gitnexus 1.6.11-rc.6 → 1.6.11-rc.8

package/dist/_shared/impact-risk.d.ts

@@ -1,6 +1,6 @@
 export type ImpactRisk = 'LOW' | 'MEDIUM' | 'HIGH' | 'CRITICAL' | 'UNKNOWN';
 export type ImpactRiskAxis = 'processes' | 'modules';
-export type UnusedImpactRiskReason = 'file-nodes-have-no-process-or-community-membership' | 'enrichment-skipped' | 'enrichment-budget-exhausted' | 'enrichment-query-failed';
+export type UnusedImpactRiskReason = 'file-nodes-have-no-process-or-community-membership' | 'enrichment-skipped' | 'enrichment-budget-exhausted' | 'enrichment-truncated' | 'enrichment-query-failed';
 export interface UnusedImpactRiskAxis {
     axis: ImpactRiskAxis;
     reason: UnusedImpactRiskReason;
@@ -29,7 +29,9 @@ export declare function unusedAxesForImpactWalk(input: {
     processQueryFailed: boolean;
     moduleQueryFailed: boolean;
     /** When 0, a zero chunk budget is not an unused-axis event — there was nothing to enrich. */
-    impactedCount?: number;
+    impactedCount: number;
+    /** True when process/module queries ran on a strict subset of impacted symbols. */
+    enrichmentTruncated?: boolean;
 }): UnusedImpactRiskAxis[];
 export declare function scoreImpactRisk(input: ImpactRiskInput): ImpactRiskResult;
 //# sourceMappingURL=impact-risk.d.ts.map

package/dist/_shared/impact-risk.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"impact-risk.d.ts","sourceRoot":"","sources":["../src/impact-risk.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,UAAU,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,GAAG,SAAS,CAAC;AAE5E,MAAM,MAAM,cAAc,GAAG,WAAW,GAAG,SAAS,CAAC;AAErD,MAAM,MAAM,sBAAsB,GAC9B,oDAAoD,GACpD,oBAAoB,GACpB,6BAA6B,GAC7B,yBAAyB,CAAC;AAE9B,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,cAAc,CAAC;IACrB,MAAM,EAAE,sBAAsB,CAAC;CAChC;AAED,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,UAAU,GAAG,YAAY,CAAC;IACrC,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,SAAS,oBAAoB,EAAE,CAAC;CAC9C;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,UAAU,CAAC;IACjB,cAAc,EAAE,UAAU,CAAC;IAC3B,SAAS,EAAE;QACT,qBAAqB,EAAE,OAAO,CAAC;QAC/B,UAAU,EAAE,SAAS,oBAAoB,EAAE,CAAC;KAC7C,CAAC;CACH;AA0CD,iGAAiG;AACjG,wBAAgB,uBAAuB,CAAC,KAAK,EAAE;IAC7C,YAAY,EAAE,OAAO,CAAC;IACtB,cAAc,EAAE,OAAO,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,kBAAkB,EAAE,OAAO,CAAC;IAC5B,iBAAiB,EAAE,OAAO,CAAC;IAC3B,6FAA6F;IAC7F,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,GAAG,oBAAoB,EAAE,CAiCzB;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,eAAe,GAAG,gBAAgB,CAWxE"}
+{"version":3,"file":"impact-risk.d.ts","sourceRoot":"","sources":["../src/impact-risk.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,UAAU,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,GAAG,SAAS,CAAC;AAE5E,MAAM,MAAM,cAAc,GAAG,WAAW,GAAG,SAAS,CAAC;AAErD,MAAM,MAAM,sBAAsB,GAC9B,oDAAoD,GACpD,oBAAoB,GACpB,6BAA6B,GAC7B,sBAAsB,GACtB,yBAAyB,CAAC;AAE9B,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,cAAc,CAAC;IACrB,MAAM,EAAE,sBAAsB,CAAC;CAChC;AAED,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,UAAU,GAAG,YAAY,CAAC;IACrC,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,SAAS,oBAAoB,EAAE,CAAC;CAC9C;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,UAAU,CAAC;IACjB,cAAc,EAAE,UAAU,CAAC;IAC3B,SAAS,EAAE;QACT,qBAAqB,EAAE,OAAO,CAAC;QAC/B,UAAU,EAAE,SAAS,oBAAoB,EAAE,CAAC;KAC7C,CAAC;CACH;AAwDD,iGAAiG;AACjG,wBAAgB,uBAAuB,CAAC,KAAK,EAAE;IAC7C,YAAY,EAAE,OAAO,CAAC;IACtB,cAAc,EAAE,OAAO,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,kBAAkB,EAAE,OAAO,CAAC;IAC5B,iBAAiB,EAAE,OAAO,CAAC;IAC3B,6FAA6F;IAC7F,aAAa,EAAE,MAAM,CAAC;IACtB,mFAAmF;IACnF,mBAAmB,CAAC,EAAE,OAAO,CAAC;CAC/B,GAAG,oBAAoB,EAAE,CAqBzB;AAOD,wBAAgB,eAAe,CAAC,KAAK,EAAE,eAAe,GAAG,gBAAgB,CAuBxE"}

package/dist/_shared/impact-risk.js

@@ -12,10 +12,23 @@ function score(input) {
         return 'MEDIUM';
     return 'LOW';
 }
-function countsWithUnusedAxesZeroed(input) {
+const UNMEASURED_REASONS = new Set([
+    'file-nodes-have-no-process-or-community-membership',
+    'enrichment-skipped',
+    'enrichment-budget-exhausted',
+]);
+function unusedPair(reason) {
+    return [
+        { axis: 'processes', reason },
+        { axis: 'modules', reason },
+    ];
+}
+function countsWithUnmeasuredAxesZeroed(input) {
     let processCount = input.processCount;
     let moduleCount = input.moduleCount;
     for (const unused of input.unusedAxes ?? []) {
+        if (!UNMEASURED_REASONS.has(unused.reason))
+            continue;
         if (unused.axis === 'processes')
             processCount = 0;
         if (unused.axis === 'modules')
@@ -32,30 +45,18 @@ function countsWithUnusedAxesZeroed(input) {
 /** Map walk outcomes to unused process/module axes so comparability matches what was sampled. */
 export function unusedAxesForImpactWalk(input) {
     if (input.isFileTarget) {
-        return [
-            {
-                axis: 'processes',
-                reason: 'file-nodes-have-no-process-or-community-membership',
-            },
-            {
-                axis: 'modules',
-                reason: 'file-nodes-have-no-process-or-community-membership',
-            },
-        ];
+        return unusedPair('file-nodes-have-no-process-or-community-membership');
     }
     if (input.skipEnrichment) {
-        return [
-            { axis: 'processes', reason: 'enrichment-skipped' },
-            { axis: 'modules', reason: 'enrichment-skipped' },
-        ];
+        return unusedPair('enrichment-skipped');
     }
-    if (input.maxChunks === 0 && (input.impactedCount ?? 1) > 0) {
-        return [
-            { axis: 'processes', reason: 'enrichment-budget-exhausted' },
-            { axis: 'modules', reason: 'enrichment-budget-exhausted' },
-        ];
+    if (input.maxChunks === 0 && input.impactedCount > 0) {
+        return unusedPair('enrichment-budget-exhausted');
     }
     const unused = [];
+    if (input.enrichmentTruncated) {
+        unused.push(...unusedPair('enrichment-truncated'));
+    }
     if (input.processQueryFailed) {
         unused.push({ axis: 'processes', reason: 'enrichment-query-failed' });
     }
@@ -64,10 +65,23 @@ export function unusedAxesForImpactWalk(input) {
     }
     return unused;
 }
+const INCOMPLETE_SAMPLE_REASONS = new Set([
+    'enrichment-query-failed',
+    'enrichment-truncated',
+]);
 export function scoreImpactRisk(input) {
     const unusedAxes = input.unusedAxes ?? [];
+    const observedRisk = score(countsWithUnmeasuredAxesZeroed(input));
+    const incompleteSample = unusedAxes.some((unused) => INCOMPLETE_SAMPLE_REASONS.has(unused.reason));
+    // Failed queries and truncated samples make observed process/module counts
+    // lower bounds. Preserve any HIGH/CRITICAL warning already proved by those
+    // counts, but never emit a confident LOW/MEDIUM edit gate from an incomplete
+    // enrichment pass.
+    const risk = incompleteSample && (observedRisk === 'LOW' || observedRisk === 'MEDIUM')
+        ? 'UNKNOWN'
+        : observedRisk;
     return {
-        risk: score(countsWithUnusedAxesZeroed(input)),
+        risk,
         riskSharedAxes: score({ ...input, processCount: 0, moduleCount: 0 }),
         riskScale: {
             comparableAcrossKinds: unusedAxes.length === 0,

package/dist/_shared/impact-risk.js.map

@@ -1 +1 @@
-{"version":3,"file":"impact-risk.js","sourceRoot":"","sources":["../src/impact-risk.ts"],"names":[],"mappings":"AAiCA,SAAS,KAAK,CACZ,KAGC;IAED,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,GAAG,KAAK,CAAC;IAEnF,IAAI,SAAS,KAAK,UAAU,IAAI,aAAa,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACtE,IAAI,WAAW,IAAI,EAAE,IAAI,YAAY,IAAI,CAAC,IAAI,WAAW,IAAI,CAAC,IAAI,aAAa,IAAI,GAAG,EAAE,CAAC;QACvF,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,IAAI,WAAW,IAAI,EAAE,IAAI,YAAY,IAAI,CAAC,IAAI,WAAW,IAAI,CAAC,IAAI,aAAa,IAAI,GAAG,EAAE,CAAC;QACvF,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,IAAI,WAAW,IAAI,CAAC,IAAI,aAAa,IAAI,EAAE;QAAE,OAAO,QAAQ,CAAC;IAC7D,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,0BAA0B,CACjC,KAAsB;IAKtB,IAAI,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC;IACtC,IAAI,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;IACpC,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC;QAC5C,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW;YAAE,YAAY,GAAG,CAAC,CAAC;QAClD,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;YAAE,WAAW,GAAG,CAAC,CAAC;IACjD,CAAC;IACD,OAAO;QACL,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,YAAY;QACZ,WAAW;QACX,aAAa,EAAE,KAAK,CAAC,aAAa;KACnC,CAAC;AACJ,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,uBAAuB,CAAC,KAQvC;IACC,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;QACvB,OAAO;YACL;gBACE,IAAI,EAAE,WAAW;gBACjB,MAAM,EAAE,oDAAoD;aAC7D;YACD;gBACE,IAAI,EAAE,SAAS;gBACf,MAAM,EAAE,oDAAoD;aAC7D;SACF,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC;QACzB,OAAO;YACL,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,oBAAoB,EAAE;YACnD,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,oBAAoB,EAAE;SAClD,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,SAAS,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5D,OAAO;YACL,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,6BAA6B,EAAE;YAC5D,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,6BAA6B,EAAE;SAC3D,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,IAAI,KAAK,CAAC,kBAAkB,EAAE,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;QAC5B,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAsB;IACpD,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC;IAE1C,OAAO;QACL,IAAI,EAAE,KAAK,CAAC,0BAA0B,CAAC,KAAK,CAAC,CAAC;QAC9C,cAAc,EAAE,KAAK,CAAC,EAAE,GAAG,KAAK,EAAE,YAAY,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC;QACpE,SAAS,EAAE;YACT,qBAAqB,EAAE,UAAU,CAAC,MAAM,KAAK,CAAC;YAC9C,UAAU;SACX;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"impact-risk.js","sourceRoot":"","sources":["../src/impact-risk.ts"],"names":[],"mappings":"AAkCA,SAAS,KAAK,CACZ,KAGC;IAED,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,GAAG,KAAK,CAAC;IAEnF,IAAI,SAAS,KAAK,UAAU,IAAI,aAAa,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACtE,IAAI,WAAW,IAAI,EAAE,IAAI,YAAY,IAAI,CAAC,IAAI,WAAW,IAAI,CAAC,IAAI,aAAa,IAAI,GAAG,EAAE,CAAC;QACvF,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,IAAI,WAAW,IAAI,EAAE,IAAI,YAAY,IAAI,CAAC,IAAI,WAAW,IAAI,CAAC,IAAI,aAAa,IAAI,GAAG,EAAE,CAAC;QACvF,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,IAAI,WAAW,IAAI,CAAC,IAAI,aAAa,IAAI,EAAE;QAAE,OAAO,QAAQ,CAAC;IAC7D,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,kBAAkB,GAAwC,IAAI,GAAG,CAAC;IACtE,oDAAoD;IACpD,oBAAoB;IACpB,6BAA6B;CAC9B,CAAC,CAAC;AAEH,SAAS,UAAU,CAAC,MAA8B;IAChD,OAAO;QACL,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE;QAC7B,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE;KAC5B,CAAC;AACJ,CAAC;AAED,SAAS,8BAA8B,CACrC,KAAsB;IAKtB,IAAI,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC;IACtC,IAAI,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;IACpC,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC;QAC5C,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC;YAAE,SAAS;QACrD,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW;YAAE,YAAY,GAAG,CAAC,CAAC;QAClD,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;YAAE,WAAW,GAAG,CAAC,CAAC;IACjD,CAAC;IACD,OAAO;QACL,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,YAAY;QACZ,WAAW;QACX,aAAa,EAAE,KAAK,CAAC,aAAa;KACnC,CAAC;AACJ,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,uBAAuB,CAAC,KAUvC;IACC,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;QACvB,OAAO,UAAU,CAAC,oDAAoD,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC;QACzB,OAAO,UAAU,CAAC,oBAAoB,CAAC,CAAC;IAC1C,CAAC;IACD,IAAI,KAAK,CAAC,SAAS,KAAK,CAAC,IAAI,KAAK,CAAC,aAAa,GAAG,CAAC,EAAE,CAAC;QACrD,OAAO,UAAU,CAAC,6BAA6B,CAAC,CAAC;IACnD,CAAC;IACD,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,IAAI,KAAK,CAAC,mBAAmB,EAAE,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,sBAAsB,CAAC,CAAC,CAAC;IACrD,CAAC;IACD,IAAI,KAAK,CAAC,kBAAkB,EAAE,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;QAC5B,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,yBAAyB,GAAwC,IAAI,GAAG,CAAC;IAC7E,yBAAyB;IACzB,sBAAsB;CACvB,CAAC,CAAC;AAEH,MAAM,UAAU,eAAe,CAAC,KAAsB;IACpD,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC;IAC1C,MAAM,YAAY,GAAG,KAAK,CAAC,8BAA8B,CAAC,KAAK,CAAC,CAAC,CAAC;IAClE,MAAM,gBAAgB,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAClD,yBAAyB,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAC7C,CAAC;IACF,2EAA2E;IAC3E,2EAA2E;IAC3E,6EAA6E;IAC7E,mBAAmB;IACnB,MAAM,IAAI,GACR,gBAAgB,IAAI,CAAC,YAAY,KAAK,KAAK,IAAI,YAAY,KAAK,QAAQ,CAAC;QACvE,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,YAAY,CAAC;IAEnB,OAAO;QACL,IAAI;QACJ,cAAc,EAAE,KAAK,CAAC,EAAE,GAAG,KAAK,EAAE,YAAY,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC;QACpE,SAAS,EAAE;YACT,qBAAqB,EAAE,UAAU,CAAC,MAAM,KAAK,CAAC;YAC9C,UAAU;SACX;KACF,CAAC;AACJ,CAAC"}

package/dist/cli/ai-context.js

@@ -139,14 +139,14 @@ This project is indexed by GitNexus as **${projectName}**${noStats ? '' : ` (${s
 
 ## Always Do
 
-- **MUST run impact analysis before editing.** Use \`impact({target: "symbolName", direction: "upstream"})\` (MCP) or \`${runner} impact "symbolName" --direction upstream --repo .\` (CLI fallback); report callers, processes, and risk. Never substitute grep for graph analysis.${hasPdg
+- **MUST run impact before editing.** Use \`impact({target: "symbolName", direction: "upstream"})\` or \`${runner} impact "symbolName" --direction upstream --repo .\`; report callers, processes, and risk. Never substitute grep for graph analysis.${hasPdg
         ? ` For unified PDG impact, add \`mode: "pdg"\` with optional \`line: <N>\` — it returns statement-level \`affectedStatements\` over CDG + REACHING_DEF and inter-procedural symbols in \`interproceduralByDepth\`/\`byDepth\`; no-layer/degraded PDG results are UNKNOWN-risk notes (\`--pdg\` layer). CLI equivalent: \`${runner} impact "symbolName" --direction upstream --mode pdg --line <N> --repo .\`.`
         : ''}
 - **MUST analyze graph changes before committing.** Use \`detect_changes({scope: "all"})\` (MCP) or \`${runner} detect-changes --scope all --repo .\` (CLI fallback). \`partial: true\` or \`truncated: true\` is not a clean check — a zero means unseen, not unaffected; re-run it. For regression review: \`detect_changes({scope: "compare", base_ref: ${JSON.stringify(markdownSafeBranch(defaultBranch))}})\` or \`${runner} detect-changes --scope compare --base-ref ${JSON.stringify(markdownSafeBranch(defaultBranch))} --repo .\`.
-- **MUST warn the user** if impact analysis returns HIGH or CRITICAL risk before proceeding with edits.
+- MUST warn on HIGH/CRITICAL \`risk\` pre-edit; never use \`riskSharedAxes\` to waive a HIGH/CRITICAL \`risk\` warning. Compare File/symbol: MCP File omits axes; Graph-RAG expands File.
 - **MUST treat \`risk: UNKNOWN\` as unresolved, not as low.** An empty caller set is not evidence the symbol is unused — it can also mean the callers are not resolvable by the index (plain-object property access, dynamic dispatch, cross-language calls). \`impact\` pairs \`UNKNOWN\` with a \`riskNote\` saying so. Confirm with a text search before treating the symbol as safe to change or delete; do not proceed on the strength of a zero.
-- When exploring unfamiliar code, use \`query({search_query: "concept"})\` to find execution flows instead of grepping. It returns process-grouped results ranked by relevance.
-- When you need full context on a specific symbol — callers, callees, which execution flows it participates in — use \`context({name: "symbolName"})\`.
+- Explore with \`query({search_query: "concept"})\` for process-grouped flows.
+- Use \`context({name: "symbolName"})\` for callers, callees, and flows.
 - For security review, \`explain({target: "fileOrSymbol"})\` lists taint findings (source→sink flows; needs \`analyze --pdg\`).${hasPdg
         ? `\n- For control/data dependence, \`pdg_query({mode: "controls", target: "fileOrSymbol"})\` answers "under what condition does X run?" (CDG, incl. guard clauses) and \`pdg_query({mode: "flows", target, variable})\` traces "where does variable Y flow?" (REACHING_DEF). \`--pdg\` layer.`
         : ''}

package/dist/cli/eval-server.js

@@ -240,6 +240,17 @@ function formatTruncationSuffix(result) {
             : '';
     return label ? ` (by ${label})` : '';
 }
+function pushCallgraphRiskLines(lines, result) {
+    if (result.risk) {
+        lines.push(`Risk: ${result.risk}`);
+    }
+    if (result.riskNote) {
+        lines.push(String(result.riskNote));
+    }
+    if (result.riskScale?.comparableAcrossKinds === false && result.riskSharedAxes) {
+        lines.push(`Shared-axes risk: ${result.riskSharedAxes} (process/module axes are unavailable — compare File vs symbol only; do not use this to waive a HIGH/CRITICAL risk warning)`);
+    }
+}
 export function formatImpactResult(result) {
     if (result.error) {
         const suggestion = result.suggestion ? `\nSuggestion: ${result.suggestion}` : '';
@@ -467,15 +478,20 @@ export function formatImpactResult(result) {
         // #1858 — "isolated" is a confident claim. If an interface / indirection
         // boundary is on the path, the true count is a lower bound, not zero;
         // callers binding via DI / dynamic dispatch were not traced. Say so instead.
+        const lines = [];
         if (result.epistemic === 'lower-bound') {
-            const lines = [
-                `${target?.name || '?'}: no direct ${direction} dependencies traced, but this is a LOWER BOUND — unresolved indirection on the path (actual impact may be higher):`,
-            ];
+            lines.push(`${target?.name || '?'}: no direct ${direction} dependencies traced, but this is a LOWER BOUND — unresolved indirection on the path (actual impact may be higher):`);
             for (const b of result.boundaries || [])
                 lines.push(`    • ${b}`);
-            return lines.join('\n');
         }
-        return `${target?.name || '?'}: No ${direction} dependencies found. This symbol appears isolated.`;
+        else if (direction === 'upstream') {
+            lines.push(`${target?.name || '?'}: No ${direction} callers resolved. This is not evidence the symbol is unused or isolated.`);
+        }
+        else {
+            lines.push(`${target?.name || '?'}: No ${direction} dependencies found.`);
+        }
+        pushCallgraphRiskLines(lines, result);
+        return lines.join('\n');
     }
     const lines = [];
     const dirLabel = direction === 'upstream' ? 'depends on this (will break if changed)' : 'this depends on';
@@ -490,6 +506,7 @@ export function formatImpactResult(result) {
         for (const b of result.boundaries || [])
             lines.push(`    • ${b}`);
     }
+    pushCallgraphRiskLines(lines, result);
     lines.push('');
     const depthLabels = {
         1: 'WILL BREAK (direct)',

package/dist/cli/i18n/en.d.ts

@@ -32,6 +32,14 @@ export declare const en: {
     readonly 'status.detached': "(detached HEAD)";
     readonly 'status.workspaceIndexLabel': "Workspace index: last analyzed on '{{primary}}' (re-run gitnexus analyze to follow the current branch)";
     readonly 'status.status': "Status";
+    readonly 'status.indexContentCurrent': "Index content: matches all {{count}} covered file(s)";
+    readonly 'status.indexContentDrifted': "Index content: {{changed}} changed, {{added}} added, {{deleted}} deleted";
+    readonly 'status.indexContentMore': "  ...and {{count}} more {{label}}";
+    readonly 'status.indexContentUnmeasurable': "Index content: not comparable ({{reason}}); fell back to the working-tree check";
+    readonly 'status.indexContentScanFailed': "Index content: coverage scan failed; treating the index as stale";
+    readonly 'status.driftChanged': "changed";
+    readonly 'status.driftAdded': "added";
+    readonly 'status.driftDeleted': "deleted";
     readonly 'status.upToDate': "✅ up-to-date";
     readonly 'status.stale': "⚠️ stale (re-run gitnexus analyze)";
     readonly 'clean.deleteAll': "This will delete GitNexus indexes for {{count}} repo(s):";

package/dist/cli/i18n/en.js

@@ -32,6 +32,14 @@ export const en = {
     'status.detached': '(detached HEAD)',
     'status.workspaceIndexLabel': "Workspace index: last analyzed on '{{primary}}' (re-run gitnexus analyze to follow the current branch)",
     'status.status': 'Status',
+    'status.indexContentCurrent': 'Index content: matches all {{count}} covered file(s)',
+    'status.indexContentDrifted': 'Index content: {{changed}} changed, {{added}} added, {{deleted}} deleted',
+    'status.indexContentMore': '  ...and {{count}} more {{label}}',
+    'status.indexContentUnmeasurable': 'Index content: not comparable ({{reason}}); fell back to the working-tree check',
+    'status.indexContentScanFailed': 'Index content: coverage scan failed; treating the index as stale',
+    'status.driftChanged': 'changed',
+    'status.driftAdded': 'added',
+    'status.driftDeleted': 'deleted',
     'status.upToDate': '✅ up-to-date',
     'status.stale': '⚠️ stale (re-run gitnexus analyze)',
     'clean.deleteAll': 'This will delete GitNexus indexes for {{count}} repo(s):',

package/dist/cli/i18n/resources.d.ts

@@ -33,6 +33,14 @@ export declare const cliResources: {
         readonly 'status.detached': "(detached HEAD)";
         readonly 'status.workspaceIndexLabel': "Workspace index: last analyzed on '{{primary}}' (re-run gitnexus analyze to follow the current branch)";
         readonly 'status.status': "Status";
+        readonly 'status.indexContentCurrent': "Index content: matches all {{count}} covered file(s)";
+        readonly 'status.indexContentDrifted': "Index content: {{changed}} changed, {{added}} added, {{deleted}} deleted";
+        readonly 'status.indexContentMore': "  ...and {{count}} more {{label}}";
+        readonly 'status.indexContentUnmeasurable': "Index content: not comparable ({{reason}}); fell back to the working-tree check";
+        readonly 'status.indexContentScanFailed': "Index content: coverage scan failed; treating the index as stale";
+        readonly 'status.driftChanged': "changed";
+        readonly 'status.driftAdded': "added";
+        readonly 'status.driftDeleted': "deleted";
         readonly 'status.upToDate': "✅ up-to-date";
         readonly 'status.stale': "⚠️ stale (re-run gitnexus analyze)";
         readonly 'clean.deleteAll': "This will delete GitNexus indexes for {{count}} repo(s):";
@@ -289,6 +297,14 @@ export declare const cliResources: {
         'status.detached': string;
         'status.workspaceIndexLabel': string;
         'status.status': string;
+        'status.indexContentCurrent': string;
+        'status.indexContentDrifted': string;
+        'status.indexContentMore': string;
+        'status.indexContentUnmeasurable': string;
+        'status.indexContentScanFailed': string;
+        'status.driftChanged': string;
+        'status.driftAdded': string;
+        'status.driftDeleted': string;
         'status.upToDate': string;
         'status.stale': string;
         'clean.deleteAll': string;

package/dist/cli/i18n/zh-CN.d.ts

@@ -32,6 +32,14 @@ export declare const zhCN: {
     'status.detached': string;
     'status.workspaceIndexLabel': string;
     'status.status': string;
+    'status.indexContentCurrent': string;
+    'status.indexContentDrifted': string;
+    'status.indexContentMore': string;
+    'status.indexContentUnmeasurable': string;
+    'status.indexContentScanFailed': string;
+    'status.driftChanged': string;
+    'status.driftAdded': string;
+    'status.driftDeleted': string;
     'status.upToDate': string;
     'status.stale': string;
     'clean.deleteAll': string;

package/dist/cli/i18n/zh-CN.js

@@ -32,6 +32,14 @@ export const zhCN = {
     'status.detached': '（分离 HEAD）',
     'status.workspaceIndexLabel': "工作区索引：最近在 '{{primary}}' 分支上分析（重新运行 gitnexus analyze 以跟随当前分支）",
     'status.status': '状态',
+    'status.indexContentCurrent': '索引内容：与覆盖的全部 {{count}} 个文件一致',
+    'status.indexContentDrifted': '索引内容：{{changed}} 个已修改，{{added}} 个新增，{{deleted}} 个已删除',
+    'status.indexContentMore': '  ……另有 {{count}} 个 {{label}}',
+    'status.indexContentUnmeasurable': '索引内容：无法比对（{{reason}}），已回退到工作区检查',
+    'status.indexContentScanFailed': '索引内容：覆盖扫描失败，按过期处理',
+    'status.driftChanged': '已修改',
+    'status.driftAdded': '新增',
+    'status.driftDeleted': '已删除',
     'status.upToDate': '✅ 已是最新',
     'status.stale': '⚠️ 已过期（重新运行 gitnexus analyze）',
     'clean.deleteAll': '将删除 {{count}} 个仓库的 GitNexus 索引：',

package/dist/cli/status.js

@@ -8,7 +8,64 @@ import { findRepo, getStoragePaths, loadMeta, hasKuzuIndex } from '../storage/re
 import { getCurrentCommit, getCurrentBranch, isGitRepo, getGitRoot, isWorkingTreeDirty, } from '../storage/git.js';
 import { analyzerRunnerIdentitiesEqual, resolveAnalyzerRunnerIdentity, } from '../core/analyzer-identity.js';
 import { getIndexIncompleteReasons } from '../core/index-freshness.js';
+import { detectIndexContentDrift } from '../core/index-content-drift.js';
 import { t } from './i18n/index.js';
+/** How many drifted paths the report names before summarizing the rest. */
+const DRIFT_SAMPLE_LIMIT = 10;
+/**
+ * Machine-readable form of the per-file comparison. `'not-checked'` is its own
+ * value rather than a silent omission: it says the index was already stale on
+ * metadata alone, so the scan was skipped, which is not the same claim as a
+ * scan that ran and found nothing.
+ */
+const describeContentDrift = (drift) => {
+    if (!drift)
+        return { status: 'not-checked' };
+    if (drift.kind === 'current') {
+        return { status: 'current', coveredFiles: drift.coveredFileCount };
+    }
+    if (drift.kind === 'unmeasurable') {
+        return { status: 'unmeasurable', reason: drift.reason };
+    }
+    return {
+        status: 'drifted',
+        counts: {
+            changed: drift.changed.length,
+            added: drift.added.length,
+            deleted: drift.deleted.length,
+        },
+        changed: drift.changed.slice(0, DRIFT_SAMPLE_LIMIT),
+        added: drift.added.slice(0, DRIFT_SAMPLE_LIMIT),
+        deleted: drift.deleted.slice(0, DRIFT_SAMPLE_LIMIT),
+        truncated: {
+            changed: drift.changed.length > DRIFT_SAMPLE_LIMIT,
+            added: drift.added.length > DRIFT_SAMPLE_LIMIT,
+            deleted: drift.deleted.length > DRIFT_SAMPLE_LIMIT,
+        },
+    };
+};
+/** Escape control characters in repo-relative paths before printing. */
+const formatDriftPath = (rel) => /[\u0000-\u001f\u007f]/.test(rel) ? JSON.stringify(rel) : rel;
+const printDriftDetail = (drift) => {
+    console.log(t('status.indexContentDrifted', {
+        changed: drift.changed.length,
+        added: drift.added.length,
+        deleted: drift.deleted.length,
+    }));
+    const labelled = [
+        [t('status.driftChanged'), drift.changed],
+        [t('status.driftAdded'), drift.added],
+        [t('status.driftDeleted'), drift.deleted],
+    ];
+    for (const [label, paths] of labelled) {
+        for (const p of paths.slice(0, DRIFT_SAMPLE_LIMIT)) {
+            console.log(`  ${label}: ${formatDriftPath(p)}`);
+        }
+        const remaining = paths.length - DRIFT_SAMPLE_LIMIT;
+        if (remaining > 0)
+            console.log(t('status.indexContentMore', { count: remaining, label }));
+    }
+};
 export const statusCommand = async (options = {}) => {
     const cwd = process.cwd();
     if (!isGitRepo(cwd)) {
@@ -63,13 +120,26 @@ export const statusCommand = async (options = {}) => {
     const currentRunnerIdentity = resolveAnalyzerRunnerIdentity(import.meta.url);
     const runnerIdentityIsCurrent = analyzerRunnerIdentitiesEqual(activeMeta.runnerIdentity, currentRunnerIdentity);
     const incompleteReasons = getIndexIncompleteReasons(activeMeta);
-    // A matching HEAD is not enough: `analyze` re-indexes a dirty working tree,
-    // so a repo with uncommitted source changes is stale even at the same commit.
-    // Skip the check for non-git folders (currentCommit === '') to match analyze.
-    const isUpToDate = currentCommit === activeMeta.lastCommit &&
+    const metadataIsCurrent = currentCommit === activeMeta.lastCommit &&
         runnerIdentityIsCurrent &&
-        incompleteReasons.length === 0 &&
-        (currentCommit === '' || !isWorkingTreeDirty(repo.repoPath));
+        incompleteReasons.length === 0;
+    // A matching HEAD is not enough: `analyze` re-indexes changed content at the
+    // same commit, so the files the index covers must still be compared against
+    // disk. Only worth the scan once the cheap metadata checks agree, and skipped
+    // for non-git folders (currentCommit === '') to match analyze.
+    const contentDrift = metadataIsCurrent && currentCommit !== ''
+        ? await detectIndexContentDrift(repo.repoPath, activeMeta.fileHashes, activeMeta.indexCoverage)
+        : undefined;
+    // The repo-wide dirty flag survives only as the fallback for metadata written
+    // before `fileHashes` existed. Where the per-file comparison can run it
+    // decides, so a file the index does not cover no longer pins a byte-current
+    // index to a "stale" verdict that `analyze` is powerless to clear (#3077).
+    const contentIsCurrent = contentDrift === undefined ||
+        contentDrift.kind === 'current' ||
+        (contentDrift.kind === 'unmeasurable' &&
+            contentDrift.reason === 'no-file-hashes' &&
+            !isWorkingTreeDirty(repo.repoPath));
+    const isUpToDate = metadataIsCurrent && contentIsCurrent;
     if (options.json) {
         console.log(JSON.stringify({
             schemaVersion: 1,
@@ -87,6 +157,7 @@ export const statusCommand = async (options = {}) => {
                 commit: currentCommit,
                 runnerIdentity: currentRunnerIdentity,
             },
+            contentDrift: describeContentDrift(contentDrift),
             status: isUpToDate ? 'up-to-date' : 'stale',
         }));
         return;
@@ -107,5 +178,19 @@ export const statusCommand = async (options = {}) => {
         console.log(`Index incomplete reasons: ${JSON.stringify(incompleteReasons)}`);
     }
     console.log(`${t('status.currentRunnerIdentity')}: ${JSON.stringify(currentRunnerIdentity)}`);
+    if (contentDrift?.kind === 'current') {
+        console.log(t('status.indexContentCurrent', { count: contentDrift.coveredFileCount }));
+    }
+    else if (contentDrift?.kind === 'drifted') {
+        printDriftDetail(contentDrift);
+    }
+    else if (contentDrift?.kind === 'unmeasurable') {
+        if (contentDrift.reason === 'scan-failed') {
+            console.log(t('status.indexContentScanFailed'));
+        }
+        else if (!isUpToDate) {
+            console.log(t('status.indexContentUnmeasurable', { reason: contentDrift.reason }));
+        }
+    }
     console.log(`${t('status.status')}: ${isUpToDate ? t('status.upToDate') : t('status.stale')}`);
 };

package/dist/core/group/cross-impact.d.ts

@@ -2,6 +2,7 @@
  * Cross-repo impact (Phase 1 local walk + Phase 2 bridge fan-out).
  * All bridge Cypher for this feature lives in this module.
  */
+import type { ImpactRisk } from '../../_shared/index.js';
 import type { BridgeHandle, BridgeMeta, CrossRepoImpact, GroupImpactResult } from './types.js';
 import type { GroupToolPort } from './service.js';
 export { truncationFields, crossRepoCompleteness, type TruncationFields, type CrossRepoCompleteness, type CrossRepoCompletenessInput, } from './completeness.js';
@@ -109,7 +110,7 @@ export declare function collectImpactSymbolUids(local: unknown, servicePrefix: s
     uids: string[];
     targetFilePath?: string;
 };
-export declare function mergeRisk(localRisk: string, cross: CrossRepoImpact[]): string;
+export declare function mergeRisk(localRisk: ImpactRisk, cross: CrossRepoImpact[]): ImpactRisk;
 /**
  * Is this bridge's metadata unable to say where its contents came from?
  *

package/dist/core/group/cross-impact.js

@@ -279,6 +279,15 @@ function extractProcessNames(impact) {
 // permanently that a PDG `risk:'UNKNOWN'` never coalesces to a confident `LOW`.
 // No behavior change — `'UNKNOWN'` was already handled correctly at the
 // `(localRisk === 'LOW' || localRisk === 'UNKNOWN')` branch below.
+function asImpactRisk(value, fallback = 'LOW') {
+    return value === 'LOW' ||
+        value === 'MEDIUM' ||
+        value === 'HIGH' ||
+        value === 'CRITICAL' ||
+        value === 'UNKNOWN'
+        ? value
+        : fallback;
+}
 export function mergeRisk(localRisk, cross) {
     const traversed = cross.filter((c) => c.fanout_status !== 'not_attempted');
     const highConf = traversed.some((c) => c.contract.confidence >= 0.85);
@@ -292,6 +301,15 @@ export function mergeRisk(localRisk, cross) {
         return 'MEDIUM';
     return localRisk;
 }
+function liftLocalRiskMeta(local, cross) {
+    const { riskSharedAxes, riskScale } = local;
+    return {
+        ...(riskSharedAxes !== undefined
+            ? { riskSharedAxes: mergeRisk(asImpactRisk(riskSharedAxes), cross) }
+            : {}),
+        ...(riskScale !== undefined ? { riskScale } : {}),
+    };
+}
 /**
  * Is this bridge's metadata unable to say where its contents came from?
  *
@@ -461,6 +479,7 @@ export async function runGroupImpact(deps, params) {
                 cross_repo_hits: 0,
             },
             risk: 'UNKNOWN',
+            ...liftLocalRiskMeta(local, []),
             timeoutMs,
             crossDepthWarning,
         };
@@ -513,7 +532,8 @@ export async function runGroupImpact(deps, params) {
                 modules_affected: s.modules_affected ?? 0,
                 cross_repo_hits: 0,
             },
-            risk: String(local.risk ?? 'LOW'),
+            risk: asImpactRisk(local.risk),
+            ...liftLocalRiskMeta(local, []),
             timeoutMs,
             crossDepthWarning,
         };
@@ -666,7 +686,7 @@ export async function runGroupImpact(deps, params) {
         await closeBridgeDb(handle);
     }
     const localSum = local?.summary || {};
-    const localRisk = String(local.risk ?? 'LOW');
+    const localRisk = asImpactRisk(local.risk);
     const localPartial = Boolean(local.partial);
     // The bridge's own incompleteness, in the shared vocabulary, read through
     // what this query DECLARED. The fan-out above already drops every neighbour
@@ -740,6 +760,7 @@ export async function runGroupImpact(deps, params) {
             cross_repo_hits: cross.length,
         },
         risk: mergeRisk(localRisk, cross),
+        ...liftLocalRiskMeta(local, cross),
         timeoutMs,
         crossDepthWarning,
     };

package/dist/core/group/types.d.ts

@@ -1,3 +1,4 @@
+import type { ImpactRisk, ImpactRiskResult } from '../../_shared/index.js';
 export type ContractType = 'http' | 'graphql' | 'grpc' | 'thrift' | 'topic' | 'lib' | 'custom' | 'include';
 export type ManifestContractType = Exclude<ContractType, 'graphql'>;
 export type MatchType = 'exact' | 'manifest' | 'wildcard';
@@ -166,7 +167,17 @@ export interface GroupImpactResult {
         modules_affected: number;
         cross_repo_hits: number;
     };
-    risk: string;
+    risk: ImpactRisk;
+    /**
+     * Two-axis (direct + total) risk from the local leg, then `mergeRisk` with
+     * crossings — compare File vs symbol here, not via top-level `risk`.
+     */
+    riskSharedAxes?: ImpactRisk;
+    /**
+     * Local-leg scale metadata (File / skipped enrichment). Crossings do not
+     * invent process/module membership for File nodes.
+     */
+    riskScale?: ImpactRiskResult['riskScale'];
     /**
      * `'lower-bound'` when the fan-out was cut short, so `risk` is a FLOOR, not a
      * verdict. Same vocabulary as single-repo `impact`'s `epistemic` field.

package/dist/core/index-content-drift.d.ts

@@ -0,0 +1,54 @@
+/**
+ * Does the index still reflect the files it actually covers?
+ *
+ * `status` used to answer this with a repo-wide `git status --porcelain`
+ * boolean, which says something different: whether the working tree differs
+ * from HEAD. Those two questions diverge in both directions. A scratch file,
+ * a build artifact, or a tracked file under a tool directory the indexer
+ * never reads makes the tree dirty while every indexed file is byte-current —
+ * and because `analyze` cannot commit or delete that file, the resulting
+ * "stale (re-run gitnexus analyze)" verdict was unclearable (#3077). It also
+ * misses the reverse case: reverting a file that was indexed while dirty
+ * leaves a clean tree over an index holding the pre-revert content.
+ *
+ * `meta.fileHashes` already records the exact set of files the last run
+ * covered, so the question can be answered directly. This module recomputes
+ * the coverage set with the same `walkRepositoryPaths` scan (ignore rules and
+ * dotfile handling stay shared) and the large-file cap recorded in
+ * `meta.indexCoverage`, hashes only the paths that can actually have changed
+ * since that run, and diffs against what was recorded.
+ */
+import type { RepoMeta } from '../storage/repo-meta.js';
+/** Why the recorded coverage set could not be compared against disk at all. */
+export type IndexContentUnmeasurableReason = 
+/** Metadata predates per-file hashes, or the run recorded none (non-git). */
+'no-file-hashes'
+/** The repository scan or hashing pass threw. */
+ | 'scan-failed';
+/**
+ * A three-way verdict. `'unmeasurable'` is kept apart from `'current'` on
+ * purpose: it means the comparison never ran, which is not evidence the index
+ * is fresh. Legacy metadata without hashes still falls back to the working-tree
+ * check; a failed scan must not.
+ */
+export type IndexContentDrift = {
+    kind: 'current';
+    coveredFileCount: number;
+} | {
+    kind: 'drifted';
+    changed: string[];
+    added: string[];
+    deleted: string[];
+} | {
+    kind: 'unmeasurable';
+    reason: IndexContentUnmeasurableReason;
+};
+export type IndexCoveragePolicy = NonNullable<RepoMeta['indexCoverage']>;
+/**
+ * Compare the files recorded in `fileHashes` against the current working tree.
+ *
+ * `added` covers files the index would pick up but has never seen, so a new
+ * source file still reports stale — the index is genuinely incomplete then,
+ * and comparing only the recorded entries would wave that through.
+ */
+export declare const detectIndexContentDrift: (repoPath: string, fileHashes: Readonly<Record<string, string>> | undefined, coverage?: IndexCoveragePolicy) => Promise<IndexContentDrift>;