fix(ingestion): rescue local Express route middleware from unused-export detection

[joptimus]

Summary

• Detect Express route registrations on express()/Router()-initialised receivers and emit a reads edge from the file's ::__module__ symbol to each same-file middleware function passed by bare name, so local route middleware is no longer reported as an unused export.
• Source the edge from ::__module__ (not the file node) to avoid clobbering the existing file→symbol defines edge in the single-edge DiGraph; a balanced-paren scan handles multiline calls and middleware factories before the handler, and string literals are stripped so route paths aren't mistaken for identifiers.
• Keeps the fix narrow to Express: imported middleware (already rescued by import edges) and non-express()/Router() receivers (e.g. cache.get(fn)) are left untouched.

Related Issues

Fixes #373

Test Plan

• Tests pass (pytest) — tests/unit/ingestion/test_express_framework_edges.py (11 passed); tests/unit/analysis tests/unit/dead_code tests/unit/ingestion + TS/CommonJS dead-code integration (1303 passed, 2 xfailed)
• Lint passes (ruff check .)
• Web build passes (npm run build) (no frontend changes)

New coverage: route-method reads edges, app.use middleware, defines-edge preservation, nested middleware-factory args, the .js/CommonJS multiline router.post(...) shape from #373, non-route receivers in an Express file, non-Express files gated out, and a dead-code regression proving the middleware exports are no longer flagged.

Checklist

• My code follows the project's code style
• I have added tests for new functionality
• All existing tests still pass
• I have updated documentation if needed (no docs impact)

[repowise-bot]

✅ Health: 7.0 (unchanged)
_{2 files moved · 2 hotspots}

⚠️ Change risk: moderate _{(riskier than 48% of this repo's commits · raw 8.6/10)}
This change's risk is driven by:

• large diff (many lines added)

File	Score	Δ	Why
.../framework_edges/express.py	6.6 → 5.6	▼ -0.9	🔻 introduced nested complexity, complex method · ✅ resolved dry violation
.../ingestion/test_express_framework_edges.py	9.7 → 9.3	▼ -0.3	🔻 introduced duplicated assertion block · ✅ resolved dry violation

💡 .../framework_edges/express.py: Flatten the control flow. Pull early-return guards to the top, extract the deepest branch into a helper, and consider replacing nested conditionals with a strategy table or dispatch dict.

🔥 Hotspots touched (2)

• .../framework_edges/express.py — 2 commits/90d, 1 dependents · primary owner: Swati Ahuja (96%)
• .../ingestion/test_express_framework_edges.py — 1 commits/90d, 0 dependents · primary owner: Raghav Chamadiya (100%)

---

📊 Full report · ⭐ Star Repowise · 📥 Install bot · Last updated 2026-06-05 20:51 UTC
_{Silence on a single PR with [skip repowise] in the title · Per-repo toggle on repowise.dev/settings?tab=bot}