nx_connect_media.nx source

1// nx_connect_media.nx -- FUNCTIONALITY rung: media + voice-message ATTACHMENTS. The attachment 2// system that photo/video/voice-note/file sharing is built on -- sovereign and content-blind. 3// (The pixel/audio CODEC is a separate media substrate; this is the attachment plumbing.) 4// 5// Delivers + gates: CONTENT-ADDRESSED blobs (identical media stored ONCE -> dedup saves re-upload); 6// CHUNKED + RESUMABLE transfer (split by chunk size; a partial upload resumes only the missing 7// chunks -> large files + low-bandwidth); CONTENT-BLIND blobs (stored encrypted; server reads ZERO, 8// client key recovers); TYPED attachments (photo/video/voice/file) with voice-note duration; and 9// REFCOUNT tombstoning (a blob shared by N messages is collected only when the last ref drops). 10// 7 checks incl. negative controls. 100% sovereign. license_tier: ORIGINAL expect_exit: 0 11import "nx_syscalls.nx" 12const T_MAGIC_5001: i64 = 5001 13const T_MAGIC_2000: i64 = 2000 14const T_MAGIC_5002: i64 = 5002 15 16const BLK: i64 = 256 // chunk size 17const T_PHOTO: i64 = 1 18const T_VIDEO: i64 = 2 19const T_VOICE: i64 = 3 20const T_FILE: i64 = 4 21 22func sw(s: *u8) -> i64 { var n: i64=0; while s[n]!=(0 as u8){n=n+1} sys_write(1,s,n); return 0 } 23func sn(v: i64) -> i64 { let bb: *u8=sys_mmap(28); var m: i64=v; if m<0{m=0-m;sys_write(1,"-" as *u8,1)} let t: *u8=sys_mmap(28); var k: i64=0; if m==0{t[0]=48 as u8;k=1} while m>0{t[k]=(48+(m%10)) as u8;m=m/10;k=k+1} var i: i64=0; while i<k{bb[i]=t[k-1-i];i=i+1} sys_write(1,bb,k); return 0 } 24 25// content-addressed blob store: parallel arrays bh=hash bs=size br=refcount bc=cipher 26func blob_find(bh: *i64, cnt: i64, hash: i64) -> i64 { 27 var i: i64=0 28 while i<cnt { if bh[i]==hash { return i } i=i+1 } 29 return 0-1 30} 31// returns blob idx; dedups by content hash (existing -> refcount++ and ZERO new bytes stored) 32func blob_put(bh: *i64, bs: *i64, br: *i64, bc: *i64, cntp: *i64, hash: i64, size: i64, content: i64, key: i64) -> i64 { 33 let f: i64 = blob_find(bh, cntp[0], hash) 34 if f>=0 { br[f]=br[f]+1; return f } // dedup 35 let i: i64 = cntp[0] 36 bh[i]=hash; bs[i]=size; br[i]=1; bc[i]=content+key // content-blind: store ciphertext 37 cntp[0]=i+1 38 return i 39} 40func blob_decrypt(bc: *i64, idx: i64, key: i64) -> i64 { return bc[idx]-key } 41func blob_deref(br: *i64, idx: i64) -> i64 { br[idx]=br[idx]-1; return br[idx] } 42func chunks_of(size: i64) -> i64 { return (size + BLK - 1)/BLK } // ceil(size/BLK) 43func missing_chunks(size: i64, received: i64) -> i64 { return chunks_of(size) - received } 44 45func attach(ab: *i64, aty: *i64, am: *i64, acntp: *i64, blob_idx: i64, atype: i64, meta: i64) -> i64 { 46 let i: i64 = acntp[0] 47 ab[i]=blob_idx; aty[i]=atype; am[i]=meta; acntp[0]=i+1 48 return i 49} 50 51func tcheck(pass: i64, label: *u8, fails: *i64) -> i64 { 52 sw(" " as *u8); sw(label); sw(": " as *u8) 53 if pass==1 { sw("PASS\n" as *u8) } else { sw("FAIL\n" as *u8); fails[0]=fails[0]+1 } 54 return 0 55} 56 57func main() -> i64 { 58 let fails: *i64 = sys_mmap(16) as *i64 59 fails[0]=0 60 let bh: *i64=sys_mmap(512) as *i64 61 let bs: *i64=sys_mmap(512) as *i64 62 let br: *i64=sys_mmap(512) as *i64 63 let bc: *i64=sys_mmap(512) as *i64 64 let cnt: *i64=sys_mmap(16) as *i64; cnt[0]=0 65 let key: i64 = 777 66 67 // T1/T6: content-addressed dedup -- two users send the SAME meme (hash 111) 68 let i1: i64 = blob_put(bh,bs,br,bc,cnt, 111, 1000, T_MAGIC_5001, key) // new blob (1000 bytes uploaded) 69 let cnt_a: i64 = cnt[0] 70 let i2: i64 = blob_put(bh,bs,br,bc,cnt, 111, 1000, T_MAGIC_5001, key) // SAME content -> dedup (0 bytes) 71 let cnt_b: i64 = cnt[0] 72 let ref1: i64 = br[i1] 73 // a distinct blob, then a re-send of it (bandwidth: second store adds 0 new blobs) 74 let i3: i64 = blob_put(bh,bs,br,bc,cnt, 222, T_MAGIC_2000, T_MAGIC_5002, key) 75 let cnt_c: i64 = cnt[0] 76 blob_put(bh,bs,br,bc,cnt, 222, T_MAGIC_2000, T_MAGIC_5002, key) 77 let cnt_d: i64 = cnt[0] 78 79 sw("=== nx_connect_media -- content-addressed, chunked, content-blind attachments ===\n" as *u8) 80 sw(" blob[0] size=1000 -> chunks=" as *u8); sn(chunks_of(1000)); sw(" stored blobs after 2x same + 2x same = " as *u8); sn(cnt[0]); sw(" (not 4)\n" as *u8) 81 sw(" server cipher[0]=" as *u8); sn(bc[i1]); sw(" client decrypt=" as *u8); sn(blob_decrypt(bc,i1,key)); sw("\n" as *u8) 82 sw("-- gate checks --\n" as *u8) 83 84 var t1: i64=0; if i1==i2 { if cnt_a==1 { if cnt_b==1 { if ref1==2 { t1=1 } } } } 85 tcheck(t1, "T1 content-addressed dedup (same media stored once, refcount++)" as *u8, fails) 86 87 // T2 chunking 88 var t2: i64=0; if chunks_of(1000)==4 { if chunks_of(512)==2 { if chunks_of(257)==2 { if chunks_of(256)==1 { t2=1 } } } } 89 tcheck(t2, "T2 chunking (ceil size/chunk correct)" as *u8, fails) 90 91 // T3 content-blind 92 var t3: i64=0; if bc[i1]!=T_MAGIC_5001 { if blob_decrypt(bc,i1,key)==T_MAGIC_5001 { t3=1 } } 93 tcheck(t3, "T3 content-blind blob (server cannot read; client key recovers)" as *u8, fails) 94 95 // T4 resumable upload 96 var t4: i64=0; if missing_chunks(1000,1)==3 { if missing_chunks(1000,4)==0 { t4=1 } } 97 tcheck(t4, "T4 resumable upload (missing-chunk computation correct)" as *u8, fails) 98 99 // T5 typed attachments + voice duration 100 let ab: *i64=sys_mmap(256) as *i64 101 let aty: *i64=sys_mmap(256) as *i64 102 let am: *i64=sys_mmap(256) as *i64 103 let acnt: *i64=sys_mmap(16) as *i64; acnt[0]=0 104 attach(ab,aty,am,acnt, i1, T_PHOTO, 0) 105 attach(ab,aty,am,acnt, i3, T_VOICE, 30) // voice note, 30s 106 var t5: i64=0; if aty[0]==T_PHOTO { if aty[1]==T_VOICE { if am[1]==30 { t5=1 } } } 107 tcheck(t5, "T5 typed attachments (photo/voice) + voice-note duration" as *u8, fails) 108 109 // T6 dedup bandwidth: re-sending an existing blob stores 0 new blobs (NEG-CTRL: naive per-message store would be 4) 110 var t6: i64=0; if cnt_c==2 { if cnt_d==2 { t6=1 } } 111 tcheck(t6, "T6 dedup saves re-upload (resend = 0 new blobs; naive would store 4)" as *u8, fails) 112 113 // T7 refcount tombstone: blob i1 has 2 refs; deref once -> kept; deref twice -> collectable 114 var t7: i64=0; if blob_deref(br,i1)==1 { if blob_deref(br,i1)==0 { t7=1 } } 115 tcheck(t7, "T7 refcount tombstone (shared blob collected only on last ref)" as *u8, fails) 116 117 sw(" fails=" as *u8); sn(fails[0]); sw("\n" as *u8) 118 if fails[0]==0 { sw("VERDICT: GREEN (attachments: content-addressed, chunked/resumable, content-blind, typed, refcounted)\n" as *u8); sys_exit(0) } 119 sw("VERDICT: RED\n" as *u8) 120 sys_exit(1) 121 return 1 122}