nx_pub_promote_gate.nx source

1// nx_pub_promote_gate.nx -- R4 proof for THE NISHI PUBLISHER promote/rollback. (1) ATOMIC promote: deploy v1, 2// live==v1, and NO live.tmp residue (rename consumed the temp -> the cutover was a move, not a half-written 3// copy); (2) KEEP-PREVIOUS: deploy v2 -> live==v2 AND live.prev==v1 (the prior version is preserved); (3) 4// ROLLBACK: pub_rollback restores live==v1; (4) NEG-CONTROL: rollback with no prior version honestly returns 0 5// (never fabricates a restore). Sovereign, per-wsid isolated. license_tier: ORIGINAL expect_exit: 0 6import "nx_syscalls.nx" 7import "nx_publisher.nx" 8import "nx_runpath.nx" 9 10func g_w(s: *u8) -> i64 { var n: i64=0; while s[n]!=(0 as u8){n=n+1} sys_write(1,s,n); return 0 } 11func g_n(v: i64) -> i64 { var m: i64=v; if m<0{g_w("-" as *u8);m=0-m} let t:*u8=sys_mmap(24); var k:i64=0; if m==0{t[0]=48 as u8;k=1} while m>0{t[k]=(48+(m%10)) as u8;m=m/10;k=k+1} var i:i64=0; let o:*u8=sys_mmap(24); while i<k{o[i]=t[k-1-i];i=i+1} sys_write(1,o,k); return 0 } 12func g_row(id: *u8, ok: i64, pass: *i64) -> i64 { g_w(" " as *u8); g_w(id); g_w(": " as *u8); if ok==1 { g_w("OK\n" as *u8); pass[0]=pass[0]+1 } else { g_w("FAIL\n" as *u8) } return 0 } 13func dg_make(path: *u8, content: *u8) -> i64 { 14 let fd: i64 = sys_openat_wr(path, 0x1a4); if fd < 0 { return 0 } 15 var n: i64 = 0; while content[n]!=(0 as u8){n=n+1} 16 sys_write(fd, content, n); sys_close(fd); return 1 17} 18 19func main() -> i64 { 20 let pass: *i64 = sys_mmap(8) as *i64; pass[0]=0 21 g_w("=== NX-PUBLISHER PROMOTE GATE (atomic promote + keep-prev + rollback) ===\n" as *u8) 22 let wsid: *u8 = sys_mmap(64); rp_wsid(wsid); rp_ensure(wsid) 23 let src: *u8 = sys_mmap(512); rp_path(wsid, "pr_src" as *u8, src) 24 let stage: *u8 = sys_mmap(512); rp_path(wsid, "pr_stage" as *u8, stage) 25 let live: *u8 = sys_mmap(512); rp_path(wsid, "pr_live" as *u8, live) 26 let prev: *u8 = sys_mmap(640); pub_pcat(live, ".prev" as *u8, prev) 27 let tmp: *u8 = sys_mmap(640); pub_pcat(live, ".tmp" as *u8, tmp) 28 let freshlive: *u8 = sys_mmap(512); rp_path(wsid, "pr_fresh" as *u8, freshlive) 29 30 // v1 31 dg_make(src, "VERSION-ONE\n" as *u8) 32 let sha1: *u8 = sys_mmap(72); pub_sha_file(src, sha1) 33 let r1: i64 = pub_deploy(sha1, src, stage, live) 34 let live_v1: i64 = pub_sha_match(live, sha1) 35 let no_tmp: i64 = pub_exists(tmp) // expect 0 (rename consumed it) 36 37 // v2 (keep previous) 38 dg_make(src, "VERSION-TWO is longer\n" as *u8) 39 let sha2: *u8 = sys_mmap(72); pub_sha_file(src, sha2) 40 let r2: i64 = pub_deploy(sha2, src, stage, live) 41 let live_v2: i64 = pub_sha_match(live, sha2) 42 let prev_v1: i64 = pub_sha_match(prev, sha1) // prev preserved v1 43 44 // rollback -> v1 45 let rb: i64 = pub_rollback(live) 46 let rolled_v1: i64 = pub_sha_match(live, sha1) 47 48 // neg-control: rollback with no prior version 49 let rbx: i64 = pub_rollback(freshlive) 50 51 g_w(" v1: deploy="); g_n(r1); g_w(" live==v1="); g_n(live_v1); g_w(" no_tmp_residue="); g_n((no_tmp==0) as i64); g_w("\n") 52 g_w(" v2: deploy="); g_n(r2); g_w(" live==v2="); g_n(live_v2); g_w(" prev==v1="); g_n(prev_v1); g_w("\n") 53 g_w(" rollback="); g_n(rb); g_w(" live==v1="); g_n(rolled_v1); g_w(" neg(no-prev) rollback="); g_n(rbx); g_w("\n") 54 55 g_row("ATOMIC PROMOTE: v1 live, rename left no .tmp residue (move, not half-copy)" as *u8, ((r1==1) as i64) & ((live_v1==1) as i64) & ((no_tmp==0) as i64), pass) 56 g_row("KEEP-PREVIOUS: v2 promoted and the prior version saved as live.prev" as *u8, ((r2==1) as i64) & ((live_v2==1) as i64) & ((prev_v1==1) as i64), pass) 57 g_row("ROLLBACK: restored live to the previous version (v1)" as *u8, ((rb==1) as i64) & ((rolled_v1==1) as i64), pass) 58 g_row("NEG-CONTROL: rollback with no prior version returns 0 (no fabricated restore)" as *u8, (rbx==0) as i64, pass) 59 60 g_w("PUB-PROMOTE rows=4 pass="); g_n(pass[0]) 61 if pass[0]==4 { g_w(" verdict=GREEN\n"); sys_exit(0); return 0 } 62 g_w(" verdict=RED\n"); sys_exit(1); return 1 63}