nx_wiki_queue.nx

nx_wiki_queue.nx -- the sovereign partnership work-queue. This closes the "trigger Claude partnership work" loop: a visitor submits a task on a component article (POST /wiki/request), it is appended to an append-only Nishi journal on disk, and GET /wiki/queue renders the live log -- the durable, sovereign record of requested + completed work that a Claude session drains and documents. All NishiLang, written + read by Nishi I/O (sys_openat_append / sys_write / sys_read_file). No shell, no TSV-glue, no external lib. NEW CAPABILITY vs the rest of the wiki: this is RENDERED AT REQUEST TIME (it reads the live journal), so it runs in the daemon's forked child -- where per-request allocation is fine (the child exits and the OS reclaims it), unlike the parent loop where everything must be hoisted. SECURITY (Cardinal 12, defensive at boundary): the task text is untrusted public input. On write it is sanitized (control bytes + the field separator replaced with spaces, length-capped); on render it is HTML-escaped via the wiki render primitive. The record format uses the 0x1F field separator (never present in sanitized text) so parsing is unambiguous. COMPOSED BY: wiki/nx_wiki_routes (GET /wiki/queue, POST /wiki/request) and bin/nx_sites_daemon (same, dispatched in the child). Status: V1. 2026-05-30.