141 lines
6.6 KiB
Bash
Executable File
141 lines
6.6 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
# CASAN — lightweight CLI wrapper (Level 1 Core Harness).
|
|
#
|
|
# Locates the harness package relative to this script (works both in the full
|
|
# source hub and in an extracted casan-core / casan-devkit bundle) and dispatches
|
|
# to the harness bash entrypoints. No dependencies beyond bash + python3.
|
|
set -uo pipefail
|
|
|
|
# --- locate the harness root (dir containing scripts/bash/casan-harness.sh) ----
|
|
_self="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
|
|
_find_harness() {
|
|
# 1) sibling packages/casan-harness (source hub or bundle root layout)
|
|
local c
|
|
for c in "$_self/../packages/casan-harness" "$_self/../casan-harness" "$_self/packages/casan-harness"; do
|
|
[[ -f "$c/scripts/bash/casan-harness.sh" ]] && { (cd "$c" && pwd); return 0; }
|
|
done
|
|
# 2) walk up looking for it
|
|
local d="$_self"
|
|
while [[ "$d" != "/" ]]; do
|
|
[[ -f "$d/packages/casan-harness/scripts/bash/casan-harness.sh" ]] && { echo "$d/packages/casan-harness"; return 0; }
|
|
d="$(dirname "$d")"
|
|
done
|
|
return 1
|
|
}
|
|
HARNESS="${CASAN_HARNESS_ROOT:-$(_find_harness)}"
|
|
if [[ -z "${HARNESS:-}" || ! -d "$HARNESS" ]]; then
|
|
echo "casan: cannot locate packages/casan-harness (set CASAN_HARNESS_ROOT)" >&2
|
|
exit 1
|
|
fi
|
|
BASH_DIR="$HARNESS/scripts/bash"
|
|
CASAN_APP_ROOT="${CASAN_APP_ROOT:-$(cd "$HARNESS/../.." && pwd)}"
|
|
VERSION_FILE="$_self/../VERSION"
|
|
[[ -f "$VERSION_FILE" ]] || VERSION_FILE="$HARNESS/../../VERSION"
|
|
|
|
version() { printf 'casan %s\n' "$( [[ -f "$VERSION_FILE" ]] && cat "$VERSION_FILE" || echo 'unknown')"; }
|
|
|
|
usage() {
|
|
cat <<EOF
|
|
casan — CASAN governance harness CLI ($(version))
|
|
|
|
Usage: casan <command> [args]
|
|
|
|
Commands:
|
|
init [--client ...] [--project id] Adopt CASAN and select Claude/Codex/VS Code integrations
|
|
uninstall [--purge] Remove CASAN from this project (preserves user config)
|
|
doctor [--client ...] Verify configured hooks, pin, adapters, and VS Code route
|
|
level <show|set 1..4> Show / change the project's packaging level
|
|
verify-harness Verify the resolved harness matches the project pin
|
|
run <in> <out> [action] [-- cmd...] Run a step through the harness (H4→H5→H6→exec→H4-out)
|
|
gate Run production checks from the project manifest
|
|
verify Verify audit chain + tool audit + policy bundle
|
|
reuse Verify multi-project harness reuse (registry)
|
|
project validate [--manifest path] Validate a project manifest and quality profile
|
|
project init <scaffold args...> Create an idempotent NestJS/React project shell
|
|
prompt verify Verify the adopted prompt-enforcement contract
|
|
prompt trace <trace-id> Verify that a prompt trace is H1-H7 certified
|
|
pipeline [--manifest path] Run the manifest-driven SRS→test pipeline
|
|
dashboard [port] Serve the AgentOps dashboard (Platform only)
|
|
version Print version
|
|
help This help
|
|
|
|
Env: CASAN_HARNESS_ROOT overrides harness location.
|
|
Harness: $HARNESS
|
|
EOF
|
|
}
|
|
|
|
cmd="${1:-help}"; shift || true
|
|
DEVKIT_ROOT="${CASAN_DEVKIT_ROOT:-$CASAN_APP_ROOT/packages/casan-devkit}"
|
|
[[ -f "$DEVKIT_ROOT/casan-init.py" ]] || DEVKIT_ROOT="$HARNESS/../casan-devkit"
|
|
case "$cmd" in
|
|
init)
|
|
[[ -f "$DEVKIT_ROOT/casan-init.py" ]] || { echo "casan: init requires the casan-devkit package" >&2; exit 1; }
|
|
exec python3 "$DEVKIT_ROOT/casan-init.py" init "$@" ;;
|
|
uninstall)
|
|
[[ -f "$DEVKIT_ROOT/casan-init.py" ]] || { echo "casan: uninstall requires the casan-devkit package" >&2; exit 1; }
|
|
exec python3 "$DEVKIT_ROOT/casan-init.py" uninstall "$@" ;;
|
|
verify-harness)
|
|
[[ -f "$DEVKIT_ROOT/casan-init.py" ]] || { echo "casan: verify-harness requires the casan-devkit package" >&2; exit 1; }
|
|
exec python3 "$DEVKIT_ROOT/casan-init.py" verify "$@" ;;
|
|
doctor)
|
|
[[ -f "$DEVKIT_ROOT/casan-init.py" ]] || { echo "casan: doctor requires the casan-devkit package" >&2; exit 1; }
|
|
exec python3 "$DEVKIT_ROOT/casan-init.py" doctor "$@" ;;
|
|
level)
|
|
[[ -f "$DEVKIT_ROOT/casan-init.py" ]] || { echo "casan: level requires the casan-devkit package" >&2; exit 1; }
|
|
sub="${1:-show}"; shift || true
|
|
case "$sub" in
|
|
show) exec python3 "$DEVKIT_ROOT/casan-init.py" level --show "$@" ;;
|
|
set) n="${1:-devkit}"; shift || true
|
|
exec python3 "$DEVKIT_ROOT/casan-init.py" init --level "$n" "$@" ;;
|
|
*) echo "casan: usage: casan level <show|set <1..4>>" >&2; exit 64 ;;
|
|
esac ;;
|
|
run) exec bash "$BASH_DIR/casan-harness.sh" "$@" ;;
|
|
gate)
|
|
if [[ -z "${CASAN_PROJECT_MANIFEST:-}${CASAN_PROJECT_ID:-}" \
|
|
&& ! -f "$CASAN_APP_ROOT/apps/okr/domain/project.manifest.json" ]]; then
|
|
echo "casan: gate requires CASAN_PROJECT_MANIFEST or CASAN_PROJECT_ID" >&2
|
|
exit 64
|
|
fi
|
|
exec bash "$BASH_DIR/project-gate.sh" "$@" ;;
|
|
verify)
|
|
rc=0
|
|
bash "$BASH_DIR/verify-audit-chain.sh" "$@" || rc=$?
|
|
bash "$BASH_DIR/verify-tool-audit.sh" || rc=$?
|
|
bash "$BASH_DIR/sign-policy-bundle.sh" verify || rc=$?
|
|
exit $rc ;;
|
|
reuse) exec bash "$BASH_DIR/verify-harness-reuse.sh" "$@" ;;
|
|
project)
|
|
sub="${1:-help}"; shift || true
|
|
case "$sub" in
|
|
validate) exec python3 "$BASH_DIR/project_manifest.py" validate --root "$CASAN_APP_ROOT" "$@" ;;
|
|
init)
|
|
DEVKIT="${CASAN_DEVKIT_ROOT:-$CASAN_APP_ROOT/packages/casan-devkit}"
|
|
[[ -f "$DEVKIT/project-scaffold.py" ]] || { echo "casan: project init requires the casan-devkit bundle" >&2; exit 1; }
|
|
exec python3 "$DEVKIT/project-scaffold.py" "$@" ;;
|
|
*) echo "casan: usage: casan project <validate|init>" >&2; exit 64 ;;
|
|
esac ;;
|
|
prompt)
|
|
sub="${1:-help}"; shift || true
|
|
case "$sub" in
|
|
verify) exec bash "$BASH_DIR/prompt-enforcement-verify.sh" --root "$CASAN_APP_ROOT" "$@" ;;
|
|
trace)
|
|
trace_id="${1:-}"; [[ -n "$trace_id" ]] || { echo "casan: usage: casan prompt trace <trace-id>" >&2; exit 64; }
|
|
shift
|
|
exec bash "$BASH_DIR/prompt-enforcement-verify.sh" --root "$CASAN_APP_ROOT" --trace-id "$trace_id" "$@" ;;
|
|
*) echo "casan: usage: casan prompt <verify|trace>" >&2; exit 64 ;;
|
|
esac ;;
|
|
pipeline)
|
|
RUNNER="$CASAN_APP_ROOT/scripts/run-casan-pipeline.mjs"
|
|
[[ -f "$RUNNER" ]] || { echo "casan: pipeline runner is not installed" >&2; exit 1; }
|
|
exec node "$RUNNER" "$@" ;;
|
|
dashboard)
|
|
[[ -f "$BASH_DIR/dashboard-serve.sh" ]] || {
|
|
echo "casan: dashboard requires the Platform bundle" >&2
|
|
exit 1
|
|
}
|
|
exec bash "$BASH_DIR/dashboard-serve.sh" "$@" ;;
|
|
version|-v|--version) version ;;
|
|
help|-h|--help) usage ;;
|
|
*) echo "casan: unknown command '$cmd'" >&2; usage >&2; exit 64 ;;
|
|
esac
|