⚡ Bolt: [성능 개선] SARIF 룰 인덱스 조회 O(1) 최적화

.jules/bolt.md

@@ -77,3 +77,6 @@
 ## 2024-11-20 - Optimize multiple tuple generation from a single collection
 **Learning:** `build_rule_metadata` derives exactly two collections, `owasp` and `cwe`, from the same references. Replacing its two generator traversals with one explicit loop reduces element visits from about 2N to N. Both versions remain O(N), so this is a constant-factor optimization rather than an asymptotic complexity improvement.
 **Action:** Combine repeated traversal when fixed derived collections share one source, while preserving ordering and classification semantics. Benchmark the production hot path before claiming a material wall-clock improvement.
+## 2025-02-12 - O(1) SARIF Rule Index Lookup Optimization
+**Learning:** In Python, calling `list(dict).index(key)` inside a loop over data items causes severe O(N^2) performance degradation because it creates a new list and performs a linear search on every iteration. This pattern was found in `appguardrail_core/sarif.py` during SARIF generation.
+**Action:** Always avoid `list(dict).index()` inside loops. Maintain a parallel index mapping dictionary (e.g., `indices[key] = len(indices)`) to achieve O(1) lookups and keep the overall loop bounded to O(N) time complexity.

appguardrail_core/sarif.py

@@ -39,12 +39,15 @@ def findings_to_sarif(
     normalized = normalize_findings(findings)
 
     rules: dict[str, dict[str, Any]] = {}
+    rule_indices: dict[str, int] = {}
     results: list[dict[str, Any]] = []
     for f in normalized:
         rule_id = f["rule_id"]
         severity = f["severity"]
         refs = f.get("references") or ()
         if rule_id not in rules:
+            # ⚡ Bolt: Maintain O(1) index lookup to avoid list(rules).index() O(N) overhead
+            rule_indices[rule_id] = len(rules)
             rule: dict[str, Any] = {
                 "id": rule_id,
                 "name": rule_id,
@@ -68,7 +71,7 @@ def findings_to_sarif(
         results.append(
             {
                 "ruleId": rule_id,
-                "ruleIndex": list(rules).index(rule_id),
+                "ruleIndex": rule_indices[rule_id],
                 "level": _LEVEL.get(severity, "note"),
                 "message": {"text": f["message"].strip()},
                 "locations": [