nsaspy/zara-plugins
1
0
Fork 0
Code Issues 10 Pull requests 297 Projects Releases Packages Wiki Activity Actions

Add typed diagnostic zara-sysadmin service #502

Open
nsaspy wants to merge 6 commits from rage/6-sysadmin into main
pull from: rage/6-sysadmin
merge into: nsaspy:main
Conversation 0 Commits 6 Files changed 8 +577
nsaspy commented 2026-09-08 02:20:14 +00:00
Owner
Copy link

Implements #6.

TDD begins at d744141d6f82259344ba4395247a3e8a858db184 with a fake-backend contract for service/journal/process/resource/network/Nix diagnosis, typed mutation allowlists, expert-system rule chains, and mandatory post-change verification. The branch was then reconciled onto canonical main after #61 so the compatibility gate validates the full browser + files catalog too.

The plugin exposes structured Linux/NixOS observations and only typed mutations: service start|stop|restart and Nix check|build|switch. There is no shell/eval/sudo/privilege-escalation surface. Backend acceptance is not treated as success: service actions preserve before/action/after evidence and require both accepted=true and observed post-state; Nix switches require an observed generation change. A regression test explicitly prevents a denied mutation from becoming verified=true merely because the post-state coincidentally matches.

rules/sysadmin.pl records portable symptom → hypothesis → next diagnostic → verification chains for failed services, running-without-listener, DNS-upstream failure, and Nix activation failure. The Python domain mirrors them for deterministic tests without requiring SWI-Prolog or host system state.

No production backend is fabricated: without a configured bounded backend the plugin reports system-backend-not-configured. Tests require no root, systemd daemon, network, credentials, or Nix mutation. Zara Core remains authoritative for standard tool authorization/approval.

Candidate head: a70837bd3282f7fb38f8b0f4361c0d67e3853a2e. Merge only after exact-head registry/unit/pinned-Zara compatibility/Nix/package/runtime-layout gates and review/thread state are green.

Implements #6. TDD begins at `d744141d6f82259344ba4395247a3e8a858db184` with a fake-backend contract for service/journal/process/resource/network/Nix diagnosis, typed mutation allowlists, expert-system rule chains, and mandatory post-change verification. The branch was then reconciled onto canonical main after #61 so the compatibility gate validates the full browser + files catalog too. The plugin exposes structured Linux/NixOS observations and only typed mutations: service `start|stop|restart` and Nix `check|build|switch`. There is no shell/eval/sudo/privilege-escalation surface. Backend acceptance is not treated as success: service actions preserve before/action/after evidence and require both `accepted=true` and observed post-state; Nix switches require an observed generation change. A regression test explicitly prevents a denied mutation from becoming `verified=true` merely because the post-state coincidentally matches. `rules/sysadmin.pl` records portable symptom → hypothesis → next diagnostic → verification chains for failed services, running-without-listener, DNS-upstream failure, and Nix activation failure. The Python domain mirrors them for deterministic tests without requiring SWI-Prolog or host system state. No production backend is fabricated: without a configured bounded backend the plugin reports `system-backend-not-configured`. Tests require no root, systemd daemon, network, credentials, or Nix mutation. Zara Core remains authoritative for standard tool authorization/approval. Candidate head: `a70837bd3282f7fb38f8b0f4361c0d67e3853a2e`. Merge only after exact-head registry/unit/pinned-Zara compatibility/Nix/package/runtime-layout gates and review/thread state are green.
registry: publish zara-sysadmin
Some checks failed
CI / test (pull_request) Failing after 18s
Details
a70837bd32
Some checks failed
CI / test (pull_request) Failing after 18s
Details
This pull request has changes conflicting with the target branch.
  • plugins.json
  • plugins/zara-sysadmin/lib/zara_sysadmin/domain.py
  • plugins/zara-sysadmin/lib/zara_sysadmin/plugin.py
View command line instructions

Manual merge helper

Use this merge commit message when completing the merge manually.

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin rage/6-sysadmin:rage/6-sysadmin
git switch rage/6-sysadmin

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch main
git merge --no-ff rage/6-sysadmin
git switch rage/6-sysadmin
git rebase main
git switch main
git merge --ff-only rage/6-sysadmin
git switch rage/6-sysadmin
git rebase main
git switch main
git merge --no-ff rage/6-sysadmin
git switch main
git merge --squash rage/6-sysadmin
git switch main
git merge --ff-only rage/6-sysadmin
git switch main
git merge rage/6-sysadmin
git push origin main
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels   
accessibility
Barrier affecting people with disabilities

  
bug
Something isn't working

  
documentation
Improvements or additions to documentation

  
duplicate
This issue or pull request already exists

  
enhancement
New feature or request

  
good first issue
Good for newcomers

  
help wanted
Extra attention is needed

  
invalid
This doesn't seem right

  
question
Further information is requested

  
security

   
wontfix
This will not be worked on

No labels
accessibility
bug
documentation
duplicate
enhancement
good first issue
help wanted
invalid
question
security
wontfix
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
nsaspy/zara-plugins!502
No description provided.