feat(contrib.tinyweb): serve over TLS with with_tls

[paul-hammant]

tinyweb wraps std.http, whose server has had server_set_tls all along — tinyweb simply never surfaced it. So every tinyweb app was plaintext-only for no deeper reason than a missing setter.

server = tinyweb.web_server_host("0.0.0.0", 443) {
    tinyweb.end_point(tinyweb.GET, "/") |req: ptr, res: ptr, ctx: ptr| {
        tinyweb.response_write(res, "hello over https")
    }
}
_ = tinyweb.with_tls(server, "/etc/ssl/cert.pem", "/etc/ssl/key.pem")
err = tinyweb.tw_start(server)

with_tls records the PEM pair on the existing config map; tw_start applies it after bind and before registering routes, so a bad pair fails start-up rather than after the server looks ready.

The design decision worth reviewing

A bad or half-configured pair is a start-up error, not a silent skip.

with_tls(srv, cert, "")     -> "with_tls needs BOTH a cert and a key"
with_tls(srv, missing, key) -> "TLS setup failed: failed to load TLS certificate (...)"

A server that quietly downgrades to plaintext on a port the caller believes is encrypted is worse than one that refuses to start. That's the same failure shape as the response_accept_tunnel TLS gap found in #1899 — where a silent plaintext fallback had already shipped downstream without anyone noticing, because the failure was a runtime string no test looked at.

Testing

New suite asserts three things:

1. a real TLS handshake serving the route body (verified in the curl trace, not just a 200);
2. plain http:// to the TLS port does not return the body;
3. a half-configured pair refuses to start.

It's also the first tests/integration/tinyweb_* suite, so contrib/tinyweb gains CI coverage it didn't have.

	build	tinyweb_tls	existing tinyweb tests
Linux	✅	PASS	3/3 OK
macOS 15.7.7	✅	PASS	—
Windows MSYS2	✅	SKIP-WIN (by design)	module still compiles

make test 409/409; fmt gate and check-docs green.

A note on the diff

It is deliberately additive-only — 35 insertions, 0 deletions in module.ae.

ae fmt contrib reformats 23 unrelated contrib modules and most of tinyweb's own examples (collapsing aligned const blocks, exports ( → exports(). That noise is reverted here so the change is reviewable; the tree stays fmt-canonical either way, as the passing gate shows. Worth knowing that a contrib-wide ae fmt is a large diff waiting to happen — probably better as its own deliberate commit than smuggled into a feature.

🤖 Generated with Claude Code