Schema doesn't care which folder a file is in. It cares which functions call which, what fronts an HTTP route, what touches the database, and where the seams are.
It builds a typed graph: routes, services, middleware, data access, models. The same graph renders at three altitudes — Architecture (one card per cluster), Modules (one card per file), Detail (every function inside its cluster frame).
Watch the graph zoom from clusters down to a single function. That single function is requireAuth — the JWT middleware that gates this app's protected routes. Hold onto that name.