Files
finance/graphify-out/2026-09-21/GRAPH_REPORT.md
T
k1nq 2117029071 Update manifest.json with new file metadata and hashes
- Updated timestamps and hashes for backend/app/imports/router.py and backend/app/imports/service.py to reflect recent changes.
- Updated metadata for backend/tests/test_imports.py with new timestamps and hashes.
- Added new entries for .kilo/plugins/graphify.js and AGENTS.md, including their respective timestamps and hashes.
2026-09-21 15:55:09 +05:00

18 KiB

Graph Report - finance (2026-09-21)

Corpus Check

  • 151 files · ~64,579 words
  • Verdict: corpus is large enough that graph structure adds value.

Summary

  • 1275 nodes · 3720 edges · 79 communities (56 shown, 16 thin omitted)
  • Extraction: 98% EXTRACTED · 2% INFERRED · 0% AMBIGUOUS · INFERRED: 71 edges (avg confidence: 0.93)
  • Token cost: 0 input · 0 output

Graph Freshness

  • Built from commit: 35b9ea83
  • Run git rev-parse HEAD and compare to check if the graph is stale.
  • Run graphify update . after code changes (no API cost).

Community Hubs (Navigation)

  • get_settings
  • budgeting/router.py
  • Base
  • set_space_context
  • imports/router.py
  • alfa_xlsx.py
  • imports/service.py
  • types.ts
  • router.tsx
  • ledger/router.py
  • AccountsPage.tsx
  • compilerOptions
  • AnalyticsPage.tsx
  • SettingsPage.tsx
  • devDependencies
  • Session
  • dependencies
  • ImportDetailPage.tsx
  • OperationsPage.tsx
  • queryKeys.ts
  • Toaster.tsx
  • adapters/base.py
  • BudgetPage.tsx
  • client.ts
  • fields.tsx
  • Docker Compose Development Stack
  • Financial Space
  • scripts
  • dependencies.py
  • General Pool
  • test_adapter_contracts.py
  • Per-File Envelope Encryption
  • Operation
  • Versioned Statement Imports
  • Finance Frontend SPA
  • Closed Beta Launch Gates
  • package.json
  • Financial Tracker MVP
  • TestRocketbankDebitContract
  • generate-api.mjs
  • schema.d.ts
  • test_api.py
  • i18n-parity.test.ts
  • Expected Income
  • test_private_fixtures.py
  • TestAlfaDebitContract
  • jsdom
  • graphify
  • @types/react-dom
  • typescript-eslint
  • rocketbank_pdf.py
  • vitest
  • Favicon SVG (ledger lines icon)
  • init-app-role.sh
  • Payee
  • finance-backend
  • LocalDirectoryBlobStore
  • TestOzonDebitContract
  • Gitea CI and real statement imports
  • 20260918_0002_hold_lifecycle.py
  • eslint-plugin-react-hooks
  • openapi-typescript
  • @testing-library/dom
  • @testing-library/react
  • vite
  • spaces/router.py
  • identity/service.py
  • crypto.py
  • current_session
  • AppError
  • me
  • AGENTS.md

God Nodes (most connected - your core abstractions)

  1. Session - 144 edges
  2. AppError - 54 edges
  3. Base - 47 edges
  4. PkMixin - 39 edges
  5. get_settings() - 38 edges
  6. TimestampMixin - 38 edges
  7. conflict() - 35 edges
  8. record() - 34 edges
  9. UnsupportedStatementLayout - 30 edges
  10. StatementDocument - 30 edges

Surprising Connections (you probably didn't know these)

  • Typed Same-Origin API Client --conceptually_related_to--> Same-Origin Reverse Proxy [INFERRED] frontend/README.md → infra/README.md
  • Financial Space Ownership --conceptually_related_to--> Financial Space [INFERRED] docs/adr/0001-financial-space-ownership-and-rls.md → CONTEXT.md
  • Versioned Statement Imports --conceptually_related_to--> Statement Import [INFERRED] docs/adr/0003-versioned-statement-imports.md → CONTEXT.md
  • MVP Release Gates --conceptually_related_to--> Closed Beta Launch Gates [INFERRED] .kilo/plans/1789034192214-financial-tracker-mvp.md → docs/operations/beta-release-runbook.md
  • Carry-Over Budget Reserves --references--> Savings Envelope [EXTRACTED] docs/adr/0002-journal-and-budget-reserves.md → CONTEXT.md

Import Cycles

  • None detected.

Hyperedges (group relationships)

  • Auditable Financial Model — context_operation, context_posting, docs_adr_0002_journal_and_budget_reserves_derived_balances, docs_adr_0002_journal_and_budget_reserves_plan_funding_separation, docs_adr_0002_journal_and_budget_reserves_closure_snapshots [EXTRACTED 1.00]
  • Financial Space Tenancy Boundary — context_financial_space, context_membership, docs_adr_0001_financial_space_ownership_and_rls_defense_in_depth_authorization, docs_adr_0001_financial_space_ownership_and_rls_transaction_local_rls, docs_adr_0001_financial_space_ownership_and_rls_cross_space_integrity [EXTRACTED 1.00]
  • Safe Statement Import Flow — context_statement_import, context_parse_run, context_source_record, docs_adr_0003_versioned_statement_imports_immutable_statement_document, docs_adr_0003_versioned_statement_imports_conservative_deduplication, docs_adr_0003_versioned_statement_imports_atomic_confirm_revert [EXTRACTED 1.00]

Communities (79 total, 16 thin omitted)

Community 0 - "get_settings"

Cohesion: 0.14 Nodes (27): get_settings(), Settings, send_token_email(), accept_invite(), AcceptInviteBody, confirm_password_reset(), create_invite(), InviteBody (+19 more)

Community 1 - "budgeting/router.py"

Cohesion: 0.14 Nodes (42): balances(), cash_flow(), category_spend(), plan_fact(), Context, date, Db, get (+34 more)

Community 2 - "Base"

Cohesion: 0.07 Nodes (82): downgrade(), upgrade(), AuditEvent, Append-only domain/security event. Never stores raw financial payloads., ExpectedIncome, ExpectedIncomeMatch, FundingMovement, PeriodClosure (+74 more)

Community 3 - "set_space_context"

Cohesion: 0.07 Nodes (44): get_db(), get_engine(), get_session_factory(), Any, sessionmaker, Transaction-local RLS context. No-op on SQLite (tests); fail-closed on…, Transactional scope for workers/endpoints that own the transaction lifecycle., session_scope() (+36 more)

Community 4 - "imports/router.py"

Cohesion: 0.15 Nodes (33): confirm(), ConfirmBody, decide_row(), DecisionBody, delete_source(), detail(), HoldResolveBody, imports() (+25 more)

Community 5 - "alfa_xlsx.py"

Cohesion: 0.17 Nodes (24): AlfaDebitXlsxAdapter, _AlfaHeaderMeta, AlfaXlsxAdapterBase, _cell_str(), _debit_find_header(), _debit_header_metadata(), _debit_header_value(), _debit_norm() (+16 more)

Community 6 - "imports/service.py"

Cohesion: 0.08 Nodes (72): Any, record(), datetime, utcnow(), conflict(), not_found(), magic_kind(), BlobStore (+64 more)

Community 7 - "types.ts"

Cohesion: 0.06 Nodes (50): api, Account, AccountStatus, BalanceItem, BalancesReport, BudgetBlocker, BudgetCategory, BudgetStatus (+42 more)

Community 8 - "router.tsx"

Cohesion: 0.11 Nodes (31): AcceptInvitePayload, LoginPayload, PasswordResetPayload, AcceptInvitePage, AccountsPage, BudgetPage, LoginPage, OperationsPage (+23 more)

Community 9 - "ledger/router.py"

Cohesion: 0.15 Nodes (31): account_json(), AccountBody, accounts(), archive_account(), create_account(), create_operation(), delete_account(), operation_json() (+23 more)

Community 10 - "AccountsPage.tsx"

Cohesion: 0.12 Nodes (22): AccountType, ImportsPage, Button(), ButtonProps, Variant, ConfirmDialog(), ConfirmDialogProps, EmptyState() (+14 more)

Community 11 - "compilerOptions"

Cohesion: 0.07 Nodes (28): compilerOptions, baseUrl, esModuleInterop, forceConsistentCasingInFileNames, isolatedModules, jsx, lib, module (+20 more)

Community 12 - "AnalyticsPage.tsx"

Cohesion: 0.12 Nodes (19): AnalyticsPage, CashFlowColumn, ColumnChart(), ColumnChartProps, BarRow, HorizontalBars(), HorizontalBarsProps, PlanFactBars() (+11 more)

Community 13 - "SettingsPage.tsx"

Cohesion: 0.23 Nodes (10): NotFoundPage, PageHeader(), PageHeaderProps, useCancelDeletion(), useRequestDeletion(), useRequestExport(), useSpaceDeletion(), DeletionForm() (+2 more)

Community 14 - "devDependencies"

Cohesion: 0.11 Nodes (19): eslint, @eslint/js, eslint-plugin-jsx-a11y, devDependencies, eslint, @eslint/js, eslint-plugin-jsx-a11y, globals (+11 more)

Community 15 - "Session"

Cohesion: 0.08 Nodes (88): balances(), cash_flow(), category_spend(), plan_fact(), date, UUID, BudgetPeriod, Calendar month budget period in the space timezone (month granularity). (+80 more)

Community 16 - "dependencies"

Cohesion: 0.11 Nodes (19): dependencies, @hookform/resolvers, i18next, react, react-dom, react-hook-form, react-i18next, react-router-dom (+11 more)

Community 17 - "ImportDetailPage.tsx"

Cohesion: 0.27 Nodes (15): RowDecision, ImportDetailPage, useToast(), useConfirmImport(), useImport(), useImportErrorToaster(), useReparseImport(), useRevertImport() (+7 more)

Community 18 - "OperationsPage.tsx"

Cohesion: 0.17 Nodes (21): Badge(), BadgeTone, useActiveAccounts(), useImports(), useCategorizeOperation(), useCreateOperation(), useLedgerMutation(), useOperations() (+13 more)

Community 19 - "queryKeys.ts"

Cohesion: 0.16 Nodes (13): invalidationRoots, queryKeys, SESSION_ROOT, sessionInvalidationRoot, SPACE_ROOT, spaceInvalidationRoot, CreateAccountPayload, OperationFilters (+5 more)

Community 20 - "Toaster.tsx"

Cohesion: 0.13 Nodes (14): Locale, App(), queryClient, AppRoutes(), ToastApi, ToastContext, ToastItem, ToastKind (+6 more)

Community 21 - "adapters/base.py"

Cohesion: 0.10 Nodes (21): account_fingerprint(), amount_to_kopecks(), _mask_digits(), money_to_kopecks(), normalize_description(), date, Parse statement money strings like '-1 234,56 RUR', '+ 500.00 ₽', '12 345'.…, record_fingerprint() (+13 more)

Community 22 - "BudgetPage.tsx"

Cohesion: 0.36 Nodes (12): useBudgetCategories(), useBudgetErrorToaster(), useBudgetSummary(), useCloseMonth(), useCopyPreviousMonth(), useFundCategory(), usePeriodMutation(), useReopenMonth() (+4 more)

Community 23 - "client.ts"

Cohesion: 0.23 Nodes (10): apiClient, ApiError, buildUrl(), ErrorEnvelope, parseErrorEnvelope(), QueryValue, readCsrfToken(), request() (+2 more)

Community 24 - "fields.tsx"

Cohesion: 0.23 Nodes (10): FieldChrome, InputProps, MoneyField(), MoneyFieldProps, SelectFieldProps, SelectProps, TextareaField(), TextareaFieldProps (+2 more)

Community 25 - "Docker Compose Development Stack"

Cohesion: 0.29 Nodes (8): Commodity Infrastructure Services, Docker Compose Development Stack, Internal Backend Network, Same-Origin Frontend Service, Worker Parsing Isolation, Finance Infrastructure, Same-Origin Reverse Proxy, Backend and Frontend Workstream Contracts

Community 26 - "Financial Space"

Cohesion: 0.17 Nodes (12): Credit Reserve, Financial Account, Financial Space, Membership, User, Carry-Over Budget Reserves, Provider-Neutral Data Boundary, Russian Federation Data Residency (+4 more)

Community 27 - "scripts"

Cohesion: 0.22 Nodes (9): scripts, api:generate, build, dev, lint, preview, test, test:watch (+1 more)

Community 28 - "dependencies.py"

Cohesion: 0.19 Nodes (16): current_context(), Context, CurrentSession, Header, RequestContext, require_csrf(), forbidden(), Any (+8 more)

Community 29 - "General Pool"

Cohesion: 0.29 Nodes (8): Budget Period, Funding, General Pool, Monthly Category, Plan Assignment, Savings Envelope, Immutable Closure Snapshots, Plan and Funding Separation

Community 30 - "test_adapter_contracts.py"

Cohesion: 0.13 Nodes (10): AlfaCreditXlsxAdapter, Protocol, StatementAdapter, detect_adapter(), OzonCreditPdfAdapter, make_draft(), make_source_row(), Sanitized synthetic contract tests for the evidenced statement adapters. These… (+2 more)

Community 31 - "Per-File Envelope Encryption"

Cohesion: 0.29 Nodes (7): Immutable Statement Document, Per-File Envelope Encryption, Backup and Restore Runbook, Mandatory KEK Backup, Quarterly Restore Drill, Disaster Restore Procedure, Post-Restore Deletion Replay

Community 32 - "Operation"

Cohesion: 0.47 Nodes (6): Internal Transfer, Operation, Posting, Refund, Derived Account Balances, Operations and Postings Journal

Community 33 - "Versioned Statement Imports"

Cohesion: 0.20 Nodes (11): Parse Run, Source Record, Statement Import, Atomic Import Confirm and Revert, Conservative Deduplication, Parser Versioning and Review Diff, Versioned Statement Imports, Layout Drift Re-Gating (+3 more)

Community 34 - "Finance Frontend SPA"

Cohesion: 0.29 Nodes (7): Server-Side Secret Boundary, Grossbukh Application Shell, Accessible Responsive UI, Finance Frontend SPA, RU and EN Localization, Space-Scoped Query Keys, Typed Same-Origin API Client

Community 35 - "Closed Beta Launch Gates"

Cohesion: 0.20 Nodes (11): Crypto-Shredded Deletion, Closed Beta Release Runbook, Forward-Fix Rollback Policy, Financial Data Incident Response, Closed Beta Launch Gates, Production Launch Sequence, Thirty-Day Space Deletion, Durable Deletion Ledger (+3 more)

Community 36 - "package.json"

Cohesion: 0.40 Nodes (4): name, private, type, version

Community 37 - "Financial Tracker MVP"

Cohesion: 0.18 Nodes (11): Audited Break-Glass Access, Cross-Space Referential Integrity, Defense-in-Depth Authorization, Financial Space Ownership, Transaction-Local RLS Context, Budget Invariants, Critical User Path, Financial Tracker MVP (+3 more)

Community 38 - "TestRocketbankDebitContract"

Cohesion: 0.24 Nodes (3): same_page_rocket_lines(), synthetic_rocket_lines(), TestRocketbankDebitContract

Community 39 - "generate-api.mjs"

Cohesion: 0.40 Nodes (5): firstReadable(), LOCAL_CANDIDATES, main(), OUT_DIR, REMOTE_CANDIDATES

Community 40 - "schema.d.ts"

Cohesion: 0.33 Nodes (5): components, $defs, operations, paths, webhooks

Community 41 - "test_api.py"

Cohesion: 0.67 Nodes (3): TestClient, test_invite_login_and_authenticated_space(), test_openapi_contains_critical_paths()

Community 44 - "test_private_fixtures.py"

Cohesion: 0.13 Nodes (20): Any, Reconcile parsed rows against declared bank controls with stable diagnostics.…, _reconciliation_summary(), _check(), _fail(), _load_entries(), parsed(), fixture (+12 more)

Community 45 - "TestAlfaDebitContract"

Cohesion: 0.21 Nodes (3): alfa_workbook_bytes(), synthetic_alfa_rows(), TestAlfaDebitContract

Community 47 - "graphify"

Cohesion: 0.17 Nodes (11): command, enabled, timeout, type, mcp, graphify, plugin, $schema (+3 more)

Community 50 - "rocketbank_pdf.py"

Cohesion: 0.27 Nodes (6): _date_from(), _PendingRecord, date, Rocketbank debit statement contract, evidenced against the real document.…, RocketbankDebitPdfAdapter, open_pdf()

Community 62 - "LocalDirectoryBlobStore"

Cohesion: 0.39 Nodes (3): LocalDirectoryBlobStore, Path, S3-neutral local store; production swaps in an S3-compatible client.

Community 63 - "TestOzonDebitContract"

Cohesion: 0.16 Nodes (6): minimal_pdf(), ozon_extracted(), _QuotaSettings, Build a small valid single-font PDF with empty or ASCII-only pages., TestOzonDebitContract, MonkeyPatch

Community 64 - "Gitea CI and real statement imports"

Cohesion: 0.29 Nodes (6): Confirmed decisions, Gitea CI and real statement imports, Goal and constraints, Implementation plan, Principal risks, Validation and rollout

Community 65 - "20260918_0002_hold_lifecycle.py"

Cohesion: 0.80 Nodes (4): downgrade(), _has_check_constraint(), _has_column(), upgrade()

Community 71 - "spaces/router.py"

Cohesion: 0.18 Nodes (18): cancel_deletion(), current(), deletion_status(), DeletionBody, invite_member(), MemberInviteBody, alias, BaseModel (+10 more)

Community 72 - "identity/service.py"

Cohesion: 0.28 Nodes (18): unauthorized(), accept_invitation(), authenticate(), create_invitation(), create_password_reset(), create_session(), get_active_session(), normalize_email() (+10 more)

Community 73 - "crypto.py"

Cohesion: 0.40 Nodes (5): encrypt_file(), EncryptedFile, Per-file random DEK; DEK wrapped with the KEK from the secret manager., Crypto-shred hook: deleting wrapped DEK rows in DB plus blobs removes access., shred_dek_material()

Community 74 - "current_session"

Cohesion: 0.29 Nodes (7): current_session(), alias, Db, User, Cookie, session_cookie_name, UserSession

Community 75 - "AppError"

Cohesion: 0.43 Nodes (5): AppError, Domain error rendered as a machine-readable JSON error payload., unprocessable(), _quota_error(), Exception

Community 76 - "me"

Cohesion: 0.67 Nodes (3): me(), CurrentSession, get

Knowledge Gaps

  • 186 isolated node(s): $schema, file:///home/k1nq/repos/finance/.kilo/plugins/graphify.js, type, /home/k1nq/.local/bin/graphify-mcp, /home/k1nq/repos/finance/graphify-out/graph.json (+181 more) These have ≤1 connection - possible missing edges or undocumented components. (Counts symbols only; 339 node(s) total have ≤1 connection when file, concept and rationale nodes are included.)
  • 16 thin communities (<3 nodes) omitted from report — run graphify query to explore isolated nodes.

Suggested Questions

Questions this graph is uniquely positioned to answer:

  • Why does Session connect Session to Base, set_space_context, imports/service.py, identity/service.py, dependencies.py? High betweenness centrality (0.087) - this node is a cross-community bridge.
  • Why does AppError connect AppError to get_settings, Base, set_space_context, imports/router.py, alfa_xlsx.py, imports/service.py, TestRocketbankDebitContract, identity/service.py, crypto.py, Session, adapters/base.py, dependencies.py, test_adapter_contracts.py, TestOzonDebitContract? High betweenness centrality (0.067) - this node is a cross-community bridge.
  • Why does bad_request() connect Session to budgeting/router.py, imports/service.py, spaces/router.py, identity/service.py, ledger/router.py, AppError, dependencies.py? High betweenness centrality (0.017) - this node is a cross-community bridge.
  • Are the 2 inferred relationships involving Session (e.g. with UTCDateTime and test_postgres_rls_requires_matching_transaction_context()) actually correct? Session has 2 INFERRED edges - model-reasoned connections that need verification.
  • Are the 24 inferred relationships involving AppError (e.g. with request_export() and login()) actually correct? AppError has 24 INFERRED edges - model-reasoned connections that need verification.
  • Are the 3 inferred relationships involving Base (e.g. with downgrade() and upgrade()) actually correct? Base has 3 INFERRED edges - model-reasoned connections that need verification.
  • What connects $schema, file:///home/k1nq/repos/finance/.kilo/plugins/graphify.js, type to the rest of the system? 186 weakly-connected nodes found - possible documentation gaps or missing edges.