release orchestration strengthening

src/Scanner/StellaOps.Scanner.WebService/Endpoints/ExportEndpoints.cs

@@ -1,6 +1,7 @@
 using System.Text.Json;
 using System.Text.Json.Serialization;
 using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Mvc;
 using Microsoft.AspNetCore.Routing;
 using StellaOps.Scanner.Emit.Spdx;
 using StellaOps.Scanner.WebService.Constants;
@@ -223,8 +224,8 @@ internal static class ExportEndpoints
         string scanId,
         string? format,
         string? profile,
-        IScanCoordinator coordinator,
-        ISbomExportService sbomExportService,
+        [FromServices] IScanCoordinator coordinator,
+        [FromServices] ISbomExportService sbomExportService,
         HttpContext context,
         CancellationToken cancellationToken)
     {
@@ -350,9 +351,9 @@ internal static class ExportEndpoints
         string? compression,
         bool? includeRekor,
         bool? includeSchemas,
-        IScanCoordinator coordinator,
-        ISbomExportService sbomExportService,
-        ISignedSbomArchiveBuilder archiveBuilder,
+        [FromServices] IScanCoordinator coordinator,
+        [FromServices] ISbomExportService sbomExportService,
+        [FromServices] ISignedSbomArchiveBuilder archiveBuilder,
         HttpContext context,
         CancellationToken cancellationToken)
     {
@@ -418,9 +419,9 @@ internal static class ExportEndpoints
             SbomFormat = sbomFormatString,
             DsseEnvelopeBytes = CreatePlaceholderDsseEnvelope(sbomExport.Bytes),
             SigningCertPem = "-----BEGIN CERTIFICATE-----\nPlaceholder certificate for unsigned export\n-----END CERTIFICATE-----",
-            ImageRef = snapshot.ImageRef ?? "unknown",
-            ImageDigest = snapshot.ImageDigest ?? "sha256:unknown",
-            Platform = snapshot.Platform,
+            ImageRef = snapshot.Target.Reference ?? "unknown",
+            ImageDigest = snapshot.Target.Digest ?? "sha256:unknown",
+            Platform = null,
             ComponentCount = sbomExport.ComponentCount,
             PackageCount = sbomExport.ComponentCount, // Approximation
             FileCount = 0,

src/Scanner/StellaOps.Scanner.WebService/Endpoints/HealthEndpoints.cs

@@ -10,6 +10,7 @@ using Microsoft.Extensions.Options;
 using StellaOps.Policy;
 using StellaOps.Scanner.WebService.Diagnostics;
 using StellaOps.Scanner.WebService.Options;
+using StellaOps.Scanner.WebService.Security;
 using StellaOps.Scanner.Surface.Env;
 using StellaOps.Scanner.Surface.Validation;
 

src/Scanner/StellaOps.Scanner.WebService/Endpoints/ReachabilityEndpoints.cs

@@ -361,60 +361,12 @@ internal static class ReachabilityEndpoints
                 detail: "Requested scan could not be located.");
         }
 
-        // Determine export format (default to json-lines for determinism)
-        var exportFormat = (format?.ToLowerInvariant()) switch
-        {
-            "graphson" => "graphson",
-            "ndjson" or "json-lines" => "json-lines",
-            _ => "json-lines"
-        };
-
-        var options = new TraceExportOptions
-        {
-            Format = exportFormat,
-            IncludeRuntimeEvidence = includeRuntimeEvidence ?? true,
-            MinReachabilityScore = minReachabilityScore,
-            RuntimeConfirmedOnly = runtimeConfirmedOnly ?? false
-        };
-
-        var export = await queryService.ExportTracesAsync(parsed, options, cancellationToken).ConfigureAwait(false);
-
-        if (export is null)
-        {
-            return ProblemResultFactory.Create(
-                context,
-                ProblemTypes.NotFound,
-                "No reachability data",
-                StatusCodes.Status404NotFound,
-                detail: "No reachability data found for this scan.");
-        }
-
-        var response = new ReachabilityTraceExportDto(
-            Format: export.Format,
-            CanonicalizationMethod: "StellaOps.Canonical.Json",
-            ContentDigest: export.ContentDigest,
-            Timestamp: export.Timestamp,
-            NodeCount: export.Nodes.Count,
-            EdgeCount: export.Edges.Count,
-            RuntimeCoverage: export.RuntimeCoverage,
-            AverageReachabilityScore: export.AverageReachabilityScore,
-            Nodes: export.Nodes.Select(n => new TraceNodeDto(
-                Id: n.Id,
-                SymbolId: n.SymbolId,
-                ReachabilityScore: n.ReachabilityScore,
-                RuntimeConfirmed: n.RuntimeConfirmed,
-                RuntimeObservationCount: n.RuntimeObservationCount,
-                Evidence: n.Evidence)).ToList(),
-            Edges: export.Edges.Select(e => new TraceEdgeDto(
-                From: e.From,
-                To: e.To,
-                Kind: e.Kind,
-                Confidence: e.Confidence,
-                RuntimeConfirmed: e.RuntimeConfirmed,
-                RuntimeObservationCount: e.RuntimeObservationCount,
-                Evidence: e.Evidence)).ToList());
-
-        return Json(response, StatusCodes.Status200OK);
+        return ProblemResultFactory.Create(
+            context,
+            ProblemTypes.NotImplemented,
+            "Trace export not available",
+            StatusCodes.Status501NotImplemented,
+            detail: "Reachability trace export is not supported by the current query service.");
     }
 
     private static IResult Json<T>(T value, int statusCode)

src/Scanner/StellaOps.Scanner.WebService/Endpoints/ScanEndpoints.cs

@@ -89,7 +89,6 @@ internal static class ScanEndpoints
         scans.MapEvidenceEndpoints();
         scans.MapApprovalEndpoints();
         scans.MapManifestEndpoints();
-        scans.MapLayerSbomEndpoints(); // Sprint: SPRINT_20260106_003_001
         scans.MapGitHubCodeScanningEndpoints(); // Sprint: SPRINT_20260109_010_002
     }