Host persistent Camino services and authenticated workspace bootstrap (WI-06)

nix/check-execution.mjs

@@ -7,6 +7,7 @@ const [compilerPath, planPath, checksPath, output] = process.argv.slice(2);
 const compiler = await import(pathToFileURL(compilerPath));
 const plan = JSON.parse(await readFile(planPath, "utf8"));
 const checks = JSON.parse(await readFile(checksPath, "utf8"));
+compiler.compileWorkspaceEntry(plan, JSON.parse(await readFile(join(output, "entry.json"), "utf8")));
 const roots = Object.create(null);
 for (const check of checks) {
   if (Object.hasOwn(roots, check.packageRevisionId)) throw Error("Duplicate checked package revision");

nix/checked-candidate.nix

@@ -162,6 +162,16 @@ pkgs.runCommand (if contractOnly then "qx-contract" else "qx-checked-candidate")
   cp ${contract}/graph.json "$out/graph.json"
   cp ${manifest} "$out/checks.json"
   ${pkgs.lib.optionalString execution ''
+    ${
+      if builtins.pathExists "${root.directory}/quixos.entry.json" then
+        ''
+          cp ${root.directory}/quixos.entry.json "$out/entry.json"
+        ''
+      else
+        ''
+          echo null > "$out/entry.json"
+        ''
+    }
     cp ${contract}/execution-plan.json "$out/execution-plan.json"
     ${pkgs.lib.optionalString (!contractOnly) ''
       ${pkgs.nodejs_24}/bin/node ${./check-execution.mjs} \