Implement generated artifact handoff and provenance

internal/framework/pipeline/references.go

@@ -114,8 +114,9 @@ func materializeReferenceTarget(
 			return contracts.ReferenceSet{}, nil, fmt.Errorf("%s reference slot %q is not declared by %s module %q", referenceTargetContext(pipelineID, target), slotName, target.Stage, target.Module)
 		}
 		if binding.Artifact != nil {
-			// Generated selectors are resolved at the step handoff. They do not
-			// have bytes during static reference materialization.
+			// Generated selectors are resolved at the step handoff. Keep the
+			// declared slot and its constraints, but do not materialize bytes yet.
+			set.Slots[slotName] = contracts.ResolvedReferenceSlot{Slot: cloneReferenceSlot(slot)}
 			continue
 		}
 
@@ -312,8 +313,7 @@ func CloneReferenceSet(in contracts.ReferenceSet) contracts.ReferenceSet {
 		if len(slot.Items) > 0 {
 			items := make([]contracts.ReferenceItem, len(slot.Items))
 			for i, item := range slot.Items {
-				item.Content = append([]byte(nil), item.Content...)
-				items[i] = item
+				items[i] = contracts.CloneReferenceItem(item)
 			}
 			slot.Items = items
 		}
@@ -366,17 +366,30 @@ func referenceTargetProvenance(target ResolvedReferenceTarget) []artifacts.Refer
 	for _, slotName := range slotNames {
 		slot := target.ReferenceSet.Slots[slotName]
 		for _, item := range slot.Items {
+			schemaDigest := ""
+			if item.ArtifactSchema.ID != "" || item.ArtifactSchema.Name != "" || item.ArtifactSchema.Version != "" || len(item.ArtifactSchema.JSONSchema) > 0 {
+				schemaDigest = contracts.DigestArtifactSchema(item.ArtifactSchema)
+			}
 			provenance = append(provenance, artifacts.ReferenceProvenance{
-				Stage:         string(target.Stage),
-				StepID:        target.StepID,
-				LaneID:        target.LaneID,
-				SlotName:      item.SlotName,
-				OriginType:    item.Origin.Type,
-				OriginURI:     item.Origin.URI,
-				Digest:        item.Digest,
-				MediaType:     item.MediaType,
-				SizeBytes:     item.SizeBytes,
-				BindingSource: item.BindingSource,
+				Stage:            string(target.Stage),
+				StepID:           target.StepID,
+				LaneID:           target.LaneID,
+				SlotName:         item.SlotName,
+				OriginType:       item.Origin.Type,
+				OriginURI:        item.Origin.URI,
+				Digest:           item.Digest,
+				MediaType:        item.MediaType,
+				SizeBytes:        item.SizeBytes,
+				BindingSource:    item.BindingSource,
+				ArtifactKind:     string(item.ArtifactKind),
+				SchemaID:         item.ArtifactSchema.ID,
+				SchemaName:       item.ArtifactSchema.Name,
+				SchemaVersion:    item.ArtifactSchema.Version,
+				SchemaDigest:     schemaDigest,
+				ProducerPipeline: item.Producer.PipelineID,
+				ProducerStep:     item.Producer.StepID,
+				ProducerLane:     item.Producer.LaneID,
+				ProducerModule:   item.Producer.ModuleKey,
 			})
 		}
 	}