serve-sim

Drive an Apple Simulator (iOS, iPad, Apple Watch) from an agent using the serve-sim CLI. serve-sim spawns a Swift helper that captures the simulator framebuffer via

simctl io

, exposes it as an MJPEG stream plus a binary WebSocket input channel, and serves a React preview UI on top. This skill teaches an agent the exact CLI surface, the gesture JSON shape, the gotchas, and the recommended workflows.

When to use

The user wants an agent to tap, swipe, drag, pinch, or send hardware buttons to a running Apple Simulator.
The user wants to stream a simulator to a browser (local, LAN, or tunneled) for review or remote control.
The user wants to inject a synthetic camera feed (file, webcam, or animated placeholder) into a specific app on the simulator.
The user wants to toggle CoreAnimation debug overlays (off-screen rendering, blended layers, slow animations) for performance work.
The user wants to simulate a memory warning or rotate the device programmatically.
The user wants to read the simulator's accessibility tree to find UI elements without pixel hunting.
The user wants to grant, revoke, or reset an app's privacy permissions — camera, photos, location, contacts, or push notifications.

When NOT to use

Android emulators → use
```
adb shell
```
tooling.
Building or installing an iOS app → use
```
xcodebuild
```
or
```
xcrun simctl install
```
.
React Native in-app runtime debugging (Redux state, network inspection, component tree) → use rn-debugger tooling.
Real iOS hardware devices → use
```
xcrun devicectl
```
or Xcode.

Prerequisites

Before any other action, verify the host satisfies these. If something is missing, tell the user exactly what to install — do not proceed.

Requirement	Check command	Why
macOS host	`uname -s` returns `Darwin`	serve-sim only runs on macOS
Xcode CLI tools	`xcrun --version` exits 0	`simctl` is the underlying simulator driver
Node.js ≥18	`node --version` ≥18	serve-sim is an npm package run via `npx`
macOS 14+ (optional)	`sw_vers -productVersion` ≥14	Required ONLY for `camera` subcommand

A bundled helper script is available:

scripts/check-prereqs.sh

. Run it; if it exits non-zero, surface the message to the user.

A booted simulator is required for most subcommands. Check with

xcrun simctl list devices booted

. If none are booted, tell the user to open Xcode → Simulator or to run

xcrun simctl boot <UDID>

Mental model

text

┌──────────────┐  simctl io  ┌─────────────────┐  MJPEG / WS  ┌─────────┐
│ iOS Simulator│ ──────────► │ serve-sim-bin   │ ───────────► │ Browser │
└──────────────┘   (Swift)   │ (per-device)    │              └─────────┘
                             └─────────────────┘
                                     ▲
                              state file in
                            $TMPDIR/serve-sim/
                                     ▲
                            ┌──────────────────┐
                            │ serve-sim CLI    │
                            └──────────────────┘

Key invariants the agent must respect:

All coordinates are normalized 0..1, with
```
(0, 0)
```
at top-left and
```
(1, 1)
```
at bottom-right of the display. Never pass pixel coordinates.
One helper per device. Multiple booted simulators are supported by passing several device names or by attaching to all.
State lives in
$TMPDIR/serve-sim/server-{udid}.json
. Use
```
serve-sim --list
```
to query it; do not read the JSON directly unless you know what you are doing.
The orientation set via
rotate
is remembered by the helper, and subsequent gestures are rotated client-side. An agent that sends raw coords after a rotation does not need to compensate manually.

Common operations

Goal	Command	Notes
Start preview server	`npx serve-sim [device]`	Default preview at `http://localhost:3200` , stream at `:3100` . Foreground process.
Start headless / daemon	`npx serve-sim --detach [device]`	Returns JSON with `pid` , `port` , `url` . Use for agent loops.
Show stream in host's preview	`npx serve-sim --detach -q` → hand off `url` to host preview tool	See "Showing the stream in your agent's preview" section.
List running streams	`npx serve-sim --list`	Add `-q` for JSON-only output.
Stop all helpers	`npx serve-sim --kill`	Pass `[device]` to stop a specific one.
Single tap	`npx serve-sim tap <x> <y>`	`<x> <y>` in `0..1` . Use this, not `gesture` , for plain taps. See "Critical gotcha" below.
Multi-step gesture	`npx serve-sim gesture '<json>'`	See references/gestures.md.
Hardware button	`npx serve-sim button <name>`	Names: `home` , `swipe_home` , `app_switcher` , `lock` , `siri` , `side_button` . See references/buttons-rotation.md.
Rotate device	`npx serve-sim rotate <orientation>`	`portrait` , `portrait_upside_down` , `landscape_left` , `landscape_right` .
Simulate memory warning	`npx serve-sim memory-warning`	Equivalent to Debug → Simulate Memory Warning.
CoreAnimation debug	`npx serve-sim ca-debug <option> <on\|off>`	Options: `blended` , `copies` , `misaligned` , `offscreen` , `slow-animations` . See references/ca-debug.md.
Inject camera feed	`npx serve-sim camera <bundle-id> [--file <path>\|--webcam [name]]`	(Re)launches the app with the camera dylib attached. macOS 14+ only. See references/camera.md.
Hot-swap camera source	`npx serve-sim camera switch <placeholder\|webcam\|file> [arg]`	No app relaunch.
Manage app permissions	`npx serve-sim permissions <grant\|revoke\|reset\|list> <permission> <bundle-id>`	Camera, photos, location, push notifications, contacts, etc. See references/permissions.md.
Read accessibility tree	`curl http://localhost:3100/ax`	Returns axe-style JSON. See references/endpoints.md for all endpoints.

Most subcommands accept

-d <udid|name>

to target a specific device when several are booted.

Critical gotcha: prefer

tap

over

gesture

for taps

Each

serve-sim gesture

call opens its own WebSocket. If you issue two back-to-back

gesture

calls — one with

{"type":"begin",...}

and one with

{"type":"end",...}

— the simulator receives them with enough latency between them that the touch is interpreted as a long-press, not a tap. This is a deliberate constraint of the protocol, not a bug to work around.

Rule: for any single-shot tap, use

serve-sim tap <x> <y>

. Only use

gesture

for drags, swipes, or multi-step interactions where you must thread the same socket across

begin

→

move

× N →

end

Targeting a specific device

When multiple simulators are booted, every subcommand accepts

-d <udid|name>

. The name match is case-insensitive against the device name returned by

xcrun simctl list devices booted

. Examples:

npx serve-sim tap 0.5 0.5 -d "iPhone 16 Pro"
npx serve-sim button home -d ABC12345-...
npx serve-sim --list                                # show all running streams

If the user has only one booted simulator, omit

-d

entirely. The skill should prefer auto-detection over hard-coding device names.

Output modes

By default, serve-sim prints human-readable status to stdout. For agent loops, prefer JSON output:

npx serve-sim --list -q          # JSON array of running streams
npx serve-sim --detach -q        # JSON with pid/port/url after spawn
npx serve-sim camera status -q   # JSON with {alive, source, mirror, ...}

Parse

-q

output programmatically. Never parse the non-

-q

human output — it can change between versions.

Showing the stream in your agent's preview

When the user asks to "see the simulator here", "view it in preview", "open it in this tool", or similar, the goal is to stream the simulator into the same surface the user is chatting with. serve-sim returns a regular HTTP URL — the agent's job is to surface that URL and, if the host exposes a preview tool, hand it off.

Steps:

Start serve-sim and capture the URL:

npx serve-sim --detach -q

This returns JSON like

{"pid":..., "port":3200, "url":"http://localhost:3200", "streamUrl":"http://localhost:3100", ...}

. The

url

field is the human-facing preview UI;

streamUrl

is the raw MJPEG endpoint.

Always surface the URL plainly in your response so the user can fallback to opening it manually in any browser.
Probe your host's preview tool and hand off the URL if one exists. Examples of tool names you may see in your toolset:
- ```
preview_start
```
  (Claude Code) — call it with
```
{ url: "<url>" }
```
  .
- ```
mcp__Claude_Preview__preview_start
```
  (some MCP setups).
- A
```
browser_open
```
  ,
```
open_url
```
  , or similar URL-opening tool — pass the URL.
- Cursor / Codex CLI / others may not expose a preview tool to the agent. In that case, just print the URL and tell the user how to open it (their browser, their IDE's built-in browser pane, etc.).
Do not assume any specific preview tool exists. Inspect the tools available to you in the current session. If one matches the description above, use it. If none does, fall back to step 2 (print the URL prominently).

The stream stays alive until

npx serve-sim --kill

. Multiple clients (the host's preview + the user's browser + a tunnel) can read the same URL simultaneously.

See references/workflows.md workflow "Show the simulator stream in the host's preview" for the full recipe.

Workflows

For complete end-to-end recipes (UI automation, camera testing, accessibility-driven taps, deep-link flows, preview handoff), see references/workflows.md. The reference covers the patterns documented in serve-sim's own

AGENTS.md

Cleanup

Always stop helpers when finished, unless the user explicitly wants them to keep running:

npx serve-sim --kill            # stop all
npx serve-sim --kill "iPhone 16 Pro"  # stop one

Orphan helpers occupy ports 3200/3100 and prevent fresh starts.

Anti-patterns

Do not pass pixel coordinates. All coords are normalized
```
0..1
```
. If the user gives pixel values, divide by the screen dimensions reported by
```
GET /config
```
.
Do not use
gesture
for plain taps. Use
```
tap
```
. See "Critical gotcha" above.
Do not assume
npx serve-sim
is already running. Verify with
```
--list
```
or by checking
```
$TMPDIR/serve-sim/server-{udid}.json
```
. If absent, start it explicitly.
Do not skip the prerequisites check on the first invocation in a session. Wrong macOS version, missing Xcode CLI tools, or Node <18 produce confusing errors downstream.
Do not invent button names. Only these six are valid:
```
home
```
,
```
swipe_home
```
,
```
app_switcher
```
,
```
lock
```
,
```
siri
```
,
```
side_button
```
. See references/buttons-rotation.md for the source-of-truth list.
Do not parse the non-quiet human output. Use
```
-q
```
for JSON.
Do not leave camera helpers running across unrelated tasks. Stop them with
```
npx serve-sim camera --stop-webcam
```
when done.
Do not guess coordinates when an accessibility lookup returns no match. If you fetched the AX tree (e.g.
```
GET /ax
```
) to find a target element and the query returned no result, fail loudly — tapping a guessed spot is almost always worse than reporting "target not found" back to the user. See references/workflows.md workflow 1 for the guard pattern.

Reference index

references/gestures.md — exact gesture JSON shapes, edge values, multi-touch, drag/swipe recipes.
references/buttons-rotation.md — the six valid buttons and the four orientations, with behavioral notes.
references/camera.md — synthetic camera injection: placeholder, file, webcam, mirror modes, hot-swap.
references/permissions.md — granting/revoking app privacy permissions, including push notifications.
references/ca-debug.md — the five CoreAnimation debug flags and when each one helps.
references/endpoints.md — HTTP and WebSocket endpoints for agents that bypass the CLI.
references/workflows.md — end-to-end recipes for UI automation, camera testing, deep-link flows.

serve-sim

NPX Install

Tags

SKILL.md Content

serve-sim

When to use

When NOT to use

Prerequisites

Mental model

Common operations

Critical gotcha: prefer
`tap`
over
`gesture`
for taps

Targeting a specific device

Output modes

Showing the stream in your agent's preview

Workflows

Cleanup

Anti-patterns

Reference index