sigmap 8.31.0 → 8.32.0

package/CHANGELOG.md

@@ -10,6 +10,21 @@ Format: [Semantic Versioning](https://semver.org/)
 
 ---
 
+## [8.32.0] — 2026-09-12
+
+### Added
+- A gated **JVM retrieval corpus** — 61 tasks mined from `spring-petclinic` (32) and `akka` (29), leak-checked so no query shares a stemmed token with its expected file's basename. It scores against *other* repos, which puts it outside the feedback loop that makes the `hard` split move whenever sigmap's own source changes. `scripts/mine-corpus.mjs` gained `--repo` and gates its sigmap-specific rules on the target being sigmap itself, with byte-identical default output (#577, closes #575)
+- `test/integration/docs-markdown.test.js` — guards the VitePress sources against the two failure modes that can break the docs build *after* a release is already tagged: unbalanced code fences, and `{{ }}` outside a fenced block, which Vue parses as an interpolation (#574, closes #573)
+
+### Fixed
+- Every extractor now **discloses what a ceiling dropped** instead of truncating silently. 20 extractors gained `… +N more` markers on their member and per-file caps (23 now carry them in total). The ceilings themselves are unchanged — raising them is a separate, measured decision (#578, #576)
+- The retrieval gate reused a gitignored index, so a "regression" could be pure staleness — this produced three separate false investigations, including one re-baseline. It now regenerates every index it scores, including one per JVM repo driven from `benchmarks/config-overrides.json` rather than a hand-written config (#579)
+- The `sigmap lines` CLI example nested a fenced block inside a text fence; the inner fence closed early and a brace expression became a Vue interpolation. This failed the Pages build *after* v8.31.0 was tagged and published (#574)
+
+### Changed
+- The `hard` corpus is now **reported but not enforced** against the previous run — only against its 70% floor. Proven necessary in CI: a probe branch containing one two-assertion test file and no source change scored 75.6% → 74.4% and failed the gate, because `hard` scores sigmap against its own source and BM25 statistics shift with the indexed file set. `mined` and `jvm` keep `--no-regress` (#579)
+- JVM baseline re-recorded at 16.4% hit@5 (from 18.0%) — a single task. `akka:m018` expects `Logging.scala`, which holds a class the 8-member ceiling truncates, so disclosure adds one `… +N more methods` line and BM25's length normalisation drops it from rank 5 to 6. A fix excluding markers from the scored term space did not move the number and was reverted rather than left in as unexplained complexity (#578)
+
 ## [8.31.0] — 2026-09-08
 
 ### Added

package/README.md

@@ -122,8 +122,8 @@ Ask → Rank → Context → Validate → Judge → Learn
 
 <!--SM:benchmarkBlock-->
 ```
-Benchmark : sigmap-v8.31-main (21 repositories, including R language)
-Date      : 2026-09-08
+Benchmark : sigmap-v8.32-main (21 repositories, including R language)
+Date      : 2026-09-12
 
 Hit@5          : 81.1%   (grep-agent baseline 44.0%  — 1.73× lift)
 Token reduction: 96.8%   (across 21 repos)

package/gen-context.js

@@ -5439,6 +5439,14 @@ __factories["./src/extractors/coverage"] = function(module, exports) {
 // ── ./src/extractors/cpp ──
 __factories["./src/extractors/cpp"] = function(module, exports) {
   
+  const { capWithNotice, capMembersWithNotice } = __require('./src/util/truncate');
+
+  // Ceilings sit above the default `maxSigsPerFile` so the configured budget
+  // governs output rather than a literal buried here, and omissions are disclosed
+  // — an undisclosed cap looks like a class that simply has eight methods (#576).
+  const MEMBER_LIMIT = 8;
+  const PER_FILE_LIMIT = 25;
+
   /**
    * Extract signatures from C/C++ source code.
    * @param {string} src - Raw file content
@@ -5469,7 +5477,7 @@ __factories["./src/extractors/cpp"] = function(module, exports) {
       sigs.push(`${m[2]}(${normalizeParams(m[3])})${retStr}`);
     }
 
-    return sigs.slice(0, 25);
+    return capWithNotice(sigs, PER_FILE_LIMIT, 'signatures');
   }
 
   function extractBlock(src, startIndex) {
@@ -5492,7 +5500,7 @@ __factories["./src/extractors/cpp"] = function(module, exports) {
       const retStr = ret ? ` → ${ret}` : '';
       members.push(`${m[2]}(${normalizeParams(m[3])})${retStr}`);
     }
-    return members.slice(0, 8);
+    return capWithNotice(members, MEMBER_LIMIT, 'members');
   }
 
   function normalizeParams(params) {
@@ -5513,6 +5521,13 @@ __factories["./src/extractors/cpp"] = function(module, exports) {
 __factories["./src/extractors/csharp"] = function(module, exports) {
   
   const { lineAt, withAnchor } = __require('./src/extractors/line-anchor');
+  const { capWithNotice, capMembersWithNotice } = __require('./src/util/truncate');
+
+  // Ceilings sit above the default `maxSigsPerFile` so the configured budget
+  // governs output rather than a literal buried here, and omissions are disclosed
+  // — an undisclosed cap looks like a class that simply has eight methods (#576).
+  const MEMBER_LIMIT = 8;
+  const PER_FILE_LIMIT = 25;
 
   /**
    * Extract signatures from C# source code.
@@ -5537,11 +5552,12 @@ __factories["./src/extractors/csharp"] = function(module, exports) {
       const block = extractBlock(stripped, bodyStart);
       sigs.push(withAnchor(`${m[1]} ${m[2]}`, lineAt(stripped, declIdx), lineAt(stripped, bodyStart + block.length)));
       for (const meth of extractMembers(block)) {
-        sigs.push(withAnchor(`  ${meth.text}`, lineAt(stripped, bodyStart + meth.declIdx), lineAt(stripped, bodyStart + meth.endIdx)));
+        // The disclosure marker carries no offsets; anchor it at the class body.
+        sigs.push(withAnchor(`  ${meth.text}`, lineAt(stripped, bodyStart + (meth.declIdx || 0)), lineAt(stripped, bodyStart + (meth.endIdx || 0))));
       }
     }
 
-    return sigs.slice(0, 25);
+    return capWithNotice(sigs, PER_FILE_LIMIT, 'signatures');
   }
 
   function extractBlock(src, startIndex) {
@@ -5567,7 +5583,7 @@ __factories["./src/extractors/csharp"] = function(module, exports) {
         endIdx: m.index + m[0].length,
       });
     }
-    return members.slice(0, 8);
+    return capMembersWithNotice(members, MEMBER_LIMIT);
   }
 
   function normalizeParams(params) {
@@ -5587,6 +5603,12 @@ __factories["./src/extractors/csharp"] = function(module, exports) {
 // ── ./src/extractors/css ──
 __factories["./src/extractors/css"] = function(module, exports) {
   
+  const { capWithNotice } = __require('./src/util/truncate');
+
+  // Ceiling sits above the default `maxSigsPerFile` so the configured budget
+  // governs output rather than a literal buried here, and omissions are disclosed (#576).
+  const PER_FILE_LIMIT = 25;
+
   /**
    * Extract signatures from CSS/SCSS/SASS/Less source code.
    * @param {string} src - Raw file content
@@ -5650,7 +5672,7 @@ __factories["./src/extractors/css"] = function(module, exports) {
       for (const name of selected) sigs.push(`.${name}`);
     }
 
-    return sigs.slice(0, 25);
+    return capWithNotice(sigs, PER_FILE_LIMIT, 'signatures');
   }
 
   module.exports = { extract };
@@ -5661,6 +5683,13 @@ __factories["./src/extractors/css"] = function(module, exports) {
 __factories["./src/extractors/dart"] = function(module, exports) {
   
   const { lineAt, withAnchor } = __require('./src/extractors/line-anchor');
+  const { capWithNotice, capMembersWithNotice } = __require('./src/util/truncate');
+
+  // Ceilings sit above the default `maxSigsPerFile` so the configured budget
+  // governs output rather than a literal buried here, and omissions are disclosed
+  // — an undisclosed cap looks like a class that simply has eight methods (#576).
+  const MEMBER_LIMIT = 8;
+  const PER_FILE_LIMIT = 25;
 
   /**
    * Extract signatures from Dart source code.
@@ -5696,7 +5725,8 @@ __factories["./src/extractors/dart"] = function(module, exports) {
       const block = extractBlock(stripped, bodyStart);
       sigs.push(withAnchor(`${abs}class ${m[1]}`, lineAt(stripped, m.index), lineAt(stripped, bodyStart + block.length)));
       for (const meth of extractMembers(block)) {
-        sigs.push(withAnchor(`  ${meth.text}`, lineAt(stripped, bodyStart + meth.declIdx), lineAt(stripped, bodyStart + meth.endIdx)));
+        // The disclosure marker carries no offsets; anchor it at the class body.
+        sigs.push(withAnchor(`  ${meth.text}`, lineAt(stripped, bodyStart + (meth.declIdx || 0)), lineAt(stripped, bodyStart + (meth.endIdx || 0))));
       }
     }
 
@@ -5708,7 +5738,7 @@ __factories["./src/extractors/dart"] = function(module, exports) {
       sigs.push(withAnchor(`${m[2]}(${normalizeParams(m[3])})${retStr}`, s, e));
     }
 
-    return sigs.slice(0, 25);
+    return capWithNotice(sigs, PER_FILE_LIMIT, 'signatures');
   }
 
   function extractBlock(src, startIndex) {
@@ -5733,7 +5763,7 @@ __factories["./src/extractors/dart"] = function(module, exports) {
         endIdx: m.index + m[0].length,
       });
     }
-    return members.slice(0, 8);
+    return capMembersWithNotice(members, MEMBER_LIMIT);
   }
 
   function normalizeParams(params) {
@@ -5978,6 +6008,12 @@ __factories["./src/extractors/dispatch"] = function(module, exports) {
 // ── ./src/extractors/dockerfile ──
 __factories["./src/extractors/dockerfile"] = function(module, exports) {
   
+  const { capWithNotice } = __require('./src/util/truncate');
+
+  // Ceiling sits above the default `maxSigsPerFile` so the configured budget
+  // governs output rather than a literal buried here, and omissions are disclosed (#576).
+  const PER_FILE_LIMIT = 25;
+
   /**
    * Extract signatures from Dockerfiles.
    * @param {string} src - Raw file content
@@ -6021,7 +6057,7 @@ __factories["./src/extractors/dockerfile"] = function(module, exports) {
       if (m) sigs.push(`ARG ${m[1]}`);
     }
 
-    return sigs.slice(0, 25);
+    return capWithNotice(sigs, PER_FILE_LIMIT, 'signatures');
   }
 
   module.exports = { extract };
@@ -6031,6 +6067,16 @@ __factories["./src/extractors/dockerfile"] = function(module, exports) {
 // ── ./src/extractors/gdscript ──
 __factories["./src/extractors/gdscript"] = function(module, exports) {
   
+  const { capWithNotice } = __require('./src/util/truncate');
+
+  // Ceiling sits above the default `maxSigsPerFile` so the configured budget
+  // governs output rather than a literal buried here, and omissions are disclosed (#576).
+  const PER_FILE_LIMIT = 25;
+
+  // Ceilings disclose what they drop rather than truncating silently (#576).
+  const MEMBER_LIMIT = 6;
+  const ENUM_LIMIT = 24;
+
   /**
    * Extract signatures from Godot GDScript source code.
    * @param {string} src - Raw file content
@@ -6075,7 +6121,7 @@ __factories["./src/extractors/gdscript"] = function(module, exports) {
         .split(',')
         .map((s) => s.trim().split(/\s*=/)[0].trim())
         .filter(Boolean);
-      sigs.push(`${indent}enum ${m[1]} { ${members.slice(0, 6).join(', ')} }`);
+      sigs.push(`${indent}enum ${m[1]} { ${capWithNotice(members, ENUM_LIMIT, 'values').join(', ')} }`);
     }
 
     let constCount = 0;
@@ -6123,7 +6169,7 @@ __factories["./src/extractors/gdscript"] = function(module, exports) {
       }
     }
 
-    return sigs.slice(0, 25);
+    return capWithNotice(sigs, PER_FILE_LIMIT, 'signatures');
   }
 
   function extractInnerMembers(stripped, startIndex) {
@@ -6141,7 +6187,7 @@ __factories["./src/extractors/gdscript"] = function(module, exports) {
         members.push(`${staticKw}func ${fm[2]}(${params})${retStr}`);
       }
     }
-    return members.slice(0, 6);
+    return capWithNotice(members, MEMBER_LIMIT, 'members');
   }
 
   function normalizeParams(params) {
@@ -6198,6 +6244,11 @@ __factories["./src/extractors/generic"] = function(module, exports) {
 __factories["./src/extractors/go"] = function(module, exports) {
   
   const { lineAt, withAnchor } = __require('./src/extractors/line-anchor');
+  const { capWithNotice } = __require('./src/util/truncate');
+
+  // Ceiling sits above the default `maxSigsPerFile` so the configured budget
+  // governs output rather than a literal buried here, and omissions are disclosed (#576).
+  const PER_FILE_LIMIT = 25;
 
   /**
    * Extract signatures from Go source code.
@@ -6246,7 +6297,7 @@ __factories["./src/extractors/go"] = function(module, exports) {
       sigs.push(hinted(withAnchor(`func ${receiver}${m[2]}(${normalizeParams(m[3])})${retStr}`, lineAt(stripped, m.index), lineAt(stripped, end)), m[2]));
     }
 
-    return sigs.slice(0, 25);
+    return capWithNotice(sigs, PER_FILE_LIMIT, 'signatures');
   }
 
   function extractBlock(src, startIndex) {
@@ -6380,6 +6431,12 @@ __factories["./src/extractors/graphql"] = function(module, exports) {
 // ── ./src/extractors/html ──
 __factories["./src/extractors/html"] = function(module, exports) {
   
+  const { capWithNotice } = __require('./src/util/truncate');
+
+  // Ceiling sits above the default `maxSigsPerFile` so the configured budget
+  // governs output rather than a literal buried here, and omissions are disclosed (#576).
+  const PER_FILE_LIMIT = 25;
+
   /**
    * Extract signatures from HTML files.
    * Focuses on id/class attributes, forms, and script tags.
@@ -6413,7 +6470,7 @@ __factories["./src/extractors/html"] = function(module, exports) {
       sigs.push(`data-${m[0].match(/data-(\w[\w-]*)/i)[1]}: ${m[1]}`);
     }
 
-    return sigs.slice(0, 25);
+    return capWithNotice(sigs, PER_FILE_LIMIT, 'signatures');
   }
 
   module.exports = { extract };
@@ -6772,6 +6829,13 @@ __factories["./src/extractors/javascript"] = function(module, exports) {
 __factories["./src/extractors/kotlin"] = function(module, exports) {
   
   const { lineAt, withAnchor } = __require('./src/extractors/line-anchor');
+  const { capWithNotice, capMembersWithNotice } = __require('./src/util/truncate');
+
+  // Ceilings sit above the default `maxSigsPerFile` so the configured budget
+  // governs output rather than a literal buried here, and omissions are disclosed
+  // — an undisclosed cap looks like a class that simply has eight methods (#576).
+  const MEMBER_LIMIT = 8;
+  const PER_FILE_LIMIT = 25;
 
   /**
    * Extract signatures from Kotlin source code.
@@ -6806,7 +6870,8 @@ __factories["./src/extractors/kotlin"] = function(module, exports) {
       const block = extractBlock(stripped, bodyStart);
       sigs.push(withAnchor(`${m[1]} ${m[2]}`, lineAt(stripped, m.index), lineAt(stripped, bodyStart + block.length)));
       for (const meth of extractMembers(block)) {
-        sigs.push(withAnchor(`  ${meth.text}`, lineAt(stripped, bodyStart + meth.declIdx), lineAt(stripped, bodyStart + meth.endIdx)));
+        // The disclosure marker carries no offsets; anchor it at the class body.
+        sigs.push(withAnchor(`  ${meth.text}`, lineAt(stripped, bodyStart + (meth.declIdx || 0)), lineAt(stripped, bodyStart + (meth.endIdx || 0))));
       }
     }
 
@@ -6819,7 +6884,7 @@ __factories["./src/extractors/kotlin"] = function(module, exports) {
       sigs.push(withAnchor(`${suspend}fun ${m[1]}(${normalizeParams(m[2])})${retStr}`, s, e));
     }
 
-    return sigs.slice(0, 25);
+    return capWithNotice(sigs, PER_FILE_LIMIT, 'signatures');
   }
 
   function extractBlock(src, startIndex) {
@@ -6846,7 +6911,7 @@ __factories["./src/extractors/kotlin"] = function(module, exports) {
         endIdx: m.index + m[0].length,
       });
     }
-    return members.slice(0, 8);
+    return capMembersWithNotice(members, MEMBER_LIMIT);
   }
 
   function normalizeParams(params) {
@@ -7095,6 +7160,13 @@ __factories["./src/extractors/patterns"] = function(module, exports) {
 __factories["./src/extractors/php"] = function(module, exports) {
   
   const { lineAt, withAnchor } = __require('./src/extractors/line-anchor');
+  const { capWithNotice, capMembersWithNotice } = __require('./src/util/truncate');
+
+  // Ceilings sit above the default `maxSigsPerFile` so the configured budget
+  // governs output rather than a literal buried here, and omissions are disclosed
+  // — an undisclosed cap looks like a class that simply has eight methods (#576).
+  const MEMBER_LIMIT = 8;
+  const PER_FILE_LIMIT = 25;
 
   /**
    * Extract signatures from PHP source code.
@@ -7134,7 +7206,8 @@ __factories["./src/extractors/php"] = function(module, exports) {
       const block = extractBlock(stripped, bodyStart);
       sigs.push(withAnchor(`${kind} ${m[1]}`, lineAt(stripped, m.index), lineAt(stripped, bodyStart + block.length)));
       for (const meth of extractMembers(block)) {
-        sigs.push(withAnchor(`  ${meth.text}`, lineAt(stripped, bodyStart + meth.declIdx), lineAt(stripped, bodyStart + meth.endIdx)));
+        // The disclosure marker carries no offsets; anchor it at the class body.
+        sigs.push(withAnchor(`  ${meth.text}`, lineAt(stripped, bodyStart + (meth.declIdx || 0)), lineAt(stripped, bodyStart + (meth.endIdx || 0))));
       }
     }
 
@@ -7146,7 +7219,7 @@ __factories["./src/extractors/php"] = function(module, exports) {
       sigs.push(withAnchor(`function ${m[1]}(${normalizeParams(m[2])})${retStr}`, s, e));
     }
 
-    return sigs.slice(0, 25);
+    return capWithNotice(sigs, PER_FILE_LIMIT, 'signatures');
   }
 
   function extractBlock(src, startIndex) {
@@ -7174,7 +7247,7 @@ __factories["./src/extractors/php"] = function(module, exports) {
         endIdx: m.index + m[0].length,
       });
     }
-    return members.slice(0, 8);
+    return capMembersWithNotice(members, MEMBER_LIMIT);
   }
 
   function normalizeParams(params) {
@@ -7378,6 +7451,11 @@ __factories["./src/extractors/python"] = function(module, exports) {
   
   const path = require('path');
   const { lineAt } = __require('./src/extractors/line-anchor');
+  const { capWithNotice } = __require('./src/util/truncate');
+
+  // Ceiling sits above the default `maxSigsPerFile` so the configured budget
+  // governs output rather than a literal buried here, and omissions are disclosed (#576).
+  const PER_FILE_LIMIT = 30;
 
   /**
    * 1-based line of the last source line belonging to a top-level (indent 0)
@@ -7512,7 +7590,7 @@ __factories["./src/extractors/python"] = function(module, exports) {
       }
     }
 
-    return sigs.slice(0, 30);
+    return capWithNotice(sigs, PER_FILE_LIMIT, 'signatures');
   }
 
   function extractClassMethods(stripped, startIndex) {
@@ -7723,6 +7801,12 @@ __factories["./src/extractors/python_dataclass"] = function(module, exports) {
 // ── ./src/extractors/r ──
 __factories["./src/extractors/r"] = function(module, exports) {
   
+  const { capWithNotice } = __require('./src/util/truncate');
+
+  // Ceiling sits above the default `maxSigsPerFile` so the configured budget
+  // governs output rather than a literal buried here, and omissions are disclosed (#576).
+  const PER_FILE_LIMIT = 30;
+
   /**
    * Extract signatures from R source code.
    *
@@ -7836,7 +7920,7 @@ __factories["./src/extractors/r"] = function(module, exports) {
       sigs.push(`setClass("${sm[1]}")`);
     }
 
-    return sigs.slice(0, 30);
+    return capWithNotice(sigs, PER_FILE_LIMIT, 'signatures');
   }
 
   /**
@@ -8000,6 +8084,12 @@ __factories["./src/extractors/r"] = function(module, exports) {
 // ── ./src/extractors/ruby ──
 __factories["./src/extractors/ruby"] = function(module, exports) {
   
+  const { capWithNotice } = __require('./src/util/truncate');
+
+  // Ceiling sits above the default `maxSigsPerFile` so the configured budget
+  // governs output rather than a literal buried here, and omissions are disclosed (#576).
+  const PER_FILE_LIMIT = 25;
+
   /**
    * Extract signatures from Ruby source code.
    * @param {string} src - Raw file content
@@ -8034,7 +8124,7 @@ __factories["./src/extractors/ruby"] = function(module, exports) {
       sigs.push(`def ${m[1]}${params}${retStr}`);
     }
 
-    return sigs.slice(0, 25);
+    return capWithNotice(sigs, PER_FILE_LIMIT, 'signatures');
   }
 
   function normalizeParams(params) {
@@ -8059,6 +8149,11 @@ __factories["./src/extractors/ruby"] = function(module, exports) {
 __factories["./src/extractors/rust"] = function(module, exports) {
   
   const { lineAt, withAnchor } = __require('./src/extractors/line-anchor');
+  const { capWithNotice } = __require('./src/util/truncate');
+
+  // Ceiling sits above the default `maxSigsPerFile` so the configured budget
+  // governs output rather than a literal buried here, and omissions are disclosed (#576).
+  const PER_FILE_LIMIT = 25;
 
   /**
    * Extract signatures from Rust source code.
@@ -8128,7 +8223,7 @@ __factories["./src/extractors/rust"] = function(module, exports) {
       sigs.push(hinted(withAnchor(`pub ${asyncKw}fn ${m[1]}(${normalizeParams(m[2])})${retStr}`, s, e), m[1]));
     }
 
-    return sigs.slice(0, 25);
+    return capWithNotice(sigs, PER_FILE_LIMIT, 'signatures');
   }
 
   function extractBlock(src, startIndex) {
@@ -8201,6 +8296,13 @@ __factories["./src/extractors/rust"] = function(module, exports) {
 __factories["./src/extractors/scala"] = function(module, exports) {
   
   const { lineAt, withAnchor } = __require('./src/extractors/line-anchor');
+  const { capWithNotice, capMembersWithNotice } = __require('./src/util/truncate');
+
+  // Ceilings sit above the default `maxSigsPerFile` so the configured budget
+  // governs output rather than a literal buried here, and omissions are disclosed
+  // — an undisclosed cap looks like a class that simply has eight methods (#576).
+  const MEMBER_LIMIT = 8;
+  const PER_FILE_LIMIT = 25;
 
   /**
    * Extract signatures from Scala source code.
@@ -8227,7 +8329,8 @@ __factories["./src/extractors/scala"] = function(module, exports) {
       const block = extractBlock(stripped, bodyStart);
       sigs.push(withAnchor(`${kind} ${m[1]}`, lineAt(stripped, m.index), lineAt(stripped, bodyStart + block.length)));
       for (const fn of extractMembers(block)) {
-        sigs.push(withAnchor(`  ${fn.text}`, lineAt(stripped, bodyStart + fn.declIdx), lineAt(stripped, bodyStart + fn.endIdx)));
+        // The disclosure marker carries no offsets; anchor it at the class body.
+        sigs.push(withAnchor(`  ${fn.text}`, lineAt(stripped, bodyStart + (fn.declIdx || 0)), lineAt(stripped, bodyStart + (fn.endIdx || 0))));
       }
     }
 
@@ -8241,7 +8344,7 @@ __factories["./src/extractors/scala"] = function(module, exports) {
       sigs.push(withAnchor(`def ${m[1]}${params}${retStr}`, line, line));
     }
 
-    return sigs.slice(0, 25);
+    return capWithNotice(sigs, PER_FILE_LIMIT, 'signatures');
   }
 
   function extractBlock(src, startIndex) {
@@ -8268,7 +8371,7 @@ __factories["./src/extractors/scala"] = function(module, exports) {
         endIdx: m.index + m[0].length,
       });
     }
-    return members.slice(0, 8);
+    return capMembersWithNotice(members, MEMBER_LIMIT);
   }
 
   function normalizeParams(params) {
@@ -8387,6 +8490,12 @@ __factories["./src/extractors/scan"] = function(module, exports) {
 // ── ./src/extractors/shell ──
 __factories["./src/extractors/shell"] = function(module, exports) {
   
+  const { capWithNotice } = __require('./src/util/truncate');
+
+  // Ceiling sits above the default `maxSigsPerFile` so the configured budget
+  // governs output rather than a literal buried here, and omissions are disclosed (#576).
+  const PER_FILE_LIMIT = 25;
+
   /**
    * Extract signatures from shell scripts (bash, zsh, fish).
    * @param {string} src - Raw file content
@@ -8424,7 +8533,7 @@ __factories["./src/extractors/shell"] = function(module, exports) {
       }
     }
 
-    return sigs.slice(0, 25);
+    return capWithNotice(sigs, PER_FILE_LIMIT, 'signatures');
   }
 
   module.exports = { extract };
@@ -8531,6 +8640,12 @@ __factories["./src/extractors/sql"] = function(module, exports) {
 // ── ./src/extractors/svelte ──
 __factories["./src/extractors/svelte"] = function(module, exports) {
   
+  const { capWithNotice } = __require('./src/util/truncate');
+
+  // Ceiling sits above the default `maxSigsPerFile` so the configured budget
+  // governs output rather than a literal buried here, and omissions are disclosed (#576).
+  const PER_FILE_LIMIT = 25;
+
   /**
    * Extract signatures from Svelte components.
    * @param {string} src - Raw file content
@@ -8573,7 +8688,7 @@ __factories["./src/extractors/svelte"] = function(module, exports) {
       sigs.push(`$: ${m[1]}`);
     }
 
-    return sigs.slice(0, 25);
+    return capWithNotice(sigs, PER_FILE_LIMIT, 'signatures');
   }
 
   function normalizeParams(params) {
@@ -8594,6 +8709,13 @@ __factories["./src/extractors/svelte"] = function(module, exports) {
 __factories["./src/extractors/swift"] = function(module, exports) {
   
   const { lineAt, withAnchor } = __require('./src/extractors/line-anchor');
+  const { capWithNotice, capMembersWithNotice } = __require('./src/util/truncate');
+
+  // Ceilings sit above the default `maxSigsPerFile` so the configured budget
+  // governs output rather than a literal buried here, and omissions are disclosed
+  // — an undisclosed cap looks like a class that simply has eight methods (#576).
+  const MEMBER_LIMIT = 8;
+  const PER_FILE_LIMIT = 25;
 
   /**
    * Extract signatures from Swift source code.
@@ -8629,7 +8751,8 @@ __factories["./src/extractors/swift"] = function(module, exports) {
       const block = extractBlock(stripped, bodyStart);
       sigs.push(withAnchor(`${m[1]} ${m[2]}`, lineAt(stripped, m.index), lineAt(stripped, bodyStart + block.length)));
       for (const fn of extractMembers(block)) {
-        sigs.push(withAnchor(`  ${fn.text}`, lineAt(stripped, bodyStart + fn.declIdx), lineAt(stripped, bodyStart + fn.endIdx)));
+        // The disclosure marker carries no offsets; anchor it at the class body.
+        sigs.push(withAnchor(`  ${fn.text}`, lineAt(stripped, bodyStart + (fn.declIdx || 0)), lineAt(stripped, bodyStart + (fn.endIdx || 0))));
       }
     }
 
@@ -8641,7 +8764,7 @@ __factories["./src/extractors/swift"] = function(module, exports) {
       sigs.push(withAnchor(`${asyncKw}func ${m[1]}(${normalizeParams(m[2])})${retStr}`, s, e));
     }
 
-    return sigs.slice(0, 25);
+    return capWithNotice(sigs, PER_FILE_LIMIT, 'signatures');
   }
 
   function extractBlock(src, startIndex) {
@@ -8667,7 +8790,7 @@ __factories["./src/extractors/swift"] = function(module, exports) {
         endIdx: m.index + m[0].length,
       });
     }
-    return members.slice(0, 8);
+    return capMembersWithNotice(members, MEMBER_LIMIT);
   }
 
   function normalizeParams(params) {
@@ -9242,6 +9365,12 @@ __factories["./src/extractors/typescript_react"] = function(module, exports) {
 // ── ./src/extractors/vue ──
 __factories["./src/extractors/vue"] = function(module, exports) {
   
+  const { capWithNotice } = __require('./src/util/truncate');
+
+  // Ceiling sits above the default `maxSigsPerFile` so the configured budget
+  // governs output rather than a literal buried here, and omissions are disclosed (#576).
+  const PER_FILE_LIMIT = 25;
+
   /**
    * Extract signatures from Vue single-file components.
    * @param {string} src - Raw file content
@@ -9306,7 +9435,7 @@ __factories["./src/extractors/vue"] = function(module, exports) {
     const emitsMatch = script.match(/(?:defineEmits|emits)\s*(?::\s*|\(\s*)(\[[\s\S]*?\])/);
     if (emitsMatch) sigs.push(`emits: ${emitsMatch[1].replace(/\s+/g, ' ')}`);
 
-    return sigs.slice(0, 25);
+    return capWithNotice(sigs, PER_FILE_LIMIT, 'signatures');
   }
 
   function normalizeParams(params) {
@@ -9479,6 +9608,12 @@ __factories["./src/extractors/xml"] = function(module, exports) {
 // ── ./src/extractors/yaml ──
 __factories["./src/extractors/yaml"] = function(module, exports) {
   
+  const { capWithNotice } = __require('./src/util/truncate');
+
+  // Ceiling sits above the default `maxSigsPerFile` so the configured budget
+  // governs output rather than a literal buried here, and omissions are disclosed (#576).
+  const PER_FILE_LIMIT = 25;
+
   /**
    * Extract signatures from YAML configuration files.
    * @param {string} src - Raw file content
@@ -9532,7 +9667,7 @@ __factories["./src/extractors/yaml"] = function(module, exports) {
       }
     }
 
-    return sigs.slice(0, 25);
+    return capWithNotice(sigs, PER_FILE_LIMIT, 'signatures');
   }
 
   module.exports = { extract };
@@ -15679,7 +15814,7 @@ __factories["./src/mcp/server"] = function(module, exports) {
 
   const SERVER_INFO = {
     name: 'sigmap',
-    version: '8.31.0',
+    version: '8.32.0',
     description: 'SigMap MCP server — code signatures on demand',
   };
 
@@ -21973,7 +22108,7 @@ function __tryGit(args, opts = {}) {
   catch (_) { return ''; }
 }
 
-const VERSION = '8.31.0';
+const VERSION = '8.32.0';
 const MARKER = '\n\n## Auto-generated signatures\n<!-- Updated by gen-context.js -->\n';
 
 function requireSourceOrBundled(key) {

package/llms-full.txt

@@ -11,13 +11,13 @@ ranking keeps the relevant context in scope (cutting tokens ~97% as a side
 effect), with no LLM calls, embeddings, or vector database. Works with Claude,
 Cursor, GitHub Copilot, Aider, Windsurf, local LLMs, and MCP.
 
-# Version: 8.31.0 | Benchmark: sigmap-v8.31-main (2026-09-08)
+# Version: 8.32.0 | Benchmark: sigmap-v8.32-main (2026-09-12)
 # Source: auto-generated from package.json, version.json, benchmarks/latest.json, src/mcp/tools.js, src/config/defaults.js
 # Regenerate: npm run generate:llms   |   Validate: npm run validate:llms
 
 ---
 
-## Core metrics (benchmark: sigmap-v8.31-main, 2026-09-08)
+## Core metrics (benchmark: sigmap-v8.32-main, 2026-09-12)
 
 | Metric | Without SigMap | With SigMap |
 |--------|----------------|-------------|

package/llms.txt

@@ -11,7 +11,7 @@ ranking keeps the relevant context in scope (cutting tokens ~97% as a side
 effect), with no LLM calls, embeddings, or vector database. Works with Claude,
 Cursor, GitHub Copilot, Aider, Windsurf, local LLMs, and MCP.
 
-# Version: 8.31.0 | Benchmark: sigmap-v8.31-main (2026-09-08)
+# Version: 8.32.0 | Benchmark: sigmap-v8.32-main (2026-09-12)
 # Source: auto-generated from package.json, version.json, benchmarks/latest.json, src/mcp/tools.js, src/config/defaults.js
 # Regenerate: npm run generate:llms   |   Validate: npm run validate:llms
 
@@ -23,7 +23,7 @@ Cursor, GitHub Copilot, Aider, Windsurf, local LLMs, and MCP.
 - No blast-radius awareness before editing a hub file — `--impact` shows every file a change touches.
 - Pasted stack traces, CI logs, and JSON bloat the prompt — `squeeze` minimizes them and enriches the top frame from the symbol index.
 
-## Core metrics (benchmark: sigmap-v8.31-main, 2026-09-08)
+## Core metrics (benchmark: sigmap-v8.32-main, 2026-09-12)
 
 - hit@5 retrieval: 81.1% vs 44.0% single-shot grep baseline (1.73× lift)
 - Token reduction: 96.8% average across benchmark repos

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sigmap",
-  "version": "8.31.0",
+  "version": "8.32.0",
   "description": "The deterministic, verifiable grounding layer for AI code work — a zero-dependency signature-and-evidence map that grounds Claude, Cursor, Copilot, Aider, Windsurf, local LLMs & MCP agents against your real code (repo + installed libraries) so they stop hallucinating files, imports & APIs. Runs offline via npx; byte-stable output; ~97% token reduction as proof.",
   "main": "packages/core/index.js",
   "exports": {

package/packages/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sigmap-cli",
-  "version": "8.31.0",
+  "version": "8.32.0",
   "description": "SigMap CLI wrapper — thin adapter for programmatic CLI invocation",
   "main": "index.js",
   "keywords": [

package/packages/core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sigmap-core",
-  "version": "8.31.0",
+  "version": "8.32.0",
   "description": "SigMap core library — zero-dependency code signature extraction, retrieval, and security scanning",
   "main": "index.js",
   "keywords": [

package/src/extractors/cpp.js

@@ -1,5 +1,13 @@
 'use strict';
 
+const { capWithNotice, capMembersWithNotice } = require('../util/truncate');
+
+// Ceilings sit above the default `maxSigsPerFile` so the configured budget
+// governs output rather than a literal buried here, and omissions are disclosed
+// — an undisclosed cap looks like a class that simply has eight methods (#576).
+const MEMBER_LIMIT = 8;
+const PER_FILE_LIMIT = 25;
+
 /**
  * Extract signatures from C/C++ source code.
  * @param {string} src - Raw file content
@@ -30,7 +38,7 @@ function extract(src) {
     sigs.push(`${m[2]}(${normalizeParams(m[3])})${retStr}`);
   }
 
-  return sigs.slice(0, 25);
+  return capWithNotice(sigs, PER_FILE_LIMIT, 'signatures');
 }
 
 function extractBlock(src, startIndex) {
@@ -53,7 +61,7 @@ function extractMembers(block) {
     const retStr = ret ? ` → ${ret}` : '';
     members.push(`${m[2]}(${normalizeParams(m[3])})${retStr}`);
   }
-  return members.slice(0, 8);
+  return capWithNotice(members, MEMBER_LIMIT, 'members');
 }
 
 function normalizeParams(params) {

package/src/extractors/csharp.js

@@ -1,6 +1,13 @@
 'use strict';
 
 const { lineAt, withAnchor } = require('./line-anchor');
+const { capWithNotice, capMembersWithNotice } = require('../util/truncate');
+
+// Ceilings sit above the default `maxSigsPerFile` so the configured budget
+// governs output rather than a literal buried here, and omissions are disclosed
+// — an undisclosed cap looks like a class that simply has eight methods (#576).
+const MEMBER_LIMIT = 8;
+const PER_FILE_LIMIT = 25;
 
 /**
  * Extract signatures from C# source code.
@@ -25,11 +32,12 @@ function extract(src) {
     const block = extractBlock(stripped, bodyStart);
     sigs.push(withAnchor(`${m[1]} ${m[2]}`, lineAt(stripped, declIdx), lineAt(stripped, bodyStart + block.length)));
     for (const meth of extractMembers(block)) {
-      sigs.push(withAnchor(`  ${meth.text}`, lineAt(stripped, bodyStart + meth.declIdx), lineAt(stripped, bodyStart + meth.endIdx)));
+      // The disclosure marker carries no offsets; anchor it at the class body.
+      sigs.push(withAnchor(`  ${meth.text}`, lineAt(stripped, bodyStart + (meth.declIdx || 0)), lineAt(stripped, bodyStart + (meth.endIdx || 0))));
     }
   }
 
-  return sigs.slice(0, 25);
+  return capWithNotice(sigs, PER_FILE_LIMIT, 'signatures');
 }
 
 function extractBlock(src, startIndex) {
@@ -55,7 +63,7 @@ function extractMembers(block) {
       endIdx: m.index + m[0].length,
     });
   }
-  return members.slice(0, 8);
+  return capMembersWithNotice(members, MEMBER_LIMIT);
 }
 
 function normalizeParams(params) {

package/src/extractors/css.js

@@ -1,5 +1,11 @@
 'use strict';
 
+const { capWithNotice } = require('../util/truncate');
+
+// Ceiling sits above the default `maxSigsPerFile` so the configured budget
+// governs output rather than a literal buried here, and omissions are disclosed (#576).
+const PER_FILE_LIMIT = 25;
+
 /**
  * Extract signatures from CSS/SCSS/SASS/Less source code.
  * @param {string} src - Raw file content
@@ -63,7 +69,7 @@ function extract(src) {
     for (const name of selected) sigs.push(`.${name}`);
   }
 
-  return sigs.slice(0, 25);
+  return capWithNotice(sigs, PER_FILE_LIMIT, 'signatures');
 }
 
 module.exports = { extract };

package/src/extractors/dart.js

@@ -1,6 +1,13 @@
 'use strict';
 
 const { lineAt, withAnchor } = require('./line-anchor');
+const { capWithNotice, capMembersWithNotice } = require('../util/truncate');
+
+// Ceilings sit above the default `maxSigsPerFile` so the configured budget
+// governs output rather than a literal buried here, and omissions are disclosed
+// — an undisclosed cap looks like a class that simply has eight methods (#576).
+const MEMBER_LIMIT = 8;
+const PER_FILE_LIMIT = 25;
 
 /**
  * Extract signatures from Dart source code.
@@ -36,7 +43,8 @@ function extract(src) {
     const block = extractBlock(stripped, bodyStart);
     sigs.push(withAnchor(`${abs}class ${m[1]}`, lineAt(stripped, m.index), lineAt(stripped, bodyStart + block.length)));
     for (const meth of extractMembers(block)) {
-      sigs.push(withAnchor(`  ${meth.text}`, lineAt(stripped, bodyStart + meth.declIdx), lineAt(stripped, bodyStart + meth.endIdx)));
+      // The disclosure marker carries no offsets; anchor it at the class body.
+      sigs.push(withAnchor(`  ${meth.text}`, lineAt(stripped, bodyStart + (meth.declIdx || 0)), lineAt(stripped, bodyStart + (meth.endIdx || 0))));
     }
   }
 
@@ -48,7 +56,7 @@ function extract(src) {
     sigs.push(withAnchor(`${m[2]}(${normalizeParams(m[3])})${retStr}`, s, e));
   }
 
-  return sigs.slice(0, 25);
+  return capWithNotice(sigs, PER_FILE_LIMIT, 'signatures');
 }
 
 function extractBlock(src, startIndex) {
@@ -73,7 +81,7 @@ function extractMembers(block) {
       endIdx: m.index + m[0].length,
     });
   }
-  return members.slice(0, 8);
+  return capMembersWithNotice(members, MEMBER_LIMIT);
 }
 
 function normalizeParams(params) {

package/src/extractors/dockerfile.js

@@ -1,5 +1,11 @@
 'use strict';
 
+const { capWithNotice } = require('../util/truncate');
+
+// Ceiling sits above the default `maxSigsPerFile` so the configured budget
+// governs output rather than a literal buried here, and omissions are disclosed (#576).
+const PER_FILE_LIMIT = 25;
+
 /**
  * Extract signatures from Dockerfiles.
  * @param {string} src - Raw file content
@@ -43,7 +49,7 @@ function extract(src) {
     if (m) sigs.push(`ARG ${m[1]}`);
   }
 
-  return sigs.slice(0, 25);
+  return capWithNotice(sigs, PER_FILE_LIMIT, 'signatures');
 }
 
 module.exports = { extract };

package/src/extractors/gdscript.js

@@ -1,5 +1,15 @@
 'use strict';
 
+const { capWithNotice } = require('../util/truncate');
+
+// Ceiling sits above the default `maxSigsPerFile` so the configured budget
+// governs output rather than a literal buried here, and omissions are disclosed (#576).
+const PER_FILE_LIMIT = 25;
+
+// Ceilings disclose what they drop rather than truncating silently (#576).
+const MEMBER_LIMIT = 6;
+const ENUM_LIMIT = 24;
+
 /**
  * Extract signatures from Godot GDScript source code.
  * @param {string} src - Raw file content
@@ -44,7 +54,7 @@ function extract(src) {
       .split(',')
       .map((s) => s.trim().split(/\s*=/)[0].trim())
       .filter(Boolean);
-    sigs.push(`${indent}enum ${m[1]} { ${members.slice(0, 6).join(', ')} }`);
+    sigs.push(`${indent}enum ${m[1]} { ${capWithNotice(members, ENUM_LIMIT, 'values').join(', ')} }`);
   }
 
   let constCount = 0;
@@ -92,7 +102,7 @@ function extract(src) {
     }
   }
 
-  return sigs.slice(0, 25);
+  return capWithNotice(sigs, PER_FILE_LIMIT, 'signatures');
 }
 
 function extractInnerMembers(stripped, startIndex) {
@@ -110,7 +120,7 @@ function extractInnerMembers(stripped, startIndex) {
       members.push(`${staticKw}func ${fm[2]}(${params})${retStr}`);
     }
   }
-  return members.slice(0, 6);
+  return capWithNotice(members, MEMBER_LIMIT, 'members');
 }
 
 function normalizeParams(params) {

package/src/extractors/go.js

@@ -1,6 +1,11 @@
 'use strict';
 
 const { lineAt, withAnchor } = require('./line-anchor');
+const { capWithNotice } = require('../util/truncate');
+
+// Ceiling sits above the default `maxSigsPerFile` so the configured budget
+// governs output rather than a literal buried here, and omissions are disclosed (#576).
+const PER_FILE_LIMIT = 25;
 
 /**
  * Extract signatures from Go source code.
@@ -49,7 +54,7 @@ function extract(src) {
     sigs.push(hinted(withAnchor(`func ${receiver}${m[2]}(${normalizeParams(m[3])})${retStr}`, lineAt(stripped, m.index), lineAt(stripped, end)), m[2]));
   }
 
-  return sigs.slice(0, 25);
+  return capWithNotice(sigs, PER_FILE_LIMIT, 'signatures');
 }
 
 function extractBlock(src, startIndex) {

package/src/extractors/html.js

@@ -1,5 +1,11 @@
 'use strict';
 
+const { capWithNotice } = require('../util/truncate');
+
+// Ceiling sits above the default `maxSigsPerFile` so the configured budget
+// governs output rather than a literal buried here, and omissions are disclosed (#576).
+const PER_FILE_LIMIT = 25;
+
 /**
  * Extract signatures from HTML files.
  * Focuses on id/class attributes, forms, and script tags.
@@ -33,7 +39,7 @@ function extract(src) {
     sigs.push(`data-${m[0].match(/data-(\w[\w-]*)/i)[1]}: ${m[1]}`);
   }
 
-  return sigs.slice(0, 25);
+  return capWithNotice(sigs, PER_FILE_LIMIT, 'signatures');
 }
 
 module.exports = { extract };

package/src/extractors/kotlin.js

@@ -1,6 +1,13 @@
 'use strict';
 
 const { lineAt, withAnchor } = require('./line-anchor');
+const { capWithNotice, capMembersWithNotice } = require('../util/truncate');
+
+// Ceilings sit above the default `maxSigsPerFile` so the configured budget
+// governs output rather than a literal buried here, and omissions are disclosed
+// — an undisclosed cap looks like a class that simply has eight methods (#576).
+const MEMBER_LIMIT = 8;
+const PER_FILE_LIMIT = 25;
 
 /**
  * Extract signatures from Kotlin source code.
@@ -35,7 +42,8 @@ function extract(src) {
     const block = extractBlock(stripped, bodyStart);
     sigs.push(withAnchor(`${m[1]} ${m[2]}`, lineAt(stripped, m.index), lineAt(stripped, bodyStart + block.length)));
     for (const meth of extractMembers(block)) {
-      sigs.push(withAnchor(`  ${meth.text}`, lineAt(stripped, bodyStart + meth.declIdx), lineAt(stripped, bodyStart + meth.endIdx)));
+      // The disclosure marker carries no offsets; anchor it at the class body.
+      sigs.push(withAnchor(`  ${meth.text}`, lineAt(stripped, bodyStart + (meth.declIdx || 0)), lineAt(stripped, bodyStart + (meth.endIdx || 0))));
     }
   }
 
@@ -48,7 +56,7 @@ function extract(src) {
     sigs.push(withAnchor(`${suspend}fun ${m[1]}(${normalizeParams(m[2])})${retStr}`, s, e));
   }
 
-  return sigs.slice(0, 25);
+  return capWithNotice(sigs, PER_FILE_LIMIT, 'signatures');
 }
 
 function extractBlock(src, startIndex) {
@@ -75,7 +83,7 @@ function extractMembers(block) {
       endIdx: m.index + m[0].length,
     });
   }
-  return members.slice(0, 8);
+  return capMembersWithNotice(members, MEMBER_LIMIT);
 }
 
 function normalizeParams(params) {

package/src/extractors/php.js

@@ -1,6 +1,13 @@
 'use strict';
 
 const { lineAt, withAnchor } = require('./line-anchor');
+const { capWithNotice, capMembersWithNotice } = require('../util/truncate');
+
+// Ceilings sit above the default `maxSigsPerFile` so the configured budget
+// governs output rather than a literal buried here, and omissions are disclosed
+// — an undisclosed cap looks like a class that simply has eight methods (#576).
+const MEMBER_LIMIT = 8;
+const PER_FILE_LIMIT = 25;
 
 /**
  * Extract signatures from PHP source code.
@@ -40,7 +47,8 @@ function extract(src) {
     const block = extractBlock(stripped, bodyStart);
     sigs.push(withAnchor(`${kind} ${m[1]}`, lineAt(stripped, m.index), lineAt(stripped, bodyStart + block.length)));
     for (const meth of extractMembers(block)) {
-      sigs.push(withAnchor(`  ${meth.text}`, lineAt(stripped, bodyStart + meth.declIdx), lineAt(stripped, bodyStart + meth.endIdx)));
+      // The disclosure marker carries no offsets; anchor it at the class body.
+      sigs.push(withAnchor(`  ${meth.text}`, lineAt(stripped, bodyStart + (meth.declIdx || 0)), lineAt(stripped, bodyStart + (meth.endIdx || 0))));
     }
   }
 
@@ -52,7 +60,7 @@ function extract(src) {
     sigs.push(withAnchor(`function ${m[1]}(${normalizeParams(m[2])})${retStr}`, s, e));
   }
 
-  return sigs.slice(0, 25);
+  return capWithNotice(sigs, PER_FILE_LIMIT, 'signatures');
 }
 
 function extractBlock(src, startIndex) {
@@ -80,7 +88,7 @@ function extractMembers(block) {
       endIdx: m.index + m[0].length,
     });
   }
-  return members.slice(0, 8);
+  return capMembersWithNotice(members, MEMBER_LIMIT);
 }
 
 function normalizeParams(params) {

package/src/extractors/python.js

@@ -2,6 +2,11 @@
 
 const path = require('path');
 const { lineAt } = require('./line-anchor');
+const { capWithNotice } = require('../util/truncate');
+
+// Ceiling sits above the default `maxSigsPerFile` so the configured budget
+// governs output rather than a literal buried here, and omissions are disclosed (#576).
+const PER_FILE_LIMIT = 30;
 
 /**
  * 1-based line of the last source line belonging to a top-level (indent 0)
@@ -136,7 +141,7 @@ function extract(src, filePath) {
     }
   }
 
-  return sigs.slice(0, 30);
+  return capWithNotice(sigs, PER_FILE_LIMIT, 'signatures');
 }
 
 function extractClassMethods(stripped, startIndex) {

package/src/extractors/r.js

@@ -1,5 +1,11 @@
 'use strict';
 
+const { capWithNotice } = require('../util/truncate');
+
+// Ceiling sits above the default `maxSigsPerFile` so the configured budget
+// governs output rather than a literal buried here, and omissions are disclosed (#576).
+const PER_FILE_LIMIT = 30;
+
 /**
  * Extract signatures from R source code.
  *
@@ -113,7 +119,7 @@ function extract(src) {
     sigs.push(`setClass("${sm[1]}")`);
   }
 
-  return sigs.slice(0, 30);
+  return capWithNotice(sigs, PER_FILE_LIMIT, 'signatures');
 }
 
 /**

package/src/extractors/ruby.js

@@ -1,5 +1,11 @@
 'use strict';
 
+const { capWithNotice } = require('../util/truncate');
+
+// Ceiling sits above the default `maxSigsPerFile` so the configured budget
+// governs output rather than a literal buried here, and omissions are disclosed (#576).
+const PER_FILE_LIMIT = 25;
+
 /**
  * Extract signatures from Ruby source code.
  * @param {string} src - Raw file content
@@ -34,7 +40,7 @@ function extract(src) {
     sigs.push(`def ${m[1]}${params}${retStr}`);
   }
 
-  return sigs.slice(0, 25);
+  return capWithNotice(sigs, PER_FILE_LIMIT, 'signatures');
 }
 
 function normalizeParams(params) {

package/src/extractors/rust.js

@@ -1,6 +1,11 @@
 'use strict';
 
 const { lineAt, withAnchor } = require('./line-anchor');
+const { capWithNotice } = require('../util/truncate');
+
+// Ceiling sits above the default `maxSigsPerFile` so the configured budget
+// governs output rather than a literal buried here, and omissions are disclosed (#576).
+const PER_FILE_LIMIT = 25;
 
 /**
  * Extract signatures from Rust source code.
@@ -70,7 +75,7 @@ function extract(src) {
     sigs.push(hinted(withAnchor(`pub ${asyncKw}fn ${m[1]}(${normalizeParams(m[2])})${retStr}`, s, e), m[1]));
   }
 
-  return sigs.slice(0, 25);
+  return capWithNotice(sigs, PER_FILE_LIMIT, 'signatures');
 }
 
 function extractBlock(src, startIndex) {

package/src/extractors/scala.js

@@ -1,6 +1,13 @@
 'use strict';
 
 const { lineAt, withAnchor } = require('./line-anchor');
+const { capWithNotice, capMembersWithNotice } = require('../util/truncate');
+
+// Ceilings sit above the default `maxSigsPerFile` so the configured budget
+// governs output rather than a literal buried here, and omissions are disclosed
+// — an undisclosed cap looks like a class that simply has eight methods (#576).
+const MEMBER_LIMIT = 8;
+const PER_FILE_LIMIT = 25;
 
 /**
  * Extract signatures from Scala source code.
@@ -27,7 +34,8 @@ function extract(src) {
     const block = extractBlock(stripped, bodyStart);
     sigs.push(withAnchor(`${kind} ${m[1]}`, lineAt(stripped, m.index), lineAt(stripped, bodyStart + block.length)));
     for (const fn of extractMembers(block)) {
-      sigs.push(withAnchor(`  ${fn.text}`, lineAt(stripped, bodyStart + fn.declIdx), lineAt(stripped, bodyStart + fn.endIdx)));
+      // The disclosure marker carries no offsets; anchor it at the class body.
+      sigs.push(withAnchor(`  ${fn.text}`, lineAt(stripped, bodyStart + (fn.declIdx || 0)), lineAt(stripped, bodyStart + (fn.endIdx || 0))));
     }
   }
 
@@ -41,7 +49,7 @@ function extract(src) {
     sigs.push(withAnchor(`def ${m[1]}${params}${retStr}`, line, line));
   }
 
-  return sigs.slice(0, 25);
+  return capWithNotice(sigs, PER_FILE_LIMIT, 'signatures');
 }
 
 function extractBlock(src, startIndex) {
@@ -68,7 +76,7 @@ function extractMembers(block) {
       endIdx: m.index + m[0].length,
     });
   }
-  return members.slice(0, 8);
+  return capMembersWithNotice(members, MEMBER_LIMIT);
 }
 
 function normalizeParams(params) {

package/src/extractors/shell.js

@@ -1,5 +1,11 @@
 'use strict';
 
+const { capWithNotice } = require('../util/truncate');
+
+// Ceiling sits above the default `maxSigsPerFile` so the configured budget
+// governs output rather than a literal buried here, and omissions are disclosed (#576).
+const PER_FILE_LIMIT = 25;
+
 /**
  * Extract signatures from shell scripts (bash, zsh, fish).
  * @param {string} src - Raw file content
@@ -37,7 +43,7 @@ function extract(src) {
     }
   }
 
-  return sigs.slice(0, 25);
+  return capWithNotice(sigs, PER_FILE_LIMIT, 'signatures');
 }
 
 module.exports = { extract };

package/src/extractors/svelte.js

@@ -1,5 +1,11 @@
 'use strict';
 
+const { capWithNotice } = require('../util/truncate');
+
+// Ceiling sits above the default `maxSigsPerFile` so the configured budget
+// governs output rather than a literal buried here, and omissions are disclosed (#576).
+const PER_FILE_LIMIT = 25;
+
 /**
  * Extract signatures from Svelte components.
  * @param {string} src - Raw file content
@@ -42,7 +48,7 @@ function extract(src) {
     sigs.push(`$: ${m[1]}`);
   }
 
-  return sigs.slice(0, 25);
+  return capWithNotice(sigs, PER_FILE_LIMIT, 'signatures');
 }
 
 function normalizeParams(params) {

package/src/extractors/swift.js

@@ -1,6 +1,13 @@
 'use strict';
 
 const { lineAt, withAnchor } = require('./line-anchor');
+const { capWithNotice, capMembersWithNotice } = require('../util/truncate');
+
+// Ceilings sit above the default `maxSigsPerFile` so the configured budget
+// governs output rather than a literal buried here, and omissions are disclosed
+// — an undisclosed cap looks like a class that simply has eight methods (#576).
+const MEMBER_LIMIT = 8;
+const PER_FILE_LIMIT = 25;
 
 /**
  * Extract signatures from Swift source code.
@@ -36,7 +43,8 @@ function extract(src) {
     const block = extractBlock(stripped, bodyStart);
     sigs.push(withAnchor(`${m[1]} ${m[2]}`, lineAt(stripped, m.index), lineAt(stripped, bodyStart + block.length)));
     for (const fn of extractMembers(block)) {
-      sigs.push(withAnchor(`  ${fn.text}`, lineAt(stripped, bodyStart + fn.declIdx), lineAt(stripped, bodyStart + fn.endIdx)));
+      // The disclosure marker carries no offsets; anchor it at the class body.
+      sigs.push(withAnchor(`  ${fn.text}`, lineAt(stripped, bodyStart + (fn.declIdx || 0)), lineAt(stripped, bodyStart + (fn.endIdx || 0))));
     }
   }
 
@@ -48,7 +56,7 @@ function extract(src) {
     sigs.push(withAnchor(`${asyncKw}func ${m[1]}(${normalizeParams(m[2])})${retStr}`, s, e));
   }
 
-  return sigs.slice(0, 25);
+  return capWithNotice(sigs, PER_FILE_LIMIT, 'signatures');
 }
 
 function extractBlock(src, startIndex) {
@@ -74,7 +82,7 @@ function extractMembers(block) {
       endIdx: m.index + m[0].length,
     });
   }
-  return members.slice(0, 8);
+  return capMembersWithNotice(members, MEMBER_LIMIT);
 }
 
 function normalizeParams(params) {

package/src/extractors/vue.js

@@ -1,5 +1,11 @@
 'use strict';
 
+const { capWithNotice } = require('../util/truncate');
+
+// Ceiling sits above the default `maxSigsPerFile` so the configured budget
+// governs output rather than a literal buried here, and omissions are disclosed (#576).
+const PER_FILE_LIMIT = 25;
+
 /**
  * Extract signatures from Vue single-file components.
  * @param {string} src - Raw file content
@@ -64,7 +70,7 @@ function extract(src) {
   const emitsMatch = script.match(/(?:defineEmits|emits)\s*(?::\s*|\(\s*)(\[[\s\S]*?\])/);
   if (emitsMatch) sigs.push(`emits: ${emitsMatch[1].replace(/\s+/g, ' ')}`);
 
-  return sigs.slice(0, 25);
+  return capWithNotice(sigs, PER_FILE_LIMIT, 'signatures');
 }
 
 function normalizeParams(params) {

package/src/extractors/yaml.js

@@ -1,5 +1,11 @@
 'use strict';
 
+const { capWithNotice } = require('../util/truncate');
+
+// Ceiling sits above the default `maxSigsPerFile` so the configured budget
+// governs output rather than a literal buried here, and omissions are disclosed (#576).
+const PER_FILE_LIMIT = 25;
+
 /**
  * Extract signatures from YAML configuration files.
  * @param {string} src - Raw file content
@@ -53,7 +59,7 @@ function extract(src) {
     }
   }
 
-  return sigs.slice(0, 25);
+  return capWithNotice(sigs, PER_FILE_LIMIT, 'signatures');
 }
 
 module.exports = { extract };

package/src/mcp/server.js

@@ -18,7 +18,7 @@ const { readContext, searchSignatures, getMap, createCheckpoint, getRouting, exp
 
 const SERVER_INFO = {
   name: 'sigmap',
-  version: '8.31.0',
+  version: '8.32.0',
   description: 'SigMap MCP server — code signatures on demand',
 };