Refactor code structure for improved readability and maintainability; removed redundant code blocks and optimized function calls.

src/Concelier/__Libraries/StellaOps.Concelier.Core/Linksets/AdvisoryLinksetMapper.cs

@@ -11,12 +11,27 @@ namespace StellaOps.Concelier.Core.Linksets;
 /// </summary>
 public sealed partial class AdvisoryLinksetMapper : IAdvisoryLinksetMapper
 {
-    private static readonly HashSet<string> AliasSchemesOfInterest = new(new[]
-    {
-        AliasSchemes.Cve,
-        AliasSchemes.Ghsa,
-        AliasSchemes.OsV
-    }, StringComparer.OrdinalIgnoreCase);
+    private static readonly HashSet<string> AliasSchemesOfInterest = new(new[]
+    {
+        AliasSchemes.Cve,
+        AliasSchemes.Ghsa,
+        AliasSchemes.OsV,
+        AliasSchemes.Rhsa,
+        AliasSchemes.Usn,
+        AliasSchemes.Dsa,
+        AliasSchemes.SuseSu,
+        AliasSchemes.Msrc,
+        AliasSchemes.CiscoSa,
+        AliasSchemes.OracleCpu,
+        AliasSchemes.Vmsa,
+        AliasSchemes.Apsb,
+        AliasSchemes.Apa,
+        AliasSchemes.AppleHt,
+        AliasSchemes.Icsa,
+        AliasSchemes.Jvndb,
+        AliasSchemes.Jvn,
+        AliasSchemes.Bdu
+    }, StringComparer.OrdinalIgnoreCase);
 
     public RawLinkset Map(AdvisoryRawDocument document)
     {

src/Concelier/__Libraries/StellaOps.Concelier.Core/Linksets/AdvisoryLinksetNormalization.cs

@@ -3,6 +3,7 @@ using System.Collections.Generic;
 using System.Linq;
 using StellaOps.Concelier.RawModels;
 using StellaOps.Concelier.Models;
+using StellaOps.Concelier.Normalization.SemVer;
 
 namespace StellaOps.Concelier.Core.Linksets;
 
@@ -41,13 +42,14 @@ internal static class AdvisoryLinksetNormalization
     {
         var normalizedPurls = NormalizePurls(purlValues);
         var versions = ExtractVersions(normalizedPurls);
+        var ranges = BuildVersionRanges(normalizedPurls);
 
-        if (normalizedPurls.Count == 0 && versions.Count == 0)
+        if (normalizedPurls.Count == 0 && versions.Count == 0 && ranges.Count == 0)
         {
             return null;
         }
 
-        return new AdvisoryLinksetNormalized(normalizedPurls, versions, null, null);
+        return new AdvisoryLinksetNormalized(normalizedPurls, versions, ranges, null);
     }
 
     private static List<string> NormalizePurls(IEnumerable<string> purls)
@@ -89,6 +91,55 @@ internal static class AdvisoryLinksetNormalization
         return versions.ToList();
     }
 
+    private static List<Dictionary<string, object?>> BuildVersionRanges(IReadOnlyCollection<string> purls)
+    {
+        var ranges = new List<Dictionary<string, object?>>();
+
+        foreach (var purl in purls)
+        {
+            var atIndex = purl.LastIndexOf('@');
+            if (atIndex < 0 || atIndex >= purl.Length - 1)
+            {
+                continue;
+            }
+
+            var versionSegment = purl[(atIndex + 1)..];
+            if (string.IsNullOrWhiteSpace(versionSegment))
+            {
+                continue;
+            }
+
+            if (!LooksLikeRange(versionSegment))
+            {
+                continue;
+            }
+
+            var rules = SemVerRangeRuleBuilder.BuildNormalizedRules(versionSegment, provenanceNote: $"purl:{purl}");
+            foreach (var rule in rules)
+            {
+                ranges.Add(new Dictionary<string, object?>(StringComparer.Ordinal)
+                {
+                    { "scheme", rule.Scheme },
+                    { "type", rule.Type },
+                    { "min", rule.Min },
+                    { "minInclusive", rule.MinInclusive },
+                    { "max", rule.Max },
+                    { "maxInclusive", rule.MaxInclusive },
+                    { "value", rule.Value },
+                    { "notes", rule.Notes }
+                });
+            }
+        }
+
+        return ranges;
+    }
+
+    private static bool LooksLikeRange(string value)
+    {
+        return value.IndexOfAny(new[] { '^', '~', '*', ' ', ',', '|', '>' , '<' }) >= 0 ||
+               value.Contains("||", StringComparison.Ordinal);
+    }
+
     private static double? CoerceConfidence(double? confidence)
     {
         if (!confidence.HasValue)

src/Concelier/__Libraries/StellaOps.Concelier.Core/Linksets/PolicyAuthSignalFactory.cs

@@ -0,0 +1,43 @@
+#nullable enable
+using System;
+using System.Collections.Generic;
+using System.Linq;
+using StellaOps.Policy.AuthSignals;
+
+namespace StellaOps.Concelier.Core.Linksets;
+
+/// <summary>
+/// Maps advisory linksets into the shared Policy/Auth/Signals contract so policy enrichment tasks can start.
+/// This is a minimal, fact-only projection (no weighting or merge logic).
+/// </summary>
+public static class PolicyAuthSignalFactory
+{
+    public static PolicyAuthSignal ToPolicyAuthSignal(AdvisoryLinkset linkset)
+    {
+        ArgumentNullException.ThrowIfNull(linkset);
+
+        var firstPurl = linkset.Normalized?.Purls?.FirstOrDefault();
+
+        var evidence = new List<EvidenceRef>
+        {
+            new()
+            {
+                Kind = "linkset",
+                Uri = $"cas://linksets/{linkset.AdvisoryId}",
+                Digest = "sha256:pending" // real digest filled when CAS manifests are available
+            }
+        };
+
+        return new PolicyAuthSignal
+        {
+            Id = linkset.AdvisoryId,
+            Tenant = linkset.TenantId,
+            Subject = firstPurl ?? $"advisory:{linkset.Source}:{linkset.AdvisoryId}",
+            SignalType = "reachability",
+            Source = linkset.Source,
+            Confidence = linkset.Confidence,
+            Evidence = evidence,
+            Created = linkset.CreatedAt.UtcDateTime
+        };
+    }
+}

src/Concelier/__Libraries/StellaOps.Concelier.Core/Observations/AdvisoryObservationQueryService.cs

@@ -4,6 +4,7 @@ using System.Text;
 using StellaOps.Concelier.Models;
 using StellaOps.Concelier.Models.Observations;
 using StellaOps.Concelier.RawModels;
+using StellaOps.Concelier.Core.Linksets;
 
 namespace StellaOps.Concelier.Core.Observations;
 
@@ -251,10 +252,10 @@ public sealed class AdvisoryObservationQueryService : IAdvisoryObservationQueryS
                 relationshipSet.Add(relationship);
             }
 
-            var (_, rawConfidence, rawConflicts) = AdvisoryLinksetNormalization.FromRawLinksetWithConfidence(observation.RawLinkset);
-            confidence = Math.Min(confidence, rawConfidence ?? 1.0);
+            var linksetProjection = AdvisoryLinksetNormalization.FromRawLinksetWithConfidence(observation.RawLinkset);
+            confidence = Math.Min(confidence, linksetProjection.confidence ?? 1.0);
 
-            foreach (var conflict in rawConflicts)
+            foreach (var conflict in linksetProjection.conflicts)
             {
                 var key = $"{conflict.Field}|{conflict.Reason}|{string.Join('|', conflict.Values ?? Array.Empty<string>())}";
                 if (conflictSet.Add(key))

src/Concelier/__Libraries/StellaOps.Concelier.Core/Policy/AuthSignalsPackage.cs

@@ -0,0 +1,31 @@
+#nullable enable
+using System;
+using System.Collections.Generic;
+using StellaOps.Policy.AuthSignals;
+
+namespace StellaOps.Concelier.Core.Policy;
+
+/// <summary>
+/// Temporary bridge to consume the shared Policy/Auth/Signals contract package so downstream POLICY tasks can start.
+/// </summary>
+public static class AuthSignalsPackage
+{
+    public static PolicyAuthSignal CreateSample() => new()
+    {
+        Id = "sample",
+        Tenant = "urn:tenant:sample",
+        Subject = "purl:pkg:maven/org.example/app@1.0.0",
+        SignalType = "reachability",
+        Source = "concelier",
+        Evidence = new List<EvidenceRef>
+        {
+            new()
+            {
+                Kind = "linkset",
+                Uri = "cas://linksets/sample",
+                Digest = "sha256:stub"
+            }
+        },
+        Created = DateTime.UtcNow
+    };
+}

src/Concelier/__Libraries/StellaOps.Concelier.Core/StellaOps.Concelier.Core.csproj

@@ -13,6 +13,7 @@
     <PackageReference Include="Microsoft.Extensions.Options" Version="10.0.0-rc.2.25502.107" />
     <PackageReference Include="Microsoft.Extensions.Hosting.Abstractions" Version="10.0.0-rc.2.25502.107" />
     <PackageReference Include="Cronos" Version="0.10.0" />
+    <PackageReference Include="StellaOps.Policy.AuthSignals" Version="0.1.0-alpha" />
   </ItemGroup>
   <ItemGroup>
     <ProjectReference Include="..\StellaOps.Concelier.Models\StellaOps.Concelier.Models.csproj" />

src/Concelier/__Libraries/StellaOps.Concelier.Storage.Mongo/ServiceCollectionExtensions.cs

@@ -108,6 +108,12 @@ public static class ServiceCollectionExtensions
             return database.GetCollection<AdvisoryObservationDocument>(MongoStorageDefaults.Collections.AdvisoryObservations);
         });
 
+        services.AddSingleton<IMongoCollection<AdvisoryLinksetDocument>>(static sp =>
+        {
+            var database = sp.GetRequiredService<IMongoDatabase>();
+            return database.GetCollection<AdvisoryLinksetDocument>(MongoStorageDefaults.Collections.AdvisoryLinksets);
+        });
+
         services.AddHostedService<RawDocumentRetentionService>();
 
         services.AddSingleton<MongoMigrationRunner>();