[CG-11] Walkthroughs from entry points (API route → what it does)

[jgrodziski]

Priority: P1
Owner: —
Depends on: CG-12 (#12) (Insights available in SQLite)

Context

Needed to win / deliver code-audit engagements: "for this API route, here is the path, here is what it does."

Description

1. Detect entry points — language + framework dependent (@GetMapping / @PostMapping annotations in Spring; something else in Rust or TypeScript)
2. Deterministically walk everything called / callable from the entry point
3. Feed that subgraph and the existing Insights to an LLM → "summary of what this route does"

Approach: don't try to hard-code every framework. Expose a skill that documents the database structure and how to find entry points for a given language+framework, with the SQL query stored and re-runnable (this is what was done by hand on a recent client audit). The contract must be clear, reusable, and editable by a human — the human corrects what the LLM got wrong.

Acceptance criteria

• Entry-point detection for Java/Spring as first profile, stored as a reusable query
• Deterministic call-closure from an entry point
• LLM summary per entry point, using Insights
• Packaged as a skill, extensible to other frameworks

---

Source: CodeGraph backlog extracted from the 2026-09-21 weekly (David / Jérémie).