nx_rebuild_drain.nx

nx_rebuild_drain.nx -- THE ACTING HALF of dependency-aware staleness (debt 1785447998). nx_rebuild_plan DIAGNOSES: 662 of 696 deployed organs run binaries predating their own dependencies, 638 of them traceable to just two shared runtimes carrying real behavioural root-fixes (SIGPIPE in nx_syscalls.nx, the ss_get O(whole-store) fix in nx_seg_store.nx). But a census nobody is OBLIGED to read is the same shape of defect as a fix nobody is OBLIGED to rebuild against -- both are capability that exists and does not reach the place it matters. This organ is the obligation. ★★★WHY AN ORGAN AND NOT THE SHELL SCRIPT IT REPLACES: a shell batch is something a human remembers to run. An organ can be SUPERVISED -- put on a beat, it turns "someone should rebuild the dependents" into a property of the system. That is the whole difference between a workaround and a fix. GUARDS, every one of them learned by being bitten today: • _cli/STUB TRAP: a fresh build far SMALLER than the deployed elf means the same-basename .nx is a smoke stub and the real tool came from another source. nx_https_get rebuilds 443KB vs 633KB deployed -- installing that BREAKS a working tool. REFUSED, never installed. • ETXTBSY: cp over a RUNNING elf fails; the daemon holds that inode. Install is write-to-.new then RENAME, which swaps the directory entry and leaves the live inode alone. • BUILD FAILURE IS NOT INSTALLABLE: a non-zero build rc or a missing artifact skips the target. • BOUNDED + SERIAL: today's saturation incident (load 63, mgmt+tools+sshd dead) came from wide fan-out. This drains a batch at a time, one build at a time, and stops. Idempotent: re-running simply picks up whatever is still stale, so a partial drain is always safe to resume. • IDENTICAL-BYTES IS A NO-OP: if the fresh build matches what is deployed, nothing is written. nx_rebuild_drain beat [batch] [buildroot] [elfdir] SELF-CONTAINED for a clock row: regenerates the list, then drains a bounded batch nx_rebuild_drain classify <listfile> [buildroot] [elfdir] PARTITION ONLY, spends no compile: buildable vs lib-basename vs no-elf nx_rebuild_drain <listfile> [batch] [buildroot] [elfdir] listfile = output of `nx_rebuild_plan list` (one target name per line) -> per-target rows + summary. Exit 0 always; a drain reports, it does not refuse. license_tier: ORIGINAL No hw writes (Rule 26). expect_exit: 0