sigmap 8.31.0 → 8.32.1

package/llms-full.txt

@@ -11,21 +11,21 @@ ranking keeps the relevant context in scope (cutting tokens ~97% as a side
 effect), with no LLM calls, embeddings, or vector database. Works with Claude,
 Cursor, GitHub Copilot, Aider, Windsurf, local LLMs, and MCP.
 
-# Version: 8.31.0 | Benchmark: sigmap-v8.31-main (2026-09-08)
+# Version: 8.32.1 | Benchmark: sigmap-v8.32-main (2026-09-12)
 # Source: auto-generated from package.json, version.json, benchmarks/latest.json, src/mcp/tools.js, src/config/defaults.js
 # Regenerate: npm run generate:llms   |   Validate: npm run validate:llms
 
 ---
 
-## Core metrics (benchmark: sigmap-v8.31-main, 2026-09-08)
+## Core metrics (benchmark: sigmap-v8.32-main, 2026-09-12)
 
 | Metric | Without SigMap | With SigMap |
 |--------|----------------|-------------|
-| Retrieval hit@5 | 44.0% (single-shot grep) | 81.1% (1.73× lift) |
+| Retrieval hit@5 | 44.0% (single-shot grep) | 78.9% (1.73× lift) |
 | Token reduction | — | 96.8% average |
-| Task-success proxy (modeled) | — | 64.8% |
-| Prompts per task | 2.84 | 1.54 (45.7% fewer) |
-| Supported languages | — | 33 |
+| Task-success proxy (modeled) | — | 62.9% |
+| Prompts per task | 2.84 | 1.58 (44.4% fewer) |
+| Supported languages | — | 32 |
 | MCP tools | — | 21 |
 | npm runtime dependencies | — | 0 |
 
@@ -370,9 +370,9 @@ impact = {"depth":3,"includeSigs":true}
 
 ---
 
-## Supported languages (33 extractors)
+## Supported languages (32 extractors)
 
-cpp, csharp, css, dart, dockerfile, gdscript, go, graphql, html, java, javascript, kotlin, markdown, php, properties, protobuf, python, r, ruby, rust, scala, shell, sql, svelte, swift, terraform, toml, typescript, typescript_react, vue, vue_sfc, xml, yaml
+cpp, csharp, css, dart, dockerfile, gdscript, go, graphql, html, java, javascript, kotlin, markdown, php, properties, protobuf, python, r, ruby, rust, scala, shell, sql, svelte, swift, terraform, toml, typescript, typescript_react, vue_sfc, xml, yaml
 
 ---
 

package/llms.txt

@@ -11,7 +11,7 @@ ranking keeps the relevant context in scope (cutting tokens ~97% as a side
 effect), with no LLM calls, embeddings, or vector database. Works with Claude,
 Cursor, GitHub Copilot, Aider, Windsurf, local LLMs, and MCP.
 
-# Version: 8.31.0 | Benchmark: sigmap-v8.31-main (2026-09-08)
+# Version: 8.32.1 | Benchmark: sigmap-v8.32-main (2026-09-12)
 # Source: auto-generated from package.json, version.json, benchmarks/latest.json, src/mcp/tools.js, src/config/defaults.js
 # Regenerate: npm run generate:llms   |   Validate: npm run validate:llms
 
@@ -23,13 +23,13 @@ Cursor, GitHub Copilot, Aider, Windsurf, local LLMs, and MCP.
 - No blast-radius awareness before editing a hub file — `--impact` shows every file a change touches.
 - Pasted stack traces, CI logs, and JSON bloat the prompt — `squeeze` minimizes them and enriches the top frame from the symbol index.
 
-## Core metrics (benchmark: sigmap-v8.31-main, 2026-09-08)
+## Core metrics (benchmark: sigmap-v8.32-main, 2026-09-12)
 
-- hit@5 retrieval: 81.1% vs 44.0% single-shot grep baseline (1.73× lift)
+- hit@5 retrieval: 78.9% vs 44.0% single-shot grep baseline (1.73× lift)
 - Token reduction: 96.8% average across benchmark repos
-- Task-success proxy: 64.8% (modeled from retrieval tiers, not measured LLM sessions)
-- Prompts per task: 1.54 vs 2.84 baseline (45.7% fewer, modeled)
-- Languages: 33 supported · MCP tools: 21
+- Task-success proxy: 62.9% (modeled from retrieval tiers, not measured LLM sessions)
+- Prompts per task: 1.58 vs 2.84 baseline (44.4% fewer, modeled)
+- Languages: 32 supported · MCP tools: 21
 - Dependencies: zero npm runtime dependencies · fully offline
 
 ## Quick start

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sigmap",
-  "version": "8.31.0",
+  "version": "8.32.1",
   "description": "The deterministic, verifiable grounding layer for AI code work — a zero-dependency signature-and-evidence map that grounds Claude, Cursor, Copilot, Aider, Windsurf, local LLMs & MCP agents against your real code (repo + installed libraries) so they stop hallucinating files, imports & APIs. Runs offline via npx; byte-stable output; ~97% token reduction as proof.",
   "main": "packages/core/index.js",
   "exports": {

package/packages/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sigmap-cli",
-  "version": "8.31.0",
+  "version": "8.32.1",
   "description": "SigMap CLI wrapper — thin adapter for programmatic CLI invocation",
   "main": "index.js",
   "keywords": [

package/packages/core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sigmap-core",
-  "version": "8.31.0",
+  "version": "8.32.1",
   "description": "SigMap core library — zero-dependency code signature extraction, retrieval, and security scanning",
   "main": "index.js",
   "keywords": [

package/src/config/loader.js

@@ -227,6 +227,55 @@ function _legacyDetectAutoSrcDirs(cwd, excludeList) {
   });
 }
 
+/**
+ * Directory depth needed to reach source under a JVM package layout.
+ *
+ * `maxDepth: 6` is right for the JS/Python-shaped trees it was tuned on, but a
+ * JVM project puts one directory per package segment — real code in
+ * `src/main/java/com/company/project/module/Class.java` sits 8-10 levels down.
+ * At depth 6 only the top-level package was indexed: on spring-petclinic, 6 of
+ * 47 Java files (#590).
+ *
+ * #561 already raised the dependency-graph walk to 12 for exactly this reason,
+ * so extraction was the shallower half of an inconsistent pair.
+ *
+ * Deepening globally is not free — it adds candidates to every repo and cost
+ * 2.2pp on the (filename-leaky) 105-task matrix corpus while the unbiased
+ * `mined` corpus stayed flat. So the depth is raised only where the layout
+ * demands it, leaving non-JVM repos byte-identical.
+ *
+ * @param {string} cwd
+ * @returns {boolean} true when the repo looks like a Maven/Gradle/sbt project
+ */
+function _isJvmLayout(cwd) {
+  const MARKERS = ['pom.xml', 'build.gradle', 'build.gradle.kts', 'build.sbt', 'settings.gradle', 'settings.gradle.kts'];
+  for (const m of MARKERS) {
+    try { if (fs.existsSync(path.join(cwd, m))) return true; } catch { /* unreadable cwd */ }
+  }
+  for (const d of ['src/main/java', 'src/main/kotlin', 'src/main/scala']) {
+    try { if (fs.existsSync(path.join(cwd, d))) return true; } catch { /* ignore */ }
+  }
+  return false;
+}
+
+/** Walk depth for a JVM package layout — matches the graph walk from #561. */
+const JVM_MAX_DEPTH = 12;
+
+/**
+ * Raise `maxDepth` to the JVM depth when the layout needs it (#590).
+ * An explicit user value always wins, including a deliberately shallow one.
+ * @param {object} cfg   resolved config (mutated and returned)
+ * @param {string} cwd
+ * @param {boolean} userSetDepth
+ * @returns {object} cfg
+ */
+function _applyJvmDepth(cfg, cwd, userSetDepth) {
+  if (!userSetDepth && cfg.maxDepth < JVM_MAX_DEPTH && _isJvmLayout(cwd)) {
+    cfg.maxDepth = JVM_MAX_DEPTH;
+  }
+  return cfg;
+}
+
 /**
  * Load and merge configuration for a given working directory.
  *
@@ -239,7 +288,7 @@ function loadConfig(cwd) {
     const cfg = deepClone(DEFAULTS);
     const detected = detectAutoSrcDirs(cwd, cfg.exclude);
     if (detected.length > 0) cfg.srcDirs = detected;
-    return cfg;
+    return _applyJvmDepth(cfg, cwd, false);
   }
 
   let userConfig;
@@ -251,7 +300,7 @@ function loadConfig(cwd) {
     const cfg = deepClone(DEFAULTS);
     const detected = detectAutoSrcDirs(cwd, cfg.exclude);
     if (detected.length > 0) cfg.srcDirs = detected;
-    return cfg;
+    return _applyJvmDepth(cfg, cwd, false);
   }
 
   // Warn on unknown keys (helps catch typos)
@@ -303,7 +352,8 @@ function loadConfig(cwd) {
   } else if (Array.isArray(merged.adapters) && !userConfig.outputs) {
     merged.outputs = merged.adapters.filter((a) => ['copilot','claude','cursor','windsurf'].includes(a));
   }
-  return merged;
+
+  return _applyJvmDepth(merged, cwd, userConfig.maxDepth !== undefined);
 }
 
 function deepClone(obj) {

package/src/eval/analyzer.js

@@ -31,7 +31,6 @@ const EXT_MAP = {
   '.scala': 'scala',   '.sc': 'scala',
   '.gd': 'gdscript',
   '.r': 'r',           '.R': 'r',
-  '.vue': 'vue',
   '.svelte': 'svelte',
   '.html': 'html',     '.htm': 'html',
   '.css': 'css',       '.scss': 'css', '.sass': 'css', '.less': 'css',

package/src/extractors/cpp.js

@@ -1,5 +1,13 @@
 'use strict';
 
+const { capWithNotice, capMembersWithNotice } = require('../util/truncate');
+
+// Ceilings sit above the default `maxSigsPerFile` so the configured budget
+// governs output rather than a literal buried here, and omissions are disclosed
+// — an undisclosed cap looks like a class that simply has eight methods (#576).
+const MEMBER_LIMIT = 8;
+const PER_FILE_LIMIT = 25;
+
 /**
  * Extract signatures from C/C++ source code.
  * @param {string} src - Raw file content
@@ -30,7 +38,7 @@ function extract(src) {
     sigs.push(`${m[2]}(${normalizeParams(m[3])})${retStr}`);
   }
 
-  return sigs.slice(0, 25);
+  return capWithNotice(sigs, PER_FILE_LIMIT, 'signatures');
 }
 
 function extractBlock(src, startIndex) {
@@ -53,7 +61,7 @@ function extractMembers(block) {
     const retStr = ret ? ` → ${ret}` : '';
     members.push(`${m[2]}(${normalizeParams(m[3])})${retStr}`);
   }
-  return members.slice(0, 8);
+  return capWithNotice(members, MEMBER_LIMIT, 'members');
 }
 
 function normalizeParams(params) {

package/src/extractors/csharp.js

@@ -1,6 +1,13 @@
 'use strict';
 
 const { lineAt, withAnchor } = require('./line-anchor');
+const { capWithNotice, capMembersWithNotice } = require('../util/truncate');
+
+// Ceilings sit above the default `maxSigsPerFile` so the configured budget
+// governs output rather than a literal buried here, and omissions are disclosed
+// — an undisclosed cap looks like a class that simply has eight methods (#576).
+const MEMBER_LIMIT = 8;
+const PER_FILE_LIMIT = 25;
 
 /**
  * Extract signatures from C# source code.
@@ -25,11 +32,12 @@ function extract(src) {
     const block = extractBlock(stripped, bodyStart);
     sigs.push(withAnchor(`${m[1]} ${m[2]}`, lineAt(stripped, declIdx), lineAt(stripped, bodyStart + block.length)));
     for (const meth of extractMembers(block)) {
-      sigs.push(withAnchor(`  ${meth.text}`, lineAt(stripped, bodyStart + meth.declIdx), lineAt(stripped, bodyStart + meth.endIdx)));
+      // The disclosure marker carries no offsets; anchor it at the class body.
+      sigs.push(withAnchor(`  ${meth.text}`, lineAt(stripped, bodyStart + (meth.declIdx || 0)), lineAt(stripped, bodyStart + (meth.endIdx || 0))));
     }
   }
 
-  return sigs.slice(0, 25);
+  return capWithNotice(sigs, PER_FILE_LIMIT, 'signatures');
 }
 
 function extractBlock(src, startIndex) {
@@ -55,7 +63,7 @@ function extractMembers(block) {
       endIdx: m.index + m[0].length,
     });
   }
-  return members.slice(0, 8);
+  return capMembersWithNotice(members, MEMBER_LIMIT);
 }
 
 function normalizeParams(params) {

package/src/extractors/css.js

@@ -1,5 +1,11 @@
 'use strict';
 
+const { capWithNotice } = require('../util/truncate');
+
+// Ceiling sits above the default `maxSigsPerFile` so the configured budget
+// governs output rather than a literal buried here, and omissions are disclosed (#576).
+const PER_FILE_LIMIT = 25;
+
 /**
  * Extract signatures from CSS/SCSS/SASS/Less source code.
  * @param {string} src - Raw file content
@@ -63,7 +69,7 @@ function extract(src) {
     for (const name of selected) sigs.push(`.${name}`);
   }
 
-  return sigs.slice(0, 25);
+  return capWithNotice(sigs, PER_FILE_LIMIT, 'signatures');
 }
 
 module.exports = { extract };

package/src/extractors/dart.js

@@ -1,6 +1,13 @@
 'use strict';
 
 const { lineAt, withAnchor } = require('./line-anchor');
+const { capWithNotice, capMembersWithNotice } = require('../util/truncate');
+
+// Ceilings sit above the default `maxSigsPerFile` so the configured budget
+// governs output rather than a literal buried here, and omissions are disclosed
+// — an undisclosed cap looks like a class that simply has eight methods (#576).
+const MEMBER_LIMIT = 8;
+const PER_FILE_LIMIT = 25;
 
 /**
  * Extract signatures from Dart source code.
@@ -36,7 +43,8 @@ function extract(src) {
     const block = extractBlock(stripped, bodyStart);
     sigs.push(withAnchor(`${abs}class ${m[1]}`, lineAt(stripped, m.index), lineAt(stripped, bodyStart + block.length)));
     for (const meth of extractMembers(block)) {
-      sigs.push(withAnchor(`  ${meth.text}`, lineAt(stripped, bodyStart + meth.declIdx), lineAt(stripped, bodyStart + meth.endIdx)));
+      // The disclosure marker carries no offsets; anchor it at the class body.
+      sigs.push(withAnchor(`  ${meth.text}`, lineAt(stripped, bodyStart + (meth.declIdx || 0)), lineAt(stripped, bodyStart + (meth.endIdx || 0))));
     }
   }
 
@@ -48,7 +56,7 @@ function extract(src) {
     sigs.push(withAnchor(`${m[2]}(${normalizeParams(m[3])})${retStr}`, s, e));
   }
 
-  return sigs.slice(0, 25);
+  return capWithNotice(sigs, PER_FILE_LIMIT, 'signatures');
 }
 
 function extractBlock(src, startIndex) {
@@ -73,7 +81,7 @@ function extractMembers(block) {
       endIdx: m.index + m[0].length,
     });
   }
-  return members.slice(0, 8);
+  return capMembersWithNotice(members, MEMBER_LIMIT);
 }
 
 function normalizeParams(params) {

package/src/extractors/dispatch.js

@@ -30,7 +30,6 @@ const EXTRACTORS = {
   scala: require('./scala'),
   gdscript: require('./gdscript'),
   r: require('./r'),
-  vue: require('./vue'),
   vue_sfc: require('./vue_sfc'),
   svelte: require('./svelte'),
   html: require('./html'),

package/src/extractors/dockerfile.js

@@ -1,5 +1,11 @@
 'use strict';
 
+const { capWithNotice } = require('../util/truncate');
+
+// Ceiling sits above the default `maxSigsPerFile` so the configured budget
+// governs output rather than a literal buried here, and omissions are disclosed (#576).
+const PER_FILE_LIMIT = 25;
+
 /**
  * Extract signatures from Dockerfiles.
  * @param {string} src - Raw file content
@@ -43,7 +49,7 @@ function extract(src) {
     if (m) sigs.push(`ARG ${m[1]}`);
   }
 
-  return sigs.slice(0, 25);
+  return capWithNotice(sigs, PER_FILE_LIMIT, 'signatures');
 }
 
 module.exports = { extract };

package/src/extractors/gdscript.js

@@ -1,5 +1,15 @@
 'use strict';
 
+const { capWithNotice } = require('../util/truncate');
+
+// Ceiling sits above the default `maxSigsPerFile` so the configured budget
+// governs output rather than a literal buried here, and omissions are disclosed (#576).
+const PER_FILE_LIMIT = 25;
+
+// Ceilings disclose what they drop rather than truncating silently (#576).
+const MEMBER_LIMIT = 6;
+const ENUM_LIMIT = 24;
+
 /**
  * Extract signatures from Godot GDScript source code.
  * @param {string} src - Raw file content
@@ -44,7 +54,7 @@ function extract(src) {
       .split(',')
       .map((s) => s.trim().split(/\s*=/)[0].trim())
       .filter(Boolean);
-    sigs.push(`${indent}enum ${m[1]} { ${members.slice(0, 6).join(', ')} }`);
+    sigs.push(`${indent}enum ${m[1]} { ${capWithNotice(members, ENUM_LIMIT, 'values').join(', ')} }`);
   }
 
   let constCount = 0;
@@ -92,7 +102,7 @@ function extract(src) {
     }
   }
 
-  return sigs.slice(0, 25);
+  return capWithNotice(sigs, PER_FILE_LIMIT, 'signatures');
 }
 
 function extractInnerMembers(stripped, startIndex) {
@@ -110,7 +120,7 @@ function extractInnerMembers(stripped, startIndex) {
       members.push(`${staticKw}func ${fm[2]}(${params})${retStr}`);
     }
   }
-  return members.slice(0, 6);
+  return capWithNotice(members, MEMBER_LIMIT, 'members');
 }
 
 function normalizeParams(params) {

package/src/extractors/go.js

@@ -1,6 +1,11 @@
 'use strict';
 
 const { lineAt, withAnchor } = require('./line-anchor');
+const { capWithNotice } = require('../util/truncate');
+
+// Ceiling sits above the default `maxSigsPerFile` so the configured budget
+// governs output rather than a literal buried here, and omissions are disclosed (#576).
+const PER_FILE_LIMIT = 25;
 
 /**
  * Extract signatures from Go source code.
@@ -49,7 +54,7 @@ function extract(src) {
     sigs.push(hinted(withAnchor(`func ${receiver}${m[2]}(${normalizeParams(m[3])})${retStr}`, lineAt(stripped, m.index), lineAt(stripped, end)), m[2]));
   }
 
-  return sigs.slice(0, 25);
+  return capWithNotice(sigs, PER_FILE_LIMIT, 'signatures');
 }
 
 function extractBlock(src, startIndex) {

package/src/extractors/html.js

@@ -1,5 +1,11 @@
 'use strict';
 
+const { capWithNotice } = require('../util/truncate');
+
+// Ceiling sits above the default `maxSigsPerFile` so the configured budget
+// governs output rather than a literal buried here, and omissions are disclosed (#576).
+const PER_FILE_LIMIT = 25;
+
 /**
  * Extract signatures from HTML files.
  * Focuses on id/class attributes, forms, and script tags.
@@ -33,7 +39,7 @@ function extract(src) {
     sigs.push(`data-${m[0].match(/data-(\w[\w-]*)/i)[1]}: ${m[1]}`);
   }
 
-  return sigs.slice(0, 25);
+  return capWithNotice(sigs, PER_FILE_LIMIT, 'signatures');
 }
 
 module.exports = { extract };

package/src/extractors/kotlin.js

@@ -1,6 +1,13 @@
 'use strict';
 
 const { lineAt, withAnchor } = require('./line-anchor');
+const { capWithNotice, capMembersWithNotice } = require('../util/truncate');
+
+// Ceilings sit above the default `maxSigsPerFile` so the configured budget
+// governs output rather than a literal buried here, and omissions are disclosed
+// — an undisclosed cap looks like a class that simply has eight methods (#576).
+const MEMBER_LIMIT = 8;
+const PER_FILE_LIMIT = 25;
 
 /**
  * Extract signatures from Kotlin source code.
@@ -35,7 +42,8 @@ function extract(src) {
     const block = extractBlock(stripped, bodyStart);
     sigs.push(withAnchor(`${m[1]} ${m[2]}`, lineAt(stripped, m.index), lineAt(stripped, bodyStart + block.length)));
     for (const meth of extractMembers(block)) {
-      sigs.push(withAnchor(`  ${meth.text}`, lineAt(stripped, bodyStart + meth.declIdx), lineAt(stripped, bodyStart + meth.endIdx)));
+      // The disclosure marker carries no offsets; anchor it at the class body.
+      sigs.push(withAnchor(`  ${meth.text}`, lineAt(stripped, bodyStart + (meth.declIdx || 0)), lineAt(stripped, bodyStart + (meth.endIdx || 0))));
     }
   }
 
@@ -48,7 +56,7 @@ function extract(src) {
     sigs.push(withAnchor(`${suspend}fun ${m[1]}(${normalizeParams(m[2])})${retStr}`, s, e));
   }
 
-  return sigs.slice(0, 25);
+  return capWithNotice(sigs, PER_FILE_LIMIT, 'signatures');
 }
 
 function extractBlock(src, startIndex) {
@@ -75,7 +83,7 @@ function extractMembers(block) {
       endIdx: m.index + m[0].length,
     });
   }
-  return members.slice(0, 8);
+  return capMembersWithNotice(members, MEMBER_LIMIT);
 }
 
 function normalizeParams(params) {

package/src/extractors/markdown.js

@@ -1,5 +1,10 @@
 'use strict';
 
+const { capWithNotice } = require('../util/truncate');
+
+// Ceiling discloses what it drops rather than truncating silently (#583).
+const PER_FILE_LIMIT = 40;
+
 /**
  * Lightweight markdown technical indexer.
  * Captures headings and fenced code block language hints only.
@@ -24,7 +29,7 @@ function extract(src) {
     sigs.push(`code-fence ${lang}`);
   }
 
-  return Array.from(new Set(sigs)).slice(0, 40);
+  return capWithNotice(Array.from(new Set(sigs)), PER_FILE_LIMIT, 'headings');
 }
 
 module.exports = { extract };

package/src/extractors/php.js

@@ -1,6 +1,13 @@
 'use strict';
 
 const { lineAt, withAnchor } = require('./line-anchor');
+const { capWithNotice, capMembersWithNotice } = require('../util/truncate');
+
+// Ceilings sit above the default `maxSigsPerFile` so the configured budget
+// governs output rather than a literal buried here, and omissions are disclosed
+// — an undisclosed cap looks like a class that simply has eight methods (#576).
+const MEMBER_LIMIT = 8;
+const PER_FILE_LIMIT = 25;
 
 /**
  * Extract signatures from PHP source code.
@@ -40,7 +47,8 @@ function extract(src) {
     const block = extractBlock(stripped, bodyStart);
     sigs.push(withAnchor(`${kind} ${m[1]}`, lineAt(stripped, m.index), lineAt(stripped, bodyStart + block.length)));
     for (const meth of extractMembers(block)) {
-      sigs.push(withAnchor(`  ${meth.text}`, lineAt(stripped, bodyStart + meth.declIdx), lineAt(stripped, bodyStart + meth.endIdx)));
+      // The disclosure marker carries no offsets; anchor it at the class body.
+      sigs.push(withAnchor(`  ${meth.text}`, lineAt(stripped, bodyStart + (meth.declIdx || 0)), lineAt(stripped, bodyStart + (meth.endIdx || 0))));
     }
   }
 
@@ -52,7 +60,7 @@ function extract(src) {
     sigs.push(withAnchor(`function ${m[1]}(${normalizeParams(m[2])})${retStr}`, s, e));
   }
 
-  return sigs.slice(0, 25);
+  return capWithNotice(sigs, PER_FILE_LIMIT, 'signatures');
 }
 
 function extractBlock(src, startIndex) {
@@ -80,7 +88,7 @@ function extractMembers(block) {
       endIdx: m.index + m[0].length,
     });
   }
-  return members.slice(0, 8);
+  return capMembersWithNotice(members, MEMBER_LIMIT);
 }
 
 function normalizeParams(params) {

package/src/extractors/properties.js

@@ -1,5 +1,10 @@
 'use strict';
 
+const { capWithNotice } = require('../util/truncate');
+
+// Ceiling discloses what it drops rather than truncating silently (#583).
+const PER_FILE_LIMIT = 50;
+
 /**
  * Extract signatures from .properties configuration files.
  * Captures key names, grouped by prefixes where possible.
@@ -31,7 +36,7 @@ function extract(src) {
     sigs.push(`key ${key}`);
   }
 
-  return Array.from(new Set(sigs)).slice(0, 50);
+  return capWithNotice(Array.from(new Set(sigs)), PER_FILE_LIMIT, 'keys');
 }
 
 module.exports = { extract };

package/src/extractors/python.js

@@ -2,6 +2,11 @@
 
 const path = require('path');
 const { lineAt } = require('./line-anchor');
+const { capWithNotice } = require('../util/truncate');
+
+// Ceiling sits above the default `maxSigsPerFile` so the configured budget
+// governs output rather than a literal buried here, and omissions are disclosed (#576).
+const PER_FILE_LIMIT = 30;
 
 /**
  * 1-based line of the last source line belonging to a top-level (indent 0)
@@ -136,7 +141,7 @@ function extract(src, filePath) {
     }
   }
 
-  return sigs.slice(0, 30);
+  return capWithNotice(sigs, PER_FILE_LIMIT, 'signatures');
 }
 
 function extractClassMethods(stripped, startIndex) {

package/src/extractors/r.js

@@ -1,5 +1,11 @@
 'use strict';
 
+const { capWithNotice } = require('../util/truncate');
+
+// Ceiling sits above the default `maxSigsPerFile` so the configured budget
+// governs output rather than a literal buried here, and omissions are disclosed (#576).
+const PER_FILE_LIMIT = 30;
+
 /**
  * Extract signatures from R source code.
  *
@@ -38,7 +44,7 @@ function extract(src) {
   //   ClassName <- R6::R6Class(...)
   const r6Re = /([\w.]+)\s*(?:<<-|<-|=)\s*(?:R6::)?R6Class\s*\(/g;
   let m;
-  while ((m = r6Re.exec(stripped)) !== null && sigs.length < 30) {
+  while ((m = r6Re.exec(stripped)) !== null) {
     const name = m[1];
     if (name.startsWith('.')) continue;
     const openIdx = r6Re.lastIndex - 1;
@@ -49,7 +55,6 @@ function extract(src) {
     sigs.push(`${name} <- R6Class("${classNameLit}")` + applyHint(docHints, name));
     for (const memberSig of extractListMethods(body, 8)) {
       sigs.push('  ' + memberSig);
-      if (sigs.length >= 30) break;
     }
     consumedRanges.push([m.index, closeIdx]);
     r6Re.lastIndex = closeIdx;
@@ -59,7 +64,7 @@ function extract(src) {
   //   ClassName <- new_class("ClassName", properties = list(...))
   const s7Classes = new Set();
   const s7Re = /([\w.]+)\s*(?:<<-|<-|=)\s*(?:S7::)?new_class\s*\(/g;
-  while ((m = s7Re.exec(stripped)) !== null && sigs.length < 30) {
+  while ((m = s7Re.exec(stripped)) !== null) {
     const name = m[1];
     if (name.startsWith('.')) continue;
     const openIdx = s7Re.lastIndex - 1;
@@ -76,7 +81,7 @@ function extract(src) {
 
   // S7 method dispatch: `method(generic, ClassName) <- function(args)`
   const s7MethodRe = /^[ \t]*method\s*\(\s*([\w.]+)\s*,\s*([\w.]+)\s*\)\s*(?:<<-|<-|=)\s*function\s*\(/gm;
-  while ((m = s7MethodRe.exec(stripped)) !== null && sigs.length < 30) {
+  while ((m = s7MethodRe.exec(stripped)) !== null) {
     if (!s7Classes.has(m[2])) continue;
     const argsStart = s7MethodRe.lastIndex - 1;
     const args = readBalancedParens(stripped, argsStart);
@@ -89,7 +94,7 @@ function extract(src) {
   // Skip matches whose position falls inside an R6/S7 class body — those have
   // already been emitted as indented members.
   const funcRe = /^(?:[ \t]*)([\w.]+)\s*(?:<<-|<-|=)\s*function\s*\(/gm;
-  while ((m = funcRe.exec(stripped)) !== null && sigs.length < 30) {
+  while ((m = funcRe.exec(stripped)) !== null) {
     const name = m[1];
     if (name.startsWith('.')) continue;
     if (inAnyRange(m.index, consumedRanges)) continue;
@@ -101,19 +106,16 @@ function extract(src) {
 
   // ── S4 ────────────────────────────────────────────────────────────────────
   for (const sm of stripped.matchAll(/^[ \t]*setGeneric\s*\(\s*["']([\w.]+)["']/gm)) {
-    if (sigs.length >= 30) break;
     sigs.push(`setGeneric("${sm[1]}")`);
   }
   for (const sm of stripped.matchAll(/^[ \t]*setMethod\s*\(\s*["']([\w.]+)["']\s*,\s*["']([\w.]+)["']/gm)) {
-    if (sigs.length >= 30) break;
     sigs.push(`setMethod("${sm[1]}", "${sm[2]}")`);
   }
   for (const sm of stripped.matchAll(/^[ \t]*setClass\s*\(\s*["']([\w.]+)["']/gm)) {
-    if (sigs.length >= 30) break;
     sigs.push(`setClass("${sm[1]}")`);
   }
 
-  return sigs.slice(0, 30);
+  return capWithNotice(sigs, PER_FILE_LIMIT, 'signatures');
 }
 
 /**