sigmap 8.13.0 → 8.16.0

package/AGENTS.md

@@ -33,16 +33,17 @@ Always run `sigmap ask` (or `sigmap --query`) before searching for files relevan
 src/extractors/python_ast.py ← ast
 ```
 
-## changes (last 5 commits — 1 second ago)
+## changes (last 5 commits — 0 seconds ago)
 ```
-src/format/terse.js                           +splitAnchor  +encodeTerseSig  +encodeTerseSigs  +_tokens
-src/graph/blast-radius.js                     +tierFor  +_normRel  +_bfs  +methodBlastRadius
+src/evidence/pack.js                          +riskFactorsFor  ~parseAnchor  ~buildEvidencePack  ~formatMarkdown
+src/graph/call-graph.js                       +calls  +maskRust  +name  +goDefs
 src/mcp/handlers.js                           +that  +getMethodImpact  ~queryContext  ~squeezeOutput
 src/mcp/server.js                             ~dispatch
 src/mcp/tools.js                              +it
+src/retrieval/ranker.js                       ~scoreFile  ~rank
+src/graph/blast-radius.js                     +tierFor  +_normRel  +_bfs  +methodBlastRadius
 src/review/pr-evidence.js                     ~buildPrEvidence  ~formatPrEvidenceMarkdown
 src/review/review-pr.js                       ~isSource  ~reviewPr
-src/wiki/generate.js                          +_rel  +_pct  +_identity  +_modules
 ```
 
 ## packages
@@ -176,31 +177,61 @@ code-fence ---
 
 ### src/config/defaults.js
 ```
-module.exports = { DEFAULTS }  :161-161
+module.exports = { DEFAULTS }  :163-163
 ```
 
-### src/format/terse.js
+### src/evidence/pack.js
 ```
-module.exports = { encodeTerseSig, encodeTerseSigs, measureTerse, splitAnchor }  :86-86
-function splitAnchor(sig) → { text: string, suffix: s  :25-30
-function encodeTerseSig(sig) → string  :37-50
-function encodeTerseSigs(sigs) → string[]  :57-59
-function _tokens(sigs)  :62-64
-function measureTerse(sigsList) → { beforeTokens: number, a  :72-84
+module.exports = { buildEvidencePack, formatJSON, formatMarkdown, parseAnchor, riskLabelFor, riskFactorsFor, findRelatedTests, SCHEMA_VERSION, SCHEMA_URL, TEST_DISCOVERY }  :326-337
+function parseAnchor(sig) → { symbol: string, start:   :64-72
+function riskLabelFor(relPath) → 'generated'|'test'|'migra  :84-86
+function riskFactorsFor(relPath) → string[]  :96-108
+function stemOf(relPath)  :111-114
+function testTargetStem(relPath) → string  :126-132
+function findRelatedTests(relPath, allFiles) → string[]  :143-154
+function reasonFor(signals)  :157-168
+function sigTokens(sigs)  :171-173
+function canonicalize(value) → string  :180-182
+function sortKeys(value)  :184-192
+function buildEvidencePack(query, cwd, opts = {}) → object  :205-281
+function ranked0Empty(query)  :284-286
+function formatJSON(pack)  :289-291
+function formatMarkdown(pack)  :294-324
 ```
 
-### src/graph/blast-radius.js
+### src/graph/call-graph.js
 ```
-module.exports = { methodBlastRadius, tierFor, DIRECT_WEIGHT, TRANSITIVE_WEIGHT }  :132-132
-function tierFor(score)  :25-31
-function _normRel(p)  :33-35
-function _bfs(seedIds, reverse, maxDepth)  :38-60
-function methodBlastRadius(changedFiles, cwd, opts = {}) → { * available: boolean, *  :78-130
+module.exports = { buildCallGraph, buildCallFileGraph, methodImpact, methodCallees, formatCallGraph, formatCallGraphJSON, extractDefs, maskJs, maskPy, maskRust }  :563-567
+function normalizePath(p)  :41-41
+function toRel(cwd, f)  :42-42
+function symId(cwd, absFile, name)  :43-43
+function maskJs(src)  :49-65
+function maskRust(src)  :70-91
+function maskPy(src)  :93-110
+function matchDelim(masked, openIdx, open, close)  :113-120
+function lineAt(src, idx)  :122-127
+function jsDefs(masked)  :132-237
+function pyDefs(masked)  :200-220
+function goDefs(masked)  :224-344
+function javaDefs(masked)  :250-367
+function rustDefs(masked)  :278-401
+function maskFor(filePath, src)  :300-305
+function extractDefs(filePath, src)  :307-315
+function callsInRange(masked, start, end)  :318-330
+function _walk(dir, excludeSet, out, depth)  :334-347
+function buildCallGraph(cwd, opts = {}) → { * forward: Map<string,s  :363-446
+function buildCallFileGraph(cwd, opts = {}) → { forward: Map<string,str  :459-482
+function _resolveSymbol(symbol, defs)  :485-490
+function _bfs(seedIds, graph, maxDepth)  :493-506
+function methodImpact(symbol, cwd, opts = {}) → { symbol:string, resolved  :516-522
+function methodCallees(symbol, cwd, opts = {}) → { symbol:string, resolved  :528-534
+function formatCallGraph(result, kind)  :537-549
+… +1 more signatures
 ```
 
 ### src/mcp/handlers.js
 ```
-module.exports = { readContext, searchSignatures, getMap, createCheckpoint, getRouting, explainFile, listModules, queryContext, getMethodImpact, getImpact, getLines, readMemory, getCalleeSignatures, notifyFileCreated, notifySymbolAdded, notifyFileDeleted, getDiffContext, getArchitectureOverview, verifySuggestion, squeezeOutput }  :966-966
+module.exports = { readContext, searchSignatures, getMap, createCheckpoint, getRouting, explainFile, listModules, queryContext, getMethodImpact, getImpact, getLines, readMemory, getCalleeSignatures, notifyFileCreated, notifySymbolAdded, notifyFileDeleted, getDiffContext, getArchitectureOverview, verifySuggestion, squeezeOutput }  :975-975
 function _readContextFiles(cwd)  :10-17
 function readContext(args, cwd)  :36-66
 function searchSignatures(args, cwd)  :74-100
@@ -209,21 +240,21 @@ function createCheckpoint(args, cwd)  :143-215
 function getRouting(args, cwd)  :224-261
 function explainFile(args, cwd)  :269-356
 function listModules(args, cwd)  :364-403
-function queryContext(args, cwd)  :411-429
-function getMethodImpact(args, cwd)  :437-451
-function getImpact(args, cwd)  :459-471
-function getLines(args, cwd)  :480-528
-function readMemory(args, cwd)  :536-571
-function getCalleeSignatures(args, cwd)  :580-625
-function _pkgVersion(cwd)  :632-635
-function notifyFileCreated(args, cwd)  :639-661
-function notifySymbolAdded(args, cwd)  :664-684
-function notifyFileDeleted(args, cwd)  :687-701
-function _changedFiles(cwd, args)  :707-719
-function getDiffContext(args, cwd)  :728-799
-function getArchitectureOverview(args, cwd)  :808-876
-function verifySuggestion(args, cwd)  :886-921
-function squeezeOutput(args, cwd)  :931-964
+function queryContext(args, cwd)  :411-438
+function getMethodImpact(args, cwd)  :446-460
+function getImpact(args, cwd)  :468-480
+function getLines(args, cwd)  :489-537
+function readMemory(args, cwd)  :545-580
+function getCalleeSignatures(args, cwd)  :589-634
+function _pkgVersion(cwd)  :641-644
+function notifyFileCreated(args, cwd)  :648-670
+function notifySymbolAdded(args, cwd)  :673-693
+function notifyFileDeleted(args, cwd)  :696-710
+function _changedFiles(cwd, args)  :716-728
+function getDiffContext(args, cwd)  :737-808
+function getArchitectureOverview(args, cwd)  :817-885
+function verifySuggestion(args, cwd)  :895-930
+function squeezeOutput(args, cwd)  :940-973
 ```
 
 ### src/mcp/server.js
@@ -240,33 +271,22 @@ function start(cwd)  :113-139
 module.exports = { TOOLS }  :392-392
 ```
 
-### src/review/pr-evidence.js
-```
-module.exports = { buildPrEvidence, formatPrEvidenceMarkdown }  :157-157
-function buildPrEvidence(changedFiles, cwd, opts = {}) → { scope:string, files:obj  :31-84
-function formatPrEvidenceMarkdown(evidence, opts = {})  :89-155
-```
-
-### src/review/review-pr.js
-```
-module.exports = { reviewPr, SECURITY_PATTERNS, GOD_NODE_THRESHOLD, SCOPE_DIR_THRESHOLD }  :150-150
-function isTestFile(p)  :32-34
-function isSource(p)  :35-37
-function reviewPr(changedFiles, cwd, opts = {}) → { findings: object[], bla  :48-148
-```
-
-### src/wiki/generate.js
+### src/retrieval/ranker.js
 ```
-module.exports = { buildWiki, renderWikiMarkdown }  :250-250
-function _rel(cwd, f)  :22-24
-function _pct(fraction)  :26-28
-function _identity(cwd)  :31-37
-function _modules(index)  :40-67
-function _flow(cwd)  :70-97
-function _conventions(cwd, index)  :100-117
-function _health(cwd)  :119-127
-function buildWiki(cwd, opts = {}) → { data: object, markdown:  :137-162
-function renderWikiMarkdown(data, sigmapVersion) → string  :171-248
+module.exports = { rank, buildSigIndex, scoreFile, formatRankTable, formatRankJSON, DEFAULT_WEIGHTS, GRAPH_BOOST_AMOUNTS, detectIntent }  :598-598
+function _computePenalty(filePath)  :63-70
+function _computeHubs(graph)  :73-84
+function _isHub(filePath)  :87-91
+function scoreFile(filePath, sigs, queryTokens, weights) → { score: number, signals:  :102-159
+function rank(query, sigIndex, opts) → { file: string, score: nu  :177-302
+function _parseContextFile(contextPath) → Map<string, string[]>  :372-404
+function _mergeSigIndex(target, source)  :407-415
+function _buildSigIndexFromCache(cwd) → Map<string, string[]>  :422-442
+function _enrichSigIndexFromStrategy(cwd, index) → Map<string, string[]>  :450-456
+function buildSigIndex(cwd, opts) → Map<string, string[]>  :473-506
+function formatRankTable(results, query) → string  :515-551
+function formatRankJSON(results, query) → object  :560-575
+function detectIntent(query)  :590-596
 ```
 
 ### src/analysis/coverage-score.js
@@ -519,24 +539,6 @@ function scoreUsefulness(taskResult, rankingScore)  :11-38
 function computeUsefulnessStats(taskResults)  :40-66
 ```
 
-### src/evidence/pack.js
-```
-module.exports = { buildEvidencePack, formatJSON, formatMarkdown, parseAnchor, riskLabelFor, findRelatedTests, SCHEMA_VERSION }  :293-301
-function parseAnchor(sig) → { symbol: string, start:   :50-58
-function riskLabelFor(relPath) → 'generated'|'test'|'migra  :70-81
-function stemOf(relPath)  :84-87
-function testTargetStem(relPath) → string  :99-105
-function findRelatedTests(relPath, allFiles) → string[]  :116-127
-function reasonFor(signals)  :130-141
-function sigTokens(sigs)  :144-146
-function canonicalize(value) → string  :153-155
-function sortKeys(value)  :157-165
-function buildEvidencePack(query, cwd, opts = {}) → object  :178-249
-function ranked0Empty(query)  :252-254
-function formatJSON(pack)  :257-259
-function formatMarkdown(pack)  :262-291
-```
-
 ### src/extractors/coverage.js
 ```
 module.exports = { buildTestIndex, isTested }  :79-79
@@ -980,6 +982,16 @@ function detectVersion(cwd)  :13-19
 function format(context, cwd, writtenFiles, sigmapVersion)  :21-69
 ```
 
+### src/format/terse.js
+```
+module.exports = { encodeTerseSig, encodeTerseSigs, measureTerse, splitAnchor }  :86-86
+function splitAnchor(sig) → { text: string, suffix: s  :25-30
+function encodeTerseSig(sig) → string  :37-50
+function encodeTerseSigs(sigs) → string[]  :57-59
+function _tokens(sigs)  :62-64
+function measureTerse(sigsList) → { beforeTokens: number, a  :72-84
+```
+
 ### src/format/usage-guidance.js
 ```
 module.exports = { usageBlock }  :28-28
@@ -996,6 +1008,15 @@ function renderReportHtml(result, opts = {}) → string  :48-115
 function renderReportMarkdown(result)  :144-162
 ```
 
+### src/graph/blast-radius.js
+```
+module.exports = { methodBlastRadius, tierFor, DIRECT_WEIGHT, TRANSITIVE_WEIGHT }  :132-132
+function tierFor(score)  :25-31
+function _normRel(p)  :33-35
+function _bfs(seedIds, reverse, maxDepth)  :38-60
+function methodBlastRadius(changedFiles, cwd, opts = {}) → { * available: boolean, *  :78-130
+```
+
 ### src/graph/builder.js
 ```
 module.exports = { build, buildFromCwd, extractFileDeps, normalizePath, loadAliasMap, resolveAlias }  :494-494
@@ -1012,30 +1033,6 @@ function build(files, cwd, ctx) → { forward: Map<string,str  :387-426
 function buildFromCwd(cwd, opts) → { forward: Map<string,str  :438-492
 ```
 
-### src/graph/call-graph.js
-```
-module.exports = { buildCallGraph, methodImpact, methodCallees, formatCallGraph, formatCallGraphJSON, extractDefs, maskJs, maskPy }  :397-401
-function normalizePath(p)  :35-35
-function toRel(cwd, f)  :36-36
-function symId(cwd, absFile, name)  :37-37
-function maskJs(src)  :43-59
-function maskPy(src)  :61-78
-function matchDelim(masked, openIdx, open, close)  :81-88
-function lineAt(src, idx)  :90-95
-function jsDefs(masked)  :100-206
-function pyDefs(masked)  :168-188
-function extractDefs(filePath, src)  :190-195
-function callsInRange(masked, start, end)  :198-210
-function _walk(dir, excludeSet, out, depth)  :214-227
-function buildCallGraph(cwd, opts = {}) → { * forward: Map<string,s  :243-316
-function _resolveSymbol(symbol, defs)  :319-324
-function _bfs(seedIds, graph, maxDepth)  :327-340
-function methodImpact(symbol, cwd, opts = {}) → { symbol:string, resolved  :350-356
-function methodCallees(symbol, cwd, opts = {}) → { symbol:string, resolved  :362-368
-function formatCallGraph(result, kind)  :371-383
-function formatCallGraphJSON(result, kind)  :385-395
-```
-
 ### src/graph/impact.js
 ```
 module.exports = { getImpact, analyzeImpact, formatImpact, formatImpactJSON }  :240-240
@@ -1195,30 +1192,27 @@ function expandQuery(qToks) → Map<string, number>  :132-141
 function bm25rank(query, candidates) → Array<object & { score: n  :154-193
 ```
 
-### src/retrieval/ranker.js
-```
-module.exports = { rank, buildSigIndex, scoreFile, formatRankTable, formatRankJSON, DEFAULT_WEIGHTS, GRAPH_BOOST_AMOUNTS, detectIntent }  :570-570
-function _computePenalty(filePath)  :62-69
-function _computeHubs(graph)  :72-83
-function _isHub(filePath)  :86-90
-function scoreFile(filePath, sigs, queryTokens, weights) → { score: number, signals:  :101-158
-function rank(query, sigIndex, opts) → { file: string, score: nu  :174-298
-function _parseContextFile(contextPath) → Map<string, string[]>  :344-376
-function _mergeSigIndex(target, source)  :379-387
-function _buildSigIndexFromCache(cwd) → Map<string, string[]>  :394-414
-function _enrichSigIndexFromStrategy(cwd, index) → Map<string, string[]>  :422-428
-function buildSigIndex(cwd, opts) → Map<string, string[]>  :445-478
-function formatRankTable(results, query) → string  :487-523
-function formatRankJSON(results, query) → object  :532-547
-function detectIntent(query)  :562-568
-```
-
 ### src/retrieval/tokenizer.js
 ```
 module.exports = { tokenize, STOP_WORDS }  :54-54
 function tokenize(text, opts) → string[]  :31-52
 ```
 
+### src/review/pr-evidence.js
+```
+module.exports = { buildPrEvidence, formatPrEvidenceMarkdown }  :157-157
+function buildPrEvidence(changedFiles, cwd, opts = {}) → { scope:string, files:obj  :31-84
+function formatPrEvidenceMarkdown(evidence, opts = {})  :89-155
+```
+
+### src/review/review-pr.js
+```
+module.exports = { reviewPr, SECURITY_PATTERNS, GOD_NODE_THRESHOLD, SCOPE_DIR_THRESHOLD }  :150-150
+function isTestFile(p)  :32-34
+function isSource(p)  :35-37
+function reviewPr(changedFiles, cwd, opts = {}) → { findings: object[], bla  :48-148
+```
+
 ### src/routing/classifier.js
 ```
 module.exports = { classify, classifyAll }  :102-102
@@ -1416,6 +1410,20 @@ function extractNpmScripts(text) → { name: string, line: num  :168-184
 function extractSymbols(text) → { name: string, line: num  :192-209
 ```
 
+### src/wiki/generate.js
+```
+module.exports = { buildWiki, renderWikiMarkdown }  :250-250
+function _rel(cwd, f)  :22-24
+function _pct(fraction)  :26-28
+function _identity(cwd)  :31-37
+function _modules(index)  :40-67
+function _flow(cwd)  :70-97
+function _conventions(cwd, index)  :100-117
+function _health(cwd)  :119-127
+function buildWiki(cwd, opts = {}) → { data: object, markdown:  :137-162
+function renderWikiMarkdown(data, sigmapVersion) → string  :171-248
+```
+
 ### src/workspace/detector.js
 ```
 module.exports = { detectWorkspaces, inferPackage, scopeToPackage }  :4-4

package/CHANGELOG.md

@@ -10,6 +10,35 @@ Format: [Semantic Versioning](https://semver.org/)
 
 ---
 
+## [8.16.0] — 2026-07-12
+
+Minor release — **Evidence Pack schema v2** (the last Machine-lever item from the master plan §7.4). Also the first published release carrying v8.15.0, which was prepared but never tagged (see its note below).
+
+### Added
+- **Evidence Pack schema v2 (#477, PR #478):** additive over v1 — `schemaVersion: '2.0'` + `schemaUrl` pointing at a **published draft-07 JSON Schema** (`sigmap.io/schemas/evidence-pack-2.json`) that CI/agents can validate packs against; **`files[].riskFactors`** exposes *every* matched risk category in precedence order (a migration touching payments carries `['migration','payment']`) while `riskLabel` stays the first factor for v1 consumers; a **`testDiscovery` provenance block** carries the measured accuracy of the stem-affix related-tests method (**F1 0.98, precision 0.971, recall 0.988** over 3,701 pairs / 28 repos) — constants sourced from the committed benchmark report and guard-tested against it; and `generator: { name, version }` records what built the pack. Byte-stable; `contextHash` determinism preserved.
+
+---
+
+## [8.15.0] — 2026-07-11
+
+> **Not published as a standalone release** — prepared and merged to main, but never tagged; first shipped as part of v8.16.0.
+
+Minor release — **call-graph ranking boost, opt-in and measure-gated**. The milestone item "call-graph edges into ranking" is done — and shipped **dark**, because the measure gate said so.
+
+### Added
+- **Call-graph ranking boost (#474, PR #475):** `buildCallFileGraph` collapses symbol edges to deterministic file-level bidirectional edges; `rank()` gains `opts.callGraph` — a single-hop, hub-suppressed neighbor boost (`callHop: 0.30`) with a `callGraphBoost` explain signal. Config-gated (non-fatal) into `ask`, `--query`, and the `query_context` MCP tool via **`retrieval.callGraphBoost` (default `false`)**. **Measured** by the new `npm run benchmark:callgraph-boost` A/B (90 tasks / 18 cached repos through the full ranker): import-graph arm 80% hit@5, +call-graph arm 80% — **delta +0, no repo moved** — so per the gate the default stays off; the boost exists for call-topology-heavy repos (Go/Java same-package) where import edges structurally can't see the relationship. The headline BM25 harness is untouched and reproduces 87.8%. Report: `benchmarks/reports/callgraph-boost.json`.
+
+---
+
+## [8.14.0] — 2026-07-11
+
+Minor release — **call-graph support for Java, Go, and Rust** (GR1 language expansion). The method-level call-graph goes from 2 to 5 languages, and every consumer — `--callers`/`--callees`, blast-radius scoring, `review-pr` method-blast findings, `get_method_impact` — inherits them with no further changes.
+
+### Added
+- **Java/Go/Rust call-graph (#471, PR #472):** new def extractors in `src/graph/call-graph.js` — Go `func` + receiver methods (parenthesized return lists handled), Java methods + constructors (generics/`throws` tolerated; control-flow and `new Foo(){}` anonymous classes rejected), Rust `fn` incl. generics + `where` clauses and `impl` methods (bodiless trait declarations skipped). New **lifetime-safe `maskRust`** masker: `'a` lifetimes pass through untouched while char literals and strings are masked, preserving offsets. **Same-package resolution scope:** Go/Java call same-package functions across files with no import statement, so same-directory same-language siblings join the resolution scope (sorted, deterministic). Per North-Star #1, unparseable constructs are skipped — never a parser dep. Surface claims updated to "JS/TS, Python, Java, Go, Rust" in `--help`, the `get_method_impact` description, and the MCP guide.
+
+---
+
 ## [8.13.0] — 2026-07-11
 
 Minor release — **method-level blast-radius scoring** (GR2, the biggest Phase-2 lever in the master plan §7.4). The D4 call-graph finally has consumers: review findings, the PR Evidence report, and a 20th MCP tool now answer *which functions break*, not just which files.

package/README.md

@@ -122,7 +122,7 @@ Ask → Rank → Context → Validate → Judge → Learn
 
 <!--SM:benchmarkBlock-->
 ```
-Benchmark : sigmap-v8.13-main (21 repositories, including R language)
+Benchmark : sigmap-v8.16-main (21 repositories, including R language)
 Date      : 2026-07-11
 
 Hit@5          : 87.8%   (baseline 13.6%  — 6.5× lift)