`nx_bless.nx` source

1// nx_bless.nx -- the first-class BLESS step (addresses finding F2, project-nishi-eng-findings-2026-06-23): turn a
2// freshly-built organ into a DURABLE _offc twin so the one clock (and any deploy) can point a registry at a stable
3// elf instead of an ephemeral /tmp build. Sovereign, build-verify-install:
4//   nx_bless <organ-name>   ->  build <organ-name> --build-only (the runner) -> verify the /tmp elf (ELF magic +
5//   size) -> atomically install to _offc/<organ-name>.elf (tmp + rename) + chmod +x.
6// Run it DIRECTLY with the arg (the runner does not forward argv): `/tmp/nx_bless.sov.elf <name>` (or its own
7// _offc twin once blessed). NOTE: uses single-cast literals as func args + slot-assignments only -- it deliberately
8// AVOIDS the `"literal" as *u8 as i64` direct-__syscall-arg gotcha (finding F1). license_tier: ORIGINAL  expect_exit: 0
9import "nx_syscalls.nx"
10
11func w(s: *u8) -> i64 { var n: i64=0; while s[n]!=(0 as u8){n=n+1} sys_write(1,s,n); return 0 }
12func wn(v: i64) -> i64 { var m: i64=v; if m<0{w("-" as *u8);m=0-m} let t:*u8=sys_mmap(24); var k:i64=0; if m==0{t[0]=48 as u8;k=1} while m>0{t[k]=(48+(m%10)) as u8;m=m/10;k=k+1} var i:i64=0; let o:*u8=sys_mmap(24); while i<k{o[i]=t[k-1-i];i=i+1} sys_write(1,o,k); return 0 }
13func bcat(dst: *u8, o: i64, s: *u8) -> i64 { var x: i64=o; var i: i64=0; while s[i]!=(0 as u8){dst[x]=s[i];x=x+1;i=i+1} return x }
14
15func main(argc: i64, argv: *i64) -> i64 {
16    if argc < 2 { w("usage: nx_bless <organ-name>  (run the elf directly so argv passes)\n" as *u8); sys_exit(2); return 2 }
17    let name: *u8 = argv[1] as *u8
18
19    // 1) BUILD <name> --build-only via the runner (fork+exec; slot-assignments are safe per finding F1 test D)
20    let runner: *u8 = "_offc/nx_sov_build_run.elf" as *u8
21    let pid: i64 = sys_fork()
22    if pid == 0 {
23        let av: *i64 = sys_mmap(64) as *i64
24        av[0] = runner as i64; av[1] = name as i64; av[2] = "--build-only" as *u8 as i64; av[3] = 0
25        let ev: *i64 = sys_mmap(16) as *i64; ev[0] = "PATH=/usr/bin:/bin" as *u8 as i64; ev[1] = 0
26        sys_execve(runner, av, ev)
27        sys_exit(127)
28    }
29    let st: *i64 = sys_mmap(16) as *i64; sys_wait4(pid, st, 0)
30
31    // 2) VERIFY /tmp/<name>.sov.elf (exists + ELF magic + non-trivial size)
32    let src: *u8 = sys_mmap(512); var so: i64 = bcat(src, 0, "/tmp/" as *u8); so = bcat(src, so, name); so = bcat(src, so, ".sov.elf" as *u8); src[so] = 0 as u8
33    let lp: *i64 = sys_mmap(8) as *i64; let data: *u8 = sys_read_file(src, lp)
34    if (data as i64) == 0 { w("nx_bless: build produced no " as *u8); w(src); w(" (organ name typo? build error?)\n" as *u8); sys_exit(1); return 1 }
35    let sz: i64 = lp[0]
36    if sz < 64 { w("nx_bless: build output too small (" as *u8); wn(sz); w(" B)\n" as *u8); sys_exit(1); return 1 }
37    if data[0] != (0x7f as u8) { w("nx_bless: not an ELF\n" as *u8); sys_exit(1); return 1 }
38    if data[1] != (69 as u8) { w("nx_bless: not an ELF\n" as *u8); sys_exit(1); return 1 }
39
40    // 3) INSTALL atomically to _offc/<name>.elf (tmp + rename) + chmod +x
41    let dst: *u8 = sys_mmap(512); var d: i64 = bcat(dst, 0, "_offc/" as *u8); d = bcat(dst, d, name); d = bcat(dst, d, ".elf" as *u8); dst[d] = 0 as u8
42    let dtmp: *u8 = sys_mmap(512); var dt: i64 = bcat(dtmp, 0, dst); dt = bcat(dtmp, dt, ".tmp" as *u8); dtmp[dt] = 0 as u8
43    let fd: i64 = sys_openat_wr(dtmp, 0x1ed); if fd < 0 { w("nx_bless: cannot open _offc temp for write\n" as *u8); sys_exit(1); return 1 }
44    sys_write(fd, data, sz); sys_close(fd)
45    __syscall(82, dtmp as i64, dst as i64, 0, 0, 0, 0)     // rename (atomic install)
46    __syscall(90, dst as i64, 0x1ed, 0, 0, 0, 0)           // chmod 0755 (+x)
47    w("nx_bless: blessed " as *u8); w(dst); w(" (" as *u8); wn(sz); w(" B, durable twin) <- " as *u8); w(src); w("\n" as *u8)
48    sys_exit(0)
49    return 0
50}
nx_bless.nx source

`nx_bless.nx` source
