code wiki / (root) / nx_jrnl_archive_lib.nx

nx_jrnl_archive_lib.nx

buildroot/runtime/nx_jrnl_archive_lib.nx

8796 B175 linesdepth 5pulls 5 transitivereach 7 importersview sourcekind librarytopic jrnl
docsdependenciesstructsconstsfunctions

about

nx_jrnl_archive_lib.nx -- THE SANCTIONED "ARCHIVE IT DELIBERATELY" VERB for an append-only status journal that has reached its budget (2026-08-23, lane L). WHY THIS EXISTS. nx_compare_regen refuses receipts once knowledge/status/comparepub.jrnl passes its budget and tells the reader to "archive it deliberately" -- and no organ in the estate could do that (nx_spendgate: name free, no incumbent). Rotation was rejected by design: a silent rotator is a duplicate ruler beside nx_sizeguard and a SHRINKING journal is exactly what nx_jrnlguard calls a clobber. So the archive is a VERB a seat runs on purpose, and it is preserve-before-remove BY CONSTRUCTION: the live journal is reset ONLY after the archived copy has been re-read from disk and hashed equal to the original. A write that fails, a verify that mismatches, or a journal that cannot be read leaves the live file byte-for-byte untouched. Contract (ja_archive): 0 OK archived+reset | 1 OK nothing-to-archive (empty journal, no file made) | 3 cannot read journal | 4 cannot create archive dir / write archive | 5 VERIFY MISMATCH (archive kept, live NOT reset) | 6 reset failed (archive verified, live unchanged). Every outcome prints one NX-JRNL-ARCHIVE line naming src, bytes, sha256, the archive path, and verified=/reset= so the announcement IS the audit row. The archive name is <dir>/<base>.<epoch>. jrnlguard: the estate's twelve jg_*.base baselines do not cover comparepub.jrnl (measured 2026-08-23); a journal that IS baselined must be re-snapshotted after an archive (jg's own rule).

dependencies 2 imports · 3 importers

nx_syscalls.nx nx_sha256.nx nx_jrnl_archive_lib.nx nx_compare_receipt_lib.nx nx_jrnl_archive.nx nx_jrnl_archive_gate.nx

imports: nx_syscalls.nxnx_sha256.nx

imported by: nx_compare_receipt_lib.nxnx_jrnl_archive.nxnx_jrnl_archive_gate.nx

structs

none

consts

23const JA_DIGEST_BYTES: i64 = 32
24const JA_ARCH_MODE: i64 = 0x1a4 // rw-r--r-- for the archived copy
25const JA_DIR_MODE: i64 = 0x1ed // rwxr-xr-x for the archive dir
26const JA_PATH_MAX: i64 = 4096 // PATH_MAX: the kernel bound on a path, the only constant a path needs

functions

28func ja_slen(s: *u8) -> i64 { var n: i64 = 0; while s[n] != (0 as u8) { n = n + 1 } return n }
called by 3: rgr_lenja_putsja_lock
29func ja_puts(s: *u8) -> i64 { sys_write(1, s, ja_slen(s)); return 0 }
called by 3: mainmainja_announce calls 2: sys_writeja_slen
30func ja_pn(v: i64) -> i64
called by 2: mainja_announce calls 2: sys_mmapsys_write
43func ja_cat(d: *u8, o: i64, s: *u8) -> i64 { var i: i64 = 0; var p: i64 = o; while s[i] != (0 as u8) { d[p] = s[i]; p = p + 1; i = i + 1 } d[p] = 0 as u8; return p }
called by 6: rgr_copyjg_pathjg_make_journalmainja_archiveja_lock
44func ja_catn(d: *u8, o: i64, v: i64) -> i64
called by 3: jg_make_journalmainja_archive calls 1: sys_mmap
56func ja_hex(d: *u8, out: *u8) -> i64
called by 2: rgr_prepareja_archive
70func ja_basename(p: *u8) -> *u8
called by 1: ja_archive
76func ja_dirname(p: *u8, out: *u8) -> i64
called by 3: rgr_sync_dirrgr_prepareja_archive
87func ja_write_all(path: *u8, buf: *u8, n: i64, mode: i64) -> i64
called by 3: jg_make_journalmainja_archive calls 4: sys_openat_wrsys_writesys_closesys_fsync
101func ja_announce(src: *u8, bytes: i64, hex: *u8, arch: *u8, verified: i64, reset: i64, rc: i64, why: *u8, rep: *i64) -> i64
called by 1: ja_archive calls 2: ja_putsja_pn
114func ja_archive(journal: *u8, archive_dir: *u8, epoch: i64, rep: *i64) -> i64
called by 2: mainmain calls 14: sys_mmapsys_read_fileja_announcesha256_digestja_hexja_cat+8
161func ja_lock(journal: *u8) -> i64
called by 1: rgr_prepare calls 7: ja_slensys_mmap_sharedja_catsys_openat_locksys_munmapsys_close+1
175func ja_unlock(fd: i64) -> i64 { return sys_close(fd) }
called by 1: rgr_release calls 1: sys_close