code wiki / _hdl_build / nx_pub_serve_gate.nx
nx_pub_serve_gate.nx
buildroot/runtime/_hdl_build/nx_pub_serve_gate.nx
about
nx_pub_serve_gate.nx -- PUB-SERVE R0 proof: the publisher's OWN static server serves its liveroot over real
loopback HTTP. Forks nx_pub_serve, then (as a sovereign HTTP client) asserts: (1) a published file is served
200 + correct bytes; (2) a missing file -> 404; (3) a path-traversal (../) is REFUSED (security boundary);
(4) RE-PUBLISHING (overwrite the file) is served IMMEDIATELY with no server restart -- proving publish = file
drop + serve, NOT a daemon-swap. Sovereign sockets both sides, per-wsid port. license_tier: ORIGINAL expect_exit: 0
dependencies 5 imports · 0 importers
imports: nx_syscalls.nxnx_connect.nxnx_publisher.nxnx_pub_serve.nxnx_runpath.nx
imported by: nobody (leaf or entry point)
call flow from main pre-order; caps 40 nodes / depth 6 declared; ↻ = already shown
structs
| none |
consts
| none |
functions
| 12 | func g_w(s: *u8) -> i64 { var n: i64=0; while s[n]!=(0 as u8){n=n+1} sys_write(1,s,n); return 0 } |
| 13 | func g_n(v: i64) -> i64 { var m: i64=v; if m<0{g_w("-" as *u8);m=0-m} let t:*u8=sys_mmap(24); var k:i64=0; if m==0{t[0]=48 as u8;k=1} while m>0{t[k]=(48+(m%10)) as u8;m=m/10;k=k+1} var i:i64=0; let o:*u8=sys_mmap(24); while i<k{o[i]=t[k-1-i];i=i+1} sys_write(1,o,k); return 0 } |
| 14 | func g_row(id: *u8, ok: i64, pass: *i64) -> i64 { g_w(" " as *u8); g_w(id); g_w(": " as *u8); if ok==1 { g_w("OK\n" as *u8); pass[0]=pass[0]+1 } else { g_w("FAIL\n" as *u8) } return 0 } |
| 15 | func sv_write(path: *u8, content: *u8) -> i64 { let fd: i64 = sys_openat_wr(path, 0x1a4); if fd<0 { return 0 } var n: i64=0; while content[n]!=(0 as u8){n=n+1} sys_write(fd, content, n); sys_close(fd); return 1 } |
| 16 | func sv_nap(ms: i64) -> i64 { let ts: *i64 = sys_mmap(16) as *i64; ts[0]=0; ts[1]=ms*1000000; __syscall(35, ts as i64, 0, 0, 0, 0, 0); return 0 } |
| 19 | func cg_get(port: i64, path: *u8, resp: *u8, cap: i64) -> i64 |
| 46 | func main() -> i64 |