feat: add control panel

This commit is contained in:
thanhnv
2026-07-08 19:07:35 +09:00
parent a07b15e489
commit 3be9970c15
104 changed files with 3639 additions and 461 deletions
+11 -9
View File
@@ -1,8 +1,9 @@
# CASAN Platform (Level 3 — Productization UI) · **PREVIEW / structure-only**
# CASAN Platform (Level 3 — Productization UI) · **PREVIEW**
> Status: **PREVIEW.** Only the AgentOps **dashboard** exists today (shipped inside the core
> harness). The rest of the platform UI is scaffolded here as structure + intent — NOT
> implemented in this task. `package-release.sh platform` builds a clearly-stamped
> Status: **PREVIEW.** The AgentOps dashboard and Plan-13 Control Panel, including
> Command Center baseline, exist today.
> Evidence/attack viewers, Gitea integration, Ask CASAN, and managed production rollout
> remain planned. `package-release.sh platform` builds a clearly-stamped
> `casan-platform-preview-*` bundle containing only what exists.
Optional layer for teams that want UI / dashboard / visibility. Packages: `casan-platform`,
@@ -12,9 +13,9 @@ Optional layer for teams that want UI / dashboard / visibility. Packages: `casan
| Component | Status | Where |
|---|---|---|
| AgentOps Dashboard | ✅ exists | `packages/casan-harness/scripts/bash/dashboard-server.py` + `dashboard-serve.sh` (`casan dashboard`) |
| **Ops Console (Control Panel)** | ✅ **read-only (Plan-13 Track 1)** | `packages/casan-control-panel/` — NestJS API + React UI over harness telemetry (`npm run console:api` + `console:ui`). Includes Run History + verdicts + governance + security + incidents + traceability views. |
| Management / settings writes | 📋 planned | Plan-13 Track 2 (wrap `control-plane-settings.py`) |
| RBAC + approval inbox | 📋 planned | Plan-13 Track 3 / Plan-14 |
| **Ops Console (Control Panel)** | ✅ **monitoring + governed settings + HITL + kill-switch + FinOps/SLO + Command Center + local-prod TLS/OIDC smoke** | `packages/casan-control-panel/` — NestJS API + React UI over harness telemetry, settings management, approval inbox, kill-switch, FinOps/SLO, and Command Center (`npm run console:api` + `console:ui`). Includes Run History + verdicts + governance + security + incidents + traceability + FinOps + Approvals + role-aware Settings page + `/command` evidence-backed executive view. |
| Management / settings writes | ✅ done+test | Plan-13 Track 2: wraps `control-plane-settings.py`, calls `rbac-check.py`, supports set/rollback/audit verify. |
| RBAC + approval inbox | ✅ local-prod done | Settings + kill-switch API RBAC enforcement, approval inbox/delegation/oversight, SoD, governed setting proposal apply, and local OIDC claim→role mapping smoke are done. Enterprise IdP rollout remains production follow-up. |
| Evidence Pack Viewer | 📋 planned | reads `docs/output/casan/evidence-packs/` |
| Attack Battery Viewer | 📋 planned | reads red-team corpus + H4 recall results |
| Read-only Ask CASAN | 📋 planned | Plan-18 MVP-0 (read-only) |
@@ -27,5 +28,6 @@ scripts/package-release.sh platform # → dist/casan-platform-preview-vX.Y.Z
The bundle includes a `PREVIEW-INCOMPLETE.txt` marker. Do not treat it as a finished product.
## To implement later
Start from Plan-13 (Control Plane) + Plan-18 MVP-0 (Ask CASAN read-only). Keep the UI
**read-only over harness artifacts** first; write/governed actions belong to Level 4.
Start from Plan-15 RAI view or Plan-18 MVP-0 (Ask CASAN read-only). Keep new numbers
evidence-backed with provenance; any write/governed action must continue to route through
harness RBAC, approval, and audit primitives.