5 Commits

Author	SHA1	Message	Date
giles	d36fe4ee97	fed-sx-m2: Step 5d — inbox handler wires the ingestion chain ... POST /actors/<id>/inbox is now special-cased in route/2 (next to POST /activity) so the body + Cfg reach the new handle_inbox_post/3 handler. Wire format: body = term_codec:encode(SignedActivity); the receiver decodes into the activity proplist and runs the chain. handle_inbox_post/3 orchestration: 1. kernel_has_actor(field(kernel, Cfg), TargetId) -> 404 if missing 2. decode_activity(Body) -> 422 on bad shape 3. envelope:get_field(actor, Activity) -> 422 if no peer id 4. resolve_peer_as(PeerId, Cfg) -> 401 if unknown 5. nx_kernel:inbox_state_for(TargetAtom) -> 404 belt-and-braces 6. pipeline:validate_inbound(Activity, PeerAS, InboxLog) ok -> nx_kernel:append_inbox + 202 {error, bad_signature} -> 401 {error, no_signature} -> 401 {error, _} -> 422 resolve_peer_as/2 supports three Cfg paths in priority order: {peer_as, [{PeerId, AS}, ...]} pure-fn pre-populated map {peer_actors, AtomName} peer_actors gen_server cache {peer_fetch_fn, fun/1} fallback on srv cache miss Empty Cfg returns {error, no_peer_resolver} -> 401. v1 actor_post/1 4a stub deleted; M1 actor_inbox_post_response/0 kept for response composition. Projection broadcast on inbox success intentionally deferred to a follow-up sub-deliverable. inbox.sh 11/11 (acceptance suite for the basic chain): - happy path -> 202 - inbox tip advances; outbox tip unchanged (per-actor bucket independence carried through from Step 5a) - empty / garbage body -> 422 - unknown peer -> 401 - bad peer-AS keys -> 401 - replay (same activity twice) -> 422 on second - unknown target actor -> 404 - two distinct activities -> tip = 2 inbox_peer_resolution.sh 6/6 (Cfg resolution variants): - peer_actors gen_server hit -> 202 - FetchFn fallback -> 202 - FetchFn error -> 401 - FetchFn caches into peer_actors (peers_srv shows [bob] after) - No resolver -> 401 Tests split into two files because each epoch's kernel start_link + outbox construct + term_codec encode is expensive and a single suite hits the wall-clock budget. http_server.erl is now 1181 lines. erlang-load-module on this port scales superlinearly with function count, so eight http_*.sh tests' internal sx_server timeout bumped 60s -> 360s (http_route, http_actors, http_accept, http_capabilities, http_capabilities_format, http_content_type, http_artifacts, http_projections). Conformance 761/761.	2026-06-06 19:19:02 +00:00
giles	6cfb1cb2d3	fed-sx-m2: Step 4d — outbox listing from log + pagination + 8 tests ... Per-actor GET /actors/<id>/outbox now reads the bucket's log via new nx_kernel:log_state_for/1 gen_server export and renders the paged CID list. nx_kernel additions: log_state_for/1 gen_server call returning {ok, LogState} for the named actor (mirrors log_tip_for/1's shape). http_server additions: - with_request_query/2 bakes Req's :query binary into Cfg as {request_query, Q} so sub-resource handlers can parse params without taking the Req as another arg - kernel_actor_log_data/2 -> {Tip, Entries} via nx_kernel:log_tip_for + log_state_for + log:entries - parse_page/1 reads ?page=N (default 1, non-digits -> 1) - page_size/0 returns 5 (test-friendly; production picks 20+) - page_slice/2 + drop_take/3 + take/2 for the page extraction - entry_cids/1 maps entries to :id CID binaries via envelope - actor_outbox_full_response_for/5 renders text / JSON / SX: text: outbox: <id>\ntip: N\npage: P\nitem: <cid>\n... json: {"outbox":"<id>","tip":N,"page":P,"items":[...]} sx: (outbox "<id>" :tip N :page P :items (...)) Empty page degrades to actor_outbox_with_tip_response_for so epochs 50-57 from Step 4c still pass — the prefix is preserved. 8 new cases in next/tests/http_multi_actor.sh (41/41 total): - 1 publish -> body contains outbox/tip=1/page=1/item: prefix - 3 publishes -> body contains tip=3/page=1/item: prefix - page=2 with 3 items -> empty page degrades to tip-only body - 6 publishes page=1 -> tip=6/page=1/item: prefix - 6 publishes page=2 -> tip=6/page=2/item: prefix - JSON body shape with items array (1 entry) - SX body shape with :items list (1 entry) - bad ?page=bad falls back to page 1 Conformance 761/761. 117/117 across 11 Step-4-adjacent suites (http_multi_actor, http_route, http_publish, http_post_format, http_marshal, http_publish_fold, http_listen_bif, http_server_start, nx_kernel_multi, nx_kernel_server, bootstrap_start, actor_lifecycle). Substrate gotcha logged: named recursive funs fun F(...) -> F(...) end aren't supported by the parser ('fun-ref syntax not yet supported'); binary:matches/2 and lists:foreach/2 aren't registered. Tests prove behaviour via match_prefix substring checks rather than counting occurrences.	2026-06-06 15:42:37 +00:00
giles	e04a65d400	fed-sx-m2: Step 4c — route/3 with kernel access + 8 tests ... http_server:route/3(Req, Cfg, Kernel) is the new extended entry point: folds the kernel reference (typically the registered nx_kernel atom) into Cfg as {kernel, Kernel}. route/2 is unchanged and stays the M1 surface. The dispatch chain gained Cfg threading all the way down: dispatch/3 -> dispatch/4 (M, P, F, Cfg) actor_get/2 -> actor_get/3 (Rest, F, Cfg) actor_subresource_get/3 -> /4 (Id, Sub, F, Cfg) actor_outbox_response_for/3 (new) reads :kernel from Cfg and, when the kernel atom is registered AND the actor exists, renders 'tip: <N>' alongside the actor id in text / JSON / SX content- negotiated bodies. Unknown actors or unregistered kernels fall back to the 4a stub. Inbox / followers / following handlers accept Cfg but ignore it for now — they layer real state lookup in 4d/4e/Step 5+. Substrate gotcha logged in the Progress log: try/of/catch around gen_server:call(nx_kernel, _) deadlocks in this port's scheduler (probably the catch frame's mask defers reply delivery). The live kernel_log_tip/2 helper does a bare call + integer guard instead. nx_kernel_multi.sh already proves bare gen_server:call into the same kernel works correctly. 8 new cases in next/tests/http_multi_actor.sh (33/33 total): - route/3 with registered kernel: outbox body includes tip=0 - tip advances after POST publish through route/3 + token map - unknown actor (ghost) falls back to 4a stub (no tip:) - unregistered kernel ref falls back to stub - JSON Accept renders {"outbox":"alice","tip":0} - SX Accept renders (outbox "alice" :tip 0) - Bob's outbox tip stays 0 while Alice publishes (per-actor) - route/2 path unchanged: no tip field in body Conformance 761/761. 121/121 across 10 Step-4-adjacent suites (http_multi_actor, http_route, http_publish, http_post_format, http_marshal, http_publish_fold, http_listen_bif, http_server_start, nx_kernel_multi, bootstrap_start, actor_lifecycle).	2026-06-06 14:59:59 +00:00
giles	271632c923	fed-sx-m2: Step 4b — token -> ActorId map + 8 new tests ... POST /activity now routes through nx_kernel:publish_to/2 when the bearer token resolves to an explicit ActorId via Cfg's :tokens proplist: Cfg = [{tokens, [{<<"alice-token">>, alice}, {<<"bob-token">>, bob}]}] resolve_token/2 returns {ok, ActorId} on a :tokens hit. On a miss it falls back to the M1 :publish_token single-token field — match returns {ok, legacy}, routing through nx_kernel:publish/1 (which fans out to bucket 0) so every M1 test continues to pass. handle_post_activity threads the resolved ActorRef to publish_if_kernel/3 which dispatches publish_to/2 for explicit actor ids and publish/1 for the legacy atom. The no-kernel auth-only path (which preserves the post_activity_response_for stub for unit-style tests of http_server alone) is unchanged. Dead expected_token/1 helper removed (was only called by the old check_bearer arm that resolve_token replaces). 8 new cases in next/tests/http_multi_actor.sh (25/25 total): - two-actor Cfg, Alice token -> 200 with cid: - Alice token publishes to alice (log_tip alice=1, bob=0) - Bob token publishes to bob (log_tip alice=0, bob=1) - interleaved Alice + Bob + Alice -> {2, 1} - unknown token + no :publish_token -> 401 - legacy :publish_token still works (M1 back-compat) - tokens map AND legacy :publish_token coexist (each resolves to its own actor; legacy lands on alice bucket via publish/1) - no kernel + valid :tokens entry -> auth-only stub 200 Conformance 761/761. 116/116 across 10 Step-4-adjacent suites (http_multi_actor, http_route, http_publish, http_post_format, http_marshal, http_publish_fold, http_listen_bif, http_server_start, nx_kernel_multi, bootstrap_start, actor_lifecycle).	2026-06-06 14:31:27 +00:00
giles	0b8772ec69	fed-sx-m2: Step 4a — per-actor HTTP sub-paths + 17 tests ... Per design §16.1 each actor has /outbox /inbox /followers /following sub-paths. New split_first_slash/1 helper lets the GET /actors/... dispatch arm fan out on the sub-segment: GET /actors/<id> actor doc (M1 — unchanged) GET /actors/<id>/outbox outbox stub (4a) GET /actors/<id>/inbox inbox stub (4a) GET /actors/<id>/followers follower stub (4a) GET /actors/<id>/following following stub (4a) POST /actors/<id>/inbox 202 Accepted stub (4a; Step 5 real) Four new content-negotiated response functions mirror the existing actor_doc_response_for/2 shape (text / json / activity_json / sx variants): actor_outbox_response_for/2 actor_inbox_get_response_for/2 actor_followers_response_for/2 actor_following_response_for/2 POST returns 202 via new accepted_response/1 + actor_inbox_post_response/0. Unknown sub-paths under /actors/<id>/ return 404. Bare /actors/<id> preserves the M1 actor-doc arm so http_route + http_post_format regression suites stay green. 4b-4e (token map, route/3 kernel access, per-actor outbox listing from log entries, real inbox pipeline) layer on top of this dispatch in subsequent iterations. 17/17 in next/tests/http_multi_actor.sh covering: - split_first_slash sanity (no slash / id+sub / trailing slash) - all four GET sub-paths return 200 with stub bodies - POST inbox returns 202 + 'accepted' - unknown sub-paths return 404 (GET and POST) - empty /actors/ returns 404 - body carries the actor id - content negotiation: outbox JSON, inbox SX, followers JSON Conformance 761/761. 120/120 across 10 Step-4-adjacent suites (http_route, http_publish, http_post_format, http_marshal, http_publish_fold, http_listen_bif, http_server_start, nx_kernel_multi, actor_state_pure, bootstrap_start).	2026-06-06 13:47:00 +00:00