Add local-first execution contracts to the capability language

src/capability-model/validation.ts

@@ -1,3 +1,4 @@
+import { validateExecutionContracts } from "./execution.js";
 import { resolveForwardedBinding, type ConcreteBinding } from "./forwarding.js";
 import type {
   AtomConstructorBinding,
@@ -41,6 +42,7 @@ import { specializePackageExport } from "./generic-packages.js";
 import { isDeepStrictEqual } from "node:util";
 
 export type CapabilityValidationIssueCode =
+  | "invalid-execution-contract"
   | "invalid-query-contract"
   | "query-provider-reason-required"
   | "invalid-semantic-major"
@@ -521,7 +523,7 @@ const collectIdentityIndexes = (
       if (member.kind !== "operation" && member.queryRead) {
         const contract = member.queryRead.execution;
         const getter = member.kind === "value" ? "get" : "resolve";
-        if (contract !== "native" && contract !== "rpc-permitted")
+        if (contract !== "native" && contract !== "rpc-permitted" && contract !== "portable")
           issue(issues, "invalid-query-contract", memberPath, "Unknown query execution contract");
         if (member.operations.filter((operation) => operation.displayName === getter).length !== 1)
           issue(issues, "invalid-query-contract", memberPath, `Queryable members require exactly one ${getter}`);
@@ -1590,7 +1592,7 @@ const validateConformances = (
             bindingPath,
             "This queryable contract requires a native read binding; a justification cannot weaken it",
           );
-        else if (!native && !entry.queryReason?.trim())
+        else if (!native && member.queryRead.execution === "rpc-permitted" && !entry.queryReason?.trim())
           issue(
             issues,
             "query-provider-reason-required",
@@ -2082,6 +2084,7 @@ export const validateWorkspaceRevision = (workspace: WorkspaceRevision): Capabil
   validatePackages(workspace, issues, indexes);
   validateConformances(workspace, issues, indexes);
   validateConstructors(workspace, issues, indexes);
+  issues.push(...validateExecutionContracts(workspace));
   return issues;
 };