sigmap 6.2.0 → 6.3.0

package/AGENTS.md

@@ -9,28 +9,53 @@ When writing generated signature content, never overwrite human-written notes ab
 Use this marker block for all appendable context files:
 
 ```
+## Tools
+
+<!-- sigmap-tools -->
+
+```json
+[
+  {
+    "name": "sigmap_ask",
+    "description": "Rank source files by relevance to a natural-language query. Run before exploring the codebase.",
+    "command": "sigmap ask \"$QUERY\""
+  },
+  {
+    "name": "sigmap_validate",
+    "description": "Validate SigMap config and measure context coverage. Run after changing config or source dirs.",
+    "command": "sigmap validate"
+  },
+  {
+    "name": "sigmap_judge",
+    "description": "Score an LLM response for groundedness against source context. Use to verify answer quality.",
+    "command": "sigmap judge --response \"$RESPONSE\" --context \"$CONTEXT\""
+  },
+  {
+    "name": "sigmap_query",
+    "description": "Rank all files by relevance using TF-IDF and write a focused mini-context.",
+    "command": "sigmap --query \"$QUERY\" --context"
+  },
+  {
+    "name": "sigmap_weights",
+    "description": "Show learned file-ranking multipliers accumulated from past sessions.",
+    "command": "sigmap weights"
+  }
+]
+```
+
 ## Auto-generated signatures
 <!-- Updated by gen-context.js -->
 # Code signatures
 
-## SigMap commands
-
-| When | Command |
-|------|---------|
-| Before answering a question | `sigmap ask "<your question>"` |
-| After code changes | `sigmap validate` |
-| To query by topic | `sigmap --query "<topic>"` |
-
-Always run `sigmap ask` or `sigmap --query` before searching for files relevant to a task.
-## changes (last 5 commits — 21 minutes ago)
+## changes (last 5 commits — 0 seconds ago)
 ```
 src/learning/weights.js                       +exportWeights  +importWeights  ~resetWeights
-packages/adapters/claude.js                   ~format
-packages/adapters/codex.js                    ~format
+packages/adapters/codex.js                    ~write  ~format
+packages/adapters/claude.js                   ~format  ~write
 packages/adapters/gemini.js                   ~format
 packages/adapters/copilot.js                  ~format
-packages/adapters/openai.js                   ~format
 packages/adapters/cursor.js                   ~format
+packages/adapters/openai.js                   ~format
 packages/adapters/windsurf.js                 ~format
 ```
 
@@ -91,19 +116,19 @@ function score(cwd) → { * score: number, * grad
 function adapt(context, adapterName, opts = {}) → string
 ```
 
-### packages/adapters/claude.js
+### packages/adapters/codex.js
 ```
 module.exports = { name, format, outputPath, write }
 function format(context, opts = {}) → string
-function _confidenceMeta(opts)
 function outputPath(cwd) → string
 function write(context, cwd, opts = {})
 ```
 
-### packages/adapters/codex.js
+### packages/adapters/claude.js
 ```
 module.exports = { name, format, outputPath, write }
 function format(context, opts = {}) → string
+function _confidenceMeta(opts)
 function outputPath(cwd) → string
 function write(context, cwd, opts = {})
 ```
@@ -126,20 +151,20 @@ function outputPath(cwd) → string
 function write(context, cwd, opts = {})
 ```
 
-### packages/adapters/openai.js
+### packages/adapters/cursor.js
 ```
 module.exports = { name, format, outputPath }
 function format(context, opts = {}) → string
-function outputPath(cwd) → string
 function _confidenceMeta(opts)
+function outputPath(cwd) → string
 ```
 
-### packages/adapters/cursor.js
+### packages/adapters/openai.js
 ```
 module.exports = { name, format, outputPath }
 function format(context, opts = {}) → string
-function _confidenceMeta(opts)
 function outputPath(cwd) → string
+function _confidenceMeta(opts)
 ```
 
 ### packages/adapters/windsurf.js
@@ -648,15 +673,6 @@ function extractClassMembers(block)
 function normalizeParams(params)
 ```
 
-### src/mcp/server.js
-```
-module.exports = { start }
-function respond(id, result)
-function respondError(id, code, message)
-function dispatch(msg, cwd)
-function start(cwd)
-```
-
 ### src/learning/weights.js
 ```
 module.exports = { BASELINE, DECAY, MAX_MULT, MIN_MULT, weightsPath, clampMultiplier, normalizeFile, loadWeights, saveWeights, updateWeights, boostFiles, penalizeFiles, resetWeights, exportWeights, importWeights }
@@ -673,3 +689,12 @@ function resetWeights(cwd)
 function exportWeights(cwd, outputPath)
 function importWeights(cwd, importPath, replace)
 ```
+
+### src/mcp/server.js
+```
+module.exports = { start }
+function respond(id, result)
+function respondError(id, code, message)
+function dispatch(msg, cwd)
+function start(cwd)
+```

package/CHANGELOG.md

@@ -10,6 +10,14 @@ Format: [Semantic Versioning](https://semver.org/)
 
 ---
 
+## [6.3.0] — 2026-04-22
+
+### Added
+
+- **Native tool registration (Level 3)** — `codex.write()` injects a `## Tools` JSON block into AGENTS.md with 5 named sigmap shell tools (`sigmap_ask`, `sigmap_validate`, `sigmap_judge`, `sigmap_query`, `sigmap_weights`); Codex CLI and OpenCode surface these in their tool picker. `claude.write()` injects a `## Bash allowlist` section into CLAUDE.md with `permissions.allow` patterns for all sigmap commands; adding these to `.claude/settings.json` bypasses the Claude Code confirmation prompt. Both sections are idempotent and preserve human content.
+
+---
+
 ## [6.2.0] — 2026-04-22
 
 ### Added

package/gen-context.js

@@ -5387,7 +5387,7 @@ __factories["./src/mcp/server"] = function(module, exports) {
   
   const SERVER_INFO = {
     name: 'sigmap',
-  version: '6.2.0',
+  version: '6.3.0',
     description: 'SigMap MCP server — code signatures on demand',
   };
   
@@ -6789,6 +6789,36 @@ __factories["./packages/adapters/claude"] = function(module, exports) {
   const fs = require('fs');
   const name = 'claude';
   const CLAUDE_MARKER = '\n\n## Auto-generated signatures\n<!-- Updated by gen-context.js -->\n';
+  const CLAUDE_ALLOWLIST_MARKER = '<!-- sigmap-bash-allowlist -->';
+  const CLAUDE_ALLOWLIST_BLOCK = [
+    '## Bash allowlist',
+    '',
+    CLAUDE_ALLOWLIST_MARKER,
+    '',
+    'The following sigmap commands are pre-approved — Claude Code will not prompt for confirmation:',
+    '',
+    '```json',
+    JSON.stringify({
+      permissions: {
+        allow: [
+          'Bash(sigmap ask*)',
+          'Bash(sigmap validate*)',
+          'Bash(sigmap judge*)',
+          'Bash(sigmap weights*)',
+          'Bash(sigmap history*)',
+          'Bash(sigmap --query*)',
+          'Bash(sigmap --diff*)',
+          'Bash(sigmap --health*)',
+          'Bash(sigmap --coverage*)',
+          'Bash(node gen-context.js*)',
+        ],
+      },
+    }, null, 2),
+    '```',
+    '',
+    'Add the `permissions.allow` array above to `.claude/settings.json` to activate.',
+    '',
+  ].join('\n');
   function format(context, opts = {}) {
     if (!context || typeof context !== 'string') return '';
     const version = (opts && opts.version) || 'unknown';
@@ -6812,9 +6842,17 @@ __factories["./packages/adapters/claude"] = function(module, exports) {
     if (fs.existsSync(filePath)) existing = fs.readFileSync(filePath, 'utf8');
     const formatted = format(context, opts);
     const markerIdx = existing.indexOf('## Auto-generated signatures');
-    const newContent = markerIdx !== -1
+    let newContent = markerIdx !== -1
       ? existing.slice(0, markerIdx) + CLAUDE_MARKER.trimStart() + formatted
       : existing + CLAUDE_MARKER + formatted;
+    if (!newContent.includes(CLAUDE_ALLOWLIST_MARKER)) {
+      const sigPos = newContent.indexOf('## Auto-generated signatures');
+      if (sigPos !== -1) {
+        newContent = newContent.slice(0, sigPos) + CLAUDE_ALLOWLIST_BLOCK + '\n' + newContent.slice(sigPos);
+      } else {
+        newContent = CLAUDE_ALLOWLIST_BLOCK + '\n' + newContent;
+      }
+    }
     fs.writeFileSync(filePath, newContent, 'utf8');
   }
   module.exports = { name, format, outputPath, write };
@@ -6941,6 +6979,23 @@ __factories["./packages/adapters/codex"] = function(module, exports) {
   const fs = require('fs');
   const name = 'codex';
   const CODEX_MARKER = '\n\n## Auto-generated signatures\n<!-- Updated by gen-context.js -->\n';
+  const CODEX_TOOLS_MARKER = '<!-- sigmap-tools -->';
+  const CODEX_TOOLS_BLOCK = [
+    '## Tools',
+    '',
+    CODEX_TOOLS_MARKER,
+    '',
+    '```json',
+    JSON.stringify([
+      { name: 'sigmap_ask', description: 'Rank source files by relevance to a natural-language query. Run before exploring the codebase.', command: 'sigmap ask "$QUERY"' },
+      { name: 'sigmap_validate', description: 'Validate SigMap config and measure context coverage. Run after changing config or source dirs.', command: 'sigmap validate' },
+      { name: 'sigmap_judge', description: 'Score an LLM response for groundedness against source context. Use to verify answer quality.', command: 'sigmap judge --response "$RESPONSE" --context "$CONTEXT"' },
+      { name: 'sigmap_query', description: 'Rank all files by relevance using TF-IDF and write a focused mini-context.', command: 'sigmap --query "$QUERY" --context' },
+      { name: 'sigmap_weights', description: 'Show learned file-ranking multipliers accumulated from past sessions.', command: 'sigmap weights' },
+    ], null, 2),
+    '```',
+    '',
+  ].join('\n');
   function format(context, opts = {}) {
     if (!context || typeof context !== 'string' || !context.trim()) return '';
     const toolBlock = [
@@ -6965,9 +7020,17 @@ __factories["./packages/adapters/codex"] = function(module, exports) {
     const formatted = format(context, opts);
     const markerIdx = existing.indexOf('## Auto-generated signatures');
     const isLegacyGenerated = existing.includes('<!-- Generated by SigMap gen-context.js') || existing.includes('## Code Signatures') || existing.includes('# Code signatures');
-    const newContent = markerIdx !== -1
+    let newContent = markerIdx !== -1
       ? existing.slice(0, markerIdx) + CODEX_MARKER.trimStart() + formatted
       : (isLegacyGenerated ? CODEX_MARKER.trimStart() + formatted : existing + CODEX_MARKER + formatted);
+    if (!newContent.includes(CODEX_TOOLS_MARKER)) {
+      const sigPos = newContent.indexOf('## Auto-generated signatures');
+      if (sigPos !== -1) {
+        newContent = newContent.slice(0, sigPos) + CODEX_TOOLS_BLOCK + '\n' + newContent.slice(sigPos);
+      } else {
+        newContent = CODEX_TOOLS_BLOCK + '\n' + newContent;
+      }
+    }
     fs.writeFileSync(filePath, newContent, 'utf8');
   }
   module.exports = { name, format, outputPath, write };
@@ -7159,7 +7222,7 @@ const path = require('path');
 const os = require('os');
 const { execSync } = require('child_process');
 
-const VERSION = '6.2.0';
+const VERSION = '6.3.0';
 const MARKER = '\n\n## Auto-generated signatures\n<!-- Updated by gen-context.js -->\n';
 
 function requireSourceOrBundled(key) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sigmap",
-  "version": "6.2.0",
+  "version": "6.3.0",
   "description": "Zero-dependency AI context engine — 97% token reduction. No npm install. Runs on Node 18+.",
   "main": "gen-context.js",
   "exports": {

package/packages/adapters/claude.js

@@ -16,6 +16,37 @@ const fs = require('fs');
 const name = 'claude';
 
 const MARKER = '\n\n## Auto-generated signatures\n<!-- Updated by gen-context.js -->\n';
+const ALLOWLIST_MARKER = '<!-- sigmap-bash-allowlist -->';
+
+const ALLOWLIST_BLOCK = [
+  '## Bash allowlist',
+  '',
+  ALLOWLIST_MARKER,
+  '',
+  'The following sigmap commands are pre-approved — Claude Code will not prompt for confirmation:',
+  '',
+  '```json',
+  JSON.stringify({
+    permissions: {
+      allow: [
+        'Bash(sigmap ask*)',
+        'Bash(sigmap validate*)',
+        'Bash(sigmap judge*)',
+        'Bash(sigmap weights*)',
+        'Bash(sigmap history*)',
+        'Bash(sigmap --query*)',
+        'Bash(sigmap --diff*)',
+        'Bash(sigmap --health*)',
+        'Bash(sigmap --coverage*)',
+        'Bash(node gen-context.js*)',
+      ],
+    },
+  }, null, 2),
+  '```',
+  '',
+  'Add the `permissions.allow` array above to `.claude/settings.json` to activate.',
+  '',
+].join('\n');
 
 /**
  * Format context suited for CLAUDE.md.
@@ -82,6 +113,17 @@ function write(context, cwd, opts = {}) {
   } else {
     newContent = existing + MARKER + formatted;
   }
+
+  // Inject ## Bash allowlist above the sig marker if not already present
+  if (!newContent.includes(ALLOWLIST_MARKER)) {
+    const sigMarkerPos = newContent.indexOf('## Auto-generated signatures');
+    if (sigMarkerPos !== -1) {
+      newContent = newContent.slice(0, sigMarkerPos) + ALLOWLIST_BLOCK + '\n' + newContent.slice(sigMarkerPos);
+    } else {
+      newContent = ALLOWLIST_BLOCK + '\n' + newContent;
+    }
+  }
+
   fs.writeFileSync(filePath, newContent, 'utf8');
 }
 

package/packages/adapters/codex.js

@@ -17,6 +17,44 @@ const fs = require('fs');
 
 const name = 'codex';
 const MARKER = '\n\n## Auto-generated signatures\n<!-- Updated by gen-context.js -->\n';
+const TOOLS_MARKER = '<!-- sigmap-tools -->';
+
+const TOOLS_BLOCK = [
+  '## Tools',
+  '',
+  TOOLS_MARKER,
+  '',
+  '```json',
+  JSON.stringify([
+    {
+      name: 'sigmap_ask',
+      description: 'Rank source files by relevance to a natural-language query. Run before exploring the codebase.',
+      command: 'sigmap ask "$QUERY"',
+    },
+    {
+      name: 'sigmap_validate',
+      description: 'Validate SigMap config and measure context coverage. Run after changing config or source dirs.',
+      command: 'sigmap validate',
+    },
+    {
+      name: 'sigmap_judge',
+      description: 'Score an LLM response for groundedness against source context. Use to verify answer quality.',
+      command: 'sigmap judge --response "$RESPONSE" --context "$CONTEXT"',
+    },
+    {
+      name: 'sigmap_query',
+      description: 'Rank all files by relevance using TF-IDF and write a focused mini-context.',
+      command: 'sigmap --query "$QUERY" --context',
+    },
+    {
+      name: 'sigmap_weights',
+      description: 'Show learned file-ranking multipliers accumulated from past sessions.',
+      command: 'sigmap weights',
+    },
+  ], null, 2),
+  '```',
+  '',
+].join('\n');
 
 /**
  * Format context for AGENTS.md — clean markdown, no LLM preamble.
@@ -80,6 +118,16 @@ function write(context, cwd, opts = {}) {
       : existing + MARKER + formatted;
   }
 
+  // Inject ## Tools block above the sig marker if not already present
+  if (!newContent.includes(TOOLS_MARKER)) {
+    const sigMarkerPos = newContent.indexOf('## Auto-generated signatures');
+    if (sigMarkerPos !== -1) {
+      newContent = newContent.slice(0, sigMarkerPos) + TOOLS_BLOCK + '\n' + newContent.slice(sigMarkerPos);
+    } else {
+      newContent = TOOLS_BLOCK + '\n' + newContent;
+    }
+  }
+
   fs.writeFileSync(filePath, newContent, 'utf8');
 }
 

package/packages/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sigmap-cli",
-  "version": "6.2.0",
+  "version": "6.3.0",
   "description": "SigMap CLI wrapper — thin adapter for programmatic CLI invocation",
   "main": "index.js",
   "keywords": [

package/packages/core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sigmap-core",
-  "version": "6.2.0",
+  "version": "6.3.0",
   "description": "SigMap core library — zero-dependency code signature extraction, retrieval, and security scanning",
   "main": "index.js",
   "keywords": [

package/src/mcp/server.js

@@ -18,7 +18,7 @@ const { readContext, searchSignatures, getMap, createCheckpoint, getRouting, exp
 
 const SERVER_INFO = {
   name: 'sigmap',
-  version: '6.2.0',
+  version: '6.3.0',
   description: 'SigMap MCP server — code signatures on demand',
 };