nx_galx_bridge.nx

nx_galx_bridge.nx -- SOVEREIGN reverse-tunnel bridging the WSL-workstation gallery to the always-on NAS. The gallery runs on the workstation (WSL2-NAT'd -> NOT LAN-reachable). Instead of netsh/ssh, the workstation DIALS OUT to the NAS (outbound traverses the NAT); the NAS routes nishifamily.com/gallery requests back down those pooled connections to the workstation, which forwards them to the local OPAQUE gateway -> gallery. Pure sockets (sys_socket/connect/bind/listen/accept/read/write/fork) -- NO sh, NO netsh, NO ssh. NAS mode: nx_galx_bridge nas <tunnel_port> <front_port> listen tunnel_port (workstation dials IN -> conns wait in the accept backlog = the pool) + front_port (the NAS TLS front sends /gallery requests here, loopback). Per front request: fork -> accept one pooled worker -> forward request -> relay worker->front until close. WS mode: nx_galx_bridge ws <a> <b> <c> <d> <tunnel_port> <gateway_port> <pool> fork <pool> dialers; each loops: connect <a.b.c.d>:tunnel_port -> read the routed request -> connect 127.0.0.1:gateway_port (the OPAQUE gateway) -> forward -> relay gateway->tunnel until close -> reconnect.