cg-code-graph 0.18.0__tar.gz → 0.19.1__tar.gz

{cg_code_graph-0.18.0/cg_code_graph.egg-info → cg_code_graph-0.19.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: cg-code-graph
-Version: 0.18.0
+Version: 0.19.1
 Summary: cg: a code graph of routes, calls, data access and platform boundaries for agents and humans (CLI + MCP server)
 Author: cyberchronos00
 License-Expression: MIT
@@ -74,8 +74,8 @@ dependents: 18 nodes  (code: 6, entry points: 9, other: 3)
 | Language | Frameworks and facts | Calls | Docs |
 |---|---|---|---|
 | ![Python](https://img.shields.io/badge/Python-3776AB?logo=python&logoColor=white) | Django (+ DRF, django-ninja), FastAPI / Starlette, Flask, Celery | exact (stdlib `ast`) | [Python](https://code-graph.cyberchronos00.workers.dev/docs/python) |
-| ![TypeScript](https://img.shields.io/badge/TypeScript-3178C6?logo=typescript&logoColor=white) ![JavaScript](https://img.shields.io/badge/JavaScript-F7DF1E?logo=javascript&logoColor=black) | Nuxt / Vue, NestJS, Next.js, Astro, Express, Fastify, Koa, Hono | exact (TypeScript compiler API) | [TS frameworks](https://code-graph.cyberchronos00.workers.dev/docs/ts-frameworks) |
-| ![PHP](https://img.shields.io/badge/PHP-777BB4?logo=php&logoColor=white) | Laravel (routes and middleware, queues, broadcasting) | exact (nikic/php-parser; needs PHP 8.2+) | [PHP](https://code-graph.cyberchronos00.workers.dev/docs/php) |
+| ![TypeScript](https://img.shields.io/badge/TypeScript-3178C6?logo=typescript&logoColor=white) ![JavaScript](https://img.shields.io/badge/JavaScript-F7DF1E?logo=javascript&logoColor=black) | Nuxt / Vue, NestJS, Next.js, Astro, Express, Fastify, Koa, Hono, Elysia, React Router / Remix | exact (TypeScript compiler API) | [TS frameworks](https://code-graph.cyberchronos00.workers.dev/docs/ts-frameworks) |
+| ![PHP](https://img.shields.io/badge/PHP-777BB4?logo=php&logoColor=white) | Laravel (routes, middleware, queues, broadcasting, outbound HTTP) | exact (nikic/php-parser; needs PHP 8.2+) | [PHP](https://code-graph.cyberchronos00.workers.dev/docs/php) |
 | ![Dart](https://img.shields.io/badge/Dart-0175C2?logo=dart&logoColor=white) | Flutter | exact (Dart analyzer; needs the Dart SDK) | [Platforms](https://code-graph.cyberchronos00.workers.dev/docs/platforms) |
 | ![Kotlin](https://img.shields.io/badge/Kotlin-7F52FF?logo=kotlin&logoColor=white) | Android, Kotlin Multiplatform, Spring | heuristic; exact with scip-java (opt-in) | [Kotlin](https://code-graph.cyberchronos00.workers.dev/docs/kotlin) |
 | ![Java](https://img.shields.io/badge/Java-ED8B00?logo=openjdk&logoColor=white) | Spring (routes, guards, beans, tables, clients) | heuristic; exact with scip-java (opt-in) | [Java](https://code-graph.cyberchronos00.workers.dev/docs/java) |
@@ -88,7 +88,7 @@ Go and others: import a SCIP index with `cg index --scip FILE`. Run `cg doctor`
 
 - `reaches`, `impact`, `path`: every caller, route, job and page that reaches a table, config key or method.
 - `cg affected --base main`: the tests and entry points a change reaches (`--quiet` feeds your test runner).
-- Frontend ↔ backend: `cg link` matches client HTTP calls to server routes across repos.
+- Across repos: `cg link` matches client HTTP calls (frontends and Laravel / Guzzle backends) to server routes.
 - Route guards: `cg routes --writes --unguarded` lists routes that write with no auth guard.
 - MCP server (`cg-mcp`) so agents query the graph instead of grepping.
 - Visual view (`cg serve`) and plan checks (`cg plan check`) for planned changes.

{cg_code_graph-0.18.0 → cg_code_graph-0.19.1}/README.md

@@ -47,8 +47,8 @@ dependents: 18 nodes  (code: 6, entry points: 9, other: 3)
 | Language | Frameworks and facts | Calls | Docs |
 |---|---|---|---|
 | ![Python](https://img.shields.io/badge/Python-3776AB?logo=python&logoColor=white) | Django (+ DRF, django-ninja), FastAPI / Starlette, Flask, Celery | exact (stdlib `ast`) | [Python](https://code-graph.cyberchronos00.workers.dev/docs/python) |
-| ![TypeScript](https://img.shields.io/badge/TypeScript-3178C6?logo=typescript&logoColor=white) ![JavaScript](https://img.shields.io/badge/JavaScript-F7DF1E?logo=javascript&logoColor=black) | Nuxt / Vue, NestJS, Next.js, Astro, Express, Fastify, Koa, Hono | exact (TypeScript compiler API) | [TS frameworks](https://code-graph.cyberchronos00.workers.dev/docs/ts-frameworks) |
-| ![PHP](https://img.shields.io/badge/PHP-777BB4?logo=php&logoColor=white) | Laravel (routes and middleware, queues, broadcasting) | exact (nikic/php-parser; needs PHP 8.2+) | [PHP](https://code-graph.cyberchronos00.workers.dev/docs/php) |
+| ![TypeScript](https://img.shields.io/badge/TypeScript-3178C6?logo=typescript&logoColor=white) ![JavaScript](https://img.shields.io/badge/JavaScript-F7DF1E?logo=javascript&logoColor=black) | Nuxt / Vue, NestJS, Next.js, Astro, Express, Fastify, Koa, Hono, Elysia, React Router / Remix | exact (TypeScript compiler API) | [TS frameworks](https://code-graph.cyberchronos00.workers.dev/docs/ts-frameworks) |
+| ![PHP](https://img.shields.io/badge/PHP-777BB4?logo=php&logoColor=white) | Laravel (routes, middleware, queues, broadcasting, outbound HTTP) | exact (nikic/php-parser; needs PHP 8.2+) | [PHP](https://code-graph.cyberchronos00.workers.dev/docs/php) |
 | ![Dart](https://img.shields.io/badge/Dart-0175C2?logo=dart&logoColor=white) | Flutter | exact (Dart analyzer; needs the Dart SDK) | [Platforms](https://code-graph.cyberchronos00.workers.dev/docs/platforms) |
 | ![Kotlin](https://img.shields.io/badge/Kotlin-7F52FF?logo=kotlin&logoColor=white) | Android, Kotlin Multiplatform, Spring | heuristic; exact with scip-java (opt-in) | [Kotlin](https://code-graph.cyberchronos00.workers.dev/docs/kotlin) |
 | ![Java](https://img.shields.io/badge/Java-ED8B00?logo=openjdk&logoColor=white) | Spring (routes, guards, beans, tables, clients) | heuristic; exact with scip-java (opt-in) | [Java](https://code-graph.cyberchronos00.workers.dev/docs/java) |
@@ -61,7 +61,7 @@ Go and others: import a SCIP index with `cg index --scip FILE`. Run `cg doctor`
 
 - `reaches`, `impact`, `path`: every caller, route, job and page that reaches a table, config key or method.
 - `cg affected --base main`: the tests and entry points a change reaches (`--quiet` feeds your test runner).
-- Frontend ↔ backend: `cg link` matches client HTTP calls to server routes across repos.
+- Across repos: `cg link` matches client HTTP calls (frontends and Laravel / Guzzle backends) to server routes.
 - Route guards: `cg routes --writes --unguarded` lists routes that write with no auth guard.
 - MCP server (`cg-mcp`) so agents query the graph instead of grepping.
 - Visual view (`cg serve`) and plan checks (`cg plan check`) for planned changes.

{cg_code_graph-0.18.0 → cg_code_graph-0.19.1}/cg_code_graph/__init__.py

@@ -1,2 +1,2 @@
 """code-graph: deterministic code knowledge graph (beta)."""
-__version__ = "0.18.0"
+__version__ = "0.19.1"

{cg_code_graph-0.18.0 → cg_code_graph-0.19.1}/cg_code_graph/core/detect.py

@@ -59,6 +59,10 @@ def detect(root: Path) -> dict:
         fw["astro"] = {"version": deps.get("astro")}
     if "vue" in deps:
         fw["vue"] = {"version": deps.get("vue")}
+    from ..plugins.ts.react_router import is_react_router
+    if is_react_router(root):
+        ver = deps.get("react-router") or deps.get("react-router-dom") or deps.get("@remix-run/react")
+        fw["react-router"] = {"version": ver} if ver else {}
     from ..plugins.tsweb.common import SERVER_DEPS   # TS / JS servers (NestJS, Next.js, Express / Koa / Fastify / Hono ...)
     for name, pkgs in SERVER_DEPS.items():
         hit = [d for d in pkgs if d in deps]

cg_code_graph-0.19.1/cg_code_graph/core/env.py

@@ -0,0 +1,78 @@
+"""Process environment: ``CG_*`` names only.
+
+``get`` reads ``os.environ`` on every call. A leftover ``CODEGRAPH_*`` name from this project
+does not affect the value. The first read prints one stderr notice naming each leftover and
+its ``CG_*`` replacement. ``CODEGRAPH_MCP_TOOLS`` belongs to another project and is ignored
+silently.
+"""
+from __future__ import annotations
+
+import os
+import sys
+
+# Suffixes this project reads. ``CODEGRAPH_CACHE_DIR`` renames to ``CG_CACHE``.
+SUFFIXES = (
+    "CACHE", "CACHE_DIR", "CARGO", "CFAMILY", "COMPDB", "C_MASK_ANNOTATIONS", "C_MAX_MACRO_REFS",
+    "C_SCIP", "C_SCIP_FILE", "EXCLUDE_DIRS", "INCLUDE_DIRS", "INDEXER_TIMEOUT", "JOBS",
+    "JAVA_SCIP", "JAVA_SCIP_FILE", "KOTLIN_SCIP", "KOTLIN_SCIP_FILE", "LIBINDEXSTORE",
+    "MAX_FILE_BYTES", "NODE", "NO_CACHE",
+    "NO_CARGO", "NO_HOOKS", "NO_STALE_CHECK", "RUST_ANALYZER", "RUST_BUILD_SCRIPTS", "RUST_SCIP",
+    "RUST_SCIP_FILE", "RUST_TARGETS", "SCIP_CLANG", "SCIP_JAVA", "SWIFT", "SWIFT_INDEX",
+    "SWIFT_INDEX_STORE",
+)
+_NO_LEGACY = frozenset({"MCP_TOOLS", "CACHE_DIR"})
+_noted = False
+
+
+def replacements() -> dict[str, str]:
+    """Old name -> ``CG_*`` name, in suffix order. ``CACHE_DIR`` is ``CG_CACHE``."""
+    out: dict[str, str] = {}
+    for name in SUFFIXES:
+        if name in _NO_LEGACY:
+            continue
+        if name == "CACHE":
+            out["CODEGRAPH_CACHE"] = "CG_CACHE"
+            out["CODEGRAPH_CACHE_DIR"] = "CG_CACHE"
+        else:
+            out["CODEGRAPH_" + name] = "CG_" + name
+    return out
+
+
+def note_removed() -> list[str]:
+    """Print one stderr line when any removed name is set. Returns those old names."""
+    global _noted
+    mapping = replacements()
+    found = [old for old in mapping if old in os.environ]
+    if _noted:
+        return found
+    _noted = True
+    if found:
+        pairs = ", ".join(f"{old} -> {mapping[old]}" for old in found)
+        print(f"cg: ignored removed environment variables: {pairs}", file=sys.stderr)
+    return found
+
+
+def get(name: str, default=None) -> str | None:
+    """``CG_<name>`` when set, else ``default``. Removed ``CODEGRAPH_*`` names are ignored."""
+    note_removed()
+    new = "CG_" + name
+    if new in os.environ:
+        return os.environ[new]
+    return default
+
+
+def is_set(name: str) -> bool:
+    """True when ``CG_<name>`` is present in the environment."""
+    note_removed()
+    return ("CG_" + name) in os.environ
+
+
+def flag(name: str) -> bool:
+    """True when the value is set and not a false-like token (``0``, ``false``, ``no``, ``off``)."""
+    val = get(name)
+    return val is not None and val.strip().lower() not in ("", "0", "false", "no", "off")
+
+
+def legacy_in_env() -> list[str]:
+    """Removed ``CODEGRAPH_*`` names from this project that are present (for ``cg doctor``)."""
+    return note_removed()

{cg_code_graph-0.18.0 → cg_code_graph-0.19.1}/cg_code_graph/core/extractors.py

@@ -5,8 +5,9 @@ The extractor sources ship inside the package (cg_code_graph/plugins/{ts,php,dar
 
 - a checkout whose extractor directory already has them (`npm ci` run there) keeps using that directory;
 - otherwise the sources are copied into a per-user cache directory and the dependencies installed there, on first
-  use or by `cg setup`. The directory is keyed by the lock file, so an update that only changes the extractor source
-  reuses the installed dependencies, and one that changes the lock file installs into a fresh directory.
+  use or by `cg setup`. The directory is keyed by the lock file and the extractor sources (names and contents), so a
+  release that adds or edits a module installs into a fresh directory. A cache directory that is missing a listed
+  source is incomplete and is rebuilt.
 
 Cache root (core/cache.py): $CG_CACHE, else %LOCALAPPDATA%\\cg on Windows,
 else $XDG_CACHE_HOME/cg or ~/.cache/cg; the extractors live in <root>/extractors.
@@ -46,7 +47,8 @@ class Spec:
 
 
 SPECS = {
-    "typescript": Spec("typescript", PLUGINS / "ts" / "extractor", ("extract.mjs", "fw.mjs", "package.json", "package-lock.json"),
+    "typescript": Spec("typescript", PLUGINS / "ts" / "extractor", ("extract.mjs", "fw.mjs", "rr.mjs", "package.json",
+                                                                  "package-lock.json"),
                        "package-lock.json", ("node_modules/typescript/package.json",), "npm", "TypeScript / JavaScript"),
     "php": Spec("php", PLUGINS / "php" / "extractor", ("extract.php", "composer.json", "composer.lock"), "composer.lock",
                 ("vendor/autoload.php",), "composer", "PHP"),
@@ -63,20 +65,42 @@ def _installed(d: Path, spec: Spec) -> bool:
     return any((d / m).exists() for m in spec.markers)
 
 
+def _missing_sources(spec: Spec, d: Path) -> list[str]:
+    """Listed sources that exist in the package but not in the cache directory."""
+    return [rel for rel in spec.sources if (spec.pkg / rel).exists() and not (d / rel).exists()]
+
+
+def _cache_key(spec: Spec) -> str:
+    """Lock file plus every source path and its bytes, so a new or edited module does not reuse an old install."""
+    h = hashlib.sha256()
+    lock = spec.pkg / spec.lock
+    h.update(lock.read_bytes() if lock.exists() else b"")
+    for rel in spec.sources:
+        h.update(b"\0")
+        h.update(rel.encode())
+        src = spec.pkg / rel
+        h.update(b"\0")
+        h.update(src.read_bytes() if src.exists() else b"")
+    return h.hexdigest()[:12]
+
+
 def cache_dir(lang: str) -> Path:
     spec = SPECS[lang]
-    lock = spec.pkg / spec.lock
-    key = hashlib.sha256(lock.read_bytes() if lock.exists() else b"").hexdigest()[:12]
-    return cache_root() / f"{lang}-{key}"
+    return cache_root() / f"{lang}-{_cache_key(spec)}"
 
 
 def workdir(lang: str) -> Path:
     """The directory the extractor runs from: the package's own one when its dependencies are installed there (a
-    development checkout), else the cache directory (sources synced into it; dependencies maybe not yet installed)."""
+    development checkout), else the cache directory (sources synced into it; dependencies maybe not yet installed).
+    A cache directory missing a listed source is rebuilt from the package sources."""
     spec = SPECS[lang]
     if _installed(spec.pkg, spec):
         return spec.pkg
     d = cache_dir(lang)
+    if d.exists() and _missing_sources(spec, d):
+        # Incomplete copy (for example a 0.19.0 typescript cache that predates a module): drop it and start over
+        # when the key still matches, otherwise cache_dir already points at a fresh directory.
+        shutil.rmtree(d, ignore_errors=True)
     _sync(spec, d)
     return d
 
@@ -101,7 +125,8 @@ def status(lang: str) -> dict:
     if _installed(spec.pkg, spec):
         return {"installed": True, "dir": str(spec.pkg), "where": "package"}
     d = cache_dir(lang)
-    return {"installed": _installed(d, spec), "dir": str(d), "where": "cache"}
+    ready = _installed(d, spec) and not _missing_sources(spec, d)
+    return {"installed": ready, "dir": str(d), "where": "cache"}
 
 
 JS_RUNTIME_MISSING = (

{cg_code_graph-0.18.0 → cg_code_graph-0.19.1}/cg_code_graph/doctor.py

@@ -471,7 +471,8 @@ def _legacy_lines(r: dict) -> list[str]:
     names = r.get("legacy_env") or []
     if names:
         shown = ", ".join(names)
-        lines.append(f"note: {shown} is set; use the CG_* name (removed in 0.19.0)")
+        lines.append(f"note: {shown} no longer affects cg; rename each CODEGRAPH_* name to CG_* "
+                     "(CODEGRAPH_CACHE and CODEGRAPH_CACHE_DIR become CG_CACHE)")
     leg = r.get("legacy_cache") or None
     if leg:
         if leg.get("path"):

{cg_code_graph-0.18.0 → cg_code_graph-0.19.1}/cg_code_graph/hooks.py

@@ -42,6 +42,12 @@ _BLOCK = re.compile(re.escape(BEGIN) + r".*?" + re.escape(END) + r"\n?", re.S)
 _SHELLS = {"sh", "bash", "dash", "ksh", "zsh", "ash"}
 _SHEBANG_ONLY = "#!/bin/sh"
 _OLD_CLI = "-m " + "codegraph" + ".cli"
+_OLD_NO_HOOKS = "CODEGRAPH_NO_HOOKS"
+
+
+def _block_outdated(block: str) -> bool:
+    """A 0.17/0.18 block that still checks CODEGRAPH_NO_HOOKS, or the pre-0.17 CLI."""
+    return _OLD_CLI in block or _OLD_NO_HOOKS in block
 
 
 def _sh_quote(text: str) -> str:
@@ -101,7 +107,7 @@ def _block_text(hook: str, root: str, db: str, py: str) -> str:
         f"# cg-root: {root}",
         f"# cg-db: {db}",
         f"# cg-hook: {hook}",
-        'if [ "${CG_NO_HOOKS:-${CODEGRAPH_NO_HOOKS:-}}" != 1 ]; then',
+        'if [ "${CG_NO_HOOKS:-}" != 1 ]; then',
     ]
     if hook == "post-checkout":
         lines.append('  if [ "$1" != "$2" ]; then')
@@ -211,7 +217,7 @@ def _status_line(path: Path, hook: str) -> str:
     found = _BLOCK.search(text)
     if not found:
         return f"{hook}: not installed"
-    if _OLD_CLI in found.group(0):
+    if _block_outdated(found.group(0)):
         return f"outdated hook {hook}: re-run cg hooks install"
     root, db = _meta(text)
     extra = ""
@@ -282,14 +288,14 @@ def run(action: str, root: str = ".", db: str | None = None, dry_run: bool = Fal
 
 
 def outdated_names(root: str | Path) -> list[str]:
-    """Hook names whose cg block still runs the removed `codegraph.cli` module."""
+    """Hook names whose cg block still runs `codegraph.cli` or checks `CODEGRAPH_NO_HOOKS`."""
     hooks = _hooks_dir(Path(root))
     if hooks is None:
         return []
     out = []
     for hook in HOOKS:
         found = _BLOCK.search(_read(hooks / hook))
-        if found and _OLD_CLI in found.group(0):
+        if found and _block_outdated(found.group(0)):
             out.append(hook)
     return out
 

{cg_code_graph-0.18.0 → cg_code_graph-0.19.1}/cg_code_graph/indexer.py

@@ -102,6 +102,12 @@ def setup(project: Project) -> dict:
     names = {k: v for k, v in found.items() if k not in remove}
     for k in sorted(add):
         names.setdefault(k, ".cg.yaml")
+    # Elysia shares the Express plugin and preset. The coverage label is elysia, not express (via elysia).
+    det_fw = project.detected.get("frameworks") or {}
+    if "elysia" in det_fw and "elysia" not in remove:
+        if "express" in names and "express" not in det_fw:
+            names.pop("express")
+        names.setdefault("elysia", "detected")
     applied = presets.select([lp.name for lp in langs], list(names))
     project.options["presets"] = applied
     return {"language_plugins": langs, "framework_plugins": fws, "languages": [lp.name for lp in langs],
@@ -411,6 +417,8 @@ def index_project(root: str | Path, db_path: str | Path, name: str | None = None
     finally:
         gst.db.close()
     stats["starters_seconds"] = round(time.time() - t_st, 2)
+    from .plugins.ts.react_router import reconcile_detection
+    reconcile_detection(project, plan, stats)
     stats["coverage"]["setup"] = {"frameworks": sorted(plan["frameworks"]), "presets": plan["presets"],
                                   "config": cfg.get("file")}
     if pl:       # per-target coverage: what each declared target builds, conditions left unevaluated

{cg_code_graph-0.18.0 → cg_code_graph-0.19.1}/cg_code_graph/link.py

@@ -16,7 +16,8 @@ Matching is deterministic (no guessing):
   - segments match when literal == literal, client placeholder <-> route {param},
     client literal -> route {param} (resolved), or a client segment with an embedded
     placeholder fully matches a route literal (heuristic, e.g. export.{format} ~ export.csv);
-  - method must match (HEAD ~ GET); the most specific route (most literal==literal segments)
+  - method must match (HEAD ~ GET); a client verb `ANY` matches only when one route fits the
+    path, and that match is `heuristic`. The most specific route (most literal==literal segments)
     wins; ties are kept and marked heuristic (ambiguous).
 
 Realtime: client channel subscriptions (channel_sub:<name>, from Echo / pusher-js / useEcho) get MATCHES_CHANNEL ->
@@ -94,6 +95,8 @@ def match_path(client: str, route: str) -> tuple[bool, dict]:
 
 
 def _method_ok(cm: str, rm: str) -> bool:
+    if (cm or "").upper() == "ANY":
+        return True
     rms = set(rm.upper().replace("|", ",").split(","))
     return cm in rms or "ANY" in rms or (cm == "HEAD" and "GET" in rms)
 
@@ -180,6 +183,13 @@ def match_endpoint(method: str, path: str, routes: list[dict], origin_kind: str
     key = lambda h: (-h[2]["ph_into_lit"], h[2]["lit"])
     top = max(key(h) for h in hits)
     best = [h for h in hits if key(h) == top]
+    if method.upper() == "ANY":
+        if len(best) != 1:
+            return {"matched": [], "path": path, "reason": "ANY verb matches only a unique path",
+                    "near": [h[0]["id"] for h in best][:3]}
+        r, variant, info = best[0]
+        return {"matched": [{"route": r["id"], "uri_variant": variant, "confidence": "heuristic", "segments": info}],
+                "path": path}
     out = []
     for r, variant, info in best:
         conf = "exact"

{cg_code_graph-0.18.0 → cg_code_graph-0.19.1}/cg_code_graph/mcp_server.py

@@ -44,7 +44,7 @@ server = MCPServer(
         "Code graph of a project: classes, functions, routes, commands, jobs, pages, DB tables/columns, connections, "
         "config/env keys, each edge with file:line evidence and a confidence (exact / resolved / heuristic). Stacks: "
         "For a broad question ('how does X work') start with `explore`: source, entry points, call paths and blast radius in one call. "
-        "Laravel, Django (django-ninja, DRF), FastAPI/Starlette, Flask, NestJS, Next.js, Express/Fastify/Koa/Hono, Nuxt/Vue, Flutter/Dart, Rust, C, C++. "
+        "Laravel, Django (django-ninja, DRF), FastAPI/Starlette, Flask, NestJS, Next.js, Express/Fastify/Koa/Hono/Elysia, Nuxt/Vue, React Router / Remix, Flutter/Dart, Rust, C, C++. "
         "Check the blast radius before editing: `reaches` lists everything that depends on a symbol/column/connection "
         "(grouped runtime / library / operator / UI / dev / gated), `impact` gives callers up to entry points, `siblings` "
         "finds parallel code that usually needs the same change, `writers` shows who writes a table, `routes` lists routes "
@@ -911,7 +911,7 @@ def routes(writes: str | None = None, reaches: list[str] | None = None, missing:
     method, env key...). Optional filters: missing="<name>" keeps routes with no guard whose name contains it (e.g.
     "auth:api", "ApiKeyGuard"), unguarded=true keeps routes with no auth guard (the framework presets' auth guards and
     the auth name pattern; extend with auth_pattern, a regex, or .cg.yaml auth.extra_patterns). Each route: guards, what it reaches with one evidence chain, and the frontend callers on a
-    combined graph. Guards come from Laravel middleware, Nest guards/interceptors, Express/Koa/Fastify/Hono
+    combined graph. Guards come from Laravel middleware, Nest guards/interceptors, Express/Koa/Fastify/Hono/Elysia
     middleware, Next.js middleware.ts / handler wrappers, django-ninja auth= and Django/DRF view access checks.
     min_confidence: keep the default (heuristic) for reviews: every edge still shows its own label, and a stricter
     level names the routes it hides.