Commit Graph
157 Commits
Author SHA1 Message Date
thanhnv efb5a62f29 fix: keep goal failure reasons gate-specific 2026-07-18 10:04:55 +07:00
thanhnv 1ffe5fe3df fix: retry invalid goal patch contract once 2026-07-18 09:57:05 +07:00
admin aae64250e4 Merge pull request 'feat: prepare CASAN paid PoC release package' (#9) from codex/paid-poc-release-readiness into main
Reviewed-on: http://161.33.139.73:3000/admin/casan5/pulls/9
2026-07-18 02:30:09 +00:00
thanhnv 9785e13c82 feat: export aggregate Prometheus metrics 2026-07-18 09:25:56 +07:00
thanhnv 083a1de875 docs: add external security review engagement scope 2026-07-18 09:21:42 +07:00
thanhnv 777ce342fd ci: avoid setup-node cache cleanup deadlock 2026-07-18 09:19:34 +07:00
thanhnv 4af81ccf40 ci: bound self-hosted runner gate duration 2026-07-18 09:12:44 +07:00
thanhnv d9ca8df2d6 fix: use named frontend workspace in CI 2026-07-18 09:08:19 +07:00
thanhnv e50714d622 feat: add tenant isolation pre-audit evidence 2026-07-18 09:04:39 +07:00
thanhnv 36158c5e34 docs: add certification and audited operations roadmap 2026-07-18 00:22:52 +07:00
thanhnv 2783a21338 docs: add Japanese production support escalation draft 2026-07-18 00:22:18 +07:00
thanhnv 8a676f0ad4 docs: add APPI data processing assessment template 2026-07-18 00:21:36 +07:00
thanhnv b921f25c57 feat: require rootless production sandbox runners 2026-07-18 00:19:53 +07:00
thanhnv 92c20e304c ci: publish verified evidence packs from Gitea runs 2026-07-18 00:18:36 +07:00
thanhnv 407d373b4e feat: gate upgrades with compatibility matrix 2026-07-18 00:17:45 +07:00
thanhnv d129ba60ef fix: require Vault audit signing in production 2026-07-18 00:15:38 +07:00
thanhnv 00963119f4 feat: add verified state backup and restore drill 2026-07-18 00:14:22 +07:00
thanhnv 881ee01691 feat: prepare CASAN paid PoC release package 2026-07-18 00:07:04 +07:00
admin c818eaf8b0 Merge pull request 'feat: apply reviewed goal patches' (#8) from codex/goal-patch-approval into main
Reviewed-on: http://161.33.139.73:3000/admin/casan5/pulls/8
2026-07-11 15:39:08 +00:00
thanhnv a2cca645dc feat: apply reviewed goal patches 2026-07-12 00:21:50 +09:00
thanhnv 159022c73f feat: create new project added 2026-07-11 22:42:42 +09:00
thanhnv 193a449829 feat: updade workspace 2026-07-11 15:56:31 +09:00
thanhnv 4fc72332f5 optz: Goal orchestrator 2026-07-11 12:18:59 +09:00
thanhnv b56f7d357e feat: harden control panel authentication 2026-07-10 23:48:12 +09:00
thanhnv 48b1186439 feat: orchestrate goals with local and cloud models 2026-07-10 23:35:30 +09:00
thanhnv 1345d4c930 feat: add live H1-H7 trace explorer 2026-07-10 23:17:23 +09:00
thanhnv 7cb592a32f feat: add local provider account connector 2026-07-10 23:05:24 +09:00
thanhnv adce7717f7 feat: connect chat to managed model providers 2026-07-10 17:40:44 +09:00
thanhnv ef51c90d91 docs: explain how to use CASAN for real projects 2026-07-10 17:20:34 +09:00
thanhnv b0ced79af5 feat: govern chat model selection by policy 2026-07-10 17:09:28 +09:00
thanhnv f8215cd2eb feat: onboard service desk as second CASAN project 2026-07-10 17:00:35 +09:00
thanhnv 040af64191 feat: enforce live supply chain provenance gates 2026-07-10 16:47:45 +09:00
thanhnv aa284e9bd4 feat: add production deployment handoff controls 2026-07-10 16:41:14 +09:00
thanhnv 7cea023dce feat: chat + optmz control panel 2026-07-10 16:26:30 +09:00
thanhnv d882a9dc23 feat: plan 18 2026-07-10 11:28:14 +09:00
thanhnv fafccc47ad feat: complete llm sourcegen plan 2026-07-09 00:59:28 +09:00
thanhnv c800f7edf7 feat: harden chat state by tenant 2026-07-08 23:38:22 +09:00
thanhnv b3b0544ba8 feat: certify codegen chat drafts through loop 2026-07-08 23:20:54 +09:00
thanhnv 780fe86273 feat: escalate chat approvals through inbox 2026-07-08 23:09:43 +09:00
thanhnv a029a51e72 feat: add command center chat loop widget 2026-07-08 22:58:02 +09:00
thanhnv 36af576f15 feat: add chat replay verification 2026-07-08 22:45:12 +09:00
thanhnv 49d0363c6a feat: certify chat operator turns through loop-run 2026-07-08 22:31:03 +09:00
thanhnv 004afa73c9 feat: add governed chat agent selection 2026-07-08 22:19:51 +09:00
thanhnv 06d8d31b16 chore: ignore chat runtime logs 2026-07-08 21:20:49 +09:00
thanhnv 5561bcf864 feat: add governed chat console 2026-07-08 21:14:40 +09:00
thanhnv 3be9970c15 feat: add control panel 2026-07-08 19:07:35 +09:00
thanhnvandClaude Opus 4.8 a07b15e489 docs(plans): Plan-13 Track 1 (read-only Ops Console) marked done in status trackers
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-07-08 17:28:35 +09:00
thanhnvandClaude Opus 4.8 94a7168362 chore: gitignore tsconfig.tsbuildinfo (build cache, not source)
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-07-08 17:27:00 +09:00
thanhnvandClaude Opus 4.8 63dd44a11b feat(plan-13): read-only Ops Console (NestJS API + React UI) — Track 1
Real web Control Panel over CASAN harness telemetry (Level-3 casan-platform component).
Read-only ("Đọc ≠ Ghi"): no settings writes, no gate bypass. Management/RBAC/approval are
Track 2/3 (future, Plan-14). Additive — harness gate untouched (64/0/3).

packages/casan-control-panel/
- backend/ (NestJS, ESM, /api/v1 + ok() envelope): TelemetryReader (jsonl/json, missing→[],
  never fabricates) + TelemetryService (aggregations mirroring generate-agentops-dashboard.py)
  + endpoints overview/runs(+:traceId)/governance/security/incidents/tools/traceability/
  drift/cost, and /healthz (stale-aware 200/503, fail-loud like dashboard-server.py). App
  root + telemetry paths resolve via casan-paths-style marker walk-up (.specify OR
  packages/casan-harness) + honor CASAN_DASHBOARD_* env. Binds 127.0.0.1; refuses
  non-loopback under CASAN_PROFILE=prod. @Inject token so DI works under tsc AND tsx.
  Tests (node native runner) 7/0: reader parse/missing, app-root, overview shape on real
  repo state, freshness/stale fail-loud.
- frontend/ (React+Vite+Tailwind+TanStack, port 5174, proxies to :3010): AppLayout +
  Sidebar + Header (LIVE/STALE badge from /healthz) + pages Overview/Runs/Governance/
  Security/Incidents/Traceability. axios client unwraps ok() envelope. build green.

Wiring: root workspaces + `console:*` scripts. packaging/levels.json + casan-platform
README: platform preview now lists the Ops Console as an implemented component.

Verified: backend build + test 7/0; frontend tsc + vite build; API serves REAL data
(runs=6, provider_tokens=5556, action_blocks=7); /healthz 503 stale → 200 after touch.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-07-08 16:59:56 +09:00
thanhnvandClaude Opus 4.8 98d699d844 ci(release): auto-publish split bundles to Gitea package registry on version tags
.gitea/workflows/release.yml — on push tag v*: assert tag==VERSION, run the governance
gate (must be green), build core/devkit/platform-preview/all-in-one-demo (enterprise
skipped/refused), then PUT each .tar.gz (+.sha256) to the Gitea generic package registry
using ${{ secrets.GITEA_TOKEN }}. Portable via GITHUB_SERVER_URL/OWNER. Guide updated with
the one-time secret setup + release flow.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-07-08 16:06:28 +09:00