nx_hr_admin_page_gate.nx source

1// nx_hr_admin_page_gate.nx -- referee for the /hr admin console (nx_hr_admin_page). PROVES: 2// * an OWNER view renders the live roster (elderwesto + brad/jensen/kelli), the role labels, the statuses, and 3// the invite form; * a NON-OWNER view is the owner-only stub and LEAKS NO roster (no "brad", no controls) ; 4// * SELF-LOCKOUT PREVENTION: the owner has NO suspend control -> exactly 3 suspend forms (one per member), the 5// owner row shows none. GREEN iff every row matches. Durable -> knowledge/status/hr_admin_page_gate.log. 6import "nx_hr_admin_page.nx" 7import "nx_g_puts_lib.nx" 8import "nx_hr_admin.nx" 9import "nx_hr.nx" 10import "nx_syscalls.nx" 11 12func g_num(v: i64) -> i64 { let bb: *u8=sys_mmap(28); var m: i64=v; if m<0{m=0-m;sys_write(1,"-" as *u8,1)}; let t: *u8=sys_mmap(28); var k: i64=0; if m==0{t[0]=(48 as u8);k=1}; while m>0{t[k]=((48+(m%10)) as u8);m=m/10;k=k+1}; var i: i64=0; while i<k{bb[i]=t[k-1-i];i=i+1}; sys_write(1,bb,k); return 0 } 13func g_w(fd: i64, s: *u8) -> i64 { var n: i64=0; while s[n]!=(0 as u8){n=n+1} sys_write(fd,s,n); return 0 } 14func g_wn(fd: i64, v: i64) -> i64 { let bb: *u8=sys_mmap(28); var m: i64=v; if m<0{m=0-m}; let t: *u8=sys_mmap(28); var k: i64=0; if m==0{t[0]=(48 as u8);k=1}; while m>0{t[k]=((48+(m%10)) as u8);m=m/10;k=k+1}; var i: i64=0; while i<k{bb[i]=t[k-1-i];i=i+1}; sys_write(fd,bb,k); return 0 } 15func gtrunc(path: *u8) -> i64 { let fd: i64 = sys_openat_wr(path, 0x1a4); if fd>=0 { sys_close(fd) } return 0 } 16func g_mkpfx(base: *u8, ms: i64, out: *u8) -> i64 { var o: i64=0; while base[o]!=(0 as u8){out[o]=base[o];o=o+1} let t: *u8=sys_mmap(28); var m: i64=ms; var k: i64=0; if m==0{t[0]=48 as u8;k=1} while m>0{t[k]=(48+(m%10)) as u8;m=m/10;k=k+1} var z: i64=k-1; while z>=0{out[o]=t[z];o=o+1;z=z-1} out[o]=0 as u8; return o } 17func g_contains(hay: *u8, hlen: i64, needle: *u8) -> i64 { var nl: i64=0; while needle[nl]!=(0 as u8){nl=nl+1} if nl==0 {return 1} var i: i64=0; while i+nl<=hlen { var j: i64=0; var ok: i64=1; while j<nl { if hay[i+j]!=needle[j]{ok=0;j=nl} else {j=j+1} } if ok==1 {return 1} i=i+1 } return 0 } 18func g_count(hay: *u8, hlen: i64, needle: *u8) -> i64 { var nl: i64=0; while needle[nl]!=(0 as u8){nl=nl+1} if nl==0 {return 0} var c: i64=0; var i: i64=0; while i+nl<=hlen { var j: i64=0; var ok: i64=1; while j<nl { if hay[i+j]!=needle[j]{ok=0;j=nl} else {j=j+1} } if ok==1 {c=c+1; i=i+nl} else {i=i+1} } return c } 19func chk(got: i64, want: i64, label: *u8) -> i64 { 20 g_puts(" "); g_puts(label); g_puts(" got="); g_num(got); g_puts(" want="); g_num(want) 21 if got == want { g_puts(" PASS\n"); return 1 } 22 g_puts(" FAIL\n"); return 0 23} 24 25func main() -> i64 { 26 g_puts("=== NISHI HR ADMIN PAGE GATE (owner-gated roster console, sovereign, no self-lockout) ===\n" as *u8) 27 var pass: i64=0; var rows: i64=0 28 let hr: *u8 = sys_mmap(96); g_mkpfx("/tmp/nx_hap_hr_" as *u8, sys_now_ms(), hr) // seg_store prefix (cutover) 29 let NR: *u8 = "nishi_site_admin" as *u8; let NRN: i64 = 16 30 let fam: *u8 = "andelin" as *u8 31 let cid: *u8 = sys_mmap(96) 32 hra_enroll(hr, NR, NRN, "elderwesto" as *u8, 10, HRA_LVL_OWNER, fam, 1000, "system" as *u8, cid) 33 hra_invite(hr, NR, NRN, "brad" as *u8, 4, HRA_LVL_MEMBER, fam, 1000, "elderwesto" as *u8, cid) 34 hra_invite(hr, NR, NRN, "jensen" as *u8, 6, HRA_LVL_MEMBER, fam, 1000, "elderwesto" as *u8, cid) 35 hra_invite(hr, NR, NRN, "kelli" as *u8, 5, HRA_LVL_MEMBER, fam, 1000, "elderwesto" as *u8, cid) 36 37 // OWNER view 38 let ob: *u8 = sys_mmap(262144) 39 let lo: i64 = hap_emit(hr, 1, ob, 262144) 40 rows=rows+1; pass=pass+chk(g_contains(ob, lo, "elderwesto" as *u8), 1, "owner view shows elderwesto" as *u8) 41 rows=rows+1; pass=pass+chk(g_contains(ob, lo, "brad" as *u8), 1, "owner view shows brad" as *u8) 42 rows=rows+1; pass=pass+chk(g_contains(ob, lo, "jensen" as *u8), 1, "owner view shows jensen" as *u8) 43 rows=rows+1; pass=pass+chk(g_contains(ob, lo, "kelli" as *u8), 1, "owner view shows kelli" as *u8) 44 rows=rows+1; pass=pass+chk(g_contains(ob, lo, "owner (super-admin)" as *u8), 1, "owner view shows the owner role label" as *u8) 45 rows=rows+1; pass=pass+chk(g_contains(ob, lo, ">member<" as *u8), 1, "owner view shows the member role" as *u8) 46 rows=rows+1; pass=pass+chk(g_contains(ob, lo, "invited" as *u8), 1, "owner view shows invited status" as *u8) 47 rows=rows+1; pass=pass+chk(g_contains(ob, lo, "Invite a family member" as *u8), 1, "owner view has the invite form" as *u8) 48 // SELF-LOCKOUT PREVENTION: 3 members suspendable, owner not -> exactly 3 suspend forms 49 rows=rows+1; pass=pass+chk(g_count(ob, lo, "action=/hr/suspend" as *u8), 3, "exactly 3 suspend controls (members only, owner not suspendable)" as *u8) 50 51 // NON-OWNER view (leak-checks) 52 let nb: *u8 = sys_mmap(262144) 53 let ln: i64 = hap_emit(hr, 0, nb, 262144) 54 rows=rows+1; pass=pass+chk(g_contains(nb, ln, "owner-only" as *u8), 1, "non-owner view = owner-only stub" as *u8) 55 rows=rows+1; pass=pass+chk(g_contains(nb, ln, "brad" as *u8), 0, "non-owner view LEAKS NO roster (no brad)" as *u8) 56 rows=rows+1; pass=pass+chk(g_contains(nb, ln, "action=/hr/suspend" as *u8), 0, "non-owner view has NO admin controls" as *u8) 57 58 g_puts("----\nNISHI-HR-ADMIN-PAGE-GATE rows=" as *u8); g_num(rows); g_puts(" pass=" as *u8); g_num(pass) 59 if pass==rows { g_puts(" verdict=GREEN\n" as *u8) } else { g_puts(" verdict=RED\n" as *u8) } 60 let lg: i64=sys_openat_append("knowledge/status/hr_admin_page_gate.log" as *u8, 0x1a4) 61 if lg>=0 { 62 g_w(lg, "NISHI-HR-ADMIN-PAGE-GATE rows=" as *u8); g_wn(lg, rows); g_w(lg, " pass=" as *u8); g_wn(lg, pass) 63 if pass==rows { g_w(lg, " verdict=GREEN\n" as *u8) } else { g_w(lg, " verdict=RED\n" as *u8) } 64 sys_close(lg) 65 } 66 if pass==rows { sys_exit(0); return 0 } 67 sys_exit(1); return 1 68}