Refactor code structure for improved readability and maintainability; optimize performance in key functions.

2025-12-22 19:06:31 +02:00
parent dfaa2079aa
commit 4602ccc3a3
1444 changed files with 109919 additions and 8058 deletions
--- a/docs/schemas/stellaops-slice.v1.schema.json
+++ b/docs/schemas/stellaops-slice.v1.schema.json
@@ -0,0 +1,170 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://stellaops.dev/schemas/stellaops-slice.v1.schema.json",
+  "title": "Reachability Slice",
+  "type": "object",
+  "required": ["_type", "inputs", "query", "subgraph", "verdict", "manifest"],
+  "properties": {
+    "_type": {
+      "type": "string",
+      "const": "stellaops.dev/predicates/reachability-slice@v1"
+    },
+    "inputs": { "$ref": "#/$defs/SliceInputs" },
+    "query": { "$ref": "#/$defs/SliceQuery" },
+    "subgraph": { "$ref": "#/$defs/SliceSubgraph" },
+    "verdict": { "$ref": "#/$defs/SliceVerdict" },
+    "manifest": { "$ref": "#/$defs/ScanManifest" }
+  },
+  "$defs": {
+    "SliceInputs": {
+      "type": "object",
+      "required": ["graphDigest"],
+      "properties": {
+        "graphDigest": { "type": "string", "pattern": "^blake3:[a-f0-9]{64}$" },
+        "binaryDigests": {
+          "type": "array",
+          "items": { "type": "string", "pattern": "^(sha256|blake3):[a-f0-9]{64}$" }
+        },
+        "sbomDigest": { "type": "string" },
+        "layerDigests": {
+          "type": "array",
+          "items": { "type": "string" }
+        }
+      },
+      "additionalProperties": false
+    },
+    "SliceQuery": {
+      "type": "object",
+      "properties": {
+        "cveId": { "type": "string", "pattern": "^CVE-\\d{4}-\\d+$" },
+        "targetSymbols": { "type": "array", "items": { "type": "string" } },
+        "entrypoints": { "type": "array", "items": { "type": "string" } },
+        "policyHash": { "type": "string" }
+      },
+      "additionalProperties": false
+    },
+    "SliceSubgraph": {
+      "type": "object",
+      "required": ["nodes", "edges"],
+      "properties": {
+        "nodes": { "type": "array", "items": { "$ref": "#/$defs/SliceNode" } },
+        "edges": { "type": "array", "items": { "$ref": "#/$defs/SliceEdge" } }
+      },
+      "additionalProperties": false
+    },
+    "SliceNode": {
+      "type": "object",
+      "required": ["id", "symbol", "kind"],
+      "properties": {
+        "id": { "type": "string" },
+        "symbol": { "type": "string" },
+        "kind": { "type": "string", "enum": ["entrypoint", "intermediate", "target", "unknown"] },
+        "file": { "type": "string" },
+        "line": { "type": "integer" },
+        "purl": { "type": "string" },
+        "attributes": {
+          "type": "object",
+          "additionalProperties": { "type": "string" }
+        }
+      },
+      "additionalProperties": false
+    },
+    "SliceEdge": {
+      "type": "object",
+      "required": ["from", "to", "confidence"],
+      "properties": {
+        "from": { "type": "string" },
+        "to": { "type": "string" },
+        "kind": { "type": "string", "enum": ["direct", "plt", "iat", "dynamic", "unknown"] },
+        "confidence": { "type": "number", "minimum": 0, "maximum": 1 },
+        "evidence": { "type": "string" },
+        "gate": { "$ref": "#/$defs/SliceGateInfo" },
+        "observed": { "$ref": "#/$defs/ObservedEdgeMetadata" }
+      },
+      "additionalProperties": false
+    },
+    "SliceGateInfo": {
+      "type": "object",
+      "required": ["type", "condition", "satisfied"],
+      "properties": {
+        "type": { "type": "string", "enum": ["feature_flag", "auth", "config", "admin_only"] },
+        "condition": { "type": "string" },
+        "satisfied": { "type": "boolean" }
+      },
+      "additionalProperties": false
+    },
+    "ObservedEdgeMetadata": {
+      "type": "object",
+      "required": ["firstObserved", "lastObserved", "count"],
+      "properties": {
+        "firstObserved": { "type": "string", "format": "date-time" },
+        "lastObserved": { "type": "string", "format": "date-time" },
+        "count": { "type": "integer", "minimum": 0 },
+        "traceDigest": { "type": "string" }
+      },
+      "additionalProperties": false
+    },
+    "SliceVerdict": {
+      "type": "object",
+      "required": ["status", "confidence"],
+      "properties": {
+        "status": {
+          "type": "string",
+          "enum": ["reachable", "unreachable", "unknown", "gated", "observed_reachable"]
+        },
+        "confidence": { "type": "number", "minimum": 0, "maximum": 1 },
+        "reasons": { "type": "array", "items": { "type": "string" } },
+        "pathWitnesses": { "type": "array", "items": { "type": "string" } },
+        "unknownCount": { "type": "integer", "minimum": 0 },
+        "gatedPaths": { "type": "array", "items": { "$ref": "#/$defs/GatedPath" } }
+      },
+      "additionalProperties": false
+    },
+    "GatedPath": {
+      "type": "object",
+      "required": ["pathId", "gateType", "gateCondition", "gateSatisfied"],
+      "properties": {
+        "pathId": { "type": "string" },
+        "gateType": { "type": "string" },
+        "gateCondition": { "type": "string" },
+        "gateSatisfied": { "type": "boolean" }
+      },
+      "additionalProperties": false
+    },
+    "ScanManifest": {
+      "type": "object",
+      "required": [
+        "scanId",
+        "createdAtUtc",
+        "artifactDigest",
+        "scannerVersion",
+        "workerVersion",
+        "concelierSnapshotHash",
+        "excititorSnapshotHash",
+        "latticePolicyHash",
+        "deterministic",
+        "seed",
+        "knobs"
+      ],
+      "properties": {
+        "scanId": { "type": "string" },
+        "createdAtUtc": { "type": "string", "format": "date-time" },
+        "artifactDigest": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" },
+        "artifactPurl": { "type": "string" },
+        "scannerVersion": { "type": "string" },
+        "workerVersion": { "type": "string" },
+        "concelierSnapshotHash": { "type": "string" },
+        "excititorSnapshotHash": { "type": "string" },
+        "latticePolicyHash": { "type": "string" },
+        "deterministic": { "type": "boolean" },
+        "seed": { "type": "string" },
+        "knobs": {
+          "type": "object",
+          "additionalProperties": { "type": "string" }
+        }
+      },
+      "additionalProperties": false
+    }
+  },
+  "additionalProperties": false
+}