nx_snapfeed.nx

nx_snapfeed.nx -- the /proc + supervisor.log PARSE logic that produces the FEED consumed by nx_mgmt_snapshot's ss_synth (which in turn emits the SUP/SVC snapshot /api/health reads). This is the DATA-gathering parse tier of the R1b producer: pid/ppid/sid extraction + service identification + crash-loop restart counting. PURE + gateable (sf_*, imports only nx_syscalls); the LIVE /proc directory enumeration reuses nx_hostctl's existing proc-scan (anti-reinvention) -- this organ is the parse logic that scan will call per pid. TWO hard-won correctness lessons are encoded here (both from real incidents): 1) IDENTIFY A SERVICE BY ITS FULL /proc/<pid>/cmdline, NEVER by `comm`. The kernel truncates comm to 15 chars (TASK_COMM_LEN-1), so `nx_gallery_gateway.elf` (22 ch) shows as `nx_gallery_gate` -- a comm match SILENTLY MISSES it (this exact bug = the 2026-06-29 gallery-login disaster: a kill matched nothing while reporting success). sf_contains over the full cmdline blob is the fix. 2) PARSE /proc/<pid>/stat ROBUSTLY: field 2 (comm) is wrapped in parens and MAY CONTAIN SPACES AND PARENS, so a naive space-split corrupts ppid/sid. We anchor on the LAST ')' then read fields [state ppid pgrp sid]. license_tier: ORIGINAL