feat: ship Compass Code Graph v1

[forhappy]

Summary

• establish the first supported Code Graph contract as a versioned, NetworkX-compatible compass.graph/1 envelope with a hard cutover and no legacy adapter
• expand the closed vocabulary to 45 node kinds and 28 edge kinds, including enterprise/domain events, jobs, schemas, database entities, resources, and explicit routes_to
• detect and resolve routes and domain relationships across 24 framework flows with exact, convention, config, ambiguous, unresolved, and auditable heuristic evidence
• add the shared compass.query/1 search, callers, callees, impact, explore, and node-trail contract across CLI, MCP, Viewer, and VS Code
• keep Program IR separate and join its evidence to the Code Graph only at query time
• add deterministic publication, explicit coverage and diagnostics, bounded production indexes, cross-platform packaging, and release qualification

Reliability hardening

• validate the closed schema and fail closed on pre-contract artifacts
• preserve directional relationships through clustering; clustering symmetrizes only its internal weighted projection
• gate oversized sources from inventory metadata before source reads and publish explicit partial coverage
• spend trusted adjacency budget before heuristic expansion and bound candidate merges
• share one framework target index across route and domain resolution
• produce checkout-portable identities and byte-identical clean, warm, rebuild, restored, and alternate-checkout artifacts
• normalize CRLF and lone-CR line endings for embedded client assets

Impact

Every Compass client now reads and queries the same validated graph contract. routes_to makes URL and transport bindings visible from callers of a handler. Enterprise concepts are first-class typed nodes and edges rather than unstructured metadata. Exact AST evidence and heuristic wiring remain distinguishable inline, including the source location responsible for a synthesized relationship.

Qualification

Exact revision: 3ac287e6391e29f07c1d096483df710295c335ff

• Rust workspace tests passed with all targets, all features, and the locked dependency graph
• workspace build passed with all features
• strict Clippy passed with warnings denied for the Code Graph production crates
• dependency advisories, bans, licenses, and sources passed
• formatting and patch-integrity checks passed
• Viewer: 24 files / 94 tests passed
• VS Code: 30 files / 86 tests passed
• Playwright: 65 tests passed
• JavaScript typechecks and production builds passed
• independent implementation review at f469ff7: clean, with no critical, high, or medium findings
• generated-asset delta at 3edb68f: deterministic manifest verification and all 27 compass-output tests passed
• current polling-test delta: 20 consecutive Apple ARM runs, all 29 compass-core library tests, and strict compass-core Clippy passed
• Windows publication delta: all 29 filesystem/build-guard tests, the four affected history snapshot tests, and strict all-feature Clippy passed
• hosted-scale calibration: the unchanged 100,000-target / 100,000-fact workload passed locally under concurrent load; deterministic candidate-budget assertions remain separate
• extended Windows path and query-index delta: all five deterministic pipeline tests, both index recovery/reuse tests, and strict graph/query Clippy passed

Release oracle:

• 45 node kinds and 28 edge kinds
• 24 framework flows and 57 language fixtures
• 23 negative cases and 1,232 semantic invariants
• 871 coverage records and 7 explicit diagnostics
• 65 exact, 3 ambiguous, and 7 unresolved route resolutions
• byte comparisons passed for clean/warm, rebuild, restored, and alternate-checkout builds
• canonical graph digest: sha256:dd1443d746874c6ebbd58e0bde8ce36887e0e6cdca5d9de25a7d1875d596823c

Production-scale gates:

• strict-valid 100,000-node / 500,000-edge query fixture
• bounded query expansion retained 4 results after examining 10 candidates
• 100,000 framework targets and 100,000 facts resolved through one shared index
• 100,000 ambiguous terminal candidates retained 20 after examining 21
• 8 MiB oversized-source fixture produced deterministic partial coverage without being read or extracted

Hosted Linux, macOS, Windows, architecture, quality, dependency, client, and release-oracle jobs passed at 3ac287e.