code wiki / _hdl_build / nx_vizsla_serve_gate.nx
`nx_vizsla_serve_gate.nx` source

↩ module page · 202 lines · 8361 B
1// nx_vizsla_serve_gate.nx -- VIZSLA serve gate: the HTTP transport routes a first-party browser request to the
2// right handler. Uses the daemon's `handle <base> <reqfile>` mode (router over a request read from a file =
3// gateable without socket timing). Proves: GET /<tid> -> the sovereign page; POST /v/submit -> mutation + 303
4// redirect; invalid tid blocked. 100% sovereign: writes the tenant + synthetic HTTP requests, runs the daemon
5// in handle mode, greps the response + the mutated tenant files.
6//
7// Rows:
8//   1 get-200          GET /srv -> "HTTP/1.1 200 OK"
9//   2 get-page         response carries the rendered page ("Nishi Vizsla")
10//   3 get-form         response carries the in-page form ("Add someone")
11//   4 post-303         POST /v/submit (add-contact) -> "303 See Other" + "Location: /srv"
12//   5 post-mutated     after the POST, srv.contacts.txt has CONTACT webby Web-Person inner 08-08
13//   6 neg-invalid-tid  POST with tid=".." -> NOT mutated into srv (no "Evil")
14// Evidence: VIZSLA-SERVE-GATE -> stdout + knowledge/status/vizsla_gate.log; exit 0 iff 6/6.
15// license_tier: ORIGINAL
16import "nx_syscalls.nx"
17
18func og_slen(s: *u8) -> i64 { var n: i64 = 0; while s[n] != (0 as u8) { n = n + 1 } return n }
19func og_p(s: *u8) -> i64 { sys_write(1, s, og_slen(s)); return 0 }
20
21func og_cat(dst: *u8, off: i64, s: *u8) -> i64 {
  var i: i64 = 0
  while s[i] != (0 as u8) { dst[off + i] = s[i]; i = i + 1 }
  return off + i
25}
26
27func og_catn(dst: *u8, off: i64, v: i64) -> i64 {
  var o: i64 = off
  var m: i64 = v
  if m < 0 { dst[o] = 45 as u8; o = o + 1; m = 0 - m }
  let t: *u8 = sys_mmap(28)
  var k: i64 = 0
  if m == 0 { t[0] = 48 as u8; k = 1 }
  while m > 0 { t[k] = (48 + (m % 10)) as u8; m = m / 10; k = k + 1 }
  var i: i64 = 0
  while i < k { dst[o + i] = t[k - 1 - i]; i = i + 1 }
  return o + k
38}
39
40func og_write(path: *u8, content: *u8) -> i64 {
  let fd: i64 = sys_openat_wr(path, 0x1a4)
  if fd < 0 { return 0 - 1 }
  sys_write(fd, content, og_slen(content))
  sys_close(fd)
  return 0
46}
47
48func og_readall(path: *u8, szout: *i64) -> *u8 {
  let fd: i64 = sys_openat_rd(path)
  if fd < 0 { szout[0] = 0 - 1; return 0 as *u8 }
  let sz: i64 = sys_lseek(fd, 0, 2)
  sys_lseek(fd, 0, 0)
  let buf: *u8 = sys_mmap(sz + 64)
  var got: i64 = 0
  var n: i64 = 1
  while n > 0 { n = sys_read(fd, (buf as i64 + got) as *u8, 65536); if n > 0 { got = got + n } }
  sys_close(fd)
  szout[0] = got
  return buf
60}
61
62func og_runv(elf: *u8, args: *i64, outpath: *u8) -> i64 {
  let pid: i64 = sys_fork()
  if pid == 0 {
      if (outpath as i64) != 0 {
          let ofd: i64 = sys_openat_wr(outpath, 0x1a4)
          if ofd >= 0 { sys_dup3(ofd, 1, 0); sys_dup3(ofd, 2, 0) }
      }
      let argv: *i64 = sys_mmap(128) as *i64
      argv[0] = elf as i64
      var i: i64 = 0
      var go: i64 = 1
      while go == 1 { if args[i] == 0 { go = 0 } else { argv[i + 1] = args[i]; i = i + 1 } }
      argv[i + 1] = 0
      let envp: *i64 = sys_mmap(16) as *i64
      envp[0] = 0
      sys_execve(elf, argv, envp)
      sys_exit(127)
  }
  let st: *i64 = sys_mmap(16) as *i64
  sys_wait4(pid, st, 0)
  let sig: i64 = st[0] & 0x7f
  if sig != 0 { return 128 + sig }
  return (st[0] >> 8) & 0xff
85}
86
87func og_has(path: *u8, needle: *u8) -> i64 {
  let szp: *i64 = sys_mmap(16) as *i64
  let b: *u8 = og_readall(path, szp)
  let sz: i64 = szp[0]
  let n: i64 = og_slen(needle)
  if sz < n { return 0 }
  var i: i64 = 0
  while i + n <= sz {
      var ok: i64 = 1
      var j: i64 = 0
      while j < n { if b[i + j] != needle[j] { ok = 0; j = n } else { j = j + 1 } }
      if ok == 1 { return 1 }
      i = i + 1
  }
  return 0
102}
103
104func og_row(name: *u8, pass: i64) -> i64 {
  og_p("ROW " as *u8); og_p(name)
  if pass == 1 { og_p(" PASS\n" as *u8) } else { og_p(" FAIL\n" as *u8) }
  return pass
108}
109
110func og_args(a1: *u8, a2: *u8, a3: *u8, a4: *u8, a5: *u8) -> *i64 {
  let a: *i64 = sys_mmap(64) as *i64
  a[0] = a1 as i64; a[1] = a2 as i64; a[2] = a3 as i64; a[3] = a4 as i64; a[4] = a5 as i64; a[5] = 0
  return a
114}
115
116func og_join(base: *u8, name: *u8) -> *u8 {
  let p: *u8 = sys_mmap(512)
  var o: i64 = 0
  o = og_cat(p, o, base); o = og_cat(p, o, name); p[o] = 0 as u8
  return p
121}
122
123func main(argc: i64, argv: *i64) -> i64 {
  og_p("=== VIZSLA SERVE GATE: HTTP transport routes first-party requests (handle mode) ===\n" as *u8)
  var ob: *u8 = "/tmp/nx_vizsla_serve.sov.elf" as *u8
  if argc > 1 { ob = argv[1] as *u8 }
  let pr: i64 = sys_openat_rd(ob)
  if pr >= 0 { sys_close(pr) }
  else {
      og_p(" instrument missing -> rebuilding via durable runner\n" as *u8)
      og_runv("_offc/nx_sov_build_run.elf" as *u8, og_args("nx_vizsla_serve" as *u8, 0 as *u8, 0 as *u8, 0 as *u8, 0 as *u8), "/tmp/vss_rebuild.out" as *u8)
  }
133
  let base: *u8 = sys_mmap(256)
  var bo: i64 = 0
  bo = og_cat(base, bo, "/tmp/vsG" as *u8); bo = og_catn(base, bo, sys_now_us()); bo = og_cat(base, bo, "_" as *u8)
  base[bo] = 0 as u8
138
  // a populated tenant "srv"
  og_write(og_join(base, "srv.contacts.txt" as *u8), "CONF soon_days 14\nTIER inner 14\nTIER close 45\nTIER network 120\nCONTACT seed Seed-Person inner -\n" as *u8)
  og_write(og_join(base, "srv.relate_log.txt" as *u8), "# journal\n" as *u8)
  let srvc: *u8 = og_join(base, "srv.contacts.txt" as *u8)
143
  // synthetic HTTP requests
  og_write("/tmp/vss_get.txt" as *u8, "GET /srv HTTP/1.1\r\nHost: localhost\r\n\r\n" as *u8)
  og_write("/tmp/vss_post.txt" as *u8, "POST /v/submit HTTP/1.1\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 70\r\n\r\naction=add-contact&tid=srv&id=webby&name=Web+Person&tier=inner&bday=08-08" as *u8)
  og_write("/tmp/vss_bad.txt" as *u8, "POST /v/submit HTTP/1.1\r\nContent-Length: 52\r\n\r\naction=add-contact&tid=..&id=evil&name=Evil&tier=inner" as *u8)
148
  var pass: i64 = 0
  var r: i64 = 0
151
  // rows 1-3: GET /srv -> the sovereign page
  og_runv(ob, og_args("handle" as *u8, base, "/tmp/vss_get.txt" as *u8, 0 as *u8, 0 as *u8), "/tmp/vss_rget.txt" as *u8)
  r = og_has("/tmp/vss_rget.txt" as *u8, "HTTP/1.1 200 OK" as *u8)
  pass = pass + og_row("get-200" as *u8, r)
156
  r = og_has("/tmp/vss_rget.txt" as *u8, "Nishi Vizsla" as *u8)
  pass = pass + og_row("get-page-rendered" as *u8, r)
159
  r = og_has("/tmp/vss_rget.txt" as *u8, "Add someone" as *u8)
  pass = pass + og_row("get-form-present" as *u8, r)
162
  // row 4: POST -> 303 redirect
  og_runv(ob, og_args("handle" as *u8, base, "/tmp/vss_post.txt" as *u8, 0 as *u8, 0 as *u8), "/tmp/vss_rpost.txt" as *u8)
  r = 0
  if og_has("/tmp/vss_rpost.txt" as *u8, "303 See Other" as *u8) == 1 { if og_has("/tmp/vss_rpost.txt" as *u8, "Location: /srv" as *u8) == 1 { r = 1 } }
  pass = pass + og_row("post-303-redirect" as *u8, r)
168
  // row 5: the POST actually mutated the tenant
  r = og_has(srvc, "CONTACT webby Web-Person inner 08-08" as *u8)
  pass = pass + og_row("post-mutated-tenant" as *u8, r)
172
  // row 6: a POST with an invalid (traversal) tid is blocked -> srv NOT mutated with the bogus entry
  og_runv(ob, og_args("handle" as *u8, base, "/tmp/vss_bad.txt" as *u8, 0 as *u8, 0 as *u8), "/tmp/vss_rbad.txt" as *u8)
  r = 0
  if og_has(srvc, "Evil" as *u8) == 0 { r = 1 }
  pass = pass + og_row("neg-invalid-tid-blocked" as *u8, r)
178
  let permil: i64 = (pass * 1000) / 6
  let logfd: i64 = sys_openat_append("knowledge/status/vizsla_gate.log" as *u8, 0x1a4)
  var fdi: i64 = 0
  while fdi < 2 {
      var fd: i64 = 1
      if fdi == 1 { fd = logfd }
      if fd > 0 {
          let line: *u8 = sys_mmap(256)
          var o: i64 = 0
          o = og_cat(line, o, "VIZSLA-SERVE-GATE epoch=" as *u8)
          o = og_catn(line, o, sys_now_realtime_sec())
          o = og_cat(line, o, " rows=6 pass=" as *u8)
          o = og_catn(line, o, pass)
          o = og_cat(line, o, " permil=" as *u8)
          o = og_catn(line, o, permil)
          if pass == 6 { o = og_cat(line, o, " verdict=GREEN\n" as *u8) } else { o = og_cat(line, o, " verdict=RED\n" as *u8) }
          sys_write(fd, line, o)
      }
      fdi = fdi + 1
  }
  if logfd > 0 { sys_close(logfd) }
  if pass == 6 { return 0 }
  return 1
202}
nx_vizsla_serve_gate.nx source

`nx_vizsla_serve_gate.nx` source
