p-dev-harness 0.3.0 → 0.3.1

package/workspace-snapshot/files/apps/gui/components/custom/local-write-confirmation.tsx

@@ -0,0 +1,91 @@
+"use client";
+
+import { FORM } from "@/lib/constants";
+import { Checkbox } from "@/components/ui/checkbox";
+import { Label } from "@/components/ui/label";
+import type { LocalFileWritePlan } from "@harness/setup/local-apply-actions";
+
+interface LocalWriteConfirmationProps {
+  plan?: LocalFileWritePlan;
+  confirmed: boolean;
+  onConfirmedChange: (confirmed: boolean) => void;
+  disabled?: boolean;
+  disabledReason?: string;
+  variant?: "guided" | "advanced";
+  intent?: "create" | "update";
+}
+
+export function LocalWriteConfirmation({
+  plan,
+  confirmed,
+  onConfirmedChange,
+  disabled = false,
+  disabledReason,
+  variant = "advanced",
+  intent = "create",
+}: LocalWriteConfirmationProps) {
+  if (variant === "guided") {
+    return (
+      <div className="space-y-2">
+        <div className="flex items-start gap-3">
+          <Checkbox
+            id="confirm-local-write-guided"
+            checked={confirmed}
+            disabled={disabled}
+            onChange={(event) => onConfirmedChange(event.target.checked)}
+          />
+          <Label
+            htmlFor="confirm-local-write-guided"
+            className="cursor-pointer text-sm leading-snug"
+          >
+            {intent === "update"
+              ? "I understand this will update local setup files on this machine."
+              : "I understand this will create local setup files on this machine."}
+          </Label>
+        </div>
+        {disabled && disabledReason && disabledReason.includes("validation") ? (
+          <p className="text-sm text-muted-foreground">{disabledReason}</p>
+        ) : null}
+      </div>
+    );
+  }
+
+  return (
+    <div className={FORM.confirmationBox}>
+      <p className="text-sm font-medium">Confirm local file writes</p>
+      <ul className="list-disc space-y-1 pl-5 text-sm text-muted-foreground">
+        <li>
+          .env.local — {plan?.envAction === "update" ? "update" : "create"}
+        </li>
+        <li>
+          .harness/config.local.json —{" "}
+          {plan?.configAction === "update" ? "update" : "create"}
+        </li>
+        <li>Files are local, gitignored, and written only on this machine.</li>
+        <li>
+          No GitHub Actions secrets, target repo workflows, Linear writes, cloud
+          workflow dispatch, tags, releases, settings, or live harness phases will
+          run.
+        </li>
+      </ul>
+      <div className="flex items-start gap-3">
+        <Checkbox
+          id="confirm-local-write"
+          checked={confirmed}
+          disabled={disabled}
+          onChange={(event) => onConfirmedChange(event.target.checked)}
+        />
+        <Label
+          htmlFor="confirm-local-write"
+          className="cursor-pointer text-sm leading-snug"
+        >
+          I reviewed the redacted preview and want to write these local setup
+          files.
+        </Label>
+      </div>
+      {disabled && disabledReason ? (
+        <p className="text-sm text-muted-foreground">{disabledReason}</p>
+      ) : null}
+    </div>
+  );
+}

package/workspace-snapshot/files/apps/gui/components/custom/local-write-preview.tsx

@@ -0,0 +1,52 @@
+"use client";
+
+import { PreviewPanel } from "@/components/custom/preview-panel";
+
+interface LocalWritePreviewProps {
+  envPreview?: string;
+  configPreview?: string;
+  validationError?: string;
+  variant?: "guided" | "advanced";
+  isLoading?: boolean;
+}
+
+export function LocalWritePreview({
+  envPreview,
+  configPreview,
+  validationError,
+  variant = "advanced",
+  isLoading = false,
+}: LocalWritePreviewProps) {
+  if (isLoading) {
+    return null;
+  }
+
+  if (!envPreview && !configPreview && !validationError) {
+    if (variant === "guided") {
+      return null;
+    }
+
+    return (
+      <p className="text-sm text-muted-foreground">
+        Generate a preview to review redacted local file changes before applying.
+      </p>
+    );
+  }
+
+  return (
+    <div className="space-y-4">
+      {validationError ? (
+        <p className="text-sm text-destructive">{validationError}</p>
+      ) : null}
+      {envPreview ? (
+        <PreviewPanel title=".env.local preview (redacted)" content={envPreview} />
+      ) : null}
+      {configPreview ? (
+        <PreviewPanel
+          title=".harness/config.local.json preview"
+          content={configPreview}
+        />
+      ) : null}
+    </div>
+  );
+}

package/workspace-snapshot/files/apps/gui/components/custom/preview-panel.tsx

@@ -0,0 +1,19 @@
+import { RESPONSIVE, SPACING } from "@/lib/constants";
+import { cn } from "@/lib/utils";
+
+interface PreviewPanelProps {
+  title: string;
+  content?: string;
+  className?: string;
+}
+
+export function PreviewPanel({ title, content, className }: PreviewPanelProps) {
+  return (
+    <div className={cn(SPACING.stackSm, className)}>
+      <p className="text-sm font-medium">{title}</p>
+      <pre className={cn(RESPONSIVE.previewPanel, "font-mono whitespace-pre-wrap")}>
+        {content ?? "No preview available."}
+      </pre>
+    </div>
+  );
+}

package/workspace-snapshot/files/apps/gui/components/custom/primary-setup-task-card.tsx

@@ -0,0 +1,65 @@
+"use client";
+
+import type { PrimarySetupTask } from "@harness/setup/first-run-readiness";
+import { AlertCircle, ArrowRight } from "lucide-react";
+
+import { SPACING } from "@/lib/constants";
+import { Button } from "@/components/ui/button";
+import { SectionCard } from "@/components/custom/section-card";
+import { cn } from "@/lib/utils";
+
+interface PrimarySetupTaskCardProps {
+  task: PrimarySetupTask;
+  onPrimaryAction: () => void;
+  onShowDetails: () => void;
+}
+
+export function PrimarySetupTaskCard({
+  task,
+  onPrimaryAction,
+  onShowDetails,
+}: PrimarySetupTaskCardProps) {
+  const isSetupNeeded = task.tone === "setup_needed";
+
+  return (
+    <SectionCard
+      title={task.title}
+      description="One clear action at a time."
+    >
+      <div className={SPACING.stackSm}>
+        <div
+          className={cn(
+            "flex items-start gap-3 rounded-md border p-3",
+            isSetupNeeded
+              ? "border-border bg-muted/30"
+              : "border-destructive/30 bg-destructive/5",
+          )}
+        >
+          {isSetupNeeded ? (
+            <ArrowRight className="mt-0.5 size-4 shrink-0 text-muted-foreground" />
+          ) : (
+            <AlertCircle className="mt-0.5 size-4 shrink-0 text-destructive" />
+          )}
+          <div className={SPACING.stackSm}>
+            <p className="text-sm font-medium">{task.problem}</p>
+            <p className="text-sm text-muted-foreground">{task.whyItMatters}</p>
+          </div>
+        </div>
+
+        <div className={SPACING.stackSm}>
+          <p className="text-sm font-medium">Needed from you</p>
+          <p className="text-sm text-muted-foreground">{task.neededFromYou}</p>
+        </div>
+
+        <div className="flex flex-wrap gap-2">
+          <Button type="button" onClick={onPrimaryAction}>
+            {task.primaryCtaLabel}
+          </Button>
+          <Button type="button" variant="outline" onClick={onShowDetails}>
+            {task.secondaryCtaLabel}
+          </Button>
+        </div>
+      </div>
+    </SectionCard>
+  );
+}

package/workspace-snapshot/files/apps/gui/components/custom/readiness-banner.tsx

@@ -0,0 +1,91 @@
+import type { FirstRunReadiness } from "@harness/setup/first-run-readiness";
+import { AlertCircle, ArrowRight } from "lucide-react";
+
+import { SPACING } from "@/lib/constants";
+import { StatusBadge } from "@/components/custom/status-badge";
+import { SectionCard } from "@/components/custom/section-card";
+
+interface ReadinessBannerProps {
+  readiness: FirstRunReadiness;
+}
+
+export function ReadinessBanner({ readiness }: ReadinessBannerProps) {
+  const currentStep = readiness.steps.find(
+    (step) => step.id === readiness.currentStepId,
+  );
+
+  return (
+    <SectionCard
+      title="Setup readiness"
+      description="One recommended next action at a time."
+    >
+      <div className={SPACING.stackSm}>
+        <div className={SPACING.inline}>
+          <StatusBadge
+            label={
+              readiness.readyForFirstRun
+                ? "Ready for first run"
+                : "Setup in progress"
+            }
+            variant={readiness.readyForFirstRun ? "success" : "warning"}
+          />
+          {currentStep ? (
+            <StatusBadge
+              label={`Current step: ${currentStep.label}`}
+              variant="secondary"
+            />
+          ) : null}
+        </div>
+
+        {readiness.highestPriorityBlocker ? (
+          <div
+            className={
+              readiness.highestPriorityBlocker.tone === "setup_needed"
+                ? "flex items-start gap-3 rounded-md border border-border bg-muted/30 p-3"
+                : "flex items-start gap-3 rounded-md border border-destructive/30 bg-destructive/5 p-3"
+            }
+          >
+            {readiness.highestPriorityBlocker.tone === "setup_needed" ? (
+              <ArrowRight className="mt-0.5 size-4 shrink-0 text-muted-foreground" />
+            ) : (
+              <AlertCircle className="mt-0.5 size-4 shrink-0 text-destructive" />
+            )}
+            <div className={SPACING.stackSm}>
+              <p className="text-sm font-medium">
+                {readiness.highestPriorityBlocker.message
+                  .replace(/^Blocked:\s*/, "")
+                  .replace(/^Setup needed:\s*/, "")}
+              </p>
+              <p className="text-sm text-muted-foreground">
+                {readiness.highestPriorityBlocker.action}
+              </p>
+            </div>
+          </div>
+        ) : readiness.nextRecommendedAction ? (
+          <div className="flex items-start gap-3 rounded-md border border-border bg-muted/30 p-3">
+            <ArrowRight className="mt-0.5 size-4 shrink-0 text-muted-foreground" />
+            <div className={SPACING.stackSm}>
+              <p className="text-sm font-medium">Next recommended action</p>
+              <p className="text-sm text-muted-foreground">
+                {readiness.nextRecommendedAction.label}
+              </p>
+            </div>
+          </div>
+        ) : null}
+
+        {readiness.nonBlockingWarnings.length > 0 &&
+        !readiness.remoteSetupBlockedByUpstream ? (
+          <ul className="list-disc space-y-1 pl-5 text-sm text-muted-foreground">
+            {readiness.nonBlockingWarnings.map((warning) => (
+              <li key={warning.id}>{warning.message}</li>
+            ))}
+          </ul>
+        ) : readiness.remoteSetupBlockedByUpstream ? (
+          <p className="text-sm text-muted-foreground">
+            Remote setup details stay collapsed until harness repo access is fixed.
+          </p>
+        ) : null}
+      </div>
+    </SectionCard>
+  );
+}

package/workspace-snapshot/files/apps/gui/components/custom/remote-action-confirmation.tsx

@@ -0,0 +1,155 @@
+"use client";
+
+import { FORM } from "@/lib/constants";
+import { Checkbox } from "@/components/ui/checkbox";
+import { Label } from "@/components/ui/label";
+
+type RemoteConfirmationScope =
+  | "remote-secret-write"
+  | "vercel-bridge-write"
+  | "remote-repo-write"
+  | "linear-write";
+type RemoteConfirmationVariant = "advanced" | "guided";
+
+interface RemoteActionConfirmationProps {
+  scope: RemoteConfirmationScope;
+  confirmed: boolean;
+  disabled?: boolean;
+  disabledReason?: string;
+  variant?: RemoteConfirmationVariant;
+  onConfirmedChange: (confirmed: boolean) => void;
+}
+
+const COPY: Record<
+  RemoteConfirmationScope,
+  {
+    advanced: { title: string; bullets: string[]; label: string };
+    guided: { title: string; bullets: string[]; label: string };
+  }
+> = {
+  "remote-secret-write": {
+    advanced: {
+      title: "Confirm harness repo Actions secret writes",
+      bullets: [
+        "Writes encrypted GitHub Actions secrets to the harness dispatch repo only.",
+        "HARNESS_CONFIG_JSON_B64 is generated server-side from local config.",
+        "Secret values are never returned in previews, results, or errors.",
+        "No target repo branches, PRs, Linear writes, or harness phases will run.",
+      ],
+      label:
+        "I reviewed the harness secret preview and want to write these Actions secrets.",
+    },
+    guided: {
+      title: "Confirm cloud secrets write",
+      bullets: [
+        "This writes encrypted GitHub Actions secrets to the harness repo.",
+        "Preflight runs automatically before apply when you skip preview.",
+        "It does not run the harness, create branches, open PRs, or change your target app.",
+        "Secret values are never shown in previews, results, or errors.",
+      ],
+      label:
+        "I understand this will create or update encrypted GitHub Actions secrets in the harness repo.",
+    },
+  },
+  "vercel-bridge-write": {
+    advanced: {
+      title: "Confirm Vercel bridge setup writes",
+      bullets: [
+        "May create or reuse Vercel team and project resources when selected.",
+        "Writes required Vercel production environment variables for the bridge.",
+        "May create or verify the Linear Issue webhook for automation.",
+        "Secret values are never returned in previews, results, or errors.",
+      ],
+      label:
+        "I reviewed the Vercel settings preview and want to apply these changes.",
+    },
+    guided: {
+      title: "Confirm Vercel settings write",
+      bullets: [
+        "This may create or update Vercel production environment variables and configure the Linear webhook bridge.",
+        "It does not run the harness, create branches, open PRs, or change your target app.",
+        "Secret values are never shown in previews, results, or errors.",
+      ],
+      label:
+        "I understand this will write Vercel environment variables and configure the Linear webhook bridge.",
+    },
+  },
+  "remote-repo-write": {
+    advanced: {
+      title: "Confirm target workflow branch and PR install",
+      bullets: [
+        "Creates or updates an install branch and opens or reuses a PR.",
+        "Never writes directly to the target repo production or main branch.",
+        "No harness repo secret writes, Linear writes, or harness phases will run.",
+      ],
+      label:
+        "I reviewed the workflow preview and want to create or update the install PR.",
+    },
+    guided: {
+      title: "Confirm workflow install PR",
+      bullets: [
+        "This may create or update an install branch and open or reuse a PR.",
+        "It does not merge the PR, write directly to main/production, run the harness, or write Linear.",
+      ],
+      label:
+        "I reviewed the workflow preview and want to create or update the workflow install PR.",
+    },
+  },
+  "linear-write": {
+    advanced: {
+      title: "Confirm Linear workspace writes",
+      bullets: [
+        "May create or update Linear teams, projects, and workflow statuses.",
+        "Preview is read-only until you confirm this write.",
+        "No harness phases, GitHub dispatch, or target repo changes run from this step.",
+      ],
+      label:
+        "I reviewed the Linear setup preview and want to apply workspace changes.",
+    },
+    guided: {
+      title: "Confirm Linear workspace setup",
+      bullets: [
+        "This may create missing Linear workflow statuses or workspace resources.",
+        "It does not run harness automation or modify your target app repo.",
+      ],
+      label:
+        "I understand this will apply Linear workspace setup changes.",
+    },
+  },
+};
+
+export function RemoteActionConfirmation({
+  scope,
+  confirmed,
+  disabled = false,
+  disabledReason,
+  variant = "advanced",
+  onConfirmedChange,
+}: RemoteActionConfirmationProps) {
+  const copy = COPY[scope][variant];
+
+  return (
+    <div className={FORM.confirmationBox}>
+      <p className="text-sm font-medium">{copy.title}</p>
+      <ul className="list-disc space-y-1 pl-5 text-sm text-muted-foreground">
+        {copy.bullets.map((bullet) => (
+          <li key={bullet}>{bullet}</li>
+        ))}
+      </ul>
+      <div className="flex items-start gap-3">
+        <Checkbox
+          id={`confirm-${scope}`}
+          checked={confirmed}
+          disabled={disabled}
+          onChange={(event) => onConfirmedChange(event.target.checked)}
+        />
+        <Label htmlFor={`confirm-${scope}`} className="text-sm leading-snug">
+          {copy.label}
+        </Label>
+      </div>
+      {disabled && disabledReason ? (
+        <p className="text-sm text-muted-foreground">{disabledReason}</p>
+      ) : null}
+    </div>
+  );
+}

package/workspace-snapshot/files/apps/gui/components/custom/remote-action-preview.tsx

@@ -0,0 +1,84 @@
+"use client";
+
+import { PreviewPanel } from "@/components/custom/preview-panel";
+import type {
+  RemoteHarnessSecretPreview,
+  RemoteTargetWorkflowPreview,
+} from "@harness/setup/remote-actions";
+
+interface RemoteActionPreviewProps {
+  harnessSecretPreview?: RemoteHarnessSecretPreview;
+  targetWorkflowPreview?: RemoteTargetWorkflowPreview;
+}
+
+export function RemoteActionPreview({
+  harnessSecretPreview,
+  targetWorkflowPreview,
+}: RemoteActionPreviewProps) {
+  if (!harnessSecretPreview && !targetWorkflowPreview) {
+    return (
+      <p className="text-sm text-muted-foreground">
+        Generate a preview before confirming any remote write.
+      </p>
+    );
+  }
+
+  if (harnessSecretPreview) {
+    return (
+      <div className="space-y-4">
+        {harnessSecretPreview.validationError ? (
+          <p className="text-sm text-destructive">
+            {harnessSecretPreview.validationError}
+          </p>
+        ) : null}
+        <dl className="grid grid-cols-1 gap-3 md:grid-cols-2 text-sm">
+          <div>
+            <dt className="text-muted-foreground">Harness dispatch repo</dt>
+            <dd className="font-medium break-all">
+              {harnessSecretPreview.harnessDispatchRepo}
+            </dd>
+          </div>
+          <div>
+            <dt className="text-muted-foreground">Repo access</dt>
+            <dd className="font-medium">{harnessSecretPreview.repoAccess}</dd>
+          </div>
+        </dl>
+        <PreviewPanel
+          title="Secret write plan (key names only)"
+          content={harnessSecretPreview.secretWritePlan
+            .map(
+              (entry) =>
+                `${entry.name}: ${entry.action} (${entry.source})`,
+            )
+            .join("\n")}
+        />
+        <PreviewPanel
+          title="Manual copy-paste alternative"
+          content={harnessSecretPreview.manualInstructions.join("\n")}
+        />
+      </div>
+    );
+  }
+
+  if (targetWorkflowPreview) {
+    return (
+      <div className="space-y-4">
+        {targetWorkflowPreview.validationError ? (
+          <p className="text-sm text-destructive">
+            {targetWorkflowPreview.validationError}
+          </p>
+        ) : null}
+        <PreviewPanel
+          title="Workflow install preview"
+          content={targetWorkflowPreview.workflowPreviewSummary}
+        />
+        <PreviewPanel
+          title="Manual copy-paste alternative"
+          content={targetWorkflowPreview.manualInstructions.join("\n")}
+        />
+      </div>
+    );
+  }
+
+  return null;
+}

package/workspace-snapshot/files/apps/gui/components/custom/remote-secret-form.tsx

@@ -0,0 +1,123 @@
+"use client";
+
+import { FORM } from "@/lib/constants";
+import { Input } from "@/components/ui/input";
+import { Label } from "@/components/ui/label";
+import { StatusBadge } from "@/components/custom/status-badge";
+import type {
+  HarnessActionsSecretName,
+  HarnessSecretStatusEntry,
+} from "@harness/setup/remote-actions";
+
+export interface RemoteSecretFormValues {
+  linearApiKey: string;
+  cursorApiKey: string;
+  harnessGithubToken: string;
+}
+
+interface RemoteSecretFormProps {
+  values: RemoteSecretFormValues;
+  secretStatuses: HarnessSecretStatusEntry[];
+  onChange: (values: RemoteSecretFormValues) => void;
+}
+
+const SECRET_LABELS: Record<HarnessActionsSecretName, string> = {
+  HARNESS_CONFIG_JSON_B64: "HARNESS_CONFIG_JSON_B64",
+  LINEAR_API_KEY: "LINEAR_API_KEY",
+  CURSOR_API_KEY: "CURSOR_API_KEY",
+  HARNESS_GITHUB_TOKEN: "HARNESS_GITHUB_TOKEN",
+};
+
+function statusVariant(
+  status: HarnessSecretStatusEntry["status"],
+): "success" | "warning" | "secondary" {
+  if (status === "present") return "success";
+  if (status === "missing") return "warning";
+  return "secondary";
+}
+
+export function RemoteSecretForm({
+  values,
+  secretStatuses,
+  onChange,
+}: RemoteSecretFormProps) {
+  const update = (patch: Partial<RemoteSecretFormValues>) => {
+    onChange({ ...values, ...patch });
+  };
+
+  const statusByName = new Map(
+    secretStatuses.map((entry) => [entry.name, entry.status]),
+  );
+
+  return (
+    <div className={FORM.fieldGrid}>
+      <div className={FORM.fieldStack}>
+        <Label>HARNESS_CONFIG_JSON_B64</Label>
+        <p className="text-sm text-muted-foreground">
+          Generated server-side from validated `.harness/config.local.json` during
+          apply. Never shown in previews or responses.
+        </p>
+        <StatusBadge
+          label={statusByName.get("HARNESS_CONFIG_JSON_B64") ?? "unknown"}
+          variant={statusVariant(statusByName.get("HARNESS_CONFIG_JSON_B64") ?? "unknown")}
+        />
+      </div>
+
+      <RemoteSecretField
+        id="remote-linear-api-key"
+        label={SECRET_LABELS.LINEAR_API_KEY}
+        status={statusByName.get("LINEAR_API_KEY") ?? "unknown"}
+        value={values.linearApiKey}
+        onChange={(linearApiKey) => update({ linearApiKey })}
+      />
+      <RemoteSecretField
+        id="remote-cursor-api-key"
+        label={SECRET_LABELS.CURSOR_API_KEY}
+        status={statusByName.get("CURSOR_API_KEY") ?? "unknown"}
+        value={values.cursorApiKey}
+        onChange={(cursorApiKey) => update({ cursorApiKey })}
+      />
+      <RemoteSecretField
+        id="remote-harness-github-token"
+        label={SECRET_LABELS.HARNESS_GITHUB_TOKEN}
+        status={statusByName.get("HARNESS_GITHUB_TOKEN") ?? "unknown"}
+        value={values.harnessGithubToken}
+        onChange={(harnessGithubToken) => update({ harnessGithubToken })}
+      />
+    </div>
+  );
+}
+
+function RemoteSecretField({
+  id,
+  label,
+  status,
+  value,
+  onChange,
+}: {
+  id: string;
+  label: string;
+  status: HarnessSecretStatusEntry["status"];
+  value: string;
+  onChange: (value: string) => void;
+}) {
+  return (
+    <div className={FORM.fieldStack}>
+      <div className="flex items-center justify-between gap-2">
+        <Label htmlFor={id}>{label}</Label>
+        <StatusBadge label={status} variant={statusVariant(status)} />
+      </div>
+      <Input
+        id={id}
+        type="password"
+        value={value}
+        autoComplete="off"
+        onChange={(event) => onChange(event.target.value)}
+      />
+      <p className={FORM.secretHint}>
+        Existing GitHub Actions secret values are never readable. Leave blank to
+        preserve an existing secret when status is present.
+      </p>
+    </div>
+  );
+}