finance/graphify-out/GRAPH_REPORT.md

# Graph Report - finance  (2026-09-22)

## Corpus Check
- 153 files · ~65,647 words
- Verdict: corpus is large enough that graph structure adds value.

## Summary
- 1288 nodes · 3759 edges · 69 communities (47 shown, 15 thin omitted)
- Extraction: 98% EXTRACTED · 2% INFERRED · 0% AMBIGUOUS · INFERRED: 71 edges (avg confidence: 0.93)
- Token cost: 0 input · 0 output

## Graph Freshness
- Built from commit: `30bd1b48`
- Run `git rev-parse HEAD` and compare to check if the graph is stale.
- Run `graphify update .` after code changes (no API cost).

## Community Hubs (Navigation)
- identity/service.py
- budgeting/router.py
- Base
- set_space_context
- imports/service.py
- alfa_xlsx.py
- index.ts
- types.ts
- router.tsx
- ledger/router.py
- @testing-library/jest-dom
- compilerOptions
- AnalyticsPage.tsx
- @testing-library/user-event
- devDependencies
- Session
- dependencies
- ImportDetailPage.tsx
- OperationsPage.tsx
- SettingsPage.tsx
- Toaster.tsx
- test_adapter_contracts.py
- BudgetPage.tsx
- client.ts
- AccountsPage.tsx
- Docker Compose Development Stack
- Financial Space
- scripts
- @types/react
- General Pool
- TestBaseContract
- Per-File Envelope Encryption
- Operation
- Versioned Statement Imports
- Finance Frontend SPA
- Closed Beta Launch Gates
- package.json
- Financial Tracker MVP
- TestRocketbankDebitContract
- generate-api.mjs
- schema.d.ts
- test_api.py
- i18n-parity.test.ts
- Expected Income
- TestAlfaDebitContract
- graphify
- @types/react-dom
- typescript-eslint
- vitest
- Favicon SVG (ledger lines icon)
- init-app-role.sh
- Payee
- finance-backend
- LocalDirectoryBlobStore
- TestOzonDebitContract
- Gitea CI and real statement imports
- 20260918_0002_hold_lifecycle.py
- eslint-plugin-react-hooks
- vite
- AppError
- get_settings
- AGENTS.md

## God Nodes (most connected - your core abstractions)
1. `Session` - 146 edges
2. `AppError` - 54 edges
3. `Base` - 47 edges
4. `PkMixin` - 39 edges
5. `get_settings()` - 38 edges
6. `TimestampMixin` - 38 edges
7. `conflict()` - 35 edges
8. `record()` - 34 edges
9. `StatementDocument` - 32 edges
10. `UnsupportedStatementLayout` - 30 edges

## Surprising Connections (you probably didn't know these)
- `Typed Same-Origin API Client` --conceptually_related_to--> `Same-Origin Reverse Proxy`  [INFERRED]
  frontend/README.md → infra/README.md
- `Financial Space Ownership` --conceptually_related_to--> `Financial Space`  [INFERRED]
  docs/adr/0001-financial-space-ownership-and-rls.md → CONTEXT.md
- `Versioned Statement Imports` --conceptually_related_to--> `Statement Import`  [INFERRED]
  docs/adr/0003-versioned-statement-imports.md → CONTEXT.md
- `MVP Release Gates` --conceptually_related_to--> `Closed Beta Launch Gates`  [INFERRED]
  .kilo/plans/1789034192214-financial-tracker-mvp.md → docs/operations/beta-release-runbook.md
- `Carry-Over Budget Reserves` --references--> `Savings Envelope`  [EXTRACTED]
  docs/adr/0002-journal-and-budget-reserves.md → CONTEXT.md

## Import Cycles
- None detected.

## Hyperedges (group relationships)
- **Auditable Financial Model** — context_operation, context_posting, docs_adr_0002_journal_and_budget_reserves_derived_balances, docs_adr_0002_journal_and_budget_reserves_plan_funding_separation, docs_adr_0002_journal_and_budget_reserves_closure_snapshots [EXTRACTED 1.00]
- **Financial Space Tenancy Boundary** — context_financial_space, context_membership, docs_adr_0001_financial_space_ownership_and_rls_defense_in_depth_authorization, docs_adr_0001_financial_space_ownership_and_rls_transaction_local_rls, docs_adr_0001_financial_space_ownership_and_rls_cross_space_integrity [EXTRACTED 1.00]
- **Safe Statement Import Flow** — context_statement_import, context_parse_run, context_source_record, docs_adr_0003_versioned_statement_imports_immutable_statement_document, docs_adr_0003_versioned_statement_imports_conservative_deduplication, docs_adr_0003_versioned_statement_imports_atomic_confirm_revert [EXTRACTED 1.00]

## Communities (69 total, 15 thin omitted)

### Community 0 - "identity/service.py"
Cohesion: 0.07
Nodes (58): current_context(), current_session(), alias, Context, CurrentSession, Db, Header, User (+50 more)

### Community 1 - "budgeting/router.py"
Cohesion: 0.20
Nodes (34): AssignmentItem, assignments(), AssignmentsBody, categories(), CategoryBody, CategoryFundingBody, close(), close_frontend() (+26 more)

### Community 2 - "Base"
Cohesion: 0.07
Nodes (67): downgrade(), upgrade(), balances(), cash_flow(), category_spend(), date, UUID, AuditEvent (+59 more)

### Community 3 - "set_space_context"
Cohesion: 0.06
Nodes (52): balances(), cash_flow(), category_spend(), plan_fact(), Context, date, Db, get (+44 more)

### Community 4 - "imports/service.py"
Cohesion: 0.06
Nodes (92): datetime, utcnow(), not_found(), normalize_description(), date, record_fingerprint(), magic_kind(), BlobStore (+84 more)

### Community 5 - "alfa_xlsx.py"
Cohesion: 0.17
Nodes (24): AlfaDebitXlsxAdapter, _AlfaHeaderMeta, AlfaXlsxAdapterBase, _cell_str(), _debit_find_header(), _debit_header_metadata(), _debit_header_value(), _debit_norm() (+16 more)

### Community 6 - "index.ts"
Cohesion: 0.26
Nodes (8): Locale, LangSwitcher(), createI18n(), detectLocale(), i18n, LOCALES, setLocale(), storedLocale()

### Community 7 - "types.ts"
Cohesion: 0.06
Nodes (47): api, Account, AccountStatus, BalanceItem, BalancesReport, BudgetBlocker, BudgetCategory, BudgetStatus (+39 more)

### Community 8 - "router.tsx"
Cohesion: 0.10
Nodes (33): AcceptInvitePayload, LoginPayload, PasswordResetPayload, AcceptInvitePage, BudgetPage, ImportDetailPage, LoginPage, OperationsPage (+25 more)

### Community 9 - "ledger/router.py"
Cohesion: 0.15
Nodes (31): account_json(), AccountBody, accounts(), archive_account(), create_account(), create_operation(), delete_account(), operation_json() (+23 more)

### Community 11 - "compilerOptions"
Cohesion: 0.07
Nodes (28): compilerOptions, baseUrl, esModuleInterop, forceConsistentCasingInFileNames, isolatedModules, jsx, lib, module (+20 more)

### Community 12 - "AnalyticsPage.tsx"
Cohesion: 0.12
Nodes (19): AnalyticsPage, CashFlowColumn, ColumnChart(), ColumnChartProps, BarRow, HorizontalBars(), HorizontalBarsProps, PlanFactBars() (+11 more)

### Community 14 - "devDependencies"
Cohesion: 0.10
Nodes (21): eslint, @eslint/js, eslint-plugin-jsx-a11y, devDependencies, eslint, @eslint/js, eslint-plugin-jsx-a11y, globals (+13 more)

### Community 15 - "Session"
Cohesion: 0.07
Nodes (122): plan_fact(), Any, record(), BudgetPeriod, Calendar month budget period in the space timezone (month granularity)., add_expected_income(), archive_category(), _balance_until() (+114 more)

### Community 16 - "dependencies"
Cohesion: 0.09
Nodes (23): @fontsource/funnel-sans, @fontsource/geist-mono, dependencies, @fontsource/funnel-sans, @fontsource/geist-mono, @hookform/resolvers, i18next, react (+15 more)

### Community 17 - "ImportDetailPage.tsx"
Cohesion: 0.20
Nodes (18): Button(), ConfirmDialog(), ConfirmDialogProps, Modal(), ModalProps, useToast(), useConfirmImport(), useImport() (+10 more)

### Community 18 - "OperationsPage.tsx"
Cohesion: 0.11
Nodes (30): Operation, OperationKind, OperationStatus, ImportsPage, Badge(), BadgeTone, EmptyState(), EmptyStateProps (+22 more)

### Community 19 - "SettingsPage.tsx"
Cohesion: 0.16
Nodes (16): invalidationRoots, queryKeys, SESSION_ROOT, sessionInvalidationRoot, SPACE_ROOT, spaceInvalidationRoot, OperationFilters, useCancelDeletion() (+8 more)

### Community 20 - "Toaster.tsx"
Cohesion: 0.18
Nodes (10): App(), queryClient, AppRoutes(), ToastApi, ToastContext, ToastItem, ToastKind, ToastProvider() (+2 more)

### Community 21 - "test_adapter_contracts.py"
Cohesion: 0.11
Nodes (26): AlfaCreditXlsxAdapter, account_fingerprint(), amount_to_kopecks(), _mask_digits(), money_to_kopecks(), Parse statement money strings like '-1 234,56 RUR', '+ 500.00 ₽', '12 345'.…, SourceRow, StatementDraft (+18 more)

### Community 22 - "BudgetPage.tsx"
Cohesion: 0.17
Nodes (20): NotFoundPage, OverviewPage, PageHeader(), PageHeaderProps, useBudgetCategories(), useBudgetErrorToaster(), useBudgetSummary(), useCloseMonth() (+12 more)

### Community 23 - "client.ts"
Cohesion: 0.23
Nodes (10): apiClient, ApiError, buildUrl(), ErrorEnvelope, parseErrorEnvelope(), QueryValue, readCsrfToken(), request() (+2 more)

### Community 24 - "AccountsPage.tsx"
Cohesion: 0.13
Nodes (21): AccountType, CreateAccountPayload, AccountsPage, FieldChrome, InputProps, MoneyField(), MoneyFieldProps, SelectField() (+13 more)

### Community 25 - "Docker Compose Development Stack"
Cohesion: 0.29
Nodes (8): Commodity Infrastructure Services, Docker Compose Development Stack, Internal Backend Network, Same-Origin Frontend Service, Worker Parsing Isolation, Finance Infrastructure, Same-Origin Reverse Proxy, Backend and Frontend Workstream Contracts

### Community 26 - "Financial Space"
Cohesion: 0.17
Nodes (12): Credit Reserve, Financial Account, Financial Space, Membership, User, Carry-Over Budget Reserves, Provider-Neutral Data Boundary, Russian Federation Data Residency (+4 more)

### Community 27 - "scripts"
Cohesion: 0.22
Nodes (9): scripts, api:generate, build, dev, lint, preview, test, test:watch (+1 more)

### Community 29 - "General Pool"
Cohesion: 0.29
Nodes (8): Budget Period, Funding, General Pool, Monthly Category, Plan Assignment, Savings Envelope, Immutable Closure Snapshots, Plan and Funding Separation

### Community 30 - "TestBaseContract"
Cohesion: 0.12
Nodes (7): Protocol, StatementAdapter, detect_adapter(), make_draft(), make_source_row(), TestBaseContract, Workbook

### Community 31 - "Per-File Envelope Encryption"
Cohesion: 0.29
Nodes (7): Immutable Statement Document, Per-File Envelope Encryption, Backup and Restore Runbook, Mandatory KEK Backup, Quarterly Restore Drill, Disaster Restore Procedure, Post-Restore Deletion Replay

### Community 32 - "Operation"
Cohesion: 0.47
Nodes (6): Internal Transfer, Operation, Posting, Refund, Derived Account Balances, Operations and Postings Journal

### Community 33 - "Versioned Statement Imports"
Cohesion: 0.20
Nodes (11): Parse Run, Source Record, Statement Import, Atomic Import Confirm and Revert, Conservative Deduplication, Parser Versioning and Review Diff, Versioned Statement Imports, Layout Drift Re-Gating (+3 more)

### Community 34 - "Finance Frontend SPA"
Cohesion: 0.29
Nodes (7): Server-Side Secret Boundary, Grossbukh Application Shell, Accessible Responsive UI, Finance Frontend SPA, RU and EN Localization, Space-Scoped Query Keys, Typed Same-Origin API Client

### Community 35 - "Closed Beta Launch Gates"
Cohesion: 0.20
Nodes (11): Crypto-Shredded Deletion, Closed Beta Release Runbook, Forward-Fix Rollback Policy, Financial Data Incident Response, Closed Beta Launch Gates, Production Launch Sequence, Thirty-Day Space Deletion, Durable Deletion Ledger (+3 more)

### Community 36 - "package.json"
Cohesion: 0.40
Nodes (4): name, private, type, version

### Community 37 - "Financial Tracker MVP"
Cohesion: 0.18
Nodes (11): Audited Break-Glass Access, Cross-Space Referential Integrity, Defense-in-Depth Authorization, Financial Space Ownership, Transaction-Local RLS Context, Budget Invariants, Critical User Path, Financial Tracker MVP (+3 more)

### Community 38 - "TestRocketbankDebitContract"
Cohesion: 0.24
Nodes (3): same_page_rocket_lines(), synthetic_rocket_lines(), TestRocketbankDebitContract

### Community 39 - "generate-api.mjs"
Cohesion: 0.40
Nodes (5): firstReadable(), LOCAL_CANDIDATES, main(), OUT_DIR, REMOTE_CANDIDATES

### Community 40 - "schema.d.ts"
Cohesion: 0.33
Nodes (5): components, $defs, operations, paths, webhooks

### Community 41 - "test_api.py"
Cohesion: 0.67
Nodes (3): TestClient, test_invite_login_and_authenticated_space(), test_openapi_contains_critical_paths()

### Community 44 - "TestAlfaDebitContract"
Cohesion: 0.08
Nodes (23): Any, Reconcile parsed rows against declared bank controls with stable diagnostics.…, _reconciliation_summary(), alfa_workbook_bytes(), synthetic_alfa_rows(), TestAlfaDebitContract, _check(), _fail() (+15 more)

### Community 47 - "graphify"
Cohesion: 0.17
Nodes (11): command, enabled, timeout, type, mcp, graphify, plugin, $schema (+3 more)

### Community 62 - "LocalDirectoryBlobStore"
Cohesion: 0.39
Nodes (3): LocalDirectoryBlobStore, Path, S3-neutral local store; production swaps in an S3-compatible client.

### Community 63 - "TestOzonDebitContract"
Cohesion: 0.16
Nodes (6): minimal_pdf(), ozon_extracted(), _QuotaSettings, Build a small valid single-font PDF with empty or ASCII-only pages., TestOzonDebitContract, MonkeyPatch

### Community 64 - "Gitea CI and real statement imports"
Cohesion: 0.29
Nodes (6): Confirmed decisions, Gitea CI and real statement imports, Goal and constraints, Implementation plan, Principal risks, Validation and rollout

### Community 65 - "20260918_0002_hold_lifecycle.py"
Cohesion: 0.80
Nodes (4): downgrade(), _has_check_constraint(), _has_column(), upgrade()

### Community 73 - "AppError"
Cohesion: 0.21
Nodes (11): AppError, Domain error rendered as a machine-readable JSON error payload., unprocessable(), decrypt_file(), encrypt_file(), EncryptedFile, Per-file random DEK; DEK wrapped with the KEK from the secret manager., Crypto-shred hook: deleting wrapped DEK rows in DB plus blobs removes access. (+3 more)

### Community 76 - "get_settings"
Cohesion: 0.12
Nodes (30): get_settings(), Settings, send_token_email(), accept_invite(), AcceptInviteBody, confirm_password_reset(), create_invite(), InviteBody (+22 more)

## Knowledge Gaps
- **190 isolated node(s):** `$schema`, `file:///home/k1nq/repos/finance/.kilo/plugins/graphify.js`, `type`, `/home/k1nq/.local/bin/graphify-mcp`, `/home/k1nq/repos/finance/graphify-out/graph.json` (+185 more)
  These have ≤1 connection - possible missing edges or undocumented components. (Counts symbols only; 343 node(s) total have ≤1 connection when file, concept and rationale nodes are included.)
- **15 thin communities (<3 nodes) omitted from report** — run `graphify query` to explore isolated nodes.

## Suggested Questions
_Questions this graph is uniquely positioned to answer:_

- **Why does `Session` connect `Session` to `identity/service.py`, `Base`, `set_space_context`, `imports/service.py`?**
  _High betweenness centrality (0.082) - this node is a cross-community bridge._
- **Why does `AppError` connect `AppError` to `identity/service.py`, `set_space_context`, `imports/service.py`, `alfa_xlsx.py`, `TestRocketbankDebitContract`, `get_settings`, `Session`, `test_adapter_contracts.py`, `TestOzonDebitContract`?**
  _High betweenness centrality (0.068) - this node is a cross-community bridge._
- **Why does `bad_request()` connect `Session` to `identity/service.py`, `budgeting/router.py`, `imports/service.py`, `AppError`, `ledger/router.py`?**
  _High betweenness centrality (0.017) - this node is a cross-community bridge._
- **Are the 2 inferred relationships involving `Session` (e.g. with `UTCDateTime` and `test_postgres_rls_requires_matching_transaction_context()`) actually correct?**
  _`Session` has 2 INFERRED edges - model-reasoned connections that need verification._
- **Are the 24 inferred relationships involving `AppError` (e.g. with `request_export()` and `login()`) actually correct?**
  _`AppError` has 24 INFERRED edges - model-reasoned connections that need verification._
- **Are the 3 inferred relationships involving `Base` (e.g. with `downgrade()` and `upgrade()`) actually correct?**
  _`Base` has 3 INFERRED edges - model-reasoned connections that need verification._
- **What connects `$schema`, `file:///home/k1nq/repos/finance/.kilo/plugins/graphify.js`, `type` to the rest of the system?**
  _190 weakly-connected nodes found - possible documentation gaps or missing edges._