nx_http_server.nx

nx_http_server.nx -- bind/listen/accept-loop HTTP/1.1 server. Closes the F1 rank-4 ship-order (CWE-352 CSRF). Composes existing substrate primitives -- nothing new at the protocol layer: nx_http_io.nx -- nx_http_parse_request / nx_http_write_response nx_http_resp.nx -- response builder (status, headers, body) nx_http_router.nx -- route dispatch (method + path -> handler_id) nx_syscalls_x86_64 -- socket / bind / listen / accept / setsockopt This file is the COMPOSITION FILE: it ties the existing pieces into an accept-loop with sealed-enum verdicts at every step. Per audit-dashboard roadmap phase 2: this is the load-bearing surface that lets nishifamily.com/audit be served live. The dispatch handler for /audit reads docs/audit/snapshot.json + nx_html_render's output buffer; this server is the wrapper. Sealed-enum verdict (server-state, distinct from HTTP status codes): NXS_OK accept-loop iteration succeeded NXS_SOCKET_ERR socket() failed -- usually EACCES (port<1024) or EMFILE (too many open files) NXS_BIND_ERR bind() failed -- usually EADDRINUSE (port in use) NXS_LISTEN_ERR listen() failed NXS_ACCEPT_ERR accept() returned negative (usually EINTR; caller retries) NXS_PARSE_ERR request didn't parse as HTTP/1.1 NXS_WRITE_ERR write to client socket failed (client gone) NXS_BAD_ARG null pointer / negative size / unknown method Per cardinal user-owns-every-bit: caller picks the bind address + port; substrate doesn't auto-bind to 0.0.0.0:80. Default in the helper is 127.0.0.1 (loopback) -- user must explicitly opt in to public binding. Per cardinal feedback-no-third-party-trust-native-or-nothing: no external HTTP framework. No nginx, no caddy, no fastcgi. CSRF prevention (rank-4 CWE-352): the route-registration helper nx_http_server_register_state_change refuses any path that