kami
6c92f85d10
Bring the Nexus/Praxis/Hexis integration in line with MAVEN_ECOSYSTEM_ARCHITECTURE.md: - Praxis over HTTP: drop the in-process praxis.db open (praxisstore/ praxistools) and call praxisd's /api/v1/tools/* API via a new praxisClient. Honors the "no component reads another's DB" invariant (AC#12). PraxisConfig.DBPath -> URL. - Hexis confirmation gate: mutating capabilities (ReadOnly=false) now park a bound pendingHexis confirmation and require a spoken "да" before executing; read-only run immediately (AC#7, no auto attention->action). - Capability safety: >1 verb match is ambiguous -> ask instead of firing the first; ambiguous Nexus resolution asks for clarification (AC#2). - Correlation IDs on Hexis execute, recorded in the cross-service trace. - Bug: importance arrives as JSON float64 over HTTP, not int. - Tests: confirm-gate, decline, read-only, and ambiguity paths. Build: vendor/ bakes in the hexis client (replace-directed at a sibling repo outside the Docker context); Dockerfile builds from vendor and no longer `go mod download`s the unreachable replace paths. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
129 lines
4.2 KiB
Go
129 lines
4.2 KiB
Go
package websocket
|
|
|
|
import (
|
|
"encoding/binary"
|
|
"math/bits"
|
|
)
|
|
|
|
// maskGo applies the WebSocket masking algorithm to p
|
|
// with the given key.
|
|
// See https://tools.ietf.org/html/rfc6455#section-5.3
|
|
//
|
|
// The returned value is the correctly rotated key to
|
|
// to continue to mask/unmask the message.
|
|
//
|
|
// It is optimized for LittleEndian and expects the key
|
|
// to be in little endian.
|
|
//
|
|
// See https://github.com/golang/go/issues/31586
|
|
func maskGo(b []byte, key uint32) uint32 {
|
|
if len(b) >= 8 {
|
|
key64 := uint64(key)<<32 | uint64(key)
|
|
|
|
// At some point in the future we can clean these unrolled loops up.
|
|
// See https://github.com/golang/go/issues/31586#issuecomment-487436401
|
|
|
|
// Then we xor until b is less than 128 bytes.
|
|
for len(b) >= 128 {
|
|
v := binary.LittleEndian.Uint64(b)
|
|
binary.LittleEndian.PutUint64(b, v^key64)
|
|
v = binary.LittleEndian.Uint64(b[8:16])
|
|
binary.LittleEndian.PutUint64(b[8:16], v^key64)
|
|
v = binary.LittleEndian.Uint64(b[16:24])
|
|
binary.LittleEndian.PutUint64(b[16:24], v^key64)
|
|
v = binary.LittleEndian.Uint64(b[24:32])
|
|
binary.LittleEndian.PutUint64(b[24:32], v^key64)
|
|
v = binary.LittleEndian.Uint64(b[32:40])
|
|
binary.LittleEndian.PutUint64(b[32:40], v^key64)
|
|
v = binary.LittleEndian.Uint64(b[40:48])
|
|
binary.LittleEndian.PutUint64(b[40:48], v^key64)
|
|
v = binary.LittleEndian.Uint64(b[48:56])
|
|
binary.LittleEndian.PutUint64(b[48:56], v^key64)
|
|
v = binary.LittleEndian.Uint64(b[56:64])
|
|
binary.LittleEndian.PutUint64(b[56:64], v^key64)
|
|
v = binary.LittleEndian.Uint64(b[64:72])
|
|
binary.LittleEndian.PutUint64(b[64:72], v^key64)
|
|
v = binary.LittleEndian.Uint64(b[72:80])
|
|
binary.LittleEndian.PutUint64(b[72:80], v^key64)
|
|
v = binary.LittleEndian.Uint64(b[80:88])
|
|
binary.LittleEndian.PutUint64(b[80:88], v^key64)
|
|
v = binary.LittleEndian.Uint64(b[88:96])
|
|
binary.LittleEndian.PutUint64(b[88:96], v^key64)
|
|
v = binary.LittleEndian.Uint64(b[96:104])
|
|
binary.LittleEndian.PutUint64(b[96:104], v^key64)
|
|
v = binary.LittleEndian.Uint64(b[104:112])
|
|
binary.LittleEndian.PutUint64(b[104:112], v^key64)
|
|
v = binary.LittleEndian.Uint64(b[112:120])
|
|
binary.LittleEndian.PutUint64(b[112:120], v^key64)
|
|
v = binary.LittleEndian.Uint64(b[120:128])
|
|
binary.LittleEndian.PutUint64(b[120:128], v^key64)
|
|
b = b[128:]
|
|
}
|
|
|
|
// Then we xor until b is less than 64 bytes.
|
|
for len(b) >= 64 {
|
|
v := binary.LittleEndian.Uint64(b)
|
|
binary.LittleEndian.PutUint64(b, v^key64)
|
|
v = binary.LittleEndian.Uint64(b[8:16])
|
|
binary.LittleEndian.PutUint64(b[8:16], v^key64)
|
|
v = binary.LittleEndian.Uint64(b[16:24])
|
|
binary.LittleEndian.PutUint64(b[16:24], v^key64)
|
|
v = binary.LittleEndian.Uint64(b[24:32])
|
|
binary.LittleEndian.PutUint64(b[24:32], v^key64)
|
|
v = binary.LittleEndian.Uint64(b[32:40])
|
|
binary.LittleEndian.PutUint64(b[32:40], v^key64)
|
|
v = binary.LittleEndian.Uint64(b[40:48])
|
|
binary.LittleEndian.PutUint64(b[40:48], v^key64)
|
|
v = binary.LittleEndian.Uint64(b[48:56])
|
|
binary.LittleEndian.PutUint64(b[48:56], v^key64)
|
|
v = binary.LittleEndian.Uint64(b[56:64])
|
|
binary.LittleEndian.PutUint64(b[56:64], v^key64)
|
|
b = b[64:]
|
|
}
|
|
|
|
// Then we xor until b is less than 32 bytes.
|
|
for len(b) >= 32 {
|
|
v := binary.LittleEndian.Uint64(b)
|
|
binary.LittleEndian.PutUint64(b, v^key64)
|
|
v = binary.LittleEndian.Uint64(b[8:16])
|
|
binary.LittleEndian.PutUint64(b[8:16], v^key64)
|
|
v = binary.LittleEndian.Uint64(b[16:24])
|
|
binary.LittleEndian.PutUint64(b[16:24], v^key64)
|
|
v = binary.LittleEndian.Uint64(b[24:32])
|
|
binary.LittleEndian.PutUint64(b[24:32], v^key64)
|
|
b = b[32:]
|
|
}
|
|
|
|
// Then we xor until b is less than 16 bytes.
|
|
for len(b) >= 16 {
|
|
v := binary.LittleEndian.Uint64(b)
|
|
binary.LittleEndian.PutUint64(b, v^key64)
|
|
v = binary.LittleEndian.Uint64(b[8:16])
|
|
binary.LittleEndian.PutUint64(b[8:16], v^key64)
|
|
b = b[16:]
|
|
}
|
|
|
|
// Then we xor until b is less than 8 bytes.
|
|
for len(b) >= 8 {
|
|
v := binary.LittleEndian.Uint64(b)
|
|
binary.LittleEndian.PutUint64(b, v^key64)
|
|
b = b[8:]
|
|
}
|
|
}
|
|
|
|
// Then we xor until b is less than 4 bytes.
|
|
for len(b) >= 4 {
|
|
v := binary.LittleEndian.Uint32(b)
|
|
binary.LittleEndian.PutUint32(b, v^key)
|
|
b = b[4:]
|
|
}
|
|
|
|
// xor remaining bytes.
|
|
for i := range b {
|
|
b[i] ^= byte(key)
|
|
key = bits.RotateLeft32(key, -8)
|
|
}
|
|
|
|
return key
|
|
}
|