code wiki / _hdl_build / nx_hub_render.nx
`nx_hub_render.nx` source

↩ module page · 136 lines · 9969 B
1// nx_hub_render.nx -- the LEVELED hub index renderer: registry + a viewer's level -> the HTML they may see.
2// Realizes the operator's "/hub access levels": the gateway resolves the session's level, then this emits a
3// card ONLY for each CURRENT hub-zone artifact whose required level <= the viewer's level. NO-LEAK AT THE
4// RENDER LAYER: a viewer's bytes never contain a member/operator card (not hidden by CSS -- absent from the
5// HTML), so even view-source cannot reveal a gated area. "Current" = the latest load_date row per path with
6// is_current=1 (a tombstone/older row is skipped). Sovereign: slk_* + nx_maturity_registry classifiers. ORIGINAL.
7import "nx_site_lock_lib.nx"
8import "nx_maturity_registry.nx"
9import "nx_native_config.nx"     // sovereign content-addressed data store (ncfg_*), NOT tsv -- the card registry
10
11// 2026-07-29 seq1232 (P2 safe-subset): per-call scratch -> lazy statics (page-granular mmaps with no
12// munmap leaked ~4KB/site/call in the hub_gw request path; daemon never forks, boxes consumed before reuse).
13static hr_scr_fs: *i64
14static hr_scr_fe: *i64
15static hr_scr_crk: *i64
16static hr_scr_crv: *i64
17func hr_app(dst: *u8, off: i64, s: *u8) -> i64 { var o: i64=off; var i: i64=0; while s[i]!=(0 as u8){dst[o]=s[i]; o=o+1; i=i+1} return o }
18func hr_appb(dst: *u8, off: i64, src: *u8, n: i64) -> i64 { var o: i64=off; var i: i64=0; while i<n {dst[o]=src[i]; o=o+1; i=i+1} return o }
19
20// emit ONE core card ONLY if its required level <= the viewer's level. NO-LEAK: a gated card is
21// ABSENT from the HTML (never CSS-hidden) so view-source cannot reveal it. req: 0=open/anon 1=family
22// 2=member 3=operator (matches nx_maturity_registry mr_level_of public/viewer/member/operator).
23func hr_card(out: *u8, o: i64, level: i64, req: i64, href: *u8, title: *u8, badge: *u8) -> i64 {
  if req > level { return o }
  var p: i64 = o
  p = hr_app(out, p, "  <a class=\"card\" href=\"" as *u8)
  p = hr_app(out, p, href)
  p = hr_app(out, p, "\"><b>" as *u8)
  p = hr_app(out, p, title)
  p = hr_app(out, p, "</b><span class=\"lvl\">" as *u8)
  p = hr_app(out, p, badge)
  p = hr_app(out, p, "</span></a>\n" as *u8)
  return p
34}
35
36// is the row at exact path [path_s,path_e) with load=`load` the LATEST row for that path? (dedup for promotes)
37func hr_is_latest(reg: *u8, reglen: i64, path_s: i64, path_e: i64, load: i64) -> i64 {
  if (hr_scr_fs as i64) == 0 { hr_scr_fs = sys_mmap(8) as *i64 }
  if (hr_scr_fe as i64) == 0 { hr_scr_fe = sys_mmap(8) as *i64 }
  let fs: *i64 = hr_scr_fs; let fe: *i64 = hr_scr_fe
  let plen: i64 = path_e - path_s
  var ls: i64 = 0; var latest: i64 = 1
  while ls < reglen {
      let le: i64 = slk_line_end(reg, reglen, ls)
      if le > ls { if reg[ls] != (35 as u8) {
          if slk_field(reg, ls, le, 6, fs, fe) == 1 {
              slk_field(reg, ls, le, 3, fs, fe)
              if slk_eq(slk_at(reg, fs[0]), fe[0] - fs[0], slk_at(reg, path_s), plen) == 1 {
                  slk_field(reg, ls, le, 5, fs, fe)
                  if slk_atoi(reg, fs[0], fe[0]) > load { latest = 0 }
              }
          }
      } }
      ls = le + 1
  }
  return latest
57}
58
59// emit the leveled hub index HTML into out; return byte length.
60func mr_render_index(reg: *u8, reglen: i64, level: i64, with_upgrade: i64, out: *u8, cap: i64) -> i64 {
  var o: i64 = 0
  o = hr_app(out, o, "<!DOCTYPE html>\n<html lang=\"en\"><head><meta charset=\"utf-8\"><meta name=\"viewport\" content=\"width=device-width, initial-scale=1\"><title>Nishi Family Hub</title>\n" as *u8)
  o = hr_app(out, o, "<style>body{font-family:-apple-system,Segoe UI,Roboto,sans-serif;max-width:760px;margin:6vh auto;padding:0 24px;color:#161622;line-height:1.6}h1{font-size:2rem;margin-bottom:4px}.sub{color:#555}.cards{display:grid;gap:14px;margin-top:28px}.card{display:block;padding:18px 20px;border:1px solid #d8d8e0;border-radius:12px;text-decoration:none;color:#161622}.card:hover{border-color:#2a4d8f;background:#f6f8fc}.card b{color:#2a4d8f;font-size:1.1rem}.lvl{float:right;font-size:.78rem;color:#999;border:1px solid #e3e3ea;border-radius:20px;padding:1px 9px}footer{margin-top:36px;color:#aaa;font-size:.8rem}</style></head>\n" as *u8)
  o = hr_app(out, o, "<body>\n<h1>Nishi Family Hub</h1>\n<p class=\"sub\">Welcome home &mdash; jump into any area.</p>\n<div class=\"cards\">\n" as *u8)
  // ---- core FAMILY AREAS (always present in the hub, the operator's "built-out" hub) ----
  // ---- CORE AREAS, from the SOVEREIGN native store (nx_native_config, NOT tsv). Each card row is
  //      {href, title, access}; emit level-gated (no-leak): req = mr_level_of(access), shown iff
  //      req <= viewer level. Seeded by nx_hub_cards_seed. Store missing -> zero cards (fail-closed). ----
  let ch: *i64 = ncfg_open("knowledge/store/hub-cards-\x00" as *u8)
  if (ch as i64) != 0 {
      let ccnt: i64 = ncfg_count(ch, "card\x00" as *u8)
      if (hr_scr_crk as i64) == 0 { hr_scr_crk = sys_mmap(8 * 8) as *i64 }
      if (hr_scr_crv as i64) == 0 { hr_scr_crv = sys_mmap(8 * 8) as *i64 }
      let crk: *i64 = hr_scr_crk
      let crv: *i64 = hr_scr_crv
      var ci: i64 = 0
      while ci < ccnt {
          let crf: i64 = ncfg_row(ch, "card\x00" as *u8, ci, crk, crv, 8)
          if crf > 0 {
              let chref: *u8 = ncfg_field(crk, crv, crf, "href\x00" as *u8)
              let ctitle: *u8 = ncfg_field(crk, crv, crf, "title\x00" as *u8)
              let caccess: *u8 = ncfg_field(crk, crv, crf, "access\x00" as *u8)
              var can: i64 = 0
              while caccess[can] != (0 as u8) { can = can + 1 }
              let creq: i64 = mr_level_of(caccess, can)
              // CONSOLIDATE: the Games card links to the UNIFIED /hub/games portal (all games in one space,
              // registry-driven) instead of the legacy sites.elf /games board-games page.
              var chn: i64 = 0
              while chref[chn] != (0 as u8) { chn = chn + 1 }
              var href2: *u8 = chref
              if slk_eq(chref, chn, "/games" as *u8, 6) == 1 { href2 = "/hub/games" as *u8 }
              o = hr_card(out, o, level, creq, href2, ctitle, caccess)
          }
          ci = ci + 1
      }
  }
  if (hr_scr_fs as i64) == 0 { hr_scr_fs = sys_mmap(8) as *i64 }
  if (hr_scr_fe as i64) == 0 { hr_scr_fe = sys_mmap(8) as *i64 }
  let fs: *i64 = hr_scr_fs; let fe: *i64 = hr_scr_fe
  var ls: i64 = 0
  while ls < reglen {
      let le: i64 = slk_line_end(reg, reglen, ls)
      if le > ls { if reg[ls] != (35 as u8) {
          if slk_field(reg, ls, le, 6, fs, fe) == 1 {
              slk_field(reg, ls, le, 6, fs, fe); let cur: i64 = slk_atoi(reg, fs[0], fe[0])
              slk_field(reg, ls, le, 1, fs, fe); let zone: i64 = mr_zone_of(mr_tier_of(slk_at(reg, fs[0]), fe[0] - fs[0]))
              slk_field(reg, ls, le, 2, fs, fe); let acc_s: i64 = fs[0]; let acc_e: i64 = fe[0]; let req: i64 = mr_level_of(slk_at(reg, fs[0]), fe[0] - fs[0])
              slk_field(reg, ls, le, 3, fs, fe); let p_s: i64 = fs[0]; let p_e: i64 = fe[0]
              slk_field(reg, ls, le, 5, fs, fe); let load: i64 = slk_atoi(reg, fs[0], fe[0])
              slk_field(reg, ls, le, 4, fs, fe); let t_s: i64 = fs[0]; let t_e: i64 = fe[0]
              if cur == 1 { if zone == 3 { if req <= level { if hr_is_latest(reg, reglen, p_s, p_e, load) == 1 {
                  o = hr_app(out, o, "  <a class=\"card\" href=\"/hub/" as *u8)
                  o = hr_appb(out, o, slk_at(reg, p_s), p_e - p_s)
                  o = hr_app(out, o, "\"><b>" as *u8)
                  o = hr_appb(out, o, slk_at(reg, t_s), t_e - t_s)
                  o = hr_app(out, o, "</b><span class=\"lvl\">" as *u8)
                  o = hr_appb(out, o, slk_at(reg, acc_s), acc_e - acc_s)
                  o = hr_app(out, o, "</span></a>\n" as *u8)
              } } } }
          }
      } }
      ls = le + 1
  }
  o = hr_app(out, o, "</div>\n<footer>Nishi sovereign hub &middot; nx_hub_gw &middot; leveled by your session</footer>\n" as *u8)
  // ANON render (with_upgrade=1, served on a no-token navigation): if the visitor DOES have a session
  // token in sessionStorage, re-fetch /hub WITH the header to upgrade to their full leveled hub. Guests
  // have no token -> they stay on the open games hub. Only emitted here (not on the full render) so a
  // valid session never re-fetches -> no loop.
  if with_upgrade == 1 {
      o = hr_app(out, o, "<script>(function(){var t=sessionStorage.getItem('nsess');if(t){fetch('/hub',{headers:{'X-Nishi-Session':t}}).then(function(r){return r.ok?r.text():null}).then(function(x){if(x){document.open();document.write(x);document.close()}})}})();</script>\n" as *u8)
  }
  // no-cookie click-shim: card clicks (/hub/*) are fetched WITH the X-Nishi-Session header + document.write'd,
  // so the session rides every gated navigation (mirrors the wiki OLGD_SPA). 403 -> shown inline, no leak.
  o = hr_app(out, o, "<script>(function(){var t=sessionStorage.getItem('nsess');document.addEventListener('click',function(e){var a=e.target.closest&&e.target.closest('a');if(!a)return;var h=a.getAttribute('href');if(!h)return;if(h.indexOf('/hub/')!=0)return;e.preventDefault();fetch(h,{headers:{'X-Nishi-Session':t}}).then(function(r){return r.ok?r.text():(r.status==403?'<h1>Your access level cannot open this area.</h1><p><a href=/hub>Back to the hub</a></p>':null)}).then(function(x){if(x){document.open();document.write(x);document.close()}else{location='/login'}})})})();</script>\n<script>(function(){setInterval(function(){var s=sessionStorage.getItem('nsess');if(!s)return;fetch('/whoami',{headers:{'X-Nishi-Session':s}}).then(function(r){return r.ok?r.json():null}).then(function(j){if(j&&j.nsess)sessionStorage.setItem('nsess',j.nsess)})},600000)})();</script>\n</body></html>\n" as *u8)
  return o
136}
nx_hub_render.nx source

`nx_hub_render.nx` source
