code wiki / (root) / nx_model_fetch.nx

nx_model_fetch.nx

buildroot/runtime/nx_model_fetch.nx

8052 B162 linesdepth 21pulls 130 transitivereach 0 importersview sourcekind tooltopic model
docsdependenciesstructsconstsfunctions

about

nx_model_fetch.nx -- D2: SOVEREIGN model download (HF resolve -> 302 -> CDN TLS -> stream GGUF to disk). The nishi-ecosystem download capability (operator 2026-06-16): no curl/wget/python. Reuses the proven sovereign TLS1.3 stack (D1 nx_hf_probe verified reach + 302 capture). Steps: (1) GET the HF resolve URL -> 302; (2) parse the Location header -> the signed AWS-CDN URL; (3) new TLS session to the CDN host, validate its cert vs the Mozilla CA store, GET the long signed path; (4) find the HTTP body boundary (\r\n\r\n) and write the GGUF body to /tmp/nx_real_model.gguf (the loader's expected path). Diagnostics at every step so one run reveals the whole picture. license_tier: ORIGINAL

dependencies 11 imports · 0 importers

nx_syscalls.nx nx_csprng.nx nx_x509_trust_store.nx nx_trust_store_load_from_certdata. nx_tls13_client_validate_certifica nx_tls13_client_session_run.nx nx_https_url_for_fetch.nx nx_https_url_connect.nx nx_https_get.nx nx_https_get_complete.nx nx_model_fetch.nx

diagram shows first 10 each side; +1 more imports, +0 more importers in the complete lists below.

imports: nx_syscalls.nxnx_csprng.nxnx_x509_trust_store.nxnx_trust_store_load_from_certdata.nxnx_tls13_client_validate_certificate.nxnx_tls13_client_session_run.nxnx_https_url_for_fetch.nxnx_https_url_connect.nxnx_https_get.nxnx_https_get_complete.nxnx_http_response_parse.nx

imported by: nobody (leaf or entry point)

call flow from main pre-order; caps 40 nodes / depth 6 declared; ↻ = already shown

main nx_trust_store_load_from_c sys_mmap sys_read_file sys_openat_rd sys_lseek sys_mmap ↻ sys_read sys_close nx_nss_certdata_parse sys_mmap ↻ _pat_class_cert _pat_value_octal _pat_end _find_newline _starts_with _parse_octal_line sys_mmap ↻ _is_space _decode_octal_escape _is_octal trust_store_alloc sys_mmap ↻ nx_x509_trust_store_load sys_mmap ↻ x509_parse sys_mmap ↻ asn1_cursor_init asn1_expect_tag sys_mmap ↻ asn1_read_tlv_header asn1_read_tag asn1_read_length asn1_read_length ↻ x509_read_tlv sys_mmap ↻ asn1_expect_tag ↻ x509_read_alg_id sys_mmap ↻ asn1_expect_tag ↻

structs

none

consts

20const MF_MAGIC_4194304: i64 = 4194304
21const MF_MAGIC_2048: i64 = 2048
22const MF_MAGIC_100000000: i64 = 100000000
23const MF_MAGIC_1048576: i64 = 1048576
25const MF_CDN_CAP: i64 = 600000000 // 600 MB buffer for the CDN response (headers + ~400 MB GGUF body)

functions

27func mf_puts(s: *u8) -> i64 { var n: i64 = 0; while s[n] != (0 as u8) { n = n + 1 } sys_write(1, s, n); return 0 }
called by 1: main calls 1: sys_write
28func mf_putn(v: i64) -> i64
called by 1: main calls 2: sys_mmapsys_write
36func mf_strlen(s: *u8) -> i64 { var n: i64 = 0; while s[n] != (0 as u8) { n = n + 1 } return n }
39func mf_find(buf: *u8, n: i64, pat: *u8, pl: i64) -> i64
52func mf_line_end(buf: *u8, start: i64, n: i64) -> i64
63func mf_fetch(store: *TrustStore, full_url: *u8, path: *u8, path_len: i64, buf: *u8, cap: i64) -> i64
calls 9: sys_mmapnx_csprng_fillnx_url_newnx_https_url_for_fetchnx_https_url_connectsys_now_realtime_sec+3
93func main() -> i64
calls 4: nx_trust_store_load_from_certdatamf_putsmf_putntrust_store_count