sigmap 7.18.0 → 7.20.0

package/CHANGELOG.md

@@ -10,6 +10,24 @@ Format: [Semantic Versioning](https://semver.org/)
 
 ---
 
+## [7.20.0] — 2026-06-18
+
+Minor release — `init` writes a Creation workflow block into CLAUDE.md (grounded codegen, Gap 2 §6.2 — completes the plan).
+
+### Added
+- **`sigmap --init` documents the grounded-creation workflow in CLAUDE.md (#337):** the final IMPL item. `--init` now injects a marker-delimited "Creation workflow" block describing the four-stage pipeline (`scaffold` → `verify-plan` → `verify-ai-output` → `review-pr`, orchestrated by `sigmap create`) so an agent reading CLAUDE.md knows the guard-rail workflow exists. New zero-dependency, bundle-safe `src/init/creation-workflow.js` (`renderCreationWorkflowBlock`, `injectCreationWorkflow`); idempotent and marker-scoped (`<!-- sigmap-creation-workflow:start -->` … `:end -->`), it creates CLAUDE.md if absent, preserves human content, and coexists with the conventions + auto-generated-signatures blocks. **With this, every item in the grounded-codegen implementation plan is shipped** (the §9 LLM A/B ablation is built and offline-tested; a live run needs only an API key).
+
+---
+
+## [7.19.0] — 2026-06-18
+
+Minor release — scaffold persistence (grounded codegen, Gap 2 §6.2).
+
+### Added
+- **Scaffold persistence — `.context/scaffold/latest.md` (#334):** `sigmap scaffold` now writes an accepted proposal to `.context/scaffold/latest.md` so the `create` pipeline and agents can read back the convention-matched proposal instead of re-deriving it. New zero-dependency, bundle-safe `src/scaffold/persist.js` (`renderScaffoldMarkdown`, `scaffoldPath`); the record captures the filename + naming style, export style, test file + framework, and any force-warning. Persisted in both human and `--json` modes (the JSON output gains a `persistedTo` field); a refused scaffold writes nothing.
+
+---
+
 ## [7.18.0] — 2026-06-18
 
 Minor release — `sigmap conventions --update` (grounded codegen, Layer 3 — completes the §4 flag set).

package/gen-context.js

@@ -34,6 +34,118 @@ function __require(key) {
 // ── ./src/eval/llm-ablation ──
 // ── ./src/conventions/fix ──
 // ── ./src/conventions/update ──
+// ── ./src/scaffold/persist ──
+// ── ./src/init/creation-workflow ──
+__factories["./src/init/creation-workflow"] = function(module, exports) {
+  
+  /**
+   * Creation-workflow CLAUDE.md block (IMPL.md §6.2 — 2f).
+   *
+   * `sigmap --init` injects this block so an agent reading CLAUDE.md knows the
+   * grounded-creation guard-rail workflow exists: scaffold → verify-plan →
+   * verify-ai-output → review-pr, orchestrated by `sigmap create`. Idempotent and
+   * marker-scoped — it never touches human content or the conventions /
+   * auto-generated-signatures blocks. Pure string transforms; zero-dependency,
+   * bundle-safe.
+   */
+
+  const START = '<!-- sigmap-creation-workflow:start -->';
+  const END = '<!-- sigmap-creation-workflow:end -->';
+
+  /** Render the Creation workflow block (including its start/end markers). */
+  function renderCreationWorkflowBlock() {
+    return [
+      START,
+      '## Creation workflow (SigMap)',
+      '',
+      'When creating or changing code, run the grounded-creation pipeline so each step is verified against the live index:',
+      '',
+      '1. **`sigmap scaffold "<name>"`** — propose a convention-matched file/structure (refuses if conventions are inconsistent).',
+      '2. **`sigmap verify-plan <plan.md>`** — check the plan against the live index (files/symbols exist, blast radius, scope).',
+      '3. **`sigmap verify-ai-output <answer.md>`** — flag fake files/symbols/imports in the generated output (offline).',
+      '4. **`sigmap review-pr`** — audit the diff for scope drift, god-node edits, missing tests, and security files.',
+      '',
+      'Or run all four in one pass with **`sigmap create "<task>"`** (`1/4`…`4/4` numbering, single pass/fail).',
+      '',
+      '<sub>Generated by `sigmap --init` · refresh by re-running it.</sub>',
+      END,
+    ].join('\n');
+  }
+
+  /**
+   * Inject (or replace) the Creation workflow block in existing CLAUDE.md content.
+   * Replaces an existing marked block in place; appends one when absent.
+   * Idempotent — never touches content outside the markers.
+   * @param {string} existing current file content ('' if new)
+   * @param {string} block the block from `renderCreationWorkflowBlock`
+   * @returns {string}
+   */
+  function injectCreationWorkflow(existing, block) {
+    const src = String(existing || '');
+    const startIdx = src.indexOf(START);
+    if (startIdx !== -1) {
+      const endIdx = src.indexOf(END, startIdx);
+      if (endIdx !== -1) {
+        return src.slice(0, startIdx) + block + src.slice(endIdx + END.length);
+      }
+    }
+    if (src.trim() === '') return block + '\n';
+    const sep = src.endsWith('\n') ? '\n' : '\n\n';
+    return src + sep + block + '\n';
+  }
+
+  module.exports = { renderCreationWorkflowBlock, injectCreationWorkflow, START, END };
+  
+};
+
+__factories["./src/scaffold/persist"] = function(module, exports) {
+  
+  /**
+   * Scaffold persistence (IMPL.md §6.2 — 2d).
+   *
+   * Renders an accepted scaffold proposal to markdown and locates the on-disk
+   * record (`.context/scaffold/latest.md`) so the `create` pipeline and agents can
+   * read back the convention-matched proposal. Pure render; zero-dependency,
+   * bundle-safe.
+   */
+
+  const path = require('path');
+
+  /** Path to the persisted scaffold record. */
+  function scaffoldPath(cwd) {
+    return path.join(cwd, '.context', 'scaffold', 'latest.md');
+  }
+
+  /**
+   * Render an accepted scaffold decision to a markdown record.
+   * @param {object} decision a `proposeScaffold` result with `ok: true`
+   * @param {object} [opts]
+   * @param {string} [opts.timestamp] ISO timestamp (caller supplies — keeps this pure)
+   * @returns {string}
+   */
+  function renderScaffoldMarkdown(decision, opts = {}) {
+    const d = decision || {};
+    const p = d.proposal || {};
+    const pct = (n) => `${Math.round((n || 0) * 100)}%`;
+    const lines = [
+      `# Scaffold — ${d.name || '(unnamed)'}`,
+      '',
+      `- **Conventions:** ${d.tier || 'unknown'} (${pct(d.confidence)})`,
+      `- **File:** \`${p.filename || ''}\` (${p.namingStyle || ''})`,
+      `- **Export style:** ${p.exportStyle || ''}`,
+      `- **Test file:** \`${p.testFile || ''}\`${p.testFramework ? ` (${p.testFramework})` : ''}`,
+    ];
+    if (d.warning) lines.push(`- **Warning:** ${d.warning}`);
+    lines.push('');
+    lines.push(`<sub>Generated by \`sigmap scaffold\`${opts.timestamp ? ` · ${opts.timestamp}` : ''}.</sub>`);
+    lines.push('');
+    return lines.join('\n');
+  }
+
+  module.exports = { scaffoldPath, renderScaffoldMarkdown };
+  
+};
+
 __factories["./src/conventions/update"] = function(module, exports) {
   
   /**
@@ -7819,7 +7931,7 @@ __factories["./src/mcp/server"] = function(module, exports) {
 
   const SERVER_INFO = {
     name: 'sigmap',
-    version: '7.18.0',
+    version: '7.20.0',
     description: 'SigMap MCP server — code signatures on demand',
   };
 
@@ -13497,7 +13609,7 @@ function __tryGit(args, opts = {}) {
   catch (_) { return ''; }
 }
 
-const VERSION = '7.18.0';
+const VERSION = '7.20.0';
 const MARKER = '\n\n## Auto-generated signatures\n<!-- Updated by gen-context.js -->\n';
 
 function requireSourceOrBundled(key) {
@@ -16891,8 +17003,20 @@ function main() {
     const conventions = extractConventions(cwd, buildFileList(cwd, config));
     const decision = proposeScaffold(name, conventions, { threshold, ext, force });
 
+    // §6.2 (2d): persist an accepted proposal so `create`/agents can read it back.
+    let persistedTo = null;
+    if (decision.ok) {
+      const { scaffoldPath, renderScaffoldMarkdown } = requireSourceOrBundled('./src/scaffold/persist');
+      const outPath = scaffoldPath(cwd);
+      try {
+        fs.mkdirSync(path.dirname(outPath), { recursive: true });
+        fs.writeFileSync(outPath, renderScaffoldMarkdown(decision, { timestamp: new Date().toISOString() }));
+        persistedTo = path.relative(cwd, outPath) || outPath;
+      } catch (_) {}
+    }
+
     if (jsonOut) {
-      process.stdout.write(JSON.stringify(decision) + '\n');
+      process.stdout.write(JSON.stringify({ ...decision, persistedTo }) + '\n');
       process.exit(decision.ok ? 0 : 1);
     }
 
@@ -16904,6 +17028,7 @@ function main() {
       console.log(`  file:           ${p.filename}  (${p.namingStyle})`);
       console.log(`  export style:   ${p.exportStyle}`);
       console.log(`  test file:      ${p.testFile}${p.testFramework ? `  (${p.testFramework})` : ''}`);
+      if (persistedTo) console.log(`\n  → wrote ${persistedTo}`);
       process.exit(0);
     }
 
@@ -17264,6 +17389,15 @@ function main() {
 
   if (args.includes('--init')) {
     writeInitConfig(cwd);
+    // §6.2 (2f): document the grounded-creation workflow in CLAUDE.md (idempotent).
+    try {
+      const { renderCreationWorkflowBlock, injectCreationWorkflow } = requireSourceOrBundled('./src/init/creation-workflow');
+      const claudePath = path.join(cwd, 'CLAUDE.md');
+      let existing = '';
+      try { if (fs.existsSync(claudePath)) existing = fs.readFileSync(claudePath, 'utf8'); } catch (_) {}
+      fs.writeFileSync(claudePath, injectCreationWorkflow(existing, renderCreationWorkflowBlock()));
+      console.log(`[sigmap] init → Creation workflow block in ${path.relative(cwd, claudePath) || 'CLAUDE.md'}`);
+    } catch (_) {}
     process.exit(0);
   }
 

package/llms-full.txt

@@ -9,7 +9,7 @@ the files relevant to the task — cutting tokens ~97% while keeping answers
 grounded. Deterministic, offline, no embeddings or vector database. Works with
 Claude, Cursor, GitHub Copilot, Aider, Windsurf, local LLMs, and MCP.
 
-# Version: 7.18.0 | Benchmark: sigmap-v7.0-main (2026-06-14)
+# Version: 7.20.0 | Benchmark: sigmap-v7.0-main (2026-06-14)
 # Source: auto-generated from package.json, version.json, src/mcp/tools.js, src/config/defaults.js
 # Regenerate: npm run generate:llms   |   Validate: npm run validate:llms
 

package/llms.txt

@@ -9,7 +9,7 @@ the files relevant to the task — cutting tokens ~97% while keeping answers
 grounded. Deterministic, offline, no embeddings or vector database. Works with
 Claude, Cursor, GitHub Copilot, Aider, Windsurf, local LLMs, and MCP.
 
-# Version: 7.18.0 | Benchmark: sigmap-v7.0-main (2026-06-14)
+# Version: 7.20.0 | Benchmark: sigmap-v7.0-main (2026-06-14)
 # Source: auto-generated from package.json, version.json, src/mcp/tools.js, src/config/defaults.js
 # Regenerate: npm run generate:llms   |   Validate: npm run validate:llms
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sigmap",
-  "version": "7.18.0",
+  "version": "7.20.0",
   "description": "97% token reduction for AI coding. Extracts function & class signatures with TF-IDF ranking to feed only the right files to Claude, Cursor, Copilot, Aider, Windsurf, local LLMs & MCP. Zero dependencies, runs offline via npx.",
   "main": "packages/core/index.js",
   "exports": {

package/packages/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sigmap-cli",
-  "version": "7.18.0",
+  "version": "7.20.0",
   "description": "SigMap CLI wrapper — thin adapter for programmatic CLI invocation",
   "main": "index.js",
   "keywords": [

package/packages/core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sigmap-core",
-  "version": "7.18.0",
+  "version": "7.20.0",
   "description": "SigMap core library — zero-dependency code signature extraction, retrieval, and security scanning",
   "main": "index.js",
   "keywords": [

package/src/init/creation-workflow.js

@@ -0,0 +1,59 @@
+'use strict';
+
+/**
+ * Creation-workflow CLAUDE.md block (IMPL.md §6.2 — 2f).
+ *
+ * `sigmap --init` injects this block so an agent reading CLAUDE.md knows the
+ * grounded-creation guard-rail workflow exists: scaffold → verify-plan →
+ * verify-ai-output → review-pr, orchestrated by `sigmap create`. Idempotent and
+ * marker-scoped — it never touches human content or the conventions /
+ * auto-generated-signatures blocks. Pure string transforms; zero-dependency,
+ * bundle-safe.
+ */
+
+const START = '<!-- sigmap-creation-workflow:start -->';
+const END = '<!-- sigmap-creation-workflow:end -->';
+
+/** Render the Creation workflow block (including its start/end markers). */
+function renderCreationWorkflowBlock() {
+  return [
+    START,
+    '## Creation workflow (SigMap)',
+    '',
+    'When creating or changing code, run the grounded-creation pipeline so each step is verified against the live index:',
+    '',
+    '1. **`sigmap scaffold "<name>"`** — propose a convention-matched file/structure (refuses if conventions are inconsistent).',
+    '2. **`sigmap verify-plan <plan.md>`** — check the plan against the live index (files/symbols exist, blast radius, scope).',
+    '3. **`sigmap verify-ai-output <answer.md>`** — flag fake files/symbols/imports in the generated output (offline).',
+    '4. **`sigmap review-pr`** — audit the diff for scope drift, god-node edits, missing tests, and security files.',
+    '',
+    'Or run all four in one pass with **`sigmap create "<task>"`** (`1/4`…`4/4` numbering, single pass/fail).',
+    '',
+    '<sub>Generated by `sigmap --init` · refresh by re-running it.</sub>',
+    END,
+  ].join('\n');
+}
+
+/**
+ * Inject (or replace) the Creation workflow block in existing CLAUDE.md content.
+ * Replaces an existing marked block in place; appends one when absent.
+ * Idempotent — never touches content outside the markers.
+ * @param {string} existing current file content ('' if new)
+ * @param {string} block the block from `renderCreationWorkflowBlock`
+ * @returns {string}
+ */
+function injectCreationWorkflow(existing, block) {
+  const src = String(existing || '');
+  const startIdx = src.indexOf(START);
+  if (startIdx !== -1) {
+    const endIdx = src.indexOf(END, startIdx);
+    if (endIdx !== -1) {
+      return src.slice(0, startIdx) + block + src.slice(endIdx + END.length);
+    }
+  }
+  if (src.trim() === '') return block + '\n';
+  const sep = src.endsWith('\n') ? '\n' : '\n\n';
+  return src + sep + block + '\n';
+}
+
+module.exports = { renderCreationWorkflowBlock, injectCreationWorkflow, START, END };

package/src/mcp/server.js

@@ -18,7 +18,7 @@ const { readContext, searchSignatures, getMap, createCheckpoint, getRouting, exp
 
 const SERVER_INFO = {
   name: 'sigmap',
-  version: '7.18.0',
+  version: '7.20.0',
   description: 'SigMap MCP server — code signatures on demand',
 };
 

package/src/scaffold/persist.js

@@ -0,0 +1,45 @@
+'use strict';
+
+/**
+ * Scaffold persistence (IMPL.md §6.2 — 2d).
+ *
+ * Renders an accepted scaffold proposal to markdown and locates the on-disk
+ * record (`.context/scaffold/latest.md`) so the `create` pipeline and agents can
+ * read back the convention-matched proposal. Pure render; zero-dependency,
+ * bundle-safe.
+ */
+
+const path = require('path');
+
+/** Path to the persisted scaffold record. */
+function scaffoldPath(cwd) {
+  return path.join(cwd, '.context', 'scaffold', 'latest.md');
+}
+
+/**
+ * Render an accepted scaffold decision to a markdown record.
+ * @param {object} decision a `proposeScaffold` result with `ok: true`
+ * @param {object} [opts]
+ * @param {string} [opts.timestamp] ISO timestamp (caller supplies — keeps this pure)
+ * @returns {string}
+ */
+function renderScaffoldMarkdown(decision, opts = {}) {
+  const d = decision || {};
+  const p = d.proposal || {};
+  const pct = (n) => `${Math.round((n || 0) * 100)}%`;
+  const lines = [
+    `# Scaffold — ${d.name || '(unnamed)'}`,
+    '',
+    `- **Conventions:** ${d.tier || 'unknown'} (${pct(d.confidence)})`,
+    `- **File:** \`${p.filename || ''}\` (${p.namingStyle || ''})`,
+    `- **Export style:** ${p.exportStyle || ''}`,
+    `- **Test file:** \`${p.testFile || ''}\`${p.testFramework ? ` (${p.testFramework})` : ''}`,
+  ];
+  if (d.warning) lines.push(`- **Warning:** ${d.warning}`);
+  lines.push('');
+  lines.push(`<sub>Generated by \`sigmap scaffold\`${opts.timestamp ? ` · ${opts.timestamp}` : ''}.</sub>`);
+  lines.push('');
+  return lines.join('\n');
+}
+
+module.exports = { scaffoldPath, renderScaffoldMarkdown };