nx_memplane_lib.nx

nx_memplane_lib.nx -- shared primitives for the memory-plane organs. WHY THIS EXISTS (two reasons, both measured) ------------------------------------------- 1. RULE 15. Six organs -- memcliff, memhealth, memfix, memorph, memfind, memroot -- each carried its own copy of: the getdents64 directory walk, the name table + open-addressing index, the bounded file read, the path join, and the markdown/wiki link scanner. That is a pattern in six services, copied by hand each time. 2. THE COPIES DRIFTED, AND THE DRIFT WAS THE BUG. Each defence below was learned once, banked in ONE organ, and then absent from the next one written: * DUMP EXCLUSION -- memhealth, memorph and memfind all skip the aggregate dumps. memroot did not, so its first live run walked MEMORY.md -> reference-orphan-catalogue -> everything the catalogue listed and reported ROOTED 2178 / FLOATING 0 / GREEN, contradicting an already measured 581 orphans. A false GREEN on the one metric that would have exposed the problem. * NESTED-ARRAY REJECTION -- a scanner that stops at the first `]]` reads `[[433,94,2],[434,90,2]]` out of a code block as a wiki link. 25 of memhealth's first 427 "dangling" links were this. * FRONTMATTER-ONLY PARENT -- `parent:` appears in prose ("kill children before parent:"), and a grep counting those said 9 declared edges when the truth was 0. ★★★★★★ A LAW BANKED IN ONE ORGAN IS NOT BANKED IN THE NEXT. Putting the defence in a shared lib is the only version of "we learned that" that survives the next author. 3. IT IS ALSO WHAT MAKES GATES SOVEREIGN. Every gate for these organs was a `sh` script run by WSL from PowerShell -- Linux shell + Windows host + third-party runtime on the program path, in violation of the estate's own bits-up doctrine. A gate cannot import a monolith that owns `main()`, so shell was the only way to exercise them. With the logic in a lib, the gate becomes an ORGAN that imports it and asserts IN-PROCESS: no shell, no fixture scripts, no CRLF or backtick-escape corruption (both of which cost real debugging time this session). Lineage: the getdents64 + name-slot walk is the proven nx_ws_index_lib / nx_sov_tree_audit idiom. Sovereign: imports only nx_syscalls. license_tier: ORIGINAL