stella-ops.org/git.stella-ops.org
1
0
Fork 0
Code Issues Pull Requests Actions 16 Releases Wiki Activity
Files
56c687253fbacabc25d8e1944f4fd43cb8dcef9c
git.stella-ops.org/docs/implplan/SPRINT_138_scanner_ruby_parity.md
master 56c687253f
Some checks failed
Docs CI / lint-and-preview (push) Has been cancelled
Details
feat(ruby): Implement RubyManifestParser for parsing gem groups and dependencies 
feat(ruby): Add RubyVendorArtifactCollector to collect vendor artifacts

test(deno): Add golden tests for Deno analyzer with various fixtures

test(deno): Create Deno module and package files for testing

test(deno): Implement Deno lock and import map for dependency management

test(deno): Add FFI and worker scripts for Deno testing

feat(ruby): Set up Ruby workspace with Gemfile and dependencies

feat(ruby): Add expected output for Ruby workspace tests

feat(signals): Introduce CallgraphManifest model for signal processing
2025-11-10 09:27:03 +02:00

4.9 KiB
Raw Blame History

Sprint 138 - Scanner & Surface

Phase focus: Scanner.IX — Ruby analyzer parity & supporting readiness.

  • Depends on: Sprint 137 · Scanner.VIII (gap designs locked) and Sprint 135 · Scanner.VI (EntryTrace foundations).
  • Feeds: Sprint 139 and CLI releases once Ruby analyzer + policy/CLI/licensing tracks land.
Task ID State Summary Owner / Source Depends On
SCANNER-ENG-0008 TODO Maintain EntryTrace heuristic cadence per docs/benchmarks/scanner/scanning-gaps-stella-misses-from-competitors.md, including quarterly pattern reviews + explain-trace updates. EntryTrace Guild, QA Guild (src/Scanner/__Libraries/StellaOps.Scanner.EntryTrace) —
SCANNER-ENG-0009 DOING (2025-11-02) Deliver Ruby analyzer parity and observation pipeline (lockfiles, runtime graph, policy signals) per the gap doc. Ruby Analyzer Guild (src/Scanner/StellaOps.Scanner.Analyzers.Lang.Ruby) SCANNER-ANALYZERS-RUBY-28-001..012
SCANNER-ENG-0010 TODO Ship the PHP analyzer pipeline (composer lock, autoload graph, capability signals) to close comparison gaps. PHP Analyzer Guild (src/Scanner/StellaOps.Scanner.Analyzers.Lang.Php) SCANNER-ANALYZERS-PHP-27-001..012
SCANNER-ENG-0011 TODO Scope the Deno runtime analyzer (lockfile resolver, import graphs) based on competitor techniques to extend beyond Sprint 130 coverage. Language Analyzer Guild (src/Scanner/StellaOps.Scanner.Analyzers.Lang.Deno) —
SCANNER-ENG-0012 TODO Evaluate Dart analyzer requirements (pubspec parsing, AOT artifacts) and split implementation tasks. Language Analyzer Guild (src/Scanner/StellaOps.Scanner.Analyzers.Lang.Dart) —
SCANNER-ENG-0013 TODO Plan Swift Package Manager coverage (Package.resolved, xcframeworks, runtime hints) with policy hooks. Swift Analyzer Guild (src/Scanner/StellaOps.Scanner.Analyzers.Lang.Swift) —
SCANNER-ENG-0014 TODO Align Kubernetes/VM target coverage between Scanner and Zastava per comparison findings; publish joint roadmap. Runtime Guild, Zastava Guild (docs/modules/scanner) —
SCANNER-ENG-0015 DOING (2025-11-09) Document DSSE/Rekor operator enablement guidance and rollout levers surfaced in the gap analysis. Export Center Guild, Scanner Guild (docs/modules/scanner) —
SCANNER-ENG-0016 DOING (2025-11-10) Implement RubyLockCollector + vendor cache ingestion per design §4.1–4.3. Ruby Analyzer Guild (src/Scanner/StellaOps.Scanner.Analyzers.Lang.Ruby) SCANNER-ENG-0009
SCANNER-ENG-0017 DONE (2025-11-09) Build the runtime require/autoload graph builder with tree-sitter Ruby per design §4.4 and integrate EntryTrace hints. Ruby Analyzer Guild (src/Scanner/StellaOps.Scanner.Analyzers.Lang.Ruby) SCANNER-ENG-0016
SCANNER-ENG-0018 DONE (2025-11-09) Emit Ruby capability + framework surface signals as defined in design §4.5 with policy predicate hooks. Ruby Analyzer Guild (src/Scanner/StellaOps.Scanner.Analyzers.Lang.Ruby) SCANNER-ENG-0017
SCANNER-ENG-0019 DOING (2025-11-10) Ship Ruby CLI verbs (`stella ruby inspect resolve`) and Offline Kit packaging per design §4.6. Ruby Analyzer Guild, CLI Guild (src/Scanner/StellaOps.Scanner.Analyzers.Lang.Ruby)
SCANNER-LIC-0001 DOING (2025-11-02) Vet tree-sitter Ruby licensing + Offline Kit packaging requirements and document SPDX posture. Scanner Guild, Legal Guild (docs/modules/scanner) SCANNER-ENG-0016
SCANNER-POLICY-0001 TODO Define Policy Engine predicates for Ruby groups/capabilities and align lattice weights. Policy Guild, Ruby Analyzer Guild (docs/modules/scanner) SCANNER-ENG-0018
SCANNER-CLI-0001 DONE (2025-11-10) Coordinate CLI UX/help text for new Ruby verbs and update CLI docs/golden outputs. CLI Guild, Ruby Analyzer Guild (src/Cli/StellaOps.Cli) SCANNER-ENG-0019

Updates — 2025-11-09

  • SCANNER-CLI-0001: Completed Spectre table wrapping fix for runtime/lockfile columns, expanded Ruby resolve JSON assertions, removed ad-hoc debug artifacts, and drafted CLI docs covering stellaops-cli ruby inspect|resolve. Pending: final verification + handoff once docs/tests merge.
  • SCANNER-CLI-0001: Wired stellaops-cli ruby inspect|resolve into CommandFactory so the verbs are available via System.CommandLine with the expected --root, --image/--scan-id, and --format options; dotnet test ... --filter Ruby passes.
  • SCANNER-CLI-0001: Added CLI unit tests (CommandFactoryTests, Ruby inspect JSON assertions) to guard the new verbs and runtime metadata output; dotnet test src/Cli/__Tests/StellaOps.Cli.Tests/StellaOps.Cli.Tests.csproj --filter "CommandFactoryTests|Ruby" now covers the CLI surface.
  • SCANNER-ENG-0016: 2025-11-10 — resumed to finish RubyLockCollector + vendor cache ingestion (Codex agent) per §4.1–4.3, targeting lockfile multi-source coverage and bundler group metadata.