gitea-admin/CASAN
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat(devkit): enforce governed prompt adoption

Browse Source
This commit is contained in:
thanhnv
2026-07-21 23:40:26 +07:00
parent 4d5dca9400
commit 7b2ba60a3a
16 changed files with 622 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files
packages/casan-devkit/install.sh
+66 -9
View File
@@ -24,31 +24,81 @@ while [[ $# -gt 0 ]]; do
esac
done
[[ -n "$TARGET" && -n "$PROJECT" ]] || { echo "install: --target and --project are required" >&2; exit 64; }
[[ "$PROJECT" =~ ^[a-z][a-z0-9-]{1,62}$ ]] || {
echo "install: --project must match ^[a-z][a-z0-9-]{1,62}$" >&2
exit 64
}
SRC="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)" # source-hub / bundle root
[[ -d "$SRC/packages/casan-harness" ]] || { echo "install: cannot find packages/casan-harness under $SRC" >&2; exit 1; }
if [[ -n "$TEMPLATE" ]]; then
exec python3 "$SRC/packages/casan-devkit/project-scaffold.py" \
--target "$TARGET" --project "$PROJECT" --name "$DOMAIN" --template "$TEMPLATE" --with-harness
python3 "$SRC/packages/casan-devkit/project-scaffold.py" \
--target "$TARGET" --project "$PROJECT" --name "$DOMAIN" --template "$TEMPLATE"
fi
echo "==> installing CASAN core into $TARGET (project=$PROJECT domain=$DOMAIN)"
mkdir -p "$TARGET/packages" "$TARGET/bin" "$TARGET/apps/$PROJECT/domain"
# 1) core harness + CLI
rsync -a --exclude='__pycache__' --exclude='*.pyc' "$SRC/packages/casan-harness/" "$TARGET/packages/casan-harness/"
RSYNC_EXCLUDES=(--exclude='__pycache__' --exclude='*.pyc' --exclude='.DS_Store' --exclude='*.log')
[[ -f "$TARGET/packages/casan-harness/level5/project-registry.json" ]] && RSYNC_EXCLUDES+=(--exclude='level5/project-registry.json')
rsync -a "${RSYNC_EXCLUDES[@]}" "$SRC/packages/casan-harness/" "$TARGET/packages/casan-harness/"
cp "$SRC/bin/casan" "$TARGET/bin/casan"; chmod +x "$TARGET/bin/casan"
[[ -f "$SRC/VERSION" ]] && cp "$SRC/VERSION" "$TARGET/VERSION"
# 2) per-project domain from the domain-pack template
rsync -a "$SRC/packages/casan-devkit/templates/domain-pack/" "$TARGET/apps/$PROJECT/domain/"
rsync -a --ignore-existing "$SRC/packages/casan-devkit/templates/domain-pack/" "$TARGET/apps/$PROJECT/domain/"
# 3) Gitea CI workflow (adoption)
mkdir -p "$TARGET/.gitea/workflows"
cp "$SRC/packages/casan-devkit/templates/gitea-workflow/ci.yml" "$TARGET/.gitea/workflows/casan-ci.yml"
# 3) Prompt enforcement entrypoints, policy, and repository-agent contracts.
mkdir -p "$TARGET/.casan" "$TARGET/.github" "$TARGET/.gitea/workflows" "$TARGET/docs/casan"
cp "$SRC/packages/casan-devkit/templates/prompt-enforcement/casan-chat" "$TARGET/bin/casan-chat"
cp "$SRC/packages/casan-devkit/templates/prompt-enforcement/casan-chat.ps1" "$TARGET/bin/casan-chat.ps1"
chmod +x "$TARGET/bin/casan-chat"
# 4) register in project-registry.json (append if absent)
python3 - "$TARGET/.casan/prompt-policy.json" "$PROJECT" <<'PY'
import json, sys
path, project = sys.argv[1], sys.argv[2]
policy = {
"schema_version": 1,
"mode": "enforced",
"project_id": project,
"domain_root": f"apps/{project}/domain",
"certified_entrypoints": ["bin/casan-chat", "bin/casan-chat.ps1", "CASAN Control Panel"],
"direct_external_ui": "not_interceptable_not_certified",
"required_instruction_files": ["AGENTS.md", "CLAUDE.md", ".github/copilot-instructions.md"],
}
with open(path, "w", encoding="utf-8") as handle:
json.dump(policy, handle, ensure_ascii=False, indent=2)
handle.write("\n")
PY
python3 - "$TARGET" "$SRC/packages/casan-devkit/templates/prompt-enforcement/agent-instructions.md" <<'PY'
import pathlib, re, sys
root = pathlib.Path(sys.argv[1])
snippet = pathlib.Path(sys.argv[2]).read_text(encoding="utf-8").strip()
start = "<!-- CASAN_PROMPT_ENFORCEMENT_START -->"
end = "<!-- CASAN_PROMPT_ENFORCEMENT_END -->"
pattern = re.compile(re.escape(start) + r".*?" + re.escape(end), re.DOTALL)
for relative in ("AGENTS.md", "CLAUDE.md", ".github/copilot-instructions.md"):
path = root / relative
path.parent.mkdir(parents=True, exist_ok=True)
existing = path.read_text(encoding="utf-8") if path.exists() else ""
updated = pattern.sub(snippet, existing) if pattern.search(existing) else (existing.rstrip() + "\n\n" + snippet).lstrip()
path.write_text(updated.rstrip() + "\n", encoding="utf-8")
PY
cp "$SRC/docs/packaging/PROMPT_ENFORCEMENT_GUIDE.md" "$TARGET/docs/casan/CASAN_PROMPT_ENFORCEMENT.md"
# 4) Standalone Gitea contract workflow. The project's existing CI remains untouched.
cp "$SRC/packages/casan-devkit/templates/gitea-workflow/prompt-enforcement.yml" "$TARGET/.gitea/workflows/casan-prompt-enforcement.yml"
python3 - "$TARGET/.gitea/workflows/casan-prompt-enforcement.yml" "$PROJECT" <<'PY'
import pathlib, sys
path, project = pathlib.Path(sys.argv[1]), sys.argv[2]
path.write_text(path.read_text(encoding="utf-8").replace("__PROJECT_ID__", project), encoding="utf-8")
PY
# 5) register in project-registry.json (append if absent)
REG="$TARGET/packages/casan-harness/level5/project-registry.json"
python3 - "$REG" "$PROJECT" "$DOMAIN" <<'PY'
import json, os, sys
@@ -70,6 +120,10 @@ else:
print(f"{pid} already registered")
PY
# 6) Fail the installation if a managed enforcement artifact is absent or malformed.
bash "$TARGET/packages/casan-harness/scripts/bash/prompt-enforcement-verify.sh" \
--root "$TARGET" --project "$PROJECT"
cat <<EOF
==> done. Next steps in $TARGET:
@@ -77,5 +131,8 @@ cat <<EOF
2. Add golden baseline in apps/$PROJECT/domain/golden-runs/
3. Run the gate: CASAN_DOMAIN_ROOT=apps/$PROJECT/domain bin/casan gate
4. Prove reuse: bin/casan reuse # expects HARNESS_REUSE_VALID
See docs/packaging/ADOPTION_GUIDE.md and DOMAIN_PACK_GUIDE.md.
5. Send every AI prompt via: bin/casan-chat "<prompt>"
6. On Windows/WSL2 use: powershell -ExecutionPolicy Bypass -File bin/casan-chat.ps1 "<prompt>"
7. Verify enforcement: bin/casan prompt verify
See docs/casan/CASAN_PROMPT_ENFORCEMENT.md.
EOF