code wiki / _hdl_build / nx_email_invite.nx
nx_email_invite.nx
buildroot/runtime/_hdl_build/nx_email_invite.nx
about
nx_email_invite.nx -- CLI: mint ONE mailbox invite for a domain's email portal (the provisioning
seam of nx_email_portal_daemon: registration is invite-gated, so "create a new email address" =
mint an invite + hand it to the person; they self-register with their OWN passphrase -- the
operator never knows or sets user secrets, OPAQUE end-to-end).
Designed to run as a capability-gated MCP tool with a FULLY PINNED allowlist row per domain
(store+realm+level+ttl pinned server-side -> the caller's cap can only ever mint for ITS domain;
that IS the per-site-admin delegation, enforced by construction).
nx_email_invite <invites_store_path> <realm> <level> <ttl_s>
prints: INVITE token=<64-hex> realm=<realm> level=<n> ttl_s=<n>
Composes the proven nx_invite_token store (inv_issue; sha256-keyed, append-only, fail-closed).
license_tier: ORIGINAL
dependencies 2 imports · 0 importers
imports: nx_invite_token.nxnx_syscalls.nx
imported by: nobody (leaf or entry point)
call flow from main pre-order; caps 40 nodes / depth 6 declared; ↻ = already shown
structs
| none |
consts
| none |
functions
| 15 | func ei_puts(s: *u8) -> i64 { var n: i64 = 0; while s[n] != (0 as u8) { n = n + 1 } sys_write(1, s, n); return 0 } |
| 16 | func ei_slen(s: *u8) -> i64 { var n: i64 = 0; while s[n] != (0 as u8) { n = n + 1 } return n } called by 1: main |
| 17 | func ei_putn(v: i64) -> i64 |
| 27 | func ei_atoi(s: *u8) -> i64 called by 1: main |
| 37 | func main(argc: i64, argv: *i64) -> i64 |