nx_https_get.nx

nx_https_get.nx -- THE TOP-LEVEL USER-FACING HTTPS FETCH PRIMITIVE. This is the single call that wraps the 4 wiring-arc steps into one user-facing primitive. Takes a URL string + entropy + trust store + clock + output buffer, returns the response bytes (HTTP headers + body) accumulated until peer-close. Step 5 of the nx_https_client wiring arc -- the convenience wrapper that turns 4 discrete shipped primitives into a one-liner the rest of the substrate (Browser arc / NX-INGEST / etc.) calls. Composes 4 shipped substrate primitives: 1. nx_https_url_for_fetch -- URL parse + scheme + port 2. nx_https_url_connect -- URL+DNS+TCP → fd 3. nx_tls13_client_session_run -- full TLS 1.3 handshake 4. nx_https_get_complete -- HTTP GET round-trip Plus internal: builds TlsValidationContext from (store, host from parsed URL, now_epoch); calls sys_close on fd to release the socket after response received. Public API: nx_https_get( url_str: *u8, NUL-terminated URL client_random: *u8, 32 bytes of entropy x25519_priv: *u8, 32 bytes ephemeral key store: *TrustStore, boot-loaded CA bundle now_epoch_secs: i64, for cert validity check out_buf: *u8, out_cap: i64 ) -> POSITIVE bytes_received | NEGATIVE -NX_HTTPS_GET_* code nx_https_get_verdict_is_valid(v) -> 0|1 Sealed verdict (one per failure mode, mapped from sub-step verdicts): NX_HTTPS_GET_OK NX_HTTPS_GET_BAD_URL url_for_fetch returned non-OK NX_HTTPS_GET_CONNECT_FAIL url_connect returned non-OK NX_HTTPS_GET_HANDSHAKE_FAIL session_run returned negative NX_HTTPS_GET_FETCH_FAIL get_complete returned negative