@nxuss/lemma 1.21.0 → 1.22.1

package/dist/esm/cli/lemma-proxy.d.ts

@@ -2,6 +2,8 @@
 export declare function startBackgroundClipboardWatcher(cliOpts?: {
     clipboard?: boolean;
 }): void;
+export declare const MAX_WORKSPACE_WATCHERS = 512;
+export declare function isUnsafeWatchRoot(dir: string): boolean;
 export declare function performAutoHeal(apply: boolean): Promise<{
     success: boolean;
     message: string;

package/dist/esm/cli/lemma-proxy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"lemma-proxy.d.ts","sourceRoot":"","sources":["../../../src/cli/lemma-proxy.ts"],"names":[],"mappings":";AA0cA,wBAAgB,+BAA+B,CAAC,OAAO,CAAC,EAAE;IAAE,SAAS,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,CA4DvF;AA4nED,wBAAsB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CA8KhL"}
+{"version":3,"file":"lemma-proxy.d.ts","sourceRoot":"","sources":["../../../src/cli/lemma-proxy.ts"],"names":[],"mappings":";AA0cA,wBAAgB,+BAA+B,CAAC,OAAO,CAAC,EAAE;IAAE,SAAS,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,CA4DvF;AAqfD,eAAO,MAAM,sBAAsB,MAAM,CAAC;AAE1C,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAGtD;AAyqDD,wBAAsB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CA8KhL"}

package/dist/esm/cli/lemma-proxy.js

@@ -953,6 +953,16 @@ class WriteQueue {
     }
 }
 const usageWriteQueue = new WriteQueue();
+// One fs.watch FD is opened per watched directory. Watching $HOME (the launchd
+// daemon's WorkingDirectory) or a filesystem root exhausts FDs (EMFILE), crashes
+// the process, and a KeepAlive supervisor turns that into an infinite
+// crash/relaunch loop — on macOS each relaunch re-triggers the TCC data-access
+// prompt. Refuse those roots outright.
+export const MAX_WORKSPACE_WATCHERS = 512;
+export function isUnsafeWatchRoot(dir) {
+    const resolved = path.resolve(dir);
+    return resolved === path.resolve(os.homedir()) || resolved === path.parse(resolved).root;
+}
 // ── Proxy Server class ─────────────────────────────────────────────────────────
 class LemmaServer {
     constructor(port, projectName, openBrowser = true) {
@@ -1641,12 +1651,28 @@ class LemmaServer {
     }
     startWorkspaceTimeWatcher() {
         const cwd = process.cwd();
+        if (isUnsafeWatchRoot(cwd)) {
+            console.log(`⏭️  [TimeTravel] Skipping workspace watcher: refusing to watch ${cwd} recursively (file-descriptor exhaustion risk). Start the proxy from a project directory instead.`);
+            return;
+        }
         const { watch } = require('fs');
         // Debounced capture function
         let debounceTimer = null;
         const pendingChanges = new Set();
+        // One FD per watched directory: cap it so giant trees degrade to a warning
+        // instead of an EMFILE crash (which a KeepAlive supervisor turns into a
+        // crash/relaunch loop).
+        let watchCount = 0;
+        let limitWarned = false;
         const ignoreDirs = ['node_modules', '.git', 'dist', 'chroma_data', '.lemma', 'dashboard', 'bin', 'sdks'];
         const watchDirRecursive = (dir) => {
+            if (watchCount >= MAX_WORKSPACE_WATCHERS) {
+                if (!limitWarned) {
+                    limitWarned = true;
+                    console.log(`⚠️  [TimeTravel] Watcher limit (${MAX_WORKSPACE_WATCHERS} dirs) reached at ${dir} — deeper directories won't trigger snapshots.`);
+                }
+                return;
+            }
             try {
                 const watcher = watch(dir, (eventType, filename) => {
                     if (!filename)
@@ -1668,6 +1694,19 @@ class LemmaServer {
                 // Prevent watcher from keeping process alive if in background
                 if (watcher.unref)
                     watcher.unref();
+                watchCount++;
+                // An async EMFILE/ENOSPC on a giant tree must never take down the server:
+                // contain it to a single warning and keep serving.
+                watcher.on('error', (err) => {
+                    if (!limitWarned) {
+                        limitWarned = true;
+                        console.log(`⚠️  [TimeTravel] Watcher error (${(err && err.code) || 'unknown'}) — snapshots degraded, server keeps running.`);
+                    }
+                    try {
+                        watcher.close();
+                    }
+                    catch { }
+                });
                 // Recursively watch subfolders
                 const files = fs.readdirSync(dir, { withFileTypes: true });
                 for (const file of files) {