Juan DenisandClaude Fable 5 a0a111c071 test(real-binaries): run cron and nginx service code against real parsers ...

The panel's crontab/nginx code only ever met the fake_subprocess stub —
the 8-distro matrix runs stubs and the container legs run 12 detection
tests, so a syntax the real parser rejects failed on a user's box, not
in CI (the #117 class).

- new `real_binaries` marker (registered in conftest); the tests also
  gate on SERVERKIT_REAL_BINARIES=1 so ordinary suite runs never mutate
  a machine's crontab by surprise. Local loop (WSL works):
  SERVERKIT_REAL_BINARIES=1 pytest tests -m real_binaries
- test_real_crontab_roundtrip: add -> list -> toggle -> remove through
  the real `crontab -`/`crontab -l`, operator lines preserved, name
  injection blocked; user crontab saved/restored around each test
  (verified green on WSL against the real binary)
- test_real_nginx_vhost_syntax: every render_site_config flavor through
  a real `nginx -t` in a tmp wrapper conf, plus a garbage probe so the
  harness can't go vacuous
- backend-ci gains a real-binaries job (ubuntu runner, apt nginx+cron)
- scripts-ci gains the probe-matrix job: scripts/test/probe-matrix.sh
  (real ufw/nginx/firewalld in 4 container shapes) existed since plan
  75 but was wired into NO workflow; the ubuntu-root-sbinless leg was
  re-verified green locally before wiring

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-08-27 05:03:31 -04:00

..

ISSUE_TEMPLATE

Add workflow automation engine and triggers

2026-03-23 01:30:51 -04:00

workflows

test(real-binaries): run cron and nginx service code against real parsers

2026-08-27 05:03:31 -04:00

CODEOWNERS

docs(readme): accept crypto donations

2026-07-20 01:19:54 -04:00

FUNDING.yml

Revamp README and add architecture documentation

2026-01-19 18:53:13 -05:00

PULL_REQUEST_TEMPLATE.md

docs(scripts): add the tested-context set -e suppression rule to the PR checklist

2026-07-02 21:53:52 -04:00