code wiki / (root) / nx_site_publish_gate.nx

nx_site_publish_gate.nx

buildroot/runtime/nx_site_publish_gate.nx

4431 B90 linesdepth 7pulls 13 transitivereach 0 importersview sourcekind gate/prooftopic site
docsdependenciesstructsconstsfunctions

about

nx_site_publish_gate.nx -- gates artifact-publish placement semantics on a THROWAWAY CWD (the docroot is CWD-relative sites/): fresh publish lands byte-identical; republish preserves .prev AND lands v2; traversal ('..', absolute) DENIED with NOTHING written; secret-needle relpath DENIED via the IO layer; absent source honest ABSENT. Runner: mkdir a scratch dir, cd into it, run. Exit 0 only on all-PASS. license_tier: ORIGINAL expect_exit: 0

dependencies 2 imports · 0 importers

nx_site_publish_lib.nx nx_seg_store.nx nx_site_publish_gate.nx

imports: nx_site_publish_lib.nxnx_seg_store.nx

imported by: nobody (leaf or entry point)

call flow from main pre-order; caps 40 nodes / depth 6 declared; ↻ = already shown

main sys_mkdir ss_writefile sys_openat_wr sys_write sys_close sys_fsync vw_slen sg_run sp_main fsx_seq fsx_puts sys_write ↻ pb_traversal pl_site_lookup pl_rfile sys_openat_rd sys_read sys_close ↻ sys_mmap pl_le pl_col pl_lit_eq sys_munmap pl_span_cstr vw_read sys_openat_rd ↻ sys_read ↻ sys_close ↻ pb_app fsx_write fsx_write_denied fsx_denied sys_mmap ↻ fsx_lower fsx_ends_with fsx_basename_is fsx_deny_hit fsx_content_secret fsx_conf_deny

structs

none

consts

9const SG_CHECKS: i64 = 7
10const SG_AV: i64 = 64 // synthetic argv cells
11const SG_RB: i64 = 4096 // read-back buffer

functions

13func sg_check(name: *u8, ok: i64, pass: *i64) -> i64
called by 1: main calls 1: fsx_puts
18func sg_run(src: *u8, site: *u8, rel: *u8) -> i64
called by 1: main calls 1: sp_main
27func sg_eq(path: *u8, expect: *u8) -> i64
called by 1: main calls 2: vw_readfsx_seq
34func sg_absent(path: *u8) -> i64
called by 1: main calls 1: vw_read
40func main() -> i64
calls 9: sys_mkdirss_writefilevw_slensg_runsg_eqsg_absent+3