kami
6c92f85d10
Bring the Nexus/Praxis/Hexis integration in line with MAVEN_ECOSYSTEM_ARCHITECTURE.md: - Praxis over HTTP: drop the in-process praxis.db open (praxisstore/ praxistools) and call praxisd's /api/v1/tools/* API via a new praxisClient. Honors the "no component reads another's DB" invariant (AC#12). PraxisConfig.DBPath -> URL. - Hexis confirmation gate: mutating capabilities (ReadOnly=false) now park a bound pendingHexis confirmation and require a spoken "да" before executing; read-only run immediately (AC#7, no auto attention->action). - Capability safety: >1 verb match is ambiguous -> ask instead of firing the first; ambiguous Nexus resolution asks for clarification (AC#2). - Correlation IDs on Hexis execute, recorded in the cross-service trace. - Bug: importance arrives as JSON float64 over HTTP, not int. - Tests: confirm-gate, decline, read-only, and ambiguity paths. Build: vendor/ bakes in the hexis client (replace-directed at a sibling repo outside the Docker context); Dockerfile builds from vendor and no longer `go mod download`s the unreachable replace paths. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
104 lines
2.5 KiB
Go
104 lines
2.5 KiB
Go
// Copyright 2026 The Go Authors. All rights reserved.
|
|
// Use of this source code is governed by a BSD-style
|
|
// license that can be found in the LICENSE file.
|
|
|
|
//go:build darwin || linux || openbsd
|
|
|
|
package unix
|
|
|
|
import "unsafe"
|
|
|
|
// minIovec is the size of the small initial allocation used by
|
|
// Readv, Writev, etc.
|
|
//
|
|
// This small allocation gets stack allocated, which lets the
|
|
// common use case of len(iovs) <= minIovec avoid more expensive
|
|
// heap allocations.
|
|
const minIovec = 8
|
|
|
|
// appendBytes converts bs to Iovecs and appends them to vecs.
|
|
func appendBytes(vecs []Iovec, bs [][]byte) []Iovec {
|
|
for _, b := range bs {
|
|
var v Iovec
|
|
v.SetLen(len(b))
|
|
if len(b) > 0 {
|
|
v.Base = &b[0]
|
|
} else {
|
|
v.Base = (*byte)(unsafe.Pointer(&_zero))
|
|
}
|
|
vecs = append(vecs, v)
|
|
}
|
|
return vecs
|
|
}
|
|
|
|
// writevRaceDetect tells the race detector that the program
|
|
// has read the first n bytes stored in iovecs.
|
|
func writevRaceDetect(iovecs []Iovec, n int) {
|
|
if !raceenabled {
|
|
return
|
|
}
|
|
for i := 0; n > 0 && i < len(iovecs); i++ {
|
|
m := min(int(iovecs[i].Len), n)
|
|
n -= m
|
|
if m > 0 {
|
|
raceReadRange(unsafe.Pointer(iovecs[i].Base), m)
|
|
}
|
|
}
|
|
}
|
|
|
|
// readvRaceDetect tells the race detector that the program
|
|
// has written to the first n bytes stored in iovecs.
|
|
func readvRaceDetect(iovecs []Iovec, n int, err error) {
|
|
if !raceenabled {
|
|
return
|
|
}
|
|
for i := 0; n > 0 && i < len(iovecs); i++ {
|
|
m := min(int(iovecs[i].Len), n)
|
|
n -= m
|
|
if m > 0 {
|
|
raceWriteRange(unsafe.Pointer(iovecs[i].Base), m)
|
|
}
|
|
}
|
|
if err == nil {
|
|
raceAcquire(unsafe.Pointer(&ioSync))
|
|
}
|
|
}
|
|
|
|
func Readv(fd int, iovs [][]byte) (n int, err error) {
|
|
iovecs := make([]Iovec, 0, minIovec)
|
|
iovecs = appendBytes(iovecs, iovs)
|
|
n, err = readv(fd, iovecs)
|
|
readvRaceDetect(iovecs, n, err)
|
|
return n, err
|
|
}
|
|
|
|
func Preadv(fd int, iovs [][]byte, offset int64) (n int, err error) {
|
|
iovecs := make([]Iovec, 0, minIovec)
|
|
iovecs = appendBytes(iovecs, iovs)
|
|
n, err = preadv(fd, iovecs, offset)
|
|
readvRaceDetect(iovecs, n, err)
|
|
return n, err
|
|
}
|
|
|
|
func Writev(fd int, iovs [][]byte) (n int, err error) {
|
|
iovecs := make([]Iovec, 0, minIovec)
|
|
iovecs = appendBytes(iovecs, iovs)
|
|
if raceenabled {
|
|
raceReleaseMerge(unsafe.Pointer(&ioSync))
|
|
}
|
|
n, err = writev(fd, iovecs)
|
|
writevRaceDetect(iovecs, n)
|
|
return n, err
|
|
}
|
|
|
|
func Pwritev(fd int, iovs [][]byte, offset int64) (n int, err error) {
|
|
iovecs := make([]Iovec, 0, minIovec)
|
|
iovecs = appendBytes(iovecs, iovs)
|
|
if raceenabled {
|
|
raceReleaseMerge(unsafe.Pointer(&ioSync))
|
|
}
|
|
n, err = pwritev(fd, iovecs, offset)
|
|
writevRaceDetect(iovecs, n)
|
|
return n, err
|
|
}
|