nx_doctor_serve.nx

nx_doctor_serve.nx -- SERVE-WRAPPER making the DOCTOR role's capability MCP-callable (operator 2026-07-10: "each role owns its raci capabilities and gets them to be mcp apis"). 6th wrapper. nx_doctor_apply's main() needs argv files (usage exit 2 on no-arg dispatch), but its CORE doc_apply_mem(target, old, oldlen, new, newlen) is importable -- the graceful conflict-safe atomic apply (lock + exact-once match + tmp+rename). Self-test on /tmp (idempotent: equal-length rewrite each run): (1) HEAL -- apply BROKEN->HEALED, then BYTE-VERIFY the file really says HEALED (never claimed, read back); (2) CONFLICT -- a non-matching oldstr is REFUSED (DA_CONFLICT) and the file is UNTOUCHED (never clobber); (3) AMBIG -- an oldstr matching twice is REFUSED (DA_AMBIG, will not guess). Clean exit 0 + JSON so nishi_crew dispatches `doctor fix`. Import ONLY nx_doctor_apply.nx (brings nx_syscalls + nx_arbiter; the flock dir /home/elderwesto/.nishi/locks already exists on the NAS from the arbiter rung). license_tier: ORIGINAL expect_exit: 0