PHP: `explain` on a class node omits the file's imports, so "what does X depend on?" under-reports

[filipechagas]

Found while validating the fork on providers-api.lawnstarter.com for PE-80051 (adoption epic).

Version: graphify 0.9.40, fork origin/v8 = 5e9d95c11837aeabbbb5d90cb45544f49dc58ca4.

Summary

imports edges are attached to the file node, but a user asking "what does class X depend on?" naturally runs graphify explain "X" against the class node. The class node carries none of the imports, so explain reports a strict and silent subset of the real dependencies.

In the minimal case below explain "Consumer" reports zero dependencies for a class that depends on Thing.

Minimal reproduction

// src/Dep/Thing.php
<?php
namespace App\Dep;

class Thing {}

// src/Consumer.php
<?php
namespace App;

use App\Dep\Thing;

class Consumer
{
    public function make(): Thing { return new Thing(); }
}

$ graphify update .
$ graphify explain "Consumer"
Node: Consumer
  Source:    src/Consumer.php L6
  Degree:    2

Connections (2):
  --> .make() [method] [EXTRACTED] src/Consumer.php:L8
  <-- Consumer.php [contains] [EXTRACTED] src/Consumer.php:L6

Thing does not appear. It is only reachable from the file node:

$ graphify explain "Consumer.php"
Connections (2):
  --> Thing [imports] [EXTRACTED] src/Consumer.php:L4
  --> Consumer [contains] [EXTRACTED] src/Consumer.php:L6

Impact on the real repo

For App\Actions\Assessment\ScoreAssessmentAnswer, grep gives 8 adjudicated dependencies: AssessmentScorerService, ProviderAssessmentAnswer, ProviderAssessmentAnswerRepository, CarbonImmutable, ModelNotFoundException, Log, BaseAction, CheckAssessmentCompletion.

• graphify explain "ScoreAssessmentAnswer" (class node) returns 4: ProviderAssessmentAnswerRepository, BaseAction, CheckAssessmentCompletion, AssessmentScorerService. Missing: ProviderAssessmentAnswer, CarbonImmutable, ModelNotFoundException, Log.
• graphify explain "ScoreAssessmentAnswer.php" (file node) returns 7 — the imports — but misses CheckAssessmentCompletion, which is a constructor dependency in the same namespace and therefore has no use statement.

Neither single command returns the full set; only the union of both does. This failed the "what does X depend on?" gate question for the repo.

Suggested fix

Either roll the file's imports into explain output when the target is a class contained by that file, or have explain on a class note that imports live on the file node and print the file node's edges alongside.

[filipechagas]

Triage: canonical issue for the explain-output work unit. #78 reports the same root cause (imports hang off the file node only; explain on a class node never rolls them up) and is closed into this issue. #86's second claim is the same defect and is also tracked here. Verified at v8 HEAD 4492f9f.

One display-only PR (no rebuild required), touching the explain block in graphify/cli.py plus its serve/MCP twin:

• Roll the containing file's imports edges up into class-node explain output (this issue / explain <ClassName> reports 1 of 5 dependencies: imports hang off the file node only (PHP 8.3 / Laravel) #78 / PHP/Laravel: config('key') reads produce no edge, and explain on a class node omits the file's imports #86-half).
• explain truncation hides listeners on high-degree nodes: 3 of 7 identifiable (PE-80043) #69 rides in the same PR (same ~50 lines): relation-priority ordering before the 20-entry cap, a relation-labeled truncation notice, and --limit/--all.

Folded in from #78: the 1-of-5 dependency measurement on a Laravel service class.