code wiki / _hdl_build / _gallery_serve_ref.nx
`_gallery_serve_ref.nx` source

↩ module page · 327 lines · 13613 B
1// _gallery_serve_ref.nx -- HAND REFERENCE (written ONCE, scratch) for the spec2 gallery daemon target.
2// This is the byte-identical TARGET nx_eg (which==2) must reproduce from a STRUCTURAL spec table. Its
3// control flow extends the PROVEN spec1 frame (socket->setsockopt->bind->listen->`while accept`->
4// `if cfd<0 continue`->fork->dispatch->send) with a 3-ROUTE flat-if chain:
5//   GET /            -> gs_grid       (browse: lists the REAL ingested img: CIDs from the seg-store)
6//   GET /img/<CID>   -> gs_serve_png  (serves the REAL on-disk PNG bytes via a CID->path sidecar)
7//   POST /rate       -> gs_rate       (same-origin enforced; appends EXACTLY one EVAL O-line)
8// Dialect rails honored: flat-ifs only (LM-002), no &&/|| (LM-001 -> compound guards are SEQUENCES of
9// flat ifs), funcs <=6 params (LM-BIGARGS), mask-after-shift port bytes (LM-005). The route literals
10// "GET / " / "GET /img/" / "POST /rate" are the tamperable spec fields. license_tier: ORIGINAL
11import "nx_seg_store.nx"
12import "nx_canon_cid.nx"
13import "nx_syscalls.nx"
14
15// substring match: does buf[0..n) contain the plen bytes of pat contiguously? (route + header probe)
16func eh_find(buf: *u8, n: i64, pat: *u8, plen: i64) -> i64 {
  var i: i64 = 0
  while i + plen <= n {
      var j: i64 = 0
      var ok: i64 = 1
      while j < plen {
          if buf[i+j] != pat[j] { ok = 0 }
          j = j + 1
      }
      if ok == 1 { return 1 }
      i = i + 1
  }
  return 0
29}
30
31// copy null-terminated s into dst at off; return new offset.
32func gs_cat(dst: *u8, off: i64, s: *u8) -> i64 {
  var i: i64 = 0
  while s[i] != (0 as u8) { dst[off+i] = s[i]; i = i + 1 }
  return off + i
36}
37
38// write decimal v into dst at off; return new offset (v >= 0).
39func gs_u(dst: *u8, off: i64, v: i64) -> i64 {
  var m: i64 = v
  let t: *u8 = sys_mmap(28)
  var k: i64 = 0
  if m == 0 { t[0] = 48 as u8; k = 1 }
  while m > 0 { t[k] = (48 + (m % 10)) as u8; m = m / 10; k = k + 1 }
  var o: i64 = off
  var i: i64 = 0
  while i < k { dst[o] = t[k-1-i]; o = o + 1; i = i + 1 }
  return o
49}
50
51// append the HTML grid of every img: CID in the live store to body at off; return new offset.
52// Walks the manifest, reads each seg .docs, finds records whose key starts "img:" (105,109,103,58)
53// and emits the 68-byte CID after the prefix as a clickable <a href="/img/<CID>"> cell.
54func gs_grid_body(body: *u8, off: i64, prefix: *u8) -> i64 {
  var o: i64 = off
  let segs: *i64 = sys_mmap(8 * 260) as *i64
  let ns: i64 = ss_manifest(prefix, segs)
  var s: i64 = 0
  while s < ns {
      let path: *u8 = sys_mmap(512)
      var po: i64 = 0
      po = gs_cat(path, po, prefix)
      po = gs_cat(path, po, segs[s] as *u8)
      po = gs_cat(path, po, ".docs" as *u8)
      path[po] = 0 as u8
      let szp: *i64 = sys_mmap(16) as *i64
      let b: *u8 = sys_read_file(path, szp)
      let sz: i64 = szp[0]
      var i: i64 = 0
      while i + 9 <= sz {
          let kl: i64 = ss_r32(b, i + 1)
          let koff: i64 = i + 5
          let vl: i64 = ss_r32(b, koff + kl)
          let voff: i64 = koff + kl + 4
          var isimg: i64 = 0
          if kl == 73 {
              isimg = 1
              if b[koff] != (105 as u8) { isimg = 0 }
              if b[koff+1] != (109 as u8) { isimg = 0 }
              if b[koff+2] != (103 as u8) { isimg = 0 }
              if b[koff+3] != (58 as u8) { isimg = 0 }
          }
          if isimg == 1 {
              o = gs_cat(body, o, "<a class=\"cell\" href=\"/img/" as *u8)
              var c: i64 = 0
              while c < 69 { body[o] = b[koff + 4 + c]; o = o + 1; c = c + 1 }
              o = gs_cat(body, o, "\"><img src=\"/img/" as *u8)
              c = 0
              while c < 69 { body[o] = b[koff + 4 + c]; o = o + 1; c = c + 1 }
              o = gs_cat(body, o, "\" width=\"160\"><div>" as *u8)
              c = 0
              while c < 69 { body[o] = b[koff + 4 + c]; o = o + 1; c = c + 1 }
              o = gs_cat(body, o, "</div></a>\n" as *u8)
          }
          i = voff + vl
      }
      s = s + 1
  }
  return o
100}
101
102// browse grid: build the HTML body into a temp buffer, then write a 200 header + body into rbuf.
103func gs_grid(rbuf: *u8, prefix: *u8) -> i64 {
  let body: *u8 = sys_mmap(262144)
  var bo: i64 = 0
  bo = gs_cat(body, bo, "<!doctype html><meta charset=utf-8><title>Nishi Gallery</title><body><h1>Nishi Gallery</h1><div class=grid>\n" as *u8)
  bo = gs_grid_body(body, bo, prefix)
  bo = gs_cat(body, bo, "</div></body>" as *u8)
  var o: i64 = 0
  o = gs_cat(rbuf, o, "HTTP/1.1 200 OK\r\nContent-Type: text/html\r\nContent-Length: " as *u8)
  o = gs_u(rbuf, o, bo)
  o = gs_cat(rbuf, o, "\r\nConnection: close\r\n\r\n" as *u8)
  var i: i64 = 0
  while i < bo { rbuf[o] = body[i]; o = o + 1; i = i + 1 }
  return o
116}
117
118// peel the 68-char CID from req after the literal "GET /img/" into cidout (null-terminated); return 1 ok, 0 none.
119func gs_peel_cid(req: *u8, rn: i64, cidout: *u8) -> i64 {
  let pat: *u8 = "GET /img/" as *u8
  var i: i64 = 0
  var at: i64 = 0 - 1
  while i + 9 <= rn {
      var j: i64 = 0
      var ok: i64 = 1
      while j < 9 { if req[i+j] != pat[j] { ok = 0 } j = j + 1 }
      if ok == 1 { if at < 0 { at = i + 9 } }
      i = i + 1
  }
  if at < 0 { return 0 }
  var c: i64 = 0
  while c < 69 { cidout[c] = req[at + c]; c = c + 1 }
  cidout[69] = 0 as u8
  return 1
135}
136
137// scan the CID->path sidecar TSV for cid (69 bytes); copy the absolute path into pathout (null-term); return 1 hit, 0 miss.
138func gs_sidecar(cid: *u8, pathout: *u8) -> i64 {
  let szp: *i64 = sys_mmap(16) as *i64
  let b: *u8 = sys_read_file("knowledge/status/galx_cid_paths.tsv" as *u8, szp)
  let sz: i64 = szp[0]
  if (b as i64) == 0 { return 0 }
  var i: i64 = 0
  var ls: i64 = 0
  while i < sz {
      if b[i] == (10 as u8) {
          var eq: i64 = 1
          var k: i64 = 0
          while k < 69 { if b[ls + k] != cid[k] { eq = 0 } k = k + 1 }
          if b[ls + 69] != (9 as u8) { eq = 0 }
          if eq == 1 {
              var po: i64 = 0
              var p: i64 = ls + 70
              while p < i { pathout[po] = b[p]; po = po + 1; p = p + 1 }
              pathout[po] = 0 as u8
              return 1
          }
          ls = i + 1
      }
      i = i + 1
  }
  return 0
163}
164
165// serve the real PNG bytes for the requested CID; emit 200+bytes on hit, 404 on miss; return length.
166func gs_serve_png(rbuf: *u8, req: *u8, rn: i64, root: *u8) -> i64 {
  let cid: *u8 = sys_mmap(96)
  let havec: i64 = gs_peel_cid(req, rn, cid)
  if havec == 0 { return gs_cat(rbuf, 0, "HTTP/1.1 404 Not Found\r\nContent-Type: text/plain\r\nContent-Length: 9\r\nConnection: close\r\n\r\nnot found" as *u8) }
  let path: *u8 = sys_mmap(512)
  let havep: i64 = gs_sidecar(cid, path)
  if havep == 0 { return gs_cat(rbuf, 0, "HTTP/1.1 404 Not Found\r\nContent-Type: text/plain\r\nContent-Length: 9\r\nConnection: close\r\n\r\nnot found" as *u8) }
  let szp: *i64 = sys_mmap(16) as *i64
  let png: *u8 = sys_read_file(path, szp)
  let plen: i64 = szp[0]
  if (png as i64) == 0 { return gs_cat(rbuf, 0, "HTTP/1.1 404 Not Found\r\nContent-Type: text/plain\r\nContent-Length: 9\r\nConnection: close\r\n\r\nnot found" as *u8) }
  var o: i64 = 0
  o = gs_cat(rbuf, o, "HTTP/1.1 200 OK\r\nContent-Type: image/png\r\nContent-Length: " as *u8)
  o = gs_u(rbuf, o, plen)
  o = gs_cat(rbuf, o, "\r\nConnection: close\r\n\r\n" as *u8)
  var i: i64 = 0
  while i < plen { rbuf[o] = png[i]; o = o + 1; i = i + 1 }
  return o
184}
185
186// POST /rate handler: enforce same-origin, parse img=<id>&score=<permil>, append EXACTLY one EVAL O-line.
187// Same-origin = the request carries Host: 127.0.0.1:18090 (loopback self). A foreign Origin header that is
188// NOT our own origin -> 403, NO write. Returns response length.
189func gs_rate(rbuf: *u8, req: *u8, rn: i64) -> i64 {
  // same-origin: must carry our own Host. A cross-site form post carries a foreign Origin: header.
  let okhost: i64 = eh_find(req, rn, "Host: 127.0.0.1:18090" as *u8, 21)
  if okhost != 1 { return gs_cat(rbuf, 0, "HTTP/1.1 403 Forbidden\r\nContent-Type: text/plain\r\nContent-Length: 9\r\nConnection: close\r\n\r\nforbidden" as *u8) }
  // reject any foreign Origin (cross-origin attacker sets Origin to their site). Only our own Origin or none is allowed.
  let hasorigin: i64 = eh_find(req, rn, "Origin: " as *u8, 8)
  let okorigin: i64 = eh_find(req, rn, "Origin: http://127.0.0.1:18090" as *u8, 30)
  var crossorigin: i64 = 0
  if hasorigin == 1 { crossorigin = 1 }
  if okorigin == 1 { crossorigin = 0 }
  if crossorigin == 1 { return gs_cat(rbuf, 0, "HTTP/1.1 403 Forbidden\r\nContent-Type: text/plain\r\nContent-Length: 9\r\nConnection: close\r\n\r\nforbidden" as *u8) }
  // locate the body (after the blank line CRLFCRLF)
  var i: i64 = 0
  var bodyat: i64 = 0 - 1
  while i + 4 <= rn {
      var ok: i64 = 1
      if req[i] != (13 as u8) { ok = 0 }
      if req[i+1] != (10 as u8) { ok = 0 }
      if req[i+2] != (13 as u8) { ok = 0 }
      if req[i+3] != (10 as u8) { ok = 0 }
      if ok == 1 { if bodyat < 0 { bodyat = i + 4 } }
      i = i + 1
  }
  if bodyat < 0 { return gs_cat(rbuf, 0, "HTTP/1.1 400 Bad Request\r\nContent-Type: text/plain\r\nContent-Length: 3\r\nConnection: close\r\n\r\nbad" as *u8) }
  // locate "img=" in the body, then copy the value up to '&' or end.
  let img: *u8 = sys_mmap(128)
  var im: i64 = 0
  var iat: i64 = 0 - 1
  var pi: i64 = bodyat
  while pi + 4 <= rn {
      var oki: i64 = 1
      if req[pi] != (105 as u8) { oki = 0 }
      if req[pi+1] != (109 as u8) { oki = 0 }
      if req[pi+2] != (103 as u8) { oki = 0 }
      if req[pi+3] != (61 as u8) { oki = 0 }
      if oki == 1 { if iat < 0 { iat = pi + 4 } }
      pi = pi + 1
  }
  if iat >= 0 {
      var p: i64 = iat
      var go: i64 = 1
      while p < rn { if go == 1 { if req[p] == (38 as u8) { go = 0 } else { img[im] = req[p]; im = im + 1 } } p = p + 1 }
  }
  img[im] = 0 as u8
  // locate "score=" in the body, then copy the digits.
  let score: *u8 = sys_mmap(32)
  var sm: i64 = 0
  var sat: i64 = 0 - 1
  var ps: i64 = bodyat
  while ps + 6 <= rn {
      var oks: i64 = 1
      let sp: *u8 = "score=" as *u8
      var jj: i64 = 0
      while jj < 6 { if req[ps+jj] != sp[jj] { oks = 0 } jj = jj + 1 }
      if oks == 1 { if sat < 0 { sat = ps + 6 } }
      ps = ps + 1
  }
  if sat >= 0 {
      var q: i64 = sat
      var god: i64 = 1
      while q < rn { if god == 1 { if req[q] >= (48 as u8) { if req[q] <= (57 as u8) { score[sm] = req[q]; sm = sm + 1 } else { god = 0 } } else { god = 0 } } q = q + 1 }
  }
  score[sm] = 0 as u8
  // append EXACTLY one EVAL O-line
  let logfd: i64 = sys_openat_append("knowledge/status/eval_lanes.log" as *u8, 0x1a4)
  if logfd >= 0 {
      let line: *u8 = sys_mmap(256)
      var lo: i64 = 0
      lo = gs_cat(line, lo, "EVAL img=" as *u8)
      lo = gs_cat(line, lo, img)
      lo = gs_cat(line, lo, " lane=O score=" as *u8)
      lo = gs_cat(line, lo, score)
      lo = gs_cat(line, lo, "\n" as *u8)
      sys_write(logfd, line, lo)
      sys_close(logfd)
  }
  return gs_cat(rbuf, 0, "HTTP/1.1 200 OK\r\nContent-Type: text/plain\r\nContent-Length: 5\r\nConnection: close\r\n\r\nrated" as *u8)
266}
267
268func main() -> i64 {
  let port: i64 = 18090
  let addr: *u8 = sys_mmap(16)
  addr[0] = 2 as u8
  addr[1] = 0 as u8
  addr[2] = ((port >> 8) & 0xff) as u8
  addr[3] = (port & 0xff) as u8
  addr[4] = 127 as u8
  addr[5] = 0 as u8
  addr[6] = 0 as u8
  addr[7] = 1 as u8
  addr[8] = 0 as u8
  addr[9] = 0 as u8
  addr[10] = 0 as u8
  addr[11] = 0 as u8
  addr[12] = 0 as u8
  addr[13] = 0 as u8
  addr[14] = 0 as u8
  addr[15] = 0 as u8
  let lfd: i64 = sys_socket(2, 1, 0)
  if lfd < 0 { return 10 }
  let optval: *u8 = sys_mmap(4)
  optval[0] = 1 as u8
  optval[1] = 0 as u8
  optval[2] = 0 as u8
  optval[3] = 0 as u8
  sys_setsockopt(lfd, 1, 2, optval, 4)
  let brc: i64 = sys_bind(lfd, addr, 16)
  if brc < 0 { return 20 }
  let lrc: i64 = sys_listen(lfd, 16)
  if lrc < 0 { return 30 }
  let req: *u8 = sys_mmap(8192)
  let nf404: *u8 = "HTTP/1.1 404 Not Found\r\nContent-Type: text/plain\r\nContent-Length: 9\r\nConnection: close\r\n\r\nnot found" as *u8
  var served: i64 = 0
  while served < 64 {
      let cfd: i64 = sys_accept(lfd)
      if cfd < 0 { continue }
      let pid: i64 = sys_fork()
      if pid == 0 {
          sys_close(lfd)
          let rn: i64 = sys_read(cfd, req, 8192)
          var rbuf: *u8 = sys_mmap(262144)
          var rlen: i64 = 0
          let is_root: i64 = eh_find(req, rn, "GET / " as *u8, 6)
          if is_root == 1 { rlen = gs_grid(rbuf, "/tmp/galx-serve-" as *u8) }
          let is_img: i64 = eh_find(req, rn, "GET /img/" as *u8, 9)
          if is_img == 1 { rlen = gs_serve_png(rbuf, req, rn, "/tmp/galx-serve-" as *u8) }
          let is_rate: i64 = eh_find(req, rn, "POST /rate" as *u8, 10)
          if is_rate == 1 { rlen = gs_rate(rbuf, req, rn) }
          if rlen == 0 { rlen = gs_cat(rbuf, 0, nf404) }
          sys_write(cfd, rbuf, rlen)
          sys_close(cfd)
          sys_exit(0)
      }
      sys_close(cfd)
      served = served + 1
  }
  sys_close(lfd)
  return 0
327}
_gallery_serve_ref.nx source

`_gallery_serve_ref.nx` source
