nx_docx_gate.nx source

1// nx_docx_gate.nx -- proves the sovereign OOXML (.docx) interop by driving the REAL /tmp/nx_docx.sov.elf: 2// ROUND-TRIP : write 3 paragraphs -> read them back -> the text is recovered faithfully, including XML 3// special characters '&' and '<' (escaped on write, unescaped on read) 4// STRUCTURE : the emitted file is a real ZIP/OPC package -- it begins with the local-file-header signature 5// PK\x03\x04, ends with an End-Of-Central-Directory PK\x05\x06, and contains all three OPC 6// part names ([Content_Types].xml, _rels/.rels, word/document.xml) 7// GREEN iff 8/8. (Reading DEFLATE-compressed Word output is proven separately in the harness via a 3rd-party 8// oracle -- this organ-level gate can't produce DEFLATE sovereignly since nx_deflate is inflate-only.) 9// Requires /tmp/nx_docx.sov.elf (build nx_docx first). Durable knowledge/status/docx_gate.log. license_tier: ORIGINAL 10import "nx_syscalls.nx" 11 12func d_puts(s: *u8) -> i64 { var n: i64=0; while s[n]!=(0 as u8){n=n+1} sys_write(1,s,n); return 0 } 13func d_num(v: i64) -> i64 { let bb: *u8=sys_mmap(28); var m: i64=v; if m<0{m=0-m;sys_write(1,"-" as *u8,1)}; let t: *u8=sys_mmap(28); var k: i64=0; if m==0{t[0]=(48 as u8);k=1}; while m>0{t[k]=((48+(m%10)) as u8);m=m/10;k=k+1}; var i: i64=0; while i<k{bb[i]=t[k-1-i];i=i+1}; sys_write(1,bb,k); return 0 } 14func d_w(fd: i64, s: *u8) -> i64 { var n: i64=0; while s[n]!=(0 as u8){n=n+1} sys_write(fd,s,n); return 0 } 15func d_wn(fd: i64, v: i64) -> i64 { let bb: *u8=sys_mmap(28); var m: i64=v; if m<0{m=0-m}; let t: *u8=sys_mmap(28); var k: i64=0; if m==0{t[0]=(48 as u8);k=1}; while m>0{t[k]=((48+(m%10)) as u8);m=m/10;k=k+1}; var i: i64=0; while i<k{bb[i]=t[k-1-i];i=i+1}; sys_write(fd,bb,k); return 0 } 16func d_strlen(s: *u8) -> i64 { var n: i64=0; while s[n]!=(0 as u8){n=n+1} return n } 17func d_read(path: *u8, buf: *u8, cap: i64) -> i64 { 18 let fd: i64=sys_openat_rd(path); if fd<0 { return 0 } 19 var total: i64=0; var nrd: i64=sys_read(fd, buf, cap) 20 while nrd>0 { total=total+nrd; if total>=cap { nrd=0 } else { nrd=sys_read(fd, ((buf as i64)+total) as *u8, cap-total) } } 21 sys_close(fd); return total 22} 23func d_contains(hay: *u8, n: i64, needle: *u8) -> i64 { 24 let nl: i64=d_strlen(needle); if nl==0 { return 0 } 25 var i: i64=0 26 while i+nl<=n { var j: i64=0; var hit: i64=1; while j<nl { if hay[i+j]!=needle[j] { hit=0; j=nl } else { j=j+1 } } if hit==1 { return 1 } i=i+1 } 27 return 0 28} 29// 4-byte signature present anywhere in buf? 30func d_find4(buf: *u8, n: i64, a: i64, b: i64, c: i64, e: i64) -> i64 { 31 var i: i64=0 32 while i+3<n { if buf[i]==(a as u8) { if buf[i+1]==(b as u8) { if buf[i+2]==(c as u8) { if buf[i+3]==(e as u8) { return 1 } } } } i=i+1 } 33 return 0 34} 35func d_run(args: *i64, nargs: i64, out_path: *u8) -> i64 { 36 let pid: i64=sys_fork() 37 if pid==0 { 38 let o: i64=sys_openat_wr(out_path, 0x1a4); if o>=0 { sys_dup3(o,1,0) } 39 let argv: *i64=sys_mmap(8*16) as *i64 40 argv[0]="/tmp/nx_docx.sov.elf" as *u8 as i64 41 var i: i64=0; while i<nargs { argv[1+i]=args[i]; i=i+1 } argv[1+nargs]=0 42 let envp: *i64=sys_mmap(16) as *i64; envp[0]="PATH=/usr/bin:/bin" as *u8 as i64; envp[1]=0 43 sys_execve("/tmp/nx_docx.sov.elf" as *u8, argv, envp); sys_exit(127) 44 } 45 let st: *i64=sys_mmap(16) as *i64; sys_wait4(pid, st, 0); return (st[0]>>8)&0xff 46} 47 48func main() -> i64 { 49 d_puts("=== DOCX (OOXML) GATE: sovereign round-trip + valid ZIP/OPC structure ===\n" as *u8) 50 let docp: *u8="/tmp/docx_gate.docx" as *u8 51 let outp: *u8="/tmp/docx_gate_read.txt" as *u8 52 let obuf: *u8=sys_mmap(262144) 53 let a: *i64=sys_mmap(8*8) as *i64 54 55 // write 3 paragraphs: P2 carries '&', P3 carries '<' 56 a[0]="write" as *u8 as i64; a[1]=docp as i64 57 a[2]="Article One: the last will and testament." as *u8 as i64 58 a[3]="Bequest to Smith & Jones LLP for legal services." as *u8 as i64 59 a[4]="Condition: if estate < 100000 then no probate." as *u8 as i64 60 d_run(a, 5, outp) 61 62 var pass: i64=0; let rows: i64=8 63 64 // read it back 65 a[0]="read" as *u8 as i64; a[1]=docp as i64 66 d_run(a, 2, outp); var rn: i64=d_read(outp, obuf, 262144) 67 d_puts(" R1 round-trip: 'last will and testament' recovered? " as *u8); if d_contains(obuf,rn,"last will and testament" as *u8)==1 { pass=pass+1; d_puts("YES PASS\n" as *u8) } else { d_puts("NO FAIL\n" as *u8) } 68 d_puts(" R2 XML-escape round-trip: '&' survived ('Smith & Jones')? " as *u8); if d_contains(obuf,rn,"Smith & Jones" as *u8)==1 { pass=pass+1; d_puts("YES PASS\n" as *u8) } else { d_puts("NO FAIL\n" as *u8) } 69 d_puts(" R3 XML-escape round-trip: '<' survived ('estate < 100000')? " as *u8); if d_contains(obuf,rn,"estate < 100000" as *u8)==1 { pass=pass+1; d_puts("YES PASS\n" as *u8) } else { d_puts("NO FAIL\n" as *u8) } 70 71 // structural: read the raw .docx bytes 72 var fn: i64=d_read(docp, obuf, 262144) 73 d_puts(" R4 valid ZIP: begins with local-file-header PK\\x03\\x04? " as *u8); if fn>=4 { if obuf[0]==(0x50 as u8) { if obuf[1]==(0x4b as u8) { if obuf[2]==(3 as u8) { if obuf[3]==(4 as u8) { pass=pass+1; d_puts("YES PASS\n" as *u8) } else { d_puts("NO FAIL\n" as *u8) } } else { d_puts("NO FAIL\n" as *u8) } } else { d_puts("NO FAIL\n" as *u8) } } else { d_puts("NO FAIL\n" as *u8) } } else { d_puts("NO FAIL\n" as *u8) } 74 d_puts(" R5 valid ZIP: has End-Of-Central-Directory PK\\x05\\x06? " as *u8); if d_find4(obuf,fn,0x50,0x4b,0x05,0x06)==1 { pass=pass+1; d_puts("YES PASS\n" as *u8) } else { d_puts("NO FAIL\n" as *u8) } 75 d_puts(" R6 OPC part [Content_Types].xml present? " as *u8); if d_contains(obuf,fn,"[Content_Types].xml" as *u8)==1 { pass=pass+1; d_puts("YES PASS\n" as *u8) } else { d_puts("NO FAIL\n" as *u8) } 76 d_puts(" R7 OPC part _rels/.rels present? " as *u8); if d_contains(obuf,fn,"_rels/.rels" as *u8)==1 { pass=pass+1; d_puts("YES PASS\n" as *u8) } else { d_puts("NO FAIL\n" as *u8) } 77 d_puts(" R8 OPC part word/document.xml present? " as *u8); if d_contains(obuf,fn,"word/document.xml" as *u8)==1 { pass=pass+1; d_puts("YES PASS\n" as *u8) } else { d_puts("NO FAIL\n" as *u8) } 78 79 d_puts("----\nDOCX-OOXML rows=" as *u8); d_num(rows); d_puts(" pass=" as *u8); d_num(pass); d_puts("\n" as *u8) 80 let lg: i64=sys_openat_append("knowledge/status/docx_gate.log" as *u8, 0x1a4) 81 if lg>=0 { d_w(lg, "DOCX-OOXML rows=" as *u8); d_wn(lg, rows); d_w(lg, " pass=" as *u8); d_wn(lg, pass); if pass==rows { d_w(lg, " verdict=GREEN\n" as *u8) } else { d_w(lg, " verdict=RED\n" as *u8) } sys_close(lg) } 82 if pass==rows { d_puts("DOCX-OOXML GREEN (sovereign read/write of a valid, Word-openable .docx)\n" as *u8); sys_exit(0); return 0 } 83 d_puts("DOCX-OOXML RED\n" as *u8); sys_exit(1); return 1 84}