thanhnvandClaude Opus 4.8
63dd44a11b
Real web Control Panel over CASAN harness telemetry (Level-3 casan-platform component).
Read-only ("Đọc ≠ Ghi"): no settings writes, no gate bypass. Management/RBAC/approval are
Track 2/3 (future, Plan-14). Additive — harness gate untouched (64/0/3).
packages/casan-control-panel/
- backend/ (NestJS, ESM, /api/v1 + ok() envelope): TelemetryReader (jsonl/json, missing→[],
never fabricates) + TelemetryService (aggregations mirroring generate-agentops-dashboard.py)
+ endpoints overview/runs(+:traceId)/governance/security/incidents/tools/traceability/
drift/cost, and /healthz (stale-aware 200/503, fail-loud like dashboard-server.py). App
root + telemetry paths resolve via casan-paths-style marker walk-up (.specify OR
packages/casan-harness) + honor CASAN_DASHBOARD_* env. Binds 127.0.0.1; refuses
non-loopback under CASAN_PROFILE=prod. @Inject token so DI works under tsc AND tsx.
Tests (node native runner) 7/0: reader parse/missing, app-root, overview shape on real
repo state, freshness/stale fail-loud.
- frontend/ (React+Vite+Tailwind+TanStack, port 5174, proxies to :3010): AppLayout +
Sidebar + Header (LIVE/STALE badge from /healthz) + pages Overview/Runs/Governance/
Security/Incidents/Traceability. axios client unwraps ok() envelope. build green.
Wiring: root workspaces + `console:*` scripts. packaging/levels.json + casan-platform
README: platform preview now lists the Ops Console as an implemented component.
Verified: backend build + test 7/0; frontend tsc + vite build; API serves REAL data
(runs=6, provider_tokens=5556, action_blocks=7); /healthz 503 stale → 200 after touch.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
95 lines
5.5 KiB
JSON
95 lines
5.5 KiB
JSON
{
|
|
"casan_packaging": "level-based source hub",
|
|
"version": "1.0.0",
|
|
"note": "Single source of truth for what each release bundle contains and its maturity. The repo is a source hub holding all levels; releases are SPLIT so downstream adopts only the level it needs. See docs/packaging/CASAN_PACKAGING_PLAN.md.",
|
|
"levels": {
|
|
"core": {
|
|
"level": 1,
|
|
"package_names": ["casan-core", "casan-harness"],
|
|
"status": "implemented",
|
|
"summary": "H1-H7 harness core, security/action gates, evidence pack, audit, cost/telemetry, hardening tests, policy/config defaults, lightweight CLI.",
|
|
"target_users": ["governance-harness-only projects", "BJT initial adoption", "CI gate usage"],
|
|
"includes": [
|
|
"packages/casan-harness/scripts",
|
|
"packages/casan-harness/security",
|
|
"packages/casan-harness/governance",
|
|
"packages/casan-harness/agentops",
|
|
"packages/casan-harness/config",
|
|
"packages/casan-harness/level5",
|
|
"packages/casan-harness/memory",
|
|
"packages/casan-harness/templates",
|
|
"packages/casan-harness/tests",
|
|
"packages/casan-harness/init-options.json",
|
|
"packages/casan-harness/README.md",
|
|
"bin/casan",
|
|
"VERSION"
|
|
],
|
|
"excludes_globs": ["**/__pycache__/**", "**/*.pyc", "**/.DS_Store"],
|
|
"artifact": "casan-core-v{VERSION}.tar.gz",
|
|
"docker_image": "casan-harness:{VERSION}"
|
|
},
|
|
"devkit": {
|
|
"level": 2,
|
|
"package_names": ["casan-devkit", "casan-project-kit"],
|
|
"status": "implemented",
|
|
"summary": "Level 1 + project templates, domain-pack scaffold, Gitea workflow templates, harness Dockerfile, install script, adoption/CI/domain-pack guides.",
|
|
"target_users": ["new projects adopting CASAN", "internal teams needing a repeatable setup"],
|
|
"extends": "core",
|
|
"includes": [
|
|
"packages/casan-devkit",
|
|
"docs/packaging/ADOPTION_GUIDE.md",
|
|
"docs/packaging/CI_GUIDE.md",
|
|
"docs/packaging/DOMAIN_PACK_GUIDE.md",
|
|
"docs/packaging/DOCKER_GUIDE.md",
|
|
"docs/packaging/CASAN_PACKAGING_PLAN.md",
|
|
"scripts/package-release.sh"
|
|
],
|
|
"artifact": "casan-devkit-v{VERSION}.tar.gz"
|
|
},
|
|
"platform": {
|
|
"level": 3,
|
|
"package_names": ["casan-platform", "casan-control-panel"],
|
|
"status": "preview",
|
|
"summary": "Optional productization UI: Control Panel, Dashboard, Evidence/Attack/Run-History viewers, read-only Ask CASAN, Gitea webhook. Only the AgentOps dashboard exists today; the rest is structure-only.",
|
|
"target_users": ["teams wanting UI/dashboard/visibility", "demo/training/productization"],
|
|
"extends": "devkit",
|
|
"implemented_components": ["agentops-dashboard (packages/casan-harness/scripts/bash/dashboard-server.py + dashboard-serve.sh)", "read-only Ops Console (packages/casan-control-panel — NestJS API + React UI, Plan-13 Track 1)"],
|
|
"pending_components": ["management/settings writes (Plan-13 Track 2)", "RBAC + approval inbox (Plan-13 Track 3 / Plan-14)", "evidence-pack-viewer", "attack-battery-viewer", "gitea-webhook-integration", "read-only Ask CASAN (Plan-18 MVP-0)"],
|
|
"includes": [
|
|
"packages/casan-platform",
|
|
"packages/casan-harness/scripts/bash/dashboard-server.py",
|
|
"packages/casan-harness/scripts/bash/dashboard-serve.sh"
|
|
],
|
|
"artifact": "casan-platform-preview-v{VERSION}.tar.gz",
|
|
"docker_image": "casan-platform:{VERSION} (preview)"
|
|
},
|
|
"enterprise": {
|
|
"level": 4,
|
|
"package_names": ["casan-enterprise", "casan-governed-console"],
|
|
"status": "future",
|
|
"summary": "Governed Chat Console, Prompt Mode Router, Model Provider Management, Operator/Codegen modes, Agent/Skill Registry, RBAC, approval workflow, tenant isolation, KMS/WORM, policy versioning.",
|
|
"target_users": ["enterprise/internal platform", "multi-project governance", "official governed AI-SDLC console"],
|
|
"extends": "platform",
|
|
"implemented_components": [
|
|
"RBAC (rbac-check.py)",
|
|
"tenant isolation (tenant-store.sh/tenant-paths.sh/tenant-registry-verify.sh/tenant-crypt.sh)",
|
|
"approval workflow (approval-verify.sh/approval-sign.sh/approval-jwt-mint.py)",
|
|
"KMS (vault-kms.sh)",
|
|
"WORM (worm-ledger.py)",
|
|
"kill-switch (kill-switch.sh)"
|
|
],
|
|
"pending_components": ["governed-chat-console", "prompt-mode-router", "model-provider-management", "operator-mode", "codegen-mode", "agent-skill-registry", "policy-versioning-ui"],
|
|
"includes": ["packages/casan-enterprise"],
|
|
"artifact": "casan-enterprise-preview-v{VERSION}.tar.gz",
|
|
"docker_image": "casan-enterprise:{VERSION} (future)"
|
|
}
|
|
},
|
|
"bundles": {
|
|
"core": {"builds": ["core"], "status": "implemented"},
|
|
"devkit": {"builds": ["core", "devkit"], "status": "implemented"},
|
|
"platform": {"builds": ["core", "devkit", "platform"], "status": "preview"},
|
|
"all-in-one-demo": {"builds": ["core", "devkit", "platform", "apps/okr/domain", "backend", "frontend", "docs/output/casan", "package.json", "package-lock.json", "Dockerfile.backend", "Dockerfile.frontend", "docker-compose.prod.yml"], "status": "implemented", "note": "Full runnable snapshot: harness + OKR app (backend/frontend) + OKR demo domain + latest evidence, for demo/training. The traceability gate needs the app source, so it is bundled here."},
|
|
"enterprise": {"builds": ["enterprise"], "status": "future", "note": "Refused by package-release.sh — Level 4 is structure-only; no fake-complete artifact."}
|
|
}
|
|
}
|