gitea-admin/CASAN
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
168 Commits 1 Branch 0 Tags
03ddeb7123fff39f1d270a83c0f7bbf272ab7e21
Commit Graph
49 Commits
Author SHA1 Message Date
thanhnv 03ddeb7123 fix(control-panel): sign strict goal approvals via oidc 2026-07-18 13:59:15 +07:00
thanhnv c0a6dbc25f fix: build patches from complete target context 2026-07-18 13:44:20 +07:00
thanhnv 850be145d7 fix: keep h2 patch repair on direct codex 2026-07-18 12:20:22 +07:00
thanhnv 1e5cfb341c fix: complete streamed patch repair responses 2026-07-18 12:14:02 +07:00
thanhnv 659ed09839 fix: make h2 patch repair failures diagnosable 2026-07-18 12:04:32 +07:00
thanhnv 61a8253679 feat: route codex patch repair through responses api 2026-07-18 11:53:24 +07:00
thanhnv 4f8a53bda9 fix: strengthen goal patch repair routing 2026-07-18 11:36:03 +07:00
thanhnv f23fb98953 fix: validate and size governed patch outputs 2026-07-18 11:29:37 +07:00
thanhnv e17a373da6 fix: prioritize direct providers for goal patch recovery 2026-07-18 10:32:06 +07:00
thanhnv 049f0c9b04 feat: visualize governed goal progress live 2026-07-18 10:19:26 +07:00
thanhnv efb5a62f29 fix: keep goal failure reasons gate-specific 2026-07-18 10:04:55 +07:00
thanhnv 1ffe5fe3df fix: retry invalid goal patch contract once 2026-07-18 09:57:05 +07:00
thanhnv 9785e13c82 feat: export aggregate Prometheus metrics 2026-07-18 09:25:56 +07:00
thanhnv e50714d622 feat: add tenant isolation pre-audit evidence 2026-07-18 09:04:39 +07:00
thanhnv b921f25c57 feat: require rootless production sandbox runners 2026-07-18 00:19:53 +07:00
thanhnv 407d373b4e feat: gate upgrades with compatibility matrix 2026-07-18 00:17:45 +07:00
thanhnv d129ba60ef fix: require Vault audit signing in production 2026-07-18 00:15:38 +07:00
thanhnv 00963119f4 feat: add verified state backup and restore drill 2026-07-18 00:14:22 +07:00
thanhnv 881ee01691 feat: prepare CASAN paid PoC release package 2026-07-18 00:07:04 +07:00
thanhnv a2cca645dc feat: apply reviewed goal patches 2026-07-12 00:21:50 +09:00
thanhnv 159022c73f feat: create new project added 2026-07-11 22:42:42 +09:00
thanhnv 193a449829 feat: updade workspace 2026-07-11 15:56:31 +09:00
thanhnv 4fc72332f5 optz: Goal orchestrator 2026-07-11 12:18:59 +09:00
thanhnv b56f7d357e feat: harden control panel authentication 2026-07-10 23:48:12 +09:00
thanhnv 48b1186439 feat: orchestrate goals with local and cloud models 2026-07-10 23:35:30 +09:00
thanhnv 1345d4c930 feat: add live H1-H7 trace explorer 2026-07-10 23:17:23 +09:00
thanhnv 7cb592a32f feat: add local provider account connector 2026-07-10 23:05:24 +09:00
thanhnv adce7717f7 feat: connect chat to managed model providers 2026-07-10 17:40:44 +09:00
thanhnv b0ced79af5 feat: govern chat model selection by policy 2026-07-10 17:09:28 +09:00
thanhnv f8215cd2eb feat: onboard service desk as second CASAN project 2026-07-10 17:00:35 +09:00
thanhnv 040af64191 feat: enforce live supply chain provenance gates 2026-07-10 16:47:45 +09:00
thanhnv aa284e9bd4 feat: add production deployment handoff controls 2026-07-10 16:41:14 +09:00
thanhnv 7cea023dce feat: chat + optmz control panel 2026-07-10 16:26:30 +09:00
thanhnv d882a9dc23 feat: plan 18 2026-07-10 11:28:14 +09:00
thanhnv fafccc47ad feat: complete llm sourcegen plan 2026-07-09 00:59:28 +09:00
thanhnv c800f7edf7 feat: harden chat state by tenant 2026-07-08 23:38:22 +09:00
thanhnv b3b0544ba8 feat: certify codegen chat drafts through loop 2026-07-08 23:20:54 +09:00
thanhnv 780fe86273 feat: escalate chat approvals through inbox 2026-07-08 23:09:43 +09:00
thanhnv a029a51e72 feat: add command center chat loop widget 2026-07-08 22:58:02 +09:00
thanhnv 36af576f15 feat: add chat replay verification 2026-07-08 22:45:12 +09:00
thanhnv 49d0363c6a feat: certify chat operator turns through loop-run 2026-07-08 22:31:03 +09:00
thanhnv 004afa73c9 feat: add governed chat agent selection 2026-07-08 22:19:51 +09:00
thanhnv 5561bcf864 feat: add governed chat console 2026-07-08 21:14:40 +09:00
thanhnv 3be9970c15 feat: add control panel 2026-07-08 19:07:35 +09:00
thanhnvandClaude Opus 4.8 94a7168362 chore: gitignore tsconfig.tsbuildinfo (build cache, not source) 
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
 2026-07-08 17:27:00 +09:00
thanhnvandClaude Opus 4.8 63dd44a11b feat(plan-13): read-only Ops Console (NestJS API + React UI) — Track 1 
Real web Control Panel over CASAN harness telemetry (Level-3 casan-platform component).
Read-only ("Đọc ≠ Ghi"): no settings writes, no gate bypass. Management/RBAC/approval are
Track 2/3 (future, Plan-14). Additive — harness gate untouched (64/0/3).

packages/casan-control-panel/
- backend/ (NestJS, ESM, /api/v1 + ok() envelope): TelemetryReader (jsonl/json, missing→[],
  never fabricates) + TelemetryService (aggregations mirroring generate-agentops-dashboard.py)
  + endpoints overview/runs(+:traceId)/governance/security/incidents/tools/traceability/
  drift/cost, and /healthz (stale-aware 200/503, fail-loud like dashboard-server.py). App
  root + telemetry paths resolve via casan-paths-style marker walk-up (.specify OR
  packages/casan-harness) + honor CASAN_DASHBOARD_* env. Binds 127.0.0.1; refuses
  non-loopback under CASAN_PROFILE=prod. @Inject token so DI works under tsc AND tsx.
  Tests (node native runner) 7/0: reader parse/missing, app-root, overview shape on real
  repo state, freshness/stale fail-loud.
- frontend/ (React+Vite+Tailwind+TanStack, port 5174, proxies to :3010): AppLayout +
  Sidebar + Header (LIVE/STALE badge from /healthz) + pages Overview/Runs/Governance/
  Security/Incidents/Traceability. axios client unwraps ok() envelope. build green.

Wiring: root workspaces + `console:*` scripts. packaging/levels.json + casan-platform
README: platform preview now lists the Ops Console as an implemented component.

Verified: backend build + test 7/0; frontend tsc + vite build; API serves REAL data
(runs=6, provider_tokens=5556, action_blocks=7); /healthz 503 stale → 200 after touch.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
 2026-07-08 16:59:56 +09:00
thanhnvandClaude Opus 4.8 8c20cfde9f feat(packaging): level-based source hub — Core + DevKit packaging, Platform/Enterprise scaffold 
Organize CASAN as a reusable source hub with SPLIT releases so downstream adopts only the
level it needs (packaging/levels.json is the single source of truth).

Implemented now:
- Level 1 Core: bin/casan CLI (run/gate/test/verify/reuse/dashboard) + VERSION.
- Level 2 DevKit: packages/casan-devkit (install.sh, Dockerfile.harness, templates:
  project scaffold, domain-pack, gitea-workflow).
- scripts/package-release.sh core|devkit|platform|all-in-one-demo — builds split bundles
  into dist/ (BUNDLE-MANIFEST + SHA256SUMS); platform is stamped PREVIEW/INCOMPLETE;
  enterprise (future) is REFUSED (exit 3, no fake-complete package). Bundles verified:
  extract → bin/casan works, deterministic + domain suites pass, casan reuse VALID.
- docs/packaging: CASAN_PACKAGING_PLAN + ADOPTION + CI + DOMAIN_PACK + GITEA_PACKAGE + DOCKER.

Structure + docs only:
- Level 3 packages/casan-platform (dashboard exists; control-panel/viewers pending).
- Level 4 packages/casan-enterprise (RBAC/tenant/KMS/WORM/approval exist in core; governed
  console pending). No Chat Console/RBAC-console/tenant-console/model-mgmt built in this task.

Harness change (enables extracted bundles to self-resolve): casan-paths.sh + the Python
project_root() walk-ups now accept a second root marker `packages/casan-harness` in addition
to `.specify`, so a freshly-unpacked core/devkit/demo bundle (no `.specify` yet) roots
correctly and creates state on first run. In an adopted repo `.specify` still matches first.
policy-bundle.yaml paths corrected to packages/casan-harness (re-signed). Full gate 64/0/3.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
 2026-07-08 15:55:37 +09:00
thanhnvandClaude Opus 4.8 18997caf49 docs: align all documentation with the new repo structure 
Update agent protocols (.claude/agents, .github/agents), guides, runbooks and READMEs
to the post-restructure layout: .specify/{scripts,tests,security,config,templates,
governance,memory,level5-config} -> packages/casan-harness/...; docs/input +
golden-runs + traceability-map -> apps/okr/domain/...; drop AINative_OKR_CASAN5/ prefix.
Runtime-state paths (.specify/logs, .specify/agentops, .specify/level5/central-governance)
kept as-is. Historical evidence under docs/output/ left untouched (immutable run records).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
 2026-07-08 14:36:27 +09:00
thanhnvandClaude Opus 4.8 36a4812ef3 refactor(structure): promote app to repo root + remove redundant workspace cruft 
Standard production layout: the OKR app (was nested under AINative_OKR_CASAN5/) is now
the repository root. No more wrapper directory.

- Promote AINative_OKR_CASAN5/* -> repo root (backend/ frontend/ packages/ apps/
  .specify/ docs/ infra/ nginx/ scripts/ + configs). Merge tool dirs: .gitea (kept the
  active deploy ci.yml, added harness-ci.yml + runbooks), .claude (agents/commands +
  launch.json), .github moved up.
- Remove redundant: 00_SUBMISSION_PACKAGE, scattered root notes (FPT_CASAN_Full.md,
  tu-tuong-casan.md, casan-tu-sinh..., casan_harness_assessment.md, source-review...,
  README_CASAN5_REFINED.md), casan-next-plans/ and optimize-docs/ (competition/planning
  artifacts — roadmap + design history preserved in git log / commit messages).
- Update all references to the old layout:
  - .gitea/workflows/{ci,harness-ci}.yml, .github/workflows/{ci,deploy}.yml:
    working-directory .; drop AINative_OKR_CASAN5/ prefix; .specify/{tests,scripts}
    -> packages/casan-harness/... (.specify/logs state kept)
  - .claude/launch.json, .gitea/*-runbook.md: path prefixes
  - CLAUDE.md, README.md: docs/input -> apps/okr/domain/input
  - policy-bundle.yaml: 8 policy paths -> packages/casan-harness/...; manifest re-signed
- secrets-scan.sh: fixture excludes -> new package/domain paths.

Full gate from the new root: PASS=64 FAIL=0 SKIP=3.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
 2026-07-08 13:26:36 +09:00