runtime, 6);
+  messageDesc(file_quixos_runtime, 9);
 
 /**
  * @generated from service quixos.runtime.PackageRuntime
@@ -253,6 +378,22 @@ export const PackageRuntime: GenService<{
     input: typeof WatchRequestSchema;
     output: typeof WatchEventSchema;
   },
+  /**
+   * @generated from rpc quixos.runtime.PackageRuntime.GetInvocationStatus
+   */
+  getInvocationStatus: {
+    methodKind: "unary";
+    input: typeof InvocationControlRequestSchema;
+    output: typeof InvocationStatusSchema;
+  },
+  /**
+   * @generated from rpc quixos.runtime.PackageRuntime.CancelInvocation
+   */
+  cancelInvocation: {
+    methodKind: "unary";
+    input: typeof InvocationControlRequestSchema;
+    output: typeof InvocationStatusSchema;
+  },
 }> = /*@__PURE__*/
   serviceDesc(file_quixos_runtime, 0);
 

src/references.ts

@@ -0,0 +1,35 @@
+/** Opaque runtime identity. The wire codec, never ordinary package state, owns
+ * the raw ID. These handles do not themselves confer authority or a lease. */
+const identities = new WeakMap<object, string>();
+declare const referenceBrand: unique symbol;
+export interface QxObjectRef<Identity extends string = string> {
+  readonly [referenceBrand]: {readonly [K in Identity]: true};
+  equals(other: QxObjectRef<string>): boolean;
+}
+class Reference {
+  constructor(id: string) { identities.set(this, id); Object.freeze(this); }
+  equals(other: unknown) { return isObjectReference(other) && identities.get(this) === identities.get(other); }
+  toJSON(): never { throw new Error("Object references cannot be serialized into ordinary data"); }
+  toString(): never { throw new Error("Object references cannot be coerced to strings"); }
+  [Symbol.toPrimitive](): never { throw new Error("Object references cannot be coerced to scalar values"); }
+}
+export const isObjectReference = (value: unknown): value is QxObjectRef =>
+  typeof value === "object" && value !== null && identities.has(value);
+
+/** Internal transport boundary; intentionally not exported from the SDK entry. */
+export const referenceFromWire = (id: string): QxObjectRef => {
+  if (typeof id !== "string" || !id) throw new Error("Missing object reference identity");
+  return new Reference(id) as unknown as QxObjectRef;
+};
+export const referenceToWire = (value: unknown): string => {
+  if (!isObjectReference(value)) throw new Error("Expected an opaque object reference, not a raw ID");
+  return identities.get(value)!;
+};
+export const assertReferenceFree = (value: unknown, seen = new Set<object>()): void => {
+  if (!value || typeof value !== "object") return;
+  if (isObjectReference(value)) throw new Error("Managed references belong in declared RPC references or graph relationships, not ordinary state/messages");
+  if (seen.has(value)) throw new Error("Cyclic ordinary data");
+  seen.add(value);
+  if (!(value instanceof Uint8Array)) for (const child of Object.values(value)) assertReferenceFree(child, seen);
+  seen.delete(value);
+};

src/relationships.ts

@@ -0,0 +1,59 @@
+import type {QxObjectRef} from "./references.js";
+import type {RelationshipCollection, RelationshipEntry} from "./index.js";
+type Key = string | boolean | bigint;
+type Port<T extends QxObjectRef> = {collection(): Promise<RelationshipCollection<T>>; replace(entries: RelationshipEntry<T>[], expectedRevision: bigint): Promise<RelationshipCollection<T>>};
+const checked = async <T extends QxObjectRef>(port: Port<T>, revision: bigint) => {
+  const snapshot = await port.collection();
+  if (snapshot.revision !== revision) throw new Error("STALE_COLLECTION_REVISION");
+  return snapshot;
+};
+/** Helpers never retry a failed CAS or silently overwrite concurrent edits. */
+export const relationshipMap = <T extends QxObjectRef, K extends Key = Key>(port: Port<T>) => ({
+  read: () => port.collection(),
+  async get(key: K) {const snapshot = await port.collection(); return {revision: snapshot.revision, value: snapshot.entries.find((entry) => entry.key === key)?.target};},
+  async set(key: K, target: T, expectedRevision: bigint) {
+    const snapshot = await checked(port, expectedRevision);
+    const entries = snapshot.entries.filter((entry) => entry.key !== key);
+    const existing = snapshot.entries.find((entry) => entry.key === key && entry.target.equals(target));
+    entries.push(existing ?? {key, target});
+    return port.replace(entries, expectedRevision);
+  },
+  async delete(key: K, expectedRevision: bigint) {
+    const snapshot = await checked(port, expectedRevision);
+    return port.replace(snapshot.entries.filter((entry) => entry.key !== key), expectedRevision);
+  },
+});
+export const relationshipList = <T extends QxObjectRef>(port: Port<T>) => ({
+  read: () => port.collection(),
+  async insert(index: number, target: T, expectedRevision: bigint) {
+    const snapshot = await checked(port, expectedRevision);
+    if (!Number.isSafeInteger(index) || index < 0 || index > snapshot.entries.length) throw new Error("List index out of bounds");
+    snapshot.entries.splice(index, 0, {target});
+    return port.replace(snapshot.entries, expectedRevision);
+  },
+  async move(edgeId: string, index: number, expectedRevision: bigint) {
+    const snapshot = await checked(port, expectedRevision);
+    const prior = snapshot.entries.findIndex((entry) => entry.edgeId === edgeId);
+    if (prior < 0 || !Number.isSafeInteger(index) || index < 0 || index >= snapshot.entries.length) throw new Error("Unknown list entry or invalid index");
+    const [entry] = snapshot.entries.splice(prior, 1);
+    snapshot.entries.splice(index, 0, entry);
+    return port.replace(snapshot.entries, expectedRevision);
+  },
+  async delete(edgeId: string, expectedRevision: bigint) {
+    const snapshot = await checked(port, expectedRevision);
+    if (!snapshot.entries.some((entry) => entry.edgeId === edgeId)) throw new Error("Unknown list entry");
+    return port.replace(snapshot.entries.filter((entry) => entry.edgeId !== edgeId), expectedRevision);
+  },
+});
+export const relationshipSet = <T extends QxObjectRef>(port: Port<T>) => ({
+  read: () => port.collection(),
+  async add(target: T, expectedRevision: bigint) {
+    const snapshot = await checked(port, expectedRevision);
+    if (snapshot.entries.some((entry) => entry.target.equals(target))) return snapshot;
+    return port.replace([...snapshot.entries, {target}], expectedRevision);
+  },
+  async delete(target: T, expectedRevision: bigint) {
+    const snapshot = await checked(port, expectedRevision);
+    return port.replace(snapshot.entries.filter((entry) => !entry.target.equals(target)), expectedRevision);
+  },
+});

test/bindings.test.mjs

@@ -0,0 +1,103 @@
+import assert from "node:assert/strict";
+import test from "node:test";
+import { referenceFromWire } from "../dist/references.js";
+import { bindQxHandler, decodeQxValue, encodeQxValue, jsToProtoValue, liveValue, protoValueToJs } from "../dist/index.js";
+const scalar = (name) => ({ kind: "scalar", name });
+const unit = { kind: "builtin", name: "unit" };
+test("declared record inputs preserve opaque references without opening message codecs", async () => {
+  const target = referenceFromWire("obj:board");
+  const type = {kind: "record", fields: {
+    target: {kind: "object-ref", expectation: {kind: "atom", atomId: "board"}},
+    x: scalar("double"), note: {kind: "optional", value: scalar("string")},
+  }};
+  const encoded = encodeQxValue(type, {target, x: 12}, {});
+  const decoded = decodeQxValue(type, encoded, {});
+  assert.ok(decoded.target.equals(target));
+  assert.equal(decoded.x, 12);
+  assert.equal(decoded.note, null);
+  assert.throws(() => JSON.stringify(decoded), /cannot be serialized/);
+  assert.throws(() => encodeQxValue(type, {target, x: 12, hidden: target}, {}), /Unexpected/);
+  assert.throws(() => encodeQxValue(type, {x: 12}, {}), /Missing/);
+  assert.throws(() => encodeQxValue(type, {target: "obj:board", x: 12}, {}), /opaque object reference/);
+  const handler = bindQxHandler({inputType: type, outputType: unit, ports: {}}, async (context) => {
+    assert.ok(context.input.target.equals(target));
+    assert.equal(context.input.x, 12);
+  }, {});
+  await handler({objectId: target, inputProto: encoded.kind.value.fields});
+});
+test("typed sessions rebind ports and cancellation to each acquired invocation", async () => {
+  const first = new AbortController(), second = new AbortController();
+  let closed = false;
+  const context = (value, signal) => ({objectId: referenceFromWire("obj:owner"), inputProto: {}, signal,
+    state: () => ({live: async () => liveValue(jsToProtoValue(value))})});
+  const raw = {...context(1n, first.signal), openSession: async () => ({id: "session:test",
+    run: (work) => work(context(2n, second.signal)), close: async () => {closed = true;}})};
+  const handler = bindQxHandler({inputType: unit, outputType: unit, ports: {counter: {kind: "state", id: "counter", valueType: scalar("int64"), primitives: ["read"]}}}, async (bound) => {
+    assert.equal(bound.signal, first.signal);
+    const session = await bound.openSession();
+    await session.run(async (next) => {
+      assert.equal(next.signal, second.signal);
+      assert.equal(await next.ports.counter.get(), 2n);
+      assert.equal(next.openSession, undefined);
+    });
+    await session.close();
+  }, {});
+  await handler(raw);
+  assert.equal(closed, true);
+});
+test("binding codecs round trip nested bytes, 64-bit integers, nulls, and references", () => {
+  const values = [[scalar("int64"), -(2n ** 63n)], [scalar("uint64"), 2n ** 64n - 1n],
+    [scalar("bytes"), new Uint8Array([0, 255])],
+    [{ kind: "list", value: { kind: "optional", value: scalar("int64") } }, [null, 2n ** 60n]],
+    [{ kind: "object-ref", expectation: { kind: "atom", atomId: "thing" } }, referenceFromWire("obj:thing")]];
+  for (const [type, value] of values) assert.deepEqual(decodeQxValue(type, encodeQxValue(type, value, {}), {}), value);
+});
+
+test("opaque references pass declared RPC boundaries but cannot enter ordinary data", () => {
+  const reference = referenceFromWire("obj:thing");
+  const type = {kind: "object-ref", expectation: {kind: "atom", atomId: "thing"}};
+  const roundtrip = decodeQxValue(type, encodeQxValue(type, reference, {}), {});
+  assert.equal(reference.equals(roundtrip), true);
+  assert.equal(reference.equals(referenceFromWire("obj:other")), false);
+  assert.throws(() => JSON.stringify({nested: [reference]}), /cannot be serialized/);
+  assert.throws(() => String(reference), /cannot be coerced/);
+  assert.throws(() => encodeQxValue(type, "obj:thing", {}), /opaque/);
+  assert.throws(() => encodeQxValue(scalar("string"), reference, {}), /Managed references/);
+  const message = {kind: "message", descriptorId: "Payload"};
+  assert.throws(() => encodeQxValue(message, {nested: reference}, {Payload: {encode: jsToProtoValue}}), /Managed references/);
+  assert.throws(() => encodeQxValue(message, {}, {Payload: {encode: () => jsToProtoValue(reference)}}), /Managed references/);
+  assert.throws(() => decodeQxValue(message, jsToProtoValue(reference), {Payload: {decode: () => ({})}}), /Managed references/);
+});
+test("typed state and interface ports preserve declared values and exact operation IDs", async () => {
+  const spec = { inputType: scalar("int64"), outputType: scalar("bytes"), ports: {
+    data: { kind: "state", id: "state-id", valueType: scalar("int64"), primitives: ["read", "write"] },
+    reader: { kind: "interface", id: "interface-id", operations: { "payload.get": { id: "get-id", inputType: unit, outputType: scalar("bytes") } } },
+  } };
+  let written;
+  const handler = bindQxHandler(spec, async ({ input, ports }) => {
+    assert.equal(input, 2n ** 60n);
+    assert.equal(await ports.data.get(), 9n);
+    await ports.data.set(input);
+    return ports.reader["payload.get"]();
+  }, {});
+  const result = await handler({ inputProto: { value: jsToProtoValue(2n ** 60n) }, objectId: "obj",
+    state: (id) => { assert.equal(id, "state-id"); return {
+      live: async () => liveValue(jsToProtoValue(9n)), set: async (value) => { written = value; },
+    }; },
+    interface: (id) => { assert.equal(id, "interface-id"); return { live: async (operation, input) => {
+      assert.equal(operation, "get-id"); assert.deepEqual(input, {}); return liveValue(jsToProtoValue(new Uint8Array([7])));
+    } }; },
+  });
+  assert.equal(written.$quixosValue.kind.value, String(2n ** 60n));
+  assert.deepEqual(result.$quixosValue.kind.value, new Uint8Array([7]));
+});
+test("external message bindings and derived event types are used at the boundary", async () => {
+  const message = { kind: "message", descriptorId: "Payload" };
+  const messages = { Payload: { encode: jsToProtoValue, decode: protoValueToJs } };
+  const handler = bindQxHandler({ inputType: message, outputType: { kind: "builtin", name: "watch-handle" }, eventType: message, ports: {} },
+    { kind: "derived", get: ({ input }) => ({ value: input.title }) }, messages);
+  assert.equal(handler.kind, "derived");
+  const result = await handler.get({ objectId: "obj", inputProto: { title: jsToProtoValue("hello") } });
+  assert.deepEqual(protoValueToJs(result.$quixosValue), { value: "hello" });
+  assert.throws(() => encodeQxValue(message, {}, {}), /Missing message binding/);
+});

test/credential-file.test.mjs

@@ -0,0 +1,30 @@
+import test from 'node:test';
+import assert from 'node:assert/strict';
+import fs from 'node:fs/promises';
+import os from 'node:os';
+import path from 'node:path';
+import crypto from 'node:crypto';
+import {spawnSync} from 'node:child_process';
+
+test('supervised SDK reads a credential file and proves instance identity without an environment token', async t => {
+  const directory = await fs.mkdtemp(path.join(os.tmpdir(), 'qx-sdk-credential-'));
+  t.after(() => fs.rm(directory, {recursive:true, force:true}));
+  const token = crypto.randomBytes(32).toString('hex');
+  const filename = path.join(directory, 'process-token');
+  await fs.writeFile(filename, token, {mode:0o600});
+  const env = {...process.env, CAMINO_RUNTIME_AUTH_TOKEN_FILE: filename,
+    CAMINO_RUNTIME_AUTH_REQUIRED:'1', QUIXOS_RUNTIME_INSTANCE_ID:'instance:test'};
+  delete env.CAMINO_RUNTIME_AUTH_TOKEN;
+  const result = spawnSync(process.execPath, ['--input-type=module', '-e', `
+    import {createPackageRuntimeRoutes} from ${JSON.stringify(new URL('../dist/index.js', import.meta.url).href)};
+    createPackageRuntimeRoutes({packageRevisionId:'package:test',exports:{}})({
+      service(_type, implementation) { console.log(JSON.stringify(implementation.handshake({nonce:'challenge'}))); }
+    });
+  `], {env, encoding:'utf8'});
+  assert.equal(result.status, 0, result.stderr);
+  const handshake = JSON.parse(result.stdout);
+  assert.equal(handshake.authenticationProof, crypto.createHmac('sha256', token)
+    .update(JSON.stringify(['challenge','instance:test','package:test'])).digest('hex'));
+  assert.ok(handshake.capabilities.includes('epoch-grants-v1'));
+  assert.ok(!result.stdout.includes(token));
+});

test/invocations.test.mjs

@@ -0,0 +1,15 @@
+import test from "node:test";
+import assert from "node:assert/strict";
+import { createInvocationRegistry } from "../dist/invocations.js";
+
+test("cancel requests do not acknowledge execution completion or allow replay", () => {
+  const registry = createInvocationRegistry();
+  const execution = registry.begin("call-1");
+  assert.equal(registry.cancel("call-1").state, "cancellation-requested");
+  assert.equal(execution.signal.aborted, true);
+  assert.equal(registry.status("call-1").state, "cancellation-requested");
+  execution.finish();
+  assert.equal(registry.status("call-1").state, "completed");
+  assert.throws(() => registry.begin("call-1"), /already used/);
+  assert.equal(registry.status("missing").state, "unknown");
+});

test/migration.test.mjs

@@ -0,0 +1,24 @@
+import test from "node:test";
+import assert from "node:assert/strict";
+import {createMigrationContext, migrationObjectId} from "../dist/migration.js";
+test("migration context offers restricted ports and deterministic helper identities", () => {
+  const input = {schemaVersion: 1, executionId: "operation:transition", exportId: "migrate", ports: [
+    {name: "old", binding: "slot:name", view: "old", access: ["read"], states: [{objectId: "obj:one", value: "Alice"}]},
+    {name: "new", binding: "slot:name", view: "new", access: ["write"]}, {name: "newRead", binding: "slot:name", view: "new", access: ["read"]},
+    {name: "helpers", binding: "atom:helper", view: "new", access: ["create"]},
+  ]};
+  const {context, result} = createMigrationContext(input);
+  assert.equal(context.read("old", "obj:one"), "Alice");
+  assert.throws(() => context.write("old", "obj:one", "Bob"), /does not grant/);
+  assert.throws(() => context.read("new", "obj:one"), /does not grant/);
+  context.write("new", "obj:one", "Alice");
+  assert.equal(context.read("newRead", "obj:one"), "Alice");
+  context.write("new", "obj:one", "Bob");
+  assert.equal(context.read("newRead", "obj:one"), "Bob");
+  assert.equal(context.read("old", "obj:one"), "Alice");
+  const helper = context.create("helpers", "one");
+  assert.equal(helper, migrationObjectId(input.executionId, "helpers", "one"));
+  assert.equal(context.create("helpers", "one"), helper);
+  assert.equal(result().creates.length, 1);
+  assert.deepEqual(input.ports[0].states, [{objectId: "obj:one", value: "Alice"}]);
+});

test/relationships.test.mjs

@@ -0,0 +1,27 @@
+import test from "node:test";
+import assert from "node:assert/strict";
+import {relationshipMap, relationshipList, relationshipSet} from "../dist/index.js";
+import {referenceFromWire} from "../dist/references.js";
+test("relationship helpers preserve handles and require explicit collection revisions", async () => {
+  let current = {revision: 0n, entries: []}, serial = 0;
+  const port = {collection: async () => ({revision: current.revision, entries: current.entries.map((entry) => ({...entry}))}),
+    replace: async (entries, revision) => {
+      assert.equal(revision, current.revision);
+      current = {revision: revision + 1n, entries: entries.map((entry) => ({...entry, edgeId: entry.edgeId ?? `edge:${++serial}`}))};
+      return port.collection();
+    }};
+  const a = referenceFromWire("obj:a"), b = referenceFromWire("obj:b");
+  const map = relationshipMap(port);
+  await map.set("a1", a, 0n);
+  assert.equal((await map.get("a1")).value.equals(a), true);
+  await assert.rejects(() => map.set("b1", b, 0n), /STALE_COLLECTION/);
+  await map.delete("a1", 1n);
+  const list = relationshipList(port);
+  const inserted = await list.insert(0, a, 2n);
+  await list.insert(1, b, 3n);
+  const moved = await list.move(inserted.entries[0].edgeId, 1, 4n);
+  assert.equal(moved.entries[1].target.equals(a), true);
+  const set = relationshipSet(port);
+  const unchanged = await set.add(referenceFromWire("obj:a"), 5n);
+  assert.equal(unchanged.revision, 5n);
+});

test/runtime.test.mjs

@@ -0,0 +1,372 @@
+import assert from "node:assert/strict";
+import http from "node:http";
+import test from "node:test";
+import { referenceFromWire } from "../dist/references.js";
+import { create } from "@bufbuild/protobuf";
+import { createClient } from "@connectrpc/connect";
+import { connectNodeAdapter, createConnectTransport } from "@connectrpc/connect-node";
+import {
+  createPackageRuntimeRoutes,
+  createRuntimeContext,
+  derived,
+  jsToProtoValue,
+  liveValue,
+  protoValueToJs,
+} from "../dist/index.js";
+import {
+  CaminoObjectSchema,
+  CaminoService,
+  CrdtValueSchema,
+  StateValueSourceSchema,
+  ValueSchema,
+  ValueSourceSchema,
+} from "../dist/camino/api_pb.js";
+import {
+  EdgeDependencySchema,
+  InjectedDependencySchema,
+  PackageExportRefSchema,
+} from "../dist/quixos/refs_pb.js";
+import { InvokeCapabilityResponseSchema, OrchestratorRuntime } from "../dist/quixos/orch_pb.js";
+import { DerivedDependencySchema, PackageRuntime } from "../dist/quixos/runtime_pb.js";
+
+const listen = async (routes) => {
+  const server = http.createServer((request, response) => void connectNodeAdapter({ routes })(request, response));
+  await new Promise((resolve) => server.listen(0, "127.0.0.1", resolve));
+  const address = server.address();
+  assert.ok(address && typeof address === "object");
+  return {
+    url: `http://127.0.0.1:${address.port}`,
+    close: async () => {
+      server.closeAllConnections();
+      await new Promise((resolve) => server.close(resolve));
+    },
+  };
+};
+
+test("generic values preserve nested values and object references", () => {
+  const value = jsToProtoValue({
+    title: "A task",
+    target: referenceFromWire("obj:target"),
+    tags: ["one", "two"],
+  });
+  assert.deepEqual(protoValueToJs(value), {
+    title: "A task",
+    target: referenceFromWire("obj:target"),
+    tags: ["one", "two"],
+  });
+});
+
+test("live values preserve writable CRDT source identity through derivation", () => {
+  const value = create(ValueSchema, {
+    kind: { case: "stringValue", value: "notes" },
+    source: create(ValueSourceSchema, {
+      state: create(StateValueSourceSchema, {
+        objectId: "obj:task",
+        slotId: "slot:task:notes",
+        revision: 7n,
+        crdtSnapshot: create(CrdtValueSchema, {
+          type: "quixos.automerge-document.v1",
+          encoding: "automerge-snapshot-v1",
+          payload: new Uint8Array([1, 2, 3]),
+        }),
+      }),
+    }),
+  });
+
+  const forwarded = jsToProtoValue(liveValue(value));
+  assert.equal(forwarded.source?.state?.objectId, "obj:task");
+  assert.equal(forwarded.source?.state?.slotId, "slot:task:notes");
+  assert.equal(forwarded.source?.state?.revision, 7n);
+  assert.deepEqual(forwarded.source?.state?.crdtSnapshot?.payload, new Uint8Array([1, 2, 3]));
+});
+
+test("runtime context exposes only explicitly injected ports", async () => {
+  const writes = [];
+  const camino = {
+    readState: async ({ objectId, slotId }) => ({
+      value: jsToProtoValue(`${objectId}/${slotId}`),
+    }),
+    writeState: async (request) => {
+      writes.push(request);
+      return {};
+    },
+    resolveEdge: async () => ({ edges: [] }),
+    connectEdge: async () => ({}),
+  };
+  const context = createRuntimeContext(camino, {}, {
+    objectId: "obj:task",
+    input: {},
+    dependencies: [
+      create(InjectedDependencySchema, {
+        portId: "port:title",
+        binding: { case: "stateSlotId", value: "slot:task:title" },
+      }),
+      create(InjectedDependencySchema, {
+        portId: "port:children",
+        binding: {
+          case: "edge",
+          value: create(EdgeDependencySchema, {
+            edgeTypeId: "edge:task:children",
+            projectionId: "projection:task:children",
+          }),
+        },
+      }),
+    ],
+  });
+
+  assert.equal(await context.state("port:title").get(), "obj:task/slot:task:title");
+  await context.state("port:title").set("Changed");
+  assert.equal(writes.length, 1);
+  assert.equal("camino" in context, false);
+  assert.equal("orch" in context, false);
+  assert.throws(() => context.state("port:not-injected"), /Missing slotId dependency/);
+  assert.throws(() => context.interface("port:title"), /Missing interfaceRevisionId dependency/);
+  assert.deepEqual(await context.edge("port:children").resolve(), []);
+});
+
+test("injected ports preserve an explicitly traversed object through PackageRuntime RPC", async () => {
+  const reads = [];
+  const caminoServer = await listen((router) => router.service(CaminoService, {
+    readState: (request) => {
+      reads.push(request);
+      return { value: jsToProtoValue("Project name") };
+    },
+  }));
+  const runtimeServer = await listen(createPackageRuntimeRoutes({
+    packageRevisionId: "package:test@1",
+    caminoUrl: caminoServer.url,
+    exports: {
+      "export:test:value": (context) => context.state("port:value").get(),
+    },
+  }));
+  const client = createClient(PackageRuntime, createConnectTransport({
+    baseUrl: runtimeServer.url,
+    httpVersion: "1.1",
+  }));
+  try {
+    const response = await client.invoke({
+      export: create(PackageExportRefSchema, {
+        packageRevisionId: "package:test@1",
+        exportId: "export:test:value",
+      }),
+      objectId: "obj:component",
+      dependencies: [create(InjectedDependencySchema, {
+        portId: "port:value",
+        objectId: "obj:project",
+        binding: { case: "stateSlotId", value: "slot:project:name" },
+      })],
+    });
+    assert.equal(response.ok, true);
+    assert.equal(protoValueToJs(response.result), "Project name");
+    assert.equal(reads.length, 1);
+    assert.equal(reads[0]?.objectId, "obj:project");
+  } finally {
+    await runtimeServer.close();
+    await caminoServer.close();
+  }
+});
+
+test("interface views invoke a related object and propagate transitive live dependencies", async () => {
+  const invocations = [];
+  const sourceValue = create(ValueSchema, {
+    kind: { case: "stringValue", value: "Project name" },
+    source: create(ValueSourceSchema, {
+      state: create(StateValueSourceSchema, {
+        objectId: "obj:project",
+        slotId: "slot:project:name",
+        revision: 4n,
+      }),
+    }),
+  });
+  const orchServer = await listen((router) => router.service(OrchestratorRuntime, {
+    invokeCapability: (request) => {
+      invocations.push(request);
+      return create(InvokeCapabilityResponseSchema, {
+        ok: true,
+        result: sourceValue,
+        dependencies: [create(DerivedDependencySchema, {
+          kind: "state",
+          objectId: "obj:project",
+          attachmentId: "slot:project:name",
+        })],
+      });
+    },
+  }));
+  const runtimeServer = await listen(createPackageRuntimeRoutes({
+    packageRevisionId: "package:test@1",
+    orchUrl: orchServer.url,
+    exports: {
+      "export:test:value": derived((context) =>
+        context.interface("port:named").live("operation:named:name:get")),
+    },
+  }));
+  const client = createClient(PackageRuntime, createConnectTransport({
+    baseUrl: runtimeServer.url,
+    httpVersion: "1.1",
+  }));
+  try {
+    const response = await client.invoke({
+      export: create(PackageExportRefSchema, {
+        packageRevisionId: "package:test@1",
+        exportId: "export:test:value",
+      }),
+      objectId: "obj:component",
+      dependencies: [create(InjectedDependencySchema, {
+        portId: "port:named",
+        objectId: "obj:project",
+        binding: { case: "interfaceRevisionId", value: "interface:named@1" },
+      })],
+    });
+    assert.equal(response.ok, true);
+    assert.equal(invocations[0]?.objectId, "obj:project");
+    assert.equal(invocations[0]?.capability?.interfaceRevisionId, "interface:named@1");
+    assert.equal(response.dependencies[0]?.objectId, "obj:project");
+    assert.equal(response.dependencies[0]?.attachmentId, "slot:project:name");
+    assert.equal(response.result?.source?.state?.revision, 4n);
+  } finally {
+    await runtimeServer.close();
+    await orchServer.close();
+  }
+});
+
+test("derived interface views reread after their transitive subscriptions become live", async () => {
+  let current = "before subscription";
+  let invocationCount = 0;
+  const caminoServer = await listen((router) => router.service(CaminoService, {
+    watchObject: async function* (request, context) {
+      // Model a write racing the first nested capability read. Camino makes
+      // the subscription live before yielding this snapshot.
+      current = "after subscription";
+      yield {
+        objectId: request.objectId,
+        snapshot: create(CaminoObjectSchema, {
+          id: request.objectId,
+          atomId: "atom:project",
+          workspaceRevisionId: "workspace:test@1",
+        }),
+      };
+      await new Promise((resolve) =>
+        context.signal.addEventListener("abort", resolve, { once: true }));
+    },
+  }));
+  const orchServer = await listen((router) => router.service(OrchestratorRuntime, {
+    invokeCapability: () => {
+      invocationCount += 1;
+      return create(InvokeCapabilityResponseSchema, {
+        ok: true,
+        result: jsToProtoValue(current),
+        dependencies: [create(DerivedDependencySchema, {
+          kind: "state",
+          objectId: "obj:project",
+          attachmentId: "slot:project:name",
+        })],
+      });
+    },
+  }));
+  const runtimeServer = await listen(createPackageRuntimeRoutes({
+    packageRevisionId: "package:test@1",
+    caminoUrl: caminoServer.url,
+    orchUrl: orchServer.url,
+    exports: {
+      "export:test:value": derived((context) =>
+        context.interface("port:named").invoke("operation:named:name:get")),
+    },
+  }));
+  const client = createClient(PackageRuntime, createConnectTransport({
+    baseUrl: runtimeServer.url,
+    httpVersion: "1.1",
+  }));
+  const controller = new AbortController();
+  try {
+    const stream = client.watch({
+      export: create(PackageExportRefSchema, {
+        packageRevisionId: "package:test@1",
+        exportId: "export:test:value",
+      }),
+      objectId: "obj:component",
+      dependencies: [create(InjectedDependencySchema, {
+        portId: "port:named",
+        objectId: "obj:project",
+        binding: { case: "interfaceRevisionId", value: "interface:named@1" },
+      })],
+    }, { signal: controller.signal })[Symbol.asyncIterator]();
+    const initial = await stream.next();
+    assert.equal(protoValueToJs(initial.value?.value), "after subscription");
+    assert.equal(invocationCount, 2);
+  } finally {
+    controller.abort();
+    await runtimeServer.close();
+    await orchServer.close();
+    await caminoServer.close();
+  }
+});
+
+test("derived watches subscribe before reading and emit only real changes", async () => {
+  let current = "before";
+  let subscribed = false;
+  const changes = [];
+  const caminoServer = await listen((router) => router.service(CaminoService, {
+    readState: () => {
+      assert.equal(subscribed, true, "the dependency stream must be live before the state read");
+      return { value: jsToProtoValue(current) };
+    },
+    watchObject: async function* (request, context) {
+      subscribed = true;
+      yield {
+        objectId: request.objectId,
+        snapshot: create(CaminoObjectSchema, {
+          id: request.objectId,
+          atomId: "atom:test",
+          workspaceRevisionId: "workspace:test@1",
+        }),
+      };
+      while (!context.signal.aborted) {
+        const changed = await new Promise((resolve) => {
+          const finish = () => resolve(true);
+          changes.push(finish);
+          context.signal.addEventListener("abort", () => resolve(false), { once: true });
+        });
+        if (!changed) return;
+        yield { objectId: request.objectId };
+      }
+    },
+  }));
+  const runtimeServer = await listen(createPackageRuntimeRoutes({
+    packageRevisionId: "package:test@1",
+    caminoUrl: caminoServer.url,
+    exports: {
+      "export:test:value": derived((context) => context.state("port:value").get()),
+    },
+  }));
+  const client = createClient(PackageRuntime, createConnectTransport({
+    baseUrl: runtimeServer.url,
+    httpVersion: "1.1",
+  }));
+  const controller = new AbortController();
+  try {
+    const stream = client.watch({
+      export: create(PackageExportRefSchema, {
+        packageRevisionId: "package:test@1",
+        exportId: "export:test:value",
+      }),
+      objectId: "obj:test",
+      dependencies: [create(InjectedDependencySchema, {
+        portId: "port:value",
+        binding: { case: "stateSlotId", value: "slot:test:value" },
+      })],
+    }, { signal: controller.signal })[Symbol.asyncIterator]();
+    const initial = await stream.next();
+    assert.equal(protoValueToJs(initial.value?.value), "before");
+    assert.equal(initial.value?.initial, true);
+
+    current = "after";
+    changes.shift()?.();
+    const updated = await stream.next();
+    assert.equal(protoValueToJs(updated.value?.value), "after");
+    assert.equal(updated.value?.initial, false);
+  } finally {
+    controller.abort();
+    await runtimeServer.close();
+    await caminoServer.close();
+  }
+});

tsconfig.json

@@ -7,7 +7,11 @@
     "esModuleInterop": true,
     "skipLibCheck": true,
     "forceConsistentCasingInFileNames": true,
-    "outDir": "dist"
+    "types": ["node"],
+    "declaration": true,
+    "declarationMap": true,
+    "outDir": "dist",
+    "rootDir": "src"
   },
   "include": ["src/**/*.ts"]
 }

yarn-project.nix

@@ -7,8 +7,8 @@
 let
 
   yarnBin = fetchurl {
-    url = "https://repo.yarnpkg.com/4.14.1/packages/yarnpkg-cli/bin/yarn.js";
-    hash = "sha512-ZN9EgFWy03uiadfbU1pGm42pP47xFAwl/XqDwAqPuqyyFMoOAlU7kqLFTO94u2fQtIF/qwIAHfDiT6wPrMw7Qg==";
+    url = "https://repo.yarnpkg.com/4.18.0/packages/yarnpkg-cli/bin/yarn.js";
+    hash = "sha512-/Lhxb+fNDuzhQf/Bi5IZOp35IEwbqDGJwoiDUiP8C75kr0c7qw1emSen2utcryuwfrJ4fMkzjKBA6hJfKh8vfg==";
   };
 
   cacheFolder = ".yarn/cache";
@@ -162,13 +162,15 @@ cacheEntries = {
 "@connectrpc/connect-node@npm:2.1.2" = { filename = "@connectrpc-connect-node-npm-2.1.2-021434d5d5-ba8b0c9384.zip"; hash = "sha512-uosMk4TDgps3eqeoJtwM1Qpgk1J9LscBRgSRKDYzbqlgSitazqQrEEd/i+RWnknd7WbKD8d/X1sCcDXgKeE+qQ=="; };
 "@connectrpc/connect@npm:2.1.2" = { filename = "@connectrpc-connect-npm-2.1.2-ab34825de3-4e15000890.zip"; hash = "sha512-ThUACJAjt1Lv1E+pQKWuHh+gDhvrxLoM7ScruTWSDYw7hbd0UOZErUQruMqaJ1sMFxNviWuo7/A2F4Ex2wHWFQ=="; };
 "@types/node@npm:24.13.3" = { filename = "@types-node-npm-24.13.3-b512a0bbeb-a5bc08f49b.zip"; hash = "sha512-pbwI9JuVgdzcqQ4CzXcZejx5mECAdmSULlzVFhpVPU0q6AZPfjKUQQ10jX0Ji1wYSL5/pQwG8pxBk6sWvk5Z6w=="; };
+"@typescript/typescript-linux-arm64@npm:7.0.2" = { filename = "@typescript-typescript-linux-arm64-npm-7.0.2-9cacfc53a0-10c0.zip"; hash = "sha512-s4c7nGT/lQIw6x0IfrL0b3ECy/D0g7UoDLdiIWJoM6EGXk5N/dmXdxUdA8Cr3hV/3nO2BYKTQ6Ai8/zGhiSQ3A=="; };
+"@typescript/typescript-linux-x64@npm:7.0.2" = { filename = "@typescript-typescript-linux-x64-npm-7.0.2-8dd7ff8d24-10c0.zip"; hash = "sha512-k9EUK5CZ3OOPnyslp8SAAonHJpnpPmlaulppI/NmFyCzNs3UN/TLPUkyQia3KIxgbyTzKoXI5L5fl8Uj9bJ7Cg=="; };
 "@typescript/vfs@npm:1.6.4" = { filename = "@typescript-vfs-npm-1.6.4-78935c9d3e-acb9de42f2.zip"; hash = "sha512-rLneQvI/2j9149eQC6EG7zI6L0588OSpTbtFfibTU8pjuzUZPtGjL8hzPzrlkJlhKykLBr1iIWlIYb65v7YvYg=="; };
 "debug@npm:4.4.3" = { filename = "debug-npm-4.4.3-0105c6123a-d79136ec6c.zip"; hash = "sha512-15E27GyD7L79D2pVk9pqnJHsTX3cS1TIg9bnHsmsy19noaXpbQCjKBlrW1yG02XpjYo6cIVqrxa057GYXmf1pg=="; };
 "ms@npm:2.1.3" = { filename = "ms-npm-2.1.3-81ff3cfac1-d924b57e73.zip"; hash = "sha512-2SS1fnMSs7Y60h/Fs9wK9eeNYaH8fPtUV+2vJjJr9ivlMHzIf/toYu8cKzOwIzzbXU8BxMlYzA1mCUi2Wih6SA=="; };
 "typescript@npm:5.4.5" = { filename = "typescript-npm-5.4.5-8568a42232-2954022ada.zip"; hash = "sha512-KVQCKto0D9PWqeK45TT2XVfJLV85iaJjdUp4q6VJ9+ZSmswZIZE1YKS4FsRtzn30pNKfnxGj3A1CE7t20EMlHg=="; };
-"typescript@npm:5.9.3" = { filename = "typescript-npm-5.9.3-48715be868-6bd7552ce3.zip"; hash = "sha512-a9dVLOOfl+cR21qgSPb5mVtT8cUvfYZnwavcFwDGinajCPV5zTCc5rU2Rt606aG+fIE6k7qvCijM1TajAnDhxQ=="; };
+"typescript@npm:7.0.2" = { filename = "typescript-npm-7.0.2-0bde2bcec5-3dcee51ec8.zip"; hash = "sha512-Pc7lHsjDMkkjJbzb999ItmZodR8SfmIq59QbbHFusZGEQkpF4U93UPUPNAIyOItp5ih4WRVfBqXOLfdvEssxzw=="; };
 "typescript@patch:typescript@npm%3A5.4.5#optional!builtin<compat/typescript>::version=5.4.5&hash=5adc0c" = { filename = "typescript-patch-6e159bfddb-db2ad2a16c.zip"; hash = "sha512-2yrSoWyoKfUEJ+6x2hVeekXlmO7HsIbYtOi6ROWiNfdY5gbWgcZpkiMNP8O4mVhl5f0LIqLJVIbQsyAPgwcuyQ=="; };
-"typescript@patch:typescript@npm%3A5.9.3#optional!builtin<compat/typescript>::version=5.9.3&hash=5786d5" = { filename = "typescript-patch-6fda4d02cf-ad09fdf7a7.zip"; hash = "sha512-rQn996dWgU3OZbxgwWV7QNREUTRoWO6iMOEPLpWiidkYO24y5cEelazAzMIUtPNiidytS/GIawrbhNcR0zakMA=="; };
+"typescript@patch:typescript@npm%3A7.0.2#optional!builtin<compat/typescript>::version=7.0.2&hash=3bafbf" = { filename = "typescript-patch-4859cbaf66-6b3cdc369c.zip"; hash = "sha512-azzcNpzYKdRuAHNOpkIz7oRBnCglrY/kCJFa3ed6vO1LeiQB9+7VF9VKek9dHBhpdTy5kBjfHCFZx2HZ8zSDpg=="; };
 "undici-types@npm:7.18.2" = { filename = "undici-types-npm-7.18.2-3e6d69d829-85a7918911.zip"; hash = "sha512-haeRiRE6I4lZ16ZHNo5PfFVZw6QE69uPxEiBRc6UJvzYIlKoRKMCeY38Djfm+xeP9IHtA7xMr2NMV1fZ70NSHQ=="; };
 };
 

yarn.lock

@@ -2,7 +2,7 @@
 # Manual changes might be lost - proceed with caution!
 
 __metadata:
-  version: 9
+  version: 10
   cacheKey: 10c0
 
 "@bufbuild/protobuf@npm:2.12.1, @bufbuild/protobuf@npm:^2.12.1":
@@ -68,7 +68,7 @@ __metadata:
     "@connectrpc/connect": "npm:^2.1.2"
     "@connectrpc/connect-node": "npm:^2.1.2"
     "@types/node": "npm:^24"
-    typescript: "npm:^5.9.3"
+    typescript: "npm:^7.0.2"
   languageName: unknown
   linkType: soft
 
@@ -81,6 +81,146 @@ __metadata:
   languageName: node
   linkType: hard
 
+"@typescript/typescript-aix-ppc64@npm:7.0.2":
+  version: 7.0.2
+  resolution: "@typescript/typescript-aix-ppc64@npm:7.0.2"
+  conditions: os=aix & cpu=ppc64
+  languageName: node
+  linkType: hard
+
+"@typescript/typescript-darwin-arm64@npm:7.0.2":
+  version: 7.0.2
+  resolution: "@typescript/typescript-darwin-arm64@npm:7.0.2"
+  conditions: os=darwin & cpu=arm64
+  languageName: node
+  linkType: hard
+
+"@typescript/typescript-darwin-x64@npm:7.0.2":
+  version: 7.0.2
+  resolution: "@typescript/typescript-darwin-x64@npm:7.0.2"
+  conditions: os=darwin & cpu=x64
+  languageName: node
+  linkType: hard
+
+"@typescript/typescript-freebsd-arm64@npm:7.0.2":
+  version: 7.0.2
+  resolution: "@typescript/typescript-freebsd-arm64@npm:7.0.2"
+  conditions: os=freebsd & cpu=arm64
+  languageName: node
+  linkType: hard
+
+"@typescript/typescript-freebsd-x64@npm:7.0.2":
+  version: 7.0.2
+  resolution: "@typescript/typescript-freebsd-x64@npm:7.0.2"
+  conditions: os=freebsd & cpu=x64
+  languageName: node
+  linkType: hard
+
+"@typescript/typescript-linux-arm64@npm:7.0.2":
+  version: 7.0.2
+  resolution: "@typescript/typescript-linux-arm64@npm:7.0.2"
+  conditions: os=linux & cpu=arm64
+  languageName: node
+  linkType: hard
+
+"@typescript/typescript-linux-arm@npm:7.0.2":
+  version: 7.0.2
+  resolution: "@typescript/typescript-linux-arm@npm:7.0.2"
+  conditions: os=linux & cpu=arm
+  languageName: node
+  linkType: hard
+
+"@typescript/typescript-linux-loong64@npm:7.0.2":
+  version: 7.0.2
+  resolution: "@typescript/typescript-linux-loong64@npm:7.0.2"
+  conditions: os=linux & cpu=loong64
+  languageName: node
+  linkType: hard
+
+"@typescript/typescript-linux-mips64el@npm:7.0.2":
+  version: 7.0.2
+  resolution: "@typescript/typescript-linux-mips64el@npm:7.0.2"
+  conditions: os=linux & cpu=mips64el
+  languageName: node
+  linkType: hard
+
+"@typescript/typescript-linux-ppc64@npm:7.0.2":
+  version: 7.0.2
+  resolution: "@typescript/typescript-linux-ppc64@npm:7.0.2"
+  conditions: os=linux & cpu=ppc64
+  languageName: node
+  linkType: hard
+
+"@typescript/typescript-linux-riscv64@npm:7.0.2":
+  version: 7.0.2
+  resolution: "@typescript/typescript-linux-riscv64@npm:7.0.2"
+  conditions: os=linux & cpu=riscv64
+  languageName: node
+  linkType: hard
+
+"@typescript/typescript-linux-s390x@npm:7.0.2":
+  version: 7.0.2
+  resolution: "@typescript/typescript-linux-s390x@npm:7.0.2"
+  conditions: os=linux & cpu=s390x
+  languageName: node
+  linkType: hard
+
+"@typescript/typescript-linux-x64@npm:7.0.2":
+  version: 7.0.2
+  resolution: "@typescript/typescript-linux-x64@npm:7.0.2"
+  conditions: os=linux & cpu=x64
+  languageName: node
+  linkType: hard
+
+"@typescript/typescript-netbsd-arm64@npm:7.0.2":
+  version: 7.0.2
+  resolution: "@typescript/typescript-netbsd-arm64@npm:7.0.2"
+  conditions: os=netbsd & cpu=arm64
+  languageName: node
+  linkType: hard
+
+"@typescript/typescript-netbsd-x64@npm:7.0.2":
+  version: 7.0.2
+  resolution: "@typescript/typescript-netbsd-x64@npm:7.0.2"
+  conditions: os=netbsd & cpu=x64
+  languageName: node
+  linkType: hard
+
+"@typescript/typescript-openbsd-arm64@npm:7.0.2":
+  version: 7.0.2
+  resolution: "@typescript/typescript-openbsd-arm64@npm:7.0.2"
+  conditions: os=openbsd & cpu=arm64
+  languageName: node
+  linkType: hard
+
+"@typescript/typescript-openbsd-x64@npm:7.0.2":
+  version: 7.0.2
+  resolution: "@typescript/typescript-openbsd-x64@npm:7.0.2"
+  conditions: os=openbsd & cpu=x64
+  languageName: node
+  linkType: hard
+
+"@typescript/typescript-sunos-x64@npm:7.0.2":
+  version: 7.0.2
+  resolution: "@typescript/typescript-sunos-x64@npm:7.0.2"
+  conditions: os=sunos & cpu=x64
+  languageName: node
+  linkType: hard
+
+"@typescript/typescript-win32-arm64@npm:7.0.2":
+  version: 7.0.2
+  resolution: "@typescript/typescript-win32-arm64@npm:7.0.2"
+  conditions: os=win32 & cpu=arm64
+  languageName: node
+  linkType: hard
+
+"@typescript/typescript-win32-x64@npm:7.0.2":
+  version: 7.0.2
+  resolution: "@typescript/typescript-win32-x64@npm:7.0.2"
+  conditions: os=win32 & cpu=x64
+  languageName: node
+  linkType: hard
+
 "@typescript/vfs@npm:^1.6.2":
   version: 1.6.4
   resolution: "@typescript/vfs@npm:1.6.4"
@@ -121,13 +261,74 @@ __metadata:
   languageName: node
   linkType: hard
 
-"typescript@npm:^5.9.3":
-  version: 5.9.3
-  resolution: "typescript@npm:5.9.3"
+"typescript@npm:^7.0.2":
+  version: 7.0.2
+  resolution: "typescript@npm:7.0.2"
+  dependencies:
+    "@typescript/typescript-aix-ppc64": "npm:7.0.2"
+    "@typescript/typescript-darwin-arm64": "npm:7.0.2"
+    "@typescript/typescript-darwin-x64": "npm:7.0.2"
+    "@typescript/typescript-freebsd-arm64": "npm:7.0.2"
+    "@typescript/typescript-freebsd-x64": "npm:7.0.2"
+    "@typescript/typescript-linux-arm": "npm:7.0.2"
+    "@typescript/typescript-linux-arm64": "npm:7.0.2"
+    "@typescript/typescript-linux-loong64": "npm:7.0.2"
+    "@typescript/typescript-linux-mips64el": "npm:7.0.2"
+    "@typescript/typescript-linux-ppc64": "npm:7.0.2"
+    "@typescript/typescript-linux-riscv64": "npm:7.0.2"
+    "@typescript/typescript-linux-s390x": "npm:7.0.2"
+    "@typescript/typescript-linux-x64": "npm:7.0.2"
+    "@typescript/typescript-netbsd-arm64": "npm:7.0.2"
+    "@typescript/typescript-netbsd-x64": "npm:7.0.2"
+    "@typescript/typescript-openbsd-arm64": "npm:7.0.2"
+    "@typescript/typescript-openbsd-x64": "npm:7.0.2"
+    "@typescript/typescript-sunos-x64": "npm:7.0.2"
+    "@typescript/typescript-win32-arm64": "npm:7.0.2"
+    "@typescript/typescript-win32-x64": "npm:7.0.2"
+  dependenciesMeta:
+    "@typescript/typescript-aix-ppc64":
+      optional: true
+    "@typescript/typescript-darwin-arm64":
+      optional: true
+    "@typescript/typescript-darwin-x64":
+      optional: true
+    "@typescript/typescript-freebsd-arm64":
+      optional: true
+    "@typescript/typescript-freebsd-x64":
+      optional: true
+    "@typescript/typescript-linux-arm":
+      optional: true
+    "@typescript/typescript-linux-arm64":
+      optional: true
+    "@typescript/typescript-linux-loong64":
+      optional: true
+    "@typescript/typescript-linux-mips64el":
+      optional: true
+    "@typescript/typescript-linux-ppc64":
+      optional: true
+    "@typescript/typescript-linux-riscv64":
+      optional: true
+    "@typescript/typescript-linux-s390x":
+      optional: true
+    "@typescript/typescript-linux-x64":
+      optional: true
+    "@typescript/typescript-netbsd-arm64":
+      optional: true
+    "@typescript/typescript-netbsd-x64":
+      optional: true
+    "@typescript/typescript-openbsd-arm64":
+      optional: true
+    "@typescript/typescript-openbsd-x64":
+      optional: true
+    "@typescript/typescript-sunos-x64":
+      optional: true
+    "@typescript/typescript-win32-arm64":
+      optional: true
+    "@typescript/typescript-win32-x64":
+      optional: true
   bin:
     tsc: bin/tsc
-    tsserver: bin/tsserver
-  checksum: 10c0/6bd7552ce39f97e711db5aa048f6f9995b53f1c52f7d8667c1abdc1700c68a76a308f579cd309ce6b53646deb4e9a1be7c813a93baaf0a28ccd536a30270e1c5
+  checksum: 10c0/3dcee51ec8c332492325bcdbf7df48b66668751f127e622ae7d41b6c716eb19184424a45e14f7750f50f340232388b69e6287859155f06a5ce2df76f12cb31cf
   languageName: node
   linkType: hard
 
@@ -141,13 +342,74 @@ __metadata:
   languageName: node
   linkType: hard
 
-"typescript@patch:typescript@npm%3A^5.9.3#optional!builtin<compat/typescript>":
-  version: 5.9.3
-  resolution: "typescript@patch:typescript@npm%3A5.9.3#optional!builtin<compat/typescript>::version=5.9.3&hash=5786d5"
+"typescript@patch:typescript@npm%3A^7.0.2#optional!builtin<compat/typescript>":
+  version: 7.0.2
+  resolution: "typescript@patch:typescript@npm%3A7.0.2#optional!builtin<compat/typescript>::version=7.0.2&hash=3bafbf"
+  dependencies:
+    "@typescript/typescript-aix-ppc64": "npm:7.0.2"
+    "@typescript/typescript-darwin-arm64": "npm:7.0.2"
+    "@typescript/typescript-darwin-x64": "npm:7.0.2"
+    "@typescript/typescript-freebsd-arm64": "npm:7.0.2"
+    "@typescript/typescript-freebsd-x64": "npm:7.0.2"
+    "@typescript/typescript-linux-arm": "npm:7.0.2"
+    "@typescript/typescript-linux-arm64": "npm:7.0.2"
+    "@typescript/typescript-linux-loong64": "npm:7.0.2"
+    "@typescript/typescript-linux-mips64el": "npm:7.0.2"
+    "@typescript/typescript-linux-ppc64": "npm:7.0.2"
+    "@typescript/typescript-linux-riscv64": "npm:7.0.2"
+    "@typescript/typescript-linux-s390x": "npm:7.0.2"
+    "@typescript/typescript-linux-x64": "npm:7.0.2"
+    "@typescript/typescript-netbsd-arm64": "npm:7.0.2"
+    "@typescript/typescript-netbsd-x64": "npm:7.0.2"
+    "@typescript/typescript-openbsd-arm64": "npm:7.0.2"
+    "@typescript/typescript-openbsd-x64": "npm:7.0.2"
+    "@typescript/typescript-sunos-x64": "npm:7.0.2"
+    "@typescript/typescript-win32-arm64": "npm:7.0.2"
+    "@typescript/typescript-win32-x64": "npm:7.0.2"
+  dependenciesMeta:
+    "@typescript/typescript-aix-ppc64":
+      optional: true
+    "@typescript/typescript-darwin-arm64":
+      optional: true
+    "@typescript/typescript-darwin-x64":
+      optional: true
+    "@typescript/typescript-freebsd-arm64":
+      optional: true
+    "@typescript/typescript-freebsd-x64":
+      optional: true
+    "@typescript/typescript-linux-arm":
+      optional: true
+    "@typescript/typescript-linux-arm64":
+      optional: true
+    "@typescript/typescript-linux-loong64":
+      optional: true
+    "@typescript/typescript-linux-mips64el":
+      optional: true
+    "@typescript/typescript-linux-ppc64":
+      optional: true
+    "@typescript/typescript-linux-riscv64":
+      optional: true
+    "@typescript/typescript-linux-s390x":
+      optional: true
+    "@typescript/typescript-linux-x64":
+      optional: true
+    "@typescript/typescript-netbsd-arm64":
+      optional: true
+    "@typescript/typescript-netbsd-x64":
+      optional: true
+    "@typescript/typescript-openbsd-arm64":
+      optional: true
+    "@typescript/typescript-openbsd-x64":
+      optional: true
+    "@typescript/typescript-sunos-x64":
+      optional: true
+    "@typescript/typescript-win32-arm64":
+      optional: true
+    "@typescript/typescript-win32-x64":
+      optional: true
   bin:
     tsc: bin/tsc
-    tsserver: bin/tsserver
-  checksum: 10c0/ad09fdf7a756814dce65bc60c1657b40d44451346858eea230e10f2e95a289d9183b6e32e5c11e95acc0ccc214b4f36289dcad4bf1886b0adb84d711d336a430
+  checksum: 10c0/6b3cdc369cd829d46e00734ea64233ee84419c2825ad8fe408915adde77abced4b7a2401f7eed517d54a7a4f5d1c1869753cb99018df1c2159c761d9f33483a6
   languageName: node
   linkType: hard