Developer Tools

Verified against commit 942a18727c (2026-09-26, DOC-2 of SPRINT_20260926_001). Re-verify by reading the evidence paths listed in the Evidence section.

Service wiring (image, database and role, compose profile, bundle presence) is generated in the service inventory; this dossier does not restate it.

Standalone utilities, benchmarks, SDK generators and the developer portal under src/Tools/ that support building, testing and shipping Stella Ops. This module is distinct from the operator CLI (stella), which is documented in ../cli/.

Audience: Stella Ops developers and operators working in local and CI workflows.

Purpose

src/Tools/ holds independent utilities used during development and CI: policy DSL validation and schema export, smoke checks, benchmark harnesses, CI workflow generation, API-reference generation, SDK generation, an offline evidence-bundle verifier, a DORA TLPT scope generator, and the developer portal site. None of them is deployed as a service; they run locally or in CI pipelines.

Quick links

• Architecture
• Supply-chain hardening suite
• TLPT Scoper

Current tools

• PolicyDslValidator, PolicySchemaExporter, PolicySimulationSmoke — thin entry points over StellaOps.Policy.Tools.
• LanguageAnalyzerSmoke — in-process Scanner language-analyzer golden-snapshot smoke checks.
• NotifySmokeCheck — checks that expected event kinds appear in the Valkey/Redis event stream and in Notify deliveries, configured by NOTIFY_SMOKE_* environment variables.
• RustFsMigrator — copies objects from an S3-compatible bucket into RustFS over HTTP PUT.
• GoldenPairs (StellaOps.Tools.GoldenPairs) — mirror, diff and validate for the golden-pairs corpus under src/__Tests/__Datasets/golden-pairs.
• StellaOps.OpenApi.DocGen — renders an OpenAPI spec into deterministic Markdown.
• StellaOps.Bench and Bench — performance harnesses and the developer-only stella-vs-trivy benchmark compute and orchestration layer.
• StellaOps.Verifier — standalone offline evidence-bundle verifier (stella-verifier).
• StellaOps.Tools.TlptScoper — deterministic DORA TLPT scope JSON generator.
• StellaOps.Sdk.Generator — Go, Java, Python and TypeScript SDK generation from the OpenAPI spec.
• StellaOps.DevPortal.Site — Astro/Starlight developer portal with a RapiDoc “Try It” console.
• The supply-chain hardening suite lives in src/__Tests/supply-chain/.

Retired tools

FixtureUpdater (Concelier fixture rewriter) and DebianTrackerImport (bulk importer into the Concelier vulnerability store) were frozen on 2026-09-11 under SPRINT_20260722_003 VULN-B1 and moved to src/__Obsoleted/Tools/. They operate only on the retired Concelier graph and must not be run, compiled or restored.

Dependencies

• Upstream libraries: StellaOps.Policy.Tools, Scanner analyzer libraries, StellaOps.Graph.Api (TLPT Scoper live mode), StellaOps.Scanner.Benchmark, TestKit.
• External packages and tools: System.CommandLine, YamlDotNet, StackExchange.Redis, AWSSDK.S3, Docker and Git CLIs (Bench orchestration), Node.js with Astro/Starlight and RapiDoc (DevPortal), openapi-generator (SDK generation).
• Downstream: CI pipelines, test suites, SDK consumers, and auditors running the offline verifier.

Evidence