gitnexus 1.6.11-rc.6 → 1.6.11-rc.7

package/dist/_shared/impact-risk.d.ts

@@ -1,6 +1,6 @@
 export type ImpactRisk = 'LOW' | 'MEDIUM' | 'HIGH' | 'CRITICAL' | 'UNKNOWN';
 export type ImpactRiskAxis = 'processes' | 'modules';
-export type UnusedImpactRiskReason = 'file-nodes-have-no-process-or-community-membership' | 'enrichment-skipped' | 'enrichment-budget-exhausted' | 'enrichment-query-failed';
+export type UnusedImpactRiskReason = 'file-nodes-have-no-process-or-community-membership' | 'enrichment-skipped' | 'enrichment-budget-exhausted' | 'enrichment-truncated' | 'enrichment-query-failed';
 export interface UnusedImpactRiskAxis {
     axis: ImpactRiskAxis;
     reason: UnusedImpactRiskReason;
@@ -29,7 +29,9 @@ export declare function unusedAxesForImpactWalk(input: {
     processQueryFailed: boolean;
     moduleQueryFailed: boolean;
     /** When 0, a zero chunk budget is not an unused-axis event — there was nothing to enrich. */
-    impactedCount?: number;
+    impactedCount: number;
+    /** True when process/module queries ran on a strict subset of impacted symbols. */
+    enrichmentTruncated?: boolean;
 }): UnusedImpactRiskAxis[];
 export declare function scoreImpactRisk(input: ImpactRiskInput): ImpactRiskResult;
 //# sourceMappingURL=impact-risk.d.ts.map

package/dist/_shared/impact-risk.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"impact-risk.d.ts","sourceRoot":"","sources":["../src/impact-risk.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,UAAU,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,GAAG,SAAS,CAAC;AAE5E,MAAM,MAAM,cAAc,GAAG,WAAW,GAAG,SAAS,CAAC;AAErD,MAAM,MAAM,sBAAsB,GAC9B,oDAAoD,GACpD,oBAAoB,GACpB,6BAA6B,GAC7B,yBAAyB,CAAC;AAE9B,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,cAAc,CAAC;IACrB,MAAM,EAAE,sBAAsB,CAAC;CAChC;AAED,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,UAAU,GAAG,YAAY,CAAC;IACrC,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,SAAS,oBAAoB,EAAE,CAAC;CAC9C;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,UAAU,CAAC;IACjB,cAAc,EAAE,UAAU,CAAC;IAC3B,SAAS,EAAE;QACT,qBAAqB,EAAE,OAAO,CAAC;QAC/B,UAAU,EAAE,SAAS,oBAAoB,EAAE,CAAC;KAC7C,CAAC;CACH;AA0CD,iGAAiG;AACjG,wBAAgB,uBAAuB,CAAC,KAAK,EAAE;IAC7C,YAAY,EAAE,OAAO,CAAC;IACtB,cAAc,EAAE,OAAO,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,kBAAkB,EAAE,OAAO,CAAC;IAC5B,iBAAiB,EAAE,OAAO,CAAC;IAC3B,6FAA6F;IAC7F,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,GAAG,oBAAoB,EAAE,CAiCzB;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,eAAe,GAAG,gBAAgB,CAWxE"}
+{"version":3,"file":"impact-risk.d.ts","sourceRoot":"","sources":["../src/impact-risk.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,UAAU,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,GAAG,SAAS,CAAC;AAE5E,MAAM,MAAM,cAAc,GAAG,WAAW,GAAG,SAAS,CAAC;AAErD,MAAM,MAAM,sBAAsB,GAC9B,oDAAoD,GACpD,oBAAoB,GACpB,6BAA6B,GAC7B,sBAAsB,GACtB,yBAAyB,CAAC;AAE9B,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,cAAc,CAAC;IACrB,MAAM,EAAE,sBAAsB,CAAC;CAChC;AAED,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,UAAU,GAAG,YAAY,CAAC;IACrC,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,SAAS,oBAAoB,EAAE,CAAC;CAC9C;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,UAAU,CAAC;IACjB,cAAc,EAAE,UAAU,CAAC;IAC3B,SAAS,EAAE;QACT,qBAAqB,EAAE,OAAO,CAAC;QAC/B,UAAU,EAAE,SAAS,oBAAoB,EAAE,CAAC;KAC7C,CAAC;CACH;AAwDD,iGAAiG;AACjG,wBAAgB,uBAAuB,CAAC,KAAK,EAAE;IAC7C,YAAY,EAAE,OAAO,CAAC;IACtB,cAAc,EAAE,OAAO,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,kBAAkB,EAAE,OAAO,CAAC;IAC5B,iBAAiB,EAAE,OAAO,CAAC;IAC3B,6FAA6F;IAC7F,aAAa,EAAE,MAAM,CAAC;IACtB,mFAAmF;IACnF,mBAAmB,CAAC,EAAE,OAAO,CAAC;CAC/B,GAAG,oBAAoB,EAAE,CAqBzB;AAOD,wBAAgB,eAAe,CAAC,KAAK,EAAE,eAAe,GAAG,gBAAgB,CAuBxE"}

package/dist/_shared/impact-risk.js

@@ -12,10 +12,23 @@ function score(input) {
         return 'MEDIUM';
     return 'LOW';
 }
-function countsWithUnusedAxesZeroed(input) {
+const UNMEASURED_REASONS = new Set([
+    'file-nodes-have-no-process-or-community-membership',
+    'enrichment-skipped',
+    'enrichment-budget-exhausted',
+]);
+function unusedPair(reason) {
+    return [
+        { axis: 'processes', reason },
+        { axis: 'modules', reason },
+    ];
+}
+function countsWithUnmeasuredAxesZeroed(input) {
     let processCount = input.processCount;
     let moduleCount = input.moduleCount;
     for (const unused of input.unusedAxes ?? []) {
+        if (!UNMEASURED_REASONS.has(unused.reason))
+            continue;
         if (unused.axis === 'processes')
             processCount = 0;
         if (unused.axis === 'modules')
@@ -32,30 +45,18 @@ function countsWithUnusedAxesZeroed(input) {
 /** Map walk outcomes to unused process/module axes so comparability matches what was sampled. */
 export function unusedAxesForImpactWalk(input) {
     if (input.isFileTarget) {
-        return [
-            {
-                axis: 'processes',
-                reason: 'file-nodes-have-no-process-or-community-membership',
-            },
-            {
-                axis: 'modules',
-                reason: 'file-nodes-have-no-process-or-community-membership',
-            },
-        ];
+        return unusedPair('file-nodes-have-no-process-or-community-membership');
     }
     if (input.skipEnrichment) {
-        return [
-            { axis: 'processes', reason: 'enrichment-skipped' },
-            { axis: 'modules', reason: 'enrichment-skipped' },
-        ];
+        return unusedPair('enrichment-skipped');
     }
-    if (input.maxChunks === 0 && (input.impactedCount ?? 1) > 0) {
-        return [
-            { axis: 'processes', reason: 'enrichment-budget-exhausted' },
-            { axis: 'modules', reason: 'enrichment-budget-exhausted' },
-        ];
+    if (input.maxChunks === 0 && input.impactedCount > 0) {
+        return unusedPair('enrichment-budget-exhausted');
     }
     const unused = [];
+    if (input.enrichmentTruncated) {
+        unused.push(...unusedPair('enrichment-truncated'));
+    }
     if (input.processQueryFailed) {
         unused.push({ axis: 'processes', reason: 'enrichment-query-failed' });
     }
@@ -64,10 +65,23 @@ export function unusedAxesForImpactWalk(input) {
     }
     return unused;
 }
+const INCOMPLETE_SAMPLE_REASONS = new Set([
+    'enrichment-query-failed',
+    'enrichment-truncated',
+]);
 export function scoreImpactRisk(input) {
     const unusedAxes = input.unusedAxes ?? [];
+    const observedRisk = score(countsWithUnmeasuredAxesZeroed(input));
+    const incompleteSample = unusedAxes.some((unused) => INCOMPLETE_SAMPLE_REASONS.has(unused.reason));
+    // Failed queries and truncated samples make observed process/module counts
+    // lower bounds. Preserve any HIGH/CRITICAL warning already proved by those
+    // counts, but never emit a confident LOW/MEDIUM edit gate from an incomplete
+    // enrichment pass.
+    const risk = incompleteSample && (observedRisk === 'LOW' || observedRisk === 'MEDIUM')
+        ? 'UNKNOWN'
+        : observedRisk;
     return {
-        risk: score(countsWithUnusedAxesZeroed(input)),
+        risk,
         riskSharedAxes: score({ ...input, processCount: 0, moduleCount: 0 }),
         riskScale: {
             comparableAcrossKinds: unusedAxes.length === 0,

package/dist/_shared/impact-risk.js.map

@@ -1 +1 @@
-{"version":3,"file":"impact-risk.js","sourceRoot":"","sources":["../src/impact-risk.ts"],"names":[],"mappings":"AAiCA,SAAS,KAAK,CACZ,KAGC;IAED,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,GAAG,KAAK,CAAC;IAEnF,IAAI,SAAS,KAAK,UAAU,IAAI,aAAa,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACtE,IAAI,WAAW,IAAI,EAAE,IAAI,YAAY,IAAI,CAAC,IAAI,WAAW,IAAI,CAAC,IAAI,aAAa,IAAI,GAAG,EAAE,CAAC;QACvF,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,IAAI,WAAW,IAAI,EAAE,IAAI,YAAY,IAAI,CAAC,IAAI,WAAW,IAAI,CAAC,IAAI,aAAa,IAAI,GAAG,EAAE,CAAC;QACvF,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,IAAI,WAAW,IAAI,CAAC,IAAI,aAAa,IAAI,EAAE;QAAE,OAAO,QAAQ,CAAC;IAC7D,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,0BAA0B,CACjC,KAAsB;IAKtB,IAAI,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC;IACtC,IAAI,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;IACpC,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC;QAC5C,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW;YAAE,YAAY,GAAG,CAAC,CAAC;QAClD,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;YAAE,WAAW,GAAG,CAAC,CAAC;IACjD,CAAC;IACD,OAAO;QACL,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,YAAY;QACZ,WAAW;QACX,aAAa,EAAE,KAAK,CAAC,aAAa;KACnC,CAAC;AACJ,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,uBAAuB,CAAC,KAQvC;IACC,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;QACvB,OAAO;YACL;gBACE,IAAI,EAAE,WAAW;gBACjB,MAAM,EAAE,oDAAoD;aAC7D;YACD;gBACE,IAAI,EAAE,SAAS;gBACf,MAAM,EAAE,oDAAoD;aAC7D;SACF,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC;QACzB,OAAO;YACL,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,oBAAoB,EAAE;YACnD,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,oBAAoB,EAAE;SAClD,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,SAAS,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5D,OAAO;YACL,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,6BAA6B,EAAE;YAC5D,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,6BAA6B,EAAE;SAC3D,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,IAAI,KAAK,CAAC,kBAAkB,EAAE,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;QAC5B,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAsB;IACpD,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC;IAE1C,OAAO;QACL,IAAI,EAAE,KAAK,CAAC,0BAA0B,CAAC,KAAK,CAAC,CAAC;QAC9C,cAAc,EAAE,KAAK,CAAC,EAAE,GAAG,KAAK,EAAE,YAAY,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC;QACpE,SAAS,EAAE;YACT,qBAAqB,EAAE,UAAU,CAAC,MAAM,KAAK,CAAC;YAC9C,UAAU;SACX;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"impact-risk.js","sourceRoot":"","sources":["../src/impact-risk.ts"],"names":[],"mappings":"AAkCA,SAAS,KAAK,CACZ,KAGC;IAED,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,GAAG,KAAK,CAAC;IAEnF,IAAI,SAAS,KAAK,UAAU,IAAI,aAAa,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACtE,IAAI,WAAW,IAAI,EAAE,IAAI,YAAY,IAAI,CAAC,IAAI,WAAW,IAAI,CAAC,IAAI,aAAa,IAAI,GAAG,EAAE,CAAC;QACvF,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,IAAI,WAAW,IAAI,EAAE,IAAI,YAAY,IAAI,CAAC,IAAI,WAAW,IAAI,CAAC,IAAI,aAAa,IAAI,GAAG,EAAE,CAAC;QACvF,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,IAAI,WAAW,IAAI,CAAC,IAAI,aAAa,IAAI,EAAE;QAAE,OAAO,QAAQ,CAAC;IAC7D,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,kBAAkB,GAAwC,IAAI,GAAG,CAAC;IACtE,oDAAoD;IACpD,oBAAoB;IACpB,6BAA6B;CAC9B,CAAC,CAAC;AAEH,SAAS,UAAU,CAAC,MAA8B;IAChD,OAAO;QACL,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE;QAC7B,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE;KAC5B,CAAC;AACJ,CAAC;AAED,SAAS,8BAA8B,CACrC,KAAsB;IAKtB,IAAI,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC;IACtC,IAAI,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;IACpC,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC;QAC5C,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC;YAAE,SAAS;QACrD,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW;YAAE,YAAY,GAAG,CAAC,CAAC;QAClD,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;YAAE,WAAW,GAAG,CAAC,CAAC;IACjD,CAAC;IACD,OAAO;QACL,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,YAAY;QACZ,WAAW;QACX,aAAa,EAAE,KAAK,CAAC,aAAa;KACnC,CAAC;AACJ,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,uBAAuB,CAAC,KAUvC;IACC,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;QACvB,OAAO,UAAU,CAAC,oDAAoD,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC;QACzB,OAAO,UAAU,CAAC,oBAAoB,CAAC,CAAC;IAC1C,CAAC;IACD,IAAI,KAAK,CAAC,SAAS,KAAK,CAAC,IAAI,KAAK,CAAC,aAAa,GAAG,CAAC,EAAE,CAAC;QACrD,OAAO,UAAU,CAAC,6BAA6B,CAAC,CAAC;IACnD,CAAC;IACD,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,IAAI,KAAK,CAAC,mBAAmB,EAAE,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,sBAAsB,CAAC,CAAC,CAAC;IACrD,CAAC;IACD,IAAI,KAAK,CAAC,kBAAkB,EAAE,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;QAC5B,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,yBAAyB,GAAwC,IAAI,GAAG,CAAC;IAC7E,yBAAyB;IACzB,sBAAsB;CACvB,CAAC,CAAC;AAEH,MAAM,UAAU,eAAe,CAAC,KAAsB;IACpD,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC;IAC1C,MAAM,YAAY,GAAG,KAAK,CAAC,8BAA8B,CAAC,KAAK,CAAC,CAAC,CAAC;IAClE,MAAM,gBAAgB,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAClD,yBAAyB,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAC7C,CAAC;IACF,2EAA2E;IAC3E,2EAA2E;IAC3E,6EAA6E;IAC7E,mBAAmB;IACnB,MAAM,IAAI,GACR,gBAAgB,IAAI,CAAC,YAAY,KAAK,KAAK,IAAI,YAAY,KAAK,QAAQ,CAAC;QACvE,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,YAAY,CAAC;IAEnB,OAAO;QACL,IAAI;QACJ,cAAc,EAAE,KAAK,CAAC,EAAE,GAAG,KAAK,EAAE,YAAY,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC;QACpE,SAAS,EAAE;YACT,qBAAqB,EAAE,UAAU,CAAC,MAAM,KAAK,CAAC;YAC9C,UAAU;SACX;KACF,CAAC;AACJ,CAAC"}

package/dist/cli/ai-context.js

@@ -139,14 +139,14 @@ This project is indexed by GitNexus as **${projectName}**${noStats ? '' : ` (${s
 
 ## Always Do
 
-- **MUST run impact analysis before editing.** Use \`impact({target: "symbolName", direction: "upstream"})\` (MCP) or \`${runner} impact "symbolName" --direction upstream --repo .\` (CLI fallback); report callers, processes, and risk. Never substitute grep for graph analysis.${hasPdg
+- **MUST run impact before editing.** Use \`impact({target: "symbolName", direction: "upstream"})\` or \`${runner} impact "symbolName" --direction upstream --repo .\`; report callers, processes, and risk. Never substitute grep for graph analysis.${hasPdg
         ? ` For unified PDG impact, add \`mode: "pdg"\` with optional \`line: <N>\` — it returns statement-level \`affectedStatements\` over CDG + REACHING_DEF and inter-procedural symbols in \`interproceduralByDepth\`/\`byDepth\`; no-layer/degraded PDG results are UNKNOWN-risk notes (\`--pdg\` layer). CLI equivalent: \`${runner} impact "symbolName" --direction upstream --mode pdg --line <N> --repo .\`.`
         : ''}
 - **MUST analyze graph changes before committing.** Use \`detect_changes({scope: "all"})\` (MCP) or \`${runner} detect-changes --scope all --repo .\` (CLI fallback). \`partial: true\` or \`truncated: true\` is not a clean check — a zero means unseen, not unaffected; re-run it. For regression review: \`detect_changes({scope: "compare", base_ref: ${JSON.stringify(markdownSafeBranch(defaultBranch))}})\` or \`${runner} detect-changes --scope compare --base-ref ${JSON.stringify(markdownSafeBranch(defaultBranch))} --repo .\`.
-- **MUST warn the user** if impact analysis returns HIGH or CRITICAL risk before proceeding with edits.
+- MUST warn on HIGH/CRITICAL \`risk\` pre-edit; never use \`riskSharedAxes\` to waive a HIGH/CRITICAL \`risk\` warning. Compare File/symbol: MCP File omits axes; Graph-RAG expands File.
 - **MUST treat \`risk: UNKNOWN\` as unresolved, not as low.** An empty caller set is not evidence the symbol is unused — it can also mean the callers are not resolvable by the index (plain-object property access, dynamic dispatch, cross-language calls). \`impact\` pairs \`UNKNOWN\` with a \`riskNote\` saying so. Confirm with a text search before treating the symbol as safe to change or delete; do not proceed on the strength of a zero.
-- When exploring unfamiliar code, use \`query({search_query: "concept"})\` to find execution flows instead of grepping. It returns process-grouped results ranked by relevance.
-- When you need full context on a specific symbol — callers, callees, which execution flows it participates in — use \`context({name: "symbolName"})\`.
+- Explore with \`query({search_query: "concept"})\` for process-grouped flows.
+- Use \`context({name: "symbolName"})\` for callers, callees, and flows.
 - For security review, \`explain({target: "fileOrSymbol"})\` lists taint findings (source→sink flows; needs \`analyze --pdg\`).${hasPdg
         ? `\n- For control/data dependence, \`pdg_query({mode: "controls", target: "fileOrSymbol"})\` answers "under what condition does X run?" (CDG, incl. guard clauses) and \`pdg_query({mode: "flows", target, variable})\` traces "where does variable Y flow?" (REACHING_DEF). \`--pdg\` layer.`
         : ''}

package/dist/cli/eval-server.js

@@ -240,6 +240,17 @@ function formatTruncationSuffix(result) {
             : '';
     return label ? ` (by ${label})` : '';
 }
+function pushCallgraphRiskLines(lines, result) {
+    if (result.risk) {
+        lines.push(`Risk: ${result.risk}`);
+    }
+    if (result.riskNote) {
+        lines.push(String(result.riskNote));
+    }
+    if (result.riskScale?.comparableAcrossKinds === false && result.riskSharedAxes) {
+        lines.push(`Shared-axes risk: ${result.riskSharedAxes} (process/module axes are unavailable — compare File vs symbol only; do not use this to waive a HIGH/CRITICAL risk warning)`);
+    }
+}
 export function formatImpactResult(result) {
     if (result.error) {
         const suggestion = result.suggestion ? `\nSuggestion: ${result.suggestion}` : '';
@@ -467,15 +478,20 @@ export function formatImpactResult(result) {
         // #1858 — "isolated" is a confident claim. If an interface / indirection
         // boundary is on the path, the true count is a lower bound, not zero;
         // callers binding via DI / dynamic dispatch were not traced. Say so instead.
+        const lines = [];
         if (result.epistemic === 'lower-bound') {
-            const lines = [
-                `${target?.name || '?'}: no direct ${direction} dependencies traced, but this is a LOWER BOUND — unresolved indirection on the path (actual impact may be higher):`,
-            ];
+            lines.push(`${target?.name || '?'}: no direct ${direction} dependencies traced, but this is a LOWER BOUND — unresolved indirection on the path (actual impact may be higher):`);
             for (const b of result.boundaries || [])
                 lines.push(`    • ${b}`);
-            return lines.join('\n');
         }
-        return `${target?.name || '?'}: No ${direction} dependencies found. This symbol appears isolated.`;
+        else if (direction === 'upstream') {
+            lines.push(`${target?.name || '?'}: No ${direction} callers resolved. This is not evidence the symbol is unused or isolated.`);
+        }
+        else {
+            lines.push(`${target?.name || '?'}: No ${direction} dependencies found.`);
+        }
+        pushCallgraphRiskLines(lines, result);
+        return lines.join('\n');
     }
     const lines = [];
     const dirLabel = direction === 'upstream' ? 'depends on this (will break if changed)' : 'this depends on';
@@ -490,6 +506,7 @@ export function formatImpactResult(result) {
         for (const b of result.boundaries || [])
             lines.push(`    • ${b}`);
     }
+    pushCallgraphRiskLines(lines, result);
     lines.push('');
     const depthLabels = {
         1: 'WILL BREAK (direct)',

package/dist/core/group/cross-impact.d.ts

@@ -2,6 +2,7 @@
  * Cross-repo impact (Phase 1 local walk + Phase 2 bridge fan-out).
  * All bridge Cypher for this feature lives in this module.
  */
+import type { ImpactRisk } from '../../_shared/index.js';
 import type { BridgeHandle, BridgeMeta, CrossRepoImpact, GroupImpactResult } from './types.js';
 import type { GroupToolPort } from './service.js';
 export { truncationFields, crossRepoCompleteness, type TruncationFields, type CrossRepoCompleteness, type CrossRepoCompletenessInput, } from './completeness.js';
@@ -109,7 +110,7 @@ export declare function collectImpactSymbolUids(local: unknown, servicePrefix: s
     uids: string[];
     targetFilePath?: string;
 };
-export declare function mergeRisk(localRisk: string, cross: CrossRepoImpact[]): string;
+export declare function mergeRisk(localRisk: ImpactRisk, cross: CrossRepoImpact[]): ImpactRisk;
 /**
  * Is this bridge's metadata unable to say where its contents came from?
  *

package/dist/core/group/cross-impact.js

@@ -279,6 +279,15 @@ function extractProcessNames(impact) {
 // permanently that a PDG `risk:'UNKNOWN'` never coalesces to a confident `LOW`.
 // No behavior change — `'UNKNOWN'` was already handled correctly at the
 // `(localRisk === 'LOW' || localRisk === 'UNKNOWN')` branch below.
+function asImpactRisk(value, fallback = 'LOW') {
+    return value === 'LOW' ||
+        value === 'MEDIUM' ||
+        value === 'HIGH' ||
+        value === 'CRITICAL' ||
+        value === 'UNKNOWN'
+        ? value
+        : fallback;
+}
 export function mergeRisk(localRisk, cross) {
     const traversed = cross.filter((c) => c.fanout_status !== 'not_attempted');
     const highConf = traversed.some((c) => c.contract.confidence >= 0.85);
@@ -292,6 +301,15 @@ export function mergeRisk(localRisk, cross) {
         return 'MEDIUM';
     return localRisk;
 }
+function liftLocalRiskMeta(local, cross) {
+    const { riskSharedAxes, riskScale } = local;
+    return {
+        ...(riskSharedAxes !== undefined
+            ? { riskSharedAxes: mergeRisk(asImpactRisk(riskSharedAxes), cross) }
+            : {}),
+        ...(riskScale !== undefined ? { riskScale } : {}),
+    };
+}
 /**
  * Is this bridge's metadata unable to say where its contents came from?
  *
@@ -461,6 +479,7 @@ export async function runGroupImpact(deps, params) {
                 cross_repo_hits: 0,
             },
             risk: 'UNKNOWN',
+            ...liftLocalRiskMeta(local, []),
             timeoutMs,
             crossDepthWarning,
         };
@@ -513,7 +532,8 @@ export async function runGroupImpact(deps, params) {
                 modules_affected: s.modules_affected ?? 0,
                 cross_repo_hits: 0,
             },
-            risk: String(local.risk ?? 'LOW'),
+            risk: asImpactRisk(local.risk),
+            ...liftLocalRiskMeta(local, []),
             timeoutMs,
             crossDepthWarning,
         };
@@ -666,7 +686,7 @@ export async function runGroupImpact(deps, params) {
         await closeBridgeDb(handle);
     }
     const localSum = local?.summary || {};
-    const localRisk = String(local.risk ?? 'LOW');
+    const localRisk = asImpactRisk(local.risk);
     const localPartial = Boolean(local.partial);
     // The bridge's own incompleteness, in the shared vocabulary, read through
     // what this query DECLARED. The fan-out above already drops every neighbour
@@ -740,6 +760,7 @@ export async function runGroupImpact(deps, params) {
             cross_repo_hits: cross.length,
         },
         risk: mergeRisk(localRisk, cross),
+        ...liftLocalRiskMeta(local, cross),
         timeoutMs,
         crossDepthWarning,
     };

package/dist/core/group/types.d.ts

@@ -1,3 +1,4 @@
+import type { ImpactRisk, ImpactRiskResult } from '../../_shared/index.js';
 export type ContractType = 'http' | 'graphql' | 'grpc' | 'thrift' | 'topic' | 'lib' | 'custom' | 'include';
 export type ManifestContractType = Exclude<ContractType, 'graphql'>;
 export type MatchType = 'exact' | 'manifest' | 'wildcard';
@@ -166,7 +167,17 @@ export interface GroupImpactResult {
         modules_affected: number;
         cross_repo_hits: number;
     };
-    risk: string;
+    risk: ImpactRisk;
+    /**
+     * Two-axis (direct + total) risk from the local leg, then `mergeRisk` with
+     * crossings — compare File vs symbol here, not via top-level `risk`.
+     */
+    riskSharedAxes?: ImpactRisk;
+    /**
+     * Local-leg scale metadata (File / skipped enrichment). Crossings do not
+     * invent process/module membership for File nodes.
+     */
+    riskScale?: ImpactRiskResult['riskScale'];
     /**
      * `'lower-bound'` when the fan-out was cut short, so `risk` is a FLOOR, not a
      * verdict. Same vocabulary as single-repo `impact`'s `epistemic` field.

package/dist/mcp/local/local-backend.js

@@ -8,6 +8,7 @@
 import fs from 'fs/promises';
 import path from 'path';
 import { createHash } from 'crypto';
+import { scoreImpactRisk, unusedAxesForImpactWalk } from '../../_shared/index.js';
 import { initLbug, executeQuery, executeParameterized, ensureVectorExtension, closeLbug, isLbugReady, statDbIdentity, dbIdentityChanged, } from '../../core/lbug/pool-adapter.js';
 import { queryClassBeanMetadata } from './bean-metadata.js';
 import { querySpringAopMetadata } from './aop-metadata.js';
@@ -5230,6 +5231,10 @@ export class LocalBackend {
                     score: Number(c.score.toFixed(2)),
                     impactedCount: summary?.impactedCount ?? 0,
                     risk: summary?.risk ?? 'UNKNOWN',
+                    ...(summary?.riskSharedAxes !== undefined
+                        ? { riskSharedAxes: summary.riskSharedAxes }
+                        : {}),
+                    ...(summary?.riskScale !== undefined ? { riskScale: summary.riskScale } : {}),
                     direct: summary?.summary?.direct ?? 0,
                     ...(summary?.riskNote !== undefined ? { riskNote: summary.riskNote } : {}),
                     // Carry the explanation with the verdict. The single-symbol path
@@ -6122,6 +6127,10 @@ export class LocalBackend {
         const rawMaxChunks = process.env.IMPACT_MAX_CHUNKS?.trim();
         const parsedMaxChunks = rawMaxChunks ? Number(rawMaxChunks) : Number.NaN;
         const MAX_CHUNKS = Number.isInteger(parsedMaxChunks) && parsedMaxChunks >= 0 ? parsedMaxChunks : 10;
+        let processQueryFailed = false;
+        let moduleQueryFailed = false;
+        let enrichmentDegraded = false;
+        let moduleClassificationFailed = false;
         // `skipEnrichment` (ambiguous #2129 per-candidate probes) bypasses the
         // process/module aggregation passes entirely — those probes need only the
         // count + a count-based risk, so paying the bounded-but-real enrichment cost
@@ -6155,7 +6164,12 @@ export class LocalBackend {
                    p.entryPointId AS entryPointId, hits, minStep, p.stepCount AS stepCount,
                    ep.name AS epName, labels(ep)[0] AS epType, ep.filePath AS epFilePath
             ORDER BY pId
-          `, { ids }).catch(() => []);
+          `, { ids }).catch((err) => {
+                        processQueryFailed = true;
+                        enrichmentDegraded = true;
+                        logQueryError('impact:process-chunk', err);
+                        return [];
+                    });
                     for (const row of rows) {
                         const pId = row.pId ?? row[0];
                         const epId = row.entryPointId ?? row[3] ?? row.pId ?? row[0];
@@ -6203,6 +6217,8 @@ export class LocalBackend {
                     }
                 }
                 catch (e) {
+                    processQueryFailed = true;
+                    enrichmentDegraded = true;
                     logQueryError('impact:process-chunk', e);
                 }
             }
@@ -6217,7 +6233,11 @@ export class LocalBackend {
             MATCH (s)-[r:CodeRelation {type: 'STEP_IN_PROCESS'}]->(p:Process)
             WHERE p.id IN $pIds AND s.id IN $ids
             RETURN p.id AS pid, MIN(r.step) AS minStep
-          `, { pIds, ids: allImpactedIds }).catch(() => []);
+          `, { pIds, ids: allImpactedIds }).catch((err) => {
+                        enrichmentDegraded = true;
+                        logQueryError('impact:process-chunk-backfill', err);
+                        return [];
+                    });
                     for (const mr of missingRows) {
                         const pid = mr.pid ?? mr[0];
                         const minStep = mr.minStep ?? mr[1];
@@ -6233,6 +6253,7 @@ export class LocalBackend {
                     }
                 }
                 catch (e) {
+                    enrichmentDegraded = true;
                     logQueryError('impact:process-chunk-backfill', e);
                 }
             }
@@ -6280,7 +6301,12 @@ export class LocalBackend {
             RETURN c.heuristicLabel AS name, COUNT(DISTINCT s.id) AS hits
             ORDER BY hits DESC, name
             LIMIT 20
-          `, { ids: idsChunk }).catch(() => []);
+          `, { ids: idsChunk }).catch((err) => {
+                        moduleQueryFailed = true;
+                        enrichmentDegraded = true;
+                        logQueryError('impact:module-chunk', err);
+                        return [];
+                    });
                     for (const r of rows) {
                         const name = r.name ?? r[0] ?? null;
                         const hits = (r.hits ?? r[1]) || 0;
@@ -6290,6 +6316,8 @@ export class LocalBackend {
                     }
                 }
                 catch (e) {
+                    moduleQueryFailed = true;
+                    enrichmentDegraded = true;
                     logQueryError('impact:module-chunk', e);
                 }
             };
@@ -6310,7 +6338,12 @@ export class LocalBackend {
             MATCH (s)-[:CodeRelation {type: 'MEMBER_OF'}]->(c:Community)
             WHERE s.id IN $ids
             RETURN DISTINCT c.heuristicLabel AS name
-          `, { ids: idsChunk }).catch(() => []);
+          `, { ids: idsChunk }).catch((err) => {
+                        enrichmentDegraded = true;
+                        moduleClassificationFailed = true;
+                        logQueryError('impact:direct-module-chunk', err);
+                        return [];
+                    });
                     for (const r of rows) {
                         const name = r.name ?? r[0] ?? null;
                         if (name)
@@ -6318,6 +6351,8 @@ export class LocalBackend {
                     }
                 }
                 catch (e) {
+                    enrichmentDegraded = true;
+                    moduleClassificationFailed = true;
                     logQueryError('impact:direct-module-chunk', e);
                 }
             };
@@ -6338,47 +6373,35 @@ export class LocalBackend {
                 return {
                     name,
                     hits,
-                    impact: directModuleNameSet.has(name) ? 'direct' : 'indirect',
+                    impact: moduleClassificationFailed
+                        ? 'classification-unavailable'
+                        : directModuleNameSet.has(name)
+                            ? 'direct'
+                            : 'indirect',
                 };
             });
         }
         // Risk scoring
         const processCount = affectedProcesses.length;
         const moduleCount = affectedModules.length;
-        let risk;
-        if (direction === 'upstream' && impacted.length === 0) {
-            // An upstream walk that resolved NO callers cannot support `LOW`. "Safe
-            // to change" is a claim ABOUT callers, and this walk found none to reason
-            // about: the symbol may be genuinely unused, or reached only through a
-            // reference class this index does not record — a property access on a
-            // plain object, or a bare-identifier read of a module-scope `Const`,
-            // neither of which mints a reference site today. Seeding `LOW` from an
-            // empty result is the same false-safe signal `anyKnownRisk` refuses to
-            // emit on the ambiguous-candidate path, and that #2687 removed by making
-            // an undetermined `impactedCount` `null` instead of `0`.
-            //
-            // Downstream is deliberately untouched: an empty downstream walk reports
-            // that this symbol resolved no callees, which is not a safety verdict.
-            risk = 'UNKNOWN';
-        }
-        else if (directCount >= 30 ||
-            processCount >= 5 ||
-            moduleCount >= 5 ||
-            impacted.length >= 200) {
-            risk = 'CRITICAL';
-        }
-        else if (directCount >= 15 ||
-            processCount >= 3 ||
-            moduleCount >= 3 ||
-            impacted.length >= 100) {
-            risk = 'HIGH';
-        }
-        else if (directCount >= 5 || impacted.length >= 30) {
-            risk = 'MEDIUM';
-        }
-        else {
-            risk = 'LOW';
-        }
+        const isFileTarget = symType === 'File' || String(symId).startsWith('File:');
+        const unusedAxes = unusedAxesForImpactWalk({
+            isFileTarget,
+            skipEnrichment,
+            maxChunks: MAX_CHUNKS,
+            processQueryFailed,
+            moduleQueryFailed,
+            impactedCount: impacted.length,
+            enrichmentTruncated: !skipEnrichment && MAX_CHUNKS > 0 && impacted.length > MAX_CHUNKS * CHUNK_SIZE,
+        });
+        const { risk, riskSharedAxes, riskScale } = scoreImpactRisk({
+            direction,
+            directCount,
+            processCount,
+            moduleCount,
+            impactedCount: impacted.length,
+            unusedAxes,
+        });
         // Build per-depth counts (always included, even in summaryOnly mode)
         const byDepthCounts = {};
         for (const [depth, items] of Object.entries(grouped)) {
@@ -6395,7 +6418,7 @@ export class LocalBackend {
             target: {
                 id: symId,
                 name: sym.name || sym[1],
-                type: symType,
+                type: isFileTarget ? symType || 'File' : symType,
                 filePath: sym.filePath || sym[2],
                 ...(beanMetadata ? { bean: beanMetadata } : {}),
                 ...(aopMetadata ? { aop: aopMetadata } : {}),
@@ -6403,17 +6426,26 @@ export class LocalBackend {
             direction,
             impactedCount: impacted.length,
             risk,
+            riskSharedAxes,
+            riskScale,
             ...(risk === 'UNKNOWN'
                 ? {
-                    riskNote: 'No callers resolved. Absence of edges is not evidence the symbol is unused: ' +
-                        'a caller reaching it through a reference class this index does not record — ' +
-                        'plain-object property access, a bare-identifier read of a module-scope const — ' +
-                        'produces no edge to find. Confirm with a text search before treating the ' +
-                        'change as safe.',
+                    riskNote: processQueryFailed || moduleQueryFailed
+                        ? 'Risk is unresolved because process/module enrichment failed. Observed counts ' +
+                            'are lower bounds; retry impact before treating the change as safe.'
+                        : unusedAxes.some((axis) => axis.reason === 'enrichment-truncated')
+                            ? 'Risk is unresolved because process/module enrichment was truncated. Observed ' +
+                                'counts are lower bounds; retry with a higher IMPACT_MAX_CHUNKS before ' +
+                                'treating the change as safe.'
+                            : 'No callers resolved. Absence of edges is not evidence the symbol is unused: ' +
+                                'a caller reaching it through a reference class this index does not record — ' +
+                                'plain-object property access, a bare-identifier read of a module-scope const — ' +
+                                'produces no edge to find. Confirm with a text search before treating the ' +
+                                'change as safe.',
                 }
                 : {}),
             ...epistemic,
-            ...(!traversalComplete && { partial: true }),
+            ...((!traversalComplete || enrichmentDegraded) && { partial: true }),
             summary: {
                 direct: directCount,
                 processes_affected: processCount,

package/dist/mcp/tools.js

@@ -431,11 +431,13 @@ WHEN TO USE: Before making code changes — especially refactoring, renaming, or
 AFTER THIS: Review d=1 items (WILL BREAK). Use context() on high-risk symbols.
 
 Output includes:
-- risk: LOW / MEDIUM / HIGH / CRITICAL / UNKNOWN. An upstream walk that resolved ZERO callers reports UNKNOWN, never LOW, and carries riskNote: "safe to change" is a claim about callers and there were none to reason about, so the symbol is either genuinely unused OR reached only through a reference class the index does not record (plain-object property access, a bare-identifier read of a module-scope const). Confirm with a text search before acting on it. Downstream walks are unaffected — an empty downstream result reports resolved callees, not safety.
+- risk: LOW / MEDIUM / HIGH / CRITICAL / UNKNOWN. This is the HIGH/CRITICAL edit-gate field. File targets lack process/community membership, so their risk is not directly comparable with symbol risk; use riskSharedAxes to compare the direct/total axes common to both. Group-mode (\`repo: "@…"\`) results lift the same fields to the top-level envelope. The web Graph-RAG impact tool expands File targets to in-file symbols before enrichment, so process/cluster axes remain comparable there. An upstream walk that resolved ZERO callers reports UNKNOWN, never LOW, and carries riskNote: "safe to change" is a claim about callers and there were none to reason about, so the symbol is either genuinely unused OR reached only through a reference class the index does not record (plain-object property access, a bare-identifier read of a module-scope const). Confirm with a text search before acting on it. Downstream walks are unaffected — an empty downstream result reports resolved callees, not safety.
+- riskSharedAxes: single-repo risk computed only from direct and total impact. Group mode then applies the cross-repo crossing overlay to that local value. Suitable for comparing File and symbol targets within the same mode. Never substitute it for \`risk\` when deciding whether to warn before edits.
+- riskScale: { comparableAcrossKinds, unusedAxes } — names process/module axes that were structurally unavailable, skipped, budget-exhausted (\`IMPACT_MAX_CHUNKS=0\`), truncated (sampled a subset of impacted symbols), or failed at query time. Failed-query and truncated-sample counts are lower bounds: known HIGH/CRITICAL warnings survive, otherwise risk is UNKNOWN. Group impact copies this metadata from the local leg.
 - riskNote: string — present only when risk is UNKNOWN; states why the verdict is withheld.
 - summary: direct callers, processes affected, modules affected
 - affected_processes: which execution flows break and at which step
-- affected_modules: which functional areas are hit (direct vs indirect)
+- affected_modules: which functional areas are hit (direct vs indirect; classification-unavailable when that secondary query fails)
 - byDepth: affected symbols grouped by traversal depth (paginated by limit/offset; omitted when summaryOnly:true — use byDepthCounts for totals per depth, pagination object when truncated). Each item includes a processes:[{id,label,processType,step}] field listing the execution flows that symbol participates in. Empty when the symbol has no process membership. Can ALSO be empty when partial:true is set — either the process-aggregation pass hit its cap before detecting affected processes, or per-symbol enrichment was capped on a very large page. When partial:true, do NOT treat processes:[] as proof of no participation; cross-check the top-level affected_processes list.
 - epistemic: 'exact' | 'lower-bound' — whether impactedCount is the whole story. 'lower-bound' means the walk provably missed callers, so the count is a floor. Absent only on skipped probes (ambiguous-candidate lists, group fan-out).
 - boundaries: string[] — one plain-language sentence per reason the count is short. Prose for humans; branch on causes instead.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gitnexus",
-  "version": "1.6.11-rc.6",
+  "version": "1.6.11-rc.7",
   "description": "Graph-powered code intelligence for AI agents. Index any codebase, query via MCP or CLI.",
   "author": "Abhigyan Patwari",
   "license": "PolyForm-Noncommercial-1.0.0",

package/skills/gitnexus-impact-analysis.md

@@ -93,6 +93,15 @@ dispatch, cross-language calls), so few-callers ⇒ LOW does **not** apply. The
 result carries a `riskNote` saying so. Confirm with a text search before
 treating the symbol as safe to change or delete.
 
+`risk` is the edit gate: warn on HIGH/CRITICAL and stop on UNKNOWN until the
+uncertainty is resolved. Within single-repo mode, compare File and symbol
+targets with local `riskSharedAxes` (direct/total only). Within group mode,
+compare only group results: their `riskSharedAxes` overlays resolved
+cross-repo crossings on that local value. Never use either field to waive the
+edit gate. Check `riskScale.unusedAxes` before comparing kinds: MCP File walks
+omit process/module axes, while web Graph-RAG expands File targets to in-file
+symbols before enrichment.
+
 ## Tools
 
 **impact** — the primary tool for symbol blast radius. If MCP is unavailable, use `node .gitnexus/run.cjs impact <symbol> --direction upstream --repo .` instead: