build: emit @loopover/contract before anything that typechecks or bundles src/

src/mcp/server.ts and packages/loopover-mcp both import @loopover/contract, whose
package exports resolve to dist/ -- so every surface that typechecks or bundles
src/ needs it emitted first, and nothing did. CI's Typecheck and UI typecheck
failed on exactly this, and the selfhost image would have failed at esbuild
resolution: the Dockerfile builds the engine but had no step for contract, so
build-selfhost.ts could not have resolved the import.

Adds the build to ci.yml (before the engine step), the Dockerfile, selfhost.yml
and release-selfhost.yml. Unconditional rather than path-gated: every consumer
(backend, mcp, miner, ui) can pull it into the typecheck surface, and a zod-only
leaf with no workspace dependencies is cheap enough that gating buys nothing but a
class of skipped-build failures. Same shape as the engine build-order fix, applied
before that step for the same reason.

Verified by running build-selfhost.ts --all against a clean contract build.

Refs #9517

Author: JSONbored

.github/workflows/ci.yml

@@ -467,6 +467,14 @@ jobs:
           key: turbo-code-${{ hashFiles('package-lock.json') }}-${{ github.run_id }}
           restore-keys: |
             turbo-code-${{ hashFiles('package-lock.json') }}-
+      # @loopover/contract's "types" resolve to packages/loopover-contract/dist/index.d.ts, and src/ +
+      # packages/loopover-mcp both import it -- so like the engine below, typecheck cannot run until it
+      # has been built. Unconditional rather than gated on a `contract` path filter: every consumer of it
+      # (backend, mcp, miner, ui) can pull it into the typecheck surface, and building a zod-only leaf
+      # package with no dependencies of its own is cheap enough that gating it would buy nothing but a
+      # class of skipped-build failures.
+      - name: Build contract package
+        run: npx turbo run build --filter=@loopover/contract
       - name: Build engine package
         if: ${{ github.event_name == 'push' || needs.changes.outputs.backend == 'true' || needs.changes.outputs.engine == 'true' || needs.changes.outputs.ui == 'true' }}
         run: npx turbo run build --filter=@loopover/engine

.github/workflows/release-selfhost.yml

@@ -129,6 +129,11 @@ jobs:
       # That package's dist/ is gitignored and only exists after this build step -- the regular CI smoke
       # test's narrower (non --all) build never hits this import chain, so it never caught the gap that
       # ci.yml's own validate-code job hit for ordinary backend PRs (fixed there separately).
+      # Built before the engine for the same reason the Dockerfile does: src/'s import graph reaches
+      # @loopover/contract, whose package exports resolve to dist/, so anything type-checking or
+      # bundling src/ needs it emitted first. Zod-only leaf, no workspace dependencies of its own.
+      - name: Build contract package
+        run: npm run build --workspace @loopover/contract
       - name: Build engine package
         run: npm run build --workspace @loopover/engine
 

.github/workflows/selfhost.yml

@@ -77,6 +77,11 @@ jobs:
       # dist/ is gitignored and only exists after this build step, so the test fails to resolve the
       # package's exports without it -- this workflow never needed the engine package built before, so it
       # never had this step; it does now.
+      # Built before the engine for the same reason the Dockerfile does: src/'s import graph reaches
+      # @loopover/contract, whose package exports resolve to dist/, so anything type-checking or
+      # bundling src/ needs it emitted first. Zod-only leaf, no workspace dependencies of its own.
+      - name: Build contract package
+        run: npm run build --workspace @loopover/contract
       - name: Build engine package
         run: npm run build --workspace @loopover/engine
 

Dockerfile

@@ -19,6 +19,10 @@ COPY . .
 # --ignore-scripts: no native builds are needed (SQLite is the built-in node:sqlite; @hono/node-server is
 # pure JS; esbuild ships its binary as an optional dependency, not a script).
 RUN npm ci --ignore-scripts
+# @loopover/contract before the engine: src/ imports it, and its package exports resolve to dist/,
+# so esbuild in build-selfhost.ts below cannot resolve the import until it has been emitted. A
+# zod-only leaf with no workspace dependencies, so it builds first and standalone.
+RUN npm --workspace @loopover/contract run build
 RUN npm --workspace @loopover/engine run build
 # --all: bundle every dependency into one self-contained dist/server.mjs, so the runtime image needs no
 # node_modules (≈10× smaller). The bundle has zero `cloudflare:*` imports (stubbed at build), so no loader.