nx_websocket_stream.nx

nx_websocket_stream.nx -- streaming WebSocket framer over a TCP fd. The missing piece between nx_websocket_frame (parse one frame from a buffer) and a real per-connection daemon loop. Reads bytes from the socket handling partial reads + assembles a complete frame (header + payload), then unmasks the payload in place per RFC 6455 §5.3 (client-to-server frames MUST be masked). Composes: nx_websocket_frame.ws_parse_frame -- header decode nx_websocket_frame.ws_apply_mask -- in-place unmask nx_websocket_frame.ws_build_header -- server-to-client frame build sys_read / sys_write -- I/O Per Cardinals 9 (single-responsibility: ONE frame per call), 12 (defensive at boundary: bounds checks on payload_len + out_cap), 22 (composition of shipped primitives, no inline frame parsing). Caller responsibilities: - allocate out_buf with cap >= max expected frame (header + payload) - check returned verdict before using out_frame fields - for incoming client frames, payload is unmasked in place genealogy_id: rfc_6455 + nx_websocket_frame + nx_tls13_read_record_from_fd_q10 lineage_id: nishi_websocket_stream_q1