sigmap 6.6.4 → 6.7.0

package/CHANGELOG.md

@@ -10,6 +10,25 @@ Format: [Semantic Versioning](https://semver.org/)
 
 ---
 
+## [6.7.0] — 2026-05-03
+
+### Added
+
+- **2-hop graph traversal with decay** — Extended graph-boosted retrieval from 1-hop (0.40 boost) to 2-hop (0.15 boost for transitive dependencies), improving retrieval accuracy by catching cross-module architecture patterns. Exported `GRAPH_BOOST_AMOUNTS` constants for transparency.
+- **Hub suppression** — Automatically suppress common utility files (`utils/`, `helpers/`, `shared/`, `common/`, `index`) and high-fanout files (>20% of codebase) from graph boosts to reduce false-positive boosts and improve ranking signal quality.
+- **Incremental signature cache** — Introduced `sigCache: true` config key to enable incremental extraction, caching extracted signatures by mtime. Only re-extracts changed files on subsequent runs, dramatically improving performance on large codebases.
+- **Cache health statistics** — Display cache file size, entry count, and freshness in `--health` output (text and JSON formats) for visibility into cache state and efficiency.
+
+---
+
+## [6.6.5] — 2026-04-30
+
+### Added
+
+- **Monorepo JVM project detection** — Enhanced source root resolver to detect `src/main/{java,kotlin,scala}` and `app/src/main/{java,kotlin,scala}` in monorepo workspace packages (packages/*, apps/*, services/*, modules/*). Added `src/test/{java,kotlin}` and `app/src/main/scala` to DEEP_PATHS for consistent detection across monorepo and non-monorepo structures.
+
+---
+
 ## [6.6.4] — 2026-04-29
 
 ### Changed

package/README.md

@@ -12,6 +12,7 @@
 [![Zero deps](https://img.shields.io/badge/dependencies-zero-22c55e)](package.json)
 [![License: MIT](https://img.shields.io/badge/License-MIT-7c6af7.svg)](LICENSE)
 [![GitHub Stars](https://img.shields.io/github/stars/manojmallick/sigmap?style=flat&color=f59e0b&logo=github)](https://github.com/manojmallick/sigmap/stargazers)
+[![Hacker News](https://img.shields.io/badge/Hacker%20News-Discussion-orange?logo=ycombinator)](https://news.ycombinator.com/item?id=47956790)
 
 </div>
 
@@ -38,10 +39,10 @@ Works with Copilot, Claude, Cursor, Windsurf, and any LLM.
 
 ## Why SigMap?
 
-- **81.1% hit@5** — right file found in top 5 results (vs 13.6% baseline)
+- **80.0% hit@5** — right file found in top 5 results (vs 13.6% baseline)
 - **40–98% token reduction** — 2K–4K tokens instead of 80K+
 - **52.2% task success rate** — up from 10% without context
-- **1.69 prompts per task** — down from 2.84
+- **1.68 prompts per task** — down from 2.84
 - **Works with any LLM** — no API key, no cloud, no accounts
 - **Zero npm dependencies** — `npx sigmap` on any machine
 
@@ -75,19 +76,22 @@ Ask → Rank → Context → Validate → Judge → Learn
 ## Benchmark
 
 ```
-Benchmark : sigmap-v6.5-main
-Date      : 2026-04-25
+Benchmark : sigmap-v6.6-main
+Date      : 2026-04-30
 
-Hit@5          : 81.1%   (baseline 13.6%  — 6.0× lift)
-Prompt reduction : 41.4%
+Hit@5          : 80.0%   (baseline 13.6%  — 5.9× lift)
+Prompt reduction : 41.0%
 Task success   : 52.2%   (baseline 10%)
-Prompts / task : 1.69    (baseline 2.84)
-Token reduction: 40–98%  (avg 96.9% across 18 real repos)
+Prompts / task : 1.68    (baseline 2.84)
+Token reduction: 40–98%  (avg 96.8% across 18 real repos)
 ```
 
 Measured on 90 coding tasks across 18 real public repos. No LLM API — fully reproducible.
 
-[Full methodology →](https://manojmallick.github.io/sigmap/guide/benchmark.html)
+**Resources:**
+- [Full methodology →](https://manojmallick.github.io/sigmap/guide/benchmark.html)
+- [Benchmark suite (GitHub)](https://github.com/manojmallick/sigmap-benchmark-suite) — scripts, tasks, and raw data
+- [Benchmark data (Zenodo)](https://zenodo.org/records/19898842) — archived results for reproducibility
 
 <div align="center">
 <img src="docs/comparison-chart.svg" alt="SigMap benchmark — before vs after across 3 RAG quality metrics" width="700" />

package/gen-context.js

@@ -5387,7 +5387,7 @@ __factories["./src/mcp/server"] = function(module, exports) {
   
   const SERVER_INFO = {
     name: 'sigmap',
-  version: '6.6.4',
+  version: '6.7.0',
     description: 'SigMap MCP server — code signatures on demand',
   };
   
@@ -7855,7 +7855,7 @@ const path = require('path');
 const os = require('os');
 const { execSync } = require('child_process');
 
-const VERSION = '6.6.4';
+const VERSION = '6.7.0';
 const MARKER = '\n\n## Auto-generated signatures\n<!-- Updated by gen-context.js -->\n';
 
 function requireSourceOrBundled(key) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sigmap",
-  "version": "6.6.4",
+  "version": "6.7.0",
   "description": "Zero-dependency AI context engine — 97% token reduction. No npm install. Runs on Node 18+.",
   "main": "gen-context.js",
   "exports": {

package/packages/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sigmap-cli",
-  "version": "6.6.4",
+  "version": "6.7.0",
   "description": "SigMap CLI wrapper — thin adapter for programmatic CLI invocation",
   "main": "index.js",
   "keywords": [

package/packages/core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sigmap-core",
-  "version": "6.6.4",
+  "version": "6.7.0",
   "description": "SigMap core library — zero-dependency code signature extraction, retrieval, and security scanning",
   "main": "index.js",
   "keywords": [

package/src/discovery/source-root-resolver.js

@@ -110,6 +110,18 @@ function _enumerateCandidates(cwd, isMonorepo, ignorePatterns, excludeList) {
           }
           // Also consider the package root itself
           candidates.push({ name: `${top}/${pkg.name}`, full: path.join(topFull, pkg.name) });
+
+          // JVM project structures in monorepo packages (Java, Kotlin, Scala)
+          for (const jvmLang of ['java', 'kotlin', 'scala']) {
+            const srcMainJvm = path.join(topFull, pkg.name, 'src', 'main', jvmLang);
+            if (fs.existsSync(srcMainJvm)) {
+              candidates.push({ name: `${top}/${pkg.name}/src/main/${jvmLang}`, full: srcMainJvm });
+            }
+            const appSrcMainJvm = path.join(topFull, pkg.name, 'app', 'src', 'main', jvmLang);
+            if (fs.existsSync(appSrcMainJvm)) {
+              candidates.push({ name: `${top}/${pkg.name}/app/src/main/${jvmLang}`, full: appSrcMainJvm });
+            }
+          }
         }
       } catch (_) {}
     }
@@ -118,7 +130,8 @@ function _enumerateCandidates(cwd, isMonorepo, ignorePatterns, excludeList) {
   // Deep paths known by language/framework (e.g. src/main/java, src-tauri/src)
   const DEEP_PATHS = [
     'src/main/java','src/main/kotlin','src/main/scala',
-    'src-tauri/src','Sources/App','app/src/main/java','app/src/main/kotlin',
+    'src-tauri/src','Sources/App','app/src/main/java','app/src/main/kotlin','app/src/main/scala',
+    'src/test/java','src/test/kotlin',
   ];
   for (const dp of DEEP_PATHS) {
     const full = path.join(cwd, dp);

package/src/mcp/server.js

@@ -18,7 +18,7 @@ const { readContext, searchSignatures, getMap, createCheckpoint, getRouting, exp
 
 const SERVER_INFO = {
   name: 'sigmap',
-  version: '6.6.4',
+  version: '6.7.0',
   description: 'SigMap MCP server — code signatures on demand',
 };