nx_fin_route_gate.nx
buildroot/runtime/nx_fin_route_gate.nx
about
nx_fin_route_gate.nx -- proves nishifamily.com/finance is correctly served BEHIND THE OPAQUE WALL.
Drives the shared route table (olg_route) in-process, exactly as the daemon would, with a real OPAQUE
ctx (temp /tmp keys/store; light KSF for test speed, like nx_opaque_login_gate):
(a) GET /finance with NO session -> 401, and the page does NOT leak (no brand bytes in the response)
(b) GET /finance with a VALID Ed25519 no-cookie token -> 200 OK + the zero-JS dashboard (brand + live
engine output present, NO <script over the wire, served as text/html)
This is the integration proof of "finance behind the opaque system" AND a compile-check of the new
route. It does NOT touch the live daemon -- activation in production = an operator-coordinated daemon
rebuild/restart (the daemon imports this same route table). Exits 0 iff ALL pass. license_tier: ORIGINAL
dependencies 3 imports · 0 importers
imports: nx_opaque_login_routes.nxnx_opaque_login.nxnx_syscalls.nx
imported by: nobody (leaf or entry point)
call flow from main pre-order; caps 40 nodes / depth 6 declared; ↻ = already shown
structs
| none |
consts
| none |
functions
| 14 | func g_puts(s: *u8) -> i64 { var n: i64 = 0; while s[n] != (0 as u8) { n = n + 1 } sys_write(1, s, n); return 0 } |
| 15 | func g_putn(v: i64) -> i64 |
| 24 | func chk(name: *u8, got: i64, want: i64, st: *i64) -> i64 |
| 29 | func rfind(hay: *u8, n: i64, needle: *u8) -> i64 called by 1: main |
| 41 | func cpstr(dst: *u8, off: i64, s: *u8) -> i64 { var o: i64 = off; var i: i64 = 0; while s[i] != (0 as u8) { dst[o] = s[i]; o = o + 1; i = i + 1 } return o } called by 1: main |
| 42 | func cpbuf(dst: *u8, off: i64, src: *u8, n: i64) -> i64 { var o: i64 = off; var i: i64 = 0; while i < n { dst[o] = src[i]; o = o + 1; i = i + 1 } return o } called by 1: main |
| 43 | func olg_trunc(path: *u8) -> i64 { let fd: i64 = sys_openat_wr(path, 0x1a4); if fd >= 0 { sys_close(fd) } return 0 } |
| 45 | func main() -> i64 |