Build Camino packages from explicit contract inputs

Project source-free capability contracts and keep exact source provenance in package assembly. Reuse compiled groups across unrelated graph and dependency implementation edits. Keep React public inputs separate from workspace query lowering and retain explicit type-companion dependencies.

Allow independent execution-package checks, scope resource compilation to declared dependencies, and memoize source closure traversal. Document generic-specialization limits and measured Reader rebuild behavior.

Verified protocol, artifact, package, React, and managed activation checks; retained-Git independent/workspace artifact equality and incompatible type dependency rejection; nix fmt -- --check and lint. One-off Reader measurements recompiled 1 of 13 groups for a child edit and 0 for a workspace QX default edit.

src/execution-world/receipts.ts

@@ -1,19 +1,23 @@
 import { createHash } from "node:crypto";
 import { generatePortableTypeScriptBindings, generateRemoteTypeScriptBindings } from "../bindings/portable.js";
 import { type ExecutionPlan, ExecutionPlanError, hexDigest } from "./plan.js";
-import { type ArtifactReader, type PackageArtifacts } from "./artifacts.js";
+import { type ArtifactReader, type PackageArtifacts, type ArtifactGroup } from "./artifacts.js";
 import { loadArtifactWorld, type LoadedArtifactWorld } from "./files.js";
-import { generateComponentClientBindings, componentAssetDeclarations } from "./client-contracts.js";
+import { componentAssetDeclarations } from "./client-contracts.js";
 
-export interface ArtifactReceipt {
+import { checkPackageBuildContract, packageBuildContract, type PackageBuildContract } from "./build-contract.js";
+
+export interface GroupReceipt {
   schemaVersion: 1;
   packageRevisionId: string;
   bindingDigest: string;
-  sourceDigest: string;
   manifestDigest: string;
   generatorDigest: string;
   generated: { target: string; path: string; digest: string; bytes: number }[];
 }
+export interface ArtifactReceipt extends GroupReceipt {
+  sourceDigest: string;
+}
 const hashBytes = (bytes: Uint8Array) => createHash("sha256").update(bytes).digest("hex");
 /** Nominal identities never become filesystem paths. */
 export const generatedBindingPath = (target: string) => `share/quixos/generated/target-${hexDigest(target)}.ts`;
@@ -24,20 +28,42 @@ export function expectedArtifactReceipt(
   manifest: PackageArtifacts,
   generatorDigest: string,
 ): { receipt: ArtifactReceipt; sources: Map<string, Uint8Array> } {
-  if (!/^[0-9a-f]{64}$/.test(generatorDigest)) throw new Error("Invalid trusted generator digest");
   const pkg = plan.definition.packages.find((p) => p.revision === manifest.packageRevisionId);
-  const schemaPackage = plan.definition.bindingSchema.packages.find((p) => p.revisionId === manifest.packageRevisionId);
+  if (!pkg || manifest.sourceDigest !== pkg.sourceDigest)
+    throw new ExecutionPlanError("INVALID_RECEIPT", manifest.packageRevisionId, "Receipt package/source mismatch");
+  return expectedPackageReceipt(
+    packageBuildContract(plan.definition.bindingSchema, pkg.revision),
+    manifest,
+    pkg.sourceDigest,
+    generatorDigest,
+  );
+}
+export function expectedPackageReceipt(
+  contract: PackageBuildContract,
+  manifest: PackageArtifacts,
+  sourceDigest: string,
+  generatorDigest: string,
+): { receipt: ArtifactReceipt; sources: Map<string, Uint8Array> } {
+  if (manifest.sourceDigest !== sourceDigest)
+    throw new ExecutionPlanError("INVALID_RECEIPT", manifest.packageRevisionId, "Receipt source mismatch");
+  const result = expectedGroupReceipt(contract, manifest, generatorDigest);
+  return { ...result, receipt: { ...result.receipt, sourceDigest } };
+}
+export function expectedGroupReceipt(
+  contract: PackageBuildContract,
+  manifest: ArtifactGroup,
+  generatorDigest: string,
+): { receipt: GroupReceipt; sources: Map<string, Uint8Array> } {
+  checkPackageBuildContract(contract);
+  if (!/^[0-9a-f]{64}$/.test(generatorDigest)) throw new Error("Invalid trusted generator digest");
+  const pkg = contract.definition.package;
+  const schemaPackage = contract.definition.bindings.packages.find((p) => p.revisionId === pkg.revision)!;
   if (
-    !pkg ||
-    !schemaPackage ||
-    manifest.bindingDigest !== pkg.bindingDigest ||
-    manifest.sourceDigest !== pkg.sourceDigest
+    manifest.packageRevisionId !== pkg.revision ||
+    manifest.bindingDigest !== contract.digest ||
+    hexDigest(manifest.versions) !== hexDigest(contract.definition.versions)
   )
-    throw new ExecutionPlanError(
-      "INVALID_RECEIPT",
-      manifest.packageRevisionId,
-      "Receipt package/schema/source mismatch",
-    );
+    throw new ExecutionPlanError("INVALID_RECEIPT", manifest.packageRevisionId, "Receipt package/contract mismatch");
   // A process service may implement transactions in any language. Only the
   // checked JS module path promises generated TypeScript adapter evidence.
   const available = new Set(
@@ -60,14 +86,14 @@ export function expectedArtifactReceipt(
   const generated = targets.map((target) => {
     const path = generatedBindingPath(target);
     const bytes = new TextEncoder().encode(
-      generatePortableTypeScriptBindings(plan.definition.bindingSchema, pkg.revision, { target }),
+      generatePortableTypeScriptBindings(contract.definition.bindings, pkg.revision, { target }),
     );
     sources.set(path, bytes);
     return { target, path, digest: hashBytes(bytes), bytes: bytes.length };
   });
   if (manifest.components?.length) {
     for (const [path, source] of [
-      ["share/quixos/generated/client.ts", generateComponentClientBindings(plan, pkg.revision)],
+      ["share/quixos/generated/client.ts", contract.definition.component!],
       ["share/quixos/generated/component-assets.d.ts", componentAssetDeclarations()],
     ] as const) {
       const bytes = new TextEncoder().encode(source);
@@ -88,7 +114,7 @@ export function expectedArtifactReceipt(
   ) {
     const path = "share/quixos/generated/remote.ts";
     const bytes = new TextEncoder().encode(
-      generateRemoteTypeScriptBindings(plan.definition.bindingSchema, pkg.revision),
+      generateRemoteTypeScriptBindings(contract.definition.bindings, pkg.revision),
     );
     sources.set(path, bytes);
     generated.push({ target: "server", path, digest: hashBytes(bytes), bytes: bytes.length });
@@ -97,8 +123,7 @@ export function expectedArtifactReceipt(
     receipt: {
       schemaVersion: 1,
       packageRevisionId: pkg.revision,
-      bindingDigest: pkg.bindingDigest,
-      sourceDigest: pkg.sourceDigest,
+      bindingDigest: contract.digest,
       manifestDigest: hexDigest(manifest),
       generatorDigest,
       generated,