code wiki / _hdl_build / nx_vizsla_serve_gate.nx
nx_vizsla_serve_gate.nx source
↩ module page · 210 lines · 8911 B
1// nx_vizsla_serve_gate.nx -- VIZSLA serve gate: the HTTP transport routes a first-party browser request to the
2// right handler. Uses the daemon's `handle <base> <reqfile>` mode (router over a request read from a file =
3// gateable without socket timing). Proves: GET /<tid> -> the sovereign page; POST /v/submit -> mutation + 303
4// redirect; invalid tid blocked. 100% sovereign: writes the tenant + synthetic HTTP requests, runs the daemon
5// in handle mode, greps the response + the mutated tenant files.
6//
7// Rows:
8// 1 get-200 GET /srv -> "HTTP/1.1 200 OK"
9// 2 get-page response carries the rendered page ("Nishi Vizsla")
10// 3 get-form response carries the in-page form ("Add someone")
11// 4 post-303 POST /v/submit (add-contact) -> "303 See Other" + "Location: /srv"
12// 5 post-mutated after the POST, srv.contacts.txt has CONTACT webby Web-Person inner 08-08
13// 6 neg-invalid-tid POST with tid=".." -> NOT mutated into srv (no "Evil")
14// Evidence: VIZSLA-SERVE-GATE -> stdout + knowledge/status/vizsla_gate.log; exit 0 iff 6/6.
15// license_tier: ORIGINAL
16import "nx_syscalls.nx"
17import "nx_gate_verdict.nx"
18
19func og_slen(s: *u8) -> i64 { var n: i64 = 0; while s[n] != (0 as u8) { n = n + 1 } return n }
20func og_p(s: *u8) -> i64 { sys_write(1, s, og_slen(s)); return 0 }
21
22func og_cat(dst: *u8, off: i64, s: *u8) -> i64 {
23 var i: i64 = 0
24 while s[i] != (0 as u8) { dst[off + i] = s[i]; i = i + 1 }
25 return off + i
26}
27
28func og_catn(dst: *u8, off: i64, v: i64) -> i64 {
29 var o: i64 = off
30 var m: i64 = v
31 if m < 0 { dst[o] = 45 as u8; o = o + 1; m = 0 - m }
32 let t: *u8 = sys_mmap(28)
33 var k: i64 = 0
34 if m == 0 { t[0] = 48 as u8; k = 1 }
35 while m > 0 { t[k] = (48 + (m % 10)) as u8; m = m / 10; k = k + 1 }
36 var i: i64 = 0
37 while i < k { dst[o + i] = t[k - 1 - i]; i = i + 1 }
38 return o + k
39}
40
41func og_write(path: *u8, content: *u8) -> i64 {
42 let fd: i64 = sys_openat_wr(path, 0x1a4)
43 if fd < 0 { return 0 - 1 }
44 sys_write(fd, content, og_slen(content))
45 sys_close(fd)
46 return 0
47}
48
49func og_readall(path: *u8, szout: *i64) -> *u8 {
50 let fd: i64 = sys_openat_rd(path)
51 if fd < 0 { szout[0] = 0 - 1; return 0 as *u8 }
52 let sz: i64 = sys_lseek(fd, 0, 2)
53 sys_lseek(fd, 0, 0)
54 let buf: *u8 = sys_mmap(sz + 64)
55 var got: i64 = 0
56 var n: i64 = 1
57 while n > 0 { n = sys_read(fd, (buf as i64 + got) as *u8, 65536); if n > 0 { got = got + n } }
58 sys_close(fd)
59 szout[0] = got
60 return buf
61}
62
63func og_runv(elf: *u8, args: *i64, outpath: *u8) -> i64 {
64 let pid: i64 = sys_fork()
65 if pid == 0 {
66 if (outpath as i64) != 0 {
67 let ofd: i64 = sys_openat_wr(outpath, 0x1a4)
68 if ofd >= 0 { sys_dup3(ofd, 1, 0); sys_dup3(ofd, 2, 0) }
69 }
70 let argv: *i64 = sys_mmap(128) as *i64
71 argv[0] = elf as i64
72 var i: i64 = 0
73 var go: i64 = 1
74 while go == 1 { if args[i] == 0 { go = 0 } else { argv[i + 1] = args[i]; i = i + 1 } }
75 argv[i + 1] = 0
76 let envp: *i64 = sys_mmap(16) as *i64
77 envp[0] = 0
78 sys_execve(elf, argv, envp)
79 sys_exit(127)
80 }
81 let st: *i64 = sys_mmap(16) as *i64
82 sys_wait4(pid, st, 0)
83 let sig: i64 = st[0] & 0x7f
84 if sig != 0 { return 128 + sig }
85 return (st[0] >> 8) & 0xff
86}
87
88func og_has(path: *u8, needle: *u8) -> i64 {
89 let szp: *i64 = sys_mmap(16) as *i64
90 let b: *u8 = og_readall(path, szp)
91 let sz: i64 = szp[0]
92 let n: i64 = og_slen(needle)
93 if sz < n { return 0 }
94 var i: i64 = 0
95 while i + n <= sz {
96 var ok: i64 = 1
97 var j: i64 = 0
98 while j < n { if b[i + j] != needle[j] { ok = 0; j = n } else { j = j + 1 } }
99 if ok == 1 { return 1 }
100 i = i + 1
101 }
102 return 0
103}
104
105func og_row(name: *u8, pass: i64) -> i64 {
106 og_p("ROW " as *u8); og_p(name)
107 if pass == 1 { og_p(" PASS\n" as *u8) } else { og_p(" FAIL\n" as *u8) }
108 return pass
109}
110
111func og_args(a1: *u8, a2: *u8, a3: *u8, a4: *u8, a5: *u8) -> *i64 {
112 let a: *i64 = sys_mmap(64) as *i64
113 a[0] = a1 as i64; a[1] = a2 as i64; a[2] = a3 as i64; a[3] = a4 as i64; a[4] = a5 as i64; a[5] = 0
114 return a
115}
116
117func og_join(base: *u8, name: *u8) -> *u8 {
118 let p: *u8 = sys_mmap(512)
119 var o: i64 = 0
120 o = og_cat(p, o, base); o = og_cat(p, o, name); p[o] = 0 as u8
121 return p
122}
123
124func main(argc: i64, argv: *i64) -> i64 {
125 og_p("=== VIZSLA SERVE GATE: HTTP transport routes first-party requests (handle mode) ===\n" as *u8)
126 var ob: *u8 = "buildroot/_build/nx_vizsla_serve.sov.elf" as *u8
127 if argc > 1 { ob = argv[1] as *u8 }
128 let pr: i64 = sys_openat_rd(ob)
129 if pr >= 0 { sys_close(pr) }
130 else {
131 og_p(" instrument missing -> rebuilding via durable runner\n" as *u8)
132 og_runv("_offc/nx_sov_build_run.elf" as *u8, og_args("nx_vizsla_serve" as *u8, 0 as *u8, 0 as *u8, 0 as *u8, 0 as *u8), "/tmp/vss_rebuild.out" as *u8)
133 }
134
135 let base: *u8 = sys_mmap(256)
136 var bo: i64 = 0
137 bo = og_cat(base, bo, "/tmp/vsG" as *u8); bo = og_catn(base, bo, sys_now_us()); bo = og_cat(base, bo, "_" as *u8)
138 base[bo] = 0 as u8
139
140 // a populated tenant "srv"
141 og_write(og_join(base, "srv.contacts.txt" as *u8), "CONF soon_days 14\nTIER inner 14\nTIER close 45\nTIER network 120\nCONTACT seed Seed-Person inner -\n" as *u8)
142 og_write(og_join(base, "srv.relate_log.txt" as *u8), "# journal\n" as *u8)
143 let srvc: *u8 = og_join(base, "srv.contacts.txt" as *u8)
144
145 // synthetic HTTP requests
146 og_write("/tmp/vss_get.txt" as *u8, "GET /srv HTTP/1.1\r\nHost: localhost\r\n\r\n" as *u8)
147 og_write("/tmp/vss_post.txt" as *u8, "POST /v/submit HTTP/1.1\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 73\r\n\r\naction=add-contact&tid=srv&id=webby&name=Web+Person&tier=inner&bday=08-08" as *u8)
148 og_write("/tmp/vss_bad.txt" as *u8, "POST /v/submit HTTP/1.1\r\nContent-Length: 52\r\n\r\naction=add-contact&tid=..&id=evil&name=Evil&tier=inner" as *u8)
149
150 var pass: i64 = 0
151 var r: i64 = 0
152
153 // rows 1-3: GET /srv -> the sovereign page
154 og_runv(ob, og_args("handle" as *u8, base, "/tmp/vss_get.txt" as *u8, 0 as *u8, 0 as *u8), "/tmp/vss_rget.txt" as *u8)
155 r = og_has("/tmp/vss_rget.txt" as *u8, "HTTP/1.1 200 OK" as *u8)
156 pass = pass + og_row("get-200" as *u8, r)
157
158 r = og_has("/tmp/vss_rget.txt" as *u8, "Nishi Vizsla" as *u8)
159 pass = pass + og_row("get-page-rendered" as *u8, r)
160
161 r = og_has("/tmp/vss_rget.txt" as *u8, "Add someone" as *u8)
162 pass = pass + og_row("get-form-present" as *u8, r)
163
164 // row 4: POST -> 303 redirect
165 og_runv(ob, og_args("handle" as *u8, base, "/tmp/vss_post.txt" as *u8, 0 as *u8, 0 as *u8), "/tmp/vss_rpost.txt" as *u8)
166 r = 0
167 if og_has("/tmp/vss_rpost.txt" as *u8, "303 See Other" as *u8) == 1 { if og_has("/tmp/vss_rpost.txt" as *u8, "Location: /srv" as *u8) == 1 { r = 1 } }
168 pass = pass + og_row("post-303-redirect" as *u8, r)
169
170 // row 5: the POST actually mutated the tenant
171 r = og_has(srvc, "CONTACT webby Web-Person inner 08-08" as *u8)
172 pass = pass + og_row("post-mutated-tenant" as *u8, r)
173
174 // row 6: a POST with an invalid (traversal) tid is blocked -> srv NOT mutated with the bogus entry
175 og_runv(ob, og_args("handle" as *u8, base, "/tmp/vss_bad.txt" as *u8, 0 as *u8, 0 as *u8), "/tmp/vss_rbad.txt" as *u8)
176 r = 0
177 if og_has(srvc, "Evil" as *u8) == 0 { r = 1 }
178 pass = pass + og_row("neg-invalid-tid-blocked" as *u8, r)
179
180 let permil: i64 = (pass * 1000) / 6
181 let logfd: i64 = sys_openat_append("knowledge/status/vizsla_gate.log" as *u8, 0x1a4)
182 var fdi: i64 = 0
183 while fdi < 2 {
184 var fd: i64 = 1
185 if fdi == 1 { fd = logfd }
186 if fd > 0 {
187 let line: *u8 = sys_mmap(256)
188 var o: i64 = 0
189 o = og_cat(line, o, "VIZSLA-SERVE-GATE epoch=" as *u8)
190 o = og_catn(line, o, sys_now_realtime_sec())
191 o = og_cat(line, o, " rows=6 pass=" as *u8)
192 o = og_catn(line, o, pass)
193 o = og_cat(line, o, " permil=" as *u8)
194 o = og_catn(line, o, permil)
195 if pass == 6 { o = og_cat(line, o, " verdict=GREEN\n" as *u8) } else { o = og_cat(line, o, " verdict=RED\n" as *u8) }
196 sys_write(fd, line, o)
197 }
198 fdi = fdi + 1
199 }
200 if logfd > 0 { sys_close(logfd) }
201 // MIGRATED onto nx_gate_verdict by nx_gate_dry_apply (D001, minimal form): every check
202 // row above is untouched, so the PASS/FAIL vector cannot change; only the hand-rolled
203 // verdict emission is replaced by the ONE shared base class. Proven by nx_gate_migrate verify.
204 let ctr__dry: *i64 = gv_ctr()
205 ctr__dry[0] = pass
206 ctr__dry[1] = 6
207 let rc__dry: i64 = gv_verdict("VIZSLA-SERVE-GATE" as *u8, ctr__dry, "teeth unchanged; verdict emission migrated onto the shared base class" as *u8)
208 sys_exit(rc__dry)
209 return rc__dry
210}