nx_site_deploy_test.nx source

1// nx_site_deploy_test.nx -- prove the team's deploy capability NEVER mutates production unsafely: a deploy 2// needs backup+verify+health+rollback; a failed health auto-rolls-back; rebuilding from a DRIFTED checkout is 3// blocked; updates are versioned. Exit 0 on 9/9. license_tier: ORIGINAL 4 5import "nx_site_deploy.nx" 6import "nx_syscalls.nx" 7 8func dt_puts(s: *u8) -> i64 { var n: i64=0; while s[n]!=(0 as u8){n=n+1} sys_write(1,s,n); return 0 } 9func dt_num(v: i64) -> i64 { let bb: *u8=sys_mmap(28); var m: i64=v; if m<0{m=0-m}; let t: *u8=sys_mmap(28); var k: i64=0; if m==0{t[0]=48;k=1}; while m>0{t[k]=48+(m%10);m=m/10;k=k+1}; var i: i64=0; while i<k{bb[i]=t[k-1-i];i=i+1}; sys_write(1,bb,k); return 0 } 10 11func main() -> i64 { 12 dt_puts("=== TEAM BUILD->DEPLOY->UPDATE on nishifamily.com -- safety gates ===\n" as *u8) 13 let safe_full: i64 = sd_safe(1,1,1,1) 14 let safe_noverify: i64 = sd_safe(1,0,1,1) 15 let safe_nobackup: i64 = sd_safe(0,1,1,1) 16 let v_ok: i64 = sd_verdict(safe_full, 1) 17 let v_health_fail: i64 = sd_verdict(safe_full, 0) 18 let v_unsafe: i64 = sd_verdict(safe_noverify, 1) 19 dt_puts(" safe(all gates)=" as *u8); dt_num(safe_full); dt_puts(" safe(no-verify)=" as *u8); dt_num(safe_noverify); dt_puts("\n" as *u8) 20 dt_puts(" verdict: clean=" as *u8); dt_puts(sd_verdict_label(v_ok)); dt_puts(" health-fails=" as *u8); dt_puts(sd_verdict_label(v_health_fail)); dt_puts(" unsafe=" as *u8); dt_puts(sd_verdict_label(v_unsafe)); dt_puts("\n" as *u8) 21 22 // versioned updates: clean deploy bumps the live version; rollback restores a prior one 23 var ver: i64 = 0 24 ver = sd_version(ver, v_ok) // 1 25 ver = sd_version(ver, sd_verdict(safe_full, 1)) // 2 26 let ver_after_fail: i64 = sd_version(ver, v_health_fail) // stays 2 (rolled back, no new version) 27 28 // the DRIFT guard: rebuilding the compiled daemon from this drifted checkout is BLOCKED (would regress) 29 let rebuild_drift: i64 = sd_rebuild_safe(0, 1) // source not pinned + drift -> unsafe 30 let rebuild_clean: i64 = sd_rebuild_safe(1, 0) // pinned + no drift -> safe 31 32 let r: *i64 = sys_mmap(8*8) as *i64 33 r[0]=0; if safe_full == 1 { r[0]=1 } 34 r[1]=0; if safe_noverify == 0 { if safe_nobackup == 0 { r[1]=1 } } // missing any gate = unsafe 35 r[2]=0; if v_ok == SD_DEPLOYED { r[2]=1 } 36 r[3]=0; if v_health_fail == SD_ROLLED_BACK { r[3]=1 } // auto-rollback, site stays up 37 r[4]=0; if v_unsafe == SD_BLOCKED { r[4]=1 } // unsafe = never touch prod 38 r[5]=0; if ver == 2 { if ver_after_fail == 2 { r[5]=1 } } // 2 clean updates; rollback didn't bump 39 r[6]=0; if sd_can_rollback(2, 0) == 1 { if sd_can_rollback(2, 5) == 0 { r[6]=1 } } 40 r[7]=0; if rebuild_drift == 0 { r[7]=1 } // drifted rebuild BLOCKED (no regression) 41 r[8]=0; if rebuild_clean == 1 { r[8]=1 } 42 var pass: i64 = 0; var i: i64 = 0 43 while i < 9 { pass = pass + r[i]; i = i + 1 } 44 dt_puts("---- passed " as *u8); dt_num(pass); dt_puts("/9 ----\n" as *u8) 45 if pass == 9 { 46 dt_puts(" SAFE: the team can build->deploy->update nishifamily.com with backup+verify+health+auto-rollback,\n" as *u8) 47 dt_puts(" versioned. It REFUSES to rebuild the compiled daemon from a drifted checkout -- the live family\n" as *u8) 48 dt_puts(" site is never regressed. (Live publish path = recon next: doc-root or wiki, not a daemon rebuild.)\n" as *u8) 49 sys_exit(0); return 0 50 } 51 dt_puts(" FAIL\n" as *u8); sys_exit(1); return 1 52}