@vincentt-xr/harness 0.1.0

package/dist/relay/cli.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};

package/dist/relay/cli.js

@@ -0,0 +1,7 @@
+#!/usr/bin/env node
+// `harness-relay` — start the diagnostics relay beside Vite. The preview loop
+// spawns this (or you run it directly). Prints a line the tunnel step can read.
+import { startRelay } from "./server.js";
+const portArg = process.argv.indexOf("--port");
+const port = portArg !== -1 ? Number(process.argv[portArg + 1]) : 7331;
+startRelay({ port, onLog: (m) => console.log(`[harness-relay] ${m}`) });

package/dist/relay/server.d.ts

@@ -0,0 +1,12 @@
+import { EventStore } from "./store.js";
+export interface RelayOptions {
+    port?: number;
+    /** WS path the client connects to (default matches HarnessProvider). */
+    path?: string;
+    capacity?: number;
+    onLog?: (msg: string) => void;
+}
+export declare function startRelay(opts?: RelayOptions): {
+    store: EventStore;
+    close: () => Promise<void>;
+};

package/dist/relay/server.js

@@ -0,0 +1,85 @@
+// The relay: a WebSocket + HTTP server that sits beside Vite. The phone's
+// harness client pushes event batches over WS; the MCP server pulls via a
+// localhost HTTP endpoint. Deliberately tiny — all the buffering/querying logic
+// is in store.ts. One relay process per preview run; the cloudflared tunnel
+// carries the WS path to the phone.
+import { createServer } from "node:http";
+import { WebSocketServer } from "ws";
+import { EventStore } from "./store.js";
+export function startRelay(opts = {}) {
+    const port = opts.port ?? 7331;
+    const path = opts.path ?? "/__harness";
+    const store = new EventStore(opts.capacity);
+    const log = opts.onLog ?? (() => undefined);
+    const http = createServer((req, res) => handleHttp(req, res, store, log));
+    const wss = new WebSocketServer({ server: http, path });
+    wss.on("connection", (ws) => {
+        log("client connected");
+        ws.on("message", (data) => {
+            try {
+                const msg = JSON.parse(String(data));
+                if (msg.type === "events" && Array.isArray(msg.events)) {
+                    store.ingest(msg.sessionId, msg.events);
+                }
+            }
+            catch {
+                // ignore malformed frames — a bad client must not crash the relay
+            }
+        });
+        ws.on("close", () => log("client disconnected"));
+    });
+    http.listen(port, () => log(`relay listening on :${port} (ws ${path}, http /query)`));
+    return {
+        store,
+        close: () => new Promise((resolve) => {
+            wss.close();
+            http.close(() => resolve());
+        }),
+    };
+}
+// The MCP server (running on the same laptop) GETs /query with the RelayQuery
+// as JSON in the body or querystring. Localhost-only by deployment; no auth in
+// the local dev loop (the platform phase adds it).
+function handleHttp(req, res, store, log) {
+    const url = new URL(req.url ?? "/", "http://localhost");
+    if (url.pathname !== "/query") {
+        res.writeHead(404).end();
+        return;
+    }
+    readQuery(req, url)
+        .then((q) => {
+        const result = store.query(q);
+        res
+            .writeHead(200, { "content-type": "application/json" })
+            .end(JSON.stringify(result));
+    })
+        .catch((err) => {
+        log(`query error: ${err}`);
+        res.writeHead(400).end();
+    });
+}
+async function readQuery(req, url) {
+    if (req.method === "POST") {
+        const body = await readBody(req);
+        return body ? JSON.parse(body) : {};
+    }
+    const q = {};
+    const p = url.searchParams;
+    if (p.get("sessionId"))
+        q.sessionId = p.get("sessionId");
+    if (p.get("kind"))
+        q.kind = p.get("kind");
+    if (p.get("since"))
+        q.since = Number(p.get("since"));
+    if (p.get("limit"))
+        q.limit = Number(p.get("limit"));
+    return q;
+}
+function readBody(req) {
+    return new Promise((resolve, reject) => {
+        let data = "";
+        req.on("data", (c) => (data += c));
+        req.on("end", () => resolve(data));
+        req.on("error", reject);
+    });
+}

package/dist/relay/store.d.ts

@@ -0,0 +1,13 @@
+import type { DiagEvent, RelayQuery, RelayResult } from "../shared/events.js";
+export declare class EventStore {
+    private readonly capacity;
+    private readonly buf;
+    private readonly sessionsSeen;
+    private latest;
+    constructor(capacity?: number);
+    /** Ingest a batch from a client. Tracks the session and advances latestSeq. */
+    ingest(sessionId: string, events: DiagEvent[]): void;
+    /** Answer an MCP query against the buffer. Newest-biased when limited. */
+    query(q?: RelayQuery): RelayResult;
+    size(): number;
+}

package/dist/relay/store.js

@@ -0,0 +1,68 @@
+// The relay's memory: a bounded ring buffer of recent diagnostics events,
+// queryable the way the MCP server asks ("network events since seq 40", "last
+// 20 errors"). Pure and dependency-free so it is fully unit-testable; the WS
+// server in server.ts is a thin wrapper that feeds this and answers queries
+// from it.
+export class EventStore {
+    capacity;
+    buf = [];
+    sessionsSeen = new Set();
+    latest = -1;
+    constructor(capacity = 5000) {
+        this.capacity = capacity;
+    }
+    /** Ingest a batch from a client. Tracks the session and advances latestSeq. */
+    ingest(sessionId, events) {
+        this.sessionsSeen.add(sessionId);
+        for (const e of events) {
+            // Tag ownership on the stored copy so cross-session queries can filter.
+            this.buf.push(withSession(e, sessionId));
+            if (e.seq > this.latest)
+                this.latest = e.seq;
+        }
+        // Ring: drop oldest beyond capacity.
+        if (this.buf.length > this.capacity) {
+            this.buf.splice(0, this.buf.length - this.capacity);
+        }
+    }
+    /** Answer an MCP query against the buffer. Newest-biased when limited. */
+    query(q = {}) {
+        let out = this.buf.filter((e) => {
+            if (q.sessionId && sessionOf(e) !== q.sessionId)
+                return false;
+            if (q.kind && e.kind !== q.kind)
+                return false;
+            if (q.since !== undefined && e.seq <= q.since)
+                return false;
+            return true;
+        });
+        if (q.limit !== undefined && out.length > q.limit) {
+            out = out.slice(out.length - q.limit); // keep the newest `limit`
+        }
+        return {
+            events: out.map(stripSession),
+            latestSeq: this.latest,
+            sessions: [...this.sessionsSeen],
+        };
+    }
+    size() {
+        return this.buf.length;
+    }
+}
+// The store tags each event with its owning session out-of-band (a symbol key)
+// so it survives in the buffer without polluting the wire type. Queries strip
+// it before returning.
+const SESSION = Symbol("session");
+function withSession(e, sessionId) {
+    return Object.assign(Object.create(Object.getPrototypeOf(e)), e, {
+        [SESSION]: sessionId,
+    });
+}
+function sessionOf(e) {
+    return e[SESSION];
+}
+function stripSession(e) {
+    const copy = { ...e };
+    delete copy[SESSION];
+    return copy;
+}

package/dist/scaffold/index.d.ts

@@ -0,0 +1,19 @@
+export declare const TEMPLATE_REPO = "git@github.com:vincentt-xr/v2-template.git";
+/** Injectable git runner (real git by default; a fake in tests avoids the network). */
+export type GitRunner = (args: string[]) => Promise<void>;
+/**
+ * True when `dir` has no app yet (no package.json) → safe to scaffold into.
+ * A directory that already holds an app is left untouched (project_create just binds).
+ */
+export declare function needsScaffold(dir: string): Promise<boolean>;
+export interface ScaffoldOptions {
+    repo?: string;
+    /** Test seam — defaults to spawning real git. */
+    runGit?: GitRunner;
+}
+/**
+ * Scaffold the template into `targetDir`. Clones to a temp dir, strips `.git`,
+ * copies the files in (never overwriting anything already there), then inits a
+ * fresh repo. Throws a clear error if the clone fails (e.g. no git access).
+ */
+export declare function scaffoldFromTemplate(targetDir: string, opts?: ScaffoldOptions): Promise<void>;

package/dist/scaffold/index.js

@@ -0,0 +1,72 @@
+// Scaffold a new app from the v2-template GitHub template as part of
+// project_create. Shallow-clones the template, drops its git history, copies the
+// files into the target, and inits a fresh repo the creator owns — the local-first
+// equivalent of GitHub's "Use this template". Node-only (spawns git); not imported
+// by browser consumers.
+import { execFile } from "node:child_process";
+import { promises as fs } from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import { promisify } from "node:util";
+const execFileAsync = promisify(execFile);
+export const TEMPLATE_REPO = "git@github.com:vincentt-xr/v2-template.git";
+const realGit = async (args) => {
+    await execFileAsync("git", args);
+};
+/**
+ * True when `dir` has no app yet (no package.json) → safe to scaffold into.
+ * A directory that already holds an app is left untouched (project_create just binds).
+ */
+export async function needsScaffold(dir) {
+    try {
+        await fs.access(path.join(dir, "package.json"));
+        return false;
+    }
+    catch {
+        return true;
+    }
+}
+/**
+ * Scaffold the template into `targetDir`. Clones to a temp dir, strips `.git`,
+ * copies the files in (never overwriting anything already there), then inits a
+ * fresh repo. Throws a clear error if the clone fails (e.g. no git access).
+ */
+export async function scaffoldFromTemplate(targetDir, opts = {}) {
+    const repo = opts.repo ?? TEMPLATE_REPO;
+    const runGit = opts.runGit ?? realGit;
+    const tmp = await fs.mkdtemp(path.join(os.tmpdir(), "vincentt-tmpl-"));
+    try {
+        try {
+            await runGit(["clone", "--depth", "1", repo, tmp]);
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : String(err);
+            throw new Error(`Could not clone the ${repo} template (check your git access): ${msg}`);
+        }
+        await fs.rm(path.join(tmp, ".git"), { recursive: true, force: true });
+        // Copy template contents in without clobbering anything already in the target.
+        for (const entry of await fs.readdir(tmp)) {
+            await fs.cp(path.join(tmp, entry), path.join(targetDir, entry), {
+                recursive: true,
+                force: false,
+                errorOnExist: false,
+            });
+        }
+        // Fresh history the creator owns (skip if the target is already a repo).
+        if (!(await isGitRepo(targetDir))) {
+            await runGit(["-C", targetDir, "init"]);
+        }
+    }
+    finally {
+        await fs.rm(tmp, { recursive: true, force: true });
+    }
+}
+async function isGitRepo(dir) {
+    try {
+        await execFileAsync("git", ["-C", dir, "rev-parse", "--git-dir"]);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}

package/dist/shared/config.d.ts

@@ -0,0 +1,33 @@
+export interface MachineConfig {
+    /** Base URL of the Vincentt backend API (e.g. https://api.vincentt.studio). */
+    apiUrl: string;
+    /** Personal access token (bearer) for machine auth. */
+    pat: string;
+}
+export interface ProjectBinding {
+    /** The backend Project id this working tree publishes to. */
+    projectId: string;
+    /** The project's slug — its <slug>.<apex> host. Informational (server-authoritative). */
+    slug: string;
+    /** Optional per-project API override; else the machine config's apiUrl. */
+    apiUrl?: string;
+}
+export declare const MACHINE_CONFIG_PATH: string;
+export declare function projectBindingPath(cwd: string): string;
+export declare function loadMachineConfig(): Promise<Partial<MachineConfig>>;
+export declare function loadProjectBinding(cwd: string): Promise<ProjectBinding | undefined>;
+/**
+ * Write the per-tree binding and make sure `.vincentt/` is gitignored (so the
+ * secret-free-but-tenant-scoped binding never rides a commit or `git archive`).
+ */
+export declare function writeProjectBinding(cwd: string, binding: ProjectBinding): Promise<string>;
+export interface ResolvedConfig {
+    apiUrl: string;
+    pat: string;
+}
+/**
+ * Resolve the API URL + PAT for a machine call. Precedence: a project binding's
+ * apiUrl wins for the URL; env vars override the machine-config file; the file is
+ * the base. Throws a clear, actionable error when no PAT is configured.
+ */
+export declare function resolveConfig(cwd: string): Promise<ResolvedConfig>;

package/dist/shared/config.js

@@ -0,0 +1,76 @@
+// Config the lifecycle MCP verbs (project_create / project_publish) read to reach
+// a creator's Vincentt backend. Two homes, by sensitivity:
+//   • ~/.vincentt/config.json — machine-global { apiUrl, pat }. The PAT is a
+//     bearer credential, so it lives OUTSIDE any repo (never committed).
+//   • <project>/.vincentt/project.json — the per-tree binding { projectId, slug }.
+//     Gitignored: `git archive HEAD` (the remix path) must NOT carry it, or a
+//     remixer would inherit — and publish over — the original's project.
+// Env vars (VINCENTT_API_URL / VINCENTT_PAT) override the file for local/dogfood
+// runs so a creator can point at a dev backend without editing the machine config.
+import { promises as fs } from "node:fs";
+import os from "node:os";
+import path from "node:path";
+export const MACHINE_CONFIG_PATH = path.join(os.homedir(), ".vincentt", "config.json");
+const BINDING_DIR = ".vincentt";
+const BINDING_FILE = "project.json";
+export function projectBindingPath(cwd) {
+    return path.join(cwd, BINDING_DIR, BINDING_FILE);
+}
+async function readJsonIfExists(p) {
+    try {
+        return JSON.parse(await fs.readFile(p, "utf8"));
+    }
+    catch (err) {
+        if (err.code === "ENOENT")
+            return undefined;
+        throw err;
+    }
+}
+export async function loadMachineConfig() {
+    return (await readJsonIfExists(MACHINE_CONFIG_PATH)) ?? {};
+}
+export async function loadProjectBinding(cwd) {
+    return readJsonIfExists(projectBindingPath(cwd));
+}
+/**
+ * Write the per-tree binding and make sure `.vincentt/` is gitignored (so the
+ * secret-free-but-tenant-scoped binding never rides a commit or `git archive`).
+ */
+export async function writeProjectBinding(cwd, binding) {
+    await fs.mkdir(path.join(cwd, BINDING_DIR), { recursive: true });
+    const p = projectBindingPath(cwd);
+    await fs.writeFile(p, JSON.stringify(binding, null, 2) + "\n", "utf8");
+    await ensureGitignored(cwd, `${BINDING_DIR}/`);
+    return p;
+}
+/** Append a pattern to the repo's .gitignore if not already present (best-effort). */
+async function ensureGitignored(cwd, pattern) {
+    const gitignore = path.join(cwd, ".gitignore");
+    try {
+        const current = await fs.readFile(gitignore, "utf8").catch(() => "");
+        const has = current.split(/\r?\n/).some((l) => l.trim() === pattern.trim());
+        if (has)
+            return;
+        const next = current && !current.endsWith("\n") ? `${current}\n${pattern}\n` : `${current}${pattern}\n`;
+        await fs.writeFile(gitignore, next, "utf8");
+    }
+    catch {
+        // A missing/unwritable .gitignore must not fail project creation.
+    }
+}
+/**
+ * Resolve the API URL + PAT for a machine call. Precedence: a project binding's
+ * apiUrl wins for the URL; env vars override the machine-config file; the file is
+ * the base. Throws a clear, actionable error when no PAT is configured.
+ */
+export async function resolveConfig(cwd) {
+    const machine = await loadMachineConfig();
+    const binding = await loadProjectBinding(cwd);
+    const apiUrl = binding?.apiUrl ?? process.env.VINCENTT_API_URL ?? machine.apiUrl ?? "http://localhost:5051";
+    const pat = process.env.VINCENTT_PAT ?? machine.pat;
+    if (!pat) {
+        throw new Error(`No Vincentt access token found. Add {"apiUrl":"…","pat":"…"} to ${MACHINE_CONFIG_PATH}, ` +
+            `or set the VINCENTT_PAT env var.`);
+    }
+    return { apiUrl: apiUrl.replace(/\/$/, ""), pat };
+}

package/dist/shared/events.d.ts

@@ -0,0 +1,78 @@
+/** Monotonic-ish wall-clock ms since epoch, stamped by the client at capture. */
+export type Timestamp = number;
+/** Kinds of thing the diagnostics limb observes. */
+export type DiagEventKind = "log" | "network" | "trace";
+interface DiagEventBase {
+    kind: DiagEventKind;
+    /** Client capture time (Date.now on the phone). */
+    t: Timestamp;
+    /** Monotonic per-session sequence, so the agent can ask "since seq N". */
+    seq: number;
+}
+/** A console.* call, forwarded verbatim (args pre-serialized to strings). */
+export interface LogEvent extends DiagEventBase {
+    kind: "log";
+    level: "log" | "info" | "warn" | "error" | "debug";
+    /** console args joined + safely stringified on the client (no cyclic refs). */
+    message: string;
+    /** First stack frame if the client could cheaply capture one (errors). */
+    origin?: string;
+}
+/** One fetch/XHR round trip, recorded on settle (success or failure). */
+export interface NetworkEvent extends DiagEventBase {
+    kind: "network";
+    method: string;
+    url: string;
+    /** HTTP status, or 0 if the request never got one (network error, CORS). */
+    status: number;
+    /** Wall-clock duration ms, request start → response settle. */
+    durationMs: number;
+    /** Set when the request threw rather than returning a response. */
+    error?: string;
+}
+/**
+ * A performance sample window. The client samples cheap in-page perf signals
+ * (long tasks, frame intervals, user marks) over a short window and ships one
+ * TraceEvent summarizing it — NOT a full DevTools trace. This is the tier that
+ * replaces hand-exporting a .json.gz.
+ */
+export interface TraceEvent extends DiagEventBase {
+    kind: "trace";
+    /** Window covered by this sample, ms. */
+    windowMs: number;
+    /** Frames-per-second observed in the window (from rAF intervals). */
+    fps: number;
+    /** Longest single main-thread task in the window, ms (0 if none seen). */
+    longestTaskMs: number;
+    /** Count of tasks over 50ms (the "long task" threshold) in the window. */
+    longTaskCount: number;
+    /** performance.mark names seen in the window, for correlating app phases. */
+    marks: string[];
+}
+export type DiagEvent = LogEvent | NetworkEvent | TraceEvent;
+/**
+ * Envelope the client sends over the socket. A batch, because the client
+ * coalesces events into flushes rather than one socket message per console.log.
+ */
+export interface ClientToRelay {
+    type: "events";
+    /** Which app/session these belong to — one preview run = one sessionId. */
+    sessionId: string;
+    events: DiagEvent[];
+}
+/** What the MCP server asks the relay for. `since` is an exclusive seq cursor. */
+export interface RelayQuery {
+    sessionId?: string;
+    kind?: DiagEventKind;
+    since?: number;
+    /** Cap the returned count (newest-biased); relay clamps to its buffer size. */
+    limit?: number;
+}
+export interface RelayResult {
+    events: DiagEvent[];
+    /** Highest seq the relay currently holds, so the caller can advance `since`. */
+    latestSeq: number;
+    /** Sessions the relay has seen events for (so the agent can disambiguate). */
+    sessions: string[];
+}
+export {};

package/dist/shared/events.js

@@ -0,0 +1,6 @@
+// The wire contract between the three harness parts: the in-app client (which
+// produces events on the phone), the relay (which buffers them), and the MCP
+// server (which serves them to the agent). All three import THIS file, so the
+// three can never drift on the shape of an event. Nothing here imports React,
+// node, or MCP — it is pure data.
+export {};

package/package.json

@@ -0,0 +1,60 @@
+{
+  "name": "@vincentt-xr/harness",
+  "version": "0.1.0",
+  "description": "Vincentt AR dev-loop harness — in-app diagnostics client + relay + agent-agnostic MCP server",
+  "license": "UNLICENSED",
+  "type": "module",
+  "sideEffects": false,
+  "files": [
+    "/dist"
+  ],
+  "main": "./dist/client/index.js",
+  "module": "./dist/client/index.js",
+  "types": "./dist/client/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/client/index.d.ts",
+      "import": "./dist/client/index.js"
+    },
+    "./relay": {
+      "types": "./dist/relay/server.d.ts",
+      "import": "./dist/relay/server.js"
+    },
+    "./preview": {
+      "types": "./dist/preview/index.d.ts",
+      "import": "./dist/preview/index.js"
+    }
+  },
+  "bin": {
+    "harness-relay": "./dist/relay/cli.js",
+    "harness-mcp": "./dist/mcp/cli.js"
+  },
+  "peerDependencies": {
+    "react": "^18.2.0"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.29.0",
+    "cloudflared": "^0.7.1",
+    "ws": "^8.18.0",
+    "zod": "^3.23.8"
+  },
+  "devDependencies": {
+    "@types/node": "^22.9.0",
+    "@types/react": "^18.3.12",
+    "@types/ws": "^8.5.13",
+    "prettier": "3.3.3",
+    "ts-node": "^10.9.2",
+    "typescript": "^5.6.3",
+    "vitest": "^2.1.5"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "relay": "node --loader ts-node/esm src/relay/cli.ts",
+    "mcp": "node --loader ts-node/esm src/mcp/cli.ts",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "typecheck": "tsc --noEmit",
+    "format:check": "prettier --check .",
+    "format": "prettier --write ."
+  }
+}