cognitivesystems 0.0.2__tar.gz

cognitivesystems-0.0.2/.gitignore

@@ -0,0 +1,49 @@
+# Root credentials file — copy from .env.example, never commit real values
+.env
+
+# Test render artefacts — tests render under $CS_TMP (defaults to /tmp/cs-*,
+# outside the repo). Nothing test-related is written into the tree.
+
+# Python build / packaging artefacts (byte-compile, ruff cache, wheel builds)
+__pycache__/
+*.pyc
+.ruff_cache/
+.pytest_cache/
+.coverage
+build/
+dist/
+*.egg-info/
+.venv/
+venv/
+# CLI render output (cognitivesystems render --out default)
+render-out/
+
+# Built dashboard SPA copied into the package at publish time (the committed
+# placeholder web/static/index.html is replaced by the real Vite build in CI).
+src/cognitivesystems/web/static/assets/
+
+# Dev-only files (DEVELOPMENT.md, docs/development/, CLAUDE.md, .mcp.json,
+# .claude/, tasks/, ...) are tracked on dev and stripped from main by the
+# Release workflow — see .github/dev-only-paths. Only machine-local AI state
+# stays untracked:
+AGENT-HANDOFF.md
+AGENTS.md
+CLAUDE.md
+.cursor/
+.claude/
+.mcp.json
+.cursorrules
+.aider*
+.windsurf/
+.copilot/
+.continuedev/
+.codeium/
+opencode.json
+.opencode/
+.claude/settings.local.json
+
+# Editor
+*.swp
+*.log
+.vscode/
+.idea/

cognitivesystems-0.0.2/PKG-INFO

@@ -0,0 +1,229 @@
+Metadata-Version: 2.4
+Name: cognitivesystems
+Version: 0.0.2
+Summary: Catalog-driven Docker homeserver deployer: per-service compose renderer + terminal UI.
+Project-URL: Homepage, https://github.com/automationnexus/CognitiveSystems
+Project-URL: Source, https://github.com/automationnexus/CognitiveSystems
+Author: Tahasanul Abraham
+License-Expression: MIT
+Keywords: compose,deploy,docker,homeserver,self-hosted
+Classifier: Environment :: Console
+Classifier: Operating System :: POSIX :: Linux
+Classifier: Programming Language :: Python :: 3
+Classifier: Topic :: System :: Installation/Setup
+Requires-Python: >=3.9
+Requires-Dist: pyyaml>=6
+Requires-Dist: textual>=0.60
+Provides-Extra: dev
+Requires-Dist: httpx>=0.26; extra == 'dev'
+Requires-Dist: pytest-cov>=5; extra == 'dev'
+Requires-Dist: pytest>=8; extra == 'dev'
+Requires-Dist: ruff>=0.5; extra == 'dev'
+Provides-Extra: web
+Requires-Dist: docker<8,>=7; extra == 'web'
+Requires-Dist: fastapi>=0.115; extra == 'web'
+Requires-Dist: itsdangerous>=2.2; extra == 'web'
+Requires-Dist: pydantic>=2; extra == 'web'
+Requires-Dist: python-multipart>=0.0.9; extra == 'web'
+Requires-Dist: uvicorn[standard]>=0.30; extra == 'web'
+Description-Content-Type: text/markdown
+
+# CognitiveSystems Deployment
+
+A pip-installable deployment app for the CognitiveSystems Docker stack.
+One package, 42 services — no per-service `git clone` at deploy time.
+
+`cognitivesystems` renders a `docker-compose.yml` + `.env` for each service from
+per-service definitions (`services/<name>/service.yml`) plus an **install profile**
+that supplies the values specific to your machine (paths, network, ports, timezone),
+then drives `docker compose`. Drive it from the **web dashboard**, the **terminal UI**,
+or the CLI. Rendering works on any OS; **deploying needs Linux + Docker** (run it on the
+server, or in WSL).
+
+---
+
+## Install
+
+```bash
+pip install cognitivesystems          # from PyPI
+# or, from a clone (for development):
+git clone https://github.com/automationnexus/CognitiveSystems.git
+cd CognitiveSystems && pip install -e .
+```
+
+Requires **Python 3.9+**; deploying additionally needs **Docker + compose v2** on a
+Linux host (the app checks and tells you what's missing).
+
+---
+
+## Quick start
+
+```bash
+pip install "cognitivesystems[web]"   # include the web dashboard (optional extra)
+sudo cognitivesystems                 # launch the dashboard (or the TUI); deploy actions need root
+```
+
+With the `[web]` extra, `cognitivesystems` opens the **web dashboard** on `127.0.0.1:8800` — a
+browser GUI that does everything the TUI does. Disable the dashboard with `dashboard.enabled: false` in
+`state.json` to get the **terminal UI** instead (or run `cognitivesystems tui`). See [docs/dashboard.md](docs/dashboard.md).
+
+The TUI lists every service (`✓` = installed) with a live deploy-log pane. Keys:
+**`i`** install · **`u`** update · **`x`** uninstall · **`c`** configure · **`s`** service ·
+**`g`** config · **`k`** secrets · **`d`** docker · **`n`** network · **`a`** apps · **`h`** host ·
+**`r`** refresh · **`q`** quit (arrows/mouse to select). Great over SSH on the server.
+
+Or use the CLI:
+
+```bash
+# 1. pick an install profile (system-specific paths/network/ports/timezone)
+cognitivesystems init --profile homeserver   # NFS-backed homeserver (default)
+cognitivesystems init --profile localdev     # laptop / VM
+
+# 2. set credentials (prompt; Enter = auto-generate a strong value). No defaults ship.
+cognitivesystems configure                   # mode/domain + admin password, LE email,
+                                              # Cloudflare DNS token, per-service overrides
+
+# 3. install services (Linux + Docker; needs root for docker/chown)
+sudo cognitivesystems install traefik portainer plex uploadarr \
+    --mode public --domain example.com --auto-update --wildcard
+
+# 4. update / list / uninstall
+sudo cognitivesystems update                  # all installed
+sudo cognitivesystems update traefik plex     # specific services
+cognitivesystems list                         # catalog (* = installed)
+sudo cognitivesystems uninstall plex          # remove service + working dir
+sudo cognitivesystems uninstall plex --purge  # also delete the data dir
+```
+
+`homeserver` expects two NFS mounts to exist first — `/home/data` and
+`/mnt/homeserver`. See [docs/services.md](docs/services.md#install-profiles) for the
+mount layout and `localdev` caveats. Re-run `init --profile <name>` to switch profiles.
+
+### Reinstall an existing service
+
+```bash
+sudo cognitivesystems install plex --force          # uninstall then install (keeps data dir)
+sudo cognitivesystems install plex --force --purge  # same, but also drops the data dir
+```
+
+Without `--force`, installing an already-installed service is a no-op.
+
+### Render only (any OS)
+
+```bash
+cognitivesystems render plex --out ./out      # write docker-compose.yml + .env, no deploy
+```
+
+### OS administration (Linux)
+
+```bash
+sudo cognitivesystems system ssh-keygen --bits=8192 --install-to=admin,operator
+sudo cognitivesystems system change-password --target=root --password='…' --enable-root-ssh
+sudo cognitivesystems system media-user create
+```
+
+See [docs/system-admin.md](docs/system-admin.md).
+
+---
+
+## Repository layout
+
+```
+.
+├── pyproject.toml         # package metadata (hatchling); entry point `cognitivesystems`
+├── frontend/              # React + Vite dashboard SPA (built into the wheel at package time)
+├── src/cognitivesystems/  # the app
+│   ├── cli.py             # CLI: list / render / init / install / update / uninstall / system / tui / web
+│   ├── render.py          # renderer: catalog + state -> docker-compose.yml + .env
+│   ├── catalog.py state.py config.py deploy.py hooks.py system.py
+│   ├── core/              # shared capability registry, job runner, Docker client, per-area ops
+│   ├── tui/               # Textual terminal UI (app + per-area screens)
+│   ├── web/               # FastAPI dashboard backend (serves the built SPA + JSON/WS API)
+│   └── data/              # catalog bundled into the wheel (services + profiles)
+├── services/
+│   ├── install_order.yml  # infra precedence (db/proxy come up first)
+│   └── <name>/
+│       ├── service.yml    # one service definition per folder
+│       └── sidecars/      # optional static files (e.g. the qbittorrent webhook script)
+├── profiles/              # install profiles: homeserver.yml, localdev.yml
+├── tests/                 # pytest (render parity, GUI⇄TUI parity, variants, profiles, …)
+└── docs/                  # install-guide, migration-guide, dashboard, services, networking, configuration, system-admin
+```
+
+---
+
+## Deployment modes
+
+| Mode | Flag | TLS | Use case |
+|---|---|---|---|
+| Public | `--mode public` | Let's Encrypt TLS-ALPN-01, one cert per subdomain | Internet-facing server |
+| Public + Wildcard | `--mode public --wildcard` | Cloudflare DNS-01, single `*.<domain>` cert | Internet-facing, one cert for all |
+| Private | `--mode private` | None | LAN access via IP or hostname |
+| Local | `--mode local` | None | Single machine, `localhost` only |
+
+`--wildcard` needs `--cf-token` (a scoped Cloudflare DNS-edit API token). Healthchecks
+are not configured by the installer; use each image's built-in `HEALTHCHECK` if needed.
+
+---
+
+## Automatic install ordering
+
+You never order services manually — infra installs first, in a fixed order:
+`traefik → mariadb → mysql → mongodb → mqtt-broker`. Everything else follows.
+
+---
+
+## State & profile
+
+Persisted under `/home/installation_cognitivesystems/state.json` (override with
+`CS_STATE_DIR`):
+
+- **Runtime config** — mode, domain, passwords, installed services. Saved as you install.
+- **`.site`** — the system-specific values from your chosen install profile.
+
+Re-running `update` re-renders every installed service from saved state. To change
+domain / passwords / TLS mode: edit `state.json`, then `update`. To change profile
+values (paths, ports, network): edit `profiles/<name>.yml` and re-run `init`.
+See [docs/configuration.md](docs/configuration.md) for the schema.
+
+### Host file layout after install (homeserver defaults)
+
+```
+~/cognitivesystems/state/state.json              # default state file (--state to override)
+/home/<service>/{docker-compose.yml,.env}         # per-service working dir (install_root)
+/home/data/<ServiceDisplayName>/                  # persistent app data (config_root)
+```
+
+Data directories are never removed by `uninstall`; pass `--purge` to delete them too.
+Paths resolve from `state.json` `.site.paths` after `init --profile <name>`.
+
+---
+
+## Services
+
+42 services. Full details: [docs/services.md](docs/services.md) · Port model: [docs/networking-and-ports.md](docs/networking-and-ports.md)
+
+| Category | Services |
+|---|---|
+| Core infra | Traefik, Portainer, WatchTower, WG-Easy, CrontabUI |
+| Databases | MariaDB, MySQL, MongoDB, MQTT-Broker |
+| Media | Plex, Radarr, Sonarr, Prowlarr, Jackett, Bazarr, Tautulli, Stash, Whisparr, Threadfin, Seerr |
+| Download | Qbittorrent, CrossSeed, Autobrr, Rarrnomore, FlareSolverr, Byparr |
+| Files / Comms | SFTPGo, SnappyMail, Stalwart, Vaultwarden, Paperless |
+| Dev / Tools | Code-Server, OpenWebUI, Profilarr, Maintainerr, Heimdall, Wizarr, AdGuard, BetterDesk, Firefox, Chrome |
+| Custom | Uploadarr |
+
+---
+
+## Contributing
+
+Development happens on the `dev` branch, which carries the developer documentation
+(architecture, catalog reference, how to add a service, the test framework):
+
+→ [DEVELOPMENT.md on the `dev` branch](https://github.com/automationnexus/CognitiveSystems/blob/dev/DEVELOPMENT.md)
+
+<!-- dev-ci-verify -->
+
+<!-- nightly-e2e-verify -->
+
+<!-- final-nightly-verify -->

cognitivesystems-0.0.2/README.md

@@ -0,0 +1,199 @@
+# CognitiveSystems Deployment
+
+A pip-installable deployment app for the CognitiveSystems Docker stack.
+One package, 42 services — no per-service `git clone` at deploy time.
+
+`cognitivesystems` renders a `docker-compose.yml` + `.env` for each service from
+per-service definitions (`services/<name>/service.yml`) plus an **install profile**
+that supplies the values specific to your machine (paths, network, ports, timezone),
+then drives `docker compose`. Drive it from the **web dashboard**, the **terminal UI**,
+or the CLI. Rendering works on any OS; **deploying needs Linux + Docker** (run it on the
+server, or in WSL).
+
+---
+
+## Install
+
+```bash
+pip install cognitivesystems          # from PyPI
+# or, from a clone (for development):
+git clone https://github.com/automationnexus/CognitiveSystems.git
+cd CognitiveSystems && pip install -e .
+```
+
+Requires **Python 3.9+**; deploying additionally needs **Docker + compose v2** on a
+Linux host (the app checks and tells you what's missing).
+
+---
+
+## Quick start
+
+```bash
+pip install "cognitivesystems[web]"   # include the web dashboard (optional extra)
+sudo cognitivesystems                 # launch the dashboard (or the TUI); deploy actions need root
+```
+
+With the `[web]` extra, `cognitivesystems` opens the **web dashboard** on `127.0.0.1:8800` — a
+browser GUI that does everything the TUI does. Disable the dashboard with `dashboard.enabled: false` in
+`state.json` to get the **terminal UI** instead (or run `cognitivesystems tui`). See [docs/dashboard.md](docs/dashboard.md).
+
+The TUI lists every service (`✓` = installed) with a live deploy-log pane. Keys:
+**`i`** install · **`u`** update · **`x`** uninstall · **`c`** configure · **`s`** service ·
+**`g`** config · **`k`** secrets · **`d`** docker · **`n`** network · **`a`** apps · **`h`** host ·
+**`r`** refresh · **`q`** quit (arrows/mouse to select). Great over SSH on the server.
+
+Or use the CLI:
+
+```bash
+# 1. pick an install profile (system-specific paths/network/ports/timezone)
+cognitivesystems init --profile homeserver   # NFS-backed homeserver (default)
+cognitivesystems init --profile localdev     # laptop / VM
+
+# 2. set credentials (prompt; Enter = auto-generate a strong value). No defaults ship.
+cognitivesystems configure                   # mode/domain + admin password, LE email,
+                                              # Cloudflare DNS token, per-service overrides
+
+# 3. install services (Linux + Docker; needs root for docker/chown)
+sudo cognitivesystems install traefik portainer plex uploadarr \
+    --mode public --domain example.com --auto-update --wildcard
+
+# 4. update / list / uninstall
+sudo cognitivesystems update                  # all installed
+sudo cognitivesystems update traefik plex     # specific services
+cognitivesystems list                         # catalog (* = installed)
+sudo cognitivesystems uninstall plex          # remove service + working dir
+sudo cognitivesystems uninstall plex --purge  # also delete the data dir
+```
+
+`homeserver` expects two NFS mounts to exist first — `/home/data` and
+`/mnt/homeserver`. See [docs/services.md](docs/services.md#install-profiles) for the
+mount layout and `localdev` caveats. Re-run `init --profile <name>` to switch profiles.
+
+### Reinstall an existing service
+
+```bash
+sudo cognitivesystems install plex --force          # uninstall then install (keeps data dir)
+sudo cognitivesystems install plex --force --purge  # same, but also drops the data dir
+```
+
+Without `--force`, installing an already-installed service is a no-op.
+
+### Render only (any OS)
+
+```bash
+cognitivesystems render plex --out ./out      # write docker-compose.yml + .env, no deploy
+```
+
+### OS administration (Linux)
+
+```bash
+sudo cognitivesystems system ssh-keygen --bits=8192 --install-to=admin,operator
+sudo cognitivesystems system change-password --target=root --password='…' --enable-root-ssh
+sudo cognitivesystems system media-user create
+```
+
+See [docs/system-admin.md](docs/system-admin.md).
+
+---
+
+## Repository layout
+
+```
+.
+├── pyproject.toml         # package metadata (hatchling); entry point `cognitivesystems`
+├── frontend/              # React + Vite dashboard SPA (built into the wheel at package time)
+├── src/cognitivesystems/  # the app
+│   ├── cli.py             # CLI: list / render / init / install / update / uninstall / system / tui / web
+│   ├── render.py          # renderer: catalog + state -> docker-compose.yml + .env
+│   ├── catalog.py state.py config.py deploy.py hooks.py system.py
+│   ├── core/              # shared capability registry, job runner, Docker client, per-area ops
+│   ├── tui/               # Textual terminal UI (app + per-area screens)
+│   ├── web/               # FastAPI dashboard backend (serves the built SPA + JSON/WS API)
+│   └── data/              # catalog bundled into the wheel (services + profiles)
+├── services/
+│   ├── install_order.yml  # infra precedence (db/proxy come up first)
+│   └── <name>/
+│       ├── service.yml    # one service definition per folder
+│       └── sidecars/      # optional static files (e.g. the qbittorrent webhook script)
+├── profiles/              # install profiles: homeserver.yml, localdev.yml
+├── tests/                 # pytest (render parity, GUI⇄TUI parity, variants, profiles, …)
+└── docs/                  # install-guide, migration-guide, dashboard, services, networking, configuration, system-admin
+```
+
+---
+
+## Deployment modes
+
+| Mode | Flag | TLS | Use case |
+|---|---|---|---|
+| Public | `--mode public` | Let's Encrypt TLS-ALPN-01, one cert per subdomain | Internet-facing server |
+| Public + Wildcard | `--mode public --wildcard` | Cloudflare DNS-01, single `*.<domain>` cert | Internet-facing, one cert for all |
+| Private | `--mode private` | None | LAN access via IP or hostname |
+| Local | `--mode local` | None | Single machine, `localhost` only |
+
+`--wildcard` needs `--cf-token` (a scoped Cloudflare DNS-edit API token). Healthchecks
+are not configured by the installer; use each image's built-in `HEALTHCHECK` if needed.
+
+---
+
+## Automatic install ordering
+
+You never order services manually — infra installs first, in a fixed order:
+`traefik → mariadb → mysql → mongodb → mqtt-broker`. Everything else follows.
+
+---
+
+## State & profile
+
+Persisted under `/home/installation_cognitivesystems/state.json` (override with
+`CS_STATE_DIR`):
+
+- **Runtime config** — mode, domain, passwords, installed services. Saved as you install.
+- **`.site`** — the system-specific values from your chosen install profile.
+
+Re-running `update` re-renders every installed service from saved state. To change
+domain / passwords / TLS mode: edit `state.json`, then `update`. To change profile
+values (paths, ports, network): edit `profiles/<name>.yml` and re-run `init`.
+See [docs/configuration.md](docs/configuration.md) for the schema.
+
+### Host file layout after install (homeserver defaults)
+
+```
+~/cognitivesystems/state/state.json              # default state file (--state to override)
+/home/<service>/{docker-compose.yml,.env}         # per-service working dir (install_root)
+/home/data/<ServiceDisplayName>/                  # persistent app data (config_root)
+```
+
+Data directories are never removed by `uninstall`; pass `--purge` to delete them too.
+Paths resolve from `state.json` `.site.paths` after `init --profile <name>`.
+
+---
+
+## Services
+
+42 services. Full details: [docs/services.md](docs/services.md) · Port model: [docs/networking-and-ports.md](docs/networking-and-ports.md)
+
+| Category | Services |
+|---|---|
+| Core infra | Traefik, Portainer, WatchTower, WG-Easy, CrontabUI |
+| Databases | MariaDB, MySQL, MongoDB, MQTT-Broker |
+| Media | Plex, Radarr, Sonarr, Prowlarr, Jackett, Bazarr, Tautulli, Stash, Whisparr, Threadfin, Seerr |
+| Download | Qbittorrent, CrossSeed, Autobrr, Rarrnomore, FlareSolverr, Byparr |
+| Files / Comms | SFTPGo, SnappyMail, Stalwart, Vaultwarden, Paperless |
+| Dev / Tools | Code-Server, OpenWebUI, Profilarr, Maintainerr, Heimdall, Wizarr, AdGuard, BetterDesk, Firefox, Chrome |
+| Custom | Uploadarr |
+
+---
+
+## Contributing
+
+Development happens on the `dev` branch, which carries the developer documentation
+(architecture, catalog reference, how to add a service, the test framework):
+
+→ [DEVELOPMENT.md on the `dev` branch](https://github.com/automationnexus/CognitiveSystems/blob/dev/DEVELOPMENT.md)
+
+<!-- dev-ci-verify -->
+
+<!-- nightly-e2e-verify -->
+
+<!-- final-nightly-verify -->

cognitivesystems-0.0.2/frontend/.gitignore

@@ -0,0 +1,11 @@
+node_modules
+dist
+coverage
+*.local
+.vite
+
+# Playwright e2e artefacts
+e2e/.auth
+test-results
+playwright-report
+playwright/.cache

cognitivesystems-0.0.2/frontend/e2e/auth.setup.ts

@@ -0,0 +1,15 @@
+import { expect, test as setup } from '@playwright/test'
+import { ADMIN, AUTH_FILE } from './fixtures'
+
+// First-run against a fresh state (no admin password): the sign-in screen shows the one-time
+// "create admin password" form. Setting it must land on the dashboard. This also primes the
+// password for every other spec (it persists in the server's state).
+setup('first-run creates the admin password', async ({ page }) => {
+  await page.goto('/')
+  await expect(page.getByRole('heading', { name: 'Welcome' })).toBeVisible()
+  await page.getByLabel('New password').fill(ADMIN.pass)
+  await page.getByLabel('Confirm password').fill(ADMIN.pass)
+  await page.getByRole('button', { name: /create & sign in/i }).click()
+  await expect(page.getByRole('heading', { name: 'Overview' })).toBeVisible()
+  await page.context().storageState({ path: AUTH_FILE }) // reused by every other spec
+})

cognitivesystems-0.0.2/frontend/e2e/dashboard.spec.ts

@@ -0,0 +1,47 @@
+import { expect, test } from '@playwright/test'
+
+const PAGES: ReadonlyArray<readonly [string, string]> = [
+  ['Services', 'Services'],
+  ['Config', 'Configuration'],
+  ['Docker', 'Docker'],
+  ['Networks', 'Managed networks'],
+  ['Apps', 'Custom apps'],
+  ['Host', 'Host administration'],
+  ['Jobs', 'Jobs'],
+]
+
+test('navigates every page without a runtime error', async ({ page }) => {
+  const errors: string[] = []
+  page.on('pageerror', (e) => errors.push(String(e)))
+  await page.goto('/')
+  await expect(page.getByRole('heading', { name: 'Overview' })).toBeVisible()
+  for (const [nav, heading] of PAGES) {
+    await page.getByRole('link', { name: nav, exact: true }).click()
+    await expect(page.getByRole('heading', { level: 1, name: heading })).toBeVisible()
+  }
+  await page.getByRole('link', { name: 'Overview', exact: true }).click()
+  await expect(page.getByRole('heading', { name: 'Overview' })).toBeVisible()
+  expect(errors, errors.join('\n')).toEqual([])
+})
+
+test('theme toggle flips data-theme', async ({ page }) => {
+  await page.goto('/')
+  await expect(page.getByRole('heading', { name: 'Overview' })).toBeVisible()
+  const before = await page.evaluate(() => document.documentElement.dataset.theme)
+  await page.getByRole('button', { name: /light|dark/i }).click()
+  const after = await page.evaluate(() => document.documentElement.dataset.theme)
+  expect(after).not.toBe(before)
+})
+
+test('logout returns to the sign-in screen', async ({ page }) => {
+  await page.goto('/')
+  await page.getByRole('button', { name: /logout/i }).click()
+  await expect(page.getByRole('heading', { name: 'Sign in' })).toBeVisible()
+})
+
+test('responsive: the nav still works at mobile width', async ({ page }) => {
+  await page.setViewportSize({ width: 390, height: 800 })
+  await page.goto('/')
+  await page.getByRole('link', { name: 'Docker', exact: true }).click()
+  await expect(page.getByRole('heading', { name: 'Docker' })).toBeVisible()
+})

cognitivesystems-0.0.2/frontend/e2e/docker.spec.ts

@@ -0,0 +1,41 @@
+import { expect, test } from '@playwright/test'
+
+async function gotoDocker(page: import('@playwright/test').Page) {
+  await page.goto('/')
+  await page.getByRole('link', { name: 'Docker', exact: true }).click()
+  await expect(page.getByRole('heading', { name: 'Docker' })).toBeVisible()
+}
+
+test('containers tab streams logs and exec over websockets', async ({ page }) => {
+  await gotoDocker(page)
+  await expect(page.getByText('nginx-demo')).toBeVisible()
+
+  // logs websocket → "fake log line"
+  await page.getByRole('button', { name: 'logs' }).click()
+  await expect(page.getByText('fake log line')).toBeVisible({ timeout: 10000 })
+  await page.getByRole('button', { name: '✕' }).click()
+
+  // exec websocket (CSRF-gated) echoes the command output
+  await page.getByRole('button', { name: 'exec' }).click()
+  await page.getByPlaceholder(/command/).fill('ls -la')
+  await page.getByRole('button', { name: 'Run' }).click()
+  await expect(page.getByText(/ran:/)).toBeVisible({ timeout: 10000 })
+  await page.getByRole('button', { name: '✕' }).click()
+})
+
+test('images and volumes tabs show seeded data', async ({ page }) => {
+  await gotoDocker(page)
+  await page.getByRole('button', { name: 'images' }).click()
+  await expect(page.getByText('nginx:alpine')).toBeVisible()
+  await page.getByRole('button', { name: 'volumes' }).click()
+  await expect(page.getByText('demo-vol')).toBeVisible()
+})
+
+test('confirm modal cancels a destructive action (no window.confirm)', async ({ page }) => {
+  await gotoDocker(page)
+  // "remove" opens the glass confirm dialog; cancelling keeps the container
+  await page.getByRole('button', { name: 'remove', exact: true }).first().click()
+  await expect(page.getByRole('dialog')).toContainText(/Remove container/)
+  await page.getByRole('button', { name: 'Cancel' }).click()
+  await expect(page.getByText('nginx-demo')).toBeVisible()
+})

cognitivesystems-0.0.2/frontend/e2e/fixtures.ts

@@ -0,0 +1,7 @@
+// >= 8 chars to satisfy the first-run min-length check.
+export const ADMIN = { user: 'admin', pass: 'e2e-password-123' }
+
+// auth.setup.ts signs in once and saves the session here; the chromium project reuses it
+// (storageState), so specs start authenticated — one login total, which also keeps the backend
+// login rate-limiter (5/60s per IP) from tripping across parallel specs.
+export const AUTH_FILE = 'e2e/.auth/state.json'

cognitivesystems-0.0.2/frontend/e2e/services.spec.ts

@@ -0,0 +1,14 @@
+import { expect, test } from '@playwright/test'
+
+test('install streams a job log to completion', async ({ page }) => {
+  await page.goto('/')
+  await page.getByRole('link', { name: 'Services', exact: true }).click()
+  await expect(page.getByRole('heading', { name: 'Services' })).toBeVisible()
+
+  // open a service's Manage modal and kick off an install — the fake runner emits two lines
+  // and exits 0, so the JobLog websocket streams to a "done (rc=0)" end frame.
+  await page.getByRole('button', { name: 'Manage' }).first().click()
+  await expect(page.getByRole('dialog')).toBeVisible()
+  await page.getByRole('button', { name: 'Install', exact: true }).click()
+  await expect(page.getByText(/rc=0/)).toBeVisible({ timeout: 15000 })
+})

cognitivesystems-0.0.2/frontend/eslint.config.js

@@ -0,0 +1,19 @@
+import js from '@eslint/js'
+import reactHooks from 'eslint-plugin-react-hooks'
+import reactRefresh from 'eslint-plugin-react-refresh'
+import globals from 'globals'
+import tseslint from 'typescript-eslint'
+
+export default tseslint.config(
+  { ignores: ['dist', 'coverage', 'node_modules'] },
+  {
+    extends: [js.configs.recommended, ...tseslint.configs.recommended],
+    files: ['**/*.{ts,tsx}'],
+    languageOptions: { ecmaVersion: 2022, globals: globals.browser },
+    plugins: { 'react-hooks': reactHooks, 'react-refresh': reactRefresh },
+    rules: {
+      ...reactHooks.configs.recommended.rules,
+      'react-refresh/only-export-components': ['warn', { allowConstantExport: true }],
+    },
+  },
+)

cognitivesystems-0.0.2/frontend/index.html

@@ -0,0 +1,12 @@
+<!doctype html>
+<html lang="en" data-theme="dark">
+  <head>
+    <meta charset="UTF-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+    <title>CognitiveSystems Dashboard</title>
+  </head>
+  <body>
+    <div id="root"></div>
+    <script type="module" src="/src/main.tsx"></script>
+  </body>
+</html>