
Security News
Ruby's Bundler 4.0.18 Extends Cooldown to bundle lock and bundle cache
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.
@sapiom/harness
Advanced tools
Agent Studio — a CLI-launched local web app that runs your coding agent (Claude Code or Codex) in a Sapiom-configured environment: MCP pre-wired, agents tracked, one-click deploy/run, and a live canvas for previews.
Agent Studio is a local web app for building on Sapiom with your own coding agent.
npx @sapiom/harness [dir]
# also available via the Sapiom CLI (npm i -g @sapiom/cli @sapiom/harness):
sapiom dev [dir]
One command checks your environment, signs you in, and opens Agent Studio with your coding agent (Claude Code or Codex) running in an embedded terminal — pre-wired with the Sapiom MCP servers and an agent-authoring system prompt, in whatever project directory you choose.
sapiom.json) discovered and
tracked, with one-click local test run, deploy, production run, and
open-in-Sapiom actions..sapiom/canvas/ (visualize your agent, your docs, anything), plus a
preview mode for dev servers the agent starts.Uninstall: rm -rf ~/.sapiom/harness (all harness-owned state lives there).
With explicit opt-in, Agent Studio collects usage events (prompts, tool calls,
session lifecycle) to improve Sapiom. Opt out any time; --no-telemetry
disables collection entirely. Events are also written locally to
~/.sapiom/harness/events.ndjson for your own inspection.
pnpm --filter @sapiom/harness dev # server (tsx) on :4100
pnpm --filter @sapiom/harness dev:web # Vite dev server, proxies to :4100
pnpm --filter @sapiom/harness build # server (tsc) + SPA (vite) → dist/
Architecture: a single Node process (Express + ws + node-pty) serves the built
SPA, a small REST API, terminal WebSocket streams, and the local telemetry
ingest endpoint. The interface contract lives in src/shared/types.ts.
Three tiers — run whatever fits your change:
Unit tier (vitest, no browser, no agent): covers server logic, adapters, analytics, and canvas rendering. Runs in CI on every PR.
pnpm --filter @sapiom/harness test
Playwright mock tier (chromium, Vite dev server with VITE_MOCK=1, no
harness server or agent process). The full web/e2e/ suite against the SPA in
mock mode. Runs in CI on every PR. For a fast watch loop locally, use UI mode:
# One-time browser install (not included in pnpm install):
pnpm --filter @sapiom/harness exec playwright install chromium
# Watch/UI mode — re-runs affected specs on save:
pnpm --filter @sapiom/harness exec playwright test \
--config web/e2e/playwright.config.ts --ui
# Or run the full suite once (same command CI uses):
pnpm --filter @sapiom/harness test:ui
E2E live tier (real agent binaries, real pty, no CI). Requires Claude Code
or Codex installed and a valid SAPIOM_API_KEY in your environment.
pnpm --filter @sapiom/harness e2e:live
FAQs
Agent Studio — a CLI-launched local web app that runs your coding agent (Claude Code or Codex) in a Sapiom-configured environment: MCP pre-wired, agents tracked, one-click deploy/run, and a live canvas for previews.
The npm package @sapiom/harness receives a total of 728 weekly downloads. As such, @sapiom/harness popularity was classified as not popular.
We found that @sapiom/harness demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.

Security News
During a UK cyber test, a Mythos 5 agent used sockpuppets, social engineering, and prompt injection to try to get a maintainer to merge malware.

Company News
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.