GUI buildout: three-panel Profiles, global Actions tab, sensor quick-create rule (issue #525)

.github/workflows/pr-build.yml

@@ -0,0 +1,38 @@
+name: PR Build
+
+on:
+  pull_request:
+    branches: [main]
+
+jobs:
+  build:
+    runs-on: macos-latest
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Cache SPM dependencies
+        uses: actions/cache@v4
+        with:
+          path: .build/checkouts
+          key: spm-${{ runner.os }}-${{ hashFiles('Package.resolved') }}
+          restore-keys: |
+            spm-${{ runner.os }}-
+
+      - name: Select Xcode
+        run: sudo xcode-select -s /Applications/Xcode.app
+
+      - name: Build and assemble bundle
+        run: make bundle
+
+      - name: Zip app bundle
+        run: |
+          cd .build/universal/debug
+          zip -r ControlPlane.zip ControlPlane.app
+
+      - name: Upload artifact
+        uses: actions/upload-artifact@v4
+        with:
+          name: ControlPlane-PR${{ github.event.pull_request.number }}
+          path: .build/universal/debug/ControlPlane.zip
+          retention-days: 14

CLAUDE.md

@@ -209,7 +209,7 @@ All new sensors extend `BaseSensor` (in `ControlPlaneSDK`). `BaseSensor` impleme
 | `RunningApplicationSensor` | `RunningApplicationSensor` | `com.controlplane.sensors.runningapplication` | Push+Dynamic | Keys are bundle IDs; reading per key → boolean |
 | `MountedVolumeSensor` | `MountedVolumeSensor` | `com.controlplane.sensors.mountedvolume` | Push | NSWorkspace mount/unmount; reads `mounted` (strings) + per-volume boolean |
 | `ScreenLockSensor` | `ScreenLockSensor` | `com.controlplane.sensors.screenlock` | Push | DistributedNotificationCenter; reads `locked` boolean |
-| `USBSensor` | `USBSensor` | `com.controlplane.sensors.usb` | Push+Dynamic | IOKit; keys are `"vendorID:productID"`; reads `devices` strings |
+| `USBSensor` | `USBSensor` | `com.controlplane.sensors.usb` | Push+Dynamic | IOKit; keys are lowercase hex `"vvvv:pppp"` (e.g. `"05ac:12a8"`); emits one boolean reading per connected device (label = product name) plus `devices` strings summary |
 | `BluetoothSensor` | `BluetoothSensor` | `com.controlplane.sensors.bluetooth` | Push | IOBluetooth; reads `powered`, `devices`, per-MAC boolean |
 | `NetworkLinkSensor` | `NetworkLinkSensor` | `com.controlplane.sensors.networklink` | Push | SCDynamicStore; reads per-interface boolean + `activeInterfaces` |
 | `IPAddressSensor` | `IPAddressSensor` | `com.controlplane.sensors.ipaddress` | Push | SCDynamicStore; reads `<iface>.ipv4`, `<iface>.ipv6`, `allAddresses` |

Makefile

@@ -13,15 +13,19 @@ APP_BINARY := $(APP_BUNDLE)/Contents/MacOS/ControlPlane
 INFO_PLIST := Resources/ControlPlane-Info.plist
 ICON       := Resources/AppIcon.icns
 
-.PHONY: all build install run clean
+.PHONY: all build install run bundle clean
 
 ## Default: build universal binaries and install cpctl
 all: build install
 
-## Build for arm64 and x86_64, then lipo into universal binaries
+## Build for arm64 and x86_64, then lipo into universal binaries.
+## Each product is built with a separate invocation so SPM cannot silently
+## skip one when multiple --product flags are passed on some toolchain versions.
 build:
-	$(SWIFT) build -c $(CONFIG) --arch arm64  --product ControlPlane --product cpctl
-	$(SWIFT) build -c $(CONFIG) --arch x86_64 --product ControlPlane --product cpctl
+	$(SWIFT) build -c $(CONFIG) --arch arm64  --product ControlPlane
+	$(SWIFT) build -c $(CONFIG) --arch arm64  --product cpctl
+	$(SWIFT) build -c $(CONFIG) --arch x86_64 --product ControlPlane
+	$(SWIFT) build -c $(CONFIG) --arch x86_64 --product cpctl
 	@mkdir -p $(UNIV_DIR)
 	lipo -create $(BIN_ARM)/ControlPlane $(BIN_X86)/ControlPlane -output $(UNIV_DIR)/ControlPlane
 	lipo -create $(BIN_ARM)/cpctl        $(BIN_X86)/cpctl        -output $(UNIV_DIR)/cpctl
@@ -49,7 +53,21 @@ run: build install
 	open "$(APP_BUNDLE)"
 	@echo "ControlPlane running from $(APP_BUNDLE)"
 
-## Remove all build artifacts
+## Assemble the app bundle and sign it ad-hoc, without launching.
+## Used by CI to produce a downloadable artifact.
+bundle: build
+	@mkdir -p "$(APP_BUNDLE)/Contents/MacOS"
+	@mkdir -p "$(APP_BUNDLE)/Contents/Resources"
+	cp $(INFO_PLIST) "$(APP_BUNDLE)/Contents/Info.plist"
+	cp $(UNIV_DIR)/ControlPlane "$(APP_BINARY)"
+	cp $(UNIV_DIR)/cpctl "$(APP_BUNDLE)/Contents/MacOS/cpctl"
+	cp $(ICON) "$(APP_BUNDLE)/Contents/Resources/AppIcon.icns"
+	codesign --force --deep --sign - --identifier "com.controlplane.app" "$(APP_BUNDLE)"
+	@echo "Bundle assembled → $(APP_BUNDLE)"
+
+## Remove all build artifacts.
+## Uses rm -rf instead of 'swift package clean' to guarantee a truly clean
+## state — swift package clean can leave stale SPM metadata that causes the
+## next build to produce only some products.
 clean:
-	$(SWIFT) package clean
-	rm -rf .build/universal
+	rm -rf .build