code wiki / _hdl_build / nx_dev_run_smoke.nx
`nx_dev_run_smoke.nx` source

1// nx_dev_run_smoke.nx -- SINGLE-CALL smoke for /api/dev/run: mint a valid dev_build cap (da_authz's secret
2// selection) + drive da_handle ONCE with a run request for an allowlisted organ. Prints the JSON. If it shows
3// "exit":0 the run route EXECUTES in a fresh (server-like) context -> the gate's T14 fork-fail was multi-call
4// accumulation, not a shippable bug. expect_exit: 0  license_tier: ORIGINAL
5import "nx_dev_api.nx"
6const K_MAGIC_1024: i64 = 1024
7const K_MAGIC_3600: i64 = 3600
8const K_MAGIC_8192: i64 = 8192
9
10func sm_puts(s: *u8) -> i64 { sys_write(1, s, da_slen(s)); return 0 }
11func sm_has(hay: *u8, n: i64, needle: *u8) -> i64 { let nl: i64=da_slen(needle); if nl==0 {return 1} var i: i64=0; while i+nl<=n { var j: i64=0; var ok: i64=1; while j<nl { if hay[i+j]!=needle[j]{ok=0;j=nl} else {j=j+1} } if ok==1{return 1} i=i+1 } return 0 }
12
13func main() -> i64 {
14    // mint a valid cap with the SAME secret da_authz uses (keyfile if present, else const)
15    let gksz: *i64 = sys_mmap(16) as *i64; gksz[0]=0
16    let gkf: *u8 = sys_read_file(DA_CAP_KEYFILE, gksz)
17    var gsec: *u8 = DA_CAP_SECRET
18    var gsecl: i64 = da_slen(DA_CAP_SECRET)
19    if (gkf as i64) != 0 { if gksz[0] > 0 { gsec = gkf; gsecl = gksz[0] } }
20    let vcap: *u8 = sys_mmap(K_MAGIC_1024)
21    let vlen: i64 = capt_issue(gsec, gsecl, "dev_build" as *u8, 9, sys_now_realtime_sec() + K_MAGIC_3600, 42, vcap, K_MAGIC_1024)
22
23    // one POST /api/dev/run organ=nx_safetensors
24    let req: *u8 = sys_mmap(K_MAGIC_8192)
25    var o: i64 = da_cat(req, 0, "POST /api/dev/run HTTP/1.1\r\nHost: x\r\nX-Nishi-Cap: " as *u8)
26    var i: i64 = 0; while i < vlen { req[o]=vcap[i]; o=o+1; i=i+1 }
27    o = da_cat(req, o, "\r\nContent-Length: 20\r\n\r\norgan=nx_safetensors" as *u8)
28
29    let out: *u8 = sys_mmap(DA_OUTCAP + 16)
30    let n: i64 = da_handle(req, o, out)
31    // GATE: the run route must return exit:0 AND carry nx_safetensors's own GREEN output ("pass=6/6") = proof it
32    // REALLY exec'd + captured, single-call (the production/server path).
33    let e_ok: i64 = sm_has(out, n, "\"exit\":0" as *u8)
34    let o_ok: i64 = sm_has(out, n, "pass=6/6" as *u8)
35    sm_puts("nx_dev_run_smoke: exit0=" as *u8); if e_ok==1 { sm_puts("Y" as *u8) } else { sm_puts("N" as *u8) }
36    sm_puts(" organ-actually-ran=" as *u8); if o_ok==1 { sm_puts("Y" as *u8) } else { sm_puts("N" as *u8) }
37    sm_puts("\n" as *u8)
38    if e_ok==1 { if o_ok==1 { sm_puts("GREEN -- /api/dev/run EXECUTES an allowlisted organ single-call (the production path)\n" as *u8); return 0 } }
39    sm_puts("RED -- run route did not execute+capture\n" as *u8)
40    sys_exit(1); return 1
41}
nx_dev_run_smoke.nx source

`nx_dev_run_smoke.nx` source
