nx_cms_image_gate.nx source

1// nx_cms_image_gate.nx -- CMS IMAGE-OPT/CDN gate: land the final missing Smush/Jetpack-CDN class HONESTLY 2// by proving the sovereign optimization-policy engine -- responsive srcset that NEVER upscales, modern-first 3// format negotiation, content-addressed cache keys (deterministic + cache-busting), no-upscale guard, and 4// immutable caching only for content-addressed assets. Positive AND negative controls throughout. Appends 5// "CMSGATE row=nx_cms_image image-opt-cdn ... verdict=PASS" to knowledge/status/cms_gate.log ONLY if every 6// assertion holds. Exit 0 iff all pass. license_tier: ORIGINAL 7import "nx_cms_image.nx" 8import "nx_syscalls.nx" 9 10func mg_w(s: *u8) -> i64 { var n: i64=0; while s[n]!=(0 as u8){n=n+1} sys_write(1,s,n); return 0 } 11func mg_num(v: i64) -> i64 { let bb: *u8=sys_mmap(28); var m: i64=v; if m<0{m=0-m}; let t: *u8=sys_mmap(28); var k: i64=0; if m==0{t[0]=48;k=1}; while m>0{t[k]=48+(m%10);m=m/10;k=k+1}; var i: i64=0; while i<k{bb[i]=t[k-1-i];i=i+1}; sys_write(1,bb,k); return 0 } 12func mg_cat(dst: *u8, off: i64, s: *u8) -> i64 { var o: i64=off; var k: i64=0; while s[k]!=(0 as u8){dst[o]=s[k];o=o+1;k=k+1} return o } 13func mg_catnum(dst: *u8, off: i64, v: i64) -> i64 { 14 var o: i64=off; let t: *u8=sys_mmap(28); var m: i64=v; if m<0{m=0-m}; var k: i64=0 15 if m==0 {t[0]=48 as u8;k=1}; while m>0 {t[k]=(48+(m%10)) as u8; m=m/10; k=k+1} 16 var i: i64=0; while i<k {dst[o]=t[k-1-i]; o=o+1; i=i+1} return o 17} 18 19func mg_row(id: i64, ok: i64, what: *u8) -> i64 { 20 mg_w("IMGROW " as *u8); mg_num(id); mg_w(" " as *u8) 21 if ok==1 { mg_w("PASS " as *u8) } else { mg_w("FAIL " as *u8) } 22 mg_w(what); mg_w("\n" as *u8) 23 return ok 24} 25 26func main() -> i64 { 27 var pass: i64 = 0 28 var rows: i64 = 0 29 var ok: i64 = 0 30 let ws: *i64 = sys_mmap(64) as *i64 31 32 // R0: srcset never upscales -- orig 700 yields {320,640} (960+ excluded), all <= orig 33 let c0: i64 = img_srcset_widths(700, ws) 34 ok = 0 35 if c0 == 2 { if ws[0] == 320 { if ws[1] == 640 { ok = 1 } } } 36 rows=rows+1; pass=pass+mg_row(0, ok, "srcset no-upscale: orig 700 -> {320,640} only" as *u8) 37 38 // R1: large original yields the full ascending ladder, every width <= orig 39 let c1: i64 = img_srcset_widths(4000, ws) 40 ok = 0 41 if c1 == 5 { 42 ok = 1 43 var i: i64 = 0 44 while i < c1 { if ws[i] > 4000 { ok = 0 } if i > 0 { if ws[i] <= ws[i-1] { ok = 0 } } i = i + 1 } 45 } 46 rows=rows+1; pass=pass+mg_row(1, ok, "srcset large: orig 4000 -> 5 widths, ascending, all <= orig" as *u8) 47 48 // R2 (neg control): a tiny original gets NO responsive variants (never upscale a 300px image) 49 let c2: i64 = img_srcset_widths(300, ws) 50 ok = 0; if c2 == 0 { ok = 1 } 51 rows=rows+1; pass=pass+mg_row(2, ok, "srcset tiny: orig 300 -> 0 variants (no upscaling, neg control)" as *u8) 52 53 // R3: modern-first format negotiation -- AVIF > WebP > JPEG by what the client accepts 54 ok = 0 55 if img_pick_format(1, 1) == NX_IMG_AVIF { if img_pick_format(0, 1) == NX_IMG_WEBP { if img_pick_format(0, 0) == NX_IMG_JPEG { ok = 1 } } } 56 rows=rows+1; pass=pass+mg_row(3, ok, "format negotiation: AVIF>WebP>JPEG by client Accept" as *u8) 57 58 // R4: content-addressed key -- deterministic for same bytes, different for changed bytes (cache-bust) 59 let imgA: *u8 = "PNGDATA-version-1-pixels...." as *u8 60 let imgB: *u8 = "PNGDATA-version-2-pixels...." as *u8 61 var la: i64 = 0; while imgA[la] != (0 as u8) { la = la + 1 } 62 var lb: i64 = 0; while imgB[lb] != (0 as u8) { lb = lb + 1 } 63 let ka: i64 = img_cache_key(imgA, la) 64 let ka2: i64 = img_cache_key(imgA, la) 65 let kb: i64 = img_cache_key(imgB, lb) 66 ok = 0; if ka == ka2 { if ka != kb { ok = 1 } } 67 rows=rows+1; pass=pass+mg_row(4, ok, "content-addressed key: same bytes->same, changed->different (cache-bust)" as *u8) 68 69 // R5: no-upscale guard -- serving larger than original refused, downscale/same allowed 70 ok = 0; if img_scale_ok(1000, 1280) == 0 { if img_scale_ok(1000, 640) == 1 { if img_scale_ok(1000, 1000) == 1 { ok = 1 } } } 71 rows=rows+1; pass=pass+mg_row(5, ok, "no-upscale guard: 1000->1280 refused; 1000->640/1000 ok" as *u8) 72 73 // R6: immutable caching only for content-addressed assets (neg control on path-based) 74 ok = 0; if img_immutable(1) == 1 { if img_immutable(0) == 0 { ok = 1 } } 75 rows=rows+1; pass=pass+mg_row(6, ok, "immutable cache only when content-addressed (neg control)" as *u8) 76 77 // R7: format codes are well-ordered (modern outranks legacy) -- the negotiation is total 78 ok = 0; if NX_IMG_AVIF > NX_IMG_WEBP { if NX_IMG_WEBP > NX_IMG_JPEG { ok = 1 } } 79 rows=rows+1; pass=pass+mg_row(7, ok, "format preference total order: AVIF > WebP > JPEG" as *u8) 80 81 mg_w("CMS-IMAGE-GATE rows=" as *u8); mg_num(rows); mg_w(" pass=" as *u8); mg_num(pass); mg_w("\n" as *u8) 82 83 if pass == rows { 84 let line: *u8 = sys_mmap(256) 85 var off: i64 = mg_cat(line, 0, "CMSGATE row=nx_cms_image image-opt-cdn rows=" as *u8) 86 off = mg_catnum(line, off, rows) 87 off = mg_cat(line, off, " pass=" as *u8); off = mg_catnum(line, off, pass) 88 off = mg_cat(line, off, " verdict=PASS\n" as *u8) 89 let gf: i64 = sys_openat_append("knowledge/status/cms_gate.log" as *u8, 0x1a4) 90 if gf >= 0 { sys_write(gf, line, off); sys_close(gf) } 91 mg_w("CMS-IMAGE-GATE verdict=PASS -- image-opt-cdn recorded in cms_gate.log\n" as *u8) 92 sys_exit(0); return 0 93 } 94 mg_w("CMS-IMAGE-GATE verdict=FAIL -- NOT recorded (no fake-green)\n" as *u8) 95 sys_exit(1); return 1 96}