gitea-admin/CASAN
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat(plan-01): Phase 0.5 — path indirection via casan-paths.sh (no file moves)

Browse Source 
Task 1.2: introduce a single path resolver so no harness script hardcodes
`.specify/...` scattered across the tree. casan-paths.sh resolves four roots
(HARNESS/STATE/GOVERNANCE/APP) by marker-based walk-up from its own location —
never `git rev-parse` (git root is the repo PARENT here, not the app dir).

- 101 bash scripts/tests: 238 hardcoded `$PROJECT_ROOT/.specify/...` refs rewritten
  to CASAN_HARNESS_ROOT (code) / CASAN_STATE_ROOT (logs,state) / CASAN_GOVERNANCE_ROOT.
  Sandbox test vars ($WORK/$TP/$FP/$T1_WORK) left untouched.
- Roots are NOT exported: each script/subprocess self-resolves from its own tree,
  matching the original per-script semantics and preserving hermetic sandbox isolation
  (node casan-step.mjs, copied telemetry/rollback scripts must not inherit real roots).
- Sandbox tests that copy a harness script now also copy casan-paths.sh (its new
  sibling dependency): adversarial (verify-audit-chain/verify-tool-audit/rollback) +
  track-a (security-check/telemetry-integrity).
- control-plane-settings.json reclassified as STATE (untracked runtime store).

Roots all still resolve to `.specify` in this monolithic layout, so behavior is
unchanged. Full gate: PASS=64 FAIL=0 SKIP=3 (adversarial 44/0, track-a 25/0).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
This commit is contained in:
thanhnv
2026-07-07 22:07:41 +09:00
co-authored by Claude Opus 4.8
parent 61c3a7c648
commit 2c765c9a45
102 changed files with 1605 additions and 1429 deletions
Download Patch File Download Diff File Expand all files Collapse all files
AINative_OKR_CASAN5/.specify/tests/phase3-judge-gate-tests.sh
+4 -3
View File
@@ -21,6 +21,7 @@ fi
# If tunnel is down, model tests SKIP not fail.
SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
source "$SCRIPT_DIR/../scripts/bash/casan-paths.sh"
ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)"
WORK="$(mktemp -d)"; trap 'rm -rf "$WORK"' EXIT
PASS=0; FAIL=0; SKIP=0
@@ -60,8 +61,8 @@ printf "FR-01 Login\nFR-02 Create Objective\nFR-03 Key Result\nFR-04 Progress\nF
printf "NestJS SQLite React\n" > "$WORK/docs/technical_architecture.md"
# Copy the real model-router.sh + model-call.py so the judge can run
cp "$ROOT/.specify/scripts/bash/model-router.sh" "$WORK/.specify/scripts/bash/"
cp "$ROOT/.specify/scripts/bash/model-call.py" "$WORK/.specify/scripts/bash/"
cp "$CASAN_HARNESS_ROOT/scripts/bash/model-router.sh" "$WORK/.specify/scripts/bash/"
cp "$CASAN_HARNESS_ROOT/scripts/bash/model-call.py" "$WORK/.specify/scripts/bash/"
# Point provider log to work dir so we don't pollute main repo
export CASAN_PROVIDER_LOG="$WORK/.specify/logs/level5/provider-usage.jsonl"
@@ -160,7 +161,7 @@ if [[ "$OLLAMA_UP" == "true" ]]; then
printf 'Return only the number 42, nothing else.\n' > "$MALFORM_FILE"
MALFORM_OUT="$WORK/malform-judge-out.json"
set +e
python "$ROOT/.specify/scripts/bash/model-call.py" "$MALFORM_FILE" "$MALFORM_OUT" --role judge 2>/dev/null
python "$CASAN_HARNESS_ROOT/scripts/bash/model-call.py" "$MALFORM_FILE" "$MALFORM_OUT" --role judge 2>/dev/null
mrc=$?
set -e 2>/dev/null || true
verdict_m="$(python -c "import json;print(json.load(open('$MALFORM_OUT')).get('verdict',''))" 2>/dev/null || echo "")"