nx_acme_response.nx

nx_acme_response.nx -- ACME (RFC 8555) HTTP response parser. Extracts the four fields the ACME state machine needs from any CA response: 1. HTTP status code (200, 201, 204, 400, etc.) 2. Replay-Nonce header (RFC 8555 §6.5; the nonce we use for the NEXT request -- single-use per RFC 8555 §6.5.1) 3. Location header (account-URL / order-URL / challenge-URL depending on the endpoint) 4. Body offset + length (JSON payload for the caller to parse) Composes: nx_http_header_find.nx -- case-insensitive header search Per cardinal feedback-defensive-at-boundaries-trusting-internally: the parser validates the response shape ONCE; downstream callers trust the parsed fields. Per RFC 8555 §6.4: ACME servers MAY include Replay-Nonce on ANY response (success or error). We extract it always. If absent, the caller treats the next request as needing a fresh /new-nonce roundtrip. nx_capability_claims: needs: [sealed_enum, http_header_search] provides: [acme_response_parse, replay_nonce_extract, location_header_extract] safety: [no_unchecked_deref, no_floating_point, no_syscall, bounded_iteration, bit_equal_reproducible] verdict: [sealed_enum_6_state] license: ORIGINAL kind: racing_crew_specialist layer: L3 (algorithm: HTTP response -> ACME-typed fields)