code wiki / _hdl_build / nx_cms_email_gate.nx
nx_cms_email_gate.nx source
↩ module page · 93 lines · 5432 B
1// nx_cms_email_gate.nx -- CMS EMAIL/CRM/NEWSLETTER gate: land the missing Mailchimp/HubSpot class HONESTLY
2// by proving the sovereign double-opt-in subscriber FSM -- subscribe is PENDING (never auto-confirmed),
3// only the CORRECT deterministic token confirms, a WRONG token is refused, only CONFIRMED subscribers are
4// on the send list, one-click unsubscribe suppresses, confirm is idempotent, and address sanity holds.
5// Positive AND negative controls throughout. Appends "CMSGATE row=nx_cms_email email-crm-newsletter ...
6// verdict=PASS" to knowledge/status/cms_gate.log ONLY if every assertion holds. Exit 0 iff all pass.
7// license_tier: ORIGINAL
8import "nx_cms_email.nx"
9import "nx_syscalls.nx"
10
11func eg_w(s: *u8) -> i64 { var n: i64=0; while s[n]!=(0 as u8){n=n+1} sys_write(1,s,n); return 0 }
12func eg_num(v: i64) -> i64 { let bb: *u8=sys_mmap(28); var m: i64=v; if m<0{m=0-m}; let t: *u8=sys_mmap(28); var k: i64=0; if m==0{t[0]=48;k=1}; while m>0{t[k]=48+(m%10);m=m/10;k=k+1}; var i: i64=0; while i<k{bb[i]=t[k-1-i];i=i+1}; sys_write(1,bb,k); return 0 }
13func eg_cat(dst: *u8, off: i64, s: *u8) -> i64 { var o: i64=off; var k: i64=0; while s[k]!=(0 as u8){dst[o]=s[k];o=o+1;k=k+1} return o }
14func eg_catnum(dst: *u8, off: i64, v: i64) -> i64 {
15 var o: i64=off; let t: *u8=sys_mmap(28); var m: i64=v; if m<0{m=0-m}; var k: i64=0
16 if m==0 {t[0]=48 as u8;k=1}; while m>0 {t[k]=(48+(m%10)) as u8; m=m/10; k=k+1}
17 var i: i64=0; while i<k {dst[o]=t[k-1-i]; o=o+1; i=i+1} return o
18}
19
20func eg_row(id: i64, ok: i64, what: *u8) -> i64 {
21 eg_w("EMAILROW " as *u8); eg_num(id); eg_w(" " as *u8)
22 if ok==1 { eg_w("PASS " as *u8) } else { eg_w("FAIL " as *u8) }
23 eg_w(what); eg_w("\n" as *u8)
24 return ok
25}
26
27func main() -> i64 {
28 var pass: i64 = 0
29 var rows: i64 = 0
30 var ok: i64 = 0
31
32 let list: *u8 = "weekly-news" as *u8
33 let alice: *u8 = "alice@example.com" as *u8
34 let bob: *u8 = "bob@example.com" as *u8
35
36 // R0: subscribe -> PENDING (double opt-in; NOT auto-confirmed = no list-bombing)
37 let st0: i64 = email_subscribe()
38 ok = 0; if st0 == NX_SUB_PENDING { ok = 1 }
39 rows=rows+1; pass=pass+eg_row(0, ok, "subscribe -> PENDING (double opt-in, never auto-confirmed)" as *u8)
40
41 // R1: confirm with the CORRECT deterministic token -> CONFIRMED
42 let tok: i64 = email_confirm_token(list, alice)
43 let st1: i64 = email_confirm(NX_SUB_PENDING, tok, list, alice)
44 ok = 0; if st1 == NX_SUB_CONFIRMED { ok = 1 }
45 rows=rows+1; pass=pass+eg_row(1, ok, "confirm with correct token -> CONFIRMED" as *u8)
46
47 // R2 (neg control): a WRONG token is refused -> stays PENDING
48 let st2: i64 = email_confirm(NX_SUB_PENDING, tok + 1, list, alice)
49 ok = 0; if st2 == NX_SUB_PENDING { ok = 1 }
50 rows=rows+1; pass=pass+eg_row(2, ok, "wrong token refused -> stays PENDING (negative control)" as *u8)
51
52 // R3: token determinism -- same (list,email) twice equal; a different email differs
53 let ta: i64 = email_confirm_token(list, alice)
54 let tb: i64 = email_confirm_token(list, bob)
55 ok = 0; if ta == tok { if ta != tb { ok = 1 } }
56 rows=rows+1; pass=pass+eg_row(3, ok, "token deterministic + per-email distinct (no stored-token table)" as *u8)
57
58 // R4: send-list membership -- ONLY confirmed; pending and unsubscribed are suppressed
59 ok = 0
60 if email_on_send_list(NX_SUB_CONFIRMED) == 1 { if email_on_send_list(NX_SUB_PENDING) == 0 { if email_on_send_list(NX_SUB_UNSUBSCRIBED) == 0 { ok = 1 } } }
61 rows=rows+1; pass=pass+eg_row(4, ok, "send list = ONLY confirmed (pending/unsubscribed suppressed)" as *u8)
62
63 // R5: one-click unsubscribe -> UNSUBSCRIBED and off the send list
64 let st5: i64 = email_unsubscribe(NX_SUB_CONFIRMED)
65 ok = 0; if st5 == NX_SUB_UNSUBSCRIBED { if email_on_send_list(st5) == 0 { ok = 1 } }
66 rows=rows+1; pass=pass+eg_row(5, ok, "one-click unsubscribe -> UNSUBSCRIBED, suppressed (GDPR)" as *u8)
67
68 // R6: confirm is idempotent -- confirming an already-CONFIRMED subscriber stays CONFIRMED
69 let st6: i64 = email_confirm(NX_SUB_CONFIRMED, 0, list, alice)
70 ok = 0; if st6 == NX_SUB_CONFIRMED { ok = 1 }
71 rows=rows+1; pass=pass+eg_row(6, ok, "confirm idempotent: already-confirmed stays CONFIRMED" as *u8)
72
73 // R7: address sanity -- valid accepted, malformed rejected (two negative controls)
74 ok = 0
75 if email_addr_valid("a@b.co" as *u8) == 1 { if email_addr_valid("a@b" as *u8) == 0 { if email_addr_valid("ab.co" as *u8) == 0 { ok = 1 } } }
76 rows=rows+1; pass=pass+eg_row(7, ok, "address sanity: a@b.co valid; 'a@b' & 'ab.co' rejected" as *u8)
77
78 eg_w("CMS-EMAIL-GATE rows=" as *u8); eg_num(rows); eg_w(" pass=" as *u8); eg_num(pass); eg_w("\n" as *u8)
79
80 if pass == rows {
81 let line: *u8 = sys_mmap(256)
82 var off: i64 = eg_cat(line, 0, "CMSGATE row=nx_cms_email email-crm-newsletter rows=" as *u8)
83 off = eg_catnum(line, off, rows)
84 off = eg_cat(line, off, " pass=" as *u8); off = eg_catnum(line, off, pass)
85 off = eg_cat(line, off, " verdict=PASS\n" as *u8)
86 let gf: i64 = sys_openat_append("knowledge/status/cms_gate.log" as *u8, 0x1a4)
87 if gf >= 0 { sys_write(gf, line, off); sys_close(gf) }
88 eg_w("CMS-EMAIL-GATE verdict=PASS -- email-crm-newsletter recorded in cms_gate.log\n" as *u8)
89 sys_exit(0); return 0
90 }
91 eg_w("CMS-EMAIL-GATE verdict=FAIL -- NOT recorded (no fake-green)\n" as *u8)
92 sys_exit(1); return 1
93}