nx_node_beacon.nx

nx_node_beacon.nx -- SOVEREIGN per-node resource beacon: the swarm MONITOR keystone. Reads LIVE /proc utilization with BOUNDED reads (openat + single read + close) and NEVER sys_read_file -- that call mmaps 4 GiB PER CALL and never frees, which is the documented supervisor-ENOMEM F-class root (nx_hostctl.nx:311). A beacon is fork-per-pass and short-lived, so its mmaps free on exit; the bounded reader keeps a single pass cheap regardless. Composes proven prior art: the /proc parsers from nx_sysload (loadavg/meminfo/conns), the bounded reader idiom from nx_zombie_audit (za_readfile), and the record assembly helpers from nx_framed_append (fa_cat/fa_catn/fa_len). EMITS one POSITIONAL row the mgmt-API /api/nodes emitter parses (mirrors the SVC-row shape): NODE <name> <cpu_pct> <load_milli> <ncpu> <load_per_core_milli> <mem_used_pct> \ <mem_avail_mb> <mem_total_mb> <conns8443> <ts_us> <temp_mc> <batt_pct> v2 (SF-R1, swarm-fabric energy groundwork): temp_mc (max millidegC across /sys/class/thermal zones) + batt_pct (/sys/class/power_supply/BAT*/capacity) APPENDED so the v1 positional prefix is unchanged (rule 19 additive contract). -1 = source absent on this host (e.g. WSL VM exposes no thermal/battery) -- honest-absent, never fabricated. Run: nx_node_beacon -> SELF-GATE: sample local /proc, print row + verdict, exit 0 nx_node_beacon <name> <path> -> write the NODE row (labelled <name>) to <path> (the snapshot /api/nodes reads) AND echo it to stdout for hostctl capture license_tier: ORIGINAL