415ddeaac6
dist server run binds 0.0.0.0:<port> (default 8787) and serves /healthz, /api/apps, /api/apps/<slug>, and /download/<sha256> (X-Checksum-SHA256, bytes verified content-identical). db.json reloads per request so CLI publishes/promotes are visible immediately. Errors reuse the CLI's JSON error shape with matching HTTP statuses. HTTP/1.1 is an in-repo shim over std.socket (src/server/http.sx), liftable to the sx stdlib later. Response buffers are heap slices: a 64K+ stack array in one frame segfaults the sx LLVM backend (DAGCombiner); 4-16K stack buffers are fine. Pinned in tests/server_http.sx including a freshness case.