feat: harden CASAN production install lifecycle

2026-07-24 11:11:44 +07:00
parent c7671ab198
commit 114340c719
48 changed files with 1036 additions and 165 deletions
@@ -0,0 +1,57 @@
+{
+  "schema_version": 1,
+  "description": "Production runtime allowlist for global CASAN installs and release bundles. Source-only tests, development tooling, and Platform helpers must not cross this boundary.",
+  "components": {
+    "harness": {
+      "source": "packages/casan-harness",
+      "exclude": [
+        "README.md",
+        "init-options.json",
+        "level5",
+        "tests",
+        "scripts/bash/chat-cloud-smoke.sh",
+        "scripts/bash/ci-harness-gate.sh",
+        "scripts/bash/dashboard-serve.sh",
+        "scripts/bash/dashboard-server.py",
+        "scripts/bash/guideH4-H5-H6.md",
+        "scripts/bash/infra-lab.sh",
+        "scripts/bash/local-full.sh",
+        "scripts/bash/security-gate.sh",
+        "scripts/bash/test-integrity.py"
+      ],
+      "transforms": {
+        "config/project-registry.json": "empty_project_registry"
+      },
+      "required": [
+        "adapters/claude-code/claude_hook.py",
+        "adapters/codex/codex_hook.py",
+        "adapters/vscode/vscode_hook.py",
+        "config/project-registry.json",
+        "config/tool-registry.yaml",
+        "scripts/bash/casan-harness.sh",
+        "scripts/bash/project-gate.sh",
+        "scripts/bash/security-check.sh",
+        "scripts/bash/tool-registry-gate.sh",
+        "scripts/python/agentic_bridge.py",
+        "scripts/python/harness_hash.py"
+      ]
+    },
+    "devkit": {
+      "source": "packages/casan-devkit",
+      "exclude": [
+        "Dockerfile.harness",
+        "README.md",
+        "install.sh",
+        "tests",
+        "windows"
+      ],
+      "required": [
+        "casan-init.py",
+        "package-vscode-extension.py",
+        "project-scaffold.py",
+        "templates/domain-pack/domain-pack.yaml",
+        "templates/project/casan-hook.py"
+      ]
+    }
+  }
+}