Repository navigation

Added policy generation, testing, deployment functionality - #29

Merged

aleksandrychev merged 141 commits into

cfengine:mainfrom

aleksandrychev:project_cfbs

Oct 7, 2026

Merged

Added policy generation, testing, deployment functionality#29
aleksandrychev merged 141 commits into
cfengine:mainfrom
aleksandrychev:project_cfbs

Commits on Sep 30, 2026
- Added a cfbs init operation to the Python sidecar
  
  aleksandrychev
  and
  claude
  committed
  fca1a65
- New Project now creates a cfbs project on disk, saved with Cmd+S
  
  aleksandrychev
  and
  claude
  committed
  5cfd7f7
- Added Open Project, with recent projects
  
  aleksandrychev
  and
  claude
  committed
  f65b0f2
Commits on Oct 1, 2026
- Projects now mirror the file tree as cfbs modules, in the default namespace
  
  aleksandrychev
  and
  claude
  committed
  4e00388
- Added policy generation: each save writes the project's .cf files
  
  aleksandrychev
  and
  claude
  committed
  b3cffcb
- Generated policy now explains each data transformation in a comment
  
  aleksandrychev
  and
  claude
  committed
  e1d9b1f
- Render Template now writes its template to its own file in templates/
  
  aleksandrychev
  and
  claude
  committed
  b32da9d
- Demo project now publishes a landing page and keeps nginx running
  
  aleksandrychev
  and
  claude
  committed
  4382ae4
- Generated policy is now one top-down bundle per file, for CFEngine 3.27+
  
  aleksandrychev
  and
  claude
  committed
  2426c74
- Projects can be stored as a policy set or a cfbs module; builder data moved
  
  aleksandrychev
  and
  claude
  committed
  219e1b8
- Added a Save button to the top bar
  
  aleksandrychev
  and
  claude
  committed
  444b471
- Groups now compile into their own bundles and take arrows
  
  aleksandrychev
  and
  claude
  committed
  38b8599
- Generated Policy tab shows the open file's compiled policy
  
  aleksandrychev
  and
  claude
  committed
  d7dc81a
- Template editor now follows the app's dark mode
  
  aleksandrychev
  and
  claude
  committed
  b2aeff5
- Mustache syntax help moved from Properties into the template editor
  
  aleksandrychev
  and
  claude
  committed
  11a7114
- Properties field labels and compute links are readable in dark mode
  
  aleksandrychev
  and
  claude
  committed
  0e8f8bf
- Hid the React Flow attribution on the canvas
  
  aleksandrychev
  and
  claude
  committed
  6c2108a
- blocks: Added file editing, directory, symlink, cleanup and watch blocks
  
  aleksandrychev
  and
  claude
  committed
  4207dc2
- blocks: Added Cron Job, Rotate Log and Remove Directory on stdlib bundles
  
  aleksandrychev
  and
  claude
  committed
  9308e6b
Commits on Oct 2, 2026
- Copy in the Generated Policy tab now copies the policy
  
  aleksandrychev
  and
  claude
  committed
  a42d7b0
- Demo project opens already tidied
  
  aleksandrychev
  and
  claude
  committed
  2e0dd09
- Demo project gained a web root, log pruning and a grouped Security file
  
  aleksandrychev
  and
  claude
  committed
  de3a65e
- Ctrl/Cmd +/-/0 now zoom the canvas instead of the whole window
  
  aleksandrychev
  and
  claude
  committed
  5c1095d
- File explorer rows are more compact and its area is larger by default
  
  aleksandrychev
  and
  claude
  committed
  0dd7c20
- New Project asks for the masterfiles version before how to store it
  
  aleksandrychev
  and
  claude
  committed
  976ba74
- The Python sidecar warms up in the background at launch
  
  aleksandrychev
  and
  claude
  committed
  7695c10
- Run Command's "Every agent run" no longer compiles to once a day
  
  aleksandrychev
  and
  claude
  committed
  a87f3dc
- Added per-block compiler tests: generated input variants and snapshots
  
  aleksandrychev
  and
  claude
  committed
  4d7a39e
- Test Results & Logs tab checks Docker and pulls base images
  
  aleksandrychev
  and
  claude
  committed
  2e086d7
- Test environments run the policy on Docker hosts from the Test Results tab
  
  aleksandrychev
  and
  claude
  committed
  2d4d335
- Test Results tab shows hosts as a topology, with a coloured log and a terminal
  
  aleksandrychev
  and
  claude
  committed
  db80a33
- Test runs list their problems, traced to the blocks that caused them
  
  aleksandrychev
  and
  claude
  committed
  1db93dd
- Define Variable can take a different value per condition
  
  aleksandrychev
  and
  claude
  committed
  e91a8a6
- Test host port fields can be cleared and retyped
  
  aleksandrychev
  and
  claude
  committed
  76c23bf
- Test host cards got Deploy & run, Start and Stop buttons
  
  aleksandrychev
  and
  claude
  committed
  7e216da
- Adding a test host starts with picking its platform
  
  aleksandrychev
  and
  claude
  committed
  1f78d8c
- Test hosts can run any Docker image
  
  aleksandrychev
  and
  claude
  committed
  c7ddaf4
- Running the policy on one test client no longer fails in update.cf
  
  aleksandrychev
  and
  claude
  committed
  755db2f
- Test runs report update.cf errors as problems
  
  aleksandrychev
  and
  claude
  committed
  04bd758
- Starting a test action clears the log filters
  
  aleksandrychev
  and
  claude
  committed
  b1e8479
- Generated Policy shows its blocks and links code back to them
  
  aleksandrychev
  and
  claude
  committed
  86751b4
Commits on Oct 5, 2026
- Added a Deployment tab: build and check, push to git, or deploy over SSH
  
  aleksandrychev
  and
  claude
  committed
  3d42371
- A rejected push offers to pull the remote's commits or overwrite them
  
  aleksandrychev
  and
  claude
  committed
  ce01534
- Deployment can deploy through an Enterprise hub
  
  aleksandrychev
  and
  claude
  committed
  6760987
- Test environment settings explain the secrets (.env) file
  
  aleksandrychev
  and
  claude
  committed
  80f6034
- Test environments set how many agent runs a Deploy & run makes
  
  aleksandrychev
  and
  claude
  committed
  d90add1
- A test host added after setup is set up from its card
  
  aleksandrychev
  and
  claude
  committed
  2086f14
- Test host cards can recreate a host from scratch
  
  aleksandrychev
  and
  claude
  committed
  ea48d40
- Setting up a test host no longer fails to fetch cf_promises_validated
  
  aleksandrychev
  and
  claude
  committed
  5908933
- Deployment tab: Redesigned around pre-flight checks and one tab per way
  
  aleksandrychev
  and
  claude
  committed
  9562948
- Top bar views became a segmented control with icons
  
  aleksandrychev
  and
  claude
  committed
  8a333fa
- SSH deploy works with CFEngine installed from a distro package
  
  aleksandrychev
  and
  claude
  committed
  a91220d
- SSH deploy no longer fails on a host missing from known_hosts
  
  aleksandrychev
  and
  claude
  committed
  f97082a
- Demo project opens with a hand-arranged layout
  
  aleksandrychev
  and
  claude
  committed
  3c2ba30
- Policy files can have a description, shown on hovering their name
  
  aleksandrychev
  and
  claude
  committed
  cb11da7
- compiler: Generated .cf files open with a masterfiles-style banner
  
  aleksandrychev
  and
  claude
  committed
  8331b9d
- SSH deploy's remote script moved to deploy.sh
  
  aleksandrychev
  and
  claude
  committed
  2175fc0
Commits on Oct 6, 2026
- Commit & push no longer commits the test environments' .env files
  
  aleksandrychev
  and
  claude
  committed
  a114915
- Test hosts' published ports listen on 127.0.0.1 only
  
  aleksandrychev
  and
  claude
  committed
  401ee93
- Test environments read their .env file only from inside the project
  
  aleksandrychev
  and
  claude
  committed
  c275760
- SSH deploy uploads the policy into a private directory on the hub
  
  aleksandrychev
  and
  claude
  committed
  312d57c
- SSH deploy runs cf-remote deploy instead of its own script
  
  aleksandrychev
  and
  claude
  committed
  7083e65
- Saving a project no longer deletes its test environments
  
  aleksandrychev
  and
  claude
  committed
  9dcc62c
- Hub repository match no longer fails on a URL ending in a slash
  
  aleksandrychev
  and
  claude
  committed
  d7fa226
- Class picker groups read "Defined in Web · runs only if linux"
  
  aleksandrychev
  and
  claude
  committed
  4a951b2
- Enterprise hub deploy reports again when it turned on VCS deploys
  
  aleksandrychev
  and
  claude
  committed
  6626d04
- Enterprise hub connection errors say why for dual-stack hosts
  
  aleksandrychev
  and
  claude
  committed
  d611d78
- Module projects made with the builder can be opened
  
  aleksandrychev
  and
  claude
  committed
  d77ae04
- Save As with test environments leaves the new git project clean
  
  aleksandrychev
  and
  claude
  committed
  5d994da
- python: cfpb_build.py is part of the wheel
  
  aleksandrychev
  and
  claude
  committed
  16c2a4d
- End-to-end runs can keep the app off screen
  
  aleksandrychev
  and
  claude
  committed
  46d9292
- Tests run in projects by speed, including the main process
  
  aleksandrychev
  and
  claude
  committed
  9e961da
- Added unit tests for the renderer's deployment, test run and editor logic
  
  aleksandrychev
  and
  claude
  committed
  462fff6
- Added unit tests for the main process
  
  aleksandrychev
  and
  claude
  committed
  65c04af
- Added integration tests for projects, git flows and the Enterprise hub
  
  aleksandrychev
  and
  claude
  committed
  c9069a1
- python: Added tests for the build and deploy commands
  
  aleksandrychev
  and
  claude
  committed
  7854cd1
- Added component tests for panels, dialogs and the Deployment and Tests views
  
  aleksandrychev
  and
  claude
  committed
  1ac0477
- Added end-to-end journeys for building policy, deployment and test environments
  
  aleksandrychev
  and
  claude
  committed
  5734400
- README: Added the CI status badge
  
  aleksandrychev
  and
  claude
  committed
  f9a11dd
- Added the Electron security checklist and a workflow that checks it
  
  aleksandrychev
  and
  claude
  committed
  88f5e92
- Added APP icon
  aleksandrychev
  committed
  ac5a471
- e2e: CI runs the app on its virtual screen, not hidden
  
  aleksandrychev
  and
  claude
  committed
  8fb9ef0
- The app loads from app://bundle instead of file://
  
  aleksandrychev
  and
  claude
  committed
  27e576a
- e2e: Tests on CI wait for the app's window to be shown
  
  aleksandrychev
  and
  claude
  committed
  5ce78c8
- Added test coverage for TypeScript and Python, reported to Codecov
  
  aleksandrychev
  and
  claude
  committed
  ae504ba
- Added a check that pull request commits are signed off with valid titles
  
  aleksandrychev
  and
  claude
  committed
  6cb5421
- fileTree: Comment no longer points to an untracked plan
  
  aleksandrychev
  and
  claude
  committed
  d4eeeb5
- Added a CodeQL workflow with the security-and-quality queries
  
  aleksandrychev
  and
  claude
  committed
  8cf2db3
- SSH deploy no longer accepts a host whose user part starts an ssh option
  
  aleksandrychev
  and
  claude
  committed
  7dd20a8
- Git no longer runs a project's own hooks, fsmonitor or command settings
  
  aleksandrychev
  and
  claude
  committed
  4c3a7c2
- Git fetches and pushes use the user's own core.sshCommand when one is set
  
  aleksandrychev
  and
  claude
  committed
  829bf24
- Saving no longer writes or deletes through a symlinked folder out of the project
  
  aleksandrychev
  and
  claude
  committed
  160eaed
- Commit no longer appends lines to a file a symlinked .gitignore points at
  
  aleksandrychev
  and
  claude
  committed
  19e71d9
- Saving no longer overwrites a policy file the builder didn't generate
  
  aleksandrychev
  and
  claude
  committed
  7246d78
- Packaged builds no longer load the page ELECTRON_RENDERER_URL names
  
  aleksandrychev
  and
  claude
  committed
  0d69b53
- app:// answers 404 to a malformed %-escape instead of throwing
  
  aleksandrychev
  and
  claude
  committed
  26fcfdd
- Permission checks are denied like permission requests, except clipboard writes
  
  aleksandrychev
  and
  claude
  committed
  103b196
- SECURITY-CHECKLIST.md: Item 1 no longer claims git remotes are https only
  
  aleksandrychev
  and
  claude
  committed
  e47237e
- Saving no longer accepts cfbs run steps in the builder's modules
  
  aleksandrychev
  and
  claude
  committed
  cf28c18
- Hub VCS settings no longer upload a key file whose path the page names
  
  aleksandrychev
  and
  claude
  committed
  2b4026c
- testenv: Added tests for the IPC handlers' request checks
  
  aleksandrychev
  and
  claude
  committed
  4ef70a4
- testenv: A project's masterfiles version can no longer name a folder to delete
  
  aleksandrychev
  and
  claude
  committed
  55ef17b
- testenv: Test runs build only local modules with the builder's own steps
  
  aleksandrychev
  and
  claude
  committed
  c05af8c
- Cancel, quit and timeouts no longer leave containers and ssh running
  
  aleksandrychev
  and
  claude
  committed
  d6e0395
- testenv: A failed masterfiles download no longer breaks later test runs
  
  aleksandrychev
  and
  claude
  committed
  e854d51
- testenv: Overlapping test runs no longer build in the same folder
  
  aleksandrychev
  and
  claude
  committed
  4c22a17
- python: Init cleans up after a timeout or an exit from cfbs too
  
  aleksandrychev
  and
  claude
  committed
  58b66cf
- testenv: Clients bootstrap again when Start recreates the hub
  
  aleksandrychev
  and
  claude
  committed
  bd1fc4c
- testenv: Test hosts install a CFEngine package only if its checksum matches
  
  aleksandrychev
  and
  claude
  committed
  8d45535
- testenv: .env values no longer go into the test containers' config
  
  aleksandrychev
  and
  claude
  committed
  b20e8b5
- compiler: Fixed "unless" conditions negating only their first class
  
  aleksandrychev
  and
  claude
  committed
  ce4f28a
- compiler: Malformed custom class expressions are skipped with a note
  
  aleksandrychev
  and
  claude
  committed
  a45463c
- compiler: Template data copies no longer collide with a block's other locals
  
  aleksandrychev
  and
  claude
  committed
  cdf1a4c
- compiler: Templates render like datastate() for variables that aren't set
  
  aleksandrychev
  and
  claude
  committed
  5f04ae0
- compiler: A Render Template computed from data renders it, not a placeholder
  
  aleksandrychev
  and
  claude
  committed
  7a24fc3
- compiler: Set Config Values splits settings computed from data at run time
  
  aleksandrychev
  and
  claude
  committed
  818b3d0
- compiler: Define Variable and Define Class run commands in cf-agent only
  
  aleksandrychev
  and
  claude
  committed
  51cd548
- compiler: Labels and conditions can no longer inject promises
  
  aleksandrychev
  and
  claude
  committed
  8d8cd62
- compiler: A backslash before a single quote is kept in CFEngine strings
  
  aleksandrychev
  and
  claude
  committed
  d8e1e48
- compiler: Literal lists in a chain keep backslashes and single quotes
  
  aleksandrychev
  and
  claude
  committed
  b1523f5
- compiler: Names are checked before they're written into policy
  
  aleksandrychev
  and
  claude
  committed
  a8000e6
- evaluateDecorator: An emptied parameter is read as its default, as compiled
  
  aleksandrychev
  and
  claude
  committed
  9f3cd03
- Deployment: Pull theirs, then push no longer discards unsaved edits
  
  aleksandrychev
  and
  claude
  committed
  62bec8e
- Builds and test runs no longer look out of date after layout-only changes
  
  aleksandrychev
  and
  claude
  committed
  ede5d46
- Selecting another file no longer marks the project unsaved
  
  aleksandrychev
  and
  claude
  committed
  b936f1a
- Environment variables are no longer lost when their dialog closes with Escape
  
  aleksandrychev
  and
  claude
  committed
  3e51111
- Test environment name, .env file and ports are saved on blur, one undo step
  
  aleksandrychev
  and
  claude
  committed
  e2f51ef
- The CFEngine version field no longer starts a sidecar per keystroke
  
  aleksandrychev
  and
  claude
  committed
  305b8f4
- Saving while another save runs now saves after it instead of doing nothing
  
  aleksandrychev
  and
  claude
  committed
  f7e5bda
- A malformed project.json now says so instead of showing a raw TypeError
  
  aleksandrychev
  and
  claude
  committed
  b7b6042
- A project saved from the demo gets a test environment id of its own
  
  aleksandrychev
  and
  claude
  committed
  498ffb8
- e2e: Docker cleanup no longer removes demo containers the suite didn't create
  
  aleksandrychev
  and
  claude
  committed
  dbc423b
- Coverage: Pull requests from forks no longer run the Codecov upload
  
  aleksandrychev
  and
  claude
  committed
  0dc8c5d
- Coverage: Only the upload job gets an OIDC token, actions pinned to commits
  
  aleksandrychev
  and
  claude
  committed
  9b6f358
- e2e: Console errors are collected from launch, the main process's too
  
  aleksandrychev
  and
  claude
  committed
  9cb90fa
- e2e: The encoded traversal check now asks for a path that could escape
  
  aleksandrychev
  and
  claude
  committed
  039d1c0
- e2e: The navigation check waits for Chromium's refusal, not a fixed 500 ms
  
  aleksandrychev
  and
  claude
  committed
  e921744
- Shortened header comments to the house style
  
  aleksandrychev
  and
  claude
  committed
  16ce01e
- Offline, the masterfiles version fallback is logged as a warning
  
  aleksandrychev
  and
  claude
  committed
  8ed7be8
- Removed the CodeQL workflow: the org enforces CodeQL's default setup
  
  aleksandrychev
  and
  claude
  committed
  7cab366
Commits on Oct 7, 2026
- Each policy file is its own namespace again
  
  aleksandrychev
  and
  claude
  committed
  5c80d47

Commits

Commits on Sep 30, 2026

Commits on Oct 1, 2026

Commits on Oct 2, 2026

Commits on Oct 5, 2026

Commits on Oct 6, 2026