@smartmemory/compose 0.1.38-beta → 0.1.40-beta

package/bin/compose.js

@@ -1589,6 +1589,7 @@ if (cmd === 'validate') {
   let code = null
   let blockOn = 'error'
   let asJson = false
+  let externalXref = false
   for (let i = 0; i < args.length; i++) {
     const a = args[i]
     if (a === '--help' || a === '-h') {
@@ -1608,6 +1609,7 @@ Exit codes:
       process.exit(0)
     }
     if (a === '--json') { asJson = true; continue }
+    if (a === '--external') { externalXref = true; continue }
     if (a.startsWith('--scope=')) scope = a.slice('--scope='.length)
     else if (a === '--scope') scope = args[++i]
     else if (a.startsWith('--code=')) code = a.slice('--code='.length)
@@ -1638,7 +1640,7 @@ Exit codes:
   try {
     result = scope === 'feature'
       ? await validateFeature(valCwd, code)
-      : await validateProject(valCwd)
+      : await validateProject(valCwd, { external: externalXref })
   } catch (err) {
     if (err.code === 'INVALID_INPUT') {
       console.error(`Error [INVALID_INPUT]: ${err.message}`)

package/bin/git-hooks/pre-push.template

@@ -2,6 +2,14 @@
 # Compose pre-push hook — runs `compose validate` and blocks the push on
 # any error-severity drift finding. Installed by `compose hooks install --pre-push`;
 # placeholders below are substituted at install time.
+#
+# External-reference (xref) resolution is OFF here by default: github xref:
+# citations / kind:"external" links emit XREF_RESOLUTION_SKIPPED (warning,
+# non-blocking under --block-on=error) while local/url/malformed still
+# surface. Opt in to network github resolution by exporting
+# COMPOSE_XREF_ONLINE=1, or set `xref.prePushOnline: true` in
+# .compose/compose.json — both are honored by `compose validate` directly
+# (no flag change needed below). XREF_TARGET_MISSING stays error and blocks.
 
 set -u
 COMPOSE_NODE="__COMPOSE_NODE__"

package/contracts/feature-json.schema.json

@@ -68,12 +68,62 @@
       "type": "array",
       "items": {
         "type": "object",
-        "required": ["kind", "to_code"],
         "properties": {
-          "kind": { "type": "string", "enum": ["surfaced_by", "blocks", "depends_on", "follow_up", "supersedes", "related"] },
+          "kind": { "type": "string", "enum": ["surfaced_by", "blocks", "depends_on", "follow_up", "supersedes", "related", "external"] },
           "to_code": { "type": "string", "pattern": "^[A-Z][A-Z0-9-]*[A-Z0-9]$" },
-          "note": { "type": "string" }
-        }
+          "note": { "type": "string" },
+          "provider": { "type": "string", "enum": ["github", "local", "url", "jira", "linear", "notion", "obsidian"] },
+          "repo": { "type": "string" },
+          "issue": { "type": "integer", "minimum": 1 },
+          "url": { "type": "string", "pattern": "^[a-zA-Z][a-zA-Z0-9+\\-.]*://" },
+          "expect": { "type": "string" }
+        },
+        "allOf": [
+          {
+            "if": { "not": { "required": ["kind"], "properties": { "kind": { "const": "external" } } } },
+            "then": { "required": ["kind", "to_code"] }
+          },
+          {
+            "if": { "properties": { "kind": { "const": "external" } }, "required": ["kind"] },
+            "then": {
+              "required": ["provider"],
+              "allOf": [
+                {
+                  "if": { "properties": { "provider": { "const": "github" } }, "required": ["provider"] },
+                  "then": {
+                    "required": ["repo", "issue"],
+                    "properties": {
+                      "repo": { "pattern": "^[^\\s/#]+/[^\\s/#]+$" },
+                      "expect": { "enum": ["open", "closed"] }
+                    }
+                  }
+                },
+                {
+                  "if": { "properties": { "provider": { "const": "local" } }, "required": ["provider"] },
+                  "then": {
+                    "required": ["repo", "to_code"],
+                    "properties": {
+                      "repo": {
+                        "pattern": "^[A-Za-z0-9._-]+$",
+                        "not": { "enum": [".", ".."] }
+                      },
+                      "expect": { "enum": ["PLANNED", "IN_PROGRESS", "PARTIAL", "COMPLETE", "SUPERSEDED", "PARKED", "BLOCKED", "KILLED"] }
+                    }
+                  }
+                },
+                {
+                  "if": { "properties": { "provider": { "enum": ["url", "jira", "linear", "notion", "obsidian"] } }, "required": ["provider"] },
+                  "then": {
+                    "required": ["url"],
+                    "properties": {
+                      "url": { "type": "string", "pattern": "^[a-zA-Z][a-zA-Z0-9+\\-.]*://" }
+                    }
+                  }
+                }
+              ]
+            }
+          }
+        ]
       }
     },
     "completions": {

package/contracts/judge-result.json

@@ -29,7 +29,7 @@
         },
         "stakes": {
           "enum": ["cheap", "default", "paranoid"],
-          "description": "Depth class set by caller. v1: cheap (T1 only), default (T1+T2). paranoid raises StakesNotAvailableError until v2."
+          "description": "Depth class set by caller. cheap (T1 only), default (T1+T2). paranoid (T1+T2, then a T3 adversary over every interpretive 'met'). STRAT-JUDGE-T3-READJAIL: the paranoid T3 is now a true cross-model jailed Codex adversary (macOS sandbox-exec read-jail confining reads to the staged turn tree) when available, else an honest probe-time degrade to the v1 in-process Claude cold-read. Per-predicate provenance is in predicates[].t3."
         },
         "predicates": {
           "type": "array",
@@ -50,7 +50,7 @@
               "id": { "type": "string" },
               "type": {
                 "enum": ["deterministic", "verified", "judged"],
-                "description": "Predicate type sets the tier ceiling. deterministic = T1 only. verified = T2. judged = T3 in v2, downgraded to T2 in v1."
+                "description": "Predicate type sets the tier ceiling. deterministic = T1 only. verified = T2. judged = T2, plus T3 cold-read adversary when stakes=paranoid (else T2-terminal; judge_kernel_meta.degraded_judged flags judged predicates that got no adversary)."
               },
               "statement": { "type": "string" },
               "verdict": {
@@ -97,13 +97,36 @@
                     "reason": { "type": "string" }
                   }
                 }
+              },
+              "t3": {
+                "type": ["object", "null"],
+                "description": "STRAT-JUDGE-T3-READJAIL. Populated ONLY when a T3 adversary was reached for this predicate (stakes='paranoid' AND T2='met'); null/absent means no adversary ran for this predicate (the absence is itself the honest signal). Descriptive of what actually ran, never intent. Authoritative T3 model identity is t3.model_id — top-level meta.model_id is the T1/T2 worker-lane identity only.",
+                "required": ["mode", "residual"],
+                "properties": {
+                  "mode": {
+                    "enum": ["codex_jailed", "codex_jailed_error", "claude_cold_fallback"],
+                    "description": "codex_jailed: true cross-model Codex adversary, OS read-jailed (macOS sandbox-exec) to the staged turn tree. claude_cold_fallback: probe-time degrade to in-process Claude cold-read (no OS jail; reasoning-isolation+ordering only). codex_jailed_error: jailed adversary failed post-launch — predicate resolved ambiguous, error surfaced, NEVER silently relabeled fallback."
+                  },
+                  "guarantee": {
+                    "type": ["string", "null"],
+                    "description": "os_read_jail+cross_model | reasoning_isolation+ordering | null (error)."
+                  },
+                  "model_id": {
+                    "type": ["string", "null"],
+                    "description": "The actual model that ran T3 (authoritative for the adversary lane)."
+                  },
+                  "residual": {
+                    "type": "string",
+                    "description": "The accepted residual for this mode, verbatim from the design Problem statement. Never rounded up to 'confined'."
+                  }
+                }
               }
             }
           }
         },
         "tier_disagreements": {
           "type": "array",
-          "description": "Cross-tier disagreements within a single judge call. Empty in v1 (single-tier-per-predicate after T1). Reserved for v2+ T2/T3 quorum resolution.",
+          "description": "Cross-tier disagreements within a single judge call. Populated when stakes=paranoid and T3 contradicts a T2 'met' (resolved to 'ambiguous'; T4 quorum deferred). Empty for cheap/default.",
           "items": {
             "type": "object",
             "required": ["predicate", "tiers", "resolution"],
@@ -142,7 +165,7 @@
             },
             "degraded_judged": {
               "type": "boolean",
-              "description": "True when a 'judged' predicate was downgraded to T2 because T3 is unavailable in v1."
+              "description": "True when a 'judged' predicate did not receive adversarial (T3) verification — i.e. stakes was cheap/default so T2 was terminal. False once T3 ran (stakes=paranoid)."
             }
           }
         }