feat: add marko/debugbar package

[ps-carvalho]

Summary

Adds the Marko Debugbar package to the monorepo as packages/debugbar.

This imports the committed standalone debugbar package from d89df8e (feat(profiler): enhance toolbar UI and request detail display) and adapts it to the monorepo package conventions.

The package provides a development debugbar and request profiler with collectors for request, response, timing, memory, messages, database, logs, views, Inertia, and config data.

Type of Change

• New feature

Related Issues

Closes #

Implementation Notes

• Adds packages/debugbar with source, config, module registration, tests, README, .gitattributes, and MIT license.
• Uses self.version for all marko/* dependencies.
• Keeps package type marko-module, PSR-4 autoloading, helper file autoloading, and extra.marko.module metadata.
• Adds a root path repository and root test autoload namespace for monorepo development.
• Adds marko/debugbar to the root require-dev, not require, so the package is available for monorepo tests without becoming part of the default runtime dependency set.
• Adds debugbar to bug report and feature request package option lists.
• Updates package-count assertions from 71 to 72 for the current develop package set.

Compatibility

This PR is intended to be non-breaking:

• Existing Marko runtime package requirements are unchanged.
• marko/debugbar is optional and opt-in for consuming applications.
• Debugbar capture is gated by debugbar.enabled, which defaults to APP_DEBUG through the package config.
• The root monorepo includes the package only as a development requirement so its tests and autoloading are available in this repository.

Validation

• composer validate --no-check-lock
• composer update marko/debugbar --with-dependencies --ignore-platform-req=ext-imagick
• composer dump-autoload
• vendor/bin/pest packages/debugbar/tests
• vendor/bin/pest tests/PackagingTest.php tests/IntegrationVerificationTest.php --exclude-group=integration-destructive
• composer test
• vendor/bin/phpcs --standard=phpcs.xml packages/debugbar
• git diff --check

Note: the local environment is missing ext-imagick, so Composer update was run with --ignore-platform-req=ext-imagick. Full monorepo composer cs:check is currently blocked by existing baseline/config issues outside this package; the new debugbar package passes PHPCS directly.

Checklist

• Tests pass (composer test)
• Package lint passes (vendor/bin/phpcs --standard=phpcs.xml packages/debugbar)
• Follows code standards

[markshust]

Thanks @ps-carvalho — landing this on top of the vite work is great. The plugin wiring around ConnectionInterface / LoggerInterface / ViewInterface is exactly the right seam, and the #[Plugin] attribute usage is clean.

I rebased onto current develop and pushed three follow-up commits to align with the package conventions in .claude/pr-review-process.md. Sharing the rationale here so the patterns are clear for future PRs:

What changed and why

5c0a26d — package conventions + docs page

• README slimmed to the title + Installation + Quick Example + docs link shape (~25 lines). Per docs/DOCS-STANDARDS.md, package READMEs are slim pointers; the deep content moves to the docs page. Compare packages/vite/README.md and packages/dev-server/README.md.
• Added docs/src/content/docs/packages/debugbar.md — required for every package per DOCS-STANDARDS:174.
• module.php reduced to the canonical singletons + boot shape (matches packages/vite/module.php and packages/errors-simple/module.php):
  • Dropped 'enabled' => true (default).
  • Dropped sequence: { after: ['marko/config', 'marko/routing'] }. Marko's container resolves lazily and boot callbacks fire after all modules register their bindings, so config and routing are already available when Debugbar::boot() runs. Verified in Marko\Core\Container\Container::call().
  • Dropped the bindings closures with if (! $x instanceof Foo) throw RuntimeException checks — the container is type-guaranteed after $container->get(FooInterface::class), so those throws are validation for impossible states (see "No defensive checks on container resolutions" in pr-review-process.md). With the closures gone, autowiring resolves Debugbar(ConfigRepositoryInterface, ?DebugbarStorage, HtmlDebugbarRenderer) and DebugbarStorage(Config, ProjectPaths) directly.
• composer.json reformatted to 4-space indent to match the other 70+ packages.
• php-cs-fixer brace-style fixes across the package (multi-line method signatures collapsed).
• Bumped PackagingTest / IntegrationVerificationTest counts 72 → 73 to account for both marko/vite (merged on develop after this branch was cut) and marko/debugbar.

3e6a68e — replace try/catch config lookups with has() guards
Eight sites in Debugbar, DebugbarStorage, and ProfilerController had:

try { $value = $this->config->get($key); }
catch (Throwable) { return $default; }

Marko's loud-errors principle (pr-review-process.md line 73) flags this pattern: a missing key should fall back to the default, but anything else (a broken config provider, an unexpected scope, a serialization failure) should bubble up loudly instead of being silently swallowed by a blanket Throwable catch. Replaced with explicit if (! $this->config->has($key)) return $default; + a plain get() after.

The intentional Throwable catch in Debugbar::store() is retained — it guards storage I/O (not config lookup), and the existing comment makes the "debug tooling must never break the response" intent explicit.

f99e1e6 — drop broken route.prefix knob, clean up package metadata

• Removed the route.prefix config option. It was a lying config: only Debugbar::profilerUrl() honored it, but the actual routes are PHP attributes (#[Get('/_debugbar/{id}')]) fixed at compile time, and HtmlDebugbarRenderer / ProfilerPageRenderer hardcode /_debugbar in their generated links. Setting DEBUGBAR_ROUTE_PREFIX only changed the X-Marko-Debugbar-Url header — the toolbar's "Open" button would point at the wrong URL. Path of least surprise: hardcode /_debugbar everywhere as the single source of truth. If you ever need a configurable prefix, registering routes in a boot callback (instead of via attributes) is the way.
• Trimmed .gitattributes to list only files the package contains, and column-aligned to match packages/vite and packages/dev-server.
• Removed tests/bootstrap.php — dead code. The root phpunit.xml doesn't reference it, and its env() polyfill duplicates the one autoloaded from marko/env (already required).

Status

• composer test — 4844 passed
• phpcs + php-cs-fixer clean on touched files
• composer validate clean
• Removed the breaking label — this is purely additive

Thanks again for both this and marko/vite — these are landing back-to-back nicely.

[ps-carvalho]

Cheers @markshust plenty more to come :)

[markshust]

Two more commits on top of today's review fixes — both UX refinements to the injected toolbar after testing locally against ~/Sites/my-app-debugbar-local.

8919e57 — toolbar UX: logo, resize, link target

Three changes bundled together:

1. Brand mark. The literal text "M" was a placeholder — replaced with the actual pixel-art Marko trademark inlined from docs/public/favicon.svg (20 rects, ~600 bytes), wrapped in <a href="https://marko.build" target="_blank" rel="noopener noreferrer">. No external asset, no extra request.

2. Stable panel height with resize. The panel had max-height: 46vh shrinking-to-fit content, which made the toolbar visually jump every time you switched tabs (a 0-row table tab vs. a 200-row queries tab = wildly different bar position). Restructured to a fixed-height panel that grows upward from the bar at the viewport floor:

   • Source order is now [handle, panel, bar] so the panel sits above the bar visually
   • Default panel height: 320px
   • 6px ns-resize drag handle at the top of the panel (only visible when expanded)
   • Pointer-event-based drag with setPointerCapture, clamped to [120, window.innerHeight - 100], re-clamped on window.resize so the handle stays reachable
   • Three localStorage keys persist across reloads: marko-debugbar-height, marko-debugbar-expanded, marko-debugbar-tab

3. "Open" → "All requests". The Open button linked to /_debugbar/{id} (the per-request profiler page), but ProfilerPageRenderer::show() renders the identical collector data the toolbar already shows inline — clicking it from a page that already has the toolbar was just duplication. Replaced with "All requests" linking to /_debugbar (the index of stored snapshots, which is useful for navigating between requests). The per-request URL is still exposed via the X-Marko-Debugbar-Url response header for non-HTML clients.

7e8aa1f — remove the close button

Dropped the X button. It cluttered the right side of the bar and wasn't super intuitive — "close" suggested a permanent dismiss, but it just removed the toolbar from the current DOM (it came back on the next request anyway). The Collapse toggle already handles the legitimate "minimize this so I can see the page" use case, and users who actually want the debugbar off should set DEBUGBAR_ENABLED=false or skip installing the package.

Status

• composer test — 4844 passed
• phpcs + php-cs-fixer clean on touched files
• Verified locally: panel height persists across hard reloads; switching tabs no longer changes the bar's vertical position; the M trademark links out to marko.build; the Open→All-requests change makes the toolbar a launch point for the index instead of a redirect to the same data