Introduce repository-backed capability workspaces

- define and validate the capability and resource-lock languages
- provision workspace source repositories through Central Gitea
- build package runtimes from pinned standalone sources
- replace legacy schema compilation with workspace persistence plans
- add stable optimistic registers and Automerge CRDT documents
- modernize TypeScript/Nix package builds and runtime activation readiness

dist/quixos/runtime_pb.d.ts

@@ -1,6 +1,6 @@
 import type { GenFile, GenMessage, GenService } from "@bufbuild/protobuf/codegenv2";
 import type { Value } from "../camino/api_pb.js";
-import type { FunctionRef } from "./refs_pb.js";
+import type { InjectedDependency, PackageExportRef } from "./refs_pb.js";
 import type { Message } from "@bufbuild/protobuf";
 /**
  * Describes the file quixos/runtime.proto.
@@ -25,21 +25,17 @@ export declare const HandshakeRequestSchema: GenMessage<HandshakeRequest>;
  */
 export type HandshakeResponse = Message<"quixos.runtime.HandshakeResponse"> & {
     /**
-     * @generated from field: string package_namespace = 1;
+     * @generated from field: string package_revision_id = 1;
      */
-    packageNamespace: string;
+    packageRevisionId: string;
     /**
-     * @generated from field: string package_name = 2;
-     */
-    packageName: string;
-    /**
-     * @generated from field: string runtime_protocol_version = 3;
+     * @generated from field: string runtime_protocol_version = 2;
      */
     runtimeProtocolVersion: string;
     /**
-     * @generated from field: repeated quixos.FunctionRef functions = 4;
+     * @generated from field: repeated string export_ids = 3;
      */
-    functions: FunctionRef[];
+    exportIds: string[];
 };
 /**
  * Describes the message quixos.runtime.HandshakeResponse.
@@ -55,9 +51,9 @@ export type InvokeRequest = Message<"quixos.runtime.InvokeRequest"> & {
      */
     invocationId: string;
     /**
-     * @generated from field: quixos.FunctionRef function = 2;
+     * @generated from field: quixos.PackageExportRef export = 2;
      */
-    function?: FunctionRef | undefined;
+    export?: PackageExportRef | undefined;
     /**
      * @generated from field: string object_id = 3;
      */
@@ -68,6 +64,10 @@ export type InvokeRequest = Message<"quixos.runtime.InvokeRequest"> & {
     input: {
         [key: string]: Value;
     };
+    /**
+     * @generated from field: repeated quixos.InjectedDependency dependencies = 5;
+     */
+    dependencies: InjectedDependency[];
 };
 /**
  * Describes the message quixos.runtime.InvokeRequest.
@@ -105,9 +105,9 @@ export type WatchRequest = Message<"quixos.runtime.WatchRequest"> & {
      */
     invocationId: string;
     /**
-     * @generated from field: quixos.FunctionRef function = 2;
+     * @generated from field: quixos.PackageExportRef export = 2;
      */
-    function?: FunctionRef | undefined;
+    export?: PackageExportRef | undefined;
     /**
      * @generated from field: string object_id = 3;
      */
@@ -118,6 +118,10 @@ export type WatchRequest = Message<"quixos.runtime.WatchRequest"> & {
     input: {
         [key: string]: Value;
     };
+    /**
+     * @generated from field: repeated quixos.InjectedDependency dependencies = 5;
+     */
+    dependencies: InjectedDependency[];
 };
 /**
  * Describes the message quixos.runtime.WatchRequest.
@@ -137,13 +141,13 @@ export type DerivedDependency = Message<"quixos.runtime.DerivedDependency"> & {
      */
     objectId: string;
     /**
-     * @generated from field: string field_name = 3;
+     * @generated from field: string attachment_id = 3;
      */
-    fieldName: string;
+    attachmentId: string;
     /**
-     * @generated from field: string source_field = 4;
+     * @generated from field: string projection_id = 4;
      */
-    sourceField: string;
+    projectionId: string;
 };
 /**
  * Describes the message quixos.runtime.DerivedDependency.