nx_prim_query.nx

nx_prim_query.nx -- prim lane F782 (query_primitives: the 'what do I have' half of meet-in-the-middle). Reads the F781 manifest knowledge/store/prim_registry.json and returns every primitive object whose text matches the query (substring facet over domain/capabilities/signature/output/id) -- the sovereign query the top-down orchestrator (F783) calls to find matching blocks. Objects copied VERBATIM (already valid JSON). Result to stdout AND an atomic out-file (verifiable). READ-ONLY. Empty query = match-all. Object boundaries found via PLAIN-WORD anchors + byte confirm ({" before primitive_id) so the match logic carries NO string-escape dependency (cannot silently 0-match). ENVELOPES ARE DERIVED, NOT PICKED (2026-09-14, search rung E7; operator: the estate-wide magic numbers go). Three caps used to live here and every one failed in silence or was one generation from it: the manifest was read through a 1 MiB window (the manifest is 957 KB today and grows with every registered tool), the object table held 2048 boundaries and DROPPED the rest without a word, and the reply buffer was bounded at 262100 bytes -- a match-all query over a 957 KB manifest was being cut to invalid JSON silently. Now the manifest is read WHOLE by sys_read_file (sized from the file), the object table is sized from the input (no object can be shorter than its own primitive_id key, PQ_OBJ_MIN bytes), and the reply window is the input plus the fixed header (every matched object is a verbatim copy of input bytes). The only bound left refuses LOUDLY and cannot fire by construction. nx_prim_query <query> [manifest.json] [out.json] exit: 0 GREEN | 4 ABSENT/MALFORMED | 5 WINDOW (cannot happen by construction; kept loud) | 2 usage. license_tier: ORIGINAL expect_exit: 0