p-dev-harness 0.3.0 → 0.3.1

package/workspace-snapshot/files/apps/gui/components/custom/remote-setup-section.tsx

@@ -0,0 +1,354 @@
+"use client";
+
+import { useCallback, useEffect, useMemo, useState } from "react";
+import type {
+  RemoteHarnessSecretApplyResult,
+  RemoteHarnessSecretPreview,
+} from "@harness/setup/remote-actions";
+import type { RemoteSetupSummary } from "@harness/setup/remote-setup-summary";
+import { FORM, SPACING } from "@/lib/constants";
+import { Button } from "@/components/ui/button";
+import { SectionCard } from "@/components/custom/section-card";
+import { StatusBadge } from "@/components/custom/status-badge";
+import {
+  RemoteSecretForm,
+  type RemoteSecretFormValues,
+} from "@/components/custom/remote-secret-form";
+import { RemoteActionPreview } from "@/components/custom/remote-action-preview";
+import { RemoteActionConfirmation } from "@/components/custom/remote-action-confirmation";
+import { TargetWorkflowPrCard } from "@/components/custom/target-workflow-pr-card";
+import { SetupApplyResult } from "@/components/custom/setup-apply-result";
+
+interface RemoteSetupSectionProps {
+  initialSummary: RemoteSetupSummary;
+  onSummaryUpdated?: (summary: RemoteSetupSummary) => void;
+  onUiStateChange?: (state: { remoteSecretPreviewStale: boolean }) => void;
+  blockedByUpstream?: boolean;
+}
+
+function accessVariant(
+  status: RemoteSetupSummary["harnessRepoAccess"],
+): "success" | "warning" | "destructive" | "secondary" {
+  if (status === "available") return "success";
+  if (status === "denied") return "destructive";
+  return "secondary";
+}
+
+export function RemoteSetupSection({
+  initialSummary,
+  onSummaryUpdated,
+  onUiStateChange,
+  blockedByUpstream = false,
+}: RemoteSetupSectionProps) {
+  const [summary, setSummary] = useState(initialSummary);
+  const [secretValues, setSecretValues] = useState<RemoteSecretFormValues>({
+    linearApiKey: "",
+    cursorApiKey: "",
+    harnessGithubToken: "",
+  });
+  const [preview, setPreview] = useState<RemoteHarnessSecretPreview | null>(
+    null,
+  );
+  const [previewPayload, setPreviewPayload] =
+    useState<RemoteSecretFormValues | null>(null);
+  const [confirmed, setConfirmed] = useState(false);
+  const [loading, setLoading] = useState<"preview" | "apply" | "refresh" | null>(
+    null,
+  );
+  const [error, setError] = useState<string | null>(null);
+  const [applyResult, setApplyResult] =
+    useState<RemoteHarnessSecretApplyResult | null>(null);
+
+  useEffect(() => {
+    setSummary(initialSummary);
+  }, [initialSummary]);
+
+  const currentPayload = useMemo(
+    () => ({
+      linearApiKey: secretValues.linearApiKey || undefined,
+      cursorApiKey: secretValues.cursorApiKey || undefined,
+      harnessGithubToken: secretValues.harnessGithubToken || undefined,
+    }),
+    [secretValues],
+  );
+
+  const previewIsCurrent =
+    preview !== null &&
+    previewPayload !== null &&
+    JSON.stringify(previewPayload) === JSON.stringify(secretValues);
+
+  useEffect(() => {
+    onUiStateChange?.({
+      remoteSecretPreviewStale: preview !== null && !previewIsCurrent,
+    });
+  }, [onUiStateChange, preview, previewIsCurrent]);
+
+  const refreshSummary = useCallback(async () => {
+    setLoading("refresh");
+    try {
+      const response = await fetch("/api/setup/remote-summary");
+      const data = await response.json();
+      if (!response.ok) {
+        throw new Error(data.error ?? "Remote summary refresh failed");
+      }
+      setSummary(data as RemoteSetupSummary);
+      onSummaryUpdated?.(data as RemoteSetupSummary);
+    } catch (refreshError) {
+      setError(
+        refreshError instanceof Error
+          ? refreshError.message
+          : "Remote summary refresh failed",
+      );
+    } finally {
+      setLoading(null);
+    }
+  }, [onSummaryUpdated]);
+
+  const resetSecretApplyState = () => {
+    setApplyResult(null);
+    setError(null);
+  };
+
+  const handleSecretPreview = async () => {
+    setLoading("preview");
+    resetSecretApplyState();
+    setConfirmed(false);
+    try {
+      const response = await fetch("/api/setup/preview-harness-secrets", {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify(currentPayload),
+      });
+      const data = await response.json();
+      if (!response.ok) {
+        throw new Error(data.error ?? "Preview failed");
+      }
+      setPreview(data as RemoteHarnessSecretPreview);
+      setPreviewPayload({ ...secretValues });
+    } catch (previewError) {
+      setPreview(null);
+      setPreviewPayload(null);
+      setError(
+        previewError instanceof Error
+          ? previewError.message
+          : "Preview failed",
+      );
+    } finally {
+      setLoading(null);
+    }
+  };
+
+  const handleSecretApply = async () => {
+    if (!preview || !previewIsCurrent || !confirmed) {
+      return;
+    }
+
+    setLoading("apply");
+    resetSecretApplyState();
+    try {
+      const response = await fetch("/api/setup/apply-harness-secrets", {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({
+          ...currentPayload,
+          confirmed: true,
+          fingerprint: preview.fingerprint,
+        }),
+      });
+      const data = await response.json();
+      if (!response.ok) {
+        throw new Error(data.error ?? "Apply failed");
+      }
+      setApplyResult(data.apply as RemoteHarnessSecretApplyResult);
+      setSummary(data.summary as RemoteSetupSummary);
+      onSummaryUpdated?.(data.summary as RemoteSetupSummary);
+      setSecretValues({
+        linearApiKey: "",
+        cursorApiKey: "",
+        harnessGithubToken: "",
+      });
+      setPreview(null);
+      setPreviewPayload(null);
+      setConfirmed(false);
+    } catch (applyError) {
+      setError(
+        applyError instanceof Error ? applyError.message : "Apply failed",
+      );
+    } finally {
+      setLoading(null);
+    }
+  };
+
+  const secretApplyMessage = applyResult
+    ? `Wrote ${applyResult.writtenSecrets.map((entry) => entry.name).join(", ") || "no secrets"}.`
+    : null;
+
+  const upstreamBlockedReason = blockedByUpstream
+    ? "Fix harness repo access in local setup before remote secrets or workflow checks can continue."
+    : undefined;
+  const previewDisabledReason =
+    upstreamBlockedReason ??
+    (!summary.githubTokenConfigured
+      ? "Set GITHUB_TOKEN in `.env.local` before previewing remote harness secret writes."
+      : loading !== null
+        ? "Wait for the current action to finish."
+        : undefined);
+  const confirmDisabledReason = upstreamBlockedReason
+    ? upstreamBlockedReason
+    : !previewIsCurrent
+      ? "Generate a preview before you can confirm this write."
+      : preview?.validationError
+        ? "Fix validation errors before confirming this write."
+        : undefined;
+  const applyDisabledReason =
+    confirmDisabledReason ??
+    (!confirmed
+      ? "Confirm the preview before applying harness repo Actions secrets."
+      : undefined);
+
+  return (
+    <div className={SPACING.section}>
+      <SectionCard
+        title="Remote setup"
+        description="Preview and apply harness repo Actions secrets and target workflow install PRs. Each action requires its own preview and confirmation."
+      >
+        <dl className="grid grid-cols-1 gap-3 md:grid-cols-2 text-sm">
+          <div>
+            <dt className="text-muted-foreground">GITHUB_TOKEN in .env.local</dt>
+            <dd>
+              <StatusBadge
+                label={summary.githubTokenConfigured ? "Configured" : "Missing"}
+                variant={summary.githubTokenConfigured ? "success" : "warning"}
+              />
+            </dd>
+          </div>
+          <div>
+            <dt className="text-muted-foreground">Harness dispatch repo</dt>
+            <dd className="font-medium break-all">{summary.harnessDispatchRepo}</dd>
+          </div>
+          <div>
+            <dt className="text-muted-foreground">Dispatch repo source</dt>
+            <dd className="font-medium">{summary.harnessDispatchRepoSource}</dd>
+          </div>
+          <div>
+            <dt className="text-muted-foreground">Harness repo access</dt>
+            <dd>
+              <StatusBadge
+                label={summary.harnessRepoAccess}
+                variant={accessVariant(summary.harnessRepoAccess)}
+              />
+            </dd>
+          </div>
+        </dl>
+      </SectionCard>
+
+      {blockedByUpstream ? (
+        <SectionCard
+          title="Blocked until repo access is fixed"
+          description="Remote setup details stay hidden until the harness dispatch repo is corrected."
+        >
+          <p className="text-sm text-muted-foreground">
+            {upstreamBlockedReason} Use the local setup fix above, then refresh
+            this page after applying.
+          </p>
+          <div className={FORM.actions}>
+            <Button type="button" onClick={refreshSummary} disabled={loading !== null}>
+              {loading === "refresh" ? "Refreshing…" : "Refresh remote setup"}
+            </Button>
+          </div>
+        </SectionCard>
+      ) : (
+        <>
+          <SectionCard
+            title="Harness repo Actions secrets"
+            description="Write encrypted secrets to the harness dispatch repo. HARNESS_CONFIG_JSON_B64 is generated server-side."
+          >
+            <RemoteSecretForm
+              values={secretValues}
+              secretStatuses={summary.harnessSecretStatuses}
+              onChange={(values) => {
+                resetSecretApplyState();
+                setPreview(null);
+                setPreviewPayload(null);
+                setConfirmed(false);
+                setSecretValues(values);
+              }}
+            />
+
+            <RemoteActionPreview
+              harnessSecretPreview={previewIsCurrent ? preview ?? undefined : undefined}
+            />
+
+            <RemoteActionConfirmation
+              scope="remote-secret-write"
+              confirmed={confirmed}
+              disabled={!previewIsCurrent || Boolean(preview?.validationError)}
+              disabledReason={confirmDisabledReason}
+              onConfirmedChange={setConfirmed}
+            />
+
+            <div className={FORM.actions}>
+              <Button
+                type="button"
+                onClick={handleSecretPreview}
+                disabled={
+                  loading !== null ||
+                  !summary.githubTokenConfigured ||
+                  Boolean(upstreamBlockedReason)
+                }
+              >
+                {loading === "preview" ? "Generating preview…" : "Preview harness secrets"}
+              </Button>
+              <Button
+                type="button"
+                onClick={handleSecretApply}
+                disabled={
+                  loading !== null ||
+                  !previewIsCurrent ||
+                  !confirmed ||
+                  Boolean(preview?.validationError)
+                }
+              >
+                {loading === "apply" ? "Applying…" : "Apply harness secrets"}
+              </Button>
+            </div>
+
+            {previewDisabledReason ? (
+              <p className="text-sm text-muted-foreground">{previewDisabledReason}</p>
+            ) : null}
+            {applyDisabledReason ? (
+              <p className="text-sm text-muted-foreground">{applyDisabledReason}</p>
+            ) : null}
+
+            {error ? <SetupApplyResult success={false} message={error} /> : null}
+            {secretApplyMessage ? (
+              <SetupApplyResult success message={secretApplyMessage} />
+            ) : null}
+          </SectionCard>
+
+          <SectionCard
+            title="Target workflow install PRs"
+            description="One install PR card per configured target repo. Never writes directly to production branches."
+          >
+            {summary.targetRepos.length === 0 ? (
+              <p className="text-sm text-muted-foreground">
+                Resolve `.harness/config.local.json` to show target workflow cards.
+              </p>
+            ) : (
+              <div className={SPACING.stackSm}>
+                {summary.targetRepos.map((repo) => (
+                  <TargetWorkflowPrCard
+                    key={repo.repoConfigId}
+                    repo={repo}
+                    onApplied={refreshSummary}
+                    blockedByUpstream={blockedByUpstream}
+                  />
+                ))}
+              </div>
+            )}
+          </SectionCard>
+        </>
+      )}
+    </div>
+  );
+}

package/workspace-snapshot/files/apps/gui/components/custom/review-cloud-secrets-disclosure.tsx

@@ -0,0 +1,59 @@
+"use client";
+
+import { RemoteActionPreview } from "@/components/custom/remote-action-preview";
+import { Skeleton } from "@/components/ui/skeleton";
+import type { RemoteHarnessSecretPreview } from "@harness/setup/remote-actions";
+
+interface ReviewCloudSecretsDisclosureProps {
+  open: boolean;
+  onOpenChange: (open: boolean) => void;
+  isLoading: boolean;
+  previewError?: string;
+  preview?: RemoteHarnessSecretPreview;
+  previewIsCurrent: boolean;
+}
+
+export function ReviewCloudSecretsDisclosure({
+  open,
+  onOpenChange,
+  isLoading,
+  previewError,
+  preview,
+  previewIsCurrent,
+}: ReviewCloudSecretsDisclosureProps) {
+  return (
+    <details
+      open={open}
+      className="rounded-md border border-border bg-background p-3"
+    >
+      <summary
+        className="cursor-pointer text-sm font-medium"
+        onClick={(event) => {
+          event.preventDefault();
+          onOpenChange(!open);
+        }}
+      >
+        Review generated secrets (optional)
+      </summary>
+      <div className="mt-3 space-y-3">
+        {isLoading ? (
+          <>
+            <p className="text-sm text-muted-foreground">
+              Generating redacted cloud secrets preview…
+            </p>
+            <div className="space-y-2" aria-hidden="true">
+              <Skeleton className="h-4 w-[60%]" />
+              <Skeleton className="h-24 w-full" />
+            </div>
+          </>
+        ) : previewError ? (
+          <p className="text-sm text-destructive">{previewError}</p>
+        ) : (
+          <RemoteActionPreview
+            harnessSecretPreview={previewIsCurrent ? preview : undefined}
+          />
+        )}
+      </div>
+    </details>
+  );
+}

package/workspace-snapshot/files/apps/gui/components/custom/review-generated-files-disclosure.tsx

@@ -0,0 +1,67 @@
+"use client";
+
+import { LocalWritePreview } from "@/components/custom/local-write-preview";
+import { Skeleton } from "@/components/ui/skeleton";
+
+interface ReviewGeneratedFilesDisclosureProps {
+  open: boolean;
+  onOpenChange: (open: boolean) => void;
+  isLoading: boolean;
+  previewError?: string;
+  envPreview?: string;
+  configPreview?: string;
+  validationError?: string;
+  previewIsCurrent: boolean;
+}
+
+export function ReviewGeneratedFilesDisclosure({
+  open,
+  onOpenChange,
+  isLoading,
+  previewError,
+  envPreview,
+  configPreview,
+  validationError,
+  previewIsCurrent,
+}: ReviewGeneratedFilesDisclosureProps) {
+  return (
+    <details
+      open={open}
+      className="rounded-md border border-border bg-background p-3"
+    >
+      <summary
+        className="cursor-pointer text-sm font-medium"
+        onClick={(event) => {
+          event.preventDefault();
+          onOpenChange(!open);
+        }}
+      >
+        Review generated files
+      </summary>
+      <div className="mt-3 space-y-3">
+        {isLoading ? (
+          <>
+            <p className="text-sm text-muted-foreground">
+              Generating redacted local file changes…
+            </p>
+            <div className="space-y-2" aria-hidden="true">
+              <Skeleton className="h-4 w-[60%]" />
+              <Skeleton className="h-24 w-full" />
+              <Skeleton className="h-4 w-[40%]" />
+              <Skeleton className="h-32 w-full" />
+            </div>
+          </>
+        ) : previewError ? (
+          <p className="text-sm text-destructive">{previewError}</p>
+        ) : (
+          <LocalWritePreview
+            variant="guided"
+            envPreview={previewIsCurrent ? envPreview : undefined}
+            configPreview={previewIsCurrent ? configPreview : undefined}
+            validationError={previewIsCurrent ? validationError : undefined}
+          />
+        )}
+      </div>
+    </details>
+  );
+}

package/workspace-snapshot/files/apps/gui/components/custom/section-card.tsx

@@ -0,0 +1,33 @@
+import {
+  Card,
+  CardContent,
+  CardDescription,
+  CardHeader,
+  CardTitle,
+} from "@/components/ui/card";
+import { SPACING } from "@/lib/constants";
+import { cn } from "@/lib/utils";
+
+interface SectionCardProps {
+  title: string;
+  description?: string;
+  children: React.ReactNode;
+  className?: string;
+}
+
+export function SectionCard({
+  title,
+  description,
+  children,
+  className,
+}: SectionCardProps) {
+  return (
+    <Card className={className}>
+      <CardHeader className={SPACING.cardHeader}>
+        <CardTitle>{title}</CardTitle>
+        {description ? <CardDescription>{description}</CardDescription> : null}
+      </CardHeader>
+      <CardContent className={cn(SPACING.stackSm)}>{children}</CardContent>
+    </Card>
+  );
+}

package/workspace-snapshot/files/apps/gui/components/custom/service-icons.tsx

@@ -0,0 +1,30 @@
+import type { ServiceKey } from "@/components/custom/environment-config-form";
+import { SiCursor, SiGithub, SiLinear, SiVercel } from "react-icons/si";
+import { cn } from "@/lib/utils";
+
+const ICON_CLASS = "size-4 shrink-0 text-muted-foreground";
+
+export function ServiceIcon({
+  serviceKey,
+  className,
+}: {
+  serviceKey: ServiceKey;
+  className?: string;
+}) {
+  const iconClass = cn(ICON_CLASS, className);
+
+  switch (serviceKey) {
+    case "LINEAR_API_KEY":
+      return <SiLinear className={iconClass} aria-hidden="true" />;
+    case "CURSOR_API_KEY":
+      return <SiCursor className={iconClass} aria-hidden="true" />;
+    case "GITHUB_TOKEN":
+      return <SiGithub className={iconClass} aria-hidden="true" />;
+    case "VERCEL_TOKEN":
+      return <SiVercel className={iconClass} aria-hidden="true" />;
+  }
+}
+
+export function RepoIcon({ className }: { className?: string }) {
+  return <SiGithub className={cn(ICON_CLASS, className)} aria-hidden="true" />;
+}

package/workspace-snapshot/files/apps/gui/components/custom/setup-apply-result.tsx

@@ -0,0 +1,52 @@
+"use client";
+
+import { StatusBadge } from "@/components/custom/status-badge";
+import type { SetupGuiViewModel } from "@/lib/setup-server";
+
+interface SetupApplyResultProps {
+  success: boolean;
+  message: string;
+  summary?: SetupGuiViewModel;
+}
+
+export function SetupApplyResult({
+  success,
+  message,
+  summary,
+}: SetupApplyResultProps) {
+  return (
+    <div className="space-y-3 rounded-md border border-border p-4">
+      <div className="flex items-center gap-2">
+        <StatusBadge
+          label={success ? "Applied" : "Failed"}
+          variant={success ? "success" : "destructive"}
+        />
+        <p className="text-sm font-medium">{message}</p>
+      </div>
+      {success && summary ? (
+        <dl className="grid grid-cols-1 gap-3 text-sm md:grid-cols-2">
+          <div>
+            <dt className="text-muted-foreground">Local files present</dt>
+            <dd>{summary.overview.localFilesPresent ? "Yes" : "No"}</dd>
+          </div>
+          <div>
+            <dt className="text-muted-foreground">Config resolved</dt>
+            <dd>{summary.overview.configResolved ? "Yes" : "No"}</dd>
+          </div>
+          <div>
+            <dt className="text-muted-foreground">LINEAR_API_KEY</dt>
+            <dd>{summary.envKeyPresence.LINEAR_API_KEY ? "Set" : "Missing"}</dd>
+          </div>
+          <div>
+            <dt className="text-muted-foreground">CURSOR_API_KEY</dt>
+            <dd>{summary.envKeyPresence.CURSOR_API_KEY ? "Set" : "Missing"}</dd>
+          </div>
+          <div>
+            <dt className="text-muted-foreground">GITHUB_TOKEN</dt>
+            <dd>{summary.envKeyPresence.GITHUB_TOKEN ? "Set" : "Missing"}</dd>
+          </div>
+        </dl>
+      ) : null}
+    </div>
+  );
+}