@data-matters.io/agent-harness 0.1.1 → 0.1.2

package/README.md

@@ -18,7 +18,7 @@ minimumReleaseAgeExclude:
 
 ```sh
 pnpm add -D -E @data-matters.io/agent-harness
-pnpm exec harness init --new --stack nextjs   # or nestjs; --existing for a codebase without tests
+pnpm exec harness init --new --stack nextjs   # or nestjs, vite; --existing for a codebase without tests
 ```
 
 ```json

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@data-matters.io/agent-harness",
-  "version": "0.1.1",
+  "version": "0.1.2",
   "description": "Spec-Driven Development with Claude Code: gates, task loop and standards installed into a product repository",
   "license": "UNLICENSED",
   "repository": {

package/standards/stack.md

@@ -8,6 +8,7 @@ standards, and differ only in the framework.
 | -------- | -------------------------------- | -------------------------------------- | ------------------------ |
 | `nextjs` | `data-matters-io/nextjs-new-app` | Web applications (UI + route handlers) | `stacks/nextjs/stack.md` |
 | `nestjs` | `data-matters-io/nestjs-new-app` | Backend services (HTTP APIs)           | `stacks/nestjs/stack.md` |
+| `vite`   | none (ADR 0023)                  | Static Vite + TypeScript sites, no DB  | `stacks/vite/stack.md`   |
 
 In a product repo, the chosen stack's files are in `.harness/standards/stack/`.
 
@@ -40,3 +41,4 @@ workflow (`gates.yml`) validated against each template:
 | -------- | ---------------------------- |
 | `nextjs` | see `stacks/nextjs/stack.md` |
 | `nestjs` | see `stacks/nestjs/stack.md` |
+| `vite`   | see `stacks/vite/stack.md`   |

package/standards/stacks/vite/architecture.md

@@ -0,0 +1,10 @@
+# Architecture: Vite static sites
+
+A static site: everything runs in the browser and `vite build` emits `dist/`.
+Deviations need an ADR in the product repo.
+
+- Source in `src/`, entry from `index.html`; tests beside the code.
+- No server, no database, no secrets: nothing in `src/` or `dist/` may hold one.
+- Keep pure logic (data, rules) in modules apart from DOM code, so it is
+  testable without a browser.
+- Dependencies are added only when the spec declares them (ADR 0015).

package/standards/stacks/vite/conventions.md

@@ -0,0 +1,13 @@
+# Conventions: Vite static sites
+
+Extends the shared `conventions.md`.
+
+- Type-only imports inline: `import { type Foo } from '…'`.
+- Import order is auto-fixed by lint (`@data-matters.io/eslint-config`).
+- Files are kebab-case `.ts`; tests are `<file>.test.ts` beside the code.
+- Env vars exposed to the client use the `VITE_` prefix and are never secret.
+
+## Local workflow
+
+`pnpm dev`, `pnpm build`, `pnpm test`, `pnpm lint`, `pnpm typecheck` and
+`pnpm gates` (all gates).

package/standards/stacks/vite/stack.md

@@ -0,0 +1,27 @@
+# Stack: Vite static sites
+
+No app template: the preset is derived from `data-matters-io/play-around-world`
+(ADR 0023), with `@data-matters.io/eslint-config` 4.0.0.
+
+| Area         | Choice                                    | Version |
+| ------------ | ----------------------------------------- | ------- |
+| Runtime      | Node.js (build and tooling only)          | 24.x    |
+| Bundler      | Vite, static output in `dist/`            | 8.x     |
+| Language     | TypeScript, `strict: true`                | 5.9.x   |
+| Testing      | Vitest + jsdom, coverage with istanbul    | 5.x     |
+| Lint preset  | `typescript`                              | 4.x     |
+| Backend / DB | None: no server, no Prisma, no PostgreSQL | —       |
+
+## Gates (`templates/stacks/vite/gates.conf`)
+
+| Gate      | Command                                                                        |
+| --------- | ------------------------------------------------------------------------------ |
+| setup     | none                                                                           |
+| test      | `vitest run` with istanbul (floor: 85% lines, statements, branches, functions) |
+| lint      | `eslint . --max-warnings 0`                                                    |
+| typecheck | `tsc --noEmit`                                                                 |
+| build     | `vite build`                                                                   |
+| db        | none (no database)                                                             |
+
+The coverage floor lives in `gates.conf`, not in `vite.config.ts`, so an agent
+cannot lower it.

package/standards/stacks/vite/testing.md

@@ -0,0 +1,25 @@
+# Testing: Vite static sites
+
+Extends the shared `testing.md`.
+
+Tooling: Vitest 5 with jsdom, coverage provider istanbul
+(`@vitest/coverage-istanbul`).
+
+## Tiers
+
+| Tier        | Pattern                        | Status              |
+| ----------- | ------------------------------ | ------------------- |
+| Unit        | `src/**/*.test.ts` beside code | in use; `test` gate |
+| Integration | none: there is no backend      | not applicable      |
+| E2E         | none yet                       | not a harness gate  |
+
+## Rules
+
+- Unit tests do not touch the network.
+- DOM code is tested through jsdom with accessible queries, not implementation
+  details.
+
+## Coverage floor
+
+85% on lines, statements, branches and functions, over every file matching
+`src/**/*.ts` (set in `gates.conf`).

package/templates/stacks/vite/gates.conf

@@ -0,0 +1,31 @@
+# Gate commands for a static Vite + TypeScript site (no database, no server).
+# Sourced by .harness/gates.sh from the repo root. Validated against
+# data-matters-io/play-around-world: vite 8.3.5, typescript 5.9.3, vitest 5.0.5,
+# @vitest/coverage-istanbul 5.0.5, jsdom 30.1.3, @data-matters.io/eslint-config 4.0.0.
+
+# Gates call node_modules/.bin directly instead of `pnpm exec`: a gate must never
+# install or mutate anything (same rule as the other stack presets). Dependencies
+# are installed beforehand (`pnpm install --frozen-lockfile`).
+bin="node_modules/.bin"
+
+# No setup step: nothing to generate before the gates run.
+GATE_SETUP=""
+
+# Coverage floor 85% on every metric, statement-based (istanbul), measured over
+# every source file (standards/testing.md). Kept here, not in vite.config.ts, so
+# an agent cannot lower it. Raise it as coverage grows; never lower it.
+GATE_TEST="$bin/vitest run --coverage.enabled --coverage.provider=istanbul --coverage.include='src/**/*.ts' --coverage.thresholds.lines=85 --coverage.thresholds.statements=85 --coverage.thresholds.branches=85 --coverage.thresholds.functions=85"
+# Read-only and zero warnings (@data-matters.io/eslint-config, typescript preset).
+GATE_LINT="$bin/eslint . --max-warnings 0"
+GATE_TYPECHECK="$bin/tsc --noEmit"
+GATE_BUILD="$bin/vite build"
+
+# Formats openspec/ after an archive (the archive output is not formatted).
+FORMAT_SPECS="$bin/prettier --write openspec"
+
+# Stop hook runs the fast gates; build runs in the loop and CI.
+STOP_GATES=(lint typecheck test)
+
+GATE_EXTRA=(
+  # "security:pnpm audit --audit-level high"
+)

package/templates/stacks/vite/gates.yml

@@ -0,0 +1,50 @@
+name: gates
+
+on:
+  pull_request:
+  push:
+    branches: [main]
+
+jobs:
+  gates:
+    runs-on: ubuntu-latest
+    steps:
+      # fetch-depth 2: HEAD is the PR merge commit and HEAD^1 its base, enough
+      # to list the files the pull request changes.
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 2
+
+      # Reads the exact pnpm version from package.json#packageManager (ADR 0014).
+      # pnpm 12 needs v6.1.0+; the floating @v6 tag is older.
+      - uses: pnpm/action-setup@v6.1.0
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 24
+          cache: pnpm
+
+      - name: Install dependencies
+        run: pnpm install --frozen-lockfile
+
+      # A harness installed from the package (ADR 0021) is generated by the
+      # install's "prepare"; a missing or stale one fails here.
+      - name: Check the harness
+        run: if [[ -x node_modules/.bin/harness ]]; then node_modules/.bin/harness check; fi
+
+      # After the install: with the package, .harness/ is generated by it.
+      # Spec-only PRs (ADR 0011, 0013) validate the specs instead of running the
+      # DoD gates; pr-scope.sh also fails a spec/<id> PR that changes anything
+      # outside openspec/changes/<id>/. Pushes to main always run the gates.
+      - name: Classify pull request
+        id: scope
+        run: .harness/pr-scope.sh >>"$GITHUB_OUTPUT"
+
+      # OpenSpec is a pinned devDependency (.harness/openspec.sh).
+      - name: Validate OpenSpec changes and specs
+        if: steps.scope.outputs.spec_only == 'true'
+        run: .harness/openspec.sh validate --all --strict --no-interactive
+
+      - name: Run DoD gates
+        if: steps.scope.outputs.spec_only != 'true'
+        run: .harness/gates.sh